Live

Live phishing findings

New certificates and domain registrations, with every hostname resolved and checked against phishing reports and bad-address lists. The newest findings, updated hourly.

Updated hourly · 2026-11-08 11:00 UTC
Certificate-log entries · 24 h
322.8M
from 84 distinct feeds
Unique certificates · 24 h
31.6M
each reviewed
Names resolved · 24 h
20.2M
15.1M with an address
Findings · 24 h
5,714
209 of 1,061 brands targeted

5,082 hostnames from the last 24 hours.

  1. elitesholdingsng.com AU · AS154653 · ParkLogic Pty Ltd
    ReportedParking page · ParkLogicReported by PhishDestroyMX presentSPF ~allRegistered 3 y ago
    DetailsHide
    Hostname
    elitesholdingsng.com
    First seen
    2026-11-08 10:26 UTC
    Listing
    PhishDestroy: observed back in the feed 2026-11-08 · still listed at the last successful feed check 2026-11-08 05:57 UTC · listed 2 times
    Earlier listing periods: 2026-10-25 to 2026-11-07 (13 days)
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-08 09:23 UTC to 2027-02-06 09:23 UTC
    Logged 2026-11-08 10:22 UTC in Google PlumbersArms2027h1, entry 676,091,263
    SHA-256 6287d3ef0b79246bc9044c6eb1816de434e591716f5db19465be0c46dfacbac9
    Public key SHA-256 9c0d3cae4928bd8bad20b19f0040371e902bb6f7825ecdd301bfef5b7e864f57
    PhishDestroy
    Addresses
    162.4.84.247 · Australia · AS154653 PARKLOGICPTYLTD-AS-AP - ParkLogic Pty Ltd · ParkLogic (parking page)
    Parking page · ParkLogic
    ParkLogic (162.4.84.247): a parking service. It answers for names that are typically for sale or unused.
    Domain
    elitesholdingsng.com
    Registered
    2023-11-08 · NameSilo, LLC
    MX
    Receives mail at mx.zoho.com, mx2.zoho.com, mx3.zoho.com
    SPF
    SPF record with ~all: other senders soft-fail
    Checked
    2026-11-07 11:10 UTC

    Suggest a correction

  2. h9z6f0v3zsxip5dg.fyxgbjsw.avspjcgn.feloxngb.csuwtnrg.ptgsxzo0wi87qbv2.gatewaylearning.ezgateway.net FR · AS16276 · OVH OVH SAS
    ListedOVHUnder ezgateway.net, listed by USOMMX absentSPF -allDMARC rejectRegistered 7 mo ago
    DetailsHide
    Hostname
    h9z6f0v3zsxip5dg.fyxgbjsw.avspjcgn.feloxngb.csuwtnrg.ptgsxzo0wi87qbv2.gatewaylearning.ezgateway.net
    First seen
    2026-11-08 10:26 UTC
    Listing
    USOM listed it 2026-08-21 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 10:05 UTC
    Listed
    USOM, listing ezgateway.net and the names under it
    1. Listed by USOM
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-11-08 09:26 UTC to 2027-02-06 09:26 UTC
    Logged 2026-11-08 10:25 UTC in Google PlumbersArms2027h1, entry 676,131,761
    SHA-256 087f88fdeadaed4b967bc0016d1933a0e4a8d386ee9dbf4e3e5cd1812598403a
    Public key SHA-256 6749b979c7f9332984a0f597fbec956870f5f0b263fc996b17a8c58307983072
    Addresses
    15.204.116.29 · France · AS16276 OVH OVH SAS · OVH (cloud provider)
    OVH
    OVH (15.204.116.29): a cloud provider. It rents servers and addresses to its customers.
    Domain
    ezgateway.net
    Registered
    2026-04-07 · Dynu Systems Incorporated
    MX
    Publishes no mail exchanger
    SPF
    SPF record with -all: other senders fail
    DMARC
    DMARC policy p=reject
    Checked
    2026-11-07 17:16 UTC

    Suggest a correction

  3. macrtqkz.txyukdin.tlchyjoq.ijdyvoge.gatewaylearning.ezgateway.net FR · AS16276 · OVH OVH SAS
    ListedOVHUnder ezgateway.net, listed by USOMMX absentSPF -allDMARC rejectRegistered 7 mo ago
    DetailsHide
    Hostname
    macrtqkz.txyukdin.tlchyjoq.ijdyvoge.gatewaylearning.ezgateway.net
    First seen
    2026-11-08 10:26 UTC
    Listing
    USOM listed it 2026-08-21 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 10:05 UTC
    Listed
    USOM, listing ezgateway.net and the names under it
    1. Listed by USOM
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-11-08 09:26 UTC to 2027-02-06 09:26 UTC
    Logged 2026-11-08 10:25 UTC in Google PlumbersArms2027h1, entry 676,131,602
    SHA-256 821e3aa00e2b5cefc6d3c609f4dc1e50a0f399273b68f6428ef9becd546627e8
    Public key SHA-256 250db6f2baf15f178ee2cb6fa6b74f01a735949d5bc3650f66fe4dae66f6d068
    Addresses
    15.204.116.29 · France · AS16276 OVH OVH SAS · OVH (cloud provider)
    OVH
    OVH (15.204.116.29): a cloud provider. It rents servers and addresses to its customers.
    Domain
    ezgateway.net
    Registered
    2026-04-07 · Dynu Systems Incorporated
    MX
    Publishes no mail exchanger
    SPF
    SPF record with -all: other senders fail
    DMARC
    DMARC policy p=reject
    Checked
    2026-11-07 17:16 UTC

    Suggest a correction

  4. nanqq.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    nanqq.com
    First seen
    2026-11-08 10:26 UTC
    Listing
    CERT Polska listed it 2026-07-16 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 09:32 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-11-08 09:25 UTC to 2027-02-06 09:25 UTC
    Logged 2026-11-08 10:24 UTC in IPng Networks Halloumi2027h1, entry 410,257,365
    SHA-256 7df7b76bdf5e2cee7d45121d7277b565792916fe686a4d99dfd50a7fb8478926
    Public key SHA-256 e0262b79d0e4843b4c2b1e9dcaed9d6c39d020226cffc261f171f0ef480f43fa
    Addresses
    104.21.43.151 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.180.165 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.43.151, 172.67.180.165): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    nanqq.com
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 10:28 UTC

    Suggest a correction

  5. owlstoryweapon.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by USOMMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    owlstoryweapon.com
    First seen
    2026-11-08 10:26 UTC
    Listing
    USOM listed it 2026-05-18 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 10:05 UTC
    Listed
    USOM
    1. Listed by USOM
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-11-08 09:25 UTC to 2027-02-06 09:25 UTC
    Logged 2026-11-08 10:23 UTC in Google PlumbersArms2027h1, entry 676,111,690
    SHA-256 9b2f746f8712367af4478eef303a93cae957f47f4472c386bb22a0d556ce37fe
    Public key SHA-256 330e2aebc16d05e4eb8f50b7a779de081aff9609bf39b2221901dace320ad1c1
    Addresses
    104.21.40.246 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.188.203 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.40.246, 172.67.188.203): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    owlstoryweapon.com
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 10:28 UTC

    Suggest a correction

  6. panels-firelight.xyz US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    panels-firelight.xyz
    First seen
    2026-11-08 10:26 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 05:58 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-08 09:24 UTC to 2027-02-06 09:24 UTC
    Logged 2026-11-08 10:23 UTC in Google PlumbersArms2027h1, entry 676,103,633
    SHA-256 06dc3432bf7319467bf41ce4d6fc8581aee872708f81b206e0e8be2c9e7e8b83
    Public key SHA-256 5a8603683f748be043d734492456954a2a5b2d04171332ca3b4e61f47a26bdd6
    Addresses
    104.21.26.169 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.137.101 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.26.169, 172.67.137.101): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    panels-firelight.xyz
    Registered
    2026-05-15 · Dynadot Inc
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 11:06 UTC

    Suggest a correction

  7. soltoken.network US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    soltoken.network
    First seen
    2026-11-08 10:26 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 05:58 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-08 09:22 UTC to 2027-02-06 10:21 UTC
    Logged 2026-11-08 10:22 UTC in Google PlumbersArms2027h1, entry 676,091,939
    SHA-256 5bd740cacd195fe3e6ae5b98dfb3d008310b5f2fb4cfbdb2c6fd18cb4407402e
    Public key SHA-256 8bbbf3e76ddbf4acc11774635867d4f897853a8a6764c7b035f5bc4f38aaec1c
    Addresses
    104.21.82.222 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.164.72 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.82.222, 172.67.164.72): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    soltoken.network
    Registered
    2026-07-13 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 11:06 UTC

    Suggest a correction

  8. v-usluga-392018.eu.cc US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT Polska
    DetailsHide
    Hostname
    v-usluga-392018.eu.cc
    First seen
    2026-11-08 10:26 UTC
    Listing
    CERT Polska listed it 2026-09-10 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 09:32 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-11-08 09:26 UTC to 2027-02-06 09:26 UTC
    Logged 2026-11-08 10:24 UTC in Let's Encrypt Willow2027h1, entry 1,001,478,938
    SHA-256 b0af5d2352ecce518c77cf8fc2e5f626d38d06f0f8282440b0f4f6aaa0efd5e3
    Public key SHA-256 a58ec8ee092420fab9495b6552dea44f775f1d63940833b99dc1aab0734e2588
    Addresses
    104.21.94.191 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.139.143 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.94.191, 172.67.139.143): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.

    Suggest a correction

  9. wikyzp.asia US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by NPA 165 (information services)MX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    wikyzp.asia
    First seen
    2026-11-08 10:26 UTC
    Listing
    NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 01:35 UTC
    Listed
    NPA 165
    1. Observed in the NPA 165 feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-08 09:24 UTC to 2027-02-06 10:23 UTC
    Logged 2026-11-08 10:24 UTC in IPng Networks Gouda2027h1, entry 352,980,567
    SHA-256 4cf34bb787b74f1ff838400a2976b117a6bad503a6e9308b23188b89bb47433b
    Public key SHA-256 1ab95dc0bb801d0a05894b4ca4c8e831a95e439c0f24f97ee320eb4a5725cb77
    Addresses
    104.21.81.7 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.136.150 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.81.7, 172.67.136.150): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    wikyzp.asia
    Registered
    2026-07-13 · Alibaba Cloud Computing Ltd. d/b/a HiChina (www.net.cn)
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 11:06 UTC

    Suggest a correction

  10. yhdlcber.zyxbnipg.epckarsg.rzfdoakh.onvgwjec.gecxorwd.tczglrpw.gatewaylearning.ezgateway.net FR · AS16276 · OVH OVH SAS
    ListedOVHUnder ezgateway.net, listed by USOMMX absentSPF -allDMARC rejectRegistered 7 mo ago
    DetailsHide
    Hostname
    yhdlcber.zyxbnipg.epckarsg.rzfdoakh.onvgwjec.gecxorwd.tczglrpw.gatewaylearning.ezgateway.net
    First seen
    2026-11-08 10:26 UTC
    Listing
    USOM listed it 2026-08-21 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 10:05 UTC
    Listed
    USOM, listing ezgateway.net and the names under it
    1. Listed by USOM
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-11-08 09:26 UTC to 2027-02-06 09:26 UTC
    Logged 2026-11-08 10:25 UTC in DigiCert Sphinx2027h1, entry 400,693,418
    SHA-256 643e4fe5a9bb57f7ba92d6cf4b4b2c920749dd7bd501534dbdd56af366961976
    Public key SHA-256 47fd858389a0100272288e96ef2c460c6b9829fa3283e69d37e2f3335d481ffe
    Addresses
    15.204.116.29 · France · AS16276 OVH OVH SAS · OVH (cloud provider)
    OVH
    OVH (15.204.116.29): a cloud provider. It rents servers and addresses to its customers.
    Domain
    ezgateway.net
    Registered
    2026-04-07 · Dynu Systems Incorporated
    MX
    Publishes no mail exchanger
    SPF
    SPF record with -all: other senders fail
    DMARC
    DMARC policy p=reject
    Checked
    2026-11-07 17:16 UTC

    Suggest a correction

  11. yvqfmehi.ghwojfzp.pyqsxnlk.adoqexmhg.zecjmvnx.xegjcpbw.tczglrpw.gatewaylearning.ezgateway.net FR · AS16276 · OVH OVH SAS
    ListedOVHUnder ezgateway.net, listed by USOMMX absentSPF -allDMARC rejectRegistered 7 mo ago
    DetailsHide
    Hostname
    yvqfmehi.ghwojfzp.pyqsxnlk.adoqexmhg.zecjmvnx.xegjcpbw.tczglrpw.gatewaylearning.ezgateway.net
    First seen
    2026-11-08 10:26 UTC
    Listing
    USOM listed it 2026-08-21 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 10:05 UTC
    Listed
    USOM, listing ezgateway.net and the names under it
    1. Listed by USOM
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-11-08 09:26 UTC to 2027-02-06 09:26 UTC
    Logged 2026-11-08 10:25 UTC in IPng Networks Gouda2027h1, entry 352,985,160
    SHA-256 bd8ba982aa347b995ca298b5777a2717faef0dd75c1af9f20495a2adc9c50765
    Public key SHA-256 46f247e9ee82aa543169363c7e0510bead554665799cda8a9e0679d2dc4070c6
    Addresses
    15.204.116.29 · France · AS16276 OVH OVH SAS · OVH (cloud provider)
    OVH
    OVH (15.204.116.29): a cloud provider. It rents servers and addresses to its customers.
    Domain
    ezgateway.net
    Registered
    2026-04-07 · Dynu Systems Incorporated
    MX
    Publishes no mail exchanger
    SPF
    SPF record with -all: other senders fail
    DMARC
    DMARC policy p=reject
    Checked
    2026-11-07 17:16 UTC

    Suggest a correction

  12. a.cupkit.app US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareUnder cupkit.app, reported by PhishDestroyMX presentSPF ~allDMARC missingRegistered 8 y ago
    DetailsHide
    Hostname
    a.cupkit.app
    First seen
    2026-11-08 10:21 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-08 05:57 UTC
    Reported
    PhishDestroy, listing cupkit.app and the names under it
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by Cloudflare TLS Issuing ECC CA 4
    Valid 2026-09-10 05:33 UTC to 2026-12-09 05:42 UTC
    Logged 2026-11-08 10:19 UTC in DigiCert Wyvern2026h2, entry 2,211,958,605
    SHA-256 4162a934449a769774021396842c93d10a0b5c658c02a4dcdd4bc056aac5bc34
    Public key SHA-256 2854a7d882726516b368b5b90f5e5328045242dac638f7765cf878b1b054a08b
    PhishDestroy
    Addresses
    104.20.29.105 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.66.171.25 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.20.29.105, 172.66.171.25): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    cupkit.app
    Registered
    2018-06-07 · Namecheap Inc.
    MX
    Receives mail at eforward1.registrar-servers.com, eforward2.registrar-servers.com, eforward3.registrar-servers.com
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 08:11 UTC

    Suggest a correction

  13. aave.com.aaveoriginal.co.com US · AS13335 · Cloudflare, Inc.4 addressesAave
    ListedCloudflareUnder aaveoriginal.co.com, listed by MetaMask
    DetailsHide
    Hostname
    aave.com.aaveoriginal.co.com
    First seen
    2026-11-08 10:21 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 05:58 UTC
    Listed
    MetaMask, listing aaveoriginal.co.com and the names under it
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by Cloudflare TLS Issuing ECC CA 4 · precertificate
    Valid 2026-11-08 10:07 UTC to 2027-02-06 10:15 UTC
    Logged 2026-11-08 10:17 UTC in DigiCert Wyvern2027h1, entry 452,792,471
    SHA-256 1bc714069b5750476a3a9fd4a6ba0f5bc4a02b762181da87d3002ef192d2bc1d
    Public key SHA-256 7fe72d651ff8a30aa761332eb5ff730bec542d8543a850086c46bfc4cef317e7
    Brand
    Aave
    Addresses
    104.21.2.175 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.129.130 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3032::ac43:8182
    2606:4700:3035::6815:2af
    Cloudflare
    Cloudflare (104.21.2.175, 172.67.129.130): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.

    Suggest a correction

  14. cleanr.work US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    cleanr.work
    First seen
    2026-11-08 10:21 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 05:58 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-08 09:18 UTC to 2027-02-06 10:17 UTC
    Logged 2026-11-08 10:18 UTC in Geomys Tuscolo2027h1, entry 526,613,165
    SHA-256 d020b5cace2ff9afca612651349562bd818150fc4c30a20f77d30290c4af2367
    Public key SHA-256 42964b420fc5e46a47bdf9e7976e97d436fa6c0fad11098ccd1273bd21f31167
    Addresses
    104.21.90.146 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.157.195 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.90.146, 172.67.157.195): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    cleanr.work
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 10:23 UTC

    Suggest a correction

  15. cpekdogr.sbadpnzo.jqaygvpe.wzvtlhbj.ijdyvoge.gatewaylearning.ezgateway.net FR · AS16276 · OVH OVH SAS
    ListedOVHUnder ezgateway.net, listed by USOMMX absentSPF -allDMARC rejectRegistered 7 mo ago
    DetailsHide
    Hostname
    cpekdogr.sbadpnzo.jqaygvpe.wzvtlhbj.ijdyvoge.gatewaylearning.ezgateway.net
    First seen
    2026-11-08 10:21 UTC
    Listing
    USOM listed it 2026-08-21 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 10:05 UTC
    Listed
    USOM, listing ezgateway.net and the names under it
    1. Listed by USOM
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-11-08 09:19 UTC to 2027-02-06 09:19 UTC
    Logged 2026-11-08 10:17 UTC in Google ParcelYard2027h1, entry 675,718,067
    SHA-256 11c97783ed70eef2a6ea26a344cbc65262e1d178247866eaf4b982ab986e12d8
    Public key SHA-256 ded11393c680f85baa6723a5817ded7e750a45a2c42f6b6c134a131f1c8e57f9
    Addresses
    15.204.116.29 · France · AS16276 OVH OVH SAS · OVH (cloud provider)
    OVH
    OVH (15.204.116.29): a cloud provider. It rents servers and addresses to its customers.
    Domain
    ezgateway.net
    Registered
    2026-04-07 · Dynu Systems Incorporated
    MX
    Publishes no mail exchanger
    SPF
    SPF record with -all: other senders fail
    DMARC
    DMARC policy p=reject
    Checked
    2026-11-07 17:16 UTC

    Suggest a correction

  16. footshop-pl.shop US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    footshop-pl.shop
    First seen
    2026-11-08 10:21 UTC
    Listing
    CERT Polska listed it 2026-06-02 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 09:32 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-08 09:21 UTC to 2027-02-06 09:21 UTC
    Logged 2026-11-08 10:20 UTC in Google PlumbersArms2027h1, entry 676,059,145
    SHA-256 b0ec8b6bd3f441f4868f96816877c9ad41fa7a20c29744482b6a8f2cfd8fe14a
    Public key SHA-256 d21fc810ebad8b6a76dfaf46e2eb086743f0826431b50fb373adc6ac6d45a000
    Addresses
    104.21.31.151 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.177.206 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.31.151, 172.67.177.206): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    footshop-pl.shop
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 10:23 UTC

    Suggest a correction

  17. m.heardgagas.com CY · AS47583 · AS-HOSTINGER Hostinger Inte…
    ListedHostingerListed by NPA 165 (finance and insurance)MX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    m.heardgagas.com
    First seen
    2026-11-08 10:21 UTC
    Listing
    NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 01:35 UTC
    Listed
    NPA 165
    1. Observed in the NPA 165 feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-08 09:17 UTC to 2027-02-06 09:17 UTC
    Logged 2026-11-08 10:16 UTC in Google ParcelYard2027h1, entry 675,693,300
    SHA-256 7e080b17c73bc0ba1594fdba1f5553c67278065d77393018d81e4b33e075fa27
    Public key SHA-256 46cd48202306dc598fe36a68e4e223a110f40803dcce9a2014fea481de400b52
    Addresses
    72.62.71.47 · Cyprus · AS47583 AS-HOSTINGER Hostinger International Limited · Hostinger (shared hosting)
    Hostinger
    Hostinger (72.62.71.47): shared web hosting and domain registration. One address typically serves many customer sites.
    Domain
    heardgagas.com
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 10:23 UTC

    Suggest a correction

  18. testminesgamb23234.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    testminesgamb23234.com
    First seen
    2026-11-08 10:21 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 05:58 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-08 09:17 UTC to 2027-02-06 10:14 UTC
    Logged 2026-11-08 10:17 UTC in Google ParcelYard2027h1, entry 675,706,377
    SHA-256 090366cebd4aa10acdd5e038cf3fa4c1058c301c3bdd489a0f0d007b80615757
    Public key SHA-256 e9dc77128a19e1ea1960f3deadcada0951739db9da2d47ef947579c6dd356f66
    Addresses
    104.21.57.103 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.162.242 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.57.103, 172.67.162.242): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    testminesgamb23234.com
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 10:23 UTC

    Suggest a correction

  19. uploads.tor.taxi RU · AS57724 · DDOS-GUARD DDOS-GUARD LTD
    ReportedDDoS-GuardUnder tor.taxi, reported by PhishDestroyMX presentSPF ~allDMARC rejectRegistered 5 y ago
    DetailsHide
    Hostname
    uploads.tor.taxi
    First seen
    2026-11-08 10:21 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-08 05:57 UTC
    Reported
    PhishDestroy, listing tor.taxi and the names under it
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR1
    Valid 2026-11-08 09:18 UTC to 2027-02-06 09:18 UTC
    Logged 2026-11-08 10:17 UTC in Google ParcelYard2027h1, entry 675,712,355
    SHA-256 45aab207b20f2db06cab059eab0467c3be9f0e7027737d1fedbd2a3612680a68
    Public key SHA-256 fbb83cf5ee0a4dac1945f585e5fcae79bbc7915287a27340eb4930fe2d1e3eb7
    PhishDestroy
    Addresses
    185.129.100.227 · Russia · AS57724 DDOS-GUARD DDOS-GUARD LTD · DDoS-Guard (cdn)
    DDoS-Guard
    DDoS-Guard (185.129.100.227): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    tor.taxi
    Registered
    2021-07-02 · Tucows Domains Inc.
    MX
    Receives mail at mail.protonmail.ch, mailsec.protonmail.ch
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    DMARC policy p=reject
    Checked
    2026-11-07 20:52 UTC

    Suggest a correction

  20. verification-swiss.cfd US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 17 d ago
    DetailsHide
    Hostname
    verification-swiss.cfd
    First seen
    2026-11-08 10:21 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 05:58 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by Cloudflare TLS Issuing ECC CA 4 · precertificate
    Valid 2026-11-08 10:09 UTC to 2027-02-06 10:17 UTC
    Logged 2026-11-08 10:19 UTC in DigiCert Wyvern2027h1, entry 452,819,015
    SHA-256 7ce8ccc8056b9a85f439a2811dc10d34b871ee52ad36fcb583eabd7335621841
    Public key SHA-256 c2b45249c7c6805726e4e6bc1a21c323736214e2c841e2c97282e11029074784
    Addresses
    104.21.76.45 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.187.173 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.76.45, 172.67.187.173): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    verification-swiss.cfd
    Registered
    2026-10-22 · Spaceship, Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 11:06 UTC

    Suggest a correction

  21. www.disperstockspip.net US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareUnder disperstockspip.net, reported by PhishDestroyMX presentSPF ~allDMARC missingRegistered 10 mo ago
    DetailsHide
    Hostname
    www.disperstockspip.net
    First seen
    2026-11-08 10:21 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-08 05:57 UTC
    Reported
    PhishDestroy, listing disperstockspip.net and the names under it
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by ZeroSSL RSA DV SSL CA 2 · precertificate
    Valid 2026-11-08 00:00 UTC to 2027-02-06 23:59 UTC
    Logged 2026-11-08 10:20 UTC in DigiCert Wyvern2027h1, entry 452,820,633
    SHA-256 758449d929de7b50516f74e5ef98bd4a0c08052127ef42d81649b297444482b4
    Public key SHA-256 6c4895aa231f1fca751ded287de67122e5f1589ee24478db0994b9739f3cb722
    PhishDestroy
    Addresses
    104.21.27.68 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.169.8 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.27.68, 172.67.169.8): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    disperstockspip.net
    Registered
    2026-01-05 · Tucows Domains Inc.
    MX
    Receives mail at _dc-mx.9308c1313120.disperstockspip.net
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 08:53 UTC

    Suggest a correction

  22. zcat.hub-x.live US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareUnder hub-x.live, listed by MetaMaskMX absentSPF missingDMARC missingRegistered 2 mo ago
    DetailsHide
    Hostname
    zcat.hub-x.live
    First seen
    2026-11-08 10:21 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 05:58 UTC
    Listed
    MetaMask, listing hub-x.live and the names under it
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-08 09:21 UTC to 2027-02-06 09:21 UTC
    Logged 2026-11-08 10:19 UTC in Google ParcelYard2027h1, entry 675,741,122
    SHA-256 6d447d1d586ae9bf4bf348a6780b79ba1e4629833d7d225bcb2fc8a3c6faaa6f
    Public key SHA-256 cf345c87fde78cd536ac816d228f27d9beaae5791291e2e55fc64f8c2da0f0e7
    Addresses
    104.21.50.178 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.164.185 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.50.178, 172.67.164.185): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    hub-x.live
    Registered
    2026-09-09 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-07 13:25 UTC

    Suggest a correction

  23. aave.fr.aave-fr.co.com US · AS13335 · Cloudflare, Inc.4 addressesAave
    ListedCloudflareUnder aave-fr.co.com, listed by MetaMask
    DetailsHide
    Hostname
    aave.fr.aave-fr.co.com
    First seen
    2026-11-08 10:16 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 05:58 UTC
    Listed
    MetaMask, listing aave-fr.co.com and the names under it
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-08 09:14 UTC to 2027-02-06 10:14 UTC
    Logged 2026-11-08 10:14 UTC in Google PlumbersArms2027h1, entry 675,984,022
    SHA-256 ab49cb18955db0f2edcd1328f1c53059bef61ac99008d8db553a2a577a7a7357
    Public key SHA-256 4126e14aa76474e0145af7e963e05d81e09a71cee3bd48ed8b11fc35ce036323
    Brand
    Aave
    Addresses
    104.21.2.175 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.129.130 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3032::ac43:8182
    2606:4700:3035::6815:2af
    Cloudflare
    Cloudflare (104.21.2.175, 172.67.129.130): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.

    Suggest a correction

  24. claim-datagram.network
    ListedListed by MetaMaskMX absentSPF missingDMARC missingRegistered 12 mo ago
    DetailsHide
    Hostname
    claim-datagram.network
    First seen
    2026-11-08 10:16 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 05:58 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-08 09:13 UTC to 2027-02-06 10:10 UTC
    Logged 2026-11-08 10:13 UTC in DigiCert Wyvern2027h1, entry 452,744,558
    SHA-256 53426fb725a7a92cfa8842c18c089c84f35cfe6f6cada9f05a7a5770f93aecc9
    Public key SHA-256 5261e64a411234442b267a7363095bd2e0156624c2bb8faffefa56d1568093a1
    Domain
    claim-datagram.network
    Registered
    2025-11-18 · PDR Ltd. d/b/a PublicDomainRegistry.com
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 11:06 UTC

    Suggest a correction

  25. cryptogenisussoftware.pro US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 59 d ago
    DetailsHide
    Hostname
    cryptogenisussoftware.pro
    First seen
    2026-11-08 10:16 UTC
    Listing
    CERT Polska listed it 2026-09-17 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 09:32 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1
    Valid 2026-09-10 08:19 UTC to 2026-12-09 09:19 UTC
    Logged 2026-11-08 10:13 UTC in Let's Encrypt Willow2026h2, entry 1,029,440,438
    SHA-256 0e00d356fd38a935488deb7cf0e8ec639c1a07714ae036d83c01c4a8eb93d660
    Public key SHA-256 9326fbfafe03fe5f50a78893810419122d7c25366ed7317dd9a80d02de45b832
    Addresses
    104.21.65.77 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.189.100 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.65.77, 172.67.189.100): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    cryptogenisussoftware.pro
    Registered
    2026-09-10 · Spaceship, Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 11:06 UTC

    Suggest a correction

  26. download.btcpolicyinstitute.org US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareUnder btcpolicyinstitute.org, listed by MetaMaskMX absentSPF missingDMARC missingRegistered 59 d ago
    DetailsHide
    Hostname
    download.btcpolicyinstitute.org
    First seen
    2026-11-08 10:16 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 05:58 UTC
    Listed
    MetaMask, listing btcpolicyinstitute.org and the names under it
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-08 09:14 UTC to 2027-02-06 10:14 UTC
    Logged 2026-11-08 10:14 UTC in Google PlumbersArms2027h1, entry 675,981,201
    SHA-256 1d7f79d21e2ee7e623ac9324f73569ba9c48264edbf473028aea3f354f78913c
    Public key SHA-256 adc1cf6ef9eec504054c1d5eae2219479f5e010d28daf0b0975e2b26d9901c69
    Addresses
    104.21.54.24 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.222.224 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.54.24, 172.67.222.224): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    btcpolicyinstitute.org
    Registered
    2026-09-10 · Atak Domain Bilgi Teknolojileri A._.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 06:34 UTC

    Suggest a correction

  27. foodie-ingredients.com.in-house-sf.com FR · AS16276 · OVH OVH SAS
    ReportedOVHUnder in-house-sf.com, reported by PhishDestroyMX presentSPF ~allDMARC missing
    DetailsHide
    Hostname
    foodie-ingredients.com.in-house-sf.com
    First seen
    2026-11-08 10:16 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-08 05:57 UTC
    Reported
    PhishDestroy, listing in-house-sf.com and the names under it
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR2
    Valid 2026-11-08 09:16 UTC to 2027-02-06 09:16 UTC
    Logged 2026-11-08 10:15 UTC in Google ParcelYard2027h1, entry 675,680,426
    SHA-256 ad7b4b0039444b58370d672a3b88f61de6d5bc26aaf656de13e9f306e6cfb690
    Public key SHA-256 46fbfa8e6b7b8d7f77bdf412e8ae2446bf4ccedbf8ad07573a5a050fd9b4e198
    PhishDestroy
    Addresses
    15.204.110.165 · France · AS16276 OVH OVH SAS · OVH (cloud provider)
    OVH
    OVH (15.204.110.165): a cloud provider. It rents servers and addresses to its customers.
    Domain
    in-house-sf.com
    MX
    Receives mail at in-house-sf.com
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 10:18 UTC

    Suggest a correction

  28. lingzheng02.site US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by NPA 165 (e-commerce)MX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    lingzheng02.site
    First seen
    2026-11-08 10:16 UTC
    Listing
    NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 01:35 UTC
    Listed
    NPA 165
    1. Observed in the NPA 165 feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-08 09:16 UTC to 2027-02-06 09:16 UTC
    Logged 2026-11-08 10:14 UTC in Google PlumbersArms2027h1, entry 675,986,032
    SHA-256 28a5743de7f1b17774779ed3efe176d9551f16c9698ea6a7fe4ec9e36f386bef
    Public key SHA-256 93ce3a661ac599b9d08ba69769a9d80f087d441e8e282181b109228e338bf841
    Addresses
    104.21.16.225 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.216.69 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.16.225, 172.67.216.69): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    lingzheng02.site
    Registered
    2026-05-12 · GoDaddy.com, LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 11:05 UTC

    Suggest a correction

  29. owa.polar-tensor.com DE · AS51167 · CONTABO Contabo GmbH4 addresses
    ListedContabo +1Under polar-tensor.com, listed by MetaMaskMX presentSPF ~allDMARC missingRegistered 19 mo ago
    DetailsHide
    Hostname
    owa.polar-tensor.com
    First seen
    2026-11-08 10:16 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 05:58 UTC
    Listed
    MetaMask, listing polar-tensor.com and the names under it
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-11-08 09:16 UTC to 2027-02-06 09:16 UTC
    Logged 2026-11-08 10:15 UTC in DigiCert Wyvern2027h1, entry 452,767,676
    SHA-256 cb1de98eae2a5e437be183cb454e60d792ee4d60dbe40ad2b3bf434177a92d9e
    Public key SHA-256 4ca2f49a2f823588970896c7033b00c4cfc80584ae4fc2d28e464592efce12e4
    Addresses
    5.189.134.86 · Germany · AS51167 CONTABO Contabo GmbH · Contabo (cloud provider)
    57.128.187.75 · France · AS16276 OVH OVH SAS · OVH (cloud provider)
    57.129.49.179 · France · AS16276 OVH OVH SAS · OVH (cloud provider)
    193.242.211.59 · Germany · AS58329 SERVINGA-NL servinga GmbH
    Contabo +1
    Contabo (5.189.134.86): a cloud provider. It rents servers and addresses to its customers. OVH (57.128.187.75, 57.129.49.179): a cloud provider. It rents servers and addresses to its customers.
    Domain
    polar-tensor.com
    Registered
    2025-04-28 · Web Commerce Communications Limited dba WebNic.cc
    MX
    Receives mail at mail.protonmail.ch, mailsec.protonmail.ch
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-07 19:34 UTC

    Suggest a correction

  30. porcelana24official.com US · AS13335 · Cloudflare, Inc.
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    porcelana24official.com
    First seen
    2026-11-08 10:16 UTC
    Listing
    CERT Polska listed it 2026-06-01 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 09:32 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-08 09:15 UTC to 2027-02-06 10:14 UTC
    Logged 2026-11-08 10:15 UTC in Let's Encrypt Sycamore2027h1, entry 1,044,675,147
    SHA-256 c50646f7dc37ed37d6682fd44e95ea91bbe96da2f950c5c7fa88e6f0d5023e17
    Public key SHA-256 f75bba049146e5958fc4f775ed40b6ba3ba059061342d87c8731bfa5cb188e2b
    Addresses
    104.18.26.78 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.18.26.78): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    porcelana24official.com
    Registered
    2026-05-14 · West263 International Limited
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-07 19:05 UTC

    Suggest a correction

  31. preprod.cookie-stock.com RU · AS57724 · DDOS-GUARD DDOS-GUARD LTD
    ReportedDDoS-GuardUnder cookie-stock.com, reported by PhishDestroyMX absentSPF missingDMARC policy noneRegistered 15 mo ago
    DetailsHide
    Hostname
    preprod.cookie-stock.com
    First seen
    2026-11-08 10:16 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-08 05:57 UTC
    Reported
    PhishDestroy, listing cookie-stock.com and the names under it
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR2
    Valid 2026-11-08 09:15 UTC to 2027-02-06 09:15 UTC
    Logged 2026-11-08 10:13 UTC in Google PlumbersArms2027h1, entry 675,970,024
    SHA-256 8534e9202157a11fc1a833837171df300147416f6e57c91a895a964c6149aee6
    Public key SHA-256 85b35b10640c1fddaaec69d778bb458ce06d690bacfd7977853cc0f863baf282
    PhishDestroy
    Addresses
    185.178.208.177 · Russia · AS57724 DDOS-GUARD DDOS-GUARD LTD · DDoS-Guard (cdn)
    DDoS-Guard
    DDoS-Guard (185.178.208.177): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    cookie-stock.com
    Registered
    2025-08-26 · Registrar of Domain Names REG.RU LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    DMARC policy p=none: reports only
    Checked
    2026-11-07 23:42 UTC

    Suggest a correction

  32. raffrintar.store US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 59 d ago
    DetailsHide
    Hostname
    raffrintar.store
    First seen
    2026-11-08 10:16 UTC
    Listing
    CERT Polska listed it 2026-09-11 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 09:32 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-08 09:10 UTC to 2027-02-06 10:09 UTC
    Logged 2026-11-08 10:10 UTC in Let's Encrypt Willow2027h1, entry 1,001,277,382
    SHA-256 6cac46e1488a863ec6bc7e9d22279821399d41a7e8631bd1fc048d4bc10477e9
    Public key SHA-256 bc93b68ae03d41aef79024a7d1b67251016557c9f0b216e837e700f0f63117c8
    Addresses
    104.21.87.206 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.146.59 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.87.206, 172.67.146.59): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    raffrintar.store
    Registered
    2026-09-10 · NameCheap, Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 11:06 UTC

    Suggest a correction

  33. rain-bet.me.uk US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 12 mo ago
    DetailsHide
    Hostname
    rain-bet.me.uk
    First seen
    2026-11-08 10:16 UTC
    Listing
    MetaMask: first observed in the feed 2026-11-05 · still listed at the last successful feed check 2026-11-08 05:58 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-08 09:13 UTC to 2027-02-06 10:12 UTC
    Logged 2026-11-08 10:13 UTC in DigiCert Wyvern2027h1, entry 452,746,338
    SHA-256 21d5eccdc176d52285ea402d84e01b8398505c3ee290257974b7b9971bc61f8f
    Public key SHA-256 e6876adfdab37bfe7e763fc1386c4142d01db4478def651e9162ae12873993fa
    Addresses
    104.21.56.7 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.175.33 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.56.7, 172.67.175.33): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    rain-bet.me.uk
    Registered
    2025-11-19 · Hosting Concepts B.V.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 11:05 UTC

    Suggest a correction

  34. www-cmc.app US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 12 mo ago
    DetailsHide
    Hostname
    www-cmc.app
    First seen
    2026-11-08 10:16 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-08 05:57 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1
    Valid 2026-11-08 09:11 UTC to 2027-02-06 10:11 UTC
    Logged 2026-11-08 10:14 UTC in DigiCert Wyvern2027h1, entry 452,760,729
    SHA-256 233b40dc72988c1838112a729e146a0c887c8fe141a980c9897ee20630dc1e7e
    Public key SHA-256 94277120c29070d499cc82291328122c5cfabdbaba808cbd1b0b6b0ada6552b2
    PhishDestroy
    Addresses
    104.21.10.65 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.144.184 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.10.65, 172.67.144.184): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    www-cmc.app
    Registered
    2025-11-18 · CloudFlare, Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 11:05 UTC

    Suggest a correction

  35. www.foodie-ingredients.com.in-house-sf.com FR · AS16276 · OVH OVH SAS
    ReportedOVHUnder in-house-sf.com, reported by PhishDestroyMX presentSPF ~allDMARC missing
    DetailsHide
    Hostname
    www.foodie-ingredients.com.in-house-sf.com
    First seen
    2026-11-08 10:16 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-08 05:57 UTC
    Reported
    PhishDestroy, listing in-house-sf.com and the names under it
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR2
    Valid 2026-11-08 09:16 UTC to 2027-02-06 09:16 UTC
    Logged 2026-11-08 10:15 UTC in Google ParcelYard2027h1, entry 675,680,426
    SHA-256 ad7b4b0039444b58370d672a3b88f61de6d5bc26aaf656de13e9f306e6cfb690
    Public key SHA-256 46fbfa8e6b7b8d7f77bdf412e8ae2446bf4ccedbf8ad07573a5a050fd9b4e198
    PhishDestroy
    Addresses
    15.204.110.165 · France · AS16276 OVH OVH SAS · OVH (cloud provider)
    OVH
    OVH (15.204.110.165): a cloud provider. It rents servers and addresses to its customers.
    Domain
    in-house-sf.com
    MX
    Receives mail at in-house-sf.com
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 10:18 UTC

    Suggest a correction

  36. akita-network.xyz US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    akita-network.xyz
    First seen
    2026-11-08 10:11 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-08 05:57 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-11-08 09:06 UTC to 2027-02-06 09:06 UTC
    Logged 2026-11-08 10:05 UTC in Google ParcelYard2027h1, entry 675,536,845
    SHA-256 b6eea44a9dab206a05f10c317e2fca59875ee226d7f5c60baa6fc783d5685a33
    Public key SHA-256 950eea57556d1ed34844ae44e0a3169e83f34df9a61324efe9f656b5f9a0239d
    PhishDestroy
    Addresses
    104.21.56.167 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.187.46 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.56.167, 172.67.187.46): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    akita-network.xyz
    Registered
    2026-05-15 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 11:06 UTC

    Suggest a correction

  37. bot.dukkank.com DE · AS24940 · HETZNER-AS Hetzner Online G…
    ReportedHetznerUnder dukkank.com, reported by PhishDestroyMX presentSPF ~allDMARC missingRegistered 8 y ago
    DetailsHide
    Hostname
    bot.dukkank.com
    First seen
    2026-11-08 10:11 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-08 05:57 UTC
    Reported
    PhishDestroy, listing dukkank.com and the names under it
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR2 · precertificate
    Valid 2026-11-08 09:11 UTC to 2027-02-06 09:11 UTC
    Logged 2026-11-08 10:10 UTC in Geomys Tuscolo2027h1, entry 526,520,845
    SHA-256 87e9159f54ef2268108680cb8622b8feacc2e1fc1aa87f4af9195eddac3fa405
    Public key SHA-256 e5b3cbb2c2bbdfac5b2c31d673fe185c2b569cb3d5ed9c91d46392467cba93d5
    PhishDestroy
    Addresses
    157.180.106.231 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
    Hetzner
    Hetzner (157.180.106.231): a cloud provider. It rents servers and addresses to its customers.
    Domain
    dukkank.com
    Registered
    2018-10-15 · GoDaddy.com, LLC
    MX
    Receives mail at mail.dukkank.com
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-07 14:31 UTC

    Suggest a correction

  38. dnsstockvip.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by NPA 165 (finance and insurance)MX presentSPF ~allDMARC missing
    DetailsHide
    Hostname
    dnsstockvip.com
    First seen
    2026-11-08 10:11 UTC
    Listing
    NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 01:35 UTC
    Listed
    NPA 165
    1. Observed in the NPA 165 feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-08 09:08 UTC to 2027-02-06 10:06 UTC
    Logged 2026-11-08 10:08 UTC in Google PlumbersArms2027h1, entry 675,898,252
    SHA-256 18431bbeb0e5c54de116bbfb869c45e1edff711f9abd7f249fbc17a7ac268148
    Public key SHA-256 85407991c271aaa674d2f7ef7be6c489acb41f3732b04ebc391f773f970cd816
    Addresses
    104.21.82.126 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.157.233 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.82.126, 172.67.157.233): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    dnsstockvip.com
    MX
    Receives mail at eforward1.registrar-servers.com, eforward2.registrar-servers.com, eforward3.registrar-servers.com
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 10:12 UTC

    Suggest a correction

  39. fbcja.work US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by NPA 165 (information services)MX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    fbcja.work
    First seen
    2026-11-08 10:11 UTC
    Listing
    NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 01:35 UTC
    Listed
    NPA 165
    1. Observed in the NPA 165 feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-11-08 09:08 UTC to 2027-02-06 09:08 UTC
    Logged 2026-11-08 10:07 UTC in Google PlumbersArms2027h1, entry 675,874,362
    SHA-256 8c8d6be6280e6f1e4143890b4cc4f5dc2ec8b5d2ee452c8cb8130bf324bedb3b
    Public key SHA-256 5f48d33abfc0a27124ea9cc20c7f4b2219a6104eab9e0beef0812b0c81bc2740
    Addresses
    104.21.90.180 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.203.92 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.90.180, 172.67.203.92): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    fbcja.work
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 10:12 UTC

    Suggest a correction

  40. monero-chan.info US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 12 mo ago
    DetailsHide
    Hostname
    monero-chan.info
    First seen
    2026-11-08 10:11 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-08 05:57 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-08 09:09 UTC to 2027-02-06 10:08 UTC
    Logged 2026-11-08 10:09 UTC in DigiCert Sphinx2027h1, entry 400,538,864
    SHA-256 adb1dfe5a4243e7b15d21fdf798e7348c30b4921ddabcb7b2fe40e83f3a23539
    Public key SHA-256 075893b318ff8467088dbab87d4cfa6bf5bf1a5938ac0a0ee05adc675e4b7a6c
    PhishDestroy
    Addresses
    104.21.90.113 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.200.98 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.90.113, 172.67.200.98): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    monero-chan.info
    Registered
    2025-11-15 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 11:06 UTC

    Suggest a correction

  41. nhkutdp.com
    ListedListed by NPA 165 (finance and insurance)MX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    nhkutdp.com
    First seen
    2026-11-08 10:11 UTC
    Listing
    NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 01:35 UTC
    Listed
    NPA 165
    1. Observed in the NPA 165 feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-08 09:05 UTC to 2027-02-06 10:04 UTC
    Logged 2026-11-08 10:05 UTC in Google PlumbersArms2027h1, entry 675,856,005
    SHA-256 c4e39a4fb13168162d2792f11b01237c1947b101fe7a49e254cf6819f35ef0ef
    Public key SHA-256 37a5cf265c36741f537ccb6e5d8e04da64fe45be911ddf9ae674087140cd63f2
    Domain
    nhkutdp.com
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 10:12 UTC

    Suggest a correction

  42. order.glidz.com US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareUnder glidz.com, reported by PhishDestroyMX presentSPF ~allDMARC missing
    DetailsHide
    Hostname
    order.glidz.com
    First seen
    2026-11-08 10:11 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-08 05:57 UTC
    Reported
    PhishDestroy, listing glidz.com and the names under it
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WR1 · precertificate
    Valid 2026-11-08 09:10 UTC to 2027-02-06 10:09 UTC
    Logged 2026-11-08 10:10 UTC in DigiCert Wyvern2027h1, entry 452,709,617
    SHA-256 851888e4705035ddf5531171c4fc552ac2242a5c999c8d3452a68ac60519938a
    Public key SHA-256 82d406f2c0eb94ce30aa546f2feb56ebe84efdd092df0741f4fc93f5bea80200
    PhishDestroy
    Addresses
    104.18.22.186 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    104.18.23.186 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.18.22.186, 104.18.23.186): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    glidz.com
    MX
    Receives mail at mx01.lolipop.jp
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 10:12 UTC

    Suggest a correction

  43. pricechoice.de US · AS13335 · Cloudflare, Inc.
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    pricechoice.de
    First seen
    2026-11-08 10:11 UTC
    Listing
    CERT Polska listed it 2026-10-20 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 09:32 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-08 09:05 UTC to 2027-02-06 10:03 UTC
    Logged 2026-11-08 10:05 UTC in IPng Networks Gouda2027h1, entry 352,828,370
    SHA-256 736ea82b8fe24a94f5f291c2a71e53d659745760ad16c8595275d61324fe975a
    Public key SHA-256 090f0cd65b3ea48e90fbbbe823ba035e05e6a73e60ea9130cea3ae55b8b05873
    Addresses
    104.18.74.116 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.18.74.116): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    pricechoice.de
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 10:12 UTC

    Suggest a correction

  44. redkittencrew.top US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    redkittencrew.top
    First seen
    2026-11-08 10:11 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 05:58 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-11-08 09:11 UTC to 2027-02-06 09:11 UTC
    Logged 2026-11-08 10:10 UTC in Google ParcelYard2027h1, entry 675,607,532
    SHA-256 09515639425f79607721f3422282da088cb5e7cee97db833ae42ddb2036a3a06
    Public key SHA-256 08705ff5594d6dc44ae2a36a447d907e9238905507975a8e9c02d137796a6646
    Addresses
    104.21.71.244 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.172.101 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.71.244, 172.67.172.101): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    redkittencrew.top
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 10:12 UTC

    Suggest a correction

  45. ww17.hicdfjvgnue.info VG · AS40034 · Confluence Networks Inc
    ListedParking page · Above.comUnder hicdfjvgnue.info, listed by CERT PolskaMX presentSPF -allDMARC missingRegistered 50 d ago
    DetailsHide
    Hostname
    ww17.hicdfjvgnue.info
    First seen
    2026-11-08 10:11 UTC
    Listing
    CERT Polska listed it 2026-06-19 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 09:32 UTC
    Listed
    CERT Polska, listing hicdfjvgnue.info and the names under it
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by ZeroSSL ECC DV SSL CA 2
    Valid 2026-11-08 00:00 UTC to 2027-02-06 23:59 UTC
    Logged 2026-11-08 10:08 UTC in IPng Networks Halloumi2027h1, entry 410,103,297
    SHA-256 664dc5ede5fcb942c711643677c852862f875abeb128ecf7b25954f60594978e
    Public key SHA-256 58193ed2cf51b22910fe6c5856a5ebe9b83e04f0b5d2e4fb2b3f18e09dda5c35
    Addresses
    199.191.50.246 · British Virgin Islands · AS40034 CONFLUENCE-NETWORK-INC - Confluence Networks Inc · Confluence Networks (parking page)
    Parking page · Above.com
    The registry delegates hicdfjvgnue.info to Above.com’s nameservers, which answer for it. Above.com: a parking service. It answers for names that are typically for sale or unused. Confluence Networks (199.191.50.246): a parking service. It answers for names that are typically for sale or unused.
    Domain
    hicdfjvgnue.info
    Registered
    2026-09-19 · Sav.com, LLC - 33
    MX
    Receives mail at park-mx.above.com
    SPF
    SPF record with -all: other senders fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 07:52 UTC

    Suggest a correction

  46. www.thebergsignal-gpt.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareUnder thebergsignal-gpt.com, listed by CERT PolskaMX absentSPF missingDMARC missingRegistered 2 mo ago
    DetailsHide
    Hostname
    www.thebergsignal-gpt.com
    First seen
    2026-11-08 10:11 UTC
    Listing
    CERT Polska listed it 2026-09-28 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 09:32 UTC
    Listed
    CERT Polska, listing thebergsignal-gpt.com and the names under it
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-08 09:07 UTC to 2027-02-06 09:07 UTC
    Logged 2026-11-08 10:05 UTC in Google ParcelYard2027h1, entry 675,547,085
    SHA-256 37b65f6e475ce03d8931789739cc47054ee80ccec7fb91eb523f1031a9dac387
    Public key SHA-256 c655606e8a871cc36eea073542ba829b21df0a0d868b71f67389af92abc7b5ba
    Addresses
    104.21.70.7 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.217.127 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.70.7, 172.67.217.127): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    thebergsignal-gpt.com
    Registered
    2026-09-09 · NameCheap, Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-07 14:32 UTC

    Suggest a correction

  47. www.utility.nrs.com.ng BD · AS153568 · NEW DHAKA HARDWARE
    ReportedUnder utility.nrs.com.ng, reported by PhishDestroyMX presentMX on Spamhaus DROPSPF ~allSPF on Spamhaus DROPDMARC policy noneRegistered 2 mo ago
    DetailsHide
    Hostname
    www.utility.nrs.com.ng
    First seen
    2026-11-08 10:11 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-08 05:57 UTC
    Reported
    PhishDestroy, listing utility.nrs.com.ng and the names under it
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR2 · precertificate
    Valid 2026-11-08 09:09 UTC to 2027-02-06 09:09 UTC
    Logged 2026-11-08 10:08 UTC in DigiCert Wyvern2027h1, entry 452,698,412
    SHA-256 3b3283f435e35b9a60574b88a31fbc3ac11072b4a0f0f7a595c49d1c18dcb353
    Public key SHA-256 2553967f123101793bdd1af920843d7e4e059ffad17f6b42f80ab64d699ee4eb
    PhishDestroy
    Addresses
    163.61.188.7 · Bangladesh · AS153568 NEWDHAKAHARDWARE-AS-AP - NEW DHAKA HARDWARE
    Domain
    nrs.com.ng
    Registered
    2026-09-08 · Leads Globe
    MX
    Receives mail at nrs.com.ng
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    DMARC policy p=none: reports only
    MX listing
    Mail server nrs.com.ng at 163.61.188.7 is on Spamhaus DROP: hijacked or criminal networks.
    SPF listing
    The SPF record lists 163.61.188.7 as a sender. It is on Spamhaus DROP: hijacked or criminal networks.
    Checked
    2026-11-08 11:05 UTC

    Suggest a correction

  48. yg.naws.pp.ua US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroy
    DetailsHide
    Hostname
    yg.naws.pp.ua
    First seen
    2026-11-08 10:11 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-08 05:57 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-08 09:08 UTC to 2027-02-06 10:07 UTC
    Logged 2026-11-08 10:08 UTC in IPng Networks Gouda2027h1, entry 352,850,837
    SHA-256 70cec1ffb7d71756e494727733c8c59687f09ddb6d2bbffbc0f077554facc931
    Public key SHA-256 ca4e0e3a2ce305810c36a1f7c9b9d8f236dc2e28a4d6892e063f880263c9ec9d
    PhishDestroy
    Addresses
    104.21.16.45 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.166.28 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.16.45, 172.67.166.28): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.

    Suggest a correction

  49. aavefinance.cloud US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    aavefinance.cloud
    First seen
    2026-11-08 10:05 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 05:58 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-08 09:04 UTC to 2027-02-06 10:03 UTC
    Logged 2026-11-08 10:04 UTC in DigiCert Sphinx2027h1, entry 400,511,166
    SHA-256 8fb4db0eb1f03ff0770c2828042fe4780b6ad6b0272cbf17afe8fcd7d799175e
    Public key SHA-256 72627a62817cfcbb8e7d10a440c409450367256477a61d41efb665c0464e7bbb
    Addresses
    104.21.14.18 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.202.6 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.14.18, 172.67.202.6): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    aavefinance.cloud
    Registered
    2026-07-13 · Dynadot, LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 11:05 UTC

    Suggest a correction

  50. api.echo-ledgerly-engine-com.financecryptoworld.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareUnder financecryptoworld.com, listed by CERT PolskaMX presentSPF ~allDMARC missingRegistered 22 mo ago
    DetailsHide
    Hostname
    api.echo-ledgerly-engine-com.financecryptoworld.com
    First seen
    2026-11-08 10:05 UTC
    Listing
    CERT Polska listed it 2026-06-12 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 09:32 UTC
    Listed
    CERT Polska, listing financecryptoworld.com and the names under it
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-08 09:02 UTC to 2027-02-06 10:02 UTC
    Logged 2026-11-08 10:02 UTC in Google ParcelYard2027h1, entry 675,495,923
    SHA-256 29c48b9aac491bacaf5c8e27bf96fb82a0f716b3cdfdf5a83f55a8a0683bdcb2
    Public key SHA-256 30ea5ffc05dbae4d9250c87202d10263dbe5f4ad07bd39c683c9c6a5f371a45d
    Addresses
    104.21.10.130 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.131.121 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.10.130, 172.67.131.121): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    financecryptoworld.com
    Registered
    2025-01-30 · MainReg Inc.
    MX
    Receives mail at mail.financecryptoworld.com
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-07 17:16 UTC

    Suggest a correction

  51. cat-casino-registraciya77t.info US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 12 mo ago
    DetailsHide
    Hostname
    cat-casino-registraciya77t.info
    First seen
    2026-11-08 10:05 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-08 05:57 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-08 09:02 UTC to 2027-02-06 10:00 UTC
    Logged 2026-11-08 10:02 UTC in Let's Encrypt Sycamore2027h1, entry 1,044,395,935
    SHA-256 1bf13b9ece21ed926e56ef1ee5a04248ce95c8f54518352fa586aa8713470a77
    Public key SHA-256 080fc7f25970e0a8ac7114cd5b3bcd2a283cca992769be53b8f04daaca538a56
    PhishDestroy
    Addresses
    104.21.53.219 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.219.42 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.53.219, 172.67.219.42): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    cat-casino-registraciya77t.info
    Registered
    2025-11-18 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 11:06 UTC

    Suggest a correction

  52. deradlernews.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    deradlernews.com
    First seen
    2026-11-08 10:05 UTC
    Listing
    CERT Polska listed it 2026-09-10 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 09:32 UTC
    PhishDestroy: first observed in the feed 2026-10-26 · still listed at the last successful feed check 2026-11-08 05:57 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-08 09:04 UTC to 2027-02-06 09:04 UTC
    Logged 2026-11-08 10:03 UTC in Google PlumbersArms2027h1, entry 675,819,787
    SHA-256 5b67bbb17c68f277cf9051463a0cca50abd5d0a313e3091e7b5d28a73f002089
    Public key SHA-256 424862fe66c122689a4dadb05546406dd4b2834019a6817db6affd43740b358c
    Addresses
    104.21.68.222 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.199.47 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.68.222, 172.67.199.47): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    deradlernews.com
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 10:07 UTC

    Suggest a correction

  53. elitesagrong.com AU · AS154653 · ParkLogic Pty Ltd
    ReportedParking page · ParkLogicReported by PhishDestroyMX presentSPF -allDMARC missing
    DetailsHide
    Hostname
    elitesagrong.com
    First seen
    2026-11-08 10:05 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-08 05:57 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-08 09:05 UTC to 2027-02-06 09:05 UTC
    Logged 2026-11-08 10:04 UTC in Google PlumbersArms2027h1, entry 675,831,855
    SHA-256 280a3fd1aefb943f9b8f32d6bffd7ea7279d68f913af0b4ee8a30f5bf814086a
    Public key SHA-256 9c0d3cae4928bd8bad20b19f0040371e902bb6f7825ecdd301bfef5b7e864f57
    PhishDestroy
    Addresses
    162.4.84.247 · Australia · AS154653 PARKLOGICPTYLTD-AS-AP - ParkLogic Pty Ltd · ParkLogic (parking page)
    Parking page · ParkLogic
    The registry delegates elitesagrong.com to ParkLogic’s nameservers, which answer for it. ParkLogic (162.4.84.247): a parking service. It answers for names that are typically for sale or unused.
    Domain
    elitesagrong.com
    MX
    Receives mail at mail.eye-mail.net
    SPF
    SPF record with -all: other senders fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 10:07 UTC

    Suggest a correction

  54. ellipse.fun US · AS16509 · Amazon.com, Inc.2 addresses
    ListedAmazon Web ServicesListed by MetaMaskMX absentSPF missingDMARC quarantineRegistered 8 mo ago
    DetailsHide
    Hostname
    ellipse.fun
    First seen
    2026-11-08 10:05 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 05:58 UTC
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-08 05:57 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by GoDaddy TLS Intermediate CA DV - R1v1 · precertificate
    Valid 2026-11-08 10:04 UTC to 2027-05-25 10:04 UTC
    Logged 2026-11-08 10:04 UTC in GoDaddy Aquamarine2027h1, entry 195,466,334
    SHA-256 b47c1865720108070c62825c8fb76a7546cc1c8f228d727c225b94b82d9bf54c
    Public key SHA-256 67d9074a63dfb413625d420edadd9a102e6861144a6fb00e1afcecd027382d6c
    Addresses
    3.33.130.190 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
    15.197.148.33 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
    Amazon Web Services
    Amazon Web Services (3.33.130.190, 15.197.148.33): a cloud provider. It rents servers and addresses to its customers.
    Domain
    ellipse.fun
    Registered
    2026-03-05 · GoDaddy.com, LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    DMARC policy p=quarantine
    Checked
    2026-11-08 11:06 UTC

    Suggest a correction

  55. gammastack.com US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX presentDMARC quarantine
    DetailsHide
    Hostname
    gammastack.com
    First seen
    2026-11-08 10:05 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-08 05:57 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-08 09:05 UTC to 2027-02-06 10:03 UTC
    Logged 2026-11-08 10:05 UTC in Google PlumbersArms2027h1, entry 675,843,260
    SHA-256 72e01443c4be15aae66250c10b74586f27bec650c7a71e818b0fe172bd5624dc
    Public key SHA-256 52eb3828f05a04fd6338880799a0e75066ebc84a0ecf438317f8bcfe9bacdf46
    PhishDestroy
    Addresses
    104.21.95.116 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.144.188 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.95.116, 172.67.144.188): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    gammastack.com
    MX
    Receives mail at aspmx.l.google.com, alt1.aspmx.l.google.com, alt2.aspmx.l.google.com
    DMARC
    DMARC policy p=quarantine
    Checked
    2026-11-08 10:07 UTC

    Suggest a correction

  56. gtastarock.com
    ListedListed by MetaMaskMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    gtastarock.com
    First seen
    2026-11-08 10:05 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 05:58 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-08 09:03 UTC to 2027-02-06 10:01 UTC
    Logged 2026-11-08 10:03 UTC in Let's Encrypt Sycamore2027h1, entry 1,044,419,670
    SHA-256 3bda40fdbada67c5c305ea214b0a8f8088c94b62390c105fc3686c5686988683
    Public key SHA-256 963970a0064a8000544d8c89d683b8feddfd8dbdf25b206d5a974dcae1cc23e1
    Domain
    gtastarock.com
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 10:07 UTC

    Suggest a correction

  57. img.linkvertise.com US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareUnder linkvertise.com, reported by PhishDestroyMX presentSPF -allDMARC rejectRegistered 12 y ago
    DetailsHide
    Hostname
    img.linkvertise.com
    First seen
    2026-11-08 10:05 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-08 05:57 UTC
    Reported
    PhishDestroy, listing linkvertise.com and the names under it
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-08 09:01 UTC to 2027-02-06 10:00 UTC
    Logged 2026-11-08 10:01 UTC in Geomys Tuscolo2027h1, entry 526,422,326
    SHA-256 d825377e7386aab871de45051ec4a8e70e8a9bc022433d602d5d3388c0835935
    Public key SHA-256 28f8683d629f7ce3269441e3bbf25b26e72facd19f478e6514a388ac0c9afa6a
    PhishDestroy
    Addresses
    104.18.0.75 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    104.18.1.75 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.18.0.75, 104.18.1.75): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    linkvertise.com
    Registered
    2015-03-22 · Cronon GmbH
    MX
    Receives mail at aspmx.l.google.com, alt1.aspmx.l.google.com, alt2.aspmx.l.google.com
    SPF
    SPF record with -all: other senders fail
    DMARC
    DMARC policy p=reject
    Checked
    2026-11-07 14:46 UTC

    Suggest a correction

  58. kayanalgemah.com CY · AS47583 · AS-HOSTINGER Hostinger Inte…2 addresses
    ReportedHostingerReported by PhishDestroyMX presentSPF ~allDMARC policy none
    DetailsHide
    Hostname
    kayanalgemah.com
    First seen
    2026-11-08 10:05 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-08 05:57 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-11-08 09:03 UTC to 2027-02-06 09:03 UTC
    Logged 2026-11-08 10:01 UTC in Google ParcelYard2027h1, entry 675,479,681
    SHA-256 76b3873434544c471549bfe747b2a3cabd8f7536a4faf6c0ae373fb412839e9a
    Public key SHA-256 61069f61a11b6da888382f10ab5edcbfd2f6be8f778760be4ed24ac775cae36e
    PhishDestroy
    Addresses
    92.113.18.100 · Cyprus · AS47583 AS-HOSTINGER Hostinger International Limited · Hostinger (shared hosting)
    2a02:4780:3f:1788:0:1373:7eaf:2
    Hostinger
    Hostinger (92.113.18.100): shared web hosting and domain registration. One address typically serves many customer sites.
    Domain
    kayanalgemah.com
    MX
    Receives mail at aspmx.l.google.com, alt1.aspmx.l.google.com, alt2.aspmx.l.google.com
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    DMARC policy p=none: reports only
    Checked
    2026-11-08 10:07 UTC

    Suggest a correction

  59. mellbetgame.live GB · AS200514 · KnownSRV KnownSRV Ltd.
    ReportedReported by PhishDestroyMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    mellbetgame.live
    First seen
    2026-11-08 10:05 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-08 05:57 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-08 09:02 UTC to 2027-02-06 09:02 UTC
    Logged 2026-11-08 10:01 UTC in Google ParcelYard2027h1, entry 675,475,648
    SHA-256 060a2c4e7b08b656d9fa9d8d254c23ef14838ec38c3a4d2dd942e2f7b537d2df
    Public key SHA-256 b48db8108e32d50b26702fb3abb3d188e1122e83532a854132b786f080ba38aa
    PhishDestroy
    Addresses
    89.248.67.128 · United Kingdom · AS200514 KnownSRV KnownSRV Ltd.
    Domain
    mellbetgame.live
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 10:07 UTC

    Suggest a correction

  60. mk-produkter.stage.io-ext.se BE · AS34762 · COMBELL-AS Combell NV
    ListedUnder io-ext.se, listed by MetaMaskMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    mk-produkter.stage.io-ext.se
    First seen
    2026-11-08 10:05 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 05:58 UTC
    Listed
    MetaMask, listing io-ext.se and the names under it
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR2
    Valid 2026-11-08 09:03 UTC to 2027-02-06 09:03 UTC
    Logged 2026-11-08 10:01 UTC in Google ParcelYard2027h1, entry 675,482,747
    SHA-256 61710ad6ef3ded9cf800d4c99c7028d5dc37b2bcb7c9a4f7ee94f9a7e583ec40
    Public key SHA-256 195e475dde27e6c6233a188e81c83002e827d2fb88879671549c86ef4a8e2388
    Addresses
    188.208.37.137 · Belgium · AS34762 COMBELL-AS Combell NV
    Domain
    io-ext.se
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 05:15 UTC

    Suggest a correction

  61. www.kayanalgemah.com CY · AS47583 · AS-HOSTINGER Hostinger Inte…2 addresses
    ReportedHostingerUnder kayanalgemah.com, reported by PhishDestroyMX presentSPF ~allDMARC policy none
    DetailsHide
    Hostname
    www.kayanalgemah.com
    First seen
    2026-11-08 10:05 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-08 05:57 UTC
    Reported
    PhishDestroy, listing kayanalgemah.com and the names under it
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-11-08 09:03 UTC to 2027-02-06 09:03 UTC
    Logged 2026-11-08 10:01 UTC in Google ParcelYard2027h1, entry 675,479,681
    SHA-256 76b3873434544c471549bfe747b2a3cabd8f7536a4faf6c0ae373fb412839e9a
    Public key SHA-256 61069f61a11b6da888382f10ab5edcbfd2f6be8f778760be4ed24ac775cae36e
    PhishDestroy
    Addresses
    92.113.18.100 · Cyprus · AS47583 AS-HOSTINGER Hostinger International Limited · Hostinger (shared hosting)
    2a02:4780:3f:1788:0:1373:7eaf:2
    Hostinger
    Hostinger (92.113.18.100): shared web hosting and domain registration. One address typically serves many customer sites.
    Domain
    kayanalgemah.com
    MX
    Receives mail at aspmx.l.google.com, alt1.aspmx.l.google.com, alt2.aspmx.l.google.com
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    DMARC policy p=none: reports only
    Checked
    2026-11-08 10:07 UTC

    Suggest a correction

  62. www.lapleiad.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 4 y ago
    DetailsHide
    Hostname
    www.lapleiad.com
    First seen
    2026-11-08 10:05 UTC
    Listing
    CERT Polska listed it 2026-07-17 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 09:32 UTC
    PhishDestroy: first observed in the feed 2026-11-01 · still listed at the last successful feed check 2026-11-08 05:57 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-11-08 09:05 UTC to 2027-02-06 09:05 UTC
    Logged 2026-11-08 10:04 UTC in Let's Encrypt Sycamore2027h1, entry 1,044,441,096
    SHA-256 8eb30284978aa5e966a91c462367146ddef37ee2b75432cbb019e405bbd65f95
    Public key SHA-256 7c370fe6674f083e91c925b5e15869e78c44c00499e67bfdba1119db50dd8a3e
    Addresses
    104.21.72.116 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.183.178 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.72.116, 172.67.183.178): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    lapleiad.com
    Registered
    2022-09-29 · Dynadot Inc
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-07 16:49 UTC

    Suggest a correction

  63. www.whm.www.legion.it AU · AS154653 · ParkLogic Pty Ltd
    ReportedParking page · ParkLogicUnder legion.it, reported by PhishDestroyMX presentSPF -allDMARC missing
    DetailsHide
    Hostname
    www.whm.www.legion.it
    First seen
    2026-11-08 10:05 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-08 05:57 UTC
    Reported
    PhishDestroy, listing legion.it and the names under it
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-11-08 09:03 UTC to 2027-02-06 09:03 UTC
    Logged 2026-11-08 10:01 UTC in DigiCert Wyvern2027h1, entry 452,658,717
    SHA-256 7c2c737a1d1f7ff2b7db94ea6d208023390739b625be78a189949928ba4a9045
    Public key SHA-256 9c0d3cae4928bd8bad20b19f0040371e902bb6f7825ecdd301bfef5b7e864f57
    PhishDestroy
    Addresses
    162.4.84.215 · Australia · AS154653 PARKLOGICPTYLTD-AS-AP - ParkLogic Pty Ltd · ParkLogic (parking page)
    Parking page · ParkLogic
    The registry delegates legion.it to ParkLogic’s nameservers, which answer for it. ParkLogic (162.4.84.215): a parking service. It answers for names that are typically for sale or unused.
    Domain
    legion.it
    MX
    Receives mail at mx156.hostedmxserver.com
    SPF
    SPF record with -all: other senders fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 10:07 UTC

    Suggest a correction

  64. xn--mrkng10061-m8a.com DE · AS206834 · TEAMINTERNET-CA-AS Team Int…
    ReportedParking page · ParkingCrew (Team Internet)Reported by PhishDestroyMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    xn--mrkng10061-m8a.com
    First seen
    2026-11-08 10:05 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-11-07 · still listed at the last successful feed check 2026-11-08 05:57 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-11-08 09:02 UTC to 2027-02-06 09:02 UTC
    Logged 2026-11-08 10:00 UTC in IPng Networks Gouda2027h1, entry 352,791,945
    SHA-256 75b73b366bbff4b3837097e8089c4ac4f3ae41c543fdb37cc9afff6912a51969
    Public key SHA-256 1102628579c5a5630f091ad78e56854af834143e76652fb215ea8aa162c03d1c
    PhishDestroy
    Addresses
    185.53.179.136 · Germany · AS206834 TEAMINTERNET-CA-AS Team Internet AG · ParkingCrew (Team Internet) (parking page)
    Parking page · ParkingCrew (Team Internet)
    ParkingCrew (Team Internet) (185.53.179.136): a parking service. It answers for names that are typically for sale or unused.
    Domain
    xn--mrkng10061-m8a.com
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 10:07 UTC

    Suggest a correction

  65. zebecdesktop.io US · AS16509 · Amazon.com, Inc.2 addresses
    ListedAmazon Web ServicesListed by MetaMaskMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    zebecdesktop.io
    First seen
    2026-11-08 10:05 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 05:58 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-08 09:02 UTC to 2027-02-06 09:02 UTC
    Logged 2026-11-08 10:00 UTC in Google PlumbersArms2027h1, entry 675,780,149
    SHA-256 c56d6e5481dbc4130b66d88bec8587f08eb40895851dc69c0fe40caf3e0c40a6
    Public key SHA-256 527b33357d7f9b6d101ac5f9ffc128f44f95590d6d215a4453dae045f41d4e6f
    Addresses
    64.29.17.1 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
    216.198.79.1 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
    Amazon Web Services
    Amazon Web Services (64.29.17.1, 216.198.79.1): a cloud provider. It rents servers and addresses to its customers.
    Domain
    zebecdesktop.io
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 10:07 UTC

    Suggest a correction

  66. erhsrtnrrn.shop US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by NPA 165 (information services)MX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    erhsrtnrrn.shop
    First seen
    2026-11-08 10:00 UTC
    Listing
    NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 01:35 UTC
    Listed
    NPA 165
    1. Observed in the NPA 165 feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-08 08:59 UTC to 2027-02-06 09:58 UTC
    Logged 2026-11-08 09:59 UTC in Google ParcelYard2027h1, entry 675,452,251
    SHA-256 f56cd6f20d7b52e7245009246c3a0b6031a1cdb54597975006661ffdb9b6d260
    Public key SHA-256 bc10056a714de6eeff2ccbc6970e7fb66f5a6350188a1a95bd3bd5d2b706e256
    Addresses
    104.21.49.159 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.147.71 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.49.159, 172.67.147.71): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    erhsrtnrrn.shop
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 10:01 UTC

    Suggest a correction

  67. moonwell-allocations.xyz US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    moonwell-allocations.xyz
    First seen
    2026-11-08 10:00 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 05:58 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-11-08 08:59 UTC to 2027-02-06 08:59 UTC
    Logged 2026-11-08 09:57 UTC in IPng Networks Halloumi2027h1, entry 410,009,992
    SHA-256 2d85b407e25221eae7c1bedcdbbd373e9adcb011b7e5b7c8b64f721e66d9a782
    Public key SHA-256 90c9068ab9bdb42604f0bfc6eb83f3099427f78c72d63e3d8346dfc47c16821c
    Addresses
    104.21.54.229 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.143.30 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.54.229, 172.67.143.30): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    moonwell-allocations.xyz
    Registered
    2026-05-15 · PDR Ltd. d/b/a PublicDomainRegistry.com
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 11:06 UTC

    Suggest a correction

  68. panel-v-830194.eu.cc US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT Polska
    DetailsHide
    Hostname
    panel-v-830194.eu.cc
    First seen
    2026-11-08 10:00 UTC
    Listing
    CERT Polska listed it 2026-09-10 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 09:32 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-08 08:57 UTC to 2027-02-06 09:54 UTC
    Logged 2026-11-08 09:57 UTC in Geomys Tuscolo2027h1, entry 526,382,661
    SHA-256 704a61f0bbcf8d8fd1152d4d524fa6420ecbcdafbff8e5c4f74c640d4ddeddc6
    Public key SHA-256 fd6234def1994b369038b70d66ed2f9972fab4e3df6a22d281888587b1990ce8
    Addresses
    104.21.70.69 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.221.21 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.70.69, 172.67.221.21): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.

    Suggest a correction

  69. prodigitfx.net US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    prodigitfx.net
    First seen
    2026-11-08 10:00 UTC
    Listing
    CERT Polska listed it 2026-09-12 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 09:32 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1
    Valid 2026-09-10 05:40 UTC to 2026-12-09 06:39 UTC
    Logged 2026-11-08 09:59 UTC in Let's Encrypt Sycamore2026h2, entry 1,081,936,389
    SHA-256 0401424b107428aef1992c9cf41801839059eaef8397a5e823e2920f11d10def
    Public key SHA-256 976bde607842f29b1591c4bfc1cdc6dd7a4903ea02a7cd39c780ce82ab7142e2
    Addresses
    104.21.51.120 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.180.44 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.51.120, 172.67.180.44): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    prodigitfx.net
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 10:01 UTC

    Suggest a correction

  70. tmaxiomshop.com
    ListedListed by MetaMaskMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    tmaxiomshop.com
    First seen
    2026-11-08 10:00 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 05:58 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-11-08 09:00 UTC to 2027-02-06 09:00 UTC
    Logged 2026-11-08 09:58 UTC in Geomys Tuscolo2027h1, entry 526,400,645
    SHA-256 1d6f85b2143a98d48dad3f7de6ba218498b45bcea0f3622e23666998d517fb8e
    Public key SHA-256 87f57caa29fa9e3b1b629a1981867e91140b1f5b2fc480ff3e26ee53d4f72b55
    Domain
    tmaxiomshop.com
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 10:01 UTC

    Suggest a correction

  71. www.na1026j.site US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareUnder na1026j.site, listed by MetaMaskMX absentSPF missingDMARC missingRegistered 12 d ago
    DetailsHide
    Hostname
    www.na1026j.site
    First seen
    2026-11-08 10:00 UTC
    Listing
    MetaMask: first observed in the feed 2026-11-03 · still listed at the last successful feed check 2026-11-08 05:58 UTC
    Listed
    MetaMask, listing na1026j.site and the names under it
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1
    Valid 2026-10-30 03:00 UTC to 2027-01-28 04:00 UTC
    Logged 2026-11-08 09:58 UTC in TrustAsia Luoshu2027, entry 577,631,060
    SHA-256 d016b0fb4dfa189beaa2414bf55b40bb0f125a240fa5df856974e0c9796862c5
    Public key SHA-256 af934e5c2e486046e4495205ad2956519bc7d8668dfed15def848311d988d634
    Addresses
    104.21.14.225 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.204.137 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.14.225, 172.67.204.137): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    na1026j.site
    Registered
    2026-10-27 · NameCheap, Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 11:06 UTC

    Suggest a correction

  72. api.assets.crypto-polis.org RU · AS57724 · DDOS-GUARD DDOS-GUARD LTD2 addresses
    ReportedDDoS-GuardUnder crypto-polis.org, reported by PhishDestroyMX presentSPF -allDMARC policy noneRegistered 7 y ago
    DetailsHide
    Hostname
    api.assets.crypto-polis.org
    First seen
    2026-11-08 09:56 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-08 05:57 UTC
    Reported
    PhishDestroy, listing crypto-polis.org and the names under it
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR2 · precertificate
    Valid 2026-11-08 08:54 UTC to 2027-02-06 08:54 UTC
    Logged 2026-11-08 09:52 UTC in DigiCert Sphinx2027h1, entry 400,412,550
    SHA-256 17ad08ad4827378faad602da26b16e78aa5d2b99d816ff2c2f0a8532ab110df1
    Public key SHA-256 4b60cf236100d695ef55f863525a998a2a918ffad48bf79a69cdd8011818f7f5
    PhishDestroy
    Addresses
    185.178.208.132 · Russia · AS57724 DDOS-GUARD DDOS-GUARD LTD · DDoS-Guard (cdn)
    185.178.208.182 · Russia · AS57724 DDOS-GUARD DDOS-GUARD LTD · DDoS-Guard (cdn)
    DDoS-Guard
    DDoS-Guard (185.178.208.132, 185.178.208.182): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    crypto-polis.org
    Registered
    2019-12-20 · Internet Domain Service BS Corp
    MX
    Receives mail at mx.yandex.net
    SPF
    SPF record with -all: other senders fail
    DMARC
    DMARC policy p=none: reports only
    Checked
    2026-11-08 00:44 UTC

    Suggest a correction

  73. kucoin-wallet.icu US · AS13335 · Cloudflare, Inc.4 addressesKuCoin
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 3 mo ago
    DetailsHide
    Hostname
    kucoin-wallet.icu
    First seen
    2026-11-08 09:56 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 05:58 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-11-08 08:56 UTC to 2027-02-06 08:56 UTC
    Logged 2026-11-08 09:54 UTC in IPng Networks Halloumi2027h1, entry 409,982,608
    SHA-256 75db84fde5de96e8607e491469397f6b73576fae03790b8909f9cfc39f6b670f
    Public key SHA-256 166adb09a1b786c1e7754412cdf8998e03410785cf86350a03eb2064c6c95edf
    Brand
    KuCoin
    Addresses
    104.21.10.32 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.189.225 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3034::6815:a20
    2606:4700:3037::ac43:bde1
    Cloudflare
    Cloudflare (104.21.10.32, 172.67.189.225): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    kucoin-wallet.icu
    Registered
    2026-08-10 · Gname.com Pte. Ltd.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 10:46 UTC

    Suggest a correction

  74. morgancoin.org US · AS16509 · Amazon.com, Inc.
    ReportedAmazon Web ServicesReported by PhishDestroyMX presentSPF ~allDMARC policy noneRegistered 22 mo ago
    DetailsHide
    Hostname
    morgancoin.org
    First seen
    2026-11-08 09:56 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-08 05:57 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR1
    Valid 2026-11-08 08:57 UTC to 2027-02-06 08:57 UTC
    Logged 2026-11-08 09:55 UTC in Google PlumbersArms2027h1, entry 675,711,332
    SHA-256 12687cc8241ba37c8407b9b148a406896fd78778bf76642f18ccaac26a995394
    Public key SHA-256 73f76afdf1122b7c2330f395a94e3acfea314e0798ebeba2af48ebc09d858708
    PhishDestroy
    Addresses
    76.76.21.21 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
    Amazon Web Services
    Amazon Web Services (76.76.21.21): a cloud provider. It rents servers and addresses to its customers.
    Domain
    morgancoin.org
    Registered
    2025-01-18 · Tucows Domains Inc.
    MX
    Receives mail at mx.zoho.com, mx2.zoho.com, mx3.zoho.com
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    DMARC policy p=none: reports only
    Checked
    2026-11-07 12:15 UTC

    Suggest a correction

  75. skurvorizan-france.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    skurvorizan-france.com
    First seen
    2026-11-08 09:56 UTC
    Listing
    CERT Polska listed it 2026-09-10 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 09:32 UTC
    PhishDestroy: first observed in the feed 2026-11-07 · still listed at the last successful feed check 2026-11-08 05:57 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-08 08:55 UTC to 2027-02-06 09:51 UTC
    Logged 2026-11-08 09:55 UTC in DigiCert Wyvern2027h1, entry 452,597,882
    SHA-256 8d18c8bdc593a718775f0f8d29a093b2393aaa2442c91898d962de6d63c99317
    Public key SHA-256 f44e6bb60abf7fd7432d69ec88f7275d48f48375f6bded05eb09c6c17f009cac
    Addresses
    104.21.47.194 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.172.37 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.47.194, 172.67.172.37): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    skurvorizan-france.com
    Registered
    2026-07-13 · Dynadot Inc
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 10:01 UTC

    Suggest a correction

  76. spengprotr.store US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 59 d ago
    DetailsHide
    Hostname
    spengprotr.store
    First seen
    2026-11-08 09:56 UTC
    Listing
    CERT Polska listed it 2026-09-11 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 09:32 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-11-08 08:53 UTC to 2027-02-06 08:53 UTC
    Logged 2026-11-08 09:51 UTC in Google ParcelYard2027h1, entry 675,347,443
    SHA-256 8f3a3786e6ca025c1757798b3b5da4855c9f1e40e7c67e170e373213d1add8ed
    Public key SHA-256 1df6f647a374a8c846dfe6503180b4b76e9793e7dae086f9f07a3f6869156424
    Addresses
    104.21.69.19 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.202.210 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.69.19, 172.67.202.210): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    spengprotr.store
    Registered
    2026-09-10 · NameCheap, Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 11:06 UTC

    Suggest a correction

  77. www.echodigital.app US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareUnder echodigital.app, reported by PhishDestroyMX presentSPF ~allDMARC quarantineRegistered 5 mo ago
    DetailsHide
    Hostname
    www.echodigital.app
    First seen
    2026-11-08 09:56 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-08 05:57 UTC
    Reported
    PhishDestroy, listing echodigital.app and the names under it
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR1
    Valid 2026-11-08 08:57 UTC to 2027-02-06 08:57 UTC
    Logged 2026-11-08 09:55 UTC in Google PlumbersArms2027h1, entry 675,711,399
    SHA-256 6c01de98e33e611e355dd1ffc437584c63951bd497138d53b1a6c2fb674821fc
    Public key SHA-256 499027e01778496a3480638d322ddfde790d476e540d2695ec14517dc31f13cd
    PhishDestroy
    Addresses
    104.21.23.10 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.208.68 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.23.10, 172.67.208.68): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    echodigital.app
    Registered
    2026-06-08 · GoDaddy.com, LLC
    MX
    Receives mail at route2.mx.cloudflare.net, route1.mx.cloudflare.net, route3.mx.cloudflare.net
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    DMARC policy p=quarantine
    Checked
    2026-11-08 11:05 UTC

    Suggest a correction

  78. www.kucoin-login.com US · AS13335 · Cloudflare, Inc.4 addressesKuCoin
    ListedCloudflareUnder kucoin-login.com, listed by MetaMaskMX absentSPF missingDMARC missingRegistered 3 mo ago
    DetailsHide
    Hostname
    www.kucoin-login.com
    First seen
    2026-11-08 09:56 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 05:58 UTC
    Listed
    MetaMask, listing kucoin-login.com and the names under it
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-11-08 08:53 UTC to 2027-02-06 08:53 UTC
    Logged 2026-11-08 09:52 UTC in IPng Networks Halloumi2027h1, entry 409,962,682
    SHA-256 4e853f866ef0f99151eb7f577ba1739ed99dff73f4fbbee0980850f72787bc27
    Public key SHA-256 289c6894163033e4f9fedace421d6edc47ec585f4c5783480b8c62729c2b7d8f
    Brand
    KuCoin
    Addresses
    104.21.79.102 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.169.238 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3037::6815:4f66
    2606:4700:3037::ac43:a9ee
    Cloudflare
    Cloudflare (104.21.79.102, 172.67.169.238): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    kucoin-login.com
    Registered
    2026-08-10 · Realtime Register B.V.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 09:57 UTC

    Suggest a correction

  79. 51jiaohuanji.com
    ListedListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 4 d ago
    DetailsHide
    Hostname
    51jiaohuanji.com
    First seen
    2026-11-08 09:51 UTC
    First published
    2026-11-08 09:58 UTC
    Listing
    CERT Polska listed it 2026-07-25 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 09:32 UTC
    DNS
    Not resolving · checked 2026-11-08 11:03 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-11-08 08:48 UTC to 2027-02-06 08:48 UTC
    Logged 2026-11-08 09:47 UTC in Let's Encrypt Sycamore2027h1, entry 1,044,060,854
    SHA-256 4fdc65be3cc66cc46158a460ab0853b1191809b6580ecd889c98329f31ec554f
    Public key SHA-256 a19c7cdde2aad2f3dc746fd7a7cbf8bb19fe83be702acefe3ef5150bbac258fc
    Domain
    51jiaohuanji.com
    Registered
    2026-11-04 · Gname 495 Inc
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 09:57 UTC

    Suggest a correction

  80. crumbs.w3bx.vip US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareUnder w3bx.vip, listed by MetaMaskMX absentSPF missingDMARC missingRegistered 2 mo ago
    DetailsHide
    Hostname
    crumbs.w3bx.vip
    First seen
    2026-11-08 09:51 UTC
    First published
    2026-11-08 09:58 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 05:58 UTC
    DNS
    Resolves · checked 2026-11-08 10:01 UTC
    Listed
    MetaMask, listing w3bx.vip and the names under it
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-11-08 08:51 UTC to 2027-02-06 08:51 UTC
    Logged 2026-11-08 09:49 UTC in Google PlumbersArms2027h1, entry 675,631,941
    SHA-256 0d3eb7cdc175226930373aaba48290f6d85fb5f28be525112adba7d51cfbbe77
    Public key SHA-256 350d7121bae76ac4e383d566bb2c655765c89a3b78e9ae99ae478b953d055aa9
    Addresses
    104.21.24.170 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.219.194 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.24.170, 172.67.219.194): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    w3bx.vip
    Registered
    2026-09-09 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 10:06 UTC

    Suggest a correction

  81. drops-xrpl.live US · AS13335 · Cloudflare, Inc.2 addressesRipple (XRP)
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    drops-xrpl.live
    First seen
    2026-11-08 09:51 UTC
    First published
    2026-11-08 09:58 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 05:58 UTC
    DNS
    Resolves · checked 2026-11-08 10:01 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-08 08:46 UTC to 2027-02-06 09:44 UTC
    Logged 2026-11-08 09:46 UTC in DigiCert Sphinx2027h1, entry 400,376,683
    SHA-256 78a7a2dc66d28d55f2040f40e98c7b783b314058073bf153f9a310edb179822b
    Public key SHA-256 073f7b641b281f892bcc4b41b5ce443206b4acd9cb9109e1f646cfb4f105e073
    Brand
    Ripple (XRP)
    Addresses
    104.21.91.253 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.183.109 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.91.253, 172.67.183.109): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    drops-xrpl.live
    Registered
    2026-07-13 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 09:57 UTC

    Suggest a correction

  82. fkxir.work US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by NPA 165 (information services)MX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    fkxir.work
    First seen
    2026-11-08 09:51 UTC
    First published
    2026-11-08 09:58 UTC
    Listing
    NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 01:35 UTC
    DNS
    Resolves · checked 2026-11-08 10:01 UTC
    Listed
    NPA 165
    1. Observed in the NPA 165 feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-11-08 08:48 UTC to 2027-02-06 08:48 UTC
    Logged 2026-11-08 09:46 UTC in Let's Encrypt Willow2027h1, entry 1,000,987,040
    SHA-256 06f9db6774ea88099561aa56447e9a0713eab8137daa5302855e4ab4331dfdf4
    Public key SHA-256 4ceb1e74d30f95cb445e25cce66666ff7f123fcbfc45bb8756305e0c017300ff
    Addresses
    104.21.55.17 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.144.1 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.55.17, 172.67.144.1): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    fkxir.work
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 09:57 UTC

    Suggest a correction

  83. grok-46k.com US · AS16509 · Amazon.com, Inc.2 addresses
    ReportedAmazon Web ServicesReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    grok-46k.com
    First seen
    2026-11-08 09:51 UTC
    First published
    2026-11-08 09:58 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-08 05:57 UTC
    DNS
    Resolves · checked 2026-11-08 10:01 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-11-08 08:48 UTC to 2027-02-06 08:48 UTC
    Logged 2026-11-08 09:46 UTC in Let's Encrypt Willow2027h1, entry 1,000,985,808
    SHA-256 515230e237ebd2fd3ebf0c1f6fa9c3194b14348ec6d304273ea4e9d775273d49
    Public key SHA-256 3a912387aeceb17c593c60b691f3703face8b9a446b16c0b898f4fdc80496d54
    PhishDestroy
    Addresses
    75.2.60.5 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
    99.83.231.61 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
    Amazon Web Services
    Amazon Web Services (75.2.60.5, 99.83.231.61): a cloud provider. It rents servers and addresses to its customers.
    Domain
    grok-46k.com
    Registered
    2026-05-15 · Ultahost, Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 09:57 UTC

    Suggest a correction

  84. kucoin-login.com US · AS13335 · Cloudflare, Inc.4 addressesKuCoin
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 3 mo ago
    DetailsHide
    Hostname
    kucoin-login.com
    First seen
    2026-11-08 09:51 UTC
    First published
    2026-11-08 09:58 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 05:58 UTC
    DNS
    Resolves · checked 2026-11-08 10:01 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-11-08 08:52 UTC to 2027-02-06 08:52 UTC
    Logged 2026-11-08 09:50 UTC in IPng Networks Halloumi2027h1, entry 409,948,647
    SHA-256 3ed7b4655621010cc5ed40410011bc1a89c9f5b98941a7fc326169af53a711dc
    Public key SHA-256 b2db5975a9231fc1494ac19445f8394278f343a20ec4291ff6f024a7c2485e7a
    Brand
    KuCoin
    Addresses
    104.21.79.102 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.169.238 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3037::6815:4f66
    2606:4700:3037::ac43:a9ee
    Cloudflare
    Cloudflare (104.21.79.102, 172.67.169.238): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    kucoin-login.com
    Registered
    2026-08-10 · Realtime Register B.V.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 09:57 UTC

    Suggest a correction

  85. kucoin-wallet.cyou US · AS13335 · Cloudflare, Inc.4 addressesKuCoin
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 3 mo ago
    DetailsHide
    Hostname
    kucoin-wallet.cyou
    First seen
    2026-11-08 09:51 UTC
    First published
    2026-11-08 09:58 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 05:58 UTC
    DNS
    Resolves · checked 2026-11-08 10:01 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-11-08 08:52 UTC to 2027-02-06 08:52 UTC
    Logged 2026-11-08 09:50 UTC in Let's Encrypt Sycamore2027h1, entry 1,044,132,099
    SHA-256 904bfef7e67e06ffe0e273c76f797899f043651d2898fa6f7fc5694230a333ea
    Public key SHA-256 c571dd462fbaf3bcdfabda5ec9bde9383a6eb88ff31649b0505574eb00c7845f
    Brand
    KuCoin
    Addresses
    104.21.59.74 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.218.106 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3035::6815:3b4a
    2606:4700:3035::ac43:da6a
    Cloudflare
    Cloudflare (104.21.59.74, 172.67.218.106): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    kucoin-wallet.cyou
    Registered
    2026-08-10 · Gname.com Pte. Ltd.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 09:57 UTC

    Suggest a correction

  86. money-x.one US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    money-x.one
    First seen
    2026-11-08 09:51 UTC
    First published
    2026-11-08 09:58 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 05:58 UTC
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-08 05:57 UTC
    DNS
    Resolves · checked 2026-11-08 10:01 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-11-08 08:51 UTC to 2027-02-06 08:51 UTC
    Logged 2026-11-08 09:49 UTC in IPng Networks Halloumi2027h1, entry 409,941,699
    SHA-256 77f3541030f64f81ad1b54de9658804e842597ae1efb553dbcf947bbfdfcbd52
    Public key SHA-256 a3dcb28f12f6fb8e95928e8f1120d08561c016ce878c797e0ed8184bc01ded33
    Addresses
    104.21.58.61 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.168.10 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.58.61, 172.67.168.10): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    money-x.one
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 09:57 UTC

    Suggest a correction

  87. nyqapy.asia US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by NPA 165 (information services)MX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    nyqapy.asia
    First seen
    2026-11-08 09:51 UTC
    First published
    2026-11-08 09:58 UTC
    Listing
    NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 01:35 UTC
    DNS
    Resolves · checked 2026-11-08 10:01 UTC
    Listed
    NPA 165
    1. Observed in the NPA 165 feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-08 08:50 UTC to 2027-02-06 09:49 UTC
    Logged 2026-11-08 09:50 UTC in IPng Networks Gouda2027h1, entry 352,707,953
    SHA-256 02810606efdeb8af1837a25b511fd4ae5384e47afaa16790b6e8aca99b87e9f4
    Public key SHA-256 e3a7c43f2c3dc25f2500c30831e8101e2522d7f15962f77a8cea3387fa81be26
    Addresses
    104.21.6.204 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.135.65 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.6.204, 172.67.135.65): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    nyqapy.asia
    Registered
    2026-07-13 · Alibaba Cloud Computing Ltd. d/b/a HiChina (www.net.cn)
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 09:57 UTC

    Suggest a correction

  88. opusgenesis-ai.app US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 10 mo ago
    DetailsHide
    Hostname
    opusgenesis-ai.app
    First seen
    2026-11-08 09:51 UTC
    First published
    2026-11-08 09:58 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-08 05:57 UTC
    DNS
    Resolves · checked 2026-11-08 10:01 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-08 08:46 UTC to 2027-02-06 09:45 UTC
    Logged 2026-11-08 09:46 UTC in Google PlumbersArms2027h1, entry 675,590,132
    SHA-256 b813780c56285014aecb6720a3fe8f9f3b7feb9b3ba4ddd1b2a44ecdca8ccd1d
    Public key SHA-256 84379e498df7d34841f66df8d778d396da22c3abd92b24bfb939584b57d9d305
    PhishDestroy
    Addresses
    104.21.70.93 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.222.120 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.70.93, 172.67.222.120): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    opusgenesis-ai.app
    Registered
    2026-01-16 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 09:57 UTC

    Suggest a correction

  89. sviluaspri.store US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 59 d ago
    DetailsHide
    Hostname
    sviluaspri.store
    First seen
    2026-11-08 09:51 UTC
    First published
    2026-11-08 09:58 UTC
    Listing
    CERT Polska listed it 2026-09-10 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 09:32 UTC
    DNS
    Resolves · checked 2026-11-08 10:01 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-11-08 08:48 UTC to 2027-02-06 08:48 UTC
    Logged 2026-11-08 09:47 UTC in Let's Encrypt Willow2027h1, entry 1,000,993,351
    SHA-256 9b88f6a55252968f8cf3f9d186f0d4dc4c20bef54e057fae724f6cb73a467242
    Public key SHA-256 df146404b5623147b1b2b126be41ad11a825c0abfd4f156cdccd8811ffdb53cb
    Addresses
    104.21.30.28 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.150.113 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.30.28, 172.67.150.113): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    sviluaspri.store
    Registered
    2026-09-10 · NameCheap, Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 09:57 UTC

    Suggest a correction

  90. thesandlot.shop GB · AS47890 · UNMANAGED-DEDICATED-SERVERS…
    ReportedReported by PhishDestroyMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    thesandlot.shop
    First seen
    2026-11-08 09:51 UTC
    First published
    2026-11-08 09:58 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-08 05:57 UTC
    DNS
    Resolves · checked 2026-11-08 10:01 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-08 08:51 UTC to 2027-02-06 08:51 UTC
    Logged 2026-11-08 09:49 UTC in Google ParcelYard2027h1, entry 675,319,165
    SHA-256 6b864f671079ac175956f5d4a581116d5e611afad96910b09e351aa4cbc04ace
    Public key SHA-256 1609e257a783c9e2dccd95ae717295ee33bba0325a94e4d02e3f9bfe53ec4d44
    PhishDestroy
    Addresses
    193.47.69.237 · United Kingdom · AS47890 UNMANAGED-DEDICATED-SERVERS UNMANAGED LTD
    Domain
    thesandlot.shop
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 09:57 UTC

    Suggest a correction

  91. v-pro-392810.eu.cc US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT Polska
    DetailsHide
    Hostname
    v-pro-392810.eu.cc
    First seen
    2026-11-08 09:51 UTC
    First published
    2026-11-08 09:58 UTC
    Listing
    CERT Polska listed it 2026-09-10 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 09:32 UTC
    DNS
    Resolves · checked 2026-11-08 10:01 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-08 08:50 UTC to 2027-02-06 08:50 UTC
    Logged 2026-11-08 09:49 UTC in Google PlumbersArms2027h1, entry 675,626,990
    SHA-256 2bf2a0aca4aae8ab0b54c90f98ee20431dc39d2430d4f5759e0eca54fa696083
    Public key SHA-256 3382b66c56e9320059e98fddf96c670702e5be9d2ed44c3d1662bc3df504a7b5
    Addresses
    104.21.67.28 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.211.149 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.67.28, 172.67.211.149): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.

    Suggest a correction

  92. www.arcape.fun US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX presentSPF ~allDMARC missingRegistered 2 mo ago
    DetailsHide
    Hostname
    www.arcape.fun
    First seen
    2026-11-08 09:51 UTC
    First published
    2026-11-08 09:58 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-08 05:57 UTC
    DNS
    Resolves · checked 2026-11-08 10:01 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR1 · precertificate
    Valid 2026-11-08 08:51 UTC to 2027-02-06 08:50 UTC
    Logged 2026-11-08 09:49 UTC in IPng Networks Halloumi2027h1, entry 409,941,609
    SHA-256 9a884a3624bd1005bb616d8c28684fea648d48321c105ebf455b1306b908370f
    Public key SHA-256 bb33927c72da89577f42e746998f9826f457a225297ce17655f1ca03a718e191
    PhishDestroy
    Addresses
    104.21.61.109 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.209.22 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.61.109, 172.67.209.22): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    arcape.fun
    Registered
    2026-09-06 · NameCheap, Inc.
    MX
    Receives mail at mx2.privateemail.com, mx1.privateemail.com
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 09:57 UTC

    Suggest a correction

  93. xttuan.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 4 d ago
    DetailsHide
    Hostname
    xttuan.com
    First seen
    2026-11-08 09:51 UTC
    First published
    2026-11-08 09:58 UTC
    Listing
    CERT Polska listed it 2026-07-25 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 09:32 UTC
    DNS
    Resolves · checked 2026-11-08 10:01 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-08 08:49 UTC to 2027-02-06 09:45 UTC
    Logged 2026-11-08 09:49 UTC in Let's Encrypt Sycamore2027h1, entry 1,044,099,886
    SHA-256 1d52d0ea57ed630c015f520989e0cae76709d6022d367443f3496372f848cf94
    Public key SHA-256 f5590ac284bfaff2efdc34de0745544319c3ffd93918fa574498c0b62818859d
    Addresses
    104.21.4.17 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.131.133 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.4.17, 172.67.131.133): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    xttuan.com
    Registered
    2026-11-04 · Gname 100 Inc
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 09:57 UTC

    Suggest a correction

  94. anu-mas.mega555m3ga.cc US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareUnder mega555m3ga.cc, reported by PhishDestroyMX absentSPF missingDMARC missingRegistered 5 mo ago
    DetailsHide
    Hostname
    anu-mas.mega555m3ga.cc
    First seen
    2026-11-08 09:46 UTC
    First published
    2026-11-08 09:58 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-08 05:57 UTC
    DNS
    Resolves · checked 2026-11-08 10:01 UTC
    Reported
    PhishDestroy, listing mega555m3ga.cc and the names under it
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR1 · precertificate
    Valid 2026-11-08 08:44 UTC to 2027-02-06 08:44 UTC
    Logged 2026-11-08 09:43 UTC in Geomys Tuscolo2027h1, entry 526,231,362
    SHA-256 bffa2b0e7c20b058a1623b57a05d36aa6ebae5d7f6470d5ee50b7a08716050ea
    Public key SHA-256 c6d183151cb7f7d0903e965db1c26d7ce1cb17ce224c190304e8f029b350222b
    PhishDestroy
    Addresses
    104.21.86.166 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.222.98 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.86.166, 172.67.222.98): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    mega555m3ga.cc
    Registered
    2026-06-25 · GoDaddy.com, LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 09:51 UTC

    Suggest a correction

  95. dealchoice.de US · AS13335 · Cloudflare, Inc.
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    dealchoice.de
    First seen
    2026-11-08 09:46 UTC
    First published
    2026-11-08 09:58 UTC
    Listing
    CERT Polska listed it 2026-09-23 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 09:32 UTC
    DNS
    Resolves · checked 2026-11-08 10:01 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-11-08 08:45 UTC to 2027-02-06 08:45 UTC
    Logged 2026-11-08 09:44 UTC in Geomys Tuscolo2027h1, entry 526,252,832
    SHA-256 2b7dbbdf00c6c297448337c80c74b118e8bb72bad303044b099479e56562a31b
    Public key SHA-256 bba9c190843b7b155580265e2e34f1f727897c74c32419bfd6c0f43a950389d2
    Addresses
    104.18.74.116 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.18.74.116): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    dealchoice.de
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 09:51 UTC

    Suggest a correction

  96. dobitakurplatform.click US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 59 d ago
    DetailsHide
    Hostname
    dobitakurplatform.click
    First seen
    2026-11-08 09:46 UTC
    First published
    2026-11-08 09:58 UTC
    Listing
    CERT Polska listed it 2026-09-17 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 09:32 UTC
    DNS
    Resolves · checked 2026-11-08 10:01 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-08 08:41 UTC to 2027-02-06 09:41 UTC
    Logged 2026-11-08 09:41 UTC in Google PlumbersArms2027h1, entry 675,511,296
    SHA-256 5f2042d0ea5b59575c353a92489a3361ccf2e2f91dd73e8fd3900d32903bb6cb
    Public key SHA-256 ccc994c9e6d85ce1ff1ebd2f7e7334a36c993e1f893c657d557302782acc02dc
    Addresses
    104.21.26.202 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.168.134 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.26.202, 172.67.168.134): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    dobitakurplatform.click
    Registered
    2026-09-10 · Spaceship, Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 09:57 UTC

    Suggest a correction

  97. mcp.mstblockchain.com US · AS16509 · Amazon.com, Inc.
    ReportedAmazon Web ServicesUnder mstblockchain.com, reported by PhishDestroyMX presentSPF ~allDMARC quarantineRegistered 2 y ago
    DetailsHide
    Hostname
    mcp.mstblockchain.com
    First seen
    2026-11-08 09:46 UTC
    First published
    2026-11-08 09:58 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-08 05:57 UTC
    DNS
    Resolves · checked 2026-11-08 10:01 UTC
    Reported
    PhishDestroy, listing mstblockchain.com and the names under it
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR2
    Valid 2026-11-08 08:46 UTC to 2027-02-06 08:46 UTC
    Logged 2026-11-08 09:45 UTC in Google PlumbersArms2027h1, entry 675,570,731
    SHA-256 2d3234a1a8ef913ab37e3707584c42ad41ad51f581f8eab080fecb866998e0a5
    Public key SHA-256 a867e52796243a826ba8e24f86ca3feaf4837f0463d39c9ea1631b66b2b2265a
    PhishDestroy
    Addresses
    54.254.100.29 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
    Amazon Web Services
    Amazon Web Services (54.254.100.29): a cloud provider. It rents servers and addresses to its customers.
    Domain
    mstblockchain.com
    Registered
    2024-08-12 · GoDaddy.com, LLC
    MX
    Receives mail at aspmx.l.google.com, alt1.aspmx.l.google.com, alt2.aspmx.l.google.com
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    DMARC policy p=quarantine
    Checked
    2026-11-07 20:52 UTC

    Suggest a correction

  98. migration-anyone-ator.pages.dev US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMask
    DetailsHide
    Hostname
    migration-anyone-ator.pages.dev
    First seen
    2026-11-08 09:46 UTC
    First published
    2026-11-08 09:58 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 05:58 UTC
    DNS
    Resolves · checked 2026-11-08 10:01 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-08 08:42 UTC to 2027-02-06 09:41 UTC
    Logged 2026-11-08 09:42 UTC in DigiCert Sphinx2027h1, entry 400,343,175
    SHA-256 2329331eda1e2475e2b2170d865628cf8a22446c4ca75f472dbaa90a15978bf4
    Public key SHA-256 bf3e5b28f51b9ab90cdd3e6493a7070ccccbeee7d19c38f7e54883277f40ce85
    Addresses
    172.66.44.243 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.66.47.13 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (172.66.44.243, 172.66.47.13): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.

    Suggest a correction

  99. mubvh.work US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by NPA 165 (information services)MX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    mubvh.work
    First seen
    2026-11-08 09:46 UTC
    First published
    2026-11-08 09:58 UTC
    Listing
    NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 01:35 UTC
    DNS
    Resolves · checked 2026-11-08 10:01 UTC
    Listed
    NPA 165
    1. Observed in the NPA 165 feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-11-08 08:43 UTC to 2027-02-06 08:43 UTC
    Logged 2026-11-08 09:41 UTC in IPng Networks Gouda2027h1, entry 352,640,836
    SHA-256 cbd35a2c165a15eeff310ed4aef0ec37963c2fed662349286a4edc04a4d1b6de
    Public key SHA-256 fde3c9ad429287013550e688e32eb3373f7aa400fd08902814664873081474ae
    Addresses
    104.21.75.123 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.175.151 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.75.123, 172.67.175.151): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    mubvh.work
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 09:51 UTC

    Suggest a correction

  100. promo-codes.online US · AS16509 · Amazon.com, Inc.
    ReportedAmazon Web ServicesReported by PhishDestroyMX presentSPF ~allDMARC missingRegistered 6 y ago
    DetailsHide
    Hostname
    promo-codes.online
    First seen
    2026-11-08 09:46 UTC
    First published
    2026-11-08 09:58 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-08 05:57 UTC
    DNS
    Resolves · checked 2026-11-08 10:01 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR1
    Valid 2026-11-08 08:42 UTC to 2027-02-06 08:42 UTC
    Logged 2026-11-08 09:41 UTC in Google PlumbersArms2027h1, entry 675,508,334
    SHA-256 3bc1946ac7e368508a494658787b075b874653a04e8444d34d9aa9ce073d00bb
    Public key SHA-256 89bd802473e5058df38591048405c00fb2286182da48a13d3ace6dca4a294ed7
    PhishDestroy
    Addresses
    76.76.21.21 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
    Amazon Web Services
    Amazon Web Services (76.76.21.21): a cloud provider. It rents servers and addresses to its customers.
    Domain
    promo-codes.online
    Registered
    2021-04-21 · NameCheap, Inc.
    MX
    Receives mail at eforward1.registrar-servers.com, eforward2.registrar-servers.com, eforward3.registrar-servers.com
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-07 14:46 UTC

    Suggest a correction

Showing 101–200 of 5,082 hostnames.Back to the start
How these findings are made

Brand spoofs: findings that impersonate one of the 1,000 most-impersonated brands. The list opens on them; All shows every finding.

Reported: a hostname in a new certificate that PhishTank or PhishDestroy reports, or that CERT Polska, MetaMask, USOM, MODA, NPA 165, JPCERT/CC, the AMF, the FSMA or BaFin lists. When a listing source names the brand imitated or a category, the finding shows it. Phishing host: a brand lookalike that resolves to an address which hosted confirmed phishing in the last 48 hours. Spamhaus DROP: a brand lookalike that resolves to an address on the Spamhaus DROP list. Same certificate: another name on a finding's certificate that resolves to an address on Spamhaus DROP. Suspicious: other names on a finding's certificate, rated high for a hosting-alias name or a lookalike on a phishing host, medium for a lookalike; they join the findings once they have listing evidence of their own. Also under Suspicious: registered domains using a brand’s name that PhishDestroy’s community list includes, rated high when they resolve to an address with no parking or holding signal, medium otherwise.

Brand labels cover the 1,000 most-impersonated brands. A name gets a brand when the brand's token starts a label or follows a hyphen, with a lure word such as "login" or "verify" for common words. Hostnames appear as plain text. How it works · Sources