Live

Live phishing findings

New certificates and domain registrations, with every hostname resolved and checked against phishing reports and bad-address lists. The newest findings, updated hourly.

Updated hourly · 2026-11-08 00:47 UTC
Certificate-log entries · 24 h
317.1M
from 84 distinct feeds
Unique certificates · 24 h
30.8M
each reviewed
Names resolved · 24 h
20.2M
15.0M with an address
Findings · 24 h
6,037
217 of 1,061 brands targeted

6,037 hostnames from the last 24 hours.

The findings have updated. The list starts again from the top.

  1. avito1.ru RU · AS197695 · AS-REGRU "Domain names regi…Avito
    Phishing hostRegistrar page · REG.RUAddress hosted confirmed phishing in the last 48 hMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    avito1.ru
    First seen
    2026-11-08 00:46 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 95.163.244.138.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 95.163.244.138
    Certificate
    Issued by YR1
    Valid 2026-11-07 23:42 UTC to 2027-02-05 23:42 UTC
    Logged 2026-11-08 00:41 UTC in Google PlumbersArms2027h1, entry 669,371,692
    SHA-256 00a3cb13a48de6783fdc749b919aabf46bdea880b102e1bee6a520f663d040bd
    Public key SHA-256 228bfc3bcd6c59625fb91015294789ad814f2ebe2f48e96160ef08dad5b2bf1c
    Brand
    Avito
    Addresses
    95.163.244.138 · Russia · AS197695 AS-REGRU "Domain names registrar REG.RU", Ltd · REG.RU (registrar page)
    Registrar page · REG.RU
    REG.RU (95.163.244.138): a registrar’s default page. The registrar shows it for the domains it holds that have no website yet.
    Domain
    avito1.ru
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 00:51 UTC

    Suggest a correction

  2. alpayprime.net TR · AS42868 · NiobeBilisimHizmetleri Niob…
    ListedParking page · hosting.com.tr parkingListed by CERT PolskaMX presentSPF ~allDMARC missingRegistered 7 mo ago
    DetailsHide
    Hostname
    alpayprime.net
    First seen
    2026-11-08 00:46 UTC
    Listing
    CERT Polska listed it 2026-06-23 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 00:29 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-11-07 23:46 UTC to 2027-02-05 23:46 UTC
    Logged 2026-11-08 00:45 UTC in IPng Networks Gouda2027h1, entry 348,651,773
    SHA-256 0a109e3f5a9b950e1088c0a833104813121708c38eb1fc415f1b027232e87957
    Public key SHA-256 6da51d4f340f01fec51d5866e49a38de1e27abf90aaf55e5c780a21a9de70254
    Addresses
    77.245.159.230 · Türkiye · AS42868 NiobeBilisimHizmetleri Niobe Bilisim Ltd. Sti. · hosting.com.tr parking (parking page)
    Parking page · hosting.com.tr parking
    hosting.com.tr parking (77.245.159.230): a parking service. It answers for names that are typically for sale or unused.
    Domain
    alpayprime.net
    Registered
    2026-04-20 · Realtime Register B.V.
    MX
    Receives mail at mail.alpayprime.net
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 00:51 UTC

    Suggest a correction

  3. api.linkvertise.com US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareUnder linkvertise.com, reported by PhishDestroyMX presentSPF -allDMARC rejectRegistered 12 y ago
    DetailsHide
    Hostname
    api.linkvertise.com
    First seen
    2026-11-08 00:46 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-07 23:56 UTC
    Reported
    PhishDestroy, listing linkvertise.com and the names under it
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by Amazon RSA 2048 M04 · precertificate
    Valid 2026-11-08 00:00 UTC to 2027-05-24 23:59 UTC
    Logged 2026-11-08 00:43 UTC in Let's Encrypt Willow2027h1, entry 994,597,274
    SHA-256 80639fe6f71658902d5f3f4e040b457269aef9ce4b52e10104b1e6149fc81808
    Public key SHA-256 4ca3b9bf339dcd9423a6c3bf54d266cef37b8a224fa931311b59fabbf5d0716a
    PhishDestroy
    Addresses
    104.18.0.75 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    104.18.1.75 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.18.0.75, 104.18.1.75): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    linkvertise.com
    Registered
    2015-03-22 · Cronon GmbH
    MX
    Receives mail at aspmx.l.google.com, alt1.aspmx.l.google.com, alt2.aspmx.l.google.com
    SPF
    SPF record with -all: other senders fail
    DMARC
    DMARC policy p=reject
    Checked
    2026-11-07 14:46 UTC

    Suggest a correction

  4. apyxfi.site US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 2 mo ago
    DetailsHide
    Hostname
    apyxfi.site
    First seen
    2026-11-08 00:46 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-07 23:57 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-07 23:45 UTC to 2027-02-05 23:45 UTC
    Logged 2026-11-08 00:43 UTC in DigiCert Wyvern2027h1, entry 447,735,038
    SHA-256 2911a2cb7ad87c0430ff45f8634c00d571a7378ee48041f033640de5452b7410
    Public key SHA-256 fe7e38be1cd8e59136953f738dd935cd78ce35ceac2e0405c0b2cc3a99fd351f
    Addresses
    104.21.77.226 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.212.34 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.77.226, 172.67.212.34): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    apyxfi.site
    Registered
    2026-09-09 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 00:51 UTC

    Suggest a correction

  5. bom-orjinalaktif.com US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 12 mo ago
    DetailsHide
    Hostname
    bom-orjinalaktif.com
    First seen
    2026-11-08 00:46 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-07 23:56 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-07 23:42 UTC to 2027-02-06 00:40 UTC
    Logged 2026-11-08 00:42 UTC in Let's Encrypt Willow2027h1, entry 994,590,012
    SHA-256 2d54ae927ca7dd5154d0e35bddc4406e569dc033c2d4da71eb6aa39c4d2b4034
    Public key SHA-256 1d2c771d15ec51e8f7963de795ea9baf0551325f9bcf3557626ecec52eb7c18c
    PhishDestroy
    Addresses
    104.21.69.48 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.204.89 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.69.48, 172.67.204.89): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    bom-orjinalaktif.com
    Registered
    2025-11-17 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 00:51 UTC

    Suggest a correction

  6. cltext.digital US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 10 mo ago
    DetailsHide
    Hostname
    cltext.digital
    First seen
    2026-11-08 00:46 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-07 23:56 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-07 23:42 UTC to 2027-02-06 00:41 UTC
    Logged 2026-11-08 00:42 UTC in Geomys Tuscolo2027h1, entry 521,319,341
    SHA-256 cd4e007784663380b1f024d5607e759197f6dc7e4c92a956d5cc24c94de9195e
    Public key SHA-256 70d41f8f7f107d37589b331f94d34fa0bddd4352057b335ee51609ebcc46ae18
    PhishDestroy
    Addresses
    104.21.10.212 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.164.135 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.10.212, 172.67.164.135): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    cltext.digital
    Registered
    2026-01-15 · PDR Ltd. d/b/a PublicDomainRegistry.com
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 00:51 UTC

    Suggest a correction

  7. fnloker.com BD · AS153947 · FAST ZONE IT
    ReportedReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    fnloker.com
    First seen
    2026-11-08 00:46 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-07 23:56 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR2 · precertificate
    Valid 2026-11-07 23:45 UTC to 2027-02-05 23:45 UTC
    Logged 2026-11-08 00:43 UTC in IPng Networks Gouda2027h1, entry 348,644,602
    SHA-256 4f071d5a5178aa522e143f7f98ba5b6a367131e040b249ffc90f140e4db0a2e1
    Public key SHA-256 44a21195eeaed8ae097c5ab05d2eea66cf3196c57175b581d8fd14a5ca5e80fd
    PhishDestroy
    Addresses
    193.187.110.18 · Bangladesh · AS153947 FASTZONEIT-AS-AP - FAST ZONE IT
    Domain
    fnloker.com
    Registered
    2026-07-13 · Global Domain Group LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 00:51 UTC

    Suggest a correction

  8. fortmeen.com BD · AS153947 · FAST ZONE IT
    ReportedReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 58 d ago
    DetailsHide
    Hostname
    fortmeen.com
    First seen
    2026-11-08 00:46 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-07 23:56 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR2 · precertificate
    Valid 2026-11-07 23:44 UTC to 2027-02-05 23:44 UTC
    Logged 2026-11-08 00:42 UTC in IPng Networks Gouda2027h1, entry 348,637,685
    SHA-256 98d8ea19b694651c5b9f89858f0625c7bcd1402fc0438819d768f96c0c33a9d6
    Public key SHA-256 4a63c77675715d1adf03a47514c70ecff0baa23c4cad20dafd1101c322ff81b8
    PhishDestroy
    Addresses
    193.187.110.10 · Bangladesh · AS153947 FASTZONEIT-AS-AP - FAST ZONE IT
    Domain
    fortmeen.com
    Registered
    2026-09-11 · Dominet (HK) Limited
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 00:51 UTC

    Suggest a correction

  9. liorfortex-click.pages.dev US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT Polska
    DetailsHide
    Hostname
    liorfortex-click.pages.dev
    First seen
    2026-11-08 00:46 UTC
    Listing
    CERT Polska listed it 2026-09-10 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 00:29 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-07 23:46 UTC to 2027-02-05 23:46 UTC
    Logged 2026-11-08 00:45 UTC in Google PlumbersArms2027h1, entry 669,415,195
    SHA-256 28556dad949674430bf200d5d63bf32776142f58a6d2638c9d860fa6e70d1105
    Public key SHA-256 65220180c6a8dad48a92e44e488161572dc9c02013dd6722be55a616df9f8a24
    Addresses
    172.66.45.42 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.66.46.214 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (172.66.45.42, 172.66.46.214): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.

    Suggest a correction

  10. peluxivplatform.net US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    peluxivplatform.net
    First seen
    2026-11-08 00:46 UTC
    Listing
    CERT Polska listed it 2026-09-07 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 00:29 UTC
    PhishDestroy: first observed in the feed 2026-11-02 · still listed at the last successful feed check 2026-11-07 23:56 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-11-07 23:45 UTC to 2027-02-05 23:45 UTC
    Logged 2026-11-08 00:44 UTC in Google ParcelYard2027h1, entry 669,082,574
    SHA-256 627c50b2ad23818b4f44bd616e3775501b2aa6b8b62df21644266cd67d7d9a7d
    Public key SHA-256 e086c4b404d5489f063106d393ac6d090dcc9ec333e0fede4a020bf13c074da9
    Addresses
    104.21.28.160 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.170.236 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.28.160, 172.67.170.236): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    peluxivplatform.net
    Registered
    2026-05-15 · Dynadot Inc
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 00:51 UTC

    Suggest a correction

  11. publisher.linkvertise.com US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareUnder linkvertise.com, reported by PhishDestroyMX presentSPF -allDMARC rejectRegistered 12 y ago
    DetailsHide
    Hostname
    publisher.linkvertise.com
    First seen
    2026-11-08 00:46 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-07 23:56 UTC
    Reported
    PhishDestroy, listing linkvertise.com and the names under it
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by Amazon RSA 2048 M04 · precertificate
    Valid 2026-11-08 00:00 UTC to 2027-05-24 23:59 UTC
    Logged 2026-11-08 00:43 UTC in Let's Encrypt Willow2027h1, entry 994,597,274
    SHA-256 80639fe6f71658902d5f3f4e040b457269aef9ce4b52e10104b1e6149fc81808
    Public key SHA-256 4ca3b9bf339dcd9423a6c3bf54d266cef37b8a224fa931311b59fabbf5d0716a
    PhishDestroy
    Addresses
    104.18.0.75 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    104.18.1.75 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.18.0.75, 104.18.1.75): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    linkvertise.com
    Registered
    2015-03-22 · Cronon GmbH
    MX
    Receives mail at aspmx.l.google.com, alt1.aspmx.l.google.com, alt2.aspmx.l.google.com
    SPF
    SPF record with -all: other senders fail
    DMARC
    DMARC policy p=reject
    Checked
    2026-11-07 14:46 UTC

    Suggest a correction

  12. sponsorlu-kampanya.online SC · AS403005 · Blatant
    ListedListed by USOMMX absentSPF missingDMARC missingRegistered 2 mo ago
    DetailsHide
    Hostname
    sponsorlu-kampanya.online
    First seen
    2026-11-08 00:46 UTC
    Listing
    USOM listed it 2026-09-09 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-07 23:32 UTC
    Listed
    USOM
    1. Listed by USOM
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-11-07 23:46 UTC to 2027-02-05 23:46 UTC
    Logged 2026-11-08 00:45 UTC in Let's Encrypt Willow2027h1, entry 994,623,184
    SHA-256 022eaac179437710022025bad2a096bdafc4097ed49fa3ace34da72ad47d4e6c
    Public key SHA-256 897385f3eaf472a1871df948d993bb2f511d6cc70b1663084c224872b4c0a8c1
    Addresses
    64.89.160.49 · Seychelles · AS403005 BLATANTHOST - Blatant
    Domain
    sponsorlu-kampanya.online
    Registered
    2026-09-09 · Dynadot Inc
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 00:51 UTC

    Suggest a correction

  13. www.fnloker.com BD · AS153947 · FAST ZONE IT
    ReportedUnder fnloker.com, reported by PhishDestroyMX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    www.fnloker.com
    First seen
    2026-11-08 00:46 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-07 23:56 UTC
    Reported
    PhishDestroy, listing fnloker.com and the names under it
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR2 · precertificate
    Valid 2026-11-07 23:45 UTC to 2027-02-05 23:45 UTC
    Logged 2026-11-08 00:43 UTC in IPng Networks Gouda2027h1, entry 348,644,602
    SHA-256 4f071d5a5178aa522e143f7f98ba5b6a367131e040b249ffc90f140e4db0a2e1
    Public key SHA-256 44a21195eeaed8ae097c5ab05d2eea66cf3196c57175b581d8fd14a5ca5e80fd
    PhishDestroy
    Addresses
    193.187.110.18 · Bangladesh · AS153947 FASTZONEIT-AS-AP - FAST ZONE IT
    Domain
    fnloker.com
    Registered
    2026-07-13 · Global Domain Group LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 00:51 UTC

    Suggest a correction

  14. www.fortmeen.com BD · AS153947 · FAST ZONE IT
    ReportedUnder fortmeen.com, reported by PhishDestroyMX absentSPF missingDMARC missingRegistered 58 d ago
    DetailsHide
    Hostname
    www.fortmeen.com
    First seen
    2026-11-08 00:46 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-07 23:56 UTC
    Reported
    PhishDestroy, listing fortmeen.com and the names under it
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR2 · precertificate
    Valid 2026-11-07 23:44 UTC to 2027-02-05 23:44 UTC
    Logged 2026-11-08 00:42 UTC in IPng Networks Gouda2027h1, entry 348,637,685
    SHA-256 98d8ea19b694651c5b9f89858f0625c7bcd1402fc0438819d768f96c0c33a9d6
    Public key SHA-256 4a63c77675715d1adf03a47514c70ecff0baa23c4cad20dafd1101c322ff81b8
    PhishDestroy
    Addresses
    193.187.110.10 · Bangladesh · AS153947 FASTZONEIT-AS-AP - FAST ZONE IT
    Domain
    fortmeen.com
    Registered
    2026-09-11 · Dominet (HK) Limited
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 00:51 UTC

    Suggest a correction

  15. www.ww25.cloudflear.com RU · AS57724 · DDOS-GUARD DDOS-GUARD LTD
    ListedDDoS-GuardUnder cloudflear.com, listed by MetaMaskMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    www.ww25.cloudflear.com
    First seen
    2026-11-08 00:46 UTC
    Listing
    MetaMask: first observed in the feed 2026-11-01 · still listed at the last successful feed check 2026-11-07 23:57 UTC
    PhishDestroy: first observed in the feed 2026-11-07 · still listed at the last successful feed check 2026-11-07 23:56 UTC
    Listed
    MetaMask, listing cloudflear.com and the names under it
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR1 · precertificate
    Valid 2026-11-07 23:42 UTC to 2027-02-05 23:42 UTC
    Logged 2026-11-08 00:41 UTC in Let's Encrypt Sycamore2027h1, entry 1,031,459,288
    SHA-256 2513f4d16ade9b2ae0bd0404b4d772431e56c042982ca74bb62fcad4525adaf9
    Public key SHA-256 855bca1ccff90449fd5ea1d08af7a283ebc45b0d348d739a1ea628f5f96b03b1
    Addresses
    45.10.243.43 · Russia · AS57724 DDOS-GUARD DDOS-GUARD LTD · DDoS-Guard (cdn)
    DDoS-Guard
    DDoS-Guard (45.10.243.43): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    cloudflear.com
    Registered
    2026-05-24 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-07 18:26 UTC

    Suggest a correction

  16. acceso.eztileandmarble.com DE · AS206834 · TEAMINTERNET-CA-AS Team Int…
    ListedParking page · ParkingCrew (Team Internet)Under eztileandmarble.com, listed by MetaMaskMX absentSPF missingDMARC missingRegistered 5 mo ago
    DetailsHide
    Hostname
    acceso.eztileandmarble.com
    First seen
    2026-11-08 00:41 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-07 23:57 UTC
    Listed
    MetaMask, listing eztileandmarble.com and the names under it
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-07 23:39 UTC to 2027-02-05 23:39 UTC
    Logged 2026-11-08 00:38 UTC in Let's Encrypt Sycamore2027h1, entry 1,031,378,866
    SHA-256 79b7c62aa6321e26e066118717dff23f2427b632c8d04563391c3557e2322924
    Public key SHA-256 df3605d0f3f228d45a89d43fc918448922906b0e1fc25e136c31cf7a013cedd5
    Addresses
    185.53.179.136 · Germany · AS206834 TEAMINTERNET-CA-AS Team Internet AG · ParkingCrew (Team Internet) (parking page)
    Parking page · ParkingCrew (Team Internet)
    ParkingCrew (Team Internet) (185.53.179.136): a parking service. It answers for names that are typically for sale or unused.
    Domain
    eztileandmarble.com
    Registered
    2026-06-14 · Hosting Concepts B.V. d/b/a Registrar.eu
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-07 08:37 UTC

    Suggest a correction

  17. best.egoexplore.ro KZ · AS202958 · Hoster-ALM LLP "Kompaniya H…
    ReportedUnder egoexplore.ro, reported by PhishDestroyMX presentSPF ~allDMARC policy none
    DetailsHide
    Hostname
    best.egoexplore.ro
    First seen
    2026-11-08 00:41 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-07 23:56 UTC
    Reported
    PhishDestroy, listing egoexplore.ro and the names under it
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-07 23:41 UTC to 2027-02-05 23:41 UTC
    Logged 2026-11-08 00:40 UTC in Google ParcelYard2027h1, entry 669,033,997
    SHA-256 2fc2f91c21b696e4e591b1d5215cb8229cbd3768d6f5c24f347da0c8cf3cc9e5
    Public key SHA-256 d79ab01973ce246de3fcba4dd0b5abbd6f98dea8045d190a3b736d4b62d46574
    PhishDestroy
    Addresses
    89.207.251.20 · Kazakhstan · AS202958 Hoster-ALM LLP "Kompaniya Hoster.KZ"
    Domain
    egoexplore.ro
    MX
    Receives mail at mxa.mailgun.org, mxb.mailgun.org
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    DMARC policy p=none: reports only
    Checked
    2026-11-07 15:40 UTC

    Suggest a correction

  18. chainzwebresolver.xyz US · AS16509 · Amazon.com, Inc.2 addresses
    ListedAmazon Web ServicesListed by MetaMaskMX absentSPF missingDMARC missingRegistered 8 mo ago
    DetailsHide
    Hostname
    chainzwebresolver.xyz
    First seen
    2026-11-08 00:41 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-07 23:57 UTC
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-07 23:56 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR2
    Valid 2026-11-07 23:39 UTC to 2027-02-05 23:39 UTC
    Logged 2026-11-08 00:37 UTC in Google ParcelYard2027h1, entry 669,006,195
    SHA-256 3c77ea5674df659b0d88b16a36e020622b72c83cec908b17f33b70bc4a8a4cc0
    Public key SHA-256 65e08abe664b79ced7da6d34ffa2a625f4ec90f30c2bd50ce9e6362d9a3ae075
    Addresses
    64.29.17.1 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
    216.198.79.1 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
    Amazon Web Services
    Amazon Web Services (64.29.17.1, 216.198.79.1): a cloud provider. It rents servers and addresses to its customers.
    Domain
    chainzwebresolver.xyz
    Registered
    2026-03-04 · Name.com, Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 00:51 UTC

    Suggest a correction

  19. cpanel.kennyshairdo.com GB · AS12488 · KRYSTAL Krystal Hosting Ltd
    ListedUnder kennyshairdo.com, listed by CERT PolskaMX presentSPF ~allDMARC policy noneRegistered 7 y ago
    DetailsHide
    Hostname
    cpanel.kennyshairdo.com
    First seen
    2026-11-08 00:41 UTC
    Listing
    CERT Polska listed it 2026-07-25 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 00:29 UTC
    Listed
    CERT Polska, listing kennyshairdo.com and the names under it
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR1 · precertificate
    Valid 2026-11-07 23:39 UTC to 2027-02-05 23:39 UTC
    Logged 2026-11-08 00:37 UTC in IPng Networks Halloumi2027h1, entry 405,360,997
    SHA-256 29a31a5194cb62ebc6e9c404ece927040c68cf4697d3595693a6dd5815db3294
    Public key SHA-256 ac96e0cd12e35b92281fe08cc15f8e1e71aa7528a41574de5ea4458d44be4b9d
    Addresses
    185.199.220.103 · United Kingdom · AS12488 KRYSTAL Krystal Hosting Ltd
    Domain
    kennyshairdo.com
    Registered
    2019-10-16 · eNom, LLC
    MX
    Receives mail at _dc-mx.5c2b0a1791a0.kennyshairdo.com
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    DMARC policy p=none: reports only
    Checked
    2026-11-07 08:12 UTC

    Suggest a correction

  20. fngg.help
    ReportedReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    fngg.help
    First seen
    2026-11-08 00:41 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-07 23:56 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR1 · precertificate
    Valid 2026-11-07 23:40 UTC to 2027-02-05 23:40 UTC
    Logged 2026-11-08 00:39 UTC in DigiCert Wyvern2027h1, entry 447,682,906
    SHA-256 1830cfbac1f0399e6b90493d9155bd8709d23aeb6a6c818ea89b56b4decc1122
    Public key SHA-256 00ab8463f47fd8ead68f606cbc1c5db999fe382c6d269f6dad5e88f3baec4bc1
    PhishDestroy
    Domain
    fngg.help
    Registered
    2026-07-12 · Global Domain Group LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 00:51 UTC

    Suggest a correction

  21. fortnitexspider.com BD · AS153947 · FAST ZONE IT
    ReportedReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 59 d ago
    DetailsHide
    Hostname
    fortnitexspider.com
    First seen
    2026-11-08 00:41 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-07 23:56 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR1 · precertificate
    Valid 2026-11-07 23:40 UTC to 2027-02-05 23:40 UTC
    Logged 2026-11-08 00:38 UTC in IPng Networks Gouda2027h1, entry 348,603,693
    SHA-256 1d47efafbebb0da3430cc510db46fd3ad47b3567dba0930aff34272724800f3b
    Public key SHA-256 40d944a2892d2f80c8be7338cd33bb4558922667812eec5b332d02a37709c9a3
    PhishDestroy
    Addresses
    193.187.110.10 · Bangladesh · AS153947 FASTZONEIT-AS-AP - FAST ZONE IT
    Domain
    fortnitexspider.com
    Registered
    2026-09-10 · Gransy, s.r.o.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 00:51 UTC

    Suggest a correction

  22. leofstbrdaclsyrz.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by USOMMX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    leofstbrdaclsyrz.com
    First seen
    2026-11-08 00:41 UTC
    Listing
    USOM listed it 2026-07-12 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-07 23:32 UTC
    Listed
    USOM
    1. Listed by USOM
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-07 23:36 UTC to 2027-02-06 00:33 UTC
    Logged 2026-11-08 00:36 UTC in Google ParcelYard2027h1, entry 668,992,550
    SHA-256 5c709260a567c0f923884371ffb68e93db71497e697a760038374da619005dd3
    Public key SHA-256 8c07cf378fad9bf70032b0b670e5cc8390bc32e1e8774b4f74912c61a2237d43
    Addresses
    104.21.85.77 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.203.135 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.85.77, 172.67.203.135): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    leofstbrdaclsyrz.com
    Registered
    2026-07-12 · Dynadot Inc
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 00:51 UTC

    Suggest a correction

  23. mail.kennyshairdo.com GB · AS12488 · KRYSTAL Krystal Hosting Ltd
    ListedUnder kennyshairdo.com, listed by CERT PolskaMX presentSPF ~allDMARC policy noneRegistered 7 y ago
    DetailsHide
    Hostname
    mail.kennyshairdo.com
    First seen
    2026-11-08 00:41 UTC
    Listing
    CERT Polska listed it 2026-07-25 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 00:29 UTC
    Listed
    CERT Polska, listing kennyshairdo.com and the names under it
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR1 · precertificate
    Valid 2026-11-07 23:39 UTC to 2027-02-05 23:39 UTC
    Logged 2026-11-08 00:37 UTC in IPng Networks Halloumi2027h1, entry 405,360,997
    SHA-256 29a31a5194cb62ebc6e9c404ece927040c68cf4697d3595693a6dd5815db3294
    Public key SHA-256 ac96e0cd12e35b92281fe08cc15f8e1e71aa7528a41574de5ea4458d44be4b9d
    Addresses
    185.199.220.103 · United Kingdom · AS12488 KRYSTAL Krystal Hosting Ltd
    Domain
    kennyshairdo.com
    Registered
    2019-10-16 · eNom, LLC
    MX
    Receives mail at _dc-mx.5c2b0a1791a0.kennyshairdo.com
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    DMARC policy p=none: reports only
    Checked
    2026-11-07 08:12 UTC

    Suggest a correction

  24. merrimackcu.com AE · AS60117 · HS Host Sailor Ltd
    ReportedReported by PhishDestroyMX presentSPF ~allDMARC missingRegistered 8 mo ago
    DetailsHide
    Hostname
    merrimackcu.com
    First seen
    2026-11-08 00:41 UTC
    Listing
    PhishDestroy: observed back in the feed 2026-10-30 · still listed at the last successful feed check 2026-11-07 23:56 UTC · listed 2 times
    Earlier listing periods: 2026-10-25 to 2026-10-29 (4 days)
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR2
    Valid 2026-11-07 23:38 UTC to 2027-02-05 23:38 UTC
    Logged 2026-11-08 00:37 UTC in Google PlumbersArms2027h1, entry 669,325,902
    SHA-256 034051f302109adce4802b8ff3048888ae3c1b40a315695f8fe4f17257f04290
    Public key SHA-256 ff95333922aa9db46fd4fbf2d1ad8c0b24d160e9f7b625e69691731b35decd3b
    PhishDestroy
    Addresses
    194.36.191.196 · United Arab Emirates · AS60117 HS Host Sailor Ltd
    Domain
    merrimackcu.com
    Registered
    2026-03-07 · NameSilo, LLC
    MX
    Receives mail at merrimackcu.com
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 00:51 UTC

    Suggest a correction

  25. sportpferde-crespo-kast.de US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX presentSPF ~allDMARC quarantine
    DetailsHide
    Hostname
    sportpferde-crespo-kast.de
    First seen
    2026-11-08 00:41 UTC
    Listing
    CERT Polska listed it 2026-05-20 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 00:29 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-07 23:40 UTC to 2027-02-05 23:40 UTC
    Logged 2026-11-08 00:39 UTC in Google PlumbersArms2027h1, entry 669,346,410
    SHA-256 20639943ae74ac5d8701ad7df10202451468bbed4eedc86e776ffe6fe48e7cb2
    Public key SHA-256 269a0df8c6a527fd5141583a66b1157bc09952a619bf3a0c38f08bfc27b3c427
    Addresses
    104.21.36.91 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.191.194 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.36.91, 172.67.191.194): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    sportpferde-crespo-kast.de
    MX
    Receives mail at mail1.sportpferde-crespo-kast.de, mail2.sportpferde-crespo-kast.de
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    DMARC policy p=quarantine
    Checked
    2026-11-08 00:44 UTC

    Suggest a correction

  26. webmail.kennyshairdo.com GB · AS12488 · KRYSTAL Krystal Hosting Ltd
    ListedUnder kennyshairdo.com, listed by CERT PolskaMX presentSPF ~allDMARC policy noneRegistered 7 y ago
    DetailsHide
    Hostname
    webmail.kennyshairdo.com
    First seen
    2026-11-08 00:41 UTC
    Listing
    CERT Polska listed it 2026-07-25 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 00:29 UTC
    Listed
    CERT Polska, listing kennyshairdo.com and the names under it
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR1 · precertificate
    Valid 2026-11-07 23:39 UTC to 2027-02-05 23:39 UTC
    Logged 2026-11-08 00:37 UTC in IPng Networks Halloumi2027h1, entry 405,360,997
    SHA-256 29a31a5194cb62ebc6e9c404ece927040c68cf4697d3595693a6dd5815db3294
    Public key SHA-256 ac96e0cd12e35b92281fe08cc15f8e1e71aa7528a41574de5ea4458d44be4b9d
    Addresses
    185.199.220.103 · United Kingdom · AS12488 KRYSTAL Krystal Hosting Ltd
    Domain
    kennyshairdo.com
    Registered
    2019-10-16 · eNom, LLC
    MX
    Receives mail at _dc-mx.5c2b0a1791a0.kennyshairdo.com
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    DMARC policy p=none: reports only
    Checked
    2026-11-07 08:12 UTC

    Suggest a correction

  27. www.fiasim.ch US · AS54113 · Fastly, Inc.
    ReportedFastlyUnder fiasim.ch, reported by PhishDestroyMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    www.fiasim.ch
    First seen
    2026-11-08 00:41 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-07 23:56 UTC
    Reported
    PhishDestroy, listing fiasim.ch and the names under it
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WR3 · precertificate
    Valid 2026-11-07 23:38 UTC to 2027-02-06 00:35 UTC
    Logged 2026-11-08 00:38 UTC in Geomys Tuscolo2027h1, entry 521,279,857
    SHA-256 5fd9d3ee0a613a208375c884482df4fcb0ed75b3a4d37e5878ddb35422988b60
    Public key SHA-256 6b81681f2127b0585ab88c74c3f801ef2c2c943ead58693cdc9d85e8fbf5a610
    PhishDestroy
    Addresses
    199.36.158.100 · United States · AS54113 FASTLY - Fastly, Inc. · Fastly (cdn)
    Fastly
    Fastly (199.36.158.100): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    fiasim.ch
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-07 04:46 UTC

    Suggest a correction

  28. www.fngg.help
    ReportedUnder fngg.help, reported by PhishDestroyMX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    www.fngg.help
    First seen
    2026-11-08 00:41 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-07 23:56 UTC
    Reported
    PhishDestroy, listing fngg.help and the names under it
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR1 · precertificate
    Valid 2026-11-07 23:40 UTC to 2027-02-05 23:40 UTC
    Logged 2026-11-08 00:39 UTC in DigiCert Wyvern2027h1, entry 447,682,906
    SHA-256 1830cfbac1f0399e6b90493d9155bd8709d23aeb6a6c818ea89b56b4decc1122
    Public key SHA-256 00ab8463f47fd8ead68f606cbc1c5db999fe382c6d269f6dad5e88f3baec4bc1
    PhishDestroy
    Domain
    fngg.help
    Registered
    2026-07-12 · Global Domain Group LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 00:51 UTC

    Suggest a correction

  29. www.fortnitexspider.com BD · AS153947 · FAST ZONE IT
    ReportedUnder fortnitexspider.com, reported by PhishDestroyMX absentSPF missingDMARC missingRegistered 59 d ago
    DetailsHide
    Hostname
    www.fortnitexspider.com
    First seen
    2026-11-08 00:41 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-07 23:56 UTC
    Reported
    PhishDestroy, listing fortnitexspider.com and the names under it
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR1 · precertificate
    Valid 2026-11-07 23:40 UTC to 2027-02-05 23:40 UTC
    Logged 2026-11-08 00:38 UTC in IPng Networks Gouda2027h1, entry 348,603,693
    SHA-256 1d47efafbebb0da3430cc510db46fd3ad47b3567dba0930aff34272724800f3b
    Public key SHA-256 40d944a2892d2f80c8be7338cd33bb4558922667812eec5b332d02a37709c9a3
    PhishDestroy
    Addresses
    193.187.110.10 · Bangladesh · AS153947 FASTZONEIT-AS-AP - FAST ZONE IT
    Domain
    fortnitexspider.com
    Registered
    2026-09-10 · Gransy, s.r.o.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 00:51 UTC

    Suggest a correction

  30. www.scallopdesktop.com US · AS16509 · Amazon.com, Inc.2 addresses
    ListedAmazon Web ServicesUnder scallopdesktop.com, listed by MetaMaskMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    www.scallopdesktop.com
    First seen
    2026-11-08 00:41 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-07 23:57 UTC
    Listed
    MetaMask, listing scallopdesktop.com and the names under it
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR1 · precertificate
    Valid 2026-11-07 23:40 UTC to 2027-02-05 23:40 UTC
    Logged 2026-11-08 00:38 UTC in IPng Networks Gouda2027h1, entry 348,602,014
    SHA-256 4f0a4c13cb9da6912d1f7ab250f6a54c261541c3e7b2a06a3f11725c274ca994
    Public key SHA-256 c91312cd7777181c4a726eb1f3b5cfa8e3f01b307856dc2eb57b93e4b4841089
    Addresses
    64.29.17.65 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
    216.198.79.65 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
    Amazon Web Services
    Amazon Web Services (64.29.17.65, 216.198.79.65): a cloud provider. It rents servers and addresses to its customers.
    Domain
    scallopdesktop.com
    Registered
    2026-05-05 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-07 07:50 UTC

    Suggest a correction

  31. cdn.iphone-news.org GB · AS212238 · CDNEXT Datacamp Limited2 addressesApple
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX presentSPF ~allDMARC missingRegistered 20 y ago
    DetailsHide
    Hostname
    cdn.iphone-news.org
    First seen
    2026-11-08 00:37 UTC
    First published
    2026-10-29 23:44 UTC
    DNS
    Resolves · checked 2026-11-08 00:37 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 185.111.111.157.
    1. Phishing-host list fetched with the address
    2. Resolved to 185.111.111.157
    Brand
    Apple
    Addresses
    185.111.111.157 · United Kingdom · AS212238 CDNEXT Datacamp Limited
    185.111.111.156 · United Kingdom · AS212238 CDNEXT Datacamp Limited
    Domain
    iphone-news.org
    Registered
    2007-01-18 · InterNetX GmbH
    MX
    Receives mail at mx1.agenturserver.de, mx2.agenturserver.de, mx3.agenturserver.de
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 00:44 UTC

    Suggest a correction

  32. aave.com.aave.com.es US · AS13335 · Cloudflare, Inc.4 addressesAave
    ListedCloudflareUnder aave.com.es, listed by MetaMaskMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    aave.com.aave.com.es
    First seen
    2026-11-08 00:36 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-07 23:57 UTC
    Listed
    MetaMask, listing aave.com.es and the names under it
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by Cloudflare TLS Issuing ECC CA 4 · precertificate
    Valid 2026-11-08 00:23 UTC to 2027-02-06 00:30 UTC
    Logged 2026-11-08 00:33 UTC in DigiCert Sphinx2027h1, entry 395,856,247
    SHA-256 4f21b44822769c53d4e86ae8f9fd532b7d83634f504281339396bf004ddf92b3
    Public key SHA-256 4f63bc8b25ad91357c2ac8b8943f6c6dc8d390ffaf28d9790a6bc95506c86453
    Brand
    Aave
    Addresses
    104.21.2.175 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.129.130 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3032::ac43:8182
    2606:4700:3035::6815:2af
    Cloudflare
    Cloudflare (104.21.2.175, 172.67.129.130): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    aave.com.es
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-07 08:12 UTC

    Suggest a correction

  33. attarhouse.cl US · AS16509 · Amazon.com, Inc.2 addresses
    ReportedAmazon Web ServicesReported by PhishDestroyMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    attarhouse.cl
    First seen
    2026-11-08 00:36 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-07 23:56 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-11-07 23:32 UTC to 2027-02-05 23:32 UTC
    Logged 2026-11-08 00:30 UTC in IPng Networks Gouda2027h1, entry 348,549,085
    SHA-256 21cd57ba9e58f35a188d99da0c802a963edec5a53764246d3daed3abfe2a4fe3
    Public key SHA-256 81c0edcedbfafcd7ba580ec0ef65f799cbd00cf7f9f31aab13c203c89cb7a9ba
    PhishDestroy
    Addresses
    64.29.17.65 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
    216.198.79.65 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
    Amazon Web Services
    Amazon Web Services (64.29.17.65, 216.198.79.65): a cloud provider. It rents servers and addresses to its customers.
    Domain
    attarhouse.cl
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 00:39 UTC

    Suggest a correction

  34. fortnem.com BD · AS153947 · FAST ZONE IT
    ReportedReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    fortnem.com
    First seen
    2026-11-08 00:36 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-07 23:56 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR2 · precertificate
    Valid 2026-11-07 23:36 UTC to 2027-02-05 23:36 UTC
    Logged 2026-11-08 00:34 UTC in Let's Encrypt Willow2027h1, entry 994,486,332
    SHA-256 3362ff2820b4934d1d3a537f50155f2d7c1b0f2c8d749bb1bd68534ba3a8d4e8
    Public key SHA-256 78e930f83761c4f3cd590e0f2700cba01a86c59a31690c5266630363855bb151
    PhishDestroy
    Addresses
    193.187.110.18 · Bangladesh · AS153947 FASTZONEIT-AS-AP - FAST ZONE IT
    Domain
    fortnem.com
    Registered
    2026-05-01 · Global Domain Group LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 00:51 UTC

    Suggest a correction

  35. fortskins.bond GB · AS201738 · UFO-TECHNOLOGIES-LIMITED UF…
    ReportedReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 9 mo ago
    DetailsHide
    Hostname
    fortskins.bond
    First seen
    2026-11-08 00:36 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-07 23:56 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR2 · precertificate
    Valid 2026-11-07 23:34 UTC to 2027-02-05 23:34 UTC
    Logged 2026-11-08 00:32 UTC in Let's Encrypt Sycamore2027h1, entry 1,031,253,561
    SHA-256 9e02cb540bf294dfefb7a0347bcfd14a9858e9618e8425ef7b09aac195dd3460
    Public key SHA-256 8fb3ddb9d392fc95783162aab48b720b62d16f473d7f9e96fa8330c14ecec2c2
    PhishDestroy
    Addresses
    109.238.86.76 · United Kingdom · AS201738 UFO-TECHNOLOGIES-LIMITED UFO TECHNOLOGIES LIMITED
    Domain
    fortskins.bond
    Registered
    2026-02-09 · Dynadot Inc
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 00:51 UTC

    Suggest a correction

  36. foundation-umia.finance US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 2 mo ago
    DetailsHide
    Hostname
    foundation-umia.finance
    First seen
    2026-11-08 00:36 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-07 23:57 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-07 23:30 UTC to 2027-02-06 00:29 UTC
    Logged 2026-11-08 00:30 UTC in Geomys Tuscolo2027h1, entry 521,212,338
    SHA-256 20050e419bf50b8ea5e31b72b3c0fa41b2bfc891b8a43b05bd92ceb97abdcae1
    Public key SHA-256 c27459590cf68fcfafdcfaad41f7a9ad6bdbc6dacee092394d233ccd1e2ea5f9
    Addresses
    104.21.96.108 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.177.22 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.96.108, 172.67.177.22): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    foundation-umia.finance
    Registered
    2026-09-09 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 00:51 UTC

    Suggest a correction

  37. fxgz.cc HK · AS152194 · CTG Server Limited
    ListedListed by MetaMaskMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    fxgz.cc
    First seen
    2026-11-08 00:36 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-07 23:57 UTC
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-07 23:56 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-11-07 23:33 UTC to 2027-02-05 23:33 UTC
    Logged 2026-11-08 00:31 UTC in Let's Encrypt Sycamore2027h1, entry 1,031,227,562
    SHA-256 23884ab019a41aacfa9d425abda1832a3dfbb0e91721b20d69a127fc87fd86e1
    Public key SHA-256 5db19ff98e616c4be0162d116e8a424c228309d4daec9f53ecbfb8d9875d9baa
    Addresses
    118.107.59.215 · Hong Kong · AS152194 CTGSERVERLIMITED-AS-AP - CTG Server Limited
    Domain
    fxgz.cc
    Registered
    2026-05-14 · Spaceship, Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 00:39 UTC

    Suggest a correction

  38. ginlover.pt.shorturl.pt PT · AS24768 · ALMOUROLTEC ALMOUROLTEC SER…
    ReportedUnder shorturl.pt, reported by PhishDestroyMX presentSPF ~allDMARC policy none
    DetailsHide
    Hostname
    ginlover.pt.shorturl.pt
    First seen
    2026-11-08 00:36 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-07 23:56 UTC
    Reported
    PhishDestroy, listing shorturl.pt and the names under it
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR2
    Valid 2026-11-07 23:34 UTC to 2027-02-05 23:34 UTC
    Logged 2026-11-08 00:32 UTC in Google PlumbersArms2027h1, entry 669,279,905
    SHA-256 9784fa975f19f4c00ebd0e7d1f5b8eb895747b4a0408accb2c1926b130d05241
    Public key SHA-256 f15c2c814bfd68c71a44a23f5838be2a96fa5d5afefe939772a364f20121b2c3
    PhishDestroy
    Addresses
    94.46.183.47 · Portugal · AS24768 ALMOUROLTEC ALMOUROLTEC SERVICOS DE INFORMATICA E INTERNET LDA
    Domain
    shorturl.pt
    MX
    Receives mail at mail.shorturl.pt
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    DMARC policy p=none: reports only
    Checked
    2026-11-07 03:40 UTC

    Suggest a correction

  39. popeye-slot.com US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 1 d ago
    DetailsHide
    Hostname
    popeye-slot.com
    First seen
    2026-11-08 00:36 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-07 23:56 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-07 23:33 UTC to 2027-02-06 00:31 UTC
    Logged 2026-11-08 00:33 UTC in Geomys Tuscolo2027h1, entry 521,237,540
    SHA-256 62acff952075ef44b56dc7acbc829767a5a5edc218884d936f5428bb804beb92
    Public key SHA-256 dde2c4c80846322168749d951c0affc4bb11dda3d43cd085344f700a8a959128
    PhishDestroy
    Addresses
    104.21.18.65 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.180.182 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.18.65, 172.67.180.182): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    popeye-slot.com
    Registered
    2026-11-07 · Dynadot Inc
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 00:51 UTC

    Suggest a correction

  40. rainbetcasino.eu DE · AS47846 · SEDO-AS SEDO GmbH
    ListedParking page · SedoListed by MetaMaskMX absentSPF -allDMARC missing
    DetailsHide
    Hostname
    rainbetcasino.eu
    First seen
    2026-11-08 00:36 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-07 23:57 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by Encryption Everywhere DV TLS CA - G2 · precertificate
    Valid 2026-11-08 00:00 UTC to 2027-02-05 23:59 UTC
    Logged 2026-11-08 00:31 UTC in Let's Encrypt Willow2027h1, entry 994,448,516
    SHA-256 88f6b581ea9779b952f561263285c154737fa3d03b4c05b399f445602f8a0f0e
    Public key SHA-256 16020c5bbc9567679991afa3e794871023f5ccdbd7dc879b63e01bb846dc3874
    Addresses
    91.195.241.232 · Germany · AS47846 SEDO-AS SEDO GmbH · Sedo (parking page)
    Parking page · Sedo
    The registry delegates rainbetcasino.eu to Sedo’s nameservers, which answer for it. Sedo (91.195.241.232): a parking service. It answers for names that are typically for sale or unused.
    Domain
    rainbetcasino.eu
    MX
    Publishes no mail exchanger
    SPF
    SPF record with -all: other senders fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 00:39 UTC

    Suggest a correction

  41. sjk2oahoo1.com US · AS16509 · Amazon.com, Inc.2 addresses
    ReportedAmazon Web ServicesReported by PhishDestroyMX absentSPF -allDMARC rejectRegistered 4 y ago
    DetailsHide
    Hostname
    sjk2oahoo1.com
    First seen
    2026-11-08 00:36 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-07 23:56 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by Amazon RSA 2048 S23 · precertificate
    Valid 2026-11-07 23:31 UTC to 2027-05-25 00:31 UTC
    Logged 2026-11-08 00:31 UTC in DigiCert Sphinx2027h1, entry 395,850,641
    SHA-256 de63dead93ed94ddc3fc299619d96b95d4bbf794d992cc79bff2431ecbaf44e0
    Public key SHA-256 d4fbde60471125adbe99a7910c3b5cd20ef81708d08d3dc56bbdab17a19c847f
    PhishDestroy
    Addresses
    13.193.18.37 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
    35.76.176.226 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
    Amazon Web Services
    Amazon Web Services (13.193.18.37, 35.76.176.226): a cloud provider. It rents servers and addresses to its customers.
    Domain
    sjk2oahoo1.com
    Registered
    2022-07-31 · Amazon Registrar, Inc.
    MX
    Publishes no mail exchanger
    SPF
    SPF record with -all: other senders fail
    DMARC
    DMARC policy p=reject
    Checked
    2026-11-08 00:51 UTC

    Suggest a correction

  42. updates.angloagency.com US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareUnder angloagency.com, reported by PhishDestroyMX presentSPF ~allDMARC policy noneRegistered 3 mo ago
    DetailsHide
    Hostname
    updates.angloagency.com
    First seen
    2026-11-08 00:36 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-07 23:56 UTC
    Reported
    PhishDestroy, listing angloagency.com and the names under it
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR1 · precertificate
    Valid 2026-11-07 23:32 UTC to 2027-02-05 23:32 UTC
    Logged 2026-11-08 00:30 UTC in Geomys Tuscolo2027h1, entry 521,208,658
    SHA-256 26f299f3e73e24b1a5b3785da317d37ec9d4f11a1821287f43e5d44b48bf297b
    Public key SHA-256 934db6300f3d8cae926400b6c0de9e03aee66de40aa24a8e766ab1db3a5aec36
    PhishDestroy
    Addresses
    104.21.61.77 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.207.98 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.61.77, 172.67.207.98): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    angloagency.com
    Registered
    2026-08-12 · Atak Domain Bilgi Teknolojileri A.S.
    MX
    Receives mail at mx1.krystal.uk, mx2.krystal.uk
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    DMARC policy p=none: reports only
    Checked
    2026-11-07 10:02 UTC

    Suggest a correction

  43. upholcns.pages.dev US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMask
    DetailsHide
    Hostname
    upholcns.pages.dev
    First seen
    2026-11-08 00:36 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-07 23:57 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-07 23:32 UTC to 2027-02-06 00:30 UTC
    Logged 2026-11-08 00:32 UTC in DigiCert Sphinx2027h1, entry 395,854,053
    SHA-256 86bd7abe4978506c818fc1db5bac041fb8ac3429396737833ed216c75669dcff
    Public key SHA-256 7dbdc63f11a99b4e84a0cb603906d6c50b875574614564e41797471db260dff3
    Addresses
    172.66.44.217 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.66.47.39 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (172.66.44.217, 172.66.47.39): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.

    Suggest a correction

  44. votings-flarefoundations.live US · AS13335 · Cloudflare, Inc.4 addressesFlare Network
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    votings-flarefoundations.live
    First seen
    2026-11-08 00:36 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-07 23:57 UTC
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-07 23:56 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-07 23:33 UTC to 2027-02-06 00:32 UTC
    Logged 2026-11-08 00:33 UTC in Google PlumbersArms2027h1, entry 669,289,661
    SHA-256 57fb227443cdee868fd649d7b8bf80c431f7e6b11146296c07d49dd9cb52e8b3
    Public key SHA-256 0f43785a061c62d14e87400f95d19046514298a536d2ddd44010abd6ba72e920
    Brand
    Flare Network
    Addresses
    104.21.38.36 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.218.80 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3034::6815:2624
    2606:4700:3037::ac43:da50
    Cloudflare
    Cloudflare (104.21.38.36, 172.67.218.80): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    votings-flarefoundations.live
    Registered
    2026-07-12 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 00:39 UTC

    Suggest a correction

  45. www.fortnem.com BD · AS153947 · FAST ZONE IT
    ReportedUnder fortnem.com, reported by PhishDestroyMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    www.fortnem.com
    First seen
    2026-11-08 00:36 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-07 23:56 UTC
    Reported
    PhishDestroy, listing fortnem.com and the names under it
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR2 · precertificate
    Valid 2026-11-07 23:36 UTC to 2027-02-05 23:36 UTC
    Logged 2026-11-08 00:34 UTC in Let's Encrypt Willow2027h1, entry 994,486,332
    SHA-256 3362ff2820b4934d1d3a537f50155f2d7c1b0f2c8d749bb1bd68534ba3a8d4e8
    Public key SHA-256 78e930f83761c4f3cd590e0f2700cba01a86c59a31690c5266630363855bb151
    PhishDestroy
    Addresses
    193.187.110.18 · Bangladesh · AS153947 FASTZONEIT-AS-AP - FAST ZONE IT
    Domain
    fortnem.com
    Registered
    2026-05-01 · Global Domain Group LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 00:51 UTC

    Suggest a correction

  46. www.fortskins.bond GB · AS201738 · UFO-TECHNOLOGIES-LIMITED UF…
    ReportedUnder fortskins.bond, reported by PhishDestroyMX absentSPF missingDMARC missingRegistered 9 mo ago
    DetailsHide
    Hostname
    www.fortskins.bond
    First seen
    2026-11-08 00:36 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-07 23:56 UTC
    Reported
    PhishDestroy, listing fortskins.bond and the names under it
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR2 · precertificate
    Valid 2026-11-07 23:34 UTC to 2027-02-05 23:34 UTC
    Logged 2026-11-08 00:32 UTC in Let's Encrypt Sycamore2027h1, entry 1,031,253,561
    SHA-256 9e02cb540bf294dfefb7a0347bcfd14a9858e9618e8425ef7b09aac195dd3460
    Public key SHA-256 8fb3ddb9d392fc95783162aab48b720b62d16f473d7f9e96fa8330c14ecec2c2
    PhishDestroy
    Addresses
    109.238.86.76 · United Kingdom · AS201738 UFO-TECHNOLOGIES-LIMITED UFO TECHNOLOGIES LIMITED
    Domain
    fortskins.bond
    Registered
    2026-02-09 · Dynadot Inc
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 00:51 UTC

    Suggest a correction

  47. www.ginlover.pt.shorturl.pt PT · AS24768 · ALMOUROLTEC ALMOUROLTEC SER…
    ReportedUnder shorturl.pt, reported by PhishDestroyMX presentSPF ~allDMARC policy none
    DetailsHide
    Hostname
    www.ginlover.pt.shorturl.pt
    First seen
    2026-11-08 00:36 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-07 23:56 UTC
    Reported
    PhishDestroy, listing shorturl.pt and the names under it
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR2
    Valid 2026-11-07 23:34 UTC to 2027-02-05 23:34 UTC
    Logged 2026-11-08 00:32 UTC in Google PlumbersArms2027h1, entry 669,279,905
    SHA-256 9784fa975f19f4c00ebd0e7d1f5b8eb895747b4a0408accb2c1926b130d05241
    Public key SHA-256 f15c2c814bfd68c71a44a23f5838be2a96fa5d5afefe939772a364f20121b2c3
    PhishDestroy
    Addresses
    94.46.183.47 · Portugal · AS24768 ALMOUROLTEC ALMOUROLTEC SERVICOS DE INFORMATICA E INTERNET LDA
    Domain
    shorturl.pt
    MX
    Receives mail at mail.shorturl.pt
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    DMARC policy p=none: reports only
    Checked
    2026-11-07 03:40 UTC

    Suggest a correction

  48. www.updates.angloagency.com US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareUnder angloagency.com, reported by PhishDestroyMX presentSPF ~allDMARC policy noneRegistered 3 mo ago
    DetailsHide
    Hostname
    www.updates.angloagency.com
    First seen
    2026-11-08 00:36 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-07 23:56 UTC
    Reported
    PhishDestroy, listing angloagency.com and the names under it
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR1 · precertificate
    Valid 2026-11-07 23:32 UTC to 2027-02-05 23:32 UTC
    Logged 2026-11-08 00:30 UTC in Geomys Tuscolo2027h1, entry 521,208,658
    SHA-256 26f299f3e73e24b1a5b3785da317d37ec9d4f11a1821287f43e5d44b48bf297b
    Public key SHA-256 934db6300f3d8cae926400b6c0de9e03aee66de40aa24a8e766ab1db3a5aec36
    PhishDestroy
    Addresses
    104.21.61.77 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.207.98 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.61.77, 172.67.207.98): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    angloagency.com
    Registered
    2026-08-12 · Atak Domain Bilgi Teknolojileri A.S.
    MX
    Receives mail at mx1.krystal.uk, mx2.krystal.uk
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    DMARC policy p=none: reports only
    Checked
    2026-11-07 10:02 UTC

    Suggest a correction

  49. xenvor-pulse.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 8 mo ago
    DetailsHide
    Hostname
    xenvor-pulse.com
    First seen
    2026-11-08 00:36 UTC
    Listing
    CERT Polska listed it 2026-07-30 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 00:29 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-11-07 23:36 UTC to 2027-02-05 23:36 UTC
    Logged 2026-11-08 00:34 UTC in Google PlumbersArms2027h1, entry 669,302,018
    SHA-256 617a22d883a96a5c9a3c7cc123e64a592e2b8c7e454a927e939bc9939b543246
    Public key SHA-256 8ebbf3c54d915821a9778d90c012d2a130cf178d9347f1d2372dc6838999dffd
    Addresses
    104.21.24.2 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.214.192 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.24.2, 172.67.214.192): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    xenvor-pulse.com
    Registered
    2026-03-16 · NameCheap, Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 00:51 UTC

    Suggest a correction

  50. matsui-a.cfd GB · AS214351 · FEMOIT FEMO IT SOLUTIONS LI…Matsui Securities
    Spamhaus DROPAddress listed by Spamhaus DROPMX absentSPF missingDMARC missingRegistered 3 d ago
    DetailsHide
    Hostname
    matsui-a.cfd
    First seen
    2026-11-08 00:35 UTC
    Spamhaus DROP
    A brand lookalike resolving to an address on the Spamhaus Don’t Route Or Peer list. Address 196.251.107.237.
    1. Certificate logged in CT
    2. Spamhaus DROP list fetched with the address
    3. Resolved to 196.251.107.237
    Certificate
    Issued by Cloudflare TLS Issuing ECC CA 4 · precertificate
    Valid 2026-11-05 00:18 UTC to 2027-02-03 00:27 UTC
    Logged 2026-11-05 00:28 UTC in DigiCert Wyvern2027h1, entry 409,187,260
    SHA-256 d9a1eb873cfcfe24d2482a98e94620bf492cd6c7f7967500ba2448a22a89fa5c
    Public key SHA-256 9bd6c2373dc2c61fb8c109ed92b9a13f488c42c879117a7cbfcc98de247a3881
    Brand
    Matsui Securities
    Addresses
    196.251.107.237 · United Kingdom · AS214351 FEMOIT FEMO IT SOLUTIONS LIMITED
    Domain
    matsui-a.cfd
    Registered
    2026-11-05 · GLOBAL ASSET DOMAINS INC.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 00:39 UTC

    Suggest a correction

  51. matsui-f.cfd GB · AS214351 · FEMOIT FEMO IT SOLUTIONS LI…Matsui Securities
    Spamhaus DROPAddress listed by Spamhaus DROPMX absentSPF missingDMARC missingRegistered 3 d ago
    DetailsHide
    Hostname
    matsui-f.cfd
    First seen
    2026-11-08 00:35 UTC
    Spamhaus DROP
    A brand lookalike resolving to an address on the Spamhaus Don’t Route Or Peer list. Address 196.251.107.237.
    1. Certificate logged in CT
    2. Spamhaus DROP list fetched with the address
    3. Resolved to 196.251.107.237
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-04 23:28 UTC to 2027-02-03 00:27 UTC
    Logged 2026-11-05 00:28 UTC in Google PlumbersArms2027h1, entry 617,528,931
    SHA-256 0497f1311928a081936da6f418e2789292e8a5243092c2afb9791470136b3e7f
    Public key SHA-256 48325301667c6a5bcf7cc85e89425e5a0e64d766a51d87d401daeb1a02ea5972
    Brand
    Matsui Securities
    Addresses
    196.251.107.237 · United Kingdom · AS214351 FEMOIT FEMO IT SOLUTIONS LIMITED
    Domain
    matsui-f.cfd
    Registered
    2026-11-05 · GLOBAL ASSET DOMAINS INC.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 00:39 UTC

    Suggest a correction

  52. matsui-m.cfd GB · AS214351 · FEMOIT FEMO IT SOLUTIONS LI…Matsui Securities
    Spamhaus DROPAddress listed by Spamhaus DROPMX absentSPF missingDMARC missingRegistered 3 d ago
    DetailsHide
    Hostname
    matsui-m.cfd
    First seen
    2026-11-08 00:35 UTC
    Spamhaus DROP
    A brand lookalike resolving to an address on the Spamhaus Don’t Route Or Peer list. Address 196.251.107.237.
    1. Certificate logged in CT
    2. Spamhaus DROP list fetched with the address
    3. Resolved to 196.251.107.237
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-11-04 23:31 UTC to 2027-02-02 23:31 UTC
    Logged 2026-11-05 00:30 UTC in DigiCert Wyvern2027h1, entry 409,197,420
    SHA-256 0c145ce3c4c21be6830601c6ff939a2c89a19a283440346cfa0a3d2d9630cf10
    Public key SHA-256 bf7d2273df04588804cd96e491f97bb228dfa74e86e0f2f16a6d16805b49a5f1
    Brand
    Matsui Securities
    Addresses
    196.251.107.237 · United Kingdom · AS214351 FEMOIT FEMO IT SOLUTIONS LIMITED
    Domain
    matsui-m.cfd
    Registered
    2026-11-05 · GLOBAL ASSET DOMAINS INC.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 00:39 UTC

    Suggest a correction

  53. aave.com.aave-fr.co.com US · AS13335 · Cloudflare, Inc.4 addressesAave
    ListedCloudflareUnder aave-fr.co.com, listed by MetaMask
    DetailsHide
    Hostname
    aave.com.aave-fr.co.com
    First seen
    2026-11-08 00:31 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-07 23:57 UTC
    Listed
    MetaMask, listing aave-fr.co.com and the names under it
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by Cloudflare TLS Issuing RSA CA 4 · precertificate
    Valid 2026-11-08 00:17 UTC to 2027-02-06 00:26 UTC
    Logged 2026-11-08 00:27 UTC in DigiCert Sphinx2027h1, entry 395,824,661
    SHA-256 3b8de3a2c153bbea2177686e41b691e5f8350d0a93b826bb01e8e1b906a63cc3
    Public key SHA-256 72c6d5f523e3a2f3383a55e9e582a48d20e0cb5d4f49165cf04d78ad78d4919a
    Brand
    Aave
    Addresses
    104.21.2.175 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.129.130 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3032::ac43:8182
    2606:4700:3035::6815:2af
    Cloudflare
    Cloudflare (104.21.2.175, 172.67.129.130): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.

    Suggest a correction

  54. alebilet.pl-jrhsichrishcur718.shop DE · AS206834 · TEAMINTERNET-CA-AS Team Int…AleBilet
    ListedParking page · ParkingCrew (Team Internet)Listed by CERT PolskaMX absentSPF missingDMARC missingRegistered 7 d ago
    DetailsHide
    Hostname
    alebilet.pl-jrhsichrishcur718.shop
    First seen
    2026-11-08 00:31 UTC
    Listing
    CERT Polska listed it 2026-11-01 · still listed at the last successful feed check 2026-11-08 00:29 UTC
    CERT Polska listed it 2026-11-01 · still listed at the last successful feed check 2026-11-08 00:29 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-11-07 23:31 UTC to 2027-02-05 23:31 UTC
    Logged 2026-11-08 00:29 UTC in Google PlumbersArms2027h1, entry 669,247,096
    SHA-256 8a16e9d817f458bc381938cdbd78e37545d9ba82c81f1f58ec92da0be068329c
    Public key SHA-256 aad58c55f707ba646147f3221a13c80274dc77b84fa875b4f4fbb85d4734c7e2
    Brand
    AleBilet
    Addresses
    185.53.179.136 · Germany · AS206834 TEAMINTERNET-CA-AS Team Internet AG · ParkingCrew (Team Internet) (parking page)
    Parking page · ParkingCrew (Team Internet)
    ParkingCrew (Team Internet) (185.53.179.136): a parking service. It answers for names that are typically for sale or unused.
    Domain
    pl-jrhsichrishcur718.shop
    Registered
    2026-11-01 · Registrar.eu
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-07 08:26 UTC

    Suggest a correction

  55. devqbatch.space
    ListedListed by MetaMaskMX presentSPF ~allDMARC policy noneRegistered 6 mo ago
    DetailsHide
    Hostname
    devqbatch.space
    First seen
    2026-11-08 00:31 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-07 23:57 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-11-07 23:30 UTC to 2027-02-05 23:30 UTC
    Logged 2026-11-08 00:29 UTC in Let's Encrypt Willow2027h1, entry 994,426,427
    SHA-256 9d8a4b89c2d59570fdc4a5b88136bd66c9f2ad4a69ebf4bf442be597c778e688
    Public key SHA-256 16a72d32cb649da236145789e997c5500a5b029ef911d759605e2f1c6245191d
    Domain
    devqbatch.space
    Registered
    2026-05-14 · GoDaddy.com, LLC
    MX
    Receives mail at route1.mx.cloudflare.net, route3.mx.cloudflare.net, route2.mx.cloudflare.net
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    DMARC policy p=none: reports only
    Checked
    2026-11-08 00:51 UTC

    Suggest a correction

  56. fntk.help GB · AS201738 · UFO-TECHNOLOGIES-LIMITED UF…
    ReportedReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    fntk.help
    First seen
    2026-11-08 00:31 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-07 23:56 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR1 · precertificate
    Valid 2026-11-07 23:28 UTC to 2027-02-05 23:28 UTC
    Logged 2026-11-08 00:26 UTC in DigiCert Wyvern2027h1, entry 447,592,199
    SHA-256 7143309d96d2bb52d08b05dcb70d837fb8fc873723e070b3886e158f041f699a
    Public key SHA-256 5ce50a60bcdcd84b26aa4c418d1cddfa826b7833bfcb3f51200d39be53d59468
    PhishDestroy
    Addresses
    109.238.86.76 · United Kingdom · AS201738 UFO-TECHNOLOGIES-LIMITED UFO TECHNOLOGIES LIMITED
    Domain
    fntk.help
    Registered
    2026-07-11 · Global Domain Group LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 00:51 UTC

    Suggest a correction

  57. istanbullcokoolay.xyz US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by USOMMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    istanbullcokoolay.xyz
    First seen
    2026-11-08 00:31 UTC
    Listing
    USOM listed it 2026-05-14 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-07 23:32 UTC
    Listed
    USOM
    1. Listed by USOM
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-11-07 23:30 UTC to 2027-02-05 23:30 UTC
    Logged 2026-11-08 00:29 UTC in Let's Encrypt Sycamore2027h1, entry 1,031,173,394
    SHA-256 2d57996fee32f0eccd9bdf46e71e09fd5e0a078f7f43aeaa1535eac7366eb3cb
    Public key SHA-256 cd497f69310e142342a8f67a09f9d002fa85aa3493803ec8f21877d14061b63f
    Addresses
    104.21.26.160 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.137.46 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.26.160, 172.67.137.46): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    istanbullcokoolay.xyz
    Registered
    2026-05-14 · Dynadot Inc
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 00:51 UTC

    Suggest a correction

  58. millennium-bcp.ghe.com US · AS8075 · Microsoft CorporationMillennium bcp
    ReportedMicrosoft AzureReported by PhishTankMX presentSPF -allDMARC rejectRegistered 31 y ago
    DetailsHide
    Hostname
    millennium-bcp.ghe.com
    First seen
    2026-11-08 00:31 UTC
    Listing
    PhishTank: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-07 23:35 UTC
    Reported
    PhishTank
    1. Observed in the PhishTank feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR2 · precertificate
    Valid 2026-11-07 23:29 UTC to 2027-02-05 23:29 UTC
    Logged 2026-11-08 00:27 UTC in Geomys Tuscolo2027h1, entry 521,185,404
    SHA-256 008c1c5bdea55dea8e3e1f5939badd8a9403d54ad2503bfc9fc39a233f098fae
    Public key SHA-256 d09bb653efe3e0b6382aec28d5d2eab24c999ad66f0b19d0390795485ba3dc61
    PhishTank
    PhishTank report #9314078
    Brand
    Millennium bcp
    Addresses
    20.240.194.241 · United States · AS8075 MICROSOFT-CORP-MSN-AS-BLOCK - Microsoft Corporation · Microsoft Azure (cloud provider)
    Microsoft Azure
    Microsoft Azure (20.240.194.241): a cloud provider. It rents servers and addresses to its customers.
    Domain
    ghe.com
    Registered
    1996-03-19 · MarkMonitor Inc.
    MX
    Receives mail at in-ghae-a.smtp.github.com, in-ghae-b.smtp.github.com
    SPF
    SPF record with -all: other senders fail
    DMARC
    DMARC policy p=reject
    Checked
    2026-11-07 03:06 UTC

    Suggest a correction

  59. recoverex.gmlsoftlabs.com US · AS31898 · Oracle Corporation
    ReportedOracle CloudUnder gmlsoftlabs.com, reported by PhishDestroyMX presentSPF ~allDMARC policy noneRegistered 8 y ago
    DetailsHide
    Hostname
    recoverex.gmlsoftlabs.com
    First seen
    2026-11-08 00:31 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-07 23:56 UTC
    Reported
    PhishDestroy, listing gmlsoftlabs.com and the names under it
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR2
    Valid 2026-11-07 23:27 UTC to 2027-02-05 23:27 UTC
    Logged 2026-11-08 00:26 UTC in Google PlumbersArms2027h1, entry 669,205,980
    SHA-256 7249180514a90bd1780cd73a54aee9d490c6e05fd45469c4e6253006f860ac30
    Public key SHA-256 719cf244c8dc70ae45d530f1b9222d1068d554e25513c62a011d6ba627d80a8d
    PhishDestroy
    Addresses
    162.214.80.88 · United States · AS31898 ORACLE-BMC-31898 - Oracle Corporation · Oracle Cloud (cloud provider)
    Oracle Cloud
    Oracle Cloud (162.214.80.88): a cloud provider. It rents servers and addresses to its customers.
    Domain
    gmlsoftlabs.com
    Registered
    2018-11-23 · GoDaddy.com, LLC
    MX
    Receives mail at mail.gmlsoftlabs.com
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    DMARC policy p=none: reports only
    Checked
    2026-11-07 07:32 UTC

    Suggest a correction

  60. vinted.pl-jrhsichrishcur718.shop DE · AS206834 · TEAMINTERNET-CA-AS Team Int…
    ListedParking page · ParkingCrew (Team Internet)Listed by CERT PolskaMX absentSPF missingDMARC missingRegistered 7 d ago
    DetailsHide
    Hostname
    vinted.pl-jrhsichrishcur718.shop
    First seen
    2026-11-08 00:31 UTC
    Listing
    CERT Polska listed it 2026-11-01 · still listed at the last successful feed check 2026-11-08 00:29 UTC
    CERT Polska listed it 2026-11-01 · still listed at the last successful feed check 2026-11-08 00:29 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-11-07 23:31 UTC to 2027-02-05 23:31 UTC
    Logged 2026-11-08 00:30 UTC in Let's Encrypt Sycamore2027h1, entry 1,031,200,764
    SHA-256 5decd6f473560ff450e340e6e300eb54e8506ab1a782e715cc2d1512a450a64a
    Public key SHA-256 aad58c55f707ba646147f3221a13c80274dc77b84fa875b4f4fbb85d4734c7e2
    Addresses
    185.53.179.136 · Germany · AS206834 TEAMINTERNET-CA-AS Team Internet AG · ParkingCrew (Team Internet) (parking page)
    Parking page · ParkingCrew (Team Internet)
    ParkingCrew (Team Internet) (185.53.179.136): a parking service. It answers for names that are typically for sale or unused.
    Domain
    pl-jrhsichrishcur718.shop
    Registered
    2026-11-01 · Registrar.eu
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-07 08:26 UTC

    Suggest a correction

  61. www.fntk.help GB · AS201738 · UFO-TECHNOLOGIES-LIMITED UF…
    ReportedUnder fntk.help, reported by PhishDestroyMX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    www.fntk.help
    First seen
    2026-11-08 00:31 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-07 23:56 UTC
    Reported
    PhishDestroy, listing fntk.help and the names under it
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR1 · precertificate
    Valid 2026-11-07 23:28 UTC to 2027-02-05 23:28 UTC
    Logged 2026-11-08 00:26 UTC in DigiCert Wyvern2027h1, entry 447,592,199
    SHA-256 7143309d96d2bb52d08b05dcb70d837fb8fc873723e070b3886e158f041f699a
    Public key SHA-256 5ce50a60bcdcd84b26aa4c418d1cddfa826b7833bfcb3f51200d39be53d59468
    PhishDestroy
    Addresses
    109.238.86.76 · United Kingdom · AS201738 UFO-TECHNOLOGIES-LIMITED UFO TECHNOLOGIES LIMITED
    Domain
    fntk.help
    Registered
    2026-07-11 · Global Domain Group LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 00:51 UTC

    Suggest a correction

  62. www.recoverex.gmlsoftlabs.com US · AS31898 · Oracle Corporation
    ReportedOracle CloudUnder gmlsoftlabs.com, reported by PhishDestroyMX presentSPF ~allDMARC policy noneRegistered 8 y ago
    DetailsHide
    Hostname
    www.recoverex.gmlsoftlabs.com
    First seen
    2026-11-08 00:31 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-07 23:56 UTC
    Reported
    PhishDestroy, listing gmlsoftlabs.com and the names under it
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR2
    Valid 2026-11-07 23:27 UTC to 2027-02-05 23:27 UTC
    Logged 2026-11-08 00:26 UTC in Google PlumbersArms2027h1, entry 669,205,980
    SHA-256 7249180514a90bd1780cd73a54aee9d490c6e05fd45469c4e6253006f860ac30
    Public key SHA-256 719cf244c8dc70ae45d530f1b9222d1068d554e25513c62a011d6ba627d80a8d
    PhishDestroy
    Addresses
    162.214.80.88 · United States · AS31898 ORACLE-BMC-31898 - Oracle Corporation · Oracle Cloud (cloud provider)
    Oracle Cloud
    Oracle Cloud (162.214.80.88): a cloud provider. It rents servers and addresses to its customers.
    Domain
    gmlsoftlabs.com
    Registered
    2018-11-23 · GoDaddy.com, LLC
    MX
    Receives mail at mail.gmlsoftlabs.com
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    DMARC policy p=none: reports only
    Checked
    2026-11-07 07:32 UTC

    Suggest a correction

  63. abbonebefr.store US · AS13335 · Cloudflare, Inc.4 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 1 d ago
    DetailsHide
    Hostname
    abbonebefr.store
    First seen
    2026-11-08 00:30 UTC
    Listing
    CERT Polska listed it 2026-11-07 · first observed in the feed 2026-11-08 · still listed at the last successful feed check 2026-11-08 00:29 UTC
    Listed
    CERT Polska
    1. Certificate logged in CT
    2. Listed by CERT Polska
    3. We matched the new listing
    4. Latest DNS check
    Certificate
    Issued by Cloudflare TLS Issuing ECC CA 4 · precertificate
    Valid 2026-11-07 06:39 UTC to 2027-02-05 06:47 UTC
    Logged 2026-11-07 06:49 UTC in DigiCert Wyvern2027h1, entry 438,339,338
    SHA-256 5b4497a38ffa7668482706d3a3204006282d3855a8a27657a2277e30d2751583
    Public key SHA-256 93c3898a003840a353d67ac34d439588c15fb7727d59da6c6c291187d30328f6
    Addresses
    104.21.21.123 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.198.156 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3031::ac43:c69c
    2606:4700:3033::6815:157b
    Cloudflare
    Cloudflare (104.21.21.123, 172.67.198.156): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    abbonebefr.store
    Registered
    2026-11-07 · NameCheap, Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 00:51 UTC

    Suggest a correction

  64. ayesgondo.store US · AS13335 · Cloudflare, Inc.4 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 1 d ago
    DetailsHide
    Hostname
    ayesgondo.store
    First seen
    2026-11-08 00:30 UTC
    Listing
    CERT Polska listed it 2026-11-07 · first observed in the feed 2026-11-08 · still listed at the last successful feed check 2026-11-08 00:29 UTC
    Listed
    CERT Polska
    1. Certificate logged in CT
    2. Listed by CERT Polska
    3. We matched the new listing
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-11-07 05:51 UTC to 2027-02-05 05:51 UTC
    Logged 2026-11-07 06:49 UTC in DigiCert Wyvern2027h1, entry 438,338,407
    SHA-256 3001e0bffe506209b2e35b0bad18759e8b87595ca7d096424f87c56caa462277
    Public key SHA-256 9bfa76820bf2f6424472deb0faea2ea46c83e73d3e4c4ca2490369496021e879
    Addresses
    104.21.69.62 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.205.207 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3033::6815:453e
    2606:4700:3037::ac43:cdcf
    Cloudflare
    Cloudflare (104.21.69.62, 172.67.205.207): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    ayesgondo.store
    Registered
    2026-11-07 · NameCheap, Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 00:51 UTC

    Suggest a correction

  65. involbader.store US · AS13335 · Cloudflare, Inc.4 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 1 d ago
    DetailsHide
    Hostname
    involbader.store
    First seen
    2026-11-08 00:30 UTC
    Listing
    CERT Polska listed it 2026-11-08 · still listed at the last successful feed check 2026-11-08 00:29 UTC
    Listed
    CERT Polska
    1. Certificate logged in CT
    2. Listed by CERT Polska
    3. We matched the new listing
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-11-07 05:50 UTC to 2027-02-05 05:50 UTC
    Logged 2026-11-07 06:49 UTC in Geomys Tuscolo2027h1, entry 511,108,072
    SHA-256 041e79889015038720d961534bdb12304485940baff5cbf36cd5a78ff4a927d2
    Public key SHA-256 fe7a09a777cc987c15e32cf00ed4a60cbacaecefe8f8bace21f9afbd8243a622
    Addresses
    104.21.77.109 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.207.47 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3033::ac43:cf2f
    2606:4700:3037::6815:4d6d
    Cloudflare
    Cloudflare (104.21.77.109, 172.67.207.47): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    involbader.store
    Registered
    2026-11-07 · NameCheap, Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 00:51 UTC

    Suggest a correction

  66. lurcavio-demurex.net US · AS13335 · Cloudflare, Inc.4 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 2 d ago
    DetailsHide
    Hostname
    lurcavio-demurex.net
    First seen
    2026-11-08 00:30 UTC
    Listing
    CERT Polska listed it 2026-11-08 · still listed at the last successful feed check 2026-11-08 00:29 UTC
    Listed
    CERT Polska
    1. Certificate logged in CT
    2. Listed by CERT Polska
    3. We matched the new listing
    4. Latest DNS check
    Certificate
    Issued by Cloudflare TLS Issuing ECC CA 4 · precertificate
    Valid 2026-11-06 00:34 UTC to 2027-02-04 00:42 UTC
    Logged 2026-11-06 00:44 UTC in DigiCert Wyvern2027h1, entry 422,777,982
    SHA-256 3fd326bf1141da650be2ab5699632d0224bbbd0a05f848d9d64d4dc9a522687e
    Public key SHA-256 5119e2d348aee7a908a857b7147a6cc6696183ef6f79963037a4624177ef155c
    Addresses
    104.21.49.12 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.188.196 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3032::6815:310c
    2606:4700:3033::ac43:bcc4
    Cloudflare
    Cloudflare (104.21.49.12, 172.67.188.196): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    lurcavio-demurex.net
    Registered
    2026-11-06 · Dynadot Inc
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 00:51 UTC

    Suggest a correction

  67. pi-oferta88421.lat fd10:aec2:5dae::
    ListedListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 1 d ago
    DetailsHide
    Hostname
    pi-oferta88421.lat
    First seen
    2026-11-08 00:30 UTC
    Listing
    CERT Polska listed it 2026-11-07 · first observed in the feed 2026-11-08 · still listed at the last successful feed check 2026-11-08 00:29 UTC
    Listed
    CERT Polska
    1. Certificate logged in CT
    2. Listed by CERT Polska
    3. We matched the new listing
    4. Latest DNS check
    Certificate
    Issued by Cloudflare TLS Issuing ECC CA 4 · precertificate
    Valid 2026-11-07 20:38 UTC to 2027-02-05 20:46 UTC
    Logged 2026-11-07 20:48 UTC in DigiCert Wyvern2027h1, entry 445,641,342
    SHA-256 398195862931925b7a1b0e3e8436369ba883b2400b403a6ca8b7671a16e8fa0d
    Public key SHA-256 1038c3d8799edd29e865f3518e93116ba089cf185474052c8133783964e90a28
    Addresses
    fd10:aec2:5dae::
    Domain
    pi-oferta88421.lat
    Registered
    2026-11-07 · Spaceship, Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 00:51 UTC

    Suggest a correction

  68. pl-9062630.cfd US · AS13335 · Cloudflare, Inc.4 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 1 d ago
    DetailsHide
    Hostname
    pl-9062630.cfd
    First seen
    2026-11-08 00:30 UTC
    Listing
    CERT Polska listed it 2026-11-08 · still listed at the last successful feed check 2026-11-08 00:29 UTC
    Listed
    CERT Polska
    1. Certificate logged in CT
    2. Listed by CERT Polska
    3. We matched the new listing
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-11-07 20:34 UTC to 2027-02-05 20:34 UTC
    Logged 2026-11-07 21:32 UTC in DigiCert Sphinx2027h1, entry 394,395,940
    SHA-256 1af1bd15542e132473c7d15f3c7466656efacc15fe3a4ebfab591981f6eea5ed
    Public key SHA-256 bbfe46c0e371a88787fceec7c188ac9d7a87759b3e31176b70839527517485a2
    Addresses
    104.21.7.98 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.130.24 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3033::ac43:8218
    2606:4700:3036::6815:762
    Cloudflare
    Cloudflare (104.21.7.98, 172.67.130.24): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    pl-9062630.cfd
    Registered
    2026-11-07 · Hosting Concepts B.V. d/b/a Registrar.eu
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 00:51 UTC

    Suggest a correction

  69. pl-zakupy23875.sbs US · AS13335 · Cloudflare, Inc.4 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 1 d ago
    DetailsHide
    Hostname
    pl-zakupy23875.sbs
    First seen
    2026-11-08 00:30 UTC
    Listing
    CERT Polska listed it 2026-11-07 · first observed in the feed 2026-11-08 · still listed at the last successful feed check 2026-11-08 00:29 UTC
    Listed
    CERT Polska
    1. Certificate logged in CT
    2. Listed by CERT Polska
    3. We matched the new listing
    4. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-11-07 20:29 UTC to 2027-02-05 20:29 UTC
    Logged 2026-11-07 21:27 UTC in Let's Encrypt Sycamore2027h1, entry 1,026,757,681
    SHA-256 05c642d2b19f57f51bb4e6084518798f7eccc92ac312a4876cacf4d1fadb0147
    Public key SHA-256 a66ac8a20d33e27944fd1222d4808ac437540550977c64df0dd17445b83dac60
    Addresses
    104.21.96.81 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.175.84 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3031::6815:6051
    2606:4700:3033::ac43:af54
    Cloudflare
    Cloudflare (104.21.96.81, 172.67.175.84): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    pl-zakupy23875.sbs
    Registered
    2026-11-07 · Hosting Concepts B.V. d/b/a Registrar.eu
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 00:51 UTC

    Suggest a correction

  70. prearrivalstayguest-confirmstaydata.com US · AS13335 · Cloudflare, Inc.4 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 1 d ago
    DetailsHide
    Hostname
    prearrivalstayguest-confirmstaydata.com
    First seen
    2026-11-08 00:30 UTC
    Listing
    CERT Polska listed it 2026-11-07 · first observed in the feed 2026-11-08 · still listed at the last successful feed check 2026-11-08 00:29 UTC
    Listed
    CERT Polska
    1. Certificate logged in CT
    2. Listed by CERT Polska
    3. We matched the new listing
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-07 10:33 UTC to 2027-02-05 10:33 UTC
    Logged 2026-11-07 11:32 UTC in Google PlumbersArms2027h1, entry 659,716,398
    SHA-256 25e6e20f0ea0d8648c98564096bca05f65fcfd3e6b8f1b07f9c139acbf6b521c
    Public key SHA-256 6ce2f40bcefa6c967e481a035ef3c7c83a431a73ec0f348f5324ce61e2fdad17
    Addresses
    104.21.59.113 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.175.159 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3034::ac43:af9f
    2606:4700:3036::6815:3b71
    Cloudflare
    Cloudflare (104.21.59.113, 172.67.175.159): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    prearrivalstayguest-confirmstaydata.com
    Registered
    2026-11-07 · OwnRegistrar, Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 00:51 UTC

    Suggest a correction

  71. snalincre.store US · AS13335 · Cloudflare, Inc.4 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 1 d ago
    DetailsHide
    Hostname
    snalincre.store
    First seen
    2026-11-08 00:30 UTC
    Listing
    CERT Polska listed it 2026-11-07 · first observed in the feed 2026-11-08 · still listed at the last successful feed check 2026-11-08 00:29 UTC
    Listed
    CERT Polska
    1. Certificate logged in CT
    2. Listed by CERT Polska
    3. We matched the new listing
    4. Latest DNS check
    Certificate
    Issued by Cloudflare TLS Issuing ECC CA 4 · precertificate
    Valid 2026-11-07 06:39 UTC to 2027-02-05 06:46 UTC
    Logged 2026-11-07 06:49 UTC in Let's Encrypt Sycamore2027h1, entry 1,006,326,573
    SHA-256 24cb77c040655721ee54b3cd7999a988bc07b44addd917016507b1ca158c84be
    Public key SHA-256 eaf9d937482a8131c3605fed1876b9706e7055232a933bc20767881b1e73ac7e
    Addresses
    104.21.63.24 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.169.62 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3032::ac43:a93e
    2606:4700:3035::6815:3f18
    Cloudflare
    Cloudflare (104.21.63.24, 172.67.169.62): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    snalincre.store
    Registered
    2026-11-07 · NameCheap, Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 00:51 UTC

    Suggest a correction

  72. truly2-autem87.cfd
    ListedListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 1 d ago
    DetailsHide
    Hostname
    truly2-autem87.cfd
    First seen
    2026-11-08 00:30 UTC
    Listing
    CERT Polska listed it 2026-11-07 · first observed in the feed 2026-11-08 · still listed at the last successful feed check 2026-11-08 00:29 UTC
    Listed
    CERT Polska
    1. Certificate logged in CT
    2. Listed by CERT Polska
    3. We matched the new listing
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-07 18:05 UTC to 2027-02-05 19:03 UTC
    Logged 2026-11-07 19:05 UTC in DigiCert Wyvern2027h1, entry 444,809,691
    SHA-256 8fd33e54574fbda861a9040fffb919ae714da8e1deaf022361eee34a25b8dfd8
    Public key SHA-256 6e8af99af21e8fc171b14210963a5d8bb8ec4082076c7141f2d968becb359858
    Domain
    truly2-autem87.cfd
    Registered
    2026-11-07 · Dynadot Inc
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 00:51 UTC

    Suggest a correction

  73. truly5-illum63.cfd
    ListedListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 1 d ago
    DetailsHide
    Hostname
    truly5-illum63.cfd
    First seen
    2026-11-08 00:30 UTC
    Listing
    CERT Polska listed it 2026-11-08 · still listed at the last successful feed check 2026-11-08 00:29 UTC
    Listed
    CERT Polska
    1. Certificate logged in CT
    2. Listed by CERT Polska
    3. We matched the new listing
    4. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-11-07 17:08 UTC to 2027-02-05 17:08 UTC
    Logged 2026-11-07 18:06 UTC in DigiCert Wyvern2027h1, entry 444,291,183
    SHA-256 3a5913610c8877cdcb4c3fd972e695bda0b4c339a65ad35ef7fee06490ecb01d
    Public key SHA-256 9b727df958daf27ff9328c534b60bf7175b234a2b53be1fe74d8612861985b62
    Domain
    truly5-illum63.cfd
    Registered
    2026-11-07 · Dynadot Inc
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 00:51 UTC

    Suggest a correction

  74. truly7-amet36.cfd
    ListedListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 1 d ago
    DetailsHide
    Hostname
    truly7-amet36.cfd
    First seen
    2026-11-08 00:30 UTC
    Listing
    CERT Polska listed it 2026-11-07 · first observed in the feed 2026-11-08 · still listed at the last successful feed check 2026-11-08 00:29 UTC
    Listed
    CERT Polska
    1. Certificate logged in CT
    2. Listed by CERT Polska
    3. We matched the new listing
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-07 16:11 UTC to 2027-02-05 16:11 UTC
    Logged 2026-11-07 17:09 UTC in Google PlumbersArms2027h1, entry 663,825,516
    SHA-256 4d203756c1085655dd68a16ef4df73e466dc77d467f58fd57dd5ec9e1c6626bc
    Public key SHA-256 394fb466199c71d74f6a3cc5dce968483e57c44c38b0ea04768afca77266f5b8
    Domain
    truly7-amet36.cfd
    Registered
    2026-11-07 · Dynadot Inc
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 00:51 UTC

    Suggest a correction

  75. tzentsurvi.store US · AS13335 · Cloudflare, Inc.4 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 1 d ago
    DetailsHide
    Hostname
    tzentsurvi.store
    First seen
    2026-11-08 00:30 UTC
    Listing
    CERT Polska listed it 2026-11-08 · still listed at the last successful feed check 2026-11-08 00:29 UTC
    Listed
    CERT Polska
    1. Certificate logged in CT
    2. Listed by CERT Polska
    3. We matched the new listing
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-07 05:50 UTC to 2027-02-05 05:50 UTC
    Logged 2026-11-07 06:48 UTC in Let's Encrypt Willow2027h1, entry 981,757,851
    SHA-256 c3b1ecb02a0555ac98c198ee6f9fa45d8e5b6fbeccad0a210871e3bfa5909214
    Public key SHA-256 b579dd0dca5dd1b11b593b5d1e5d3229575f6dfa646aeafcc98ae833f9d245d0
    Addresses
    104.21.13.162 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.156.201 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3032::6815:da2
    2606:4700:3032::ac43:9cc9
    Cloudflare
    Cloudflare (104.21.13.162, 172.67.156.201): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    tzentsurvi.store
    Registered
    2026-11-07 · NameCheap, Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 00:51 UTC

    Suggest a correction

  76. vespebacch.store US · AS13335 · Cloudflare, Inc.4 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 1 d ago
    DetailsHide
    Hostname
    vespebacch.store
    First seen
    2026-11-08 00:30 UTC
    Listing
    CERT Polska listed it 2026-11-07 · first observed in the feed 2026-11-08 · still listed at the last successful feed check 2026-11-08 00:29 UTC
    Listed
    CERT Polska
    1. Certificate logged in CT
    2. Listed by CERT Polska
    3. We matched the new listing
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-07 05:48 UTC to 2027-02-05 06:46 UTC
    Logged 2026-11-07 06:48 UTC in Google ParcelYard2027h1, entry 656,142,153
    SHA-256 34a67964004bd2dba7dda5404f37a1a9126d6b9920b27d9b4bd42b59e95f96ee
    Public key SHA-256 369258bda3e16070efb0efcf39275d25988537a9b3e4bebca79641f10ceb9bdf
    Addresses
    104.21.58.87 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.158.103 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3035::6815:3a57
    2606:4700:3037::ac43:9e67
    Cloudflare
    Cloudflare (104.21.58.87, 172.67.158.103): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    vespebacch.store
    Registered
    2026-11-07 · NameCheap, Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 00:51 UTC

    Suggest a correction

  77. alphavest.digital US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX presentSPF ~allDMARC missingRegistered 8 mo ago
    DetailsHide
    Hostname
    alphavest.digital
    First seen
    2026-11-08 00:26 UTC
    Listing
    CERT Polska listed it 2026-09-10 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 00:29 UTC
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-07 23:56 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-07 23:22 UTC to 2027-02-06 00:22 UTC
    Logged 2026-11-08 00:22 UTC in Google ParcelYard2027h1, entry 668,840,059
    SHA-256 82a1c2d7a04dbc5359f6b451556a83dc127fa19b254f6e4094422787a86e16d1
    Public key SHA-256 0e389e8b4900122682c556353485d3273dd3552212de2c4dbf93aa077421b4a7
    Addresses
    104.21.86.132 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.220.50 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.86.132, 172.67.220.50): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    alphavest.digital
    Registered
    2026-03-16 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Receives mail at mail.alphavest.digital
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 00:51 UTC

    Suggest a correction

  78. amkabaxae.lucifergin.com DE · AS206834 · TEAMINTERNET-CA-AS Team Int…
    ListedParking page · ParkingCrew (Team Internet)Under lucifergin.com, listed by MetaMaskMX absentSPF missingDMARC missingRegistered 4 y ago
    DetailsHide
    Hostname
    amkabaxae.lucifergin.com
    First seen
    2026-11-08 00:26 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-07 23:57 UTC
    Listed
    MetaMask, listing lucifergin.com and the names under it
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-11-07 23:26 UTC to 2027-02-05 23:26 UTC
    Logged 2026-11-08 00:25 UTC in Google PlumbersArms2027h1, entry 669,193,420
    SHA-256 64a4b04574163663063f2b74879ee608e2ac642213f72a481c0002dfa8b90271
    Public key SHA-256 1c5edbd55c7b5f134dd7ef9ff59bd0f45a4754bc67db8881ec180de121e422f4
    Addresses
    185.53.179.136 · Germany · AS206834 TEAMINTERNET-CA-AS Team Internet AG · ParkingCrew (Team Internet) (parking page)
    Parking page · ParkingCrew (Team Internet)
    ParkingCrew (Team Internet) (185.53.179.136): a parking service. It answers for names that are typically for sale or unused.
    Domain
    lucifergin.com
    Registered
    2023-01-04 · Hosting Concepts B.V. d/b/a Registrar.eu
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-07 17:16 UTC

    Suggest a correction

  79. defillama.castmovile.workers.dev US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMask
    DetailsHide
    Hostname
    defillama.castmovile.workers.dev
    First seen
    2026-11-08 00:26 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-07 23:57 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WR1 · precertificate
    Valid 2026-11-07 23:24 UTC to 2027-02-06 00:21 UTC
    Logged 2026-11-08 00:24 UTC in Google ParcelYard2027h1, entry 668,853,591
    SHA-256 1b8edc6646c639aa588d74e649ae3e1feaee3b75ff241663b7f5d36fd95afeb9
    Public key SHA-256 7cb153a052d8fc44224cac90305b7c474e13b97767282e7474747137cc353aad
    Addresses
    104.21.40.182 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.137.87 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.40.182, 172.67.137.87): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.

    Suggest a correction

  80. download.telegram-desktop.me RU · AS50340 · SELECTEL-MSK JSC Selectel
    ReportedUnder telegram-desktop.me, reported by PhishDestroyMX absentSPF missingDMARC missingRegistered 9 mo ago
    DetailsHide
    Hostname
    download.telegram-desktop.me
    First seen
    2026-11-08 00:26 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-07 23:56 UTC
    Reported
    PhishDestroy, listing telegram-desktop.me and the names under it
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR2
    Valid 2026-11-07 23:22 UTC to 2027-02-05 23:22 UTC
    Logged 2026-11-08 00:20 UTC in Google PlumbersArms2027h1, entry 669,135,069
    SHA-256 4e0eea89f5735da1dd872ca5e8363362b0018d5c6fe2e6ecf5d8baac58b77813
    Public key SHA-256 665befcfc34019a17e84d73a3e3d5981c80900555d2855707c3a7083fa58d66d
    PhishDestroy
    Addresses
    217.168.244.119 · Russia · AS50340 SELECTEL-MSK JSC Selectel
    Domain
    telegram-desktop.me
    Registered
    2026-02-26 · DomainContext, Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 00:51 UTC

    Suggest a correction

  81. fortystats.com BD · AS153947 · FAST ZONE IT
    ReportedReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 2 mo ago
    DetailsHide
    Hostname
    fortystats.com
    First seen
    2026-11-08 00:26 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-07 23:56 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR1 · precertificate
    Valid 2026-11-07 23:26 UTC to 2027-02-05 23:26 UTC
    Logged 2026-11-08 00:24 UTC in DigiCert Wyvern2027h1, entry 447,578,516
    SHA-256 3ea029041299abe0432a840f3cb57b5dd6e51c3ab16375657aac0bcea6612bae
    Public key SHA-256 8d5969a34283ee113c4ebe0cc51f2619d07cc7b7264116c79643481122b25830
    PhishDestroy
    Addresses
    193.187.110.10 · Bangladesh · AS153947 FASTZONEIT-AS-AP - FAST ZONE IT
    Domain
    fortystats.com
    Registered
    2026-09-09 · Gname.com Pte. Ltd.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 00:52 UTC

    Suggest a correction

  82. icloudapp.usApple
    ListedListed by MetaMaskMX presentSPF ~allDMARC missing
    DetailsHide
    Hostname
    icloudapp.us
    First seen
    2026-11-08 00:26 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-07 23:57 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-11-07 23:24 UTC to 2027-02-05 23:24 UTC
    Logged 2026-11-08 00:22 UTC in Let's Encrypt Sycamore2027h1, entry 1,031,009,360
    SHA-256 6a6d47d24d683b74823e72158d63dfd725846e2d1ed1116123dbe881c4ca59d8
    Public key SHA-256 2422813559f2901b6848de8a03a3b61d8954a960d248d6d678aff6bd3631ad37
    Brand
    Apple
    Domain
    icloudapp.us
    MX
    Receives mail at mx01.mail.icloud.com, mx02.mail.icloud.com
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 00:29 UTC

    Suggest a correction

  83. marinaprotocol.digital US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    marinaprotocol.digital
    First seen
    2026-11-08 00:26 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-07 23:57 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-11-07 23:23 UTC to 2027-02-05 23:23 UTC
    Logged 2026-11-08 00:22 UTC in IPng Networks Gouda2027h1, entry 348,486,820
    SHA-256 05e81159fc794ed708567cd53b884a0b8dbfb22d26fb5199905ba12454a9f3d4
    Public key SHA-256 ff181e80a17064cf268d3e665f6282b9ee8bcb52bf8d2238b034f79f3bef007c
    Addresses
    104.21.2.172 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.129.124 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.2.172, 172.67.129.124): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    marinaprotocol.digital
    Registered
    2026-05-14 · PDR Ltd. d/b/a PublicDomainRegistry.com
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 00:51 UTC

    Suggest a correction

  84. ru1rdn0lj8o6nwk9.xijnudcy.csarxeio.tczglrpw.gatewaylearning.ezgateway.net FR · AS16276 · OVH OVH SAS
    ListedOVHUnder ezgateway.net, listed by USOMMX absentSPF -allDMARC rejectRegistered 7 mo ago
    DetailsHide
    Hostname
    ru1rdn0lj8o6nwk9.xijnudcy.csarxeio.tczglrpw.gatewaylearning.ezgateway.net
    First seen
    2026-11-08 00:26 UTC
    Listing
    USOM listed it 2026-08-21 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-07 23:32 UTC
    Listed
    USOM, listing ezgateway.net and the names under it
    1. Listed by USOM
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-11-07 23:21 UTC to 2027-02-05 23:21 UTC
    Logged 2026-11-08 00:20 UTC in Geomys Tuscolo2027h1, entry 521,110,600
    SHA-256 c4ca7b67f4e71c70c69d571dfc5ce4828d60251c827a364f1d178f62b0dfc852
    Public key SHA-256 7a0514f146cf4e381404ea95243d76c9862207e55f7ae24a30ccb8740fec4839
    Addresses
    15.204.116.29 · France · AS16276 OVH OVH SAS · OVH (cloud provider)
    OVH
    OVH (15.204.116.29): a cloud provider. It rents servers and addresses to its customers.
    Domain
    ezgateway.net
    Registered
    2026-04-07 · Dynu Systems Incorporated
    MX
    Publishes no mail exchanger
    SPF
    SPF record with -all: other senders fail
    DMARC
    DMARC policy p=reject
    Checked
    2026-11-07 17:16 UTC

    Suggest a correction

  85. sknstat.cc BD · AS153947 · FAST ZONE IT
    ReportedReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    sknstat.cc
    First seen
    2026-11-08 00:26 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-07 23:56 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR1
    Valid 2026-11-07 23:26 UTC to 2027-02-05 23:26 UTC
    Logged 2026-11-08 00:25 UTC in Google PlumbersArms2027h1, entry 669,193,801
    SHA-256 9546c983d283b579d9f088f7759e0ad1b082f126f658ca90f4bb26c980ffd075
    Public key SHA-256 52b6f2279c444b70036135f0cd5c6fa76dea321c1ac9a805be7267d1f1be90ce
    PhishDestroy
    Addresses
    193.187.110.18 · Bangladesh · AS153947 FASTZONEIT-AS-AP - FAST ZONE IT
    Domain
    sknstat.cc
    Registered
    2026-07-11 · Global Domain Group LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 00:51 UTC

    Suggest a correction

  86. stashhpatrick.com US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    stashhpatrick.com
    First seen
    2026-11-08 00:26 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-07 23:56 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-11-07 23:23 UTC to 2027-02-05 23:23 UTC
    Logged 2026-11-08 00:22 UTC in Geomys Tuscolo2027h1, entry 521,130,482
    SHA-256 9cacff74656d5dc4cb5c8a7178101c670e2098d8970a86c2d20e01c80953937a
    Public key SHA-256 817dd911fff94286dae013474cbe8a7e046503caabf5ba43d52151843962690f
    PhishDestroy
    Addresses
    104.21.3.11 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.130.2 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.3.11, 172.67.130.2): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    stashhpatrick.com
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 00:29 UTC

    Suggest a correction

  87. treidenixplatform.com NL · AS62370 · Snel Snel.com B.V.
    ListedListed by CERT PolskaMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    treidenixplatform.com
    First seen
    2026-11-08 00:26 UTC
    Listing
    CERT Polska listed it 2026-07-20 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 00:29 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-07 23:22 UTC to 2027-02-06 00:20 UTC
    Logged 2026-11-08 00:22 UTC in Google ParcelYard2027h1, entry 668,832,689
    SHA-256 4935b5cbbe1d21c05a55a0a6adf498887ebbe98cbe0858b7f5a24ecfd7a91d31
    Public key SHA-256 a8791dd6dfff8047ffcdb2f9faefd46027cf38896a9ca3d7f09b85157c341b52
    Addresses
    185.62.57.222 · Netherlands · AS62370 Snel Snel.com B.V.
    Domain
    treidenixplatform.com
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 00:29 UTC

    Suggest a correction

  88. www.fortystats.com BD · AS153947 · FAST ZONE IT
    ReportedUnder fortystats.com, reported by PhishDestroyMX absentSPF missingDMARC missingRegistered 2 mo ago
    DetailsHide
    Hostname
    www.fortystats.com
    First seen
    2026-11-08 00:26 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-07 23:56 UTC
    Reported
    PhishDestroy, listing fortystats.com and the names under it
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR1 · precertificate
    Valid 2026-11-07 23:26 UTC to 2027-02-05 23:26 UTC
    Logged 2026-11-08 00:24 UTC in DigiCert Wyvern2027h1, entry 447,578,516
    SHA-256 3ea029041299abe0432a840f3cb57b5dd6e51c3ab16375657aac0bcea6612bae
    Public key SHA-256 8d5969a34283ee113c4ebe0cc51f2619d07cc7b7264116c79643481122b25830
    PhishDestroy
    Addresses
    193.187.110.10 · Bangladesh · AS153947 FASTZONEIT-AS-AP - FAST ZONE IT
    Domain
    fortystats.com
    Registered
    2026-09-09 · Gname.com Pte. Ltd.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 00:52 UTC

    Suggest a correction

  89. www.odorcosibella-pl.sbs US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareUnder odorcosibella-pl.sbs, listed by CERT PolskaMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    www.odorcosibella-pl.sbs
    First seen
    2026-11-08 00:26 UTC
    Listing
    CERT Polska listed it 2026-09-24 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 00:29 UTC
    PhishDestroy: first observed in the feed 2026-11-02 · still listed at the last successful feed check 2026-11-07 23:56 UTC
    Listed
    CERT Polska, listing odorcosibella-pl.sbs and the names under it
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-07 23:21 UTC to 2027-02-06 00:20 UTC
    Logged 2026-11-08 00:21 UTC in DigiCert Sphinx2027h1, entry 395,782,790
    SHA-256 73b0248843d6166d5e8b0667a0a55c9be5df28df5ea4b958eceb81ec529d049f
    Public key SHA-256 a055b951263e7986c722c2b4252d1b2e3d16a9f9662fb8984fa4fbbd6d9f1536
    Addresses
    104.21.15.22 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.161.11 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.15.22, 172.67.161.11): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    odorcosibella-pl.sbs
    Registered
    2026-05-14 · Dynadot Inc
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-07 08:11 UTC

    Suggest a correction

  90. www.sknstat.cc
    ReportedUnder sknstat.cc, reported by PhishDestroyMX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    www.sknstat.cc
    First seen
    2026-11-08 00:26 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-07 23:56 UTC
    Reported
    PhishDestroy, listing sknstat.cc and the names under it
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR1
    Valid 2026-11-07 23:26 UTC to 2027-02-05 23:26 UTC
    Logged 2026-11-08 00:25 UTC in Google PlumbersArms2027h1, entry 669,193,801
    SHA-256 9546c983d283b579d9f088f7759e0ad1b082f126f658ca90f4bb26c980ffd075
    Public key SHA-256 52b6f2279c444b70036135f0cd5c6fa76dea321c1ac9a805be7267d1f1be90ce
    PhishDestroy
    Domain
    sknstat.cc
    Registered
    2026-07-11 · Global Domain Group LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 00:51 UTC

    Suggest a correction

  91. xa56p.com US · AS16509 · Amazon.com, Inc.2 addresses
    ReportedParking page · AfternicReported by PhishDestroyMX absentSPF -allDMARC missing
    DetailsHide
    Hostname
    xa56p.com
    First seen
    2026-11-08 00:26 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-07 23:56 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by GoDaddy TLS Intermediate CA DV - R1v1
    Valid 2026-11-08 00:25 UTC to 2027-05-25 00:25 UTC
    Logged 2026-11-08 00:25 UTC in GoDaddy Aquamarine2027h1, entry 193,898,961
    SHA-256 5805488d55926432990d94f9ac3df0ef134bc5860d83851e561506561284af07
    Public key SHA-256 8d02a7fac2214e5b40cf4102529fa68c25a24c614616f90f318a92e3ac1b6063
    PhishDestroy
    Addresses
    13.248.169.48 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Afternic (parking page)
    76.223.54.146 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Afternic (parking page)
    Parking page · Afternic
    The registry delegates xa56p.com to Afternic’s nameservers, which answer for it. Afternic (13.248.169.48, 76.223.54.146): a parking service. It answers for names that are typically for sale or unused.
    Domain
    xa56p.com
    MX
    Publishes no mail exchanger
    SPF
    SPF record with -all: other senders fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 00:29 UTC

    Suggest a correction

  92. zkgxrysd.pirtoalj.ixyhmceu.tomjzfci.tczglrpw.gatewaylearning.ezgateway.net FR · AS16276 · OVH OVH SAS
    ListedOVHUnder ezgateway.net, listed by USOMMX absentSPF -allDMARC rejectRegistered 7 mo ago
    DetailsHide
    Hostname
    zkgxrysd.pirtoalj.ixyhmceu.tomjzfci.tczglrpw.gatewaylearning.ezgateway.net
    First seen
    2026-11-08 00:26 UTC
    Listing
    USOM listed it 2026-08-21 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-07 23:32 UTC
    Listed
    USOM, listing ezgateway.net and the names under it
    1. Listed by USOM
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-07 23:26 UTC to 2027-02-05 23:26 UTC
    Logged 2026-11-08 00:24 UTC in Google ParcelYard2027h1, entry 668,861,026
    SHA-256 4de3d6b3b3f703a841ffa7d409d98e62dd4804a0838f62b676d2da73940f7475
    Public key SHA-256 c9d147d2136af2de162fbc6bc5411e3c64a79cd122a2c8e36c8c960c402b9e87
    Addresses
    15.204.116.29 · France · AS16276 OVH OVH SAS · OVH (cloud provider)
    OVH
    OVH (15.204.116.29): a cloud provider. It rents servers and addresses to its customers.
    Domain
    ezgateway.net
    Registered
    2026-04-07 · Dynu Systems Incorporated
    MX
    Publishes no mail exchanger
    SPF
    SPF record with -all: other senders fail
    DMARC
    DMARC policy p=reject
    Checked
    2026-11-07 17:16 UTC

    Suggest a correction

  93. 7cbo1.me US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by NPA 165 (information services)MX absentSPF missingDMARC missingRegistered 2 mo ago
    DetailsHide
    Hostname
    7cbo1.me
    First seen
    2026-11-08 00:21 UTC
    Listing
    NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-07 13:34 UTC
    Listed
    NPA 165
    1. Observed in the NPA 165 feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-07 23:18 UTC to 2027-02-06 00:17 UTC
    Logged 2026-11-08 00:18 UTC in Let's Encrypt Willow2027h1, entry 994,299,809
    SHA-256 7d6482b749c1586ccd4217e3459bb9ed766638a1628b0cd739afe7c30250f34f
    Public key SHA-256 d6b49b53d5a9e542cfe4c2fda6284c9f85a6a36c1e2bf4a20d985ae321091c24
    Addresses
    104.21.25.115 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.134.49 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.25.115, 172.67.134.49): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    7cbo1.me
    Registered
    2026-09-09 · NameSilo, LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 00:51 UTC

    Suggest a correction

  94. adobasics.shop CN · AS219278 · RASHOST Beijing Ruihao Kai …
    ReportedReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    adobasics.shop
    First seen
    2026-11-08 00:21 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-07 23:56 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-07 23:18 UTC to 2027-02-06 00:17 UTC
    Logged 2026-11-08 00:18 UTC in Google PlumbersArms2027h1, entry 669,109,552
    SHA-256 02fae5eb44a80672a7cd441eb9af6f7129d9dd42ce9095e33448c41278b23717
    Public key SHA-256 88ba6effe1383707d6e047286acd9ae9b216a5e237cbbb98af69f4ad9abec858
    PhishDestroy
    Addresses
    80.71.144.126 · China · AS219278 RASHOST Beijing Ruihao Kai Yuan Technology Co., Ltd
    Domain
    adobasics.shop
    Registered
    2026-07-12 · Dynadot Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 00:23 UTC

    Suggest a correction

  95. betclic-casino.ch LV · AS58061 · SCALAXY-AS Scalaxy B.V.
    ReportedReported by PhishDestroyMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    betclic-casino.ch
    First seen
    2026-11-08 00:21 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-07 23:56 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR2 · precertificate
    Valid 2026-11-07 23:21 UTC to 2027-02-05 23:21 UTC
    Logged 2026-11-08 00:20 UTC in Let's Encrypt Sycamore2027h1, entry 1,030,947,307
    SHA-256 557d6195196bd66c121aa981a2ddef3a7428e752c1aba8e28467eb8ec5bdc87e
    Public key SHA-256 842b80bc6b79389bf858f215fe249f51a78aea0a6b135969a643f585a08716aa
    PhishDestroy
    Addresses
    37.252.15.245 · Latvia · AS58061 SCALAXY-AS Scalaxy B.V.
    Domain
    betclic-casino.ch
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 00:23 UTC

    Suggest a correction

  96. jmlvaypr.pontzkfs.iynvpjou.skgbormu.vfewqrkg.7biageodh.9mtzksal0p7ey7fu.gatewaylearning.ezgateway.net FR · AS16276 · OVH OVH SAS
    ListedOVHUnder ezgateway.net, listed by USOMMX absentSPF -allDMARC rejectRegistered 7 mo ago
    DetailsHide
    Hostname
    jmlvaypr.pontzkfs.iynvpjou.skgbormu.vfewqrkg.7biageodh.9mtzksal0p7ey7fu.gatewaylearning.ezgateway.net
    First seen
    2026-11-08 00:21 UTC
    Listing
    USOM listed it 2026-08-21 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-07 23:32 UTC
    Listed
    USOM, listing ezgateway.net and the names under it
    1. Listed by USOM
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-07 23:21 UTC to 2027-02-05 23:21 UTC
    Logged 2026-11-08 00:20 UTC in Google PlumbersArms2027h1, entry 669,132,196
    SHA-256 3c4263a9e839f98cc53067a8b34563766c6b45f5bdda8fac1c03704f9d0ca2ef
    Public key SHA-256 9884441184fd92426ad61ac8a02c95c52f949273a894dacb8d6e77cb9c4e17af
    Addresses
    15.204.116.29 · France · AS16276 OVH OVH SAS · OVH (cloud provider)
    OVH
    OVH (15.204.116.29): a cloud provider. It rents servers and addresses to its customers.
    Domain
    ezgateway.net
    Registered
    2026-04-07 · Dynu Systems Incorporated
    MX
    Publishes no mail exchanger
    SPF
    SPF record with -all: other senders fail
    DMARC
    DMARC policy p=reject
    Checked
    2026-11-07 17:16 UTC

    Suggest a correction

  97. onyx-snapshot.xyz US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    onyx-snapshot.xyz
    First seen
    2026-11-08 00:21 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-07 23:57 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-07 23:18 UTC to 2027-02-06 00:16 UTC
    Logged 2026-11-08 00:18 UTC in Let's Encrypt Sycamore2027h1, entry 1,030,905,622
    SHA-256 28ceaebdbeb0010bd44611f14d2e778ebffd4580f1bbd571dc9e985965272a56
    Public key SHA-256 fb4d64b2fd925eb6c699ae51c57004e10f2c66226a50a4510ed1fde497de3222
    Addresses
    104.21.76.139 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.195.193 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.76.139, 172.67.195.193): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    onyx-snapshot.xyz
    Registered
    2026-07-12 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 00:51 UTC

    Suggest a correction

  98. portals-flarenetworks.xyz US · AS13335 · Cloudflare, Inc.4 addressesFlare Network
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    portals-flarenetworks.xyz
    First seen
    2026-11-08 00:21 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-07 23:57 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-11-07 23:17 UTC to 2027-02-05 23:17 UTC
    Logged 2026-11-08 00:16 UTC in Let's Encrypt Sycamore2027h1, entry 1,030,869,473
    SHA-256 366dce4d48530e5bd0d35dbf2f45c174c91c31d9b00a9319cdfef2329057eda2
    Public key SHA-256 5c4da0c181dd0138743d5cc7bc688f026c3e9379fafdcc1bb4630ab955264c20
    Brand
    Flare Network
    Addresses
    104.21.13.51 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.132.155 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3032::6815:d33
    2606:4700:3035::ac43:849b
    Cloudflare
    Cloudflare (104.21.13.51, 172.67.132.155): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    portals-flarenetworks.xyz
    Registered
    2026-05-14 · Dynadot Inc
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 00:23 UTC

    Suggest a correction

  99. rtyozenw.urbzaqfs.uotyckrw.nofbagcj.gecxorwd.tczglrpw.gatewaylearning.ezgateway.net FR · AS16276 · OVH OVH SAS
    ListedOVHUnder ezgateway.net, listed by USOMMX absentSPF -allDMARC rejectRegistered 7 mo ago
    DetailsHide
    Hostname
    rtyozenw.urbzaqfs.uotyckrw.nofbagcj.gecxorwd.tczglrpw.gatewaylearning.ezgateway.net
    First seen
    2026-11-08 00:21 UTC
    Listing
    USOM listed it 2026-08-21 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-07 23:32 UTC
    Listed
    USOM, listing ezgateway.net and the names under it
    1. Listed by USOM
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-07 23:21 UTC to 2027-02-05 23:21 UTC
    Logged 2026-11-08 00:20 UTC in Google ParcelYard2027h1, entry 668,806,804
    SHA-256 e43ea859ff539f182a88af8735da738b3d21f3394d29b04e97027fd568268801
    Public key SHA-256 cfe4803000ce40d00d530e7738ec01d0e9447129668193b5f567c239b5ef064e
    Addresses
    15.204.116.29 · France · AS16276 OVH OVH SAS · OVH (cloud provider)
    OVH
    OVH (15.204.116.29): a cloud provider. It rents servers and addresses to its customers.
    Domain
    ezgateway.net
    Registered
    2026-04-07 · Dynu Systems Incorporated
    MX
    Publishes no mail exchanger
    SPF
    SPF record with -all: other senders fail
    DMARC
    DMARC policy p=reject
    Checked
    2026-11-07 17:16 UTC

    Suggest a correction

  100. ru1rdn0lj8o6nwk9.sjprufet.rdgznsfc.tomjzfci.tczglrpw.gatewaylearning.ezgateway.net FR · AS16276 · OVH OVH SAS
    ListedOVHUnder ezgateway.net, listed by USOMMX absentSPF -allDMARC rejectRegistered 7 mo ago
    DetailsHide
    Hostname
    ru1rdn0lj8o6nwk9.sjprufet.rdgznsfc.tomjzfci.tczglrpw.gatewaylearning.ezgateway.net
    First seen
    2026-11-08 00:21 UTC
    Listing
    USOM listed it 2026-08-21 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-07 23:32 UTC
    Listed
    USOM, listing ezgateway.net and the names under it
    1. Listed by USOM
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-07 23:21 UTC to 2027-02-05 23:21 UTC
    Logged 2026-11-08 00:20 UTC in Google PlumbersArms2027h1, entry 669,132,161
    SHA-256 795889d430a6544dcca44bcadefb5fafb2090d2f0519dd60e9667188962f31ef
    Public key SHA-256 09de76c7edb6c03e68cf0f7c77d7c067bd158092d66df79b51e39be9ac9797cd
    Addresses
    15.204.116.29 · France · AS16276 OVH OVH SAS · OVH (cloud provider)
    OVH
    OVH (15.204.116.29): a cloud provider. It rents servers and addresses to its customers.
    Domain
    ezgateway.net
    Registered
    2026-04-07 · Dynu Systems Incorporated
    MX
    Publishes no mail exchanger
    SPF
    SPF record with -all: other senders fail
    DMARC
    DMARC policy p=reject
    Checked
    2026-11-07 17:16 UTC

    Suggest a correction

Showing 1–100 of 6,037 hostnames.
How these findings are made

Brand spoofs: findings that impersonate one of the 1,000 most-impersonated brands. The list opens on them; All shows every finding.

Reported: a hostname in a new certificate that PhishTank or PhishDestroy reports, or that CERT Polska, MetaMask, USOM, MODA, NPA 165, JPCERT/CC, the AMF, the FSMA or BaFin lists. When a listing source names the brand imitated or a category, the finding shows it. Phishing host: a brand lookalike that resolves to an address which hosted confirmed phishing in the last 48 hours. Spamhaus DROP: a brand lookalike that resolves to an address on the Spamhaus DROP list. Same certificate: another name on a finding's certificate that resolves to an address on Spamhaus DROP. Suspicious: other names on a finding's certificate, rated high for a hosting-alias name or a lookalike on a phishing host, medium for a lookalike; they join the findings once they have listing evidence of their own. Also under Suspicious: registered domains using a brand’s name that PhishDestroy’s community list includes, rated high when they resolve to an address with no parking or holding signal, medium otherwise.

Brand labels cover the 1,000 most-impersonated brands. A name gets a brand when the brand's token starts a label or follows a hyphen, with a lure word such as "login" or "verify" for common words. Hostnames appear as plain text. How it works · Sources