Live

Live phishing findings

New certificates and domain registrations, with every hostname resolved and checked against phishing reports and bad-address lists. The newest findings, updated hourly.

Updated hourly · 2026-11-08 06:29 UTC
Certificate-log entries · 24 h
316.2M
from 84 distinct feeds
Unique certificates · 24 h
30.4M
each reviewed
Names resolved · 24 h
20.0M
14.9M with an address
Findings · 24 h
5,763
207 of 1,061 brands targeted

2,280 hostnames from the last 24 hours.

The findings have updated. The list starts again from the top.

  1. dtnh.478691.xyz US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareUnder 478691.xyz, listed by MetaMaskMX absentSPF missingDMARC missingRegistered 3 y ago
    DetailsHide
    Hostname
    dtnh.478691.xyz
    First seen
    2026-11-08 06:26 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 05:58 UTC
    Listed
    MetaMask, listing 478691.xyz and the names under it
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-11-08 05:23 UTC to 2027-02-06 05:23 UTC
    Logged 2026-11-08 06:21 UTC in DigiCert Wyvern2027h1, entry 450,495,409
    SHA-256 92d98dcbcff6059787baae474b509878a6c545a604b72d10f043fbd08442b858
    Public key SHA-256 cb8ee4f276adc623d90c5a39717da1f92a666012b5368996b455c8ffef13f458
    Addresses
    104.21.37.52 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.204.39 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.37.52, 172.67.204.39): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    478691.xyz
    Registered
    2024-04-07 · NameSilo, LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-07 08:40 UTC

    Suggest a correction

  2. alphaairobot.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by AMF (crypto-assets, impersonation of an authorised firm, impersonation of the AMF)MX absentSPF missingDMARC missingRegistered 2 y ago
    DetailsHide
    Hostname
    alphaairobot.com
    First seen
    2026-11-08 06:21 UTC
    Listing
    AMF listed it 2026-07-29 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 03:41 UTC
    Listed
    AMF
    1. Listed by AMF
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-11-08 05:19 UTC to 2027-02-06 05:19 UTC
    Logged 2026-11-08 06:17 UTC in Google ParcelYard2027h1, entry 672,493,374
    SHA-256 5e37522454332a96a9843967624887028cb0718d799123b78413d4276ea0673a
    Public key SHA-256 74b13540aab93f8c763784e3b7228260197d9feffad6dc715e048573c1e69581
    Addresses
    104.21.45.195 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.218.126 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.45.195, 172.67.218.126): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    alphaairobot.com
    Registered
    2024-07-11 · HOSTINGER operations, UAB
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 06:34 UTC

    Suggest a correction

  3. rocashwillowpoint.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    rocashwillowpoint.com
    First seen
    2026-11-08 06:21 UTC
    Listing
    CERT Polska listed it 2026-07-13 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 06:31 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1
    Valid 2026-09-10 05:03 UTC to 2026-12-09 06:01 UTC
    Logged 2026-11-08 06:19 UTC in IPng Networks Halloumi2026h2a, entry 1,292,371,273
    SHA-256 13b251a868c38e903cc3c5bad4846ce4d1caff3b86f13013a9cac299b9cced16
    Public key SHA-256 2ccc4dbc40dd7c28e16040c8968626e7f68f0bd6aa89ab740c63f05eb7a750f7
    Addresses
    104.21.15.163 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.163.31 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.15.163, 172.67.163.31): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    rocashwillowpoint.com
    Registered
    2026-07-13 · NameCheap, Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 06:34 UTC

    Suggest a correction

  4. trustplot-vangrd.online US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    trustplot-vangrd.online
    First seen
    2026-11-08 06:21 UTC
    Listing
    CERT Polska listed it 2026-05-16 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 06:31 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-11-08 05:18 UTC to 2027-02-06 05:18 UTC
    Logged 2026-11-08 06:16 UTC in Geomys Tuscolo2027h1, entry 524,161,168
    SHA-256 be46b7264b376f78cafd93bd2d953ce19ea5192c2d6e2af02e3291143dff0ef5
    Public key SHA-256 7c4ec8331ed7c4783774c79ef99c8efc7f0754dfb8bca9d1fd65c52e7e5c09c0
    Addresses
    104.21.92.11 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.184.125 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.92.11, 172.67.184.125): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    trustplot-vangrd.online
    Registered
    2026-05-14 · NameCheap, Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 06:34 UTC

    Suggest a correction

  5. worldcupcoins.live US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    worldcupcoins.live
    First seen
    2026-11-08 06:21 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 05:58 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-11-08 05:19 UTC to 2027-02-06 05:19 UTC
    Logged 2026-11-08 06:18 UTC in Let's Encrypt Sycamore2027h1, entry 1,038,942,954
    SHA-256 295a9090ea27f049b5098e449a0c7e7a4824a32d272f2ac6067a6915255b6373
    Public key SHA-256 4f3fa9b3a4448d2af5e864599a47d97c5b2682a1eaf39b26d6f3a969495f2fbe
    Addresses
    104.21.2.162 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.129.97 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.2.162, 172.67.129.97): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    worldcupcoins.live
    Registered
    2026-05-15 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 06:34 UTC

    Suggest a correction

  6. dexscreener.com.dexscreener-app.com US · AS13335 · Cloudflare, Inc.4 addressesDEX Screener
    ListedCloudflareUnder dexscreener-app.com, listed by MetaMaskMX absentSPF missingDMARC missingRegistered 7 mo ago
    DetailsHide
    Hostname
    dexscreener.com.dexscreener-app.com
    First seen
    2026-11-08 06:16 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 05:58 UTC
    Listed
    MetaMask, listing dexscreener-app.com and the names under it
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1
    Valid 2026-09-10 00:50 UTC to 2026-12-09 01:50 UTC
    Logged 2026-11-08 06:13 UTC in Let's Encrypt Sycamore2026h2, entry 1,080,871,823
    SHA-256 1f0e1f9c5df44767170dfdfc839529d23d8592a8a831bffd23e0ebd22502eadf
    Public key SHA-256 8e80ccc4aacf6ed1ebbfc0dffcb37285e8e8367a0d55a9cb1953a678201876df
    Brand
    DEX Screener
    Addresses
    104.21.2.175 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.129.130 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3032::ac43:8182
    2606:4700:3035::6815:2af
    Cloudflare
    Cloudflare (104.21.2.175, 172.67.129.130): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    dexscreener-app.com
    Registered
    2026-04-09 · Hosting Concepts B.V. d/b/a Registrar.eu
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-07 08:59 UTC

    Suggest a correction

  7. mirflectgainplatform-com.financecryptoworld.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareUnder financecryptoworld.com, listed by CERT PolskaMX presentSPF ~allDMARC missingRegistered 22 mo ago
    DetailsHide
    Hostname
    mirflectgainplatform-com.financecryptoworld.com
    First seen
    2026-11-08 06:16 UTC
    Listing
    CERT Polska listed it 2026-06-12 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 06:31 UTC
    Listed
    CERT Polska, listing financecryptoworld.com and the names under it
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1
    Valid 2026-09-10 01:14 UTC to 2026-12-09 02:11 UTC
    Logged 2026-11-08 06:14 UTC in Let's Encrypt Sycamore2026h2, entry 1,080,876,263
    SHA-256 3c2ef2e2a3969e5d4f620e452a1af4009c5b1473bb089af0fc44e7dea3e13ed5
    Public key SHA-256 a30c05cebe2cfaa86c7afc9c0147c3338ea031533f8f1047747b094e918a9d31
    Addresses
    104.21.10.130 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.131.121 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.10.130, 172.67.131.121): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    financecryptoworld.com
    Registered
    2025-01-30 · MainReg Inc.
    MX
    Receives mail at mail.financecryptoworld.com
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-07 17:16 UTC

    Suggest a correction

  8. ukashwillowpoint.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    ukashwillowpoint.com
    First seen
    2026-11-08 06:16 UTC
    Listing
    CERT Polska listed it 2026-07-13 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 06:31 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1
    Valid 2026-09-10 04:47 UTC to 2026-12-09 05:46 UTC
    Logged 2026-11-08 06:15 UTC in DigiCert Wyvern2026h2, entry 2,211,612,627
    SHA-256 10374d4bca2bdc2aca1aa2cf763a633921d7bd08fee0e386695ffe32ddccc9a0
    Public key SHA-256 a7e9367e3b677a3fcd5bee3d8e01486fa714de483032caffe6f712449caeee58
    Addresses
    104.21.49.126 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.163.1 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.49.126, 172.67.163.1): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    ukashwillowpoint.com
    Registered
    2026-07-13 · NameCheap, Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 06:35 UTC

    Suggest a correction

  9. zama-participate.xyz US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    zama-participate.xyz
    First seen
    2026-11-08 06:16 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 05:58 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-11-08 05:12 UTC to 2027-02-06 05:12 UTC
    Logged 2026-11-08 06:11 UTC in DigiCert Wyvern2027h1, entry 450,388,155
    SHA-256 06de81081a9ac02a394768f95e333342ff71f3e906141aaa1e37a62647b64ffa
    Public key SHA-256 1ed6f6103d12b40e50eb6fc177b9c00917f31b54d8fdc996f21bf794a183d2be
    Addresses
    104.21.87.206 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.146.59 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.87.206, 172.67.146.59): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    zama-participate.xyz
    Registered
    2026-05-14 · PDR Ltd. d/b/a PublicDomainRegistry.com
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 06:34 UTC

    Suggest a correction

  10. api.immediate-antonym-app-com.financecryptoworld.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareUnder financecryptoworld.com, listed by CERT PolskaMX presentSPF ~allDMARC missingRegistered 22 mo ago
    DetailsHide
    Hostname
    api.immediate-antonym-app-com.financecryptoworld.com
    First seen
    2026-11-08 06:11 UTC
    Listing
    CERT Polska listed it 2026-06-12 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 06:31 UTC
    Listed
    CERT Polska, listing financecryptoworld.com and the names under it
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-08 05:06 UTC to 2027-02-06 06:06 UTC
    Logged 2026-11-08 06:06 UTC in Let's Encrypt Sycamore2027h1, entry 1,038,658,096
    SHA-256 948b2b5f8f872851edc7a851a603dab111b79f8f909d2afff601e86dfb3da508
    Public key SHA-256 b21ae4d3e1de77fb9e267c10718a281d1849d61f0c7a8e4c49f4f0d2c6944cb1
    Addresses
    104.21.10.130 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.131.121 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.10.130, 172.67.131.121): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    financecryptoworld.com
    Registered
    2025-01-30 · MainReg Inc.
    MX
    Receives mail at mail.financecryptoworld.com
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-07 17:16 UTC

    Suggest a correction

  11. api.mainnet.fogolend.com US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareUnder fogolend.com, reported by PhishDestroyMX presentSPF ~allDMARC missingRegistered 15 mo ago
    DetailsHide
    Hostname
    api.mainnet.fogolend.com
    First seen
    2026-11-08 06:11 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-08 05:57 UTC
    Reported
    PhishDestroy, listing fogolend.com and the names under it
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-08 05:07 UTC to 2027-02-06 06:05 UTC
    Logged 2026-11-08 06:07 UTC in Google PlumbersArms2027h1, entry 672,677,448
    SHA-256 85e0c4b33158d4763e7e3eb90b6d2cad80cc21adf794d4baf44a7b81edf41ec0
    Public key SHA-256 7ab1f2f00c9e6b0fba687846aa980eee13b27a25b61efec0c5e1c318fdddd090
    PhishDestroy
    Addresses
    104.21.96.16 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.150.64 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.96.16, 172.67.150.64): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    fogolend.com
    Registered
    2025-08-28 · NameCheap, Inc.
    MX
    Receives mail at route2.mx.cloudflare.net, route1.mx.cloudflare.net, route3.mx.cloudflare.net
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 04:16 UTC

    Suggest a correction

  12. collabox.uk US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX presentSPF ~allDMARC missingRegistered 8 mo ago
    DetailsHide
    Hostname
    collabox.uk
    First seen
    2026-11-08 06:11 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 05:58 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-11-08 05:10 UTC to 2027-02-06 05:10 UTC
    Logged 2026-11-08 06:08 UTC in Geomys Tuscolo2027h1, entry 524,081,720
    SHA-256 8ba514a8d3abefbfaf2d490594204de9489694c511f6c9da97495ee7aa77ec53
    Public key SHA-256 a0074bc1209b5490dc41afa746c03c59d267fdaef3f4ebf6393552414787026f
    Addresses
    104.21.50.45 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.200.191 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.50.45, 172.67.200.191): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    collabox.uk
    Registered
    2026-03-16 · Key-Systems GmbH
    MX
    Receives mail at route2.mx.cloudflare.net, route1.mx.cloudflare.net, route3.mx.cloudflare.net
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 06:34 UTC

    Suggest a correction

  13. uitwaaienshopping.online US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by NPA 165 (e-commerce)MX absentSPF missingDMARC quarantineRegistered 6 mo ago
    DetailsHide
    Hostname
    uitwaaienshopping.online
    First seen
    2026-11-08 06:11 UTC
    Listing
    NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 01:35 UTC
    Listed
    NPA 165
    1. Observed in the NPA 165 feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-11-08 05:07 UTC to 2027-02-06 05:07 UTC
    Logged 2026-11-08 06:06 UTC in Let's Encrypt Sycamore2027h1, entry 1,038,644,628
    SHA-256 6584e3874141c94b11d124a87e129c7bbc0a2d9041bf1abc629e6ffa5fc7e466
    Public key SHA-256 3fffe2800c0869f5ae635f3e6a5db6323f966a0df04bcd32c0fe6ed7516802e3
    Addresses
    104.21.39.106 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.144.143 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.39.106, 172.67.144.143): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    uitwaaienshopping.online
    Registered
    2026-05-15 · GoDaddy.com, LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    DMARC policy p=quarantine
    Checked
    2026-11-08 06:34 UTC

    Suggest a correction

  14. wealthlift.click US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by USOMMX absentSPF missingDMARC missingRegistered 12 mo ago
    DetailsHide
    Hostname
    wealthlift.click
    First seen
    2026-11-08 06:11 UTC
    Listing
    USOM listed it 2026-10-15 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 05:33 UTC
    Listed
    USOM
    1. Listed by USOM
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1
    Valid 2026-11-08 05:08 UTC to 2027-02-06 06:06 UTC
    Logged 2026-11-08 06:08 UTC in IPng Networks Halloumi2027h1, entry 407,904,707
    SHA-256 6e2291d7730dc469492bac073f37af782bfbc947a69645a1ef2c989c0c2da203
    Public key SHA-256 6b5339c3bb20a12f3ee9b6201eba3edf3b48954609de139ee0a55c9b4520507d
    Addresses
    104.21.96.18 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.150.66 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.96.18, 172.67.150.66): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    wealthlift.click
    Registered
    2025-11-17 · Dynadot, LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 06:34 UTC

    Suggest a correction

  15. wejscie-918204.eu.cc US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT Polska
    DetailsHide
    Hostname
    wejscie-918204.eu.cc
    First seen
    2026-11-08 06:11 UTC
    Listing
    CERT Polska listed it 2026-09-10 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 06:31 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-11-08 05:08 UTC to 2027-02-06 05:08 UTC
    Logged 2026-11-08 06:06 UTC in DigiCert Sphinx2027h1, entry 398,356,509
    SHA-256 62affcaef4e54ee147a2b261012fd4bbd906b546b1ce45954fb594cb928ed92a
    Public key SHA-256 758e3f615b70673394a3e5cf1f8827f0e212a713c5106b6aab4f7e67bcd4f89d
    Addresses
    104.21.46.124 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.138.146 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.46.124, 172.67.138.146): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.

    Suggest a correction

  16. xuiwmsw.club US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by NPA 165 (e-commerce)MX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    xuiwmsw.club
    First seen
    2026-11-08 06:11 UTC
    Listing
    NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 01:35 UTC
    Listed
    NPA 165
    1. Observed in the NPA 165 feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-11-08 05:07 UTC to 2027-02-06 05:07 UTC
    Logged 2026-11-08 06:05 UTC in Geomys Tuscolo2027h1, entry 524,054,768
    SHA-256 039e07f231248298c8a6a2d0ed6e2fc6ac9d0b02c941b9331557044260b7ecc4
    Public key SHA-256 980d75641566b9217e0430579e61b46f536fcfb96679436d2632a00d7dd0f686
    Addresses
    104.21.55.92 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.146.123 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.55.92, 172.67.146.123): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    xuiwmsw.club
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 06:16 UTC

    Suggest a correction

  17. becjksdnlrecve.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    becjksdnlrecve.com
    First seen
    2026-11-08 06:05 UTC
    Listing
    CERT Polska listed it 2026-07-13 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 06:31 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1
    Valid 2026-09-10 03:59 UTC to 2026-12-09 04:59 UTC
    Logged 2026-11-08 06:02 UTC in DigiCert Wyvern2026h2, entry 2,211,593,180
    SHA-256 077320745e608758656cc6de426cc4203263b1cb99c95943c483ec0315a38bc7
    Public key SHA-256 5f56021302184f201355783cd3ae5f5cd89676b545368559afdb2b10fb0e5920
    Addresses
    104.21.89.59 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.138.23 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.89.59, 172.67.138.23): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    becjksdnlrecve.com
    Registered
    2026-07-13 · NameCheap, Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 06:35 UTC

    Suggest a correction

  18. finzon.io US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 1 d ago
    DetailsHide
    Hostname
    finzon.io
    First seen
    2026-11-08 06:05 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 05:58 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-08 05:00 UTC to 2027-02-06 05:59 UTC
    Logged 2026-11-08 06:00 UTC in Google ParcelYard2027h1, entry 672,277,871
    SHA-256 15e6364a8a257f84d5e7b317effb7a6cc29df1481e813fad6447c76db6063baa
    Public key SHA-256 bde0d8c985b6b2505703a793fe667baa49b70c9ea9c9e6035725873141fad458
    Addresses
    104.21.72.22 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.174.29 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.72.22, 172.67.174.29): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    finzon.io
    Registered
    2026-11-07 · GoDaddy.com, LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 06:34 UTC

    Suggest a correction

  19. fiona-v7.top US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    fiona-v7.top
    First seen
    2026-11-08 06:05 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 05:58 UTC
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-08 05:57 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-11-08 05:05 UTC to 2027-02-06 05:05 UTC
    Logged 2026-11-08 06:03 UTC in Let's Encrypt Willow2027h1, entry 998,022,468
    SHA-256 0519c1e8907a877cc424c703428ae464c6174a603b4db4df8b68b22ba604d7c7
    Public key SHA-256 85a27ef076ed385cf1015ff30535f0142c7163b7b8c8df29077ed26c8f046b38
    Addresses
    104.21.54.165 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.140.103 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.54.165, 172.67.140.103): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    fiona-v7.top
    Registered
    2026-05-14 · 阿里云计算有限公司
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 06:34 UTC

    Suggest a correction

  20. parik24-bet.com.ua US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 8 mo ago
    DetailsHide
    Hostname
    parik24-bet.com.ua
    First seen
    2026-11-08 06:05 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-08 05:57 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-11-08 05:06 UTC to 2027-02-06 05:06 UTC
    Logged 2026-11-08 06:05 UTC in DigiCert Sphinx2027h1, entry 398,339,325
    SHA-256 dbba11b8aedf37833006b9abb31d620dc186d1c683f0d60984a633172c55c338
    Public key SHA-256 aea375d6513f4cf50f1f40c58084b9f2a51fbb4f437bfaf33688787447315038
    PhishDestroy
    Addresses
    104.21.16.87 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.210.122 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.16.87, 172.67.210.122): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    parik24-bet.com.ua
    Registered
    2026-03-17 · NIC.UA LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 06:06 UTC

    Suggest a correction

  21. tutiq.vu US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by USOMMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    tutiq.vu
    First seen
    2026-11-08 06:05 UTC
    Listing
    USOM listed it 2026-07-22 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 05:33 UTC
    Listed
    USOM
    1. Listed by USOM
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1
    Valid 2026-09-10 00:47 UTC to 2026-12-09 01:46 UTC
    Logged 2026-11-08 06:01 UTC in DigiCert Wyvern2026h2, entry 2,211,590,810
    SHA-256 216bac1490b07abbd3d40766731067bd1d5e8fa8edca1323e141dcdf1f502873
    Public key SHA-256 b353e20ea95206ae3422a50589187eb39d9a963f378a2d3b9a0fa69caa428d4f
    Addresses
    104.21.17.17 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.219.143 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.17.17, 172.67.219.143): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    tutiq.vu
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 06:06 UTC

    Suggest a correction

  22. apk.sanx.cloud US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareUnder sanx.cloud, listed by MetaMaskMX absentSPF missingDMARC missingRegistered 48 d ago
    DetailsHide
    Hostname
    apk.sanx.cloud
    First seen
    2026-11-08 06:00 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 05:58 UTC
    Listed
    MetaMask, listing sanx.cloud and the names under it
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WR1 · precertificate
    Valid 2026-11-08 04:57 UTC to 2027-02-06 05:55 UTC
    Logged 2026-11-08 05:57 UTC in Geomys Tuscolo2027h1, entry 523,985,229
    SHA-256 4be482b6aa36287e8df8ebbb295a11b2997ed70639e0903f7458a16763e5036a
    Public key SHA-256 0953cff1634adc7c076c66376a9eb68ce8d0516850004721e4b6f4e1c3f57247
    Addresses
    104.21.85.27 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.201.57 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.85.27, 172.67.201.57): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    sanx.cloud
    Registered
    2026-09-21 · CV. Rumahweb Indonesia
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-07 19:34 UTC

    Suggest a correction

  23. dexscreener.dev US · AS13335 · Cloudflare, Inc.4 addressesDEX Screener
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 5 y ago
    DetailsHide
    Hostname
    dexscreener.dev
    First seen
    2026-11-08 06:00 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 05:58 UTC
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-08 05:57 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WR1 · precertificate
    Valid 2026-11-08 04:58 UTC to 2027-02-06 05:52 UTC
    Logged 2026-11-08 05:58 UTC in DigiCert Sphinx2027h1, entry 398,276,096
    SHA-256 77bf4dd53783e6a55a884c19da31d1036f9cb052b7936a74bf97d3ff6dec8a04
    Public key SHA-256 0210adb23b68119423a702fa8a2b1c4d9d29201c0303ef9e05ba3e90299dcc01
    Brand
    DEX Screener
    Addresses
    104.18.37.204 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.64.150.52 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:4401::6812:25cc
    2a06:98c1:3101::ac40:9634
    Cloudflare
    Cloudflare (104.18.37.204, 172.64.150.52): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    dexscreener.dev
    Registered
    2022-02-28 · Namecheap Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 06:00 UTC

    Suggest a correction

  24. exodusea.cc US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    exodusea.cc
    First seen
    2026-11-08 06:00 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 05:58 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WR1 · precertificate
    Valid 2026-11-08 04:57 UTC to 2027-02-06 05:52 UTC
    Logged 2026-11-08 05:58 UTC in Geomys Tuscolo2027h1, entry 523,986,970
    SHA-256 6c8c1b7bed8a0c8be9fb4831a19091729be99a3cb4eb78e21d678a2c43854d89
    Public key SHA-256 0dcad718c1a2e37bb3aa22563b905f5e09541d72c524381cbffac37596b82571
    Addresses
    104.21.84.214 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.197.41 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.84.214, 172.67.197.41): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    exodusea.cc
    Registered
    2026-05-15 · Dominet (HK) Limited
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 06:34 UTC

    Suggest a correction

  25. linlang.shop US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by NPA 165 (e-commerce)MX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    linlang.shop
    First seen
    2026-11-08 06:00 UTC
    Listing
    NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 01:35 UTC
    Listed
    NPA 165
    1. Observed in the NPA 165 feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1
    Valid 2026-09-10 01:46 UTC to 2026-12-09 02:46 UTC
    Logged 2026-11-08 05:57 UTC in Let's Encrypt Willow2026h2, entry 1,029,107,917
    SHA-256 0a5e46eb87a112eaa74aaf0281ee4f9be42bfd64d8f5ae95c1b42eca356909ec
    Public key SHA-256 5b2359dc33ad92e5ad722ce4f81ce382c347b9ff4b5f70bb9f4005eb6526d127
    Addresses
    104.21.23.198 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.213.56 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.23.198, 172.67.213.56): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    linlang.shop
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 06:00 UTC

    Suggest a correction

  26. medihubtr.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by USOMMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    medihubtr.com
    First seen
    2026-11-08 06:00 UTC
    Listing
    USOM listed it 2026-06-06 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 05:33 UTC
    Listed
    USOM
    1. Listed by USOM
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-08 04:58 UTC to 2027-02-06 04:58 UTC
    Logged 2026-11-08 05:57 UTC in Google ParcelYard2027h1, entry 672,239,744
    SHA-256 0896d7889f0525092c50411a9dfe8fae9e6f82a5026473a53e8f9a3e68e3bc54
    Public key SHA-256 8310640f5fc5475bacee3999b1ce01bcfe67796149434ce114978202a0a58794
    Addresses
    104.21.29.45 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.148.96 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.29.45, 172.67.148.96): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    medihubtr.com
    Registered
    2026-05-15 · Realtime Register B.V.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 06:35 UTC

    Suggest a correction

  27. pls.dexscreener.dev US · AS13335 · Cloudflare, Inc.4 addressesDEX Screener
    ListedCloudflareUnder dexscreener.dev, listed by MetaMaskMX absentSPF missingDMARC missingRegistered 5 y ago
    DetailsHide
    Hostname
    pls.dexscreener.dev
    First seen
    2026-11-08 06:00 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 05:58 UTC
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-08 05:57 UTC
    Listed
    MetaMask, listing dexscreener.dev and the names under it
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WR1 · precertificate
    Valid 2026-11-08 04:58 UTC to 2027-02-06 05:52 UTC
    Logged 2026-11-08 05:58 UTC in DigiCert Sphinx2027h1, entry 398,276,096
    SHA-256 77bf4dd53783e6a55a884c19da31d1036f9cb052b7936a74bf97d3ff6dec8a04
    Public key SHA-256 0210adb23b68119423a702fa8a2b1c4d9d29201c0303ef9e05ba3e90299dcc01
    Brand
    DEX Screener
    Addresses
    104.18.37.204 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.64.150.52 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:4401::6812:25cc
    2a06:98c1:3101::ac40:9634
    Cloudflare
    Cloudflare (104.18.37.204, 172.64.150.52): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    dexscreener.dev
    Registered
    2022-02-28 · Namecheap Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 06:00 UTC

    Suggest a correction

  28. thnbpor.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by NPA 165 (e-commerce)MX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    thnbpor.com
    First seen
    2026-11-08 06:00 UTC
    Listing
    NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 01:35 UTC
    Listed
    NPA 165
    1. Observed in the NPA 165 feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-08 04:56 UTC to 2027-02-06 05:55 UTC
    Logged 2026-11-08 05:56 UTC in Let's Encrypt Willow2027h1, entry 997,936,948
    SHA-256 bb9685f04b99089276ea67dcdc8472aad432752f6295b7faeada3df5a74b4fb7
    Public key SHA-256 d96fb2b66f7e0e9b803b6e40fa5549af114c890f3d1c6f8cfcb271a617d0add7
    Addresses
    104.21.40.149 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.153.14 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.40.149, 172.67.153.14): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    thnbpor.com
    Registered
    2026-07-13 · NameSilo, LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 06:35 UTC

    Suggest a correction

  29. www.exodusea.cc US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareUnder exodusea.cc, listed by MetaMaskMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    www.exodusea.cc
    First seen
    2026-11-08 06:00 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 05:58 UTC
    Listed
    MetaMask, listing exodusea.cc and the names under it
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WR1 · precertificate
    Valid 2026-11-08 04:57 UTC to 2027-02-06 05:52 UTC
    Logged 2026-11-08 05:58 UTC in Geomys Tuscolo2027h1, entry 523,986,970
    SHA-256 6c8c1b7bed8a0c8be9fb4831a19091729be99a3cb4eb78e21d678a2c43854d89
    Public key SHA-256 0dcad718c1a2e37bb3aa22563b905f5e09541d72c524381cbffac37596b82571
    Addresses
    104.21.84.214 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.197.41 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.84.214, 172.67.197.41): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    exodusea.cc
    Registered
    2026-05-15 · Dominet (HK) Limited
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 06:34 UTC

    Suggest a correction

  30. www.tapbit-en.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareUnder tapbit-en.com, listed by MetaMaskMX absentSPF missingDMARC missingRegistered 2 mo ago
    DetailsHide
    Hostname
    www.tapbit-en.com
    First seen
    2026-11-08 06:00 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 05:58 UTC
    Listed
    MetaMask, listing tapbit-en.com and the names under it
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR1
    Valid 2026-11-08 04:59 UTC to 2027-02-06 04:59 UTC
    Logged 2026-11-08 05:58 UTC in DigiCert Wyvern2027h1, entry 450,242,108
    SHA-256 2a6f8d3e8ae7c2620ff1e45f7ff02266841f82631cc7acf6f30228fefeeaac55
    Public key SHA-256 cef7694bb7da7f1050050b94bce8b86aa8268dd9583e3965d4065f185f812747
    Addresses
    104.21.49.45 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.158.209 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.49.45, 172.67.158.209): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    tapbit-en.com
    Registered
    2026-09-08 · Atak Domain Bilgi Teknolojileri A.S.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 06:11 UTC

    Suggest a correction

  31. 159-curvefi.pages.dev US · AS13335 · Cloudflare, Inc.4 addressesCurve Finance
    ListedCloudflareListed by MetaMask
    DetailsHide
    Hostname
    159-curvefi.pages.dev
    First seen
    2026-11-08 05:59 UTC
    Listing
    MetaMask: first observed in the feed 2026-11-08 · still listed at the last successful feed check 2026-11-08 05:58 UTC
    Listed
    MetaMask
    1. Certificate logged in CT
    2. Observed in the MetaMask feed
    3. We matched the new listing
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-11-08 03:04 UTC to 2027-02-06 03:04 UTC
    Logged 2026-11-08 04:02 UTC in Google ParcelYard2027h1, entry 671,155,877
    SHA-256 279b79cbd179313ac5de5173522c64c60251ec7b05c3e93411deed001a9efb70
    Public key SHA-256 c0412252941303f1bda6ccdeae239850fc38d820a08a9b8822379be88967a282
    Brand
    Curve Finance
    Addresses
    172.66.44.172 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.66.47.84 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:310c::ac42:2cac
    2606:4700:310c::ac42:2f54
    Cloudflare
    Cloudflare (172.66.44.172, 172.66.47.84): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.

    Suggest a correction

  32. 5-hub-concretegov.pages.dev US · AS13335 · Cloudflare, Inc.4 addresses
    ListedCloudflareListed by MetaMask
    DetailsHide
    Hostname
    5-hub-concretegov.pages.dev
    First seen
    2026-11-08 05:59 UTC
    Listing
    MetaMask: first observed in the feed 2026-11-08 · still listed at the last successful feed check 2026-11-08 05:58 UTC
    Listed
    MetaMask
    1. Certificate logged in CT
    2. Observed in the MetaMask feed
    3. We matched the new listing
    4. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-11-07 19:44 UTC to 2027-02-05 19:44 UTC
    Logged 2026-11-07 20:42 UTC in IPng Networks Halloumi2027h1, entry 403,362,690
    SHA-256 b836bebf49b8bb6bea5130b87c7efda98687ca2beb287947e8782fbd68763d25
    Public key SHA-256 d0c30be041478e1b20b1df0ffb4bdf19bccceca5dc939fb8c319f8c891e50285
    Addresses
    172.66.45.40 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.66.46.216 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:310c::ac42:2d28
    2606:4700:310c::ac42:2ed8
    Cloudflare
    Cloudflare (172.66.45.40, 172.66.46.216): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.

    Suggest a correction

  33. ethereumtoken.pages.dev US · AS13335 · Cloudflare, Inc.4 addressesEthereum
    ListedCloudflareListed by MetaMask
    DetailsHide
    Hostname
    ethereumtoken.pages.dev
    First seen
    2026-11-08 05:59 UTC
    Listing
    MetaMask: first observed in the feed 2026-11-08 · still listed at the last successful feed check 2026-11-08 05:58 UTC
    Listed
    MetaMask
    1. Certificate logged in CT
    2. Observed in the MetaMask feed
    3. We matched the new listing
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-11-07 13:43 UTC to 2027-02-05 13:43 UTC
    Logged 2026-11-07 14:41 UTC in IPng Networks Gouda2027h1, entry 344,395,385
    SHA-256 3d208b1c44745d45a71c86bdaf548bf51388df37cda7f18287944c97b18a7e74
    Public key SHA-256 8b349e2112bfa3b2633bf9ad34863eafe016a09a7aaf605efad55ea8a15d6353
    Brand
    Ethereum
    Addresses
    172.66.44.155 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.66.47.101 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:310c::ac42:2c9b
    2606:4700:310c::ac42:2f65
    Cloudflare
    Cloudflare (172.66.44.155, 172.66.47.101): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.

    Suggest a correction

  34. openfxpropfirm.app US · AS13335 · Cloudflare, Inc.4 addresses
    ListedCloudflareListed by MetaMaskMX presentSPF ~allDMARC rejectRegistered 4 mo ago
    DetailsHide
    Hostname
    openfxpropfirm.app
    First seen
    2026-11-08 05:59 UTC
    Listing
    MetaMask: first observed in the feed 2026-11-08 · still listed at the last successful feed check 2026-11-08 05:58 UTC
    Listed
    MetaMask
    1. Certificate logged in CT
    2. Observed in the MetaMask feed
    3. We matched the new listing
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-06 21:58 UTC to 2027-02-04 22:57 UTC
    Logged 2026-11-06 22:58 UTC in Google ParcelYard2027h1, entry 651,183,468
    SHA-256 052ff6b7c4e82d1f4a74b2fa16fbdb7a1e931569a186c041a399d9e390db749d
    Public key SHA-256 15f503a1630670e91546a4280f06537c1bdccdc74c760e68fbe1e001bfb5b300
    Addresses
    104.21.48.95 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.183.65 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3031::6815:305f
    2606:4700:3035::ac43:b741
    Cloudflare
    Cloudflare (104.21.48.95, 172.67.183.65): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    openfxpropfirm.app
    Registered
    2026-07-11 · TLD Registrar Solutions Ltd
    MX
    Receives mail at route1.mx.cloudflare.net, route2.mx.cloudflare.net, route3.mx.cloudflare.net
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    DMARC policy p=reject
    Checked
    2026-11-08 06:34 UTC

    Suggest a correction

  35. budnxjs.top US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 2 d ago
    DetailsHide
    Hostname
    budnxjs.top
    First seen
    2026-11-08 05:57 UTC
    First published
    2026-11-06 20:10 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 05:58 UTC
    PhishDestroy: first observed in the feed 2026-11-08 · still listed at the last successful feed check 2026-11-08 05:57 UTC
    DNS
    Resolves · checked 2026-11-07 20:21 UTC
    Reported
    PhishDestroy
    1. Certificate logged in CT
    2. Latest DNS check
    3. Observed in the PhishDestroy feed
    4. We matched the new listing
    Certificate
    Issued by YR2 · precertificate
    Valid 2026-11-06 18:49 UTC to 2027-02-04 18:49 UTC
    Logged 2026-11-06 19:47 UTC in Geomys Tuscolo2027h1, entry 504,897,503
    SHA-256 7f031c4ee96aca528ebbaa7154b1b47b39df83941ce4c3dbe35abcbcdd99cef1
    Public key SHA-256 2de42374e099cbcc62ae206262936cbcee0a187b6608cf6d20478a5e3b95312a
    PhishDestroy
    Addresses
    104.21.10.243 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.147.19 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.10.243, 172.67.147.19): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    budnxjs.top
    Registered
    2026-11-06 · Dynadot LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-07 20:00 UTC

    Suggest a correction

  36. dogecoinup.com US · AS13335 · Cloudflare, Inc.4 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 9 y ago
    DetailsHide
    Hostname
    dogecoinup.com
    First seen
    2026-11-08 05:57 UTC
    Listing
    PhishDestroy: observed back in the feed 2026-11-08 · still listed at the last successful feed check 2026-11-08 05:57 UTC · listed 2 times
    Earlier listing periods: 2026-10-25 to 2026-11-07 (13 days)
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched the new listing
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-07 22:45 UTC to 2027-02-05 23:43 UTC
    Logged 2026-11-07 23:45 UTC in Google PlumbersArms2027h1, entry 668,688,975
    SHA-256 f2acc7f67058165c85bec7ff2ce72a03d61696e2150fc133bc23f4546fe94bff
    Public key SHA-256 b489f057c2cb7c625a7a58c1d7dbe1f097f009b45eb72bb8bef07b11fb85c499
    PhishDestroy
    Addresses
    104.21.24.13 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.216.71 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3030::6815:180d
    2606:4700:3031::ac43:d847
    Cloudflare
    Cloudflare (104.21.24.13, 172.67.216.71): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    dogecoinup.com
    Registered
    2018-02-11 · NameSilo, LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 06:00 UTC

    Suggest a correction

  37. drughubmarket-darknet.org US · AS13335 · Cloudflare, Inc.4 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 8 mo ago
    DetailsHide
    Hostname
    drughubmarket-darknet.org
    First seen
    2026-11-08 05:57 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-11-08 · still listed at the last successful feed check 2026-11-08 05:57 UTC
    Reported
    PhishDestroy
    1. Certificate logged in CT
    2. Observed in the PhishDestroy feed
    3. We matched the new listing
    4. Latest DNS check
    Certificate
    Issued by WR1 · precertificate
    Valid 2026-11-07 13:16 UTC to 2027-02-05 14:14 UTC
    Logged 2026-11-07 14:16 UTC in IPng Networks Halloumi2027h1, entry 400,036,101
    SHA-256 c538fac83753fbf0e48085beedc31b3e3f93b72eebe715a32c1a086f689c4909
    Public key SHA-256 44c0b1a395a0e0425efe47190bd764692e271f4a3e3e9ce9f0f5e9d00820ce33
    PhishDestroy
    Addresses
    104.21.58.196 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.206.240 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3033::6815:3ac4
    2606:4700:3037::ac43:cef0
    Cloudflare
    Cloudflare (104.21.58.196, 172.67.206.240): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    drughubmarket-darknet.org
    Registered
    2026-03-16 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 06:34 UTC

    Suggest a correction

  38. gtv9z2.mom US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 1 d ago
    DetailsHide
    Hostname
    gtv9z2.mom
    First seen
    2026-11-08 05:57 UTC
    First published
    2026-11-07 15:41 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 05:58 UTC
    PhishDestroy: first observed in the feed 2026-11-08 · still listed at the last successful feed check 2026-11-08 05:57 UTC
    DNS
    Resolves · checked 2026-11-07 15:51 UTC
    Reported
    PhishDestroy
    1. Certificate logged in CT
    2. Latest DNS check
    3. Observed in the PhishDestroy feed
    4. We matched the new listing
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-07 13:41 UTC to 2027-02-05 14:39 UTC
    Logged 2026-11-07 14:41 UTC in DigiCert Sphinx2027h1, entry 391,194,024
    SHA-256 06a9e1a03ced23a2754a486b97123f0d28186394421ac02208f59e6e404fba40
    Public key SHA-256 18e424a06bac10963671120d756128708bc23ebe92657217ea025f7d6a5eca8c
    PhishDestroy
    Addresses
    104.21.32.82 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.184.118 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.32.82, 172.67.184.118): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    gtv9z2.mom
    Registered
    2026-11-07 · Dynadot Inc
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-07 15:40 UTC

    Suggest a correction

  39. igfamed.org US · AS13335 · Cloudflare, Inc.4 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 3 y ago
    DetailsHide
    Hostname
    igfamed.org
    First seen
    2026-11-08 05:57 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-11-08 · still listed at the last successful feed check 2026-11-08 05:57 UTC
    Reported
    PhishDestroy
    1. Certificate logged in CT
    2. Observed in the PhishDestroy feed
    3. We matched the new listing
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-11-07 02:54 UTC to 2027-02-05 02:54 UTC
    Logged 2026-11-07 03:52 UTC in Google ParcelYard2027h1, entry 654,376,550
    SHA-256 2ae9021ae54707bc1acb1b08f850b96796ff5eac7c0de78f5b93fc934b79bb93
    Public key SHA-256 d897229a8585cf71abd1b1fde611de91c68fc002c02d457eb3a51c3bf3221286
    PhishDestroy
    Addresses
    104.21.3.220 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.153.157 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3033::ac43:999d
    2606:4700:3036::6815:3dc
    Cloudflare
    Cloudflare (104.21.3.220, 172.67.153.157): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    igfamed.org
    Registered
    2023-09-28 · NameCheap, Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 06:23 UTC

    Suggest a correction

  40. mixmyfunds.com US · AS13335 · Cloudflare, Inc.4 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    mixmyfunds.com
    First seen
    2026-11-08 05:57 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-11-08 · still listed at the last successful feed check 2026-11-08 05:57 UTC
    Reported
    PhishDestroy
    1. Certificate logged in CT
    2. Observed in the PhishDestroy feed
    3. We matched the new listing
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-07 07:37 UTC to 2027-02-05 08:36 UTC
    Logged 2026-11-07 08:37 UTC in Google PlumbersArms2027h1, entry 657,680,474
    SHA-256 176770e17ab2ab88bdcc22f21699d081a1f84ef2e95bda8a48093bebbd0eaa8a
    Public key SHA-256 c15b8277ac7b9a852e3cc11e5830739e54deb9da4210e45b8683a7759054e813
    PhishDestroy
    Addresses
    104.21.74.189 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.162.93 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3035::6815:4abd
    2606:4700:3037::ac43:a25d
    Cloudflare
    Cloudflare (104.21.74.189, 172.67.162.93): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    mixmyfunds.com
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 06:00 UTC

    Suggest a correction

  41. novaridgeconstruction.world US · AS13335 · Cloudflare, Inc.4 addresses
    ReportedCloudflareReported by PhishDestroyMX presentMX on Spamhaus DROPSPF ~allSPF on Spamhaus DROPDMARC policy noneRegistered 7 mo ago
    DetailsHide
    Hostname
    novaridgeconstruction.world
    First seen
    2026-11-08 05:57 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-11-08 · still listed at the last successful feed check 2026-11-08 05:57 UTC
    Reported
    PhishDestroy
    1. Certificate logged in CT
    2. Observed in the PhishDestroy feed
    3. We matched the new listing
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-07 18:39 UTC to 2027-02-05 18:39 UTC
    Logged 2026-11-07 19:38 UTC in Geomys Tuscolo2027h1, entry 518,508,258
    SHA-256 0a9cd6779639589dff18924703135ef341f7da2248bc8df9547ab8b0afb43cc2
    Public key SHA-256 f17bc20d4dc417721938dcb3efc20ae3e4028419d0be25347e754df014859290
    PhishDestroy
    Addresses
    104.21.3.233 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.131.81 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3031::ac43:8351
    2606:4700:3037::6815:3e9
    Cloudflare
    Cloudflare (104.21.3.233, 172.67.131.81): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    novaridgeconstruction.world
    Registered
    2026-04-27 · Global Domain Group LLC
    MX
    Receives mail at _dc-mx.547123616c1d.novaridgeconstruction.world
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    DMARC policy p=none: reports only
    MX listing
    Mail server _dc-mx.547123616c1d.novaridgeconstruction.world at 163.61.188.9 is on Spamhaus DROP: hijacked or criminal networks.
    SPF listing
    The SPF record lists 163.61.188.9 as a sender. It is on Spamhaus DROP: hijacked or criminal networks.
    Checked
    2026-11-08 06:34 UTC

    Suggest a correction

  42. sklepbiega.shop US · AS13335 · Cloudflare, Inc.
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    sklepbiega.shop
    First seen
    2026-11-08 05:57 UTC
    First published
    2026-11-07 13:25 UTC
    Listing
    CERT Polska listed it 2026-05-31 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 06:31 UTC
    PhishDestroy: first observed in the feed 2026-11-08 · still listed at the last successful feed check 2026-11-08 05:57 UTC
    DNS
    Resolves · checked 2026-11-07 13:28 UTC
    Reported
    PhishDestroy
    1. Certificate logged in CT
    2. Latest DNS check
    3. Observed in the PhishDestroy feed
    4. We matched the new listing
    Certificate
    Issued by WE1
    Valid 2026-11-07 11:16 UTC to 2027-02-05 12:15 UTC
    Logged 2026-11-07 12:16 UTC in Sectigo Elephant2027h1, entry 763,135,033
    SHA-256 956fe0d957e89941f9250ad2c809f8ac1858730f3070f590c74ac99e8f3a7f86
    Public key SHA-256 93a5c0c8fe847662f5d1d7c72e8973aecdeddeef04f831e4ef1d666fbb05f982
    PhishDestroy
    Addresses
    104.18.22.122 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.18.22.122): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    sklepbiega.shop
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-07 12:24 UTC

    Suggest a correction

  43. zanodex.com US · AS13335 · Cloudflare, Inc.4 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    zanodex.com
    First seen
    2026-11-08 05:57 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-11-08 · still listed at the last successful feed check 2026-11-08 05:57 UTC
    Reported
    PhishDestroy
    1. Certificate logged in CT
    2. Observed in the PhishDestroy feed
    3. We matched the new listing
    4. Latest DNS check
    Certificate
    Issued by Cloudflare TLS Issuing ECC CA 4 · precertificate
    Valid 2026-11-07 14:05 UTC to 2027-02-05 14:13 UTC
    Logged 2026-11-07 14:15 UTC in Let's Encrypt Willow2027h1, entry 987,121,022
    SHA-256 466c166a94f46f152c9eee966cd94cd94ee545b627b0267fa6fedf9bc1429e0c
    Public key SHA-256 00456c32ec76627c7cffbe0d7ea7baa27338bd47f5b37acf2a028b71d8e9f0d0
    PhishDestroy
    Addresses
    104.21.67.133 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.176.232 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3034::ac43:b0e8
    2606:4700:3037::6815:4385
    Cloudflare
    Cloudflare (104.21.67.133, 172.67.176.232): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    zanodex.com
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 06:00 UTC

    Suggest a correction

  44. alaexlaba.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by NPA 165 (finance and insurance)MX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    alaexlaba.com
    First seen
    2026-11-08 05:56 UTC
    Listing
    NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 01:35 UTC
    Listed
    NPA 165
    1. Observed in the NPA 165 feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-11-08 04:57 UTC to 2027-02-06 04:57 UTC
    Logged 2026-11-08 05:55 UTC in DigiCert Wyvern2027h1, entry 450,219,830
    SHA-256 97bab9ba217121b9039ace4cf77b9aa0cace810bbfe69abb1c63a3bfdcff6b73
    Public key SHA-256 edf4f566530b3ab6cda99cffd33bb2768e422d69d338565870dcac13badc02f1
    Addresses
    104.21.37.50 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.203.247 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.37.50, 172.67.203.247): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    alaexlaba.com
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 06:00 UTC

    Suggest a correction

  45. gundemnova.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by USOMMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    gundemnova.com
    First seen
    2026-11-08 05:56 UTC
    Listing
    USOM listed it 2026-05-18 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 05:33 UTC
    Listed
    USOM
    1. Listed by USOM
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-11-08 04:56 UTC to 2027-02-06 04:56 UTC
    Logged 2026-11-08 05:54 UTC in IPng Networks Halloumi2027h1, entry 407,780,043
    SHA-256 a5ae2acac70d65643f60962959377ac383f9e1126260f9acb02532ec5b1387e6
    Public key SHA-256 fb9d979d88035e9861033d8d1ffc0fc9b435f9d70b4bd63a453cd1522e941954
    Addresses
    104.21.76.27 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.186.26 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.76.27, 172.67.186.26): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    gundemnova.com
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 06:00 UTC

    Suggest a correction

  46. ixoiatg.xyz US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by NPA 165 (e-commerce)MX absentSPF missingDMARC quarantineRegistered 10 mo ago
    DetailsHide
    Hostname
    ixoiatg.xyz
    First seen
    2026-11-08 05:56 UTC
    Listing
    NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 01:35 UTC
    Listed
    NPA 165
    1. Observed in the NPA 165 feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-08 04:51 UTC to 2027-02-06 05:49 UTC
    Logged 2026-11-08 05:51 UTC in Let's Encrypt Willow2027h1, entry 997,881,824
    SHA-256 5098144b40e4942f40d5ceb61d788bbe2988083d40920954021414e91881883f
    Public key SHA-256 ab8f9dfb3524f77a0683a5fe8e0045f69a31dd81e673e3da7eecbe602da01a73
    Addresses
    104.21.86.90 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.217.51 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.86.90, 172.67.217.51): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    ixoiatg.xyz
    Registered
    2026-01-16 · GoDaddy.com, LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    DMARC policy p=quarantine
    Checked
    2026-11-08 06:34 UTC

    Suggest a correction

  47. kilobii.com US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    kilobii.com
    First seen
    2026-11-08 05:56 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-08 05:57 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WR1 · precertificate
    Valid 2026-11-08 04:53 UTC to 2027-02-06 05:49 UTC
    Logged 2026-11-08 05:53 UTC in Let's Encrypt Sycamore2027h1, entry 1,038,342,257
    SHA-256 01865d02e4196fe3058b061ac5f69974310e68d6b698caeca64cf91fddc60612
    Public key SHA-256 6c65fb29d1a2a3cb5b791c4412bd13be4af8810c39232e967e4cdb69148fcd97
    PhishDestroy
    Addresses
    104.21.32.82 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.184.118 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.32.82, 172.67.184.118): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    kilobii.com
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 06:00 UTC

    Suggest a correction

  48. maxicheats.com US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX presentSPF ~allDMARC quarantineRegistered 3 y ago
    DetailsHide
    Hostname
    maxicheats.com
    First seen
    2026-11-08 05:56 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-08 05:57 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1
    Valid 2026-11-08 04:50 UTC to 2027-02-06 05:49 UTC
    Logged 2026-11-08 05:52 UTC in DigiCert Wyvern2027h1, entry 450,192,536
    SHA-256 b0377c8038348977aa1f5d5ee5a20bbcf69a38d5c4f622060946d172e675a432
    Public key SHA-256 a67ffe5422976c3e037dc733c1a2bb60c3b6ac2766c5a97817fd36f44f64a78f
    PhishDestroy
    Addresses
    104.21.60.23 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.188.179 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.60.23, 172.67.188.179): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    maxicheats.com
    Registered
    2023-10-13 · GoDaddy.com, LLC
    MX
    Receives mail at mx1.hostinger.com, mx2.hostinger.com
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    DMARC policy p=quarantine
    Checked
    2026-11-07 08:07 UTC

    Suggest a correction

  49. spx30b.com US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    spx30b.com
    First seen
    2026-11-08 05:56 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-08 05:57 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1
    Valid 2026-09-10 01:55 UTC to 2026-12-09 02:54 UTC
    Logged 2026-11-08 05:55 UTC in DigiCert Wyvern2026h2, entry 2,211,580,210
    SHA-256 4bfc458fd29a37a4d0e6eb670ad0c7c829d6ac6788e65e36903ed7f4030821ea
    Public key SHA-256 f8b0075942b6937a994e7f716f5bb9663e4c97a8c4524d873948e09719e01d56
    PhishDestroy
    Addresses
    104.21.54.3 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.221.234 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.54.3, 172.67.221.234): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    spx30b.com
    Registered
    2026-07-13 · Cloudflare, Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 06:00 UTC

    Suggest a correction

  50. varionexdigital.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by USOMMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    varionexdigital.com
    First seen
    2026-11-08 05:56 UTC
    Listing
    USOM listed it 2026-06-09 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 05:33 UTC
    Listed
    USOM
    1. Listed by USOM
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-11-08 04:54 UTC to 2027-02-06 04:54 UTC
    Logged 2026-11-08 05:52 UTC in Let's Encrypt Sycamore2027h1, entry 1,038,326,701
    SHA-256 587c2d30c1cefde7121410d233e5e37692f960c4aa209591e70ed5f18d980612
    Public key SHA-256 7ed95e41506277ad13507f883381642814cdb9313d8bea4449367819aeaa2b36
    Addresses
    104.21.90.33 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.193.200 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.90.33, 172.67.193.200): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    varionexdigital.com
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 06:00 UTC

    Suggest a correction

  51. www.claimformocr.com US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 8 mo ago
    DetailsHide
    Hostname
    www.claimformocr.com
    First seen
    2026-11-08 05:56 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-08 05:57 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1
    Valid 2026-09-10 04:01 UTC to 2026-12-09 05:01 UTC
    Logged 2026-11-08 05:51 UTC in DigiCert Wyvern2026h2, entry 2,211,573,429
    SHA-256 4a32f48119df050f61679dce1e7b8365d79a4e1a241a9e6556cf44a251d7c842
    Public key SHA-256 e6b95515fab62f7d875417a2466339a753a9b627f36c8975f15a59a4fc61b2cd
    PhishDestroy
    Addresses
    104.21.69.43 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.204.83 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.69.43, 172.67.204.83): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    claimformocr.com
    Registered
    2026-03-16 · NameCheap, Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 06:00 UTC

    Suggest a correction

  52. www.kilobii.com US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareUnder kilobii.com, reported by PhishDestroyMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    www.kilobii.com
    First seen
    2026-11-08 05:56 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-08 05:57 UTC
    Reported
    PhishDestroy, listing kilobii.com and the names under it
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WR1 · precertificate
    Valid 2026-11-08 04:53 UTC to 2027-02-06 05:49 UTC
    Logged 2026-11-08 05:53 UTC in Let's Encrypt Sycamore2027h1, entry 1,038,342,257
    SHA-256 01865d02e4196fe3058b061ac5f69974310e68d6b698caeca64cf91fddc60612
    Public key SHA-256 6c65fb29d1a2a3cb5b791c4412bd13be4af8810c39232e967e4cdb69148fcd97
    PhishDestroy
    Addresses
    104.21.32.82 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.184.118 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.32.82, 172.67.184.118): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    kilobii.com
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 06:00 UTC

    Suggest a correction

  53. btcpolicyinstitute.org US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 59 d ago
    DetailsHide
    Hostname
    btcpolicyinstitute.org
    First seen
    2026-11-08 05:51 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 05:58 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-08 04:49 UTC to 2027-02-06 04:49 UTC
    Logged 2026-11-08 05:47 UTC in Google ParcelYard2027h1, entry 672,139,500
    SHA-256 036a76fec191836dfaf5900b5254e9797b4215f749619996544d771b75e8cc91
    Public key SHA-256 032c64e7b4e76f9f7ba103eb78e619c89af1f48aaffcf1aac7d9d1522d9be2e4
    Addresses
    104.21.54.24 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.222.224 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.54.24, 172.67.222.224): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    btcpolicyinstitute.org
    Registered
    2026-09-10 · Atak Domain Bilgi Teknolojileri A._.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 06:34 UTC

    Suggest a correction

  54. connect-flarenetworks.xyz US · AS13335 · Cloudflare, Inc.4 addressesFlare Network
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    connect-flarenetworks.xyz
    First seen
    2026-11-08 05:51 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 05:58 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-11-08 04:52 UTC to 2027-02-06 04:52 UTC
    Logged 2026-11-08 05:50 UTC in Let's Encrypt Sycamore2027h1, entry 1,038,281,304
    SHA-256 4ba0851213d5826be1c95203054768c05e392f9acb8818843da9496b613a7d43
    Public key SHA-256 93e35fcfb42be21f63b8846440613fd35f15d429be22a7bb9d06a7bb2b10df47
    Brand
    Flare Network
    Addresses
    104.21.30.115 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.172.224 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3035::6815:1e73
    2606:4700:3036::ac43:ace0
    Cloudflare
    Cloudflare (104.21.30.115, 172.67.172.224): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    connect-flarenetworks.xyz
    Registered
    2026-05-14 · Dynadot Inc
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 05:55 UTC

    Suggest a correction

  55. crm.akwad.ae US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareUnder akwad.ae, reported by PhishDestroyMX presentSPF ~allDMARC policy none
    DetailsHide
    Hostname
    crm.akwad.ae
    First seen
    2026-11-08 05:51 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-08 05:57 UTC
    Reported
    PhishDestroy, listing akwad.ae and the names under it
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR2 · precertificate
    Valid 2026-11-08 04:50 UTC to 2027-02-06 04:50 UTC
    Logged 2026-11-08 05:48 UTC in Let's Encrypt Willow2027h1, entry 997,852,021
    SHA-256 793af7bdf2899a79f90fff840b7e1024d72ced8441ad7b43e93f8be18b46390d
    Public key SHA-256 06ce8d279a70cdb2f152eaf906275688f98efa3f884e4da127e146563e5559ab
    PhishDestroy
    Addresses
    104.21.9.82 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.130.214 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.9.82, 172.67.130.214): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    akwad.ae
    MX
    Receives mail at ratab.tasjeel.ae
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    DMARC policy p=none: reports only
    Checked
    2026-11-08 05:55 UTC

    Suggest a correction

  56. pttavmhizlisepette.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by USOMMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    pttavmhizlisepette.com
    First seen
    2026-11-08 05:51 UTC
    Listing
    USOM listed it 2026-05-15 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 05:33 UTC
    Listed
    USOM
    1. Listed by USOM
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-11-08 04:49 UTC to 2027-02-06 04:49 UTC
    Logged 2026-11-08 05:48 UTC in IPng Networks Gouda2027h1, entry 350,742,649
    SHA-256 74651b30d777da2c82b7c5996ceb8c0a8c6a5a43bef518c08c92258443099a79
    Public key SHA-256 fdbcb3f4ded96e7d761f0a055b2627012409764b97dfea79f18770ff4d5e4a32
    Addresses
    104.21.2.183 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.129.139 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.2.183, 172.67.129.139): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    pttavmhizlisepette.com
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 05:55 UTC

    Suggest a correction

  57. web3qledger.com US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX presentSPF -allDMARC policy none
    DetailsHide
    Hostname
    web3qledger.com
    First seen
    2026-11-08 05:46 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-08 05:57 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR2 · precertificate
    Valid 2026-11-08 04:43 UTC to 2027-02-06 04:43 UTC
    Logged 2026-11-08 05:41 UTC in DigiCert Sphinx2027h1, entry 398,153,925
    SHA-256 75dada4e998e5f64ea17c8040d319ef4c962a49b0be586ec7152081699f2f0a6
    Public key SHA-256 34c23982087369fd5a131dca35a2ba643876a6317bbb6f08d7d3df8583bc574c
    PhishDestroy
    Addresses
    104.21.81.155 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.144.199 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.81.155, 172.67.144.199): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    web3qledger.com
    MX
    Receives mail at eu1.workspace.org
    SPF
    SPF record with -all: other senders fail
    DMARC
    DMARC policy p=none: reports only
    Checked
    2026-11-08 05:50 UTC

    Suggest a correction

  58. www.web3qledger.com US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareUnder web3qledger.com, reported by PhishDestroyMX presentSPF -allDMARC policy none
    DetailsHide
    Hostname
    www.web3qledger.com
    First seen
    2026-11-08 05:46 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-08 05:57 UTC
    Reported
    PhishDestroy, listing web3qledger.com and the names under it
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR2 · precertificate
    Valid 2026-11-08 04:43 UTC to 2027-02-06 04:43 UTC
    Logged 2026-11-08 05:41 UTC in DigiCert Sphinx2027h1, entry 398,153,925
    SHA-256 75dada4e998e5f64ea17c8040d319ef4c962a49b0be586ec7152081699f2f0a6
    Public key SHA-256 34c23982087369fd5a131dca35a2ba643876a6317bbb6f08d7d3df8583bc574c
    PhishDestroy
    Addresses
    104.21.81.155 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.144.199 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.81.155, 172.67.144.199): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    web3qledger.com
    MX
    Receives mail at eu1.workspace.org
    SPF
    SPF record with -all: other senders fail
    DMARC
    DMARC policy p=none: reports only
    Checked
    2026-11-08 05:50 UTC

    Suggest a correction

  59. live.dex-screener.us US · AS13335 · Cloudflare, Inc.4 addressesDEX Screener
    ListedCloudflareUnder dex-screener.us, listed by MetaMaskMX absentSPF missingDMARC missingRegistered 7 mo ago
    DetailsHide
    Hostname
    live.dex-screener.us
    First seen
    2026-11-08 05:41 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 05:58 UTC
    PhishDestroy: observed back in the feed 2026-11-07 · still listed at the last successful feed check 2026-11-08 05:57 UTC · listed 2 times
    Earlier listing periods: 2026-10-25 to 2026-11-02 (8 days)
    Listed
    MetaMask, listing dex-screener.us and the names under it
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by Cloudflare TLS Issuing RSA CA 4 · precertificate
    Valid 2026-11-08 05:29 UTC to 2027-02-06 05:38 UTC
    Logged 2026-11-08 05:39 UTC in DigiCert Sphinx2027h1, entry 398,147,096
    SHA-256 0bfe3829b243d07d1e71dd239ef6708251b552779be0db57e2e3004912820606
    Public key SHA-256 cd34c47aa648c6a810760e6564bc968e74fe5f1572cdf13b68207fd079801e0a
    Brand
    DEX Screener
    Addresses
    104.21.2.175 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.129.130 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3032::ac43:8182
    2606:4700:3035::6815:2af
    Cloudflare
    Cloudflare (104.21.2.175, 172.67.129.130): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    dex-screener.us
    Registered
    2026-04-09 · Hosting Concepts B.V. d/b/a Registrar.eu
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 03:58 UTC

    Suggest a correction

  60. xaman-allocations.app US · AS13335 · Cloudflare, Inc.4 addressesXaman
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    xaman-allocations.app
    First seen
    2026-11-08 05:41 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 05:58 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-11-08 04:37 UTC to 2027-02-06 04:37 UTC
    Logged 2026-11-08 05:35 UTC in Google PlumbersArms2027h1, entry 672,355,285
    SHA-256 1ba26f8847a168b2e66dd198fa4bcf9e548e467faa41dbb19ecfc1a13b4240ed
    Public key SHA-256 9265b404fc7de0cc6b761dcc7d38de8d40e39b9bba7a651d70d6455e6ab8afc2
    Brand
    Xaman
    Addresses
    104.21.19.81 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.185.170 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3030::6815:1351
    2606:4700:3033::ac43:b9aa
    Cloudflare
    Cloudflare (104.21.19.81, 172.67.185.170): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    xaman-allocations.app
    Registered
    2026-05-14 · PDR Ltd. d/b/a PublicDomainRegistry.com
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 05:45 UTC

    Suggest a correction

  61. aave.com.aaveapp.us US · AS13335 · Cloudflare, Inc.4 addressesAave
    ListedCloudflareUnder aaveapp.us, listed by MetaMaskMX absentSPF missingDMARC missingRegistered 7 mo ago
    DetailsHide
    Hostname
    aave.com.aaveapp.us
    First seen
    2026-11-08 05:36 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 05:58 UTC
    PhishDestroy: observed back in the feed 2026-11-07 · still listed at the last successful feed check 2026-11-08 05:57 UTC · listed 2 times
    Earlier listing periods: 2026-10-25 to 2026-11-02 (8 days)
    Listed
    MetaMask, listing aaveapp.us and the names under it
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WR1 · precertificate
    Valid 2026-11-08 04:34 UTC to 2027-02-06 05:33 UTC
    Logged 2026-11-08 05:34 UTC in IPng Networks Halloumi2027h1, entry 407,643,336
    SHA-256 037e84cdc57ebed6cad131493de69d5fee83eeffcc511cd2b0f1c73731bd913a
    Public key SHA-256 cb44278ad209c2f8230d34c4a31bd8d3ad19d1edf713820ee95c5794b3bf764d
    Brand
    Aave
    Addresses
    104.21.2.175 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.129.130 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3032::ac43:8182
    2606:4700:3035::6815:2af
    Cloudflare
    Cloudflare (104.21.2.175, 172.67.129.130): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    aaveapp.us
    Registered
    2026-04-09 · Hosting Concepts B.V. d/b/a Registrar.eu
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-07 08:07 UTC

    Suggest a correction

  62. bounyr.site US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by NPA 165 (information services)MX absentSPF missingDMARC missingRegistered 59 d ago
    DetailsHide
    Hostname
    bounyr.site
    First seen
    2026-11-08 05:36 UTC
    Listing
    NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 01:35 UTC
    Listed
    NPA 165
    1. Observed in the NPA 165 feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1
    Valid 2026-09-10 01:18 UTC to 2026-12-09 02:16 UTC
    Logged 2026-11-08 05:34 UTC in Let's Encrypt Sycamore2026h2, entry 1,080,693,321
    SHA-256 c1883d7bf8fd0f7eaa54bcb2e243d2f749bf62f947bf61ad3cddc61e4cc39a88
    Public key SHA-256 e018aa53800f9222ab8ffee28afa0f07eaaa54c5e499ddb0026230654d8999db
    Addresses
    104.21.89.178 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.145.176 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.89.178, 172.67.145.176): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    bounyr.site
    Registered
    2026-09-10 · Chengdu West Dimension Digital Technology Co., Ltd.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 06:34 UTC

    Suggest a correction

  63. casinowolinak.org US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX presentSPF ~allDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    casinowolinak.org
    First seen
    2026-11-08 05:31 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 05:58 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-11-08 04:27 UTC to 2027-02-06 04:27 UTC
    Logged 2026-11-08 05:26 UTC in IPng Networks Gouda2027h1, entry 350,613,274
    SHA-256 5f004a3b06efac5690443648cf2fff2677fd6979d88d97b01c3193afecfbf421
    Public key SHA-256 f61a21be06c3e32fbcadb51e8c81142a52f09211dd9dc9ac79bdc0cc2d193800
    Addresses
    104.21.88.132 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.179.178 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.88.132, 172.67.179.178): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    casinowolinak.org
    Registered
    2026-05-06 · Dynadot Inc
    MX
    Receives mail at route3.mx.cloudflare.net, route2.mx.cloudflare.net, route1.mx.cloudflare.net
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 06:34 UTC

    Suggest a correction

  64. maplevestplatform.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    maplevestplatform.com
    First seen
    2026-11-08 05:31 UTC
    Listing
    CERT Polska listed it 2026-07-23 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 06:31 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR1 · precertificate
    Valid 2026-11-08 04:31 UTC to 2027-02-06 04:31 UTC
    Logged 2026-11-08 05:29 UTC in Geomys Tuscolo2027h1, entry 523,753,948
    SHA-256 734b4fd73491b9fb1132996ff92fec79005e32731a04427cf88d8dffad2174ba
    Public key SHA-256 17ac7c71fca19db6f9f6eb66d7801b0dc42b77206da586ecd7deefed192ce603
    Addresses
    104.21.27.62 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.141.194 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.27.62, 172.67.141.194): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    maplevestplatform.com
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 05:35 UTC

    Suggest a correction

  65. www.maplevestplatform.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareUnder maplevestplatform.com, listed by CERT PolskaMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    www.maplevestplatform.com
    First seen
    2026-11-08 05:31 UTC
    Listing
    CERT Polska listed it 2026-07-23 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 06:31 UTC
    Listed
    CERT Polska, listing maplevestplatform.com and the names under it
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR1 · precertificate
    Valid 2026-11-08 04:31 UTC to 2027-02-06 04:31 UTC
    Logged 2026-11-08 05:29 UTC in Geomys Tuscolo2027h1, entry 523,753,948
    SHA-256 734b4fd73491b9fb1132996ff92fec79005e32731a04427cf88d8dffad2174ba
    Public key SHA-256 17ac7c71fca19db6f9f6eb66d7801b0dc42b77206da586ecd7deefed192ce603
    Addresses
    104.21.27.62 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.141.194 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.27.62, 172.67.141.194): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    maplevestplatform.com
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 05:35 UTC

    Suggest a correction

  66. aurevia-eu.store US · AS13335 · Cloudflare, Inc.
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 5 mo ago
    DetailsHide
    Hostname
    aurevia-eu.store
    First seen
    2026-11-08 05:25 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-08 05:57 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-11-08 04:22 UTC to 2027-02-06 04:22 UTC
    Logged 2026-11-08 05:21 UTC in DigiCert Sphinx2027h1, entry 398,001,131
    SHA-256 22c3deaa0ea030f59a1baf169f45a9b6263625e4bedbe980a831632d3c248e1a
    Public key SHA-256 c7740e45117379c2401ef374bcd1f0d73a2cd588086c60f009988ee591a504ed
    PhishDestroy
    Addresses
    23.227.38.65 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (23.227.38.65): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    aurevia-eu.store
    Registered
    2026-06-18 · HOSTINGER operations, UAB
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 06:34 UTC

    Suggest a correction

  67. cpanel.elitenobeledge.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareUnder elitenobeledge.com, listed by MetaMaskMX presentSPF ~allDMARC policy none
    DetailsHide
    Hostname
    cpanel.elitenobeledge.com
    First seen
    2026-11-08 05:25 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 05:58 UTC
    Listed
    MetaMask, listing elitenobeledge.com and the names under it
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR2
    Valid 2026-11-08 04:25 UTC to 2027-02-06 04:25 UTC
    Logged 2026-11-08 05:24 UTC in Google PlumbersArms2027h1, entry 672,249,698
    SHA-256 27fd130da1fe8f0f8bfb1ac06f955228d8a9dff4e643580052c71897973e001d
    Public key SHA-256 b915d221e69ff61cef79857d0bc8a8bd4ff5f8cd97eba92f9a8e0d83f9487137
    Addresses
    104.21.38.144 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.223.165 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.38.144, 172.67.223.165): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    elitenobeledge.com
    MX
    Receives mail at _dc-mx.bbe380915562.elitenobeledge.com
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    DMARC policy p=none: reports only
    Checked
    2026-11-08 05:30 UTC

    Suggest a correction

  68. cpcalendars.elitenobeledge.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareUnder elitenobeledge.com, listed by MetaMaskMX presentSPF ~allDMARC policy none
    DetailsHide
    Hostname
    cpcalendars.elitenobeledge.com
    First seen
    2026-11-08 05:25 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 05:58 UTC
    Listed
    MetaMask, listing elitenobeledge.com and the names under it
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR2
    Valid 2026-11-08 04:25 UTC to 2027-02-06 04:25 UTC
    Logged 2026-11-08 05:24 UTC in Google PlumbersArms2027h1, entry 672,249,698
    SHA-256 27fd130da1fe8f0f8bfb1ac06f955228d8a9dff4e643580052c71897973e001d
    Public key SHA-256 b915d221e69ff61cef79857d0bc8a8bd4ff5f8cd97eba92f9a8e0d83f9487137
    Addresses
    104.21.38.144 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.223.165 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.38.144, 172.67.223.165): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    elitenobeledge.com
    MX
    Receives mail at _dc-mx.bbe380915562.elitenobeledge.com
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    DMARC policy p=none: reports only
    Checked
    2026-11-08 05:30 UTC

    Suggest a correction

  69. cpcontacts.elitenobeledge.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareUnder elitenobeledge.com, listed by MetaMaskMX presentSPF ~allDMARC policy none
    DetailsHide
    Hostname
    cpcontacts.elitenobeledge.com
    First seen
    2026-11-08 05:25 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 05:58 UTC
    Listed
    MetaMask, listing elitenobeledge.com and the names under it
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR2
    Valid 2026-11-08 04:25 UTC to 2027-02-06 04:25 UTC
    Logged 2026-11-08 05:24 UTC in Google PlumbersArms2027h1, entry 672,249,698
    SHA-256 27fd130da1fe8f0f8bfb1ac06f955228d8a9dff4e643580052c71897973e001d
    Public key SHA-256 b915d221e69ff61cef79857d0bc8a8bd4ff5f8cd97eba92f9a8e0d83f9487137
    Addresses
    104.21.38.144 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.223.165 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.38.144, 172.67.223.165): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    elitenobeledge.com
    MX
    Receives mail at _dc-mx.bbe380915562.elitenobeledge.com
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    DMARC policy p=none: reports only
    Checked
    2026-11-08 05:30 UTC

    Suggest a correction

  70. elitenobeledge.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX presentSPF ~allDMARC policy none
    DetailsHide
    Hostname
    elitenobeledge.com
    First seen
    2026-11-08 05:25 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 05:58 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR2
    Valid 2026-11-08 04:25 UTC to 2027-02-06 04:25 UTC
    Logged 2026-11-08 05:24 UTC in Google PlumbersArms2027h1, entry 672,249,698
    SHA-256 27fd130da1fe8f0f8bfb1ac06f955228d8a9dff4e643580052c71897973e001d
    Public key SHA-256 b915d221e69ff61cef79857d0bc8a8bd4ff5f8cd97eba92f9a8e0d83f9487137
    Addresses
    104.21.38.144 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.223.165 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.38.144, 172.67.223.165): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    elitenobeledge.com
    MX
    Receives mail at _dc-mx.bbe380915562.elitenobeledge.com
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    DMARC policy p=none: reports only
    Checked
    2026-11-08 05:30 UTC

    Suggest a correction

  71. money-x.guru US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    money-x.guru
    First seen
    2026-11-08 05:25 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 05:58 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-11-08 04:25 UTC to 2027-02-06 04:25 UTC
    Logged 2026-11-08 05:23 UTC in Let's Encrypt Sycamore2027h1, entry 1,037,698,578
    SHA-256 0e22981a31f678f23a02369389c9208535e88b3ac1b4df3097abb300fed3b9be
    Public key SHA-256 8accb34313a7c4a4815b0b3b27976f28d95d490b29d313c0bdd647dfb57d8f27
    Addresses
    104.21.9.106 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.159.191 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.9.106, 172.67.159.191): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    money-x.guru
    Registered
    2026-05-14 · Spaceship, Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 06:34 UTC

    Suggest a correction

  72. webdisk.elitenobeledge.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareUnder elitenobeledge.com, listed by MetaMaskMX presentSPF ~allDMARC policy none
    DetailsHide
    Hostname
    webdisk.elitenobeledge.com
    First seen
    2026-11-08 05:25 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 05:58 UTC
    Listed
    MetaMask, listing elitenobeledge.com and the names under it
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR2
    Valid 2026-11-08 04:25 UTC to 2027-02-06 04:25 UTC
    Logged 2026-11-08 05:24 UTC in Google PlumbersArms2027h1, entry 672,249,698
    SHA-256 27fd130da1fe8f0f8bfb1ac06f955228d8a9dff4e643580052c71897973e001d
    Public key SHA-256 b915d221e69ff61cef79857d0bc8a8bd4ff5f8cd97eba92f9a8e0d83f9487137
    Addresses
    104.21.38.144 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.223.165 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.38.144, 172.67.223.165): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    elitenobeledge.com
    MX
    Receives mail at _dc-mx.bbe380915562.elitenobeledge.com
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    DMARC policy p=none: reports only
    Checked
    2026-11-08 05:30 UTC

    Suggest a correction

  73. webmail.elitenobeledge.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareUnder elitenobeledge.com, listed by MetaMaskMX presentSPF ~allDMARC policy none
    DetailsHide
    Hostname
    webmail.elitenobeledge.com
    First seen
    2026-11-08 05:25 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 05:58 UTC
    Listed
    MetaMask, listing elitenobeledge.com and the names under it
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR2
    Valid 2026-11-08 04:25 UTC to 2027-02-06 04:25 UTC
    Logged 2026-11-08 05:24 UTC in Google PlumbersArms2027h1, entry 672,249,698
    SHA-256 27fd130da1fe8f0f8bfb1ac06f955228d8a9dff4e643580052c71897973e001d
    Public key SHA-256 b915d221e69ff61cef79857d0bc8a8bd4ff5f8cd97eba92f9a8e0d83f9487137
    Addresses
    104.21.38.144 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.223.165 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.38.144, 172.67.223.165): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    elitenobeledge.com
    MX
    Receives mail at _dc-mx.bbe380915562.elitenobeledge.com
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    DMARC policy p=none: reports only
    Checked
    2026-11-08 05:30 UTC

    Suggest a correction

  74. www.elitenobeledge.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareUnder elitenobeledge.com, listed by MetaMaskMX presentSPF ~allDMARC policy none
    DetailsHide
    Hostname
    www.elitenobeledge.com
    First seen
    2026-11-08 05:25 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 05:58 UTC
    Listed
    MetaMask, listing elitenobeledge.com and the names under it
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR2
    Valid 2026-11-08 04:25 UTC to 2027-02-06 04:25 UTC
    Logged 2026-11-08 05:24 UTC in Google PlumbersArms2027h1, entry 672,249,698
    SHA-256 27fd130da1fe8f0f8bfb1ac06f955228d8a9dff4e643580052c71897973e001d
    Public key SHA-256 b915d221e69ff61cef79857d0bc8a8bd4ff5f8cd97eba92f9a8e0d83f9487137
    Addresses
    104.21.38.144 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.223.165 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.38.144, 172.67.223.165): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    elitenobeledge.com
    MX
    Receives mail at _dc-mx.bbe380915562.elitenobeledge.com
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    DMARC policy p=none: reports only
    Checked
    2026-11-08 05:30 UTC

    Suggest a correction

  75. axie-infiniio.pro US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    axie-infiniio.pro
    First seen
    2026-11-08 05:20 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 05:58 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-11-08 04:17 UTC to 2027-02-06 04:17 UTC
    Logged 2026-11-08 05:15 UTC in Google ParcelYard2027h1, entry 671,851,287
    SHA-256 33a1c6579cf8347d62f22df06c5d56bfb90dd64e968112ea90199d380b3b7e08
    Public key SHA-256 811078f2158f4a3ff4fb137568115c12f95acfca56c385d1ef61524af8fb02c7
    Addresses
    104.21.32.231 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.156.132 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.32.231, 172.67.156.132): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    axie-infiniio.pro
    Registered
    2026-05-14 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 06:35 UTC

    Suggest a correction

  76. docsend-app.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    docsend-app.com
    First seen
    2026-11-08 05:20 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 05:58 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-11-08 04:19 UTC to 2027-02-06 04:19 UTC
    Logged 2026-11-08 05:18 UTC in Let's Encrypt Willow2027h1, entry 997,545,676
    SHA-256 5b73347907b637cd6125676c2601008a9e94889fe51c236e7906c0c81a6dbcf1
    Public key SHA-256 b5d261d1a6b18c1ae256af724810e1ebba52bbd306c7f59d67d9eeaef7dcbcef
    Addresses
    104.21.29.190 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.149.168 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.29.190, 172.67.149.168): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    docsend-app.com
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 05:30 UTC

    Suggest a correction

  77. grobuzz.co.uk US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX presentSPF ~allDMARC policy noneRegistered 3 y ago
    DetailsHide
    Hostname
    grobuzz.co.uk
    First seen
    2026-11-08 05:20 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-08 05:57 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR1 · precertificate
    Valid 2026-11-08 04:16 UTC to 2027-02-06 04:16 UTC
    Logged 2026-11-08 05:15 UTC in Let's Encrypt Sycamore2027h1, entry 1,037,482,797
    SHA-256 17f4cc9b9c47550eac417030f37e00f00131f07e2585cfbd36522afd1767a446
    Public key SHA-256 7fc880abc027e4dfc2f345ab8b669e23fd195c184237aedb26c0e98f5cbee1ac
    PhishDestroy
    Addresses
    104.21.79.70 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.169.54 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.79.70, 172.67.169.54): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    grobuzz.co.uk
    Registered
    2024-02-27 · Dynadot, LLC t/a Dynadot
    MX
    Receives mail at route2.mx.cloudflare.net, route3.mx.cloudflare.net, route1.mx.cloudflare.net
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    DMARC policy p=none: reports only
    Checked
    2026-11-08 06:34 UTC

    Suggest a correction

  78. www.grobuzz.co.uk US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareUnder grobuzz.co.uk, reported by PhishDestroyMX presentSPF ~allDMARC policy noneRegistered 3 y ago
    DetailsHide
    Hostname
    www.grobuzz.co.uk
    First seen
    2026-11-08 05:20 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-08 05:57 UTC
    Reported
    PhishDestroy, listing grobuzz.co.uk and the names under it
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR1 · precertificate
    Valid 2026-11-08 04:16 UTC to 2027-02-06 04:16 UTC
    Logged 2026-11-08 05:15 UTC in Let's Encrypt Sycamore2027h1, entry 1,037,482,797
    SHA-256 17f4cc9b9c47550eac417030f37e00f00131f07e2585cfbd36522afd1767a446
    Public key SHA-256 7fc880abc027e4dfc2f345ab8b669e23fd195c184237aedb26c0e98f5cbee1ac
    PhishDestroy
    Addresses
    104.21.79.70 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.169.54 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.79.70, 172.67.169.54): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    grobuzz.co.uk
    Registered
    2024-02-27 · Dynadot, LLC t/a Dynadot
    MX
    Receives mail at route2.mx.cloudflare.net, route3.mx.cloudflare.net, route1.mx.cloudflare.net
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    DMARC policy p=none: reports only
    Checked
    2026-11-08 06:34 UTC

    Suggest a correction

  79. distribution-zestprotocol.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    distribution-zestprotocol.com
    First seen
    2026-11-08 05:15 UTC
    First published
    2026-11-08 05:27 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 05:58 UTC
    DNS
    Resolves · checked 2026-11-08 05:35 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-11-08 04:15 UTC to 2027-02-06 04:15 UTC
    Logged 2026-11-08 05:14 UTC in Google PlumbersArms2027h1, entry 672,152,448
    SHA-256 2728dde2bbf9536e68ac8a1afdcff0f4f816059643146e403d0b6c3e8cb5017b
    Public key SHA-256 95466d50afe1a02a38b894a3c60db6070c3bdab0d60d195b3ab50245333b6f76
    Addresses
    104.21.4.60 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.154.10 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.4.60, 172.67.154.10): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    distribution-zestprotocol.com
    Registered
    2026-05-15 · PDR Ltd. d/b/a PublicDomainRegistry.com
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 05:25 UTC

    Suggest a correction

  80. toastwallet.live US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 10 mo ago
    DetailsHide
    Hostname
    toastwallet.live
    First seen
    2026-11-08 05:15 UTC
    First published
    2026-11-08 05:27 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-08 05:57 UTC
    DNS
    Resolves · checked 2026-11-08 05:35 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1
    Valid 2026-11-08 04:10 UTC to 2027-02-06 05:07 UTC
    Logged 2026-11-08 05:10 UTC in DigiCert Wyvern2027h1, entry 449,844,801
    SHA-256 85fcf8de445c73df2e4cbddd7b8c76ae86d5419f0b1699141d500fd0cf233ea7
    Public key SHA-256 e25938f0d30804e650e9a14b4cffe6efa2cf9b0418cfef0d22c3175710b39665
    PhishDestroy
    Addresses
    104.21.66.20 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.155.79 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.66.20, 172.67.155.79): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    toastwallet.live
    Registered
    2026-01-16 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 05:25 UTC

    Suggest a correction

  81. ydwymb.asia US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by NPA 165 (information services)MX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    ydwymb.asia
    First seen
    2026-11-08 05:15 UTC
    First published
    2026-11-08 05:27 UTC
    Listing
    NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 01:35 UTC
    DNS
    Resolves · checked 2026-11-08 05:35 UTC
    Listed
    NPA 165
    1. Observed in the NPA 165 feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1
    Valid 2026-09-10 01:58 UTC to 2026-12-09 02:56 UTC
    Logged 2026-11-08 05:11 UTC in Let's Encrypt Willow2026h2, entry 1,029,054,430
    SHA-256 6a2d72095a492e3413196d646a53c50adcb56c188d253a0d658a7c1401dfd269
    Public key SHA-256 843b4b217b9389eeb0c69cd27a6e1cc7c43f4361eafcad65e5111c4fcad09220
    Addresses
    104.21.51.246 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.192.65 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.51.246, 172.67.192.65): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    ydwymb.asia
    Registered
    2026-07-13 · Alibaba Cloud Computing Ltd. d/b/a HiChina (www.net.cn)
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 05:25 UTC

    Suggest a correction

  82. crownlessgame.com US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 12 mo ago
    DetailsHide
    Hostname
    crownlessgame.com
    First seen
    2026-11-08 05:10 UTC
    First published
    2026-11-08 05:27 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-08 05:57 UTC
    DNS
    Resolves · checked 2026-11-08 05:35 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-08 04:07 UTC to 2027-02-06 05:06 UTC
    Logged 2026-11-08 05:07 UTC in Google PlumbersArms2027h1, entry 672,093,416
    SHA-256 d66f2deccefcb9eeb0c5c42cebd1fc629009b6f30f688b6e41961aeb301e55b1
    Public key SHA-256 4b2ef3de1a54ebfd4320d2340a4d803cb6a3c6effab7589906b8f326d2fe89bf
    PhishDestroy
    Addresses
    104.21.77.153 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.209.83 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.77.153, 172.67.209.83): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    crownlessgame.com
    Registered
    2025-11-18 · Metaregistrar BV
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 05:25 UTC

    Suggest a correction

  83. dev.cyborgx.tech US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX presentSPF -allDMARC rejectRegistered 10 mo ago
    DetailsHide
    Hostname
    dev.cyborgx.tech
    First seen
    2026-11-08 05:10 UTC
    First published
    2026-11-08 05:27 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-08 05:57 UTC
    DNS
    Resolves · checked 2026-11-08 05:35 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-08 04:08 UTC to 2027-02-06 04:08 UTC
    Logged 2026-11-08 05:06 UTC in Google PlumbersArms2027h1, entry 672,086,004
    SHA-256 4919239af2937121e0673aa4993c543052fe535ee5f34c0904dc7a6d7c17342e
    Public key SHA-256 0bf6c7db8f9af31af56b72ee2699388242e96d5496a973274543e87b20605671
    PhishDestroy
    Addresses
    104.21.61.138 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.210.247 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.61.138, 172.67.210.247): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    cyborgx.tech
    Registered
    2026-01-22 · NameCheap, Inc.
    MX
    Receives mail at cyborgx-tech.mail.protection.outlook.com
    SPF
    SPF record with -all: other senders fail
    DMARC
    DMARC policy p=reject
    Checked
    2026-11-08 05:25 UTC

    Suggest a correction

  84. lunafinance.ltd US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 12 mo ago
    DetailsHide
    Hostname
    lunafinance.ltd
    First seen
    2026-11-08 05:10 UTC
    First published
    2026-11-08 05:27 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-08 05:57 UTC
    DNS
    Resolves · checked 2026-11-08 05:35 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-08 04:06 UTC to 2027-02-06 05:05 UTC
    Logged 2026-11-08 05:06 UTC in Google ParcelYard2027h1, entry 671,766,702
    SHA-256 9f8c2e73bc03d801172a2b866e8ddadf8ae3bc63c075028b64d3a3d4002928ca
    Public key SHA-256 eefd9a0058bacb00cc9aa2a0fccb497f2c36c624d3273c4412190688c9b45eb7
    PhishDestroy
    Addresses
    104.21.22.101 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.204.45 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.22.101, 172.67.204.45): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    lunafinance.ltd
    Registered
    2025-11-18 · Web Commerce Communications Limited dba WebNic.cc
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 05:25 UTC

    Suggest a correction

  85. coinmcap.cc US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    coinmcap.cc
    First seen
    2026-11-08 05:00 UTC
    First published
    2026-11-08 05:27 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 05:58 UTC
    DNS
    Resolves · checked 2026-11-08 05:35 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR2
    Valid 2026-11-08 03:57 UTC to 2027-02-06 03:57 UTC
    Logged 2026-11-08 04:56 UTC in Google PlumbersArms2027h1, entry 671,990,268
    SHA-256 6bafc8b56866f77baf2a1d195c7c35e7319b9aee1d5614b052a38545d151ef53
    Public key SHA-256 6808602fabd0fdeae565275ccaf01895910315768105e646c6b7cec71abd9157
    Addresses
    104.21.39.93 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.144.6 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.39.93, 172.67.144.6): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    coinmcap.cc
    Registered
    2026-07-13 · Global Domain Group LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 05:25 UTC

    Suggest a correction

  86. ledger-start-home.pages.dev US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMask
    DetailsHide
    Hostname
    ledger-start-home.pages.dev
    First seen
    2026-11-08 05:00 UTC
    First published
    2026-11-08 05:27 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 05:58 UTC
    DNS
    Resolves · checked 2026-11-08 05:35 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-08 03:59 UTC to 2027-02-06 04:57 UTC
    Logged 2026-11-08 04:59 UTC in IPng Networks Halloumi2027h1, entry 407,381,103
    SHA-256 081216935acb0d5251c37c3e7e23fc86837860c2417c1869ed7bf7e77cbffe42
    Public key SHA-256 db3330b239efec1a0d60dac1b8c58072c63d36adb28436077c04052f42afd060
    Addresses
    172.66.44.183 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.66.47.73 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (172.66.44.183, 172.66.47.73): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.

    Suggest a correction

  87. www.coinmcap.cc US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareUnder coinmcap.cc, listed by MetaMaskMX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    www.coinmcap.cc
    First seen
    2026-11-08 05:00 UTC
    First published
    2026-11-08 05:27 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 05:58 UTC
    DNS
    Resolves · checked 2026-11-08 05:35 UTC
    Listed
    MetaMask, listing coinmcap.cc and the names under it
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR2
    Valid 2026-11-08 03:57 UTC to 2027-02-06 03:57 UTC
    Logged 2026-11-08 04:56 UTC in Google PlumbersArms2027h1, entry 671,990,268
    SHA-256 6bafc8b56866f77baf2a1d195c7c35e7319b9aee1d5614b052a38545d151ef53
    Public key SHA-256 6808602fabd0fdeae565275ccaf01895910315768105e646c6b7cec71abd9157
    Addresses
    104.21.39.93 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.144.6 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.39.93, 172.67.144.6): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    coinmcap.cc
    Registered
    2026-07-13 · Global Domain Group LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 05:25 UTC

    Suggest a correction

  88. distribution-flarefoundations.live US · AS13335 · Cloudflare, Inc.4 addressesFlare Network
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    distribution-flarefoundations.live
    First seen
    2026-11-08 04:56 UTC
    First published
    2026-11-08 05:27 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 05:58 UTC
    DNS
    Resolves · checked 2026-11-08 05:35 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-08 03:53 UTC to 2027-02-06 04:52 UTC
    Logged 2026-11-08 04:53 UTC in DigiCert Wyvern2027h1, entry 449,753,207
    SHA-256 217116b7bdc04904329be6bdb6774f1e2d480bc4b240cf71069b3601a3ff0895
    Public key SHA-256 7dc8148f0806a6f373dd314aedf790dbf44a83d0ac9c1f0a9ab09ec45c5b1e3b
    Brand
    Flare Network
    Addresses
    104.21.56.17 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.175.247 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3037::6815:3811
    2606:4700:3037::ac43:aff7
    Cloudflare
    Cloudflare (104.21.56.17, 172.67.175.247): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    distribution-flarefoundations.live
    Registered
    2026-07-12 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 05:00 UTC

    Suggest a correction

  89. hyperliquld.store US · AS13335 · Cloudflare, Inc.4 addressesHyperliquidLookalike of hyperliquid.xyz · similar-looking characters
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 8 mo ago
    DetailsHide
    Hostname
    hyperliquld.store
    First seen
    2026-11-08 04:56 UTC
    First published
    2026-11-08 05:27 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-08 05:57 UTC
    DNS
    Resolves · checked 2026-11-08 05:35 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-11-08 03:54 UTC to 2027-02-06 03:54 UTC
    Logged 2026-11-08 04:52 UTC in IPng Networks Halloumi2027h1, entry 407,332,607
    SHA-256 150a4b7aecd8bcb5f50faa4dd2b7aefd35c23e6a561004ac55d069ae9dd0dd17
    Public key SHA-256 aa7bfcd76bcb4f9e45962e11aa6fe3f26bf7498a3d2eb232da8deedb0b136996
    PhishDestroy
    Brand
    Hyperliquid (spelled like hyperliquid.xyz with similar-looking characters)
    Addresses
    104.21.47.78 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.170.197 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3033::ac43:aac5
    2606:4700:3037::6815:2f4e
    Cloudflare
    Cloudflare (104.21.47.78, 172.67.170.197): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    hyperliquld.store
    Registered
    2026-03-16 · Squarespace Domains LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 05:00 UTC

    Suggest a correction

  90. xqcmbi.asia US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by NPA 165 (information services)MX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    xqcmbi.asia
    First seen
    2026-11-08 04:56 UTC
    First published
    2026-11-08 05:27 UTC
    Listing
    NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 01:35 UTC
    DNS
    Resolves · checked 2026-11-08 05:35 UTC
    Listed
    NPA 165
    1. Observed in the NPA 165 feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1
    Valid 2026-09-10 01:56 UTC to 2026-12-09 02:55 UTC
    Logged 2026-11-08 04:54 UTC in DigiCert Wyvern2026h2, entry 2,211,505,286
    SHA-256 3c43a84822be85160a4dd5106d7e9414b5f90c5e25e754f9f8021706f157992a
    Public key SHA-256 d17062292fca76078c83d44e9d04dfd58c7cbb24d124779c19b827beac43f55f
    Addresses
    104.21.86.186 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.223.185 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.86.186, 172.67.223.185): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    xqcmbi.asia
    Registered
    2026-07-13 · Alibaba Cloud Computing Ltd. d/b/a HiChina (www.net.cn)
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 05:25 UTC

    Suggest a correction

  91. 1958822.com US · AS13335 · Cloudflare, Inc.
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 8 y ago
    DetailsHide
    Hostname
    1958822.com
    First seen
    2026-11-08 04:51 UTC
    First published
    2026-11-08 05:27 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-08 05:57 UTC
    DNS
    Resolves · checked 2026-11-08 05:35 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-08 03:47 UTC to 2027-02-06 04:46 UTC
    Logged 2026-11-08 04:47 UTC in Let's Encrypt Sycamore2027h1, entry 1,036,910,517
    SHA-256 74873497e491f2e910db864f5321f53827026d27bd6d15f723cf2419a8db5fb6
    Public key SHA-256 2eeaf6e5d012d7a0a938b5b5b0b2315502951bb4fa3a69087a90e0f0b49872f7
    PhishDestroy
    Addresses
    23.145.152.202 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (23.145.152.202): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    1958822.com
    Registered
    2019-01-06 · GoDaddy.com, LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 05:25 UTC

    Suggest a correction

  92. app.cohenimmigrationgroup.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareUnder cohenimmigrationgroup.com, listed by MetaMaskMX absentSPF ~allDMARC missingRegistered 21 mo ago
    DetailsHide
    Hostname
    app.cohenimmigrationgroup.com
    First seen
    2026-11-08 04:51 UTC
    First published
    2026-11-08 05:27 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 05:58 UTC
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-08 05:57 UTC
    DNS
    Resolves · checked 2026-11-08 05:35 UTC
    Listed
    MetaMask, listing cohenimmigrationgroup.com and the names under it
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1
    Valid 2026-09-09 23:47 UTC to 2026-12-09 00:47 UTC
    Logged 2026-11-08 04:48 UTC in Geomys Tuscolo2026h2, entry 1,045,707,985
    SHA-256 2bd655315ddcb7f92bf611e799325adadcab8310742b09091d2953c08e2ea6e7
    Public key SHA-256 7bcde4e3842ba266f20530251c9331564f6521d4cd1f70a5d8dc1be0612ced42
    Addresses
    104.18.37.19 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.64.150.237 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.18.37.19, 172.64.150.237): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    cohenimmigrationgroup.com
    Registered
    2025-02-17 · GoDaddy.com, LLC
    MX
    Publishes no mail exchanger
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-07 07:43 UTC

    Suggest a correction

  93. app.dex-app.co.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareUnder dex-app.co.com, listed by MetaMask
    DetailsHide
    Hostname
    app.dex-app.co.com
    First seen
    2026-11-08 04:46 UTC
    First published
    2026-11-08 05:27 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 05:58 UTC
    DNS
    Resolves · checked 2026-11-08 05:35 UTC
    Listed
    MetaMask, listing dex-app.co.com and the names under it
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. Latest DNS check
    4. We matched its certificate name
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-08 03:45 UTC to 2027-02-06 04:45 UTC
    Logged 2026-11-08 04:45 UTC in IPng Networks Gouda2027h1, entry 350,334,446
    SHA-256 1a78f71e0ac4fd49761734c24389264c8f2a49c55a78bd8b481205a86849be2e
    Public key SHA-256 cda2e4fd514ca329d324d18c1009fb8f066d1fcfea09c7b7646edb50572002c5
    Addresses
    104.21.2.175 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.129.130 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.2.175, 172.67.129.130): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.

    Suggest a correction

  94. bullschange.com US · AS13335 · Cloudflare, Inc.3 addresses
    ReportedCloudflareReported by PhishDestroyMX presentSPF ~allDMARC quarantineRegistered 3 y ago
    DetailsHide
    Hostname
    bullschange.com
    First seen
    2026-11-08 04:46 UTC
    First published
    2026-11-08 05:27 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-08 05:57 UTC
    DNS
    Resolves · checked 2026-11-08 05:35 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-11-08 03:47 UTC to 2027-02-06 03:47 UTC
    Logged 2026-11-08 04:45 UTC in DigiCert Wyvern2027h1, entry 449,681,343
    SHA-256 d164818c8bdd53e39bba87848b9f0f301aafd5d99f214ac2ea947e32fc92c562
    Public key SHA-256 933f3e2a56fac7a6bb38340724cada1b893803690dfab09449698c8771d70c0e
    PhishDestroy
    Addresses
    104.26.0.51 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    104.26.1.51 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.73.58 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.26.0.51, 104.26.1.51, 172.67.73.58): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    bullschange.com
    Registered
    2023-10-10 · Tucows Domains Inc.
    MX
    Receives mail at mx.yandex.net
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    DMARC policy p=quarantine
    Checked
    2026-11-08 05:25 UTC

    Suggest a correction

  95. tasty-changer.com US · AS13335 · Cloudflare, Inc.3 addresses
    ReportedCloudflareReported by PhishDestroyMX presentSPF all omittedDMARC rejectRegistered 3 y ago
    DetailsHide
    Hostname
    tasty-changer.com
    First seen
    2026-11-08 04:46 UTC
    First published
    2026-11-08 05:27 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-08 05:57 UTC
    DNS
    Resolves · checked 2026-11-08 05:35 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WR1 · precertificate
    Valid 2026-11-08 03:43 UTC to 2027-02-06 04:41 UTC
    Logged 2026-11-08 04:43 UTC in IPng Networks Gouda2027h1, entry 350,315,580
    SHA-256 c47e7f279cbea7ddb3445ce86aa2103a240165282dd117af5679d0db2cb6f96e
    Public key SHA-256 cb69d86081ee1baad5af1a185c932a3e48b78638bf09025a5c10f5a7de31b48c
    PhishDestroy
    Addresses
    104.26.14.33 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    104.26.15.33 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.70.11 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.26.14.33, 104.26.15.33, 172.67.70.11): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    tasty-changer.com
    Registered
    2024-02-08 · Cloudflare, Inc.
    MX
    Receives mail at mx.yandex.net
    SPF
    SPF record without an "all" mechanism
    DMARC
    DMARC policy p=reject
    Checked
    2026-11-08 05:25 UTC

    Suggest a correction

  96. yunxexoan.shop US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by NPA 165 (information services)MX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    yunxexoan.shop
    First seen
    2026-11-08 04:46 UTC
    First published
    2026-11-08 05:27 UTC
    Listing
    NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 01:35 UTC
    DNS
    Resolves · checked 2026-11-08 05:35 UTC
    Listed
    NPA 165
    1. Observed in the NPA 165 feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-08 03:44 UTC to 2027-02-06 03:44 UTC
    Logged 2026-11-08 04:43 UTC in Google PlumbersArms2027h1, entry 671,871,034
    SHA-256 6aab61c4f6e59ed60d15a53d7b14abc3d9946bd479eb395710b69909946244a3
    Public key SHA-256 6f2167bb8785804a4871b9bd44207d77e7b66a695900dd24c9903c6cbffcc94a
    Addresses
    104.21.75.227 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.182.229 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.75.227, 172.67.182.229): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    yunxexoan.shop
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 04:49 UTC

    Suggest a correction

  97. forecoffee-bonus.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 59 d ago
    DetailsHide
    Hostname
    forecoffee-bonus.com
    First seen
    2026-11-08 04:41 UTC
    First published
    2026-11-08 05:27 UTC
    Listing
    CERT Polska listed it 2026-10-27 · still listed at the last successful feed check 2026-11-08 06:31 UTC
    DNS
    Resolves · checked 2026-11-08 05:35 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-08 03:37 UTC to 2027-02-06 03:37 UTC
    Logged 2026-11-08 04:36 UTC in Google PlumbersArms2027h1, entry 671,799,984
    SHA-256 879f145e793c6f6ffd90f656bbdc55f02899783dec3339787244f385eab22e4d
    Public key SHA-256 2da6615589c5cf76a92a6abd15662dde3c52fb6ed3d24432b7dc232c28829d87
    Addresses
    104.21.42.110 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.161.163 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.42.110, 172.67.161.163): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    forecoffee-bonus.com
    Registered
    2026-09-10 · West263 International Limited
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 05:25 UTC

    Suggest a correction

  98. fakecryptosender.com US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX presentSPF ~allDMARC policy noneRegistered 3 y ago
    DetailsHide
    Hostname
    fakecryptosender.com
    First seen
    2026-11-08 04:36 UTC
    First published
    2026-11-08 05:27 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-08 05:57 UTC
    DNS
    Resolves · checked 2026-11-08 05:35 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-08 03:32 UTC to 2027-02-06 04:30 UTC
    Logged 2026-11-08 04:32 UTC in DigiCert Wyvern2027h1, entry 449,543,818
    SHA-256 d67fb1652afdde99da8c66991d185aa09abe3282ec3f2782ce541f889be7efa9
    Public key SHA-256 2a9d62e19be1dcb8a58263707e553f7761924705634207dd80abdc52f43f4632
    PhishDestroy
    Addresses
    104.21.91.79 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.212.196 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.91.79, 172.67.212.196): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    fakecryptosender.com
    Registered
    2023-07-15 · Name.com, Inc.
    MX
    Receives mail at mx1.hostinger.com, mx2.hostinger.com
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    DMARC policy p=none: reports only
    Checked
    2026-11-08 05:26 UTC

    Suggest a correction

  99. nftbancusportal.pages.dev US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMask
    DetailsHide
    Hostname
    nftbancusportal.pages.dev
    First seen
    2026-11-08 04:36 UTC
    First published
    2026-11-08 05:27 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 05:58 UTC
    DNS
    Resolves · checked 2026-11-08 05:35 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-08 03:35 UTC to 2027-02-06 04:34 UTC
    Logged 2026-11-08 04:35 UTC in DigiCert Wyvern2027h1, entry 449,574,042
    SHA-256 cffda5e1e285ec11ef3eb5d0bdd0fe0c0306ab44075d0deccbce37ee1dbff753
    Public key SHA-256 490ec89c3cd88a949423ed05e9bc3016661a1d562be14faf30712a8b9c7b0852
    Addresses
    172.66.44.134 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.66.47.122 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (172.66.44.134, 172.66.47.122): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.

    Suggest a correction

  100. smartfix-data.pages.dev US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMask
    DetailsHide
    Hostname
    smartfix-data.pages.dev
    First seen
    2026-11-08 04:36 UTC
    First published
    2026-11-08 05:27 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 05:58 UTC
    DNS
    Resolves · checked 2026-11-08 05:35 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-08 03:30 UTC to 2027-02-06 04:29 UTC
    Logged 2026-11-08 04:30 UTC in DigiCert Wyvern2027h1, entry 449,529,327
    SHA-256 f7441bab9d2880ad28244fb257e11df63dba720ac0ced23ee8aacc8fbb631c76
    Public key SHA-256 de168bfc1ed4e0eab72c90ea96c59ad7ec55b493aae511658eafd3d14a805262
    Addresses
    172.66.44.178 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.66.47.78 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (172.66.44.178, 172.66.47.78): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.

    Suggest a correction

Showing 1–100 of 2,280 hostnames.
How these findings are made

Brand spoofs: findings that impersonate one of the 1,000 most-impersonated brands. The list opens on them; All shows every finding.

Reported: a hostname in a new certificate that PhishTank or PhishDestroy reports, or that CERT Polska, MetaMask, USOM, MODA, NPA 165, JPCERT/CC, the AMF, the FSMA or BaFin lists. When a listing source names the brand imitated or a category, the finding shows it. Phishing host: a brand lookalike that resolves to an address which hosted confirmed phishing in the last 48 hours. Spamhaus DROP: a brand lookalike that resolves to an address on the Spamhaus DROP list. Same certificate: another name on a finding's certificate that resolves to an address on Spamhaus DROP. Suspicious: other names on a finding's certificate, rated high for a hosting-alias name or a lookalike on a phishing host, medium for a lookalike; they join the findings once they have listing evidence of their own. Also under Suspicious: registered domains using a brand’s name that PhishDestroy’s community list includes, rated high when they resolve to an address with no parking or holding signal, medium otherwise.

Brand labels cover the 1,000 most-impersonated brands. A name gets a brand when the brand's token starts a label or follows a hyphen, with a lure word such as "login" or "verify" for common words. Hostnames appear as plain text. How it works · Sources