Live

Live phishing findings

New certificates and domain registrations, with every hostname resolved and checked against phishing reports and bad-address lists. The newest findings, updated hourly.

Updated hourly · 2026-11-08 13:18 UTC
Certificate-log entries · 24 h
326.7M
from 84 distinct feeds
Unique certificates · 24 h
31.9M
each reviewed
Names resolved · 24 h
20.7M
15.5M with an address
Findings · 24 h
5,621
205 of 1,061 brands targeted

5,621 hostnames from the last 24 hours.

The findings have updated. The list starts again from the top.

  1. aeyfx.work US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by NPA 165 (information services)MX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    aeyfx.work
    First seen
    2026-11-08 13:15 UTC
    Listing
    NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 01:35 UTC
    Listed
    NPA 165
    1. Observed in the NPA 165 feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-11-08 12:14 UTC to 2027-02-06 12:14 UTC
    Logged 2026-11-08 13:12 UTC in IPng Networks Halloumi2027h1, entry 411,869,250
    SHA-256 658110ecaf78677a8e0a9898b422d618d5525859cc94d039561fdbfb85c5c821
    Public key SHA-256 03748514fc6604c0206cbf13e77f65429b8f3c99110b72daf8144dcf502d0ba1
    Addresses
    104.21.48.144 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.186.180 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.48.144, 172.67.186.180): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    aeyfx.work
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 13:16 UTC

    Suggest a correction

  2. churellient.shop US · AS13335 · Cloudflare, Inc.4 addresses
    ListedCloudflareListed by NPA 165 (e-commerce)MX presentSPF ~allDMARC missingRegistered 8 mo ago
    DetailsHide
    Hostname
    churellient.shop
    First seen
    2026-11-08 13:15 UTC
    Listing
    NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 01:35 UTC
    Listed
    NPA 165
    1. Observed in the NPA 165 feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-08 12:14 UTC to 2027-02-06 12:14 UTC
    Logged 2026-11-08 13:13 UTC in Google ParcelYard2027h1, entry 678,203,029
    SHA-256 10274539f173b625494463e91c6cc3c404fd5b2147b83342d543e6ad30cd31b1
    Public key SHA-256 558dabb4a72f04cf5ce1a777f49aaabfb96e762fd3f63818f2df72c93093d0e6
    Addresses
    104.21.12.152 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.132.43 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3031::6815:c98
    2606:4700:3035::ac43:842b
    Cloudflare
    Cloudflare (104.21.12.152, 172.67.132.43): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    churellient.shop
    Registered
    2026-03-17 · Namecheap, Inc.
    MX
    Receives mail at eforward1.registrar-servers.com, eforward2.registrar-servers.com, eforward3.registrar-servers.com
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 13:23 UTC

    Suggest a correction

  3. defaazz.com US · AS13335 · Cloudflare, Inc.4 addresses
    ListedCloudflareListed by MetaMaskMX presentSPF -allDMARC missingRegistered 16 mo ago
    DetailsHide
    Hostname
    defaazz.com
    First seen
    2026-11-08 13:15 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 11:58 UTC
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-08 11:57 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-08 12:14 UTC to 2027-02-06 13:11 UTC
    Logged 2026-11-08 13:14 UTC in Let's Encrypt Willow2027h1, entry 1,004,638,614
    SHA-256 05b50131af09e8e4ba4efc4738bce35ac47f37eb55a6b0fc527bb08470c11df8
    Public key SHA-256 787047c75526a7625cf650e9ef54497a41aa97b5c978891533eec37aa4922250
    Addresses
    104.21.67.252 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.183.141 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3032::ac43:b78d
    2606:4700:3036::6815:43fc
    Cloudflare
    Cloudflare (104.21.67.252, 172.67.183.141): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    defaazz.com
    Registered
    2025-07-24 · Tucows Domains Inc.
    MX
    Receives mail at mx.zoho.eu, mx2.zoho.eu, mx3.zoho.eu
    SPF
    SPF record with -all: other senders fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 13:22 UTC

    Suggest a correction

  4. dsewf.work US · AS13335 · Cloudflare, Inc.4 addresses
    ListedCloudflareListed by NPA 165 (information services)MX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    dsewf.work
    First seen
    2026-11-08 13:15 UTC
    Listing
    NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 01:35 UTC
    Listed
    NPA 165
    1. Observed in the NPA 165 feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-11-08 12:13 UTC to 2027-02-06 12:13 UTC
    Logged 2026-11-08 13:12 UTC in Google ParcelYard2027h1, entry 678,187,097
    SHA-256 551ab8081a6a9bea89b5e3a6bc731caa6b8e43c3af5f3bd0ef272b7234d164e4
    Public key SHA-256 71f2685bad9e0cb72da667d7998e0a5624f5ddd83dd2fadb5395762d3067aefb
    Addresses
    104.21.66.117 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.159.152 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3031::6815:4275
    2606:4700:3034::ac43:9f98
    Cloudflare
    Cloudflare (104.21.66.117, 172.67.159.152): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    dsewf.work
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 13:16 UTC

    Suggest a correction

  5. fhktm.work US · AS13335 · Cloudflare, Inc.4 addresses
    ListedCloudflareListed by NPA 165 (information services)MX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    fhktm.work
    First seen
    2026-11-08 13:15 UTC
    Listing
    NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 01:35 UTC
    Listed
    NPA 165
    1. Observed in the NPA 165 feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-11-08 12:14 UTC to 2027-02-06 12:14 UTC
    Logged 2026-11-08 13:13 UTC in Google ParcelYard2027h1, entry 678,200,898
    SHA-256 7194c7ffc4b7f1f7765a6f8d7a7d1bb57b15153b0194c4ed5f5619667e0e6b9e
    Public key SHA-256 6884379d32d8e6cc97c17e2e78f705c983345a564457876d6174e4c4d19d6f2c
    Addresses
    104.21.88.195 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.152.156 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3031::6815:58c3
    2606:4700:3034::ac43:989c
    Cloudflare
    Cloudflare (104.21.88.195, 172.67.152.156): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    fhktm.work
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 13:16 UTC

    Suggest a correction

  6. genuinehbeat.best US · AS13335 · Cloudflare, Inc.4 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    genuinehbeat.best
    First seen
    2026-11-08 13:15 UTC
    Listing
    CERT Polska listed it 2026-05-18 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 12:32 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-11-08 12:11 UTC to 2027-02-06 12:11 UTC
    Logged 2026-11-08 13:10 UTC in Google PlumbersArms2027h1, entry 678,473,093
    SHA-256 45f9806add2005672c68fc8588b49e6a99deb5d915251e56571ed47859dbd902
    Public key SHA-256 f196ca061c34e3a73466a2ca64f7c8d34446ef787ab427246905aa699e3fb40b
    Addresses
    104.21.69.111 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.207.188 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3031::6815:456f
    2606:4700:3036::ac43:cfbc
    Cloudflare
    Cloudflare (104.21.69.111, 172.67.207.188): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    genuinehbeat.best
    Registered
    2026-05-15 · Dynadot Inc
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 13:22 UTC

    Suggest a correction

  7. iq.dukkank.com DE · AS24940 · HETZNER-AS Hetzner Online G…
    ReportedHetznerUnder dukkank.com, reported by PhishDestroyMX presentSPF ~allDMARC missingRegistered 8 y ago
    DetailsHide
    Hostname
    iq.dukkank.com
    First seen
    2026-11-08 13:15 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-08 11:57 UTC
    Reported
    PhishDestroy, listing dukkank.com and the names under it
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR1
    Valid 2026-11-08 12:12 UTC to 2027-02-06 12:12 UTC
    Logged 2026-11-08 13:10 UTC in Google ParcelYard2027h1, entry 678,168,899
    SHA-256 1be2304f61066eabeb5e4ee55d1600e642aae2ebea4d0a4768c0d47f988196ce
    Public key SHA-256 37aae49e92cea5b88a4cdd6d0a80ce17d4a5683df32643b96af5e6d717d886a7
    PhishDestroy
    Addresses
    157.180.106.231 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
    Hetzner
    Hetzner (157.180.106.231): a cloud provider. It rents servers and addresses to its customers.
    Domain
    dukkank.com
    Registered
    2018-10-15 · GoDaddy.com, LLC
    MX
    Receives mail at mail.dukkank.com
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-07 14:31 UTC

    Suggest a correction

  8. midsummershopping.online US · AS13335 · Cloudflare, Inc.4 addresses
    ListedCloudflareListed by NPA 165 (e-commerce)MX absentSPF missingDMARC quarantineRegistered 6 mo ago
    DetailsHide
    Hostname
    midsummershopping.online
    First seen
    2026-11-08 13:15 UTC
    Listing
    NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 01:35 UTC
    Listed
    NPA 165
    1. Observed in the NPA 165 feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-11-08 12:12 UTC to 2027-02-06 12:12 UTC
    Logged 2026-11-08 13:10 UTC in DigiCert Wyvern2027h1, entry 454,507,384
    SHA-256 6592866d5b80ce63ee0c366a61dfee0a8e214615fb29dce179eba7c2137e0e54
    Public key SHA-256 c11a8061f07e5869e5df3f06f3a23aa5bff0da324707ebfd7cf69b148119b12f
    Addresses
    104.21.74.7 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.152.119 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3032::ac43:9877
    2606:4700:3035::6815:4a07
    Cloudflare
    Cloudflare (104.21.74.7, 172.67.152.119): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    midsummershopping.online
    Registered
    2026-05-15 · GoDaddy.com, LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    DMARC policy p=quarantine
    Checked
    2026-11-08 13:22 UTC

    Suggest a correction

  9. om.dukkank.com DE · AS24940 · HETZNER-AS Hetzner Online G…
    ReportedHetznerUnder dukkank.com, reported by PhishDestroyMX presentSPF ~allDMARC missingRegistered 8 y ago
    DetailsHide
    Hostname
    om.dukkank.com
    First seen
    2026-11-08 13:15 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-08 11:57 UTC
    Reported
    PhishDestroy, listing dukkank.com and the names under it
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR1
    Valid 2026-11-08 12:12 UTC to 2027-02-06 12:12 UTC
    Logged 2026-11-08 13:10 UTC in Google ParcelYard2027h1, entry 678,168,899
    SHA-256 1be2304f61066eabeb5e4ee55d1600e642aae2ebea4d0a4768c0d47f988196ce
    Public key SHA-256 37aae49e92cea5b88a4cdd6d0a80ce17d4a5683df32643b96af5e6d717d886a7
    PhishDestroy
    Addresses
    157.180.106.231 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
    Hetzner
    Hetzner (157.180.106.231): a cloud provider. It rents servers and addresses to its customers.
    Domain
    dukkank.com
    Registered
    2018-10-15 · GoDaddy.com, LLC
    MX
    Receives mail at mail.dukkank.com
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-07 14:31 UTC

    Suggest a correction

  10. rioacecasino-aus.com US · AS13335 · Cloudflare, Inc.4 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 8 mo ago
    DetailsHide
    Hostname
    rioacecasino-aus.com
    First seen
    2026-11-08 13:15 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-08 11:57 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-11-08 12:12 UTC to 2027-02-06 12:12 UTC
    Logged 2026-11-08 13:10 UTC in Google ParcelYard2027h1, entry 678,170,159
    SHA-256 d6d95808cd0282ab546265d9fbe8402e13dc4b37fd430d232fa191990050e039
    Public key SHA-256 f23b8cad171ff66be6cf4ba820db6727e45784a37469b0ed1a53dd5cb5208cb3
    PhishDestroy
    Addresses
    104.21.72.80 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.177.137 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3033::ac43:b189
    2606:4700:3035::6815:4850
    Cloudflare
    Cloudflare (104.21.72.80, 172.67.177.137): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    rioacecasino-aus.com
    Registered
    2026-03-17 · Atak Domain Bilgi Teknolojileri A.S.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 13:23 UTC

    Suggest a correction

  11. saudi.dukkank.com DE · AS24940 · HETZNER-AS Hetzner Online G…
    ReportedHetznerUnder dukkank.com, reported by PhishDestroyMX presentSPF ~allDMARC missingRegistered 8 y ago
    DetailsHide
    Hostname
    saudi.dukkank.com
    First seen
    2026-11-08 13:15 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-08 11:57 UTC
    Reported
    PhishDestroy, listing dukkank.com and the names under it
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR1
    Valid 2026-11-08 12:12 UTC to 2027-02-06 12:12 UTC
    Logged 2026-11-08 13:10 UTC in Google ParcelYard2027h1, entry 678,168,899
    SHA-256 1be2304f61066eabeb5e4ee55d1600e642aae2ebea4d0a4768c0d47f988196ce
    Public key SHA-256 37aae49e92cea5b88a4cdd6d0a80ce17d4a5683df32643b96af5e6d717d886a7
    PhishDestroy
    Addresses
    157.180.106.231 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
    Hetzner
    Hetzner (157.180.106.231): a cloud provider. It rents servers and addresses to its customers.
    Domain
    dukkank.com
    Registered
    2018-10-15 · GoDaddy.com, LLC
    MX
    Receives mail at mail.dukkank.com
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-07 14:31 UTC

    Suggest a correction

  12. wiloilinternational.com US · AS13335 · Cloudflare, Inc.4 addresses
    ReportedCloudflareReported by PhishDestroyMX presentSPF ~allDMARC policy noneRegistered 8 mo ago
    DetailsHide
    Hostname
    wiloilinternational.com
    First seen
    2026-11-08 13:15 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-08 11:57 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-11-08 12:13 UTC to 2027-02-06 12:13 UTC
    Logged 2026-11-08 13:12 UTC in IPng Networks Halloumi2027h1, entry 411,863,167
    SHA-256 25252cd321fe47d7f07cdac7849a21de4eb22fa1cb67a260601c11e94d4733d3
    Public key SHA-256 69506ed16ce16cb972576d416deb2a929e3601faf4aa44a0001f98fb4f2dcbae
    PhishDestroy
    Addresses
    104.21.37.225 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.214.29 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3031::ac43:d61d
    2606:4700:3034::6815:25e1
    Cloudflare
    Cloudflare (104.21.37.225, 172.67.214.29): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    wiloilinternational.com
    Registered
    2026-03-10 · Atak Domain Bilgi Teknolojileri A.S.
    MX
    Receives mail at aspmx.l.google.com, alt1.aspmx.l.google.com, alt2.aspmx.l.google.com
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    DMARC policy p=none: reports only
    Checked
    2026-11-08 13:23 UTC

    Suggest a correction

  13. wunori-buruma.info US · AS13335 · Cloudflare, Inc.4 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    wunori-buruma.info
    First seen
    2026-11-08 13:15 UTC
    Listing
    CERT Polska listed it 2026-09-01 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 12:32 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-08 12:14 UTC to 2027-02-06 13:13 UTC
    Logged 2026-11-08 13:14 UTC in Let's Encrypt Sycamore2027h1, entry 1,049,083,593
    SHA-256 64350283f3a8faa6452910f298b759f7271a346bda681bec9905a73a17210420
    Public key SHA-256 ab04b6968b890e7861d6727f1526243eea2ff32e1cf2a83781452c1fbca86fc9
    Addresses
    104.21.78.36 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.215.186 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3032::6815:4e24
    2606:4700:3032::ac43:d7ba
    Cloudflare
    Cloudflare (104.21.78.36, 172.67.215.186): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    wunori-buruma.info
    Registered
    2026-07-13 · Dynadot Inc
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 13:22 UTC

    Suggest a correction

  14. www.1xge7z2e0g60zez6.ethereuma.xyz AU · AS154653 · ParkLogic Pty Ltd
    ListedParking page · ParkLogicUnder 1xge7z2e0g60zez6.ethereuma.xyz, listed by MetaMaskMX presentSPF -allDMARC missingRegistered 14 mo ago
    DetailsHide
    Hostname
    www.1xge7z2e0g60zez6.ethereuma.xyz
    First seen
    2026-11-08 13:15 UTC
    Listing
    MetaMask: first observed in the feed 2026-11-08 · still listed at the last successful feed check 2026-11-08 11:58 UTC
    Listed
    MetaMask, listing 1xge7z2e0g60zez6.ethereuma.xyz and the names under it
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-11-08 12:14 UTC to 2027-02-06 12:14 UTC
    Logged 2026-11-08 13:12 UTC in Let's Encrypt Sycamore2027h1, entry 1,049,041,723
    SHA-256 3fc88449396229d0636b85444b18d92c2662581d44237cbf4f32fec0fe2b9a6e
    Public key SHA-256 9c0d3cae4928bd8bad20b19f0040371e902bb6f7825ecdd301bfef5b7e864f57
    Addresses
    162.4.84.255 · Australia · AS154653 PARKLOGICPTYLTD-AS-AP - ParkLogic Pty Ltd · ParkLogic (parking page)
    Parking page · ParkLogic
    The registry delegates ethereuma.xyz to ParkLogic’s nameservers, which answer for it. ParkLogic (162.4.84.255): a parking service. It answers for names that are typically for sale or unused.
    Domain
    ethereuma.xyz
    Registered
    2025-09-26 · GMO Internet Group, Inc. d/b/a Onamae.com
    MX
    Receives mail at mx156.hostedmxserver.com
    SPF
    SPF record with -all: other senders fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 13:16 UTC

    Suggest a correction

  15. www.exchangeg3.eethereum.xyz AU · AS154653 · ParkLogic Pty Ltd
    ListedParking page · ParkLogicUnder exchangeg3.eethereum.xyz, listed by MetaMaskMX presentSPF -allDMARC missingRegistered 14 mo ago
    DetailsHide
    Hostname
    www.exchangeg3.eethereum.xyz
    First seen
    2026-11-08 13:15 UTC
    Listing
    MetaMask: first observed in the feed 2026-11-08 · still listed at the last successful feed check 2026-11-08 11:58 UTC
    Listed
    MetaMask, listing exchangeg3.eethereum.xyz and the names under it
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-11-08 12:15 UTC to 2027-02-06 12:15 UTC
    Logged 2026-11-08 13:13 UTC in IPng Networks Gouda2027h1, entry 354,336,557
    SHA-256 2c798789afd09ebaf4367b6a281b24da69d0e710cfd8215417ce8dd27c5aeed8
    Public key SHA-256 9c0d3cae4928bd8bad20b19f0040371e902bb6f7825ecdd301bfef5b7e864f57
    Addresses
    162.4.84.255 · Australia · AS154653 PARKLOGICPTYLTD-AS-AP - ParkLogic Pty Ltd · ParkLogic (parking page)
    Parking page · ParkLogic
    The registry delegates eethereum.xyz to ParkLogic’s nameservers, which answer for it. ParkLogic (162.4.84.255): a parking service. It answers for names that are typically for sale or unused.
    Domain
    eethereum.xyz
    Registered
    2025-09-29 · GMO Internet Group, Inc. d/b/a Onamae.com
    MX
    Receives mail at mx156.hostedmxserver.com
    SPF
    SPF record with -all: other senders fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 13:16 UTC

    Suggest a correction

  16. www.iq.dukkank.com DE · AS24940 · HETZNER-AS Hetzner Online G…
    ReportedHetznerUnder dukkank.com, reported by PhishDestroyMX presentSPF ~allDMARC missingRegistered 8 y ago
    DetailsHide
    Hostname
    www.iq.dukkank.com
    First seen
    2026-11-08 13:15 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-08 11:57 UTC
    Reported
    PhishDestroy, listing dukkank.com and the names under it
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR1
    Valid 2026-11-08 12:12 UTC to 2027-02-06 12:12 UTC
    Logged 2026-11-08 13:10 UTC in Google ParcelYard2027h1, entry 678,168,899
    SHA-256 1be2304f61066eabeb5e4ee55d1600e642aae2ebea4d0a4768c0d47f988196ce
    Public key SHA-256 37aae49e92cea5b88a4cdd6d0a80ce17d4a5683df32643b96af5e6d717d886a7
    PhishDestroy
    Addresses
    157.180.106.231 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
    Hetzner
    Hetzner (157.180.106.231): a cloud provider. It rents servers and addresses to its customers.
    Domain
    dukkank.com
    Registered
    2018-10-15 · GoDaddy.com, LLC
    MX
    Receives mail at mail.dukkank.com
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-07 14:31 UTC

    Suggest a correction

  17. www.m.cpwethereum.xyz AU · AS154653 · ParkLogic Pty Ltd
    ListedParking page · ParkLogicUnder m.cpwethereum.xyz, listed by MetaMaskMX presentSPF -allDMARC missingRegistered 14 mo ago
    DetailsHide
    Hostname
    www.m.cpwethereum.xyz
    First seen
    2026-11-08 13:15 UTC
    Listing
    MetaMask: first observed in the feed 2026-11-08 · still listed at the last successful feed check 2026-11-08 11:58 UTC
    Listed
    MetaMask, listing m.cpwethereum.xyz and the names under it
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-11-08 12:15 UTC to 2027-02-06 12:15 UTC
    Logged 2026-11-08 13:14 UTC in IPng Networks Halloumi2027h1, entry 411,886,821
    SHA-256 141486fd10272a54eb6c95335f62d9cfa5b5b2c4ff4a4d7682c35eee13748a3a
    Public key SHA-256 9c0d3cae4928bd8bad20b19f0040371e902bb6f7825ecdd301bfef5b7e864f57
    Addresses
    162.4.84.255 · Australia · AS154653 PARKLOGICPTYLTD-AS-AP - ParkLogic Pty Ltd · ParkLogic (parking page)
    Parking page · ParkLogic
    The registry delegates cpwethereum.xyz to ParkLogic’s nameservers, which answer for it. ParkLogic (162.4.84.255): a parking service. It answers for names that are typically for sale or unused.
    Domain
    cpwethereum.xyz
    Registered
    2025-09-29 · GMO Internet Group, Inc. d/b/a Onamae.com
    MX
    Receives mail at mx156.hostedmxserver.com
    SPF
    SPF record with -all: other senders fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 13:23 UTC

    Suggest a correction

  18. www.mailserver.ethereumm.xyz AU · AS154653 · ParkLogic Pty Ltd
    ListedParking page · ParkLogicUnder mailserver.ethereumm.xyz, listed by MetaMaskMX presentSPF -allDMARC missingRegistered 14 mo ago
    DetailsHide
    Hostname
    www.mailserver.ethereumm.xyz
    First seen
    2026-11-08 13:15 UTC
    Listing
    MetaMask: first observed in the feed 2026-11-08 · still listed at the last successful feed check 2026-11-08 11:58 UTC
    Listed
    MetaMask, listing mailserver.ethereumm.xyz and the names under it
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-11-08 12:15 UTC to 2027-02-06 12:15 UTC
    Logged 2026-11-08 13:14 UTC in Google PlumbersArms2027h1, entry 678,525,058
    SHA-256 313ececf10528fb5de63825a6dd5b16c344161e69992a796686fa0fe8433091a
    Public key SHA-256 9c0d3cae4928bd8bad20b19f0040371e902bb6f7825ecdd301bfef5b7e864f57
    Addresses
    162.4.84.255 · Australia · AS154653 PARKLOGICPTYLTD-AS-AP - ParkLogic Pty Ltd · ParkLogic (parking page)
    Parking page · ParkLogic
    The registry delegates ethereumm.xyz to ParkLogic’s nameservers, which answer for it. ParkLogic (162.4.84.255): a parking service. It answers for names that are typically for sale or unused.
    Domain
    ethereumm.xyz
    Registered
    2025-09-26 · GMO Internet Group, Inc. d/b/a Onamae.com
    MX
    Receives mail at mx156.hostedmxserver.com
    SPF
    SPF record with -all: other senders fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 13:16 UTC

    Suggest a correction

  19. www.notexistsserver.ethereumm.xyz AU · AS154653 · ParkLogic Pty Ltd
    ListedParking page · ParkLogicUnder notexistsserver.ethereumm.xyz, listed by MetaMaskMX presentSPF -allDMARC missingRegistered 14 mo ago
    DetailsHide
    Hostname
    www.notexistsserver.ethereumm.xyz
    First seen
    2026-11-08 13:15 UTC
    Listing
    MetaMask: first observed in the feed 2026-11-08 · still listed at the last successful feed check 2026-11-08 11:58 UTC
    Listed
    MetaMask, listing notexistsserver.ethereumm.xyz and the names under it
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-11-08 12:15 UTC to 2027-02-06 12:15 UTC
    Logged 2026-11-08 13:14 UTC in Let's Encrypt Willow2027h1, entry 1,004,634,140
    SHA-256 90c45acaa134e13cd423e17fb6876f3f9203575270a99ccf5fdb4ea4943da4c0
    Public key SHA-256 9c0d3cae4928bd8bad20b19f0040371e902bb6f7825ecdd301bfef5b7e864f57
    Addresses
    162.4.84.255 · Australia · AS154653 PARKLOGICPTYLTD-AS-AP - ParkLogic Pty Ltd · ParkLogic (parking page)
    Parking page · ParkLogic
    The registry delegates ethereumm.xyz to ParkLogic’s nameservers, which answer for it. ParkLogic (162.4.84.255): a parking service. It answers for names that are typically for sale or unused.
    Domain
    ethereumm.xyz
    Registered
    2025-09-26 · GMO Internet Group, Inc. d/b/a Onamae.com
    MX
    Receives mail at mx156.hostedmxserver.com
    SPF
    SPF record with -all: other senders fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 13:16 UTC

    Suggest a correction

  20. www.om.dukkank.com DE · AS24940 · HETZNER-AS Hetzner Online G…
    ReportedHetznerUnder dukkank.com, reported by PhishDestroyMX presentSPF ~allDMARC missingRegistered 8 y ago
    DetailsHide
    Hostname
    www.om.dukkank.com
    First seen
    2026-11-08 13:15 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-08 11:57 UTC
    Reported
    PhishDestroy, listing dukkank.com and the names under it
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR1
    Valid 2026-11-08 12:12 UTC to 2027-02-06 12:12 UTC
    Logged 2026-11-08 13:10 UTC in Google ParcelYard2027h1, entry 678,168,899
    SHA-256 1be2304f61066eabeb5e4ee55d1600e642aae2ebea4d0a4768c0d47f988196ce
    Public key SHA-256 37aae49e92cea5b88a4cdd6d0a80ce17d4a5683df32643b96af5e6d717d886a7
    PhishDestroy
    Addresses
    157.180.106.231 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
    Hetzner
    Hetzner (157.180.106.231): a cloud provider. It rents servers and addresses to its customers.
    Domain
    dukkank.com
    Registered
    2018-10-15 · GoDaddy.com, LLC
    MX
    Receives mail at mail.dukkank.com
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-07 14:31 UTC

    Suggest a correction

  21. www.posta.ethereumm.xyz AU · AS154653 · ParkLogic Pty Ltd
    ListedParking page · ParkLogicUnder posta.ethereumm.xyz, listed by MetaMaskMX presentSPF -allDMARC missingRegistered 14 mo ago
    DetailsHide
    Hostname
    www.posta.ethereumm.xyz
    First seen
    2026-11-08 13:15 UTC
    Listing
    MetaMask: first observed in the feed 2026-11-08 · still listed at the last successful feed check 2026-11-08 11:58 UTC
    Listed
    MetaMask, listing posta.ethereumm.xyz and the names under it
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-11-08 12:15 UTC to 2027-02-06 12:15 UTC
    Logged 2026-11-08 13:14 UTC in IPng Networks Gouda2027h1, entry 354,338,114
    SHA-256 383a841bd8de535df793eb2d01c7924dad03b80afb0963f1a794bae0e0e4c273
    Public key SHA-256 9c0d3cae4928bd8bad20b19f0040371e902bb6f7825ecdd301bfef5b7e864f57
    Addresses
    162.4.84.255 · Australia · AS154653 PARKLOGICPTYLTD-AS-AP - ParkLogic Pty Ltd · ParkLogic (parking page)
    Parking page · ParkLogic
    The registry delegates ethereumm.xyz to ParkLogic’s nameservers, which answer for it. ParkLogic (162.4.84.255): a parking service. It answers for names that are typically for sale or unused.
    Domain
    ethereumm.xyz
    Registered
    2025-09-26 · GMO Internet Group, Inc. d/b/a Onamae.com
    MX
    Receives mail at mx156.hostedmxserver.com
    SPF
    SPF record with -all: other senders fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 13:16 UTC

    Suggest a correction

  22. www.prod.iethereum.xyz AU · AS154653 · ParkLogic Pty Ltd
    ListedParking page · ParkLogicUnder prod.iethereum.xyz, listed by MetaMaskMX presentSPF -allDMARC missingRegistered 14 mo ago
    DetailsHide
    Hostname
    www.prod.iethereum.xyz
    First seen
    2026-11-08 13:15 UTC
    Listing
    MetaMask: first observed in the feed 2026-11-08 · still listed at the last successful feed check 2026-11-08 11:58 UTC
    Listed
    MetaMask, listing prod.iethereum.xyz and the names under it
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-11-08 12:15 UTC to 2027-02-06 12:15 UTC
    Logged 2026-11-08 13:14 UTC in DigiCert Wyvern2027h1, entry 454,548,278
    SHA-256 6b91cd41af16d39913efd6788bf0e5539ceb6fde9118c68a1540036742a7eba9
    Public key SHA-256 9c0d3cae4928bd8bad20b19f0040371e902bb6f7825ecdd301bfef5b7e864f57
    Addresses
    162.4.84.255 · Australia · AS154653 PARKLOGICPTYLTD-AS-AP - ParkLogic Pty Ltd · ParkLogic (parking page)
    Parking page · ParkLogic
    The registry delegates iethereum.xyz to ParkLogic’s nameservers, which answer for it. ParkLogic (162.4.84.255): a parking service. It answers for names that are typically for sale or unused.
    Domain
    iethereum.xyz
    Registered
    2025-09-27 · GMO Internet Group, Inc. d/b/a Onamae.com
    MX
    Receives mail at mx156.hostedmxserver.com
    SPF
    SPF record with -all: other senders fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 13:16 UTC

    Suggest a correction

  23. www.report.iethereum.xyz AU · AS154653 · ParkLogic Pty Ltd
    ListedParking page · ParkLogicUnder report.iethereum.xyz, listed by MetaMaskMX presentSPF -allDMARC missingRegistered 14 mo ago
    DetailsHide
    Hostname
    www.report.iethereum.xyz
    First seen
    2026-11-08 13:15 UTC
    Listing
    MetaMask: first observed in the feed 2026-11-08 · still listed at the last successful feed check 2026-11-08 11:58 UTC
    Listed
    MetaMask, listing report.iethereum.xyz and the names under it
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-11-08 12:16 UTC to 2027-02-06 12:16 UTC
    Logged 2026-11-08 13:14 UTC in Let's Encrypt Sycamore2027h1, entry 1,049,083,615
    SHA-256 b3bea09522b55d82e227f3982132b05f51df228574816ee912989f8dc84b88af
    Public key SHA-256 9c0d3cae4928bd8bad20b19f0040371e902bb6f7825ecdd301bfef5b7e864f57
    Addresses
    162.4.84.255 · Australia · AS154653 PARKLOGICPTYLTD-AS-AP - ParkLogic Pty Ltd · ParkLogic (parking page)
    Parking page · ParkLogic
    The registry delegates iethereum.xyz to ParkLogic’s nameservers, which answer for it. ParkLogic (162.4.84.255): a parking service. It answers for names that are typically for sale or unused.
    Domain
    iethereum.xyz
    Registered
    2025-09-27 · GMO Internet Group, Inc. d/b/a Onamae.com
    MX
    Receives mail at mx156.hostedmxserver.com
    SPF
    SPF record with -all: other senders fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 13:16 UTC

    Suggest a correction

  24. www.rustore.ethereumq.xyz AU · AS154653 · ParkLogic Pty Ltd
    ListedParking page · ParkLogicUnder rustore.ethereumq.xyz, listed by MetaMaskMX presentSPF -allDMARC missingRegistered 14 mo ago
    DetailsHide
    Hostname
    www.rustore.ethereumq.xyz
    First seen
    2026-11-08 13:15 UTC
    Listing
    MetaMask: first observed in the feed 2026-11-08 · still listed at the last successful feed check 2026-11-08 11:58 UTC
    Listed
    MetaMask, listing rustore.ethereumq.xyz and the names under it
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-11-08 12:16 UTC to 2027-02-06 12:16 UTC
    Logged 2026-11-08 13:14 UTC in Google ParcelYard2027h1, entry 678,222,171
    SHA-256 3ccf43bb1b9cfed1bf8588d7d2de22ac4efa214b762ae0d651bb356916c0b853
    Public key SHA-256 9c0d3cae4928bd8bad20b19f0040371e902bb6f7825ecdd301bfef5b7e864f57
    Addresses
    162.4.84.255 · Australia · AS154653 PARKLOGICPTYLTD-AS-AP - ParkLogic Pty Ltd · ParkLogic (parking page)
    Parking page · ParkLogic
    The registry delegates ethereumq.xyz to ParkLogic’s nameservers, which answer for it. ParkLogic (162.4.84.255): a parking service. It answers for names that are typically for sale or unused.
    Domain
    ethereumq.xyz
    Registered
    2025-09-26 · GMO Internet Group, Inc. d/b/a Onamae.com
    MX
    Receives mail at mx156.hostedmxserver.com
    SPF
    SPF record with -all: other senders fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 13:16 UTC

    Suggest a correction

  25. www.saudi.dukkank.com DE · AS24940 · HETZNER-AS Hetzner Online G…
    ReportedHetznerUnder dukkank.com, reported by PhishDestroyMX presentSPF ~allDMARC missingRegistered 8 y ago
    DetailsHide
    Hostname
    www.saudi.dukkank.com
    First seen
    2026-11-08 13:15 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-08 11:57 UTC
    Reported
    PhishDestroy, listing dukkank.com and the names under it
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR1
    Valid 2026-11-08 12:12 UTC to 2027-02-06 12:12 UTC
    Logged 2026-11-08 13:10 UTC in Google ParcelYard2027h1, entry 678,168,899
    SHA-256 1be2304f61066eabeb5e4ee55d1600e642aae2ebea4d0a4768c0d47f988196ce
    Public key SHA-256 37aae49e92cea5b88a4cdd6d0a80ce17d4a5683df32643b96af5e6d717d886a7
    PhishDestroy
    Addresses
    157.180.106.231 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
    Hetzner
    Hetzner (157.180.106.231): a cloud provider. It rents servers and addresses to its customers.
    Domain
    dukkank.com
    Registered
    2018-10-15 · GoDaddy.com, LLC
    MX
    Receives mail at mail.dukkank.com
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-07 14:31 UTC

    Suggest a correction

  26. www.superset.ethereumu.xyz AU · AS154653 · ParkLogic Pty Ltd
    ListedParking page · ParkLogicUnder superset.ethereumu.xyz, listed by MetaMaskMX presentSPF -allDMARC missingRegistered 14 mo ago
    DetailsHide
    Hostname
    www.superset.ethereumu.xyz
    First seen
    2026-11-08 13:15 UTC
    Listing
    MetaMask: first observed in the feed 2026-11-08 · still listed at the last successful feed check 2026-11-08 11:58 UTC
    Listed
    MetaMask, listing superset.ethereumu.xyz and the names under it
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-11-08 12:15 UTC to 2027-02-06 12:15 UTC
    Logged 2026-11-08 13:14 UTC in Google PlumbersArms2027h1, entry 678,527,214
    SHA-256 0853dc58846237f0f33a597cbf79ec6a1c0255c9850ab3dac854e5b6a6f3b3f3
    Public key SHA-256 9c0d3cae4928bd8bad20b19f0040371e902bb6f7825ecdd301bfef5b7e864f57
    Addresses
    162.4.84.255 · Australia · AS154653 PARKLOGICPTYLTD-AS-AP - ParkLogic Pty Ltd · ParkLogic (parking page)
    Parking page · ParkLogic
    The registry delegates ethereumu.xyz to ParkLogic’s nameservers, which answer for it. ParkLogic (162.4.84.255): a parking service. It answers for names that are typically for sale or unused.
    Domain
    ethereumu.xyz
    Registered
    2025-09-26 · GMO Internet Group, Inc. d/b/a Onamae.com
    MX
    Receives mail at mx156.hostedmxserver.com
    SPF
    SPF record with -all: other senders fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 12:30 UTC

    Suggest a correction

  27. alisverisepetin-13.sbs
    ListedListed by USOMMX absentSPF missingDMARC missingRegistered 2 mo ago
    DetailsHide
    Hostname
    alisverisepetin-13.sbs
    First seen
    2026-11-08 13:10 UTC
    Listing
    USOM listed it 2026-09-13 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 13:05 UTC
    Listed
    USOM
    1. Listed by USOM
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-11-08 12:06 UTC to 2027-02-06 12:06 UTC
    Logged 2026-11-08 13:05 UTC in Let's Encrypt Sycamore2027h1, entry 1,048,879,293
    SHA-256 251c65d55116e54a21e889957160d79ceb8ce64ab7277820e1eaf98c138bd8ce
    Public key SHA-256 045d6bbc490b9c356eae695050b29794b5d3ebd6a4af71388dc6d4a306b822f1
    Domain
    alisverisepetin-13.sbs
    Registered
    2026-09-09 · Dynadot Inc
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 13:23 UTC

    Suggest a correction

  28. canksfsdsd.com US · AS13335 · Cloudflare, Inc.4 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    canksfsdsd.com
    First seen
    2026-11-08 13:10 UTC
    Listing
    CERT Polska listed it 2026-07-13 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 12:32 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-08 12:08 UTC to 2027-02-06 13:06 UTC
    Logged 2026-11-08 13:08 UTC in Google PlumbersArms2027h1, entry 678,443,010
    SHA-256 7529279596f887179a5aa88d53ce49ac93ed73a570b8f27cf1272a7551200b2f
    Public key SHA-256 58686b0197de2de1448f65159100f1ded6dcb46ebd613ebb8f93b8528e9e246f
    Addresses
    104.21.40.201 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.138.145 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3032::ac43:8a91
    2606:4700:3033::6815:28c9
    Cloudflare
    Cloudflare (104.21.40.201, 172.67.138.145): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    canksfsdsd.com
    Registered
    2026-07-13 · NameCheap, Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 13:23 UTC

    Suggest a correction

  29. flows.xrpl-utilities.io 153.52.255.25Ripple (XRP)
    ListedUnder xrpl-utilities.io, listed by MetaMaskMX absentSPF missingDMARC missingRegistered 7 mo ago
    DetailsHide
    Hostname
    flows.xrpl-utilities.io
    First seen
    2026-11-08 13:10 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 11:58 UTC
    Listed
    MetaMask, listing xrpl-utilities.io and the names under it
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-11-08 12:10 UTC to 2027-02-06 12:10 UTC
    Logged 2026-11-08 13:08 UTC in Let's Encrypt Sycamore2027h1, entry 1,048,952,856
    SHA-256 38a2898b561f680f01687969af120d920a438fbd11b44c56e35514322a6f3c63
    Public key SHA-256 dde26a8d2e38340ea64b54de177893ad7c76a9b2257a2e5e7546c23f285c040c
    Brand
    Ripple (XRP)
    Addresses
    153.52.255.25
    Domain
    xrpl-utilities.io
    Registered
    2026-04-26 · Cloudflare, Inc
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-07 23:42 UTC

    Suggest a correction

  30. hjzdsu.asia US · AS13335 · Cloudflare, Inc.4 addresses
    ListedCloudflareListed by NPA 165 (information services)MX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    hjzdsu.asia
    First seen
    2026-11-08 13:10 UTC
    Listing
    NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 01:35 UTC
    Listed
    NPA 165
    1. Observed in the NPA 165 feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-08 12:06 UTC to 2027-02-06 13:04 UTC
    Logged 2026-11-08 13:06 UTC in Google ParcelYard2027h1, entry 678,110,660
    SHA-256 f6028bab00bd9698f1094f6b02b7d442b95eba3a57a95b2a9c056c94bf1fc445
    Public key SHA-256 911e36892ed981456d30e2bf2d5a719a8216078811ecf0a96ee242ceff00a47b
    Addresses
    104.21.18.51 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.180.103 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3030::ac43:b467
    2606:4700:3031::6815:1233
    Cloudflare
    Cloudflare (104.21.18.51, 172.67.180.103): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    hjzdsu.asia
    Registered
    2026-07-13 · Alibaba Cloud Computing Ltd. d/b/a HiChina (www.net.cn)
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 13:23 UTC

    Suggest a correction

  31. iypiqy.asia US · AS13335 · Cloudflare, Inc.4 addresses
    ListedCloudflareListed by NPA 165 (information services)MX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    iypiqy.asia
    First seen
    2026-11-08 13:10 UTC
    Listing
    NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 01:35 UTC
    Listed
    NPA 165
    1. Observed in the NPA 165 feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-08 12:05 UTC to 2027-02-06 13:04 UTC
    Logged 2026-11-08 13:05 UTC in Geomys Tuscolo2027h1, entry 528,409,676
    SHA-256 f046c8c605e01a9593c7384f12f171ae778a229596433848b18d2ec3d8d662e9
    Public key SHA-256 a2392448ad0f96bbd9e5690013dab6371b23b2837809bdea3e88a5d1ed409097
    Addresses
    104.21.34.3 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.194.115 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3035::ac43:c273
    2606:4700:3037::6815:2203
    Cloudflare
    Cloudflare (104.21.34.3, 172.67.194.115): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    iypiqy.asia
    Registered
    2026-07-13 · Alibaba Cloud Computing Ltd. d/b/a HiChina (www.net.cn)
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 13:23 UTC

    Suggest a correction

  32. major-fund-pro-tech-com.financecryptoworld.com US · AS13335 · Cloudflare, Inc.4 addresses
    ListedCloudflareUnder financecryptoworld.com, listed by CERT PolskaMX presentSPF ~allDMARC missingRegistered 22 mo ago
    DetailsHide
    Hostname
    major-fund-pro-tech-com.financecryptoworld.com
    First seen
    2026-11-08 13:10 UTC
    Listing
    CERT Polska listed it 2026-06-12 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 12:32 UTC
    Listed
    CERT Polska, listing financecryptoworld.com and the names under it
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-08 12:07 UTC to 2027-02-06 13:07 UTC
    Logged 2026-11-08 13:07 UTC in Geomys Tuscolo2027h1, entry 528,431,229
    SHA-256 460ea99684bde16ac67c6fa4c56dae6538dba337c033ce3ff9c901978bdaef36
    Public key SHA-256 e8ab80af55a6804f5796ae012776589db087dede6c3b4c50ae1366ca4f06a355
    Addresses
    104.21.10.130 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.131.121 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3033::ac43:8379
    2606:4700:3035::6815:a82
    Cloudflare
    Cloudflare (104.21.10.130, 172.67.131.121): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    financecryptoworld.com
    Registered
    2025-01-30 · MainReg Inc.
    MX
    Receives mail at mail.financecryptoworld.com
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-07 17:16 UTC

    Suggest a correction

  33. padisahbet-turkiye-2026.vip US · AS13335 · Cloudflare, Inc.4 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    padisahbet-turkiye-2026.vip
    First seen
    2026-11-08 13:10 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-08 11:57 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-11-08 12:09 UTC to 2027-02-06 12:09 UTC
    Logged 2026-11-08 13:07 UTC in IPng Networks Gouda2027h1, entry 354,303,028
    SHA-256 8a7de7f466073b8e883c096b8c68d3711a2be0be0add3384d0f334aaa176ad07
    Public key SHA-256 dfe2c26cb63e4c5f2c0202922f9df68e60463c90db726a8433b4416a3a20e749
    PhishDestroy
    Addresses
    104.21.79.94 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.143.15 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3032::6815:4f5e
    2606:4700:3032::ac43:8f0f
    Cloudflare
    Cloudflare (104.21.79.94, 172.67.143.15): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    padisahbet-turkiye-2026.vip
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 13:11 UTC

    Suggest a correction

  34. rolletto-aus.com US · AS13335 · Cloudflare, Inc.4 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 8 mo ago
    DetailsHide
    Hostname
    rolletto-aus.com
    First seen
    2026-11-08 13:10 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-08 11:57 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-08 12:09 UTC to 2027-02-06 12:09 UTC
    Logged 2026-11-08 13:08 UTC in Google PlumbersArms2027h1, entry 678,442,960
    SHA-256 1a8e4b71d8b7bcd15c308f97737ea4359ae4992e9bf5affdf45341162d365cc2
    Public key SHA-256 0cec11b4d7c50feef55630d53774a8da7a5a7115ec67d8999707e0dfddc1cc50
    PhishDestroy
    Addresses
    104.21.90.129 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.200.165 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3030::6815:5a81
    2606:4700:3031::ac43:c8a5
    Cloudflare
    Cloudflare (104.21.90.129, 172.67.200.165): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    rolletto-aus.com
    Registered
    2026-03-17 · Atak Domain Bilgi Teknolojileri A.S.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 13:23 UTC

    Suggest a correction

  35. space.gifga.com FR · AS16276 · OVH OVH SAS
    ListedOVHUnder gifga.com, listed by MetaMaskMX absentSPF missingDMARC missingRegistered 13 y ago
    DetailsHide
    Hostname
    space.gifga.com
    First seen
    2026-11-08 13:10 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 11:58 UTC
    Listed
    MetaMask, listing gifga.com and the names under it
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-11-08 12:09 UTC to 2027-02-06 12:09 UTC
    Logged 2026-11-08 13:08 UTC in DigiCert Wyvern2027h1, entry 454,493,619
    SHA-256 43a4395caacdac365082389fb2b0e865affd0f76c07177da7d29cb1140a60474
    Public key SHA-256 f33b0b90946b5f85f314be3f928cd4ce2f97da2e253fdb52f5956f10cf788aa5
    Addresses
    51.81.87.24 · France · AS16276 OVH OVH SAS · OVH (cloud provider)
    OVH
    OVH (51.81.87.24): a cloud provider. It rents servers and addresses to its customers.
    Domain
    gifga.com
    Registered
    2013-10-10 · GoDaddy.com, LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-07 14:46 UTC

    Suggest a correction

  36. sponsorlu--cekilisler.online SC · AS403005 · Blatant
    ListedListed by USOMMX absentSPF missingDMARC missingRegistered 59 d ago
    DetailsHide
    Hostname
    sponsorlu--cekilisler.online
    First seen
    2026-11-08 13:10 UTC
    Listing
    USOM listed it 2026-09-11 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 13:05 UTC
    Listed
    USOM
    1. Listed by USOM
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-08 12:05 UTC to 2027-02-06 13:03 UTC
    Logged 2026-11-08 13:05 UTC in IPng Networks Halloumi2027h1, entry 411,809,374
    SHA-256 7b6de9b7441279092a2637913eeea53160fbfba0922168dbf320438101aef60c
    Public key SHA-256 c9f6c4fa9f6a6e92f8ae942c3c9c16bce0cbfff66277cb2701382b3ceaeda849
    Addresses
    64.89.160.46 · Seychelles · AS403005 BLATANTHOST - Blatant
    Domain
    sponsorlu--cekilisler.online
    Registered
    2026-09-10 · Unstoppable Domains, Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 13:23 UTC

    Suggest a correction

  37. techniqueiy.xyz DE · AS47846 · SEDO-AS SEDO GmbH
    ListedParking page · SedoListed by NPA 165 (e-commerce)MX absentSPF missingDMARC missingRegistered 5 mo ago
    DetailsHide
    Hostname
    techniqueiy.xyz
    First seen
    2026-11-08 13:10 UTC
    Listing
    NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 01:35 UTC
    Listed
    NPA 165
    1. Observed in the NPA 165 feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by Encryption Everywhere DV TLS CA - G2 · precertificate
    Valid 2026-11-08 00:00 UTC to 2027-02-05 23:59 UTC
    Logged 2026-11-08 13:08 UTC in Let's Encrypt Sycamore2027h1, entry 1,048,943,504
    SHA-256 c3ed3e318e1c6a598c5ad354eda1b19d37e7afa779bd8fa4031206071ffaf8b8
    Public key SHA-256 ceb48ae3b775bf7cd6bddc0d966fd48c6fb67c0ee351cc8bcb5ab383310d1366
    Addresses
    91.195.240.123 · Germany · AS47846 SEDO-AS SEDO GmbH · Sedo (parking page)
    Parking page · Sedo
    Sedo (91.195.240.123): a parking service. It answers for names that are typically for sale or unused.
    Domain
    techniqueiy.xyz
    Registered
    2026-06-11 · NameSilo, LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 13:23 UTC

    Suggest a correction

  38. thepollingplace.org US · AS13335 · Cloudflare, Inc.4 addresses
    ReportedCloudflareReported by PhishDestroyMX presentSPF ~allDMARC policy noneRegistered 6 y ago
    DetailsHide
    Hostname
    thepollingplace.org
    First seen
    2026-11-08 13:10 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-08 11:57 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-11-08 12:11 UTC to 2027-02-06 12:11 UTC
    Logged 2026-11-08 13:09 UTC in Let's Encrypt Sycamore2027h1, entry 1,048,971,737
    SHA-256 2044a4f033e50604da45a5e7443b3da086d77901fd439ed048aa3c078c949753
    Public key SHA-256 173259a71274c92e7d19c35910bf8f4a1d5b42fba0e4dda65563ea3b9556b3bf
    PhishDestroy
    Addresses
    104.21.12.225 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.196.130 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3033::6815:ce1
    2606:4700:3034::ac43:c482
    Cloudflare
    Cloudflare (104.21.12.225, 172.67.196.130): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    thepollingplace.org
    Registered
    2020-08-19 · GoDaddy.com, LLC
    MX
    Receives mail at mx1-hosting.jellyfish.systems, mx2-hosting.jellyfish.systems, mx3-hosting.jellyfish.systems
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    DMARC policy p=none: reports only
    Checked
    2026-11-08 13:11 UTC

    Suggest a correction

  39. www.masnudy.shop US · AS13335 · Cloudflare, Inc.4 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    www.masnudy.shop
    First seen
    2026-11-08 13:10 UTC
    Listing
    CERT Polska listed it 2026-11-04 · still listed at the last successful feed check 2026-11-08 12:32 UTC
    CERT Polska listed it 2026-11-06 · still listed at the last successful feed check 2026-11-08 12:32 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WR1 · precertificate
    Valid 2026-11-08 12:09 UTC to 2027-02-06 13:08 UTC
    Logged 2026-11-08 13:09 UTC in IPng Networks Halloumi2027h1, entry 411,842,283
    SHA-256 3bf95dc26b3b0411fe206f72ae8eef57e41cf69e5db69566f7180bdb374a8466
    Public key SHA-256 f34dcd81d66faef38475b3ed900c02b93ea1466150f1a66169a4d59f628da518
    Addresses
    104.17.246.119 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    104.17.247.119 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700::6811:f677
    2606:4700::6811:f777
    Cloudflare
    Cloudflare (104.17.246.119, 104.17.247.119): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    masnudy.shop
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 13:11 UTC

    Suggest a correction

  40. www.picashow.org.pk MD · AS200019 · AlexHost ALEXHOST S.R.L.
    ListedUnder picashow.org.pk, listed by MetaMaskMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    www.picashow.org.pk
    First seen
    2026-11-08 13:10 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 11:58 UTC
    Listed
    MetaMask, listing picashow.org.pk and the names under it
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR2
    Valid 2026-11-08 12:10 UTC to 2027-02-06 12:10 UTC
    Logged 2026-11-08 13:09 UTC in Google PlumbersArms2027h1, entry 678,460,777
    SHA-256 a437865664ffa9ab23f2c263f9936eee42f6e971f3791f63f6aaf1759a077f46
    Public key SHA-256 98311a5abf143080e8727b04bef13229d14a6e6aaf45a57d1ef4db933a30be06
    Addresses
    217.156.8.54 · Moldova · AS200019 AlexHost ALEXHOST S.R.L.
    Domain
    picashow.org.pk
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 03:42 UTC

    Suggest a correction

  41. zenledger-qa-alb.zenledger.dev US · AS13335 · Cloudflare, Inc.4 addresses
    ReportedCloudflareUnder zenledger.dev, reported by PhishDestroyMX presentSPF ~allDMARC rejectRegistered 4 y ago
    DetailsHide
    Hostname
    zenledger-qa-alb.zenledger.dev
    First seen
    2026-11-08 13:10 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-08 11:57 UTC
    Reported
    PhishDestroy, listing zenledger.dev and the names under it
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-11-08 12:11 UTC to 2027-02-06 12:11 UTC
    Logged 2026-11-08 13:09 UTC in Google PlumbersArms2027h1, entry 678,466,442
    SHA-256 367a7970f154107aac927b92477b23d8e330b83cc37b65f918770d375e83904d
    Public key SHA-256 f76dd27591dd9fb73de62462cdfc66b832287ef164406ee34b0edfbd17614446
    PhishDestroy
    Addresses
    104.20.28.62 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.66.164.119 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:10::6814:1c3e
    2606:4700:10::ac42:a477
    Cloudflare
    Cloudflare (104.20.28.62, 172.66.164.119): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    zenledger.dev
    Registered
    2022-09-15 · Namecheap Inc.
    MX
    Receives mail at aspmx.l.google.com, alt1.aspmx.l.google.com, alt2.aspmx.l.google.com
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    DMARC policy p=reject
    Checked
    2026-11-08 08:09 UTC

    Suggest a correction

  42. wyxstore.com HK · AS132839 · POWER LINE DATACENTER
    Same certificateSame certificate as aoqi35.com, listed by JPCERT/CCMX absentSPF missingDMARC missingRegistered 1 d ago
    DetailsHide
    Hostname
    wyxstore.com
    First seen
    2026-11-08 13:07 UTC
    Same certificate
    Same certificate as aoqi35.com: listed by JPCERT/CC; a Apple lookalike
    Listed: resolved to 23.235.143.89 on Spamhaus DROP
    28 of 100 domains on this certificate have their own listing evidence
    Certificate 74a1d979e276955b… · 100 domains on it · first seen 2026-11-08 13:07 UTC
    Certificate
    Issued by YE1
    Valid 2026-11-08 12:00 UTC to 2027-02-06 12:00 UTC
    Logged 2026-11-08 12:59 UTC in DigiCert Wyvern2027h1, entry 454,429,235
    SHA-256 74a1d979e276955b676dfb6b6fe56edfade17d09f086d0184e46b5fe3a7be770
    Public key SHA-256 87c2011e6ebd2391f6d5ab387c7116b6ecfdd6fcf14fd0b30d44bb01ff1196e2
    Addresses
    23.235.143.89 · Hong Kong · AS132839 POWERLINE-AS-AP - POWER LINE DATACENTER
    Domain
    wyxstore.com
    Registered
    2026-11-07 · TuringSign Inc. d/b/a Cosmotown
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 13:23 UTC

    Suggest a correction

  43. schzjsgs.com HK · AS132839 · POWER LINE DATACENTER
    Same certificateSame certificate as aoqi35.com, listed by JPCERT/CCMX absentSPF missingDMARC missingRegistered 1 d ago
    DetailsHide
    Hostname
    schzjsgs.com
    First seen
    2026-11-08 13:07 UTC
    Same certificate
    Same certificate as aoqi35.com: listed by JPCERT/CC; a Apple lookalike
    Listed: resolved to 23.235.143.93 on Spamhaus DROP
    28 of 100 domains on this certificate have their own listing evidence
    Certificate 74a1d979e276955b… · 100 domains on it · first seen 2026-11-08 13:07 UTC
    Certificate
    Issued by YE1
    Valid 2026-11-08 12:00 UTC to 2027-02-06 12:00 UTC
    Logged 2026-11-08 12:59 UTC in DigiCert Wyvern2027h1, entry 454,429,235
    SHA-256 74a1d979e276955b676dfb6b6fe56edfade17d09f086d0184e46b5fe3a7be770
    Public key SHA-256 87c2011e6ebd2391f6d5ab387c7116b6ecfdd6fcf14fd0b30d44bb01ff1196e2
    Addresses
    23.235.143.93 · Hong Kong · AS132839 POWERLINE-AS-AP - POWER LINE DATACENTER
    Domain
    schzjsgs.com
    Registered
    2026-11-07 · TuringSign Inc. d/b/a Cosmotown
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 13:23 UTC

    Suggest a correction

  44. hlksaglkrhber.cfd US · AS13335 · Cloudflare, Inc.4 addresses
    ListedCloudflareListed by USOMMX absentSPF missingDMARC missingRegistered today
    DetailsHide
    Hostname
    hlksaglkrhber.cfd
    First seen
    2026-11-08 13:06 UTC
    Listing
    USOM listed it 2026-11-08 · still listed at the last successful feed check 2026-11-08 13:05 UTC
    Listed
    USOM
    1. Certificate logged in CT
    2. Listed by USOM
    3. We matched the new listing
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-08 08:10 UTC to 2027-02-06 08:10 UTC
    Logged 2026-11-08 09:09 UTC in Google PlumbersArms2027h1, entry 675,030,894
    SHA-256 32450d6b065d218956fb54a97b9cdc9715a976bac6f50fdb599bfe0b6d6f6f5e
    Public key SHA-256 965562b43ad15db707f385941f27be878f6382fa8305e21aea4b8e3551e7413c
    Addresses
    104.21.95.200 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.147.179 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3032::6815:5fc8
    2606:4700:3037::ac43:93b3
    Cloudflare
    Cloudflare (104.21.95.200, 172.67.147.179): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    hlksaglkrhber.cfd
    Registered
    2026-11-08 · Spaceship, Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 13:23 UTC

    Suggest a correction

  45. ruijiezhichuang.com HK · AS132839 · POWER LINE DATACENTER
    Same certificateSame certificate as aoqi35.com, listed by JPCERT/CCMX absentSPF missingDMARC missingRegistered 1 d ago
    DetailsHide
    Hostname
    ruijiezhichuang.com
    First seen
    2026-11-08 13:06 UTC
    Same certificate
    Same certificate as aoqi35.com: listed by JPCERT/CC; a Apple lookalike
    Listed: resolved to 23.235.153.126 on Spamhaus DROP
    28 of 100 domains on this certificate have their own listing evidence
    Certificate 74a1d979e276955b… · 100 domains on it · first seen 2026-11-08 13:06 UTC
    Certificate
    Issued by YE1
    Valid 2026-11-08 12:00 UTC to 2027-02-06 12:00 UTC
    Logged 2026-11-08 12:59 UTC in DigiCert Wyvern2027h1, entry 454,429,235
    SHA-256 74a1d979e276955b676dfb6b6fe56edfade17d09f086d0184e46b5fe3a7be770
    Public key SHA-256 87c2011e6ebd2391f6d5ab387c7116b6ecfdd6fcf14fd0b30d44bb01ff1196e2
    Addresses
    23.235.153.126 · Hong Kong · AS132839 POWERLINE-AS-AP - POWER LINE DATACENTER
    Domain
    ruijiezhichuang.com
    Registered
    2026-11-07 · TuringSign Inc. d/b/a Cosmotown
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 13:23 UTC

    Suggest a correction

  46. weimi313.com HK · AS132839 · POWER LINE DATACENTER
    Same certificateSame certificate as aoqi35.com, listed by JPCERT/CCMX absentSPF missingDMARC missingRegistered 1 d ago
    DetailsHide
    Hostname
    weimi313.com
    First seen
    2026-11-08 13:05 UTC
    Same certificate
    Same certificate as aoqi35.com: listed by JPCERT/CC; a Apple lookalike
    Listed: resolved to 23.235.143.86 on Spamhaus DROP
    28 of 100 domains on this certificate have their own listing evidence
    Certificate 74a1d979e276955b… · 100 domains on it · first seen 2026-11-08 13:05 UTC
    Certificate
    Issued by YE1
    Valid 2026-11-08 12:00 UTC to 2027-02-06 12:00 UTC
    Logged 2026-11-08 12:59 UTC in DigiCert Wyvern2027h1, entry 454,429,235
    SHA-256 74a1d979e276955b676dfb6b6fe56edfade17d09f086d0184e46b5fe3a7be770
    Public key SHA-256 87c2011e6ebd2391f6d5ab387c7116b6ecfdd6fcf14fd0b30d44bb01ff1196e2
    Addresses
    23.235.143.86 · Hong Kong · AS132839 POWERLINE-AS-AP - POWER LINE DATACENTER
    Domain
    weimi313.com
    Registered
    2026-11-07 · TuringSign Inc. d/b/a Cosmotown
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 13:23 UTC

    Suggest a correction

  47. 3-mmir.org US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 10 mo ago
    DetailsHide
    Hostname
    3-mmir.org
    First seen
    2026-11-08 13:05 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-08 11:57 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-08 12:02 UTC to 2027-02-06 13:01 UTC
    Logged 2026-11-08 13:02 UTC in Geomys Tuscolo2027h1, entry 528,379,699
    SHA-256 0d69a1fe5a90924bd297c090ea6e5d4935985de66c2b4824b56b1c8c993e8aae
    Public key SHA-256 87b7d079ca50f780159c4c5d5cb6867b7b32a8ed8fb6e25d9c5d507003c09764
    PhishDestroy
    Addresses
    104.21.38.76 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.220.21 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.38.76, 172.67.220.21): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    3-mmir.org
    Registered
    2026-01-17 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 13:22 UTC

    Suggest a correction

  48. app.supportwalletguard.app US · AS13335 · Cloudflare, Inc.
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    app.supportwalletguard.app
    First seen
    2026-11-08 13:05 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 11:58 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WR1 · precertificate
    Valid 2026-11-08 12:04 UTC to 2027-02-06 13:02 UTC
    Logged 2026-11-08 13:04 UTC in DigiCert Wyvern2027h1, entry 454,472,495
    SHA-256 06186a1c369dfdd235ed84f3e862065db12855315453a97fb9ad30df6e1387db
    Public key SHA-256 abf5c340a94c5d7e50f5539f9d7ce5507aec8fc2bca8bc8fed769ed3415b6df6
    Addresses
    185.158.133.1 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (185.158.133.1): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    supportwalletguard.app
    Registered
    2026-07-13 · CloudFlare, Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 13:22 UTC

    Suggest a correction

  49. chase.personalaccount.app US · AS13335 · Cloudflare, Inc.
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 2 mo ago
    DetailsHide
    Hostname
    chase.personalaccount.app
    First seen
    2026-11-08 13:05 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-08 11:57 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WR1 · precertificate
    Valid 2026-11-08 12:02 UTC to 2027-02-06 13:01 UTC
    Logged 2026-11-08 13:02 UTC in Geomys Tuscolo2027h1, entry 528,371,401
    SHA-256 202acb3f85fb02e0a8a7219d1cfb2b05a2d55e6ebe4974ffe0b725ed334873be
    Public key SHA-256 a3babba509056341e6428e9f67d1273babecaef1e7b4a49167152c16bfa30952
    PhishDestroy
    Addresses
    185.158.133.1 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (185.158.133.1): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    personalaccount.app
    Registered
    2026-09-01 · Name.com, Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 13:23 UTC

    Suggest a correction

  50. dm8kl.beer US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by NPA 165 (information services)MX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    dm8kl.beer
    First seen
    2026-11-08 13:05 UTC
    Listing
    NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 01:35 UTC
    Listed
    NPA 165
    1. Observed in the NPA 165 feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-11-08 12:04 UTC to 2027-02-06 12:04 UTC
    Logged 2026-11-08 13:03 UTC in Google PlumbersArms2027h1, entry 678,380,428
    SHA-256 21b03da6a846f55f4aaa7fbb50778d77fb5606d763730d78aaeeeb336e25403a
    Public key SHA-256 8a67d872fe2bd4c20c4e59eb4f47150306d2e00fbdacddf4c5da7e5ee989d009
    Addresses
    104.21.5.47 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.132.248 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.5.47, 172.67.132.248): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    dm8kl.beer
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 13:06 UTC

    Suggest a correction

  51. dostatsmerv.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    dostatsmerv.com
    First seen
    2026-11-08 13:05 UTC
    Listing
    CERT Polska listed it 2026-07-13 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 12:32 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-08 12:04 UTC to 2027-02-06 13:02 UTC
    Logged 2026-11-08 13:04 UTC in Geomys Tuscolo2027h1, entry 528,396,104
    SHA-256 a9b9b716c94c060ddd306911b453174f2092362d1e4da39db64acb65c77169ac
    Public key SHA-256 0aff0160a7e366459a94166880a1d159939fe69e07641978b8fbe6b58bcc2d28
    Addresses
    104.21.29.94 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.148.185 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.29.94, 172.67.148.185): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    dostatsmerv.com
    Registered
    2026-07-13 · NameCheap, Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 13:23 UTC

    Suggest a correction

  52. nibulas.network US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 12 mo ago
    DetailsHide
    Hostname
    nibulas.network
    First seen
    2026-11-08 13:05 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-08 11:57 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-08 12:00 UTC to 2027-02-06 12:59 UTC
    Logged 2026-11-08 13:00 UTC in Geomys Tuscolo2027h1, entry 528,352,420
    SHA-256 75825be1a5538fb3fcb13126a1b7845f09d686413568cba4b2b5614c04f17e5c
    Public key SHA-256 a056c5c7c8a69f474dedddad6bb06954849b332801db3dc0464ae6f98aa68ffd
    PhishDestroy
    Addresses
    104.21.82.231 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.208.132 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.82.231, 172.67.208.132): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    nibulas.network
    Registered
    2025-11-19 · PDR Ltd. d/b/a PublicDomainRegistry.com
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 13:23 UTC

    Suggest a correction

  53. zznnjd.mom US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by NPA 165 (finance and insurance)MX absentSPF missingDMARC missingRegistered 59 d ago
    DetailsHide
    Hostname
    zznnjd.mom
    First seen
    2026-11-08 13:05 UTC
    Listing
    NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 01:35 UTC
    Listed
    NPA 165
    1. Observed in the NPA 165 feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-08 12:04 UTC to 2027-02-06 13:04 UTC
    Logged 2026-11-08 13:04 UTC in Google ParcelYard2027h1, entry 678,091,237
    SHA-256 8fbe24431598448ef32fa3402c4326c917d0bc077fad9bc7c984c46161ce6d28
    Public key SHA-256 e9b796a3f8bdcb4e73b69f1d8a648bdd0a6d4410532419b1308fc71d36dd7854
    Addresses
    104.21.53.201 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.218.123 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.53.201, 172.67.218.123): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    zznnjd.mom
    Registered
    2026-09-10 · Dynadot Inc
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 13:23 UTC

    Suggest a correction

  54. njhyddzsw.com HK · AS132839 · POWER LINE DATACENTER
    Same certificateSame certificate as aoqi35.com, listed by JPCERT/CCMX absentSPF missingDMARC missingRegistered 1 d ago
    DetailsHide
    Hostname
    njhyddzsw.com
    First seen
    2026-11-08 13:04 UTC
    Same certificate
    Same certificate as aoqi35.com: listed by JPCERT/CC; a Apple lookalike
    Listed: resolved to 23.235.143.84 on Spamhaus DROP
    28 of 100 domains on this certificate have their own listing evidence
    Certificate 74a1d979e276955b… · 100 domains on it · first seen 2026-11-08 13:04 UTC
    Certificate
    Issued by YE1
    Valid 2026-11-08 12:00 UTC to 2027-02-06 12:00 UTC
    Logged 2026-11-08 12:59 UTC in DigiCert Wyvern2027h1, entry 454,429,235
    SHA-256 74a1d979e276955b676dfb6b6fe56edfade17d09f086d0184e46b5fe3a7be770
    Public key SHA-256 87c2011e6ebd2391f6d5ab387c7116b6ecfdd6fcf14fd0b30d44bb01ff1196e2
    Addresses
    23.235.143.84 · Hong Kong · AS132839 POWERLINE-AS-AP - POWER LINE DATACENTER
    Domain
    njhyddzsw.com
    Registered
    2026-11-07 · TuringSign Inc. d/b/a Cosmotown
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 13:23 UTC

    Suggest a correction

  55. nblnkj.com HK · AS132839 · POWER LINE DATACENTER
    Same certificateSame certificate as aoqi35.com, listed by JPCERT/CCMX absentSPF missingDMARC missingRegistered 1 d ago
    DetailsHide
    Hostname
    nblnkj.com
    First seen
    2026-11-08 13:04 UTC
    Same certificate
    Same certificate as aoqi35.com: listed by JPCERT/CC; a Apple lookalike
    Listed: resolved to 23.235.132.156 on Spamhaus DROP
    28 of 100 domains on this certificate have their own listing evidence
    Certificate 74a1d979e276955b… · 100 domains on it · first seen 2026-11-08 13:04 UTC
    Certificate
    Issued by YE1
    Valid 2026-11-08 12:00 UTC to 2027-02-06 12:00 UTC
    Logged 2026-11-08 12:59 UTC in DigiCert Wyvern2027h1, entry 454,429,235
    SHA-256 74a1d979e276955b676dfb6b6fe56edfade17d09f086d0184e46b5fe3a7be770
    Public key SHA-256 87c2011e6ebd2391f6d5ab387c7116b6ecfdd6fcf14fd0b30d44bb01ff1196e2
    Addresses
    23.235.132.156 · Hong Kong · AS132839 POWERLINE-AS-AP - POWER LINE DATACENTER
    Domain
    nblnkj.com
    Registered
    2026-11-07 · TuringSign Inc. d/b/a Cosmotown
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 13:23 UTC

    Suggest a correction

  56. walmartcom.com NL · AS49981 · WorldStream WorldStream B.V.4 addressesWalmart
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX absentSPF missingDMARC missingRegistered 16 y ago
    DetailsHide
    Hostname
    walmartcom.com
    First seen
    2026-11-08 13:04 UTC
    DNS
    Resolves · checked 2026-11-08 13:04 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 45.82.67.143.
    1. Phishing-host list fetched with the address
    2. Resolved to 45.82.67.143
    Brand
    Walmart
    Addresses
    45.82.67.143 · Netherlands · AS49981 WorldStream WorldStream B.V.
    199.193.114.100 · United States · AS40244 TURNKEY-INTERNET - Turnkey Internet Inc.
    199.193.114.101 · United States · AS40244 TURNKEY-INTERNET - Turnkey Internet Inc.
    199.193.114.102 · United States · AS40244 TURNKEY-INTERNET - Turnkey Internet Inc.
    Domain
    walmartcom.com
    Registered
    2010-10-31 · Media Elite Holdings Limited, S.A.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 08:39 UTC

    Suggest a correction

  57. eqquhx.com HK · AS132839 · POWER LINE DATACENTER
    Same certificateSame certificate as aoqi35.com, listed by JPCERT/CCMX absentSPF missingDMARC missingRegistered 1 d ago
    DetailsHide
    Hostname
    eqquhx.com
    First seen
    2026-11-08 13:04 UTC
    Same certificate
    Same certificate as aoqi35.com: listed by JPCERT/CC; a Apple lookalike
    Listed: resolved to 23.235.143.90 on Spamhaus DROP
    28 of 100 domains on this certificate have their own listing evidence
    Certificate 74a1d979e276955b… · 100 domains on it · first seen 2026-11-08 13:04 UTC
    Certificate
    Issued by YE1
    Valid 2026-11-08 12:00 UTC to 2027-02-06 12:00 UTC
    Logged 2026-11-08 12:59 UTC in DigiCert Wyvern2027h1, entry 454,429,235
    SHA-256 74a1d979e276955b676dfb6b6fe56edfade17d09f086d0184e46b5fe3a7be770
    Public key SHA-256 87c2011e6ebd2391f6d5ab387c7116b6ecfdd6fcf14fd0b30d44bb01ff1196e2
    Addresses
    23.235.143.90 · Hong Kong · AS132839 POWERLINE-AS-AP - POWER LINE DATACENTER
    Domain
    eqquhx.com
    Registered
    2026-11-07 · TuringSign Inc. d/b/a Cosmotown
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 13:23 UTC

    Suggest a correction

  58. egreter.com HK · AS132839 · POWER LINE DATACENTER
    Same certificateSame certificate as aoqi35.com, listed by JPCERT/CCMX absentSPF missingDMARC missingRegistered 1 d ago
    DetailsHide
    Hostname
    egreter.com
    First seen
    2026-11-08 13:03 UTC
    Same certificate
    Same certificate as aoqi35.com: listed by JPCERT/CC; a Apple lookalike
    Listed: resolved to 23.235.153.120 on Spamhaus DROP
    28 of 100 domains on this certificate have their own listing evidence
    Certificate 74a1d979e276955b… · 100 domains on it · first seen 2026-11-08 13:03 UTC
    Certificate
    Issued by YE1
    Valid 2026-11-08 12:00 UTC to 2027-02-06 12:00 UTC
    Logged 2026-11-08 12:59 UTC in DigiCert Wyvern2027h1, entry 454,429,235
    SHA-256 74a1d979e276955b676dfb6b6fe56edfade17d09f086d0184e46b5fe3a7be770
    Public key SHA-256 87c2011e6ebd2391f6d5ab387c7116b6ecfdd6fcf14fd0b30d44bb01ff1196e2
    Addresses
    23.235.153.120 · Hong Kong · AS132839 POWERLINE-AS-AP - POWER LINE DATACENTER
    Domain
    egreter.com
    Registered
    2026-11-07 · TuringSign Inc. d/b/a Cosmotown
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 13:23 UTC

    Suggest a correction

  59. zyqbkc.com HK · AS132839 · POWER LINE DATACENTER
    Same certificateSame certificate as aoqi35.com, listed by JPCERT/CCMX absentSPF missingDMARC missingRegistered 1 d ago
    DetailsHide
    Hostname
    zyqbkc.com
    First seen
    2026-11-08 13:01 UTC
    Same certificate
    Same certificate as aoqi35.com: listed by JPCERT/CC; a Apple lookalike
    Listed: resolved to 23.235.148.212 on Spamhaus DROP
    28 of 100 domains on this certificate have their own listing evidence
    Certificate 74a1d979e276955b… · 100 domains on it · first seen 2026-11-08 13:01 UTC
    Certificate
    Issued by YE1
    Valid 2026-11-08 12:00 UTC to 2027-02-06 12:00 UTC
    Logged 2026-11-08 12:59 UTC in DigiCert Wyvern2027h1, entry 454,429,235
    SHA-256 74a1d979e276955b676dfb6b6fe56edfade17d09f086d0184e46b5fe3a7be770
    Public key SHA-256 87c2011e6ebd2391f6d5ab387c7116b6ecfdd6fcf14fd0b30d44bb01ff1196e2
    Addresses
    23.235.148.212 · Hong Kong · AS132839 POWERLINE-AS-AP - POWER LINE DATACENTER
    Domain
    zyqbkc.com
    Registered
    2026-11-07 · TuringSign Inc. d/b/a Cosmotown
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 13:23 UTC

    Suggest a correction

  60. zyxjdc.com HK · AS132839 · POWER LINE DATACENTER
    Same certificateSame certificate as aoqi35.com, listed by JPCERT/CCMX absentSPF missingDMARC missingRegistered 1 d ago
    DetailsHide
    Hostname
    zyxjdc.com
    First seen
    2026-11-08 13:01 UTC
    Same certificate
    Same certificate as aoqi35.com: listed by JPCERT/CC; a Apple lookalike
    Listed: resolved to 23.235.148.210 on Spamhaus DROP
    28 of 100 domains on this certificate have their own listing evidence
    Certificate 74a1d979e276955b… · 100 domains on it · first seen 2026-11-08 13:01 UTC
    Certificate
    Issued by YE1
    Valid 2026-11-08 12:00 UTC to 2027-02-06 12:00 UTC
    Logged 2026-11-08 12:59 UTC in DigiCert Wyvern2027h1, entry 454,429,235
    SHA-256 74a1d979e276955b676dfb6b6fe56edfade17d09f086d0184e46b5fe3a7be770
    Public key SHA-256 87c2011e6ebd2391f6d5ab387c7116b6ecfdd6fcf14fd0b30d44bb01ff1196e2
    Addresses
    23.235.148.210 · Hong Kong · AS132839 POWERLINE-AS-AP - POWER LINE DATACENTER
    Domain
    zyxjdc.com
    Registered
    2026-11-07 · TuringSign Inc. d/b/a Cosmotown
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 13:23 UTC

    Suggest a correction

  61. zhcsnews.com HK · AS132839 · POWER LINE DATACENTER
    Same certificateSame certificate as aoqi35.com, listed by JPCERT/CCMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    zhcsnews.com
    First seen
    2026-11-08 13:01 UTC
    Same certificate
    Same certificate as aoqi35.com: listed by JPCERT/CC; a Apple lookalike
    Listed: resolved to 23.235.132.146 on Spamhaus DROP
    28 of 100 domains on this certificate have their own listing evidence
    Certificate 74a1d979e276955b… · 100 domains on it · first seen 2026-11-08 13:01 UTC
    Certificate
    Issued by YE1
    Valid 2026-11-08 12:00 UTC to 2027-02-06 12:00 UTC
    Logged 2026-11-08 12:59 UTC in DigiCert Wyvern2027h1, entry 454,429,235
    SHA-256 74a1d979e276955b676dfb6b6fe56edfade17d09f086d0184e46b5fe3a7be770
    Public key SHA-256 87c2011e6ebd2391f6d5ab387c7116b6ecfdd6fcf14fd0b30d44bb01ff1196e2
    Addresses
    23.235.132.146 · Hong Kong · AS132839 POWERLINE-AS-AP - POWER LINE DATACENTER
    Domain
    zhcsnews.com
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 13:22 UTC

    Suggest a correction

  62. zhongbowangxun.com HK · AS132839 · POWER LINE DATACENTER
    Same certificateSame certificate as aoqi35.com, listed by JPCERT/CCMX absentSPF missingDMARC missingRegistered 1 d ago
    DetailsHide
    Hostname
    zhongbowangxun.com
    First seen
    2026-11-08 13:01 UTC
    Same certificate
    Same certificate as aoqi35.com: listed by JPCERT/CC; a Apple lookalike
    Listed: resolved to 23.235.153.115 on Spamhaus DROP
    28 of 100 domains on this certificate have their own listing evidence
    Certificate 74a1d979e276955b… · 100 domains on it · first seen 2026-11-08 13:01 UTC
    Certificate
    Issued by YE1
    Valid 2026-11-08 12:00 UTC to 2027-02-06 12:00 UTC
    Logged 2026-11-08 12:59 UTC in DigiCert Wyvern2027h1, entry 454,429,235
    SHA-256 74a1d979e276955b676dfb6b6fe56edfade17d09f086d0184e46b5fe3a7be770
    Public key SHA-256 87c2011e6ebd2391f6d5ab387c7116b6ecfdd6fcf14fd0b30d44bb01ff1196e2
    Addresses
    23.235.153.115 · Hong Kong · AS132839 POWERLINE-AS-AP - POWER LINE DATACENTER
    Domain
    zhongbowangxun.com
    Registered
    2026-11-07 · TuringSign Inc. d/b/a Cosmotown
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 13:23 UTC

    Suggest a correction

  63. zhuchaoniaoshop.com HK · AS132839 · POWER LINE DATACENTER
    Same certificateSame certificate as aoqi35.com, listed by JPCERT/CCMX absentSPF missingDMARC missingRegistered 1 d ago
    DetailsHide
    Hostname
    zhuchaoniaoshop.com
    First seen
    2026-11-08 13:01 UTC
    Same certificate
    Same certificate as aoqi35.com: listed by JPCERT/CC; a Apple lookalike
    Listed: resolved to 23.235.148.213 on Spamhaus DROP
    28 of 100 domains on this certificate have their own listing evidence
    Certificate 74a1d979e276955b… · 100 domains on it · first seen 2026-11-08 13:01 UTC
    Certificate
    Issued by YE1
    Valid 2026-11-08 12:00 UTC to 2027-02-06 12:00 UTC
    Logged 2026-11-08 12:59 UTC in DigiCert Wyvern2027h1, entry 454,429,235
    SHA-256 74a1d979e276955b676dfb6b6fe56edfade17d09f086d0184e46b5fe3a7be770
    Public key SHA-256 87c2011e6ebd2391f6d5ab387c7116b6ecfdd6fcf14fd0b30d44bb01ff1196e2
    Addresses
    23.235.148.213 · Hong Kong · AS132839 POWERLINE-AS-AP - POWER LINE DATACENTER
    Domain
    zhuchaoniaoshop.com
    Registered
    2026-11-07 · TuringSign Inc. d/b/a Cosmotown
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 13:23 UTC

    Suggest a correction

  64. zbicebox.com HK · AS132839 · POWER LINE DATACENTER
    Same certificateSame certificate as aoqi35.com, listed by JPCERT/CCMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    zbicebox.com
    First seen
    2026-11-08 13:01 UTC
    Same certificate
    Same certificate as aoqi35.com: listed by JPCERT/CC; a Apple lookalike
    Listed: resolved to 23.235.153.119 on Spamhaus DROP
    28 of 100 domains on this certificate have their own listing evidence
    Certificate 74a1d979e276955b… · 100 domains on it · first seen 2026-11-08 13:01 UTC
    Certificate
    Issued by YE1
    Valid 2026-11-08 12:00 UTC to 2027-02-06 12:00 UTC
    Logged 2026-11-08 12:59 UTC in DigiCert Wyvern2027h1, entry 454,429,235
    SHA-256 74a1d979e276955b676dfb6b6fe56edfade17d09f086d0184e46b5fe3a7be770
    Public key SHA-256 87c2011e6ebd2391f6d5ab387c7116b6ecfdd6fcf14fd0b30d44bb01ff1196e2
    Addresses
    23.235.153.119 · Hong Kong · AS132839 POWERLINE-AS-AP - POWER LINE DATACENTER
    Domain
    zbicebox.com
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 13:22 UTC

    Suggest a correction

  65. yukangbao.com HK · AS132839 · POWER LINE DATACENTER
    Same certificateSame certificate as aoqi35.com, listed by JPCERT/CCMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    yukangbao.com
    First seen
    2026-11-08 13:01 UTC
    Same certificate
    Same certificate as aoqi35.com: listed by JPCERT/CC; a Apple lookalike
    Listed: resolved to 23.235.153.117 on Spamhaus DROP
    28 of 100 domains on this certificate have their own listing evidence
    Certificate 74a1d979e276955b… · 100 domains on it · first seen 2026-11-08 13:01 UTC
    Certificate
    Issued by YE1
    Valid 2026-11-08 12:00 UTC to 2027-02-06 12:00 UTC
    Logged 2026-11-08 12:59 UTC in DigiCert Wyvern2027h1, entry 454,429,235
    SHA-256 74a1d979e276955b676dfb6b6fe56edfade17d09f086d0184e46b5fe3a7be770
    Public key SHA-256 87c2011e6ebd2391f6d5ab387c7116b6ecfdd6fcf14fd0b30d44bb01ff1196e2
    Addresses
    23.235.153.117 · Hong Kong · AS132839 POWERLINE-AS-AP - POWER LINE DATACENTER
    Domain
    yukangbao.com
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 13:22 UTC

    Suggest a correction

  66. chuangshiweb.com HK · AS132839 · POWER LINE DATACENTER
    Same certificateSame certificate as aoqi35.com, listed by JPCERT/CCMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    chuangshiweb.com
    First seen
    2026-11-08 13:01 UTC
    Same certificate
    Same certificate as aoqi35.com: listed by JPCERT/CC; a Apple lookalike
    Listed: resolved to 23.235.153.116 on Spamhaus DROP
    28 of 100 domains on this certificate have their own listing evidence
    Certificate 74a1d979e276955b… · 100 domains on it · first seen 2026-11-08 13:01 UTC
    Certificate
    Issued by YE1
    Valid 2026-11-08 12:00 UTC to 2027-02-06 12:00 UTC
    Logged 2026-11-08 12:59 UTC in DigiCert Wyvern2027h1, entry 454,429,235
    SHA-256 74a1d979e276955b676dfb6b6fe56edfade17d09f086d0184e46b5fe3a7be770
    Public key SHA-256 87c2011e6ebd2391f6d5ab387c7116b6ecfdd6fcf14fd0b30d44bb01ff1196e2
    Addresses
    23.235.153.116 · Hong Kong · AS132839 POWERLINE-AS-AP - POWER LINE DATACENTER
    Domain
    chuangshiweb.com
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 13:22 UTC

    Suggest a correction

  67. tcmzedu.com HK · AS132839 · POWER LINE DATACENTER
    Same certificateSame certificate as aoqi35.com, listed by JPCERT/CCMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    tcmzedu.com
    First seen
    2026-11-08 13:01 UTC
    Same certificate
    Same certificate as aoqi35.com: listed by JPCERT/CC; a Apple lookalike
    Listed: resolved to 23.235.153.122 on Spamhaus DROP
    28 of 100 domains on this certificate have their own listing evidence
    Certificate 74a1d979e276955b… · 100 domains on it · first seen 2026-11-08 13:01 UTC
    Certificate
    Issued by YE1
    Valid 2026-11-08 12:00 UTC to 2027-02-06 12:00 UTC
    Logged 2026-11-08 12:59 UTC in DigiCert Wyvern2027h1, entry 454,429,235
    SHA-256 74a1d979e276955b676dfb6b6fe56edfade17d09f086d0184e46b5fe3a7be770
    Public key SHA-256 87c2011e6ebd2391f6d5ab387c7116b6ecfdd6fcf14fd0b30d44bb01ff1196e2
    Addresses
    23.235.153.122 · Hong Kong · AS132839 POWERLINE-AS-AP - POWER LINE DATACENTER
    Domain
    tcmzedu.com
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 13:22 UTC

    Suggest a correction

  68. swisspoya.com HK · AS132839 · POWER LINE DATACENTER
    Same certificateSame certificate as aoqi35.com, listed by JPCERT/CCMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    swisspoya.com
    First seen
    2026-11-08 13:01 UTC
    Same certificate
    Same certificate as aoqi35.com: listed by JPCERT/CC; a Apple lookalike
    Listed: resolved to 23.235.153.121 on Spamhaus DROP
    28 of 100 domains on this certificate have their own listing evidence
    Certificate 74a1d979e276955b… · 100 domains on it · first seen 2026-11-08 13:01 UTC
    Certificate
    Issued by YE1
    Valid 2026-11-08 12:00 UTC to 2027-02-06 12:00 UTC
    Logged 2026-11-08 12:59 UTC in DigiCert Wyvern2027h1, entry 454,429,235
    SHA-256 74a1d979e276955b676dfb6b6fe56edfade17d09f086d0184e46b5fe3a7be770
    Public key SHA-256 87c2011e6ebd2391f6d5ab387c7116b6ecfdd6fcf14fd0b30d44bb01ff1196e2
    Addresses
    23.235.153.121 · Hong Kong · AS132839 POWERLINE-AS-AP - POWER LINE DATACENTER
    Domain
    swisspoya.com
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 13:22 UTC

    Suggest a correction

  69. soulianghz.com HK · AS132839 · POWER LINE DATACENTER
    Same certificateSame certificate as aoqi35.com, listed by JPCERT/CCMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    soulianghz.com
    First seen
    2026-11-08 13:01 UTC
    Same certificate
    Same certificate as aoqi35.com: listed by JPCERT/CC; a Apple lookalike
    Listed: resolved to 23.235.148.220 on Spamhaus DROP
    28 of 100 domains on this certificate have their own listing evidence
    Certificate 74a1d979e276955b… · 100 domains on it · first seen 2026-11-08 13:01 UTC
    Certificate
    Issued by YE1
    Valid 2026-11-08 12:00 UTC to 2027-02-06 12:00 UTC
    Logged 2026-11-08 12:59 UTC in DigiCert Wyvern2027h1, entry 454,429,235
    SHA-256 74a1d979e276955b676dfb6b6fe56edfade17d09f086d0184e46b5fe3a7be770
    Public key SHA-256 87c2011e6ebd2391f6d5ab387c7116b6ecfdd6fcf14fd0b30d44bb01ff1196e2
    Addresses
    23.235.148.220 · Hong Kong · AS132839 POWERLINE-AS-AP - POWER LINE DATACENTER
    Domain
    soulianghz.com
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 13:22 UTC

    Suggest a correction

  70. lema01.com HK · AS132839 · POWER LINE DATACENTER
    Same certificateSame certificate as aoqi35.com, listed by JPCERT/CCMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    lema01.com
    First seen
    2026-11-08 13:01 UTC
    Same certificate
    Same certificate as aoqi35.com: listed by JPCERT/CC; a Apple lookalike
    Listed: resolved to 23.235.148.216 on Spamhaus DROP
    28 of 100 domains on this certificate have their own listing evidence
    Certificate 74a1d979e276955b… · 100 domains on it · first seen 2026-11-08 13:01 UTC
    Certificate
    Issued by YE1
    Valid 2026-11-08 12:00 UTC to 2027-02-06 12:00 UTC
    Logged 2026-11-08 12:59 UTC in DigiCert Wyvern2027h1, entry 454,429,235
    SHA-256 74a1d979e276955b676dfb6b6fe56edfade17d09f086d0184e46b5fe3a7be770
    Public key SHA-256 87c2011e6ebd2391f6d5ab387c7116b6ecfdd6fcf14fd0b30d44bb01ff1196e2
    Addresses
    23.235.148.216 · Hong Kong · AS132839 POWERLINE-AS-AP - POWER LINE DATACENTER
    Domain
    lema01.com
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 13:22 UTC

    Suggest a correction

  71. lessikj.com HK · AS132839 · POWER LINE DATACENTER
    Same certificateSame certificate as aoqi35.com, listed by JPCERT/CCMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    lessikj.com
    First seen
    2026-11-08 13:01 UTC
    Same certificate
    Same certificate as aoqi35.com: listed by JPCERT/CC; a Apple lookalike
    Listed: resolved to 23.235.148.219 on Spamhaus DROP
    28 of 100 domains on this certificate have their own listing evidence
    Certificate 74a1d979e276955b… · 100 domains on it · first seen 2026-11-08 13:01 UTC
    Certificate
    Issued by YE1
    Valid 2026-11-08 12:00 UTC to 2027-02-06 12:00 UTC
    Logged 2026-11-08 12:59 UTC in DigiCert Wyvern2027h1, entry 454,429,235
    SHA-256 74a1d979e276955b676dfb6b6fe56edfade17d09f086d0184e46b5fe3a7be770
    Public key SHA-256 87c2011e6ebd2391f6d5ab387c7116b6ecfdd6fcf14fd0b30d44bb01ff1196e2
    Addresses
    23.235.148.219 · Hong Kong · AS132839 POWERLINE-AS-AP - POWER LINE DATACENTER
    Domain
    lessikj.com
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 13:22 UTC

    Suggest a correction

  72. latinstockinvesting.com HK · AS132839 · POWER LINE DATACENTER
    Same certificateSame certificate as aoqi35.com, listed by JPCERT/CCMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    latinstockinvesting.com
    First seen
    2026-11-08 13:01 UTC
    Same certificate
    Same certificate as aoqi35.com: listed by JPCERT/CC; a Apple lookalike
    Listed: resolved to 23.235.143.88 on Spamhaus DROP
    28 of 100 domains on this certificate have their own listing evidence
    Certificate 74a1d979e276955b… · 100 domains on it · first seen 2026-11-08 13:01 UTC
    Certificate
    Issued by YE1
    Valid 2026-11-08 12:00 UTC to 2027-02-06 12:00 UTC
    Logged 2026-11-08 12:59 UTC in DigiCert Wyvern2027h1, entry 454,429,235
    SHA-256 74a1d979e276955b676dfb6b6fe56edfade17d09f086d0184e46b5fe3a7be770
    Public key SHA-256 87c2011e6ebd2391f6d5ab387c7116b6ecfdd6fcf14fd0b30d44bb01ff1196e2
    Addresses
    23.235.143.88 · Hong Kong · AS132839 POWERLINE-AS-AP - POWER LINE DATACENTER
    Domain
    latinstockinvesting.com
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 13:22 UTC

    Suggest a correction

  73. jiaaonet.com HK · AS132839 · POWER LINE DATACENTER
    Same certificateSame certificate as aoqi35.com, listed by JPCERT/CCMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    jiaaonet.com
    First seen
    2026-11-08 13:01 UTC
    Same certificate
    Same certificate as aoqi35.com: listed by JPCERT/CC; a Apple lookalike
    Listed: resolved to 23.235.153.124 on Spamhaus DROP
    28 of 100 domains on this certificate have their own listing evidence
    Certificate 74a1d979e276955b… · 100 domains on it · first seen 2026-11-08 13:01 UTC
    Certificate
    Issued by YE1
    Valid 2026-11-08 12:00 UTC to 2027-02-06 12:00 UTC
    Logged 2026-11-08 12:59 UTC in DigiCert Wyvern2027h1, entry 454,429,235
    SHA-256 74a1d979e276955b676dfb6b6fe56edfade17d09f086d0184e46b5fe3a7be770
    Public key SHA-256 87c2011e6ebd2391f6d5ab387c7116b6ecfdd6fcf14fd0b30d44bb01ff1196e2
    Addresses
    23.235.153.124 · Hong Kong · AS132839 POWERLINE-AS-AP - POWER LINE DATACENTER
    Domain
    jiaaonet.com
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 13:22 UTC

    Suggest a correction

  74. jiujugongyu.com HK · AS132839 · POWER LINE DATACENTER
    Same certificateSame certificate as aoqi35.com, listed by JPCERT/CCMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    jiujugongyu.com
    First seen
    2026-11-08 13:01 UTC
    Same certificate
    Same certificate as aoqi35.com: listed by JPCERT/CC; a Apple lookalike
    Listed: resolved to 23.235.148.214 on Spamhaus DROP
    28 of 100 domains on this certificate have their own listing evidence
    Certificate 74a1d979e276955b… · 100 domains on it · first seen 2026-11-08 13:01 UTC
    Certificate
    Issued by YE1
    Valid 2026-11-08 12:00 UTC to 2027-02-06 12:00 UTC
    Logged 2026-11-08 12:59 UTC in DigiCert Wyvern2027h1, entry 454,429,235
    SHA-256 74a1d979e276955b676dfb6b6fe56edfade17d09f086d0184e46b5fe3a7be770
    Public key SHA-256 87c2011e6ebd2391f6d5ab387c7116b6ecfdd6fcf14fd0b30d44bb01ff1196e2
    Addresses
    23.235.148.214 · Hong Kong · AS132839 POWERLINE-AS-AP - POWER LINE DATACENTER
    Domain
    jiujugongyu.com
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 13:22 UTC

    Suggest a correction

  75. hz-obm.com HK · AS132839 · POWER LINE DATACENTER
    Same certificateSame certificate as aoqi35.com, listed by JPCERT/CCMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    hz-obm.com
    First seen
    2026-11-08 13:01 UTC
    Same certificate
    Same certificate as aoqi35.com: listed by JPCERT/CC; a Apple lookalike
    Listed: resolved to 23.235.132.153 on Spamhaus DROP
    28 of 100 domains on this certificate have their own listing evidence
    Certificate 74a1d979e276955b… · 100 domains on it · first seen 2026-11-08 13:01 UTC
    Certificate
    Issued by YE1
    Valid 2026-11-08 12:00 UTC to 2027-02-06 12:00 UTC
    Logged 2026-11-08 12:59 UTC in DigiCert Wyvern2027h1, entry 454,429,235
    SHA-256 74a1d979e276955b676dfb6b6fe56edfade17d09f086d0184e46b5fe3a7be770
    Public key SHA-256 87c2011e6ebd2391f6d5ab387c7116b6ecfdd6fcf14fd0b30d44bb01ff1196e2
    Addresses
    23.235.132.153 · Hong Kong · AS132839 POWERLINE-AS-AP - POWER LINE DATACENTER
    Domain
    hz-obm.com
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 13:22 UTC

    Suggest a correction

  76. huakc.com HK · AS132839 · POWER LINE DATACENTER
    Same certificateSame certificate as aoqi35.com, listed by JPCERT/CCMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    huakc.com
    First seen
    2026-11-08 13:00 UTC
    Same certificate
    Same certificate as aoqi35.com: listed by JPCERT/CC; a Apple lookalike
    Listed: resolved to 23.235.143.85 on Spamhaus DROP
    28 of 100 domains on this certificate have their own listing evidence
    Certificate 74a1d979e276955b… · 100 domains on it · first seen 2026-11-08 13:00 UTC
    Certificate
    Issued by YE1
    Valid 2026-11-08 12:00 UTC to 2027-02-06 12:00 UTC
    Logged 2026-11-08 12:59 UTC in DigiCert Wyvern2027h1, entry 454,429,235
    SHA-256 74a1d979e276955b676dfb6b6fe56edfade17d09f086d0184e46b5fe3a7be770
    Public key SHA-256 87c2011e6ebd2391f6d5ab387c7116b6ecfdd6fcf14fd0b30d44bb01ff1196e2
    Addresses
    23.235.143.85 · Hong Kong · AS132839 POWERLINE-AS-AP - POWER LINE DATACENTER
    Domain
    huakc.com
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 13:22 UTC

    Suggest a correction

  77. guokelin.com HK · AS132839 · POWER LINE DATACENTER
    Same certificateSame certificate as aoqi35.com, listed by JPCERT/CCMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    guokelin.com
    First seen
    2026-11-08 13:00 UTC
    Same certificate
    Same certificate as aoqi35.com: listed by JPCERT/CC; a Apple lookalike
    Listed: resolved to 23.235.132.157 on Spamhaus DROP
    28 of 100 domains on this certificate have their own listing evidence
    Certificate 74a1d979e276955b… · 100 domains on it · first seen 2026-11-08 13:00 UTC
    Certificate
    Issued by YE1
    Valid 2026-11-08 12:00 UTC to 2027-02-06 12:00 UTC
    Logged 2026-11-08 12:59 UTC in DigiCert Wyvern2027h1, entry 454,429,235
    SHA-256 74a1d979e276955b676dfb6b6fe56edfade17d09f086d0184e46b5fe3a7be770
    Public key SHA-256 87c2011e6ebd2391f6d5ab387c7116b6ecfdd6fcf14fd0b30d44bb01ff1196e2
    Addresses
    23.235.132.157 · Hong Kong · AS132839 POWERLINE-AS-AP - POWER LINE DATACENTER
    Domain
    guokelin.com
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 13:22 UTC

    Suggest a correction

  78. gimtrobot.com HK · AS132839 · POWER LINE DATACENTER
    Same certificateSame certificate as aoqi35.com, listed by JPCERT/CCMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    gimtrobot.com
    First seen
    2026-11-08 13:00 UTC
    Same certificate
    Same certificate as aoqi35.com: listed by JPCERT/CC; a Apple lookalike
    Listed: resolved to 23.235.143.92 on Spamhaus DROP
    28 of 100 domains on this certificate have their own listing evidence
    Certificate 74a1d979e276955b… · 100 domains on it · first seen 2026-11-08 13:00 UTC
    Certificate
    Issued by YE1
    Valid 2026-11-08 12:00 UTC to 2027-02-06 12:00 UTC
    Logged 2026-11-08 12:59 UTC in DigiCert Wyvern2027h1, entry 454,429,235
    SHA-256 74a1d979e276955b676dfb6b6fe56edfade17d09f086d0184e46b5fe3a7be770
    Public key SHA-256 87c2011e6ebd2391f6d5ab387c7116b6ecfdd6fcf14fd0b30d44bb01ff1196e2
    Addresses
    23.235.143.92 · Hong Kong · AS132839 POWERLINE-AS-AP - POWER LINE DATACENTER
    Domain
    gimtrobot.com
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 13:22 UTC

    Suggest a correction

  79. aerodrome-eligibility.xyz US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    aerodrome-eligibility.xyz
    First seen
    2026-11-08 13:00 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 11:58 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-08 11:59 UTC to 2027-02-06 11:59 UTC
    Logged 2026-11-08 12:57 UTC in Google PlumbersArms2027h1, entry 678,301,694
    SHA-256 0ca3dcb5f5dde568eba518e8aa6e95a28fc24fc0621d004a05680c8ec373c6c8
    Public key SHA-256 41714a38d0897b7dce7d0fe3c8cac125f2f6305570490e37ee4308bb0e163b82
    Addresses
    104.21.87.59 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.141.250 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.87.59, 172.67.141.250): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    aerodrome-eligibility.xyz
    Registered
    2026-05-15 · PDR Ltd. d/b/a PublicDomainRegistry.com
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 13:23 UTC

    Suggest a correction

  80. aoqi35.com HK · AS132839 · POWER LINE DATACENTERApple
    ListedListed by JPCERT/CC as imitating Apple AccountMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    aoqi35.com
    First seen
    2026-11-08 13:00 UTC
    Listing
    JPCERT/CC confirmed it 2026-08-05 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 02:12 UTC
    Listed
    JPCERT/CC
    1. Confirmed by JPCERT/CC
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-08 12:00 UTC to 2027-02-06 12:00 UTC
    Logged 2026-11-08 12:59 UTC in DigiCert Wyvern2027h1, entry 454,429,235
    SHA-256 74a1d979e276955b676dfb6b6fe56edfade17d09f086d0184e46b5fe3a7be770
    Public key SHA-256 87c2011e6ebd2391f6d5ab387c7116b6ecfdd6fcf14fd0b30d44bb01ff1196e2
    Brand
    Apple
    Addresses
    160.124.113.251 · Hong Kong · AS132839 POWERLINE-AS-AP - POWER LINE DATACENTER
    Domain
    aoqi35.com
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 13:01 UTC

    Suggest a correction

  81. bybt.shop US · AS16509 · Amazon.com, Inc.4 addresses
    ListedAmazon Web ServicesListed by NPA 165 (e-commerce)MX absentSPF missingDMARC missingRegistered 7 mo ago
    DetailsHide
    Hostname
    bybt.shop
    First seen
    2026-11-08 13:00 UTC
    Listing
    NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 01:35 UTC
    Listed
    NPA 165
    1. Observed in the NPA 165 feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by Amazon RSA 2048 S20 · precertificate
    Valid 2026-11-08 11:56 UTC to 2027-05-25 12:56 UTC
    Logged 2026-11-08 12:56 UTC in DigiCert Wyvern2027h1, entry 454,396,585
    SHA-256 8e23cae9e837de840dff361dbed66b83463144be88fdef1adcf2d04359ec8e89
    Public key SHA-256 7dc3767846bf7813311ba9a691823056a8baddda51f73ffc988fd342ae443db3
    Addresses
    18.238.243.67 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
    18.238.243.77 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
    18.238.243.91 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
    18.238.243.97 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
    Amazon Web Services
    Amazon Web Services (18.238.243.67, 18.238.243.77, 18.238.243.91, 18.238.243.97): a cloud provider. It rents servers and addresses to its customers.
    Domain
    bybt.shop
    Registered
    2026-04-06 · Alibaba Cloud Computing Ltd.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 13:01 UTC

    Suggest a correction

  82. gguqdx.asia US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by NPA 165 (information services)MX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    gguqdx.asia
    First seen
    2026-11-08 13:00 UTC
    Listing
    NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 01:35 UTC
    Listed
    NPA 165
    1. Observed in the NPA 165 feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-08 11:58 UTC to 2027-02-06 12:57 UTC
    Logged 2026-11-08 12:58 UTC in IPng Networks Halloumi2027h1, entry 411,745,609
    SHA-256 ea7df52530d7335b07ab67224b1fed9cf47ddeb4bb663406385d9d2643c3f65a
    Public key SHA-256 dbb3044a351f57f8395934c5443468eb644b110eee751e7c2e7d594b65071b0c
    Addresses
    104.21.19.195 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.188.149 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.19.195, 172.67.188.149): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    gguqdx.asia
    Registered
    2026-07-13 · Alibaba Cloud Computing Ltd. d/b/a HiChina (www.net.cn)
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 13:23 UTC

    Suggest a correction

  83. investque.digital US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX presentSPF ~allDMARC missingRegistered 8 mo ago
    DetailsHide
    Hostname
    investque.digital
    First seen
    2026-11-08 13:00 UTC
    Listing
    CERT Polska listed it 2026-09-10 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 12:32 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-11-08 11:58 UTC to 2027-02-06 11:58 UTC
    Logged 2026-11-08 12:56 UTC in Let's Encrypt Sycamore2027h1, entry 1,048,644,408
    SHA-256 90ac20976b6ea9715b3d4a596a7162dfebec92c2788ab7ecb7dcd5ed2b13be9b
    Public key SHA-256 201b61af187c288536ef102f89e77f70aed659a0990f52d71fb2f55d992238bf
    Addresses
    104.21.80.132 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.182.106 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.80.132, 172.67.182.106): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    investque.digital
    Registered
    2026-03-17 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Receives mail at mail.investque.digital
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 13:23 UTC

    Suggest a correction

  84. khawalid-for-maids.com DE · AS24940 · HETZNER-AS Hetzner Online G…
    ReportedHetznerReported by PhishDestroyMX presentSPF ~allDMARC policy none
    DetailsHide
    Hostname
    khawalid-for-maids.com
    First seen
    2026-11-08 13:00 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-08 11:57 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR1
    Valid 2026-11-08 12:01 UTC to 2027-02-06 12:01 UTC
    Logged 2026-11-08 12:59 UTC in Google ParcelYard2027h1, entry 678,021,071
    SHA-256 1132c6efbe320c228f72123c676447853ae2d0baa6ffc2255722e012f40d0001
    Public key SHA-256 0ab052137227be9ccdb3c3f0cb98f70347d335ed416173987fb195c1eab11eae
    PhishDestroy
    Addresses
    65.21.196.230 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
    Hetzner
    Hetzner (65.21.196.230): a cloud provider. It rents servers and addresses to its customers.
    Domain
    khawalid-for-maids.com
    MX
    Receives mail at khawalid-for-maids.com
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    DMARC policy p=none: reports only
    Checked
    2026-11-08 13:01 UTC

    Suggest a correction

  85. lecture.biology.vocabulary.computer.science.mauicreativos.com FR · AS16276 · OVH OVH SAS
    ListedOVHUnder mauicreativos.com, listed by USOMMX presentSPF missingDMARC missingRegistered 5 mo ago
    DetailsHide
    Hostname
    lecture.biology.vocabulary.computer.science.mauicreativos.com
    First seen
    2026-11-08 13:00 UTC
    Listing
    USOM listed it 2026-08-05 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 13:05 UTC
    Listed
    USOM, listing mauicreativos.com and the names under it
    1. Listed by USOM
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-11-08 11:58 UTC to 2027-02-06 11:58 UTC
    Logged 2026-11-08 12:57 UTC in IPng Networks Halloumi2027h1, entry 411,735,634
    SHA-256 4ce949359d18e5d878d4084fd458e965b9c6fe724433ec8c63db94dfcf1228a2
    Public key SHA-256 78f391adfd6cf6435bf7a2907030bb180d6c1ad3b120b4abc69978d66a692a04
    Addresses
    15.204.174.218 · France · AS16276 OVH OVH SAS · OVH (cloud provider)
    OVH
    OVH (15.204.174.218): a cloud provider. It rents servers and addresses to its customers.
    Domain
    mauicreativos.com
    Registered
    2026-06-19 · HOSTINGER operations, UAB
    MX
    Receives mail at mail.mauicreativos.com
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 04:39 UTC

    Suggest a correction

  86. nightmare-stresser.com US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    nightmare-stresser.com
    First seen
    2026-11-08 13:00 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-08 11:57 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-08 11:58 UTC to 2027-02-06 12:57 UTC
    Logged 2026-11-08 12:58 UTC in Google ParcelYard2027h1, entry 678,005,990
    SHA-256 119ab4c693f30c1da8f001ca362fbc7a07a480c1109001c2b723906d4a6222fb
    Public key SHA-256 fc6945f11c6fe4674fb1d3b800e106883164d7dab883c49f24a12717c5c6d18b
    PhishDestroy
    Addresses
    104.21.28.39 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.144.16 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.28.39, 172.67.144.16): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    nightmare-stresser.com
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 13:01 UTC

    Suggest a correction

  87. shibax.vip AU · AS133618 · Trellian Pty. Limited
    ReportedParking page · Above.comReported by PhishDestroyMX presentSPF -allDMARC missing
    DetailsHide
    Hostname
    shibax.vip
    First seen
    2026-11-08 13:00 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-08 11:57 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-11-08 11:58 UTC to 2027-02-06 11:58 UTC
    Logged 2026-11-08 12:56 UTC in Let's Encrypt Sycamore2027h1, entry 1,048,646,520
    SHA-256 0ec3abdfdee9a3a6b6624ad8d8c890c03fce1fdbbf0d7f53c0d9f24180187826
    Public key SHA-256 f871169aa5a01b8531d0fe7d14015e5a4f0da72feeb13fa0cdd62521744a0e6b
    PhishDestroy
    Addresses
    103.224.212.210 · Australia · AS133618 TRELLIAN-AS-AP - Trellian Pty. Limited · Trellian / Above.com (parking page)
    Parking page · Above.com
    The registry delegates shibax.vip to Above.com’s nameservers, which answer for it. Above.com: a parking service. It answers for names that are typically for sale or unused. Trellian / Above.com (103.224.212.210): a parking service. It answers for names that are typically for sale or unused.
    Domain
    shibax.vip
    MX
    Receives mail at park-mx.above.com
    SPF
    SPF record with -all: other senders fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 13:01 UTC

    Suggest a correction

  88. solanaversusethereum.com US · AS16509 · Amazon.com, Inc.
    ReportedAmazon Web ServicesReported by PhishDestroyMX presentSPF ?allDMARC quarantineRegistered 14 mo ago
    DetailsHide
    Hostname
    solanaversusethereum.com
    First seen
    2026-11-08 13:00 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-08 11:57 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR1 · precertificate
    Valid 2026-11-08 11:57 UTC to 2027-02-06 11:57 UTC
    Logged 2026-11-08 12:56 UTC in DigiCert Sphinx2027h1, entry 402,080,375
    SHA-256 02c4ffcdd83222984c1b993b2c605538e25706adf44c66983d7c83800cd33a22
    Public key SHA-256 cfebd5584477ce69c419ec97ef3795517790059e234e690feadcc7f6ccf42acf
    PhishDestroy
    Addresses
    216.198.79.1 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
    Amazon Web Services
    Amazon Web Services (216.198.79.1): a cloud provider. It rents servers and addresses to its customers.
    Domain
    solanaversusethereum.com
    Registered
    2025-08-31 · GoDaddy.com, LLC
    MX
    Receives mail at smtp.secureserver.net, mailstore1.secureserver.net
    SPF
    SPF record with ?all: other senders are neutral
    DMARC
    DMARC policy p=quarantine
    Checked
    2026-11-07 20:14 UTC

    Suggest a correction

  89. toko.dynnhost.com US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareUnder dynnhost.com, reported by PhishDestroyMX absentSPF missingDMARC missingRegistered 12 mo ago
    DetailsHide
    Hostname
    toko.dynnhost.com
    First seen
    2026-11-08 13:00 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-08 11:57 UTC
    Reported
    PhishDestroy, listing dynnhost.com and the names under it
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR1 · precertificate
    Valid 2026-11-08 12:00 UTC to 2027-02-06 12:00 UTC
    Logged 2026-11-08 12:59 UTC in Geomys Tuscolo2027h1, entry 528,338,781
    SHA-256 70a64712aba81fb2aaa7814ad8915e6f6d840885f501edb1b8bb7ef4baaee721
    Public key SHA-256 2f415cf069298381430849a5f7bac07c95dee39fd9c2a7875fc22634a5fac7d3
    PhishDestroy
    Addresses
    104.21.10.161 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.131.173 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.10.161, 172.67.131.173): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    dynnhost.com
    Registered
    2025-11-02 · IONOS SE
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-07 14:46 UTC

    Suggest a correction

  90. toptaishopping.shop
    ListedListed by NPA 165 (information services)MX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    toptaishopping.shop
    First seen
    2026-11-08 13:00 UTC
    Listing
    NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 01:35 UTC
    Listed
    NPA 165
    1. Observed in the NPA 165 feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-08 11:59 UTC to 2027-02-06 12:58 UTC
    Logged 2026-11-08 12:59 UTC in Google PlumbersArms2027h1, entry 678,324,991
    SHA-256 fbf5206d47a81bcd4af1a5e7b5d7c2587953aed7e29b7abe14b2b1ebb7963dc7
    Public key SHA-256 91622d03c4c49e4cf92df51ed554c22cb2afc4db265348a0d6460c173014c67f
    Domain
    toptaishopping.shop
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 13:01 UTC

    Suggest a correction

  91. www.swiftcasino-ca.com US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareUnder swiftcasino-ca.com, reported by PhishDestroyMX absentSPF missingDMARC missingRegistered 11 mo ago
    DetailsHide
    Hostname
    www.swiftcasino-ca.com
    First seen
    2026-11-08 13:00 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-08 11:57 UTC
    Reported
    PhishDestroy, listing swiftcasino-ca.com and the names under it
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-11-08 11:58 UTC to 2027-02-06 11:58 UTC
    Logged 2026-11-08 12:57 UTC in Let's Encrypt Sycamore2027h1, entry 1,048,653,791
    SHA-256 39d1ff1739707c4c8c2ffe831af93905e03f95d35c43e8f0d9404a9bdf87c3e2
    Public key SHA-256 b769e29320fa0921b1c4266e82894461eeb9628b322f5e1d00091a8a71e25bf2
    PhishDestroy
    Addresses
    104.21.6.131 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.154.220 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.6.131, 172.67.154.220): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    swiftcasino-ca.com
    Registered
    2025-12-09 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 11:06 UTC

    Suggest a correction

  92. creatorsettle.com US · AS16509 · Amazon.com, Inc.
    ReportedAmazon Web ServicesReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 59 d ago
    DetailsHide
    Hostname
    creatorsettle.com
    First seen
    2026-11-08 12:56 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-08 11:57 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-11-08 11:53 UTC to 2027-02-06 11:53 UTC
    Logged 2026-11-08 12:52 UTC in IPng Networks Halloumi2027h1, entry 411,682,908
    SHA-256 4a0b733c12c12cf152f676ecd065046dc78902999a9478d441a91cc0d488059d
    Public key SHA-256 609dac1bc521856e7aa79f429b3f1b18c49bfe5cbec125e1ddbccc4db3b025f6
    PhishDestroy
    Addresses
    76.76.21.21 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
    Amazon Web Services
    Amazon Web Services (76.76.21.21): a cloud provider. It rents servers and addresses to its customers.
    Domain
    creatorsettle.com
    Registered
    2026-09-10 · Cloudflare, Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 13:01 UTC

    Suggest a correction

  93. dlzcc.xyz US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by NPA 165 (e-commerce)MX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    dlzcc.xyz
    First seen
    2026-11-08 12:56 UTC
    Listing
    NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 01:35 UTC
    Listed
    NPA 165
    1. Observed in the NPA 165 feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1
    Valid 2026-09-10 08:50 UTC to 2026-12-09 09:48 UTC
    Logged 2026-11-08 12:51 UTC in DigiCert Wyvern2026h2, entry 2,212,199,934
    SHA-256 3679af03daecc5a23c43408c21e92a5d61f417473f6bbe9bce9f458e22475399
    Public key SHA-256 31150438787493e12b134e9c776a16367449edf29f216daaed3aca0c162dff28
    Addresses
    104.21.70.174 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.138.9 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.70.174, 172.67.138.9): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    dlzcc.xyz
    Registered
    2026-07-13 · Alibaba Cloud Computing Ltd. d/b/a HiChina (www.net.cn)
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 13:23 UTC

    Suggest a correction

  94. flashbyt.com US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX presentSPF ~allDMARC reject
    DetailsHide
    Hostname
    flashbyt.com
    First seen
    2026-11-08 12:56 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-08 11:57 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-08 11:53 UTC to 2027-02-06 11:53 UTC
    Logged 2026-11-08 12:52 UTC in Geomys Tuscolo2027h1, entry 528,270,723
    SHA-256 9221eef6cd88c83571a8c087006e52cc41c903f7427d779bc0cfd1a934744392
    Public key SHA-256 66fe56d1b91a3ef2512f2e695d21054acb47cbff9300dfd546329bf31c6ad9fd
    PhishDestroy
    Addresses
    104.21.64.3 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.173.182 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.64.3, 172.67.173.182): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    flashbyt.com
    MX
    Receives mail at _dc-mx.c51d075525c6.flashbyt.com
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    DMARC policy p=reject
    Checked
    2026-11-08 13:01 UTC

    Suggest a correction

  95. focusel.space US · AS16509 · Amazon.com, Inc.
    ReportedAmazon Web ServicesReported by PhishDestroyMX presentSPF ~allDMARC policy noneRegistered 4 mo ago
    DetailsHide
    Hostname
    focusel.space
    First seen
    2026-11-08 12:56 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-08 11:57 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR1 · precertificate
    Valid 2026-11-08 11:53 UTC to 2027-02-06 11:53 UTC
    Logged 2026-11-08 12:52 UTC in DigiCert Wyvern2027h1, entry 454,343,870
    SHA-256 5c231359b3f58978ba3b1770a4ce8672d55504559d09aef21a8be4544c341fcd
    Public key SHA-256 6fe3262ef9e5b45769bf66c3987c8801279bb4bbbee943ee44ff008a4a431627
    PhishDestroy
    Addresses
    216.198.79.1 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
    Amazon Web Services
    Amazon Web Services (216.198.79.1): a cloud provider. It rents servers and addresses to its customers.
    Domain
    focusel.space
    Registered
    2026-07-06 · HOSTINGER operations, UAB
    MX
    Receives mail at smtp.google.com
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    DMARC policy p=none: reports only
    Checked
    2026-11-08 09:15 UTC

    Suggest a correction

  96. fxbotai.net US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    fxbotai.net
    First seen
    2026-11-08 12:56 UTC
    Listing
    CERT Polska listed it 2026-09-16 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 12:32 UTC
    PhishDestroy: first observed in the feed 2026-10-28 · still listed at the last successful feed check 2026-11-08 11:57 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-08 11:53 UTC to 2027-02-06 11:53 UTC
    Logged 2026-11-08 12:52 UTC in Google ParcelYard2027h1, entry 677,916,777
    SHA-256 953f4a970ff8077b491224e6ba88d46d5c5a7c20480cd65ffb602305a1cdbc1a
    Public key SHA-256 b1ffc007d9fdc692c9dfa0434041d38fa4ae43bae29dd7b881dbcad0c10b1035
    Addresses
    104.21.13.81 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.198.211 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.13.81, 172.67.198.211): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    fxbotai.net
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 13:01 UTC

    Suggest a correction

  97. ledger.com.co US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    ledger.com.co
    First seen
    2026-11-08 12:56 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 11:58 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-08 11:52 UTC to 2027-02-06 12:51 UTC
    Logged 2026-11-08 12:52 UTC in Geomys Tuscolo2027h1, entry 528,270,731
    SHA-256 2f28eae6853e3d7513625fa531f6edf86011234fccf1f17cac757b05d8da3e99
    Public key SHA-256 7c1aef393d2f8ba72299c16c963c601f2d89af567a86fe1bd98586c9434dbef4
    Addresses
    104.21.88.93 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.174.180 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.88.93, 172.67.174.180): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    ledger.com.co
    Registered
    2026-07-13 · Cloudflare, Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 13:01 UTC

    Suggest a correction

  98. rainbet-it1.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    rainbet-it1.com
    First seen
    2026-11-08 12:56 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 11:58 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1
    Valid 2026-09-11 12:12 UTC to 2026-12-10 13:12 UTC
    Logged 2026-11-08 12:53 UTC in DigiCert Wyvern2026h2, entry 2,212,204,297
    SHA-256 2cc722410aeaa89032b83d5c2a59940ff8b85fa1f08afb53d51afe1dfcb68edc
    Public key SHA-256 be60201db875df2cf9d6e7d11981e1b92d93b144d663c17e136d92633457c8b6
    Addresses
    104.21.78.100 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.220.53 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.78.100, 172.67.220.53): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    rainbet-it1.com
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 13:01 UTC

    Suggest a correction

  99. treasury-deltaliquidity.xyz US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 59 d ago
    DetailsHide
    Hostname
    treasury-deltaliquidity.xyz
    First seen
    2026-11-08 12:56 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 11:58 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-08 11:53 UTC to 2027-02-06 11:53 UTC
    Logged 2026-11-08 12:52 UTC in Google ParcelYard2027h1, entry 677,917,338
    SHA-256 13d6ca2c9ef4d108dd971f145334577176f6f09b16479b1e32ce84c49099151c
    Public key SHA-256 b032bb88b06fb902a5c70ceeb7bd047dd61c223702e7d10e56eda1ef312dbaa9
    Addresses
    104.21.17.237 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.178.219 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.17.237, 172.67.178.219): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    treasury-deltaliquidity.xyz
    Registered
    2026-09-10 · Spaceship, Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 13:23 UTC

    Suggest a correction

  100. www.wp.catnextgen.com AU · AS154653 · ParkLogic Pty Ltd
    ListedParking page · ParkLogicUnder catnextgen.com, listed by MetaMaskMX presentSPF -allDMARC missingRegistered 17 y ago
    DetailsHide
    Hostname
    www.wp.catnextgen.com
    First seen
    2026-11-08 12:56 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 11:58 UTC
    Listed
    MetaMask, listing catnextgen.com and the names under it
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-11-08 11:56 UTC to 2027-02-06 11:56 UTC
    Logged 2026-11-08 12:55 UTC in Let's Encrypt Sycamore2027h1, entry 1,048,598,620
    SHA-256 971fc7426711d396de028274f68e7b1a538ab2b83fc794cbdbb8d503622e1a55
    Public key SHA-256 9c0d3cae4928bd8bad20b19f0040371e902bb6f7825ecdd301bfef5b7e864f57
    Addresses
    162.4.84.215 · Australia · AS154653 PARKLOGICPTYLTD-AS-AP - ParkLogic Pty Ltd · ParkLogic (parking page)
    Parking page · ParkLogic
    The registry delegates catnextgen.com to ParkLogic’s nameservers, which answer for it. ParkLogic (162.4.84.215): a parking service. It answers for names that are typically for sale or unused.
    Domain
    catnextgen.com
    Registered
    2010-04-20 · Dynadot Inc
    MX
    Receives mail at mx156.hostedmxserver.com
    SPF
    SPF record with -all: other senders fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 08:37 UTC

    Suggest a correction

Showing 1–100 of 5,621 hostnames.
How these findings are made

Brand spoofs: findings that impersonate one of the 1,000 most-impersonated brands. The list opens on them; All shows every finding.

Reported: a hostname in a new certificate that PhishTank or PhishDestroy reports, or that CERT Polska, MetaMask, USOM, MODA, NPA 165, JPCERT/CC, the AMF, the FSMA or BaFin lists. When a listing source names the brand imitated or a category, the finding shows it. Phishing host: a brand lookalike that resolves to an address which hosted confirmed phishing in the last 48 hours. Spamhaus DROP: a brand lookalike that resolves to an address on the Spamhaus DROP list. Same certificate: another name on a finding's certificate that resolves to an address on Spamhaus DROP. Suspicious: other names on a finding's certificate, rated high for a hosting-alias name or a lookalike on a phishing host, medium for a lookalike; they join the findings once they have listing evidence of their own. Also under Suspicious: registered domains using a brand’s name that PhishDestroy’s community list includes, rated high when they resolve to an address with no parking or holding signal, medium otherwise.

Brand labels cover the 1,000 most-impersonated brands. A name gets a brand when the brand's token starts a label or follows a hyphen, with a lure word such as "login" or "verify" for common words. Hostnames appear as plain text. How it works · Sources