Live

Live phishing findings

New certificates and domain registrations, with every hostname resolved and checked against phishing reports and bad-address lists. The newest findings, updated hourly.

Updated hourly · 2026-11-08 11:00 UTC
Certificate-log entries · 24 h
322.8M
from 84 distinct feeds
Unique certificates · 24 h
31.6M
each reviewed
Names resolved · 24 h
20.2M
15.1M with an address
Findings · 24 h
5,714
209 of 1,061 brands targeted

2,393 hostnames from the last 24 hours.

The findings have updated. The list starts again from the top.

  1. dekhigher.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    dekhigher.com
    First seen
    2026-11-08 10:56 UTC
    Listing
    CERT Polska listed it 2026-05-15 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 09:32 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-11-08 09:56 UTC to 2027-02-06 09:56 UTC
    Logged 2026-11-08 10:55 UTC in IPng Networks Gouda2027h1, entry 353,226,651
    SHA-256 8e49f734af899a7ee8fd88188aabfcd660c119b57cb2ea72859904666c84829d
    Public key SHA-256 42163e9734d57ab1110decf67641cda09e9693a2de19a022efc4133f2c217c2e
    Addresses
    104.21.15.202 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.163.244 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.15.202, 172.67.163.244): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    dekhigher.com
    Registered
    2026-05-15 · NameCheap, Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 11:05 UTC

    Suggest a correction

  2. faithguardsea.shop US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by NPA 165 (e-commerce)MX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    faithguardsea.shop
    First seen
    2026-11-08 10:56 UTC
    Listing
    NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 01:35 UTC
    Listed
    NPA 165
    1. Observed in the NPA 165 feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-08 09:55 UTC to 2027-02-06 10:53 UTC
    Logged 2026-11-08 10:55 UTC in Google ParcelYard2027h1, entry 676,262,829
    SHA-256 db4f9774fecc1067ed0a894a4fa150ee9eb3776670583e21e868f8dee5d46834
    Public key SHA-256 e3d932b24f91ec42dd825e5596274bee3e6324145743be5651b77edbe089382e
    Addresses
    104.21.27.163 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.143.64 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.27.163, 172.67.143.64): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    faithguardsea.shop
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 10:59 UTC

    Suggest a correction

  3. futard.sbs US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    futard.sbs
    First seen
    2026-11-08 10:56 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 05:58 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-11-08 09:53 UTC to 2027-02-06 09:53 UTC
    Logged 2026-11-08 10:52 UTC in DigiCert Sphinx2027h1, entry 400,915,830
    SHA-256 a9ff95df31f1d8c9b00482e9a84864cfe73f864ae76ce9a8911616a7f25587bb
    Public key SHA-256 2b0887bf2ac5241abb0014c34cc081012ca30ebedb043977e3d851eee87aa26f
    Addresses
    104.21.47.254 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.175.35 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.47.254, 172.67.175.35): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    futard.sbs
    Registered
    2026-05-15 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 11:05 UTC

    Suggest a correction

  4. mkhriy.asia US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by NPA 165 (information services)MX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    mkhriy.asia
    First seen
    2026-11-08 10:56 UTC
    Listing
    NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 01:35 UTC
    Listed
    NPA 165
    1. Observed in the NPA 165 feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1
    Valid 2026-11-08 09:54 UTC to 2027-02-06 10:52 UTC
    Logged 2026-11-08 10:55 UTC in DigiCert Wyvern2027h1, entry 453,138,017
    SHA-256 b2dfa9448785c5480f66bfb53c923563b851dee5c373f78f942f1fec296fb0d6
    Public key SHA-256 5ab123fa5b53dae2720a687236a67f96e1408db30a2c11596091030ea1c72ac7
    Addresses
    104.21.44.13 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.192.204 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.44.13, 172.67.192.204): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    mkhriy.asia
    Registered
    2026-07-13 · Alibaba Cloud Computing Ltd. d/b/a HiChina (www.net.cn)
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 11:05 UTC

    Suggest a correction

  5. pay-heleket.click US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 8 mo ago
    DetailsHide
    Hostname
    pay-heleket.click
    First seen
    2026-11-08 10:56 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-08 05:57 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-08 09:56 UTC to 2027-02-06 09:56 UTC
    Logged 2026-11-08 10:55 UTC in Google ParcelYard2027h1, entry 676,267,002
    SHA-256 8082a896f4876e7dd5c388b3d674f2dc6fe6952f509aa74aaa53e71c9d3db7df
    Public key SHA-256 82f295a793ed4220088fa0a64a3a341dcb19da465a1d3fc2098db5088158b5c6
    PhishDestroy
    Addresses
    104.21.84.74 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.188.164 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.84.74, 172.67.188.164): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    pay-heleket.click
    Registered
    2026-03-16 · Dynadot, LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 11:05 UTC

    Suggest a correction

  6. superpcry.store US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 59 d ago
    DetailsHide
    Hostname
    superpcry.store
    First seen
    2026-11-08 10:56 UTC
    Listing
    CERT Polska listed it 2026-09-11 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 09:32 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-08 09:54 UTC to 2027-02-06 10:51 UTC
    Logged 2026-11-08 10:54 UTC in Let's Encrypt Sycamore2027h1, entry 1,045,619,787
    SHA-256 7a993de61af972599abc20530698baf7c2f3d78f985cf3753b6fc4401201e200
    Public key SHA-256 9dfd370d22a11473c581e1172bc11a078882c326308c51fc35a93979e03512fb
    Addresses
    104.21.20.251 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.195.47 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.20.251, 172.67.195.47): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    superpcry.store
    Registered
    2026-09-10 · NameCheap, Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 11:05 UTC

    Suggest a correction

  7. tinilesio.store US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 59 d ago
    DetailsHide
    Hostname
    tinilesio.store
    First seen
    2026-11-08 10:56 UTC
    Listing
    CERT Polska listed it 2026-09-10 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 09:32 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-11-08 09:54 UTC to 2027-02-06 09:54 UTC
    Logged 2026-11-08 10:52 UTC in Geomys Tuscolo2027h1, entry 526,991,660
    SHA-256 62738aa48dd5a5a201d4c11edc0a5bae391a3337068874d10427d458c727a750
    Public key SHA-256 226894f8ea45874822e156918d13c98084ad72f90a2da5a5fc7294844952081d
    Addresses
    104.21.77.5 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.202.197 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.77.5, 172.67.202.197): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    tinilesio.store
    Registered
    2026-09-10 · NameCheap, Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 11:05 UTC

    Suggest a correction

  8. auth.equinoxcapitaltd.com US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareUnder equinoxcapitaltd.com, reported by PhishDestroyMX presentSPF ~allDMARC policy noneRegistered 11 mo ago
    DetailsHide
    Hostname
    auth.equinoxcapitaltd.com
    First seen
    2026-11-08 10:51 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-08 05:57 UTC
    Reported
    PhishDestroy, listing equinoxcapitaltd.com and the names under it
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR2
    Valid 2026-11-08 09:48 UTC to 2027-02-06 09:48 UTC
    Logged 2026-11-08 10:47 UTC in Google ParcelYard2027h1, entry 676,149,314
    SHA-256 1770addfd459b1a0021678d80522571a3dfb5ace531a439089e3a541289c1fd7
    Public key SHA-256 6982bc8384e7a4e1c047f576f66ee6cdc067e25037f10a16a2e2dd1c45720d3c
    PhishDestroy
    Addresses
    104.21.51.39 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.220.179 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.51.39, 172.67.220.179): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    equinoxcapitaltd.com
    Registered
    2025-12-12 · Sollutium EU sp. z o.o.
    MX
    Receives mail at _dc-mx.57fd76919eb6.equinoxcapitaltd.com
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    DMARC policy p=none: reports only
    Checked
    2026-11-08 11:05 UTC

    Suggest a correction

  9. bitbancosystem.shop US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    bitbancosystem.shop
    First seen
    2026-11-08 10:51 UTC
    Listing
    CERT Polska listed it 2026-09-17 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 09:32 UTC
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-08 05:57 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-08 09:48 UTC to 2027-02-06 10:48 UTC
    Logged 2026-11-08 10:48 UTC in Google PlumbersArms2027h1, entry 676,476,712
    SHA-256 4c5f4eb3382be426356970ed1a270709d90a96abe9f488774355fc9a883a99ca
    Public key SHA-256 a8927c6431f4a83d6de3a3d05776bd995863c36853bb7fd4d20167a772b38122
    Addresses
    104.21.54.247 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.143.159 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.54.247, 172.67.143.159): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    bitbancosystem.shop
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 10:53 UTC

    Suggest a correction

  10. futurocalendar.link US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 10 mo ago
    DetailsHide
    Hostname
    futurocalendar.link
    First seen
    2026-11-08 10:51 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-08 05:57 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-08 09:46 UTC to 2027-02-06 10:45 UTC
    Logged 2026-11-08 10:46 UTC in Google ParcelYard2027h1, entry 676,143,968
    SHA-256 2936e546e2254c5afbabedd164344807b887dfb89e97ab5f4d941f33c82fd295
    Public key SHA-256 55d0cba253ccc0efc35d0701b0834ef6c528cd6300cd1f7ee6516b8538dd796b
    PhishDestroy
    Addresses
    104.21.8.195 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.157.211 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.8.195, 172.67.157.211): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    futurocalendar.link
    Registered
    2026-01-17 · Cloudflare
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 11:05 UTC

    Suggest a correction

  11. logincuna.shop US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by NPA 165 (information services)MX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    logincuna.shop
    First seen
    2026-11-08 10:51 UTC
    Listing
    NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 01:35 UTC
    Listed
    NPA 165
    1. Observed in the NPA 165 feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-08 09:47 UTC to 2027-02-06 10:46 UTC
    Logged 2026-11-08 10:47 UTC in Geomys Tuscolo2027h1, entry 526,928,807
    SHA-256 b49bf213d3c5d6369caaef838ad89ede7f6714364b2cdb72d04eedda557018e0
    Public key SHA-256 b315ecb04b8e680ff23ef18cee7ee868bfb7021153fd9536e67be60493fd1dbe
    Addresses
    104.21.47.57 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.144.219 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.47.57, 172.67.144.219): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    logincuna.shop
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 10:53 UTC

    Suggest a correction

  12. maxisgsyatirim.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by USOMMX presentSPF ~allDMARC missingRegistered 59 d ago
    DetailsHide
    Hostname
    maxisgsyatirim.com
    First seen
    2026-11-08 10:51 UTC
    Listing
    USOM listed it 2026-09-30 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 10:05 UTC
    Listed
    USOM
    1. Listed by USOM
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-08 09:46 UTC to 2027-02-06 10:44 UTC
    Logged 2026-11-08 10:46 UTC in Let's Encrypt Sycamore2027h1, entry 1,045,440,070
    SHA-256 349ef882f44d6376690677dddd0c22b29c6bb989a05ca14ce3a8892d8d5d0277
    Public key SHA-256 7cd75c1202908018de4f74892a4c10ff1a87e51b5c19b2ef557c8c15854643fd
    Addresses
    104.21.34.189 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.207.15 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.34.189, 172.67.207.15): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    maxisgsyatirim.com
    Registered
    2026-09-10 · Dynadot Inc
    MX
    Receives mail at smtp.google.com
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 11:06 UTC

    Suggest a correction

  13. olympiacasino1.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX presentSPF -allDMARC missingRegistered 8 mo ago
    DetailsHide
    Hostname
    olympiacasino1.com
    First seen
    2026-11-08 10:51 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 05:58 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-11-08 09:51 UTC to 2027-02-06 09:51 UTC
    Logged 2026-11-08 10:49 UTC in Google PlumbersArms2027h1, entry 676,496,444
    SHA-256 176c2763da536b85b38055c64f34a4d826f7531e7cd1527601098efc8350afd5
    Public key SHA-256 6df438b59f2d4ec39df93df4926d7def87f2a2323e2d4f0bd0beb7e0a39f056c
    Addresses
    104.21.17.249 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.178.233 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.17.249, 172.67.178.233): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    olympiacasino1.com
    Registered
    2026-03-16 · Hosting Concepts B.V. d/b/a Registrar.eu
    MX
    Receives mail at route1.mx.cloudflare.net, route2.mx.cloudflare.net, route3.mx.cloudflare.net
    SPF
    SPF record with -all: other senders fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 11:06 UTC

    Suggest a correction

  14. usdtchecker.org US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 4 y ago
    DetailsHide
    Hostname
    usdtchecker.org
    First seen
    2026-11-08 10:51 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-08 05:57 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-08 09:50 UTC to 2027-02-06 10:48 UTC
    Logged 2026-11-08 10:50 UTC in Let's Encrypt Sycamore2027h1, entry 1,045,529,557
    SHA-256 cf59d818610d6dedef03830e27c7882393a70711acf6cc2400d1545c1aa4c32b
    Public key SHA-256 7258a795f580b6ff32dfc8ac7a87241c34f6d84684196fad8388d1fc34b590b2
    PhishDestroy
    Addresses
    104.21.63.234 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.173.23 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.63.234, 172.67.173.23): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    usdtchecker.org
    Registered
    2023-04-18 · GoDaddy.com, LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 10:53 UTC

    Suggest a correction

  15. edge-x.cyou US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    edge-x.cyou
    First seen
    2026-11-08 10:46 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 05:58 UTC
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-08 05:57 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-11-08 09:46 UTC to 2027-02-06 09:46 UTC
    Logged 2026-11-08 10:44 UTC in DigiCert Sphinx2027h1, entry 400,870,897
    SHA-256 5ca18c003a77a5d17d48e1a896c4aa0386ea49ea5b6cec7a8f99b573f402cf75
    Public key SHA-256 6b323c8402de70aa406c27aaf309817bf959cf6fab5c2ca3021291c51b606b93
    Addresses
    104.21.20.76 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.191.227 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.20.76, 172.67.191.227): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    edge-x.cyou
    Registered
    2026-05-14 · Global Domain Group LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 11:05 UTC

    Suggest a correction

  16. loca-betresmi.xyz US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    loca-betresmi.xyz
    First seen
    2026-11-08 10:46 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-08 05:57 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-08 09:44 UTC to 2027-02-06 09:44 UTC
    Logged 2026-11-08 10:42 UTC in Google PlumbersArms2027h1, entry 676,391,956
    SHA-256 f5815edc9205877a264827af51be281d473f8863c540b7cb8fe9221ab6f224dd
    Public key SHA-256 d9624eee6dedacda61916d5ffbc57a9dce1468ec6f9b94469f01348a98e2c715
    PhishDestroy
    Addresses
    104.21.6.99 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.134.179 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.6.99, 172.67.134.179): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    loca-betresmi.xyz
    Registered
    2026-05-14 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 11:05 UTC

    Suggest a correction

  17. pepeunchainedtoken.site US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 12 mo ago
    DetailsHide
    Hostname
    pepeunchainedtoken.site
    First seen
    2026-11-08 10:46 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-08 05:57 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-08 09:45 UTC to 2027-02-06 10:43 UTC
    Logged 2026-11-08 10:45 UTC in Google PlumbersArms2027h1, entry 676,439,612
    SHA-256 8c6dd74071cf127135fa65ddd05eb24d5f5f0704070356c14f72d4e370c902fb
    Public key SHA-256 fe5262b2e8e68103af785396770aa3b5fb195f0e74ca7e14f05d4c7e05fe8ef9
    PhishDestroy
    Addresses
    104.21.87.4 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.139.26 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.87.4, 172.67.139.26): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    pepeunchainedtoken.site
    Registered
    2025-11-18 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 11:05 UTC

    Suggest a correction

  18. safepae.my US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    safepae.my
    First seen
    2026-11-08 10:46 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 05:58 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-11-08 09:42 UTC to 2027-02-06 09:42 UTC
    Logged 2026-11-08 10:41 UTC in Google ParcelYard2027h1, entry 676,057,988
    SHA-256 76ecd497c4f0e163875b97a13aaa164603858a11f19dac8c895105c18acd921a
    Public key SHA-256 80b58cba2f72a8b3b49fdd05c1270e53723af3636ff0ba5217eef91af2c8f4ba
    Addresses
    104.21.40.162 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.187.109 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.40.162, 172.67.187.109): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    safepae.my
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 10:48 UTC

    Suggest a correction

  19. staging-admin.rollbux.com US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareUnder rollbux.com, reported by PhishDestroyMX presentSPF missingDMARC rejectRegistered 16 mo ago
    DetailsHide
    Hostname
    staging-admin.rollbux.com
    First seen
    2026-11-08 10:46 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-08 05:57 UTC
    Reported
    PhishDestroy, listing rollbux.com and the names under it
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WR1 · precertificate
    Valid 2026-11-08 09:46 UTC to 2027-02-06 10:42 UTC
    Logged 2026-11-08 10:46 UTC in Let's Encrypt Sycamore2027h1, entry 1,045,435,467
    SHA-256 1532b0659eea2f83a0181ab2dcf7764a6167be761046ea6a4fe1ff05ac33abbb
    Public key SHA-256 2947e8168059da2ae60cf36f7277c3de2945a6ef61262ae1dbcae40c91556971
    PhishDestroy
    Addresses
    104.20.18.209 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.66.162.224 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.20.18.209, 172.66.162.224): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    rollbux.com
    Registered
    2025-07-11 · GoDaddy.com, LLC
    MX
    Receives mail at smtp.google.com
    SPF
    Publishes no SPF record
    DMARC
    DMARC policy p=reject
    Checked
    2026-11-08 08:19 UTC

    Suggest a correction

  20. treasury-deltaliquidity.pro US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 59 d ago
    DetailsHide
    Hostname
    treasury-deltaliquidity.pro
    First seen
    2026-11-08 10:46 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 05:58 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-08 09:43 UTC to 2027-02-06 10:42 UTC
    Logged 2026-11-08 10:43 UTC in DigiCert Wyvern2027h1, entry 453,064,531
    SHA-256 f4cda71cd1bf4adbb9f8ff9aeab0125496230ae8491d584b555b5ffb59b5e5e2
    Public key SHA-256 ecc154dca3cea6a22d29ce771da85580c4655ff2f18e1988b556a6a474c5ef44
    Addresses
    104.21.17.29 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.219.201 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.17.29, 172.67.219.201): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    treasury-deltaliquidity.pro
    Registered
    2026-09-10 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 11:05 UTC

    Suggest a correction

  21. vantixgrid.com US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX presentSPF ~allDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    vantixgrid.com
    First seen
    2026-11-08 10:46 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-08 05:57 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-08 09:42 UTC to 2027-02-06 10:41 UTC
    Logged 2026-11-08 10:42 UTC in Geomys Tuscolo2027h1, entry 526,874,572
    SHA-256 02e067d291dd434fa55c8e48c0010cdf1662e4bccc8582e8df29efe31a1eb897
    Public key SHA-256 bca3e3f761c0bfdfab1ba82a6d7eb780e3e337d27ccfcff30f3ed71b35852ff4
    PhishDestroy
    Addresses
    104.21.74.49 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.155.62 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.74.49, 172.67.155.62): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    vantixgrid.com
    Registered
    2026-07-13 · Ultahost, Inc.
    MX
    Receives mail at route2.mx.cloudflare.net, route3.mx.cloudflare.net, route1.mx.cloudflare.net
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 10:48 UTC

    Suggest a correction

  22. wesukyu.pro US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX presentSPF -allDMARC quarantineRegistered 4 mo ago
    DetailsHide
    Hostname
    wesukyu.pro
    First seen
    2026-11-08 10:46 UTC
    Listing
    CERT Polska listed it 2026-07-17 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 09:32 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-08 09:44 UTC to 2027-02-06 10:42 UTC
    Logged 2026-11-08 10:44 UTC in DigiCert Sphinx2027h1, entry 400,868,155
    SHA-256 09d5c9b9dc44d7b01993ea9a6960d417021391a4cede919c2a83d9e87288739a
    Public key SHA-256 d41204a0ee61023a2cce975cc7cb91023e57b325e18c2df190c9813dfb329f22
    Addresses
    104.21.80.252 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.136.91 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.80.252, 172.67.136.91): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    wesukyu.pro
    Registered
    2026-07-13 · NameCheap, Inc.
    MX
    Receives mail at mail.wesukyu.pro
    SPF
    SPF record with -all: other senders fail
    DMARC
    DMARC policy p=quarantine
    Checked
    2026-11-08 11:05 UTC

    Suggest a correction

  23. aptekaolmed-pl.shop US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    aptekaolmed-pl.shop
    First seen
    2026-11-08 10:41 UTC
    Listing
    CERT Polska listed it 2026-07-13 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 09:32 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-08 09:40 UTC to 2027-02-06 10:38 UTC
    Logged 2026-11-08 10:40 UTC in Google PlumbersArms2027h1, entry 676,354,809
    SHA-256 a546715f8b292a2995dad2d787eb0fcef1d76ffa61901228529f75a8860ffbd6
    Public key SHA-256 2f820f5294135ad41e2845dea093d3e17e159997aa2d45af6864c5156e84f9f7
    Addresses
    104.21.86.140 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.220.93 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.86.140, 172.67.220.93): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    aptekaolmed-pl.shop
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 10:43 UTC

    Suggest a correction

  24. basisfyle.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    basisfyle.com
    First seen
    2026-11-08 10:41 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 05:58 UTC
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-08 05:57 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-08 09:40 UTC to 2027-02-06 10:39 UTC
    Logged 2026-11-08 10:40 UTC in DigiCert Wyvern2027h1, entry 453,027,245
    SHA-256 8bd800538ae80f6c80fee5a59b9cb679894777ac5276a045c15d95b57cac0739
    Public key SHA-256 920c19aa38002a237df95f860ba2c52e7e3e59135548adaa9045968ffdd19130
    Addresses
    104.21.54.90 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.137.81 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.54.90, 172.67.137.81): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    basisfyle.com
    Registered
    2026-07-13 · Ultahost, Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 11:06 UTC

    Suggest a correction

  25. goldenstarcasinos-ca.com US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 11 mo ago
    DetailsHide
    Hostname
    goldenstarcasinos-ca.com
    First seen
    2026-11-08 10:41 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-08 05:57 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-11-08 09:37 UTC to 2027-02-06 09:37 UTC
    Logged 2026-11-08 10:36 UTC in Let's Encrypt Sycamore2027h1, entry 1,045,215,972
    SHA-256 82fb84a807d858f0f7bb00487098ea61a37917af34f0b572287f53c6e4c1aec6
    Public key SHA-256 b723beef8f8ebe149c5799bf7851a2fb06eaaf2441f474f200bdd8cf00a3c298
    PhishDestroy
    Addresses
    104.21.53.144 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.213.137 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.53.144, 172.67.213.137): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    goldenstarcasinos-ca.com
    Registered
    2025-12-09 · Hosting Concepts B.V. d/b/a Registrar.eu
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 11:06 UTC

    Suggest a correction

  26. merit-king-dogru10.sbs US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    merit-king-dogru10.sbs
    First seen
    2026-11-08 10:41 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-08 05:57 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-08 09:35 UTC to 2027-02-06 10:34 UTC
    Logged 2026-11-08 10:35 UTC in DigiCert Sphinx2027h1, entry 400,789,253
    SHA-256 1f39207265a73bd417e0ce54f49b1faf9cfabf204e6089921bbf0d534a9e8177
    Public key SHA-256 b571d375f498517fd6a233fd19e1241621b533062f67eb27ca087a3d08c687d6
    PhishDestroy
    Addresses
    104.21.45.97 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.212.221 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.45.97, 172.67.212.221): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    merit-king-dogru10.sbs
    Registered
    2026-07-10 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 11:05 UTC

    Suggest a correction

  27. nykebilvotkfcf.top US · AS13335 · Cloudflare, Inc.2 addressesMinistry of Internal Affairs and Communications (MIC)
    ListedCloudflareListed by JPCERT/CC as imitating 総務省MX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    nykebilvotkfcf.top
    First seen
    2026-11-08 10:41 UTC
    Listing
    JPCERT/CC confirmed it 2026-07-31 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 02:12 UTC
    Listed
    JPCERT/CC
    1. Confirmed by JPCERT/CC
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-11-08 09:39 UTC to 2027-02-06 09:39 UTC
    Logged 2026-11-08 10:38 UTC in Geomys Tuscolo2027h1, entry 526,821,482
    SHA-256 2481823b1786aea1c14b8a7b727e0989d906cdb2b3a59d7360db5637c1391200
    Public key SHA-256 1d92da615153c30bc35b29def453a184a5acf9bb3b1a5c47269b0c5e450861c6
    Brand
    Ministry of Internal Affairs and Communications (MIC)
    Addresses
    104.21.59.183 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.182.65 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.59.183, 172.67.182.65): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    nykebilvotkfcf.top
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 10:43 UTC

    Suggest a correction

  28. xhamsternft.com US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 4 y ago
    DetailsHide
    Hostname
    xhamsternft.com
    First seen
    2026-11-08 10:41 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-08 05:57 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-08 09:40 UTC to 2027-02-06 10:38 UTC
    Logged 2026-11-08 10:40 UTC in IPng Networks Gouda2027h1, entry 353,113,331
    SHA-256 94dac90b6f9cb0cf51db81e9141195d2e9bade2eb409c327b2d3c48c59a64750
    Public key SHA-256 301a2221b6bba83137a898f1158c606c22579eb7a1d436ad6fa54e53a58ec362
    PhishDestroy
    Addresses
    104.21.89.219 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.165.53 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.89.219, 172.67.165.53): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    xhamsternft.com
    Registered
    2022-09-16 · Name.com, Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 11:06 UTC

    Suggest a correction

  29. apps.raptool.ai US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareUnder raptool.ai, listed by MetaMaskMX presentSPF -allDMARC policy noneRegistered 6 mo ago
    DetailsHide
    Hostname
    apps.raptool.ai
    First seen
    2026-11-08 10:36 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 05:58 UTC
    Listed
    MetaMask, listing raptool.ai and the names under it
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-11-08 09:33 UTC to 2027-02-06 09:33 UTC
    Logged 2026-11-08 10:32 UTC in IPng Networks Halloumi2027h1, entry 410,344,934
    SHA-256 3d06c51ca2a66bb68c16ba76900d15ee544bf5bf379a47518dc49997f4f9b699
    Public key SHA-256 4ed67607cf851720c2490b6f7c0203c8bfc52406ee5d18acb9b15d2aac69cf0f
    Addresses
    104.21.51.132 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.180.159 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.51.132, 172.67.180.159): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    raptool.ai
    Registered
    2026-05-09 · Cloudflare, Inc
    MX
    Receives mail at mail.raptool.ai
    SPF
    SPF record with -all: other senders fail
    DMARC
    DMARC policy p=none: reports only
    Checked
    2026-11-08 07:32 UTC

    Suggest a correction

  30. arc-gc-ca.com US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 8 mo ago
    DetailsHide
    Hostname
    arc-gc-ca.com
    First seen
    2026-11-08 10:36 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-08 05:57 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-11-08 09:35 UTC to 2027-02-06 09:35 UTC
    Logged 2026-11-08 10:33 UTC in Google ParcelYard2027h1, entry 675,958,089
    SHA-256 cf3976308d03f36bad60ab37d30221270a6eb92baefc857e78d92fd96b9bcdb9
    Public key SHA-256 d66c546efeacd780992408e8352413256286ac5c182f04d3f517d42adb3b388c
    PhishDestroy
    Addresses
    104.21.16.137 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.212.195 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.16.137, 172.67.212.195): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    arc-gc-ca.com
    Registered
    2026-03-17 · Atak Domain Bilgi Teknolojileri A.S.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 11:06 UTC

    Suggest a correction

  31. freefireapk.pro US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 21 mo ago
    DetailsHide
    Hostname
    freefireapk.pro
    First seen
    2026-11-08 10:36 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-08 05:57 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-11-08 09:35 UTC to 2027-02-06 09:35 UTC
    Logged 2026-11-08 10:34 UTC in Let's Encrypt Willow2027h1, entry 1,001,617,579
    SHA-256 74313b6d96e5916e12ee4486561a5999c87204cfdcd0c4f331465558e22d2401
    Public key SHA-256 21a99856cf549908766a0ca3a646f7206aa2ee58643ec2df2cfaaa823b0120b5
    PhishDestroy
    Addresses
    104.21.5.15 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.132.187 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.5.15, 172.67.132.187): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    freefireapk.pro
    Registered
    2025-02-05 · NameCheap, Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 10:38 UTC

    Suggest a correction

  32. kra45------at.ru US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    kra45------at.ru
    First seen
    2026-11-08 10:36 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-08 05:57 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-08 09:31 UTC to 2027-02-06 10:30 UTC
    Logged 2026-11-08 10:31 UTC in Let's Encrypt Willow2027h1, entry 1,001,579,352
    SHA-256 0fb62da1318e38f0d21dd920942d42e448c92b71854f11291a88e9da11a1a0c1
    Public key SHA-256 829e5f5e669d38f2903eb50d280455c1358b9093ca50a0d9e917c9674405e854
    PhishDestroy
    Addresses
    104.21.5.216 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.133.223 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.5.216, 172.67.133.223): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    kra45------at.ru
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 10:38 UTC

    Suggest a correction

  33. swiftcasino-ca.com US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 11 mo ago
    DetailsHide
    Hostname
    swiftcasino-ca.com
    First seen
    2026-11-08 10:36 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-08 05:57 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-11-08 09:36 UTC to 2027-02-06 09:36 UTC
    Logged 2026-11-08 10:34 UTC in Google PlumbersArms2027h1, entry 676,277,697
    SHA-256 6c82542d6fb35d209ca011fe506832611b133ea0afd2464c846e526135f7f3e3
    Public key SHA-256 d19af5c4eaf888fff6e7437c29cd3c19fd2669bec94e952bdb4fc6e5b67a8f09
    PhishDestroy
    Addresses
    104.21.6.131 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.154.220 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.6.131, 172.67.154.220): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    swiftcasino-ca.com
    Registered
    2025-12-09 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 11:06 UTC

    Suggest a correction

  34. ultr-wave.site US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    ultr-wave.site
    First seen
    2026-11-08 10:36 UTC
    Listing
    CERT Polska listed it 2026-08-14 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 09:32 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-11-08 09:34 UTC to 2027-02-06 09:34 UTC
    Logged 2026-11-08 10:32 UTC in DigiCert Sphinx2027h1, entry 400,767,131
    SHA-256 0292e09649cd60db708e7cf6d474d1a1a8d956464161efab7d4d6df348625a12
    Public key SHA-256 c328bee2af2025f8c37174729c8e30c6e65774f04cfe1eebfcba7c5c4e181f54
    Addresses
    104.21.15.231 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.208.112 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.15.231, 172.67.208.112): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    ultr-wave.site
    Registered
    2026-05-15 · NameCheap, Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 11:05 UTC

    Suggest a correction

  35. zyijws.asia US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by NPA 165 (information services)MX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    zyijws.asia
    First seen
    2026-11-08 10:36 UTC
    Listing
    NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 01:35 UTC
    Listed
    NPA 165
    1. Observed in the NPA 165 feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-08 09:34 UTC to 2027-02-06 10:31 UTC
    Logged 2026-11-08 10:34 UTC in DigiCert Wyvern2027h1, entry 452,967,661
    SHA-256 f09f6c9af702df09abc7e961ed78dea8292e3278ed0e88f38a0ecb775dca6746
    Public key SHA-256 adc99d37daac50c84b1f56afe69f929376ef128097f208746251b0b4903fb6f3
    Addresses
    104.21.28.39 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.144.16 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.28.39, 172.67.144.16): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    zyijws.asia
    Registered
    2026-07-13 · Alibaba Cloud Computing Ltd. d/b/a HiChina (www.net.cn)
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 11:05 UTC

    Suggest a correction

  36. aktywa24.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    aktywa24.com
    First seen
    2026-11-08 10:31 UTC
    Listing
    CERT Polska listed it 2026-05-18 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 09:32 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-08 09:28 UTC to 2027-02-06 09:27 UTC
    Logged 2026-11-08 10:26 UTC in Google ParcelYard2027h1, entry 675,843,172
    SHA-256 a200f5a9128f569a4140d3bab3a6ccff9be636d52a1f60361a75ce02cc5d041b
    Public key SHA-256 0b274dcbe16cad9d4fe366a91264ef7b506e96192c43459b5519c65c42c40217
    Addresses
    104.21.0.175 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.128.39 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.0.175, 172.67.128.39): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    aktywa24.com
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 10:33 UTC

    Suggest a correction

  37. carprimp.info US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX presentSPF ~allDMARC policy noneRegistered 8 mo ago
    DetailsHide
    Hostname
    carprimp.info
    First seen
    2026-11-08 10:31 UTC
    Listing
    CERT Polska listed it 2026-07-12 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 09:32 UTC
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-08 05:57 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-11-08 09:28 UTC to 2027-02-06 09:28 UTC
    Logged 2026-11-08 10:26 UTC in IPng Networks Gouda2027h1, entry 353,002,389
    SHA-256 6895282d925d6c6ef7188edee6852f215f193310a6c21fd64b448a516e8000b3
    Public key SHA-256 ed3c58345b45cde684d270d53b1aa19c2ec728f05badf1c3422f89d4d8a973f2
    Addresses
    104.21.26.157 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.137.35 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.26.157, 172.67.137.35): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    carprimp.info
    Registered
    2026-03-16 · NameSilo, LLC
    MX
    Receives mail at pongal-smtp1.carprimp.info
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    DMARC policy p=none: reports only
    Checked
    2026-11-08 11:05 UTC

    Suggest a correction

  38. caygyj.asia US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by NPA 165 (information services)MX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    caygyj.asia
    First seen
    2026-11-08 10:31 UTC
    Listing
    NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 01:35 UTC
    Listed
    NPA 165
    1. Observed in the NPA 165 feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-08 09:26 UTC to 2027-02-06 10:25 UTC
    Logged 2026-11-08 10:26 UTC in Geomys Tuscolo2027h1, entry 526,699,603
    SHA-256 7be1f78b7597eeaddaaea1626ac4b01e828766a13c91a08236ba4da1b29f8bd4
    Public key SHA-256 76ea011d7d5f549a19361f35754bafb77bfc6302c761e3abc647213f6475739e
    Addresses
    104.21.31.254 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.181.226 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.31.254, 172.67.181.226): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    caygyj.asia
    Registered
    2026-07-13 · Alibaba Cloud Computing Ltd. d/b/a HiChina (www.net.cn)
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 11:05 UTC

    Suggest a correction

  39. chatwootecho.love-u.xyz US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareUnder love-u.xyz, listed by MetaMaskMX absentSPF missingDMARC missingRegistered 24 d ago
    DetailsHide
    Hostname
    chatwootecho.love-u.xyz
    First seen
    2026-11-08 10:31 UTC
    Listing
    MetaMask: first observed in the feed 2026-11-06 · still listed at the last successful feed check 2026-11-08 05:58 UTC
    Listed
    MetaMask, listing love-u.xyz and the names under it
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR2 · precertificate
    Valid 2026-11-08 09:30 UTC to 2027-02-06 09:30 UTC
    Logged 2026-11-08 10:29 UTC in Let's Encrypt Sycamore2027h1, entry 1,045,054,947
    SHA-256 8c29deade0488f9bb9315bc6f90a5e908069fe018cac12b0056ec40dc9df3887
    Public key SHA-256 6ab537180af3cec7f7374ba33adb743220cd7633d67e4a557f4f70ba3bb7f73e
    Addresses
    104.21.53.215 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.218.219 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.53.215, 172.67.218.219): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    love-u.xyz
    Registered
    2026-10-15 · GoDaddy.com, LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 11:05 UTC

    Suggest a correction

  40. chcecho.love-u.xyz US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareUnder love-u.xyz, listed by MetaMaskMX absentSPF missingDMARC missingRegistered 24 d ago
    DetailsHide
    Hostname
    chcecho.love-u.xyz
    First seen
    2026-11-08 10:31 UTC
    Listing
    MetaMask: first observed in the feed 2026-11-06 · still listed at the last successful feed check 2026-11-08 05:58 UTC
    Listed
    MetaMask, listing love-u.xyz and the names under it
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR2 · precertificate
    Valid 2026-11-08 09:31 UTC to 2027-02-06 09:31 UTC
    Logged 2026-11-08 10:30 UTC in Geomys Tuscolo2027h1, entry 526,743,886
    SHA-256 283982ac4fab22839be57164c1241f461d57ed6237e1757e44f28f2d702e0885
    Public key SHA-256 ff5439888290e689d02581bc2319485c938b0ec7acb1ede5a177eba23a802986
    Addresses
    104.21.53.215 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.218.219 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.53.215, 172.67.218.219): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    love-u.xyz
    Registered
    2026-10-15 · GoDaddy.com, LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 11:05 UTC

    Suggest a correction

  41. fraudgpts.com US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    fraudgpts.com
    First seen
    2026-11-08 10:31 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-08 05:57 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-08 09:28 UTC to 2027-02-06 09:28 UTC
    Logged 2026-11-08 10:26 UTC in Google PlumbersArms2027h1, entry 676,157,656
    SHA-256 7ff151c13eb73246877a52d42703b8d4d780a9a5e6a15a8055e604a67029644f
    Public key SHA-256 919d9d2d3192aba91be0da9f8d816c82a974bcc49a4d03481952fd6e01ee2ded
    PhishDestroy
    Addresses
    104.21.34.195 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.164.53 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.34.195, 172.67.164.53): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    fraudgpts.com
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 10:33 UTC

    Suggest a correction

  42. gammonef.com US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX presentSPF missingDMARC missing
    DetailsHide
    Hostname
    gammonef.com
    First seen
    2026-11-08 10:31 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-08 05:57 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR2
    Valid 2026-11-08 09:30 UTC to 2027-02-06 09:30 UTC
    Logged 2026-11-08 10:29 UTC in Google PlumbersArms2027h1, entry 676,198,387
    SHA-256 355469106ee027e2793269f7b2d0384bcf2d2f68f7fda3537183a2263b6be990
    Public key SHA-256 7a91902111ac06e0b877bc823033df6bca9e052ddfb9b96cbf3b372f46e9f8fd
    PhishDestroy
    Addresses
    104.21.83.192 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.180.222 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.83.192, 172.67.180.222): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    gammonef.com
    MX
    Receives mail at _dc-mx.d031fc697637.gammonef.com
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 10:33 UTC

    Suggest a correction

  43. gdvujw.asia US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by NPA 165 (information services)MX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    gdvujw.asia
    First seen
    2026-11-08 10:31 UTC
    Listing
    NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 01:35 UTC
    Listed
    NPA 165
    1. Observed in the NPA 165 feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-08 09:29 UTC to 2027-02-06 10:28 UTC
    Logged 2026-11-08 10:29 UTC in Google PlumbersArms2027h1, entry 676,206,955
    SHA-256 88e8639c0741d03056110a99acceace4540c2cd282956b23ee82c0da7275b3f6
    Public key SHA-256 fb823d6fe41dce7cba12c8ea375ee646a2ebc43bdaa5ec1634f36f72a48677cf
    Addresses
    104.21.24.129 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.218.237 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.24.129, 172.67.218.237): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    gdvujw.asia
    Registered
    2026-07-13 · Alibaba Cloud Computing Ltd. d/b/a HiChina (www.net.cn)
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 11:06 UTC

    Suggest a correction

  44. mbstr.xyz US · AS13335 · Cloudflare, Inc.
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 59 d ago
    DetailsHide
    Hostname
    mbstr.xyz
    First seen
    2026-11-08 10:31 UTC
    Listing
    MetaMask: first observed in the feed 2026-11-07 · still listed at the last successful feed check 2026-11-08 05:58 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WR1 · precertificate
    Valid 2026-11-08 09:30 UTC to 2027-02-06 10:27 UTC
    Logged 2026-11-08 10:30 UTC in DigiCert Wyvern2027h1, entry 452,929,868
    SHA-256 ddc584a2cae7e74ed8b10270f582d205fedd5a2faafb98abf3cc53fe92910151
    Public key SHA-256 c103dac2d56c5dbcb210002fb0a53e829853ea3be985cf99c906712598dfe948
    Addresses
    185.158.133.1 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (185.158.133.1): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    mbstr.xyz
    Registered
    2026-09-10 · Name.com, Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 11:06 UTC

    Suggest a correction

  45. v-pl-402918.eu.cc US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT Polska
    DetailsHide
    Hostname
    v-pl-402918.eu.cc
    First seen
    2026-11-08 10:31 UTC
    Listing
    CERT Polska listed it 2026-09-10 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 09:32 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-08 09:27 UTC to 2027-02-06 10:25 UTC
    Logged 2026-11-08 10:27 UTC in Geomys Tuscolo2027h1, entry 526,704,498
    SHA-256 0c05834723e25ca6c6a58ea5c74e53583d18db8ffea2beff361344be9a6e814f
    Public key SHA-256 0ca5e939a6019003e482ab0f0f83e91741e2df973e8bef4c65226c545ad3ad60
    Addresses
    104.21.5.192 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.154.173 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.5.192, 172.67.154.173): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.

    Suggest a correction

  46. bright-lexicon.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 12 mo ago
    DetailsHide
    Hostname
    bright-lexicon.com
    First seen
    2026-11-08 10:26 UTC
    Listing
    CERT Polska listed it 2026-06-11 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 09:32 UTC
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-08 05:57 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-08 09:23 UTC to 2027-02-06 10:22 UTC
    Logged 2026-11-08 10:23 UTC in Let's Encrypt Willow2027h1, entry 1,001,467,061
    SHA-256 3f3f9f529cdc1225c1e347308f204303b39acf562af31da8a3b135feecc167a7
    Public key SHA-256 036f4c156f718709856b3a20892526476ff4566db272a5c1635e74ec6b3f4ae0
    Addresses
    104.21.28.126 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.146.46 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.28.126, 172.67.146.46): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    bright-lexicon.com
    Registered
    2025-11-19 · Dynadot Inc
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 10:28 UTC

    Suggest a correction

  47. ctkvhs.asia US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by NPA 165 (information services)MX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    ctkvhs.asia
    First seen
    2026-11-08 10:26 UTC
    Listing
    NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 01:35 UTC
    Listed
    NPA 165
    1. Observed in the NPA 165 feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1
    Valid 2026-09-10 05:20 UTC to 2026-12-09 06:18 UTC
    Logged 2026-11-08 10:24 UTC in DigiCert Wyvern2026h2, entry 2,211,966,602
    SHA-256 3d0a5325681303b6f25a8865b7ad984cf6ba51b3d8dc0e24e440221fd5389796
    Public key SHA-256 4ba5c586a683136aa3bbb9d96736bb7221ab1d8b51cb004b476c4e1b33d2c2e6
    Addresses
    104.21.73.63 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.188.229 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.73.63, 172.67.188.229): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    ctkvhs.asia
    Registered
    2026-07-13 · Alibaba Cloud Computing Ltd. d/b/a HiChina (www.net.cn)
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 11:06 UTC

    Suggest a correction

  48. dealpicks.de US · AS13335 · Cloudflare, Inc.
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    dealpicks.de
    First seen
    2026-11-08 10:26 UTC
    Listing
    CERT Polska listed it 2026-09-15 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 09:32 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-11-08 09:23 UTC to 2027-02-06 09:23 UTC
    Logged 2026-11-08 10:22 UTC in DigiCert Wyvern2027h1, entry 452,844,856
    SHA-256 496a39cb834fd5f322f9ff1db042557df72f6bf25a15c7dd4100bc8d807f4c96
    Public key SHA-256 4f0650b889735b5b0df6fe04cf42450433531bc8395a1254863f95dc221fb4ad
    Addresses
    104.18.74.116 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.18.74.116): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    dealpicks.de
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 10:28 UTC

    Suggest a correction

  49. distribution-hyperbeat.org US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    distribution-hyperbeat.org
    First seen
    2026-11-08 10:26 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 05:58 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-08 09:26 UTC to 2027-02-06 09:26 UTC
    Logged 2026-11-08 10:24 UTC in Google ParcelYard2027h1, entry 675,816,992
    SHA-256 69fc5c11adb0b76f4e8d30f4a8cf9d43b59fc0456702902b35748536dca38337
    Public key SHA-256 401f56291ac795da8806e6d25c815d75895fa9c261b51c58c59bb6cfa1c87acf
    Addresses
    104.21.95.24 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.169.73 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.95.24, 172.67.169.73): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    distribution-hyperbeat.org
    Registered
    2026-05-15 · PDR Ltd. d/b/a PublicDomainRegistry.com
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 11:05 UTC

    Suggest a correction

  50. nanqq.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    nanqq.com
    First seen
    2026-11-08 10:26 UTC
    Listing
    CERT Polska listed it 2026-07-16 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 09:32 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-11-08 09:25 UTC to 2027-02-06 09:25 UTC
    Logged 2026-11-08 10:24 UTC in IPng Networks Halloumi2027h1, entry 410,257,365
    SHA-256 7df7b76bdf5e2cee7d45121d7277b565792916fe686a4d99dfd50a7fb8478926
    Public key SHA-256 e0262b79d0e4843b4c2b1e9dcaed9d6c39d020226cffc261f171f0ef480f43fa
    Addresses
    104.21.43.151 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.180.165 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.43.151, 172.67.180.165): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    nanqq.com
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 10:28 UTC

    Suggest a correction

  51. owlstoryweapon.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by USOMMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    owlstoryweapon.com
    First seen
    2026-11-08 10:26 UTC
    Listing
    USOM listed it 2026-05-18 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 10:05 UTC
    Listed
    USOM
    1. Listed by USOM
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-11-08 09:25 UTC to 2027-02-06 09:25 UTC
    Logged 2026-11-08 10:23 UTC in Google PlumbersArms2027h1, entry 676,111,690
    SHA-256 9b2f746f8712367af4478eef303a93cae957f47f4472c386bb22a0d556ce37fe
    Public key SHA-256 330e2aebc16d05e4eb8f50b7a779de081aff9609bf39b2221901dace320ad1c1
    Addresses
    104.21.40.246 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.188.203 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.40.246, 172.67.188.203): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    owlstoryweapon.com
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 10:28 UTC

    Suggest a correction

  52. panels-firelight.xyz US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    panels-firelight.xyz
    First seen
    2026-11-08 10:26 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 05:58 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-08 09:24 UTC to 2027-02-06 09:24 UTC
    Logged 2026-11-08 10:23 UTC in Google PlumbersArms2027h1, entry 676,103,633
    SHA-256 06dc3432bf7319467bf41ce4d6fc8581aee872708f81b206e0e8be2c9e7e8b83
    Public key SHA-256 5a8603683f748be043d734492456954a2a5b2d04171332ca3b4e61f47a26bdd6
    Addresses
    104.21.26.169 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.137.101 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.26.169, 172.67.137.101): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    panels-firelight.xyz
    Registered
    2026-05-15 · Dynadot Inc
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 11:06 UTC

    Suggest a correction

  53. soltoken.network US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    soltoken.network
    First seen
    2026-11-08 10:26 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 05:58 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-08 09:22 UTC to 2027-02-06 10:21 UTC
    Logged 2026-11-08 10:22 UTC in Google PlumbersArms2027h1, entry 676,091,939
    SHA-256 5bd740cacd195fe3e6ae5b98dfb3d008310b5f2fb4cfbdb2c6fd18cb4407402e
    Public key SHA-256 8bbbf3e76ddbf4acc11774635867d4f897853a8a6764c7b035f5bc4f38aaec1c
    Addresses
    104.21.82.222 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.164.72 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.82.222, 172.67.164.72): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    soltoken.network
    Registered
    2026-07-13 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 11:06 UTC

    Suggest a correction

  54. v-usluga-392018.eu.cc US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT Polska
    DetailsHide
    Hostname
    v-usluga-392018.eu.cc
    First seen
    2026-11-08 10:26 UTC
    Listing
    CERT Polska listed it 2026-09-10 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 09:32 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-11-08 09:26 UTC to 2027-02-06 09:26 UTC
    Logged 2026-11-08 10:24 UTC in Let's Encrypt Willow2027h1, entry 1,001,478,938
    SHA-256 b0af5d2352ecce518c77cf8fc2e5f626d38d06f0f8282440b0f4f6aaa0efd5e3
    Public key SHA-256 a58ec8ee092420fab9495b6552dea44f775f1d63940833b99dc1aab0734e2588
    Addresses
    104.21.94.191 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.139.143 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.94.191, 172.67.139.143): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.

    Suggest a correction

  55. wikyzp.asia US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by NPA 165 (information services)MX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    wikyzp.asia
    First seen
    2026-11-08 10:26 UTC
    Listing
    NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 01:35 UTC
    Listed
    NPA 165
    1. Observed in the NPA 165 feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-08 09:24 UTC to 2027-02-06 10:23 UTC
    Logged 2026-11-08 10:24 UTC in IPng Networks Gouda2027h1, entry 352,980,567
    SHA-256 4cf34bb787b74f1ff838400a2976b117a6bad503a6e9308b23188b89bb47433b
    Public key SHA-256 1ab95dc0bb801d0a05894b4ca4c8e831a95e439c0f24f97ee320eb4a5725cb77
    Addresses
    104.21.81.7 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.136.150 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.81.7, 172.67.136.150): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    wikyzp.asia
    Registered
    2026-07-13 · Alibaba Cloud Computing Ltd. d/b/a HiChina (www.net.cn)
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 11:06 UTC

    Suggest a correction

  56. a.cupkit.app US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareUnder cupkit.app, reported by PhishDestroyMX presentSPF ~allDMARC missingRegistered 8 y ago
    DetailsHide
    Hostname
    a.cupkit.app
    First seen
    2026-11-08 10:21 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-08 05:57 UTC
    Reported
    PhishDestroy, listing cupkit.app and the names under it
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by Cloudflare TLS Issuing ECC CA 4
    Valid 2026-09-10 05:33 UTC to 2026-12-09 05:42 UTC
    Logged 2026-11-08 10:19 UTC in DigiCert Wyvern2026h2, entry 2,211,958,605
    SHA-256 4162a934449a769774021396842c93d10a0b5c658c02a4dcdd4bc056aac5bc34
    Public key SHA-256 2854a7d882726516b368b5b90f5e5328045242dac638f7765cf878b1b054a08b
    PhishDestroy
    Addresses
    104.20.29.105 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.66.171.25 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.20.29.105, 172.66.171.25): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    cupkit.app
    Registered
    2018-06-07 · Namecheap Inc.
    MX
    Receives mail at eforward1.registrar-servers.com, eforward2.registrar-servers.com, eforward3.registrar-servers.com
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 08:11 UTC

    Suggest a correction

  57. aave.com.aaveoriginal.co.com US · AS13335 · Cloudflare, Inc.4 addressesAave
    ListedCloudflareUnder aaveoriginal.co.com, listed by MetaMask
    DetailsHide
    Hostname
    aave.com.aaveoriginal.co.com
    First seen
    2026-11-08 10:21 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 05:58 UTC
    Listed
    MetaMask, listing aaveoriginal.co.com and the names under it
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by Cloudflare TLS Issuing ECC CA 4 · precertificate
    Valid 2026-11-08 10:07 UTC to 2027-02-06 10:15 UTC
    Logged 2026-11-08 10:17 UTC in DigiCert Wyvern2027h1, entry 452,792,471
    SHA-256 1bc714069b5750476a3a9fd4a6ba0f5bc4a02b762181da87d3002ef192d2bc1d
    Public key SHA-256 7fe72d651ff8a30aa761332eb5ff730bec542d8543a850086c46bfc4cef317e7
    Brand
    Aave
    Addresses
    104.21.2.175 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.129.130 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3032::ac43:8182
    2606:4700:3035::6815:2af
    Cloudflare
    Cloudflare (104.21.2.175, 172.67.129.130): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.

    Suggest a correction

  58. cleanr.work US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    cleanr.work
    First seen
    2026-11-08 10:21 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 05:58 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-08 09:18 UTC to 2027-02-06 10:17 UTC
    Logged 2026-11-08 10:18 UTC in Geomys Tuscolo2027h1, entry 526,613,165
    SHA-256 d020b5cace2ff9afca612651349562bd818150fc4c30a20f77d30290c4af2367
    Public key SHA-256 42964b420fc5e46a47bdf9e7976e97d436fa6c0fad11098ccd1273bd21f31167
    Addresses
    104.21.90.146 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.157.195 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.90.146, 172.67.157.195): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    cleanr.work
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 10:23 UTC

    Suggest a correction

  59. footshop-pl.shop US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    footshop-pl.shop
    First seen
    2026-11-08 10:21 UTC
    Listing
    CERT Polska listed it 2026-06-02 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 09:32 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-08 09:21 UTC to 2027-02-06 09:21 UTC
    Logged 2026-11-08 10:20 UTC in Google PlumbersArms2027h1, entry 676,059,145
    SHA-256 b0ec8b6bd3f441f4868f96816877c9ad41fa7a20c29744482b6a8f2cfd8fe14a
    Public key SHA-256 d21fc810ebad8b6a76dfaf46e2eb086743f0826431b50fb373adc6ac6d45a000
    Addresses
    104.21.31.151 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.177.206 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.31.151, 172.67.177.206): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    footshop-pl.shop
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 10:23 UTC

    Suggest a correction

  60. testminesgamb23234.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    testminesgamb23234.com
    First seen
    2026-11-08 10:21 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 05:58 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-08 09:17 UTC to 2027-02-06 10:14 UTC
    Logged 2026-11-08 10:17 UTC in Google ParcelYard2027h1, entry 675,706,377
    SHA-256 090366cebd4aa10acdd5e038cf3fa4c1058c301c3bdd489a0f0d007b80615757
    Public key SHA-256 e9dc77128a19e1ea1960f3deadcada0951739db9da2d47ef947579c6dd356f66
    Addresses
    104.21.57.103 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.162.242 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.57.103, 172.67.162.242): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    testminesgamb23234.com
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 10:23 UTC

    Suggest a correction

  61. verification-swiss.cfd US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 17 d ago
    DetailsHide
    Hostname
    verification-swiss.cfd
    First seen
    2026-11-08 10:21 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 05:58 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by Cloudflare TLS Issuing ECC CA 4 · precertificate
    Valid 2026-11-08 10:09 UTC to 2027-02-06 10:17 UTC
    Logged 2026-11-08 10:19 UTC in DigiCert Wyvern2027h1, entry 452,819,015
    SHA-256 7ce8ccc8056b9a85f439a2811dc10d34b871ee52ad36fcb583eabd7335621841
    Public key SHA-256 c2b45249c7c6805726e4e6bc1a21c323736214e2c841e2c97282e11029074784
    Addresses
    104.21.76.45 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.187.173 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.76.45, 172.67.187.173): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    verification-swiss.cfd
    Registered
    2026-10-22 · Spaceship, Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 11:06 UTC

    Suggest a correction

  62. www.disperstockspip.net US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareUnder disperstockspip.net, reported by PhishDestroyMX presentSPF ~allDMARC missingRegistered 10 mo ago
    DetailsHide
    Hostname
    www.disperstockspip.net
    First seen
    2026-11-08 10:21 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-08 05:57 UTC
    Reported
    PhishDestroy, listing disperstockspip.net and the names under it
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by ZeroSSL RSA DV SSL CA 2 · precertificate
    Valid 2026-11-08 00:00 UTC to 2027-02-06 23:59 UTC
    Logged 2026-11-08 10:20 UTC in DigiCert Wyvern2027h1, entry 452,820,633
    SHA-256 758449d929de7b50516f74e5ef98bd4a0c08052127ef42d81649b297444482b4
    Public key SHA-256 6c4895aa231f1fca751ded287de67122e5f1589ee24478db0994b9739f3cb722
    PhishDestroy
    Addresses
    104.21.27.68 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.169.8 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.27.68, 172.67.169.8): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    disperstockspip.net
    Registered
    2026-01-05 · Tucows Domains Inc.
    MX
    Receives mail at _dc-mx.9308c1313120.disperstockspip.net
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 08:53 UTC

    Suggest a correction

  63. zcat.hub-x.live US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareUnder hub-x.live, listed by MetaMaskMX absentSPF missingDMARC missingRegistered 2 mo ago
    DetailsHide
    Hostname
    zcat.hub-x.live
    First seen
    2026-11-08 10:21 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 05:58 UTC
    Listed
    MetaMask, listing hub-x.live and the names under it
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-08 09:21 UTC to 2027-02-06 09:21 UTC
    Logged 2026-11-08 10:19 UTC in Google ParcelYard2027h1, entry 675,741,122
    SHA-256 6d447d1d586ae9bf4bf348a6780b79ba1e4629833d7d225bcb2fc8a3c6faaa6f
    Public key SHA-256 cf345c87fde78cd536ac816d228f27d9beaae5791291e2e55fc64f8c2da0f0e7
    Addresses
    104.21.50.178 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.164.185 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.50.178, 172.67.164.185): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    hub-x.live
    Registered
    2026-09-09 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-07 13:25 UTC

    Suggest a correction

  64. aave.fr.aave-fr.co.com US · AS13335 · Cloudflare, Inc.4 addressesAave
    ListedCloudflareUnder aave-fr.co.com, listed by MetaMask
    DetailsHide
    Hostname
    aave.fr.aave-fr.co.com
    First seen
    2026-11-08 10:16 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 05:58 UTC
    Listed
    MetaMask, listing aave-fr.co.com and the names under it
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-08 09:14 UTC to 2027-02-06 10:14 UTC
    Logged 2026-11-08 10:14 UTC in Google PlumbersArms2027h1, entry 675,984,022
    SHA-256 ab49cb18955db0f2edcd1328f1c53059bef61ac99008d8db553a2a577a7a7357
    Public key SHA-256 4126e14aa76474e0145af7e963e05d81e09a71cee3bd48ed8b11fc35ce036323
    Brand
    Aave
    Addresses
    104.21.2.175 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.129.130 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3032::ac43:8182
    2606:4700:3035::6815:2af
    Cloudflare
    Cloudflare (104.21.2.175, 172.67.129.130): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.

    Suggest a correction

  65. cryptogenisussoftware.pro US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 59 d ago
    DetailsHide
    Hostname
    cryptogenisussoftware.pro
    First seen
    2026-11-08 10:16 UTC
    Listing
    CERT Polska listed it 2026-09-17 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 09:32 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1
    Valid 2026-09-10 08:19 UTC to 2026-12-09 09:19 UTC
    Logged 2026-11-08 10:13 UTC in Let's Encrypt Willow2026h2, entry 1,029,440,438
    SHA-256 0e00d356fd38a935488deb7cf0e8ec639c1a07714ae036d83c01c4a8eb93d660
    Public key SHA-256 9326fbfafe03fe5f50a78893810419122d7c25366ed7317dd9a80d02de45b832
    Addresses
    104.21.65.77 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.189.100 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.65.77, 172.67.189.100): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    cryptogenisussoftware.pro
    Registered
    2026-09-10 · Spaceship, Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 11:06 UTC

    Suggest a correction

  66. download.btcpolicyinstitute.org US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareUnder btcpolicyinstitute.org, listed by MetaMaskMX absentSPF missingDMARC missingRegistered 59 d ago
    DetailsHide
    Hostname
    download.btcpolicyinstitute.org
    First seen
    2026-11-08 10:16 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 05:58 UTC
    Listed
    MetaMask, listing btcpolicyinstitute.org and the names under it
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-08 09:14 UTC to 2027-02-06 10:14 UTC
    Logged 2026-11-08 10:14 UTC in Google PlumbersArms2027h1, entry 675,981,201
    SHA-256 1d7f79d21e2ee7e623ac9324f73569ba9c48264edbf473028aea3f354f78913c
    Public key SHA-256 adc1cf6ef9eec504054c1d5eae2219479f5e010d28daf0b0975e2b26d9901c69
    Addresses
    104.21.54.24 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.222.224 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.54.24, 172.67.222.224): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    btcpolicyinstitute.org
    Registered
    2026-09-10 · Atak Domain Bilgi Teknolojileri A._.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 06:34 UTC

    Suggest a correction

  67. lingzheng02.site US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by NPA 165 (e-commerce)MX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    lingzheng02.site
    First seen
    2026-11-08 10:16 UTC
    Listing
    NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 01:35 UTC
    Listed
    NPA 165
    1. Observed in the NPA 165 feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-08 09:16 UTC to 2027-02-06 09:16 UTC
    Logged 2026-11-08 10:14 UTC in Google PlumbersArms2027h1, entry 675,986,032
    SHA-256 28a5743de7f1b17774779ed3efe176d9551f16c9698ea6a7fe4ec9e36f386bef
    Public key SHA-256 93ce3a661ac599b9d08ba69769a9d80f087d441e8e282181b109228e338bf841
    Addresses
    104.21.16.225 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.216.69 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.16.225, 172.67.216.69): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    lingzheng02.site
    Registered
    2026-05-12 · GoDaddy.com, LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 11:05 UTC

    Suggest a correction

  68. porcelana24official.com US · AS13335 · Cloudflare, Inc.
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    porcelana24official.com
    First seen
    2026-11-08 10:16 UTC
    Listing
    CERT Polska listed it 2026-06-01 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 09:32 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-08 09:15 UTC to 2027-02-06 10:14 UTC
    Logged 2026-11-08 10:15 UTC in Let's Encrypt Sycamore2027h1, entry 1,044,675,147
    SHA-256 c50646f7dc37ed37d6682fd44e95ea91bbe96da2f950c5c7fa88e6f0d5023e17
    Public key SHA-256 f75bba049146e5958fc4f775ed40b6ba3ba059061342d87c8731bfa5cb188e2b
    Addresses
    104.18.26.78 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.18.26.78): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    porcelana24official.com
    Registered
    2026-05-14 · West263 International Limited
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-07 19:05 UTC

    Suggest a correction

  69. raffrintar.store US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 59 d ago
    DetailsHide
    Hostname
    raffrintar.store
    First seen
    2026-11-08 10:16 UTC
    Listing
    CERT Polska listed it 2026-09-11 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 09:32 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-08 09:10 UTC to 2027-02-06 10:09 UTC
    Logged 2026-11-08 10:10 UTC in Let's Encrypt Willow2027h1, entry 1,001,277,382
    SHA-256 6cac46e1488a863ec6bc7e9d22279821399d41a7e8631bd1fc048d4bc10477e9
    Public key SHA-256 bc93b68ae03d41aef79024a7d1b67251016557c9f0b216e837e700f0f63117c8
    Addresses
    104.21.87.206 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.146.59 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.87.206, 172.67.146.59): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    raffrintar.store
    Registered
    2026-09-10 · NameCheap, Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 11:06 UTC

    Suggest a correction

  70. rain-bet.me.uk US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 12 mo ago
    DetailsHide
    Hostname
    rain-bet.me.uk
    First seen
    2026-11-08 10:16 UTC
    Listing
    MetaMask: first observed in the feed 2026-11-05 · still listed at the last successful feed check 2026-11-08 05:58 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-08 09:13 UTC to 2027-02-06 10:12 UTC
    Logged 2026-11-08 10:13 UTC in DigiCert Wyvern2027h1, entry 452,746,338
    SHA-256 21d5eccdc176d52285ea402d84e01b8398505c3ee290257974b7b9971bc61f8f
    Public key SHA-256 e6876adfdab37bfe7e763fc1386c4142d01db4478def651e9162ae12873993fa
    Addresses
    104.21.56.7 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.175.33 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.56.7, 172.67.175.33): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    rain-bet.me.uk
    Registered
    2025-11-19 · Hosting Concepts B.V.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 11:05 UTC

    Suggest a correction

  71. www-cmc.app US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 12 mo ago
    DetailsHide
    Hostname
    www-cmc.app
    First seen
    2026-11-08 10:16 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-08 05:57 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1
    Valid 2026-11-08 09:11 UTC to 2027-02-06 10:11 UTC
    Logged 2026-11-08 10:14 UTC in DigiCert Wyvern2027h1, entry 452,760,729
    SHA-256 233b40dc72988c1838112a729e146a0c887c8fe141a980c9897ee20630dc1e7e
    Public key SHA-256 94277120c29070d499cc82291328122c5cfabdbaba808cbd1b0b6b0ada6552b2
    PhishDestroy
    Addresses
    104.21.10.65 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.144.184 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.10.65, 172.67.144.184): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    www-cmc.app
    Registered
    2025-11-18 · CloudFlare, Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 11:05 UTC

    Suggest a correction

  72. akita-network.xyz US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    akita-network.xyz
    First seen
    2026-11-08 10:11 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-08 05:57 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-11-08 09:06 UTC to 2027-02-06 09:06 UTC
    Logged 2026-11-08 10:05 UTC in Google ParcelYard2027h1, entry 675,536,845
    SHA-256 b6eea44a9dab206a05f10c317e2fca59875ee226d7f5c60baa6fc783d5685a33
    Public key SHA-256 950eea57556d1ed34844ae44e0a3169e83f34df9a61324efe9f656b5f9a0239d
    PhishDestroy
    Addresses
    104.21.56.167 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.187.46 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.56.167, 172.67.187.46): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    akita-network.xyz
    Registered
    2026-05-15 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 11:06 UTC

    Suggest a correction

  73. dnsstockvip.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by NPA 165 (finance and insurance)MX presentSPF ~allDMARC missing
    DetailsHide
    Hostname
    dnsstockvip.com
    First seen
    2026-11-08 10:11 UTC
    Listing
    NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 01:35 UTC
    Listed
    NPA 165
    1. Observed in the NPA 165 feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-08 09:08 UTC to 2027-02-06 10:06 UTC
    Logged 2026-11-08 10:08 UTC in Google PlumbersArms2027h1, entry 675,898,252
    SHA-256 18431bbeb0e5c54de116bbfb869c45e1edff711f9abd7f249fbc17a7ac268148
    Public key SHA-256 85407991c271aaa674d2f7ef7be6c489acb41f3732b04ebc391f773f970cd816
    Addresses
    104.21.82.126 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.157.233 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.82.126, 172.67.157.233): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    dnsstockvip.com
    MX
    Receives mail at eforward1.registrar-servers.com, eforward2.registrar-servers.com, eforward3.registrar-servers.com
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 10:12 UTC

    Suggest a correction

  74. fbcja.work US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by NPA 165 (information services)MX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    fbcja.work
    First seen
    2026-11-08 10:11 UTC
    Listing
    NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 01:35 UTC
    Listed
    NPA 165
    1. Observed in the NPA 165 feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-11-08 09:08 UTC to 2027-02-06 09:08 UTC
    Logged 2026-11-08 10:07 UTC in Google PlumbersArms2027h1, entry 675,874,362
    SHA-256 8c8d6be6280e6f1e4143890b4cc4f5dc2ec8b5d2ee452c8cb8130bf324bedb3b
    Public key SHA-256 5f48d33abfc0a27124ea9cc20c7f4b2219a6104eab9e0beef0812b0c81bc2740
    Addresses
    104.21.90.180 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.203.92 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.90.180, 172.67.203.92): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    fbcja.work
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 10:12 UTC

    Suggest a correction

  75. monero-chan.info US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 12 mo ago
    DetailsHide
    Hostname
    monero-chan.info
    First seen
    2026-11-08 10:11 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-08 05:57 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-08 09:09 UTC to 2027-02-06 10:08 UTC
    Logged 2026-11-08 10:09 UTC in DigiCert Sphinx2027h1, entry 400,538,864
    SHA-256 adb1dfe5a4243e7b15d21fdf798e7348c30b4921ddabcb7b2fe40e83f3a23539
    Public key SHA-256 075893b318ff8467088dbab87d4cfa6bf5bf1a5938ac0a0ee05adc675e4b7a6c
    PhishDestroy
    Addresses
    104.21.90.113 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.200.98 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.90.113, 172.67.200.98): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    monero-chan.info
    Registered
    2025-11-15 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 11:06 UTC

    Suggest a correction

  76. order.glidz.com US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareUnder glidz.com, reported by PhishDestroyMX presentSPF ~allDMARC missing
    DetailsHide
    Hostname
    order.glidz.com
    First seen
    2026-11-08 10:11 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-08 05:57 UTC
    Reported
    PhishDestroy, listing glidz.com and the names under it
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WR1 · precertificate
    Valid 2026-11-08 09:10 UTC to 2027-02-06 10:09 UTC
    Logged 2026-11-08 10:10 UTC in DigiCert Wyvern2027h1, entry 452,709,617
    SHA-256 851888e4705035ddf5531171c4fc552ac2242a5c999c8d3452a68ac60519938a
    Public key SHA-256 82d406f2c0eb94ce30aa546f2feb56ebe84efdd092df0741f4fc93f5bea80200
    PhishDestroy
    Addresses
    104.18.22.186 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    104.18.23.186 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.18.22.186, 104.18.23.186): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    glidz.com
    MX
    Receives mail at mx01.lolipop.jp
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 10:12 UTC

    Suggest a correction

  77. pricechoice.de US · AS13335 · Cloudflare, Inc.
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    pricechoice.de
    First seen
    2026-11-08 10:11 UTC
    Listing
    CERT Polska listed it 2026-10-20 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 09:32 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-08 09:05 UTC to 2027-02-06 10:03 UTC
    Logged 2026-11-08 10:05 UTC in IPng Networks Gouda2027h1, entry 352,828,370
    SHA-256 736ea82b8fe24a94f5f291c2a71e53d659745760ad16c8595275d61324fe975a
    Public key SHA-256 090f0cd65b3ea48e90fbbbe823ba035e05e6a73e60ea9130cea3ae55b8b05873
    Addresses
    104.18.74.116 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.18.74.116): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    pricechoice.de
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 10:12 UTC

    Suggest a correction

  78. redkittencrew.top US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    redkittencrew.top
    First seen
    2026-11-08 10:11 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 05:58 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-11-08 09:11 UTC to 2027-02-06 09:11 UTC
    Logged 2026-11-08 10:10 UTC in Google ParcelYard2027h1, entry 675,607,532
    SHA-256 09515639425f79607721f3422282da088cb5e7cee97db833ae42ddb2036a3a06
    Public key SHA-256 08705ff5594d6dc44ae2a36a447d907e9238905507975a8e9c02d137796a6646
    Addresses
    104.21.71.244 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.172.101 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.71.244, 172.67.172.101): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    redkittencrew.top
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 10:12 UTC

    Suggest a correction

  79. www.thebergsignal-gpt.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareUnder thebergsignal-gpt.com, listed by CERT PolskaMX absentSPF missingDMARC missingRegistered 2 mo ago
    DetailsHide
    Hostname
    www.thebergsignal-gpt.com
    First seen
    2026-11-08 10:11 UTC
    Listing
    CERT Polska listed it 2026-09-28 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 09:32 UTC
    Listed
    CERT Polska, listing thebergsignal-gpt.com and the names under it
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-08 09:07 UTC to 2027-02-06 09:07 UTC
    Logged 2026-11-08 10:05 UTC in Google ParcelYard2027h1, entry 675,547,085
    SHA-256 37b65f6e475ce03d8931789739cc47054ee80ccec7fb91eb523f1031a9dac387
    Public key SHA-256 c655606e8a871cc36eea073542ba829b21df0a0d868b71f67389af92abc7b5ba
    Addresses
    104.21.70.7 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.217.127 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.70.7, 172.67.217.127): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    thebergsignal-gpt.com
    Registered
    2026-09-09 · NameCheap, Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-07 14:32 UTC

    Suggest a correction

  80. yg.naws.pp.ua US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroy
    DetailsHide
    Hostname
    yg.naws.pp.ua
    First seen
    2026-11-08 10:11 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-08 05:57 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-08 09:08 UTC to 2027-02-06 10:07 UTC
    Logged 2026-11-08 10:08 UTC in IPng Networks Gouda2027h1, entry 352,850,837
    SHA-256 70cec1ffb7d71756e494727733c8c59687f09ddb6d2bbffbc0f077554facc931
    Public key SHA-256 ca4e0e3a2ce305810c36a1f7c9b9d8f236dc2e28a4d6892e063f880263c9ec9d
    PhishDestroy
    Addresses
    104.21.16.45 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.166.28 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.16.45, 172.67.166.28): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.

    Suggest a correction

  81. aavefinance.cloud US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    aavefinance.cloud
    First seen
    2026-11-08 10:05 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 05:58 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-08 09:04 UTC to 2027-02-06 10:03 UTC
    Logged 2026-11-08 10:04 UTC in DigiCert Sphinx2027h1, entry 400,511,166
    SHA-256 8fb4db0eb1f03ff0770c2828042fe4780b6ad6b0272cbf17afe8fcd7d799175e
    Public key SHA-256 72627a62817cfcbb8e7d10a440c409450367256477a61d41efb665c0464e7bbb
    Addresses
    104.21.14.18 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.202.6 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.14.18, 172.67.202.6): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    aavefinance.cloud
    Registered
    2026-07-13 · Dynadot, LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 11:05 UTC

    Suggest a correction

  82. api.echo-ledgerly-engine-com.financecryptoworld.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareUnder financecryptoworld.com, listed by CERT PolskaMX presentSPF ~allDMARC missingRegistered 22 mo ago
    DetailsHide
    Hostname
    api.echo-ledgerly-engine-com.financecryptoworld.com
    First seen
    2026-11-08 10:05 UTC
    Listing
    CERT Polska listed it 2026-06-12 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 09:32 UTC
    Listed
    CERT Polska, listing financecryptoworld.com and the names under it
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-08 09:02 UTC to 2027-02-06 10:02 UTC
    Logged 2026-11-08 10:02 UTC in Google ParcelYard2027h1, entry 675,495,923
    SHA-256 29c48b9aac491bacaf5c8e27bf96fb82a0f716b3cdfdf5a83f55a8a0683bdcb2
    Public key SHA-256 30ea5ffc05dbae4d9250c87202d10263dbe5f4ad07bd39c683c9c6a5f371a45d
    Addresses
    104.21.10.130 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.131.121 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.10.130, 172.67.131.121): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    financecryptoworld.com
    Registered
    2025-01-30 · MainReg Inc.
    MX
    Receives mail at mail.financecryptoworld.com
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-07 17:16 UTC

    Suggest a correction

  83. cat-casino-registraciya77t.info US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 12 mo ago
    DetailsHide
    Hostname
    cat-casino-registraciya77t.info
    First seen
    2026-11-08 10:05 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-08 05:57 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-08 09:02 UTC to 2027-02-06 10:00 UTC
    Logged 2026-11-08 10:02 UTC in Let's Encrypt Sycamore2027h1, entry 1,044,395,935
    SHA-256 1bf13b9ece21ed926e56ef1ee5a04248ce95c8f54518352fa586aa8713470a77
    Public key SHA-256 080fc7f25970e0a8ac7114cd5b3bcd2a283cca992769be53b8f04daaca538a56
    PhishDestroy
    Addresses
    104.21.53.219 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.219.42 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.53.219, 172.67.219.42): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    cat-casino-registraciya77t.info
    Registered
    2025-11-18 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 11:06 UTC

    Suggest a correction

  84. deradlernews.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    deradlernews.com
    First seen
    2026-11-08 10:05 UTC
    Listing
    CERT Polska listed it 2026-09-10 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 09:32 UTC
    PhishDestroy: first observed in the feed 2026-10-26 · still listed at the last successful feed check 2026-11-08 05:57 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-08 09:04 UTC to 2027-02-06 09:04 UTC
    Logged 2026-11-08 10:03 UTC in Google PlumbersArms2027h1, entry 675,819,787
    SHA-256 5b67bbb17c68f277cf9051463a0cca50abd5d0a313e3091e7b5d28a73f002089
    Public key SHA-256 424862fe66c122689a4dadb05546406dd4b2834019a6817db6affd43740b358c
    Addresses
    104.21.68.222 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.199.47 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.68.222, 172.67.199.47): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    deradlernews.com
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 10:07 UTC

    Suggest a correction

  85. gammastack.com US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX presentDMARC quarantine
    DetailsHide
    Hostname
    gammastack.com
    First seen
    2026-11-08 10:05 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-08 05:57 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-08 09:05 UTC to 2027-02-06 10:03 UTC
    Logged 2026-11-08 10:05 UTC in Google PlumbersArms2027h1, entry 675,843,260
    SHA-256 72e01443c4be15aae66250c10b74586f27bec650c7a71e818b0fe172bd5624dc
    Public key SHA-256 52eb3828f05a04fd6338880799a0e75066ebc84a0ecf438317f8bcfe9bacdf46
    PhishDestroy
    Addresses
    104.21.95.116 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.144.188 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.95.116, 172.67.144.188): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    gammastack.com
    MX
    Receives mail at aspmx.l.google.com, alt1.aspmx.l.google.com, alt2.aspmx.l.google.com
    DMARC
    DMARC policy p=quarantine
    Checked
    2026-11-08 10:07 UTC

    Suggest a correction

  86. img.linkvertise.com US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareUnder linkvertise.com, reported by PhishDestroyMX presentSPF -allDMARC rejectRegistered 12 y ago
    DetailsHide
    Hostname
    img.linkvertise.com
    First seen
    2026-11-08 10:05 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-08 05:57 UTC
    Reported
    PhishDestroy, listing linkvertise.com and the names under it
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-08 09:01 UTC to 2027-02-06 10:00 UTC
    Logged 2026-11-08 10:01 UTC in Geomys Tuscolo2027h1, entry 526,422,326
    SHA-256 d825377e7386aab871de45051ec4a8e70e8a9bc022433d602d5d3388c0835935
    Public key SHA-256 28f8683d629f7ce3269441e3bbf25b26e72facd19f478e6514a388ac0c9afa6a
    PhishDestroy
    Addresses
    104.18.0.75 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    104.18.1.75 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.18.0.75, 104.18.1.75): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    linkvertise.com
    Registered
    2015-03-22 · Cronon GmbH
    MX
    Receives mail at aspmx.l.google.com, alt1.aspmx.l.google.com, alt2.aspmx.l.google.com
    SPF
    SPF record with -all: other senders fail
    DMARC
    DMARC policy p=reject
    Checked
    2026-11-07 14:46 UTC

    Suggest a correction

  87. www.lapleiad.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 4 y ago
    DetailsHide
    Hostname
    www.lapleiad.com
    First seen
    2026-11-08 10:05 UTC
    Listing
    CERT Polska listed it 2026-07-17 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 09:32 UTC
    PhishDestroy: first observed in the feed 2026-11-01 · still listed at the last successful feed check 2026-11-08 05:57 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-11-08 09:05 UTC to 2027-02-06 09:05 UTC
    Logged 2026-11-08 10:04 UTC in Let's Encrypt Sycamore2027h1, entry 1,044,441,096
    SHA-256 8eb30284978aa5e966a91c462367146ddef37ee2b75432cbb019e405bbd65f95
    Public key SHA-256 7c370fe6674f083e91c925b5e15869e78c44c00499e67bfdba1119db50dd8a3e
    Addresses
    104.21.72.116 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.183.178 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.72.116, 172.67.183.178): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    lapleiad.com
    Registered
    2022-09-29 · Dynadot Inc
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-07 16:49 UTC

    Suggest a correction

  88. erhsrtnrrn.shop US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by NPA 165 (information services)MX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    erhsrtnrrn.shop
    First seen
    2026-11-08 10:00 UTC
    Listing
    NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 01:35 UTC
    Listed
    NPA 165
    1. Observed in the NPA 165 feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-08 08:59 UTC to 2027-02-06 09:58 UTC
    Logged 2026-11-08 09:59 UTC in Google ParcelYard2027h1, entry 675,452,251
    SHA-256 f56cd6f20d7b52e7245009246c3a0b6031a1cdb54597975006661ffdb9b6d260
    Public key SHA-256 bc10056a714de6eeff2ccbc6970e7fb66f5a6350188a1a95bd3bd5d2b706e256
    Addresses
    104.21.49.159 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.147.71 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.49.159, 172.67.147.71): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    erhsrtnrrn.shop
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 10:01 UTC

    Suggest a correction

  89. moonwell-allocations.xyz US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    moonwell-allocations.xyz
    First seen
    2026-11-08 10:00 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 05:58 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-11-08 08:59 UTC to 2027-02-06 08:59 UTC
    Logged 2026-11-08 09:57 UTC in IPng Networks Halloumi2027h1, entry 410,009,992
    SHA-256 2d85b407e25221eae7c1bedcdbbd373e9adcb011b7e5b7c8b64f721e66d9a782
    Public key SHA-256 90c9068ab9bdb42604f0bfc6eb83f3099427f78c72d63e3d8346dfc47c16821c
    Addresses
    104.21.54.229 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.143.30 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.54.229, 172.67.143.30): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    moonwell-allocations.xyz
    Registered
    2026-05-15 · PDR Ltd. d/b/a PublicDomainRegistry.com
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 11:06 UTC

    Suggest a correction

  90. panel-v-830194.eu.cc US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT Polska
    DetailsHide
    Hostname
    panel-v-830194.eu.cc
    First seen
    2026-11-08 10:00 UTC
    Listing
    CERT Polska listed it 2026-09-10 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 09:32 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-08 08:57 UTC to 2027-02-06 09:54 UTC
    Logged 2026-11-08 09:57 UTC in Geomys Tuscolo2027h1, entry 526,382,661
    SHA-256 704a61f0bbcf8d8fd1152d4d524fa6420ecbcdafbff8e5c4f74c640d4ddeddc6
    Public key SHA-256 fd6234def1994b369038b70d66ed2f9972fab4e3df6a22d281888587b1990ce8
    Addresses
    104.21.70.69 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.221.21 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.70.69, 172.67.221.21): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.

    Suggest a correction

  91. prodigitfx.net US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    prodigitfx.net
    First seen
    2026-11-08 10:00 UTC
    Listing
    CERT Polska listed it 2026-09-12 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 09:32 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1
    Valid 2026-09-10 05:40 UTC to 2026-12-09 06:39 UTC
    Logged 2026-11-08 09:59 UTC in Let's Encrypt Sycamore2026h2, entry 1,081,936,389
    SHA-256 0401424b107428aef1992c9cf41801839059eaef8397a5e823e2920f11d10def
    Public key SHA-256 976bde607842f29b1591c4bfc1cdc6dd7a4903ea02a7cd39c780ce82ab7142e2
    Addresses
    104.21.51.120 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.180.44 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.51.120, 172.67.180.44): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    prodigitfx.net
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 10:01 UTC

    Suggest a correction

  92. www.na1026j.site US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareUnder na1026j.site, listed by MetaMaskMX absentSPF missingDMARC missingRegistered 12 d ago
    DetailsHide
    Hostname
    www.na1026j.site
    First seen
    2026-11-08 10:00 UTC
    Listing
    MetaMask: first observed in the feed 2026-11-03 · still listed at the last successful feed check 2026-11-08 05:58 UTC
    Listed
    MetaMask, listing na1026j.site and the names under it
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1
    Valid 2026-10-30 03:00 UTC to 2027-01-28 04:00 UTC
    Logged 2026-11-08 09:58 UTC in TrustAsia Luoshu2027, entry 577,631,060
    SHA-256 d016b0fb4dfa189beaa2414bf55b40bb0f125a240fa5df856974e0c9796862c5
    Public key SHA-256 af934e5c2e486046e4495205ad2956519bc7d8668dfed15def848311d988d634
    Addresses
    104.21.14.225 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.204.137 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.14.225, 172.67.204.137): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    na1026j.site
    Registered
    2026-10-27 · NameCheap, Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 11:06 UTC

    Suggest a correction

  93. kucoin-wallet.icu US · AS13335 · Cloudflare, Inc.4 addressesKuCoin
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 3 mo ago
    DetailsHide
    Hostname
    kucoin-wallet.icu
    First seen
    2026-11-08 09:56 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 05:58 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-11-08 08:56 UTC to 2027-02-06 08:56 UTC
    Logged 2026-11-08 09:54 UTC in IPng Networks Halloumi2027h1, entry 409,982,608
    SHA-256 75db84fde5de96e8607e491469397f6b73576fae03790b8909f9cfc39f6b670f
    Public key SHA-256 166adb09a1b786c1e7754412cdf8998e03410785cf86350a03eb2064c6c95edf
    Brand
    KuCoin
    Addresses
    104.21.10.32 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.189.225 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3034::6815:a20
    2606:4700:3037::ac43:bde1
    Cloudflare
    Cloudflare (104.21.10.32, 172.67.189.225): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    kucoin-wallet.icu
    Registered
    2026-08-10 · Gname.com Pte. Ltd.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 10:46 UTC

    Suggest a correction

  94. skurvorizan-france.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    skurvorizan-france.com
    First seen
    2026-11-08 09:56 UTC
    Listing
    CERT Polska listed it 2026-09-10 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 09:32 UTC
    PhishDestroy: first observed in the feed 2026-11-07 · still listed at the last successful feed check 2026-11-08 05:57 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-08 08:55 UTC to 2027-02-06 09:51 UTC
    Logged 2026-11-08 09:55 UTC in DigiCert Wyvern2027h1, entry 452,597,882
    SHA-256 8d18c8bdc593a718775f0f8d29a093b2393aaa2442c91898d962de6d63c99317
    Public key SHA-256 f44e6bb60abf7fd7432d69ec88f7275d48f48375f6bded05eb09c6c17f009cac
    Addresses
    104.21.47.194 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.172.37 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.47.194, 172.67.172.37): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    skurvorizan-france.com
    Registered
    2026-07-13 · Dynadot Inc
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 10:01 UTC

    Suggest a correction

  95. spengprotr.store US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 59 d ago
    DetailsHide
    Hostname
    spengprotr.store
    First seen
    2026-11-08 09:56 UTC
    Listing
    CERT Polska listed it 2026-09-11 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 09:32 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-11-08 08:53 UTC to 2027-02-06 08:53 UTC
    Logged 2026-11-08 09:51 UTC in Google ParcelYard2027h1, entry 675,347,443
    SHA-256 8f3a3786e6ca025c1757798b3b5da4855c9f1e40e7c67e170e373213d1add8ed
    Public key SHA-256 1df6f647a374a8c846dfe6503180b4b76e9793e7dae086f9f07a3f6869156424
    Addresses
    104.21.69.19 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.202.210 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.69.19, 172.67.202.210): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    spengprotr.store
    Registered
    2026-09-10 · NameCheap, Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 11:06 UTC

    Suggest a correction

  96. www.echodigital.app US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareUnder echodigital.app, reported by PhishDestroyMX presentSPF ~allDMARC quarantineRegistered 5 mo ago
    DetailsHide
    Hostname
    www.echodigital.app
    First seen
    2026-11-08 09:56 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-08 05:57 UTC
    Reported
    PhishDestroy, listing echodigital.app and the names under it
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR1
    Valid 2026-11-08 08:57 UTC to 2027-02-06 08:57 UTC
    Logged 2026-11-08 09:55 UTC in Google PlumbersArms2027h1, entry 675,711,399
    SHA-256 6c01de98e33e611e355dd1ffc437584c63951bd497138d53b1a6c2fb674821fc
    Public key SHA-256 499027e01778496a3480638d322ddfde790d476e540d2695ec14517dc31f13cd
    PhishDestroy
    Addresses
    104.21.23.10 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.208.68 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.23.10, 172.67.208.68): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    echodigital.app
    Registered
    2026-06-08 · GoDaddy.com, LLC
    MX
    Receives mail at route2.mx.cloudflare.net, route1.mx.cloudflare.net, route3.mx.cloudflare.net
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    DMARC policy p=quarantine
    Checked
    2026-11-08 11:05 UTC

    Suggest a correction

  97. www.kucoin-login.com US · AS13335 · Cloudflare, Inc.4 addressesKuCoin
    ListedCloudflareUnder kucoin-login.com, listed by MetaMaskMX absentSPF missingDMARC missingRegistered 3 mo ago
    DetailsHide
    Hostname
    www.kucoin-login.com
    First seen
    2026-11-08 09:56 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 05:58 UTC
    Listed
    MetaMask, listing kucoin-login.com and the names under it
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-11-08 08:53 UTC to 2027-02-06 08:53 UTC
    Logged 2026-11-08 09:52 UTC in IPng Networks Halloumi2027h1, entry 409,962,682
    SHA-256 4e853f866ef0f99151eb7f577ba1739ed99dff73f4fbbee0980850f72787bc27
    Public key SHA-256 289c6894163033e4f9fedace421d6edc47ec585f4c5783480b8c62729c2b7d8f
    Brand
    KuCoin
    Addresses
    104.21.79.102 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.169.238 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3037::6815:4f66
    2606:4700:3037::ac43:a9ee
    Cloudflare
    Cloudflare (104.21.79.102, 172.67.169.238): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    kucoin-login.com
    Registered
    2026-08-10 · Realtime Register B.V.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 09:57 UTC

    Suggest a correction

  98. crumbs.w3bx.vip US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareUnder w3bx.vip, listed by MetaMaskMX absentSPF missingDMARC missingRegistered 2 mo ago
    DetailsHide
    Hostname
    crumbs.w3bx.vip
    First seen
    2026-11-08 09:51 UTC
    First published
    2026-11-08 09:58 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 05:58 UTC
    DNS
    Resolves · checked 2026-11-08 10:01 UTC
    Listed
    MetaMask, listing w3bx.vip and the names under it
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-11-08 08:51 UTC to 2027-02-06 08:51 UTC
    Logged 2026-11-08 09:49 UTC in Google PlumbersArms2027h1, entry 675,631,941
    SHA-256 0d3eb7cdc175226930373aaba48290f6d85fb5f28be525112adba7d51cfbbe77
    Public key SHA-256 350d7121bae76ac4e383d566bb2c655765c89a3b78e9ae99ae478b953d055aa9
    Addresses
    104.21.24.170 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.219.194 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.24.170, 172.67.219.194): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    w3bx.vip
    Registered
    2026-09-09 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 10:06 UTC

    Suggest a correction

  99. drops-xrpl.live US · AS13335 · Cloudflare, Inc.2 addressesRipple (XRP)
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    drops-xrpl.live
    First seen
    2026-11-08 09:51 UTC
    First published
    2026-11-08 09:58 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 05:58 UTC
    DNS
    Resolves · checked 2026-11-08 10:01 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-08 08:46 UTC to 2027-02-06 09:44 UTC
    Logged 2026-11-08 09:46 UTC in DigiCert Sphinx2027h1, entry 400,376,683
    SHA-256 78a7a2dc66d28d55f2040f40e98c7b783b314058073bf153f9a310edb179822b
    Public key SHA-256 073f7b641b281f892bcc4b41b5ce443206b4acd9cb9109e1f646cfb4f105e073
    Brand
    Ripple (XRP)
    Addresses
    104.21.91.253 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.183.109 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.91.253, 172.67.183.109): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    drops-xrpl.live
    Registered
    2026-07-13 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 09:57 UTC

    Suggest a correction

  100. fkxir.work US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by NPA 165 (information services)MX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    fkxir.work
    First seen
    2026-11-08 09:51 UTC
    First published
    2026-11-08 09:58 UTC
    Listing
    NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 01:35 UTC
    DNS
    Resolves · checked 2026-11-08 10:01 UTC
    Listed
    NPA 165
    1. Observed in the NPA 165 feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-11-08 08:48 UTC to 2027-02-06 08:48 UTC
    Logged 2026-11-08 09:46 UTC in Let's Encrypt Willow2027h1, entry 1,000,987,040
    SHA-256 06f9db6774ea88099561aa56447e9a0713eab8137daa5302855e4ab4331dfdf4
    Public key SHA-256 4ceb1e74d30f95cb445e25cce66666ff7f123fcbfc45bb8756305e0c017300ff
    Addresses
    104.21.55.17 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.144.1 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.55.17, 172.67.144.1): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    fkxir.work
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 09:57 UTC

    Suggest a correction

Showing 1–100 of 2,393 hostnames.
How these findings are made

Brand spoofs: findings that impersonate one of the 1,000 most-impersonated brands. The list opens on them; All shows every finding.

Reported: a hostname in a new certificate that PhishTank or PhishDestroy reports, or that CERT Polska, MetaMask, USOM, MODA, NPA 165, JPCERT/CC, the AMF, the FSMA or BaFin lists. When a listing source names the brand imitated or a category, the finding shows it. Phishing host: a brand lookalike that resolves to an address which hosted confirmed phishing in the last 48 hours. Spamhaus DROP: a brand lookalike that resolves to an address on the Spamhaus DROP list. Same certificate: another name on a finding's certificate that resolves to an address on Spamhaus DROP. Suspicious: other names on a finding's certificate, rated high for a hosting-alias name or a lookalike on a phishing host, medium for a lookalike; they join the findings once they have listing evidence of their own. Also under Suspicious: registered domains using a brand’s name that PhishDestroy’s community list includes, rated high when they resolve to an address with no parking or holding signal, medium otherwise.

Brand labels cover the 1,000 most-impersonated brands. A name gets a brand when the brand's token starts a label or follows a hyphen, with a lure word such as "login" or "verify" for common words. Hostnames appear as plain text. How it works · Sources