Live

Live phishing findings

New certificates and domain registrations, with every hostname resolved and checked against phishing reports and bad-address lists. The newest findings, updated hourly.

Updated hourly · 2026-11-08 03:04 UTC
Certificate-log entries · 24 h
313.9M
from 84 distinct feeds
Unique certificates · 24 h
30.5M
each reviewed
Names resolved · 24 h
19.5M
14.5M with an address
Findings · 24 h
5,869
210 of 1,061 brands targeted

2,398 hostnames from the last 24 hours.

The findings have updated. The list starts again from the top.

  1. 7xwu7.me US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by NPA 165 (information services)MX absentSPF missingDMARC missingRegistered 2 mo ago
    DetailsHide
    Hostname
    7xwu7.me
    First seen
    2026-11-08 03:00 UTC
    Listing
    NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 01:35 UTC
    Listed
    NPA 165
    1. Observed in the NPA 165 feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-08 01:59 UTC to 2027-02-06 02:56 UTC
    Logged 2026-11-08 02:59 UTC in Google PlumbersArms2027h1, entry 670,791,279
    SHA-256 732b6ac3403244f3155c3eadd4100b955463b9fedb93f6225b3ae6b34ca8fb22
    Public key SHA-256 66965753e68164eaf84669ba9db748c91510f1fb1a65068be8b4784f59472609
    Addresses
    104.21.24.159 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.219.150 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.24.159, 172.67.219.150): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    7xwu7.me
    Registered
    2026-09-09 · NameSilo, LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 03:08 UTC

    Suggest a correction

  2. fbguide-bizhelp.pages.dev US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishTank
    DetailsHide
    Hostname
    fbguide-bizhelp.pages.dev
    First seen
    2026-11-08 03:00 UTC
    Listing
    PhishTank: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-08 02:36 UTC
    Reported
    PhishTank
    1. Observed in the PhishTank feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-08 01:58 UTC to 2027-02-06 02:56 UTC
    Logged 2026-11-08 02:58 UTC in Google ParcelYard2027h1, entry 670,465,651
    SHA-256 53b35f6b9dbca05f9bc87ed9ef86815a9fc9d8c1dd861c2fd2e5b03a44d1f001
    Public key SHA-256 6c20abc31baff6fdb3f2ba4ed6b138f185b48c8ef36ca9c983207df179d83d14
    PhishTank
    PhishTank report #8878355
    Addresses
    172.66.44.139 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.66.47.117 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (172.66.44.139, 172.66.47.117): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.

    Suggest a correction

  3. indkuret.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    indkuret.com
    First seen
    2026-11-08 03:00 UTC
    Listing
    CERT Polska listed it 2026-05-14 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 00:29 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-11-08 02:00 UTC to 2027-02-06 02:00 UTC
    Logged 2026-11-08 02:59 UTC in DigiCert Wyvern2027h1, entry 448,764,938
    SHA-256 7f5fa304777dffe1d4940dd13ac7ea3238f8d18f014b33daf18a5bfb3866cdaf
    Public key SHA-256 9ae38949ac45c09759a225440b438926b4a783bf3c188d2c56c2d4558d3c3f1c
    Addresses
    104.21.36.77 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.190.99 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.36.77, 172.67.190.99): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    indkuret.com
    Registered
    2026-05-14 · NameCheap, Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 03:08 UTC

    Suggest a correction

  4. secure-metmask-wallet.pages.dev US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMask
    DetailsHide
    Hostname
    secure-metmask-wallet.pages.dev
    First seen
    2026-11-08 03:00 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-07 23:57 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-08 01:58 UTC to 2027-02-06 02:57 UTC
    Logged 2026-11-08 02:58 UTC in DigiCert Sphinx2027h1, entry 396,896,587
    SHA-256 edc42e4081f1070c6d884c21ff35e65283e622f44981449a9e84669e25de9de0
    Public key SHA-256 a4493970bbc27051245bce97be0a9c09f63db0a1b776fed0df828844d4108b07
    Addresses
    172.66.44.77 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.66.47.179 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (172.66.44.77, 172.66.47.179): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.

    Suggest a correction

  5. betheldentist.com US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    betheldentist.com
    First seen
    2026-11-08 02:56 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-07 23:56 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-11-08 01:53 UTC to 2027-02-06 01:53 UTC
    Logged 2026-11-08 02:51 UTC in IPng Networks Gouda2027h1, entry 349,512,080
    SHA-256 93685ec70f41cdb43c24588c386b9ec2a894da54af79047c1221a38676d612fe
    Public key SHA-256 7b8ae38b24ecbedebac7077de3dac83a3ac9ba690f5f019ffe86cae2777f59c7
    PhishDestroy
    Addresses
    104.21.40.110 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.150.189 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.40.110, 172.67.150.189): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    betheldentist.com
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 03:00 UTC

    Suggest a correction

  6. era-chainlink.xyz US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 12 mo ago
    DetailsHide
    Hostname
    era-chainlink.xyz
    First seen
    2026-11-08 02:56 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-07 23:56 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-08 01:55 UTC to 2027-02-06 02:54 UTC
    Logged 2026-11-08 02:55 UTC in IPng Networks Halloumi2027h1, entry 406,410,751
    SHA-256 f994f27350f56d2d05910bbf7355858a3b40971082a8f154557b7e8114687da0
    Public key SHA-256 142cc2e0fc026938b4b8e754ecf5b22fad0a3a9befff6515c6a5c0d2e6e19a99
    PhishDestroy
    Addresses
    104.21.42.31 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.199.185 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.42.31, 172.67.199.185): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    era-chainlink.xyz
    Registered
    2025-11-18 · Dynadot Inc
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 03:00 UTC

    Suggest a correction

  7. fightfoundations.digital US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    fightfoundations.digital
    First seen
    2026-11-08 02:56 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-07 23:57 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-11-08 01:53 UTC to 2027-02-06 01:53 UTC
    Logged 2026-11-08 02:51 UTC in TrustAsia Luoshu2027, entry 574,189,885
    SHA-256 86d9303fe2557289ee0bfdfec03abcf33e01a68d22a0f66002524542feb25de7
    Public key SHA-256 f32266ff98c0b5b0077042b556d6c1130574e6953b3cee33802206a29216f83b
    Addresses
    104.21.91.51 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.166.191 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.91.51, 172.67.166.191): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    fightfoundations.digital
    Registered
    2026-05-14 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 03:00 UTC

    Suggest a correction

  8. online.webonlinemicrosoftpdf.sbs US · AS13335 · Cloudflare, Inc.4 addresses
    ListedCloudflareUnder webonlinemicrosoftpdf.sbs, listed by MetaMaskMX absentSPF missingDMARC missingRegistered 2 mo ago
    DetailsHide
    Hostname
    online.webonlinemicrosoftpdf.sbs
    First seen
    2026-11-08 02:56 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-07 23:57 UTC
    Listed
    MetaMask, listing webonlinemicrosoftpdf.sbs and the names under it
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-08 01:53 UTC to 2027-02-06 02:51 UTC
    Logged 2026-11-08 02:53 UTC in Google PlumbersArms2027h1, entry 670,728,659
    SHA-256 1df86fee1357dfb99be1622fed28013eb647312e6fc8df87e1449f3932c4115b
    Public key SHA-256 e1f63ee6471643b41f039ad8eb6675d6eba43d4c153f9b27805447272a821b96
    Addresses
    104.21.61.244 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.217.39 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3032::ac43:d927
    2606:4700:3035::6815:3df4
    Cloudflare
    Cloudflare (104.21.61.244, 172.67.217.39): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    webonlinemicrosoftpdf.sbs
    Registered
    2026-09-07 · NameSilo, LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-07 05:07 UTC

    Suggest a correction

  9. proxy.dynnhost.com US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareUnder dynnhost.com, reported by PhishDestroyMX absentSPF missingDMARC missingRegistered 12 mo ago
    DetailsHide
    Hostname
    proxy.dynnhost.com
    First seen
    2026-11-08 02:56 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-07 23:56 UTC
    Reported
    PhishDestroy, listing dynnhost.com and the names under it
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR1
    Valid 2026-11-08 01:54 UTC to 2027-02-06 01:54 UTC
    Logged 2026-11-08 02:52 UTC in Google ParcelYard2027h1, entry 670,398,497
    SHA-256 9013637dcb8fab9720a4b14926f3259c6483b40d298a0ea6c74820538c41f58a
    Public key SHA-256 b01f05a5105a5ed590cba18bfc12e4df16d1e643b3a8631584428bbc5404d4ae
    PhishDestroy
    Addresses
    104.21.10.161 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.131.173 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.10.161, 172.67.131.173): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    dynnhost.com
    Registered
    2025-11-02 · IONOS SE
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-07 14:46 UTC

    Suggest a correction

  10. westchester-towing.com US · AS209242 · CLOUDFLARESPECTRUM Cloudfla…
    ReportedCloudflareReported by PhishDestroyMX presentSPF ~allDMARC missing
    DetailsHide
    Hostname
    westchester-towing.com
    First seen
    2026-11-08 02:56 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-07 23:56 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WR1 · precertificate
    Valid 2026-11-08 01:52 UTC to 2027-02-06 02:52 UTC
    Logged 2026-11-08 02:52 UTC in DigiCert Wyvern2027h1, entry 448,728,765
    SHA-256 27a78d50e4f4fd046a48693953dfd8451bf961ce33d4c40d4b1927d13a39174b
    Public key SHA-256 59bc944e10119f1e07db700c3576da81e124166da61886d5549796a57baa49b0
    PhishDestroy
    Addresses
    160.153.0.51 · United States · AS209242 CLOUDFLARESPECTRUM Cloudflare London, LLC · Cloudflare (cdn)
    Cloudflare
    Cloudflare (160.153.0.51): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    westchester-towing.com
    MX
    Receives mail at mail.westchester-towing.com
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 03:00 UTC

    Suggest a correction

  11. www.westchester-towing.com US · AS209242 · CLOUDFLARESPECTRUM Cloudfla…
    ReportedCloudflareUnder westchester-towing.com, reported by PhishDestroyMX presentSPF ~allDMARC missing
    DetailsHide
    Hostname
    www.westchester-towing.com
    First seen
    2026-11-08 02:56 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-07 23:56 UTC
    Reported
    PhishDestroy, listing westchester-towing.com and the names under it
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WR1 · precertificate
    Valid 2026-11-08 01:53 UTC to 2027-02-06 02:53 UTC
    Logged 2026-11-08 02:53 UTC in IPng Networks Halloumi2027h1, entry 406,393,229
    SHA-256 1c44414241202863880f11da65a41b11da394d4f893982b078132162c36d3b61
    Public key SHA-256 761212816c1052608653db353a8573e1a7262d7a16ca563feb59df2bef21fcd5
    PhishDestroy
    Addresses
    160.153.0.51 · United States · AS209242 CLOUDFLARESPECTRUM Cloudflare London, LLC · Cloudflare (cdn)
    Cloudflare
    Cloudflare (160.153.0.51): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    westchester-towing.com
    MX
    Receives mail at mail.westchester-towing.com
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 03:00 UTC

    Suggest a correction

  12. luckyblock-casino.uk US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 8 mo ago
    DetailsHide
    Hostname
    luckyblock-casino.uk
    First seen
    2026-11-08 02:51 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-07 23:57 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1
    Valid 2026-09-10 00:18 UTC to 2026-12-09 01:16 UTC
    Logged 2026-11-08 02:50 UTC in IPng Networks Halloumi2026h2a, entry 1,292,116,217
    SHA-256 1821567c6667576be9cfe8d2e2457935a97c521e8d52d773df12c5c3ac4fb794
    Public key SHA-256 018bd6217a23e5330e8faae0ea793c2fb3673cdeaec41296486ebf607507dfcb
    Addresses
    104.21.17.78 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.175.76 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.17.78, 172.67.175.76): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    luckyblock-casino.uk
    Registered
    2026-03-11 · Hosting Concepts B.V.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 03:08 UTC

    Suggest a correction

  13. wiwedo-visoto.info US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    wiwedo-visoto.info
    First seen
    2026-11-08 02:51 UTC
    Listing
    CERT Polska listed it 2026-05-16 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 00:29 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-08 01:49 UTC to 2027-02-06 01:49 UTC
    Logged 2026-11-08 02:47 UTC in Google ParcelYard2027h1, entry 670,344,416
    SHA-256 b403e732bd220878bf5710ef2ee6f0af90af91ff67e51d9ede1203e05dfcb6a5
    Public key SHA-256 e6c60849cdf100cf7006e18589802c2b0e7508392c7db2ded4357837f9c4ba18
    Addresses
    104.21.64.15 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.174.26 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.64.15, 172.67.174.26): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    wiwedo-visoto.info
    Registered
    2026-05-14 · NameCheap, Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 03:08 UTC

    Suggest a correction

  14. degen-camp.fun US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 8 mo ago
    DetailsHide
    Hostname
    degen-camp.fun
    First seen
    2026-11-08 02:46 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-07 23:56 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-11-08 01:46 UTC to 2027-02-06 01:46 UTC
    Logged 2026-11-08 02:44 UTC in IPng Networks Gouda2027h1, entry 349,454,268
    SHA-256 9eff311c43ae49c81a0893ed362fb2638b3c9d5176dd8f1cba25149cd3915882
    Public key SHA-256 eff3af0198bd9f7ebff4cda6323c18b493e2491ea2a64e3e2bd1e4404eb74e98
    PhishDestroy
    Addresses
    104.21.19.227 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.190.111 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.19.227, 172.67.190.111): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    degen-camp.fun
    Registered
    2026-03-16 · PDR Ltd. d/b/a PublicDomainRegistry.com
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 03:08 UTC

    Suggest a correction

  15. pzrsj.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    pzrsj.com
    First seen
    2026-11-08 02:46 UTC
    Listing
    CERT Polska listed it 2026-05-22 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 00:29 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-11-08 01:44 UTC to 2027-02-06 01:43 UTC
    Logged 2026-11-08 02:42 UTC in Let's Encrypt Sycamore2027h1, entry 1,034,100,583
    SHA-256 743849d31331dd871ba4f9723ec15f0606f3d2eab0ceb2250cc2e11afea3220e
    Public key SHA-256 ab2f36edce1109329de3e9a2218ea4bb27d253509a72e276b681e072929724e8
    Addresses
    104.21.4.63 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.154.13 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.4.63, 172.67.154.13): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    pzrsj.com
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 02:50 UTC

    Suggest a correction

  16. swapslogin.xyz US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 48 d ago
    DetailsHide
    Hostname
    swapslogin.xyz
    First seen
    2026-11-08 02:46 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-07 23:56 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-11-08 01:43 UTC to 2027-02-06 01:43 UTC
    Logged 2026-11-08 02:41 UTC in Geomys Tuscolo2027h1, entry 522,360,493
    SHA-256 6f66fad372a5c4f810a842bccfc2d3d5bb7b9a60cfb681939053305b0ac3292c
    Public key SHA-256 7788562bf7b78604063b65dec0f03f0f0c1ac50391871afeeaf51d68cdf23fb9
    PhishDestroy
    Addresses
    104.21.73.2 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.156.4 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.73.2, 172.67.156.4): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    swapslogin.xyz
    Registered
    2026-09-21 · NameSilo, LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 03:08 UTC

    Suggest a correction

  17. teveluxar.work US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    teveluxar.work
    First seen
    2026-11-08 02:46 UTC
    Listing
    CERT Polska listed it 2026-06-10 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 00:29 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-11-08 01:46 UTC to 2027-02-06 01:46 UTC
    Logged 2026-11-08 02:45 UTC in DigiCert Sphinx2027h1, entry 396,798,970
    SHA-256 0fdfeaaebe77dd9157ca59a72752b513f590ba59c1a917e2232202899e624ec7
    Public key SHA-256 b92195a1fa5a8c0f007939b924e32522967f4c5332539edc434619e050e616ed
    Addresses
    104.21.43.143 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.180.55 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.43.143, 172.67.180.55): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    teveluxar.work
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 02:50 UTC

    Suggest a correction

  18. www.fifa-2026.xyz US · AS13335 · Cloudflare, Inc.
    ReportedCloudflareUnder fifa-2026.xyz, reported by PhishDestroyMX absentSPF missingDMARC missingRegistered 8 mo ago
    DetailsHide
    Hostname
    www.fifa-2026.xyz
    First seen
    2026-11-08 02:46 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-07 23:56 UTC
    Reported
    PhishDestroy, listing fifa-2026.xyz and the names under it
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1
    Valid 2026-09-09 23:34 UTC to 2026-12-09 00:34 UTC
    Logged 2026-11-08 02:43 UTC in DigiCert Wyvern2026h2, entry 2,211,319,430
    SHA-256 512a2fcc80443764660d15d107cf6cfaf1b401895a657c33e86eacb7d601af9f
    Public key SHA-256 0efec5bf07cd1f267a12f98a9ba858b4db9ee5f1c919fecf974ee45ce9695aa7
    PhishDestroy
    Addresses
    185.158.133.1 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (185.158.133.1): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    fifa-2026.xyz
    Registered
    2026-03-10 · GoDaddy.com, LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 03:08 UTC

    Suggest a correction

  19. stakerow.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    stakerow.com
    First seen
    2026-11-08 02:41 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-07 23:57 UTC
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-07 23:56 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-08 01:37 UTC to 2027-02-06 02:36 UTC
    Logged 2026-11-08 02:37 UTC in IPng Networks Gouda2027h1, entry 349,405,026
    SHA-256 5d695ac61d33c7a033f81419f2f17439f6ce2690e3df0cbaad3e028a60da11c5
    Public key SHA-256 44f866511bcd590ce7025c3314c8e4d8800ab5556ffac8940a45ff67f1cd0545
    Addresses
    104.21.19.52 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.185.63 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.19.52, 172.67.185.63): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    stakerow.com
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 02:45 UTC

    Suggest a correction

  20. steamcomrrnunity.com US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    steamcomrrnunity.com
    First seen
    2026-11-08 02:41 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-07 23:56 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1
    Valid 2026-09-09 23:39 UTC to 2026-12-09 00:36 UTC
    Logged 2026-11-08 02:39 UTC in DigiCert Wyvern2026h2, entry 2,211,314,950
    SHA-256 13ee59ffea13fdbc81846e252844b5df180ece4e4ad82eba5e35ed661567d3fc
    Public key SHA-256 66e63dbfaba3f93c22640512c8e78106322e7a3710180ecd2030fbde17dfdb0d
    PhishDestroy
    Addresses
    104.21.75.95 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.219.97 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.75.95, 172.67.219.97): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    steamcomrrnunity.com
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 02:45 UTC

    Suggest a correction

  21. xeroadvisor.healingark.app US · AS13335 · Cloudflare, Inc.
    ListedCloudflareUnder healingark.app, listed by MetaMaskMX presentSPF ~allDMARC policy noneRegistered 16 mo ago
    DetailsHide
    Hostname
    xeroadvisor.healingark.app
    First seen
    2026-11-08 02:41 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-07 23:57 UTC
    Listed
    MetaMask, listing healingark.app and the names under it
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1
    Valid 2026-11-08 01:36 UTC to 2027-02-06 02:36 UTC
    Logged 2026-11-08 02:39 UTC in Let's Encrypt Willow2027h1, entry 995,841,617
    SHA-256 1165ba2bf08438053890e35b55115d383eff6831eea99dab56d1c307461bfd29
    Public key SHA-256 79db7289a1f7c9edd229857f81e2d4c2382a42fb8f067401dc1af1339855d846
    Addresses
    185.158.133.1 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (185.158.133.1): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    healingark.app
    Registered
    2025-07-17 · 1&1 Internet SE
    MX
    Receives mail at mx00.ionos.com, mx01.ionos.com
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    DMARC policy p=none: reports only
    Checked
    2026-11-08 00:44 UTC

    Suggest a correction

  22. iegion.co US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 12 mo ago
    DetailsHide
    Hostname
    iegion.co
    First seen
    2026-11-08 02:36 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-07 23:56 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-08 01:35 UTC to 2027-02-06 02:34 UTC
    Logged 2026-11-08 02:35 UTC in Google PlumbersArms2027h1, entry 670,542,268
    SHA-256 7f5b2c59e76bb2f2c2c12c27d992f1eac2c04821f5a18a1abb2dd2cfa9e84ba1
    Public key SHA-256 664d2f43d74325ce3af0bd58680560838d2e3913ca920abdb2709ea88931dd5f
    PhishDestroy
    Addresses
    104.21.84.166 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.195.78 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.84.166, 172.67.195.78): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    iegion.co
    Registered
    2025-11-18 · Web Commerce Communications Limited dba WebNic.cc
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 03:08 UTC

    Suggest a correction

  23. zbcn.club US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    zbcn.club
    First seen
    2026-11-08 02:36 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-07 23:57 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-08 01:33 UTC to 2027-02-06 02:32 UTC
    Logged 2026-11-08 02:34 UTC in IPng Networks Halloumi2027h1, entry 406,242,510
    SHA-256 30a1834ad975e22030c6f0c019fae85c2bc5040a194705132cc5898d81ce3fe3
    Public key SHA-256 d60060e515ecc4f0b6dbbcf495c30e69df2434d4a6d42a1990f3955f77b529db
    Addresses
    104.21.81.221 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.191.150 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.81.221, 172.67.191.150): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    zbcn.club
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 02:40 UTC

    Suggest a correction

  24. bdag.io US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX presentSPF missingDMARC missingRegistered 3 y ago
    DetailsHide
    Hostname
    bdag.io
    First seen
    2026-11-08 02:31 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-07 23:56 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-08 01:27 UTC to 2027-02-06 02:24 UTC
    Logged 2026-11-08 02:27 UTC in Geomys Tuscolo2027h1, entry 522,237,311
    SHA-256 136c28d650ca98849b04866f90f43d2a9393697a2b34c27e74a0abaac9a96a04
    Public key SHA-256 a4623af2f773bb62bf1e8e417682af21dfb757a384f0e514443411e4cc701576
    PhishDestroy
    Addresses
    104.21.30.7 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.150.43 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.30.7, 172.67.150.43): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    bdag.io
    Registered
    2024-04-05 · TLD Registrar Solutions Ltd.
    MX
    Receives mail at _dc-mx.74636aa92037.bdag.io
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 03:08 UTC

    Suggest a correction

  25. claim-pengu.app US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 8 mo ago
    DetailsHide
    Hostname
    claim-pengu.app
    First seen
    2026-11-08 02:31 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-07 23:56 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-11-08 01:27 UTC to 2027-02-06 01:27 UTC
    Logged 2026-11-08 02:26 UTC in Google PlumbersArms2027h1, entry 670,456,133
    SHA-256 90d80ee0eb0fa311813c12ecadcb149a232325047acdf70d55c809e63cd2410e
    Public key SHA-256 0bc24e012397d8c10465a5133f5b53e4759f150a3688aabf716a4b9f71fc2c8c
    PhishDestroy
    Addresses
    104.21.70.18 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.217.237 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.70.18, 172.67.217.237): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    claim-pengu.app
    Registered
    2026-03-16 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 03:08 UTC

    Suggest a correction

  26. immediate-evex-pro-software-com.financecryptoworld.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareUnder financecryptoworld.com, listed by CERT PolskaMX presentSPF ~allDMARC missingRegistered 22 mo ago
    DetailsHide
    Hostname
    immediate-evex-pro-software-com.financecryptoworld.com
    First seen
    2026-11-08 02:31 UTC
    Listing
    CERT Polska listed it 2026-06-12 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 00:29 UTC
    Listed
    CERT Polska, listing financecryptoworld.com and the names under it
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WR1 · precertificate
    Valid 2026-11-08 01:29 UTC to 2027-02-06 02:26 UTC
    Logged 2026-11-08 02:29 UTC in Let's Encrypt Sycamore2027h1, entry 1,033,831,618
    SHA-256 28014703331409229388f1f6e22544f7bbca53e1225a60f1d1500b5f38ee3e40
    Public key SHA-256 74b12370a03719da57fead026e8e96def18985ff76b642607127c4157e42200b
    Addresses
    104.21.10.130 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.131.121 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.10.130, 172.67.131.121): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    financecryptoworld.com
    Registered
    2025-01-30 · MainReg Inc.
    MX
    Receives mail at mail.financecryptoworld.com
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-07 17:16 UTC

    Suggest a correction

  27. www.gtasaproapk.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareUnder gtasaproapk.com, listed by MetaMaskMX absentSPF missingDMARC missingRegistered 8 mo ago
    DetailsHide
    Hostname
    www.gtasaproapk.com
    First seen
    2026-11-08 02:31 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-07 23:57 UTC
    Listed
    MetaMask, listing gtasaproapk.com and the names under it
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR2 · precertificate
    Valid 2026-11-08 01:27 UTC to 2027-02-06 01:27 UTC
    Logged 2026-11-08 02:26 UTC in Geomys Tuscolo2027h1, entry 522,231,114
    SHA-256 0b2af123b22622a83c6c412eaa0d055c2af42d27a47330bf609f7e15c2cff74c
    Public key SHA-256 0f1efd00fad895f64b3758d9d9d4a14e3b3193e1f247bea172cfca081b2a59bb
    Addresses
    104.21.87.32 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.140.23 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.87.32, 172.67.140.23): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    gtasaproapk.com
    Registered
    2026-03-08 · Hosting Concepts B.V. d/b/a Registrar.eu
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-07 08:04 UTC

    Suggest a correction

  28. www.trezor.com.trezorwalletapp.co.com US · AS13335 · Cloudflare, Inc.4 addressesTrezor
    ListedCloudflareUnder trezorwalletapp.co.com, listed by MetaMask
    DetailsHide
    Hostname
    www.trezor.com.trezorwalletapp.co.com
    First seen
    2026-11-08 02:31 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-07 23:57 UTC
    PhishDestroy: observed back in the feed 2026-11-07 · still listed at the last successful feed check 2026-11-07 23:56 UTC · listed 2 times
    Earlier listing periods: 2026-10-25 to 2026-11-02 (8 days)
    Listed
    MetaMask, listing trezorwalletapp.co.com and the names under it
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WR1 · precertificate
    Valid 2026-11-08 01:27 UTC to 2027-02-06 02:26 UTC
    Logged 2026-11-08 02:27 UTC in Google PlumbersArms2027h1, entry 670,471,117
    SHA-256 0fdefa2c213688893c139032cbe0972be03552a2a83f2ea4a6e4cc6bd764dc76
    Public key SHA-256 28c1239770f4fe0ea36ff691e26d3517500dd9bba2090436930d707c01515f68
    Brand
    Trezor
    Addresses
    104.21.2.175 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.129.130 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3032::ac43:8182
    2606:4700:3035::6815:2af
    Cloudflare
    Cloudflare (104.21.2.175, 172.67.129.130): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.

    Suggest a correction

  29. cleres.digital US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    cleres.digital
    First seen
    2026-11-08 02:26 UTC
    Listing
    CERT Polska listed it 2026-07-01 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 00:29 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-11-08 01:24 UTC to 2027-02-06 01:24 UTC
    Logged 2026-11-08 02:22 UTC in DigiCert Wyvern2027h1, entry 448,491,443
    SHA-256 d1f8c73cdb79566c5eba9eb07327a153244ef280dcd8cad2aa170eb3e850eea9
    Public key SHA-256 f4b3f972969d5bfd7289a21188fd67e2d604ba4facf156eff88173f9c0f2d448
    Addresses
    104.21.46.145 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.140.4 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.46.145, 172.67.140.4): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    cleres.digital
    Registered
    2026-05-14 · PDR Ltd. d/b/a PublicDomainRegistry.com
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 03:08 UTC

    Suggest a correction

  30. farmaline.outleteustore.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareUnder outleteustore.com, listed by CERT PolskaMX absentSPF missingDMARC missingRegistered 17 d ago
    DetailsHide
    Hostname
    farmaline.outleteustore.com
    First seen
    2026-11-08 02:26 UTC
    Listing
    CERT Polska listed it 2026-11-06 · still listed at the last successful feed check 2026-11-08 00:29 UTC
    Listed
    CERT Polska, listing outleteustore.com and the names under it
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WR1 · precertificate
    Valid 2026-11-08 01:21 UTC to 2027-02-06 02:19 UTC
    Logged 2026-11-08 02:21 UTC in Let's Encrypt Sycamore2027h1, entry 1,033,665,186
    SHA-256 d5a0128ede53ff5de81a85edfe464510efa24100a5ca14288a9db6cc03794111
    Public key SHA-256 be2b7909e7b39c8f9ba694c5ba677aa90a854c074ae1b2be83633fbbb1b4eb29
    Addresses
    104.21.37.26 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.203.75 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.37.26, 172.67.203.75): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    outleteustore.com
    Registered
    2026-10-22 · Cloudflare, Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-07 07:15 UTC

    Suggest a correction

  31. kidunit.mom US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by USOMMX absentSPF missingDMARC missingRegistered 12 mo ago
    DetailsHide
    Hostname
    kidunit.mom
    First seen
    2026-11-08 02:26 UTC
    Listing
    USOM listed it 2026-06-30 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 02:33 UTC
    Listed
    USOM
    1. Listed by USOM
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-08 01:20 UTC to 2027-02-06 02:18 UTC
    Logged 2026-11-08 02:20 UTC in Google ParcelYard2027h1, entry 670,082,231
    SHA-256 766e9de34f0dd2940b031a378612f148efe7d609e576cda721a10ed9c9b2eabd
    Public key SHA-256 638d3d3df30083c05cd20bc46f8f6c986c7e4f86dc7cbf89515731bc7dad1217
    Addresses
    104.21.72.79 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.177.136 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.72.79, 172.67.177.136): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    kidunit.mom
    Registered
    2025-11-18 · Dynadot Inc
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 03:08 UTC

    Suggest a correction

  32. www.eth-casino.vip US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareUnder eth-casino.vip, listed by MetaMaskMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    www.eth-casino.vip
    First seen
    2026-11-08 02:26 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-07 23:57 UTC
    Listed
    MetaMask, listing eth-casino.vip and the names under it
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WR1 · precertificate
    Valid 2026-11-08 01:22 UTC to 2027-02-06 02:20 UTC
    Logged 2026-11-08 02:22 UTC in Google PlumbersArms2027h1, entry 670,415,695
    SHA-256 3e4bf0f6051346a7c97c5032f9ff11a461f7a5b9065e16b8356e7c047ecdeb1d
    Public key SHA-256 8f058daaa5c662f144072a4dacb23b8b8d8df7f97e946724d3f25a1c30e2f3cc
    Addresses
    104.21.6.252 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.135.135 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.6.252, 172.67.135.135): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    eth-casino.vip
    Registered
    2026-05-11 · Dynadot Inc
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 01:01 UTC

    Suggest a correction

  33. auth.wormgpt.ai US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareUnder wormgpt.ai, reported by PhishDestroyMX presentSPF ~allDMARC policy noneRegistered 12 mo ago
    DetailsHide
    Hostname
    auth.wormgpt.ai
    First seen
    2026-11-08 02:21 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-07 23:56 UTC
    Reported
    PhishDestroy, listing wormgpt.ai and the names under it
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR1 · precertificate
    Valid 2026-11-08 01:19 UTC to 2027-02-06 01:19 UTC
    Logged 2026-11-08 02:18 UTC in Let's Encrypt Sycamore2027h1, entry 1,033,611,802
    SHA-256 80a53c0806141f10eeb9d25bc4c8d915fac1c84a247e234c030418f0e8f198f7
    Public key SHA-256 bb576cb7afc03d9336e7cb570ca586665e1f5e37791114edf602131891ec21d9
    PhishDestroy
    Addresses
    104.21.39.236 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.171.215 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.39.236, 172.67.171.215): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    wormgpt.ai
    Registered
    2025-11-05 · HOSTINGER operations, UAB
    MX
    Receives mail at mx1.hostinger.com, mx2.hostinger.com
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    DMARC policy p=none: reports only
    Checked
    2026-11-07 07:18 UTC

    Suggest a correction

  34. edge-x.sbs US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    edge-x.sbs
    First seen
    2026-11-08 02:16 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-07 23:57 UTC
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-07 23:56 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-11-08 01:14 UTC to 2027-02-06 01:14 UTC
    Logged 2026-11-08 02:13 UTC in IPng Networks Gouda2027h1, entry 349,260,405
    SHA-256 0413835c1e249c47a0d137e4147d74902c5779b3040265cb490f5832df63833e
    Public key SHA-256 ad4ce0cc211527414c3f670b3e495513a28b4b98d3d566cae1ce1acbde466a01
    Addresses
    104.21.92.177 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.197.18 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.92.177, 172.67.197.18): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    edge-x.sbs
    Registered
    2026-05-14 · Global Domain Group LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 03:08 UTC

    Suggest a correction

  35. jcb.rabotace.pl US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareUnder rabotace.pl, reported by PhishDestroyMX presentSPF ~allRegistered 2 y ago
    DetailsHide
    Hostname
    jcb.rabotace.pl
    First seen
    2026-11-08 02:16 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-07 23:56 UTC
    Reported
    PhishDestroy, listing rabotace.pl and the names under it
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR1
    Valid 2026-11-08 01:15 UTC to 2027-02-06 01:15 UTC
    Logged 2026-11-08 02:13 UTC in Google ParcelYard2027h1, entry 670,011,794
    SHA-256 37031e96180a2e54582621b714c42132f5fdfc064edea80d9ace9d54582a997b
    Public key SHA-256 9e6c7a5416078584032fe2e2b63e73dfd12e4e371dd8b58fabe3b6bffa896f38
    PhishDestroy
    Addresses
    104.21.83.13 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.166.197 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.83.13, 172.67.166.197): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    rabotace.pl
    Registered
    2024-07-20 · HOSTIDO.PL GAŁĄZKA SPÓŁKA JAWNA
    MX
    Receives mail at mail14.lh.pl
    SPF
    SPF record with ~all: other senders soft-fail
    Checked
    2026-11-07 08:40 UTC

    Suggest a correction

  36. kra45-c--c.ru US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    kra45-c--c.ru
    First seen
    2026-11-08 02:16 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-07 23:56 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1
    Valid 2026-09-09 22:40 UTC to 2026-12-08 23:40 UTC
    Logged 2026-11-08 02:15 UTC in DigiCert Wyvern2026h2, entry 2,211,287,373
    SHA-256 39edbe2b281077a0619a47d1317caba53daf1652461ac8bbd904163f6bbcd634
    Public key SHA-256 a89e27ec62e27a65e2747c94e6f87cbfd8c9ad8e097216cb71a289d53af0fd72
    PhishDestroy
    Addresses
    104.21.74.129 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.202.196 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.74.129, 172.67.202.196): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    kra45-c--c.ru
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 02:19 UTC

    Suggest a correction

  37. www.jcb.rabotace.pl US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareUnder rabotace.pl, reported by PhishDestroyMX presentSPF ~allRegistered 2 y ago
    DetailsHide
    Hostname
    www.jcb.rabotace.pl
    First seen
    2026-11-08 02:16 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-07 23:56 UTC
    Reported
    PhishDestroy, listing rabotace.pl and the names under it
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR1
    Valid 2026-11-08 01:15 UTC to 2027-02-06 01:15 UTC
    Logged 2026-11-08 02:13 UTC in Google ParcelYard2027h1, entry 670,011,794
    SHA-256 37031e96180a2e54582621b714c42132f5fdfc064edea80d9ace9d54582a997b
    Public key SHA-256 9e6c7a5416078584032fe2e2b63e73dfd12e4e371dd8b58fabe3b6bffa896f38
    PhishDestroy
    Addresses
    104.21.83.13 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.166.197 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.83.13, 172.67.166.197): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    rabotace.pl
    Registered
    2024-07-20 · HOSTIDO.PL GAŁĄZKA SPÓŁKA JAWNA
    MX
    Receives mail at mail14.lh.pl
    SPF
    SPF record with ~all: other senders soft-fail
    Checked
    2026-11-07 08:40 UTC

    Suggest a correction

  38. xmagnetic.vip US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    xmagnetic.vip
    First seen
    2026-11-08 02:16 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-07 23:57 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-11-08 01:14 UTC to 2027-02-06 01:14 UTC
    Logged 2026-11-08 02:12 UTC in Let's Encrypt Sycamore2027h1, entry 1,033,491,185
    SHA-256 490290c75da0d06444a531a377abc21e9c4f2c77046e4c21f7ee6f87e9a5cc9f
    Public key SHA-256 871b5bc9460ba56d69fd9675796ff598fdb0f9d9c543e1b663c6cfeb6418db60
    Addresses
    104.21.40.215 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.188.100 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.40.215, 172.67.188.100): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    xmagnetic.vip
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 02:19 UTC

    Suggest a correction

  39. 7ivb6.me US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by NPA 165 (information services)MX absentSPF missingDMARC missingRegistered 2 mo ago
    DetailsHide
    Hostname
    7ivb6.me
    First seen
    2026-11-08 02:11 UTC
    Listing
    NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 01:35 UTC
    Listed
    NPA 165
    1. Observed in the NPA 165 feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-11-08 01:09 UTC to 2027-02-06 01:09 UTC
    Logged 2026-11-08 02:08 UTC in Geomys Tuscolo2027h1, entry 522,088,030
    SHA-256 29a2199f0d24b15d27800db3b8c18dc8dc5efd667bd3038ec9247815d1ffa5c0
    Public key SHA-256 e82150f3a580d2bbfdb2de2d4caeadae727df88af7803c579aef8fc9cfcb96ba
    Addresses
    104.21.46.95 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.137.85 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.46.95, 172.67.137.85): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    7ivb6.me
    Registered
    2026-09-09 · NameSilo, LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 03:08 UTC

    Suggest a correction

  40. adobe-illustrator.torrentmac.net US · AS13335 · Cloudflare, Inc.4 addresses
    ReportedCloudflareUnder torrentmac.net, reported by PhishDestroyMX absentSPF -allDMARC rejectRegistered 8 y ago
    DetailsHide
    Hostname
    adobe-illustrator.torrentmac.net
    First seen
    2026-11-08 02:11 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-07 23:56 UTC
    Reported
    PhishDestroy, listing torrentmac.net and the names under it
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR2
    Valid 2026-11-08 01:10 UTC to 2027-02-06 01:10 UTC
    Logged 2026-11-08 02:08 UTC in Google ParcelYard2027h1, entry 669,963,209
    SHA-256 74fc66c02ef594b47ed7945d8c3fdfce9f67481fba8a1eae98afdc71fa817bc2
    Public key SHA-256 b386452539b9e01a3bd83c6591b1a071cceac10d59fda3e1615a0252cc76bfd1
    PhishDestroy
    Addresses
    104.21.57.62 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.189.93 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3034::6815:393e
    2606:4700:3037::ac43:bd5d
    Cloudflare
    Cloudflare (104.21.57.62, 172.67.189.93): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    torrentmac.net
    Registered
    2018-11-23 · NameCheap, Inc.
    MX
    Publishes no mail exchanger
    SPF
    SPF record with -all: other senders fail
    DMARC
    DMARC policy p=reject
    Checked
    2026-11-07 07:24 UTC

    Suggest a correction

  41. capture-one-pro.torrentmac.net US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareUnder torrentmac.net, reported by PhishDestroyMX absentSPF -allDMARC rejectRegistered 8 y ago
    DetailsHide
    Hostname
    capture-one-pro.torrentmac.net
    First seen
    2026-11-08 02:11 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-07 23:56 UTC
    Reported
    PhishDestroy, listing torrentmac.net and the names under it
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR2 · precertificate
    Valid 2026-11-08 01:11 UTC to 2027-02-06 01:11 UTC
    Logged 2026-11-08 02:09 UTC in DigiCert Wyvern2027h1, entry 448,400,686
    SHA-256 cfab8759f7cc748ba39482147137c05d169a6e34051f59a489f3f7ab845a55dd
    Public key SHA-256 d8fefacbd56285640de32ae60f1ab48c78cd7f353012b88f7ca723974b00a0a1
    PhishDestroy
    Addresses
    104.21.57.62 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.189.93 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.57.62, 172.67.189.93): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    torrentmac.net
    Registered
    2018-11-23 · NameCheap, Inc.
    MX
    Publishes no mail exchanger
    SPF
    SPF record with -all: other senders fail
    DMARC
    DMARC policy p=reject
    Checked
    2026-11-07 07:24 UTC

    Suggest a correction

  42. dehancer-pro.torrentmac.net US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareUnder torrentmac.net, reported by PhishDestroyMX absentSPF -allDMARC rejectRegistered 8 y ago
    DetailsHide
    Hostname
    dehancer-pro.torrentmac.net
    First seen
    2026-11-08 02:11 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-07 23:56 UTC
    Reported
    PhishDestroy, listing torrentmac.net and the names under it
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR1
    Valid 2026-11-08 01:07 UTC to 2027-02-06 01:07 UTC
    Logged 2026-11-08 02:06 UTC in Google PlumbersArms2027h1, entry 670,259,197
    SHA-256 3c8e8ea8feacd029244d6db9c94342fa6b7e77940159886211063b2f1f630647
    Public key SHA-256 4560d7627a226de717cbd8f6e709a97c1583610ecc056520e2bd96f76d25d4aa
    PhishDestroy
    Addresses
    104.21.57.62 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.189.93 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.57.62, 172.67.189.93): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    torrentmac.net
    Registered
    2018-11-23 · NameCheap, Inc.
    MX
    Publishes no mail exchanger
    SPF
    SPF record with -all: other senders fail
    DMARC
    DMARC policy p=reject
    Checked
    2026-11-07 07:24 UTC

    Suggest a correction

  43. disk-drill.torrentmac.net US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareUnder torrentmac.net, reported by PhishDestroyMX absentSPF -allDMARC rejectRegistered 8 y ago
    DetailsHide
    Hostname
    disk-drill.torrentmac.net
    First seen
    2026-11-08 02:11 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-07 23:56 UTC
    Reported
    PhishDestroy, listing torrentmac.net and the names under it
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR2 · precertificate
    Valid 2026-11-08 01:08 UTC to 2027-02-06 01:08 UTC
    Logged 2026-11-08 02:06 UTC in DigiCert Wyvern2027h1, entry 448,383,486
    SHA-256 610df858c356e649e36a8246059b97cddbaf8d0d9695fcae1f0c7acb823b0578
    Public key SHA-256 14092630e443a9e5cc77c308c727b0df55af035c9249b6588f0ddc5f54bce678
    PhishDestroy
    Addresses
    104.21.57.62 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.189.93 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.57.62, 172.67.189.93): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    torrentmac.net
    Registered
    2018-11-23 · NameCheap, Inc.
    MX
    Publishes no mail exchanger
    SPF
    SPF record with -all: other senders fail
    DMARC
    DMARC policy p=reject
    Checked
    2026-11-07 07:24 UTC

    Suggest a correction

  44. graphisoft.torrentmac.net US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareUnder torrentmac.net, reported by PhishDestroyMX absentSPF -allDMARC rejectRegistered 8 y ago
    DetailsHide
    Hostname
    graphisoft.torrentmac.net
    First seen
    2026-11-08 02:11 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-07 23:56 UTC
    Reported
    PhishDestroy, listing torrentmac.net and the names under it
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR2 · precertificate
    Valid 2026-11-08 01:10 UTC to 2027-02-06 01:10 UTC
    Logged 2026-11-08 02:09 UTC in Let's Encrypt Sycamore2027h1, entry 1,033,415,128
    SHA-256 083c296471b25eaefeb0cfb381b9bb60f731d851f6e77a7ac03c89813f3807e8
    Public key SHA-256 49d1ec283596fe7b630de521548729d388e899724ebdafb60dd5c1f265513bbd
    PhishDestroy
    Addresses
    104.21.57.62 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.189.93 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.57.62, 172.67.189.93): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    torrentmac.net
    Registered
    2018-11-23 · NameCheap, Inc.
    MX
    Publishes no mail exchanger
    SPF
    SPF record with -all: other senders fail
    DMARC
    DMARC policy p=reject
    Checked
    2026-11-07 07:24 UTC

    Suggest a correction

  45. native-instruments.torrentmac.net US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareUnder torrentmac.net, reported by PhishDestroyMX absentSPF -allDMARC rejectRegistered 8 y ago
    DetailsHide
    Hostname
    native-instruments.torrentmac.net
    First seen
    2026-11-08 02:11 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-07 23:56 UTC
    Reported
    PhishDestroy, listing torrentmac.net and the names under it
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR2
    Valid 2026-11-08 01:11 UTC to 2027-02-06 01:11 UTC
    Logged 2026-11-08 02:10 UTC in Google PlumbersArms2027h1, entry 670,301,050
    SHA-256 d64f1add00a3df143ff0ee15e3c415070df185254c2218aee3b6630d3fbfb764
    Public key SHA-256 c6a551461ee9b666287aeb5806da81a6a07d8c615790c06b2cb3ac9762de1eb6
    PhishDestroy
    Addresses
    104.21.57.62 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.189.93 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.57.62, 172.67.189.93): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    torrentmac.net
    Registered
    2018-11-23 · NameCheap, Inc.
    MX
    Publishes no mail exchanger
    SPF
    SPF record with -all: other senders fail
    DMARC
    DMARC policy p=reject
    Checked
    2026-11-07 07:24 UTC

    Suggest a correction

  46. neural-dsp-archetype.torrentmac.net US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareUnder torrentmac.net, reported by PhishDestroyMX absentSPF -allDMARC rejectRegistered 8 y ago
    DetailsHide
    Hostname
    neural-dsp-archetype.torrentmac.net
    First seen
    2026-11-08 02:11 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-07 23:56 UTC
    Reported
    PhishDestroy, listing torrentmac.net and the names under it
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR1 · precertificate
    Valid 2026-11-08 01:06 UTC to 2027-02-06 01:06 UTC
    Logged 2026-11-08 02:05 UTC in DigiCert Sphinx2027h1, entry 396,541,493
    SHA-256 506074065f7fbc6c4fce9786b976173cf4b6774bcb6e3773c4631ad19e219fee
    Public key SHA-256 1fac714662337c4de7dec2305b45cb8bc9b35cd908c31c9f45b30bc16624d0d6
    PhishDestroy
    Addresses
    104.21.57.62 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.189.93 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.57.62, 172.67.189.93): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    torrentmac.net
    Registered
    2018-11-23 · NameCheap, Inc.
    MX
    Publishes no mail exchanger
    SPF
    SPF record with -all: other senders fail
    DMARC
    DMARC policy p=reject
    Checked
    2026-11-07 07:24 UTC

    Suggest a correction

  47. plugin-alliance-brainworx.torrentmac.net US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareUnder torrentmac.net, reported by PhishDestroyMX absentSPF -allDMARC rejectRegistered 8 y ago
    DetailsHide
    Hostname
    plugin-alliance-brainworx.torrentmac.net
    First seen
    2026-11-08 02:11 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-07 23:56 UTC
    Reported
    PhishDestroy, listing torrentmac.net and the names under it
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR2
    Valid 2026-11-08 01:08 UTC to 2027-02-06 01:08 UTC
    Logged 2026-11-08 02:07 UTC in Google ParcelYard2027h1, entry 669,947,350
    SHA-256 53fef533455cc72407e7e32004f2ec21d74c606e165d4e475f12a8779f40f2e1
    Public key SHA-256 a1459f89dd6e94a53570e80d33e7a149e2bbde4c8878410e63ff2570b11f1ba2
    PhishDestroy
    Addresses
    104.21.57.62 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.189.93 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.57.62, 172.67.189.93): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    torrentmac.net
    Registered
    2018-11-23 · NameCheap, Inc.
    MX
    Publishes no mail exchanger
    SPF
    SPF record with -all: other senders fail
    DMARC
    DMARC policy p=reject
    Checked
    2026-11-07 07:24 UTC

    Suggest a correction

  48. spectrasonics-omnisphere.torrentmac.net US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareUnder torrentmac.net, reported by PhishDestroyMX absentSPF -allDMARC rejectRegistered 8 y ago
    DetailsHide
    Hostname
    spectrasonics-omnisphere.torrentmac.net
    First seen
    2026-11-08 02:11 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-07 23:56 UTC
    Reported
    PhishDestroy, listing torrentmac.net and the names under it
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR1 · precertificate
    Valid 2026-11-08 01:09 UTC to 2027-02-06 01:09 UTC
    Logged 2026-11-08 02:07 UTC in IPng Networks Halloumi2027h1, entry 406,064,175
    SHA-256 dfa350bf53ad8112e4a24dac0b84bfbc7732204f180334a54b3b111f889a1c51
    Public key SHA-256 051c5ad9d8e0476a54ac5320f8217f0ff593c33910a63a0d21a8fea749d3059c
    PhishDestroy
    Addresses
    104.21.57.62 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.189.93 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.57.62, 172.67.189.93): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    torrentmac.net
    Registered
    2018-11-23 · NameCheap, Inc.
    MX
    Publishes no mail exchanger
    SPF
    SPF record with -all: other senders fail
    DMARC
    DMARC policy p=reject
    Checked
    2026-11-07 07:24 UTC

    Suggest a correction

  49. twixtor-pro.torrentmac.net US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareUnder torrentmac.net, reported by PhishDestroyMX absentSPF -allDMARC rejectRegistered 8 y ago
    DetailsHide
    Hostname
    twixtor-pro.torrentmac.net
    First seen
    2026-11-08 02:11 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-07 23:56 UTC
    Reported
    PhishDestroy, listing torrentmac.net and the names under it
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR2
    Valid 2026-11-08 01:09 UTC to 2027-02-06 01:09 UTC
    Logged 2026-11-08 02:08 UTC in Google ParcelYard2027h1, entry 669,957,232
    SHA-256 65641ce709abb9dcc7d6c11fcfd6b68bfe4906540d55d35fb8c3461bde0c08ef
    Public key SHA-256 1ed1e4841cf9db3e39db6ba09734a34c9b05b5f6b0605fd19990e0212251c77a
    PhishDestroy
    Addresses
    104.21.57.62 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.189.93 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.57.62, 172.67.189.93): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    torrentmac.net
    Registered
    2018-11-23 · NameCheap, Inc.
    MX
    Publishes no mail exchanger
    SPF
    SPF record with -all: other senders fail
    DMARC
    DMARC policy p=reject
    Checked
    2026-11-07 07:24 UTC

    Suggest a correction

  50. whiteukina.com US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 8 mo ago
    DetailsHide
    Hostname
    whiteukina.com
    First seen
    2026-11-08 02:11 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-07 23:56 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-08 01:10 UTC to 2027-02-06 01:10 UTC
    Logged 2026-11-08 02:09 UTC in Google PlumbersArms2027h1, entry 670,293,142
    SHA-256 38308e4634cc7f28eeffee170c4cc269139017eb2f99142fbdc62021b2693c0d
    Public key SHA-256 aebda6bc2362cf6cfae237c3c524116096cc752fa303d9305b03aa4f20e3da0a
    PhishDestroy
    Addresses
    104.21.86.144 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.220.148 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.86.144, 172.67.220.148): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    whiteukina.com
    Registered
    2026-03-16 · NameCheap, Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 02:14 UTC

    Suggest a correction

  51. www.dex-app.co.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareUnder dex-app.co.com, listed by MetaMask
    DetailsHide
    Hostname
    www.dex-app.co.com
    First seen
    2026-11-08 02:11 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-07 23:57 UTC
    Listed
    MetaMask, listing dex-app.co.com and the names under it
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by Cloudflare TLS Issuing ECC CA 4 · precertificate
    Valid 2026-11-08 01:59 UTC to 2027-02-06 02:07 UTC
    Logged 2026-11-08 02:09 UTC in DigiCert Wyvern2027h1, entry 448,397,203
    SHA-256 6341ebc9fffde8391e4f947e5caf1927ce8123387fc8cdb3ef010e9732f410c1
    Public key SHA-256 adf2a24061e7381b89c9aeae0d362b9246e6ab6dd3645eb8c139564cfa4411b4
    Addresses
    104.21.2.175 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.129.130 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.2.175, 172.67.129.130): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.

    Suggest a correction

  52. aiplayersdash.com US · AS13335 · Cloudflare, Inc.
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    aiplayersdash.com
    First seen
    2026-11-08 02:05 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-07 23:56 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-08 01:05 UTC to 2027-02-06 02:05 UTC
    Logged 2026-11-08 02:05 UTC in Geomys Tuscolo2027h1, entry 522,064,539
    SHA-256 6a91ebaa6aaceef017ea725d4c342b6e7039bfe352a60e3074ad4dc8417f1e04
    Public key SHA-256 995d4fd7489113a3dbc53f471af0bb5c4c63cea7a9d98df58fbbbeb179ec7118
    PhishDestroy
    Addresses
    104.18.26.246 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.18.26.246): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    aiplayersdash.com
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 02:09 UTC

    Suggest a correction

  53. football-manager.torrentmac.net US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareUnder torrentmac.net, reported by PhishDestroyMX absentSPF -allDMARC rejectRegistered 8 y ago
    DetailsHide
    Hostname
    football-manager.torrentmac.net
    First seen
    2026-11-08 02:05 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-07 23:56 UTC
    Reported
    PhishDestroy, listing torrentmac.net and the names under it
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR1
    Valid 2026-11-08 01:04 UTC to 2027-02-06 01:04 UTC
    Logged 2026-11-08 02:03 UTC in Let's Encrypt Sycamore2027h1, entry 1,033,300,922
    SHA-256 77bc7fd67037cc17ad736f166b33d20c1df492dc9cccc592d7bd48390e66d9c3
    Public key SHA-256 2a2e4f92299d2f9998ba456e0a27cae8c48d721b80c26be4ab5a7f1fb1a9c382
    PhishDestroy
    Addresses
    104.21.57.62 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.189.93 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.57.62, 172.67.189.93): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    torrentmac.net
    Registered
    2018-11-23 · NameCheap, Inc.
    MX
    Publishes no mail exchanger
    SPF
    SPF record with -all: other senders fail
    DMARC
    DMARC policy p=reject
    Checked
    2026-11-07 07:24 UTC

    Suggest a correction

  54. imazing.torrentmac.net US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareUnder torrentmac.net, reported by PhishDestroyMX absentSPF -allDMARC rejectRegistered 8 y ago
    DetailsHide
    Hostname
    imazing.torrentmac.net
    First seen
    2026-11-08 02:05 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-07 23:56 UTC
    Reported
    PhishDestroy, listing torrentmac.net and the names under it
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR2 · precertificate
    Valid 2026-11-08 01:06 UTC to 2027-02-06 01:06 UTC
    Logged 2026-11-08 02:04 UTC in Geomys Tuscolo2027h1, entry 522,062,683
    SHA-256 30d040692b149a6718042d92695e3b36ebe90f2db08eb350a8573037eba59d36
    Public key SHA-256 77a2de0fa4fd4f3bc2777372f8e3eb017fcb8333c839e69e281308bb5364c11c
    PhishDestroy
    Addresses
    104.21.57.62 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.189.93 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.57.62, 172.67.189.93): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    torrentmac.net
    Registered
    2018-11-23 · NameCheap, Inc.
    MX
    Publishes no mail exchanger
    SPF
    SPF record with -all: other senders fail
    DMARC
    DMARC policy p=reject
    Checked
    2026-11-07 07:24 UTC

    Suggest a correction

  55. pdf-expert.torrentmac.net US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareUnder torrentmac.net, reported by PhishDestroyMX absentSPF -allDMARC rejectRegistered 8 y ago
    DetailsHide
    Hostname
    pdf-expert.torrentmac.net
    First seen
    2026-11-08 02:05 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-07 23:56 UTC
    Reported
    PhishDestroy, listing torrentmac.net and the names under it
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR2
    Valid 2026-11-08 01:05 UTC to 2027-02-06 01:05 UTC
    Logged 2026-11-08 02:04 UTC in Google PlumbersArms2027h1, entry 670,243,664
    SHA-256 66bd5e430f31399b8d73505741f51f57e5d463ee2badfc26e54f1bcb7a468c1c
    Public key SHA-256 ac6a136e729e0ef6d55839fd8c29a28ddbee1030defd97fa354bc4943198cab0
    PhishDestroy
    Addresses
    104.21.57.62 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.189.93 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.57.62, 172.67.189.93): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    torrentmac.net
    Registered
    2018-11-23 · NameCheap, Inc.
    MX
    Publishes no mail exchanger
    SPF
    SPF record with -all: other senders fail
    DMARC
    DMARC policy p=reject
    Checked
    2026-11-07 07:24 UTC

    Suggest a correction

  56. wondershare-filmora.torrentmac.net US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareUnder torrentmac.net, reported by PhishDestroyMX absentSPF -allDMARC rejectRegistered 8 y ago
    DetailsHide
    Hostname
    wondershare-filmora.torrentmac.net
    First seen
    2026-11-08 02:05 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-07 23:56 UTC
    Reported
    PhishDestroy, listing torrentmac.net and the names under it
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR1
    Valid 2026-11-08 01:05 UTC to 2027-02-06 01:05 UTC
    Logged 2026-11-08 02:03 UTC in Google ParcelYard2027h1, entry 669,917,060
    SHA-256 1286f1a307cedbd69a783af6299d939ac7451997b43418715b3aef6db4d2482e
    Public key SHA-256 bfd506dbd56ea8a478d885304f79cc38a5a66ed2ffe6318fcf7de60829701bc9
    PhishDestroy
    Addresses
    104.21.57.62 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.189.93 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.57.62, 172.67.189.93): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    torrentmac.net
    Registered
    2018-11-23 · NameCheap, Inc.
    MX
    Publishes no mail exchanger
    SPF
    SPF record with -all: other senders fail
    DMARC
    DMARC policy p=reject
    Checked
    2026-11-07 07:24 UTC

    Suggest a correction

  57. clwzszz.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    clwzszz.com
    First seen
    2026-11-08 02:00 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-07 23:57 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-11-08 01:00 UTC to 2027-02-06 01:00 UTC
    Logged 2026-11-08 01:59 UTC in IPng Networks Gouda2027h1, entry 349,164,056
    SHA-256 01edd671fd6365d7d1c64fffb986245ad737714938dd30e05f3d0324911567a9
    Public key SHA-256 e3409f654e25d79bd6aeffcb1b7bf9ffae2a389e4ab145b098b5b450b4be5230
    Addresses
    104.21.80.123 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.181.13 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.80.123, 172.67.181.13): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    clwzszz.com
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 02:04 UTC

    Suggest a correction

  58. one-drop.bond US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 8 mo ago
    DetailsHide
    Hostname
    one-drop.bond
    First seen
    2026-11-08 02:00 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-07 23:56 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-11-08 00:58 UTC to 2027-02-06 00:58 UTC
    Logged 2026-11-08 01:56 UTC in Geomys Tuscolo2027h1, entry 521,995,450
    SHA-256 064f4795263dae0207ef2cb6c9abf2da1dfa34c6d3a063da68e89689938b3e0c
    Public key SHA-256 b30d5b668b6d91f9d9f874c9096a9118264d11484f87ba646c6ed9bc1ba1cd31
    PhishDestroy
    Addresses
    104.21.20.176 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.193.69 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.20.176, 172.67.193.69): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    one-drop.bond
    Registered
    2026-03-16 · Global Domain Group LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 03:08 UTC

    Suggest a correction

  59. www.roobet.sg US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareUnder roobet.sg, listed by MetaMaskMX absentSPF missingDMARC missingRegistered 21 mo ago
    DetailsHide
    Hostname
    www.roobet.sg
    First seen
    2026-11-08 02:00 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-07 23:57 UTC
    Listed
    MetaMask, listing roobet.sg and the names under it
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR1 · precertificate
    Valid 2026-11-08 00:59 UTC to 2027-02-06 00:59 UTC
    Logged 2026-11-08 01:58 UTC in IPng Networks Gouda2027h1, entry 349,155,391
    SHA-256 8a69d3f4b7cf59459301751814a61f87ed475f07f5386691978480d8ced6a11e
    Public key SHA-256 0319878742ca171798cc9b1db4eaa1f179000e3dede72ffe9daf082fb8cbc001
    Addresses
    104.21.25.213 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.134.177 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.25.213, 172.67.134.177): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    roobet.sg
    Registered
    2025-02-20 · Key-Systems GmbH
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-07 08:06 UTC

    Suggest a correction

  60. www.swapking.site US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareUnder swapking.site, reported by PhishDestroyMX absentSPF missingDMARC missingRegistered 48 d ago
    DetailsHide
    Hostname
    www.swapking.site
    First seen
    2026-11-08 02:00 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-07 23:56 UTC
    Reported
    PhishDestroy, listing swapking.site and the names under it
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WR1 · precertificate
    Valid 2026-11-08 00:59 UTC to 2027-02-06 01:51 UTC
    Logged 2026-11-08 01:59 UTC in Google ParcelYard2027h1, entry 669,877,724
    SHA-256 e9705d69a178c38e35f0fd918d80d7d316a652d522f7a310da5adc5b8493f59e
    Public key SHA-256 e123b1ca4a295f4ba9b61b28ce3c561118dd08fb0da2f9694498587d0378318c
    PhishDestroy
    Addresses
    104.21.6.149 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.134.231 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.6.149, 172.67.134.231): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    swapking.site
    Registered
    2026-09-21 · NameSilo, LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 03:08 UTC

    Suggest a correction

  61. ponsfamily.sbs US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 2 mo ago
    DetailsHide
    Hostname
    ponsfamily.sbs
    First seen
    2026-11-08 01:56 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-07 23:57 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-08 00:53 UTC to 2027-02-06 01:52 UTC
    Logged 2026-11-08 01:53 UTC in Let's Encrypt Willow2027h1, entry 995,373,559
    SHA-256 73ac7d7e287c9dac57da9ebb799684d6f868c8e0fa5117b7c937d81d86dc2b3b
    Public key SHA-256 e087e6a675a33e069cb1a8b1064ec8e5d0fa511e13549a3cdbd359144af347ac
    Addresses
    104.21.77.43 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.204.119 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.77.43, 172.67.204.119): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    ponsfamily.sbs
    Registered
    2026-09-09 · Dynadot Inc
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 03:08 UTC

    Suggest a correction

  62. xenvorpulse.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    xenvorpulse.com
    First seen
    2026-11-08 01:56 UTC
    Listing
    CERT Polska listed it 2026-07-22 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 00:29 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-11-08 00:53 UTC to 2027-02-06 00:53 UTC
    Logged 2026-11-08 01:52 UTC in Let's Encrypt Sycamore2027h1, entry 1,033,057,044
    SHA-256 878f88883660f98939f90de719193251dfdd8d284d2b6e53c5549fa8fbbe9381
    Public key SHA-256 4f37713b64ba1270200d873959ef5d0c569da1a5b08d2aeeccfa75a90cbb154e
    Addresses
    104.21.5.143 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.154.167 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.5.143, 172.67.154.167): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    xenvorpulse.com
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 02:04 UTC

    Suggest a correction

  63. allocations-dphn.xyz US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 2 mo ago
    DetailsHide
    Hostname
    allocations-dphn.xyz
    First seen
    2026-11-08 01:51 UTC
    First published
    2026-11-08 02:01 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-07 23:57 UTC
    DNS
    Resolves · checked 2026-11-08 02:12 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-08 00:51 UTC to 2027-02-06 00:51 UTC
    Logged 2026-11-08 01:50 UTC in Google ParcelYard2027h1, entry 669,777,859
    SHA-256 7ce8a8014923eb1de2376bfa4dbc64231dff45941a3921828ed176227223b898
    Public key SHA-256 335c2b5b4321a0e817cc6d7745aa185d8befadd4e7d5586f653da5e55f0ad748
    Addresses
    104.21.60.203 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.201.71 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.60.203, 172.67.201.71): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    allocations-dphn.xyz
    Registered
    2026-09-09 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 02:00 UTC

    Suggest a correction

  64. rewards-chainoperaai.com US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 10 mo ago
    DetailsHide
    Hostname
    rewards-chainoperaai.com
    First seen
    2026-11-08 01:51 UTC
    First published
    2026-11-08 02:01 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-07 23:56 UTC
    DNS
    Resolves · checked 2026-11-08 02:12 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1
    Valid 2026-09-09 22:26 UTC to 2026-12-08 23:26 UTC
    Logged 2026-11-08 01:48 UTC in DigiCert Wyvern2026h2, entry 2,211,255,225
    SHA-256 584dfeba0f3c932aa378f82126ca76d22dfbcd0d31d51a5bbf95abb7b6445a99
    Public key SHA-256 3c8d4571490de735ce1c9f40214d8bd6d06de072188fe0b57c289f6e1b7ce8ce
    PhishDestroy
    Addresses
    104.21.80.162 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.151.120 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.80.162, 172.67.151.120): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    rewards-chainoperaai.com
    Registered
    2026-01-15 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 02:00 UTC

    Suggest a correction

  65. jaosisbwkwknndnkeen.com US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 3 mo ago
    DetailsHide
    Hostname
    jaosisbwkwknndnkeen.com
    First seen
    2026-11-08 01:46 UTC
    First published
    2026-11-08 02:01 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-07 23:56 UTC
    DNS
    Resolves · checked 2026-11-08 02:12 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-08 00:42 UTC to 2027-02-06 01:40 UTC
    Logged 2026-11-08 01:42 UTC in Google ParcelYard2027h1, entry 669,690,224
    SHA-256 7f8a7659852b12139e4f504512198fac5c01cc1d3d4b4a651420481ef2891f48
    Public key SHA-256 2d09ecf2875d1484848500a8726f25c085fb359f349adbc0cef39fbcdd0d6dac
    PhishDestroy
    Addresses
    104.21.18.189 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.183.35 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.18.189, 172.67.183.35): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    jaosisbwkwknndnkeen.com
    Registered
    2026-08-16 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 01:47 UTC

    Suggest a correction

  66. teveluxia.work US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    teveluxia.work
    First seen
    2026-11-08 01:46 UTC
    First published
    2026-11-08 02:01 UTC
    Listing
    CERT Polska listed it 2026-07-22 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 00:29 UTC
    DNS
    Resolves · checked 2026-11-08 02:12 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-11-08 00:47 UTC to 2027-02-06 00:47 UTC
    Logged 2026-11-08 01:45 UTC in Google PlumbersArms2027h1, entry 670,050,574
    SHA-256 56f4f73a307472b70586949d48c39dd03ad9b3410cafc6643db3f66a4c3bf5d2
    Public key SHA-256 ac512b173f2270c333a41e3e424614e2e08b2f957fe574fae5683457899155cd
    Addresses
    104.21.56.53 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.178.32 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.56.53, 172.67.178.32): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    teveluxia.work
    Registered
    2026-05-14 · Chengdu West Dimension Digital Technology Co., Ltd.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 02:00 UTC

    Suggest a correction

  67. atlanticworld.net US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 2 mo ago
    DetailsHide
    Hostname
    atlanticworld.net
    First seen
    2026-11-08 01:41 UTC
    First published
    2026-11-08 02:01 UTC
    Listing
    CERT Polska listed it 2026-09-11 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 00:29 UTC
    DNS
    Resolves · checked 2026-11-08 02:12 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1
    Valid 2026-11-08 00:38 UTC to 2027-02-06 01:36 UTC
    Logged 2026-11-08 01:39 UTC in Let's Encrypt Sycamore2027h1, entry 1,032,797,676
    SHA-256 6aaf9382797d52d8cb70f5f2eb4dce23043384e07f6d2c26fc23b28d1e041ad9
    Public key SHA-256 51d4ce023f4b9614615ef8505f5654531f4054d657fb931eba4438b2d5a9d01c
    Addresses
    104.21.59.64 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.216.250 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.59.64, 172.67.216.250): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    atlanticworld.net
    Registered
    2026-09-09 · Dynadot Inc
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 02:00 UTC

    Suggest a correction

  68. aavee.digital US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    aavee.digital
    First seen
    2026-11-08 01:36 UTC
    First published
    2026-11-08 02:01 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-07 23:57 UTC
    DNS
    Resolves · checked 2026-11-08 02:12 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-11-08 00:37 UTC to 2027-02-06 00:37 UTC
    Logged 2026-11-08 01:35 UTC in Google PlumbersArms2027h1, entry 669,952,722
    SHA-256 5e6b018dbb91385a01db347f4b7cd9122b5465aa96256ee8d43231ac821f0009
    Public key SHA-256 0698bb29e83739e01fcea7c6a93a04a7d0a430b3748d0ae1ea7c8de467bd6e38
    Addresses
    104.21.84.249 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.199.229 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.84.249, 172.67.199.229): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    aavee.digital
    Registered
    2026-05-14 · PDR Ltd. d/b/a PublicDomainRegistry.com
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 02:00 UTC

    Suggest a correction

  69. agents.web3-ud.cc US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareUnder web3-ud.cc, listed by MetaMaskMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    agents.web3-ud.cc
    First seen
    2026-11-08 01:36 UTC
    First published
    2026-11-08 02:01 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-07 23:57 UTC
    DNS
    Resolves · checked 2026-11-08 02:12 UTC
    Listed
    MetaMask, listing web3-ud.cc and the names under it
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by LiteSSL RSA CA 2025 · precertificate
    Valid 2026-11-08 00:00 UTC to 2027-02-05 23:59 UTC
    Logged 2026-11-08 01:32 UTC in Google Argon2027h1, entry 919,196,321
    SHA-256 da0f0a863fe3445a31edba9591652bfa70f53a16b4d99e6742e241a00533f60d
    Public key SHA-256 9648c45ab8346b95c933363cf38245694c8b6725423b430cdf131057af722189
    Addresses
    104.21.16.161 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.214.188 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.16.161, 172.67.214.188): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    web3-ud.cc
    Registered
    2026-05-09 · Gname.com Pte. Ltd.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-07 06:43 UTC

    Suggest a correction

  70. api.web3-ud.cc US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareUnder web3-ud.cc, listed by MetaMaskMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    api.web3-ud.cc
    First seen
    2026-11-08 01:36 UTC
    First published
    2026-11-08 02:01 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-07 23:57 UTC
    DNS
    Resolves · checked 2026-11-08 02:12 UTC
    Listed
    MetaMask, listing web3-ud.cc and the names under it
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by LiteSSL RSA CA 2025 · precertificate
    Valid 2026-11-08 00:00 UTC to 2027-02-05 23:59 UTC
    Logged 2026-11-08 01:34 UTC in DigiCert Wyvern2027h1, entry 448,151,093
    SHA-256 90c3b0c2f1eaee62889ce456e575e7f910a6ba31cd7316ad96826cf9fdada693
    Public key SHA-256 b16cc11321c3f0c0630e4a11088e8bfd1b5507452a7992cbad8addcfce09b6cc
    Addresses
    104.21.16.161 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.214.188 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.16.161, 172.67.214.188): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    web3-ud.cc
    Registered
    2026-05-09 · Gname.com Pte. Ltd.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-07 06:43 UTC

    Suggest a correction

  71. bozei.us.cc US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMask
    DetailsHide
    Hostname
    bozei.us.cc
    First seen
    2026-11-08 01:36 UTC
    First published
    2026-11-08 02:01 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-07 23:57 UTC
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-07 23:56 UTC
    DNS
    Resolves · checked 2026-11-08 02:12 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-08 00:37 UTC to 2027-02-06 00:37 UTC
    Logged 2026-11-08 01:35 UTC in Google PlumbersArms2027h1, entry 669,954,494
    SHA-256 42dee669d3705763327d650b9cd55a9c9e1ce55ea8ac15730e306516e0fca53f
    Public key SHA-256 6de7505743c056c9339cc0d80377ffa52035be7a6991cc6f4b554a135f6467da
    Addresses
    104.21.55.6 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.170.6 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.55.6, 172.67.170.6): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.

    Suggest a correction

  72. orbitrelaydata.sbs US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 2 mo ago
    DetailsHide
    Hostname
    orbitrelaydata.sbs
    First seen
    2026-11-08 01:36 UTC
    First published
    2026-11-08 02:01 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-07 23:57 UTC
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-07 23:56 UTC
    DNS
    Resolves · checked 2026-11-08 02:12 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-11-08 00:37 UTC to 2027-02-06 00:37 UTC
    Logged 2026-11-08 01:35 UTC in Google ParcelYard2027h1, entry 669,630,112
    SHA-256 46be0953ff5d6bd1c4a4f882e780ab17e5d0084f9f2e5e63a34e8d37f308f2b5
    Public key SHA-256 bfb198ef04edf56b9b8ea0cb46127d36d5b1826239ca69f9f4fdcedb8ace0ad7
    Addresses
    104.21.25.15 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.221.144 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.25.15, 172.67.221.144): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    orbitrelaydata.sbs
    Registered
    2026-09-09 · NameSilo, LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 02:00 UTC

    Suggest a correction

  73. server.web3-ud.cc US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareUnder web3-ud.cc, listed by MetaMaskMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    server.web3-ud.cc
    First seen
    2026-11-08 01:36 UTC
    First published
    2026-11-08 02:01 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-07 23:57 UTC
    DNS
    Resolves · checked 2026-11-08 02:12 UTC
    Listed
    MetaMask, listing web3-ud.cc and the names under it
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by LiteSSL RSA CA 2025 · precertificate
    Valid 2026-11-08 00:00 UTC to 2027-02-05 23:59 UTC
    Logged 2026-11-08 01:32 UTC in Google Argon2027h1, entry 919,192,111
    SHA-256 fdcdf46c301e4fbdc0bee8bd16d7b80d14892a3efe7fa3fec39a20ab2bce3277
    Public key SHA-256 502da0994e8a47734bc2de52d544dc73029687be14b989b76476b18941f831c8
    Addresses
    104.21.16.161 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.214.188 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.16.161, 172.67.214.188): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    web3-ud.cc
    Registered
    2026-05-09 · Gname.com Pte. Ltd.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-07 06:43 UTC

    Suggest a correction

  74. sp25ct7-erlmok-biz-vemri-darsok.pages.dev US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishTank
    DetailsHide
    Hostname
    sp25ct7-erlmok-biz-vemri-darsok.pages.dev
    First seen
    2026-11-08 01:36 UTC
    First published
    2026-11-08 02:01 UTC
    Listing
    PhishTank: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-08 02:36 UTC
    DNS
    Resolves · checked 2026-11-08 02:12 UTC
    Reported
    PhishTank
    1. Observed in the PhishTank feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-08 00:35 UTC to 2027-02-06 01:33 UTC
    Logged 2026-11-08 01:35 UTC in Google PlumbersArms2027h1, entry 669,947,922
    SHA-256 866e8bb4b24f10b5740e7a64f97bb0b9c4a4c47f906fb6957ecc9514b43d0771
    Public key SHA-256 488f768c6af9d6b741084e3a0e65061331926122ae5e9cb89c4cc2cda81ef26d
    PhishTank
    PhishTank report #9481854
    Addresses
    172.66.44.174 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.66.47.82 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (172.66.44.174, 172.66.47.82): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.

    Suggest a correction

  75. www.kennyshairdo.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareUnder kennyshairdo.com, listed by CERT PolskaMX presentSPF ~allDMARC policy noneRegistered 7 y ago
    DetailsHide
    Hostname
    www.kennyshairdo.com
    First seen
    2026-11-08 01:36 UTC
    First published
    2026-11-08 02:01 UTC
    Listing
    CERT Polska listed it 2026-07-25 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 00:29 UTC
    DNS
    Resolves · checked 2026-11-08 02:12 UTC
    Listed
    CERT Polska, listing kennyshairdo.com and the names under it
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR2 · precertificate
    Valid 2026-11-08 00:33 UTC to 2027-02-06 00:33 UTC
    Logged 2026-11-08 01:32 UTC in Geomys Tuscolo2027h1, entry 521,777,231
    SHA-256 ad45dc39e50722249a6bba1dd5193e70e422cac5f057cc444bd9ff0da5efdee6
    Public key SHA-256 dd424cf2deb914d59969e2ec27cf47fca47468dd3b87a4475a1233166840dc9f
    Addresses
    104.21.19.87 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.185.177 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.19.87, 172.67.185.177): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    kennyshairdo.com
    Registered
    2019-10-16 · eNom, LLC
    MX
    Receives mail at _dc-mx.5c2b0a1791a0.kennyshairdo.com
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    DMARC policy p=none: reports only
    Checked
    2026-11-07 08:12 UTC

    Suggest a correction

  76. basexp-worker.pages.dev US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMask
    DetailsHide
    Hostname
    basexp-worker.pages.dev
    First seen
    2026-11-08 01:31 UTC
    First published
    2026-11-08 02:01 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-07 23:57 UTC
    DNS
    Resolves · checked 2026-11-08 02:12 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-11-08 00:32 UTC to 2027-02-06 00:32 UTC
    Logged 2026-11-08 01:30 UTC in IPng Networks Halloumi2027h1, entry 405,791,161
    SHA-256 377020904e7150b310cd4424e0d7150353d42cd41b4a4397297bcf72989efaf6
    Public key SHA-256 bcaa12f8b036596bb6c716f26df68dfeeba653dcc0e5380e33bf81b20fa49bf5
    Addresses
    172.66.44.199 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.66.47.57 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (172.66.44.199, 172.66.47.57): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.

    Suggest a correction

  77. kortlabs.info US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    kortlabs.info
    First seen
    2026-11-08 01:31 UTC
    First published
    2026-11-08 02:01 UTC
    Listing
    CERT Polska listed it 2026-09-09 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 00:29 UTC
    DNS
    Resolves · checked 2026-11-08 02:12 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-08 00:26 UTC to 2027-02-06 01:23 UTC
    Logged 2026-11-08 01:26 UTC in Google ParcelYard2027h1, entry 669,535,213
    SHA-256 2efd41f7d251dd3330855ced08bdd8a662a6b6a944c53a88d5f8759367f65fde
    Public key SHA-256 4735c5153916a1eba0551e95bfd6a8854d54c4aab5dd927a4d7983884fd26b0d
    Addresses
    104.21.15.240 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.208.210 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.15.240, 172.67.208.210): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    kortlabs.info
    Registered
    2026-07-12 · NameCheap, Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 02:00 UTC

    Suggest a correction

  78. tusewin.one US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 10 mo ago
    DetailsHide
    Hostname
    tusewin.one
    First seen
    2026-11-08 01:31 UTC
    First published
    2026-11-08 02:01 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-07 23:56 UTC
    DNS
    Resolves · checked 2026-11-08 02:12 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-08 00:30 UTC to 2027-02-06 01:27 UTC
    Logged 2026-11-08 01:30 UTC in IPng Networks Halloumi2027h1, entry 405,787,775
    SHA-256 0087fa0934c9d08506d0f916a03af72880ab22a8589a1904e4d3ae2ec1a4c4aa
    Public key SHA-256 2fbd83d2a2c6987711b80fda3f31ec99bbed51a813e41801f9ce8de572ac5e87
    PhishDestroy
    Addresses
    104.21.11.218 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.167.74 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.11.218, 172.67.167.74): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    tusewin.one
    Registered
    2026-01-16 · NameSilo, LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 01:32 UTC

    Suggest a correction

  79. astir-deex.pro US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    astir-deex.pro
    First seen
    2026-11-08 01:26 UTC
    First published
    2026-11-08 02:01 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-07 23:57 UTC
    DNS
    Resolves · checked 2026-11-08 02:12 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-08 00:25 UTC to 2027-02-06 00:25 UTC
    Logged 2026-11-08 01:23 UTC in Google PlumbersArms2027h1, entry 669,833,010
    SHA-256 155133f86881cfc8943866668928a483784d6e306a826743f57827edbe00faa7
    Public key SHA-256 c0d87aae4a2039e7adb7cfe16e35df6a0222aa0a4087af66f151e2835ed91927
    Addresses
    104.21.88.116 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.178.102 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.88.116, 172.67.178.102): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    astir-deex.pro
    Registered
    2026-05-14 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 02:00 UTC

    Suggest a correction

  80. tchmypssy.life US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 8 mo ago
    DetailsHide
    Hostname
    tchmypssy.life
    First seen
    2026-11-08 01:26 UTC
    First published
    2026-11-08 02:01 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-07 23:56 UTC
    DNS
    Resolves · checked 2026-11-08 02:12 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-08 00:26 UTC to 2027-02-06 00:26 UTC
    Logged 2026-11-08 01:25 UTC in Google PlumbersArms2027h1, entry 669,851,005
    SHA-256 12f1c3ccbed1cb44d07af4ed00d54bd7b19970c611f6119114c49c000f495ca9
    Public key SHA-256 656963b7b0f952f764fbda26b3b54e1fd48000bf4350c0aaad3a8b2ba0ba6b33
    PhishDestroy
    Addresses
    104.21.2.150 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.129.84 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.2.150, 172.67.129.84): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    tchmypssy.life
    Registered
    2026-03-16 · NameSilo, LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 02:00 UTC

    Suggest a correction

  81. www.gaibfoundation.org US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareUnder gaibfoundation.org, reported by PhishDestroyMX absentSPF missingDMARC missingRegistered 13 mo ago
    DetailsHide
    Hostname
    www.gaibfoundation.org
    First seen
    2026-11-08 01:26 UTC
    First published
    2026-11-08 02:01 UTC
    Listing
    PhishDestroy: observed back in the feed 2026-11-07 · still listed at the last successful feed check 2026-11-07 23:56 UTC · listed 2 times
    Earlier listing periods: 2026-10-25 to 2026-11-02 (8 days)
    DNS
    Resolves · checked 2026-11-08 02:12 UTC
    Reported
    PhishDestroy, listing gaibfoundation.org and the names under it
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR1
    Valid 2026-11-08 00:24 UTC to 2027-02-06 00:24 UTC
    Logged 2026-11-08 01:23 UTC in Google PlumbersArms2027h1, entry 669,826,329
    SHA-256 8c9944e45b2133e70fc7db00355cac9cd807feeaa4bce3f020e7941e920e0858
    Public key SHA-256 b7f3f7cf8b648be1418995c185b595206721de85e9a95b128400dcbb0909cf88
    PhishDestroy
    Addresses
    104.21.53.235 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.219.236 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.53.235, 172.67.219.236): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    gaibfoundation.org
    Registered
    2025-10-10 · Gandi SAS
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 02:00 UTC

    Suggest a correction

  82. md.choweb3.com US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareUnder choweb3.com, reported by PhishDestroyMX presentSPF ~allDMARC policy noneRegistered 8 mo ago
    DetailsHide
    Hostname
    md.choweb3.com
    First seen
    2026-11-08 01:21 UTC
    First published
    2026-11-08 02:01 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-07 23:56 UTC
    DNS
    Resolves · checked 2026-11-08 02:12 UTC
    Reported
    PhishDestroy, listing choweb3.com and the names under it
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WR1 · precertificate
    Valid 2026-11-08 00:15 UTC to 2027-02-06 01:12 UTC
    Logged 2026-11-08 01:15 UTC in Google ParcelYard2027h1, entry 669,424,622
    SHA-256 77187ddd960716c292c5fd7fca30fa30d08a0459c34ffa69b8e9272a794b1591
    Public key SHA-256 69e4bf515b72b8ad63c143a5c1fe81949ccdfb9304c7800799f13e456b06c4c4
    PhishDestroy
    Addresses
    104.21.54.176 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.168.198 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.54.176, 172.67.168.198): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    choweb3.com
    Registered
    2026-03-23 · HOSTINGER operations, UAB
    MX
    Receives mail at mx.zoho.com, mx2.zoho.com, mx3.zoho.com
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    DMARC policy p=none: reports only
    Checked
    2026-11-07 19:13 UTC

    Suggest a correction

  83. nelopra.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by NPA 165 (finance and insurance)MX absentSPF missingDMARC missingRegistered 12 mo ago
    DetailsHide
    Hostname
    nelopra.com
    First seen
    2026-11-08 01:21 UTC
    First published
    2026-11-08 02:01 UTC
    Listing
    NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 01:35 UTC
    DNS
    Resolves · checked 2026-11-08 02:12 UTC
    Listed
    NPA 165
    1. Observed in the NPA 165 feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WR1 · precertificate
    Valid 2026-11-08 00:17 UTC to 2027-02-06 01:16 UTC
    Logged 2026-11-08 01:17 UTC in Google ParcelYard2027h1, entry 669,450,283
    SHA-256 21c131ace1f358d95783e20e6843bd9c1fa8a2e9bf120c8fd209e9aeb88d201b
    Public key SHA-256 a6e713f151c888d6aa94be006dbec235937fef586ec424586710d35970022dda
    Addresses
    104.21.43.214 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.185.232 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.43.214, 172.67.185.232): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    nelopra.com
    Registered
    2025-11-25 · GoDaddy.com, LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 02:00 UTC

    Suggest a correction

  84. cryptomusx.com US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 12 mo ago
    DetailsHide
    Hostname
    cryptomusx.com
    First seen
    2026-11-08 01:16 UTC
    First published
    2026-11-08 02:01 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-07 23:56 UTC
    DNS
    Resolves · checked 2026-11-08 02:12 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-11-08 00:13 UTC to 2027-02-06 00:13 UTC
    Logged 2026-11-08 01:11 UTC in Geomys Tuscolo2027h1, entry 521,594,230
    SHA-256 6422401d26b025a3aee52250c87510f3888b1f4226ba00082750a5e0f3314a2d
    Public key SHA-256 5f002d4400de11ff5c50480c8fe138091e4c7660c0b72ba1c0ad2aed5e0326da
    PhishDestroy
    Addresses
    104.21.90.186 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.203.212 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.90.186, 172.67.203.212): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    cryptomusx.com
    Registered
    2025-11-17 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 02:00 UTC

    Suggest a correction

  85. hdstreamzs.com.pk US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX presentSPF ~allDMARC missing
    DetailsHide
    Hostname
    hdstreamzs.com.pk
    First seen
    2026-11-08 01:16 UTC
    First published
    2026-11-08 02:01 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-07 23:56 UTC
    DNS
    Resolves · checked 2026-11-08 02:12 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-08 00:13 UTC to 2027-02-06 01:11 UTC
    Logged 2026-11-08 01:13 UTC in Google ParcelYard2027h1, entry 669,404,850
    SHA-256 788d809685f2fcf7f100865ee069a408a5ecae4d2da14f3f19d7161b77291d2d
    Public key SHA-256 3bfcf0044bdbd9ceb3be132a02ece7b4ecfe4f02633709fa6fbf1939fb7c0461
    PhishDestroy
    Addresses
    104.21.91.2 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.163.248 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.91.2, 172.67.163.248): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    hdstreamzs.com.pk
    MX
    Receives mail at route3.mx.cloudflare.net, route2.mx.cloudflare.net, route1.mx.cloudflare.net
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 01:16 UTC

    Suggest a correction

  86. plumenetwork-allocation.xyz US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    plumenetwork-allocation.xyz
    First seen
    2026-11-08 01:16 UTC
    First published
    2026-11-08 02:01 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-07 23:57 UTC
    DNS
    Resolves · checked 2026-11-08 02:12 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-11-08 00:16 UTC to 2027-02-06 00:16 UTC
    Logged 2026-11-08 01:15 UTC in Google PlumbersArms2027h1, entry 669,746,391
    SHA-256 2993430a3af11858c16df14eb12d423971afedabec58289b07140f6994bbe7dc
    Public key SHA-256 b826b84d15a897bbb90bc9abdd5d4f2f8e2fc2e5d01e2101a056ad27384b7a19
    Addresses
    104.21.27.198 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.169.164 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.27.198, 172.67.169.164): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    plumenetwork-allocation.xyz
    Registered
    2026-05-15 · PDR Ltd. d/b/a PublicDomainRegistry.com
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 02:00 UTC

    Suggest a correction

  87. safepal.com.vc US · AS13335 · Cloudflare, Inc.4 addressesSafePal
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 2 mo ago
    DetailsHide
    Hostname
    safepal.com.vc
    First seen
    2026-11-08 01:16 UTC
    First published
    2026-11-08 02:01 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-07 23:57 UTC
    DNS
    Resolves · checked 2026-11-08 02:12 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-11-08 00:14 UTC to 2027-02-06 00:14 UTC
    Logged 2026-11-08 01:13 UTC in Geomys Tuscolo2027h1, entry 521,607,868
    SHA-256 013b1209ec2e6be4dcea0ba2d825214d62a931cb791e4dad92175789b620b532
    Public key SHA-256 d151d6647c1649b2d4f88faa98376cf103cfabaecb598201f9d8e6afd06e623f
    Brand
    SafePal
    Addresses
    104.21.72.52 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.175.165 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3033::ac43:afa5
    2606:4700:3034::6815:4834
    Cloudflare
    Cloudflare (104.21.72.52, 172.67.175.165): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    safepal.com.vc
    Registered
    2026-09-09 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 01:16 UTC

    Suggest a correction

  88. www.aave-fr.co.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareUnder aave-fr.co.com, listed by MetaMask
    DetailsHide
    Hostname
    www.aave-fr.co.com
    First seen
    2026-11-08 01:16 UTC
    First published
    2026-11-08 02:01 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-07 23:57 UTC
    DNS
    Resolves · checked 2026-11-08 02:12 UTC
    Listed
    MetaMask, listing aave-fr.co.com and the names under it
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WR1 · precertificate
    Valid 2026-11-08 00:14 UTC to 2027-02-06 01:12 UTC
    Logged 2026-11-08 01:14 UTC in Google ParcelYard2027h1, entry 669,409,378
    SHA-256 66e6cc43bda7336d24f4755192b6396670e6806c399ce53ffb6b4d97034a48b4
    Public key SHA-256 f35b340a6f79cfe7a0b6b53f6f86065d23cf7cc3b07b28caf4aefa4b0559da84
    Addresses
    104.21.2.175 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.129.130 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.2.175, 172.67.129.130): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.

    Suggest a correction

  89. www.lucidplugin.com.apptweakers.com US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareUnder apptweakers.com, reported by PhishDestroyMX presentMX on Spamhaus DROPSPF missingDMARC missingRegistered 7 y ago
    DetailsHide
    Hostname
    www.lucidplugin.com.apptweakers.com
    First seen
    2026-11-08 01:16 UTC
    First published
    2026-11-08 02:01 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-07 23:56 UTC
    DNS
    Resolves · checked 2026-11-08 02:12 UTC
    Reported
    PhishDestroy, listing apptweakers.com and the names under it
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR2 · precertificate
    Valid 2026-11-08 00:15 UTC to 2027-02-06 00:15 UTC
    Logged 2026-11-08 01:13 UTC in Geomys Tuscolo2027h1, entry 521,612,795
    SHA-256 8cf3685cf83a66c089c50dd854977ed7e67242cfd872856fb78696ff9e002971
    Public key SHA-256 f63394b426b3faa09d6a043862e90b7eaa35ea88ae8a9a3cc2e1da679bbf9cf8
    PhishDestroy
    Addresses
    104.21.89.166 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.189.248 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.89.166, 172.67.189.248): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    apptweakers.com
    Registered
    2019-10-08 · NameCheap, Inc.
    MX
    Receives mail at _dc-mx.3ae362d127d9.apptweakers.com
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    MX listing
    Mail server _dc-mx.3ae362d127d9.apptweakers.com at 45.141.59.87 is on Spamhaus DROP: hijacked or criminal networks.
    Checked
    2026-11-07 07:26 UTC

    Suggest a correction

  90. www.polygonpos.xyz US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareUnder polygonpos.xyz, reported by PhishDestroyMX absentSPF missingDMARC missingRegistered 48 d ago
    DetailsHide
    Hostname
    www.polygonpos.xyz
    First seen
    2026-11-08 01:16 UTC
    First published
    2026-11-08 02:01 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-07 23:56 UTC
    DNS
    Resolves · checked 2026-11-08 02:12 UTC
    Reported
    PhishDestroy, listing polygonpos.xyz and the names under it
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WR1 · precertificate
    Valid 2026-11-08 00:10 UTC to 2027-02-06 00:02 UTC
    Logged 2026-11-08 01:10 UTC in Google ParcelYard2027h1, entry 669,369,368
    SHA-256 57c0c81aac3cf72743f5a972c73143d0f553c5edc04c26bae0fd67fcbd9c62df
    Public key SHA-256 2b752922f5963ef348612b1521bcf462fe665bf65f7361bcf2261485ddf139b1
    PhishDestroy
    Addresses
    104.21.89.180 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.145.236 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.89.180, 172.67.145.236): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    polygonpos.xyz
    Registered
    2026-09-21 · NameSilo, LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 02:00 UTC

    Suggest a correction

  91. zbsbz.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    zbsbz.com
    First seen
    2026-11-08 01:16 UTC
    First published
    2026-11-08 02:01 UTC
    Listing
    CERT Polska listed it 2026-05-22 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 00:29 UTC
    DNS
    Resolves · checked 2026-11-08 02:12 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-11-08 00:16 UTC to 2027-02-06 00:16 UTC
    Logged 2026-11-08 01:15 UTC in Geomys Tuscolo2027h1, entry 521,623,801
    SHA-256 c0d4c4859b1fe90f8206af89ac745ad463a41f1ce00ce7fb40b136ce44a82e74
    Public key SHA-256 4778fe2af14fe6a063b45b94447b11f57a98432552569e48e8225dd8187944f8
    Addresses
    104.21.9.123 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.189.66 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.9.123, 172.67.189.66): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    zbsbz.com
    Registered
    2026-05-14 · Cloud Yuqu LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 02:00 UTC

    Suggest a correction

  92. cn-google.cn HK · AS152194 · CTG Server Limited12 addressesGoogle
    Phishing hostSpamhaus DROPCloudflareAddress hosted confirmed phishing in the last 48 h · Address listed by Spamhaus DROPMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    cn-google.cn
    First seen
    2026-11-08 01:12 UTC
    First published
    2026-11-01 01:02 UTC
    DNS
    Resolves · checked 2026-11-08 01:12 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 118.107.29.225.
    1. Phishing-host list fetched with the address
    2. Resolved to 118.107.29.225
    Spamhaus DROP
    A brand lookalike resolving to an address on the Spamhaus Don’t Route Or Peer list. Address 118.107.29.225.
    1. Spamhaus DROP list fetched with the address
    2. Resolved to 118.107.29.225
    Brand
    Google
    Addresses
    118.107.29.225 · Hong Kong · AS152194 CTGSERVERLIMITED-AS-AP - CTG Server Limited
    23.145.232.140 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    23.145.232.143 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    23.180.136.61 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    23.235.185.59 · Hong Kong · AS138415 YANCYLIMITED-AS-HK - Yancy Limited
    23.235.185.60 · Hong Kong · AS138415 YANCYLIMITED-AS-HK - Yancy Limited
    23.235.185.61 · Hong Kong · AS138415 YANCYLIMITED-AS-HK - Yancy Limited
    27.124.21.139 · Hong Kong · AS152194 CTGSERVERLIMITED-AS-AP - CTG Server Limited
    27.124.21.161 · Hong Kong · AS152194 CTGSERVERLIMITED-AS-AP - CTG Server Limited
    27.124.21.206 · Hong Kong · AS152194 CTGSERVERLIMITED-AS-AP - CTG Server Limited
    118.107.29.228 · Hong Kong · AS152194 CTGSERVERLIMITED-AS-AP - CTG Server Limited
    118.107.29.231 · Hong Kong · AS152194 CTGSERVERLIMITED-AS-AP - CTG Server Limited
    Cloudflare
    Cloudflare (23.145.232.140, 23.145.232.143, 23.180.136.61): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    cn-google.cn
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 01:47 UTC

    Suggest a correction

  93. agent-layer.live US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 3 mo ago
    DetailsHide
    Hostname
    agent-layer.live
    First seen
    2026-11-08 01:10 UTC
    First published
    2026-11-08 02:01 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-07 23:56 UTC
    DNS
    Resolves · checked 2026-11-08 02:12 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-11-08 00:07 UTC to 2027-02-06 00:07 UTC
    Logged 2026-11-08 01:05 UTC in DigiCert Sphinx2027h1, entry 396,165,922
    SHA-256 380d2eb77fb57987d2929643fb4ee7438a00b348577a9c75d30b04c867e36344
    Public key SHA-256 5acbc1aea362e4bbb331f0488e34955ab4c20cb54fee73e6568b9d4a8db90905
    PhishDestroy
    Addresses
    104.21.21.140 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.199.26 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.21.140, 172.67.199.26): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    agent-layer.live
    Registered
    2026-07-27 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 02:00 UTC

    Suggest a correction

  94. allocation-netnet.capital US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 2 mo ago
    DetailsHide
    Hostname
    allocation-netnet.capital
    First seen
    2026-11-08 01:10 UTC
    First published
    2026-11-08 02:01 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-07 23:57 UTC
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-07 23:56 UTC
    DNS
    Resolves · checked 2026-11-08 02:12 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-08 00:08 UTC to 2027-02-06 01:05 UTC
    Logged 2026-11-08 01:08 UTC in IPng Networks Halloumi2027h1, entry 405,637,545
    SHA-256 35aa4ac71afec2e7f3a66748176ca83988411e15456aef4e88e77b1c455275e2
    Public key SHA-256 86cbd4992b4cd02db9376141ef1da16ba8bef015fbc00f3f0cbf828714233d42
    Addresses
    104.21.27.68 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.169.8 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.27.68, 172.67.169.8): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    allocation-netnet.capital
    Registered
    2026-09-09 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 02:00 UTC

    Suggest a correction

  95. distributions-flarefoundations.live US · AS13335 · Cloudflare, Inc.4 addressesFlare Network
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    distributions-flarefoundations.live
    First seen
    2026-11-08 01:10 UTC
    First published
    2026-11-08 02:01 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-07 23:57 UTC
    DNS
    Resolves · checked 2026-11-08 02:12 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-08 00:07 UTC to 2027-02-06 01:05 UTC
    Logged 2026-11-08 01:07 UTC in Let's Encrypt Sycamore2027h1, entry 1,032,142,740
    SHA-256 50355b01ad0f86a0b578c6f8aae29abd2b754eefadd26086efdf72796800f6b0
    Public key SHA-256 8852ce63ba0e5f27961fc875745a6d9af88944a366e5fd20976794ea6a22787a
    Brand
    Flare Network
    Addresses
    104.21.79.230 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.149.77 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3031::6815:4fe6
    2606:4700:3037::ac43:954d
    Cloudflare
    Cloudflare (104.21.79.230, 172.67.149.77): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    distributions-flarefoundations.live
    Registered
    2026-07-12 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 01:11 UTC

    Suggest a correction

  96. msha.ke US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishTankMX absentSPF -allDMARC rejectRegistered 8 y ago
    DetailsHide
    Hostname
    msha.ke
    First seen
    2026-11-08 01:10 UTC
    First published
    2026-11-08 02:01 UTC
    Listing
    PhishTank: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-08 02:36 UTC
    DNS
    Resolves · checked 2026-11-08 02:12 UTC
    Reported
    PhishTank
    1. Observed in the PhishTank feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-08 00:07 UTC to 2027-02-06 01:07 UTC
    Logged 2026-11-08 01:07 UTC in Google PlumbersArms2027h1, entry 669,665,438
    SHA-256 84b0202397ec12026112648032c32304dc3b0503727bfec1b79e546d88eda92b
    Public key SHA-256 a94abf870987b5a2d4caf1647d2c3c1c27aa1ce999f7ef48a14b148dab5e599b
    PhishTank
    PhishTank report #8967992
    Addresses
    172.66.132.86 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.66.132.87 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (172.66.132.86, 172.66.132.87): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    msha.ke
    Registered
    2019-03-07
    MX
    Publishes no mail exchanger
    SPF
    SPF record with -all: other senders fail
    DMARC
    DMARC policy p=reject
    Checked
    2026-11-08 02:00 UTC

    Suggest a correction

  97. xrpl-drop.live US · AS13335 · Cloudflare, Inc.2 addressesRipple (XRP)
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    xrpl-drop.live
    First seen
    2026-11-08 01:10 UTC
    First published
    2026-11-08 02:01 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-07 23:57 UTC
    DNS
    Resolves · checked 2026-11-08 02:12 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1
    Valid 2026-11-08 00:06 UTC to 2027-02-06 01:05 UTC
    Logged 2026-11-08 01:07 UTC in Google Xenon2027h1, entry 768,776,662
    SHA-256 3e51cfcc22871604833d11d9b33ca6f368877635b67b3014b3674d2d671644fe
    Public key SHA-256 9cd77bc445a732a59e94e506ea5ae57c91e2f9059d158140407c822a3cd1ec12
    Brand
    Ripple (XRP)
    Addresses
    104.21.59.105 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.223.11 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.59.105, 172.67.223.11): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    xrpl-drop.live
    Registered
    2026-07-12 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 02:00 UTC

    Suggest a correction

  98. casino-bets.me US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    casino-bets.me
    First seen
    2026-11-08 01:05 UTC
    First published
    2026-11-08 02:01 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-07 23:57 UTC
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-07 23:56 UTC
    DNS
    Resolves · checked 2026-11-08 02:12 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-11-08 00:05 UTC to 2027-02-06 00:05 UTC
    Logged 2026-11-08 01:03 UTC in IPng Networks Halloumi2027h1, entry 405,601,244
    SHA-256 745f9e12f143fef81c92c25d3b76f9e11be59ba253e82ed44396b143c0ee3735
    Public key SHA-256 3e69579becf494b957597ede790df3de69178c212a83d467c8ad804ea02a7f4f
    Addresses
    104.21.12.55 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.193.176 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.12.55, 172.67.193.176): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    casino-bets.me
    Registered
    2026-05-14 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 02:00 UTC

    Suggest a correction

  99. catcasinos23w.run US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 10 mo ago
    DetailsHide
    Hostname
    catcasinos23w.run
    First seen
    2026-11-08 01:05 UTC
    First published
    2026-11-08 02:01 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-07 23:56 UTC
    DNS
    Resolves · checked 2026-11-08 02:12 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1
    Valid 2026-09-09 21:58 UTC to 2026-12-08 22:58 UTC
    Logged 2026-11-08 01:02 UTC in Let's Encrypt Sycamore2026h2, entry 1,079,423,096
    SHA-256 4ba9d7dfe8e81b742520aec94e48fff5e5ae0804e6f464fe2674516abeb7a68f
    Public key SHA-256 d220f44f30ad754c956b1e723b49747d57b80ae31eeeaf791f6ef62ae3896a2e
    PhishDestroy
    Addresses
    104.21.32.136 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.152.76 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.32.136, 172.67.152.76): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    catcasinos23w.run
    Registered
    2026-01-16 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 02:00 UTC

    Suggest a correction

  100. gafum.work US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by NPA 165 (information services)MX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    gafum.work
    First seen
    2026-11-08 01:05 UTC
    First published
    2026-11-08 02:01 UTC
    Listing
    NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 01:35 UTC
    DNS
    Resolves · checked 2026-11-08 02:12 UTC
    Listed
    NPA 165
    1. Observed in the NPA 165 feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-11-08 00:05 UTC to 2027-02-06 00:05 UTC
    Logged 2026-11-08 01:04 UTC in Geomys Tuscolo2027h1, entry 521,528,704
    SHA-256 4a392edcbe5615767fdc724b5187d4daa76da2d537b725a8090f66e6b1f64252
    Public key SHA-256 70df71e6c303eebae84a45da224e9d811abded53d09ce881179c4b89d0106a40
    Addresses
    104.21.82.142 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.158.89 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.82.142, 172.67.158.89): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    gafum.work
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 01:06 UTC

    Suggest a correction

Showing 1–100 of 2,398 hostnames.
How these findings are made

Brand spoofs: findings that impersonate one of the 1,000 most-impersonated brands. The list opens on them; All shows every finding.

Reported: a hostname in a new certificate that PhishTank or PhishDestroy reports, or that CERT Polska, MetaMask, USOM, MODA, NPA 165, JPCERT/CC, the AMF, the FSMA or BaFin lists. When a listing source names the brand imitated or a category, the finding shows it. Phishing host: a brand lookalike that resolves to an address which hosted confirmed phishing in the last 48 hours. Spamhaus DROP: a brand lookalike that resolves to an address on the Spamhaus DROP list. Same certificate: another name on a finding's certificate that resolves to an address on Spamhaus DROP. Suspicious: other names on a finding's certificate, rated high for a hosting-alias name or a lookalike on a phishing host, medium for a lookalike; they join the findings once they have listing evidence of their own. Also under Suspicious: registered domains using a brand’s name that PhishDestroy’s community list includes, rated high when they resolve to an address with no parking or holding signal, medium otherwise.

Brand labels cover the 1,000 most-impersonated brands. A name gets a brand when the brand's token starts a label or follows a hyphen, with a lure word such as "login" or "verify" for common words. Hostnames appear as plain text. How it works · Sources