Live

Live phishing findings

New certificates and domain registrations, with every hostname resolved and checked against phishing reports and bad-address lists. The newest findings, updated hourly.

Updated hourly · 2026-11-08 14:26 UTC
Certificate-log entries · 24 h
329.0M
from 84 distinct feeds
Unique certificates · 24 h
32.0M
each reviewed
Names resolved · 24 h
20.9M
15.8M with an address
Findings · 24 h
5,614
203 of 1,061 brands targeted

2,322 hostnames from the last 24 hours.

The findings have updated. The list starts again from the top.

  1. app.cloudcapitalinvest.com US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX presentSPF ~allDMARC policy noneRegistered 11 mo ago
    DetailsHide
    Hostname
    app.cloudcapitalinvest.com
    First seen
    2026-11-08 14:26 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-08 11:57 UTC
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-08 11:57 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR2 · precertificate
    Valid 2026-11-08 13:26 UTC to 2027-02-06 13:26 UTC
    Logged 2026-11-08 14:25 UTC in Let's Encrypt Willow2027h1, entry 1,006,547,865
    SHA-256 3f723fbb7779e935917d6bd5a18af101043b0479b6ee5c20d88d75a6dd9396ac
    Public key SHA-256 786f056bc7a749989bd0a77ac39aa87805eaa5028ae1f7c59d2480f7169b3180
    PhishDestroy
    Addresses
    104.21.37.235 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.215.52 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.37.235, 172.67.215.52): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    cloudcapitalinvest.com
    Registered
    2025-12-01 · Dynadot Inc
    MX
    Receives mail at _dc-mx.809a85153092.cloudcapitalinvest.com
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    DMARC policy p=none: reports only
    Checked
    2026-11-08 14:31 UTC

    Suggest a correction

  2. betgrw-casino-com.pages.dev US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMask
    DetailsHide
    Hostname
    betgrw-casino-com.pages.dev
    First seen
    2026-11-08 14:26 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 11:58 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-08 13:23 UTC to 2027-02-06 13:23 UTC
    Logged 2026-11-08 14:22 UTC in Google PlumbersArms2027h1, entry 679,481,966
    SHA-256 6d3bd4d03ef2d7c81996941681565826ad259f502565561a6718dc58b04ef067
    Public key SHA-256 4565f95807c8e9e812545a4e5ec02efb4d7d087cb515bcd50ed25c1808575a35
    Addresses
    172.66.44.140 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.66.47.116 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (172.66.44.140, 172.66.47.116): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.

    Suggest a correction

  3. taotaoqqq001.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by NPA 165 (information services)MX absentSPF missingDMARC missingRegistered 12 mo ago
    DetailsHide
    Hostname
    taotaoqqq001.com
    First seen
    2026-11-08 14:26 UTC
    Listing
    NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 13:35 UTC
    Listed
    NPA 165
    1. Observed in the NPA 165 feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-08 13:24 UTC to 2027-02-06 14:22 UTC
    Logged 2026-11-08 14:24 UTC in Geomys Tuscolo2027h1, entry 529,263,852
    SHA-256 7267a631bdea4d7fb40fe320131ff8204bac33ef0ad4918dfa323a4793c7c954
    Public key SHA-256 cda945f2d89512f14644db4ffd25ee78012d29917dcf6833fcff151d153f12ab
    Addresses
    104.21.30.53 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.150.154 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.30.53, 172.67.150.154): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    taotaoqqq001.com
    Registered
    2025-11-19 · NameSilo, LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 14:31 UTC

    Suggest a correction

  4. www.bet-grw.win US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareUnder bet-grw.win, listed by MetaMaskMX absentSPF missingDMARC missingRegistered 14 mo ago
    DetailsHide
    Hostname
    www.bet-grw.win
    First seen
    2026-11-08 14:26 UTC
    Listing
    MetaMask: first observed in the feed 2026-11-03 · still listed at the last successful feed check 2026-11-08 11:58 UTC
    Listed
    MetaMask, listing bet-grw.win and the names under it
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-08 13:23 UTC to 2027-02-06 13:23 UTC
    Logged 2026-11-08 14:22 UTC in Google PlumbersArms2027h1, entry 679,487,468
    SHA-256 2c87d81504a6603e44be455463b9efbcd3241292ad059c7bba747cca4efe371a
    Public key SHA-256 ef9b6cbf1c2f6c9ba90e0f05caa2f87bad7b4e8a723acb6adf6410a913d6418d
    Addresses
    104.21.3.241 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.131.89 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.3.241, 172.67.131.89): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    bet-grw.win
    Registered
    2025-09-16 · Hosting Concepts B.V. d/b/a Registrar.eu
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-07 16:47 UTC

    Suggest a correction

  5. assissurvi.live US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    assissurvi.live
    First seen
    2026-11-08 14:21 UTC
    Listing
    CERT Polska listed it 2026-08-17 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 12:32 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-08 13:20 UTC to 2027-02-06 14:18 UTC
    Logged 2026-11-08 14:20 UTC in Geomys Tuscolo2027h1, entry 529,216,902
    SHA-256 86cb488d138e43f96caf30967cb9baa42e6a32f6b8505088558d000b2259de26
    Public key SHA-256 72ee4bc5bc80594487b5a1f026e9fa47153d5b00afafdf63f1b25f2b4b6c06cf
    Addresses
    104.21.58.250 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.166.131 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.58.250, 172.67.166.131): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    assissurvi.live
    Registered
    2026-07-13 · NameCheap, Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 14:31 UTC

    Suggest a correction

  6. casinos-dragonia.com US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 8 mo ago
    DetailsHide
    Hostname
    casinos-dragonia.com
    First seen
    2026-11-08 14:21 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-08 11:57 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-11-08 13:17 UTC to 2027-02-06 13:17 UTC
    Logged 2026-11-08 14:15 UTC in DigiCert Sphinx2027h1, entry 402,798,872
    SHA-256 1245679cd94168c5fe0dbaf6212cef72b01dfbd4d7d62550e692aaa7aafd6208
    Public key SHA-256 437a106306d2156cca552cca2421c50fb5bb989972f000999a5f511c0ae212d0
    PhishDestroy
    Addresses
    104.21.25.141 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.134.75 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.25.141, 172.67.134.75): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    casinos-dragonia.com
    Registered
    2026-03-17 · Atak Domain Bilgi Teknolojileri A.S.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 14:25 UTC

    Suggest a correction

  7. connectionintergration-outline.network US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 59 d ago
    DetailsHide
    Hostname
    connectionintergration-outline.network
    First seen
    2026-11-08 14:21 UTC
    Listing
    CERT Polska listed it 2026-09-14 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 12:32 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-08 13:18 UTC to 2027-02-06 14:16 UTC
    Logged 2026-11-08 14:18 UTC in DigiCert Wyvern2027h1, entry 455,200,907
    SHA-256 098066891c9751f600711d9d481e08e00edfbc4ba241b12164766a584db7b5ea
    Public key SHA-256 6db5c5157dc71395418a37c8c4bf8081d8e264017985bed3270c91810f85a114
    Addresses
    104.21.58.98 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.203.41 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.58.98, 172.67.203.41): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    connectionintergration-outline.network
    Registered
    2026-09-10 · Sav.com, LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 14:31 UTC

    Suggest a correction

  8. idrdfab.shop US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by NPA 165 (finance and insurance)MX absentSPF missingDMARC missingRegistered 59 d ago
    DetailsHide
    Hostname
    idrdfab.shop
    First seen
    2026-11-08 14:21 UTC
    Listing
    NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 13:35 UTC
    Listed
    NPA 165
    1. Observed in the NPA 165 feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-11-08 13:17 UTC to 2027-02-06 13:17 UTC
    Logged 2026-11-08 14:15 UTC in DigiCert Wyvern2027h1, entry 455,178,099
    SHA-256 9e61e3cb5392f49c421c54a46812c311165c624dff88ff3488f87934b5d9f2e2
    Public key SHA-256 f0b2a3d89b18799ef30220bfedeb5401170a2420ef2b0ec02ce66a97e69f8698
    Addresses
    104.21.37.6 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.202.40 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.37.6, 172.67.202.40): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    idrdfab.shop
    Registered
    2026-09-10 · NameSilo
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 14:31 UTC

    Suggest a correction

  9. inkshop.site US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    inkshop.site
    First seen
    2026-11-08 14:21 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-08 11:57 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-08 13:15 UTC to 2027-02-06 14:14 UTC
    Logged 2026-11-08 14:15 UTC in IPng Networks Halloumi2027h1, entry 412,522,961
    SHA-256 02230de99dcae2fb0eea1418a61cafcd0d972a6f67e0cf46ddc0999abda3ae76
    Public key SHA-256 4968a0a3434093ce5a894cf05a71734819f5346b72aa732eb642961d66bb1c49
    PhishDestroy
    Addresses
    104.21.5.127 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.133.117 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.5.127, 172.67.133.117): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    inkshop.site
    Registered
    2026-07-13 · GoDaddy.com, LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 14:31 UTC

    Suggest a correction

  10. proaiplatgp.pro US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    proaiplatgp.pro
    First seen
    2026-11-08 14:21 UTC
    Listing
    CERT Polska listed it 2026-07-13 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 12:32 UTC
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-08 11:57 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-08 13:15 UTC to 2027-02-06 14:13 UTC
    Logged 2026-11-08 14:15 UTC in Geomys Tuscolo2027h1, entry 529,175,793
    SHA-256 5f09cd17309c2928bcc5c59c1b1f3a44ec284500e6cc78bf8832bf5120daf005
    Public key SHA-256 991ac7826c61621f6847fe93e38c8bf09bc81fd498cbffbfa29081c284b3a5f9
    Addresses
    104.21.63.79 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.144.54 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.63.79, 172.67.144.54): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    proaiplatgp.pro
    Registered
    2026-07-13 · Name.com, Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 14:25 UTC

    Suggest a correction

  11. pumpsniper.llc US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 2 mo ago
    DetailsHide
    Hostname
    pumpsniper.llc
    First seen
    2026-11-08 14:21 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 11:58 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-08 13:17 UTC to 2027-02-06 14:16 UTC
    Logged 2026-11-08 14:17 UTC in DigiCert Wyvern2027h1, entry 455,199,877
    SHA-256 e9905c759ee77eb77b905e5eb950a25150592f1c5f44baab22243c3fb1550e6e
    Public key SHA-256 907300d93f15fcf73fc903ba96343b6b17808d9b2791ee6a5a9fab6093e6af39
    Addresses
    104.21.93.157 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.211.185 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.93.157, 172.67.211.185): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    pumpsniper.llc
    Registered
    2026-09-08 · Porkbun LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 14:31 UTC

    Suggest a correction

  12. radiantskinguide.com US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX presentSPF ~allDMARC missingRegistered 2 y ago
    DetailsHide
    Hostname
    radiantskinguide.com
    First seen
    2026-11-08 14:21 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-08 11:57 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-08 13:17 UTC to 2027-02-06 14:15 UTC
    Logged 2026-11-08 14:17 UTC in DigiCert Wyvern2027h1, entry 455,199,715
    SHA-256 17396791d9018a856a95db10484134ec8480fc86cdc37b881185ebb7ead52c75
    Public key SHA-256 e968333d1bab405621373aa0a17b33c1848a112e315f3deba45893d2daa9e559
    PhishDestroy
    Addresses
    104.21.69.29 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.203.49 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.69.29, 172.67.203.49): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    radiantskinguide.com
    Registered
    2024-09-24 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Receives mail at route3.mx.cloudflare.net, route2.mx.cloudflare.net, route1.mx.cloudflare.net
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 14:25 UTC

    Suggest a correction

  13. spikeflarex-nx.pro US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX presentSPF ~allDMARC missingRegistered 8 mo ago
    DetailsHide
    Hostname
    spikeflarex-nx.pro
    First seen
    2026-11-08 14:21 UTC
    Listing
    CERT Polska listed it 2026-07-21 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 12:32 UTC
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-08 11:57 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-11-08 13:18 UTC to 2027-02-06 13:18 UTC
    Logged 2026-11-08 14:16 UTC in DigiCert Wyvern2027h1, entry 455,188,853
    SHA-256 5f00541c7ce499c1fb5837272b780bc2e6c1d7776911383514ef269111ef69d6
    Public key SHA-256 b3b2a364ead2719e128a089f8b3ad5620926b0811754772906544206a5fbf24b
    Addresses
    104.21.2.22 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.128.153 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.2.22, 172.67.128.153): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    spikeflarex-nx.pro
    Registered
    2026-03-17 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Receives mail at mail.spikeflarex-nx.pro
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 14:31 UTC

    Suggest a correction

  14. wavesiron.sbs US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    wavesiron.sbs
    First seen
    2026-11-08 14:21 UTC
    Listing
    CERT Polska listed it 2026-05-20 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 12:32 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-11-08 13:20 UTC to 2027-02-06 13:20 UTC
    Logged 2026-11-08 14:19 UTC in IPng Networks Halloumi2027h1, entry 412,557,441
    SHA-256 8f77b374b26d26e298d9e2b1a968816d20d0d80cc85da3ea74687847310855c8
    Public key SHA-256 a85d8ffb167cb75a9db85a27beaee285d5ec719e2635c97c848536c57e7294e6
    Addresses
    104.21.80.217 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.187.70 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.80.217, 172.67.187.70): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    wavesiron.sbs
    Registered
    2026-05-15 · Dynadot Inc
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 14:31 UTC

    Suggest a correction

  15. aipolvne.com US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 21 mo ago
    DetailsHide
    Hostname
    aipolvne.com
    First seen
    2026-11-08 14:16 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-08 11:57 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR2
    Valid 2026-11-08 13:13 UTC to 2027-02-06 13:13 UTC
    Logged 2026-11-08 14:11 UTC in Google ParcelYard2027h1, entry 679,027,003
    SHA-256 02f42dfefd058f6c61f34f6c8098eaf0d7563d265871eafd34dc277138dbbd53
    Public key SHA-256 60d4a649f426c336d5a315d2c87e8bdf598f98d6b6a14995a2074d9aca2f4f76
    PhishDestroy
    Addresses
    104.21.81.130 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.160.232 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.81.130, 172.67.160.232): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    aipolvne.com
    Registered
    2025-02-08 · Gname.com Pte. Ltd.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 14:20 UTC

    Suggest a correction

  16. coinp-il.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX presentSPF ~allDMARC policy noneRegistered 4 mo ago
    DetailsHide
    Hostname
    coinp-il.com
    First seen
    2026-11-08 14:16 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 11:58 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-08 13:13 UTC to 2027-02-06 14:12 UTC
    Logged 2026-11-08 14:14 UTC in Google PlumbersArms2027h1, entry 679,372,325
    SHA-256 4037dbfbf5b05432971b4b6daf4fe8a4a2bb1caadddf0d80b5abc4b1316f235e
    Public key SHA-256 8efbc20a96609f00250a5a491ea2f41405eb665469f5aaa2b9c523140f310859
    Addresses
    104.21.74.163 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.204.67 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.74.163, 172.67.204.67): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    coinp-il.com
    Registered
    2026-07-13 · Realtime Register B.V.
    MX
    Receives mail at mx1.hostinger.com, mx2.hostinger.com
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    DMARC policy p=none: reports only
    Checked
    2026-11-08 14:31 UTC

    Suggest a correction

  17. gitbook.real.finance US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareUnder real.finance, reported by PhishDestroyMX presentSPF ~allDMARC policy noneRegistered 11 y ago
    DetailsHide
    Hostname
    gitbook.real.finance
    First seen
    2026-11-08 14:16 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-08 11:57 UTC
    Reported
    PhishDestroy, listing real.finance and the names under it
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-08 13:15 UTC to 2027-02-06 13:15 UTC
    Logged 2026-11-08 14:14 UTC in Google PlumbersArms2027h1, entry 679,372,285
    SHA-256 44c427ecf575d5a4c138cc4a792696b92045340b61d3c9163172a71109f1cf15
    Public key SHA-256 34094041e610023ed9e17b9d7a685782f973ad56259a8c09970b631a7d91b50c
    PhishDestroy
    Addresses
    104.21.85.226 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.211.222 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.85.226, 172.67.211.222): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    real.finance
    Registered
    2015-08-26 · NameCheap, Inc.
    MX
    Receives mail at aspmx.l.google.com, alt1.aspmx.l.google.com, alt2.aspmx.l.google.com
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    DMARC policy p=none: reports only
    Checked
    2026-11-08 08:38 UTC

    Suggest a correction

  18. hookcode.cyou US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    hookcode.cyou
    First seen
    2026-11-08 14:16 UTC
    Listing
    CERT Polska listed it 2026-05-18 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 12:32 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-08 13:16 UTC to 2027-02-06 13:16 UTC
    Logged 2026-11-08 14:15 UTC in Google PlumbersArms2027h1, entry 679,392,526
    SHA-256 83e7a67d9347ded9c91462fcdc2e32fd277b1f7430f17a39f1381f7ff9691268
    Public key SHA-256 143e75665e693e914fe762dba1ab9bbed8242032d7b2657974add1e3b9bbd7b5
    Addresses
    104.21.0.122 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.150.242 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.0.122, 172.67.150.242): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    hookcode.cyou
    Registered
    2026-05-15 · Dynadot Inc
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 14:31 UTC

    Suggest a correction

  19. huzone.digital US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 59 d ago
    DetailsHide
    Hostname
    huzone.digital
    First seen
    2026-11-08 14:16 UTC
    Listing
    CERT Polska listed it 2026-10-28 · still listed at the last successful feed check 2026-11-08 12:32 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-08 13:13 UTC to 2027-02-06 13:13 UTC
    Logged 2026-11-08 14:11 UTC in TrustAsia Luoshu2027, entry 579,834,995
    SHA-256 90cd5ea0f2b2784527c86a850eb15ee53c8faae3bcf9140f5d69df8da4bb660e
    Public key SHA-256 67ae8c730b40d294ff046447612117f87a0a7131e121536ba5888ad174650bff
    Addresses
    104.21.74.53 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.155.66 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.74.53, 172.67.155.66): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    huzone.digital
    Registered
    2026-09-10 · Dynadot Inc
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 14:31 UTC

    Suggest a correction

  20. kgoj.casa US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    kgoj.casa
    First seen
    2026-11-08 14:16 UTC
    Listing
    CERT Polska listed it 2026-05-18 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 12:32 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-11-08 13:14 UTC to 2027-02-06 13:14 UTC
    Logged 2026-11-08 14:13 UTC in IPng Networks Halloumi2027h1, entry 412,494,874
    SHA-256 1bdc996833aed25d045191d767f172d169057d70cd096d8962c4fc8ffb10af4a
    Public key SHA-256 4c2cf36e71f43739d141e5a1216139250b37bf62899a8fc92cd2c4dac6314655
    Addresses
    104.21.95.83 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.143.215 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.95.83, 172.67.143.215): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    kgoj.casa
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 14:20 UTC

    Suggest a correction

  21. pharosnet.xyz US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 59 d ago
    DetailsHide
    Hostname
    pharosnet.xyz
    First seen
    2026-11-08 14:16 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 11:58 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-08 13:15 UTC to 2027-02-06 14:12 UTC
    Logged 2026-11-08 14:15 UTC in DigiCert Sphinx2027h1, entry 402,796,305
    SHA-256 49819d8ce5673898942442696f1b5095e89fcb29a577ab3e3c6bb42acc5429ee
    Public key SHA-256 740ecbf45c580a10d395a30e7ed58d77f9e01f4389948773d0c0a91d076b6513
    Addresses
    104.21.30.50 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.150.151 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.30.50, 172.67.150.151): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    pharosnet.xyz
    Registered
    2026-09-10 · Dynadot Inc
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 14:31 UTC

    Suggest a correction

  22. plumenetwork-join.xyz US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    plumenetwork-join.xyz
    First seen
    2026-11-08 14:16 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 11:58 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-08 13:13 UTC to 2027-02-06 14:13 UTC
    Logged 2026-11-08 14:13 UTC in DigiCert Sphinx2027h1, entry 402,776,795
    SHA-256 0c521ae838faf93e579e4d5e4759a61594e4f7500d2d9e1bf4842bf84a269f94
    Public key SHA-256 b55b963abce82d377a34a5a73fc4bbf63d37e4bedf25ca9928a48a21a4fcaeba
    Addresses
    104.21.15.151 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.206.86 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.15.151, 172.67.206.86): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    plumenetwork-join.xyz
    Registered
    2026-07-13 · PDR Ltd. d/b/a PublicDomainRegistry.com
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 14:31 UTC

    Suggest a correction

  23. solviontrustsoftware-com.financecryptoworld.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareUnder financecryptoworld.com, listed by CERT PolskaMX presentSPF ~allDMARC missingRegistered 22 mo ago
    DetailsHide
    Hostname
    solviontrustsoftware-com.financecryptoworld.com
    First seen
    2026-11-08 14:16 UTC
    Listing
    CERT Polska listed it 2026-06-12 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 12:32 UTC
    Listed
    CERT Polska, listing financecryptoworld.com and the names under it
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WR1 · precertificate
    Valid 2026-11-08 13:13 UTC to 2027-02-06 14:12 UTC
    Logged 2026-11-08 14:13 UTC in DigiCert Wyvern2027h1, entry 455,156,019
    SHA-256 6b8314a3fdfae168d5d531c4cbc84dc3eb782ebef25cdaac78c7fa1c4e4f0339
    Public key SHA-256 52ce638878132538f1dea6e28cbd3c9d8da10c3115c88815c0f761060ea3d89d
    Addresses
    104.21.10.130 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.131.121 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.10.130, 172.67.131.121): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    financecryptoworld.com
    Registered
    2025-01-30 · MainReg Inc.
    MX
    Receives mail at mail.financecryptoworld.com
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-07 17:16 UTC

    Suggest a correction

  24. syqesai.pro US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX presentSPF -allDMARC quarantineRegistered 4 mo ago
    DetailsHide
    Hostname
    syqesai.pro
    First seen
    2026-11-08 14:16 UTC
    Listing
    CERT Polska listed it 2026-07-16 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 12:32 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-08 13:11 UTC to 2027-02-06 14:09 UTC
    Logged 2026-11-08 14:11 UTC in Google ParcelYard2027h1, entry 679,026,881
    SHA-256 3c04c969eee566c45eeedefc98a2db6d00c635dfcb8691fbbea7b54016025a2c
    Public key SHA-256 4157d07e99cdc0493a73a9d4227802ada44ce3e22cbee128d410ce62a7e1545f
    Addresses
    104.21.5.209 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.133.216 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.5.209, 172.67.133.216): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    syqesai.pro
    Registered
    2026-07-13 · NameCheap, Inc.
    MX
    Receives mail at mail.syqesai.pro
    SPF
    SPF record with -all: other senders fail
    DMARC
    DMARC policy p=quarantine
    Checked
    2026-11-08 14:31 UTC

    Suggest a correction

  25. vertvabca.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    vertvabca.com
    First seen
    2026-11-08 14:16 UTC
    Listing
    CERT Polska listed it 2026-07-13 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 12:32 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-08 13:11 UTC to 2027-02-06 14:08 UTC
    Logged 2026-11-08 14:11 UTC in Google PlumbersArms2027h1, entry 679,329,302
    SHA-256 6ea6b2a6ed2908bc8b40b0dd48323cde93688ea0bfbdbb21c6c922e9c60e48fe
    Public key SHA-256 8fe062649b07b8896d81d35eb460366e8b49d3b5ddd4f38e280f031979a68d0e
    Addresses
    104.21.35.234 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.180.172 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.35.234, 172.67.180.172): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    vertvabca.com
    Registered
    2026-07-13 · NameCheap, Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 14:32 UTC

    Suggest a correction

  26. virtual-rewards.xyz US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    virtual-rewards.xyz
    First seen
    2026-11-08 14:16 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 11:58 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-11-08 13:12 UTC to 2027-02-06 13:12 UTC
    Logged 2026-11-08 14:11 UTC in Google ParcelYard2027h1, entry 679,019,890
    SHA-256 061d42aee826513bdd74aeda5a8c6e0ec172f4717c8d9c06e8209e565e2ea96f
    Public key SHA-256 54bde3ff79d5e668c769dd58a72ee90a91ddb1c09b05340e320ae26d5f302c7c
    Addresses
    104.21.56.84 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.181.177 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.56.84, 172.67.181.177): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    virtual-rewards.xyz
    Registered
    2026-05-15 · PDR Ltd. d/b/a PublicDomainRegistry.com
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 14:31 UTC

    Suggest a correction

  27. alectronixzone.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by USOMMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    alectronixzone.com
    First seen
    2026-11-08 14:10 UTC
    Listing
    USOM listed it 2026-05-25 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 13:05 UTC
    Listed
    USOM
    1. Listed by USOM
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-11-08 13:07 UTC to 2027-02-06 13:07 UTC
    Logged 2026-11-08 14:05 UTC in Google PlumbersArms2027h1, entry 679,248,443
    SHA-256 5c93e6b82be8ff835a4a09f6a9a4615cb6a7bc9c500613ac6516cab84d8d74c3
    Public key SHA-256 a57f71de3029168926c4303b12120e2f05b0b66db0de28cf3c1b60160f181a85
    Addresses
    104.21.42.81 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.203.97 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.42.81, 172.67.203.97): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    alectronixzone.com
    Registered
    2026-05-14 · Realtime Register B.V.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 14:32 UTC

    Suggest a correction

  28. boostweb3us.us US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX presentSPF -allSPF on Spamhaus DROPDMARC policy none
    DetailsHide
    Hostname
    boostweb3us.us
    First seen
    2026-11-08 14:10 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 11:58 UTC
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-08 11:57 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-08 13:08 UTC to 2027-02-06 13:08 UTC
    Logged 2026-11-08 14:07 UTC in Google PlumbersArms2027h1, entry 679,272,034
    SHA-256 0fad96b827dee95c831d9892a7a70848b9c204d2d8e1ed987e79ecb3f1c681e8
    Public key SHA-256 f2e9b68e056e1b14362215644b478f06a2957f830a9d85fb1af873ce2f7e67f7
    Addresses
    104.21.64.221 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.156.37 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.64.221, 172.67.156.37): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    boostweb3us.us
    MX
    Receives mail at mail.boostweb3us.us
    SPF
    SPF record with -all: other senders fail
    DMARC
    DMARC policy p=none: reports only
    SPF listing
    The SPF record lists 196.251.107.128 as a sender. It is on Spamhaus DROP: hijacked or criminal networks.
    Checked
    2026-11-08 14:15 UTC

    Suggest a correction

  29. leadinjector.com US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 5 y ago
    DetailsHide
    Hostname
    leadinjector.com
    First seen
    2026-11-08 14:10 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-08 11:57 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR1
    Valid 2026-11-08 13:11 UTC to 2027-02-06 13:11 UTC
    Logged 2026-11-08 14:09 UTC in Google ParcelYard2027h1, entry 678,999,934
    SHA-256 4076ca679a4b4df3e6b715ce88999f66bda8d744df58e014bced3287bde1143c
    Public key SHA-256 4c402a6c4a6ef3eeb5baec0bfdd0f7df29526878ecc00ab0c458267261cf5c05
    PhishDestroy
    Addresses
    104.21.20.206 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.194.103 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.20.206, 172.67.194.103): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    leadinjector.com
    Registered
    2022-04-14 · Atak Domain Bilgi Teknolojileri A.S.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 14:32 UTC

    Suggest a correction

  30. primestonepartnersag.com US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX presentSPF ~allDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    primestonepartnersag.com
    First seen
    2026-11-08 14:10 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-08 11:57 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-08 13:08 UTC to 2027-02-06 14:07 UTC
    Logged 2026-11-08 14:08 UTC in DigiCert Wyvern2027h1, entry 455,105,940
    SHA-256 d728550deafdad8ba7306c31591ae992ada6c1cca32fbfd56039166a279e2597
    Public key SHA-256 986b748e998f29e52f49148a4f068012df6ea1b66204651a9e8d67c0258a573f
    PhishDestroy
    Addresses
    104.21.65.88 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.189.180 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.65.88, 172.67.189.180): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    primestonepartnersag.com
    Registered
    2026-07-13 · Tucows Domains Inc.
    MX
    Receives mail at mx.zoho.eu, mx2.zoho.eu, mx3.zoho.eu
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 14:15 UTC

    Suggest a correction

  31. rdhzw.work US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by NPA 165 (information services)MX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    rdhzw.work
    First seen
    2026-11-08 14:10 UTC
    Listing
    NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 13:35 UTC
    Listed
    NPA 165
    1. Observed in the NPA 165 feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-11-08 13:08 UTC to 2027-02-06 13:08 UTC
    Logged 2026-11-08 14:06 UTC in Google PlumbersArms2027h1, entry 679,264,594
    SHA-256 987199392b34eff0f8fec2d985a1628be01e626df658620bed0056dbc1a1a9f9
    Public key SHA-256 e8f26a40e51367cd54b9fd97b5ce5e312ef1889b2ccb1d47a0360fb346933eb8
    Addresses
    104.21.55.132 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.148.48 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.55.132, 172.67.148.48): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    rdhzw.work
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 14:15 UTC

    Suggest a correction

  32. sxwnv.work US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by NPA 165 (information services)MX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    sxwnv.work
    First seen
    2026-11-08 14:10 UTC
    Listing
    NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 13:35 UTC
    Listed
    NPA 165
    1. Observed in the NPA 165 feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-08 13:10 UTC to 2027-02-06 13:10 UTC
    Logged 2026-11-08 14:08 UTC in Google PlumbersArms2027h1, entry 679,296,808
    SHA-256 9ad65b960d0edf0338fcfa2d6c9d744142624ae61fe2b6ed37e99d4abd91c953
    Public key SHA-256 9d6e06ddc53376d20046eacab442d30203fd45e0d88465903d8d8ac1b5415da4
    Addresses
    104.21.77.74 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.205.96 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.77.74, 172.67.205.96): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    sxwnv.work
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 14:15 UTC

    Suggest a correction

  33. teveviora.club US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    teveviora.club
    First seen
    2026-11-08 14:10 UTC
    Listing
    CERT Polska listed it 2026-06-10 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 12:32 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-11-08 13:09 UTC to 2027-02-06 13:09 UTC
    Logged 2026-11-08 14:07 UTC in IPng Networks Gouda2027h1, entry 354,693,852
    SHA-256 89768a528c8eb3352b8c43d1f8405110026fe3a858fbd03292d0f5b97a5cc040
    Public key SHA-256 1aab7f4c941f4901652c4d47a588c1d9aff8a195a131686731c9312aa8a3f331
    Addresses
    104.21.10.24 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.162.35 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.10.24, 172.67.162.35): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    teveviora.club
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 14:15 UTC

    Suggest a correction

  34. www.leadinjector.com US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareUnder leadinjector.com, reported by PhishDestroyMX absentSPF missingDMARC missingRegistered 5 y ago
    DetailsHide
    Hostname
    www.leadinjector.com
    First seen
    2026-11-08 14:10 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-08 11:57 UTC
    Reported
    PhishDestroy, listing leadinjector.com and the names under it
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR2 · precertificate
    Valid 2026-11-08 13:11 UTC to 2027-02-06 13:11 UTC
    Logged 2026-11-08 14:09 UTC in DigiCert Wyvern2027h1, entry 455,120,242
    SHA-256 259d543c3b9acba5cdca8b7b82c735436a84d2438b2898b208cca36c18470cf5
    Public key SHA-256 a21721dbaa3769e3e7e226594c2dd5c41a6a25bc48cdafd5d5c301dbcdf40414
    PhishDestroy
    Addresses
    104.21.20.206 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.194.103 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.20.206, 172.67.194.103): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    leadinjector.com
    Registered
    2022-04-14 · Atak Domain Bilgi Teknolojileri A.S.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 14:32 UTC

    Suggest a correction

  35. 623h.com US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 2 y ago
    DetailsHide
    Hostname
    623h.com
    First seen
    2026-11-08 14:05 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-08 11:57 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-11-08 13:03 UTC to 2027-02-06 13:03 UTC
    Logged 2026-11-08 14:01 UTC in Google PlumbersArms2027h1, entry 679,189,169
    SHA-256 ced0c5cb4c1809e7656eea8b61f3ab9119bbbab9cfe89021495893a2ca1a1b7f
    Public key SHA-256 860bb40f89feea7e45bb85f50bbc01006457979869012ba9fe57c67a3fae4402
    PhishDestroy
    Addresses
    104.21.76.118 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.193.216 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.76.118, 172.67.193.216): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    623h.com
    Registered
    2024-08-24 · GoDaddy.com, LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 14:32 UTC

    Suggest a correction

  36. aavefinances.sbs US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    aavefinances.sbs
    First seen
    2026-11-08 14:05 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 11:58 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1
    Valid 2026-09-10 11:57 UTC to 2026-12-09 12:56 UTC
    Logged 2026-11-08 14:04 UTC in DigiCert Wyvern2026h2, entry 2,212,310,128
    SHA-256 266a24e9e37226ee9f22dd24ef901da6506e4a3c1efaa06e21aa58d5657ccf9c
    Public key SHA-256 a98295502193934d773704bb2b2969c84e9d49f43cf45724d3014261bb79fba8
    Addresses
    104.21.55.156 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.171.165 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.55.156, 172.67.171.165): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    aavefinances.sbs
    Registered
    2026-07-13 · Dynadot Inc
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 14:31 UTC

    Suggest a correction

  37. bullvers.vip US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    bullvers.vip
    First seen
    2026-11-08 14:05 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-08 11:57 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-11-08 13:05 UTC to 2027-02-06 13:05 UTC
    Logged 2026-11-08 14:03 UTC in Let's Encrypt Willow2027h1, entry 1,005,973,317
    SHA-256 3d4082c885e62748b4a7dca855105d2e8492c87569141036f797ff4b3f25d278
    Public key SHA-256 4e2c58d07c5c7ed72906d2e6cceecd5f57bfb4a523ae31188cd7590280ce158f
    PhishDestroy
    Addresses
    104.21.36.94 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.191.197 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.36.94, 172.67.191.197): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    bullvers.vip
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 14:10 UTC

    Suggest a correction

  38. claim-hyperliquid.network US · AS13335 · Cloudflare, Inc.4 addressesHyperliquid
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 12 mo ago
    DetailsHide
    Hostname
    claim-hyperliquid.network
    First seen
    2026-11-08 14:05 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-08 11:57 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-08 13:00 UTC to 2027-02-06 13:57 UTC
    Logged 2026-11-08 14:00 UTC in IPng Networks Halloumi2027h1, entry 412,363,491
    SHA-256 a6b45961371735ec88f6b41571bbe71d2b98e08345fc815fd611dfcb78db114c
    Public key SHA-256 af9e1d4658d2b77fa954c25ed581b63525b68e9dec5cd88aff56303060c8531a
    PhishDestroy
    Brand
    Hyperliquid
    Addresses
    104.21.0.86 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.223.172 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3030::6815:56
    2606:4700:3034::ac43:dfac
    Cloudflare
    Cloudflare (104.21.0.86, 172.67.223.172): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    claim-hyperliquid.network
    Registered
    2025-11-19 · PDR Ltd. d/b/a PublicDomainRegistry.com
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 14:10 UTC

    Suggest a correction

  39. collapsarshopping.online US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by NPA 165 (e-commerce)MX absentSPF missingDMARC quarantineRegistered 6 mo ago
    DetailsHide
    Hostname
    collapsarshopping.online
    First seen
    2026-11-08 14:05 UTC
    Listing
    NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 13:35 UTC
    Listed
    NPA 165
    1. Observed in the NPA 165 feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-08 13:02 UTC to 2027-02-06 13:02 UTC
    Logged 2026-11-08 14:00 UTC in Google ParcelYard2027h1, entry 678,871,985
    SHA-256 632350a8a9ddfaa7738770ba35504251c3ecaedce4e6b3c6b261ee013f9d59ea
    Public key SHA-256 9e92d9298d326ae73d7a5ceabefe42499620740c88cde71f1409502cc525d5a3
    Addresses
    104.21.71.77 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.143.232 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.71.77, 172.67.143.232): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    collapsarshopping.online
    Registered
    2026-05-15 · GoDaddy.com, LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    DMARC policy p=quarantine
    Checked
    2026-11-08 14:31 UTC

    Suggest a correction

  40. evolanexgroup.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by USOMMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    evolanexgroup.com
    First seen
    2026-11-08 14:05 UTC
    Listing
    USOM listed it 2026-05-27 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 13:05 UTC
    Listed
    USOM
    1. Listed by USOM
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-11-08 13:05 UTC to 2027-02-06 13:05 UTC
    Logged 2026-11-08 14:03 UTC in Google PlumbersArms2027h1, entry 679,225,229
    SHA-256 7204cfc5538fbb67fdf35ecf49e94a8debf34c781e34a0f1e62b4952dc92437b
    Public key SHA-256 f3850f891b3530fa3cb152a9cc2334de80acfb8052cb1b916643e5fa069bb6bd
    Addresses
    104.21.18.77 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.180.241 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.18.77, 172.67.180.241): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    evolanexgroup.com
    Registered
    2026-05-14 · Realtime Register B.V.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 14:32 UTC

    Suggest a correction

  41. facevo-wadapu.info US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    facevo-wadapu.info
    First seen
    2026-11-08 14:05 UTC
    Listing
    CERT Polska listed it 2026-09-01 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 12:32 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-08 13:00 UTC to 2027-02-06 13:59 UTC
    Logged 2026-11-08 14:00 UTC in Google ParcelYard2027h1, entry 678,872,063
    SHA-256 0b4e05644fc9ba78fa81f9eb24a34feea98300f4d347fee88029f5f1702a17fc
    Public key SHA-256 508d8cebdb6b86f660c74ab5cbdd83f655792a95b76feee68492de6d1dd4193f
    Addresses
    104.21.49.24 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.188.202 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.49.24, 172.67.188.202): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    facevo-wadapu.info
    Registered
    2026-07-13 · Dynadot Inc
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 14:32 UTC

    Suggest a correction

  42. injective-join.xyz US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    injective-join.xyz
    First seen
    2026-11-08 14:05 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 11:58 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-08 13:04 UTC to 2027-02-06 14:03 UTC
    Logged 2026-11-08 14:04 UTC in Geomys Tuscolo2027h1, entry 529,047,532
    SHA-256 2ffd3d5d608948f68d02857bda8c6b2dd7661b58f33c95fcb92ed318f2267691
    Public key SHA-256 99f7217f992ec4947b5cff1d93de354b7f9de15e3058a385661561505afbf089
    Addresses
    104.21.63.42 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.143.17 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.63.42, 172.67.143.17): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    injective-join.xyz
    Registered
    2026-07-13 · PDR Ltd. d/b/a PublicDomainRegistry.com
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 14:31 UTC

    Suggest a correction

  43. julogi-garowu.info US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    julogi-garowu.info
    First seen
    2026-11-08 14:05 UTC
    Listing
    CERT Polska listed it 2026-09-01 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 12:32 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-08 13:03 UTC to 2027-02-06 14:00 UTC
    Logged 2026-11-08 14:03 UTC in Let's Encrypt Sycamore2027h1, entry 1,050,260,876
    SHA-256 217228a89d42222b7e5c173d040ad09c277a2aba1bba3409f421a3dc35b942ba
    Public key SHA-256 660687dfe4e72ea7a7f10290a6eceaa7244621d2b2fbad54ee61bb0ef70ec1de
    Addresses
    104.21.36.113 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.192.210 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.36.113, 172.67.192.210): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    julogi-garowu.info
    Registered
    2026-07-13 · Dynadot Inc
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 14:32 UTC

    Suggest a correction

  44. nucleo-fintralis-pro.pages.dev US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT Polska
    DetailsHide
    Hostname
    nucleo-fintralis-pro.pages.dev
    First seen
    2026-11-08 14:05 UTC
    Listing
    CERT Polska listed it 2026-09-10 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 12:32 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-11-08 13:06 UTC to 2027-02-06 13:06 UTC
    Logged 2026-11-08 14:04 UTC in Let's Encrypt Willow2027h1, entry 1,006,002,513
    SHA-256 64d4930da7cbd02ad4fa17ca15758dcadaf7c75a5ad301a826f0f9b181eed1ad
    Public key SHA-256 2cc8daca3da87bb58135def11ce17d2a2937b0af3c9e40a4d94e68d2282df686
    Addresses
    172.66.44.231 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.66.47.25 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (172.66.44.231, 172.66.47.25): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.

    Suggest a correction

  45. rivenetworld.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by USOMMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    rivenetworld.com
    First seen
    2026-11-08 14:05 UTC
    Listing
    USOM listed it 2026-05-22 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 13:05 UTC
    Listed
    USOM
    1. Listed by USOM
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-11-08 13:03 UTC to 2027-02-06 13:03 UTC
    Logged 2026-11-08 14:01 UTC in Let's Encrypt Willow2027h1, entry 1,005,925,574
    SHA-256 10c3eaffee43b20d3b69c76d6f92997c2cdc995c3b6c7fa4c82ebc2a91ef1fa6
    Public key SHA-256 ecbfcdc182512fd65262bbf83331894f79853f228f5cd1702c3e56256319931c
    Addresses
    104.21.69.90 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.206.193 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.69.90, 172.67.206.193): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    rivenetworld.com
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 14:10 UTC

    Suggest a correction

  46. ayx-bit.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    ayx-bit.com
    First seen
    2026-11-08 14:00 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 11:58 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1
    Valid 2026-09-10 12:24 UTC to 2026-12-09 13:23 UTC
    Logged 2026-11-08 13:58 UTC in Geomys Tuscolo2026h2, entry 1,046,440,383
    SHA-256 1c06bf900bc92215ad1c0d681ab92e669daa3ef67ee37c6097c85f2b64399334
    Public key SHA-256 4afd91fd56459f31cc7f72851d7e7076792f11f3b6329b7955470cedbe3142ee
    Addresses
    104.21.81.28 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.137.157 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.81.28, 172.67.137.157): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    ayx-bit.com
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 14:04 UTC

    Suggest a correction

  47. canksffsdfdefe.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    canksffsdfdefe.com
    First seen
    2026-11-08 14:00 UTC
    Listing
    CERT Polska listed it 2026-07-13 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 12:32 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-08 12:59 UTC to 2027-02-06 13:58 UTC
    Logged 2026-11-08 13:59 UTC in DigiCert Wyvern2027h1, entry 455,014,167
    SHA-256 99877d96731353e86f7b2ea3affa1b0b06b5e89492a374d975342bd75cd5c053
    Public key SHA-256 a59be0608492d3e7bc785d471137b5169b0cb603e11f54394556b86563f6dc4e
    Addresses
    104.21.57.33 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.188.236 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.57.33, 172.67.188.236): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    canksffsdfdefe.com
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 14:04 UTC

    Suggest a correction

  48. dexscreener.app.us.dex-app.co.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareUnder dex-app.co.com, listed by MetaMask
    DetailsHide
    Hostname
    dexscreener.app.us.dex-app.co.com
    First seen
    2026-11-08 14:00 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 11:58 UTC
    Listed
    MetaMask, listing dex-app.co.com and the names under it
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WR1 · precertificate
    Valid 2026-11-08 12:56 UTC to 2027-02-06 13:54 UTC
    Logged 2026-11-08 13:56 UTC in Google PlumbersArms2027h1, entry 679,116,029
    SHA-256 435c26a8832f09697f54f954156cd1a31c56762ed1afec73f8ca92ac6baa9456
    Public key SHA-256 dd25d2c9ceb6c1e64794091f3168c4a995d781e47efeb4eb3049aa6268ee62cf
    Addresses
    104.21.2.175 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.129.130 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.2.175, 172.67.129.130): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.

    Suggest a correction

  49. dmca-verify.com US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 12 mo ago
    DetailsHide
    Hostname
    dmca-verify.com
    First seen
    2026-11-08 14:00 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-08 11:57 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-08 12:59 UTC to 2027-02-06 13:57 UTC
    Logged 2026-11-08 13:59 UTC in DigiCert Wyvern2027h1, entry 455,016,359
    SHA-256 c5126c6ca299f9f0b0b31199046c73061eccf3aab7103a43cfab79628f88d7e5
    Public key SHA-256 778509eaa8206fbc675005bb0627cec349e8de4025bc7c4c5f60de7934402281
    PhishDestroy
    Addresses
    104.21.12.247 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.196.198 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.12.247, 172.67.196.198): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    dmca-verify.com
    Registered
    2025-11-11 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 14:04 UTC

    Suggest a correction

  50. doktoraix.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by USOMMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    doktoraix.com
    First seen
    2026-11-08 14:00 UTC
    Listing
    USOM listed it 2026-06-12 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 13:05 UTC
    Listed
    USOM
    1. Listed by USOM
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-11-08 13:01 UTC to 2027-02-06 13:01 UTC
    Logged 2026-11-08 14:00 UTC in IPng Networks Gouda2027h1, entry 354,640,736
    SHA-256 fa78dbe23177b18a35c5043136fb220bf6985285cd1d3facf5e77b598404c846
    Public key SHA-256 f67a8eacc6f07b23169515113ed720680bc7a8c8c8b0eb93d56b760d7378a19a
    Addresses
    104.21.94.53 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.220.37 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.94.53, 172.67.220.37): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    doktoraix.com
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 14:04 UTC

    Suggest a correction

  51. eloncas.org US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    eloncas.org
    First seen
    2026-11-08 14:00 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 11:58 UTC
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-08 11:57 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-11-08 13:01 UTC to 2027-02-06 13:01 UTC
    Logged 2026-11-08 13:59 UTC in Google PlumbersArms2027h1, entry 679,164,545
    SHA-256 1eaa6c7fab870b8307e73182ec6fa98f6537a80cb3b936297a93e3f55d3fe764
    Public key SHA-256 40fa91023f59755c20170449a9d30c04fc65914a404d7edb98259fc8ce30ea8d
    Addresses
    104.21.37.211 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.213.117 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.37.211, 172.67.213.117): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    eloncas.org
    Registered
    2026-05-15 · Atak Domain Bilgi Teknolojileri A._.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 14:31 UTC

    Suggest a correction

  52. freexapps.com US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    freexapps.com
    First seen
    2026-11-08 14:00 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-08 11:57 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-08 12:57 UTC to 2027-02-06 13:56 UTC
    Logged 2026-11-08 13:57 UTC in Google PlumbersArms2027h1, entry 679,133,317
    SHA-256 19a241ae42156e36343117e714e4a57cc03521dba0a25e2fd98f6d80a07b74c9
    Public key SHA-256 9afc6f6d5ad5479817eeddf41c9aa6e41a49f7f592b4b98c03b5498c31dfc8cd
    PhishDestroy
    Addresses
    104.21.54.252 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.143.192 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.54.252, 172.67.143.192): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    freexapps.com
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 14:04 UTC

    Suggest a correction

  53. loweye-miboga.info US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    loweye-miboga.info
    First seen
    2026-11-08 14:00 UTC
    Listing
    CERT Polska listed it 2026-09-01 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 12:32 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1
    Valid 2026-09-10 11:10 UTC to 2026-12-09 12:07 UTC
    Logged 2026-11-08 13:58 UTC in DigiCert Wyvern2026h2, entry 2,212,301,886
    SHA-256 99c3d51f4510c279e33aca7fdf717dceb5f133d3d8ef3bf476f9e8cb95bc3625
    Public key SHA-256 e29ebc3123c10432544a1877abbe433065e4cde94631f6dc4faec4c219dbd022
    Addresses
    104.21.73.152 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.190.84 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.73.152, 172.67.190.84): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    loweye-miboga.info
    Registered
    2026-07-13 · Dynadot Inc
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 14:32 UTC

    Suggest a correction

  54. quant-ai.digital US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 59 d ago
    DetailsHide
    Hostname
    quant-ai.digital
    First seen
    2026-11-08 14:00 UTC
    Listing
    CERT Polska listed it 2026-09-17 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 12:32 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-08 12:59 UTC to 2027-02-06 13:58 UTC
    Logged 2026-11-08 13:59 UTC in IPng Networks Halloumi2027h1, entry 412,356,492
    SHA-256 65aa608c01cd4f58dc1385eeea44167c2660c50333f0a3e74ccc56a03b51558d
    Public key SHA-256 667c40c8d3d5df3d6e168c988e472fc3bf9e3412c306d1f3b71a9a135438820e
    Addresses
    104.21.95.11 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.142.126 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.95.11, 172.67.142.126): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    quant-ai.digital
    Registered
    2026-09-10 · NETIM SAS
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 14:32 UTC

    Suggest a correction

  55. safepae.vip US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    safepae.vip
    First seen
    2026-11-08 14:00 UTC
    Listing
    MetaMask: first observed in the feed 2026-11-02 · still listed at the last successful feed check 2026-11-08 11:58 UTC
    PhishDestroy: first observed in the feed 2026-11-07 · still listed at the last successful feed check 2026-11-08 11:57 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-08 12:56 UTC to 2027-02-06 13:55 UTC
    Logged 2026-11-08 13:56 UTC in DigiCert Sphinx2027h1, entry 402,624,562
    SHA-256 3237cfcdfab3204666d3c4b281b4237ad3c17c28d8fcfd262ca1e48cba5bafe6
    Public key SHA-256 9f2c8c256f555a8cbd1104c77879db5c24280f24d4cded44f5ecf771a884b6b4
    Addresses
    104.21.55.75 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.170.189 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.55.75, 172.67.170.189): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    safepae.vip
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 14:04 UTC

    Suggest a correction

  56. walrex.xyz US · AS13335 · Cloudflare, Inc.
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC quarantineRegistered 12 mo ago
    DetailsHide
    Hostname
    walrex.xyz
    First seen
    2026-11-08 14:00 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-08 11:57 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1
    Valid 2026-09-10 11:28 UTC to 2026-12-09 12:28 UTC
    Logged 2026-11-08 13:56 UTC in DigiCert Wyvern2026h2, entry 2,212,297,764
    SHA-256 2e28c6d1314868decb8ab755387ae8e0579272152f45e33f2a882ab246d5b34f
    Public key SHA-256 ee70a444fdbb8a534c0a1bc844fa040e7495dda70188136d098ef40a30a3812f
    PhishDestroy
    Addresses
    185.158.133.1 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (185.158.133.1): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    walrex.xyz
    Registered
    2025-11-18 · GoDaddy.com, LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    DMARC policy p=quarantine
    Checked
    2026-11-08 14:32 UTC

    Suggest a correction

  57. basedonex-proposal.xyz US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 59 d ago
    DetailsHide
    Hostname
    basedonex-proposal.xyz
    First seen
    2026-11-08 13:56 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 11:58 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-08 12:55 UTC to 2027-02-06 13:53 UTC
    Logged 2026-11-08 13:55 UTC in IPng Networks Halloumi2027h1, entry 412,308,215
    SHA-256 033852bdcdde9fc1a1f27848984c82e32fc7662b9c64388d330a5b10ecb40e9a
    Public key SHA-256 e005c3ba12bb63d6dce3d20a7127ea2755bf831120671bd199928ea97094110f
    Addresses
    104.21.24.9 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.215.70 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.24.9, 172.67.215.70): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    basedonex-proposal.xyz
    Registered
    2026-09-10 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 14:32 UTC

    Suggest a correction

  58. bilgipath.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by USOMMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    bilgipath.com
    First seen
    2026-11-08 13:56 UTC
    Listing
    USOM listed it 2026-06-12 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 13:05 UTC
    Listed
    USOM
    1. Listed by USOM
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-08 12:52 UTC to 2027-02-06 12:52 UTC
    Logged 2026-11-08 13:51 UTC in Google ParcelYard2027h1, entry 678,739,906
    SHA-256 57654e704d5e36deccebd2d3937a913ab44ad62fb97fe98f4b26990804d711ce
    Public key SHA-256 19b50eb0f34c97966f736805896b19e91e9259b3e2f52fe458d18e24da91e47f
    Addresses
    104.21.80.4 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.172.85 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.80.4, 172.67.172.85): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    bilgipath.com
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 13:59 UTC

    Suggest a correction

  59. dlzcc.icu US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by NPA 165 (e-commerce)MX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    dlzcc.icu
    First seen
    2026-11-08 13:56 UTC
    Listing
    NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 13:35 UTC
    Listed
    NPA 165
    1. Observed in the NPA 165 feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1
    Valid 2026-11-08 12:53 UTC to 2027-02-06 13:51 UTC
    Logged 2026-11-08 13:53 UTC in DigiCert Wyvern2027h1, entry 454,952,214
    SHA-256 c84288fca161a3ed519a5d0afa621ebe7dd48c702c1ee41312292130ad7ee11f
    Public key SHA-256 2becb31ac770208b0062b142216848dab601fc5afac7049db232b9bb13f672d3
    Addresses
    104.21.67.90 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.219.36 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.67.90, 172.67.219.36): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    dlzcc.icu
    Registered
    2026-07-13 · Alibaba Cloud Computing Ltd. d/b/a HiChina (www.net.cn)
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 14:32 UTC

    Suggest a correction

  60. ledpd.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    ledpd.com
    First seen
    2026-11-08 13:56 UTC
    Listing
    CERT Polska listed it 2026-05-17 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 12:32 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-08 12:52 UTC to 2027-02-06 12:52 UTC
    Logged 2026-11-08 13:51 UTC in Let's Encrypt Willow2027h1, entry 1,005,626,710
    SHA-256 33905f7231f1f48c49e6836731932adf8122fffcc3b6e8b0898096170dd5e2d9
    Public key SHA-256 81c34370381603ad055a7b6792dd9a54a67f1216110979b0e6062c0d03caae13
    Addresses
    104.21.77.94 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.206.116 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.77.94, 172.67.206.116): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    ledpd.com
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 13:59 UTC

    Suggest a correction

  61. serratrigl.live US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    serratrigl.live
    First seen
    2026-11-08 13:56 UTC
    Listing
    CERT Polska listed it 2026-08-18 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 12:32 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1
    Valid 2026-09-10 11:43 UTC to 2026-12-09 12:41 UTC
    Logged 2026-11-08 13:54 UTC in DigiCert Wyvern2026h2, entry 2,212,294,934
    SHA-256 16e6af13ae3c300fa1f2956311372623ab664e528bc67ca9ddd841aa277e3ddd
    Public key SHA-256 0d5809dbc64bdb3c4c94b706c5bc8b3f40dbf926b6201ff3ecdb43e4d2abb1c5
    Addresses
    104.21.50.144 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.207.1 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.50.144, 172.67.207.1): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    serratrigl.live
    Registered
    2026-07-13 · NameCheap, Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 14:32 UTC

    Suggest a correction

  62. stock-ledger-board.pages.dev US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMask
    DetailsHide
    Hostname
    stock-ledger-board.pages.dev
    First seen
    2026-11-08 13:56 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 11:58 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-08 12:55 UTC to 2027-02-06 13:53 UTC
    Logged 2026-11-08 13:55 UTC in Google ParcelYard2027h1, entry 678,794,109
    SHA-256 5e877f3ce64b02f6fec6e9169d24f64232f41918d8d99967864bdfb66b01db38
    Public key SHA-256 0e45d328faa48a2336a388c409efc86c95653c582ae8b091a490ae3c59432030
    Addresses
    172.66.45.7 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.66.46.249 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (172.66.45.7, 172.66.46.249): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.

    Suggest a correction

  63. strategicinsightjournal.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    strategicinsightjournal.com
    First seen
    2026-11-08 13:56 UTC
    Listing
    CERT Polska listed it 2026-07-13 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 12:32 UTC
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-08 11:57 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-08 12:52 UTC to 2027-02-06 13:50 UTC
    Logged 2026-11-08 13:52 UTC in Google PlumbersArms2027h1, entry 679,062,544
    SHA-256 35a19e49e239db276c549d4bb17e9fd586042512ce3babb9d6a6181c69b731ac
    Public key SHA-256 54e1796d8f96fa92c987cf5f7a5334d031c52548bead14214fe3087f144cb22f
    Addresses
    104.21.14.118 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.133.194 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.14.118, 172.67.133.194): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    strategicinsightjournal.com
    Registered
    2026-07-13 · NameCheap, Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 13:59 UTC

    Suggest a correction

  64. xa90p.net US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX presentSPF missingDMARC missingRegistered 8 mo ago
    DetailsHide
    Hostname
    xa90p.net
    First seen
    2026-11-08 13:56 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-08 11:57 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-08 12:57 UTC to 2027-02-06 12:57 UTC
    Logged 2026-11-08 13:55 UTC in Google PlumbersArms2027h1, entry 679,109,849
    SHA-256 6965a6cce5a668856314b9e732e1e89b0dc3c8d72bcc62f61d403b0f433a942b
    Public key SHA-256 2607ac1aba0cc2f8eb8ca9595e6e942f696ffb2fe89775965cf9815f38733d70
    PhishDestroy
    Addresses
    104.21.83.254 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.184.5 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.83.254, 172.67.184.5): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    xa90p.net
    Registered
    2026-03-16 · Internet Domain Service BS Corp
    MX
    Receives mail at _dc-mx.f9eded9b424b.xa90p.net
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 13:59 UTC

    Suggest a correction

  65. zizaz.work US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by NPA 165 (information services)MX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    zizaz.work
    First seen
    2026-11-08 13:56 UTC
    Listing
    NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 13:35 UTC
    Listed
    NPA 165
    1. Observed in the NPA 165 feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-08 12:54 UTC to 2027-02-06 12:54 UTC
    Logged 2026-11-08 13:53 UTC in Let's Encrypt Sycamore2027h1, entry 1,049,972,108
    SHA-256 8dabb47cf49115309064f24d8ba0dd43fdb83b4fdba4445c1d920f0b5246addb
    Public key SHA-256 5fca612d670e28f10e4c218ae50ee50475a944c04c0c55815c81aa95b18d7215
    Addresses
    104.21.4.68 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.154.18 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.4.68, 172.67.154.18): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    zizaz.work
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 13:59 UTC

    Suggest a correction

  66. api.major-fund-pro-tech-com.financecryptoworld.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareUnder financecryptoworld.com, listed by CERT PolskaMX presentSPF ~allDMARC missingRegistered 22 mo ago
    DetailsHide
    Hostname
    api.major-fund-pro-tech-com.financecryptoworld.com
    First seen
    2026-11-08 13:51 UTC
    Listing
    CERT Polska listed it 2026-06-12 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 12:32 UTC
    Listed
    CERT Polska, listing financecryptoworld.com and the names under it
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WR1 · precertificate
    Valid 2026-11-08 12:50 UTC to 2027-02-06 13:47 UTC
    Logged 2026-11-08 13:50 UTC in Google PlumbersArms2027h1, entry 679,036,481
    SHA-256 e201e5f3d0707bec43e56307e70f880c018d641e596db66ff682690099387ccb
    Public key SHA-256 dbbc1ed76b95e863fc7459f15e484d50b27aff6c237a9ac92de3b8fa6962f1a7
    Addresses
    104.21.10.130 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.131.121 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.10.130, 172.67.131.121): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    financecryptoworld.com
    Registered
    2025-01-30 · MainReg Inc.
    MX
    Receives mail at mail.financecryptoworld.com
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-07 17:16 UTC

    Suggest a correction

  67. defy.vu US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    defy.vu
    First seen
    2026-11-08 13:51 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-08 11:57 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-11-08 12:51 UTC to 2027-02-06 12:51 UTC
    Logged 2026-11-08 13:50 UTC in Geomys Tuscolo2027h1, entry 528,894,969
    SHA-256 1ca652eafbe4091b96fe320990173c180e44840ce8ba286213b6cef050681923
    Public key SHA-256 3b1ef7d44fb65275dfc256f4f13fef62ac8f4f91365de65a2a00c3bd85a156f5
    PhishDestroy
    Addresses
    104.21.42.102 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.204.247 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.42.102, 172.67.204.247): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    defy.vu
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 13:54 UTC

    Suggest a correction

  68. digpoint.icu US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by USOMMX absentSPF missingDMARC missingRegistered 12 mo ago
    DetailsHide
    Hostname
    digpoint.icu
    First seen
    2026-11-08 13:51 UTC
    Listing
    USOM listed it 2026-06-30 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 13:05 UTC
    Listed
    USOM
    1. Listed by USOM
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1
    Valid 2026-11-08 12:49 UTC to 2027-02-06 13:48 UTC
    Logged 2026-11-08 13:49 UTC in DigiCert Wyvern2027h1, entry 454,906,030
    SHA-256 0545ede11c175ba4390f98a79214d8e2cc794d8733efccb2b43af7ff771583af
    Public key SHA-256 d967f2f6760858c5072bdc907aa67f283a3c3c5c963a2871773e80f657924954
    Addresses
    104.21.56.151 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.152.191 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.56.151, 172.67.152.191): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    digpoint.icu
    Registered
    2025-11-17 · Dynadot Inc
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 14:32 UTC

    Suggest a correction

  69. hazinesorgu.org US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by USOMMX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    hazinesorgu.org
    First seen
    2026-11-08 13:51 UTC
    Listing
    USOM listed it 2026-07-14 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 13:05 UTC
    Listed
    USOM
    1. Listed by USOM
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1
    Valid 2026-11-08 12:46 UTC to 2027-02-06 13:44 UTC
    Logged 2026-11-08 13:46 UTC in Sectigo Elephant2027h1, entry 780,521,125
    SHA-256 2af9377b9d08af3c840bceabfcc01e675660b5ea5065c32e2e3ca83e30306600
    Public key SHA-256 85878dcc9240e1b95b0632dd3686e5f2fa60ac832af2c3c1f120d95709d4bab7
    Addresses
    104.21.25.157 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.134.91 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.25.157, 172.67.134.91): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    hazinesorgu.org
    Registered
    2026-07-13 · NameSilo, LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 14:31 UTC

    Suggest a correction

  70. hzkqn.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    hzkqn.com
    First seen
    2026-11-08 13:51 UTC
    Listing
    CERT Polska listed it 2026-05-19 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 12:32 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-11-08 12:51 UTC to 2027-02-06 12:51 UTC
    Logged 2026-11-08 13:49 UTC in IPng Networks Halloumi2027h1, entry 412,250,679
    SHA-256 330bd153ab7328dedcc4f9a66d624cdf97b78e4a103e408b60739b5123661874
    Public key SHA-256 88c4917dc262f2fab5b6968f86b6ed16458a85272fd46fabf5a450e31ffa3507
    Addresses
    104.21.58.143 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.160.92 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.58.143, 172.67.160.92): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    hzkqn.com
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 13:54 UTC

    Suggest a correction

  71. mgxusd.co US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by NPA 165 (finance and insurance)MX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    mgxusd.co
    First seen
    2026-11-08 13:51 UTC
    Listing
    NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 13:35 UTC
    Listed
    NPA 165
    1. Observed in the NPA 165 feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-08 12:50 UTC to 2027-02-06 12:50 UTC
    Logged 2026-11-08 13:48 UTC in Google PlumbersArms2027h1, entry 679,010,152
    SHA-256 7a87b96ae9f5502c56406c13dd0c432efa56015cf8c4f7a88eb04f48b385c166
    Public key SHA-256 2c6f08e7e691b62b2ffda69915ba8d58ad99e469a6f34dc2d9c93041938507b2
    Addresses
    104.21.26.140 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.136.110 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.26.140, 172.67.136.110): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    mgxusd.co
    Registered
    2026-05-15 · Dynadot Inc
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 14:31 UTC

    Suggest a correction

  72. moonwell.site US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 59 d ago
    DetailsHide
    Hostname
    moonwell.site
    First seen
    2026-11-08 13:51 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 11:58 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-08 12:51 UTC to 2027-02-06 12:51 UTC
    Logged 2026-11-08 13:49 UTC in Sectigo Statue2027h1, entry 94,541,245
    SHA-256 3620351a86db421661bbc272573f184d2bacdc2dcebc9403f415e17a98c425d6
    Public key SHA-256 c4dab8baba2c93ac73c0f193b939503f24422c8e6c53fc8703581ff516da3274
    Addresses
    104.21.27.168 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.169.147 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.27.168, 172.67.169.147): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    moonwell.site
    Registered
    2026-09-10 · Dynadot Inc
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 14:31 UTC

    Suggest a correction

  73. sgesss.site US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by NPA 165 (e-commerce)MX absentSPF missingDMARC quarantineRegistered 4 mo ago
    DetailsHide
    Hostname
    sgesss.site
    First seen
    2026-11-08 13:51 UTC
    Listing
    NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 13:35 UTC
    Listed
    NPA 165
    1. Observed in the NPA 165 feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1
    Valid 2026-09-10 10:58 UTC to 2026-12-09 11:58 UTC
    Logged 2026-11-08 13:46 UTC in DigiCert Wyvern2026h2, entry 2,212,280,009
    SHA-256 6bae4883dc8206e78c424c337b3ed51dfd50e61bfab14123465a570342b48cb8
    Public key SHA-256 4352eb9b587e133d408a0c012f542957b88ab96223c0734263eb08727a2ce775
    Addresses
    104.21.26.234 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.168.150 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.26.234, 172.67.168.150): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    sgesss.site
    Registered
    2026-07-13 · GoDaddy.com, LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    DMARC policy p=quarantine
    Checked
    2026-11-08 14:31 UTC

    Suggest a correction

  74. trendyolk.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by USOMMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    trendyolk.com
    First seen
    2026-11-08 13:51 UTC
    Listing
    USOM listed it 2026-11-02 · still listed at the last successful feed check 2026-11-08 13:05 UTC
    Listed
    USOM
    1. Listed by USOM
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-11-08 12:47 UTC to 2027-02-06 12:47 UTC
    Logged 2026-11-08 13:46 UTC in Let's Encrypt Sycamore2027h1, entry 1,049,789,486
    SHA-256 88a40ced641cc848624b6eb3f3ae751c796b1582d13f2c4dfb750d4e6e792681
    Public key SHA-256 78c775b0317fd82554a645920eabb845c0c591706366ebc6a1441cca1d762043
    Addresses
    104.21.70.69 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.221.21 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.70.69, 172.67.221.21): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    trendyolk.com
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 13:54 UTC

    Suggest a correction

  75. txjqi.work US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by NPA 165 (information services)MX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    txjqi.work
    First seen
    2026-11-08 13:51 UTC
    Listing
    NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 13:35 UTC
    Listed
    NPA 165
    1. Observed in the NPA 165 feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-11-08 12:50 UTC to 2027-02-06 12:50 UTC
    Logged 2026-11-08 13:48 UTC in Geomys Tuscolo2027h1, entry 528,880,687
    SHA-256 06a6448487b67afd4b24776a5c7d9da1e49d3f8cf2c8257982ea00c10b08a5b2
    Public key SHA-256 00bd435f4a4f71e8d84bfa0168b460a048770373c1a490c07acc0eb9b5c010de
    Addresses
    104.21.53.112 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.212.58 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.53.112, 172.67.212.58): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    txjqi.work
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 13:54 UTC

    Suggest a correction

  76. ustinianshopping.online US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by NPA 165 (e-commerce)MX absentSPF missingDMARC quarantineRegistered 6 mo ago
    DetailsHide
    Hostname
    ustinianshopping.online
    First seen
    2026-11-08 13:51 UTC
    Listing
    NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 13:35 UTC
    Listed
    NPA 165
    1. Observed in the NPA 165 feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-11-08 12:51 UTC to 2027-02-06 12:51 UTC
    Logged 2026-11-08 13:50 UTC in IPng Networks Halloumi2027h1, entry 412,256,734
    SHA-256 5f974d3bd01a9c8a68e1e35f01ab676856335a7941ff9d77b1d0f56e88312d01
    Public key SHA-256 d18ad6802602320ea46693610d3464e180efcb10ca3fb2656749ef22fa6ce08a
    Addresses
    104.21.22.143 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.205.80 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.22.143, 172.67.205.80): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    ustinianshopping.online
    Registered
    2026-05-15 · GoDaddy.com, LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    DMARC policy p=quarantine
    Checked
    2026-11-08 14:31 UTC

    Suggest a correction

  77. www.dexscreener.com.dexscreener-app.com US · AS13335 · Cloudflare, Inc.4 addressesDEX Screener
    ListedCloudflareUnder dexscreener-app.com, listed by MetaMaskMX absentSPF missingDMARC missingRegistered 7 mo ago
    DetailsHide
    Hostname
    www.dexscreener.com.dexscreener-app.com
    First seen
    2026-11-08 13:51 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 11:58 UTC
    Listed
    MetaMask, listing dexscreener-app.com and the names under it
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-08 12:50 UTC to 2027-02-06 13:50 UTC
    Logged 2026-11-08 13:50 UTC in Google ParcelYard2027h1, entry 678,725,635
    SHA-256 13ac6440d8aae450a507caffd86e49f08bca09ef50f971d988d8d753ec80ab70
    Public key SHA-256 efac058dc122cbbf495febe1c0df743ca462e762d4f46c0679d41b55adbd2c1c
    Brand
    DEX Screener
    Addresses
    104.21.2.175 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.129.130 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3032::ac43:8182
    2606:4700:3035::6815:2af
    Cloudflare
    Cloudflare (104.21.2.175, 172.67.129.130): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    dexscreener-app.com
    Registered
    2026-04-09 · Hosting Concepts B.V. d/b/a Registrar.eu
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 08:59 UTC

    Suggest a correction

  78. api.smart-stock-ai-platform-com.financecryptoworld.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareUnder financecryptoworld.com, listed by CERT PolskaMX presentSPF ~allDMARC missingRegistered 22 mo ago
    DetailsHide
    Hostname
    api.smart-stock-ai-platform-com.financecryptoworld.com
    First seen
    2026-11-08 13:46 UTC
    Listing
    CERT Polska listed it 2026-06-12 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 12:32 UTC
    Listed
    CERT Polska, listing financecryptoworld.com and the names under it
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WR1 · precertificate
    Valid 2026-11-08 12:44 UTC to 2027-02-06 13:43 UTC
    Logged 2026-11-08 13:44 UTC in Let's Encrypt Sycamore2027h1, entry 1,049,754,559
    SHA-256 2a33ab8807e8632066762f05d937ea63ac27f41547522176e1c9889c680d166a
    Public key SHA-256 9bb8a969669df0605d13561bbe0d669bd96de12b1f32aa1bf34c40543427b384
    Addresses
    104.21.10.130 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.131.121 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.10.130, 172.67.131.121): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    financecryptoworld.com
    Registered
    2025-01-30 · MainReg Inc.
    MX
    Receives mail at mail.financecryptoworld.com
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-07 17:16 UTC

    Suggest a correction

  79. authstep-booking001.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    authstep-booking001.com
    First seen
    2026-11-08 13:46 UTC
    Listing
    CERT Polska listed it 2026-09-10 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 12:32 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-08 12:41 UTC to 2027-02-06 13:40 UTC
    Logged 2026-11-08 13:41 UTC in Google ParcelYard2027h1, entry 678,601,933
    SHA-256 9cfe18d4f4f0f823c692b77eac4bddb3fef92f4ab67f7eb98491bd38954cd631
    Public key SHA-256 049408bffd3a20625dd8ab13d9013cc6b87d75c1538ebbd18c7ed6c60aa03a4f
    Addresses
    104.21.24.117 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.218.96 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.24.117, 172.67.218.96): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    authstep-booking001.com
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 13:49 UTC

    Suggest a correction

  80. centrifuge.top US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    centrifuge.top
    First seen
    2026-11-08 13:46 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 11:58 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-08 12:46 UTC to 2027-02-06 12:46 UTC
    Logged 2026-11-08 13:45 UTC in Google ParcelYard2027h1, entry 678,651,918
    SHA-256 28cfb438f405b38d9a64a788b0f4f9d5cb4c914f68505e86f892e9cc93929b08
    Public key SHA-256 c7fe4e52602d161f89095c4beb5829f7fec6305202145e3503ba89ecbb900b8b
    Addresses
    104.21.28.200 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.147.135 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.28.200, 172.67.147.135): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    centrifuge.top
    Registered
    2026-05-15 · PDR Ltd.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 14:31 UTC

    Suggest a correction

  81. drhij.work US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by NPA 165 (information services)MX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    drhij.work
    First seen
    2026-11-08 13:46 UTC
    Listing
    NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 13:35 UTC
    Listed
    NPA 165
    1. Observed in the NPA 165 feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-11-08 12:45 UTC to 2027-02-06 12:45 UTC
    Logged 2026-11-08 13:44 UTC in Let's Encrypt Willow2027h1, entry 1,005,441,145
    SHA-256 59ca621882d4a10720c9dfecd5e961c1738d7142918099cf64f182e1e7cbc0fd
    Public key SHA-256 fc337df8a521a6acfed0b6172979f4d37b57db6e65826f1f1007666f8ba5fad1
    Addresses
    104.21.79.30 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.168.237 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.79.30, 172.67.168.237): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    drhij.work
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 13:49 UTC

    Suggest a correction

  82. gsnbh.work US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by NPA 165 (information services)MX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    gsnbh.work
    First seen
    2026-11-08 13:46 UTC
    Listing
    NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 13:35 UTC
    Listed
    NPA 165
    1. Observed in the NPA 165 feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-11-08 12:42 UTC to 2027-02-06 12:42 UTC
    Logged 2026-11-08 13:40 UTC in IPng Networks Halloumi2027h1, entry 412,154,046
    SHA-256 a0e0719d1ee25323eea749a143af191e5e56b9a131c733fa02a0a85f113d3df0
    Public key SHA-256 46ae5d6e0585b9ec6cb7641f992dfc466f746f04a4885c52f873dd9db172a388
    Addresses
    104.21.79.27 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.140.235 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.79.27, 172.67.140.235): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    gsnbh.work
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 13:49 UTC

    Suggest a correction

  83. ledgerlenses.pages.dev US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMask
    DetailsHide
    Hostname
    ledgerlenses.pages.dev
    First seen
    2026-11-08 13:46 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 11:58 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-11-08 12:44 UTC to 2027-02-06 12:44 UTC
    Logged 2026-11-08 13:43 UTC in Geomys Tuscolo2027h1, entry 528,820,811
    SHA-256 3bd79fb09ab00625e5a6b34fa8bc9ac02a0fd3e175f3a8d66be91143f05eca9b
    Public key SHA-256 3db928a240b0e6c6e6b0ca294ac804bd05a9519bf1da9260dcfdcd301022915c
    Addresses
    172.66.44.194 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.66.47.62 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (172.66.44.194, 172.66.47.62): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.

    Suggest a correction

  84. metawincasino.org US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 16 mo ago
    DetailsHide
    Hostname
    metawincasino.org
    First seen
    2026-11-08 13:46 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-08 11:57 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-08 12:43 UTC to 2027-02-06 13:41 UTC
    Logged 2026-11-08 13:43 UTC in DigiCert Wyvern2027h1, entry 454,831,886
    SHA-256 5664fe85dfd773c80ce21e24bb984abae3e8c28339445809eff60f62ef55dd69
    Public key SHA-256 596a35af9964c9a26467879a7128c0ae56735400944f1da0912ac72febb4dee3
    PhishDestroy
    Addresses
    104.21.66.140 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.204.133 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.66.140, 172.67.204.133): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    metawincasino.org
    Registered
    2025-07-13 · GoDaddy.com, LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 14:31 UTC

    Suggest a correction

  85. poducaa.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX presentSPF ~allDMARC quarantine
    DetailsHide
    Hostname
    poducaa.com
    First seen
    2026-11-08 13:46 UTC
    Listing
    CERT Polska listed it 2026-09-18 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 12:32 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-08 12:44 UTC to 2027-02-06 12:44 UTC
    Logged 2026-11-08 13:42 UTC in Google PlumbersArms2027h1, entry 678,922,608
    SHA-256 032e98509230ccfe68ac7bbd54e8ee87018fca9b969de3b759b0a5b134e7bc64
    Public key SHA-256 d4c66391a1a73907994f04d0d2ea79ad4db904c090cbead4e90c8e2494861965
    Addresses
    104.21.59.207 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.183.169 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.59.207, 172.67.183.169): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    poducaa.com
    MX
    Receives mail at mail.poducaa.com
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    DMARC policy p=quarantine
    Checked
    2026-11-08 13:49 UTC

    Suggest a correction

  86. ppulsek.click US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    ppulsek.click
    First seen
    2026-11-08 13:46 UTC
    Listing
    CERT Polska listed it 2026-05-16 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 12:32 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-11-08 12:43 UTC to 2027-02-06 12:43 UTC
    Logged 2026-11-08 13:42 UTC in DigiCert Sphinx2027h1, entry 402,470,581
    SHA-256 2725046d1451ff5910d5a184e794360bb9ef4c89dfc820e536626df58ab3d107
    Public key SHA-256 6c4b52039edabe74e152e03363072ce5305d24003661c49ca0c36a9ab930ac57
    Addresses
    104.21.13.32 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.197.162 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.13.32, 172.67.197.162): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    ppulsek.click
    Registered
    2026-05-15 · Dynadot, LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 14:31 UTC

    Suggest a correction

  87. pureluxeglow.com US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX presentSPF ~allDMARC missingRegistered 3 y ago
    DetailsHide
    Hostname
    pureluxeglow.com
    First seen
    2026-11-08 13:46 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-08 11:57 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-08 12:41 UTC to 2027-02-06 13:40 UTC
    Logged 2026-11-08 13:41 UTC in Geomys Tuscolo2027h1, entry 528,806,163
    SHA-256 b92d5137cc465270f3c14160619df926c3f4760712ae3431e5cf776f535617de
    Public key SHA-256 00bfd120a8d326cac2d9d456c99169923413ba177565c4b7b34eda0b9bba9b82
    PhishDestroy
    Addresses
    104.21.50.152 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.163.239 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.50.152, 172.67.163.239): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    pureluxeglow.com
    Registered
    2024-01-12 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Receives mail at route3.mx.cloudflare.net, route1.mx.cloudflare.net, route2.mx.cloudflare.net
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 13:49 UTC

    Suggest a correction

  88. qarbde.asia US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by NPA 165 (information services)MX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    qarbde.asia
    First seen
    2026-11-08 13:46 UTC
    Listing
    NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 13:35 UTC
    Listed
    NPA 165
    1. Observed in the NPA 165 feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-08 12:42 UTC to 2027-02-06 13:41 UTC
    Logged 2026-11-08 13:42 UTC in Geomys Tuscolo2027h1, entry 528,813,534
    SHA-256 ddf86786b58129faf748a0459368ed64c606160f28b87cbd1243d63ac8fdf177
    Public key SHA-256 110250136f07f79b754a618794653289eb0f54d350203002a628a42ff89fa3ba
    Addresses
    104.21.68.153 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.196.164 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.68.153, 172.67.196.164): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    qarbde.asia
    Registered
    2026-07-13 · Alibaba Cloud Computing Ltd. d/b/a HiChina (www.net.cn)
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 14:32 UTC

    Suggest a correction

  89. seriousfunevents.co.nz US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    seriousfunevents.co.nz
    First seen
    2026-11-08 13:46 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 11:58 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1
    Valid 2026-11-08 12:41 UTC to 2027-02-06 13:40 UTC
    Logged 2026-11-08 13:43 UTC in Google ParcelYard2027h1, entry 678,628,422
    SHA-256 2714a186e347c72e2cba36c5b4f17259643c1885b3712e3faabf48784c974c1a
    Public key SHA-256 d517cfa77c18de721ec84466422b71ce8e90b40bcbcdcd81bb2671547737e1ef
    Addresses
    104.21.28.113 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.145.226 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.28.113, 172.67.145.226): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    seriousfunevents.co.nz
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 09:35 UTC

    Suggest a correction

  90. shortenderzlot24.click US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    shortenderzlot24.click
    First seen
    2026-11-08 13:46 UTC
    Listing
    CERT Polska listed it 2026-05-20 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 12:32 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-11-08 12:44 UTC to 2027-02-06 12:44 UTC
    Logged 2026-11-08 13:43 UTC in Google ParcelYard2027h1, entry 678,622,809
    SHA-256 48a330a984e7c003660932c80b76ed99813e377f71f2ba7183fe76d90737f3e5
    Public key SHA-256 968ff1810ae4d8cd5eeca71a04d03f74061660b6180ca0f08568128529609def
    Addresses
    104.21.45.103 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.213.36 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.45.103, 172.67.213.36): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    shortenderzlot24.click
    Registered
    2026-05-15 · Global Domain Group LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 14:31 UTC

    Suggest a correction

  91. smart-stp.com US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX presentSPF -allDMARC policy noneRegistered 24 mo ago
    DetailsHide
    Hostname
    smart-stp.com
    First seen
    2026-11-08 13:46 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-08 11:57 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-08 12:43 UTC to 2027-02-06 13:41 UTC
    Logged 2026-11-08 13:43 UTC in IPng Networks Halloumi2027h1, entry 412,178,053
    SHA-256 9fca5cb0412f1b6144a37dc2ccaca303a0490c62537e94630853dc600cb8b4fd
    Public key SHA-256 1e6277840268686a4c82bed68016d1a8f2df46fd7afbb394b466bef71b292b16
    PhishDestroy
    Addresses
    104.21.86.252 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.138.221 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.86.252, 172.67.138.221): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    smart-stp.com
    Registered
    2024-11-30 · NameCheap, Inc.
    MX
    Receives mail at smartstp-com01c.mail.protection.outlook.com
    SPF
    SPF record with -all: other senders fail
    DMARC
    DMARC policy p=none: reports only
    Checked
    2026-11-08 13:49 UTC

    Suggest a correction

  92. wejscie-73.biz.id US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 59 d ago
    DetailsHide
    Hostname
    wejscie-73.biz.id
    First seen
    2026-11-08 13:46 UTC
    Listing
    CERT Polska listed it 2026-09-10 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 12:32 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-11-08 12:47 UTC to 2027-02-06 12:47 UTC
    Logged 2026-11-08 13:45 UTC in Google PlumbersArms2027h1, entry 678,967,659
    SHA-256 33a8d1814d29e12844464211cac2f9b13222bdbad4ffd01ca16d2a9e1d8d645d
    Public key SHA-256 2acef7bf250ca105d66cbeaa89a8632a2a8c8b6b7f55ea47df73b8e483e2d37c
    Addresses
    104.21.7.33 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.135.175 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.7.33, 172.67.135.175): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    wejscie-73.biz.id
    Registered
    2026-09-10 · PT Jagoan Hosting Indonesia
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 14:31 UTC

    Suggest a correction

  93. allocation-solv.xyz US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    allocation-solv.xyz
    First seen
    2026-11-08 13:41 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 11:58 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-08 12:39 UTC to 2027-02-06 12:39 UTC
    Logged 2026-11-08 13:37 UTC in Google ParcelYard2027h1, entry 678,546,423
    SHA-256 15df4570b4fc9d1a9a830e97746f2e190290d8376df7e532fbc1e73ee5826925
    Public key SHA-256 e0c68258164635cb18f40241e151316b59eb77f75d027a97ad1df8bc372a5793
    Addresses
    104.21.75.65 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.215.184 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.75.65, 172.67.215.184): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    allocation-solv.xyz
    Registered
    2026-05-14 · PDR Ltd. d/b/a PublicDomainRegistry.com
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 14:32 UTC

    Suggest a correction

  94. allocations-citrea.xyz US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    allocations-citrea.xyz
    First seen
    2026-11-08 13:41 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 11:58 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-11-08 12:39 UTC to 2027-02-06 12:39 UTC
    Logged 2026-11-08 13:38 UTC in Google ParcelYard2027h1, entry 678,559,073
    SHA-256 532db75338ab51ae51ad3ef4b15ab949682a063d6ce04459595a11e263975dfa
    Public key SHA-256 15c7b24aeab880aa93580fdc35c4ba5ba228721f0730c7febdff91f540cf1bd1
    Addresses
    104.21.60.2 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.186.161 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.60.2, 172.67.186.161): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    allocations-citrea.xyz
    Registered
    2026-05-14 · PDR Ltd. d/b/a PublicDomainRegistry.com
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 14:32 UTC

    Suggest a correction

  95. api.truenorthcapitalsoft-com-gent.financecryptoworld.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareUnder financecryptoworld.com, listed by CERT PolskaMX presentSPF ~allDMARC missingRegistered 22 mo ago
    DetailsHide
    Hostname
    api.truenorthcapitalsoft-com-gent.financecryptoworld.com
    First seen
    2026-11-08 13:41 UTC
    Listing
    CERT Polska listed it 2026-06-12 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 12:32 UTC
    Listed
    CERT Polska, listing financecryptoworld.com and the names under it
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WR1 · precertificate
    Valid 2026-11-08 12:38 UTC to 2027-02-06 13:37 UTC
    Logged 2026-11-08 13:38 UTC in DigiCert Wyvern2027h1, entry 454,790,098
    SHA-256 166a4d112f5f5651b146594e19b899b4d6a18de097646055badf03b8fb34453f
    Public key SHA-256 264e1a896010406399c61f23e853b9cf7370c6236fc01d8332e95258f2260ece
    Addresses
    104.21.10.130 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.131.121 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.10.130, 172.67.131.121): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    financecryptoworld.com
    Registered
    2025-01-30 · MainReg Inc.
    MX
    Receives mail at mail.financecryptoworld.com
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-07 17:16 UTC

    Suggest a correction

  96. join-pharosnetwork.xyz US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    join-pharosnetwork.xyz
    First seen
    2026-11-08 13:41 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 11:58 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-08 12:36 UTC to 2027-02-06 13:33 UTC
    Logged 2026-11-08 13:36 UTC in Google ParcelYard2027h1, entry 678,523,093
    SHA-256 5f519bf8312623bb3c38c541202c53ff03549642b7d9d33cffe410aaeae4e863
    Public key SHA-256 dec43576fdc35b14ec7a2b5e59d4b4c3fc918a797951b173787a8da9a883049d
    Addresses
    104.21.90.119 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.200.104 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.90.119, 172.67.200.104): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    join-pharosnetwork.xyz
    Registered
    2026-07-13 · PDR Ltd. d/b/a PublicDomainRegistry.com
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 14:32 UTC

    Suggest a correction

  97. potatoshoveltrail.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by USOMMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    potatoshoveltrail.com
    First seen
    2026-11-08 13:41 UTC
    Listing
    USOM listed it 2026-05-19 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 13:05 UTC
    Listed
    USOM
    1. Listed by USOM
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-11-08 12:41 UTC to 2027-02-06 12:41 UTC
    Logged 2026-11-08 13:39 UTC in Google PlumbersArms2027h1, entry 678,881,703
    SHA-256 35010634e93230f9a8e5aeaa1f735eae55c82cfb0203107a9c003e8ef6afe8b0
    Public key SHA-256 d39c7663efc517aa51410cc7fc9e21730644d3f6c38e0782c8700f547e9b8f46
    Addresses
    104.21.93.41 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.204.102 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.93.41, 172.67.204.102): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    potatoshoveltrail.com
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 13:44 UTC

    Suggest a correction

  98. proposals-firelight.xyz US · AS13335 · Cloudflare, Inc.2 addressesFirelight
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    proposals-firelight.xyz
    First seen
    2026-11-08 13:41 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 11:58 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-08 12:38 UTC to 2027-02-06 12:38 UTC
    Logged 2026-11-08 13:37 UTC in Google PlumbersArms2027h1, entry 678,848,723
    SHA-256 145ed98cedeef426f665f176201824014e7afc9336ee8d927e623ef8eb88addf
    Public key SHA-256 2fdae3a019b3048cd4747702b6d081a3ec9d8a21c6f8cf5ba0cefd47daeaa657
    Brand
    Firelight
    Addresses
    104.21.82.82 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.155.59 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.82.82, 172.67.155.59): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    proposals-firelight.xyz
    Registered
    2026-05-15 · Dynadot Inc
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 14:32 UTC

    Suggest a correction

  99. quantumhivehub.com US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX presentSPF ~allDMARC missingRegistered 12 mo ago
    DetailsHide
    Hostname
    quantumhivehub.com
    First seen
    2026-11-08 13:41 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-08 11:57 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-08 12:38 UTC to 2027-02-06 13:36 UTC
    Logged 2026-11-08 13:38 UTC in Let's Encrypt Sycamore2027h1, entry 1,049,623,098
    SHA-256 ddfb9af43e29b315cf12e5ec632193ff3a65fff2e2dbe86795e7480bd7eabc86
    Public key SHA-256 f9b0166384803ee93041a8126f81d24361651379cf1b6c36bb7e137b9e5f2b3a
    PhishDestroy
    Addresses
    104.21.47.174 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.149.94 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.47.174, 172.67.149.94): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    quantumhivehub.com
    Registered
    2025-11-19 · TuringSign Inc. d/b/a Cosmotown
    MX
    Receives mail at mail.quantumhivehub.com
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 13:44 UTC

    Suggest a correction

  100. sereinshopping.online US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by NPA 165 (e-commerce)MX absentSPF missingDMARC quarantineRegistered 6 mo ago
    DetailsHide
    Hostname
    sereinshopping.online
    First seen
    2026-11-08 13:41 UTC
    Listing
    NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 13:35 UTC
    Listed
    NPA 165
    1. Observed in the NPA 165 feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-11-08 12:37 UTC to 2027-02-06 12:37 UTC
    Logged 2026-11-08 13:36 UTC in IPng Networks Gouda2027h1, entry 354,476,918
    SHA-256 e26b5e882b82002a7ae64cbef14bed0e98fc9225d5cf0f0496a2fc051ad400b7
    Public key SHA-256 2e13272b33e0b72fae119a9903a48633e8f5720acfb98501142d29695e93b36d
    Addresses
    104.21.91.29 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.165.91 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.91.29, 172.67.165.91): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    sereinshopping.online
    Registered
    2026-05-15 · GoDaddy.com, LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    DMARC policy p=quarantine
    Checked
    2026-11-08 14:32 UTC

    Suggest a correction

Showing 1–100 of 2,322 hostnames.
How these findings are made

Brand spoofs: findings that impersonate one of the 1,000 most-impersonated brands. The list opens on them; All shows every finding.

Reported: a hostname in a new certificate that PhishTank or PhishDestroy reports, or that CERT Polska, MetaMask, USOM, MODA, NPA 165, JPCERT/CC, the AMF, the FSMA or BaFin lists. When a listing source names the brand imitated or a category, the finding shows it. Phishing host: a brand lookalike that resolves to an address which hosted confirmed phishing in the last 48 hours. Spamhaus DROP: a brand lookalike that resolves to an address on the Spamhaus DROP list. Same certificate: another name on a finding's certificate that resolves to an address on Spamhaus DROP. Suspicious: other names on a finding's certificate, rated high for a hosting-alias name or a lookalike on a phishing host, medium for a lookalike; they join the findings once they have listing evidence of their own. Also under Suspicious: registered domains using a brand’s name that PhishDestroy’s community list includes, rated high when they resolve to an address with no parking or holding signal, medium otherwise.

Brand labels cover the 1,000 most-impersonated brands. A name gets a brand when the brand's token starts a label or follows a hyphen, with a lure word such as "login" or "verify" for common words. Hostnames appear as plain text. How it works · Sources