Live

Live phishing findings

New certificates and domain registrations, with every hostname resolved and checked against phishing reports and bad-address lists. The newest findings, updated hourly.

Updated hourly · 2026-11-08 16:43 UTC
Certificate-log entries · 24 h
334.6M
from 84 distinct feeds
Unique certificates · 24 h
32.5M
each reviewed
Names resolved · 24 h
21.5M
16.2M with an address
Findings · 24 h
5,691
204 of 1,061 brands targeted

4,955 hostnames from the last 24 hours.

The findings have updated. The list starts again from the top.

  1. aavefinances.click US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    aavefinances.click
    First seen
    2026-11-08 16:41 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 11:58 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-08 15:39 UTC to 2027-02-06 16:36 UTC
    Logged 2026-11-08 16:39 UTC in Google ParcelYard2027h1, entry 681,032,604
    SHA-256 9ba15176991c06dd761fddf249d9fda580d6915d1df4377d31586d89f846a425
    Public key SHA-256 a47fed08589945ea00f7dc2b910aacbe8755d7b8f300b341829c1588a447db6e
    Addresses
    104.21.75.164 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.178.190 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.75.164, 172.67.178.190): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    aavefinances.click
    Registered
    2026-07-13 · Dynadot, LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 16:49 UTC

    Suggest a correction

  2. blog.vaultswallet.app CY · AS47583 · AS-HOSTINGER Hostinger Inte…2 addresses
    ListedHostingerUnder vaultswallet.app, listed by MetaMaskMX presentSPF ~allDMARC policy noneRegistered 10 mo ago
    DetailsHide
    Hostname
    blog.vaultswallet.app
    First seen
    2026-11-08 16:41 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 11:58 UTC
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-08 11:57 UTC
    Listed
    MetaMask, listing vaultswallet.app and the names under it
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-08 15:40 UTC to 2027-02-06 15:40 UTC
    Logged 2026-11-08 16:39 UTC in Google ParcelYard2027h1, entry 681,033,903
    SHA-256 2da8924e4b2fa218ae6dbe024e94fae8b6477db7a64c47706582cd9f4343cba5
    Public key SHA-256 69547b1e30998089808b2e26808d75e2e06cf1a914a735f066661b92e9cc82b4
    Addresses
    82.198.227.198 · Cyprus · AS47583 AS-HOSTINGER Hostinger International Limited · Hostinger (shared hosting)
    2a02:4780:3f:2169:0:2f86:19de:2
    Hostinger
    Hostinger (82.198.227.198): shared web hosting and domain registration. One address typically serves many customer sites.
    Domain
    vaultswallet.app
    Registered
    2026-01-11 · Hosting Concepts B.V. d/b/a Registrar.eu
    MX
    Receives mail at mx1.hostinger.com, mx2.hostinger.com
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    DMARC policy p=none: reports only
    Checked
    2026-11-08 08:25 UTC

    Suggest a correction

  3. encyclopediashow.com US · AS19318 · Interserver, Inc
    ListedInterserverListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 17 y ago
    DetailsHide
    Hostname
    encyclopediashow.com
    First seen
    2026-11-08 16:41 UTC
    Listing
    CERT Polska listed it 2026-05-12 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 15:33 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR2 · precertificate
    Valid 2026-11-08 15:40 UTC to 2027-02-06 15:40 UTC
    Logged 2026-11-08 16:39 UTC in IPng Networks Gouda2027h1, entry 355,616,195
    SHA-256 4a661075c22b4aedab97bf13c1fc4abb7ff033544121762f7846cbd51d1d2b3b
    Public key SHA-256 55c982be9c44b34babd5836ecffa63140fae7c294735ca2503c8ca918607dd31
    Addresses
    64.20.51.118 · United States · AS19318 IS-AS-1 - Interserver, Inc · Interserver (shared hosting)
    Interserver
    Interserver (64.20.51.118): shared web hosting and domain registration. One address typically serves many customer sites.
    Domain
    encyclopediashow.com
    Registered
    2009-08-09 · Tucows Domains Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 16:49 UTC

    Suggest a correction

  4. imtekcen.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    imtekcen.com
    First seen
    2026-11-08 16:41 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 11:58 UTC
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-08 11:57 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-08 15:37 UTC to 2027-02-06 16:36 UTC
    Logged 2026-11-08 16:37 UTC in IPng Networks Halloumi2027h1, entry 413,858,441
    SHA-256 e6ae5c8188dc3af8e9ea84aff5bc72062d677ddb85022c88da8f9eb72659d826
    Public key SHA-256 ac4b525ae6dd181c91cb021b9727ce1dd663d7cd76a4d00f552e6b37b7a33831
    Addresses
    104.21.19.17 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.184.116 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.19.17, 172.67.184.116): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    imtekcen.com
    Registered
    2026-07-13 · Guangdong JinWanBang Technology Investment Co., Ltd.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 16:48 UTC

    Suggest a correction

  5. memescandata.beer US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    memescandata.beer
    First seen
    2026-11-08 16:41 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 11:58 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-08 15:40 UTC to 2027-02-06 15:40 UTC
    Logged 2026-11-08 16:39 UTC in Google PlumbersArms2027h1, entry 681,340,920
    SHA-256 1ba3d1f2f0b0c755238f1bff633d8244982a6269de572389684e03abbbc031a6
    Public key SHA-256 dcdd342540d4bca567a508cb53b7a26f5d31670f9426ae84a7fe09bea4b82941
    Addresses
    104.21.95.66 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.143.122 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.95.66, 172.67.143.122): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    memescandata.beer
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 16:48 UTC

    Suggest a correction

  6. mglrsmayls.online US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by USOMMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    mglrsmayls.online
    First seen
    2026-11-08 16:41 UTC
    Listing
    USOM listed it 2026-05-23 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 16:06 UTC
    Listed
    USOM
    1. Listed by USOM
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-11-08 15:41 UTC to 2027-02-06 15:41 UTC
    Logged 2026-11-08 16:39 UTC in Google PlumbersArms2027h1, entry 681,342,049
    SHA-256 76940947d81012c20ca19c8619f056eee80440a4ff641d5925036625fcca1cca
    Public key SHA-256 b9ab4927be6795fa5d2de4245a31f2fc6278d1d285fcd68253ab3a8a78421b1d
    Addresses
    104.21.76.74 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.191.24 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.76.74, 172.67.191.24): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    mglrsmayls.online
    Registered
    2026-05-15 · Spaceship, Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 16:49 UTC

    Suggest a correction

  7. nezuxyo.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX presentSPF -allDMARC quarantineRegistered 8 mo ago
    DetailsHide
    Hostname
    nezuxyo.com
    First seen
    2026-11-08 16:41 UTC
    Listing
    CERT Polska listed it 2026-07-08 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 15:33 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-11-08 15:38 UTC to 2027-02-06 15:38 UTC
    Logged 2026-11-08 16:37 UTC in Google ParcelYard2027h1, entry 681,006,356
    SHA-256 8d8c4cb0590e651e377ba3ba841ecb36018933eda6e513c2540257962d052f63
    Public key SHA-256 99f4e4c0df18143b523325a6069a31f21a46627d86bd3b16c89540044d2313b0
    Addresses
    104.21.39.227 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.149.128 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.39.227, 172.67.149.128): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    nezuxyo.com
    Registered
    2026-03-17 · NameCheap, Inc.
    MX
    Receives mail at mail.nezuxyo.com
    SPF
    SPF record with -all: other senders fail
    DMARC
    DMARC policy p=quarantine
    Checked
    2026-11-08 16:49 UTC

    Suggest a correction

  8. origin.oxywalt.com VG · AS40034 · Confluence Networks Inc
    ReportedParking page · Confluence NetworksUnder oxywalt.com, reported by PhishDestroyMX absentSPF -allDMARC missingRegistered 13 mo ago
    DetailsHide
    Hostname
    origin.oxywalt.com
    First seen
    2026-11-08 16:41 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-11-07 · still listed at the last successful feed check 2026-11-08 11:57 UTC
    Reported
    PhishDestroy, listing oxywalt.com and the names under it
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by ZeroSSL ECC DV SSL CA 2 · precertificate
    Valid 2026-11-08 00:00 UTC to 2027-02-06 23:59 UTC
    Logged 2026-11-08 16:35 UTC in IPng Networks Halloumi2027h1, entry 413,842,254
    SHA-256 1ea0f33fa068a13e4d3629642771189f4a45524ba2e15e310d381f4cec8b5c98
    Public key SHA-256 7caacd0a891073581d7d67d00ed777dfc7de54eb7cbeed492f015daed4bc82b5
    PhishDestroy
    Addresses
    208.91.197.238 · British Virgin Islands · AS40034 CONFLUENCE-NETWORK-INC - Confluence Networks Inc · Confluence Networks (parking page)
    Parking page · Confluence Networks
    Confluence Networks (208.91.197.238): a parking service. It answers for names that are typically for sale or unused.
    Domain
    oxywalt.com
    Registered
    2025-10-28 · Host Africa (Pty.) Ltd.
    MX
    Publishes no mail exchanger
    SPF
    SPF record with -all: other senders fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 06:11 UTC

    Suggest a correction

  9. secrc.work US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by NPA 165 (information services)MX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    secrc.work
    First seen
    2026-11-08 16:41 UTC
    Listing
    NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 13:35 UTC
    Listed
    NPA 165
    1. Observed in the NPA 165 feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-08 15:41 UTC to 2027-02-06 15:41 UTC
    Logged 2026-11-08 16:40 UTC in Google ParcelYard2027h1, entry 681,046,452
    SHA-256 3e19596fa4bfa40452bf05199b3a8390fc995a0ab25faa48b6a47f7254428acf
    Public key SHA-256 2404cc08ec52731cd2492c09b7b5f55177ecd383770ae6ca9cce316d864fe154
    Addresses
    104.21.16.24 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.165.250 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.16.24, 172.67.165.250): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    secrc.work
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 16:48 UTC

    Suggest a correction

  10. win148.net US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 10 mo ago
    DetailsHide
    Hostname
    win148.net
    First seen
    2026-11-08 16:41 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-08 11:57 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-08 15:36 UTC to 2027-02-06 16:35 UTC
    Logged 2026-11-08 16:36 UTC in Google ParcelYard2027h1, entry 681,002,531
    SHA-256 2f3f7b6cd06537525b32d4567f1d90fa660957117f37c6de40ca45a5c26b0cdb
    Public key SHA-256 197f22ee13e1fd0cd963a2e3399e19fd831996288c87d41fe076ae263d0bde5b
    PhishDestroy
    Addresses
    104.21.33.198 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.149.27 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.33.198, 172.67.149.27): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    win148.net
    Registered
    2026-01-11 · NameCheap, Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 16:48 UTC

    Suggest a correction

  11. acs.androidloading.com RU · AS57724 · DDOS-GUARD DDOS-GUARD LTD
    ReportedDDoS-GuardUnder androidloading.com, reported by PhishDestroyMX absentSPF missingDMARC missingRegistered 4 y ago
    DetailsHide
    Hostname
    acs.androidloading.com
    First seen
    2026-11-08 16:36 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-08 11:57 UTC
    Reported
    PhishDestroy, listing androidloading.com and the names under it
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR2
    Valid 2026-11-08 15:36 UTC to 2027-02-06 15:36 UTC
    Logged 2026-11-08 16:35 UTC in Google PlumbersArms2027h1, entry 681,284,294
    SHA-256 875eec514e83bb38f505d2c7456ea0dea29cc8982a83faab772d3c7267c28d3e
    Public key SHA-256 9dd4b39798ebd297cfe88fa63b7e156c9ae694272d53ab428f49c300e8a95787
    PhishDestroy
    Addresses
    185.178.208.191 · Russia · AS57724 DDOS-GUARD DDOS-GUARD LTD · DDoS-Guard (cdn)
    DDoS-Guard
    DDoS-Guard (185.178.208.191): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    androidloading.com
    Registered
    2023-04-19 · Center of Ukrainian Internet Names (UKRNAMES)
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-07 22:30 UTC

    Suggest a correction

  12. api.immediate-exalgo-9-com-gent.financecryptoworld.com US · AS13335 · Cloudflare, Inc.4 addresses
    ListedCloudflareUnder financecryptoworld.com, listed by CERT PolskaMX presentSPF ~allDMARC missingRegistered 22 mo ago
    DetailsHide
    Hostname
    api.immediate-exalgo-9-com-gent.financecryptoworld.com
    First seen
    2026-11-08 16:36 UTC
    Listing
    CERT Polska listed it 2026-06-12 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 15:33 UTC
    Listed
    CERT Polska, listing financecryptoworld.com and the names under it
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WR1 · precertificate
    Valid 2026-11-08 15:30 UTC to 2027-02-06 16:29 UTC
    Logged 2026-11-08 16:30 UTC in DigiCert Sphinx2027h1, entry 403,876,896
    SHA-256 4e16fedee3190c988c7c9b93445329eb751fc20585286b77c541693a7722b477
    Public key SHA-256 17009ad7bfd6c7cc0377fbb3d1eee3fd5c781ff0703016e554df5b64635b5a89
    Addresses
    104.21.10.130 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.131.121 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3033::ac43:8379
    2606:4700:3035::6815:a82
    Cloudflare
    Cloudflare (104.21.10.130, 172.67.131.121): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    financecryptoworld.com
    Registered
    2025-01-30 · MainReg Inc.
    MX
    Receives mail at mail.financecryptoworld.com
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-07 17:16 UTC

    Suggest a correction

  13. demo.plustrade.io AU · AS133618 · Trellian Pty. Limited
    ListedParking page · Above.comUnder plustrade.io, listed by FSMA (fraudulent online trading platform)MX presentSPF -allDMARC missingRegistered 49 d ago
    DetailsHide
    Hostname
    demo.plustrade.io
    First seen
    2026-11-08 16:36 UTC
    Listing
    FSMA warned about it 2026-04-23 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 15:42 UTC
    Listed
    FSMA, listing plustrade.io and the names under it
    1. Warning by FSMA
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-11-08 15:33 UTC to 2027-02-06 15:33 UTC
    Logged 2026-11-08 16:31 UTC in Google PlumbersArms2027h1, entry 681,238,521
    SHA-256 915fcf42489a90da1f813b5dbd0f8cdf6d9b0d2f32cc9a6762c0d87fc8f8fb0a
    Public key SHA-256 f9332fd75168387cdf3c129f241093da43ae8ef3776b483c81c4efdc2fadef41
    Addresses
    103.224.212.213 · Australia · AS133618 TRELLIAN-AS-AP - Trellian Pty. Limited · Trellian / Above.com (parking page)
    Parking page · Above.com
    The registry delegates plustrade.io to Above.com’s nameservers, which answer for it. Above.com: a parking service. It answers for names that are typically for sale or unused. Trellian / Above.com (103.224.212.213): a parking service. It answers for names that are typically for sale or unused.
    Domain
    plustrade.io
    Registered
    2026-09-20 · CommuniGal Communication Ltd.
    MX
    Receives mail at park-mx.above.com
    SPF
    SPF record with -all: other senders fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 16:49 UTC

    Suggest a correction

  14. developer.loudflare.net RU · AS57724 · DDOS-GUARD DDOS-GUARD LTD
    ListedDDoS-GuardUnder loudflare.net, listed by MetaMaskMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    developer.loudflare.net
    First seen
    2026-11-08 16:36 UTC
    Listing
    MetaMask: first observed in the feed 2026-11-01 · still listed at the last successful feed check 2026-11-08 11:58 UTC
    PhishDestroy: first observed in the feed 2026-11-07 · still listed at the last successful feed check 2026-11-08 11:57 UTC
    Listed
    MetaMask, listing loudflare.net and the names under it
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR1
    Valid 2026-11-08 15:36 UTC to 2027-02-06 15:36 UTC
    Logged 2026-11-08 16:35 UTC in Google PlumbersArms2027h1, entry 681,284,220
    SHA-256 73a9de1d7cec99ce4bb1a0faf79a7e0eaf26e542c5f83d74e1f146463e388f19
    Public key SHA-256 8f4201f4fdadc45c1521f8bb3cccc9f84f6103db4360670244a8ab9e82753e20
    Addresses
    45.10.243.43 · Russia · AS57724 DDOS-GUARD DDOS-GUARD LTD · DDoS-Guard (cdn)
    DDoS-Guard
    DDoS-Guard (45.10.243.43): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    loudflare.net
    Registered
    2026-05-24 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 14:46 UTC

    Suggest a correction

  15. dragoniacasino-aus.com US · AS13335 · Cloudflare, Inc.4 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 8 mo ago
    DetailsHide
    Hostname
    dragoniacasino-aus.com
    First seen
    2026-11-08 16:36 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-08 11:57 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-11-08 15:34 UTC to 2027-02-06 15:34 UTC
    Logged 2026-11-08 16:32 UTC in Let's Encrypt Sycamore2027h1, entry 1,053,925,302
    SHA-256 78540968a8ce0a206f1cae743969fea1c16b0ccf9a94a36099d123f00b929763
    Public key SHA-256 23c499e10d2b06184fc2be53c95f91eb26fbcd6ad54f27575cba9b729fbf44d7
    PhishDestroy
    Addresses
    104.21.95.185 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.146.248 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3032::ac43:92f8
    2606:4700:3037::6815:5fb9
    Cloudflare
    Cloudflare (104.21.95.185, 172.67.146.248): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    dragoniacasino-aus.com
    Registered
    2026-03-17 · Atak Domain Bilgi Teknolojileri A.S.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 16:49 UTC

    Suggest a correction

  16. istanbuldurum.com US · AS13335 · Cloudflare, Inc.4 addresses
    ListedCloudflareListed by USOMMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    istanbuldurum.com
    First seen
    2026-11-08 16:36 UTC
    Listing
    USOM listed it 2026-06-02 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 16:06 UTC
    Listed
    USOM
    1. Listed by USOM
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-08 15:35 UTC to 2027-02-06 15:35 UTC
    Logged 2026-11-08 16:33 UTC in Google ParcelYard2027h1, entry 680,961,811
    SHA-256 0dceaec25caecf6d3962ee149afc18d03a801c6138b4a35bffb23151a657f022
    Public key SHA-256 0450586a7aee8441ab302a4132a0e9b7174cf6343d2621b13af604f5c26eb590
    Addresses
    104.21.46.29 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.222.235 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3030::ac43:deeb
    2606:4700:3033::6815:2e1d
    Cloudflare
    Cloudflare (104.21.46.29, 172.67.222.235): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    istanbuldurum.com
    Registered
    2026-05-14 · Realtime Register B.V.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 16:49 UTC

    Suggest a correction

  17. market.old.com.ru 83.141.93.62
    ReportedReported by PhishDestroy
    DetailsHide
    Hostname
    market.old.com.ru
    First seen
    2026-11-08 16:36 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-08 11:57 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR1
    Valid 2026-11-08 15:36 UTC to 2027-02-06 15:36 UTC
    Logged 2026-11-08 16:35 UTC in Google ParcelYard2027h1, entry 680,981,516
    SHA-256 bd63b9ce19b59be1d7aa392bee36178b6385d8b1d934b7973f68c4ce3faf14cf
    Public key SHA-256 7dd9c2776a29cd7dc9bfbdd16b454697f91e3426961c8841fc6d507ce9235f79
    PhishDestroy
    Addresses
    83.141.93.62

    Suggest a correction

  18. minedata.pics US · AS13335 · Cloudflare, Inc.4 addresses
    ListedCloudflareListed by USOMMX absentSPF missingDMARC missingRegistered 12 mo ago
    DetailsHide
    Hostname
    minedata.pics
    First seen
    2026-11-08 16:36 UTC
    Listing
    USOM listed it 2026-06-22 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 16:06 UTC
    Listed
    USOM
    1. Listed by USOM
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-08 15:35 UTC to 2027-02-06 16:33 UTC
    Logged 2026-11-08 16:35 UTC in IPng Networks Halloumi2027h1, entry 413,834,155
    SHA-256 12755d69a19e832669f3752bf1d43fe4b1acfb7a9b628b548568bf6528006147
    Public key SHA-256 5178c3d8748fb97b731207cbe2015e857199f7029728cb7425cb418dbeedbb6b
    Addresses
    104.21.53.27 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.208.13 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3032::6815:351b
    2606:4700:3035::ac43:d00d
    Cloudflare
    Cloudflare (104.21.53.27, 172.67.208.13): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    minedata.pics
    Registered
    2025-11-17 · Dynadot Inc
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 16:49 UTC

    Suggest a correction

  19. mycas.bet US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 10 mo ago
    DetailsHide
    Hostname
    mycas.bet
    First seen
    2026-11-08 16:36 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-08 11:57 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-08 15:32 UTC to 2027-02-06 16:30 UTC
    Logged 2026-11-08 16:32 UTC in Google ParcelYard2027h1, entry 680,948,956
    SHA-256 6c59411e07abaaa31bac05c777bbbc46d646f66b46272c65f2f834b4ebf14e15
    Public key SHA-256 bbc739da748e22a818defc814764ca2da1fcc7acd07927a1f900393c77eafc0c
    PhishDestroy
    Addresses
    104.21.1.234 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.152.146 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.1.234, 172.67.152.146): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    mycas.bet
    Registered
    2026-01-16 · PDR Ltd. d/b/a PublicDomainRegistry.com
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 16:41 UTC

    Suggest a correction

  20. pikashowapps.net.pk US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX presentSPF ~allDMARC missing
    DetailsHide
    Hostname
    pikashowapps.net.pk
    First seen
    2026-11-08 16:36 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 11:58 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR2
    Valid 2026-11-08 15:32 UTC to 2027-02-06 15:32 UTC
    Logged 2026-11-08 16:30 UTC in IPng Networks Gouda2027h1, entry 355,558,601
    SHA-256 670aa2cd4793014cf779f26c905e93855717fe1ba134f7656194e385ef3fd2c9
    Public key SHA-256 45084000ee5756c87cefa270fd8173f4e4a58e0fe2f79713158ffd972e777772
    Addresses
    104.21.3.170 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.130.247 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.3.170, 172.67.130.247): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    pikashowapps.net.pk
    MX
    Receives mail at route2.mx.cloudflare.net, route1.mx.cloudflare.net, route3.mx.cloudflare.net
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 16:41 UTC

    Suggest a correction

  21. pikashowsapk.com.pk US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX presentSPF ~allDMARC missing
    DetailsHide
    Hostname
    pikashowsapk.com.pk
    First seen
    2026-11-08 16:36 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 11:58 UTC
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-08 11:57 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR2
    Valid 2026-11-08 15:32 UTC to 2027-02-06 15:32 UTC
    Logged 2026-11-08 16:30 UTC in Google ParcelYard2027h1, entry 680,921,917
    SHA-256 988bcacdcf92aa6530fb5f64eba3a2e1c3c69bdd2b7a790d7bc5472a1bfb8e07
    Public key SHA-256 8f5b482edbcfdd7f6e502b60e408234c077839861c1ec9d74bc4558edc3297ed
    Addresses
    104.21.89.25 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.136.84 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.89.25, 172.67.136.84): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    pikashowsapk.com.pk
    MX
    Receives mail at route3.mx.cloudflare.net, route1.mx.cloudflare.net, route2.mx.cloudflare.net
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 16:41 UTC

    Suggest a correction

  22. pikashowsapk.org.pk US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX presentSPF ~allDMARC missing
    DetailsHide
    Hostname
    pikashowsapk.org.pk
    First seen
    2026-11-08 16:36 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 11:58 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR2 · precertificate
    Valid 2026-11-08 15:32 UTC to 2027-02-06 15:32 UTC
    Logged 2026-11-08 16:31 UTC in Let's Encrypt Sycamore2027h1, entry 1,053,886,194
    SHA-256 6efb9f6d110f8a2695191d8405f790147a417846fd42dd4b71bb157ae8e412cc
    Public key SHA-256 6a3f6547b6e0a9a9d8cee42848aa0f9ee8f14ec1745e4df93b20930eaa665d64
    Addresses
    104.21.77.131 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.208.140 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.77.131, 172.67.208.140): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    pikashowsapk.org.pk
    MX
    Receives mail at route2.mx.cloudflare.net, route3.mx.cloudflare.net, route1.mx.cloudflare.net
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 16:41 UTC

    Suggest a correction

  23. plustrade.io AU · AS133618 · Trellian Pty. Limited
    ListedParking page · Above.comListed by FSMA (fraudulent online trading platform)MX presentSPF -allDMARC missingRegistered 49 d ago
    DetailsHide
    Hostname
    plustrade.io
    First seen
    2026-11-08 16:36 UTC
    Listing
    FSMA warned about it 2026-04-23 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 15:42 UTC
    Listed
    FSMA
    1. Warning by FSMA
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-11-08 15:33 UTC to 2027-02-06 15:33 UTC
    Logged 2026-11-08 16:31 UTC in Google PlumbersArms2027h1, entry 681,238,521
    SHA-256 915fcf42489a90da1f813b5dbd0f8cdf6d9b0d2f32cc9a6762c0d87fc8f8fb0a
    Public key SHA-256 f9332fd75168387cdf3c129f241093da43ae8ef3776b483c81c4efdc2fadef41
    Addresses
    103.224.212.213 · Australia · AS133618 TRELLIAN-AS-AP - Trellian Pty. Limited · Trellian / Above.com (parking page)
    Parking page · Above.com
    The registry delegates plustrade.io to Above.com’s nameservers, which answer for it. Above.com: a parking service. It answers for names that are typically for sale or unused. Trellian / Above.com (103.224.212.213): a parking service. It answers for names that are typically for sale or unused.
    Domain
    plustrade.io
    Registered
    2026-09-20 · CommuniGal Communication Ltd.
    MX
    Receives mail at park-mx.above.com
    SPF
    SPF record with -all: other senders fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 16:49 UTC

    Suggest a correction

  24. proposals-theindex.finance US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 59 d ago
    DetailsHide
    Hostname
    proposals-theindex.finance
    First seen
    2026-11-08 16:36 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 11:58 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-11-08 15:34 UTC to 2027-02-06 15:34 UTC
    Logged 2026-11-08 16:33 UTC in Let's Encrypt Sycamore2027h1, entry 1,053,939,911
    SHA-256 41ca9a19ef31eeae47cd13a86f9dea0740d3d7b73a843f7a8cb2bc3c9e7cf39b
    Public key SHA-256 e603558bda93b76d8457432cfeeca0718be04907db48cfafe0b0d4168ef63704
    Addresses
    104.21.93.167 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.212.129 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.93.167, 172.67.212.129): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    proposals-theindex.finance
    Registered
    2026-09-10 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 16:49 UTC

    Suggest a correction

  25. rainbet-casinoplay.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX presentSPF ~allDMARC missingRegistered 12 mo ago
    DetailsHide
    Hostname
    rainbet-casinoplay.com
    First seen
    2026-11-08 16:36 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 11:58 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-08 15:31 UTC to 2027-02-06 16:29 UTC
    Logged 2026-11-08 16:31 UTC in Geomys Tuscolo2027h1, entry 530,605,016
    SHA-256 4561d7a7f8cf7c65b1f67e2b7f8958f76c1f8b53429012b56ad5b95502725219
    Public key SHA-256 5689fc8448500c22feedab75aa33898758709b404b47ce9448360e380d8b98eb
    Addresses
    104.21.63.74 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.170.68 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.63.74, 172.67.170.68): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    rainbet-casinoplay.com
    Registered
    2025-11-18 · Internet Domain Service BS Corp
    MX
    Receives mail at route1.mx.cloudflare.net, route3.mx.cloudflare.net, route2.mx.cloudflare.net
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 16:49 UTC

    Suggest a correction

  26. sohantraders.com CY · AS47583 · AS-HOSTINGER Hostinger Inte…2 addresses
    ReportedHostinger CDNReported by PhishDestroyMX presentSPF ~allDMARC policy noneRegistered 11 y ago
    DetailsHide
    Hostname
    sohantraders.com
    First seen
    2026-11-08 16:36 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-08 11:57 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-11-08 15:32 UTC to 2027-02-06 15:32 UTC
    Logged 2026-11-08 16:30 UTC in IPng Networks Gouda2027h1, entry 355,557,635
    SHA-256 b9bb60d647c53763f835539229002893d7dc7ae93e231736a4a6fe8b56626fe6
    Public key SHA-256 6b729154655ba4b5449bcd7ef69bc4fd5190db7d1dfd59f6bcbaab95248d5bd3
    PhishDestroy
    Addresses
    191.96.144.40 · Cyprus · AS47583 AS-HOSTINGER Hostinger International Limited · Hostinger CDN (cdn)
    212.1.212.25 · Cyprus · AS47583 AS-HOSTINGER Hostinger International Limited · Hostinger CDN (cdn)
    Hostinger CDN
    Hostinger CDN (191.96.144.40, 212.1.212.25): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    sohantraders.com
    Registered
    2015-08-29 · Spaceship, Inc.
    MX
    Receives mail at mx1.hostinger.com, mx2.hostinger.com
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    DMARC policy p=none: reports only
    Checked
    2026-11-08 08:26 UTC

    Suggest a correction

  27. stream.bcgame.org.ng US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareUnder bcgame.org.ng, reported by PhishDestroyMX absentSPF missingDMARC missingRegistered 18 mo ago
    DetailsHide
    Hostname
    stream.bcgame.org.ng
    First seen
    2026-11-08 16:36 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-08 11:57 UTC
    Reported
    PhishDestroy, listing bcgame.org.ng and the names under it
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-11-08 15:36 UTC to 2027-02-06 15:36 UTC
    Logged 2026-11-08 16:35 UTC in IPng Networks Halloumi2027h1, entry 413,834,852
    SHA-256 1b7ffb92dbb44962935420df75b5b7ec919146f5505529ce0bf6db74652a56c5
    Public key SHA-256 a4a1707d8ba646d3730b42f85e0c5d1da2a0201278854aa5de9dbac055a8f90b
    PhishDestroy
    Addresses
    104.21.29.14 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.148.72 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.29.14, 172.67.148.72): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    bcgame.org.ng
    Registered
    2025-05-15 · NETIM
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 08:44 UTC

    Suggest a correction

  28. trystly.link US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 59 d ago
    DetailsHide
    Hostname
    trystly.link
    First seen
    2026-11-08 16:36 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 11:58 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-11-08 15:36 UTC to 2027-02-06 15:36 UTC
    Logged 2026-11-08 16:34 UTC in IPng Networks Gouda2027h1, entry 355,587,144
    SHA-256 1872f21a0a9972701620326ae19308297be3898ce2a5509713b2fa22cd685416
    Public key SHA-256 addf218ac223797f8f511123d7e73741e5434fac55b8a744bffc2b8d70b6aa04
    Addresses
    104.21.43.47 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.219.96 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.43.47, 172.67.219.96): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    trystly.link
    Registered
    2026-09-10 · Spaceship, Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 16:49 UTC

    Suggest a correction

  29. uilykpvm.wqxpitde.kvjsbyeg.emnbzdvj.uatmfwcq.www.gatewaylearning.ezgateway.net FR · AS16276 · OVH OVH SAS
    ListedOVHUnder ezgateway.net, listed by USOMMX absentSPF -allDMARC rejectRegistered 7 mo ago
    DetailsHide
    Hostname
    uilykpvm.wqxpitde.kvjsbyeg.emnbzdvj.uatmfwcq.www.gatewaylearning.ezgateway.net
    First seen
    2026-11-08 16:36 UTC
    Listing
    USOM listed it 2026-08-21 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 16:06 UTC
    Listed
    USOM, listing ezgateway.net and the names under it
    1. Listed by USOM
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-08 15:34 UTC to 2027-02-06 15:34 UTC
    Logged 2026-11-08 16:33 UTC in Google ParcelYard2027h1, entry 680,951,768
    SHA-256 afa128faf36c17413bdb23d1df1163ca7a5d24d2c06f02b2e476b2577debce08
    Public key SHA-256 b0da04b7d045fe1c12ef24fa87ef094c7f6bda77ef8febf3c753a57d8febca00
    Addresses
    15.204.116.29 · France · AS16276 OVH OVH SAS · OVH (cloud provider)
    OVH
    OVH (15.204.116.29): a cloud provider. It rents servers and addresses to its customers.
    Domain
    ezgateway.net
    Registered
    2026-04-07 · Dynu Systems Incorporated
    MX
    Publishes no mail exchanger
    SPF
    SPF record with -all: other senders fail
    DMARC
    DMARC policy p=reject
    Checked
    2026-11-07 17:16 UTC

    Suggest a correction

  30. wifi.androidloading.com RU · AS57724 · DDOS-GUARD DDOS-GUARD LTD
    ReportedDDoS-GuardUnder androidloading.com, reported by PhishDestroyMX absentSPF missingDMARC missingRegistered 4 y ago
    DetailsHide
    Hostname
    wifi.androidloading.com
    First seen
    2026-11-08 16:36 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-08 11:57 UTC
    Reported
    PhishDestroy, listing androidloading.com and the names under it
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR2
    Valid 2026-11-08 15:36 UTC to 2027-02-06 15:36 UTC
    Logged 2026-11-08 16:35 UTC in Google PlumbersArms2027h1, entry 681,284,294
    SHA-256 875eec514e83bb38f505d2c7456ea0dea29cc8982a83faab772d3c7267c28d3e
    Public key SHA-256 9dd4b39798ebd297cfe88fa63b7e156c9ae694272d53ab428f49c300e8a95787
    PhishDestroy
    Addresses
    185.178.208.191 · Russia · AS57724 DDOS-GUARD DDOS-GUARD LTD · DDoS-Guard (cdn)
    DDoS-Guard
    DDoS-Guard (185.178.208.191): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    androidloading.com
    Registered
    2023-04-19 · Center of Ukrainian Internet Names (UKRNAMES)
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-07 22:30 UTC

    Suggest a correction

  31. wsdhki.cam US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by NPA 165 (transport and delivery)MX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    wsdhki.cam
    First seen
    2026-11-08 16:36 UTC
    Listing
    NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 13:35 UTC
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-08 11:57 UTC
    Listed
    NPA 165
    1. Observed in the NPA 165 feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-11-08 15:36 UTC to 2027-02-06 15:36 UTC
    Logged 2026-11-08 16:35 UTC in Let's Encrypt Willow2027h1, entry 1,009,893,135
    SHA-256 2ec94ccce42bf20f3e890ff3463d9ddb227de0a2c5c28f9970dbbb594c10ac79
    Public key SHA-256 fa889cd48c6b3e3cd0fdd607d7224801d56b1b7a77b1c420026abb408cf403bb
    Addresses
    104.21.75.176 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.179.182 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.75.176, 172.67.179.182): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    wsdhki.cam
    Registered
    2026-05-03 · Gname.com Pte. Ltd.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 16:49 UTC

    Suggest a correction

  32. www.pikashowapps.net.pk US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareUnder pikashowapps.net.pk, listed by MetaMaskMX presentSPF ~allDMARC missing
    DetailsHide
    Hostname
    www.pikashowapps.net.pk
    First seen
    2026-11-08 16:36 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 11:58 UTC
    Listed
    MetaMask, listing pikashowapps.net.pk and the names under it
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR2
    Valid 2026-11-08 15:32 UTC to 2027-02-06 15:32 UTC
    Logged 2026-11-08 16:30 UTC in IPng Networks Gouda2027h1, entry 355,558,601
    SHA-256 670aa2cd4793014cf779f26c905e93855717fe1ba134f7656194e385ef3fd2c9
    Public key SHA-256 45084000ee5756c87cefa270fd8173f4e4a58e0fe2f79713158ffd972e777772
    Addresses
    104.21.3.170 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.130.247 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.3.170, 172.67.130.247): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    pikashowapps.net.pk
    MX
    Receives mail at route2.mx.cloudflare.net, route1.mx.cloudflare.net, route3.mx.cloudflare.net
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 16:41 UTC

    Suggest a correction

  33. www.pikashowsapk.com.pk US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareUnder pikashowsapk.com.pk, listed by MetaMaskMX presentSPF ~allDMARC missing
    DetailsHide
    Hostname
    www.pikashowsapk.com.pk
    First seen
    2026-11-08 16:36 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 11:58 UTC
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-08 11:57 UTC
    Listed
    MetaMask, listing pikashowsapk.com.pk and the names under it
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR2
    Valid 2026-11-08 15:32 UTC to 2027-02-06 15:32 UTC
    Logged 2026-11-08 16:30 UTC in Google ParcelYard2027h1, entry 680,921,917
    SHA-256 988bcacdcf92aa6530fb5f64eba3a2e1c3c69bdd2b7a790d7bc5472a1bfb8e07
    Public key SHA-256 8f5b482edbcfdd7f6e502b60e408234c077839861c1ec9d74bc4558edc3297ed
    Addresses
    104.21.89.25 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.136.84 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.89.25, 172.67.136.84): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    pikashowsapk.com.pk
    MX
    Receives mail at route3.mx.cloudflare.net, route1.mx.cloudflare.net, route2.mx.cloudflare.net
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 16:41 UTC

    Suggest a correction

  34. www.pikashowsapk.org.pk US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareUnder pikashowsapk.org.pk, listed by MetaMaskMX presentSPF ~allDMARC missing
    DetailsHide
    Hostname
    www.pikashowsapk.org.pk
    First seen
    2026-11-08 16:36 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 11:58 UTC
    Listed
    MetaMask, listing pikashowsapk.org.pk and the names under it
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR2 · precertificate
    Valid 2026-11-08 15:32 UTC to 2027-02-06 15:32 UTC
    Logged 2026-11-08 16:31 UTC in Let's Encrypt Sycamore2027h1, entry 1,053,886,194
    SHA-256 6efb9f6d110f8a2695191d8405f790147a417846fd42dd4b71bb157ae8e412cc
    Public key SHA-256 6a3f6547b6e0a9a9d8cee42848aa0f9ee8f14ec1745e4df93b20930eaa665d64
    Addresses
    104.21.77.131 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.208.140 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.77.131, 172.67.208.140): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    pikashowsapk.org.pk
    MX
    Receives mail at route2.mx.cloudflare.net, route3.mx.cloudflare.net, route1.mx.cloudflare.net
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 16:41 UTC

    Suggest a correction

  35. www.pikashowtv.org.pk US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareUnder pikashowtv.org.pk, listed by MetaMaskMX presentSPF ~allDMARC missing
    DetailsHide
    Hostname
    www.pikashowtv.org.pk
    First seen
    2026-11-08 16:36 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 11:58 UTC
    Listed
    MetaMask, listing pikashowtv.org.pk and the names under it
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR1 · precertificate
    Valid 2026-11-08 15:32 UTC to 2027-02-06 15:32 UTC
    Logged 2026-11-08 16:31 UTC in Geomys Tuscolo2027h1, entry 530,596,854
    SHA-256 9f198013a85a5dcd985be6fefb2f9fb332c93f7d5129a9196251d80d808cdf50
    Public key SHA-256 96342afc0cb2dd6b085bf96e8a708798e17db8c335e5fbf0b14e153a5b4640df
    Addresses
    104.21.75.2 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.209.147 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.75.2, 172.67.209.147): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    pikashowtv.org.pk
    MX
    Receives mail at route1.mx.cloudflare.net, route2.mx.cloudflare.net, route3.mx.cloudflare.net
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 03:32 UTC

    Suggest a correction

  36. www.revanced.pk US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareUnder revanced.pk, listed by MetaMaskMX presentSPF ~allDMARC missing
    DetailsHide
    Hostname
    www.revanced.pk
    First seen
    2026-11-08 16:36 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 11:58 UTC
    Listed
    MetaMask, listing revanced.pk and the names under it
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR1
    Valid 2026-11-08 15:32 UTC to 2027-02-06 15:32 UTC
    Logged 2026-11-08 16:31 UTC in Google ParcelYard2027h1, entry 680,927,445
    SHA-256 7d62698e514820ada5a2471c77291d6ebf84a188764458c526d70ca42b00c273
    Public key SHA-256 91d2743837d62a73135be60e9c714356b7e0a82473325e0e080daed2ea5b5c4d
    Addresses
    104.21.76.125 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.195.118 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.76.125, 172.67.195.118): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    revanced.pk
    MX
    Receives mail at route1.mx.cloudflare.net, route3.mx.cloudflare.net, route2.mx.cloudflare.net
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 07:26 UTC

    Suggest a correction

  37. www.sohantraders.com CY · AS47583 · AS-HOSTINGER Hostinger Inte…2 addresses
    ReportedHostinger CDNUnder sohantraders.com, reported by PhishDestroyMX presentSPF ~allDMARC policy noneRegistered 11 y ago
    DetailsHide
    Hostname
    www.sohantraders.com
    First seen
    2026-11-08 16:36 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-08 11:57 UTC
    Reported
    PhishDestroy, listing sohantraders.com and the names under it
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-11-08 15:32 UTC to 2027-02-06 15:32 UTC
    Logged 2026-11-08 16:30 UTC in IPng Networks Gouda2027h1, entry 355,557,635
    SHA-256 b9bb60d647c53763f835539229002893d7dc7ae93e231736a4a6fe8b56626fe6
    Public key SHA-256 6b729154655ba4b5449bcd7ef69bc4fd5190db7d1dfd59f6bcbaab95248d5bd3
    PhishDestroy
    Addresses
    191.96.144.123 · Cyprus · AS47583 AS-HOSTINGER Hostinger International Limited · Hostinger CDN (cdn)
    191.101.104.93 · Cyprus · AS47583 AS-HOSTINGER Hostinger International Limited · Hostinger CDN (cdn)
    Hostinger CDN
    Hostinger CDN (191.96.144.123, 191.101.104.93): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    sohantraders.com
    Registered
    2015-08-29 · Spaceship, Inc.
    MX
    Receives mail at mx1.hostinger.com, mx2.hostinger.com
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    DMARC policy p=none: reports only
    Checked
    2026-11-08 08:26 UTC

    Suggest a correction

  38. xoxtw.store US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by NPA 165 (finance and insurance)MX absentSPF missingDMARC missingRegistered 10 mo ago
    DetailsHide
    Hostname
    xoxtw.store
    First seen
    2026-11-08 16:36 UTC
    Listing
    NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 13:35 UTC
    Listed
    NPA 165
    1. Observed in the NPA 165 feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-08 15:34 UTC to 2027-02-06 16:33 UTC
    Logged 2026-11-08 16:34 UTC in IPng Networks Halloumi2027h1, entry 413,833,285
    SHA-256 84aaf49a0e981ee72ffae995cd4a51ab1fc808d594e10f31e6bc4417445e9298
    Public key SHA-256 9248a2e4a5a75883663dd682baf9f55bc17970b3d4cbd6ca387124a1988b0f73
    Addresses
    104.21.81.246 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.166.50 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.81.246, 172.67.166.50): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    xoxtw.store
    Registered
    2026-01-17 · Alibaba Cloud Computing Ltd. d/b/a HiChina (www.net.cn)
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 16:49 UTC

    Suggest a correction

  39. capcut.net.pk SC · AS210848 · TK-NET Telkom Internet LTD
    ReportedReported by PhishDestroyMX presentSPF ~allDMARC policy none
    DetailsHide
    Hostname
    capcut.net.pk
    First seen
    2026-11-08 16:31 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-08 11:57 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR1
    Valid 2026-11-08 15:27 UTC to 2027-02-06 15:27 UTC
    Logged 2026-11-08 16:26 UTC in Google ParcelYard2027h1, entry 680,865,524
    SHA-256 2ca48f0e30071ef887e1bfa103530a81f0ea3b3e4d495ed22ba99d58c7e796ed
    Public key SHA-256 9a87383ff9d084b3f94621c536dd48201141e5e0af860c115261fb09a6c3129c
    PhishDestroy
    Addresses
    31.43.191.161 · Seychelles · AS210848 TK-NET Telkom Internet LTD
    Domain
    capcut.net.pk
    MX
    Receives mail at capcut.net.pk
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    DMARC policy p=none: reports only
    Checked
    2026-11-08 16:36 UTC

    Suggest a correction

  40. capcutapkk.org US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX presentSPF ~allDMARC missingRegistered 20 mo ago
    DetailsHide
    Hostname
    capcutapkk.org
    First seen
    2026-11-08 16:31 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 11:58 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR2
    Valid 2026-11-08 15:27 UTC to 2027-02-06 15:27 UTC
    Logged 2026-11-08 16:26 UTC in Google PlumbersArms2027h1, entry 681,167,111
    SHA-256 0150c925955f8f40266bb862c105627fb91016b925bb40afce1380650af3c72c
    Public key SHA-256 9305608313c3f6a05b46f935780609be9477402491324df5d2e91bb7658d4970
    Addresses
    104.21.3.114 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.130.167 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.3.114, 172.67.130.167): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    capcutapkk.org
    Registered
    2025-03-14 · Name.com, Inc.
    MX
    Receives mail at route3.mx.cloudflare.net, route2.mx.cloudflare.net, route1.mx.cloudflare.net
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 16:49 UTC

    Suggest a correction

  41. indexexelon-x.click NL · AS62370 · Snel Snel.com B.V.
    ListedListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 8 mo ago
    DetailsHide
    Hostname
    indexexelon-x.click
    First seen
    2026-11-08 16:31 UTC
    Listing
    CERT Polska listed it 2026-09-09 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 15:33 UTC
    PhishDestroy: first observed in the feed 2026-10-30 · still listed at the last successful feed check 2026-11-08 11:57 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by ZeroSSL ECC DV SSL CA 2 · precertificate
    Valid 2026-11-08 00:00 UTC to 2027-02-06 23:59 UTC
    Logged 2026-11-08 16:29 UTC in DigiCert Wyvern2027h1, entry 456,330,656
    SHA-256 0fdc675417adc0134ed850fd15272717b1c569c8bc98d64ea9eca836e5a62c5e
    Public key SHA-256 cbad3c7862e1f85056d2bb3b153226db3a21a8c18e81911b723669436ffad4b0
    Addresses
    185.62.58.101 · Netherlands · AS62370 Snel Snel.com B.V.
    Domain
    indexexelon-x.click
    Registered
    2026-03-22 · Dynadot, LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 16:36 UTC

    Suggest a correction

  42. instapro2.org.pk SC · AS210848 · TK-NET Telkom Internet LTD
    ReportedReported by PhishDestroyMX presentSPF ~allDMARC policy none
    DetailsHide
    Hostname
    instapro2.org.pk
    First seen
    2026-11-08 16:31 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-08 11:57 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR1
    Valid 2026-11-08 15:30 UTC to 2027-02-06 15:29 UTC
    Logged 2026-11-08 16:28 UTC in Google PlumbersArms2027h1, entry 681,196,214
    SHA-256 3e76a7da71f497bc42b1831ce7225d3afb0ce1d7d2b213e14a183cc91b6ddf42
    Public key SHA-256 d1ed907885cc15a8831706c03ee5764e17dcb50044048e9a82bb10083ac3dc2c
    PhishDestroy
    Addresses
    31.43.191.161 · Seychelles · AS210848 TK-NET Telkom Internet LTD
    Domain
    instapro2.org.pk
    MX
    Receives mail at instapro2.org.pk
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    DMARC policy p=none: reports only
    Checked
    2026-11-08 16:36 UTC

    Suggest a correction

  43. join-spark.app US · AS16509 · Amazon.com, Inc.2 addresses
    ListedAmazon Web ServicesListed by MetaMaskMX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    join-spark.app
    First seen
    2026-11-08 16:31 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 11:58 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-08 15:29 UTC to 2027-02-06 16:28 UTC
    Logged 2026-11-08 16:29 UTC in Google ParcelYard2027h1, entry 680,904,424
    SHA-256 d2daf148297d096a349d7ce61ebb407c999a4c18f6937f558883ad7e0503aa9f
    Public key SHA-256 99f90f9316ad10f788df91f273393e9eb8d34d51ef0798687800e5f4ebfe7345
    Addresses
    64.29.17.65 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
    216.198.79.65 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
    Amazon Web Services
    Amazon Web Services (64.29.17.65, 216.198.79.65): a cloud provider. It rents servers and addresses to its customers.
    Domain
    join-spark.app
    Registered
    2026-07-13 · CloudFlare, Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 16:49 UTC

    Suggest a correction

  44. mailadmin.xmrwallet.me RU · AS57724 · DDOS-GUARD DDOS-GUARD LTD
    ReportedDDoS-GuardUnder xmrwallet.me, reported by PhishDestroyMX presentSPF ~allDMARC missingRegistered 9 mo ago
    DetailsHide
    Hostname
    mailadmin.xmrwallet.me
    First seen
    2026-11-08 16:31 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-08 11:57 UTC
    Reported
    PhishDestroy, listing xmrwallet.me and the names under it
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR1
    Valid 2026-11-08 15:30 UTC to 2027-02-06 15:30 UTC
    Logged 2026-11-08 16:29 UTC in Google PlumbersArms2027h1, entry 681,205,093
    SHA-256 14c63692e9c8bac5a634c7910519e8299fb7449ec2e2ef71ca2524f4e23c2480
    Public key SHA-256 79cb9bd0093fa89aaedf8854ad180c9a89f292a5b6ce0814e92521399c791773
    PhishDestroy
    Addresses
    185.129.100.248 · Russia · AS57724 DDOS-GUARD DDOS-GUARD LTD · DDoS-Guard (cdn)
    DDoS-Guard
    DDoS-Guard (185.129.100.248): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    xmrwallet.me
    Registered
    2026-02-26 · Key-Systems GmbH
    MX
    Receives mail at mx1.privateemail.com, mx2.privateemail.com
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 08:59 UTC

    Suggest a correction

  45. nqdyv.asia US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by NPA 165 (information services)MX absentSPF missingDMARC missingRegistered 12 mo ago
    DetailsHide
    Hostname
    nqdyv.asia
    First seen
    2026-11-08 16:31 UTC
    Listing
    NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 13:35 UTC
    Listed
    NPA 165
    1. Observed in the NPA 165 feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-08 15:29 UTC to 2027-02-06 16:27 UTC
    Logged 2026-11-08 16:29 UTC in Let's Encrypt Sycamore2027h1, entry 1,053,836,771
    SHA-256 8d68c49720b2ed00710f76b20e128da46399279bda151c3e1d8fd65da6670959
    Public key SHA-256 3f2757fd5d8ef3dc96f6806f7f24d43a1b24db70be6722360ad5a43abfe41ba8
    Addresses
    104.21.86.142 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.220.146 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.86.142, 172.67.220.146): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    nqdyv.asia
    Registered
    2025-11-19 · Alibaba Cloud Computing Ltd. d/b/a HiChina (www.net.cn)
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 16:49 UTC

    Suggest a correction

  46. qxkm.info US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 59 d ago
    DetailsHide
    Hostname
    qxkm.info
    First seen
    2026-11-08 16:31 UTC
    Listing
    CERT Polska listed it 2026-09-18 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 15:33 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-11-08 15:27 UTC to 2027-02-06 15:27 UTC
    Logged 2026-11-08 16:25 UTC in Let's Encrypt Willow2027h1, entry 1,009,640,129
    SHA-256 630db19564d068bb687eaa1c1751c4b10875dc0945658bc4c4b59cb639fa63cc
    Public key SHA-256 4c2fadd37820c757b935888f5386957e7d086adc2e187f7396dc0d39a711028d
    Addresses
    104.21.26.125 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.136.66 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.26.125, 172.67.136.66): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    qxkm.info
    Registered
    2026-09-10 · Dynadot Inc
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 16:49 UTC

    Suggest a correction

  47. storage.androidloading.com RU · AS57724 · DDOS-GUARD DDOS-GUARD LTD
    ReportedDDoS-GuardUnder androidloading.com, reported by PhishDestroyMX absentSPF missingDMARC missingRegistered 4 y ago
    DetailsHide
    Hostname
    storage.androidloading.com
    First seen
    2026-11-08 16:31 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-08 11:57 UTC
    Reported
    PhishDestroy, listing androidloading.com and the names under it
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR2 · precertificate
    Valid 2026-11-08 15:27 UTC to 2027-02-06 15:27 UTC
    Logged 2026-11-08 16:26 UTC in DigiCert Wyvern2027h1, entry 456,301,426
    SHA-256 7ce6c579a3e4fc909f6f90ecd4c5ea3fa9cb8b35dcb48eedf64cbbc1a31e1b01
    Public key SHA-256 7f885ae0add56e01c72b68a7e81ba5cd787784f7938dccc2832d08c2b76b2bf8
    PhishDestroy
    Addresses
    185.178.208.191 · Russia · AS57724 DDOS-GUARD DDOS-GUARD LTD · DDoS-Guard (cdn)
    DDoS-Guard
    DDoS-Guard (185.178.208.191): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    androidloading.com
    Registered
    2023-04-19 · Center of Ukrainian Internet Names (UKRNAMES)
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-07 22:30 UTC

    Suggest a correction

  48. webhook.cloufflare.net RU · AS57724 · DDOS-GUARD DDOS-GUARD LTD
    ListedDDoS-GuardUnder cloufflare.net, listed by MetaMaskMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    webhook.cloufflare.net
    First seen
    2026-11-08 16:31 UTC
    Listing
    MetaMask: first observed in the feed 2026-11-01 · still listed at the last successful feed check 2026-11-08 11:58 UTC
    PhishDestroy: first observed in the feed 2026-11-07 · still listed at the last successful feed check 2026-11-08 11:57 UTC
    Listed
    MetaMask, listing cloufflare.net and the names under it
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR2
    Valid 2026-11-08 15:31 UTC to 2027-02-06 15:31 UTC
    Logged 2026-11-08 16:29 UTC in Google PlumbersArms2027h1, entry 681,212,250
    SHA-256 9d3544a32b941bf43d7f89fa90aad81e87df4875ded948147dcfedb25d32119a
    Public key SHA-256 91438c87a60f5481811d55658806f2652f695faa8420c6b96dbbe9e552012a41
    Addresses
    45.10.243.43 · Russia · AS57724 DDOS-GUARD DDOS-GUARD LTD · DDoS-Guard (cdn)
    DDoS-Guard
    DDoS-Guard (45.10.243.43): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    cloufflare.net
    Registered
    2026-05-24 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 11:15 UTC

    Suggest a correction

  49. www.623h.com US · AS36352 · HostPapa
    ReportedColoCrossingUnder 623h.com, reported by PhishDestroyMX absentSPF missingDMARC missingRegistered 2 y ago
    DetailsHide
    Hostname
    www.623h.com
    First seen
    2026-11-08 16:31 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-08 11:57 UTC
    Reported
    PhishDestroy, listing 623h.com and the names under it
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by GoDaddy TLS Intermediate CA DV - R1v1 · precertificate
    Valid 2026-11-08 16:28 UTC to 2027-05-25 16:28 UTC
    Logged 2026-11-08 16:28 UTC in GoDaddy Aquamarine2027h1, entry 196,593,015
    SHA-256 3c1a0fdd236bfd5c36e7266f48ccaeac1603c2723e458fc20be05daac25ad65a
    Public key SHA-256 5a2c80c8895f026af71976b4d9f993327ee48fe4d09c34b9de655b43f8bfa0c1
    PhishDestroy
    Addresses
    172.245.156.140 · United States · AS36352 AS-COLOCROSSING - HostPapa · ColoCrossing (shared hosting)
    ColoCrossing
    ColoCrossing (172.245.156.140): shared web hosting and domain registration. One address typically serves many customer sites.
    Domain
    623h.com
    Registered
    2024-08-24 · GoDaddy.com, LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 14:32 UTC

    Suggest a correction

  50. www.capcutapkk.org US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareUnder capcutapkk.org, listed by MetaMaskMX presentSPF ~allDMARC missingRegistered 20 mo ago
    DetailsHide
    Hostname
    www.capcutapkk.org
    First seen
    2026-11-08 16:31 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 11:58 UTC
    Listed
    MetaMask, listing capcutapkk.org and the names under it
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR2
    Valid 2026-11-08 15:27 UTC to 2027-02-06 15:27 UTC
    Logged 2026-11-08 16:26 UTC in Google PlumbersArms2027h1, entry 681,167,111
    SHA-256 0150c925955f8f40266bb862c105627fb91016b925bb40afce1380650af3c72c
    Public key SHA-256 9305608313c3f6a05b46f935780609be9477402491324df5d2e91bb7658d4970
    Addresses
    104.21.3.114 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.130.167 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.3.114, 172.67.130.167): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    capcutapkk.org
    Registered
    2025-03-14 · Name.com, Inc.
    MX
    Receives mail at route3.mx.cloudflare.net, route2.mx.cloudflare.net, route1.mx.cloudflare.net
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 16:49 UTC

    Suggest a correction

  51. www.dexscreener.app.us.dex-app.co.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareUnder dex-app.co.com, listed by MetaMask
    DetailsHide
    Hostname
    www.dexscreener.app.us.dex-app.co.com
    First seen
    2026-11-08 16:31 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 11:58 UTC
    Listed
    MetaMask, listing dex-app.co.com and the names under it
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WR1 · precertificate
    Valid 2026-11-08 15:27 UTC to 2027-02-06 16:25 UTC
    Logged 2026-11-08 16:27 UTC in Google PlumbersArms2027h1, entry 681,187,029
    SHA-256 b1ec9f2aa7ba5005fb29fc37d2ea7f6764b2ce7f071f37787d67f4c8b6a48ae4
    Public key SHA-256 42ceac8488d7efc9d5fb4d43dbf0416497e1504385861f4e8b1c0136339579fb
    Addresses
    104.21.2.175 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.129.130 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.2.175, 172.67.129.130): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.

    Suggest a correction

  52. www.hdstreamzs.com.pk US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareUnder hdstreamzs.com.pk, reported by PhishDestroyMX presentSPF ~allDMARC missing
    DetailsHide
    Hostname
    www.hdstreamzs.com.pk
    First seen
    2026-11-08 16:31 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-08 11:57 UTC
    Reported
    PhishDestroy, listing hdstreamzs.com.pk and the names under it
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR1
    Valid 2026-11-08 15:28 UTC to 2027-02-06 15:28 UTC
    Logged 2026-11-08 16:27 UTC in Google PlumbersArms2027h1, entry 681,182,902
    SHA-256 051a818937c9b64b0a561aefd297d407bc76455a9ffdb2f432a98b7be344b81f
    Public key SHA-256 4b6116d7b4cd92666711da457bb75d32a4a03147a4e8df85f52dbfe078266c4a
    PhishDestroy
    Addresses
    104.21.91.2 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.163.248 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.91.2, 172.67.163.248): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    hdstreamzs.com.pk
    MX
    Receives mail at route3.mx.cloudflare.net, route2.mx.cloudflare.net, route1.mx.cloudflare.net
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 01:16 UTC

    Suggest a correction

  53. alumni.androidloading.com RU · AS57724 · DDOS-GUARD DDOS-GUARD LTD
    ReportedDDoS-GuardUnder androidloading.com, reported by PhishDestroyMX absentSPF missingDMARC missingRegistered 4 y ago
    DetailsHide
    Hostname
    alumni.androidloading.com
    First seen
    2026-11-08 16:26 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-08 11:57 UTC
    Reported
    PhishDestroy, listing androidloading.com and the names under it
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR2 · precertificate
    Valid 2026-11-08 15:24 UTC to 2027-02-06 15:24 UTC
    Logged 2026-11-08 16:23 UTC in Geomys Tuscolo2027h1, entry 530,515,791
    SHA-256 3573e0febb28ed44d1b3459bdf2241d754b8612276f34bd93448b943e0a831de
    Public key SHA-256 6cfce4cfb70474d947bda673fa69afd06a4f9b627bbd9bfaceccc5f5c5ce0623
    PhishDestroy
    Addresses
    185.178.208.191 · Russia · AS57724 DDOS-GUARD DDOS-GUARD LTD · DDoS-Guard (cdn)
    DDoS-Guard
    DDoS-Guard (185.178.208.191): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    androidloading.com
    Registered
    2023-04-19 · Center of Ukrainian Internet Names (UKRNAMES)
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-07 22:30 UTC

    Suggest a correction

  54. corawex.com US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    corawex.com
    First seen
    2026-11-08 16:26 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-08 11:57 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-08 15:25 UTC to 2027-02-06 16:24 UTC
    Logged 2026-11-08 16:25 UTC in Google ParcelYard2027h1, entry 680,854,106
    SHA-256 0f6be9170fc002bfbe260d4c9f620c653307b506e014f19a8b933b9cd7070a05
    Public key SHA-256 746265ebb3000a597632a3dcfd8c430bfda9f4121fa6090bf1c212e8e1d239fa
    PhishDestroy
    Addresses
    104.21.84.22 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.185.6 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.84.22, 172.67.185.6): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    corawex.com
    Registered
    2026-07-13 · Atak Domain Bilgi Teknolojileri A.S.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 16:30 UTC

    Suggest a correction

  55. crypzapay.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX presentSPF ~allDMARC policy noneRegistered 6 mo ago
    DetailsHide
    Hostname
    crypzapay.com
    First seen
    2026-11-08 16:26 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 11:58 UTC
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-08 11:57 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WR1 · precertificate
    Valid 2026-11-08 15:25 UTC to 2027-02-06 16:22 UTC
    Logged 2026-11-08 16:25 UTC in Google PlumbersArms2027h1, entry 681,154,072
    SHA-256 6a6c6a00e80df69c74cf22abf847b0b54c9e39c46a405f9ca6a9436022ea8d3f
    Public key SHA-256 7c7b9ad4396e5915235507bd0410789e2128e46f7eecaa76ed801c9c7360c227
    Addresses
    104.21.76.76 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.191.26 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.76.76, 172.67.191.26): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    crypzapay.com
    Registered
    2026-05-15 · Name.com, Inc.
    MX
    Receives mail at mxa.mailgun.org, mxb.mailgun.org
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    DMARC policy p=none: reports only
    Checked
    2026-11-08 16:49 UTC

    Suggest a correction

  56. gro75k.org PL · AS43641 · Sollutium-NL SOLLUTIUM EU S…
    ReportedReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 10 mo ago
    DetailsHide
    Hostname
    gro75k.org
    First seen
    2026-11-08 16:26 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-08 11:57 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-08 15:24 UTC to 2027-02-06 16:22 UTC
    Logged 2026-11-08 16:24 UTC in Google ParcelYard2027h1, entry 680,842,376
    SHA-256 7e626370d305f924195d64208670ccc4b6ed7f35b290d0cb0181624391cdd0f9
    Public key SHA-256 8e417726cf3ab717e392b6775e1fbd8907a4b083a8064b47b479140624ef701a
    PhishDestroy
    Addresses
    213.111.154.75 · Poland · AS43641 Sollutium-NL SOLLUTIUM EU Sp z.o.o.
    Domain
    gro75k.org
    Registered
    2026-01-17 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 16:49 UTC

    Suggest a correction

  57. kronpeakaigpt.net US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 59 d ago
    DetailsHide
    Hostname
    kronpeakaigpt.net
    First seen
    2026-11-08 16:26 UTC
    Listing
    CERT Polska listed it 2026-09-25 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 15:33 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1
    Valid 2026-09-10 14:33 UTC to 2026-12-09 15:32 UTC
    Logged 2026-11-08 16:23 UTC in Let's Encrypt Sycamore2026h2, entry 1,083,749,452
    SHA-256 c89eaf72a9fff331033c644048a359fae92835d0cc244318545d63463c9328bc
    Public key SHA-256 a19d051e1c99a3bac73b88e00b50d93b5e7ce75508f983274022da28a85db69a
    Addresses
    104.21.72.153 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.186.70 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.72.153, 172.67.186.70): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    kronpeakaigpt.net
    Registered
    2026-09-10 · NameCheap, Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 16:49 UTC

    Suggest a correction

  58. lib.cloudflear.com RU · AS57724 · DDOS-GUARD DDOS-GUARD LTD
    ListedDDoS-GuardUnder cloudflear.com, listed by MetaMaskMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    lib.cloudflear.com
    First seen
    2026-11-08 16:26 UTC
    Listing
    MetaMask: first observed in the feed 2026-11-01 · still listed at the last successful feed check 2026-11-08 11:58 UTC
    PhishDestroy: first observed in the feed 2026-11-07 · still listed at the last successful feed check 2026-11-08 11:57 UTC
    Listed
    MetaMask, listing cloudflear.com and the names under it
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR2
    Valid 2026-11-08 15:25 UTC to 2027-02-06 15:25 UTC
    Logged 2026-11-08 16:24 UTC in Google PlumbersArms2027h1, entry 681,143,635
    SHA-256 943277c40af0fd14dbc974b6d3df7e151c3f9645c8314f39c7d728f3594c0fbc
    Public key SHA-256 ea60a59f2cfc4fd6ebf81b6f61f0624ff05a477595b1c79b8bde9d367038ae84
    Addresses
    45.10.243.43 · Russia · AS57724 DDOS-GUARD DDOS-GUARD LTD · DDoS-Guard (cdn)
    DDoS-Guard
    DDoS-Guard (45.10.243.43): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    cloudflear.com
    Registered
    2026-05-24 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-07 18:26 UTC

    Suggest a correction

  59. moyazi-kayizi.info US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    moyazi-kayizi.info
    First seen
    2026-11-08 16:26 UTC
    Listing
    CERT Polska listed it 2026-08-30 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 15:33 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-08 15:23 UTC to 2027-02-06 16:22 UTC
    Logged 2026-11-08 16:23 UTC in Google PlumbersArms2027h1, entry 681,140,195
    SHA-256 ca5b01fec3b7b2e3665db96684b903d1749276d93377eae88dc22867364b59b4
    Public key SHA-256 61c7f84a99032dce25fcb4be528f80263d8057a0a3762ebf6ebab23cf535f21e
    Addresses
    104.21.35.18 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.167.180 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.35.18, 172.67.167.180): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    moyazi-kayizi.info
    Registered
    2026-07-13 · Dynadot Inc
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 16:49 UTC

    Suggest a correction

  60. mysql.cloudflear.com RU · AS57724 · DDOS-GUARD DDOS-GUARD LTD
    ListedDDoS-GuardUnder cloudflear.com, listed by MetaMaskMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    mysql.cloudflear.com
    First seen
    2026-11-08 16:26 UTC
    Listing
    MetaMask: first observed in the feed 2026-11-01 · still listed at the last successful feed check 2026-11-08 11:58 UTC
    PhishDestroy: first observed in the feed 2026-11-07 · still listed at the last successful feed check 2026-11-08 11:57 UTC
    Listed
    MetaMask, listing cloudflear.com and the names under it
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR2
    Valid 2026-11-08 15:25 UTC to 2027-02-06 15:25 UTC
    Logged 2026-11-08 16:24 UTC in Google PlumbersArms2027h1, entry 681,143,635
    SHA-256 943277c40af0fd14dbc974b6d3df7e151c3f9645c8314f39c7d728f3594c0fbc
    Public key SHA-256 ea60a59f2cfc4fd6ebf81b6f61f0624ff05a477595b1c79b8bde9d367038ae84
    Addresses
    45.10.243.43 · Russia · AS57724 DDOS-GUARD DDOS-GUARD LTD · DDoS-Guard (cdn)
    DDoS-Guard
    DDoS-Guard (45.10.243.43): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    cloudflear.com
    Registered
    2026-05-24 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-07 18:26 UTC

    Suggest a correction

  61. ningt.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    ningt.com
    First seen
    2026-11-08 16:26 UTC
    Listing
    CERT Polska listed it 2026-05-15 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 15:33 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-08 15:24 UTC to 2027-02-06 15:24 UTC
    Logged 2026-11-08 16:22 UTC in Google PlumbersArms2027h1, entry 681,125,320
    SHA-256 3b7b1ea72b52f3fbfbe5a3e94d7f91368a6dde4f0b36386caedcd660197de6c0
    Public key SHA-256 5ebca58767d661bc7b5ed8d59b04ddc3cd2f1bc4be0f73bed9a50d7e39f9be2d
    Addresses
    104.21.4.154 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.132.38 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.4.154, 172.67.132.38): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    ningt.com
    Registered
    2026-05-15 · Cloud Yuqu LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 16:49 UTC

    Suggest a correction

  62. nms.authnewauth.com RU · AS57724 · DDOS-GUARD DDOS-GUARD LTD
    ListedDDoS-GuardUnder authnewauth.com, listed by MetaMaskMX absentSPF missingDMARC missingRegistered 16 mo ago
    DetailsHide
    Hostname
    nms.authnewauth.com
    First seen
    2026-11-08 16:26 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 11:58 UTC
    Listed
    MetaMask, listing authnewauth.com and the names under it
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR1 · precertificate
    Valid 2026-11-08 15:26 UTC to 2027-02-06 15:26 UTC
    Logged 2026-11-08 16:24 UTC in Geomys Tuscolo2027h1, entry 530,530,514
    SHA-256 b21bae45c7e17478432d499df1672b8eed9bb007dcf5769bf2bbedbfeb0d5d25
    Public key SHA-256 280be0107712d8b64062f5d54d619fdb71855e1db3d6c0d285c2d9ddd99f6ed1
    Addresses
    95.129.233.97 · Russia · AS57724 DDOS-GUARD DDOS-GUARD LTD · DDoS-Guard (cdn)
    DDoS-Guard
    DDoS-Guard (95.129.233.97): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    authnewauth.com
    Registered
    2025-07-13 · NameCheap, Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-07 17:01 UTC

    Suggest a correction

  63. qezodau.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX presentSPF ~allDMARC quarantineRegistered 59 d ago
    DetailsHide
    Hostname
    qezodau.com
    First seen
    2026-11-08 16:26 UTC
    Listing
    CERT Polska listed it 2026-09-22 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 15:33 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-08 15:21 UTC to 2027-02-06 16:19 UTC
    Logged 2026-11-08 16:21 UTC in Google ParcelYard2027h1, entry 680,803,608
    SHA-256 4bea70c419fb1273b14ee3ddf88e0be67baac9994b84ae185018f2b3bd920e4e
    Public key SHA-256 292deef7852079824f9017113d5c0c5656fe51281e031bbfbe0c13eb32c764a0
    Addresses
    104.21.31.178 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.178.240 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.31.178, 172.67.178.240): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    qezodau.com
    Registered
    2026-09-10 · Dynadot Inc
    MX
    Receives mail at mail.qezodau.com
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    DMARC policy p=quarantine
    Checked
    2026-11-08 16:49 UTC

    Suggest a correction

  64. rewdg.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    rewdg.com
    First seen
    2026-11-08 16:26 UTC
    Listing
    CERT Polska listed it 2026-05-17 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 15:33 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-11-08 15:24 UTC to 2027-02-06 15:24 UTC
    Logged 2026-11-08 16:23 UTC in Google ParcelYard2027h1, entry 680,824,295
    SHA-256 4bce6b5d5e7838324485ac15c936bfb9c32fe8a9e948e15f19ce325c19bfdcec
    Public key SHA-256 02fdaf99539a8b26e1c73d12bff05aabec81928face56ffcd5efdeffafc708cd
    Addresses
    104.21.63.20 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.142.106 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.63.20, 172.67.142.106): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    rewdg.com
    Registered
    2026-05-15 · Cloud Yuqu LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 16:49 UTC

    Suggest a correction

  65. teams0live.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 2 mo ago
    DetailsHide
    Hostname
    teams0live.com
    First seen
    2026-11-08 16:26 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 11:58 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-11-08 15:26 UTC to 2027-02-06 15:26 UTC
    Logged 2026-11-08 16:25 UTC in DigiCert Sphinx2027h1, entry 403,829,596
    SHA-256 654e8c405c524df32c79adb42253b2788cbad3db6b9b4dd289996ff97df493c0
    Public key SHA-256 dde13cefd26f35d20d18a55bcea548b2a09aa32e2ab21bf0bdb0dded8eb5dc2b
    Addresses
    104.21.32.241 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.188.76 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.32.241, 172.67.188.76): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    teams0live.com
    Registered
    2026-09-02 · NameCheap, Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 16:49 UTC

    Suggest a correction

  66. togg-tr.com.togg-turk.com PL · AS43641 · Sollutium-NL SOLLUTIUM EU S…
    ListedUnder togg-turk.com, listed by USOMMX presentSPF ~allDMARC policy noneRegistered 1 d ago
    DetailsHide
    Hostname
    togg-tr.com.togg-turk.com
    First seen
    2026-11-08 16:26 UTC
    Listing
    USOM listed it 2026-11-07 · still listed at the last successful feed check 2026-11-08 16:06 UTC
    Listed
    USOM, listing togg-turk.com and the names under it
    1. Listed by USOM
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR2 · precertificate
    Valid 2026-11-08 15:24 UTC to 2027-02-06 15:24 UTC
    Logged 2026-11-08 16:22 UTC in Let's Encrypt Sycamore2027h1, entry 1,053,687,146
    SHA-256 43748c8ecc163090538abfb274be7d92b7f7d6b2138d32465ac83a0b705a8549
    Public key SHA-256 8e3406a63e8f0eac31e4cd32cca3b541695a9516c653c0dd72e80f62d420ef78
    Addresses
    195.160.223.206 · Poland · AS43641 Sollutium-NL SOLLUTIUM EU Sp z.o.o.
    Domain
    togg-turk.com
    Registered
    2026-11-07 · Sollutium EU sp. z o.o.
    MX
    Receives mail at togg-turk.com
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    DMARC policy p=none: reports only
    Checked
    2026-11-08 11:36 UTC

    Suggest a correction

  67. top-10-escorts.com US · AS19318 · Interserver, Inc
    ReportedInterserverReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 6 y ago
    DetailsHide
    Hostname
    top-10-escorts.com
    First seen
    2026-11-08 16:26 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-08 11:57 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR2
    Valid 2026-11-08 15:21 UTC to 2027-02-06 15:21 UTC
    Logged 2026-11-08 16:20 UTC in Google ParcelYard2027h1, entry 680,794,789
    SHA-256 75291779db51732665bc546d512769f3ecc2bfa0ae3a6b53fe4d241af5ad2854
    Public key SHA-256 210ed1cf69260a4984a3a3843597c6798137a78d711475c3a464272f4f5d90dd
    PhishDestroy
    Addresses
    67.217.59.171 · United States · AS19318 IS-AS-1 - Interserver, Inc · Interserver (shared hosting)
    Interserver
    Interserver (67.217.59.171): shared web hosting and domain registration. One address typically serves many customer sites.
    Domain
    top-10-escorts.com
    Registered
    2020-10-17 · NameCheap, Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 16:49 UTC

    Suggest a correction

  68. traderia.org US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 59 d ago
    DetailsHide
    Hostname
    traderia.org
    First seen
    2026-11-08 16:26 UTC
    Listing
    CERT Polska listed it 2026-09-12 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 15:33 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-11-08 15:23 UTC to 2027-02-06 15:23 UTC
    Logged 2026-11-08 16:22 UTC in Let's Encrypt Willow2027h1, entry 1,009,554,800
    SHA-256 306a177435dacd79c91db19496d898e9d6c880a9ba0157df9f5a70563b03b561
    Public key SHA-256 79a0119891227ac062b103cc6cf88cad6758ead5a005a410cfbd6d7ad77f9063
    Addresses
    104.21.85.108 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.204.161 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.85.108, 172.67.204.161): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    traderia.org
    Registered
    2026-09-10 · Dynadot Inc
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 16:49 UTC

    Suggest a correction

  69. uploads.cloudflear.com RU · AS57724 · DDOS-GUARD DDOS-GUARD LTD
    ListedDDoS-GuardUnder cloudflear.com, listed by MetaMaskMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    uploads.cloudflear.com
    First seen
    2026-11-08 16:26 UTC
    Listing
    MetaMask: first observed in the feed 2026-11-01 · still listed at the last successful feed check 2026-11-08 11:58 UTC
    PhishDestroy: first observed in the feed 2026-11-07 · still listed at the last successful feed check 2026-11-08 11:57 UTC
    Listed
    MetaMask, listing cloudflear.com and the names under it
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR2
    Valid 2026-11-08 15:25 UTC to 2027-02-06 15:25 UTC
    Logged 2026-11-08 16:24 UTC in Google PlumbersArms2027h1, entry 681,143,635
    SHA-256 943277c40af0fd14dbc974b6d3df7e151c3f9645c8314f39c7d728f3594c0fbc
    Public key SHA-256 ea60a59f2cfc4fd6ebf81b6f61f0624ff05a477595b1c79b8bde9d367038ae84
    Addresses
    45.10.243.43 · Russia · AS57724 DDOS-GUARD DDOS-GUARD LTD · DDoS-Guard (cdn)
    DDoS-Guard
    DDoS-Guard (45.10.243.43): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    cloudflear.com
    Registered
    2026-05-24 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-07 18:26 UTC

    Suggest a correction

  70. www.togg-tr.com.togg-turk.com PL · AS43641 · Sollutium-NL SOLLUTIUM EU S…
    ListedUnder togg-turk.com, listed by USOMMX presentSPF ~allDMARC policy noneRegistered 1 d ago
    DetailsHide
    Hostname
    www.togg-tr.com.togg-turk.com
    First seen
    2026-11-08 16:26 UTC
    Listing
    USOM listed it 2026-11-07 · still listed at the last successful feed check 2026-11-08 16:06 UTC
    Listed
    USOM, listing togg-turk.com and the names under it
    1. Listed by USOM
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR2 · precertificate
    Valid 2026-11-08 15:24 UTC to 2027-02-06 15:24 UTC
    Logged 2026-11-08 16:22 UTC in Let's Encrypt Sycamore2027h1, entry 1,053,687,146
    SHA-256 43748c8ecc163090538abfb274be7d92b7f7d6b2138d32465ac83a0b705a8549
    Public key SHA-256 8e3406a63e8f0eac31e4cd32cca3b541695a9516c653c0dd72e80f62d420ef78
    Addresses
    195.160.223.206 · Poland · AS43641 Sollutium-NL SOLLUTIUM EU Sp z.o.o.
    Domain
    togg-turk.com
    Registered
    2026-11-07 · Sollutium EU sp. z o.o.
    MX
    Receives mail at togg-turk.com
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    DMARC policy p=none: reports only
    Checked
    2026-11-08 11:36 UTC

    Suggest a correction

  71. xfnhcbuj.shop US · AS13335 · Cloudflare, Inc.
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    xfnhcbuj.shop
    First seen
    2026-11-08 16:26 UTC
    Listing
    CERT Polska listed it 2026-07-17 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 15:33 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1
    Valid 2026-11-08 15:23 UTC to 2027-02-06 16:21 UTC
    Logged 2026-11-08 16:25 UTC in DigiCert Wyvern2027h1, entry 456,294,103
    SHA-256 414e0d11b3850f711bb7f4b3b87862a3767013509584dbcace23ff4ac9113d1a
    Public key SHA-256 b85752826661708f213aca6f4821c4d71e9d2d5bff108fccc5e9e9a6ab565a79
    Addresses
    104.17.231.54 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.17.231.54): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    xfnhcbuj.shop
    Registered
    2026-07-13 · Web Commerce Communication Ltd.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 16:49 UTC

    Suggest a correction

  72. authstep-booking664.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 3 mo ago
    DetailsHide
    Hostname
    authstep-booking664.com
    First seen
    2026-11-08 16:21 UTC
    Listing
    CERT Polska listed it 2026-09-10 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 15:33 UTC
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-08 11:57 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-08 15:18 UTC to 2027-02-06 16:15 UTC
    Logged 2026-11-08 16:18 UTC in DigiCert Sphinx2027h1, entry 403,786,380
    SHA-256 b090cb93e1a345706f5a48116d7dfc690a24fb2cb6903246b63a747973890a82
    Public key SHA-256 a526820643421c81c2e16766129ef9c1bfb70a1f63a345b513aed551c90cd558
    Addresses
    104.21.94.107 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.222.94 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.94.107, 172.67.222.94): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    authstep-booking664.com
    Registered
    2026-08-11 · NameSilo, LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 16:49 UTC

    Suggest a correction

  73. howtohowto-whatsapp.com US · AS13335 · Cloudflare, Inc.4 addressesWhatsApp
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 18 d ago
    DetailsHide
    Hostname
    howtohowto-whatsapp.com
    First seen
    2026-11-08 16:21 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 11:58 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-11-08 15:17 UTC to 2027-02-06 15:17 UTC
    Logged 2026-11-08 16:15 UTC in Let's Encrypt Sycamore2027h1, entry 1,053,519,682
    SHA-256 4c41976c19cb0d8e229b1aae9fcdc3369b461fccaeea8f214a5e329bbb5874ee
    Public key SHA-256 ed697fbae6635a267cd98308319b7d18b682e31ba093ddefcb7d5c623bd9e802
    Brand
    WhatsApp
    Addresses
    104.21.59.163 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.180.236 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3033::6815:3ba3
    2606:4700:3034::ac43:b4ec
    Cloudflare
    Cloudflare (104.21.59.163, 172.67.180.236): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    howtohowto-whatsapp.com
    Registered
    2026-10-21 · Guizhou Zhongyu Zhike Network Technology Co., Ltd.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 16:30 UTC

    Suggest a correction

  74. imikime.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    imikime.com
    First seen
    2026-11-08 16:21 UTC
    Listing
    CERT Polska listed it 2026-05-15 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 15:33 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-11-08 15:16 UTC to 2027-02-06 15:16 UTC
    Logged 2026-11-08 16:15 UTC in Google ParcelYard2027h1, entry 680,729,512
    SHA-256 915e3a2675cda852caa3a98d0508f333d74fec87c487715b866cbc69e42bbe72
    Public key SHA-256 f8ffaa2f23616a555d996027e1f335845e194dc056daa685e38df7cf527095e2
    Addresses
    104.21.8.193 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.157.209 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.8.193, 172.67.157.209): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    imikime.com
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 16:25 UTC

    Suggest a correction

  75. live.cloudfkare.com RU · AS57724 · DDOS-GUARD DDOS-GUARD LTD
    ListedDDoS-GuardUnder cloudfkare.com, listed by MetaMaskMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    live.cloudfkare.com
    First seen
    2026-11-08 16:21 UTC
    Listing
    MetaMask: first observed in the feed 2026-11-01 · still listed at the last successful feed check 2026-11-08 11:58 UTC
    PhishDestroy: first observed in the feed 2026-11-07 · still listed at the last successful feed check 2026-11-08 11:57 UTC
    Listed
    MetaMask, listing cloudfkare.com and the names under it
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR1
    Valid 2026-11-08 15:17 UTC to 2027-02-06 15:17 UTC
    Logged 2026-11-08 16:16 UTC in Google PlumbersArms2027h1, entry 681,047,847
    SHA-256 26a167d50f15d1d712c3586dbed1c0cb7bf417601fa16fd18d703f51d8222113
    Public key SHA-256 8cf037795b866070306351159e76ea6fcc8b8c7bd0608f38736e3e9becf7d361
    Addresses
    45.10.243.43 · Russia · AS57724 DDOS-GUARD DDOS-GUARD LTD · DDoS-Guard (cdn)
    DDoS-Guard
    DDoS-Guard (45.10.243.43): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    cloudfkare.com
    Registered
    2026-05-24 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 08:42 UTC

    Suggest a correction

  76. notify-dcsgn.co US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX presentSPF -allDMARC rejectRegistered 6 mo ago
    DetailsHide
    Hostname
    notify-dcsgn.co
    First seen
    2026-11-08 16:21 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 11:58 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-11-08 15:17 UTC to 2027-02-06 15:17 UTC
    Logged 2026-11-08 16:16 UTC in Google PlumbersArms2027h1, entry 681,041,634
    SHA-256 1818bfacbe447e79255567558e0a68b34911014ed07f61a3ad3962addf70a522
    Public key SHA-256 e9b583e32fbbe96eb16314dbb089f28109c50e6277c9748cce3de2ebd83b659f
    Addresses
    104.21.61.54 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.206.127 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.61.54, 172.67.206.127): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    notify-dcsgn.co
    Registered
    2026-05-14 · NameCheap, Inc.
    MX
    Receives mail at mx1.quantadefence.com
    SPF
    SPF record with -all: other senders fail
    DMARC
    DMARC policy p=reject
    Checked
    2026-11-08 16:49 UTC

    Suggest a correction

  77. nybkns.shop US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by NPA 165 (finance and insurance)MX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    nybkns.shop
    First seen
    2026-11-08 16:21 UTC
    Listing
    NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 13:35 UTC
    Listed
    NPA 165
    1. Observed in the NPA 165 feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-08 15:19 UTC to 2027-02-06 16:18 UTC
    Logged 2026-11-08 16:19 UTC in Google ParcelYard2027h1, entry 680,784,893
    SHA-256 d2c886c478c2d055abd577475a812cff79a9f24f92686886abdda6450f49ba29
    Public key SHA-256 b9eb1a75f7a1d1a965e936317fcaeb9794d92d438b99152fa8349533e8e0c6f8
    Addresses
    104.21.11.187 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.150.7 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.11.187, 172.67.150.7): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    nybkns.shop
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 16:25 UTC

    Suggest a correction

  78. orig.rest US · AS16509 · Amazon.com, Inc.2 addresses
    ListedAmazon Web ServicesListed by NPA 165 (finance and insurance)MX absentSPF missingDMARC quarantineRegistered 7 mo ago
    DetailsHide
    Hostname
    orig.rest
    First seen
    2026-11-08 16:21 UTC
    Listing
    NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 13:35 UTC
    Listed
    NPA 165
    1. Observed in the NPA 165 feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by GoDaddy TLS Intermediate CA DV - R1v1 · precertificate
    Valid 2026-11-08 16:15 UTC to 2027-05-25 16:15 UTC
    Logged 2026-11-08 16:15 UTC in GoDaddy Aquamarine2027h1, entry 196,561,910
    SHA-256 4b7ab298ab518f4fe42c40e3c382389995db6fdf6e8b20dcab4d127d26655944
    Public key SHA-256 671905bacb0c46e95d105ed0f7bc9c8e91af1a8f7f32e750a9af965319ef9f1e
    Addresses
    3.33.130.190 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
    15.197.148.33 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
    Amazon Web Services
    Amazon Web Services (3.33.130.190, 15.197.148.33): a cloud provider. It rents servers and addresses to its customers.
    Domain
    orig.rest
    Registered
    2026-04-22 · GoDaddy
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    DMARC policy p=quarantine
    Checked
    2026-11-08 16:49 UTC

    Suggest a correction

  79. telesolarw.club US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    telesolarw.club
    First seen
    2026-11-08 16:21 UTC
    Listing
    CERT Polska listed it 2026-09-12 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 15:33 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-08 15:19 UTC to 2027-02-06 16:17 UTC
    Logged 2026-11-08 16:19 UTC in Google ParcelYard2027h1, entry 680,786,716
    SHA-256 1556175fde95be24fc549628fccdbcbcffa1f34167595cdce5524915b6627aef
    Public key SHA-256 ee960d385bad3914c177f735c9e46957ea358cb9773df793e972b8f6df494d83
    Addresses
    104.21.79.92 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.143.13 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.79.92, 172.67.143.13): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    telesolarw.club
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 16:25 UTC

    Suggest a correction

  80. test-ledger.vercel.app US · AS16509 · Amazon.com, Inc.2 addresses
    ListedAmazon Web ServicesListed by MetaMask
    DetailsHide
    Hostname
    test-ledger.vercel.app
    First seen
    2026-11-08 16:21 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 11:58 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WR1 · precertificate
    Valid 2026-11-08 15:16 UTC to 2027-02-06 15:16 UTC
    Logged 2026-11-08 16:16 UTC in Google ParcelYard2027h1, entry 680,748,717
    SHA-256 44ee46ccb6439e896e88922cad14cbf111d5a5b9a658d488ff2acea4b5742c27
    Public key SHA-256 73b80e33c77ba36275080d2ab4b5c6fcc9d88712e95036245fe221c24a95ebf8
    Addresses
    64.29.17.195 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
    216.198.79.195 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
    Amazon Web Services
    Amazon Web Services (64.29.17.195, 216.198.79.195): a cloud provider. It rents servers and addresses to its customers.

    Suggest a correction

  81. www.bitsoft360.com US · AS16509 · Amazon.com, Inc.2 addresses
    ListedParking page · AfternicUnder bitsoft360.com, listed by FSMA (fraudulent online trading platform)MX absentSPF -allDMARC missingRegistered 4 y ago
    DetailsHide
    Hostname
    www.bitsoft360.com
    First seen
    2026-11-08 16:21 UTC
    Listing
    FSMA warned about it 2024-02-14 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 15:42 UTC
    Listed
    FSMA, listing bitsoft360.com and the names under it
    1. Warning by FSMA
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by GoDaddy TLS Intermediate CA DV - R1v1
    Valid 2026-11-08 16:20 UTC to 2027-05-25 16:20 UTC
    Logged 2026-11-08 16:20 UTC in GoDaddy Aquamarine2027h1, entry 196,574,596
    SHA-256 1521e6e97b14f30e992c76a30326b62cbff963b9e8e20136f64ee3f04854873e
    Public key SHA-256 dcef5fe8b62e0c14a70d4f82147d385ffc80a0a9ce6ec14655ff74f8e148e19d
    Addresses
    13.248.169.48 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Afternic (parking page)
    76.223.54.146 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Afternic (parking page)
    Parking page · Afternic
    The registry delegates bitsoft360.com to Afternic’s nameservers, which answer for it. Afternic (13.248.169.48, 76.223.54.146): a parking service. It answers for names that are typically for sale or unused.
    Domain
    bitsoft360.com
    Registered
    2022-08-11 · Dynadot Inc
    MX
    Publishes no mail exchanger
    SPF
    SPF record with -all: other senders fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-07 22:16 UTC

    Suggest a correction

  82. 32.surfmine.com AU · AS133618 · Trellian Pty. Limited
    ReportedParking page · Above.comUnder surfmine.com, reported by PhishDestroyMX presentSPF -allDMARC missing
    DetailsHide
    Hostname
    32.surfmine.com
    First seen
    2026-11-08 16:15 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-08 11:57 UTC
    Reported
    PhishDestroy, listing surfmine.com and the names under it
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-11-08 15:15 UTC to 2027-02-06 15:15 UTC
    Logged 2026-11-08 16:14 UTC in Geomys Tuscolo2027h1, entry 530,421,973
    SHA-256 3d5ac0b607cc5e1c55020ebf905da6c35b82157c7da2de9bda48541faf3e4984
    Public key SHA-256 43117107c9258dc282476345396e4f51a21370d9006f805e6433e00695f2c3e3
    PhishDestroy
    Addresses
    103.224.212.214 · Australia · AS133618 TRELLIAN-AS-AP - Trellian Pty. Limited · Trellian / Above.com (parking page)
    Parking page · Above.com
    The registry delegates surfmine.com to Above.com’s nameservers, which answer for it. Above.com: a parking service. It answers for names that are typically for sale or unused. Trellian / Above.com (103.224.212.214): a parking service. It answers for names that are typically for sale or unused.
    Domain
    surfmine.com
    MX
    Receives mail at park-mx.above.com
    SPF
    SPF record with -all: other senders fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 16:20 UTC

    Suggest a correction

  83. acwagpt.digital NL · AS62370 · Snel Snel.com B.V.
    ListedListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 7 mo ago
    DetailsHide
    Hostname
    acwagpt.digital
    First seen
    2026-11-08 16:15 UTC
    Listing
    CERT Polska listed it 2026-07-21 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 15:33 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by ZeroSSL ECC DV SSL CA 2 · precertificate
    Valid 2026-11-08 00:00 UTC to 2027-02-06 23:59 UTC
    Logged 2026-11-08 16:11 UTC in Geomys Tuscolo2027h1, entry 530,391,380
    SHA-256 376f3db4b446fe9871f9c0f9d59ef9bb425eebfa2010d287338e0cf9e65bd6f7
    Public key SHA-256 8041a355f375fda2dcd34b9ee0681a199a900cb89d118613c87a023653cbec7b
    Addresses
    185.62.58.101 · Netherlands · AS62370 Snel Snel.com B.V.
    Domain
    acwagpt.digital
    Registered
    2026-03-29 · Dynadot Inc
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 16:49 UTC

    Suggest a correction

  84. canksffsd.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    canksffsd.com
    First seen
    2026-11-08 16:15 UTC
    Listing
    CERT Polska listed it 2026-07-13 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 15:33 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-08 15:15 UTC to 2027-02-06 16:13 UTC
    Logged 2026-11-08 16:15 UTC in IPng Networks Halloumi2027h1, entry 413,644,830
    SHA-256 76b5b07b63031fb6d4fc617ccd389aedd691d71f17f1df3ad46cf61964c36dcb
    Public key SHA-256 2349baf8444b9d90f429a4104b7f1ca94942f5e183e5f332809d05a0f217bcc2
    Addresses
    104.21.10.19 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.162.31 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.10.19, 172.67.162.31): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    canksffsd.com
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 16:20 UTC

    Suggest a correction

  85. dexscreener.com.dex-app.co.com US · AS13335 · Cloudflare, Inc.4 addressesDEX Screener
    ListedCloudflareUnder dex-app.co.com, listed by MetaMask
    DetailsHide
    Hostname
    dexscreener.com.dex-app.co.com
    First seen
    2026-11-08 16:15 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 11:58 UTC
    Listed
    MetaMask, listing dex-app.co.com and the names under it
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by Cloudflare TLS Issuing RSA CA 4 · precertificate
    Valid 2026-11-08 16:04 UTC to 2027-02-06 16:13 UTC
    Logged 2026-11-08 16:14 UTC in Let's Encrypt Willow2027h1, entry 1,009,370,546
    SHA-256 7b8e9de1a7cca224012bdca35330679846138334305ae0edcab88e963ab486c3
    Public key SHA-256 63d764e14a64ae2122f33cc1b38b0ee26b18d905490c8c64ea7430019362eef0
    Brand
    DEX Screener
    Addresses
    104.21.2.175 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.129.130 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3032::ac43:8182
    2606:4700:3035::6815:2af
    Cloudflare
    Cloudflare (104.21.2.175, 172.67.129.130): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.

    Suggest a correction

  86. dkfsdox.space US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by NPA 165 (e-commerce)MX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    dkfsdox.space
    First seen
    2026-11-08 16:15 UTC
    Listing
    NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 13:35 UTC
    Listed
    NPA 165
    1. Observed in the NPA 165 feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-08 15:14 UTC to 2027-02-06 16:12 UTC
    Logged 2026-11-08 16:14 UTC in Google ParcelYard2027h1, entry 680,721,552
    SHA-256 267334c9e941586f37ad841d8b35459f4073714ace4d2a557136a63276791120
    Public key SHA-256 719e665914d768e934f8f3b3fcb03e8ba8d58a071d26819c68f44b7004c86637
    Addresses
    104.21.47.69 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.170.163 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.47.69, 172.67.170.163): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    dkfsdox.space
    Registered
    2026-07-13 · GoDaddy.com, LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 16:49 UTC

    Suggest a correction

  87. kuyenbm.shop US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by NPA 165 (information services)MX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    kuyenbm.shop
    First seen
    2026-11-08 16:15 UTC
    Listing
    NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 13:35 UTC
    Listed
    NPA 165
    1. Observed in the NPA 165 feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-08 15:13 UTC to 2027-02-06 16:12 UTC
    Logged 2026-11-08 16:13 UTC in Let's Encrypt Sycamore2027h1, entry 1,053,476,192
    SHA-256 309a45cf729b45ea15f9ca4ee486e0bca11f691d59986872c91b0ae79970d16e
    Public key SHA-256 8db1f65dbd759641e1e06af1c30ddd943bf18a6cd4be7b98cfeb7b8df0be3bd1
    Addresses
    104.21.27.116 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.169.65 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.27.116, 172.67.169.65): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    kuyenbm.shop
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 16:20 UTC

    Suggest a correction

  88. kzzq.info US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 59 d ago
    DetailsHide
    Hostname
    kzzq.info
    First seen
    2026-11-08 16:15 UTC
    Listing
    CERT Polska listed it 2026-10-28 · still listed at the last successful feed check 2026-11-08 15:33 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-11-08 15:15 UTC to 2027-02-06 15:15 UTC
    Logged 2026-11-08 16:14 UTC in Google ParcelYard2027h1, entry 680,711,605
    SHA-256 633482f0bac53cec7f8307af460b34592c89cef8014a224d258739717b2b8150
    Public key SHA-256 e8494c7adb128b33169b37fae54f56b76d8afdd92d3abcc7652bd36e7e98ed04
    Addresses
    104.21.92.82 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.190.71 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.92.82, 172.67.190.71): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    kzzq.info
    Registered
    2026-09-10 · Dynadot Inc
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 16:49 UTC

    Suggest a correction

  89. lis-skins.com.ru 83.141.93.62
    ReportedReported by PhishDestroy
    DetailsHide
    Hostname
    lis-skins.com.ru
    First seen
    2026-11-08 16:15 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-08 11:57 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR2 · precertificate
    Valid 2026-11-08 15:15 UTC to 2027-02-06 15:15 UTC
    Logged 2026-11-08 16:14 UTC in IPng Networks Halloumi2027h1, entry 413,638,482
    SHA-256 261205ee7022330c98ee79ef8925f7007374f70678272ed2b1bca42bbb76a66c
    Public key SHA-256 21e49cac38978a04ba9f2c81fcf14623a67eb4762513252c13ebaf2c24fa3a54
    PhishDestroy
    Addresses
    83.141.93.62

    Suggest a correction

  90. nidocapitorio.digital NL · AS62370 · Snel Snel.com B.V.
    ListedListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 5 mo ago
    DetailsHide
    Hostname
    nidocapitorio.digital
    First seen
    2026-11-08 16:15 UTC
    Listing
    CERT Polska listed it 2026-07-21 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 15:33 UTC
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-08 11:57 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by ZeroSSL ECC DV SSL CA 2
    Valid 2026-09-09 00:00 UTC to 2026-12-08 23:59 UTC
    Logged 2026-11-08 16:12 UTC in DigiCert Wyvern2026h2, entry 2,212,481,071
    SHA-256 214c934439235992dba3d869cfd9cb3a8781715d083cf7ffa8cc11d8665c0158
    Public key SHA-256 0466613ef11200eba051e6b4f4f9ff22aedae7ed743e5b18d07935f6869ab74d
    Addresses
    185.62.58.101 · Netherlands · AS62370 Snel Snel.com B.V.
    Domain
    nidocapitorio.digital
    Registered
    2026-06-21 · Spaceship, Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 16:20 UTC

    Suggest a correction

  91. nillion-portal.xyz US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    nillion-portal.xyz
    First seen
    2026-11-08 16:15 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 11:58 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-11-08 15:14 UTC to 2027-02-06 15:14 UTC
    Logged 2026-11-08 16:12 UTC in Geomys Tuscolo2027h1, entry 530,406,350
    SHA-256 5c7d25b2fb507abbc70e3ded3e1bdf1afe1931eabe9bb17baef71ee79fb94865
    Public key SHA-256 f6870a4c1e9e5f237e1a744df47e349c17c4d0cb2e8f0f4fbe8b4a0fa02573b8
    Addresses
    104.21.45.194 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.218.125 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.45.194, 172.67.218.125): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    nillion-portal.xyz
    Registered
    2026-05-15 · PDR Ltd. d/b/a PublicDomainRegistry.com
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 16:49 UTC

    Suggest a correction

  92. nnnyz.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    nnnyz.com
    First seen
    2026-11-08 16:15 UTC
    Listing
    CERT Polska listed it 2026-05-15 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 15:33 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-11-08 15:14 UTC to 2027-02-06 15:14 UTC
    Logged 2026-11-08 16:13 UTC in IPng Networks Halloumi2027h1, entry 413,625,951
    SHA-256 3ba5ca31251dbb8480f9a96f475b4cba7b25b642b2343c10c2210427d0a4473d
    Public key SHA-256 99a349e959a603bafb79cc9e520ee1ca1489bc2575ef5592dcd19890965f4837
    Addresses
    104.21.18.38 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.180.67 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.18.38, 172.67.180.67): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    nnnyz.com
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 16:20 UTC

    Suggest a correction

  93. rexasrelaunch.live US · AS16509 · Amazon.com, Inc.
    ListedAmazon Web ServicesListed by MetaMaskMX absentSPF missingDMARC missingRegistered 59 d ago
    DetailsHide
    Hostname
    rexasrelaunch.live
    First seen
    2026-11-08 16:15 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 11:58 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-08 15:14 UTC to 2027-02-06 15:14 UTC
    Logged 2026-11-08 16:13 UTC in Let's Encrypt Sycamore2027h1, entry 1,053,455,583
    SHA-256 3b99c4f80f497e86ffcc032877c22622d908e699ad896265191f63c867c3e288
    Public key SHA-256 4a7604871854a070650ecd8a6822d493ecc94d03ee90b0dfa2fead7beb7f9970
    Addresses
    216.198.79.1 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
    Amazon Web Services
    Amazon Web Services (216.198.79.1): a cloud provider. It rents servers and addresses to its customers.
    Domain
    rexasrelaunch.live
    Registered
    2026-09-10 · Dynadot Inc
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 16:49 UTC

    Suggest a correction

  94. rrxcc.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    rrxcc.com
    First seen
    2026-11-08 16:15 UTC
    Listing
    CERT Polska listed it 2026-05-17 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 15:33 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-11-08 15:12 UTC to 2027-02-06 15:12 UTC
    Logged 2026-11-08 16:10 UTC in Let's Encrypt Sycamore2027h1, entry 1,053,399,734
    SHA-256 f3e03ecc4d073d3a33ca740b543360fb81502bb2486f2d854f7e9400fa2834a0
    Public key SHA-256 65b0d3ca355069510f8d4276030f66bcfd790347b3d284f3be927267db8769c6
    Addresses
    104.21.68.153 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.196.164 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.68.153, 172.67.196.164): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    rrxcc.com
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 16:20 UTC

    Suggest a correction

  95. seukasecurity.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    seukasecurity.com
    First seen
    2026-11-08 16:15 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 11:58 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-11-08 15:12 UTC to 2027-02-06 15:12 UTC
    Logged 2026-11-08 16:11 UTC in DigiCert Wyvern2027h1, entry 456,175,850
    SHA-256 20db0c45910999e77adc9b996c734afae802ab1482cd8188eb32b30054f7964f
    Public key SHA-256 7e7bc1525c4d6cd03b900e8284b0926ac1c59733bcc6ec7f1fa41a07fed610e9
    Addresses
    104.21.40.34 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.174.227 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.40.34, 172.67.174.227): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    seukasecurity.com
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 16:20 UTC

    Suggest a correction

  96. staticstatic-whatsapp.com US · AS13335 · Cloudflare, Inc.4 addressesWhatsApp
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 18 d ago
    DetailsHide
    Hostname
    staticstatic-whatsapp.com
    First seen
    2026-11-08 16:15 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 11:58 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-08 15:16 UTC to 2027-02-06 15:16 UTC
    Logged 2026-11-08 16:14 UTC in Google ParcelYard2027h1, entry 680,720,271
    SHA-256 0fc1dbb16f212a4ade7af09e2e6589a9d6ce07ed7c0854a85e3b03ee3dbdad86
    Public key SHA-256 21cee56baa17f7c31cfca8e93da75cdbf2fc4766dd9b968479920dcc893d3fb5
    Brand
    WhatsApp
    Addresses
    104.21.45.183 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.218.29 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3037::6815:2db7
    2606:4700:3037::ac43:da1d
    Cloudflare
    Cloudflare (104.21.45.183, 172.67.218.29): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    staticstatic-whatsapp.com
    Registered
    2026-10-21 · Guizhou Zhongyu Zhike Network Technology Co., Ltd.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 16:30 UTC

    Suggest a correction

  97. surfmine.com AU · AS133618 · Trellian Pty. Limited
    ReportedParking page · Above.comReported by PhishDestroyMX presentSPF -allDMARC missing
    DetailsHide
    Hostname
    surfmine.com
    First seen
    2026-11-08 16:15 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-08 11:57 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-11-08 15:15 UTC to 2027-02-06 15:15 UTC
    Logged 2026-11-08 16:14 UTC in Geomys Tuscolo2027h1, entry 530,421,973
    SHA-256 3d5ac0b607cc5e1c55020ebf905da6c35b82157c7da2de9bda48541faf3e4984
    Public key SHA-256 43117107c9258dc282476345396e4f51a21370d9006f805e6433e00695f2c3e3
    PhishDestroy
    Addresses
    103.224.212.214 · Australia · AS133618 TRELLIAN-AS-AP - Trellian Pty. Limited · Trellian / Above.com (parking page)
    Parking page · Above.com
    The registry delegates surfmine.com to Above.com’s nameservers, which answer for it. Above.com: a parking service. It answers for names that are typically for sale or unused. Trellian / Above.com (103.224.212.214): a parking service. It answers for names that are typically for sale or unused.
    Domain
    surfmine.com
    MX
    Receives mail at park-mx.above.com
    SPF
    SPF record with -all: other senders fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 16:20 UTC

    Suggest a correction

  98. t-togg.com.togg-turk.com PL · AS43641 · Sollutium-NL SOLLUTIUM EU S…
    ListedUnder togg-turk.com, listed by USOMMX presentSPF ~allDMARC policy noneRegistered 1 d ago
    DetailsHide
    Hostname
    t-togg.com.togg-turk.com
    First seen
    2026-11-08 16:15 UTC
    Listing
    USOM listed it 2026-11-07 · still listed at the last successful feed check 2026-11-08 16:06 UTC
    Listed
    USOM, listing togg-turk.com and the names under it
    1. Listed by USOM
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR2 · precertificate
    Valid 2026-11-08 15:14 UTC to 2027-02-06 15:14 UTC
    Logged 2026-11-08 16:13 UTC in DigiCert Wyvern2027h1, entry 456,201,266
    SHA-256 3c7573e091e356a0e4e6a7cb1d006cdf9f7129dda70d1af2b62f6971de357be6
    Public key SHA-256 e6d1bd4a7626a8644fd66313e642507711fed1c39de1cc9bda4f7518ff8b968b
    Addresses
    195.160.223.206 · Poland · AS43641 Sollutium-NL SOLLUTIUM EU Sp z.o.o.
    Domain
    togg-turk.com
    Registered
    2026-11-07 · Sollutium EU sp. z o.o.
    MX
    Receives mail at togg-turk.com
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    DMARC policy p=none: reports only
    Checked
    2026-11-08 11:36 UTC

    Suggest a correction

  99. vote-tripletonsol.xyz US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    vote-tripletonsol.xyz
    First seen
    2026-11-08 16:15 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 11:58 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1
    Valid 2026-11-08 15:11 UTC to 2027-02-06 16:09 UTC
    Logged 2026-11-08 16:13 UTC in Let's Encrypt Willow2027h1, entry 1,009,347,531
    SHA-256 0fa4a0358f54917da183a715600567824b3d4e9b85496da29338b700a5ac263b
    Public key SHA-256 9e621d50a85e1ae648f78a5f7839eb2b3431c09dfeeffe148951237277a19161
    Addresses
    104.21.60.130 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.196.215 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.60.130, 172.67.196.215): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    vote-tripletonsol.xyz
    Registered
    2026-07-13 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 16:49 UTC

    Suggest a correction

  100. www.lis-skins.com.ru 83.141.93.62
    ReportedUnder lis-skins.com.ru, reported by PhishDestroy
    DetailsHide
    Hostname
    www.lis-skins.com.ru
    First seen
    2026-11-08 16:15 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-08 11:57 UTC
    Reported
    PhishDestroy, listing lis-skins.com.ru and the names under it
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR2 · precertificate
    Valid 2026-11-08 15:15 UTC to 2027-02-06 15:15 UTC
    Logged 2026-11-08 16:14 UTC in IPng Networks Halloumi2027h1, entry 413,638,482
    SHA-256 261205ee7022330c98ee79ef8925f7007374f70678272ed2b1bca42bbb76a66c
    Public key SHA-256 21e49cac38978a04ba9f2c81fcf14623a67eb4762513252c13ebaf2c24fa3a54
    PhishDestroy
    Addresses
    83.141.93.62

    Suggest a correction

Showing 1–100 of 4,955 hostnames.
How these findings are made

Brand spoofs: findings that impersonate one of the 1,000 most-impersonated brands. The list opens on them; All shows every finding.

Reported: a hostname in a new certificate that PhishTank or PhishDestroy reports, or that CERT Polska, MetaMask, USOM, MODA, NPA 165, JPCERT/CC, the AMF, the FSMA or BaFin lists. When a listing source names the brand imitated or a category, the finding shows it. Phishing host: a brand lookalike that resolves to an address which hosted confirmed phishing in the last 48 hours. Spamhaus DROP: a brand lookalike that resolves to an address on the Spamhaus DROP list. Same certificate: another name on a finding's certificate that resolves to an address on Spamhaus DROP. Suspicious: other names on a finding's certificate, rated high for a hosting-alias name or a lookalike on a phishing host, medium for a lookalike; they join the findings once they have listing evidence of their own. Also under Suspicious: registered domains using a brand’s name that PhishDestroy’s community list includes, rated high when they resolve to an address with no parking or holding signal, medium otherwise.

Brand labels cover the 1,000 most-impersonated brands. A name gets a brand when the brand's token starts a label or follows a hyphen, with a lure word such as "login" or "verify" for common words. Hostnames appear as plain text. How it works · Sources