Live

Live phishing findings

New certificates and domain registrations, with every hostname resolved and checked against phishing reports and bad-address lists. The newest findings, updated hourly.

Updated hourly · 2026-11-08 14:26 UTC
Certificate-log entries · 24 h
329.0M
from 84 distinct feeds
Unique certificates · 24 h
32.0M
each reviewed
Names resolved · 24 h
20.9M
15.8M with an address
Findings · 24 h
5,614
203 of 1,061 brands targeted

5,614 hostnames from the last 24 hours.

  1. santander.com.cn US · AS46844 · Sharktech5 addressesSantander
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    santander.com.cn
    First seen
    2026-11-08 13:57 UTC
    First published
    2026-10-31 13:42 UTC
    DNS
    Resolves · checked 2026-11-08 13:57 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 208.98.40.229.
    1. Phishing-host list fetched with the address
    2. Resolved to 208.98.40.229
    Brand
    Santander
    Addresses
    208.98.40.229 · United States · AS46844 SHARKTECH - Sharktech
    208.98.40.40 · United States · AS46844 SHARKTECH - Sharktech
    208.98.40.222 · United States · AS46844 SHARKTECH - Sharktech
    208.98.40.225 · United States · AS46844 SHARKTECH - Sharktech
    208.98.43.33 · United States · AS46844 SHARKTECH - Sharktech
    Domain
    santander.com.cn
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-07 14:46 UTC

    Suggest a correction

  2. basedonex-proposal.xyz US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 59 d ago
    DetailsHide
    Hostname
    basedonex-proposal.xyz
    First seen
    2026-11-08 13:56 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 11:58 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-08 12:55 UTC to 2027-02-06 13:53 UTC
    Logged 2026-11-08 13:55 UTC in IPng Networks Halloumi2027h1, entry 412,308,215
    SHA-256 033852bdcdde9fc1a1f27848984c82e32fc7662b9c64388d330a5b10ecb40e9a
    Public key SHA-256 e005c3ba12bb63d6dce3d20a7127ea2755bf831120671bd199928ea97094110f
    Addresses
    104.21.24.9 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.215.70 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.24.9, 172.67.215.70): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    basedonex-proposal.xyz
    Registered
    2026-09-10 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 14:32 UTC

    Suggest a correction

  3. bilgipath.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by USOMMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    bilgipath.com
    First seen
    2026-11-08 13:56 UTC
    Listing
    USOM listed it 2026-06-12 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 13:05 UTC
    Listed
    USOM
    1. Listed by USOM
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-08 12:52 UTC to 2027-02-06 12:52 UTC
    Logged 2026-11-08 13:51 UTC in Google ParcelYard2027h1, entry 678,739,906
    SHA-256 57654e704d5e36deccebd2d3937a913ab44ad62fb97fe98f4b26990804d711ce
    Public key SHA-256 19b50eb0f34c97966f736805896b19e91e9259b3e2f52fe458d18e24da91e47f
    Addresses
    104.21.80.4 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.172.85 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.80.4, 172.67.172.85): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    bilgipath.com
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 13:59 UTC

    Suggest a correction

  4. chat.testnet.lightchain.ai US · AS16509 · Amazon.com, Inc.2 addresses
    ReportedAmazon Web ServicesUnder lightchain.ai, reported by PhishDestroyMX presentSPF -allDMARC policy noneRegistered 24 mo ago
    DetailsHide
    Hostname
    chat.testnet.lightchain.ai
    First seen
    2026-11-08 13:56 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-08 11:57 UTC
    Reported
    PhishDestroy, listing lightchain.ai and the names under it
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR1
    Valid 2026-11-08 12:52 UTC to 2027-02-06 12:52 UTC
    Logged 2026-11-08 13:51 UTC in Google ParcelYard2027h1, entry 678,741,662
    SHA-256 7c1d8a17e1ca7a4bc0988e8b3a2874134a5d925ba40d049c5bcf8513dcd0bcfe
    Public key SHA-256 e5efd1c92b0e72a935f49914a275785e138c61aa2c513cf4e9e6707aa0d7c388
    PhishDestroy
    Addresses
    216.150.1.129 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
    216.150.16.129 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
    Amazon Web Services
    Amazon Web Services (216.150.1.129, 216.150.16.129): a cloud provider. It rents servers and addresses to its customers.
    Domain
    lightchain.ai
    Registered
    2024-11-21 · Name.com, Inc.
    MX
    Receives mail at aspmx.l.google.com, alt1.aspmx.l.google.com, alt2.aspmx.l.google.com
    SPF
    SPF record with -all: other senders fail
    DMARC
    DMARC policy p=none: reports only
    Checked
    2026-11-08 08:44 UTC

    Suggest a correction

  5. dlzcc.icu US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by NPA 165 (e-commerce)MX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    dlzcc.icu
    First seen
    2026-11-08 13:56 UTC
    Listing
    NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 13:35 UTC
    Listed
    NPA 165
    1. Observed in the NPA 165 feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1
    Valid 2026-11-08 12:53 UTC to 2027-02-06 13:51 UTC
    Logged 2026-11-08 13:53 UTC in DigiCert Wyvern2027h1, entry 454,952,214
    SHA-256 c84288fca161a3ed519a5d0afa621ebe7dd48c702c1ee41312292130ad7ee11f
    Public key SHA-256 2becb31ac770208b0062b142216848dab601fc5afac7049db232b9bb13f672d3
    Addresses
    104.21.67.90 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.219.36 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.67.90, 172.67.219.36): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    dlzcc.icu
    Registered
    2026-07-13 · Alibaba Cloud Computing Ltd. d/b/a HiChina (www.net.cn)
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 14:32 UTC

    Suggest a correction

  6. ledpd.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    ledpd.com
    First seen
    2026-11-08 13:56 UTC
    Listing
    CERT Polska listed it 2026-05-17 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 12:32 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-08 12:52 UTC to 2027-02-06 12:52 UTC
    Logged 2026-11-08 13:51 UTC in Let's Encrypt Willow2027h1, entry 1,005,626,710
    SHA-256 33905f7231f1f48c49e6836731932adf8122fffcc3b6e8b0898096170dd5e2d9
    Public key SHA-256 81c34370381603ad055a7b6792dd9a54a67f1216110979b0e6062c0d03caae13
    Addresses
    104.21.77.94 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.206.116 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.77.94, 172.67.206.116): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    ledpd.com
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 13:59 UTC

    Suggest a correction

  7. serratrigl.live US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    serratrigl.live
    First seen
    2026-11-08 13:56 UTC
    Listing
    CERT Polska listed it 2026-08-18 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 12:32 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1
    Valid 2026-09-10 11:43 UTC to 2026-12-09 12:41 UTC
    Logged 2026-11-08 13:54 UTC in DigiCert Wyvern2026h2, entry 2,212,294,934
    SHA-256 16e6af13ae3c300fa1f2956311372623ab664e528bc67ca9ddd841aa277e3ddd
    Public key SHA-256 0d5809dbc64bdb3c4c94b706c5bc8b3f40dbf926b6201ff3ecdb43e4d2abb1c5
    Addresses
    104.21.50.144 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.207.1 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.50.144, 172.67.207.1): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    serratrigl.live
    Registered
    2026-07-13 · NameCheap, Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 14:32 UTC

    Suggest a correction

  8. stock-ledger-board.pages.dev US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMask
    DetailsHide
    Hostname
    stock-ledger-board.pages.dev
    First seen
    2026-11-08 13:56 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 11:58 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-08 12:55 UTC to 2027-02-06 13:53 UTC
    Logged 2026-11-08 13:55 UTC in Google ParcelYard2027h1, entry 678,794,109
    SHA-256 5e877f3ce64b02f6fec6e9169d24f64232f41918d8d99967864bdfb66b01db38
    Public key SHA-256 0e45d328faa48a2336a388c409efc86c95653c582ae8b091a490ae3c59432030
    Addresses
    172.66.45.7 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.66.46.249 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (172.66.45.7, 172.66.46.249): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.

    Suggest a correction

  9. strategicinsightjournal.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    strategicinsightjournal.com
    First seen
    2026-11-08 13:56 UTC
    Listing
    CERT Polska listed it 2026-07-13 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 12:32 UTC
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-08 11:57 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-08 12:52 UTC to 2027-02-06 13:50 UTC
    Logged 2026-11-08 13:52 UTC in Google PlumbersArms2027h1, entry 679,062,544
    SHA-256 35a19e49e239db276c549d4bb17e9fd586042512ce3babb9d6a6181c69b731ac
    Public key SHA-256 54e1796d8f96fa92c987cf5f7a5334d031c52548bead14214fe3087f144cb22f
    Addresses
    104.21.14.118 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.133.194 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.14.118, 172.67.133.194): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    strategicinsightjournal.com
    Registered
    2026-07-13 · NameCheap, Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 13:59 UTC

    Suggest a correction

  10. www.rvckj.com US · AS18186 · Nebula Global LLCSaison Card
    ListedListed by JPCERT/CC as imitating SAISON CARDMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    www.rvckj.com
    First seen
    2026-11-08 13:56 UTC
    Listing
    JPCERT/CC confirmed it 2026-06-01 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 14:12 UTC
    Listed
    JPCERT/CC
    1. Confirmed by JPCERT/CC
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-11-08 12:53 UTC to 2027-02-06 12:53 UTC
    Logged 2026-11-08 13:52 UTC in IPng Networks Gouda2027h1, entry 354,583,959
    SHA-256 1cd4b9cdaf2c1bd71e68f59a351c0f88d7848a0b9197739c6fc769311cce4925
    Public key SHA-256 1605359ccf12c3a57341129e49ec659ec95a278cfe8fba9ad05d4bc84e5ab335
    Brand
    Saison Card
    Addresses
    207.56.106.53 · United States · AS18186 NEBULA-GLOBAL - Nebula Global LLC
    Domain
    rvckj.com
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 13:59 UTC

    Suggest a correction

  11. xa90p.net US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX presentSPF missingDMARC missingRegistered 8 mo ago
    DetailsHide
    Hostname
    xa90p.net
    First seen
    2026-11-08 13:56 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-08 11:57 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-08 12:57 UTC to 2027-02-06 12:57 UTC
    Logged 2026-11-08 13:55 UTC in Google PlumbersArms2027h1, entry 679,109,849
    SHA-256 6965a6cce5a668856314b9e732e1e89b0dc3c8d72bcc62f61d403b0f433a942b
    Public key SHA-256 2607ac1aba0cc2f8eb8ca9595e6e942f696ffb2fe89775965cf9815f38733d70
    PhishDestroy
    Addresses
    104.21.83.254 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.184.5 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.83.254, 172.67.184.5): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    xa90p.net
    Registered
    2026-03-16 · Internet Domain Service BS Corp
    MX
    Receives mail at _dc-mx.f9eded9b424b.xa90p.net
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 13:59 UTC

    Suggest a correction

  12. zizaz.work US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by NPA 165 (information services)MX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    zizaz.work
    First seen
    2026-11-08 13:56 UTC
    Listing
    NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 13:35 UTC
    Listed
    NPA 165
    1. Observed in the NPA 165 feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-08 12:54 UTC to 2027-02-06 12:54 UTC
    Logged 2026-11-08 13:53 UTC in Let's Encrypt Sycamore2027h1, entry 1,049,972,108
    SHA-256 8dabb47cf49115309064f24d8ba0dd43fdb83b4fdba4445c1d920f0b5246addb
    Public key SHA-256 5fca612d670e28f10e4c218ae50ee50475a944c04c0c55815c81aa95b18d7215
    Addresses
    104.21.4.68 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.154.18 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.4.68, 172.67.154.18): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    zizaz.work
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 13:59 UTC

    Suggest a correction

  13. webmail.luminusgroup.com.bd DE · AS24940 · HETZNER-AS Hetzner Online G…Luminus
    Phishing hostHetznerAddress hosted confirmed phishing in the last 48 hMX presentSPF ~allDMARC policy none
    DetailsHide
    Hostname
    webmail.luminusgroup.com.bd
    First seen
    2026-11-08 13:55 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 65.108.79.152.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 65.108.79.152
    Certificate
    Issued by YR1
    Valid 2026-11-08 12:51 UTC to 2027-02-06 12:51 UTC
    Logged 2026-11-08 13:50 UTC in Google ParcelYard2027h1, entry 678,724,974
    SHA-256 c0a962d2ab54ec924380d1de8a9a36534851a5f750b42b3607b32cb3b09cd5d0
    Public key SHA-256 0f2985bb4eb389e13ef773d70b9b3dc3d7f2de1957df4ff6666335a32c0d500f
    Brand
    Luminus
    Addresses
    65.108.79.152 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
    Hetzner
    Hetzner (65.108.79.152): a cloud provider. It rents servers and addresses to its customers.
    Domain
    luminusgroup.com.bd
    MX
    Receives mail at luminusgroup.com.bd
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    DMARC policy p=none: reports only
    Checked
    2026-11-07 19:34 UTC

    Suggest a correction

  14. cpcontacts.luminusgroup.com.bd DE · AS24940 · HETZNER-AS Hetzner Online G…Luminus
    Phishing hostHetznerAddress hosted confirmed phishing in the last 48 hMX presentSPF ~allDMARC policy none
    DetailsHide
    Hostname
    cpcontacts.luminusgroup.com.bd
    First seen
    2026-11-08 13:55 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 65.108.79.152.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 65.108.79.152
    Certificate
    Issued by YR1
    Valid 2026-11-08 12:51 UTC to 2027-02-06 12:51 UTC
    Logged 2026-11-08 13:50 UTC in Google ParcelYard2027h1, entry 678,724,974
    SHA-256 c0a962d2ab54ec924380d1de8a9a36534851a5f750b42b3607b32cb3b09cd5d0
    Public key SHA-256 0f2985bb4eb389e13ef773d70b9b3dc3d7f2de1957df4ff6666335a32c0d500f
    Brand
    Luminus
    Addresses
    65.108.79.152 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
    Hetzner
    Hetzner (65.108.79.152): a cloud provider. It rents servers and addresses to its customers.
    Domain
    luminusgroup.com.bd
    MX
    Receives mail at luminusgroup.com.bd
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    DMARC policy p=none: reports only
    Checked
    2026-11-07 19:34 UTC

    Suggest a correction

  15. api.major-fund-pro-tech-com.financecryptoworld.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareUnder financecryptoworld.com, listed by CERT PolskaMX presentSPF ~allDMARC missingRegistered 22 mo ago
    DetailsHide
    Hostname
    api.major-fund-pro-tech-com.financecryptoworld.com
    First seen
    2026-11-08 13:51 UTC
    Listing
    CERT Polska listed it 2026-06-12 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 12:32 UTC
    Listed
    CERT Polska, listing financecryptoworld.com and the names under it
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WR1 · precertificate
    Valid 2026-11-08 12:50 UTC to 2027-02-06 13:47 UTC
    Logged 2026-11-08 13:50 UTC in Google PlumbersArms2027h1, entry 679,036,481
    SHA-256 e201e5f3d0707bec43e56307e70f880c018d641e596db66ff682690099387ccb
    Public key SHA-256 dbbc1ed76b95e863fc7459f15e484d50b27aff6c237a9ac92de3b8fa6962f1a7
    Addresses
    104.21.10.130 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.131.121 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.10.130, 172.67.131.121): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    financecryptoworld.com
    Registered
    2025-01-30 · MainReg Inc.
    MX
    Receives mail at mail.financecryptoworld.com
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-07 17:16 UTC

    Suggest a correction

  16. check-x.win
    ListedListed by MetaMaskMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    check-x.win
    First seen
    2026-11-08 13:51 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 11:58 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-11-08 12:51 UTC to 2027-02-06 12:51 UTC
    Logged 2026-11-08 13:50 UTC in IPng Networks Halloumi2027h1, entry 412,256,290
    SHA-256 af723480245db5a3a90a835fbc2bb2782eb428fd91d4dd8baad8d655686a1203
    Public key SHA-256 6bb505e4c277594b914cd903e7dd756de97c669483245db9b7e5ccef61c467c5
    Domain
    check-x.win
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 13:54 UTC

    Suggest a correction

  17. d4jz0jgtd8t8vv3a.9mtzksal0p7ey7fu.gatewaylearning.ezgateway.net FR · AS16276 · OVH OVH SAS
    ListedOVHUnder ezgateway.net, listed by USOMMX absentSPF -allDMARC rejectRegistered 7 mo ago
    DetailsHide
    Hostname
    d4jz0jgtd8t8vv3a.9mtzksal0p7ey7fu.gatewaylearning.ezgateway.net
    First seen
    2026-11-08 13:51 UTC
    Listing
    USOM listed it 2026-08-21 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 13:05 UTC
    Listed
    USOM, listing ezgateway.net and the names under it
    1. Listed by USOM
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-08 12:49 UTC to 2027-02-06 12:49 UTC
    Logged 2026-11-08 13:48 UTC in Google ParcelYard2027h1, entry 678,692,638
    SHA-256 02ef30ce5ac464bc5b8a7278bbc34d3790c6cddc7fc4e8259470677b8595044f
    Public key SHA-256 832706c8c0f92d4951ae33b13ad0dc6fa3c2ead1e62904d8fe48f9d9ab655acd
    Addresses
    15.204.116.29 · France · AS16276 OVH OVH SAS · OVH (cloud provider)
    OVH
    OVH (15.204.116.29): a cloud provider. It rents servers and addresses to its customers.
    Domain
    ezgateway.net
    Registered
    2026-04-07 · Dynu Systems Incorporated
    MX
    Publishes no mail exchanger
    SPF
    SPF record with -all: other senders fail
    DMARC
    DMARC policy p=reject
    Checked
    2026-11-07 17:16 UTC

    Suggest a correction

  18. defy.vu US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    defy.vu
    First seen
    2026-11-08 13:51 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-08 11:57 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-11-08 12:51 UTC to 2027-02-06 12:51 UTC
    Logged 2026-11-08 13:50 UTC in Geomys Tuscolo2027h1, entry 528,894,969
    SHA-256 1ca652eafbe4091b96fe320990173c180e44840ce8ba286213b6cef050681923
    Public key SHA-256 3b1ef7d44fb65275dfc256f4f13fef62ac8f4f91365de65a2a00c3bd85a156f5
    PhishDestroy
    Addresses
    104.21.42.102 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.204.247 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.42.102, 172.67.204.247): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    defy.vu
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 13:54 UTC

    Suggest a correction

  19. digpoint.icu US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by USOMMX absentSPF missingDMARC missingRegistered 12 mo ago
    DetailsHide
    Hostname
    digpoint.icu
    First seen
    2026-11-08 13:51 UTC
    Listing
    USOM listed it 2026-06-30 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 13:05 UTC
    Listed
    USOM
    1. Listed by USOM
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1
    Valid 2026-11-08 12:49 UTC to 2027-02-06 13:48 UTC
    Logged 2026-11-08 13:49 UTC in DigiCert Wyvern2027h1, entry 454,906,030
    SHA-256 0545ede11c175ba4390f98a79214d8e2cc794d8733efccb2b43af7ff771583af
    Public key SHA-256 d967f2f6760858c5072bdc907aa67f283a3c3c5c963a2871773e80f657924954
    Addresses
    104.21.56.151 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.152.191 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.56.151, 172.67.152.191): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    digpoint.icu
    Registered
    2025-11-17 · Dynadot Inc
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 14:32 UTC

    Suggest a correction

  20. hazinesorgu.org US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by USOMMX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    hazinesorgu.org
    First seen
    2026-11-08 13:51 UTC
    Listing
    USOM listed it 2026-07-14 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 13:05 UTC
    Listed
    USOM
    1. Listed by USOM
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1
    Valid 2026-11-08 12:46 UTC to 2027-02-06 13:44 UTC
    Logged 2026-11-08 13:46 UTC in Sectigo Elephant2027h1, entry 780,521,125
    SHA-256 2af9377b9d08af3c840bceabfcc01e675660b5ea5065c32e2e3ca83e30306600
    Public key SHA-256 85878dcc9240e1b95b0632dd3686e5f2fa60ac832af2c3c1f120d95709d4bab7
    Addresses
    104.21.25.157 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.134.91 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.25.157, 172.67.134.91): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    hazinesorgu.org
    Registered
    2026-07-13 · NameSilo, LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 14:31 UTC

    Suggest a correction

  21. hzkqn.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    hzkqn.com
    First seen
    2026-11-08 13:51 UTC
    Listing
    CERT Polska listed it 2026-05-19 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 12:32 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-11-08 12:51 UTC to 2027-02-06 12:51 UTC
    Logged 2026-11-08 13:49 UTC in IPng Networks Halloumi2027h1, entry 412,250,679
    SHA-256 330bd153ab7328dedcc4f9a66d624cdf97b78e4a103e408b60739b5123661874
    Public key SHA-256 88c4917dc262f2fab5b6968f86b6ed16458a85272fd46fabf5a450e31ffa3507
    Addresses
    104.21.58.143 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.160.92 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.58.143, 172.67.160.92): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    hzkqn.com
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 13:54 UTC

    Suggest a correction

  22. mgxusd.co US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by NPA 165 (finance and insurance)MX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    mgxusd.co
    First seen
    2026-11-08 13:51 UTC
    Listing
    NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 13:35 UTC
    Listed
    NPA 165
    1. Observed in the NPA 165 feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-08 12:50 UTC to 2027-02-06 12:50 UTC
    Logged 2026-11-08 13:48 UTC in Google PlumbersArms2027h1, entry 679,010,152
    SHA-256 7a87b96ae9f5502c56406c13dd0c432efa56015cf8c4f7a88eb04f48b385c166
    Public key SHA-256 2c6f08e7e691b62b2ffda69915ba8d58ad99e469a6f34dc2d9c93041938507b2
    Addresses
    104.21.26.140 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.136.110 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.26.140, 172.67.136.110): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    mgxusd.co
    Registered
    2026-05-15 · Dynadot Inc
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 14:31 UTC

    Suggest a correction

  23. moonwell.site US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 59 d ago
    DetailsHide
    Hostname
    moonwell.site
    First seen
    2026-11-08 13:51 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 11:58 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-08 12:51 UTC to 2027-02-06 12:51 UTC
    Logged 2026-11-08 13:49 UTC in Sectigo Statue2027h1, entry 94,541,245
    SHA-256 3620351a86db421661bbc272573f184d2bacdc2dcebc9403f415e17a98c425d6
    Public key SHA-256 c4dab8baba2c93ac73c0f193b939503f24422c8e6c53fc8703581ff516da3274
    Addresses
    104.21.27.168 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.169.147 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.27.168, 172.67.169.147): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    moonwell.site
    Registered
    2026-09-10 · Dynadot Inc
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 14:31 UTC

    Suggest a correction

  24. omni-v3.net
    ListedListed by MetaMaskMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    omni-v3.net
    First seen
    2026-11-08 13:51 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 11:58 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-11-08 12:51 UTC to 2027-02-06 12:51 UTC
    Logged 2026-11-08 13:49 UTC in Google ParcelYard2027h1, entry 678,713,858
    SHA-256 7e2f8ecad1f3adea537e988d6ddcc180b05f41c31e81622ddc323b45edfb8746
    Public key SHA-256 7d606ba54509a5076c72067368bfc8dafd467ecdbf75ad42686112231ede3943
    Domain
    omni-v3.net
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 13:54 UTC

    Suggest a correction

  25. sgesss.site US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by NPA 165 (e-commerce)MX absentSPF missingDMARC quarantineRegistered 4 mo ago
    DetailsHide
    Hostname
    sgesss.site
    First seen
    2026-11-08 13:51 UTC
    Listing
    NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 13:35 UTC
    Listed
    NPA 165
    1. Observed in the NPA 165 feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1
    Valid 2026-09-10 10:58 UTC to 2026-12-09 11:58 UTC
    Logged 2026-11-08 13:46 UTC in DigiCert Wyvern2026h2, entry 2,212,280,009
    SHA-256 6bae4883dc8206e78c424c337b3ed51dfd50e61bfab14123465a570342b48cb8
    Public key SHA-256 4352eb9b587e133d408a0c012f542957b88ab96223c0734263eb08727a2ce775
    Addresses
    104.21.26.234 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.168.150 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.26.234, 172.67.168.150): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    sgesss.site
    Registered
    2026-07-13 · GoDaddy.com, LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    DMARC policy p=quarantine
    Checked
    2026-11-08 14:31 UTC

    Suggest a correction

  26. t6nskrrmyuq4s0gs.kqiovdce.tczglrpw.gatewaylearning.ezgateway.net FR · AS16276 · OVH OVH SAS
    ListedOVHUnder ezgateway.net, listed by USOMMX absentSPF -allDMARC rejectRegistered 7 mo ago
    DetailsHide
    Hostname
    t6nskrrmyuq4s0gs.kqiovdce.tczglrpw.gatewaylearning.ezgateway.net
    First seen
    2026-11-08 13:51 UTC
    Listing
    USOM listed it 2026-08-21 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 13:05 UTC
    Listed
    USOM, listing ezgateway.net and the names under it
    1. Listed by USOM
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-11-08 12:48 UTC to 2027-02-06 12:48 UTC
    Logged 2026-11-08 13:46 UTC in IPng Networks Halloumi2027h1, entry 412,216,717
    SHA-256 667c4db572c7d3d130138b181ef74033a237a8e0920ad88f25d3c55ec737d576
    Public key SHA-256 9cb28cf2546f377e99bdd3849c061a531d255e7d15671fffb42e94a0e91514ac
    Addresses
    15.204.116.29 · France · AS16276 OVH OVH SAS · OVH (cloud provider)
    OVH
    OVH (15.204.116.29): a cloud provider. It rents servers and addresses to its customers.
    Domain
    ezgateway.net
    Registered
    2026-04-07 · Dynu Systems Incorporated
    MX
    Publishes no mail exchanger
    SPF
    SPF record with -all: other senders fail
    DMARC
    DMARC policy p=reject
    Checked
    2026-11-07 17:16 UTC

    Suggest a correction

  27. trendyolk.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by USOMMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    trendyolk.com
    First seen
    2026-11-08 13:51 UTC
    Listing
    USOM listed it 2026-11-02 · still listed at the last successful feed check 2026-11-08 13:05 UTC
    Listed
    USOM
    1. Listed by USOM
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-11-08 12:47 UTC to 2027-02-06 12:47 UTC
    Logged 2026-11-08 13:46 UTC in Let's Encrypt Sycamore2027h1, entry 1,049,789,486
    SHA-256 88a40ced641cc848624b6eb3f3ae751c796b1582d13f2c4dfb750d4e6e792681
    Public key SHA-256 78c775b0317fd82554a645920eabb845c0c591706366ebc6a1441cca1d762043
    Addresses
    104.21.70.69 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.221.21 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.70.69, 172.67.221.21): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    trendyolk.com
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 13:54 UTC

    Suggest a correction

  28. txjqi.work US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by NPA 165 (information services)MX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    txjqi.work
    First seen
    2026-11-08 13:51 UTC
    Listing
    NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 13:35 UTC
    Listed
    NPA 165
    1. Observed in the NPA 165 feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-11-08 12:50 UTC to 2027-02-06 12:50 UTC
    Logged 2026-11-08 13:48 UTC in Geomys Tuscolo2027h1, entry 528,880,687
    SHA-256 06a6448487b67afd4b24776a5c7d9da1e49d3f8cf2c8257982ea00c10b08a5b2
    Public key SHA-256 00bd435f4a4f71e8d84bfa0168b460a048770373c1a490c07acc0eb9b5c010de
    Addresses
    104.21.53.112 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.212.58 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.53.112, 172.67.212.58): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    txjqi.work
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 13:54 UTC

    Suggest a correction

  29. ustinianshopping.online US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by NPA 165 (e-commerce)MX absentSPF missingDMARC quarantineRegistered 6 mo ago
    DetailsHide
    Hostname
    ustinianshopping.online
    First seen
    2026-11-08 13:51 UTC
    Listing
    NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 13:35 UTC
    Listed
    NPA 165
    1. Observed in the NPA 165 feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-11-08 12:51 UTC to 2027-02-06 12:51 UTC
    Logged 2026-11-08 13:50 UTC in IPng Networks Halloumi2027h1, entry 412,256,734
    SHA-256 5f974d3bd01a9c8a68e1e35f01ab676856335a7941ff9d77b1d0f56e88312d01
    Public key SHA-256 d18ad6802602320ea46693610d3464e180efcb10ca3fb2656749ef22fa6ce08a
    Addresses
    104.21.22.143 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.205.80 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.22.143, 172.67.205.80): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    ustinianshopping.online
    Registered
    2026-05-15 · GoDaddy.com, LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    DMARC policy p=quarantine
    Checked
    2026-11-08 14:31 UTC

    Suggest a correction

  30. www.2f40n5a3610nvvib.tczglrpw.gatewaylearning.ezgateway.net FR · AS16276 · OVH OVH SAS
    ListedOVHUnder ezgateway.net, listed by USOMMX absentSPF -allDMARC rejectRegistered 7 mo ago
    DetailsHide
    Hostname
    www.2f40n5a3610nvvib.tczglrpw.gatewaylearning.ezgateway.net
    First seen
    2026-11-08 13:51 UTC
    Listing
    USOM listed it 2026-08-21 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 13:05 UTC
    Listed
    USOM, listing ezgateway.net and the names under it
    1. Listed by USOM
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-08 12:48 UTC to 2027-02-06 12:48 UTC
    Logged 2026-11-08 13:46 UTC in IPng Networks Gouda2027h1, entry 354,546,159
    SHA-256 633024ccfbd583fdf83c017a6695f51a888aa075b71bdcd4a990ed18a1d42c5d
    Public key SHA-256 adc63e69009eb182d549927c313ac7d7c075aa1f9d9b5b8e77f966208a7d4ce4
    Addresses
    15.204.116.29 · France · AS16276 OVH OVH SAS · OVH (cloud provider)
    OVH
    OVH (15.204.116.29): a cloud provider. It rents servers and addresses to its customers.
    Domain
    ezgateway.net
    Registered
    2026-04-07 · Dynu Systems Incorporated
    MX
    Publishes no mail exchanger
    SPF
    SPF record with -all: other senders fail
    DMARC
    DMARC policy p=reject
    Checked
    2026-11-07 17:16 UTC

    Suggest a correction

  31. www.dexscreener.com.dexscreener-app.com US · AS13335 · Cloudflare, Inc.4 addressesDEX Screener
    ListedCloudflareUnder dexscreener-app.com, listed by MetaMaskMX absentSPF missingDMARC missingRegistered 7 mo ago
    DetailsHide
    Hostname
    www.dexscreener.com.dexscreener-app.com
    First seen
    2026-11-08 13:51 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 11:58 UTC
    Listed
    MetaMask, listing dexscreener-app.com and the names under it
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-08 12:50 UTC to 2027-02-06 13:50 UTC
    Logged 2026-11-08 13:50 UTC in Google ParcelYard2027h1, entry 678,725,635
    SHA-256 13ac6440d8aae450a507caffd86e49f08bca09ef50f971d988d8d753ec80ab70
    Public key SHA-256 efac058dc122cbbf495febe1c0df743ca462e762d4f46c0679d41b55adbd2c1c
    Brand
    DEX Screener
    Addresses
    104.21.2.175 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.129.130 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3032::ac43:8182
    2606:4700:3035::6815:2af
    Cloudflare
    Cloudflare (104.21.2.175, 172.67.129.130): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    dexscreener-app.com
    Registered
    2026-04-09 · Hosting Concepts B.V. d/b/a Registrar.eu
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 08:59 UTC

    Suggest a correction

  32. www.exhjvyfb.wlegudvj.kpjabzxt.eklvdour.kqiovdce.tczglrpw.gatewaylearning.ezgateway.net FR · AS16276 · OVH OVH SAS
    ListedOVHUnder ezgateway.net, listed by USOMMX absentSPF -allDMARC rejectRegistered 7 mo ago
    DetailsHide
    Hostname
    www.exhjvyfb.wlegudvj.kpjabzxt.eklvdour.kqiovdce.tczglrpw.gatewaylearning.ezgateway.net
    First seen
    2026-11-08 13:51 UTC
    Listing
    USOM listed it 2026-08-21 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 13:05 UTC
    Listed
    USOM, listing ezgateway.net and the names under it
    1. Listed by USOM
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-08 12:48 UTC to 2027-02-06 12:48 UTC
    Logged 2026-11-08 13:46 UTC in DigiCert Wyvern2027h1, entry 454,874,039
    SHA-256 b709ef00e4f9c85f3e2d7abef4fa8d2ddf4b1a2053dd45edd9d13d6f8f0c335e
    Public key SHA-256 7cb55c467f063f5de806ea26d6a0ceacd66675e7273f8c989a1353171856a005
    Addresses
    15.204.116.29 · France · AS16276 OVH OVH SAS · OVH (cloud provider)
    OVH
    OVH (15.204.116.29): a cloud provider. It rents servers and addresses to its customers.
    Domain
    ezgateway.net
    Registered
    2026-04-07 · Dynu Systems Incorporated
    MX
    Publishes no mail exchanger
    SPF
    SPF record with -all: other senders fail
    DMARC
    DMARC policy p=reject
    Checked
    2026-11-07 17:16 UTC

    Suggest a correction

  33. api.smart-stock-ai-platform-com.financecryptoworld.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareUnder financecryptoworld.com, listed by CERT PolskaMX presentSPF ~allDMARC missingRegistered 22 mo ago
    DetailsHide
    Hostname
    api.smart-stock-ai-platform-com.financecryptoworld.com
    First seen
    2026-11-08 13:46 UTC
    Listing
    CERT Polska listed it 2026-06-12 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 12:32 UTC
    Listed
    CERT Polska, listing financecryptoworld.com and the names under it
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WR1 · precertificate
    Valid 2026-11-08 12:44 UTC to 2027-02-06 13:43 UTC
    Logged 2026-11-08 13:44 UTC in Let's Encrypt Sycamore2027h1, entry 1,049,754,559
    SHA-256 2a33ab8807e8632066762f05d937ea63ac27f41547522176e1c9889c680d166a
    Public key SHA-256 9bb8a969669df0605d13561bbe0d669bd96de12b1f32aa1bf34c40543427b384
    Addresses
    104.21.10.130 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.131.121 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.10.130, 172.67.131.121): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    financecryptoworld.com
    Registered
    2025-01-30 · MainReg Inc.
    MX
    Receives mail at mail.financecryptoworld.com
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-07 17:16 UTC

    Suggest a correction

  34. authstep-booking001.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    authstep-booking001.com
    First seen
    2026-11-08 13:46 UTC
    Listing
    CERT Polska listed it 2026-09-10 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 12:32 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-08 12:41 UTC to 2027-02-06 13:40 UTC
    Logged 2026-11-08 13:41 UTC in Google ParcelYard2027h1, entry 678,601,933
    SHA-256 9cfe18d4f4f0f823c692b77eac4bddb3fef92f4ab67f7eb98491bd38954cd631
    Public key SHA-256 049408bffd3a20625dd8ab13d9013cc6b87d75c1538ebbd18c7ed6c60aa03a4f
    Addresses
    104.21.24.117 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.218.96 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.24.117, 172.67.218.96): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    authstep-booking001.com
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 13:49 UTC

    Suggest a correction

  35. centrifuge.top US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    centrifuge.top
    First seen
    2026-11-08 13:46 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 11:58 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-08 12:46 UTC to 2027-02-06 12:46 UTC
    Logged 2026-11-08 13:45 UTC in Google ParcelYard2027h1, entry 678,651,918
    SHA-256 28cfb438f405b38d9a64a788b0f4f9d5cb4c914f68505e86f892e9cc93929b08
    Public key SHA-256 c7fe4e52602d161f89095c4beb5829f7fec6305202145e3503ba89ecbb900b8b
    Addresses
    104.21.28.200 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.147.135 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.28.200, 172.67.147.135): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    centrifuge.top
    Registered
    2026-05-15 · PDR Ltd.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 14:31 UTC

    Suggest a correction

  36. drhij.work US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by NPA 165 (information services)MX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    drhij.work
    First seen
    2026-11-08 13:46 UTC
    Listing
    NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 13:35 UTC
    Listed
    NPA 165
    1. Observed in the NPA 165 feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-11-08 12:45 UTC to 2027-02-06 12:45 UTC
    Logged 2026-11-08 13:44 UTC in Let's Encrypt Willow2027h1, entry 1,005,441,145
    SHA-256 59ca621882d4a10720c9dfecd5e961c1738d7142918099cf64f182e1e7cbc0fd
    Public key SHA-256 fc337df8a521a6acfed0b6172979f4d37b57db6e65826f1f1007666f8ba5fad1
    Addresses
    104.21.79.30 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.168.237 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.79.30, 172.67.168.237): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    drhij.work
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 13:49 UTC

    Suggest a correction

  37. gsnbh.work US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by NPA 165 (information services)MX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    gsnbh.work
    First seen
    2026-11-08 13:46 UTC
    Listing
    NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 13:35 UTC
    Listed
    NPA 165
    1. Observed in the NPA 165 feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-11-08 12:42 UTC to 2027-02-06 12:42 UTC
    Logged 2026-11-08 13:40 UTC in IPng Networks Halloumi2027h1, entry 412,154,046
    SHA-256 a0e0719d1ee25323eea749a143af191e5e56b9a131c733fa02a0a85f113d3df0
    Public key SHA-256 46ae5d6e0585b9ec6cb7641f992dfc466f746f04a4885c52f873dd9db172a388
    Addresses
    104.21.79.27 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.140.235 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.79.27, 172.67.140.235): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    gsnbh.work
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 13:49 UTC

    Suggest a correction

  38. ledgerlenses.pages.dev US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMask
    DetailsHide
    Hostname
    ledgerlenses.pages.dev
    First seen
    2026-11-08 13:46 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 11:58 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-11-08 12:44 UTC to 2027-02-06 12:44 UTC
    Logged 2026-11-08 13:43 UTC in Geomys Tuscolo2027h1, entry 528,820,811
    SHA-256 3bd79fb09ab00625e5a6b34fa8bc9ac02a0fd3e175f3a8d66be91143f05eca9b
    Public key SHA-256 3db928a240b0e6c6e6b0ca294ac804bd05a9519bf1da9260dcfdcd301022915c
    Addresses
    172.66.44.194 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.66.47.62 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (172.66.44.194, 172.66.47.62): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.

    Suggest a correction

  39. metawincasino.org US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 16 mo ago
    DetailsHide
    Hostname
    metawincasino.org
    First seen
    2026-11-08 13:46 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-08 11:57 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-08 12:43 UTC to 2027-02-06 13:41 UTC
    Logged 2026-11-08 13:43 UTC in DigiCert Wyvern2027h1, entry 454,831,886
    SHA-256 5664fe85dfd773c80ce21e24bb984abae3e8c28339445809eff60f62ef55dd69
    Public key SHA-256 596a35af9964c9a26467879a7128c0ae56735400944f1da0912ac72febb4dee3
    PhishDestroy
    Addresses
    104.21.66.140 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.204.133 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.66.140, 172.67.204.133): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    metawincasino.org
    Registered
    2025-07-13 · GoDaddy.com, LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 14:31 UTC

    Suggest a correction

  40. panel.cryptoxrp.org VG · AS40034 · Confluence Networks Inc
    ReportedParking page · Confluence NetworksUnder cryptoxrp.org, reported by PhishDestroyMX absentSPF missingDMARC missingRegistered 22 mo ago
    DetailsHide
    Hostname
    panel.cryptoxrp.org
    First seen
    2026-11-08 13:46 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-08 11:57 UTC
    Reported
    PhishDestroy, listing cryptoxrp.org and the names under it
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by ZeroSSL ECC DV SSL CA 2 · precertificate
    Valid 2026-11-08 00:00 UTC to 2027-02-06 23:59 UTC
    Logged 2026-11-08 13:43 UTC in Geomys Tuscolo2027h1, entry 528,823,269
    SHA-256 16c8a1ba5d6282bed51c4110bce386ce137445a286c4f8af5a259a2cbdf2515d
    Public key SHA-256 a1caa9126f351f5144361ddaea5aa902ed9cc1319c60cbeb1d5040e57cd80eb1
    PhishDestroy
    Addresses
    208.91.197.27 · British Virgin Islands · AS40034 CONFLUENCE-NETWORK-INC - Confluence Networks Inc · Confluence Networks (parking page)
    Parking page · Confluence Networks
    Confluence Networks (208.91.197.27): a parking service. It answers for names that are typically for sale or unused.
    Domain
    cryptoxrp.org
    Registered
    2025-01-06 · Network Solutions, LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 11:06 UTC

    Suggest a correction

  41. poducaa.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX presentSPF ~allDMARC quarantine
    DetailsHide
    Hostname
    poducaa.com
    First seen
    2026-11-08 13:46 UTC
    Listing
    CERT Polska listed it 2026-09-18 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 12:32 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-08 12:44 UTC to 2027-02-06 12:44 UTC
    Logged 2026-11-08 13:42 UTC in Google PlumbersArms2027h1, entry 678,922,608
    SHA-256 032e98509230ccfe68ac7bbd54e8ee87018fca9b969de3b759b0a5b134e7bc64
    Public key SHA-256 d4c66391a1a73907994f04d0d2ea79ad4db904c090cbead4e90c8e2494861965
    Addresses
    104.21.59.207 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.183.169 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.59.207, 172.67.183.169): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    poducaa.com
    MX
    Receives mail at mail.poducaa.com
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    DMARC policy p=quarantine
    Checked
    2026-11-08 13:49 UTC

    Suggest a correction

  42. ppulsek.click US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    ppulsek.click
    First seen
    2026-11-08 13:46 UTC
    Listing
    CERT Polska listed it 2026-05-16 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 12:32 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-11-08 12:43 UTC to 2027-02-06 12:43 UTC
    Logged 2026-11-08 13:42 UTC in DigiCert Sphinx2027h1, entry 402,470,581
    SHA-256 2725046d1451ff5910d5a184e794360bb9ef4c89dfc820e536626df58ab3d107
    Public key SHA-256 6c4b52039edabe74e152e03363072ce5305d24003661c49ca0c36a9ab930ac57
    Addresses
    104.21.13.32 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.197.162 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.13.32, 172.67.197.162): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    ppulsek.click
    Registered
    2026-05-15 · Dynadot, LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 14:31 UTC

    Suggest a correction

  43. pureluxeglow.com US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX presentSPF ~allDMARC missingRegistered 3 y ago
    DetailsHide
    Hostname
    pureluxeglow.com
    First seen
    2026-11-08 13:46 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-08 11:57 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-08 12:41 UTC to 2027-02-06 13:40 UTC
    Logged 2026-11-08 13:41 UTC in Geomys Tuscolo2027h1, entry 528,806,163
    SHA-256 b92d5137cc465270f3c14160619df926c3f4760712ae3431e5cf776f535617de
    Public key SHA-256 00bfd120a8d326cac2d9d456c99169923413ba177565c4b7b34eda0b9bba9b82
    PhishDestroy
    Addresses
    104.21.50.152 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.163.239 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.50.152, 172.67.163.239): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    pureluxeglow.com
    Registered
    2024-01-12 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Receives mail at route3.mx.cloudflare.net, route1.mx.cloudflare.net, route2.mx.cloudflare.net
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 13:49 UTC

    Suggest a correction

  44. qarbde.asia US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by NPA 165 (information services)MX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    qarbde.asia
    First seen
    2026-11-08 13:46 UTC
    Listing
    NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 13:35 UTC
    Listed
    NPA 165
    1. Observed in the NPA 165 feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-08 12:42 UTC to 2027-02-06 13:41 UTC
    Logged 2026-11-08 13:42 UTC in Geomys Tuscolo2027h1, entry 528,813,534
    SHA-256 ddf86786b58129faf748a0459368ed64c606160f28b87cbd1243d63ac8fdf177
    Public key SHA-256 110250136f07f79b754a618794653289eb0f54d350203002a628a42ff89fa3ba
    Addresses
    104.21.68.153 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.196.164 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.68.153, 172.67.196.164): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    qarbde.asia
    Registered
    2026-07-13 · Alibaba Cloud Computing Ltd. d/b/a HiChina (www.net.cn)
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 14:32 UTC

    Suggest a correction

  45. seriousfunevents.co.nz US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    seriousfunevents.co.nz
    First seen
    2026-11-08 13:46 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 11:58 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1
    Valid 2026-11-08 12:41 UTC to 2027-02-06 13:40 UTC
    Logged 2026-11-08 13:43 UTC in Google ParcelYard2027h1, entry 678,628,422
    SHA-256 2714a186e347c72e2cba36c5b4f17259643c1885b3712e3faabf48784c974c1a
    Public key SHA-256 d517cfa77c18de721ec84466422b71ce8e90b40bcbcdcd81bb2671547737e1ef
    Addresses
    104.21.28.113 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.145.226 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.28.113, 172.67.145.226): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    seriousfunevents.co.nz
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 09:35 UTC

    Suggest a correction

  46. shortenderzlot24.click US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    shortenderzlot24.click
    First seen
    2026-11-08 13:46 UTC
    Listing
    CERT Polska listed it 2026-05-20 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 12:32 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-11-08 12:44 UTC to 2027-02-06 12:44 UTC
    Logged 2026-11-08 13:43 UTC in Google ParcelYard2027h1, entry 678,622,809
    SHA-256 48a330a984e7c003660932c80b76ed99813e377f71f2ba7183fe76d90737f3e5
    Public key SHA-256 968ff1810ae4d8cd5eeca71a04d03f74061660b6180ca0f08568128529609def
    Addresses
    104.21.45.103 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.213.36 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.45.103, 172.67.213.36): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    shortenderzlot24.click
    Registered
    2026-05-15 · Global Domain Group LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 14:31 UTC

    Suggest a correction

  47. smart-stp.com US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX presentSPF -allDMARC policy noneRegistered 24 mo ago
    DetailsHide
    Hostname
    smart-stp.com
    First seen
    2026-11-08 13:46 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-08 11:57 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-08 12:43 UTC to 2027-02-06 13:41 UTC
    Logged 2026-11-08 13:43 UTC in IPng Networks Halloumi2027h1, entry 412,178,053
    SHA-256 9fca5cb0412f1b6144a37dc2ccaca303a0490c62537e94630853dc600cb8b4fd
    Public key SHA-256 1e6277840268686a4c82bed68016d1a8f2df46fd7afbb394b466bef71b292b16
    PhishDestroy
    Addresses
    104.21.86.252 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.138.221 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.86.252, 172.67.138.221): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    smart-stp.com
    Registered
    2024-11-30 · NameCheap, Inc.
    MX
    Receives mail at smartstp-com01c.mail.protection.outlook.com
    SPF
    SPF record with -all: other senders fail
    DMARC
    DMARC policy p=none: reports only
    Checked
    2026-11-08 13:49 UTC

    Suggest a correction

  48. wejscie-73.biz.id US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 59 d ago
    DetailsHide
    Hostname
    wejscie-73.biz.id
    First seen
    2026-11-08 13:46 UTC
    Listing
    CERT Polska listed it 2026-09-10 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 12:32 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-11-08 12:47 UTC to 2027-02-06 12:47 UTC
    Logged 2026-11-08 13:45 UTC in Google PlumbersArms2027h1, entry 678,967,659
    SHA-256 33a8d1814d29e12844464211cac2f9b13222bdbad4ffd01ca16d2a9e1d8d645d
    Public key SHA-256 2acef7bf250ca105d66cbeaa89a8632a2a8c8b6b7f55ea47df73b8e483e2d37c
    Addresses
    104.21.7.33 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.135.175 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.7.33, 172.67.135.175): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    wejscie-73.biz.id
    Registered
    2026-09-10 · PT Jagoan Hosting Indonesia
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 14:31 UTC

    Suggest a correction

  49. allocation-solv.xyz US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    allocation-solv.xyz
    First seen
    2026-11-08 13:41 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 11:58 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-08 12:39 UTC to 2027-02-06 12:39 UTC
    Logged 2026-11-08 13:37 UTC in Google ParcelYard2027h1, entry 678,546,423
    SHA-256 15df4570b4fc9d1a9a830e97746f2e190290d8376df7e532fbc1e73ee5826925
    Public key SHA-256 e0c68258164635cb18f40241e151316b59eb77f75d027a97ad1df8bc372a5793
    Addresses
    104.21.75.65 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.215.184 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.75.65, 172.67.215.184): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    allocation-solv.xyz
    Registered
    2026-05-14 · PDR Ltd. d/b/a PublicDomainRegistry.com
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 14:32 UTC

    Suggest a correction

  50. allocations-citrea.xyz US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    allocations-citrea.xyz
    First seen
    2026-11-08 13:41 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 11:58 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-11-08 12:39 UTC to 2027-02-06 12:39 UTC
    Logged 2026-11-08 13:38 UTC in Google ParcelYard2027h1, entry 678,559,073
    SHA-256 532db75338ab51ae51ad3ef4b15ab949682a063d6ce04459595a11e263975dfa
    Public key SHA-256 15c7b24aeab880aa93580fdc35c4ba5ba228721f0730c7febdff91f540cf1bd1
    Addresses
    104.21.60.2 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.186.161 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.60.2, 172.67.186.161): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    allocations-citrea.xyz
    Registered
    2026-05-14 · PDR Ltd. d/b/a PublicDomainRegistry.com
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 14:32 UTC

    Suggest a correction

  51. amlbot.click BD · AS153947 · FAST ZONE IT
    ReportedReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 3 mo ago
    DetailsHide
    Hostname
    amlbot.click
    First seen
    2026-11-08 13:41 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-08 11:57 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR2
    Valid 2026-11-08 12:40 UTC to 2027-02-06 12:40 UTC
    Logged 2026-11-08 13:39 UTC in Google PlumbersArms2027h1, entry 678,873,824
    SHA-256 0f4f9826eb1ff3f9d12f9150ede911b5417916cd2af5396d71594f43415725e6
    Public key SHA-256 53edc8e6606e53cfc815d1a5727770644f8afaeefd4e90d67281538962d965f1
    PhishDestroy
    Addresses
    193.187.110.18 · Bangladesh · AS153947 FASTZONEIT-AS-AP - FAST ZONE IT
    Domain
    amlbot.click
    Registered
    2026-08-12 · Global Domain Group LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 14:31 UTC

    Suggest a correction

  52. api.truenorthcapitalsoft-com-gent.financecryptoworld.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareUnder financecryptoworld.com, listed by CERT PolskaMX presentSPF ~allDMARC missingRegistered 22 mo ago
    DetailsHide
    Hostname
    api.truenorthcapitalsoft-com-gent.financecryptoworld.com
    First seen
    2026-11-08 13:41 UTC
    Listing
    CERT Polska listed it 2026-06-12 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 12:32 UTC
    Listed
    CERT Polska, listing financecryptoworld.com and the names under it
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WR1 · precertificate
    Valid 2026-11-08 12:38 UTC to 2027-02-06 13:37 UTC
    Logged 2026-11-08 13:38 UTC in DigiCert Wyvern2027h1, entry 454,790,098
    SHA-256 166a4d112f5f5651b146594e19b899b4d6a18de097646055badf03b8fb34453f
    Public key SHA-256 264e1a896010406399c61f23e853b9cf7370c6236fc01d8332e95258f2260ece
    Addresses
    104.21.10.130 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.131.121 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.10.130, 172.67.131.121): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    financecryptoworld.com
    Registered
    2025-01-30 · MainReg Inc.
    MX
    Receives mail at mail.financecryptoworld.com
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-07 17:16 UTC

    Suggest a correction

  53. getmask.click SC · AS209101 · ipvendettainc IP Vendetta I…
    ListedListed by MetaMaskMX absentSPF ~allDMARC quarantineRegistered 9 mo ago
    DetailsHide
    Hostname
    getmask.click
    First seen
    2026-11-08 13:41 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 11:58 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-11-08 12:38 UTC to 2027-02-06 12:38 UTC
    Logged 2026-11-08 13:37 UTC in IPng Networks Halloumi2027h1, entry 412,120,919
    SHA-256 28e4a82b72ad686e510b5ae91d54a8fb3bede011748da917fe6361e85b950676
    Public key SHA-256 a6755e02591194853daf45abf78d000fb448bd8922537d0d35e04015e481c70e
    Addresses
    185.95.156.79 · Seychelles · AS209101 ipvendettainc IP Vendetta Inc.
    Domain
    getmask.click
    Registered
    2026-02-26 · Sav.com, LLC
    MX
    Publishes no mail exchanger
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    DMARC policy p=quarantine
    Checked
    2026-11-08 14:31 UTC

    Suggest a correction

  54. join-pharosnetwork.xyz US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    join-pharosnetwork.xyz
    First seen
    2026-11-08 13:41 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 11:58 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-08 12:36 UTC to 2027-02-06 13:33 UTC
    Logged 2026-11-08 13:36 UTC in Google ParcelYard2027h1, entry 678,523,093
    SHA-256 5f519bf8312623bb3c38c541202c53ff03549642b7d9d33cffe410aaeae4e863
    Public key SHA-256 dec43576fdc35b14ec7a2b5e59d4b4c3fc918a797951b173787a8da9a883049d
    Addresses
    104.21.90.119 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.200.104 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.90.119, 172.67.200.104): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    join-pharosnetwork.xyz
    Registered
    2026-07-13 · PDR Ltd. d/b/a PublicDomainRegistry.com
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 14:32 UTC

    Suggest a correction

  55. potatoshoveltrail.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by USOMMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    potatoshoveltrail.com
    First seen
    2026-11-08 13:41 UTC
    Listing
    USOM listed it 2026-05-19 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 13:05 UTC
    Listed
    USOM
    1. Listed by USOM
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-11-08 12:41 UTC to 2027-02-06 12:41 UTC
    Logged 2026-11-08 13:39 UTC in Google PlumbersArms2027h1, entry 678,881,703
    SHA-256 35010634e93230f9a8e5aeaa1f735eae55c82cfb0203107a9c003e8ef6afe8b0
    Public key SHA-256 d39c7663efc517aa51410cc7fc9e21730644d3f6c38e0782c8700f547e9b8f46
    Addresses
    104.21.93.41 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.204.102 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.93.41, 172.67.204.102): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    potatoshoveltrail.com
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 13:44 UTC

    Suggest a correction

  56. proposals-firelight.xyz US · AS13335 · Cloudflare, Inc.2 addressesFirelight
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    proposals-firelight.xyz
    First seen
    2026-11-08 13:41 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 11:58 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-08 12:38 UTC to 2027-02-06 12:38 UTC
    Logged 2026-11-08 13:37 UTC in Google PlumbersArms2027h1, entry 678,848,723
    SHA-256 145ed98cedeef426f665f176201824014e7afc9336ee8d927e623ef8eb88addf
    Public key SHA-256 2fdae3a019b3048cd4747702b6d081a3ec9d8a21c6f8cf5ba0cefd47daeaa657
    Brand
    Firelight
    Addresses
    104.21.82.82 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.155.59 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.82.82, 172.67.155.59): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    proposals-firelight.xyz
    Registered
    2026-05-15 · Dynadot Inc
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 14:32 UTC

    Suggest a correction

  57. quantumhivehub.com US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX presentSPF ~allDMARC missingRegistered 12 mo ago
    DetailsHide
    Hostname
    quantumhivehub.com
    First seen
    2026-11-08 13:41 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-08 11:57 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-08 12:38 UTC to 2027-02-06 13:36 UTC
    Logged 2026-11-08 13:38 UTC in Let's Encrypt Sycamore2027h1, entry 1,049,623,098
    SHA-256 ddfb9af43e29b315cf12e5ec632193ff3a65fff2e2dbe86795e7480bd7eabc86
    Public key SHA-256 f9b0166384803ee93041a8126f81d24361651379cf1b6c36bb7e137b9e5f2b3a
    PhishDestroy
    Addresses
    104.21.47.174 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.149.94 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.47.174, 172.67.149.94): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    quantumhivehub.com
    Registered
    2025-11-19 · TuringSign Inc. d/b/a Cosmotown
    MX
    Receives mail at mail.quantumhivehub.com
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 13:44 UTC

    Suggest a correction

  58. sereinshopping.online US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by NPA 165 (e-commerce)MX absentSPF missingDMARC quarantineRegistered 6 mo ago
    DetailsHide
    Hostname
    sereinshopping.online
    First seen
    2026-11-08 13:41 UTC
    Listing
    NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 13:35 UTC
    Listed
    NPA 165
    1. Observed in the NPA 165 feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-11-08 12:37 UTC to 2027-02-06 12:37 UTC
    Logged 2026-11-08 13:36 UTC in IPng Networks Gouda2027h1, entry 354,476,918
    SHA-256 e26b5e882b82002a7ae64cbef14bed0e98fc9225d5cf0f0496a2fc051ad400b7
    Public key SHA-256 2e13272b33e0b72fae119a9903a48633e8f5720acfb98501142d29695e93b36d
    Addresses
    104.21.91.29 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.165.91 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.91.29, 172.67.165.91): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    sereinshopping.online
    Registered
    2026-05-15 · GoDaddy.com, LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    DMARC policy p=quarantine
    Checked
    2026-11-08 14:32 UTC

    Suggest a correction

  59. sponsorlu--cekilis.online SC · AS403005 · Blatant
    ListedListed by USOMMX absentSPF missingDMARC missingRegistered 59 d ago
    DetailsHide
    Hostname
    sponsorlu--cekilis.online
    First seen
    2026-11-08 13:41 UTC
    Listing
    USOM listed it 2026-09-11 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 13:05 UTC
    Listed
    USOM
    1. Listed by USOM
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-08 12:37 UTC to 2027-02-06 13:36 UTC
    Logged 2026-11-08 13:38 UTC in Let's Encrypt Sycamore2027h1, entry 1,049,603,828
    SHA-256 b2a18a9644e7482ccd88de79a0dcdcfd40220648893d9da13e04ec2052d0bbb7
    Public key SHA-256 5eedd632d77883b6df9429f1292a7bb040e8ce885cfa9dd149385502f4707a1e
    Addresses
    64.89.160.46 · Seychelles · AS403005 BLATANTHOST - Blatant
    Domain
    sponsorlu--cekilis.online
    Registered
    2026-09-10 · Unstoppable Domains, Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 14:32 UTC

    Suggest a correction

  60. trade-phantom.com US · AS397031 · GALAXYGATE, LLC
    ReportedReported by PhishDestroyMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    trade-phantom.com
    First seen
    2026-11-08 13:41 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-08 11:57 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-08 12:37 UTC to 2027-02-06 13:35 UTC
    Logged 2026-11-08 13:37 UTC in Google PlumbersArms2027h1, entry 678,845,850
    SHA-256 4af9452efd60683ee5617d0b84c36773b0d8bc20334c26bdbd14b6ccbb4e529d
    Public key SHA-256 6ba66fad024fcfbf492628e217ca43e69ebb6734f5ac442696fbff1a61265249
    PhishDestroy
    Addresses
    162.248.100.125 · United States · AS397031 GALAXYGATE - GALAXYGATE, LLC
    Domain
    trade-phantom.com
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 13:44 UTC

    Suggest a correction

  61. www.claimdunkins.com US · AS16509 · Amazon.com, Inc.2 addresses
    ReportedAmazon Web ServicesReported by PhishDestroyMX absentSPF missingDMARC quarantine
    DetailsHide
    Hostname
    www.claimdunkins.com
    First seen
    2026-11-08 13:41 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-08 11:57 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR2 · precertificate
    Valid 2026-11-08 12:40 UTC to 2027-02-06 12:40 UTC
    Logged 2026-11-08 13:39 UTC in DigiCert Wyvern2027h1, entry 454,793,661
    SHA-256 1c3f2affac7da06c16741feb77c24bf862f3ff7c83229fc94fd5924c54873098
    Public key SHA-256 a39a8dc1e873c696939e757bb06feb5f32e905dac9f136f907985e1483f97f00
    PhishDestroy
    Addresses
    64.29.17.1 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
    216.198.79.1 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
    Amazon Web Services
    Amazon Web Services (64.29.17.1, 216.198.79.1): a cloud provider. It rents servers and addresses to its customers.
    Domain
    claimdunkins.com
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    DMARC policy p=quarantine
    Checked
    2026-11-08 13:44 UTC

    Suggest a correction

  62. www.tooniebet.online US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareUnder tooniebet.online, reported by PhishDestroyMX absentSPF missingDMARC missingRegistered 10 mo ago
    DetailsHide
    Hostname
    www.tooniebet.online
    First seen
    2026-11-08 13:41 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-08 11:57 UTC
    Reported
    PhishDestroy, listing tooniebet.online and the names under it
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-08 12:37 UTC to 2027-02-06 12:37 UTC
    Logged 2026-11-08 13:35 UTC in Google PlumbersArms2027h1, entry 678,828,868
    SHA-256 5bcc8270cc71f8b9ae3e0435e04b7f6c7187d5da8593b2fbd276f4e117df7531
    Public key SHA-256 cffd853235b118157fa0c94661ede06e7bcf589ca33e8be8199873601625061f
    PhishDestroy
    Addresses
    104.21.64.16 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.174.27 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.64.16, 172.67.174.27): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    tooniebet.online
    Registered
    2026-01-10 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 08:37 UTC

    Suggest a correction

  63. zumibet-aus.com US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    zumibet-aus.com
    First seen
    2026-11-08 13:41 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-08 11:57 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-11-08 12:42 UTC to 2027-02-06 12:42 UTC
    Logged 2026-11-08 13:40 UTC in Google PlumbersArms2027h1, entry 678,895,018
    SHA-256 ffa604a84fba3c9c7a1bc7b4bcbf49a94744430760b9cc90e47ba0f4a7700a28
    Public key SHA-256 8388f1a9710073967f8561d3ea8f3eae0f8cfc96a2d402a122a1c8976f8788d8
    PhishDestroy
    Addresses
    104.21.20.227 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.194.185 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.20.227, 172.67.194.185): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    zumibet-aus.com
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 13:44 UTC

    Suggest a correction

  64. zvzwu.work US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by NPA 165 (information services)MX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    zvzwu.work
    First seen
    2026-11-08 13:41 UTC
    Listing
    NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 13:35 UTC
    Listed
    NPA 165
    1. Observed in the NPA 165 feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-11-08 12:41 UTC to 2027-02-06 12:41 UTC
    Logged 2026-11-08 13:39 UTC in Google ParcelYard2027h1, entry 678,577,057
    SHA-256 585b300f853e471eb28e44fa33800d3062bf5c4df1b0bb3deebbd8a72b893796
    Public key SHA-256 06fba86787b1734eebc87167c638ff945704fa89266016eb9a372610a6722277
    Addresses
    104.21.38.80 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.220.26 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.38.80, 172.67.220.26): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    zvzwu.work
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 13:44 UTC

    Suggest a correction

  65. 86greasy.shop US · AS16509 · Amazon.com, Inc.2 addresses
    ListedAmazon Web ServicesListed by NPA 165 (e-commerce)MX absentSPF missingDMARC quarantine
    DetailsHide
    Hostname
    86greasy.shop
    First seen
    2026-11-08 13:36 UTC
    Listing
    NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 13:35 UTC
    Listed
    NPA 165
    1. Observed in the NPA 165 feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by GoDaddy TLS Intermediate CA DV - R1v1
    Valid 2026-11-08 13:31 UTC to 2027-05-25 13:31 UTC
    Logged 2026-11-08 13:31 UTC in Google Argon2027h1, entry 927,866,645
    SHA-256 7a393f85e61c7fa89ccd98877c5c85568d079656069c80de143686da701de5ac
    Public key SHA-256 ba7d30d387084051611b1026a074065cb1edcc6d37419dd40abc8c0567b0ac12
    Addresses
    3.33.130.190 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
    15.197.148.33 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
    Amazon Web Services
    Amazon Web Services (3.33.130.190, 15.197.148.33): a cloud provider. It rents servers and addresses to its customers.
    Domain
    86greasy.shop
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    DMARC policy p=quarantine
    Checked
    2026-11-08 13:39 UTC

    Suggest a correction

  66. bazaarpraitems.shop US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    bazaarpraitems.shop
    First seen
    2026-11-08 13:36 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-08 11:57 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-08 12:31 UTC to 2027-02-06 13:29 UTC
    Logged 2026-11-08 13:31 UTC in DigiCert Wyvern2027h1, entry 454,716,664
    SHA-256 3770e80b29e167ad54855a68dbe22dce95c4fdd4b2d0513bfe9470fb50c0f57b
    Public key SHA-256 28333c2d7d6e5e21afa10564920c338cbde25e7ac916bc2b8f4db81a647a9ef2
    PhishDestroy
    Addresses
    104.21.61.76 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.207.97 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.61.76, 172.67.207.97): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    bazaarpraitems.shop
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 13:39 UTC

    Suggest a correction

  67. boostaave.us US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX presentSPF -allSPF on Spamhaus DROPDMARC policy none
    DetailsHide
    Hostname
    boostaave.us
    First seen
    2026-11-08 13:36 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 11:58 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-11-08 12:34 UTC to 2027-02-06 12:34 UTC
    Logged 2026-11-08 13:33 UTC in Google PlumbersArms2027h1, entry 678,791,700
    SHA-256 b32c898e4ceef4f906043cf4cc36a19e3be63fb14716fe39716133f63f01d06d
    Public key SHA-256 3bf3ab2a9c297dc786bece71537ae8aafb8d50ca9b309093a5bacada561ca81d
    Addresses
    104.21.13.225 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.133.81 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.13.225, 172.67.133.81): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    boostaave.us
    MX
    Receives mail at mail.boostaave.us
    SPF
    SPF record with -all: other senders fail
    DMARC
    DMARC policy p=none: reports only
    SPF listing
    The SPF record lists 196.251.107.128 as a sender. It is on Spamhaus DROP: hijacked or criminal networks.
    Checked
    2026-11-08 13:39 UTC

    Suggest a correction

  68. cjzikelamall.shop
    ListedListed by NPA 165 (e-commerce)MX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    cjzikelamall.shop
    First seen
    2026-11-08 13:36 UTC
    Listing
    NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 13:35 UTC
    Listed
    NPA 165
    1. Observed in the NPA 165 feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-08 12:33 UTC to 2027-02-06 13:31 UTC
    Logged 2026-11-08 13:33 UTC in Google ParcelYard2027h1, entry 678,484,600
    SHA-256 64ebf65fd530ae5a6a962c0463911fcb7e88ed06ce11461ecf905fee104a89e9
    Public key SHA-256 80bc256d9274ae0d4ecdeea93b7dcbdfb0db3e20e43df5a259691c6fa764720f
    Domain
    cjzikelamall.shop
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 13:39 UTC

    Suggest a correction

  69. coinexvn.cc US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    coinexvn.cc
    First seen
    2026-11-08 13:36 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 11:58 UTC
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-08 11:57 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1
    Valid 2026-09-10 10:56 UTC to 2026-12-09 11:56 UTC
    Logged 2026-11-08 13:34 UTC in Geomys Tuscolo2026h2, entry 1,046,404,973
    SHA-256 21ba7d4c083a45145817e542af1be812a4c0b8a9597322c74d5ffbcce45973f8
    Public key SHA-256 c1e12898c299193f6e21f951826e69ba1f9fe275e26650e1c699cb6853f991e3
    Addresses
    104.21.22.21 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.202.9 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.22.21, 172.67.202.9): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    coinexvn.cc
    Registered
    2026-07-13 · Dominet (HK) Limited
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 13:39 UTC

    Suggest a correction

  70. garodex.com US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    garodex.com
    First seen
    2026-11-08 13:36 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-08 11:57 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-11-08 12:34 UTC to 2027-02-06 12:34 UTC
    Logged 2026-11-08 13:32 UTC in Geomys Tuscolo2027h1, entry 528,708,914
    SHA-256 0e955e9f5a689d90e89bd8e94884ad860451f911fcda9230a3a6e839003d958c
    Public key SHA-256 93e23032350b8e82dafb68106e067a36e0220a7b886b119ea51105739fcd283b
    PhishDestroy
    Addresses
    104.21.9.237 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.131.18 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.9.237, 172.67.131.18): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    garodex.com
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 13:39 UTC

    Suggest a correction

  71. iconflowunit.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    iconflowunit.com
    First seen
    2026-11-08 13:36 UTC
    Listing
    CERT Polska listed it 2026-05-15 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 12:32 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-11-08 12:35 UTC to 2027-02-06 12:35 UTC
    Logged 2026-11-08 13:33 UTC in IPng Networks Halloumi2027h1, entry 412,080,348
    SHA-256 1576b29249abf5fe393be1e4ba50fefa9df1148d129fe0dc61cda9e3253e3e87
    Public key SHA-256 9cca6ce092f067c9d80fcce8d78c1e8ac6a96d3be4b3c4e0b27c1736ad7985cc
    Addresses
    104.21.55.222 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.173.198 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.55.222, 172.67.173.198): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    iconflowunit.com
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 13:39 UTC

    Suggest a correction

  72. kyberswap-app.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    kyberswap-app.com
    First seen
    2026-11-08 13:36 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 11:58 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-11-08 12:35 UTC to 2027-02-06 12:35 UTC
    Logged 2026-11-08 13:33 UTC in Let's Encrypt Sycamore2027h1, entry 1,049,501,289
    SHA-256 738626a1120b2d1a585da3b582bf39364b1e10bcd5015d60e2a061fd46cc4f1f
    Public key SHA-256 9324329ad7c46fa130e4e498307f7a5f54e866ee6d18b98c46c5f5277d649134
    Addresses
    104.21.23.199 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.213.57 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.23.199, 172.67.213.57): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    kyberswap-app.com
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 13:39 UTC

    Suggest a correction

  73. macoqoo.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX presentSPF ~allDMARC quarantine
    DetailsHide
    Hostname
    macoqoo.com
    First seen
    2026-11-08 13:36 UTC
    Listing
    CERT Polska listed it 2026-09-27 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 12:32 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-11-08 12:34 UTC to 2027-02-06 12:34 UTC
    Logged 2026-11-08 13:33 UTC in Let's Encrypt Sycamore2027h1, entry 1,049,490,768
    SHA-256 938f7755567355bf5207e6ed54dbc76ccdce2917bee34b343e316973e26bd610
    Public key SHA-256 dd4a72edfce2e58f17c0de05d3b3f22f7919f5aa679b909fae7fd8c82d7344c5
    Addresses
    104.21.83.247 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.183.157 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.83.247, 172.67.183.157): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    macoqoo.com
    MX
    Receives mail at mail.macoqoo.com
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    DMARC policy p=quarantine
    Checked
    2026-11-08 13:39 UTC

    Suggest a correction

  74. org.globalnexusbnk.com
    ReportedUnder globalnexusbnk.com, reported by PhishDestroyMX presentSPF ~allDMARC policy noneRegistered 3 mo ago
    DetailsHide
    Hostname
    org.globalnexusbnk.com
    First seen
    2026-11-08 13:36 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-08 11:57 UTC
    Reported
    PhishDestroy, listing globalnexusbnk.com and the names under it
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR2 · precertificate
    Valid 2026-11-08 12:35 UTC to 2027-02-06 12:35 UTC
    Logged 2026-11-08 13:34 UTC in Let's Encrypt Sycamore2027h1, entry 1,049,511,162
    SHA-256 9cbd712daea46c4ed27b79bd13b2990fefa509cb967515fb6ac64d66e5c52654
    Public key SHA-256 369799ff1bd3638e602eaba9900673323bac57e14075a1bba22770c297ff3528
    PhishDestroy
    Domain
    globalnexusbnk.com
    Registered
    2026-08-18 · PDR Ltd. d/b/a PublicDomainRegistry.com
    MX
    Receives mail at globalnexusbnk.com
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    DMARC policy p=none: reports only
    Checked
    2026-11-08 08:38 UTC

    Suggest a correction

  75. pannel.vancedapk.com CY · AS47583 · AS-HOSTINGER Hostinger Inte…
    ListedHostingerUnder vancedapk.com, listed by MetaMaskMX absentSPF missingDMARC missingRegistered 10 mo ago
    DetailsHide
    Hostname
    pannel.vancedapk.com
    First seen
    2026-11-08 13:36 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 11:58 UTC
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-08 11:57 UTC
    Listed
    MetaMask, listing vancedapk.com and the names under it
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-08 12:35 UTC to 2027-02-06 12:35 UTC
    Logged 2026-11-08 13:33 UTC in Google ParcelYard2027h1, entry 678,492,500
    SHA-256 086c772be2dffc5451960e53474c97eb5c5a24ad31939a727ec73e25797b0762
    Public key SHA-256 1b13bb8b30a3407a7198bea8d045ea0f117a7cbd6a8cfa01f02113734f1ba296
    Addresses
    156.67.222.110 · Cyprus · AS47583 AS-HOSTINGER Hostinger International Limited · Hostinger (shared hosting)
    Hostinger
    Hostinger (156.67.222.110): shared web hosting and domain registration. One address typically serves many customer sites.
    Domain
    vancedapk.com
    Registered
    2025-12-31 · DreamHost, LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 08:15 UTC

    Suggest a correction

  76. preference.garantibbvakredibasvuru.com AU · AS133618 · Trellian Pty. Limited
    ListedParking page · Above.comListed by USOMMX presentSPF -allDMARC missingRegistered 13 mo ago
    DetailsHide
    Hostname
    preference.garantibbvakredibasvuru.com
    First seen
    2026-11-08 13:36 UTC
    Listing
    USOM listed it 2026-05-15 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 13:05 UTC
    Listed
    USOM
    1. Listed by USOM
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-11-08 12:34 UTC to 2027-02-06 12:34 UTC
    Logged 2026-11-08 13:33 UTC in Geomys Tuscolo2027h1, entry 528,710,997
    SHA-256 6379b24b71ce7d19e340c83059b1bd5f0b721e4b9549505a378b142a8d9bccf7
    Public key SHA-256 80f0f488cab2127bf7fd7030cc4a9c6e055e0e9e43fb31be04ea08d340beb735
    Addresses
    103.224.212.141 · Australia · AS133618 TRELLIAN-AS-AP - Trellian Pty. Limited · Trellian / Above.com (parking page)
    Parking page · Above.com
    The registry delegates garantibbvakredibasvuru.com to Above.com’s nameservers, which answer for it. Above.com: a parking service. It answers for names that are typically for sale or unused. Trellian / Above.com (103.224.212.141): a parking service. It answers for names that are typically for sale or unused.
    Domain
    garantibbvakredibasvuru.com
    Registered
    2025-10-13 · Dynadot Inc
    MX
    Receives mail at park-mx.above.com
    SPF
    SPF record with -all: other senders fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 08:29 UTC

    Suggest a correction

  77. qiegq.work US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by NPA 165 (e-commerce)MX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    qiegq.work
    First seen
    2026-11-08 13:36 UTC
    Listing
    NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 13:35 UTC
    Listed
    NPA 165
    1. Observed in the NPA 165 feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-11-08 12:34 UTC to 2027-02-06 12:34 UTC
    Logged 2026-11-08 13:33 UTC in Google PlumbersArms2027h1, entry 678,792,030
    SHA-256 bf5bdbd58419b86df2078b934339f6dc8630c5ed6352f1534fdc6ff750e9b65a
    Public key SHA-256 9a0cf9b122d18b7011209bbee8a39c4c3139b29083d191a56bc20306d1c4c034
    Addresses
    104.21.69.124 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.208.79 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.69.124, 172.67.208.79): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    qiegq.work
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 13:39 UTC

    Suggest a correction

  78. rainbetcasinoaus-org-132876.pages.dev US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMask
    DetailsHide
    Hostname
    rainbetcasinoaus-org-132876.pages.dev
    First seen
    2026-11-08 13:36 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 11:58 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-08 12:32 UTC to 2027-02-06 13:30 UTC
    Logged 2026-11-08 13:32 UTC in Geomys Tuscolo2027h1, entry 528,702,569
    SHA-256 c542ec6ea0159b841f1d4c8de0b5161f3acfa8797b7812f8a5e42e60f4470926
    Public key SHA-256 819ac1d8429024efd7572fc8ce36f598d3cc57cab46634fa78f8ab5509efcd21
    Addresses
    172.66.44.76 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.66.47.180 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (172.66.44.76, 172.66.47.180): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.

    Suggest a correction

  79. sponsorlufirsat.online SC · AS403005 · Blatant
    ListedListed by USOMMX absentSPF missingDMARC missingRegistered 59 d ago
    DetailsHide
    Hostname
    sponsorlufirsat.online
    First seen
    2026-11-08 13:36 UTC
    Listing
    USOM listed it 2026-09-11 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 13:05 UTC
    Listed
    USOM
    1. Listed by USOM
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-11-08 12:36 UTC to 2027-02-06 12:36 UTC
    Logged 2026-11-08 13:34 UTC in Google ParcelYard2027h1, entry 678,503,929
    SHA-256 658f4992fa573adced67b4b1722e342494477f68d64f222f0eed22a4aee70e73
    Public key SHA-256 627eda7c8aee3449954395cf2539623514ce449989326389550343f21d5237fd
    Addresses
    64.89.160.46 · Seychelles · AS403005 BLATANTHOST - Blatant
    Domain
    sponsorlufirsat.online
    Registered
    2026-09-10 · Unstoppable Domains, Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 14:32 UTC

    Suggest a correction

  80. swiftxglobalcourier.com.globalnexusbnk.com US · AS53667 · FranTech Solutions
    ReportedUnder globalnexusbnk.com, reported by PhishDestroyMX presentSPF ~allDMARC policy noneRegistered 3 mo ago
    DetailsHide
    Hostname
    swiftxglobalcourier.com.globalnexusbnk.com
    First seen
    2026-11-08 13:36 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-08 11:57 UTC
    Reported
    PhishDestroy, listing globalnexusbnk.com and the names under it
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR2 · precertificate
    Valid 2026-11-08 12:35 UTC to 2027-02-06 12:35 UTC
    Logged 2026-11-08 13:34 UTC in Let's Encrypt Sycamore2027h1, entry 1,049,511,162
    SHA-256 9cbd712daea46c4ed27b79bd13b2990fefa509cb967515fb6ac64d66e5c52654
    Public key SHA-256 369799ff1bd3638e602eaba9900673323bac57e14075a1bba22770c297ff3528
    PhishDestroy
    Addresses
    198.251.84.200 · United States · AS53667 PONYNET - FranTech Solutions
    Domain
    globalnexusbnk.com
    Registered
    2026-08-18 · PDR Ltd. d/b/a PublicDomainRegistry.com
    MX
    Receives mail at globalnexusbnk.com
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    DMARC policy p=none: reports only
    Checked
    2026-11-08 08:38 UTC

    Suggest a correction

  81. tokenrave.xyz US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    tokenrave.xyz
    First seen
    2026-11-08 13:36 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 11:58 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-11-08 12:34 UTC to 2027-02-06 12:34 UTC
    Logged 2026-11-08 13:32 UTC in Geomys Tuscolo2027h1, entry 528,708,026
    SHA-256 3cf7042362e79cf6e702a2e303dfe9d1a2382e96ba07df5eeeea704a1a2530a4
    Public key SHA-256 0f76cddd7a25670bcb21fa252f052059870c7234ce01f6c08153228310f5a1df
    Addresses
    104.21.79.231 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.149.78 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.79.231, 172.67.149.78): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    tokenrave.xyz
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 13:39 UTC

    Suggest a correction

  82. verifyio.online US · AS16509 · Amazon.com, Inc.
    ListedAmazon Web ServicesListed by MetaMaskMX presentSPF -allDMARC quarantineRegistered 6 mo ago
    DetailsHide
    Hostname
    verifyio.online
    First seen
    2026-11-08 13:36 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 11:58 UTC
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-08 11:57 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR2 · precertificate
    Valid 2026-11-08 12:36 UTC to 2027-02-06 12:36 UTC
    Logged 2026-11-08 13:34 UTC in DigiCert Wyvern2027h1, entry 454,746,293
    SHA-256 7ff5675caeb14d26a6a9e3f848ac47ccd8f5c4aee0ab75e173ca84319103b4b8
    Public key SHA-256 1d940d176487575e09c00f79a2a4f784c19b6d76c46131d93e5a78ceb856990f
    Addresses
    216.198.79.1 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
    Amazon Web Services
    Amazon Web Services (216.198.79.1): a cloud provider. It rents servers and addresses to its customers.
    Domain
    verifyio.online
    Registered
    2026-05-09 · GoDaddy.com, LLC
    MX
    Receives mail at smtp.secureserver.net, mailstore1.secureserver.net
    SPF
    SPF record with -all: other senders fail
    DMARC
    DMARC policy p=quarantine
    Checked
    2026-11-08 14:32 UTC

    Suggest a correction

  83. www.bnkofa.org.globalnexusbnk.com US · AS53667 · FranTech Solutions
    ReportedUnder globalnexusbnk.com, reported by PhishDestroyMX presentSPF ~allDMARC policy noneRegistered 3 mo ago
    DetailsHide
    Hostname
    www.bnkofa.org.globalnexusbnk.com
    First seen
    2026-11-08 13:36 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-08 11:57 UTC
    Reported
    PhishDestroy, listing globalnexusbnk.com and the names under it
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR2 · precertificate
    Valid 2026-11-08 12:35 UTC to 2027-02-06 12:35 UTC
    Logged 2026-11-08 13:34 UTC in Let's Encrypt Sycamore2027h1, entry 1,049,511,162
    SHA-256 9cbd712daea46c4ed27b79bd13b2990fefa509cb967515fb6ac64d66e5c52654
    Public key SHA-256 369799ff1bd3638e602eaba9900673323bac57e14075a1bba22770c297ff3528
    PhishDestroy
    Addresses
    198.251.84.200 · United States · AS53667 PONYNET - FranTech Solutions
    Domain
    globalnexusbnk.com
    Registered
    2026-08-18 · PDR Ltd. d/b/a PublicDomainRegistry.com
    MX
    Receives mail at globalnexusbnk.com
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    DMARC policy p=none: reports only
    Checked
    2026-11-08 08:38 UTC

    Suggest a correction

  84. www.facebook-premium-verified.com US · AS16509 · Amazon.com, Inc.2 addressesFacebook
    ReportedAmazon Web ServicesReported by PhishDestroyMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    www.facebook-premium-verified.com
    First seen
    2026-11-08 13:36 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-08 11:57 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR1
    Valid 2026-11-08 12:35 UTC to 2027-02-06 12:35 UTC
    Logged 2026-11-08 13:33 UTC in Google ParcelYard2027h1, entry 678,493,303
    SHA-256 95d739c1d0fddbf81d687c4713e8d0eae0456ab305f7a767a5b50f5937eff0a7
    Public key SHA-256 616c651007dab1533552b5b41e0e686484153e179065e6c51729ce40887b2ef6
    PhishDestroy
    Brand
    Facebook
    Addresses
    64.29.17.1 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
    216.198.79.1 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
    Amazon Web Services
    Amazon Web Services (64.29.17.1, 216.198.79.1): a cloud provider. It rents servers and addresses to its customers.
    Domain
    facebook-premium-verified.com
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 13:39 UTC

    Suggest a correction

  85. www.fincengroup.org.globalnexusbnk.com US · AS53667 · FranTech Solutions
    ReportedUnder globalnexusbnk.com, reported by PhishDestroyMX presentSPF ~allDMARC policy noneRegistered 3 mo ago
    DetailsHide
    Hostname
    www.fincengroup.org.globalnexusbnk.com
    First seen
    2026-11-08 13:36 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-08 11:57 UTC
    Reported
    PhishDestroy, listing globalnexusbnk.com and the names under it
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR2 · precertificate
    Valid 2026-11-08 12:35 UTC to 2027-02-06 12:35 UTC
    Logged 2026-11-08 13:34 UTC in Let's Encrypt Sycamore2027h1, entry 1,049,511,162
    SHA-256 9cbd712daea46c4ed27b79bd13b2990fefa509cb967515fb6ac64d66e5c52654
    Public key SHA-256 369799ff1bd3638e602eaba9900673323bac57e14075a1bba22770c297ff3528
    PhishDestroy
    Addresses
    198.251.84.200 · United States · AS53667 PONYNET - FranTech Solutions
    Domain
    globalnexusbnk.com
    Registered
    2026-08-18 · PDR Ltd. d/b/a PublicDomainRegistry.com
    MX
    Receives mail at globalnexusbnk.com
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    DMARC policy p=none: reports only
    Checked
    2026-11-08 08:38 UTC

    Suggest a correction

  86. www.mbstr.xyz US · AS13335 · Cloudflare, Inc.
    ListedCloudflareUnder mbstr.xyz, listed by MetaMaskMX absentSPF missingDMARC missingRegistered 59 d ago
    DetailsHide
    Hostname
    www.mbstr.xyz
    First seen
    2026-11-08 13:36 UTC
    Listing
    MetaMask: first observed in the feed 2026-11-07 · still listed at the last successful feed check 2026-11-08 11:58 UTC
    Listed
    MetaMask, listing mbstr.xyz and the names under it
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WR1 · precertificate
    Valid 2026-11-08 12:31 UTC to 2027-02-06 13:28 UTC
    Logged 2026-11-08 13:31 UTC in Let's Encrypt Sycamore2027h1, entry 1,049,448,107
    SHA-256 cab7aab12d5e329a12a77982ef09f0f45a7ee79aec4ba88993a20212faf4cbc7
    Public key SHA-256 e9fa66a056700918811028f6a2d127a1a9987542d8cf3bd7ed61fe9238aab1e7
    Addresses
    185.158.133.1 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (185.158.133.1): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    mbstr.xyz
    Registered
    2026-09-10 · Name.com, Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 11:06 UTC

    Suggest a correction

  87. www.swiftxglobalcourier.com.globalnexusbnk.com US · AS53667 · FranTech Solutions
    ReportedUnder globalnexusbnk.com, reported by PhishDestroyMX presentSPF ~allDMARC policy noneRegistered 3 mo ago
    DetailsHide
    Hostname
    www.swiftxglobalcourier.com.globalnexusbnk.com
    First seen
    2026-11-08 13:36 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-08 11:57 UTC
    Reported
    PhishDestroy, listing globalnexusbnk.com and the names under it
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR2 · precertificate
    Valid 2026-11-08 12:35 UTC to 2027-02-06 12:35 UTC
    Logged 2026-11-08 13:34 UTC in Let's Encrypt Sycamore2027h1, entry 1,049,511,162
    SHA-256 9cbd712daea46c4ed27b79bd13b2990fefa509cb967515fb6ac64d66e5c52654
    Public key SHA-256 369799ff1bd3638e602eaba9900673323bac57e14075a1bba22770c297ff3528
    PhishDestroy
    Addresses
    198.251.84.200 · United States · AS53667 PONYNET - FranTech Solutions
    Domain
    globalnexusbnk.com
    Registered
    2026-08-18 · PDR Ltd. d/b/a PublicDomainRegistry.com
    MX
    Receives mail at globalnexusbnk.com
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    DMARC policy p=none: reports only
    Checked
    2026-11-08 08:38 UTC

    Suggest a correction

  88. xmymr.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    xmymr.com
    First seen
    2026-11-08 13:36 UTC
    Listing
    CERT Polska listed it 2026-05-17 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 12:32 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-11-08 12:36 UTC to 2027-02-06 12:35 UTC
    Logged 2026-11-08 13:34 UTC in Geomys Tuscolo2027h1, entry 528,725,726
    SHA-256 6af4c66a6aaa36abae2a12a9eb3f409191a449b805041d7c8c27556c5efd6c75
    Public key SHA-256 ae98a8641af149d8bf7979b4247aa0647b0aa864fff3abb3b9d6bf260352f714
    Addresses
    104.21.43.52 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.220.14 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.43.52, 172.67.220.14): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    xmymr.com
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 13:39 UTC

    Suggest a correction

  89. ynczb.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    ynczb.com
    First seen
    2026-11-08 13:36 UTC
    Listing
    CERT Polska listed it 2026-05-15 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 12:32 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-11-08 12:34 UTC to 2027-02-06 12:34 UTC
    Logged 2026-11-08 13:33 UTC in Let's Encrypt Willow2027h1, entry 1,005,129,182
    SHA-256 51829a946a9be9572278ad6e247be9e41c35706113779d48926ce766159379e6
    Public key SHA-256 20ca5a165a09c3968a94850bfb8f05a4088931d2fcf9beca542a04cb8f9d24ae
    Addresses
    104.21.72.109 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.181.173 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.72.109, 172.67.181.173): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    ynczb.com
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 13:39 UTC

    Suggest a correction

  90. zekppt.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by NPA 165 (finance and insurance)MX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    zekppt.com
    First seen
    2026-11-08 13:36 UTC
    Listing
    NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 13:35 UTC
    Listed
    NPA 165
    1. Observed in the NPA 165 feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-08 12:35 UTC to 2027-02-06 12:35 UTC
    Logged 2026-11-08 13:34 UTC in Google ParcelYard2027h1, entry 678,495,972
    SHA-256 0f02c7a11c89155adcbaf0e85e6d5837e22c96f1154c4b3eee2b393803c2fa8d
    Public key SHA-256 55e1bf5cf15fdac326d5eca670b8c7e0e2b6ae9450af2ed267b1a81e63a13ece
    Addresses
    104.21.90.114 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.200.99 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.90.114, 172.67.200.99): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    zekppt.com
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 13:39 UTC

    Suggest a correction

  91. 18est.com US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    18est.com
    First seen
    2026-11-08 13:31 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-08 11:57 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-11-08 12:28 UTC to 2027-02-06 12:28 UTC
    Logged 2026-11-08 13:27 UTC in Geomys Tuscolo2027h1, entry 528,642,011
    SHA-256 0e869fb98722e062d4d8bfcb6fb608173915f83d87526c245b7b1847beb05de0
    Public key SHA-256 18d7f472211d75c0a7e1f7e26ad770b227c25f1793c448fd9a2227ce1bd9de4a
    PhishDestroy
    Addresses
    104.21.49.104 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.189.189 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.49.104, 172.67.189.189): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    18est.com
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 13:33 UTC

    Suggest a correction

  92. dukmnieb.shop US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by NPA 165 (information services)MX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    dukmnieb.shop
    First seen
    2026-11-08 13:31 UTC
    Listing
    NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 13:35 UTC
    Listed
    NPA 165
    1. Observed in the NPA 165 feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-11-08 12:27 UTC to 2027-02-06 12:27 UTC
    Logged 2026-11-08 13:26 UTC in IPng Networks Gouda2027h1, entry 354,418,487
    SHA-256 414e30070694539e3cdf6122384c3b3a60955a868481c18c68a1e347303aa540
    Public key SHA-256 2ca26b48126666e81624243fad05089d841a65478974ab50ae626c89b295ef36
    Addresses
    104.21.33.222 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.193.30 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.33.222, 172.67.193.30): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    dukmnieb.shop
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 13:33 UTC

    Suggest a correction

  93. etmaill-tw.shop US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MODA (one-page scam site)MX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    etmaill-tw.shop
    First seen
    2026-11-08 13:31 UTC
    Listing
    Reported to MODA 2026-01-27 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 13:53 UTC
    Listed
    MODA
    1. Reported to MODA
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-08 12:29 UTC to 2027-02-06 13:27 UTC
    Logged 2026-11-08 13:29 UTC in Google PlumbersArms2027h1, entry 678,734,247
    SHA-256 f099545f98e052e873b2ab090fca555cf63c0403ea1bd8d0f6faefa8a929a7cf
    Public key SHA-256 9c77f6f7d73087766888b186c7d0b926868c1947445031a429cf1807f797b300
    Addresses
    104.21.27.113 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.169.36 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.27.113, 172.67.169.36): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    etmaill-tw.shop
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 13:33 UTC

    Suggest a correction

  94. kofonu-xojemu.info US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    kofonu-xojemu.info
    First seen
    2026-11-08 13:31 UTC
    Listing
    CERT Polska listed it 2026-09-01 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 12:32 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-08 12:30 UTC to 2027-02-06 13:28 UTC
    Logged 2026-11-08 13:30 UTC in Let's Encrypt Willow2027h1, entry 1,005,072,404
    SHA-256 9c3cb212ce1264b734dfb857141cc7a9a37157e68d26afa2635cef2db18be27b
    Public key SHA-256 097ecf55f76e574a93ef11e4b2d0bfaf6f476fed83edfef2bc36b6815c08b06a
    Addresses
    104.21.73.176 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.191.20 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.73.176, 172.67.191.20): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    kofonu-xojemu.info
    Registered
    2026-07-13 · Dynadot Inc
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 14:32 UTC

    Suggest a correction

  95. ledgrs-startsd.pages.dev US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMask
    DetailsHide
    Hostname
    ledgrs-startsd.pages.dev
    First seen
    2026-11-08 13:31 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 11:58 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-08 12:26 UTC to 2027-02-06 13:25 UTC
    Logged 2026-11-08 13:26 UTC in IPng Networks Halloumi2027h1, entry 412,014,509
    SHA-256 b4a70ab39311a45c1be061e1e15c5cc3dc3cff0605618f76b57862aec13ee04a
    Public key SHA-256 9f977d27fce9424ef37561fa565773c7a9e18a1ecc8ea18bf777c12023a13071
    Addresses
    172.66.44.147 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.66.47.109 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (172.66.44.147, 172.66.47.109): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.

    Suggest a correction

  96. pageadmin-policyinspection.pages.dev US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishTank
    DetailsHide
    Hostname
    pageadmin-policyinspection.pages.dev
    First seen
    2026-11-08 13:31 UTC
    Listing
    PhishTank: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-08 13:09 UTC
    Reported
    PhishTank
    1. Observed in the PhishTank feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-08 12:27 UTC to 2027-02-06 13:25 UTC
    Logged 2026-11-08 13:27 UTC in IPng Networks Halloumi2027h1, entry 412,019,979
    SHA-256 e066fb51941438b3bcead402e00a05b7de09415081b7a9f55a87a23c5c9d7361
    Public key SHA-256 200173d49504cb209b119d0465fe5d81c76e6dd181c85819c85c80e6e845bffe
    PhishTank
    PhishTank report #8878357
    Addresses
    172.66.44.167 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.66.47.89 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (172.66.44.167, 172.66.47.89): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.

    Suggest a correction

  97. raydiumchain.world US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    raydiumchain.world
    First seen
    2026-11-08 13:31 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-08 11:57 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-08 12:27 UTC to 2027-02-06 13:26 UTC
    Logged 2026-11-08 13:27 UTC in Geomys Tuscolo2027h1, entry 528,646,946
    SHA-256 186483435f86a7e2811074f3f56200a25838c4b6035a170791de7f0176c3b08c
    Public key SHA-256 c158699d53de790f948c54df1e77d0d06635450f034721caf958e0b82d42b8b6
    PhishDestroy
    Addresses
    104.21.96.4 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.150.26 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.96.4, 172.67.150.26): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    raydiumchain.world
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 13:33 UTC

    Suggest a correction

  98. skinwellnesshub.com US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX presentSPF ~allDMARC missingRegistered 2 y ago
    DetailsHide
    Hostname
    skinwellnesshub.com
    First seen
    2026-11-08 13:31 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-08 11:57 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-11-08 12:28 UTC to 2027-02-06 12:28 UTC
    Logged 2026-11-08 13:26 UTC in DigiCert Sphinx2027h1, entry 402,339,203
    SHA-256 825d2cb5cdd203013dd0f63d032418f83140bf4e8f1b1dbd83a0af5ed96e9626
    Public key SHA-256 6c371d282185b94a5ec22c186cc3a036cd047e4de40daef3843aa1b89110daae
    PhishDestroy
    Addresses
    104.21.16.134 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.212.116 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.16.134, 172.67.212.116): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    skinwellnesshub.com
    Registered
    2024-09-24 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Receives mail at route1.mx.cloudflare.net, route3.mx.cloudflare.net, route2.mx.cloudflare.net
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 13:32 UTC

    Suggest a correction

  99. solixa.xyz US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 59 d ago
    DetailsHide
    Hostname
    solixa.xyz
    First seen
    2026-11-08 13:31 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 11:58 UTC
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-08 11:57 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-11-08 12:31 UTC to 2027-02-06 12:31 UTC
    Logged 2026-11-08 13:29 UTC in Google ParcelYard2027h1, entry 678,432,433
    SHA-256 1709866ec9fbcc2b56675bfa9699ab3e56bba43de851b66514933a412a782830
    Public key SHA-256 62ef590e85a4d2235ca27cd1474ed4f2e3fb185ef4b6ff4c7a77fc77caf6cdfc
    Addresses
    104.21.65.85 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.160.162 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.65.85, 172.67.160.162): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    solixa.xyz
    Registered
    2026-09-10 · Global Domain Group LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 13:32 UTC

    Suggest a correction

  100. www.mrking14.com SG · AS63949 · Akamai Connected Cloud3 addresses
    ReportedAkamai LinodeUnder mrking14.com, reported by PhishDestroyMX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    www.mrking14.com
    First seen
    2026-11-08 13:31 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-08 11:57 UTC
    Reported
    PhishDestroy, listing mrking14.com and the names under it
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-11-08 12:27 UTC to 2027-02-06 12:27 UTC
    Logged 2026-11-08 13:26 UTC in Geomys Tuscolo2027h1, entry 528,628,260
    SHA-256 788c71a720b63253873f1d34ebb52785883df38f21ae7afbf050d6ec1cdbe63a
    Public key SHA-256 9c0d3cae4928bd8bad20b19f0040371e902bb6f7825ecdd301bfef5b7e864f57
    PhishDestroy
    Addresses
    172.232.24.161 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)
    172.232.24.235 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)
    172.234.25.42 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)
    Akamai Linode
    Akamai Linode (172.232.24.161, 172.232.24.235, 172.234.25.42): a cloud provider. It rents servers and addresses to its customers.
    Domain
    mrking14.com
    Registered
    2026-07-01 · NameSilo, LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 08:36 UTC

    Suggest a correction

Showing 101–200 of 5,614 hostnames.Back to the start
How these findings are made

Brand spoofs: findings that impersonate one of the 1,000 most-impersonated brands. The list opens on them; All shows every finding.

Reported: a hostname in a new certificate that PhishTank or PhishDestroy reports, or that CERT Polska, MetaMask, USOM, MODA, NPA 165, JPCERT/CC, the AMF, the FSMA or BaFin lists. When a listing source names the brand imitated or a category, the finding shows it. Phishing host: a brand lookalike that resolves to an address which hosted confirmed phishing in the last 48 hours. Spamhaus DROP: a brand lookalike that resolves to an address on the Spamhaus DROP list. Same certificate: another name on a finding's certificate that resolves to an address on Spamhaus DROP. Suspicious: other names on a finding's certificate, rated high for a hosting-alias name or a lookalike on a phishing host, medium for a lookalike; they join the findings once they have listing evidence of their own. Also under Suspicious: registered domains using a brand’s name that PhishDestroy’s community list includes, rated high when they resolve to an address with no parking or holding signal, medium otherwise.

Brand labels cover the 1,000 most-impersonated brands. A name gets a brand when the brand's token starts a label or follows a hyphen, with a lure word such as "login" or "verify" for common words. Hostnames appear as plain text. How it works · Sources