Live

Live phishing findings

New certificates and domain registrations, with every hostname resolved and checked against phishing reports and bad-address lists. The newest findings, updated hourly.

Updated hourly · 2026-11-08 08:45 UTC
Certificate-log entries · 24 h
319.3M
from 84 distinct feeds
Unique certificates · 24 h
30.9M
each reviewed
Names resolved · 24 h
20.5M
15.3M with an address
Findings · 24 h
5,704
209 of 1,061 brands targeted

2,311 hostnames from the last 24 hours.

The findings have updated. The list starts again from the top.

  1. anadoluajanslari.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by USOMMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    anadoluajanslari.com
    First seen
    2026-11-08 08:41 UTC
    Listing
    USOM listed it 2026-05-26 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 08:36 UTC
    Listed
    USOM
    1. Listed by USOM
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-11-08 07:39 UTC to 2027-02-06 07:39 UTC
    Logged 2026-11-08 08:37 UTC in Let's Encrypt Willow2027h1, entry 999,971,663
    SHA-256 0ed222fb798acdfc9bea41cbc40a860a2d32225239f6e5b8c089a1ba39964586
    Public key SHA-256 076062bf7a86c4b9d45b29ef55d77bea1573843887e0c16fcb25eb5648020f7a
    Addresses
    104.21.40.241 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.140.96 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.40.241, 172.67.140.96): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    anadoluajanslari.com
    Registered
    2026-05-14 · Realtime Register B.V.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 08:50 UTC

    Suggest a correction

  2. bodira.shop US · AS13335 · Cloudflare, Inc.4 addresses
    ListedCloudflareListed by NPA 165 (e-commerce)MX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    bodira.shop
    First seen
    2026-11-08 08:41 UTC
    Listing
    NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 01:35 UTC
    Listed
    NPA 165
    1. Observed in the NPA 165 feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1
    Valid 2026-11-08 07:37 UTC to 2027-02-06 08:35 UTC
    Logged 2026-11-08 08:38 UTC in DigiCert Wyvern2027h1, entry 451,800,774
    SHA-256 9b863931a1701254a1de76ba717d4c01e3e39fedc4da9abf553f96209973d640
    Public key SHA-256 c50ac1128a76a6c8134a6642c5bb2c82dbf3579b0b40790abf92627ed379441e
    Addresses
    104.21.70.87 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.222.41 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3032::ac43:de29
    2606:4700:3037::6815:4657
    Cloudflare
    Cloudflare (104.21.70.87, 172.67.222.41): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    bodira.shop
    Registered
    2026-07-13 · Dynadot Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 08:50 UTC

    Suggest a correction

  3. genovixworld.com US · AS13335 · Cloudflare, Inc.4 addresses
    ListedCloudflareListed by USOMMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    genovixworld.com
    First seen
    2026-11-08 08:41 UTC
    Listing
    USOM listed it 2026-06-05 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 08:36 UTC
    Listed
    USOM
    1. Listed by USOM
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-11-08 07:41 UTC to 2027-02-06 07:41 UTC
    Logged 2026-11-08 08:39 UTC in DigiCert Sphinx2027h1, entry 399,726,678
    SHA-256 a8fb484864b141deaa9a5e73745bd3c0ce1a1c8c86c3d73433bf33e2d7d3b725
    Public key SHA-256 4bd709ac50de410be46ea77206b6ffcccb470539cca9b9ad52fe5b1cd6c47003
    Addresses
    104.21.40.65 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.178.211 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3033::ac43:b2d3
    2606:4700:3035::6815:2841
    Cloudflare
    Cloudflare (104.21.40.65, 172.67.178.211): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    genovixworld.com
    Registered
    2026-05-14 · Realtime Register B.V.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 08:50 UTC

    Suggest a correction

  4. kqixwked.space US · AS13335 · Cloudflare, Inc.4 addresses
    ListedCloudflareListed by NPA 165 (e-commerce)MX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    kqixwked.space
    First seen
    2026-11-08 08:41 UTC
    Listing
    NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 01:35 UTC
    Listed
    NPA 165
    1. Observed in the NPA 165 feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1
    Valid 2026-09-10 07:36 UTC to 2026-12-09 08:33 UTC
    Logged 2026-11-08 08:40 UTC in DigiCert Wyvern2026h2, entry 2,211,820,037
    SHA-256 5513ab0fd83ad943d75a95c194add4c086de1ec9825508b2c93fa0079fe654ef
    Public key SHA-256 e92bd2626c501b117ae7c2ff35992919663ec7f651580e46dea947d55c6ae490
    Addresses
    104.21.3.83 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.130.127 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3030::ac43:827f
    2606:4700:3034::6815:353
    Cloudflare
    Cloudflare (104.21.3.83, 172.67.130.127): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    kqixwked.space
    Registered
    2026-07-13 · GoDaddy.com, LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 08:50 UTC

    Suggest a correction

  5. kxzscq.com US · AS13335 · Cloudflare, Inc.4 addressesSMBC Card
    ListedCloudflareListed by JPCERT/CC as imitating 三井住友カードMX absentSPF missingDMARC missingRegistered 7 d ago
    DetailsHide
    Hostname
    kxzscq.com
    First seen
    2026-11-08 08:41 UTC
    Listing
    JPCERT/CC confirmed it 2026-07-22 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 02:12 UTC
    Listed
    JPCERT/CC
    1. Confirmed by JPCERT/CC
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-08 07:37 UTC to 2027-02-06 08:35 UTC
    Logged 2026-11-08 08:37 UTC in IPng Networks Gouda2027h1, entry 352,105,868
    SHA-256 0ec4b4bd3f259b9c97b9da94dfc97f708dd9f8a133f59a25d514498db851e265
    Public key SHA-256 03c05b38a223ce986caeb4b8308504d66862fce1007740969c2351e143530822
    Brand
    SMBC Card
    Addresses
    104.21.75.251 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.184.140 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3031::6815:4bfb
    2606:4700:3036::ac43:b88c
    Cloudflare
    Cloudflare (104.21.75.251, 172.67.184.140): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    kxzscq.com
    Registered
    2026-11-01 · TuringSign Inc. d/b/a Cosmotown
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 08:50 UTC

    Suggest a correction

  6. ledger-com-start.com US · AS13335 · Cloudflare, Inc.4 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    ledger-com-start.com
    First seen
    2026-11-08 08:41 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 05:58 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-08 07:36 UTC to 2027-02-06 08:34 UTC
    Logged 2026-11-08 08:36 UTC in Google PlumbersArms2027h1, entry 674,557,864
    SHA-256 7bce19b2f2e6dde4c91c7d46ece94f00a4cdd5197cd2cbf273728fd01897a7fe
    Public key SHA-256 fd4dc1369befa8c0373ecf23e91a5da1f4a340423eae561f4072acc3b6207b84
    Addresses
    104.21.41.89 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.163.71 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3035::6815:2959
    2606:4700:3036::ac43:a347
    Cloudflare
    Cloudflare (104.21.41.89, 172.67.163.71): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    ledger-com-start.com
    Registered
    2026-07-12 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 08:50 UTC

    Suggest a correction

  7. qaapi.zenledger.dev US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareUnder zenledger.dev, reported by PhishDestroyMX presentSPF ~allDMARC rejectRegistered 4 y ago
    DetailsHide
    Hostname
    qaapi.zenledger.dev
    First seen
    2026-11-08 08:41 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-08 05:57 UTC
    Reported
    PhishDestroy, listing zenledger.dev and the names under it
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-11-08 07:39 UTC to 2027-02-06 07:39 UTC
    Logged 2026-11-08 08:38 UTC in Let's Encrypt Sycamore2027h1, entry 1,042,388,592
    SHA-256 44d2a784afeaf71a50b8c243b6b0766671831d40d5bf6f181401eef52eb4c397
    Public key SHA-256 785ed8fbb2d42773138e16c17464b570f3a8d36153335c547d6a960d41d4b20a
    PhishDestroy
    Addresses
    104.20.28.62 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.66.164.119 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.20.28.62, 172.66.164.119): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    zenledger.dev
    Registered
    2022-09-15 · Namecheap Inc.
    MX
    Receives mail at aspmx.l.google.com, alt1.aspmx.l.google.com, alt2.aspmx.l.google.com
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    DMARC policy p=reject
    Checked
    2026-11-08 08:09 UTC

    Suggest a correction

  8. sahibinden.live US · AS13335 · Cloudflare, Inc.4 addressesSahibinden
    ListedCloudflareListed by USOMMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    sahibinden.live
    First seen
    2026-11-08 08:41 UTC
    Listing
    USOM listed it 2026-07-27 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 08:36 UTC
    Listed
    USOM
    1. Listed by USOM
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-11-08 07:40 UTC to 2027-02-06 07:40 UTC
    Logged 2026-11-08 08:39 UTC in DigiCert Sphinx2027h1, entry 399,718,765
    SHA-256 2b659df6b906c36f45b88dc4b6cec6932747025c89b3fc9b8ad5329ac53710bd
    Public key SHA-256 f1fc2fd710111c703a65d1f64d174d2637c15814a2a9bf3df4613e9cff472204
    Brand
    Sahibinden
    Addresses
    104.21.27.130 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.142.156 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3030::6815:1b82
    2606:4700:3032::ac43:8e9c
    Cloudflare
    Cloudflare (104.21.27.130, 172.67.142.156): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    sahibinden.live
    Registered
    2026-05-15 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 08:41 UTC

    Suggest a correction

  9. tapy.ws US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    tapy.ws
    First seen
    2026-11-08 08:41 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 05:58 UTC
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-08 05:57 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-08 07:39 UTC to 2027-02-06 07:39 UTC
    Logged 2026-11-08 08:38 UTC in Google PlumbersArms2027h1, entry 674,582,520
    SHA-256 0a3c04272eeb7c8faf56ec3ee297a9d0cad7bc5bbc0e8fae8f354373e8cb4ffe
    Public key SHA-256 58c74c53fdd2c6ec7e1930e4366e733a511ae321a1f8dac58b54c499f745166b
    Addresses
    104.21.29.240 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.149.253 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.29.240, 172.67.149.253): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    tapy.ws
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 08:50 UTC

    Suggest a correction

  10. app-kindredlabs.xyz US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 8 mo ago
    DetailsHide
    Hostname
    app-kindredlabs.xyz
    First seen
    2026-11-08 08:36 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 05:58 UTC
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-08 05:57 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-08 07:35 UTC to 2027-02-06 07:35 UTC
    Logged 2026-11-08 08:34 UTC in Google ParcelYard2027h1, entry 674,211,051
    SHA-256 4088ab73711feb79fc6098ad512cbe84637cbeb1d3436e64fea5db03fdb61a96
    Public key SHA-256 ce1e0404003ff91b242528c9aba1d75a72f1d0ef7278c26656e928cb5323b5f1
    Addresses
    104.21.6.37 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.154.204 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.6.37, 172.67.154.204): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    app-kindredlabs.xyz
    Registered
    2026-03-17 · Dynadot Inc
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 08:50 UTC

    Suggest a correction

  11. fast-okx-dwfepw.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by NPA 165 (finance and insurance)MX absentSPF missingDMARC missingRegistered 3 mo ago
    DetailsHide
    Hostname
    fast-okx-dwfepw.com
    First seen
    2026-11-08 08:36 UTC
    Listing
    NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 01:35 UTC
    Listed
    NPA 165
    1. Observed in the NPA 165 feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-11-08 07:34 UTC to 2027-02-06 07:34 UTC
    Logged 2026-11-08 08:32 UTC in Let's Encrypt Willow2027h1, entry 999,896,630
    SHA-256 de67fe894fe4297961056c7a50705972df04a93a26fb84b6872565767e248bcd
    Public key SHA-256 f0522b865790b8f599f2e967d89f5bbe2cb2207851082cb3308218d4b0dcc29e
    Addresses
    104.21.32.30 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.182.92 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.32.30, 172.67.182.92): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    fast-okx-dwfepw.com
    Registered
    2026-08-24 · Gransy, s.r.o.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 08:50 UTC

    Suggest a correction

  12. onstreamsapp.pro US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX presentSPF ~allDMARC missingRegistered 59 d ago
    DetailsHide
    Hostname
    onstreamsapp.pro
    First seen
    2026-11-08 08:36 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 05:58 UTC
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-08 05:57 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-11-08 07:34 UTC to 2027-02-06 07:34 UTC
    Logged 2026-11-08 08:32 UTC in Google ParcelYard2027h1, entry 674,195,486
    SHA-256 51cfd449930ebba3308b9e410fdc259eeb093217d822f6ad1537c9f62bd03460
    Public key SHA-256 3f2e0b7216c5104b69e48c261257f875ff6c0893bd91e710c5aa55e540b63ea5
    Addresses
    104.21.8.97 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.157.70 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.8.97, 172.67.157.70): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    onstreamsapp.pro
    Registered
    2026-09-10 · Porkbun LLC
    MX
    Receives mail at route1.mx.cloudflare.net, route2.mx.cloudflare.net, route3.mx.cloudflare.net
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 08:50 UTC

    Suggest a correction

  13. qanft-metadata.zenledger.dev US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareUnder zenledger.dev, reported by PhishDestroyMX presentSPF ~allDMARC rejectRegistered 4 y ago
    DetailsHide
    Hostname
    qanft-metadata.zenledger.dev
    First seen
    2026-11-08 08:36 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-08 05:57 UTC
    Reported
    PhishDestroy, listing zenledger.dev and the names under it
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-08 07:35 UTC to 2027-02-06 07:35 UTC
    Logged 2026-11-08 08:33 UTC in Let's Encrypt Sycamore2027h1, entry 1,042,242,720
    SHA-256 a14295f8aa43ece450022a48f7726d41a8115db8302b0573ec16eaac48430816
    Public key SHA-256 3104d701a5a8d92eb39046302045fe2f03c32c1c775de04586bbd73cf01aa464
    PhishDestroy
    Addresses
    104.20.28.62 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.66.164.119 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.20.28.62, 172.66.164.119): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    zenledger.dev
    Registered
    2022-09-15 · Namecheap Inc.
    MX
    Receives mail at aspmx.l.google.com, alt1.aspmx.l.google.com, alt2.aspmx.l.google.com
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    DMARC policy p=reject
    Checked
    2026-11-08 08:09 UTC

    Suggest a correction

  14. svbanf.asia US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by NPA 165 (information services)MX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    svbanf.asia
    First seen
    2026-11-08 08:36 UTC
    Listing
    NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 01:35 UTC
    Listed
    NPA 165
    1. Observed in the NPA 165 feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-08 07:35 UTC to 2027-02-06 08:34 UTC
    Logged 2026-11-08 08:35 UTC in DigiCert Wyvern2027h1, entry 451,762,960
    SHA-256 b3e40704da08d45cc179caaa5f5389430a14ecac44bcee975e212c2d8bd02cd5
    Public key SHA-256 d0eedd2ac6a1d91a915ba36d810b69440f76daa200989ab726565a949d59e8fb
    Addresses
    104.21.75.228 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.182.230 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.75.228, 172.67.182.230): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    svbanf.asia
    Registered
    2026-07-13 · Alibaba Cloud Computing Ltd. d/b/a HiChina (www.net.cn)
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 08:50 UTC

    Suggest a correction

  15. www.bergsignalgptapp.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareUnder bergsignalgptapp.com, listed by CERT PolskaMX absentSPF missingDMARC missingRegistered 2 mo ago
    DetailsHide
    Hostname
    www.bergsignalgptapp.com
    First seen
    2026-11-08 08:36 UTC
    Listing
    CERT Polska listed it 2026-09-08 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 06:31 UTC
    Listed
    CERT Polska, listing bergsignalgptapp.com and the names under it
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-08 07:35 UTC to 2027-02-06 07:35 UTC
    Logged 2026-11-08 08:33 UTC in Google ParcelYard2027h1, entry 674,206,198
    SHA-256 a994102029c875584eb500ad222205b281ca03e6035a5a2a9a0bf89460e20cf0
    Public key SHA-256 bd2ae0ad243dafa367551dc00301725adf5a8323172f1f469ca3c869d7dc9a96
    Addresses
    104.21.78.139 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.222.108 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.78.139, 172.67.222.108): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    bergsignalgptapp.com
    Registered
    2026-09-08 · NameCheap, Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-07 13:00 UTC

    Suggest a correction

  16. xrp-pool.app US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    xrp-pool.app
    First seen
    2026-11-08 08:36 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-08 05:57 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-08 07:33 UTC to 2027-02-06 07:33 UTC
    Logged 2026-11-08 08:31 UTC in Google PlumbersArms2027h1, entry 674,492,824
    SHA-256 09ba92fecdaa61208fe21622edd64f9163c59222b0364305a49632befda08192
    Public key SHA-256 5340d39630facdfe84409f6726a640e817acc70235fb3dc35d15a762e11a28ce
    PhishDestroy
    Addresses
    104.21.64.183 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.154.77 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.64.183, 172.67.154.77): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    xrp-pool.app
    Registered
    2026-05-14 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 08:50 UTC

    Suggest a correction

  17. zyvralen-spain.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    zyvralen-spain.com
    First seen
    2026-11-08 08:36 UTC
    Listing
    CERT Polska listed it 2026-09-12 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 06:31 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by Cloudflare TLS Issuing ECC CA 4 · precertificate
    Valid 2026-11-08 08:24 UTC to 2027-02-06 08:33 UTC
    Logged 2026-11-08 08:34 UTC in DigiCert Wyvern2027h1, entry 451,756,838
    SHA-256 1e00b5643c08ba57aa6a53a95e0df043939f904e8f55b6fde41f59178732f809
    Public key SHA-256 1aa5d87660ed868f7f1dbb5a81618b1c30318edbe8301a23be090328ff99b57f
    Addresses
    104.21.62.246 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.141.55 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.62.246, 172.67.141.55): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    zyvralen-spain.com
    Registered
    2026-07-13 · Dynadot Inc
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 08:50 UTC

    Suggest a correction

  18. bullcash.cc US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 59 d ago
    DetailsHide
    Hostname
    bullcash.cc
    First seen
    2026-11-08 08:30 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 05:58 UTC
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-08 05:57 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-11-08 07:28 UTC to 2027-02-06 07:28 UTC
    Logged 2026-11-08 08:26 UTC in IPng Networks Gouda2027h1, entry 352,016,075
    SHA-256 16847dfbe3ee9f149afb0f7ed78a65efe3eb4899f7000430c6468e382dc979c2
    Public key SHA-256 33718722e95f9e8ec47e0d19654c85ae8f91feb74d29dea55eab6ec968e4b77e
    Addresses
    104.21.1.237 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.152.149 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.1.237, 172.67.152.149): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    bullcash.cc
    Registered
    2026-09-10 · NameSilo, LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 08:50 UTC

    Suggest a correction

  19. eidksmxs.shop US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by NPA 165 (e-commerce)MX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    eidksmxs.shop
    First seen
    2026-11-08 08:30 UTC
    Listing
    NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 01:35 UTC
    Listed
    NPA 165
    1. Observed in the NPA 165 feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-08 07:28 UTC to 2027-02-06 08:27 UTC
    Logged 2026-11-08 08:28 UTC in IPng Networks Gouda2027h1, entry 352,031,468
    SHA-256 9b16a88dff995c9f539522074f57a470fdeed66b97ddcf39af61368714e29cae
    Public key SHA-256 07e833337a79cba0fef512ad09dd3fb92f2b53581f28b0598196d181698e0309
    Addresses
    104.21.47.83 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.170.202 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.47.83, 172.67.170.202): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    eidksmxs.shop
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 08:35 UTC

    Suggest a correction

  20. fifa-2026.xyz US · AS13335 · Cloudflare, Inc.
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 8 mo ago
    DetailsHide
    Hostname
    fifa-2026.xyz
    First seen
    2026-11-08 08:30 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-08 05:57 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WR1 · precertificate
    Valid 2026-11-08 07:26 UTC to 2027-02-06 08:24 UTC
    Logged 2026-11-08 08:26 UTC in Google ParcelYard2027h1, entry 674,105,529
    SHA-256 453ee40a721e21fb121383c91b674b0d2144e3d721ba6bb00c0a0f199e37d362
    Public key SHA-256 a0e403e3cd233408e39425e836198309444859696806328af0ea438c36b6aa69
    PhishDestroy
    Addresses
    185.158.133.1 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (185.158.133.1): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    fifa-2026.xyz
    Registered
    2026-03-10 · GoDaddy.com, LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 03:08 UTC

    Suggest a correction

  21. rocashmeadowview.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    rocashmeadowview.com
    First seen
    2026-11-08 08:30 UTC
    Listing
    CERT Polska listed it 2026-07-13 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 06:31 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by Cloudflare TLS Issuing ECC CA 4 · precertificate
    Valid 2026-11-08 08:17 UTC to 2027-02-06 08:25 UTC
    Logged 2026-11-08 08:27 UTC in DigiCert Wyvern2027h1, entry 451,677,746
    SHA-256 5a55cea2a7823d460a5fc3d2ee7e4b35febb315f4751e1799d0d137130c9a0e2
    Public key SHA-256 be45252848f18aefac9e29d4ff0145abd15dd6fa182dd07910c53c682f203513
    Addresses
    104.21.50.141 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.206.205 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.50.141, 172.67.206.205): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    rocashmeadowview.com
    Registered
    2026-07-13 · NameCheap, Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 08:50 UTC

    Suggest a correction

  22. serenaprovechura.net US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 59 d ago
    DetailsHide
    Hostname
    serenaprovechura.net
    First seen
    2026-11-08 08:30 UTC
    Listing
    CERT Polska listed it 2026-09-14 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 06:31 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-08 07:30 UTC to 2027-02-06 08:27 UTC
    Logged 2026-11-08 08:30 UTC in Let's Encrypt Willow2027h1, entry 999,859,024
    SHA-256 9b23ba01b95fabf50edc371de8fc54a5ddc76a2949495b969a5cb8e2577e7591
    Public key SHA-256 d79dcb8f48889c278a337c14c2bd5332e7b076678d39045dc82da450d22e5957
    Addresses
    104.21.83.51 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.214.205 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.83.51, 172.67.214.205): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    serenaprovechura.net
    Registered
    2026-09-10 · Dynadot Inc
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 08:50 UTC

    Suggest a correction

  23. status-pl-582019.eu.cc US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT Polska
    DetailsHide
    Hostname
    status-pl-582019.eu.cc
    First seen
    2026-11-08 08:30 UTC
    Listing
    CERT Polska listed it 2026-09-10 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 06:31 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-08 07:28 UTC to 2027-02-06 08:27 UTC
    Logged 2026-11-08 08:28 UTC in DigiCert Wyvern2027h1, entry 451,686,913
    SHA-256 beb9932bdc58a936cedbe67f362ad83879d80bf923e97e9c1c0d927f4f321929
    Public key SHA-256 0ddf5247ac0574dd8bd4107d72b900feaeefe65df5a5c1c8e8807a08817e7b94
    Addresses
    104.21.69.159 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.210.88 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.69.159, 172.67.210.88): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.

    Suggest a correction

  24. taiwancbi.shop US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by NPA 165 (information services)MX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    taiwancbi.shop
    First seen
    2026-11-08 08:30 UTC
    Listing
    NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 01:35 UTC
    Listed
    NPA 165
    1. Observed in the NPA 165 feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by Cloudflare TLS Issuing ECC CA 4 · precertificate
    Valid 2026-11-08 08:20 UTC to 2027-02-06 08:28 UTC
    Logged 2026-11-08 08:30 UTC in DigiCert Wyvern2027h1, entry 451,699,686
    SHA-256 4df1f531b003c145bd72b564efa782f5af84f08b53fcb122ccb3c0cdfb0db993
    Public key SHA-256 65a02b317b287f29a8e2bc4c27b2e3d8c1fe9ca5515c9846e091e07defb9a764
    Addresses
    104.21.83.63 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.214.247 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.83.63, 172.67.214.247): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    taiwancbi.shop
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 08:35 UTC

    Suggest a correction

  25. unmodincan.store US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 59 d ago
    DetailsHide
    Hostname
    unmodincan.store
    First seen
    2026-11-08 08:30 UTC
    Listing
    CERT Polska listed it 2026-09-10 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 06:31 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-08 07:29 UTC to 2027-02-06 08:28 UTC
    Logged 2026-11-08 08:29 UTC in Google ParcelYard2027h1, entry 674,152,692
    SHA-256 abcb2017571bfbba744dd76803a62b7760a5cb81d6a1d8e873de573546ada446
    Public key SHA-256 ad415e2f29536d699b3fc0f4ba749b988691ba560a8b8ff8e024a7c3d5b34453
    Addresses
    104.21.52.44 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.195.19 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.52.44, 172.67.195.19): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    unmodincan.store
    Registered
    2026-09-10 · NameCheap, Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 08:50 UTC

    Suggest a correction

  26. v-potwierdz-602914.eu.cc US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT Polska
    DetailsHide
    Hostname
    v-potwierdz-602914.eu.cc
    First seen
    2026-11-08 08:30 UTC
    Listing
    CERT Polska listed it 2026-09-10 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 06:31 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by Cloudflare TLS Issuing ECC CA 4 · precertificate
    Valid 2026-11-08 08:19 UTC to 2027-02-06 08:27 UTC
    Logged 2026-11-08 08:29 UTC in DigiCert Wyvern2027h1, entry 451,698,988
    SHA-256 86e68b8ac5b809820d12cad5c72e3a2cda44a23f7f72662256d52f79c53f7bab
    Public key SHA-256 6d237773ec30eda87759103437e030d46db1d5942842fb2101957dbf0c49b57c
    Addresses
    104.21.2.11 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.128.127 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.2.11, 172.67.128.127): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.

    Suggest a correction

  27. wafati.asia US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by NPA 165 (information services)MX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    wafati.asia
    First seen
    2026-11-08 08:30 UTC
    Listing
    NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 01:35 UTC
    Listed
    NPA 165
    1. Observed in the NPA 165 feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by Cloudflare TLS Issuing ECC CA 4 · precertificate
    Valid 2026-11-08 08:17 UTC to 2027-02-06 08:24 UTC
    Logged 2026-11-08 08:27 UTC in DigiCert Wyvern2027h1, entry 451,670,120
    SHA-256 200bf14c3cac0021feb00105a838c9d0a238e65b89b5c8601fecd1c0a5016582
    Public key SHA-256 e270e5f48e519943832f7a9d432e5620dc075d8c66097de093d847ed965d19c8
    Addresses
    104.21.65.95 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.189.186 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.65.95, 172.67.189.186): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    wafati.asia
    Registered
    2026-07-13 · Alibaba Cloud Computing Ltd. d/b/a HiChina (www.net.cn)
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 08:50 UTC

    Suggest a correction

  28. yznipy.asia US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by NPA 165 (information services)MX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    yznipy.asia
    First seen
    2026-11-08 08:30 UTC
    Listing
    NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 01:35 UTC
    Listed
    NPA 165
    1. Observed in the NPA 165 feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-08 07:28 UTC to 2027-02-06 08:27 UTC
    Logged 2026-11-08 08:28 UTC in Google ParcelYard2027h1, entry 674,139,760
    SHA-256 7cbc5d2dfb042e7f129bf65c2155efc1c96f73e56cc27016c009d9e1886c3f89
    Public key SHA-256 cb57394b33cae314a653b1b70d7b2f350f7a1339335d5d87084a36f28afa18ea
    Addresses
    104.21.42.4 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.197.223 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.42.4, 172.67.197.223): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    yznipy.asia
    Registered
    2026-07-13 · Alibaba Cloud Computing Ltd. d/b/a HiChina (www.net.cn)
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 08:50 UTC

    Suggest a correction

  29. api.mirflectgainplatform-com.financecryptoworld.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareUnder financecryptoworld.com, listed by CERT PolskaMX presentSPF ~allDMARC missingRegistered 22 mo ago
    DetailsHide
    Hostname
    api.mirflectgainplatform-com.financecryptoworld.com
    First seen
    2026-11-08 08:26 UTC
    Listing
    CERT Polska listed it 2026-06-12 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 06:31 UTC
    Listed
    CERT Polska, listing financecryptoworld.com and the names under it
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WR1 · precertificate
    Valid 2026-11-08 07:22 UTC to 2027-02-06 08:21 UTC
    Logged 2026-11-08 08:22 UTC in IPng Networks Halloumi2027h1, entry 409,110,474
    SHA-256 2a24dfb37fce1880a54a9915ad5c1bd829633f4e428ef36330f28c7b34e04760
    Public key SHA-256 7fa0e6b8ae2d72b17cc9369e733f576d285344d5531e6d8766d0ba06b98123e4
    Addresses
    104.21.10.130 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.131.121 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.10.130, 172.67.131.121): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    financecryptoworld.com
    Registered
    2025-01-30 · MainReg Inc.
    MX
    Receives mail at mail.financecryptoworld.com
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-07 17:16 UTC

    Suggest a correction

  30. apteka.marketpl.shop US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareUnder marketpl.shop, listed by CERT PolskaMX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    apteka.marketpl.shop
    First seen
    2026-11-08 08:26 UTC
    Listing
    CERT Polska listed it 2026-07-13 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 06:31 UTC
    Listed
    CERT Polska, listing marketpl.shop and the names under it
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WR1 · precertificate
    Valid 2026-11-08 07:21 UTC to 2027-02-06 08:20 UTC
    Logged 2026-11-08 08:21 UTC in Let's Encrypt Willow2027h1, entry 999,737,048
    SHA-256 35fcd10ec2486a5959bffc828a3ba9f7aeab7612efe348e2c4b127a0d5e9aff6
    Public key SHA-256 8a5848e49c5c81a2f6067b82c9445cce50385aa9cad398d78d3835eefcaafaef
    Addresses
    104.21.14.164 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.160.15 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.14.164, 172.67.160.15): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    marketpl.shop
    Registered
    2026-07-10 · Spaceship, Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-07 11:36 UTC

    Suggest a correction

  31. arrwr.work US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by NPA 165 (information services)MX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    arrwr.work
    First seen
    2026-11-08 08:26 UTC
    Listing
    NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 01:35 UTC
    Listed
    NPA 165
    1. Observed in the NPA 165 feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-11-08 07:26 UTC to 2027-02-06 07:26 UTC
    Logged 2026-11-08 08:24 UTC in Google PlumbersArms2027h1, entry 674,399,599
    SHA-256 03ffb10bc97570986351150cfc31481693a9245127736f63365d748d26c5d402
    Public key SHA-256 968d929f0454334b3aae7419bea18ca7b9aceb5daf1a0d14d0ed87900b287802
    Addresses
    104.21.37.64 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.205.12 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.37.64, 172.67.205.12): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    arrwr.work
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 08:31 UTC

    Suggest a correction

  32. econidspzae.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    econidspzae.com
    First seen
    2026-11-08 08:26 UTC
    Listing
    CERT Polska listed it 2026-07-13 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 06:31 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-08 07:21 UTC to 2027-02-06 08:19 UTC
    Logged 2026-11-08 08:21 UTC in IPng Networks Halloumi2027h1, entry 409,105,368
    SHA-256 f3a1453a3a0e565c37866ecd4501e26050ecc3a1c28267f2569ba57809ade6b5
    Public key SHA-256 433f99230cf3131fa2663d6ffe9876ce6045b755722ec7104decefd535d21d60
    Addresses
    104.21.13.160 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.156.193 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.13.160, 172.67.156.193): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    econidspzae.com
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 08:31 UTC

    Suggest a correction

  33. edockeds.shop US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by NPA 165 (e-commerce)MX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    edockeds.shop
    First seen
    2026-11-08 08:26 UTC
    Listing
    NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 01:35 UTC
    Listed
    NPA 165
    1. Observed in the NPA 165 feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-08 07:23 UTC to 2027-02-06 08:22 UTC
    Logged 2026-11-08 08:23 UTC in Google PlumbersArms2027h1, entry 674,383,742
    SHA-256 b6e3f09f533d9b3a08eaf8d75dc6c353d41dbd4fe56ac23204ffc8c3fd2a438c
    Public key SHA-256 d8d590ff169f4c72b66b084d911915fb420be9e331e220db3bddfe00f5efb241
    Addresses
    104.21.12.42 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.131.238 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.12.42, 172.67.131.238): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    edockeds.shop
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 08:31 UTC

    Suggest a correction

  34. fermpandrecht-ai.live US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 5 mo ago
    DetailsHide
    Hostname
    fermpandrecht-ai.live
    First seen
    2026-11-08 08:26 UTC
    Listing
    CERT Polska listed it 2026-07-31 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 06:31 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by Cloudflare TLS Issuing ECC CA 4 · precertificate
    Valid 2026-11-08 08:12 UTC to 2027-02-06 08:20 UTC
    Logged 2026-11-08 08:22 UTC in Let's Encrypt Sycamore2027h1, entry 1,041,946,479
    SHA-256 d0bbc9ac2bbecdb4c0882da96f3e2317803784ab01102b90114de2d15f4e1a18
    Public key SHA-256 510cacc181e1b69b288d29a0cc9d4e76bb9ff088a12df04083a6a2263456f6ef
    Addresses
    104.21.2.77 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.128.229 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.2.77, 172.67.128.229): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    fermpandrecht-ai.live
    Registered
    2026-06-03 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 08:50 UTC

    Suggest a correction

  35. underingru.store US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 59 d ago
    DetailsHide
    Hostname
    underingru.store
    First seen
    2026-11-08 08:26 UTC
    Listing
    CERT Polska listed it 2026-09-11 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 06:31 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-08 07:23 UTC to 2027-02-06 08:22 UTC
    Logged 2026-11-08 08:23 UTC in Geomys Tuscolo2027h1, entry 525,385,998
    SHA-256 79988aa9f80f63955871d65e161e6da15f71ad7db0cd36d16031725bd05d9b65
    Public key SHA-256 ab47ece3fd5edb3191647dce672fd7e20b89c7ecaa2da8da887e831442b1b082
    Addresses
    104.21.76.94 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.192.110 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.76.94, 172.67.192.110): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    underingru.store
    Registered
    2026-09-10 · NameCheap, Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 08:50 UTC

    Suggest a correction

  36. wgrtqh.asia US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by NPA 165 (information services)MX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    wgrtqh.asia
    First seen
    2026-11-08 08:26 UTC
    Listing
    NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 01:35 UTC
    Listed
    NPA 165
    1. Observed in the NPA 165 feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-08 07:23 UTC to 2027-02-06 08:22 UTC
    Logged 2026-11-08 08:23 UTC in IPng Networks Halloumi2027h1, entry 409,113,284
    SHA-256 3afe761c6cbd8a41dc05d6b8ea28dfd8531455437848b66196239ea7e880aaa5
    Public key SHA-256 83ad9c0c860a4185cb10b59ed957d2c7a5fc903d7908016190b46e31f0cea30e
    Addresses
    104.21.51.237 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.191.177 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.51.237, 172.67.191.177): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    wgrtqh.asia
    Registered
    2026-07-13 · Alibaba Cloud Computing Ltd. d/b/a HiChina (www.net.cn)
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 08:50 UTC

    Suggest a correction

  37. 16bettelegram.com US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 16 mo ago
    DetailsHide
    Hostname
    16bettelegram.com
    First seen
    2026-11-08 08:20 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-08 05:57 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-08 07:17 UTC to 2027-02-06 08:15 UTC
    Logged 2026-11-08 08:17 UTC in DigiCert Wyvern2027h1, entry 451,583,472
    SHA-256 22a70f702628aa29bbf743d2b4716cf6c98d7cada0efe4fce532ef57bddd0dd4
    Public key SHA-256 67c71f03e02ded283141423cbb2f2b296862ead6f53b4d35fb7a3d9ce3a994b6
    PhishDestroy
    Addresses
    104.21.68.138 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.195.237 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.68.138, 172.67.195.237): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    16bettelegram.com
    Registered
    2025-07-22 · Gname.com Pte. Ltd.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 08:25 UTC

    Suggest a correction

  38. bcynrr.asia US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by NPA 165 (information services)MX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    bcynrr.asia
    First seen
    2026-11-08 08:20 UTC
    Listing
    NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 01:35 UTC
    Listed
    NPA 165
    1. Observed in the NPA 165 feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1
    Valid 2026-09-10 04:03 UTC to 2026-12-09 05:01 UTC
    Logged 2026-11-08 08:16 UTC in DigiCert Wyvern2026h2, entry 2,211,788,620
    SHA-256 03f21ec02ca348e88c0367f20ee4dc19093b67879eb7c9c18f9d5f39504e297b
    Public key SHA-256 1d4e3ccfe2269e36de3363d89746505d1ef3d8aafb4b8ff3d9fb76e53147f003
    Addresses
    104.21.27.5 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.139.206 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.27.5, 172.67.139.206): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    bcynrr.asia
    Registered
    2026-07-13 · Alibaba Cloud Computing Ltd. d/b/a HiChina (www.net.cn)
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 08:50 UTC

    Suggest a correction

  39. gmajxn.asia US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by NPA 165 (information services)MX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    gmajxn.asia
    First seen
    2026-11-08 08:20 UTC
    Listing
    NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 01:35 UTC
    Listed
    NPA 165
    1. Observed in the NPA 165 feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-08 07:16 UTC to 2027-02-06 08:14 UTC
    Logged 2026-11-08 08:16 UTC in Geomys Tuscolo2027h1, entry 525,305,795
    SHA-256 09a61500f7d3d8584dd70005bcbed02bfab248d9f480a0dfe89408b2d67227bd
    Public key SHA-256 1486024c1852b686ab581377cf7049308b5612409e8ef5e7ca4942e4a1955b3c
    Addresses
    104.21.5.59 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.133.6 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.5.59, 172.67.133.6): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    gmajxn.asia
    Registered
    2026-07-13 · Alibaba Cloud Computing Ltd. d/b/a HiChina (www.net.cn)
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 08:50 UTC

    Suggest a correction

  40. gmqcph.asia US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by NPA 165 (information services)MX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    gmqcph.asia
    First seen
    2026-11-08 08:20 UTC
    Listing
    NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 01:35 UTC
    Listed
    NPA 165
    1. Observed in the NPA 165 feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-08 07:19 UTC to 2027-02-06 08:17 UTC
    Logged 2026-11-08 08:19 UTC in DigiCert Sphinx2027h1, entry 399,522,022
    SHA-256 22f553a5c8487888f0c23b3eb5173e35ad21513c014e74ccc9462af07718cc99
    Public key SHA-256 a1fd3b4ca2325ad687073836a8b45a116814c4f13d4cbe41d69846575058ea3a
    Addresses
    104.21.94.83 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.221.72 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.94.83, 172.67.221.72): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    gmqcph.asia
    Registered
    2026-07-13 · Alibaba Cloud Computing Ltd. d/b/a HiChina (www.net.cn)
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 08:50 UTC

    Suggest a correction

  41. hub.mantra.finance US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareUnder mantra.finance, reported by PhishDestroyMX presentSPF ~allDMARC rejectRegistered 5 y ago
    DetailsHide
    Hostname
    hub.mantra.finance
    First seen
    2026-11-08 08:20 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-08 05:57 UTC
    Reported
    PhishDestroy, listing mantra.finance and the names under it
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WR1 · precertificate
    Valid 2026-11-08 07:17 UTC to 2027-02-06 08:13 UTC
    Logged 2026-11-08 08:17 UTC in Google ParcelYard2027h1, entry 673,994,063
    SHA-256 0823137d1aa744a3543959c1211790e043a353061733ac28867182d4e0da59d1
    Public key SHA-256 c7425756811d5c3f8d7666f86f8edd04c5709736a485fae9c530997f4e8fc3c5
    PhishDestroy
    Addresses
    104.18.6.193 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    104.18.7.193 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.18.6.193, 104.18.7.193): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    mantra.finance
    Registered
    2021-07-08 · GoDaddy.com, LLC
    MX
    Receives mail at aspmx.l.google.com, alt1.aspmx.l.google.com, alt2.aspmx.l.google.com
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    DMARC policy p=reject
    Checked
    2026-11-07 22:50 UTC

    Suggest a correction

  42. mantra.finance US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX presentSPF ~allDMARC rejectRegistered 5 y ago
    DetailsHide
    Hostname
    mantra.finance
    First seen
    2026-11-08 08:20 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-08 05:57 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WR1 · precertificate
    Valid 2026-11-08 07:17 UTC to 2027-02-06 08:13 UTC
    Logged 2026-11-08 08:17 UTC in Google ParcelYard2027h1, entry 673,994,063
    SHA-256 0823137d1aa744a3543959c1211790e043a353061733ac28867182d4e0da59d1
    Public key SHA-256 c7425756811d5c3f8d7666f86f8edd04c5709736a485fae9c530997f4e8fc3c5
    PhishDestroy
    Addresses
    104.18.6.193 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    104.18.7.193 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.18.6.193, 104.18.7.193): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    mantra.finance
    Registered
    2021-07-08 · GoDaddy.com, LLC
    MX
    Receives mail at aspmx.l.google.com, alt1.aspmx.l.google.com, alt2.aspmx.l.google.com
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    DMARC policy p=reject
    Checked
    2026-11-07 22:50 UTC

    Suggest a correction

  43. nuevoproyecto.net US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    nuevoproyecto.net
    First seen
    2026-11-08 08:20 UTC
    Listing
    CERT Polska listed it 2026-09-11 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 06:31 UTC
    PhishDestroy: first observed in the feed 2026-11-02 · still listed at the last successful feed check 2026-11-08 05:57 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by Cloudflare TLS Issuing ECC CA 4 · precertificate
    Valid 2026-11-08 08:08 UTC to 2027-02-06 08:17 UTC
    Logged 2026-11-08 08:18 UTC in DigiCert Wyvern2027h1, entry 451,594,200
    SHA-256 db3b554accdf6f81bb5beed23c609b7ee40668e4ba3ca0d1ab30ed50dffd16d1
    Public key SHA-256 8a48dea0acca5c4e3bdfd0faca197d7ff925d6535721e796e031ded43eec5ba4
    Addresses
    104.21.56.226 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.156.63 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.56.226, 172.67.156.63): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    nuevoproyecto.net
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 08:29 UTC

    Suggest a correction

  44. policlania.store US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 59 d ago
    DetailsHide
    Hostname
    policlania.store
    First seen
    2026-11-08 08:20 UTC
    Listing
    CERT Polska listed it 2026-09-11 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 06:31 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-08 07:16 UTC to 2027-02-06 08:14 UTC
    Logged 2026-11-08 08:16 UTC in DigiCert Sphinx2027h1, entry 399,504,259
    SHA-256 d04867ebdb1243d576392e4c4532705a1e2eb0c1777f0954955f49534b795440
    Public key SHA-256 dff253dc4393e1ef37dc77b93c59b0b56b2b773752573853d52ca9564fd2bb6d
    Addresses
    104.21.59.114 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.175.160 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.59.114, 172.67.175.160): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    policlania.store
    Registered
    2026-09-10 · NameCheap, Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 08:50 UTC

    Suggest a correction

  45. pptqiv.asia US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by NPA 165 (information services)MX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    pptqiv.asia
    First seen
    2026-11-08 08:20 UTC
    Listing
    NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 01:35 UTC
    Listed
    NPA 165
    1. Observed in the NPA 165 feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1
    Valid 2026-09-10 09:38 UTC to 2026-12-09 10:38 UTC
    Logged 2026-11-08 08:19 UTC in Geomys Tuscolo2026h2, entry 1,045,972,647
    SHA-256 4cfe074c351c03fbc581474778c355ff5f421de8a2b298c36a9a542f6cdb7255
    Public key SHA-256 ed7bd22465714d586f8a05227f0da62216111aa39c0dc1d877e74a455e4486bc
    Addresses
    104.21.53.146 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.213.139 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.53.146, 172.67.213.139): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    pptqiv.asia
    Registered
    2026-07-13 · Alibaba Cloud Computing Ltd. d/b/a HiChina (www.net.cn)
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 08:50 UTC

    Suggest a correction

  46. pretonixgroup.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by USOMMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    pretonixgroup.com
    First seen
    2026-11-08 08:20 UTC
    Listing
    USOM listed it 2026-05-15 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 08:36 UTC
    Listed
    USOM
    1. Listed by USOM
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-11-08 07:21 UTC to 2027-02-06 07:21 UTC
    Logged 2026-11-08 08:19 UTC in Geomys Tuscolo2027h1, entry 525,346,129
    SHA-256 74e9522e0008f3f322129cbe623a8d5520fdb9f834d4bf2ff909845ab006e3e0
    Public key SHA-256 2bd8d910cabe843f8b5592797e65482f13461abac5f07d485de863a66b82c452
    Addresses
    104.21.52.90 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.197.142 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.52.90, 172.67.197.142): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    pretonixgroup.com
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 08:29 UTC

    Suggest a correction

  47. qfsecurevault.com US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX presentSPF -allDMARC reject
    DetailsHide
    Hostname
    qfsecurevault.com
    First seen
    2026-11-08 08:20 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-08 05:57 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-08 07:19 UTC to 2027-02-06 08:17 UTC
    Logged 2026-11-08 08:19 UTC in DigiCert Sphinx2027h1, entry 399,520,037
    SHA-256 ff7c25c08237a25d7ab02a079e7815afb48f87fb166cfb740e99122b8a6a6bca
    Public key SHA-256 a3d8a6b6bc533fb7e3bc68b1fe3f703a731642eb5592ece6016e7ca0495ce201
    PhishDestroy
    Addresses
    104.21.79.49 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.142.5 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.79.49, 172.67.142.5): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    qfsecurevault.com
    MX
    Receives mail at igw08.site4now.net
    SPF
    SPF record with -all: other senders fail
    DMARC
    DMARC policy p=reject
    Checked
    2026-11-08 08:29 UTC

    Suggest a correction

  48. rocashpinebridge.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    rocashpinebridge.com
    First seen
    2026-11-08 08:20 UTC
    Listing
    CERT Polska listed it 2026-07-13 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 06:31 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by Cloudflare TLS Issuing ECC CA 4 · precertificate
    Valid 2026-11-08 08:08 UTC to 2027-02-06 08:14 UTC
    Logged 2026-11-08 08:18 UTC in DigiCert Wyvern2027h1, entry 451,589,710
    SHA-256 537dc644f65ef8e70618564426354ec42851605e956760600bad36eade7556e2
    Public key SHA-256 8e23eba71760a9f316f7aaf3a72ce57492da4e8c1ae3b3acd3e9a2c59803e9c5
    Addresses
    104.21.33.246 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.151.252 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.33.246, 172.67.151.252): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    rocashpinebridge.com
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 08:29 UTC

    Suggest a correction

  49. testnet.fogolend.com US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareUnder fogolend.com, reported by PhishDestroyMX presentSPF ~allDMARC missingRegistered 15 mo ago
    DetailsHide
    Hostname
    testnet.fogolend.com
    First seen
    2026-11-08 08:20 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-08 05:57 UTC
    Reported
    PhishDestroy, listing fogolend.com and the names under it
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WR1 · precertificate
    Valid 2026-11-08 07:17 UTC to 2027-02-06 08:13 UTC
    Logged 2026-11-08 08:17 UTC in Google PlumbersArms2027h1, entry 674,306,847
    SHA-256 28a907755d3d02538bdade5e1d0be133352c33ca6ce6ae26f48c2600b8bc31f9
    Public key SHA-256 54f06036ee61e864eb94edf26721b377a764a276e0f73ea171fffcd524c52511
    PhishDestroy
    Addresses
    104.21.96.16 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.150.64 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.96.16, 172.67.150.64): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    fogolend.com
    Registered
    2025-08-28 · NameCheap, Inc.
    MX
    Receives mail at route2.mx.cloudflare.net, route1.mx.cloudflare.net, route3.mx.cloudflare.net
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 04:16 UTC

    Suggest a correction

  50. www.lussoie.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareUnder lussoie.com, listed by CERT PolskaMX presentSPF -allDMARC missingRegistered 12 mo ago
    DetailsHide
    Hostname
    www.lussoie.com
    First seen
    2026-11-08 08:20 UTC
    Listing
    CERT Polska listed it 2026-06-19 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 06:31 UTC
    PhishDestroy: first observed in the feed 2026-11-02 · still listed at the last successful feed check 2026-11-08 05:57 UTC
    Listed
    CERT Polska, listing lussoie.com and the names under it
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR2
    Valid 2026-11-08 07:20 UTC to 2027-02-06 07:20 UTC
    Logged 2026-11-08 08:18 UTC in Google PlumbersArms2027h1, entry 674,324,171
    SHA-256 4ab7704a22efd232b7c91e7988b4dca679d9ab6404794f14c953089c6edaed48
    Public key SHA-256 a6c069fbff64b04f9df1b1c1d705d825faa119f0304080afd587646c66e171eb
    Addresses
    104.21.40.187 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.156.76 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.40.187, 172.67.156.76): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    lussoie.com
    Registered
    2025-11-19 · Realtime Register B.V.
    MX
    Receives mail at mx1.promail.com.tr, mx2.promail.com.tr
    SPF
    SPF record with -all: other senders fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 07:42 UTC

    Suggest a correction

  51. xwcabm.asia US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by NPA 165 (information services)MX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    xwcabm.asia
    First seen
    2026-11-08 08:20 UTC
    Listing
    NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 01:35 UTC
    Listed
    NPA 165
    1. Observed in the NPA 165 feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-08 07:17 UTC to 2027-02-06 08:15 UTC
    Logged 2026-11-08 08:17 UTC in Google ParcelYard2027h1, entry 673,985,700
    SHA-256 d5944e0568b0fe90d7376f984ca9ac84f26429356515208f9f871def6003ebc2
    Public key SHA-256 a51e684c29848a9881186c27c686dcf7da3c722522be88191488725fff94b328
    Addresses
    104.21.96.157 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.184.188 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.96.157, 172.67.184.188): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    xwcabm.asia
    Registered
    2026-07-13 · Alibaba Cloud Computing Ltd. d/b/a HiChina (www.net.cn)
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 08:50 UTC

    Suggest a correction

  52. degnsa.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by NPA 165 (finance and insurance)MX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    degnsa.com
    First seen
    2026-11-08 08:15 UTC
    Listing
    NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 01:35 UTC
    Listed
    NPA 165
    1. Observed in the NPA 165 feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-08 07:12 UTC to 2027-02-06 08:11 UTC
    Logged 2026-11-08 08:12 UTC in Geomys Tuscolo2027h1, entry 525,269,637
    SHA-256 00cf666e213250dc6ebbc58dd959cc302ce4aea35f61f321c792d7b8d5c01225
    Public key SHA-256 09949a558fca4a4bc24183115d9644ae520db3a25bca42dd3fbd398c44096650
    Addresses
    104.21.11.4 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.164.223 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.11.4, 172.67.164.223): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    degnsa.com
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 08:19 UTC

    Suggest a correction

  53. fitva.shop US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by NPA 165 (e-commerce)MX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    fitva.shop
    First seen
    2026-11-08 08:15 UTC
    Listing
    NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 01:35 UTC
    Listed
    NPA 165
    1. Observed in the NPA 165 feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1
    Valid 2026-09-10 06:49 UTC to 2026-12-09 07:46 UTC
    Logged 2026-11-08 08:13 UTC in Let's Encrypt Sycamore2026h2, entry 1,081,469,907
    SHA-256 47d3ca2df1f331eaca57e15c8b2f7fae9fbdccb282407af78791f7c94e63c622
    Public key SHA-256 f7156cbf282c0453691ca420186d18047b66539e26534a408fd1eee4a021c81c
    Addresses
    104.21.29.103 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.171.112 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.29.103, 172.67.171.112): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    fitva.shop
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 08:19 UTC

    Suggest a correction

  54. haberozgurlugu.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by USOMMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    haberozgurlugu.com
    First seen
    2026-11-08 08:15 UTC
    Listing
    USOM listed it 2026-06-05 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 08:36 UTC
    Listed
    USOM
    1. Listed by USOM
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-11-08 07:14 UTC to 2027-02-06 07:14 UTC
    Logged 2026-11-08 08:13 UTC in Let's Encrypt Willow2027h1, entry 999,627,689
    SHA-256 6d559c739d361b1ae1815a5a6c9429c8ad0a15613fc96ba42435d02018a8c8c5
    Public key SHA-256 a303893ab08f1a5353794a107db8dab725863872c487d8e4ee818c618b292ab0
    Addresses
    104.21.52.215 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.204.29 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.52.215, 172.67.204.29): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    haberozgurlugu.com
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 08:19 UTC

    Suggest a correction

  55. hd-streamzz.net US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    hd-streamzz.net
    First seen
    2026-11-08 08:15 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 05:58 UTC
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-08 05:57 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-08 07:14 UTC to 2027-02-06 08:13 UTC
    Logged 2026-11-08 08:14 UTC in IPng Networks Halloumi2027h1, entry 409,036,339
    SHA-256 0b35a0cb1d7661c53a4f854d39ca58e35aa2c16161e502a0ba9563d511a40a04
    Public key SHA-256 adc0d378ca740d84ef47a34b6a9aead5b074962ec08949bba198d79a733e2db3
    Addresses
    104.21.24.30 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.216.128 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.24.30, 172.67.216.128): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    hd-streamzz.net
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 08:19 UTC

    Suggest a correction

  56. pttavmbireyselsatisim.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by USOMMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    pttavmbireyselsatisim.com
    First seen
    2026-11-08 08:15 UTC
    Listing
    USOM listed it 2026-05-15 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 08:36 UTC
    Listed
    USOM
    1. Listed by USOM
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-08 07:16 UTC to 2027-02-06 07:16 UTC
    Logged 2026-11-08 08:14 UTC in Google PlumbersArms2027h1, entry 674,261,233
    SHA-256 482bdb13e5f07e6d5dff61b6a1b013308b99202aa4f889adb736f6b41e1f0b24
    Public key SHA-256 136d814fa4ae22fdcfca35380c61a6e77b60677910e1ef59eed9019210722432
    Addresses
    104.21.53.112 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.212.58 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.53.112, 172.67.212.58): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    pttavmbireyselsatisim.com
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 08:19 UTC

    Suggest a correction

  57. diafanacanjeanza.net US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    diafanacanjeanza.net
    First seen
    2026-11-08 08:10 UTC
    Listing
    CERT Polska listed it 2026-09-10 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 06:31 UTC
    PhishDestroy: first observed in the feed 2026-10-26 · still listed at the last successful feed check 2026-11-08 05:57 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-08 07:05 UTC to 2027-02-06 08:04 UTC
    Logged 2026-11-08 08:05 UTC in Google PlumbersArms2027h1, entry 674,145,207
    SHA-256 a8e367970e3d726761fb391c6f92af0b968388a9893ec2af25bfddc09e6b21b6
    Public key SHA-256 b71be1d7beb667d52fb6292aef7c619aba1689a3ce42a80ba5360d2fe05694b8
    Addresses
    104.21.4.15 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.131.131 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.4.15, 172.67.131.131): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    diafanacanjeanza.net
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 08:15 UTC

    Suggest a correction

  58. gfhdr.xyz US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by NPA 165 (e-commerce)MX absentSPF missingDMARC missingRegistered 12 mo ago
    DetailsHide
    Hostname
    gfhdr.xyz
    First seen
    2026-11-08 08:10 UTC
    Listing
    NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 01:35 UTC
    Listed
    NPA 165
    1. Observed in the NPA 165 feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-08 07:06 UTC to 2027-02-06 08:04 UTC
    Logged 2026-11-08 08:06 UTC in IPng Networks Halloumi2027h1, entry 408,967,036
    SHA-256 1a58a0dfe48194216105c849b04738ab549b8fcc7cd30e322977971e5c427c83
    Public key SHA-256 47a6da89e93c5c16856ec3233055953aae865c98d2fdbbd1cb374b2708114323
    Addresses
    104.21.53.11 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.207.113 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.53.11, 172.67.207.113): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    gfhdr.xyz
    Registered
    2025-11-07 · GoDaddy.com, LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 08:50 UTC

    Suggest a correction

  59. hyperiiquid.com US · AS13335 · Cloudflare, Inc.4 addressesHyperliquidLookalike of hyperliquid.xyz · similar-looking characters
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    hyperiiquid.com
    First seen
    2026-11-08 08:10 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 05:58 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-11-08 07:07 UTC to 2027-02-06 07:07 UTC
    Logged 2026-11-08 08:06 UTC in Google PlumbersArms2027h1, entry 674,158,222
    SHA-256 8a03589a1b6aa8eb2c2eb7374ec9c785efe41e0195a73f68c93090fab943519a
    Public key SHA-256 430187a9f0fa5251893838c3ae34a43eefe232670860d828098ae884c0981e02
    Brand
    Hyperliquid (spelled like hyperliquid.xyz with similar-looking characters)
    Addresses
    104.21.13.167 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.200.213 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3030::ac43:c8d5
    2606:4700:3032::6815:da7
    Cloudflare
    Cloudflare (104.21.13.167, 172.67.200.213): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    hyperiiquid.com
    Registered
    2026-05-14 · Dynadot Inc
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 08:11 UTC

    Suggest a correction

  60. loutraki-casino.site US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 10 mo ago
    DetailsHide
    Hostname
    loutraki-casino.site
    First seen
    2026-11-08 08:10 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-08 05:57 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-08 07:08 UTC to 2027-02-06 08:05 UTC
    Logged 2026-11-08 08:08 UTC in Let's Encrypt Sycamore2027h1, entry 1,041,621,156
    SHA-256 6d3f1127d3c9ef212cccc4386c37c9d6ba6480fb743ecfcd47d1cccdff2aec94
    Public key SHA-256 4f8aeed400640df7a023cde3547f686bd6fb2319ce326178c33046596206d388
    PhishDestroy
    Addresses
    104.21.75.237 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.183.163 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.75.237, 172.67.183.163): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    loutraki-casino.site
    Registered
    2026-01-15 · NameCheap, Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 08:50 UTC

    Suggest a correction

  61. sesja-v-840291.eu.cc US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT Polska
    DetailsHide
    Hostname
    sesja-v-840291.eu.cc
    First seen
    2026-11-08 08:10 UTC
    Listing
    CERT Polska listed it 2026-09-10 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 06:31 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-08 07:10 UTC to 2027-02-06 07:10 UTC
    Logged 2026-11-08 08:09 UTC in Google PlumbersArms2027h1, entry 674,196,171
    SHA-256 10611696b629169db75111458ceb68c3bede7f3200f50a0274da57a028fda5d4
    Public key SHA-256 df2b89c880d3c3e4b3fc456d89d9975972be9ff04e3f88f87544aff94825d4f7
    Addresses
    104.21.12.89 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.131.247 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.12.89, 172.67.131.247): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.

    Suggest a correction

  62. apk.spotifull.com US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareUnder spotifull.com, reported by PhishDestroyMX presentSPF ~allDMARC missingRegistered 15 mo ago
    DetailsHide
    Hostname
    apk.spotifull.com
    First seen
    2026-11-08 08:05 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-08 05:57 UTC
    Reported
    PhishDestroy, listing spotifull.com and the names under it
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-11-08 07:03 UTC to 2027-02-06 07:03 UTC
    Logged 2026-11-08 08:02 UTC in Google ParcelYard2027h1, entry 673,786,314
    SHA-256 16157933f10695868d469487a6aff2e18ad3aa6bc030bbe1bd1ab4ac8f4f1566
    Public key SHA-256 508bd07a64b09aa21b308119a08a2773e0e77edcaf72484e10bbd1c9011ed226
    PhishDestroy
    Addresses
    104.21.44.242 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.205.70 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.44.242, 172.67.205.70): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    spotifull.com
    Registered
    2025-08-07 · OVH sas
    MX
    Receives mail at route2.mx.cloudflare.net, route1.mx.cloudflare.net, route3.mx.cloudflare.net
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 03:58 UTC

    Suggest a correction

  63. astravora.vip US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    astravora.vip
    First seen
    2026-11-08 08:05 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-08 05:57 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR1
    Valid 2026-11-08 07:05 UTC to 2027-02-06 07:05 UTC
    Logged 2026-11-08 08:04 UTC in IPng Networks Gouda2027h1, entry 351,841,254
    SHA-256 5b8b62573ebfacb0637fe73fa99785955da9d9ce61f2fbfcf22d95746ef72c0d
    Public key SHA-256 91ec71af4fcfb38c1744915ea9c4248b8dd43171d2093143f1ee92943b0233c8
    PhishDestroy
    Addresses
    104.21.92.109 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.192.20 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.92.109, 172.67.192.20): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    astravora.vip
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 08:10 UTC

    Suggest a correction

  64. bgdxv.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by NPA 165 (finance and insurance)MX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    bgdxv.com
    First seen
    2026-11-08 08:05 UTC
    Listing
    NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 01:35 UTC
    Listed
    NPA 165
    1. Observed in the NPA 165 feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-08 07:02 UTC to 2027-02-06 08:00 UTC
    Logged 2026-11-08 08:03 UTC in Geomys Tuscolo2027h1, entry 525,180,587
    SHA-256 e78b33eea17f0bfbf0be0ca2f98704ac7466c5f1a44e1d2ef644ef9b6803601d
    Public key SHA-256 ba3962e93794d19b7d2d3bd35b4cae678f6c5f559cc27a5ad8dc37749386c6dc
    Addresses
    104.21.9.150 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.160.50 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.9.150, 172.67.160.50): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    bgdxv.com
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 08:10 UTC

    Suggest a correction

  65. kmspico.llc US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 59 d ago
    DetailsHide
    Hostname
    kmspico.llc
    First seen
    2026-11-08 08:05 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 05:58 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-08 07:06 UTC to 2027-02-06 07:05 UTC
    Logged 2026-11-08 08:04 UTC in Google ParcelYard2027h1, entry 673,818,484
    SHA-256 5f1ebbbf074f8ee8a9b646eb6103f016f05109315b26cdf71d620328cbb32d28
    Public key SHA-256 2218c6227d0318f22ce9a98673c73709689fc3f706a0e80c4f6bfbc4f31b93c4
    Addresses
    104.21.2.162 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.129.97 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.2.162, 172.67.129.97): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    kmspico.llc
    Registered
    2026-09-10 · GNAME.COM PTE. LTD.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 08:50 UTC

    Suggest a correction

  66. nightoctoa.store US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 59 d ago
    DetailsHide
    Hostname
    nightoctoa.store
    First seen
    2026-11-08 08:05 UTC
    Listing
    CERT Polska listed it 2026-09-10 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 06:31 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-11-08 07:06 UTC to 2027-02-06 07:06 UTC
    Logged 2026-11-08 08:04 UTC in Geomys Tuscolo2027h1, entry 525,193,737
    SHA-256 3bccd1f38b09f5d9f9dc4ba13885696fd1abb12f268edd91ca1273d53e2a919e
    Public key SHA-256 b749ed5bbfee629df81421cd6636fbe63b2f47a018a8383838c46d250f140125
    Addresses
    104.21.87.226 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.147.47 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.87.226, 172.67.147.47): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    nightoctoa.store
    Registered
    2026-09-10 · NameCheap, Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 08:50 UTC

    Suggest a correction

  67. status-pl-914028.eu.cc US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT Polska
    DetailsHide
    Hostname
    status-pl-914028.eu.cc
    First seen
    2026-11-08 08:05 UTC
    Listing
    CERT Polska listed it 2026-09-10 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 06:31 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-08 07:03 UTC to 2027-02-06 08:01 UTC
    Logged 2026-11-08 08:03 UTC in Let's Encrypt Sycamore2027h1, entry 1,041,515,762
    SHA-256 225067695153c50c69fc8a338ba50789a46c7b09a9d2dfe5765c5a4f0c21f602
    Public key SHA-256 f4528d56c3390b9505d7c76481296233fe4345ffa4d0c23b0271c6a5865348d6
    Addresses
    104.21.58.157 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.161.138 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.58.157, 172.67.161.138): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.

    Suggest a correction

  68. velnorith.vip US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    velnorith.vip
    First seen
    2026-11-08 08:05 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-08 05:57 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR1
    Valid 2026-11-08 07:05 UTC to 2027-02-06 07:05 UTC
    Logged 2026-11-08 08:04 UTC in IPng Networks Gouda2027h1, entry 351,841,254
    SHA-256 5b8b62573ebfacb0637fe73fa99785955da9d9ce61f2fbfcf22d95746ef72c0d
    Public key SHA-256 91ec71af4fcfb38c1744915ea9c4248b8dd43171d2093143f1ee92943b0233c8
    PhishDestroy
    Addresses
    104.21.63.200 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.150.12 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.63.200, 172.67.150.12): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    velnorith.vip
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 08:10 UTC

    Suggest a correction

  69. whuf-ethos.network US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    whuf-ethos.network
    First seen
    2026-11-08 08:05 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 05:58 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-08 07:00 UTC to 2027-02-06 07:58 UTC
    Logged 2026-11-08 08:01 UTC in IPng Networks Halloumi2027h1, entry 408,921,053
    SHA-256 6afee58b990c3a3e8eb68c203a5d4b51f585642f86513f1724ffae5e88fba565
    Public key SHA-256 3e1b64e93344178a7569a0e713910c38c81a5dab3c90adf9e3ac31c16efee811
    Addresses
    104.21.34.60 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.155.34 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.34.60, 172.67.155.34): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    whuf-ethos.network
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 08:10 UTC

    Suggest a correction

  70. imyship7-1-1-twynrfxs.shop US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by NPA 165 (transport and delivery)MX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    imyship7-1-1-twynrfxs.shop
    First seen
    2026-11-08 08:00 UTC
    Listing
    NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 01:35 UTC
    Listed
    NPA 165
    1. Observed in the NPA 165 feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-10-17 22:17 UTC to 2027-01-15 22:17 UTC
    Logged 2026-11-08 07:57 UTC in DigiCert Sphinx2027h1, entry 399,330,347
    SHA-256 131413cadc25b39eba6dfc9e58a56a80a87076b0b7279876d91f1093ed66c6af
    Public key SHA-256 313dfd00071e3948cf4befb814088d4186a28c088c24144aa0524fdbd22b15dd
    Addresses
    104.21.32.21 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.182.73 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.32.21, 172.67.182.73): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    imyship7-1-1-twynrfxs.shop
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 08:05 UTC

    Suggest a correction

  71. rebirthstress.at US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    rebirthstress.at
    First seen
    2026-11-08 08:00 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-08 05:57 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-08 06:58 UTC to 2027-02-06 07:56 UTC
    Logged 2026-11-08 07:58 UTC in Google ParcelYard2027h1, entry 673,745,012
    SHA-256 4024fabfe08246f81738a2c12e840a42e9b587f65778f9e73371f815fcb366ec
    Public key SHA-256 2be98b087c236bb8aa15ed8c1ad52943a65d2b81293ee5c0a11f72a654a3e462
    PhishDestroy
    Addresses
    104.21.92.181 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.197.22 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.92.181, 172.67.197.22): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    rebirthstress.at
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 08:05 UTC

    Suggest a correction

  72. www.korakskin.com US · AS13335 · Cloudflare, Inc.
    ReportedCloudflareUnder korakskin.com, reported by PhishDestroyMX absentSPF missingDMARC missingRegistered 2 mo ago
    DetailsHide
    Hostname
    www.korakskin.com
    First seen
    2026-11-08 08:00 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-11-07 · still listed at the last successful feed check 2026-11-08 05:57 UTC
    Reported
    PhishDestroy, listing korakskin.com and the names under it
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-11-08 06:57 UTC to 2027-02-06 06:57 UTC
    Logged 2026-11-08 07:56 UTC in IPng Networks Gouda2027h1, entry 351,778,757
    SHA-256 9b1476f81de984a4c490a6fe8a7714343ef70d3f296660dc213d0914e64148bc
    Public key SHA-256 520fda55e87a05292050e4f3aef312179e89aed17c74f44ad9b21728c372292d
    PhishDestroy
    Addresses
    23.227.38.74 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (23.227.38.74): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    korakskin.com
    Registered
    2026-09-08 · PDR Ltd. d/b/a PublicDomainRegistry.com
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-07 20:14 UTC

    Suggest a correction

  73. alfexlabf.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by NPA 165 (finance and insurance)MX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    alfexlabf.com
    First seen
    2026-11-08 07:56 UTC
    Listing
    NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 01:35 UTC
    Listed
    NPA 165
    1. Observed in the NPA 165 feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-08 06:53 UTC to 2027-02-06 06:53 UTC
    Logged 2026-11-08 07:51 UTC in Google ParcelYard2027h1, entry 673,659,201
    SHA-256 b91a642060a29f3858911c19c2ae0c93460a1362e649639ec46e11d962177de5
    Public key SHA-256 26496770b41f428d7b2342e2030544a0a673560750ce8614c394ae179383f6fd
    Addresses
    104.21.80.184 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.153.29 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.80.184, 172.67.153.29): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    alfexlabf.com
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 07:57 UTC

    Suggest a correction

  74. bcgame2.casino US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    bcgame2.casino
    First seen
    2026-11-08 07:56 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-08 05:57 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-11-08 06:54 UTC to 2027-02-06 06:54 UTC
    Logged 2026-11-08 07:53 UTC in Let's Encrypt Sycamore2027h1, entry 1,041,249,943
    SHA-256 3e594c5fa7bb0c0f2f4c7f498a6d3e0b2e0b513b38894ac250b714f24dc03af0
    Public key SHA-256 e29ae6366cb4977cd3e63476beb478b42b836a8e48bb98edde1f18315f2c7d5f
    PhishDestroy
    Addresses
    104.21.49.106 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.189.191 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.49.106, 172.67.189.191): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    bcgame2.casino
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 07:57 UTC

    Suggest a correction

  75. escor.to US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 2 y ago
    DetailsHide
    Hostname
    escor.to
    First seen
    2026-11-08 07:56 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-08 05:57 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR2
    Valid 2026-11-08 06:56 UTC to 2027-02-06 06:56 UTC
    Logged 2026-11-08 07:55 UTC in DigiCert Sphinx2027h1, entry 399,311,614
    SHA-256 5399435157a4b125865f63cb03c0936a82c7d5995d3d56e904c5d3ef9966c747
    Public key SHA-256 235aa2ba00d94600ec2841912ea9ab7909b1e2136a5ebaa9b17f20ec1b38a0d9
    PhishDestroy
    Addresses
    104.21.77.148 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.209.13 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.77.148, 172.67.209.13): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    escor.to
    Registered
    2024-07-18 · Tonic
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 08:50 UTC

    Suggest a correction

  76. fc2095.pro US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    fc2095.pro
    First seen
    2026-11-08 07:56 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-08 05:57 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-11-08 06:55 UTC to 2027-02-06 06:55 UTC
    Logged 2026-11-08 07:54 UTC in IPng Networks Halloumi2027h1, entry 408,858,602
    SHA-256 aba27e03ddbb333381557670f34dabf645f07668707127450db28f91f653fe12
    Public key SHA-256 fb0dbb53541d66ee624a3f38e5cc0121d331e282a7b9c596202dd95cb3099159
    PhishDestroy
    Addresses
    104.21.71.132 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.170.148 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.71.132, 172.67.170.148): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    fc2095.pro
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 07:57 UTC

    Suggest a correction

  77. greentown.social US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC quarantine
    DetailsHide
    Hostname
    greentown.social
    First seen
    2026-11-08 07:56 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-08 05:57 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-08 06:55 UTC to 2027-02-06 07:53 UTC
    Logged 2026-11-08 07:55 UTC in Let's Encrypt Willow2027h1, entry 999,398,169
    SHA-256 745d056bd862417e4f31fb2a980906e508b1c3b6a1ca6476ae631ec0e750e809
    Public key SHA-256 e039ef87dc75a6b567b65b18f19c98f0c314be8b15a67a5bfc123290e155d75c
    PhishDestroy
    Addresses
    104.21.24.243 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.221.55 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.24.243, 172.67.221.55): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    greentown.social
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    DMARC policy p=quarantine
    Checked
    2026-11-08 07:57 UTC

    Suggest a correction

  78. pancakeswapfinance.world US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    pancakeswapfinance.world
    First seen
    2026-11-08 07:56 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-08 05:57 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1
    Valid 2026-09-10 06:20 UTC to 2026-12-09 07:20 UTC
    Logged 2026-11-08 07:54 UTC in Let's Encrypt Sycamore2026h2, entry 1,081,384,590
    SHA-256 9d853837973525d6a3a1cd1b40e59421869632dd666a15ec211a80a90490336f
    Public key SHA-256 65292b69ef9a5f0cb20602598510ea8f39d89bdac8e9d4d8ee897382361abd1e
    PhishDestroy
    Addresses
    104.21.74.231 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.164.80 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.74.231, 172.67.164.80): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    pancakeswapfinance.world
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 07:57 UTC

    Suggest a correction

  79. tevehyros.help US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    tevehyros.help
    First seen
    2026-11-08 07:56 UTC
    Listing
    CERT Polska listed it 2026-07-24 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 06:31 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-08 06:56 UTC to 2027-02-06 06:56 UTC
    Logged 2026-11-08 07:55 UTC in Google ParcelYard2027h1, entry 673,704,713
    SHA-256 d6bebe568b64a93380e1958595b045bffcdc8d35ec68d134943e0815761cf3c2
    Public key SHA-256 6948422e5b0aea3c9b8f476e058391a97b18c6a98abc1f99314a399624d1ab33
    Addresses
    104.21.73.223 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.167.90 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.73.223, 172.67.167.90): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    tevehyros.help
    Registered
    2026-05-14 · Chengdu West Dimension Digital Technology Co., Ltd.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 08:50 UTC

    Suggest a correction

  80. www.escor.to US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareUnder escor.to, reported by PhishDestroyMX absentSPF missingDMARC missingRegistered 2 y ago
    DetailsHide
    Hostname
    www.escor.to
    First seen
    2026-11-08 07:56 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-08 05:57 UTC
    Reported
    PhishDestroy, listing escor.to and the names under it
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR2
    Valid 2026-11-08 06:56 UTC to 2027-02-06 06:56 UTC
    Logged 2026-11-08 07:55 UTC in DigiCert Sphinx2027h1, entry 399,311,614
    SHA-256 5399435157a4b125865f63cb03c0936a82c7d5995d3d56e904c5d3ef9966c747
    Public key SHA-256 235aa2ba00d94600ec2841912ea9ab7909b1e2136a5ebaa9b17f20ec1b38a0d9
    PhishDestroy
    Addresses
    104.21.77.148 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.209.13 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.77.148, 172.67.209.13): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    escor.to
    Registered
    2024-07-18 · Tonic
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 08:50 UTC

    Suggest a correction

  81. zyvralen-netherlands.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    zyvralen-netherlands.com
    First seen
    2026-11-08 07:56 UTC
    Listing
    CERT Polska listed it 2026-09-10 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 06:31 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1
    Valid 2026-09-10 06:07 UTC to 2026-12-09 07:05 UTC
    Logged 2026-11-08 07:51 UTC in DigiCert Wyvern2026h2, entry 2,211,753,669
    SHA-256 4f96ceef827f201c84195ef0a35f8d710ee0e5ef19b54185780d0c2500f1e7f6
    Public key SHA-256 e2728564d224857f7203464991025ca72c6af73b59d74d6ad979b6a77905b4d9
    Addresses
    104.21.75.193 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.180.227 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.75.193, 172.67.180.227): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    zyvralen-netherlands.com
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 07:57 UTC

    Suggest a correction

  82. claim-pharos.com US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 59 d ago
    DetailsHide
    Hostname
    claim-pharos.com
    First seen
    2026-11-08 07:51 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-30 · still listed at the last successful feed check 2026-11-08 05:57 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1
    Valid 2026-09-10 03:58 UTC to 2026-12-09 04:56 UTC
    Logged 2026-11-08 07:47 UTC in DigiCert Wyvern2026h2, entry 2,211,746,186
    SHA-256 bcdd6cc99f1c65f009b26ad93053d70ef0b9fae3b07f896469c479580b8b28f3
    Public key SHA-256 b9414638f428e03712ef56af969f4fb988abe6145e597d08d83ef72f02d5ea27
    PhishDestroy
    Addresses
    104.21.17.197 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.178.56 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.17.197, 172.67.178.56): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    claim-pharos.com
    Registered
    2026-09-10 · PDR Ltd. d/b/a PublicDomainRegistry.com
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 07:51 UTC

    Suggest a correction

  83. pl-04931-oferta.shop US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    pl-04931-oferta.shop
    First seen
    2026-11-08 07:51 UTC
    Listing
    CERT Polska listed it 2026-05-19 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 06:31 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-08 06:49 UTC to 2027-02-06 06:49 UTC
    Logged 2026-11-08 07:48 UTC in Google ParcelYard2027h1, entry 673,616,883
    SHA-256 0ae8117dabd104b64760710bd24fc0ebb25ceddc4d943ddc5e20767091a8948f
    Public key SHA-256 de977f5b3fc46aeff1d6f92d1e567e31b5bcb60f4e67841a252fc425316708c4
    Addresses
    104.21.67.19 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.167.197 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.67.19, 172.67.167.197): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    pl-04931-oferta.shop
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 07:52 UTC

    Suggest a correction

  84. skinclub.ch US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    skinclub.ch
    First seen
    2026-11-08 07:51 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 05:58 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-11-08 06:48 UTC to 2027-02-06 06:48 UTC
    Logged 2026-11-08 07:47 UTC in Let's Encrypt Willow2027h1, entry 999,305,176
    SHA-256 62b21572f6b7583416e3492fd7fded636faf393163aba71059c25698995bed0e
    Public key SHA-256 efabc83e7fff658f1d2972fd6990d630f3d92afc15bc51788a2ad9e3f74b50fd
    Addresses
    104.21.50.65 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.157.142 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.50.65, 172.67.157.142): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    skinclub.ch
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 07:52 UTC

    Suggest a correction

  85. tavero-hub.fit US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    tavero-hub.fit
    First seen
    2026-11-08 07:51 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 05:58 UTC
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-08 05:57 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-08 06:51 UTC to 2027-02-06 06:51 UTC
    Logged 2026-11-08 07:50 UTC in DigiCert Wyvern2027h1, entry 451,322,826
    SHA-256 e707a93255ba1f3ce07ba4ebd8f937e2b1950d86bc331622a7c08c2b726860d7
    Public key SHA-256 19a2e67683bf69c4b047bac60770216cccf62c17e1e71506ef18df74f8c046e9
    Addresses
    104.21.33.138 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.190.31 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.33.138, 172.67.190.31): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    tavero-hub.fit
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 07:52 UTC

    Suggest a correction

  86. xenvorpulse.net US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    xenvorpulse.net
    First seen
    2026-11-08 07:51 UTC
    Listing
    CERT Polska listed it 2026-07-23 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 06:31 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-11-08 06:49 UTC to 2027-02-06 06:49 UTC
    Logged 2026-11-08 07:47 UTC in Google ParcelYard2027h1, entry 673,614,327
    SHA-256 3a994a7df3c168420710e02421c4ae72dde5e797fb0e22986209966ece5e6319
    Public key SHA-256 caf88af6d7b613f5d93713d3bed3b1640d6313dddffde1a9d3c7610ec5d7ef70
    Addresses
    104.21.10.99 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.131.78 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.10.99, 172.67.131.78): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    xenvorpulse.net
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 07:52 UTC

    Suggest a correction

  87. zgiezw.asia US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by NPA 165 (information services)MX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    zgiezw.asia
    First seen
    2026-11-08 07:51 UTC
    Listing
    NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 01:35 UTC
    Listed
    NPA 165
    1. Observed in the NPA 165 feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1
    Valid 2026-11-08 06:48 UTC to 2027-02-06 07:47 UTC
    Logged 2026-11-08 07:49 UTC in DigiCert Wyvern2027h1, entry 451,310,273
    SHA-256 7ebc2bb99993227d016c51f003b024661b068b6f02e7d531b7850f4c1f5b8710
    Public key SHA-256 3c43ae6443d7d5e7569e15ea85662510e14e7edbbe78482ccb2c8962cdadfca5
    Addresses
    104.21.63.146 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.146.220 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.63.146, 172.67.146.220): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    zgiezw.asia
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 07:52 UTC

    Suggest a correction

  88. zyvralen-france.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    zyvralen-france.com
    First seen
    2026-11-08 07:51 UTC
    Listing
    CERT Polska listed it 2026-09-12 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 06:31 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-08 06:50 UTC to 2027-02-06 07:49 UTC
    Logged 2026-11-08 07:50 UTC in Let's Encrypt Sycamore2027h1, entry 1,041,193,248
    SHA-256 3d4dc394494028f842ebbcb0d294e23eebe333e6f28dff26de27dab68857fb2f
    Public key SHA-256 fbffa85e394f167acf9a1fa6c654c61bbb4e6a23f1d9d81a57d86bebd4502cf8
    Addresses
    104.21.25.163 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.134.97 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.25.163, 172.67.134.97): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    zyvralen-france.com
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 07:52 UTC

    Suggest a correction

  89. bangerhead.outlecoa.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareUnder outlecoa.com, listed by CERT PolskaMX absentSPF missingDMARC missingRegistered 8 mo ago
    DetailsHide
    Hostname
    bangerhead.outlecoa.com
    First seen
    2026-11-08 07:45 UTC
    Listing
    CERT Polska listed it 2026-07-13 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 06:31 UTC
    Listed
    CERT Polska, listing outlecoa.com and the names under it
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WR1 · precertificate
    Valid 2026-11-08 06:43 UTC to 2027-02-06 07:42 UTC
    Logged 2026-11-08 07:43 UTC in IPng Networks Gouda2027h1, entry 351,669,996
    SHA-256 18d125ea259750258e3a81ff2876b6fdc77d9b565cc3cb3f1b67faacbe0a6fba
    Public key SHA-256 e6920c8195e40748aaab791ed2ece1a635a004109efab05b53d0b775116db15e
    Addresses
    104.21.74.180 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.160.238 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.74.180, 172.67.160.238): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    outlecoa.com
    Registered
    2026-03-17 · Dynadot Inc
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 07:30 UTC

    Suggest a correction

  90. jpsub2.478691.xyz US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareUnder 478691.xyz, listed by MetaMaskMX absentSPF missingDMARC missingRegistered 3 y ago
    DetailsHide
    Hostname
    jpsub2.478691.xyz
    First seen
    2026-11-08 07:45 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 05:58 UTC
    Listed
    MetaMask, listing 478691.xyz and the names under it
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-11-08 06:45 UTC to 2027-02-06 06:45 UTC
    Logged 2026-11-08 07:43 UTC in IPng Networks Halloumi2027h1, entry 408,757,747
    SHA-256 073a9189d1f88aa94479722ceb57b4175410e919d21133d727ef1d012cd0f4d0
    Public key SHA-256 6743566c19f86ac857e2596d7b0218a27ba7ba61b03f9105b68cd234a9865a8a
    Addresses
    104.21.37.52 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.204.39 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.37.52, 172.67.204.39): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    478691.xyz
    Registered
    2024-04-07 · NameSilo, LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 08:44 UTC

    Suggest a correction

  91. kaminofdn.fun US · AS13335 · Cloudflare, Inc.
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 10 mo ago
    DetailsHide
    Hostname
    kaminofdn.fun
    First seen
    2026-11-08 07:45 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-08 05:57 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WR1 · precertificate
    Valid 2026-11-08 06:41 UTC to 2027-02-06 07:39 UTC
    Logged 2026-11-08 07:41 UTC in Google ParcelYard2027h1, entry 673,529,187
    SHA-256 396b7bdfe0a14bb89614aff248623ceb17c93563b332b1fc16e9fefe51610acc
    Public key SHA-256 e0141970feab172fd6f61b6bba381139a431e8ae008e36e6fcfc967e890f1701
    PhishDestroy
    Addresses
    185.158.133.1 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (185.158.133.1): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    kaminofdn.fun
    Registered
    2026-01-16 · HOSTINGER operations, UAB
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 08:50 UTC

    Suggest a correction

  92. scompscomb.store US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 59 d ago
    DetailsHide
    Hostname
    scompscomb.store
    First seen
    2026-11-08 07:45 UTC
    Listing
    CERT Polska listed it 2026-09-11 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 06:31 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-08 06:43 UTC to 2027-02-06 07:41 UTC
    Logged 2026-11-08 07:43 UTC in Geomys Tuscolo2027h1, entry 525,002,139
    SHA-256 1c0a5813c658946d9937985bc613b149d61ec296b37abf35c463dcf23b26c1ff
    Public key SHA-256 53be2e0c83b79baa4afa86404e32720bfc2b491bab2ac5c62e980e71dc9f3fc7
    Addresses
    104.21.47.201 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.172.114 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.47.201, 172.67.172.114): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    scompscomb.store
    Registered
    2026-09-10 · NameCheap, Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 08:50 UTC

    Suggest a correction

  93. tezway.net US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX presentSPF ~allDMARC missing
    DetailsHide
    Hostname
    tezway.net
    First seen
    2026-11-08 07:45 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-08 05:57 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-11-08 06:46 UTC to 2027-02-06 06:46 UTC
    Logged 2026-11-08 07:45 UTC in Let's Encrypt Willow2027h1, entry 999,279,957
    SHA-256 62d80a615d4c5b9e433a180fb4af7db34e126da5b14339d0f925a07595999cc6
    Public key SHA-256 b1e085805e781c35928d12f99e74e9a6ee9c8a480a05b31fb574d812ba765c5b
    PhishDestroy
    Addresses
    104.21.89.119 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.141.221 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.89.119, 172.67.141.221): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    tezway.net
    MX
    Receives mail at mx01.mail.icloud.com, mx02.mail.icloud.com
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 07:47 UTC

    Suggest a correction

  94. wallos2.478691.xyz US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareUnder 478691.xyz, listed by MetaMaskMX absentSPF missingDMARC missingRegistered 3 y ago
    DetailsHide
    Hostname
    wallos2.478691.xyz
    First seen
    2026-11-08 07:45 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 05:58 UTC
    Listed
    MetaMask, listing 478691.xyz and the names under it
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-11-08 06:45 UTC to 2027-02-06 06:45 UTC
    Logged 2026-11-08 07:43 UTC in Let's Encrypt Sycamore2027h1, entry 1,041,029,719
    SHA-256 46be6191a448f4ce7470976640a61d7d00f57e61a32e4695eb8edb336b7b3369
    Public key SHA-256 c5012868cb787583e95e65331b9ccf0f0292cc7eaadfd8855b9376c998c2fee3
    Addresses
    104.21.37.52 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.204.39 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.37.52, 172.67.204.39): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    478691.xyz
    Registered
    2024-04-07 · NameSilo, LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 08:44 UTC

    Suggest a correction

  95. zentor-kraft.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    zentor-kraft.com
    First seen
    2026-11-08 07:45 UTC
    Listing
    CERT Polska listed it 2026-07-22 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 06:31 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-11-08 06:46 UTC to 2027-02-06 06:46 UTC
    Logged 2026-11-08 07:45 UTC in Google ParcelYard2027h1, entry 673,579,333
    SHA-256 a87ad447248635f46b66d2dd45ef6a9899c8c2bfabe05a5d5e98baee9d8b7480
    Public key SHA-256 84225beddeb4a0ae1c8166feb70649e59430a4e7d8fa7710b8362ba994727273
    Addresses
    104.21.48.141 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.186.177 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.48.141, 172.67.186.177): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    zentor-kraft.com
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 07:47 UTC

    Suggest a correction

  96. pomkori.pro US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    pomkori.pro
    First seen
    2026-11-08 07:41 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-08 05:57 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-08 06:38 UTC to 2027-02-06 07:37 UTC
    Logged 2026-11-08 07:38 UTC in Google ParcelYard2027h1, entry 673,504,466
    SHA-256 dc92b6c92317e342ad942b11cce357b2d10228646aa7069a3a1cf47db2b62019
    Public key SHA-256 1b601a9d63c9dbc70350db66aaf921ba9b4f387c3399192dbacd24b8d3689051
    PhishDestroy
    Addresses
    104.21.51.93 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.178.29 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.51.93, 172.67.178.29): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    pomkori.pro
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 07:46 UTC

    Suggest a correction

  97. wjfdhsa.monster US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by NPA 165 (information services)MX absentSPF missingDMARC missingRegistered 59 d ago
    DetailsHide
    Hostname
    wjfdhsa.monster
    First seen
    2026-11-08 07:41 UTC
    Listing
    NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 01:35 UTC
    Listed
    NPA 165
    1. Observed in the NPA 165 feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-08 06:41 UTC to 2027-02-06 06:41 UTC
    Logged 2026-11-08 07:39 UTC in Google PlumbersArms2027h1, entry 673,826,898
    SHA-256 2cacc8f3dd9e707fa1dee612d31836243f0c2c0976a76251524062a4850de073
    Public key SHA-256 e7e457c84a0e751c283e0f532ae0cd1bf37370c978396f7e64c6650616f3b2b2
    Addresses
    104.21.38.232 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.140.196 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.38.232, 172.67.140.196): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    wjfdhsa.monster
    Registered
    2026-09-10 · GoDaddy.com, LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 08:50 UTC

    Suggest a correction

  98. xn--kjpe-bitcoin-wjb.com US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    xn--kjpe-bitcoin-wjb.com
    First seen
    2026-11-08 07:41 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-08 05:57 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-11-08 06:40 UTC to 2027-02-06 06:40 UTC
    Logged 2026-11-08 07:39 UTC in Let's Encrypt Sycamore2027h1, entry 1,040,939,569
    SHA-256 367696b4a37690aee5b9fa2155d53d5f962e3233a9bc4cb91743929f86d47761
    Public key SHA-256 35af63856f5217923b03e1a43c891e0601a9d028360455a3d80bcca089c17957
    PhishDestroy
    Addresses
    104.21.92.73 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.188.160 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.92.73, 172.67.188.160): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    xn--kjpe-bitcoin-wjb.com
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 07:46 UTC

    Suggest a correction

  99. enter-flarenetworks.xyz US · AS13335 · Cloudflare, Inc.4 addressesFlare Network
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    enter-flarenetworks.xyz
    First seen
    2026-11-08 07:36 UTC
    First published
    2026-11-08 07:43 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 05:58 UTC
    DNS
    Resolves · checked 2026-11-08 07:48 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-08 06:32 UTC to 2027-02-06 06:32 UTC
    Logged 2026-11-08 07:31 UTC in Google PlumbersArms2027h1, entry 673,731,673
    SHA-256 13bad834285acd33af41ff95c9be34113a9a0c64456adf2add3f5b005dfdc1a2
    Public key SHA-256 2d76ad82c4f63191bfc929e5669709f53319fd54ea0f3b5b6e4a999ab162649e
    Brand
    Flare Network
    Addresses
    104.21.15.201 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.206.230 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3034::6815:fc9
    2606:4700:3037::ac43:cee6
    Cloudflare
    Cloudflare (104.21.15.201, 172.67.206.230): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    enter-flarenetworks.xyz
    Registered
    2026-05-14 · Dynadot Inc
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 07:36 UTC

    Suggest a correction

  100. trneed.top US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by NPA 165 (finance and insurance)MX absentSPF missingDMARC missingRegistered 59 d ago
    DetailsHide
    Hostname
    trneed.top
    First seen
    2026-11-08 07:36 UTC
    First published
    2026-11-08 07:43 UTC
    Listing
    NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 01:35 UTC
    DNS
    Resolves · checked 2026-11-08 07:48 UTC
    Listed
    NPA 165
    1. Observed in the NPA 165 feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-11-08 06:34 UTC to 2027-02-06 06:34 UTC
    Logged 2026-11-08 07:33 UTC in Google ParcelYard2027h1, entry 673,441,461
    SHA-256 1728995cb341ea02de56d3ec263072bb58f2c4c041edfbfdc0587f2e39cb0392
    Public key SHA-256 fbd1398eaf4810016311a09c3b2942ef8e60a311c750491ccc15bf760763542c
    Addresses
    104.21.69.118 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.208.1 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.69.118, 172.67.208.1): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    trneed.top
    Registered
    2026-09-10 · NameSilo,LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 07:42 UTC

    Suggest a correction

Showing 1–100 of 2,311 hostnames.
How these findings are made

Brand spoofs: findings that impersonate one of the 1,000 most-impersonated brands. The list opens on them; All shows every finding.

Reported: a hostname in a new certificate that PhishTank or PhishDestroy reports, or that CERT Polska, MetaMask, USOM, MODA, NPA 165, JPCERT/CC, the AMF, the FSMA or BaFin lists. When a listing source names the brand imitated or a category, the finding shows it. Phishing host: a brand lookalike that resolves to an address which hosted confirmed phishing in the last 48 hours. Spamhaus DROP: a brand lookalike that resolves to an address on the Spamhaus DROP list. Same certificate: another name on a finding's certificate that resolves to an address on Spamhaus DROP. Suspicious: other names on a finding's certificate, rated high for a hosting-alias name or a lookalike on a phishing host, medium for a lookalike; they join the findings once they have listing evidence of their own. Also under Suspicious: registered domains using a brand’s name that PhishDestroy’s community list includes, rated high when they resolve to an address with no parking or holding signal, medium otherwise.

Brand labels cover the 1,000 most-impersonated brands. A name gets a brand when the brand's token starts a label or follows a hyphen, with a lure word such as "login" or "verify" for common words. Hostnames appear as plain text. How it works · Sources