Live

Live phishing findings

New certificates and domain registrations, with every hostname resolved and checked against phishing reports and bad-address lists. The newest findings, updated hourly.

Updated hourly · 2026-11-08 04:11 UTC
Certificate-log entries · 24 h
315.2M
from 84 distinct feeds
Unique certificates · 24 h
30.6M
each reviewed
Names resolved · 24 h
19.7M
14.6M with an address
Findings · 24 h
5,745
206 of 1,061 brands targeted

2,338 hostnames from the last 24 hours.

The findings have updated. The list starts again from the top.

  1. 152dapp-admin.demo123.xyz US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareUnder demo123.xyz, listed by MetaMaskMX absentSPF missingDMARC missingRegistered 2 y ago
    DetailsHide
    Hostname
    152dapp-admin.demo123.xyz
    First seen
    2026-11-08 04:10 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-07 23:57 UTC
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-07 23:56 UTC
    Listed
    MetaMask, listing demo123.xyz and the names under it
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by LiteSSL RSA CA 2025 · precertificate
    Valid 2026-11-08 03:00 UTC to 2027-02-06 02:59 UTC
    Logged 2026-11-08 04:07 UTC in Google Argon2027h1, entry 920,817,152
    SHA-256 9dbc8ebd819234113f82f724e4f255c6ccb74a1c01ec50458ada55fb1ce789aa
    Public key SHA-256 1014d56c0452953bb8d55cb0cc30419e1bea4f6aefd13c3a2082bc2e9d0d4070
    Addresses
    104.21.71.30 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.142.197 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.71.30, 172.67.142.197): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    demo123.xyz
    Registered
    2024-09-06 · PDR Ltd. d/b/a PublicDomainRegistry.com
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-07 08:02 UTC

    Suggest a correction

  2. 152dapp-h5.demo123.xyz US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareUnder demo123.xyz, listed by MetaMaskMX absentSPF missingDMARC missingRegistered 2 y ago
    DetailsHide
    Hostname
    152dapp-h5.demo123.xyz
    First seen
    2026-11-08 04:10 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-07 23:57 UTC
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-07 23:56 UTC
    Listed
    MetaMask, listing demo123.xyz and the names under it
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by LiteSSL RSA CA 2025 · precertificate
    Valid 2026-11-08 03:00 UTC to 2027-02-06 02:59 UTC
    Logged 2026-11-08 04:08 UTC in DigiCert Wyvern2027h1, entry 449,357,865
    SHA-256 02a6105f3ce1dc122288fd8211801e4d92bd3826b1e0edd912c98dfaf93668ca
    Public key SHA-256 a96eedf80f8e29ccf7a3e2131117909fea612e12fe361b97c94b0eae4a2af25b
    Addresses
    104.21.71.30 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.142.197 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.71.30, 172.67.142.197): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    demo123.xyz
    Registered
    2024-09-06 · PDR Ltd. d/b/a PublicDomainRegistry.com
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-07 08:02 UTC

    Suggest a correction

  3. 152dappadminapi.demo123.xyz US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareUnder demo123.xyz, listed by MetaMaskMX absentSPF missingDMARC missingRegistered 2 y ago
    DetailsHide
    Hostname
    152dappadminapi.demo123.xyz
    First seen
    2026-11-08 04:10 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-07 23:57 UTC
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-07 23:56 UTC
    Listed
    MetaMask, listing demo123.xyz and the names under it
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by LiteSSL RSA CA 2025 · precertificate
    Valid 2026-11-08 03:00 UTC to 2027-02-06 02:59 UTC
    Logged 2026-11-08 04:08 UTC in Google Xenon2027h1, entry 770,509,567
    SHA-256 d494aa0d97b52c6538cefee1a586267897ab230de98b2668a968a9520b1ce0ed
    Public key SHA-256 168e3bf9cff2aacb009c3d9251b2b76a2d250dbd6d7cfa5aefe667f48a2ebbf3
    Addresses
    104.21.71.30 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.142.197 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.71.30, 172.67.142.197): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    demo123.xyz
    Registered
    2024-09-06 · PDR Ltd. d/b/a PublicDomainRegistry.com
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-07 08:02 UTC

    Suggest a correction

  4. 152dapph5api.demo123.xyz US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareUnder demo123.xyz, listed by MetaMaskMX absentSPF missingDMARC missingRegistered 2 y ago
    DetailsHide
    Hostname
    152dapph5api.demo123.xyz
    First seen
    2026-11-08 04:10 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-07 23:57 UTC
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-07 23:56 UTC
    Listed
    MetaMask, listing demo123.xyz and the names under it
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by LiteSSL RSA CA 2025 · precertificate
    Valid 2026-11-08 03:00 UTC to 2027-02-06 02:59 UTC
    Logged 2026-11-08 04:07 UTC in Google Xenon2027h1, entry 770,507,559
    SHA-256 06396900300bafba7fb59344b073b2fdb5b61e74e424c10c38164cf5a8d40ad9
    Public key SHA-256 69423075a9d07119cb81028491b504059de2b4b615ee4cb8449d420fca9c1784
    Addresses
    104.21.71.30 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.142.197 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.71.30, 172.67.142.197): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    demo123.xyz
    Registered
    2024-09-06 · PDR Ltd. d/b/a PublicDomainRegistry.com
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-07 08:02 UTC

    Suggest a correction

  5. 154gdapi.demo123.xyz US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareUnder demo123.xyz, listed by MetaMaskMX absentSPF missingDMARC missingRegistered 2 y ago
    DetailsHide
    Hostname
    154gdapi.demo123.xyz
    First seen
    2026-11-08 04:10 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-07 23:57 UTC
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-07 23:56 UTC
    Listed
    MetaMask, listing demo123.xyz and the names under it
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by LiteSSL RSA CA 2025 · precertificate
    Valid 2026-11-08 03:00 UTC to 2027-02-06 02:59 UTC
    Logged 2026-11-08 04:06 UTC in Google Argon2027h1, entry 920,810,633
    SHA-256 4f57f2747be27ec5c0b728e0d2cdf4f61d344ba99e7898964d09ee89d7e044fc
    Public key SHA-256 a67a6305113e741683d598e38544547b323c7d54e887e4a61e0875d4187abdf6
    Addresses
    104.21.71.30 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.142.197 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.71.30, 172.67.142.197): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    demo123.xyz
    Registered
    2024-09-06 · PDR Ltd. d/b/a PublicDomainRegistry.com
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-07 08:02 UTC

    Suggest a correction

  6. 154gdh5.demo123.xyz US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareUnder demo123.xyz, listed by MetaMaskMX absentSPF missingDMARC missingRegistered 2 y ago
    DetailsHide
    Hostname
    154gdh5.demo123.xyz
    First seen
    2026-11-08 04:10 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-07 23:57 UTC
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-07 23:56 UTC
    Listed
    MetaMask, listing demo123.xyz and the names under it
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by LiteSSL RSA CA 2025 · precertificate
    Valid 2026-11-08 03:00 UTC to 2027-02-06 02:59 UTC
    Logged 2026-11-08 04:06 UTC in Google Xenon2027h1, entry 770,492,615
    SHA-256 44119eb8ff6bb79cfe20727c3b5fa6a3e6ce7985708c000bbeb6f6d9df56aca7
    Public key SHA-256 2b0ebf36709b8a5e83d3bc66210e01a3d346c70639126108a4d99ddf4d1b1c96
    Addresses
    104.21.71.30 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.142.197 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.71.30, 172.67.142.197): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    demo123.xyz
    Registered
    2024-09-06 · PDR Ltd. d/b/a PublicDomainRegistry.com
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-07 08:02 UTC

    Suggest a correction

  7. actidel.ch US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX presentSPF ~allDMARC policy none
    DetailsHide
    Hostname
    actidel.ch
    First seen
    2026-11-08 04:10 UTC
    Listing
    CERT Polska listed it 2026-06-02 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 03:30 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-08 03:10 UTC to 2027-02-06 03:10 UTC
    Logged 2026-11-08 04:08 UTC in Google PlumbersArms2027h1, entry 671,533,931
    SHA-256 9ce81abbc94a84f32025a81c49766e6e696e5e64434845f0dc33b9c27f9dbd4c
    Public key SHA-256 ff4f0b391919c82e4df3067a2946d7a494669474cd3e4e41bb5be74426ba1ced
    Addresses
    104.21.23.221 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.213.246 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.23.221, 172.67.213.246): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    actidel.ch
    MX
    Receives mail at omeaga-smtp.actidel.ch
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    DMARC policy p=none: reports only
    Checked
    2026-11-08 04:15 UTC

    Suggest a correction

  8. ekzwnn.asia US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by NPA 165 (information services)MX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    ekzwnn.asia
    First seen
    2026-11-08 04:10 UTC
    Listing
    NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 01:35 UTC
    Listed
    NPA 165
    1. Observed in the NPA 165 feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-08 03:09 UTC to 2027-02-06 04:06 UTC
    Logged 2026-11-08 04:09 UTC in Let's Encrypt Sycamore2027h1, entry 1,036,019,621
    SHA-256 c455d67391f67f048973da7435822ce08a515fba76591f101a4b4424eebfea97
    Public key SHA-256 b03ecda01467688aee553b14300e3ab7225a4df6d29381bc5033f3cb1ec94b62
    Addresses
    104.21.62.159 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.137.19 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.62.159, 172.67.137.19): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    ekzwnn.asia
    Registered
    2026-07-13 · Alibaba Cloud Computing Ltd. d/b/a HiChina (www.net.cn)
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 04:15 UTC

    Suggest a correction

  9. tedefe-curaxo.info US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    tedefe-curaxo.info
    First seen
    2026-11-08 04:10 UTC
    Listing
    CERT Polska listed it 2026-05-15 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 03:30 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-11-08 03:09 UTC to 2027-02-06 03:09 UTC
    Logged 2026-11-08 04:07 UTC in DigiCert Sphinx2027h1, entry 397,441,436
    SHA-256 42dbe3a43264a3f2059d11f03f62d8d8172709e2b6463d05cc64baa615d9a923
    Public key SHA-256 1ff5431d4359166dffe189fe85d2c96f7481284e958b7dac6636be78cb2c968c
    Addresses
    104.21.30.83 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.172.132 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.30.83, 172.67.172.132): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    tedefe-curaxo.info
    Registered
    2026-05-14 · NameCheap, Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 04:15 UTC

    Suggest a correction

  10. testnet-explorer.rally.fun US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareUnder rally.fun, reported by PhishDestroyMX presentSPF ?allDMARC policy noneRegistered 19 mo ago
    DetailsHide
    Hostname
    testnet-explorer.rally.fun
    First seen
    2026-11-08 04:10 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-07 23:56 UTC
    Reported
    PhishDestroy, listing rally.fun and the names under it
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR2
    Valid 2026-11-08 03:07 UTC to 2027-02-06 03:07 UTC
    Logged 2026-11-08 04:05 UTC in Google ParcelYard2027h1, entry 671,186,024
    SHA-256 89626077fd56023cb6584e824b92aed7dd09a75e8052c149c7369159595c0b36
    Public key SHA-256 f4503e098d9787fbf819f06caeb954d88d416bfd4809f103ec6862e0bbfa05d3
    PhishDestroy
    Addresses
    104.21.17.158 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.177.19 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.17.158, 172.67.177.19): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    rally.fun
    Registered
    2025-04-29 · NameCheap, Inc.
    MX
    Receives mail at aspmx.l.google.com, alt1.aspmx.l.google.com, alt2.aspmx.l.google.com
    SPF
    SPF record with ?all: other senders are neutral
    DMARC
    DMARC policy p=none: reports only
    Checked
    2026-11-07 08:26 UTC

    Suggest a correction

  11. aave.casa US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX presentSPF ~allDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    aave.casa
    First seen
    2026-11-08 04:05 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-07 23:57 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-11-08 03:03 UTC to 2027-02-06 03:03 UTC
    Logged 2026-11-08 04:01 UTC in Geomys Tuscolo2027h1, entry 523,044,950
    SHA-256 6d21acbd08dc090892643f6996a4793afd9371e027fd30d011ae38ff881ce398
    Public key SHA-256 987968129adffe98ecb0bd8ab4150bfd1781d76d1db668f87bae13ea9f93d8ee
    Addresses
    104.21.50.247 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.215.7 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.50.247, 172.67.215.7): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    aave.casa
    Registered
    2026-05-15 · PDR Ltd. d/b/a PublicDomainRegistry.com
    MX
    Receives mail at mail.aave.casa
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 04:08 UTC

    Suggest a correction

  12. biedronka-online.shop US · AS13335 · Cloudflare, Inc.Biedronka
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    biedronka-online.shop
    First seen
    2026-11-08 04:05 UTC
    Listing
    CERT Polska listed it 2026-05-15 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 03:30 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-11-08 03:06 UTC to 2027-02-06 03:06 UTC
    Logged 2026-11-08 04:05 UTC in Google ParcelYard2027h1, entry 671,180,417
    SHA-256 746bc788122564f192a58230b2af96b7f5b202ca7a3e21b39b23980a3972d2ff
    Public key SHA-256 ac14e8fe9a40c9c4ec1005d940e675b578f36bc05de732b7c2c0facecf02eca2
    Brand
    Biedronka
    Addresses
    104.18.22.122 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.18.22.122): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    biedronka-online.shop
    Registered
    2026-05-15 · Dynadot Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 04:08 UTC

    Suggest a correction

  13. tevehyvro.work US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    tevehyvro.work
    First seen
    2026-11-08 04:05 UTC
    Listing
    CERT Polska listed it 2026-06-05 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 03:30 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-11-08 03:05 UTC to 2027-02-06 03:05 UTC
    Logged 2026-11-08 04:03 UTC in Let's Encrypt Sycamore2027h1, entry 1,035,891,422
    SHA-256 4cc73ca16f28fac5e3ec80521e862dcc1f2b017d13059bfe4f3f834c9d946beb
    Public key SHA-256 b5447f60c3261560a891bd5da05e0d1ec34e4b61eb4ff0066bd7780c9827d9c6
    Addresses
    104.21.17.247 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.178.229 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.17.247, 172.67.178.229): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    tevehyvro.work
    Registered
    2026-05-14 · Chengdu West Dimension Digital Technology Co., Ltd.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 04:15 UTC

    Suggest a correction

  14. extension.soflare.org US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    extension.soflare.org
    First seen
    2026-11-08 04:00 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-07 23:57 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR2 · precertificate
    Valid 2026-11-08 03:00 UTC to 2027-02-06 02:59 UTC
    Logged 2026-11-08 03:58 UTC in Geomys Tuscolo2027h1, entry 523,020,138
    SHA-256 1fb39c8ed596b66d9c5389f907dc303d435664b9129fdf2de14675b109fd257f
    Public key SHA-256 4c7bc65baf7bd16f8214ded901936a236726f99466472b296fffa7e89c5a1962
    Addresses
    104.21.48.7 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.175.41 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.48.7, 172.67.175.41): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    soflare.org
    Registered
    2026-07-09 · Hosting Concepts B.V. d/b/a Registrar.eu
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 04:15 UTC

    Suggest a correction

  15. btc-oxlant920.net US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    btc-oxlant920.net
    First seen
    2026-11-08 03:56 UTC
    Listing
    CERT Polska listed it 2026-09-07 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 03:30 UTC
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-07 23:56 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-11-08 02:53 UTC to 2027-02-06 02:53 UTC
    Logged 2026-11-08 03:52 UTC in Geomys Tuscolo2027h1, entry 522,967,633
    SHA-256 9766f696be86b31392512f5a11dafd92599c6cadb91b8c897b6085ad609a574c
    Public key SHA-256 31bd8c2bafb8972c8f438349fe3b14f2495aa7583169b1777b222f10fd5f388e
    Addresses
    104.21.7.3 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.135.139 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.7.3, 172.67.135.139): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    btc-oxlant920.net
    Registered
    2026-05-15 · Dynadot Inc
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 04:16 UTC

    Suggest a correction

  16. ycdxkf.asia US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by NPA 165 (information services)MX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    ycdxkf.asia
    First seen
    2026-11-08 03:56 UTC
    Listing
    NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 01:35 UTC
    Listed
    NPA 165
    1. Observed in the NPA 165 feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1
    Valid 2026-09-10 01:55 UTC to 2026-12-09 02:54 UTC
    Logged 2026-11-08 03:54 UTC in Geomys Tuscolo2026h2, entry 1,045,634,229
    SHA-256 04e8e846f6333a6562fadcaa8d65474b87fd0b449c40925b8ba49c451653561e
    Public key SHA-256 71843054832fea3b1aed5dd192b4ff74fbc09ed942f51c4ac3c99983f60cfdab
    Addresses
    104.21.10.62 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.144.181 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.10.62, 172.67.144.181): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    ycdxkf.asia
    Registered
    2026-07-13 · Alibaba Cloud Computing Ltd. d/b/a HiChina (www.net.cn)
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 04:16 UTC

    Suggest a correction

  17. ffxxrd.icu US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by NPA 165 (finance and insurance)MX absentSPF missingDMARC missingRegistered 10 mo ago
    DetailsHide
    Hostname
    ffxxrd.icu
    First seen
    2026-11-08 03:51 UTC
    Listing
    NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 01:35 UTC
    Listed
    NPA 165
    1. Observed in the NPA 165 feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-08 02:48 UTC to 2027-02-06 03:46 UTC
    Logged 2026-11-08 03:48 UTC in Google ParcelYard2027h1, entry 671,010,465
    SHA-256 54bf46bca36bcfcc6302aabde209b76da33cc4455987ebb03b7258267344e08e
    Public key SHA-256 6bba1c5ed7660e34922507bafec7c0af8b04f410014ec42e2af7c5c90f8651a8
    Addresses
    104.21.1.249 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.128.107 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.1.249, 172.67.128.107): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    ffxxrd.icu
    Registered
    2026-01-16 · Gname.com Pte. Ltd.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 04:15 UTC

    Suggest a correction

  18. mpspay.asia US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by NPA 165 (information services)MX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    mpspay.asia
    First seen
    2026-11-08 03:51 UTC
    Listing
    NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 01:35 UTC
    Listed
    NPA 165
    1. Observed in the NPA 165 feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-08 02:46 UTC to 2027-02-06 03:44 UTC
    Logged 2026-11-08 03:46 UTC in DigiCert Sphinx2027h1, entry 397,282,714
    SHA-256 28260e24c956ea45e2699a565ae61e986233d2d7e7737438771d49410cd30a66
    Public key SHA-256 0c2936e1b84b5f7cd72bb24bdfa8e4b42bce7ffcc2b9c890d4b4a16abe0cd9fb
    Addresses
    104.21.61.232 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.216.13 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.61.232, 172.67.216.13): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    mpspay.asia
    Registered
    2026-07-13 · Alibaba Cloud Computing Ltd. d/b/a HiChina (www.net.cn)
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 04:16 UTC

    Suggest a correction

  19. thntax.asia US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by NPA 165 (information services)MX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    thntax.asia
    First seen
    2026-11-08 03:51 UTC
    Listing
    NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 01:35 UTC
    Listed
    NPA 165
    1. Observed in the NPA 165 feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1
    Valid 2026-09-10 02:55 UTC to 2026-12-09 02:53 UTC
    Logged 2026-11-08 03:47 UTC in Let's Encrypt Sycamore2026h2, entry 1,080,083,434
    SHA-256 10c5df84b63135486fae66ecfe4077eaae4ea78855005c9f932efb76926b535d
    Public key SHA-256 6ec114dd528503c7d048f78b2fcd3f97c8708151931cc5a9dedc40aa2bb1d9a6
    Addresses
    104.21.21.160 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.199.90 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.21.160, 172.67.199.90): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    thntax.asia
    Registered
    2026-07-13 · Alibaba Cloud Computing Ltd. d/b/a HiChina (www.net.cn)
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 04:16 UTC

    Suggest a correction

  20. zebiqg.asia US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by NPA 165 (information services)MX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    zebiqg.asia
    First seen
    2026-11-08 03:51 UTC
    Listing
    NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 01:35 UTC
    Listed
    NPA 165
    1. Observed in the NPA 165 feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-08 02:46 UTC to 2027-02-06 03:42 UTC
    Logged 2026-11-08 03:46 UTC in Google ParcelYard2027h1, entry 670,985,957
    SHA-256 0aeb4288d677b2b18a9112a37eea68f058395270e9cd3440beb246f16dc07594
    Public key SHA-256 4226a65d79ad4d8e12c645292b5e4dcf91438962bff2e8614debec172cce614f
    Addresses
    104.21.78.168 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.136.3 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.78.168, 172.67.136.3): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    zebiqg.asia
    Registered
    2026-07-13 · Alibaba Cloud Computing Ltd. d/b/a HiChina (www.net.cn)
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 04:16 UTC

    Suggest a correction

  21. citrine-sandal.shop US · AS13335 · Cloudflare, Inc.
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    citrine-sandal.shop
    First seen
    2026-11-08 03:46 UTC
    Listing
    CERT Polska listed it 2026-09-10 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 03:30 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WR1 · precertificate
    Valid 2026-11-08 02:42 UTC to 2027-02-06 03:41 UTC
    Logged 2026-11-08 03:42 UTC in Let's Encrypt Sycamore2027h1, entry 1,035,460,003
    SHA-256 0d13defa625d4b3b1092d77844cfa30b873ce73eee960170e4caa5e789b70ff9
    Public key SHA-256 033af8e55c5221da09a9922d8633ffd6f617d1a13c5ef1d0ce43f6ee293fdbf7
    Addresses
    104.18.71.116 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.18.71.116): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    citrine-sandal.shop
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 03:47 UTC

    Suggest a correction

  22. stableyleldcub.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by NPA 165 (finance and insurance)MX absentSPF missingDMARC missingRegistered 59 d ago
    DetailsHide
    Hostname
    stableyleldcub.com
    First seen
    2026-11-08 03:46 UTC
    Listing
    NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 01:35 UTC
    Listed
    NPA 165
    1. Observed in the NPA 165 feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-11-08 02:44 UTC to 2027-02-06 02:44 UTC
    Logged 2026-11-08 03:43 UTC in DigiCert Wyvern2027h1, entry 449,149,140
    SHA-256 d44eb02cc875a80f3ec1842393c3c27c2fbe3d93f7b686e5b46b13df3171d522
    Public key SHA-256 28a676833f8ff65cb9470ccc20435805cd593c93cc6494e28a543af1c051e46e
    Addresses
    104.21.57.238 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.151.211 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.57.238, 172.67.151.211): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    stableyleldcub.com
    Registered
    2026-09-10 · NameCheap, Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 04:16 UTC

    Suggest a correction

  23. scjvam.asia US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by NPA 165 (information services)MX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    scjvam.asia
    First seen
    2026-11-08 03:41 UTC
    Listing
    NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 01:35 UTC
    Listed
    NPA 165
    1. Observed in the NPA 165 feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1
    Valid 2026-09-10 01:54 UTC to 2026-12-09 02:53 UTC
    Logged 2026-11-08 03:40 UTC in Geomys Tuscolo2026h2, entry 1,045,614,748
    SHA-256 80af8b661b82264e393bd1416e82af6250e8f1d08649d52842b8428020b64aee
    Public key SHA-256 fac6b21d6214ed5e3713ece58aec78cedf0759293ee36a161053c725ea278f90
    Addresses
    104.21.21.231 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.200.243 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.21.231, 172.67.200.243): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    scjvam.asia
    Registered
    2026-07-13 · Alibaba Cloud Computing Ltd. d/b/a HiChina (www.net.cn)
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 04:16 UTC

    Suggest a correction

  24. us956web-zoom.us US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    us956web-zoom.us
    First seen
    2026-11-08 03:41 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-07 23:57 UTC
    USOM listed it 2026-11-06 · still listed at the last successful feed check 2026-11-08 04:03 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-08 02:40 UTC to 2027-02-06 02:40 UTC
    Logged 2026-11-08 03:39 UTC in Google PlumbersArms2027h1, entry 671,229,155
    SHA-256 c5dbe542963d66e11adae83b2b3024998f284101a2ed4d29756486e0512e7460
    Public key SHA-256 625812e18f5b8bd222b7b37ec342967f87de48214718c9163ded705860975fe6
    Addresses
    104.21.3.21 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.130.13 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.3.21, 172.67.130.13): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    us956web-zoom.us
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 03:42 UTC

    Suggest a correction

  25. anniversaryclaim.dpdns.org US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroy
    DetailsHide
    Hostname
    anniversaryclaim.dpdns.org
    First seen
    2026-11-08 03:36 UTC
    Listing
    PhishDestroy: observed back in the feed 2026-11-01 · still listed at the last successful feed check 2026-11-07 23:56 UTC · listed 2 times
    Earlier listing periods: 2026-10-25 to 2026-10-31 (6 days)
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-11-08 02:36 UTC to 2027-02-06 02:36 UTC
    Logged 2026-11-08 03:34 UTC in Google ParcelYard2027h1, entry 670,861,008
    SHA-256 15badb3d538a14bad3af2c0e9400ffc7cd6b41a16276d25f36b29b018a353132
    Public key SHA-256 c393859d85870f8b92f4320eacd6c2591223d89b819e0e5c6c221ef1e009520d
    PhishDestroy
    Addresses
    104.21.71.189 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.148.20 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.71.189, 172.67.148.20): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.

    Suggest a correction

  26. api.astrariseprofitssystem-com.financecryptoworld.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareUnder financecryptoworld.com, listed by CERT PolskaMX presentSPF ~allDMARC missingRegistered 22 mo ago
    DetailsHide
    Hostname
    api.astrariseprofitssystem-com.financecryptoworld.com
    First seen
    2026-11-08 03:36 UTC
    Listing
    CERT Polska listed it 2026-06-12 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 03:30 UTC
    Listed
    CERT Polska, listing financecryptoworld.com and the names under it
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-08 02:34 UTC to 2027-02-06 03:34 UTC
    Logged 2026-11-08 03:34 UTC in Google ParcelYard2027h1, entry 670,863,814
    SHA-256 b2e7292ef67af6fcff8d0fa5b08846d215f49aa36b01c94b5675302da559f2a8
    Public key SHA-256 f09c831af2f368d38a5f5e0845fbb8f04e6b35aec5f507af259331c8d5285a9a
    Addresses
    104.21.10.130 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.131.121 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.10.130, 172.67.131.121): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    financecryptoworld.com
    Registered
    2025-01-30 · MainReg Inc.
    MX
    Receives mail at mail.financecryptoworld.com
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-07 17:16 UTC

    Suggest a correction

  27. api.quantum-ai-project-com.financecryptoworld.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareUnder financecryptoworld.com, listed by CERT PolskaMX presentSPF ~allDMARC missingRegistered 22 mo ago
    DetailsHide
    Hostname
    api.quantum-ai-project-com.financecryptoworld.com
    First seen
    2026-11-08 03:36 UTC
    Listing
    CERT Polska listed it 2026-06-12 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 03:30 UTC
    Listed
    CERT Polska, listing financecryptoworld.com and the names under it
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WR1 · precertificate
    Valid 2026-11-08 02:31 UTC to 2027-02-06 03:30 UTC
    Logged 2026-11-08 03:31 UTC in Geomys Tuscolo2027h1, entry 522,784,698
    SHA-256 c818eee78bf815a983af2bb70c0c81aca8c2353a92ef9ee0e19dc58ed4be4b49
    Public key SHA-256 4f17f97dbe3648b33dffe17e40ddde18d2021aadca2d4daf5ccdbae925cb17e4
    Addresses
    104.21.10.130 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.131.121 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.10.130, 172.67.131.121): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    financecryptoworld.com
    Registered
    2025-01-30 · MainReg Inc.
    MX
    Receives mail at mail.financecryptoworld.com
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-07 17:16 UTC

    Suggest a correction

  28. api.testnet.fogolend.com US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareUnder fogolend.com, reported by PhishDestroyMX presentSPF ~allDMARC missingRegistered 15 mo ago
    DetailsHide
    Hostname
    api.testnet.fogolend.com
    First seen
    2026-11-08 03:36 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-07 23:56 UTC
    Reported
    PhishDestroy, listing fogolend.com and the names under it
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WR1 · precertificate
    Valid 2026-11-08 02:31 UTC to 2027-02-06 03:26 UTC
    Logged 2026-11-08 03:31 UTC in DigiCert Wyvern2027h1, entry 449,070,753
    SHA-256 265514ef112ea38d219a39c6d249f1ac532a10727c5c1f0b29614845ac96bf40
    Public key SHA-256 2644e4873cf275613de39337d276a1b067b90b68d2263d95082cdc6001ea04bf
    PhishDestroy
    Addresses
    104.21.96.16 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.150.64 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.96.16, 172.67.150.64): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    fogolend.com
    Registered
    2025-08-28 · NameCheap, Inc.
    MX
    Receives mail at route2.mx.cloudflare.net, route1.mx.cloudflare.net, route3.mx.cloudflare.net
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 03:37 UTC

    Suggest a correction

  29. merkl-rewards.xyz US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    merkl-rewards.xyz
    First seen
    2026-11-08 03:36 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-07 23:57 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-08 02:36 UTC to 2027-02-06 02:36 UTC
    Logged 2026-11-08 03:35 UTC in Google ParcelYard2027h1, entry 670,868,066
    SHA-256 1e5b69394d64f7364445333f757b12768f593e097fa2c1d6e5a36ccc5767e288
    Public key SHA-256 3c4e5491d002ac79d8a6e0a0b74a6f13a3b37bb177e6ad4903b575d8525bdfbf
    Addresses
    104.21.7.238 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.156.139 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.7.238, 172.67.156.139): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    merkl-rewards.xyz
    Registered
    2026-05-15 · PDR Ltd. d/b/a PublicDomainRegistry.com
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 04:15 UTC

    Suggest a correction

  30. treasuryuamq.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by NPA 165 (finance and insurance)MX absentSPF missingDMARC missingRegistered 59 d ago
    DetailsHide
    Hostname
    treasuryuamq.com
    First seen
    2026-11-08 03:36 UTC
    Listing
    NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 01:35 UTC
    Listed
    NPA 165
    1. Observed in the NPA 165 feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1
    Valid 2026-09-10 01:35 UTC to 2026-12-09 02:34 UTC
    Logged 2026-11-08 03:33 UTC in DigiCert Wyvern2026h2, entry 2,211,388,250
    SHA-256 25238cf8e29ff757af360933bde6a8fcaa044bd7418f49f65aecfa6f9e04dcbc
    Public key SHA-256 8b77b8851bc0f48bd3cba7a6482e1db18d774f7c6d8c31f961cccec3a90b487d
    Addresses
    104.21.17.215 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.178.85 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.17.215, 172.67.178.85): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    treasuryuamq.com
    Registered
    2026-09-10 · NameCheap, Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 04:16 UTC

    Suggest a correction

  31. ufymqc.asia US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by NPA 165 (information services)MX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    ufymqc.asia
    First seen
    2026-11-08 03:36 UTC
    Listing
    NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 01:35 UTC
    Listed
    NPA 165
    1. Observed in the NPA 165 feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1
    Valid 2026-11-08 02:34 UTC to 2027-02-06 03:31 UTC
    Logged 2026-11-08 03:34 UTC in DigiCert Wyvern2027h1, entry 449,090,849
    SHA-256 3939cfa8f56decdee41812cf9adcf0a576d05cbcfc81509199aff0539d9eaef1
    Public key SHA-256 fcd9bd6025c1be5a11ad4b39e7f8d5c0b9560718e7a14e3e60536d167ef09ca9
    Addresses
    104.21.45.251 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.221.174 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.45.251, 172.67.221.174): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    ufymqc.asia
    Registered
    2026-07-13 · Alibaba Cloud Computing Ltd. d/b/a HiChina (www.net.cn)
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 04:16 UTC

    Suggest a correction

  32. 54567351.cfd US · AS13335 · Cloudflare, Inc.4 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 1 d ago
    DetailsHide
    Hostname
    54567351.cfd
    First seen
    2026-11-08 03:31 UTC
    Listing
    CERT Polska listed it 2026-11-08 · still listed at the last successful feed check 2026-11-08 03:30 UTC
    Listed
    CERT Polska
    1. Certificate logged in CT
    2. Listed by CERT Polska
    3. We matched the new listing
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-11-07 20:49 UTC to 2027-02-05 20:49 UTC
    Logged 2026-11-07 21:47 UTC in Let's Encrypt Sycamore2027h1, entry 1,027,189,708
    SHA-256 1f096222c6f40915911cfa5edea324822efa8a1ee875b6f89200e272f98ef574
    Public key SHA-256 856c9c6e394ae5bbc419df06ac963456bb56106294bb002e95b2109a0acd0707
    Addresses
    104.21.96.158 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.185.84 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3036::6815:609e
    2606:4700:3037::ac43:b954
    Cloudflare
    Cloudflare (104.21.96.158, 172.67.185.84): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    54567351.cfd
    Registered
    2026-11-07 · Hosting Concepts B.V. d/b/a Registrar.eu
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 04:16 UTC

    Suggest a correction

  33. giornrinca.store US · AS13335 · Cloudflare, Inc.4 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 1 d ago
    DetailsHide
    Hostname
    giornrinca.store
    First seen
    2026-11-08 03:31 UTC
    Listing
    CERT Polska listed it 2026-11-08 · still listed at the last successful feed check 2026-11-08 03:30 UTC
    Listed
    CERT Polska
    1. Certificate logged in CT
    2. Listed by CERT Polska
    3. We matched the new listing
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-11-07 05:55 UTC to 2027-02-05 05:55 UTC
    Logged 2026-11-07 06:54 UTC in DigiCert Wyvern2027h1, entry 438,384,538
    SHA-256 0d5be7340b1f886a57056c94c0de4b7051a339632e21f9838913a054596c5695
    Public key SHA-256 1c3a4476f4b2749ce06663371204c500e1ab904ad5264adc0c56bf2b526f9f95
    Addresses
    104.21.49.70 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.160.163 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3036::6815:3146
    2606:4700:3036::ac43:a0a3
    Cloudflare
    Cloudflare (104.21.49.70, 172.67.160.163): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    giornrinca.store
    Registered
    2026-11-07 · NameCheap, Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 04:15 UTC

    Suggest a correction

  34. hexalonaimax.net US · AS13335 · Cloudflare, Inc.4 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 1 d ago
    DetailsHide
    Hostname
    hexalonaimax.net
    First seen
    2026-11-08 03:31 UTC
    Listing
    CERT Polska listed it 2026-11-08 · still listed at the last successful feed check 2026-11-08 03:30 UTC
    Listed
    CERT Polska
    1. Certificate logged in CT
    2. Listed by CERT Polska
    3. We matched the new listing
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-07 17:33 UTC to 2027-02-05 17:33 UTC
    Logged 2026-11-07 18:31 UTC in Google PlumbersArms2027h1, entry 664,843,756
    SHA-256 5b67f2ddc55156e3e219d59bbf240d1d5b3c0987c926afafa6177f31e62e9a8a
    Public key SHA-256 cc47ce4d6f7a70788a246a69dadd11eb75787c2b7961b14d770eb92b18cd5f18
    Addresses
    104.21.74.213 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.206.180 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3031::ac43:ceb4
    2606:4700:3036::6815:4ad5
    Cloudflare
    Cloudflare (104.21.74.213, 172.67.206.180): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    hexalonaimax.net
    Registered
    2026-11-07 · Dynadot Inc
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 04:16 UTC

    Suggest a correction

  35. iliaaombr.store US · AS13335 · Cloudflare, Inc.4 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 1 d ago
    DetailsHide
    Hostname
    iliaaombr.store
    First seen
    2026-11-08 03:31 UTC
    Listing
    CERT Polska listed it 2026-11-08 · still listed at the last successful feed check 2026-11-08 03:30 UTC
    Listed
    CERT Polska
    1. Certificate logged in CT
    2. Listed by CERT Polska
    3. We matched the new listing
    4. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-11-07 05:50 UTC to 2027-02-05 05:50 UTC
    Logged 2026-11-07 06:49 UTC in IPng Networks Gouda2027h1, entry 341,552,404
    SHA-256 4ebfc17a6c14ead3d0036b22d9a5b83887879817b3b91e928c045292cd8eebd2
    Public key SHA-256 91724884f3fdc248294dea230fdd3085a61473181c325a4e4c11623432fc0d31
    Addresses
    104.21.46.82 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.136.116 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3033::6815:2e52
    2606:4700:3036::ac43:8874
    Cloudflare
    Cloudflare (104.21.46.82, 172.67.136.116): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    iliaaombr.store
    Registered
    2026-11-07 · NameCheap, Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 04:16 UTC

    Suggest a correction

  36. merigdarna.store US · AS13335 · Cloudflare, Inc.4 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 1 d ago
    DetailsHide
    Hostname
    merigdarna.store
    First seen
    2026-11-08 03:31 UTC
    Listing
    CERT Polska listed it 2026-11-08 · still listed at the last successful feed check 2026-11-08 03:30 UTC
    Listed
    CERT Polska
    1. Certificate logged in CT
    2. Listed by CERT Polska
    3. We matched the new listing
    4. Latest DNS check
    Certificate
    Issued by Cloudflare TLS Issuing ECC CA 4 · precertificate
    Valid 2026-11-07 06:43 UTC to 2027-02-05 06:51 UTC
    Logged 2026-11-07 06:53 UTC in DigiCert Sphinx2027h1, entry 387,461,295
    SHA-256 1fb4d7ce049037fb0591547cd7ee0d4f6eab31402c9c8ad08e74f20cdaf1ebd5
    Public key SHA-256 3ac3b36beb46384b4ee05c9ca1fdea9608d9181494206ff98b36a0f39cefdad3
    Addresses
    104.21.38.237 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.140.201 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3031::6815:26ed
    2606:4700:3031::ac43:8cc9
    Cloudflare
    Cloudflare (104.21.38.237, 172.67.140.201): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    merigdarna.store
    Registered
    2026-11-07 · NameCheap, Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 04:16 UTC

    Suggest a correction

  37. oversnotri.store US · AS13335 · Cloudflare, Inc.4 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 1 d ago
    DetailsHide
    Hostname
    oversnotri.store
    First seen
    2026-11-08 03:31 UTC
    Listing
    CERT Polska listed it 2026-11-08 · still listed at the last successful feed check 2026-11-08 03:30 UTC
    Listed
    CERT Polska
    1. Certificate logged in CT
    2. Listed by CERT Polska
    3. We matched the new listing
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-11-07 05:50 UTC to 2027-02-05 05:50 UTC
    Logged 2026-11-07 06:49 UTC in Google ParcelYard2027h1, entry 656,144,851
    SHA-256 a73723960448e513f0d57229133a12090b02b05ed7be0f294a817a975a3fb75a
    Public key SHA-256 8d380727243980ab718fb18835f4cae00c288cf37e74336a6b3afbfbfa7e16c2
    Addresses
    104.21.3.52 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.130.66 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3030::ac43:8242
    2606:4700:3034::6815:334
    Cloudflare
    Cloudflare (104.21.3.52, 172.67.130.66): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    oversnotri.store
    Registered
    2026-11-07 · NameCheap, Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 04:16 UTC

    Suggest a correction

  38. pi-oferta858151.lat US · AS13335 · Cloudflare, Inc.4 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 1 d ago
    DetailsHide
    Hostname
    pi-oferta858151.lat
    First seen
    2026-11-08 03:31 UTC
    Listing
    CERT Polska listed it 2026-11-08 · still listed at the last successful feed check 2026-11-08 03:30 UTC
    Listed
    CERT Polska
    1. Certificate logged in CT
    2. Listed by CERT Polska
    3. We matched the new listing
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-07 21:36 UTC to 2027-02-05 22:33 UTC
    Logged 2026-11-07 22:36 UTC in DigiCert Sphinx2027h1, entry 394,906,702
    SHA-256 57a385e946658028549deef99475dbbf00a7ad9dd65294dd83bfcac0162554c6
    Public key SHA-256 1cf023391234a71dffd7a5f237f83e561e674a3df105d4b4d35db9cf0163cb73
    Addresses
    104.21.89.168 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.189.250 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3031::6815:59a8
    2606:4700:3036::ac43:bdfa
    Cloudflare
    Cloudflare (104.21.89.168, 172.67.189.250): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    pi-oferta858151.lat
    Registered
    2026-11-07 · Spaceship, Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 04:16 UTC

    Suggest a correction

  39. poisoconju.store US · AS13335 · Cloudflare, Inc.4 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 1 d ago
    DetailsHide
    Hostname
    poisoconju.store
    First seen
    2026-11-08 03:31 UTC
    Listing
    CERT Polska listed it 2026-11-08 · still listed at the last successful feed check 2026-11-08 03:30 UTC
    Listed
    CERT Polska
    1. Certificate logged in CT
    2. Listed by CERT Polska
    3. We matched the new listing
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-07 05:55 UTC to 2027-02-05 05:55 UTC
    Logged 2026-11-07 06:54 UTC in Google PlumbersArms2027h1, entry 656,546,428
    SHA-256 290bac268e0dd87ba1945617b91b7e7a48f174ddb0a4e89eedb7ffea5bc3d1a7
    Public key SHA-256 488ed54b280ffd38b19178bbeba0d32349eccee5d45f49f039a1835c0d07562d
    Addresses
    104.21.69.45 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.204.85 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3031::ac43:cc55
    2606:4700:3037::6815:452d
    Cloudflare
    Cloudflare (104.21.69.45, 172.67.204.85): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    poisoconju.store
    Registered
    2026-11-07 · NameCheap, Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 04:16 UTC

    Suggest a correction

  40. reneeshoes.shop US · AS13335 · Cloudflare, Inc.
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    reneeshoes.shop
    First seen
    2026-11-08 03:31 UTC
    Listing
    CERT Polska listed it 2026-11-08 · still listed at the last successful feed check 2026-11-08 03:30 UTC
    Listed
    CERT Polska
    1. Certificate logged in CT
    2. Listed by CERT Polska
    3. We matched the new listing
    4. Latest DNS check
    Certificate
    Issued by WR1 · precertificate
    Valid 2026-11-07 17:39 UTC to 2027-02-05 18:37 UTC
    Logged 2026-11-07 18:39 UTC in Let's Encrypt Willow2027h1, entry 990,233,606
    SHA-256 146a73d4b187f49e2e362a423ef10b50109fe18149c56317ab2e687e4f66a1f7
    Public key SHA-256 550dade76e8734d3ef938379689d115bdc1f1a20ecd8c162a78d23c56edf8d5b
    Addresses
    104.18.20.248 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.18.20.248): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    reneeshoes.shop
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 03:32 UTC

    Suggest a correction

  41. sbugipesco.store US · AS13335 · Cloudflare, Inc.4 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 1 d ago
    DetailsHide
    Hostname
    sbugipesco.store
    First seen
    2026-11-08 03:31 UTC
    Listing
    CERT Polska listed it 2026-11-08 · still listed at the last successful feed check 2026-11-08 03:30 UTC
    Listed
    CERT Polska
    1. Certificate logged in CT
    2. Listed by CERT Polska
    3. We matched the new listing
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-11-07 05:55 UTC to 2027-02-05 05:55 UTC
    Logged 2026-11-07 06:53 UTC in Let's Encrypt Sycamore2027h1, entry 1,006,428,007
    SHA-256 0821216a258bd3bc3ac56964cda50edd9439465043042910f78ccfb9f8ffacd9
    Public key SHA-256 3929cd82fda1562eb6f22c0e1b0bb5262d4ccbd058fa6a6f589f794c485375b4
    Addresses
    104.21.82.98 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.199.228 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3031::6815:5262
    2606:4700:3031::ac43:c7e4
    Cloudflare
    Cloudflare (104.21.82.98, 172.67.199.228): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    sbugipesco.store
    Registered
    2026-11-07 · NameCheap, Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 04:16 UTC

    Suggest a correction

  42. sodomgete.store US · AS13335 · Cloudflare, Inc.4 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 1 d ago
    DetailsHide
    Hostname
    sodomgete.store
    First seen
    2026-11-08 03:31 UTC
    Listing
    CERT Polska listed it 2026-11-08 · still listed at the last successful feed check 2026-11-08 03:30 UTC
    Listed
    CERT Polska
    1. Certificate logged in CT
    2. Listed by CERT Polska
    3. We matched the new listing
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-07 05:51 UTC to 2027-02-05 05:51 UTC
    Logged 2026-11-07 06:49 UTC in Google ParcelYard2027h1, entry 656,150,753
    SHA-256 319564d3d9f125a948b184eceaedff0b6bd2dfc1f6f5a9415f016ff63829d0c6
    Public key SHA-256 9ef8308e3c5ca44d6d0fdc059ac51e31b2430ba164f3332a7e0012bad17f6853
    Addresses
    104.21.2.153 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.129.87 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3030::6815:299
    2606:4700:3035::ac43:8157
    Cloudflare
    Cloudflare (104.21.2.153, 172.67.129.87): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    sodomgete.store
    Registered
    2026-11-07 · NameCheap, Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 04:16 UTC

    Suggest a correction

  43. trillrimun.store US · AS13335 · Cloudflare, Inc.4 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 1 d ago
    DetailsHide
    Hostname
    trillrimun.store
    First seen
    2026-11-08 03:31 UTC
    Listing
    CERT Polska listed it 2026-11-08 · still listed at the last successful feed check 2026-11-08 03:30 UTC
    Listed
    CERT Polska
    1. Certificate logged in CT
    2. Listed by CERT Polska
    3. We matched the new listing
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-11-07 05:50 UTC to 2027-02-05 05:50 UTC
    Logged 2026-11-07 06:48 UTC in Google ParcelYard2027h1, entry 656,141,874
    SHA-256 c67f64ad60c1905f2c133f7ba8b180de2b6f9a86e131f338ce8ef1b4baf88cfd
    Public key SHA-256 e705799b13c1e25e4273445017dbf12dd30762fd782767dfa533f0c8ad672f7f
    Addresses
    104.21.4.82 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.131.207 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3032::ac43:83cf
    2606:4700:3036::6815:452
    Cloudflare
    Cloudflare (104.21.4.82, 172.67.131.207): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    trillrimun.store
    Registered
    2026-11-07 · NameCheap, Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 04:16 UTC

    Suggest a correction

  44. unidlrectpyementcloud.com US · AS13335 · Cloudflare, Inc.4 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 1 d ago
    DetailsHide
    Hostname
    unidlrectpyementcloud.com
    First seen
    2026-11-08 03:31 UTC
    Listing
    CERT Polska listed it 2026-11-08 · still listed at the last successful feed check 2026-11-08 03:30 UTC
    Listed
    CERT Polska
    1. Certificate logged in CT
    2. Listed by CERT Polska
    3. We matched the new listing
    4. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-11-07 16:01 UTC to 2027-02-05 16:01 UTC
    Logged 2026-11-07 16:59 UTC in Let's Encrypt Sycamore2027h1, entry 1,020,615,295
    SHA-256 843fa9eb33068759fc675b3e2bc8d558f1c958e25285eabc792e895d0712e86d
    Public key SHA-256 e57bf876cce400486ccb07c0d9c7af6a612690f8e7bef0494d43dbd5490ecebc
    Addresses
    104.21.43.84 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.176.248 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3034::6815:2b54
    2606:4700:3036::ac43:b0f8
    Cloudflare
    Cloudflare (104.21.43.84, 172.67.176.248): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    unidlrectpyementcloud.com
    Registered
    2026-11-07 · Key-Systems GmbH
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 04:16 UTC

    Suggest a correction

  45. pikashowtv.org.pk US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX presentSPF ~allDMARC missing
    DetailsHide
    Hostname
    pikashowtv.org.pk
    First seen
    2026-11-08 03:31 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-07 23:57 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-08 02:30 UTC to 2027-02-06 03:28 UTC
    Logged 2026-11-08 03:30 UTC in DigiCert Wyvern2027h1, entry 449,065,865
    SHA-256 4fb134e4f9d3addc08e7ed4165db5e81b3db251dc5696111c0cda60c54bbb38f
    Public key SHA-256 41c284e214c61e0db1d56c1d27754af22cfd3f74df9364ef82857f009f20dc3a
    Addresses
    104.21.75.2 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.209.147 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.75.2, 172.67.209.147): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    pikashowtv.org.pk
    MX
    Receives mail at route1.mx.cloudflare.net, route2.mx.cloudflare.net, route3.mx.cloudflare.net
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 03:32 UTC

    Suggest a correction

  46. leadcoreunit.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    leadcoreunit.com
    First seen
    2026-11-08 03:26 UTC
    Listing
    CERT Polska listed it 2026-05-15 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 03:30 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-11-08 02:27 UTC to 2027-02-06 02:27 UTC
    Logged 2026-11-08 03:25 UTC in Let's Encrypt Willow2027h1, entry 996,372,348
    SHA-256 9ab89df347479eff71ab2df9a6b911df898ffeae34470ecfa9e0ed3c7329b69c
    Public key SHA-256 c38fffe6a7f98399070dcbbe8d95c207bc3e5e01ef6c1696a5fb42e807eccab3
    Addresses
    104.21.89.174 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.162.178 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.89.174, 172.67.162.178): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    leadcoreunit.com
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 03:27 UTC

    Suggest a correction

  47. mainnet-flaer.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    mainnet-flaer.com
    First seen
    2026-11-08 03:26 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-07 23:57 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-11-08 02:25 UTC to 2027-02-06 02:25 UTC
    Logged 2026-11-08 03:24 UTC in Google PlumbersArms2027h1, entry 671,063,787
    SHA-256 728664e50f6bda96c7f32b188c272ea7e575661af6aff66afb66147f47606466
    Public key SHA-256 76b6dd4381e355f039dab3763c969f88554b1435f7dd74f7e89f47b6dbe1eeca
    Addresses
    104.21.27.243 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.169.216 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.27.243, 172.67.169.216): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    mainnet-flaer.com
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 03:27 UTC

    Suggest a correction

  48. playprovidence.app US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 10 mo ago
    DetailsHide
    Hostname
    playprovidence.app
    First seen
    2026-11-08 03:26 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-07 23:56 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-08 02:22 UTC to 2027-02-06 03:20 UTC
    Logged 2026-11-08 03:22 UTC in Google ParcelYard2027h1, entry 670,721,456
    SHA-256 178052b170fad400dc1b4a62770fde129ca590a2c96bfe4f2675428c79341f5b
    Public key SHA-256 ed0e091a628bbef236b299138c21023fdea9a7d9deb73fc6623f674f9a7913c2
    PhishDestroy
    Addresses
    104.21.38.123 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.222.163 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.38.123, 172.67.222.163): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    playprovidence.app
    Registered
    2026-01-16 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 04:15 UTC

    Suggest a correction

  49. xau-adminapi.fdshfjoiasj.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareUnder fdshfjoiasj.com, listed by MetaMaskMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    xau-adminapi.fdshfjoiasj.com
    First seen
    2026-11-08 03:26 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-07 23:57 UTC
    Listed
    MetaMask, listing fdshfjoiasj.com and the names under it
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR1
    Valid 2026-11-08 02:22 UTC to 2027-02-06 02:22 UTC
    Logged 2026-11-08 03:20 UTC in Google PlumbersArms2027h1, entry 671,028,893
    SHA-256 0ae0523d86eb67a2d9d64139c6fd2dda70ba56dd024405ec72b40a822d0fdac1
    Public key SHA-256 f3811d247514acce1c74b56ee139e810013830db23d7f1e2e6fd596fe4913a60
    Addresses
    104.21.43.186 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.184.40 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.43.186, 172.67.184.40): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    fdshfjoiasj.com
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 03:22 UTC

    Suggest a correction

  50. wspolnadrogaprzyszlosciw.site US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    wspolnadrogaprzyszlosciw.site
    First seen
    2026-11-08 03:21 UTC
    Listing
    CERT Polska listed it 2026-07-14 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 03:30 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1
    Valid 2026-09-10 00:18 UTC to 2026-12-09 01:15 UTC
    Logged 2026-11-08 03:20 UTC in Let's Encrypt Willow2026h2, entry 1,028,919,486
    SHA-256 01ebc38021548805b4826571806e5809320c2e9454e9d0de629306a86c58d419
    Public key SHA-256 14a93f85195e62b54304a764c17e00fad02dfdd1dc1ceec66921ad5ae6830c71
    Addresses
    104.21.74.20 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.167.143 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.74.20, 172.67.167.143): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    wspolnadrogaprzyszlosciw.site
    Registered
    2026-07-12 · NameCheap, Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 04:16 UTC

    Suggest a correction

  51. xau-h5api.fdshfjoiasj.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareUnder fdshfjoiasj.com, listed by MetaMaskMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    xau-h5api.fdshfjoiasj.com
    First seen
    2026-11-08 03:21 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-07 23:57 UTC
    Listed
    MetaMask, listing fdshfjoiasj.com and the names under it
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR1
    Valid 2026-11-08 02:21 UTC to 2027-02-06 02:21 UTC
    Logged 2026-11-08 03:20 UTC in Google PlumbersArms2027h1, entry 671,023,998
    SHA-256 b9b9e40cb0d07891dd633f254441ab927ea951b8d7cae37243612f8940b200f9
    Public key SHA-256 624440b0949eeef0ec7b736aaaa1a63d8a9fb4bddcc895845e9fb5423f1d0021
    Addresses
    104.21.43.186 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.184.40 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.43.186, 172.67.184.40): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    fdshfjoiasj.com
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 03:22 UTC

    Suggest a correction

  52. flasherhub.online US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    flasherhub.online
    First seen
    2026-11-08 03:16 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-07 23:57 UTC
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-07 23:56 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-08 02:12 UTC to 2027-02-06 02:12 UTC
    Logged 2026-11-08 03:11 UTC in Let's Encrypt Sycamore2027h1, entry 1,034,762,770
    SHA-256 3d38297f74a49a98dd1e46ec801073001c1d06588cd11198896cabf76bb5e843
    Public key SHA-256 61bd42a4857e5b826f8a3469053be6f10e245546f0f0f13f20bbe38f82ce826f
    Addresses
    104.21.21.222 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.200.216 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.21.222, 172.67.200.216): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    flasherhub.online
    Registered
    2026-05-03 · HOSTINGER operations, UAB
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 04:16 UTC

    Suggest a correction

  53. fuyuh.com US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX presentSPF ~allSPF on Spamhaus DROPDMARC policy noneRegistered 5 y ago
    DetailsHide
    Hostname
    fuyuh.com
    First seen
    2026-11-08 03:16 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-07 23:56 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR2
    Valid 2026-11-08 02:16 UTC to 2027-02-06 02:16 UTC
    Logged 2026-11-08 03:15 UTC in Google PlumbersArms2027h1, entry 670,964,379
    SHA-256 27e4ec846301317c4b0c742f144ba25bc96b91f7fa38cd50e606844816be8d0d
    Public key SHA-256 34f0eb89260192ed52e9b425938739cb4386affccb3bdd9c945b919582f42568
    PhishDestroy
    Addresses
    104.21.27.20 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.140.213 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.27.20, 172.67.140.213): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    fuyuh.com
    Registered
    2022-03-23 · Cloudflare, Inc.
    MX
    Receives mail at route2.mx.cloudflare.net, route1.mx.cloudflare.net, route3.mx.cloudflare.net
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    DMARC policy p=none: reports only
    SPF listing
    The SPF record lists 111.90.156.123 as a sender. It is on Spamhaus DROP: hijacked or criminal networks.
    Checked
    2026-11-08 03:17 UTC

    Suggest a correction

  54. moonshot-votes.sbs US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 8 mo ago
    DetailsHide
    Hostname
    moonshot-votes.sbs
    First seen
    2026-11-08 03:16 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-07 23:56 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-11-08 02:14 UTC to 2027-02-06 02:14 UTC
    Logged 2026-11-08 03:12 UTC in IPng Networks Gouda2027h1, entry 349,671,551
    SHA-256 7224aaff7a51809d4d3b0bf9c3b8aee15ea10a38e690d89483bf40845cb6933e
    Public key SHA-256 3ad97c7e97a03274dc5f52d6113eefafc4ccf8f7fa246cc5f6fed6699f013359
    PhishDestroy
    Addresses
    104.21.43.220 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.186.97 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.43.220, 172.67.186.97): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    moonshot-votes.sbs
    Registered
    2026-03-16 · Global Domain Group LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 04:16 UTC

    Suggest a correction

  55. vatoridex-app-solution-com.financecryptoworld.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareUnder financecryptoworld.com, listed by CERT PolskaMX presentSPF ~allDMARC missingRegistered 22 mo ago
    DetailsHide
    Hostname
    vatoridex-app-solution-com.financecryptoworld.com
    First seen
    2026-11-08 03:16 UTC
    Listing
    CERT Polska listed it 2026-06-12 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 03:30 UTC
    Listed
    CERT Polska, listing financecryptoworld.com and the names under it
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-08 02:11 UTC to 2027-02-06 03:11 UTC
    Logged 2026-11-08 03:11 UTC in DigiCert Sphinx2027h1, entry 397,021,405
    SHA-256 31d3d071e055450fea536b14dba44cb71f8c037a48ccd4eccb3b02461ec2ae0c
    Public key SHA-256 fba5a57ebadfd619af65244a1ffc081e482cb1362942d1e7a2de4822230a0774
    Addresses
    104.21.10.130 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.131.121 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.10.130, 172.67.131.121): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    financecryptoworld.com
    Registered
    2025-01-30 · MainReg Inc.
    MX
    Receives mail at mail.financecryptoworld.com
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-07 17:16 UTC

    Suggest a correction

  56. www.fuyuh.com US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareUnder fuyuh.com, reported by PhishDestroyMX presentSPF ~allSPF on Spamhaus DROPDMARC policy noneRegistered 5 y ago
    DetailsHide
    Hostname
    www.fuyuh.com
    First seen
    2026-11-08 03:16 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-07 23:56 UTC
    Reported
    PhishDestroy, listing fuyuh.com and the names under it
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR2
    Valid 2026-11-08 02:16 UTC to 2027-02-06 02:16 UTC
    Logged 2026-11-08 03:15 UTC in Google PlumbersArms2027h1, entry 670,964,379
    SHA-256 27e4ec846301317c4b0c742f144ba25bc96b91f7fa38cd50e606844816be8d0d
    Public key SHA-256 34f0eb89260192ed52e9b425938739cb4386affccb3bdd9c945b919582f42568
    PhishDestroy
    Addresses
    104.21.27.20 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.140.213 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.27.20, 172.67.140.213): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    fuyuh.com
    Registered
    2022-03-23 · Cloudflare, Inc.
    MX
    Receives mail at route2.mx.cloudflare.net, route1.mx.cloudflare.net, route3.mx.cloudflare.net
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    DMARC policy p=none: reports only
    SPF listing
    The SPF record lists 111.90.156.123 as a sender. It is on Spamhaus DROP: hijacked or criminal networks.
    Checked
    2026-11-08 03:17 UTC

    Suggest a correction

  57. aiammfintex.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    aiammfintex.com
    First seen
    2026-11-08 03:11 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-07 23:57 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-11-08 02:08 UTC to 2027-02-06 02:08 UTC
    Logged 2026-11-08 03:07 UTC in Google ParcelYard2027h1, entry 670,561,249
    SHA-256 b1c7446161321576fb6faee1d944786aed236e2841f61062ac3d71bd16ba3718
    Public key SHA-256 f69048ff8068c3061b22dd9f3b7f428cb66c19654e7ea2d25b9eb1beef3929d0
    Addresses
    104.21.36.205 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.199.76 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.36.205, 172.67.199.76): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    aiammfintex.com
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 03:12 UTC

    Suggest a correction

  58. www.swapslogin.xyz US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareUnder swapslogin.xyz, reported by PhishDestroyMX absentSPF missingDMARC missingRegistered 48 d ago
    DetailsHide
    Hostname
    www.swapslogin.xyz
    First seen
    2026-11-08 03:11 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-07 23:56 UTC
    Reported
    PhishDestroy, listing swapslogin.xyz and the names under it
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WR1 · precertificate
    Valid 2026-11-08 02:06 UTC to 2027-02-06 01:57 UTC
    Logged 2026-11-08 03:06 UTC in Google ParcelYard2027h1, entry 670,551,748
    SHA-256 5e099508be183935c117e8bf3e7e5f1704d413344025fb62482497baeb354c5a
    Public key SHA-256 1dd57b303a7802d3f6838ad6b7ca93742cc06698188f4ed784d951205cf31d4d
    PhishDestroy
    Addresses
    104.21.73.2 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.156.4 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.73.2, 172.67.156.4): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    swapslogin.xyz
    Registered
    2026-09-21 · NameSilo, LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 03:08 UTC

    Suggest a correction

  59. legalizer.cc US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 10 y ago
    DetailsHide
    Hostname
    legalizer.cc
    First seen
    2026-11-08 03:05 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-07 23:56 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-08 02:00 UTC to 2027-02-06 02:58 UTC
    Logged 2026-11-08 03:00 UTC in Let's Encrypt Sycamore2027h1, entry 1,034,477,039
    SHA-256 12abe0bffe9ac36e542658e8d42a12f712aa64bf160e0479da4b815b1defe01f
    Public key SHA-256 045ba1f832d46baf9c424d829ac16133f584bc8c92f253c4a508a27c6fdebf8d
    PhishDestroy
    Addresses
    104.21.62.174 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.137.228 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.62.174, 172.67.137.228): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    legalizer.cc
    Registered
    2016-11-16 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 04:15 UTC

    Suggest a correction

  60. rainbetcasino.org.es US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    rainbetcasino.org.es
    First seen
    2026-11-08 03:05 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-07 23:57 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1
    Valid 2026-11-08 02:01 UTC to 2027-02-06 02:59 UTC
    Logged 2026-11-08 03:04 UTC in DigiCert Wyvern2027h1, entry 448,825,233
    SHA-256 3796834791a9f58a7e9b86ffd760c3847612edd22b37846083b6503ce7745af8
    Public key SHA-256 93fb4f9212ba8bcb4f927490786508fbb856f0f14e2b45c6e803ffe13226ffbe
    Addresses
    104.21.45.130 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.214.162 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.45.130, 172.67.214.162): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    rainbetcasino.org.es
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 03:11 UTC

    Suggest a correction

  61. 7xwu7.me US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by NPA 165 (information services)MX absentSPF missingDMARC missingRegistered 2 mo ago
    DetailsHide
    Hostname
    7xwu7.me
    First seen
    2026-11-08 03:00 UTC
    First published
    2026-11-08 03:09 UTC
    Listing
    NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 01:35 UTC
    DNS
    Resolves · checked 2026-11-08 03:13 UTC
    Listed
    NPA 165
    1. Observed in the NPA 165 feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-08 01:59 UTC to 2027-02-06 02:56 UTC
    Logged 2026-11-08 02:59 UTC in Google PlumbersArms2027h1, entry 670,791,279
    SHA-256 732b6ac3403244f3155c3eadd4100b955463b9fedb93f6225b3ae6b34ca8fb22
    Public key SHA-256 66965753e68164eaf84669ba9db748c91510f1fb1a65068be8b4784f59472609
    Addresses
    104.21.24.159 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.219.150 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.24.159, 172.67.219.150): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    7xwu7.me
    Registered
    2026-09-09 · NameSilo, LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 03:08 UTC

    Suggest a correction

  62. fbguide-bizhelp.pages.dev US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishTank
    DetailsHide
    Hostname
    fbguide-bizhelp.pages.dev
    First seen
    2026-11-08 03:00 UTC
    First published
    2026-11-08 03:09 UTC
    Listing
    PhishTank: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-08 04:06 UTC
    DNS
    Resolves · checked 2026-11-08 03:13 UTC
    Reported
    PhishTank
    1. Observed in the PhishTank feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-08 01:58 UTC to 2027-02-06 02:56 UTC
    Logged 2026-11-08 02:58 UTC in Google ParcelYard2027h1, entry 670,465,651
    SHA-256 53b35f6b9dbca05f9bc87ed9ef86815a9fc9d8c1dd861c2fd2e5b03a44d1f001
    Public key SHA-256 6c20abc31baff6fdb3f2ba4ed6b138f185b48c8ef36ca9c983207df179d83d14
    PhishTank
    PhishTank report #8878355
    Addresses
    172.66.44.139 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.66.47.117 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (172.66.44.139, 172.66.47.117): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.

    Suggest a correction

  63. indkuret.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    indkuret.com
    First seen
    2026-11-08 03:00 UTC
    First published
    2026-11-08 03:09 UTC
    Listing
    CERT Polska listed it 2026-05-14 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 03:30 UTC
    DNS
    Resolves · checked 2026-11-08 03:13 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-11-08 02:00 UTC to 2027-02-06 02:00 UTC
    Logged 2026-11-08 02:59 UTC in DigiCert Wyvern2027h1, entry 448,764,938
    SHA-256 7f5fa304777dffe1d4940dd13ac7ea3238f8d18f014b33daf18a5bfb3866cdaf
    Public key SHA-256 9ae38949ac45c09759a225440b438926b4a783bf3c188d2c56c2d4558d3c3f1c
    Addresses
    104.21.36.77 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.190.99 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.36.77, 172.67.190.99): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    indkuret.com
    Registered
    2026-05-14 · NameCheap, Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 03:08 UTC

    Suggest a correction

  64. secure-metmask-wallet.pages.dev US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMask
    DetailsHide
    Hostname
    secure-metmask-wallet.pages.dev
    First seen
    2026-11-08 03:00 UTC
    First published
    2026-11-08 03:09 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-07 23:57 UTC
    DNS
    Resolves · checked 2026-11-08 03:13 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-08 01:58 UTC to 2027-02-06 02:57 UTC
    Logged 2026-11-08 02:58 UTC in DigiCert Sphinx2027h1, entry 396,896,587
    SHA-256 edc42e4081f1070c6d884c21ff35e65283e622f44981449a9e84669e25de9de0
    Public key SHA-256 a4493970bbc27051245bce97be0a9c09f63db0a1b776fed0df828844d4108b07
    Addresses
    172.66.44.77 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.66.47.179 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (172.66.44.77, 172.66.47.179): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.

    Suggest a correction

  65. betheldentist.com US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 18 y ago
    DetailsHide
    Hostname
    betheldentist.com
    First seen
    2026-11-08 02:56 UTC
    First published
    2026-11-08 03:09 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-07 23:56 UTC
    DNS
    Resolves · checked 2026-11-08 03:13 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-11-08 01:53 UTC to 2027-02-06 01:53 UTC
    Logged 2026-11-08 02:51 UTC in IPng Networks Gouda2027h1, entry 349,512,080
    SHA-256 93685ec70f41cdb43c24588c386b9ec2a894da54af79047c1221a38676d612fe
    Public key SHA-256 7b8ae38b24ecbedebac7077de3dac83a3ac9ba690f5f019ffe86cae2777f59c7
    PhishDestroy
    Addresses
    104.21.40.110 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.150.189 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.40.110, 172.67.150.189): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    betheldentist.com
    Registered
    2008-09-02 · GoDaddy.com, LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 03:08 UTC

    Suggest a correction

  66. era-chainlink.xyz US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 12 mo ago
    DetailsHide
    Hostname
    era-chainlink.xyz
    First seen
    2026-11-08 02:56 UTC
    First published
    2026-11-08 03:09 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-07 23:56 UTC
    DNS
    Resolves · checked 2026-11-08 03:13 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-08 01:55 UTC to 2027-02-06 02:54 UTC
    Logged 2026-11-08 02:55 UTC in IPng Networks Halloumi2027h1, entry 406,410,751
    SHA-256 f994f27350f56d2d05910bbf7355858a3b40971082a8f154557b7e8114687da0
    Public key SHA-256 142cc2e0fc026938b4b8e754ecf5b22fad0a3a9befff6515c6a5c0d2e6e19a99
    PhishDestroy
    Addresses
    104.21.42.31 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.199.185 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.42.31, 172.67.199.185): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    era-chainlink.xyz
    Registered
    2025-11-18 · Dynadot Inc
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 03:00 UTC

    Suggest a correction

  67. fightfoundations.digital US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    fightfoundations.digital
    First seen
    2026-11-08 02:56 UTC
    First published
    2026-11-08 03:09 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-07 23:57 UTC
    DNS
    Resolves · checked 2026-11-08 03:13 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-11-08 01:53 UTC to 2027-02-06 01:53 UTC
    Logged 2026-11-08 02:51 UTC in TrustAsia Luoshu2027, entry 574,189,885
    SHA-256 86d9303fe2557289ee0bfdfec03abcf33e01a68d22a0f66002524542feb25de7
    Public key SHA-256 f32266ff98c0b5b0077042b556d6c1130574e6953b3cee33802206a29216f83b
    Addresses
    104.21.91.51 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.166.191 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.91.51, 172.67.166.191): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    fightfoundations.digital
    Registered
    2026-05-14 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 03:00 UTC

    Suggest a correction

  68. online.webonlinemicrosoftpdf.sbs US · AS13335 · Cloudflare, Inc.4 addresses
    ListedCloudflareUnder webonlinemicrosoftpdf.sbs, listed by MetaMaskMX absentSPF missingDMARC missingRegistered 2 mo ago
    DetailsHide
    Hostname
    online.webonlinemicrosoftpdf.sbs
    First seen
    2026-11-08 02:56 UTC
    First published
    2026-11-08 03:09 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-07 23:57 UTC
    DNS
    Resolves · checked 2026-11-08 03:13 UTC
    Listed
    MetaMask, listing webonlinemicrosoftpdf.sbs and the names under it
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-08 01:53 UTC to 2027-02-06 02:51 UTC
    Logged 2026-11-08 02:53 UTC in Google PlumbersArms2027h1, entry 670,728,659
    SHA-256 1df86fee1357dfb99be1622fed28013eb647312e6fc8df87e1449f3932c4115b
    Public key SHA-256 e1f63ee6471643b41f039ad8eb6675d6eba43d4c153f9b27805447272a821b96
    Addresses
    104.21.61.244 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.217.39 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3032::ac43:d927
    2606:4700:3035::6815:3df4
    Cloudflare
    Cloudflare (104.21.61.244, 172.67.217.39): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    webonlinemicrosoftpdf.sbs
    Registered
    2026-09-07 · NameSilo, LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-07 05:07 UTC

    Suggest a correction

  69. proxy.dynnhost.com US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareUnder dynnhost.com, reported by PhishDestroyMX absentSPF missingDMARC missingRegistered 12 mo ago
    DetailsHide
    Hostname
    proxy.dynnhost.com
    First seen
    2026-11-08 02:56 UTC
    First published
    2026-11-08 03:09 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-07 23:56 UTC
    DNS
    Resolves · checked 2026-11-08 03:13 UTC
    Reported
    PhishDestroy, listing dynnhost.com and the names under it
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR1
    Valid 2026-11-08 01:54 UTC to 2027-02-06 01:54 UTC
    Logged 2026-11-08 02:52 UTC in Google ParcelYard2027h1, entry 670,398,497
    SHA-256 9013637dcb8fab9720a4b14926f3259c6483b40d298a0ea6c74820538c41f58a
    Public key SHA-256 b01f05a5105a5ed590cba18bfc12e4df16d1e643b3a8631584428bbc5404d4ae
    PhishDestroy
    Addresses
    104.21.10.161 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.131.173 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.10.161, 172.67.131.173): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    dynnhost.com
    Registered
    2025-11-02 · IONOS SE
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-07 14:46 UTC

    Suggest a correction

  70. westchester-towing.com US · AS209242 · CLOUDFLARESPECTRUM Cloudfla…
    ReportedCloudflareReported by PhishDestroyMX presentSPF ~allDMARC missingRegistered 3 y ago
    DetailsHide
    Hostname
    westchester-towing.com
    First seen
    2026-11-08 02:56 UTC
    First published
    2026-11-08 03:09 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-07 23:56 UTC
    DNS
    Resolves · checked 2026-11-08 03:13 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WR1 · precertificate
    Valid 2026-11-08 01:52 UTC to 2027-02-06 02:52 UTC
    Logged 2026-11-08 02:52 UTC in DigiCert Wyvern2027h1, entry 448,728,765
    SHA-256 27a78d50e4f4fd046a48693953dfd8451bf961ce33d4c40d4b1927d13a39174b
    Public key SHA-256 59bc944e10119f1e07db700c3576da81e124166da61886d5549796a57baa49b0
    PhishDestroy
    Addresses
    160.153.0.51 · United States · AS209242 CLOUDFLARESPECTRUM Cloudflare London, LLC · Cloudflare (cdn)
    Cloudflare
    Cloudflare (160.153.0.51): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    westchester-towing.com
    Registered
    2024-05-01 · GoDaddy.com, LLC
    MX
    Receives mail at mail.westchester-towing.com
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 03:08 UTC

    Suggest a correction

  71. www.westchester-towing.com US · AS209242 · CLOUDFLARESPECTRUM Cloudfla…
    ReportedCloudflareUnder westchester-towing.com, reported by PhishDestroyMX presentSPF ~allDMARC missingRegistered 3 y ago
    DetailsHide
    Hostname
    www.westchester-towing.com
    First seen
    2026-11-08 02:56 UTC
    First published
    2026-11-08 03:09 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-07 23:56 UTC
    DNS
    Resolves · checked 2026-11-08 03:13 UTC
    Reported
    PhishDestroy, listing westchester-towing.com and the names under it
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WR1 · precertificate
    Valid 2026-11-08 01:53 UTC to 2027-02-06 02:53 UTC
    Logged 2026-11-08 02:53 UTC in IPng Networks Halloumi2027h1, entry 406,393,229
    SHA-256 1c44414241202863880f11da65a41b11da394d4f893982b078132162c36d3b61
    Public key SHA-256 761212816c1052608653db353a8573e1a7262d7a16ca563feb59df2bef21fcd5
    PhishDestroy
    Addresses
    160.153.0.51 · United States · AS209242 CLOUDFLARESPECTRUM Cloudflare London, LLC · Cloudflare (cdn)
    Cloudflare
    Cloudflare (160.153.0.51): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    westchester-towing.com
    Registered
    2024-05-01 · GoDaddy.com, LLC
    MX
    Receives mail at mail.westchester-towing.com
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 03:08 UTC

    Suggest a correction

  72. luckyblock-casino.uk US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 8 mo ago
    DetailsHide
    Hostname
    luckyblock-casino.uk
    First seen
    2026-11-08 02:51 UTC
    First published
    2026-11-08 03:09 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-07 23:57 UTC
    DNS
    Resolves · checked 2026-11-08 03:13 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1
    Valid 2026-09-10 00:18 UTC to 2026-12-09 01:16 UTC
    Logged 2026-11-08 02:50 UTC in IPng Networks Halloumi2026h2a, entry 1,292,116,217
    SHA-256 1821567c6667576be9cfe8d2e2457935a97c521e8d52d773df12c5c3ac4fb794
    Public key SHA-256 018bd6217a23e5330e8faae0ea793c2fb3673cdeaec41296486ebf607507dfcb
    Addresses
    104.21.17.78 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.175.76 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.17.78, 172.67.175.76): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    luckyblock-casino.uk
    Registered
    2026-03-11 · Hosting Concepts B.V.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 03:08 UTC

    Suggest a correction

  73. wiwedo-visoto.info US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    wiwedo-visoto.info
    First seen
    2026-11-08 02:51 UTC
    First published
    2026-11-08 03:09 UTC
    Listing
    CERT Polska listed it 2026-05-16 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 03:30 UTC
    DNS
    Resolves · checked 2026-11-08 03:13 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-08 01:49 UTC to 2027-02-06 01:49 UTC
    Logged 2026-11-08 02:47 UTC in Google ParcelYard2027h1, entry 670,344,416
    SHA-256 b403e732bd220878bf5710ef2ee6f0af90af91ff67e51d9ede1203e05dfcb6a5
    Public key SHA-256 e6c60849cdf100cf7006e18589802c2b0e7508392c7db2ded4357837f9c4ba18
    Addresses
    104.21.64.15 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.174.26 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.64.15, 172.67.174.26): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    wiwedo-visoto.info
    Registered
    2026-05-14 · NameCheap, Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 03:08 UTC

    Suggest a correction

  74. degen-camp.fun US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 8 mo ago
    DetailsHide
    Hostname
    degen-camp.fun
    First seen
    2026-11-08 02:46 UTC
    First published
    2026-11-08 03:09 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-07 23:56 UTC
    DNS
    Resolves · checked 2026-11-08 03:13 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-11-08 01:46 UTC to 2027-02-06 01:46 UTC
    Logged 2026-11-08 02:44 UTC in IPng Networks Gouda2027h1, entry 349,454,268
    SHA-256 9eff311c43ae49c81a0893ed362fb2638b3c9d5176dd8f1cba25149cd3915882
    Public key SHA-256 eff3af0198bd9f7ebff4cda6323c18b493e2491ea2a64e3e2bd1e4404eb74e98
    PhishDestroy
    Addresses
    104.21.19.227 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.190.111 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.19.227, 172.67.190.111): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    degen-camp.fun
    Registered
    2026-03-16 · PDR Ltd. d/b/a PublicDomainRegistry.com
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 03:08 UTC

    Suggest a correction

  75. pzrsj.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    pzrsj.com
    First seen
    2026-11-08 02:46 UTC
    First published
    2026-11-08 03:09 UTC
    Listing
    CERT Polska listed it 2026-05-22 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 03:30 UTC
    DNS
    Resolves · checked 2026-11-08 03:13 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-11-08 01:44 UTC to 2027-02-06 01:43 UTC
    Logged 2026-11-08 02:42 UTC in Let's Encrypt Sycamore2027h1, entry 1,034,100,583
    SHA-256 743849d31331dd871ba4f9723ec15f0606f3d2eab0ceb2250cc2e11afea3220e
    Public key SHA-256 ab2f36edce1109329de3e9a2218ea4bb27d253509a72e276b681e072929724e8
    Addresses
    104.21.4.63 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.154.13 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.4.63, 172.67.154.13): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    pzrsj.com
    Registered
    2026-05-14 · Cloud Yuqu LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 03:09 UTC

    Suggest a correction

  76. swapslogin.xyz US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 48 d ago
    DetailsHide
    Hostname
    swapslogin.xyz
    First seen
    2026-11-08 02:46 UTC
    First published
    2026-11-08 03:09 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-07 23:56 UTC
    DNS
    Resolves · checked 2026-11-08 03:13 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-11-08 01:43 UTC to 2027-02-06 01:43 UTC
    Logged 2026-11-08 02:41 UTC in Geomys Tuscolo2027h1, entry 522,360,493
    SHA-256 6f66fad372a5c4f810a842bccfc2d3d5bb7b9a60cfb681939053305b0ac3292c
    Public key SHA-256 7788562bf7b78604063b65dec0f03f0f0c1ac50391871afeeaf51d68cdf23fb9
    PhishDestroy
    Addresses
    104.21.73.2 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.156.4 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.73.2, 172.67.156.4): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    swapslogin.xyz
    Registered
    2026-09-21 · NameSilo, LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 03:08 UTC

    Suggest a correction

  77. teveluxar.work US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    teveluxar.work
    First seen
    2026-11-08 02:46 UTC
    First published
    2026-11-08 03:09 UTC
    Listing
    CERT Polska listed it 2026-06-10 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 03:30 UTC
    DNS
    Resolves · checked 2026-11-08 03:13 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-11-08 01:46 UTC to 2027-02-06 01:46 UTC
    Logged 2026-11-08 02:45 UTC in DigiCert Sphinx2027h1, entry 396,798,970
    SHA-256 0fdfeaaebe77dd9157ca59a72752b513f590ba59c1a917e2232202899e624ec7
    Public key SHA-256 b92195a1fa5a8c0f007939b924e32522967f4c5332539edc434619e050e616ed
    Addresses
    104.21.43.143 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.180.55 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.43.143, 172.67.180.55): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    teveluxar.work
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 02:50 UTC

    Suggest a correction

  78. www.fifa-2026.xyz US · AS13335 · Cloudflare, Inc.
    ReportedCloudflareUnder fifa-2026.xyz, reported by PhishDestroyMX absentSPF missingDMARC missingRegistered 8 mo ago
    DetailsHide
    Hostname
    www.fifa-2026.xyz
    First seen
    2026-11-08 02:46 UTC
    First published
    2026-11-08 03:09 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-07 23:56 UTC
    DNS
    Resolves · checked 2026-11-08 03:13 UTC
    Reported
    PhishDestroy, listing fifa-2026.xyz and the names under it
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1
    Valid 2026-09-09 23:34 UTC to 2026-12-09 00:34 UTC
    Logged 2026-11-08 02:43 UTC in DigiCert Wyvern2026h2, entry 2,211,319,430
    SHA-256 512a2fcc80443764660d15d107cf6cfaf1b401895a657c33e86eacb7d601af9f
    Public key SHA-256 0efec5bf07cd1f267a12f98a9ba858b4db9ee5f1c919fecf974ee45ce9695aa7
    PhishDestroy
    Addresses
    185.158.133.1 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (185.158.133.1): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    fifa-2026.xyz
    Registered
    2026-03-10 · GoDaddy.com, LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 03:08 UTC

    Suggest a correction

  79. stakerow.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    stakerow.com
    First seen
    2026-11-08 02:41 UTC
    First published
    2026-11-08 03:09 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-07 23:57 UTC
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-07 23:56 UTC
    DNS
    Resolves · checked 2026-11-08 03:13 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-08 01:37 UTC to 2027-02-06 02:36 UTC
    Logged 2026-11-08 02:37 UTC in IPng Networks Gouda2027h1, entry 349,405,026
    SHA-256 5d695ac61d33c7a033f81419f2f17439f6ce2690e3df0cbaad3e028a60da11c5
    Public key SHA-256 44f866511bcd590ce7025c3314c8e4d8800ab5556ffac8940a45ff67f1cd0545
    Addresses
    104.21.19.52 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.185.63 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.19.52, 172.67.185.63): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    stakerow.com
    Registered
    2026-07-12 · Atak Domain Bilgi Teknolojileri A.S.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 03:09 UTC

    Suggest a correction

  80. steamcomrrnunity.com US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 22 mo ago
    DetailsHide
    Hostname
    steamcomrrnunity.com
    First seen
    2026-11-08 02:41 UTC
    First published
    2026-11-08 03:09 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-07 23:56 UTC
    DNS
    Resolves · checked 2026-11-08 03:13 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1
    Valid 2026-09-09 23:39 UTC to 2026-12-09 00:36 UTC
    Logged 2026-11-08 02:39 UTC in DigiCert Wyvern2026h2, entry 2,211,314,950
    SHA-256 13ee59ffea13fdbc81846e252844b5df180ece4e4ad82eba5e35ed661567d3fc
    Public key SHA-256 66e63dbfaba3f93c22640512c8e78106322e7a3710180ecd2030fbde17dfdb0d
    PhishDestroy
    Addresses
    104.21.75.95 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.219.97 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.75.95, 172.67.219.97): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    steamcomrrnunity.com
    Registered
    2025-01-26 · Squarespace Domains LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 03:09 UTC

    Suggest a correction

  81. xeroadvisor.healingark.app US · AS13335 · Cloudflare, Inc.
    ListedCloudflareUnder healingark.app, listed by MetaMaskMX presentSPF ~allDMARC policy noneRegistered 16 mo ago
    DetailsHide
    Hostname
    xeroadvisor.healingark.app
    First seen
    2026-11-08 02:41 UTC
    First published
    2026-11-08 03:09 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-07 23:57 UTC
    DNS
    Resolves · checked 2026-11-08 03:13 UTC
    Listed
    MetaMask, listing healingark.app and the names under it
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1
    Valid 2026-11-08 01:36 UTC to 2027-02-06 02:36 UTC
    Logged 2026-11-08 02:39 UTC in Let's Encrypt Willow2027h1, entry 995,841,617
    SHA-256 1165ba2bf08438053890e35b55115d383eff6831eea99dab56d1c307461bfd29
    Public key SHA-256 79db7289a1f7c9edd229857f81e2d4c2382a42fb8f067401dc1af1339855d846
    Addresses
    185.158.133.1 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (185.158.133.1): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    healingark.app
    Registered
    2025-07-17 · 1&1 Internet SE
    MX
    Receives mail at mx00.ionos.com, mx01.ionos.com
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    DMARC policy p=none: reports only
    Checked
    2026-11-08 00:44 UTC

    Suggest a correction

  82. iegion.co US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 12 mo ago
    DetailsHide
    Hostname
    iegion.co
    First seen
    2026-11-08 02:36 UTC
    First published
    2026-11-08 03:09 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-07 23:56 UTC
    DNS
    Resolves · checked 2026-11-08 03:13 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-08 01:35 UTC to 2027-02-06 02:34 UTC
    Logged 2026-11-08 02:35 UTC in Google PlumbersArms2027h1, entry 670,542,268
    SHA-256 7f5b2c59e76bb2f2c2c12c27d992f1eac2c04821f5a18a1abb2dd2cfa9e84ba1
    Public key SHA-256 664d2f43d74325ce3af0bd58680560838d2e3913ca920abdb2709ea88931dd5f
    PhishDestroy
    Addresses
    104.21.84.166 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.195.78 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.84.166, 172.67.195.78): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    iegion.co
    Registered
    2025-11-18 · Web Commerce Communications Limited dba WebNic.cc
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 03:08 UTC

    Suggest a correction

  83. zbcn.club US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    zbcn.club
    First seen
    2026-11-08 02:36 UTC
    First published
    2026-11-08 03:09 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-07 23:57 UTC
    DNS
    Resolves · checked 2026-11-08 03:13 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-08 01:33 UTC to 2027-02-06 02:32 UTC
    Logged 2026-11-08 02:34 UTC in IPng Networks Halloumi2027h1, entry 406,242,510
    SHA-256 30a1834ad975e22030c6f0c019fae85c2bc5040a194705132cc5898d81ce3fe3
    Public key SHA-256 d60060e515ecc4f0b6dbbcf495c30e69df2434d4a6d42a1990f3955f77b529db
    Addresses
    104.21.81.221 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.191.150 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.81.221, 172.67.191.150): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    zbcn.club
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 02:40 UTC

    Suggest a correction

  84. bdag.io US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX presentSPF missingDMARC missingRegistered 3 y ago
    DetailsHide
    Hostname
    bdag.io
    First seen
    2026-11-08 02:31 UTC
    First published
    2026-11-08 03:09 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-07 23:56 UTC
    DNS
    Resolves · checked 2026-11-08 03:13 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-08 01:27 UTC to 2027-02-06 02:24 UTC
    Logged 2026-11-08 02:27 UTC in Geomys Tuscolo2027h1, entry 522,237,311
    SHA-256 136c28d650ca98849b04866f90f43d2a9393697a2b34c27e74a0abaac9a96a04
    Public key SHA-256 a4623af2f773bb62bf1e8e417682af21dfb757a384f0e514443411e4cc701576
    PhishDestroy
    Addresses
    104.21.30.7 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.150.43 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.30.7, 172.67.150.43): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    bdag.io
    Registered
    2024-04-05 · TLD Registrar Solutions Ltd.
    MX
    Receives mail at _dc-mx.74636aa92037.bdag.io
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 03:08 UTC

    Suggest a correction

  85. claim-pengu.app US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 8 mo ago
    DetailsHide
    Hostname
    claim-pengu.app
    First seen
    2026-11-08 02:31 UTC
    First published
    2026-11-08 03:09 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-07 23:56 UTC
    DNS
    Resolves · checked 2026-11-08 03:13 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-11-08 01:27 UTC to 2027-02-06 01:27 UTC
    Logged 2026-11-08 02:26 UTC in Google PlumbersArms2027h1, entry 670,456,133
    SHA-256 90d80ee0eb0fa311813c12ecadcb149a232325047acdf70d55c809e63cd2410e
    Public key SHA-256 0bc24e012397d8c10465a5133f5b53e4759f150a3688aabf716a4b9f71fc2c8c
    PhishDestroy
    Addresses
    104.21.70.18 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.217.237 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.70.18, 172.67.217.237): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    claim-pengu.app
    Registered
    2026-03-16 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 03:08 UTC

    Suggest a correction

  86. immediate-evex-pro-software-com.financecryptoworld.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareUnder financecryptoworld.com, listed by CERT PolskaMX presentSPF ~allDMARC missingRegistered 22 mo ago
    DetailsHide
    Hostname
    immediate-evex-pro-software-com.financecryptoworld.com
    First seen
    2026-11-08 02:31 UTC
    First published
    2026-11-08 03:09 UTC
    Listing
    CERT Polska listed it 2026-06-12 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 03:30 UTC
    DNS
    Resolves · checked 2026-11-08 03:13 UTC
    Listed
    CERT Polska, listing financecryptoworld.com and the names under it
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WR1 · precertificate
    Valid 2026-11-08 01:29 UTC to 2027-02-06 02:26 UTC
    Logged 2026-11-08 02:29 UTC in Let's Encrypt Sycamore2027h1, entry 1,033,831,618
    SHA-256 28014703331409229388f1f6e22544f7bbca53e1225a60f1d1500b5f38ee3e40
    Public key SHA-256 74b12370a03719da57fead026e8e96def18985ff76b642607127c4157e42200b
    Addresses
    104.21.10.130 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.131.121 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.10.130, 172.67.131.121): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    financecryptoworld.com
    Registered
    2025-01-30 · MainReg Inc.
    MX
    Receives mail at mail.financecryptoworld.com
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-07 17:16 UTC

    Suggest a correction

  87. www.gtasaproapk.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareUnder gtasaproapk.com, listed by MetaMaskMX absentSPF missingDMARC missingRegistered 8 mo ago
    DetailsHide
    Hostname
    www.gtasaproapk.com
    First seen
    2026-11-08 02:31 UTC
    First published
    2026-11-08 03:09 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-07 23:57 UTC
    DNS
    Resolves · checked 2026-11-08 03:13 UTC
    Listed
    MetaMask, listing gtasaproapk.com and the names under it
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR2 · precertificate
    Valid 2026-11-08 01:27 UTC to 2027-02-06 01:27 UTC
    Logged 2026-11-08 02:26 UTC in Geomys Tuscolo2027h1, entry 522,231,114
    SHA-256 0b2af123b22622a83c6c412eaa0d055c2af42d27a47330bf609f7e15c2cff74c
    Public key SHA-256 0f1efd00fad895f64b3758d9d9d4a14e3b3193e1f247bea172cfca081b2a59bb
    Addresses
    104.21.87.32 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.140.23 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.87.32, 172.67.140.23): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    gtasaproapk.com
    Registered
    2026-03-08 · Hosting Concepts B.V. d/b/a Registrar.eu
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-07 08:04 UTC

    Suggest a correction

  88. www.trezor.com.trezorwalletapp.co.com US · AS13335 · Cloudflare, Inc.4 addressesTrezor
    ListedCloudflareUnder trezorwalletapp.co.com, listed by MetaMask
    DetailsHide
    Hostname
    www.trezor.com.trezorwalletapp.co.com
    First seen
    2026-11-08 02:31 UTC
    First published
    2026-11-08 03:09 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-07 23:57 UTC
    PhishDestroy: observed back in the feed 2026-11-07 · still listed at the last successful feed check 2026-11-07 23:56 UTC · listed 2 times
    Earlier listing periods: 2026-10-25 to 2026-11-02 (8 days)
    DNS
    Resolves · checked 2026-11-08 03:13 UTC
    Listed
    MetaMask, listing trezorwalletapp.co.com and the names under it
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WR1 · precertificate
    Valid 2026-11-08 01:27 UTC to 2027-02-06 02:26 UTC
    Logged 2026-11-08 02:27 UTC in Google PlumbersArms2027h1, entry 670,471,117
    SHA-256 0fdefa2c213688893c139032cbe0972be03552a2a83f2ea4a6e4cc6bd764dc76
    Public key SHA-256 28c1239770f4fe0ea36ff691e26d3517500dd9bba2090436930d707c01515f68
    Brand
    Trezor
    Addresses
    104.21.2.175 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.129.130 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3032::ac43:8182
    2606:4700:3035::6815:2af
    Cloudflare
    Cloudflare (104.21.2.175, 172.67.129.130): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.

    Suggest a correction

  89. cleres.digital US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    cleres.digital
    First seen
    2026-11-08 02:26 UTC
    First published
    2026-11-08 03:09 UTC
    Listing
    CERT Polska listed it 2026-07-01 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 03:30 UTC
    DNS
    Resolves · checked 2026-11-08 03:13 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-11-08 01:24 UTC to 2027-02-06 01:24 UTC
    Logged 2026-11-08 02:22 UTC in DigiCert Wyvern2027h1, entry 448,491,443
    SHA-256 d1f8c73cdb79566c5eba9eb07327a153244ef280dcd8cad2aa170eb3e850eea9
    Public key SHA-256 f4b3f972969d5bfd7289a21188fd67e2d604ba4facf156eff88173f9c0f2d448
    Addresses
    104.21.46.145 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.140.4 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.46.145, 172.67.140.4): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    cleres.digital
    Registered
    2026-05-14 · PDR Ltd. d/b/a PublicDomainRegistry.com
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 03:08 UTC

    Suggest a correction

  90. farmaline.outleteustore.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareUnder outleteustore.com, listed by CERT PolskaMX absentSPF missingDMARC missingRegistered 17 d ago
    DetailsHide
    Hostname
    farmaline.outleteustore.com
    First seen
    2026-11-08 02:26 UTC
    First published
    2026-11-08 03:09 UTC
    Listing
    CERT Polska listed it 2026-11-06 · still listed at the last successful feed check 2026-11-08 03:30 UTC
    DNS
    Resolves · checked 2026-11-08 03:13 UTC
    Listed
    CERT Polska, listing outleteustore.com and the names under it
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WR1 · precertificate
    Valid 2026-11-08 01:21 UTC to 2027-02-06 02:19 UTC
    Logged 2026-11-08 02:21 UTC in Let's Encrypt Sycamore2027h1, entry 1,033,665,186
    SHA-256 d5a0128ede53ff5de81a85edfe464510efa24100a5ca14288a9db6cc03794111
    Public key SHA-256 be2b7909e7b39c8f9ba694c5ba677aa90a854c074ae1b2be83633fbbb1b4eb29
    Addresses
    104.21.37.26 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.203.75 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.37.26, 172.67.203.75): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    outleteustore.com
    Registered
    2026-10-22 · Cloudflare, Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-07 07:15 UTC

    Suggest a correction

  91. kidunit.mom US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by USOMMX absentSPF missingDMARC missingRegistered 12 mo ago
    DetailsHide
    Hostname
    kidunit.mom
    First seen
    2026-11-08 02:26 UTC
    First published
    2026-11-08 03:09 UTC
    Listing
    USOM listed it 2026-06-30 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 04:03 UTC
    DNS
    Resolves · checked 2026-11-08 03:13 UTC
    Listed
    USOM
    1. Listed by USOM
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-08 01:20 UTC to 2027-02-06 02:18 UTC
    Logged 2026-11-08 02:20 UTC in Google ParcelYard2027h1, entry 670,082,231
    SHA-256 766e9de34f0dd2940b031a378612f148efe7d609e576cda721a10ed9c9b2eabd
    Public key SHA-256 638d3d3df30083c05cd20bc46f8f6c986c7e4f86dc7cbf89515731bc7dad1217
    Addresses
    104.21.72.79 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.177.136 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.72.79, 172.67.177.136): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    kidunit.mom
    Registered
    2025-11-18 · Dynadot Inc
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 03:08 UTC

    Suggest a correction

  92. www.eth-casino.vip US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareUnder eth-casino.vip, listed by MetaMaskMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    www.eth-casino.vip
    First seen
    2026-11-08 02:26 UTC
    First published
    2026-11-08 03:09 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-07 23:57 UTC
    DNS
    Resolves · checked 2026-11-08 03:13 UTC
    Listed
    MetaMask, listing eth-casino.vip and the names under it
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WR1 · precertificate
    Valid 2026-11-08 01:22 UTC to 2027-02-06 02:20 UTC
    Logged 2026-11-08 02:22 UTC in Google PlumbersArms2027h1, entry 670,415,695
    SHA-256 3e4bf0f6051346a7c97c5032f9ff11a461f7a5b9065e16b8356e7c047ecdeb1d
    Public key SHA-256 8f058daaa5c662f144072a4dacb23b8b8d8df7f97e946724d3f25a1c30e2f3cc
    Addresses
    104.21.6.252 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.135.135 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.6.252, 172.67.135.135): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    eth-casino.vip
    Registered
    2026-05-11 · Dynadot Inc
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 01:01 UTC

    Suggest a correction

  93. auth.wormgpt.ai US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareUnder wormgpt.ai, reported by PhishDestroyMX presentSPF ~allDMARC policy noneRegistered 12 mo ago
    DetailsHide
    Hostname
    auth.wormgpt.ai
    First seen
    2026-11-08 02:21 UTC
    First published
    2026-11-08 03:09 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-07 23:56 UTC
    DNS
    Resolves · checked 2026-11-08 03:13 UTC
    Reported
    PhishDestroy, listing wormgpt.ai and the names under it
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR1 · precertificate
    Valid 2026-11-08 01:19 UTC to 2027-02-06 01:19 UTC
    Logged 2026-11-08 02:18 UTC in Let's Encrypt Sycamore2027h1, entry 1,033,611,802
    SHA-256 80a53c0806141f10eeb9d25bc4c8d915fac1c84a247e234c030418f0e8f198f7
    Public key SHA-256 bb576cb7afc03d9336e7cb570ca586665e1f5e37791114edf602131891ec21d9
    PhishDestroy
    Addresses
    104.21.39.236 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.171.215 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.39.236, 172.67.171.215): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    wormgpt.ai
    Registered
    2025-11-05 · HOSTINGER operations, UAB
    MX
    Receives mail at mx1.hostinger.com, mx2.hostinger.com
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    DMARC policy p=none: reports only
    Checked
    2026-11-07 07:18 UTC

    Suggest a correction

  94. edge-x.sbs US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    edge-x.sbs
    First seen
    2026-11-08 02:16 UTC
    First published
    2026-11-08 03:09 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-07 23:57 UTC
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-07 23:56 UTC
    DNS
    Resolves · checked 2026-11-08 03:13 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-11-08 01:14 UTC to 2027-02-06 01:14 UTC
    Logged 2026-11-08 02:13 UTC in IPng Networks Gouda2027h1, entry 349,260,405
    SHA-256 0413835c1e249c47a0d137e4147d74902c5779b3040265cb490f5832df63833e
    Public key SHA-256 ad4ce0cc211527414c3f670b3e495513a28b4b98d3d566cae1ce1acbde466a01
    Addresses
    104.21.92.177 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.197.18 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.92.177, 172.67.197.18): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    edge-x.sbs
    Registered
    2026-05-14 · Global Domain Group LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 03:08 UTC

    Suggest a correction

  95. jcb.rabotace.pl US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareUnder rabotace.pl, reported by PhishDestroyMX presentSPF ~allRegistered 2 y ago
    DetailsHide
    Hostname
    jcb.rabotace.pl
    First seen
    2026-11-08 02:16 UTC
    First published
    2026-11-08 03:09 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-07 23:56 UTC
    DNS
    Resolves · checked 2026-11-08 03:13 UTC
    Reported
    PhishDestroy, listing rabotace.pl and the names under it
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR1
    Valid 2026-11-08 01:15 UTC to 2027-02-06 01:15 UTC
    Logged 2026-11-08 02:13 UTC in Google ParcelYard2027h1, entry 670,011,794
    SHA-256 37031e96180a2e54582621b714c42132f5fdfc064edea80d9ace9d54582a997b
    Public key SHA-256 9e6c7a5416078584032fe2e2b63e73dfd12e4e371dd8b58fabe3b6bffa896f38
    PhishDestroy
    Addresses
    104.21.83.13 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.166.197 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.83.13, 172.67.166.197): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    rabotace.pl
    Registered
    2024-07-20 · HOSTIDO.PL GAŁĄZKA SPÓŁKA JAWNA
    MX
    Receives mail at mail14.lh.pl
    SPF
    SPF record with ~all: other senders soft-fail
    Checked
    2026-11-07 08:40 UTC

    Suggest a correction

  96. kra45-c--c.ru US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    kra45-c--c.ru
    First seen
    2026-11-08 02:16 UTC
    First published
    2026-11-08 03:09 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-07 23:56 UTC
    DNS
    Resolves · checked 2026-11-08 03:13 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1
    Valid 2026-09-09 22:40 UTC to 2026-12-08 23:40 UTC
    Logged 2026-11-08 02:15 UTC in DigiCert Wyvern2026h2, entry 2,211,287,373
    SHA-256 39edbe2b281077a0619a47d1317caba53daf1652461ac8bbd904163f6bbcd634
    Public key SHA-256 a89e27ec62e27a65e2747c94e6f87cbfd8c9ad8e097216cb71a289d53af0fd72
    PhishDestroy
    Addresses
    104.21.74.129 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.202.196 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.74.129, 172.67.202.196): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    kra45-c--c.ru
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 02:19 UTC

    Suggest a correction

  97. www.jcb.rabotace.pl US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareUnder rabotace.pl, reported by PhishDestroyMX presentSPF ~allRegistered 2 y ago
    DetailsHide
    Hostname
    www.jcb.rabotace.pl
    First seen
    2026-11-08 02:16 UTC
    First published
    2026-11-08 03:09 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-07 23:56 UTC
    DNS
    Resolves · checked 2026-11-08 03:13 UTC
    Reported
    PhishDestroy, listing rabotace.pl and the names under it
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR1
    Valid 2026-11-08 01:15 UTC to 2027-02-06 01:15 UTC
    Logged 2026-11-08 02:13 UTC in Google ParcelYard2027h1, entry 670,011,794
    SHA-256 37031e96180a2e54582621b714c42132f5fdfc064edea80d9ace9d54582a997b
    Public key SHA-256 9e6c7a5416078584032fe2e2b63e73dfd12e4e371dd8b58fabe3b6bffa896f38
    PhishDestroy
    Addresses
    104.21.83.13 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.166.197 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.83.13, 172.67.166.197): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    rabotace.pl
    Registered
    2024-07-20 · HOSTIDO.PL GAŁĄZKA SPÓŁKA JAWNA
    MX
    Receives mail at mail14.lh.pl
    SPF
    SPF record with ~all: other senders soft-fail
    Checked
    2026-11-07 08:40 UTC

    Suggest a correction

  98. xmagnetic.vip US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    xmagnetic.vip
    First seen
    2026-11-08 02:16 UTC
    First published
    2026-11-08 03:09 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-07 23:57 UTC
    DNS
    Resolves · checked 2026-11-08 03:13 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-11-08 01:14 UTC to 2027-02-06 01:14 UTC
    Logged 2026-11-08 02:12 UTC in Let's Encrypt Sycamore2027h1, entry 1,033,491,185
    SHA-256 490290c75da0d06444a531a377abc21e9c4f2c77046e4c21f7ee6f87e9a5cc9f
    Public key SHA-256 871b5bc9460ba56d69fd9675796ff598fdb0f9d9c543e1b663c6cfeb6418db60
    Addresses
    104.21.40.215 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.188.100 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.40.215, 172.67.188.100): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    xmagnetic.vip
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 02:19 UTC

    Suggest a correction

  99. 7ivb6.me US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by NPA 165 (information services)MX absentSPF missingDMARC missingRegistered 2 mo ago
    DetailsHide
    Hostname
    7ivb6.me
    First seen
    2026-11-08 02:11 UTC
    First published
    2026-11-08 03:09 UTC
    Listing
    NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 01:35 UTC
    DNS
    Resolves · checked 2026-11-08 03:13 UTC
    Listed
    NPA 165
    1. Observed in the NPA 165 feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-11-08 01:09 UTC to 2027-02-06 01:09 UTC
    Logged 2026-11-08 02:08 UTC in Geomys Tuscolo2027h1, entry 522,088,030
    SHA-256 29a2199f0d24b15d27800db3b8c18dc8dc5efd667bd3038ec9247815d1ffa5c0
    Public key SHA-256 e82150f3a580d2bbfdb2de2d4caeadae727df88af7803c579aef8fc9cfcb96ba
    Addresses
    104.21.46.95 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.137.85 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.46.95, 172.67.137.85): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    7ivb6.me
    Registered
    2026-09-09 · NameSilo, LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 03:08 UTC

    Suggest a correction

  100. adobe-illustrator.torrentmac.net US · AS13335 · Cloudflare, Inc.4 addresses
    ReportedCloudflareUnder torrentmac.net, reported by PhishDestroyMX absentSPF -allDMARC rejectRegistered 8 y ago
    DetailsHide
    Hostname
    adobe-illustrator.torrentmac.net
    First seen
    2026-11-08 02:11 UTC
    First published
    2026-11-08 03:09 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-07 23:56 UTC
    DNS
    Resolves · checked 2026-11-08 03:13 UTC
    Reported
    PhishDestroy, listing torrentmac.net and the names under it
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR2
    Valid 2026-11-08 01:10 UTC to 2027-02-06 01:10 UTC
    Logged 2026-11-08 02:08 UTC in Google ParcelYard2027h1, entry 669,963,209
    SHA-256 74fc66c02ef594b47ed7945d8c3fdfce9f67481fba8a1eae98afdc71fa817bc2
    Public key SHA-256 b386452539b9e01a3bd83c6591b1a071cceac10d59fda3e1615a0252cc76bfd1
    PhishDestroy
    Addresses
    104.21.57.62 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.189.93 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3034::6815:393e
    2606:4700:3037::ac43:bd5d
    Cloudflare
    Cloudflare (104.21.57.62, 172.67.189.93): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    torrentmac.net
    Registered
    2018-11-23 · NameCheap, Inc.
    MX
    Publishes no mail exchanger
    SPF
    SPF record with -all: other senders fail
    DMARC
    DMARC policy p=reject
    Checked
    2026-11-07 07:24 UTC

    Suggest a correction

Showing 1–100 of 2,338 hostnames.
How these findings are made

Brand spoofs: findings that impersonate one of the 1,000 most-impersonated brands. The list opens on them; All shows every finding.

Reported: a hostname in a new certificate that PhishTank or PhishDestroy reports, or that CERT Polska, MetaMask, USOM, MODA, NPA 165, JPCERT/CC, the AMF, the FSMA or BaFin lists. When a listing source names the brand imitated or a category, the finding shows it. Phishing host: a brand lookalike that resolves to an address which hosted confirmed phishing in the last 48 hours. Spamhaus DROP: a brand lookalike that resolves to an address on the Spamhaus DROP list. Same certificate: another name on a finding's certificate that resolves to an address on Spamhaus DROP. Suspicious: other names on a finding's certificate, rated high for a hosting-alias name or a lookalike on a phishing host, medium for a lookalike; they join the findings once they have listing evidence of their own. Also under Suspicious: registered domains using a brand’s name that PhishDestroy’s community list includes, rated high when they resolve to an address with no parking or holding signal, medium otherwise.

Brand labels cover the 1,000 most-impersonated brands. A name gets a brand when the brand's token starts a label or follows a hyphen, with a lure word such as "login" or "verify" for common words. Hostnames appear as plain text. How it works · Sources