Live

Live phishing findings

New certificates and domain registrations, with every hostname resolved and checked against phishing reports and bad-address lists. The newest findings, updated hourly.

Updated hourly · 2026-11-08 19:00 UTC
Certificate-log entries · 24 h
339.3M
from 84 distinct feeds
Unique certificates · 24 h
32.8M
each reviewed
Names resolved · 24 h
21.0M
15.9M with an address
Findings · 24 h
5,627
202 of 1,061 brands targeted

4,882 hostnames from the last 24 hours.

The findings have updated. The list starts again from the top.

  1. checkout.wormgpt.ai US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareUnder wormgpt.ai, reported by PhishDestroyMX presentSPF ~allDMARC policy noneRegistered 12 mo ago
    DetailsHide
    Hostname
    checkout.wormgpt.ai
    First seen
    2026-11-08 18:56 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-08 17:58 UTC
    Reported
    PhishDestroy, listing wormgpt.ai and the names under it
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR1
    Valid 2026-11-08 17:56 UTC to 2027-02-06 17:56 UTC
    Logged 2026-11-08 18:54 UTC in Google PlumbersArms2027h1, entry 683,167,791
    SHA-256 2d00b2f0e6615299cc66cc40d158544cdddb4086d7982f015e8ce9f3b850aeb5
    Public key SHA-256 e2c5d2a8130ece663257431db8e37e499b9a55c6e08d407f306f08ec1bb2c1b9
    PhishDestroy
    Addresses
    104.21.39.236 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.171.215 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.39.236, 172.67.171.215): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    wormgpt.ai
    Registered
    2025-11-05 · HOSTINGER operations, UAB
    MX
    Receives mail at mx1.hostinger.com, mx2.hostinger.com
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    DMARC policy p=none: reports only
    Checked
    2026-11-08 07:23 UTC

    Suggest a correction

  2. culturainglesacuritiba.com.br US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX presentSPF ~allDMARC policy noneRegistered 26 y ago
    DetailsHide
    Hostname
    culturainglesacuritiba.com.br
    First seen
    2026-11-08 18:56 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-08 17:58 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-08 17:50 UTC to 2027-02-06 18:48 UTC
    Logged 2026-11-08 18:50 UTC in DigiCert Sphinx2027h1, entry 405,157,690
    SHA-256 a68c97d43e5e2740df2a9d3760beb56b72bdfdf4ebd8bc05bde72f723b924ee8
    Public key SHA-256 ff9c06f3ac83b007290a7cd0fb75ba1e9af3419778a3e714d20e3ee99937a9ed
    PhishDestroy
    Addresses
    104.21.31.148 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.177.203 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.31.148, 172.67.177.203): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    culturainglesacuritiba.com.br
    Registered
    2000-08-05
    MX
    Receives mail at smtp.google.com
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    DMARC policy p=none: reports only
    Checked
    2026-11-07 19:34 UTC

    Suggest a correction

  3. deltaf254-lab.pages.dev US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMask
    DetailsHide
    Hostname
    deltaf254-lab.pages.dev
    First seen
    2026-11-08 18:56 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 17:59 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-11-08 17:57 UTC to 2027-02-06 17:57 UTC
    Logged 2026-11-08 18:55 UTC in Geomys Tuscolo2027h1, entry 532,130,669
    SHA-256 0a79529ca102366a09ee9ee51997acc56a0f99f0a2ead2c710c9511b82d99560
    Public key SHA-256 f221bf7e25eb910187fe7255f957d3f8c219b062b9cb51f42172c356e6e4d5c3
    Addresses
    172.66.44.147 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.66.47.109 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (172.66.44.147, 172.66.47.109): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.

    Suggest a correction

  4. hub.tor.taxi RU · AS57724 · DDOS-GUARD DDOS-GUARD LTD
    ReportedDDoS-GuardUnder tor.taxi, reported by PhishDestroyMX presentSPF ~allDMARC rejectRegistered 5 y ago
    DetailsHide
    Hostname
    hub.tor.taxi
    First seen
    2026-11-08 18:56 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-08 17:58 UTC
    Reported
    PhishDestroy, listing tor.taxi and the names under it
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR1 · precertificate
    Valid 2026-11-08 17:53 UTC to 2027-02-06 17:53 UTC
    Logged 2026-11-08 18:51 UTC in Let's Encrypt Willow2027h1, entry 1,013,185,849
    SHA-256 64ee95c3b13da041a790b3f5ca242f7bd4b8d86ac0fedcd0daaf19e2475d1c3a
    Public key SHA-256 c47095a625d0829711ed1c659bbd40cf1939009ca4756defe45440c1bc8d0f5e
    PhishDestroy
    Addresses
    185.129.100.227 · Russia · AS57724 DDOS-GUARD DDOS-GUARD LTD · DDoS-Guard (cdn)
    DDoS-Guard
    DDoS-Guard (185.129.100.227): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    tor.taxi
    Registered
    2021-07-02 · Tucows Domains Inc.
    MX
    Receives mail at mail.protonmail.ch, mailsec.protonmail.ch
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    DMARC policy p=reject
    Checked
    2026-11-07 20:52 UTC

    Suggest a correction

  5. ipam.androidloading.com RU · AS57724 · DDOS-GUARD DDOS-GUARD LTD
    ReportedDDoS-GuardUnder androidloading.com, reported by PhishDestroyMX absentSPF missingDMARC missingRegistered 4 y ago
    DetailsHide
    Hostname
    ipam.androidloading.com
    First seen
    2026-11-08 18:56 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-08 17:58 UTC
    Reported
    PhishDestroy, listing androidloading.com and the names under it
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR1
    Valid 2026-11-08 17:56 UTC to 2027-02-06 17:56 UTC
    Logged 2026-11-08 18:55 UTC in Google PlumbersArms2027h1, entry 683,174,495
    SHA-256 8a8f6fe34256b4f005e3079f3a0b704333f9649f06fd2d6a3d6d5bfddbf49d18
    Public key SHA-256 0d62aa2ba2af08756f9cff2557235b302e6c8af9a44dd25a041495ee87da4b6b
    PhishDestroy
    Addresses
    185.178.208.191 · Russia · AS57724 DDOS-GUARD DDOS-GUARD LTD · DDoS-Guard (cdn)
    DDoS-Guard
    DDoS-Guard (185.178.208.191): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    androidloading.com
    Registered
    2023-04-19 · Center of Ukrainian Internet Names (UKRNAMES)
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-07 22:30 UTC

    Suggest a correction

  6. js534.com US · AS62468 · VpsQuan L.L.C.
    ReportedReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 7 mo ago
    DetailsHide
    Hostname
    js534.com
    First seen
    2026-11-08 18:56 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-08 17:58 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR2 · precertificate
    Valid 2026-11-08 17:52 UTC to 2027-02-06 17:52 UTC
    Logged 2026-11-08 18:51 UTC in IPng Networks Halloumi2027h1, entry 415,193,557
    SHA-256 89cf071614e504aaba27cf004484e141760c2e2fce3c98c29d95e7e9e08aa4ab
    Public key SHA-256 8645ea4fdd4b65a22519ea45623c0394fd2ec8acf313c94881a5e2efd3e6ca6e
    PhishDestroy
    Addresses
    82.109.252.29 · United States · AS62468 HKCLOUDX - VpsQuan L.L.C.
    Domain
    js534.com
    Registered
    2026-04-03 · West263 International Limited
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 19:05 UTC

    Suggest a correction

  7. lib.cloudfkare.com RU · AS57724 · DDOS-GUARD DDOS-GUARD LTD
    ListedDDoS-GuardUnder cloudfkare.com, listed by MetaMaskMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    lib.cloudfkare.com
    First seen
    2026-11-08 18:56 UTC
    Listing
    MetaMask: first observed in the feed 2026-11-01 · still listed at the last successful feed check 2026-11-08 17:59 UTC
    PhishDestroy: first observed in the feed 2026-11-07 · still listed at the last successful feed check 2026-11-08 17:58 UTC
    Listed
    MetaMask, listing cloudfkare.com and the names under it
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR2
    Valid 2026-11-08 17:55 UTC to 2027-02-06 17:55 UTC
    Logged 2026-11-08 18:54 UTC in IPng Networks Halloumi2027h1, entry 415,222,783
    SHA-256 15f89de6e37ddadbb3e3b796c25c9832a7e9ae27d7c4015acf078d03a20aa428
    Public key SHA-256 ea27e2f7b8e1ac49004fd64b1931728133bbb66e8e571c83d1adddce9f2a4112
    Addresses
    45.10.243.43 · Russia · AS57724 DDOS-GUARD DDOS-GUARD LTD · DDoS-Guard (cdn)
    DDoS-Guard
    DDoS-Guard (45.10.243.43): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    cloudfkare.com
    Registered
    2026-05-24 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 08:42 UTC

    Suggest a correction

  8. link.cloudfkare.com RU · AS57724 · DDOS-GUARD DDOS-GUARD LTD
    ListedDDoS-GuardUnder cloudfkare.com, listed by MetaMaskMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    link.cloudfkare.com
    First seen
    2026-11-08 18:56 UTC
    Listing
    MetaMask: first observed in the feed 2026-11-01 · still listed at the last successful feed check 2026-11-08 17:59 UTC
    PhishDestroy: first observed in the feed 2026-11-07 · still listed at the last successful feed check 2026-11-08 17:58 UTC
    Listed
    MetaMask, listing cloudfkare.com and the names under it
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR2
    Valid 2026-11-08 17:55 UTC to 2027-02-06 17:55 UTC
    Logged 2026-11-08 18:54 UTC in IPng Networks Halloumi2027h1, entry 415,222,783
    SHA-256 15f89de6e37ddadbb3e3b796c25c9832a7e9ae27d7c4015acf078d03a20aa428
    Public key SHA-256 ea27e2f7b8e1ac49004fd64b1931728133bbb66e8e571c83d1adddce9f2a4112
    Addresses
    45.10.243.43 · Russia · AS57724 DDOS-GUARD DDOS-GUARD LTD · DDoS-Guard (cdn)
    DDoS-Guard
    DDoS-Guard (45.10.243.43): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    cloudfkare.com
    Registered
    2026-05-24 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 08:42 UTC

    Suggest a correction

  9. meebits.football US · AS16509 · Amazon.com, Inc.
    ReportedParking page · Dynadot parkingReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 8 mo ago
    DetailsHide
    Hostname
    meebits.football
    First seen
    2026-11-08 18:56 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-08 17:58 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR1 · precertificate
    Valid 2026-11-08 17:55 UTC to 2027-02-06 17:55 UTC
    Logged 2026-11-08 18:53 UTC in Geomys Tuscolo2027h1, entry 532,108,051
    SHA-256 c6a71f97e34a9fc013b037f94205529dc4223dd5400198b50527638fbaa64675
    Public key SHA-256 b33d668478f2d6956e0065ee05c0cf7c7dc391c70a3fa4edc7cda4224e40794e
    PhishDestroy
    Addresses
    54.215.31.113 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Dynadot parking (parking page)
    Parking page · Dynadot parking
    Dynadot parking (54.215.31.113): a parking service. It answers for names that are typically for sale or unused.
    Domain
    meebits.football
    Registered
    2026-03-13 · Dynadot Inc
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 19:05 UTC

    Suggest a correction

  10. meebits.soccer US · AS16509 · Amazon.com, Inc.
    ReportedParking page · Dynadot parkingReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 8 mo ago
    DetailsHide
    Hostname
    meebits.soccer
    First seen
    2026-11-08 18:56 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-08 17:58 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR1
    Valid 2026-11-08 17:55 UTC to 2027-02-06 17:55 UTC
    Logged 2026-11-08 18:53 UTC in Google PlumbersArms2027h1, entry 683,156,841
    SHA-256 3d055a8eb707e7f11344447357be6c5f559510b604adb802da184ade7c9e959f
    Public key SHA-256 f7b00815ce15041ee25cd041ee7f41fb55c1f3ea5dafb2cfc228c5681956daba
    PhishDestroy
    Addresses
    54.215.31.113 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Dynadot parking (parking page)
    Parking page · Dynadot parking
    Dynadot parking (54.215.31.113): a parking service. It answers for names that are typically for sale or unused.
    Domain
    meebits.soccer
    Registered
    2026-03-13 · Dynadot Inc
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 19:05 UTC

    Suggest a correction

  11. nidozo-tuceku.info US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    nidozo-tuceku.info
    First seen
    2026-11-08 18:56 UTC
    Listing
    CERT Polska listed it 2026-09-01 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 18:34 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-08 17:52 UTC to 2027-02-06 18:50 UTC
    Logged 2026-11-08 18:52 UTC in IPng Networks Halloumi2027h1, entry 415,205,805
    SHA-256 71a3647d6e446b9909c5b14691a312e871b7c720d39126145e029ce6ec9bf557
    Public key SHA-256 276d0fa74eb7f189a3ab59e569a6d194ae0a23495cf4d0d7d73d2a1567161048
    Addresses
    104.21.12.207 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.132.103 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.12.207, 172.67.132.103): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    nidozo-tuceku.info
    Registered
    2026-07-13 · Dynadot Inc
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 19:05 UTC

    Suggest a correction

  12. nievelucrorio-spain.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    nievelucrorio-spain.com
    First seen
    2026-11-08 18:56 UTC
    Listing
    CERT Polska listed it 2026-09-10 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 18:34 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-08 17:53 UTC to 2027-02-06 18:51 UTC
    Logged 2026-11-08 18:53 UTC in DigiCert Wyvern2027h1, entry 457,775,668
    SHA-256 3554ccbeac24fb1ecc33a5cc6a907907069806fb02b31927be34c9eba42e7985
    Public key SHA-256 79f83365d7f5968579f8e195fb5e06e6cb381828c2ab465da769de014d2d64f1
    Addresses
    104.21.8.17 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.156.177 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.8.17, 172.67.156.177): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    nievelucrorio-spain.com
    Registered
    2026-07-13 · Dynadot Inc
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 19:05 UTC

    Suggest a correction

  13. osnov6uw.eu.cc US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT Polska
    DetailsHide
    Hostname
    osnov6uw.eu.cc
    First seen
    2026-11-08 18:56 UTC
    Listing
    CERT Polska listed it 2026-09-10 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 18:34 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-11-08 17:56 UTC to 2027-02-06 17:56 UTC
    Logged 2026-11-08 18:55 UTC in Geomys Tuscolo2027h1, entry 532,126,257
    SHA-256 0345130cac70e9c14256a9d105a64471f234edb9cedf9984c294a1e9d36c71c3
    Public key SHA-256 601ccc4e1f4790a5349b0f64dc6ffb9fba862d9b97e2f5d0fa1dafbb265ab7ce
    Addresses
    104.21.77.87 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.205.193 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.77.87, 172.67.205.193): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.

    Suggest a correction

  14. pota.live US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 59 d ago
    DetailsHide
    Hostname
    pota.live
    First seen
    2026-11-08 18:56 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 17:59 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-11-08 17:57 UTC to 2027-02-06 17:57 UTC
    Logged 2026-11-08 18:55 UTC in Let's Encrypt Sycamore2027h1, entry 1,057,480,706
    SHA-256 3e38a59edb4271ff2bd2fb07b62e4e5d6afbf43468f2799f1756a35a0c8233f3
    Public key SHA-256 1a0a81072550f4e05c0660866352ab427b947d4975876c3489e1b1a57e0af429
    Addresses
    104.21.20.49 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.191.91 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.20.49, 172.67.191.91): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    pota.live
    Registered
    2026-09-10 · Global Domain Group LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 19:05 UTC

    Suggest a correction

  15. qqyyc.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    qqyyc.com
    First seen
    2026-11-08 18:56 UTC
    Listing
    CERT Polska listed it 2026-05-17 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 18:34 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-11-08 17:54 UTC to 2027-02-06 17:54 UTC
    Logged 2026-11-08 18:53 UTC in Geomys Tuscolo2027h1, entry 532,104,834
    SHA-256 0ea678bb61f98cee511675818fae6fee33a1293f72f312efe4780cbdc21b2815
    Public key SHA-256 70df8305f2d12bf41d819cb78fd1a77067b7e78898d03e81e09576dc50ffb001
    Addresses
    104.21.22.254 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.208.34 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.22.254, 172.67.208.34): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    qqyyc.com
    Registered
    2026-05-15 · Cloud Yuqu LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 19:05 UTC

    Suggest a correction

  16. unifi.cloudfkare.com RU · AS57724 · DDOS-GUARD DDOS-GUARD LTD
    ListedDDoS-GuardUnder cloudfkare.com, listed by MetaMaskMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    unifi.cloudfkare.com
    First seen
    2026-11-08 18:56 UTC
    Listing
    MetaMask: first observed in the feed 2026-11-01 · still listed at the last successful feed check 2026-11-08 17:59 UTC
    PhishDestroy: first observed in the feed 2026-11-07 · still listed at the last successful feed check 2026-11-08 17:58 UTC
    Listed
    MetaMask, listing cloudfkare.com and the names under it
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR2
    Valid 2026-11-08 17:55 UTC to 2027-02-06 17:55 UTC
    Logged 2026-11-08 18:54 UTC in IPng Networks Halloumi2027h1, entry 415,222,783
    SHA-256 15f89de6e37ddadbb3e3b796c25c9832a7e9ae27d7c4015acf078d03a20aa428
    Public key SHA-256 ea27e2f7b8e1ac49004fd64b1931728133bbb66e8e571c83d1adddce9f2a4112
    Addresses
    45.10.243.43 · Russia · AS57724 DDOS-GUARD DDOS-GUARD LTD · DDoS-Guard (cdn)
    DDoS-Guard
    DDoS-Guard (45.10.243.43): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    cloudfkare.com
    Registered
    2026-05-24 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 08:42 UTC

    Suggest a correction

  17. virtualsprotocol-join.xyz US · AS13335 · Cloudflare, Inc.4 addressesVirtuals Protocol
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    virtualsprotocol-join.xyz
    First seen
    2026-11-08 18:56 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 17:59 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-08 17:54 UTC to 2027-02-06 18:53 UTC
    Logged 2026-11-08 18:54 UTC in Google ParcelYard2027h1, entry 682,870,583
    SHA-256 50e8974dcc7ad142094c2bfad51ee06c6c273b8b6116c8f77d1618b7076931b2
    Public key SHA-256 96ac0e1f6259ccb2195cab6dee379db75ea1bbf0cfd10a85b221367543abb4f5
    Brand
    Virtuals Protocol
    Addresses
    104.21.91.62 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.211.28 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3033::ac43:d31c
    2606:4700:3037::6815:5b3e
    Cloudflare
    Cloudflare (104.21.91.62, 172.67.211.28): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    virtualsprotocol-join.xyz
    Registered
    2026-07-13 · PDR Ltd. d/b/a PublicDomainRegistry.com
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 18:58 UTC

    Suggest a correction

  18. wwh-club.net US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 24 mo ago
    DetailsHide
    Hostname
    wwh-club.net
    First seen
    2026-11-08 18:56 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-29 · still listed at the last successful feed check 2026-11-08 17:58 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-08 17:54 UTC to 2027-02-06 18:52 UTC
    Logged 2026-11-08 18:54 UTC in Google PlumbersArms2027h1, entry 683,169,183
    SHA-256 6cd20e152c6170c7ef7eb61e86bf77f3e6460e6d0bb8d3db0bca527dabbb16f8
    Public key SHA-256 f6a7c790d544cf3cedb9c5731783c069a66bb783dc11c51af83d746d3e727a8c
    PhishDestroy
    Addresses
    104.21.54.185 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.141.10 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.54.185, 172.67.141.10): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    wwh-club.net
    Registered
    2024-11-19 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 19:05 UTC

    Suggest a correction

  19. www.js534.com US · AS62468 · VpsQuan L.L.C.
    ReportedUnder js534.com, reported by PhishDestroyMX absentSPF missingDMARC missingRegistered 7 mo ago
    DetailsHide
    Hostname
    www.js534.com
    First seen
    2026-11-08 18:56 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-08 17:58 UTC
    Reported
    PhishDestroy, listing js534.com and the names under it
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR2 · precertificate
    Valid 2026-11-08 17:52 UTC to 2027-02-06 17:52 UTC
    Logged 2026-11-08 18:51 UTC in IPng Networks Halloumi2027h1, entry 415,193,557
    SHA-256 89cf071614e504aaba27cf004484e141760c2e2fce3c98c29d95e7e9e08aa4ab
    Public key SHA-256 8645ea4fdd4b65a22519ea45623c0394fd2ec8acf313c94881a5e2efd3e6ca6e
    PhishDestroy
    Addresses
    82.109.252.29 · United States · AS62468 HKCLOUDX - VpsQuan L.L.C.
    Domain
    js534.com
    Registered
    2026-04-03 · West263 International Limited
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 19:05 UTC

    Suggest a correction

  20. www.kra-40-at.com US · AS16509 · Amazon.com, Inc.2 addresses
    ReportedParking page · AfternicUnder kra-40-at.com, reported by PhishDestroyMX absentSPF -allDMARC missingRegistered today
    DetailsHide
    Hostname
    www.kra-40-at.com
    First seen
    2026-11-08 18:56 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-08 17:58 UTC
    Reported
    PhishDestroy, listing kra-40-at.com and the names under it
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by GoDaddy TLS Intermediate CA DV - R1v1
    Valid 2026-11-08 18:53 UTC to 2027-05-25 18:53 UTC
    Logged 2026-11-08 18:53 UTC in Google Argon2027h1, entry 931,964,626
    SHA-256 1857a81203940df5a4ef900441304d6e1904f7bb6e843ec798693afad1fedfce
    Public key SHA-256 d76a040ef97e31cd75d723b72c0478983632c80280ff6ebf92ff8e9403c03c34
    PhishDestroy
    Addresses
    13.248.169.48 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Afternic (parking page)
    76.223.54.146 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Afternic (parking page)
    Parking page · Afternic
    The registry delegates kra-40-at.com to Afternic’s nameservers, which answer for it. Afternic (13.248.169.48, 76.223.54.146): a parking service. It answers for names that are typically for sale or unused.
    Domain
    kra-40-at.com
    Registered
    2026-11-08 · InlandDomains, LLC
    MX
    Publishes no mail exchanger
    SPF
    SPF record with -all: other senders fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 19:05 UTC

    Suggest a correction

  21. 659370-crypto.com US · AS13335 · Cloudflare, Inc.4 addressesCrypto.com
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 59 d ago
    DetailsHide
    Hostname
    659370-crypto.com
    First seen
    2026-11-08 18:51 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 17:59 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-11-08 17:50 UTC to 2027-02-06 17:50 UTC
    Logged 2026-11-08 18:49 UTC in Google PlumbersArms2027h1, entry 683,105,546
    SHA-256 1d543d152b4916f3489444e488963f37d794fcbcc777b14ba0ffc35b3210e775
    Public key SHA-256 943ddb72f99c9bc5c4df253793be811a87918be40167952dc8b8b87e9eb387c2
    Brand
    Crypto.com
    Addresses
    104.21.31.214 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.179.252 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3030::6815:1fd6
    2606:4700:3035::ac43:b3fc
    Cloudflare
    Cloudflare (104.21.31.214, 172.67.179.252): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    659370-crypto.com
    Registered
    2026-09-10 · Dynadot Inc
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 19:05 UTC

    Suggest a correction

  22. dash-flarenetworks.xyz US · AS13335 · Cloudflare, Inc.4 addressesFlare Network
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    dash-flarenetworks.xyz
    First seen
    2026-11-08 18:51 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 17:59 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-11-08 17:51 UTC to 2027-02-06 17:51 UTC
    Logged 2026-11-08 18:49 UTC in Let's Encrypt Willow2027h1, entry 1,013,139,535
    SHA-256 c353f0880367bca5aa1525f5d90c9ec89551f6c46b0bf37ccaf32e4a6c162f20
    Public key SHA-256 1b4e658767d33e6be9c4c3f17163d2183bbfecf1c43911c4d0f23600f1fa0ba1
    Brand
    Flare Network
    Addresses
    104.21.69.207 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.213.24 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3035::6815:45cf
    2606:4700:3036::ac43:d518
    Cloudflare
    Cloudflare (104.21.69.207, 172.67.213.24): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    dash-flarenetworks.xyz
    Registered
    2026-05-15 · Dynadot Inc
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 18:53 UTC

    Suggest a correction

  23. dcent-desktop.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    dcent-desktop.com
    First seen
    2026-11-08 18:51 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 17:59 UTC
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-08 17:58 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-11-08 17:50 UTC to 2027-02-06 17:50 UTC
    Logged 2026-11-08 18:49 UTC in Google ParcelYard2027h1, entry 682,802,683
    SHA-256 2b07d783208c7ea204c171c78aac46e1cd6a3f646461c61b087b2a66288b90d9
    Public key SHA-256 5890a013a58d8272ff37adb83ddc9ccc40e30768e5b9f75bbb8af6140eed7f5a
    Addresses
    104.21.23.83 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.209.216 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.23.83, 172.67.209.216): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    dcent-desktop.com
    Registered
    2026-05-15 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 18:53 UTC

    Suggest a correction

  24. dilifa-domuvo.info US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    dilifa-domuvo.info
    First seen
    2026-11-08 18:51 UTC
    Listing
    CERT Polska listed it 2026-09-01 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 18:34 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-08 17:50 UTC to 2027-02-06 18:47 UTC
    Logged 2026-11-08 18:50 UTC in Let's Encrypt Willow2027h1, entry 1,013,142,897
    SHA-256 858bba6f7185c7ae4d8f8f4bac0623995f34e5fbeaf98c3a436cd4a0e394bab0
    Public key SHA-256 f08cbcf6bd9917fe42510b04227777cf56b8ba9fc9e57cb417370a16d0de0241
    Addresses
    104.21.32.250 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.188.101 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.32.250, 172.67.188.101): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    dilifa-domuvo.info
    Registered
    2026-07-13 · Dynadot Inc
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 19:05 UTC

    Suggest a correction

  25. glpi.vloudflare.com RU · AS57724 · DDOS-GUARD DDOS-GUARD LTD
    ListedDDoS-GuardUnder vloudflare.com, listed by MetaMaskMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    glpi.vloudflare.com
    First seen
    2026-11-08 18:51 UTC
    Listing
    MetaMask: first observed in the feed 2026-11-01 · still listed at the last successful feed check 2026-11-08 17:59 UTC
    PhishDestroy: first observed in the feed 2026-11-07 · still listed at the last successful feed check 2026-11-08 17:58 UTC
    Listed
    MetaMask, listing vloudflare.com and the names under it
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR2
    Valid 2026-11-08 17:49 UTC to 2027-02-06 17:49 UTC
    Logged 2026-11-08 18:48 UTC in Google ParcelYard2027h1, entry 682,792,673
    SHA-256 2e63285788d8c0fe40d8ac80e6ddaa6cb1392f6337eb153907014544cac0469c
    Public key SHA-256 8d291a56162ada843ffae5eab70bd52ac2a1037fb8f29fab1692e60bc803837f
    Addresses
    45.10.243.43 · Russia · AS57724 DDOS-GUARD DDOS-GUARD LTD · DDoS-Guard (cdn)
    DDoS-Guard
    DDoS-Guard (45.10.243.43): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    vloudflare.com
    Registered
    2026-05-24 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 08:40 UTC

    Suggest a correction

  26. hotspot.vloudflare.com RU · AS57724 · DDOS-GUARD DDOS-GUARD LTD
    ListedDDoS-GuardUnder vloudflare.com, listed by MetaMaskMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    hotspot.vloudflare.com
    First seen
    2026-11-08 18:51 UTC
    Listing
    MetaMask: first observed in the feed 2026-11-01 · still listed at the last successful feed check 2026-11-08 17:59 UTC
    PhishDestroy: first observed in the feed 2026-11-07 · still listed at the last successful feed check 2026-11-08 17:58 UTC
    Listed
    MetaMask, listing vloudflare.com and the names under it
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR2
    Valid 2026-11-08 17:49 UTC to 2027-02-06 17:49 UTC
    Logged 2026-11-08 18:48 UTC in Google ParcelYard2027h1, entry 682,792,673
    SHA-256 2e63285788d8c0fe40d8ac80e6ddaa6cb1392f6337eb153907014544cac0469c
    Public key SHA-256 8d291a56162ada843ffae5eab70bd52ac2a1037fb8f29fab1692e60bc803837f
    Addresses
    45.10.243.43 · Russia · AS57724 DDOS-GUARD DDOS-GUARD LTD · DDoS-Guard (cdn)
    DDoS-Guard
    DDoS-Guard (45.10.243.43): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    vloudflare.com
    Registered
    2026-05-24 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 08:40 UTC

    Suggest a correction

  27. js563.com US · AS62468 · VpsQuan L.L.C.
    ReportedReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 7 mo ago
    DetailsHide
    Hostname
    js563.com
    First seen
    2026-11-08 18:51 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-08 17:58 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR2
    Valid 2026-11-08 17:52 UTC to 2027-02-06 17:52 UTC
    Logged 2026-11-08 18:50 UTC in Google ParcelYard2027h1, entry 682,823,102
    SHA-256 57536c38d150c958b25c8f34acf4bf2af709531dcb035256ef253950cbe4e5ba
    Public key SHA-256 9679ec8ce100b41ded24ffb80efabf9bcd0fc7d3df7d3309471932b5e6027fe1
    PhishDestroy
    Addresses
    82.109.252.28 · United States · AS62468 HKCLOUDX - VpsQuan L.L.C.
    Domain
    js563.com
    Registered
    2026-04-03 · West263 International Limited
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 19:05 UTC

    Suggest a correction

  28. mail.nyarsapatikurir.hu FR · AS16276 · OVH OVH SAS
    ListedOVHUnder nyarsapatikurir.hu, listed by CERT PolskaMX presentSPF missingDMARC missing
    DetailsHide
    Hostname
    mail.nyarsapatikurir.hu
    First seen
    2026-11-08 18:51 UTC
    Listing
    CERT Polska listed it 2026-08-14 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 18:34 UTC
    Listed
    CERT Polska, listing nyarsapatikurir.hu and the names under it
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR1
    Valid 2026-11-08 17:48 UTC to 2027-02-06 17:48 UTC
    Logged 2026-11-08 18:47 UTC in Google ParcelYard2027h1, entry 682,779,830
    SHA-256 268af21853b1227f17efd0d3cf5bba2d5ca3a5a5e5f4847bba4a7a65bb5e13c1
    Public key SHA-256 e5692a08930a834e59307e6dd2606931bb848465f8318f837a2db93da033eeff
    Addresses
    51.68.200.63 · France · AS16276 OVH OVH SAS · OVH (cloud provider)
    OVH
    OVH (51.68.200.63): a cloud provider. It rents servers and addresses to its customers.
    Domain
    nyarsapatikurir.hu
    MX
    Receives mail at nyarsapatikurir.hu
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 18:53 UTC

    Suggest a correction

  29. nbzyw.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    nbzyw.com
    First seen
    2026-11-08 18:51 UTC
    Listing
    CERT Polska listed it 2026-05-15 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 18:34 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-11-08 17:49 UTC to 2027-02-06 17:49 UTC
    Logged 2026-11-08 18:47 UTC in Google ParcelYard2027h1, entry 682,786,930
    SHA-256 08f00c471a7fb21315eb1205beed9f67e58ba80b4ee083ef7386a89a6c33bb9e
    Public key SHA-256 f0104f4a2a3f7b5a6f9d1dfa1a8dae8be1192556561c5ff9d7dd4af835873335
    Addresses
    104.21.40.188 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.156.77 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.40.188, 172.67.156.77): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    nbzyw.com
    Registered
    2026-05-15 · Cloud Yuqu LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 19:05 UTC

    Suggest a correction

  30. nyarsapatikurir.hu FR · AS16276 · OVH OVH SAS
    ListedOVHListed by CERT PolskaMX presentSPF missingDMARC missing
    DetailsHide
    Hostname
    nyarsapatikurir.hu
    First seen
    2026-11-08 18:51 UTC
    Listing
    CERT Polska listed it 2026-08-14 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 18:34 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR1
    Valid 2026-11-08 17:48 UTC to 2027-02-06 17:48 UTC
    Logged 2026-11-08 18:47 UTC in Google ParcelYard2027h1, entry 682,779,830
    SHA-256 268af21853b1227f17efd0d3cf5bba2d5ca3a5a5e5f4847bba4a7a65bb5e13c1
    Public key SHA-256 e5692a08930a834e59307e6dd2606931bb848465f8318f837a2db93da033eeff
    Addresses
    51.68.200.63 · France · AS16276 OVH OVH SAS · OVH (cloud provider)
    OVH
    OVH (51.68.200.63): a cloud provider. It rents servers and addresses to its customers.
    Domain
    nyarsapatikurir.hu
    MX
    Receives mail at nyarsapatikurir.hu
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 18:53 UTC

    Suggest a correction

  31. private.safaria.travel US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX presentDMARC missingRegistered 3 y ago
    DetailsHide
    Hostname
    private.safaria.travel
    First seen
    2026-11-08 18:51 UTC
    Listing
    MetaMask: first observed in the feed 2026-11-01 · still listed at the last successful feed check 2026-11-08 17:59 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-08 17:49 UTC to 2027-02-06 17:49 UTC
    Logged 2026-11-08 18:47 UTC in Google ParcelYard2027h1, entry 682,790,274
    SHA-256 b7e07c53121980c745e17de640c51ff6e09737af3364bbe6f25a265e93c0cd34
    Public key SHA-256 054fd795676cd403d5b2902f421a42790de88f334aead62cb7babdee431a479f
    Addresses
    104.21.18.139 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.182.78 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.18.139, 172.67.182.78): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    safaria.travel
    Registered
    2023-11-28 · GoDaddy.com, LLC
    MX
    Receives mail at mx.zoho.com, mx2.zoho.com, mx3.zoho.com
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 19:05 UTC

    Suggest a correction

  32. spax88k-cointelegraph.com US · AS13335 · Cloudflare, Inc.4 addressesCointelegraph
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    spax88k-cointelegraph.com
    First seen
    2026-11-08 18:51 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 17:59 UTC
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-08 17:58 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WR1 · precertificate
    Valid 2026-11-08 17:46 UTC to 2027-02-06 18:43 UTC
    Logged 2026-11-08 18:46 UTC in Google PlumbersArms2027h1, entry 683,073,561
    SHA-256 6c2f103b435d70e5927a34de8f52e4b2f72069902ed7964e7269b463641d97c7
    Public key SHA-256 413b2f76b579f067ec4d5148261f8f4b6ad1c10761c703b7d2b96388fe66fadd
    Brand
    Cointelegraph
    Addresses
    104.21.25.173 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.134.107 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3034::ac43:866b
    2606:4700:3037::6815:19ad
    Cloudflare
    Cloudflare (104.21.25.173, 172.67.134.107): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    spax88k-cointelegraph.com
    Registered
    2026-05-15 · Cloudflare, Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 18:53 UTC

    Suggest a correction

  33. swiftfinanceltd.org US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX presentSPF ~allDMARC policy noneRegistered 15 mo ago
    DetailsHide
    Hostname
    swiftfinanceltd.org
    First seen
    2026-11-08 18:51 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-08 17:58 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR1
    Valid 2026-11-08 17:47 UTC to 2027-02-06 17:47 UTC
    Logged 2026-11-08 18:45 UTC in Google PlumbersArms2027h1, entry 683,067,427
    SHA-256 3b7445664ced2f6131e087e73cf13e0a3f57687e2c7ec39008d2ec1c21de0b66
    Public key SHA-256 d0f02432155e3b8986530671956edd8b3adfd43e27fabc7a1c9aaad446fe0909
    PhishDestroy
    Addresses
    104.21.43.102 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.178.6 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.43.102, 172.67.178.6): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    swiftfinanceltd.org
    Registered
    2025-08-05 · Cloudflare, Inc.
    MX
    Receives mail at mx1.hostinger.com, mx2.hostinger.com
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    DMARC policy p=none: reports only
    Checked
    2026-11-08 19:05 UTC

    Suggest a correction

  34. www.js563.com US · AS62468 · VpsQuan L.L.C.
    ReportedUnder js563.com, reported by PhishDestroyMX absentSPF missingDMARC missingRegistered 7 mo ago
    DetailsHide
    Hostname
    www.js563.com
    First seen
    2026-11-08 18:51 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-08 17:58 UTC
    Reported
    PhishDestroy, listing js563.com and the names under it
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR2
    Valid 2026-11-08 17:52 UTC to 2027-02-06 17:52 UTC
    Logged 2026-11-08 18:50 UTC in Google ParcelYard2027h1, entry 682,823,102
    SHA-256 57536c38d150c958b25c8f34acf4bf2af709531dcb035256ef253950cbe4e5ba
    Public key SHA-256 9679ec8ce100b41ded24ffb80efabf9bcd0fc7d3df7d3309471932b5e6027fe1
    PhishDestroy
    Addresses
    82.109.252.28 · United States · AS62468 HKCLOUDX - VpsQuan L.L.C.
    Domain
    js563.com
    Registered
    2026-04-03 · West263 International Limited
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 19:05 UTC

    Suggest a correction

  35. www.nyarsapatikurir.hu FR · AS16276 · OVH OVH SAS
    ListedOVHUnder nyarsapatikurir.hu, listed by CERT PolskaMX presentSPF missingDMARC missing
    DetailsHide
    Hostname
    www.nyarsapatikurir.hu
    First seen
    2026-11-08 18:51 UTC
    Listing
    CERT Polska listed it 2026-08-14 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 18:34 UTC
    Listed
    CERT Polska, listing nyarsapatikurir.hu and the names under it
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR1
    Valid 2026-11-08 17:48 UTC to 2027-02-06 17:48 UTC
    Logged 2026-11-08 18:47 UTC in Google ParcelYard2027h1, entry 682,779,830
    SHA-256 268af21853b1227f17efd0d3cf5bba2d5ca3a5a5e5f4847bba4a7a65bb5e13c1
    Public key SHA-256 e5692a08930a834e59307e6dd2606931bb848465f8318f837a2db93da033eeff
    Addresses
    51.68.200.63 · France · AS16276 OVH OVH SAS · OVH (cloud provider)
    OVH
    OVH (51.68.200.63): a cloud provider. It rents servers and addresses to its customers.
    Domain
    nyarsapatikurir.hu
    MX
    Receives mail at nyarsapatikurir.hu
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 18:53 UTC

    Suggest a correction

  36. www.swiftfinanceltd.org US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareUnder swiftfinanceltd.org, reported by PhishDestroyMX presentSPF ~allDMARC policy noneRegistered 15 mo ago
    DetailsHide
    Hostname
    www.swiftfinanceltd.org
    First seen
    2026-11-08 18:51 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-08 17:58 UTC
    Reported
    PhishDestroy, listing swiftfinanceltd.org and the names under it
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR1
    Valid 2026-11-08 17:47 UTC to 2027-02-06 17:47 UTC
    Logged 2026-11-08 18:45 UTC in Google PlumbersArms2027h1, entry 683,067,427
    SHA-256 3b7445664ced2f6131e087e73cf13e0a3f57687e2c7ec39008d2ec1c21de0b66
    Public key SHA-256 d0f02432155e3b8986530671956edd8b3adfd43e27fabc7a1c9aaad446fe0909
    PhishDestroy
    Addresses
    104.21.43.102 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.178.6 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.43.102, 172.67.178.6): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    swiftfinanceltd.org
    Registered
    2025-08-05 · Cloudflare, Inc.
    MX
    Receives mail at mx1.hostinger.com, mx2.hostinger.com
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    DMARC policy p=none: reports only
    Checked
    2026-11-08 19:05 UTC

    Suggest a correction

  37. 466047-crypto.com US · AS13335 · Cloudflare, Inc.4 addressesCrypto.com
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 59 d ago
    DetailsHide
    Hostname
    466047-crypto.com
    First seen
    2026-11-08 18:46 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 17:59 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-11-08 17:46 UTC to 2027-02-06 17:46 UTC
    Logged 2026-11-08 18:45 UTC in Google PlumbersArms2027h1, entry 683,064,260
    SHA-256 2e17c1fae8088c143887e7b6213945b2c63c8a41d6328eb7b3ccd968728bd3db
    Public key SHA-256 e8f51884caf25a65c10838715db22ce8d9cbf78e8a5498a88330a714bcbc7b99
    Brand
    Crypto.com
    Addresses
    104.21.39.32 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.142.228 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3030::6815:2720
    2606:4700:3030::ac43:8ee4
    Cloudflare
    Cloudflare (104.21.39.32, 172.67.142.228): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    466047-crypto.com
    Registered
    2026-09-10 · Dynadot Inc
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 19:05 UTC

    Suggest a correction

  38. api.flujo-nyxor-engine-com-gent.financecryptoworld.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareUnder financecryptoworld.com, listed by CERT PolskaMX presentSPF ~allDMARC missingRegistered 22 mo ago
    DetailsHide
    Hostname
    api.flujo-nyxor-engine-com-gent.financecryptoworld.com
    First seen
    2026-11-08 18:46 UTC
    Listing
    CERT Polska listed it 2026-06-12 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 18:34 UTC
    Listed
    CERT Polska, listing financecryptoworld.com and the names under it
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WR1 · precertificate
    Valid 2026-11-08 17:44 UTC to 2027-02-06 18:42 UTC
    Logged 2026-11-08 18:44 UTC in DigiCert Sphinx2027h1, entry 405,109,921
    SHA-256 24ddf9e86878c4110aff4758775009a581a335261cb272e5680f207bf5958e24
    Public key SHA-256 3c6f36a67282f15f52ba3469c3854e871c79a118041516d6943bbe35fabbe4e3
    Addresses
    104.21.10.130 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.131.121 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.10.130, 172.67.131.121): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    financecryptoworld.com
    Registered
    2025-01-30 · MainReg Inc.
    MX
    Receives mail at mail.financecryptoworld.com
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 17:18 UTC

    Suggest a correction

  39. avsfilocar.org US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by USOMMX absentSPF missingDMARC missingRegistered 5 mo ago
    DetailsHide
    Hostname
    avsfilocar.org
    First seen
    2026-11-08 18:46 UTC
    Listing
    USOM listed it 2026-07-26 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 17:36 UTC
    Listed
    USOM
    1. Listed by USOM
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR2
    Valid 2026-11-08 17:44 UTC to 2027-02-06 17:44 UTC
    Logged 2026-11-08 18:43 UTC in Google PlumbersArms2027h1, entry 683,034,848
    SHA-256 04806c4e98fd09b2349181e1ea355f070f00abc56f1a095db0086ee54e41b529
    Public key SHA-256 215754f44fda57bb10b85eadf0fbba97a3c3d0b1e99b61cbc391cd2e7daa1809
    Addresses
    104.21.46.142 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.139.157 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.46.142, 172.67.139.157): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    avsfilocar.org
    Registered
    2026-05-30 · NameCheap, Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 19:05 UTC

    Suggest a correction

  40. bitsoft360apppro.net US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 59 d ago
    DetailsHide
    Hostname
    bitsoft360apppro.net
    First seen
    2026-11-08 18:46 UTC
    Listing
    CERT Polska listed it 2026-09-11 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 18:34 UTC
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-08 17:58 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-11-08 17:46 UTC to 2027-02-06 17:46 UTC
    Logged 2026-11-08 18:44 UTC in Let's Encrypt Sycamore2027h1, entry 1,057,207,051
    SHA-256 37bb71a8466b58583e74eff397310056eacf902dd97114ec7e8dfddd5c97ccc7
    Public key SHA-256 817566ff83f62e9039c5dfd28ec7d92848ca4e10a31d6785a9c8745afcd4bba5
    Addresses
    104.21.15.196 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.163.207 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.15.196, 172.67.163.207): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    bitsoft360apppro.net
    Registered
    2026-09-10 · Dynadot Inc
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 18:48 UTC

    Suggest a correction

  41. cankaaa.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    cankaaa.com
    First seen
    2026-11-08 18:46 UTC
    Listing
    CERT Polska listed it 2026-07-13 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 18:34 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-08 17:42 UTC to 2027-02-06 18:39 UTC
    Logged 2026-11-08 18:42 UTC in Geomys Tuscolo2027h1, entry 531,986,262
    SHA-256 e51e5c2beaeadd869775d66670cdaa9922000c4cb2bcc81d158fdaba2d109a0b
    Public key SHA-256 7845b647b907702694fc6f1a677f6dded1df1bca434ba4572f4b3738c0a046ea
    Addresses
    104.21.24.205 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.220.136 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.24.205, 172.67.220.136): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    cankaaa.com
    Registered
    2026-07-13 · NameCheap, Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 19:05 UTC

    Suggest a correction

  42. cizuso-kuyaxa.info US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    cizuso-kuyaxa.info
    First seen
    2026-11-08 18:46 UTC
    Listing
    CERT Polska listed it 2026-09-01 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 18:34 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-08 17:43 UTC to 2027-02-06 18:42 UTC
    Logged 2026-11-08 18:43 UTC in Google ParcelYard2027h1, entry 682,742,204
    SHA-256 5f080a79866196b16a68acd81bd39ac9d7dfd33173bdc71cdd38f20b89aaf528
    Public key SHA-256 9ff44a982ab0f280cd09f6e974a761d94b3c299fac97fb5676ae5995025903db
    Addresses
    104.21.32.102 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.150.194 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.32.102, 172.67.150.194): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    cizuso-kuyaxa.info
    Registered
    2026-07-13 · Dynadot Inc
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 19:05 UTC

    Suggest a correction

  43. coingekx.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 8 mo ago
    DetailsHide
    Hostname
    coingekx.com
    First seen
    2026-11-08 18:46 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 17:59 UTC
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-08 17:58 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-11-08 17:43 UTC to 2027-02-06 17:43 UTC
    Logged 2026-11-08 18:41 UTC in IPng Networks Gouda2027h1, entry 356,451,141
    SHA-256 16947649f25897ca340820707e67d5d8f7946f48b64734006888df31c087e8eb
    Public key SHA-256 a4c633d782a84e420297851cc8046816c46e371f54d776b0c10936960a9ffda0
    Addresses
    104.21.63.226 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.172.91 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.63.226, 172.67.172.91): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    coingekx.com
    Registered
    2026-03-17 · NameSilo, LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 19:05 UTC

    Suggest a correction

  44. email.mg.ctnft.net US · AS396982 · Google LLC
    ReportedGoogle CloudUnder ctnft.net, reported by PhishDestroyMX presentSPF missingDMARC quarantineRegistered 5 y ago
    DetailsHide
    Hostname
    email.mg.ctnft.net
    First seen
    2026-11-08 18:46 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-08 17:58 UTC
    Reported
    PhishDestroy, listing ctnft.net and the names under it
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-11-08 17:46 UTC to 2027-02-06 17:46 UTC
    Logged 2026-11-08 18:44 UTC in Geomys Tuscolo2027h1, entry 532,012,532
    SHA-256 92e39d158ae53a916094ca6a76b3e030df6e1e722d44479afc02e8ccffb94029
    Public key SHA-256 b65e206dcc2a84ef8b764541ad351e888f582ba48e19b33eb03280aead630b7c
    PhishDestroy
    Addresses
    34.111.99.212 · United States · AS396982 GOOGLE-CLOUD-PLATFORM - Google LLC · Google Cloud (cloud provider)
    Google Cloud
    Google Cloud (34.111.99.212): a cloud provider. It rents servers and addresses to its customers.
    Domain
    ctnft.net
    Registered
    2022-03-04 · Dominet (HK) Limited
    MX
    Receives mail at mail.ctnft.net
    SPF
    Publishes no SPF record
    DMARC
    DMARC policy p=quarantine
    Checked
    2026-11-08 13:32 UTC

    Suggest a correction

  45. fnwyw.work US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by NPA 165 (information services)MX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    fnwyw.work
    First seen
    2026-11-08 18:46 UTC
    Listing
    NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 13:35 UTC
    Listed
    NPA 165
    1. Observed in the NPA 165 feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-11-08 17:45 UTC to 2027-02-06 17:45 UTC
    Logged 2026-11-08 18:43 UTC in DigiCert Wyvern2027h1, entry 457,695,867
    SHA-256 25966fe2be2ac67fcb70b17c7b19c8f6b2ac19e691e5b2afc816dac8b892c98c
    Public key SHA-256 d088ca9d2d010db54f294bdd9b15101a7b1466f68bfe22d23479d3b2d06e4d7f
    Addresses
    104.21.55.164 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.171.170 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.55.164, 172.67.171.170): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    fnwyw.work
    Registered
    2026-05-15 · Alibaba Cloud Computing Ltd. d/b/a HiChina (www.net.cn)
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 19:05 UTC

    Suggest a correction

  46. go.crushxp.com GB · AS201738 · UFO-TECHNOLOGIES-LIMITED UF…
    ListedUnder crushxp.com, listed by CERT PolskaMX absentSPF -allDMARC missingRegistered 4 y ago
    DetailsHide
    Hostname
    go.crushxp.com
    First seen
    2026-11-08 18:46 UTC
    Listing
    CERT Polska listed it 2026-06-16 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 18:34 UTC
    PhishDestroy: first observed in the feed 2026-10-26 · still listed at the last successful feed check 2026-11-08 17:58 UTC
    Listed
    CERT Polska, listing crushxp.com and the names under it
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-11-08 17:46 UTC to 2027-02-06 17:46 UTC
    Logged 2026-11-08 18:45 UTC in Google ParcelYard2027h1, entry 682,760,906
    SHA-256 a7606638f9404b37c0035f1a9d1dcd5739c840330eb3163c544c56a3efa2d704
    Public key SHA-256 4cbd4820fa13b3482fd3e2545316d3153ac770566502d08c8bc28e75973207f7
    Addresses
    109.238.86.5 · United Kingdom · AS201738 UFO-TECHNOLOGIES-LIMITED UFO TECHNOLOGIES LIMITED
    Domain
    crushxp.com
    Registered
    2023-02-15 · NameCheap, Inc.
    MX
    Publishes no mail exchanger
    SPF
    SPF record with -all: other senders fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 13:33 UTC

    Suggest a correction

  47. gw.cloudfkare.com RU · AS57724 · DDOS-GUARD DDOS-GUARD LTD
    ListedDDoS-GuardUnder cloudfkare.com, listed by MetaMaskMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    gw.cloudfkare.com
    First seen
    2026-11-08 18:46 UTC
    Listing
    MetaMask: first observed in the feed 2026-11-01 · still listed at the last successful feed check 2026-11-08 17:59 UTC
    PhishDestroy: first observed in the feed 2026-11-07 · still listed at the last successful feed check 2026-11-08 17:58 UTC
    Listed
    MetaMask, listing cloudfkare.com and the names under it
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR2
    Valid 2026-11-08 17:43 UTC to 2027-02-06 17:43 UTC
    Logged 2026-11-08 18:42 UTC in Google ParcelYard2027h1, entry 682,719,753
    SHA-256 530fa64d3404d3a3228aac651707e9e6180a9f771d26556d7589da8c62c897ed
    Public key SHA-256 f0a38a3b3a1073a54e444d4bac56239673bccf7743cf9e281b65d471aaf275a1
    Addresses
    45.10.243.43 · Russia · AS57724 DDOS-GUARD DDOS-GUARD LTD · DDoS-Guard (cdn)
    DDoS-Guard
    DDoS-Guard (45.10.243.43): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    cloudfkare.com
    Registered
    2026-05-24 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 08:42 UTC

    Suggest a correction

  48. harbor.cloufflare.net RU · AS57724 · DDOS-GUARD DDOS-GUARD LTD
    ListedDDoS-GuardUnder cloufflare.net, listed by MetaMaskMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    harbor.cloufflare.net
    First seen
    2026-11-08 18:46 UTC
    Listing
    MetaMask: first observed in the feed 2026-11-01 · still listed at the last successful feed check 2026-11-08 17:59 UTC
    PhishDestroy: first observed in the feed 2026-11-07 · still listed at the last successful feed check 2026-11-08 17:58 UTC
    Listed
    MetaMask, listing cloufflare.net and the names under it
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR1
    Valid 2026-11-08 17:45 UTC to 2027-02-06 17:45 UTC
    Logged 2026-11-08 18:43 UTC in Google ParcelYard2027h1, entry 682,740,533
    SHA-256 21742e3e1f5f860e99d75382b1c5e7bace3bda2bf43982bb5470452eae41fce5
    Public key SHA-256 2ee0c97cd727257945086e024e3e136b9905f714f74ef0e5afb79728e3f9e828
    Addresses
    45.10.243.43 · Russia · AS57724 DDOS-GUARD DDOS-GUARD LTD · DDoS-Guard (cdn)
    DDoS-Guard
    DDoS-Guard (45.10.243.43): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    cloufflare.net
    Registered
    2026-05-24 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 11:15 UTC

    Suggest a correction

  49. kms.androidloading.com RU · AS57724 · DDOS-GUARD DDOS-GUARD LTD
    ReportedDDoS-GuardUnder androidloading.com, reported by PhishDestroyMX absentSPF missingDMARC missingRegistered 4 y ago
    DetailsHide
    Hostname
    kms.androidloading.com
    First seen
    2026-11-08 18:46 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-08 17:58 UTC
    Reported
    PhishDestroy, listing androidloading.com and the names under it
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR1 · precertificate
    Valid 2026-11-08 17:47 UTC to 2027-02-06 17:47 UTC
    Logged 2026-11-08 18:45 UTC in DigiCert Sphinx2027h1, entry 405,115,413
    SHA-256 23a5d985ce620728de52f9b18ee70ff5954fcc33b0f744456967779a96f89af6
    Public key SHA-256 28aebfa41af452a16fe6e89d1b269b82d7423396ad8e1ae5b7d51b321cec35d8
    PhishDestroy
    Addresses
    185.178.208.191 · Russia · AS57724 DDOS-GUARD DDOS-GUARD LTD · DDoS-Guard (cdn)
    DDoS-Guard
    DDoS-Guard (185.178.208.191): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    androidloading.com
    Registered
    2023-04-19 · Center of Ukrainian Internet Names (UKRNAMES)
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-07 22:30 UTC

    Suggest a correction

  50. kraken-mirrors.cc US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 18 mo ago
    DetailsHide
    Hostname
    kraken-mirrors.cc
    First seen
    2026-11-08 18:46 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-08 17:58 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WR1 · precertificate
    Valid 2026-11-08 17:42 UTC to 2027-02-06 18:41 UTC
    Logged 2026-11-08 18:42 UTC in Let's Encrypt Willow2027h1, entry 1,012,974,776
    SHA-256 3ced035cc05c3e6faaa88fcb590ac222784fa51c72efdcb5fbaa2624e973cd01
    Public key SHA-256 3cc4be94a819748135ab95bebeb7f70083e7ff0db2be3a459a6032d2b93febd6
    PhishDestroy
    Addresses
    104.21.41.64 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.161.60 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.41.64, 172.67.161.60): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    kraken-mirrors.cc
    Registered
    2025-05-20 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 19:05 UTC

    Suggest a correction

  51. login.1doc-shop.com AE · AS59692 · IQWEB IQWeb FZ-LLC
    ReportedUnder 1doc-shop.com, reported by PhishDestroyMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    login.1doc-shop.com
    First seen
    2026-11-08 18:46 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-08 17:58 UTC
    Reported
    PhishDestroy, listing 1doc-shop.com and the names under it
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR1 · precertificate
    Valid 2026-11-08 17:46 UTC to 2027-02-06 17:46 UTC
    Logged 2026-11-08 18:44 UTC in Let's Encrypt Sycamore2027h1, entry 1,057,214,901
    SHA-256 1a778fc789a30ae05d22b4e6145ecc4eb47c76f0e0acb34ffd71b0e4088d09f0
    Public key SHA-256 3abe16f4ad1e605ea08b7c01f0070dbb724f7d3b4c9b2dad0cd49670a6f01fc4
    PhishDestroy
    Addresses
    186.2.175.208 · United Arab Emirates · AS59692 IQWEB IQWeb FZ-LLC
    Domain
    1doc-shop.com
    Registered
    2026-05-13 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 13:32 UTC

    Suggest a correction

  52. tdwlmaki.bim-mx.info DE · AS206834 · TEAMINTERNET-CA-AS Team Int…
    ListedParking page · ParkingCrew (Team Internet)Under bim-mx.info, listed by MetaMaskMX absentSPF missingDMARC missingRegistered 5 mo ago
    DetailsHide
    Hostname
    tdwlmaki.bim-mx.info
    First seen
    2026-11-08 18:46 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 17:59 UTC
    Listed
    MetaMask, listing bim-mx.info and the names under it
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-11-08 17:44 UTC to 2027-02-06 17:44 UTC
    Logged 2026-11-08 18:42 UTC in DigiCert Wyvern2027h1, entry 457,686,274
    SHA-256 0de1106ce7ebde55140a8ea373666798b31607e208df06b1027d4b829da3149b
    Public key SHA-256 bf06aa7d1e8ea2c142a2dd7b1849118347c4e366d7c53017ac7c120f760edd1b
    Addresses
    185.53.179.136 · Germany · AS206834 TEAMINTERNET-CA-AS Team Internet AG · ParkingCrew (Team Internet) (parking page)
    Parking page · ParkingCrew (Team Internet)
    ParkingCrew (Team Internet) (185.53.179.136): a parking service. It answers for names that are typically for sale or unused.
    Domain
    bim-mx.info
    Registered
    2026-06-05 · Hosting Concepts B.V. d/b/a Registrar.eu
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-07 23:42 UTC

    Suggest a correction

  53. web3.cloudfkare.com RU · AS57724 · DDOS-GUARD DDOS-GUARD LTD
    ListedDDoS-GuardUnder cloudfkare.com, listed by MetaMaskMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    web3.cloudfkare.com
    First seen
    2026-11-08 18:46 UTC
    Listing
    MetaMask: first observed in the feed 2026-11-01 · still listed at the last successful feed check 2026-11-08 17:59 UTC
    PhishDestroy: first observed in the feed 2026-11-07 · still listed at the last successful feed check 2026-11-08 17:58 UTC
    Listed
    MetaMask, listing cloudfkare.com and the names under it
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR2
    Valid 2026-11-08 17:43 UTC to 2027-02-06 17:43 UTC
    Logged 2026-11-08 18:42 UTC in Google ParcelYard2027h1, entry 682,719,753
    SHA-256 530fa64d3404d3a3228aac651707e9e6180a9f771d26556d7589da8c62c897ed
    Public key SHA-256 f0a38a3b3a1073a54e444d4bac56239673bccf7743cf9e281b65d471aaf275a1
    Addresses
    45.10.243.43 · Russia · AS57724 DDOS-GUARD DDOS-GUARD LTD · DDoS-Guard (cdn)
    DDoS-Guard
    DDoS-Guard (45.10.243.43): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    cloudfkare.com
    Registered
    2026-05-24 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 08:42 UTC

    Suggest a correction

  54. www.avsfilocar.org US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareUnder avsfilocar.org, listed by USOMMX absentSPF missingDMARC missingRegistered 5 mo ago
    DetailsHide
    Hostname
    www.avsfilocar.org
    First seen
    2026-11-08 18:46 UTC
    Listing
    USOM listed it 2026-07-26 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 17:36 UTC
    Listed
    USOM, listing avsfilocar.org and the names under it
    1. Listed by USOM
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR2
    Valid 2026-11-08 17:44 UTC to 2027-02-06 17:44 UTC
    Logged 2026-11-08 18:43 UTC in Google PlumbersArms2027h1, entry 683,034,848
    SHA-256 04806c4e98fd09b2349181e1ea355f070f00abc56f1a095db0086ee54e41b529
    Public key SHA-256 215754f44fda57bb10b85eadf0fbba97a3c3d0b1e99b61cbc391cd2e7daa1809
    Addresses
    104.21.46.142 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.139.157 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.46.142, 172.67.139.157): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    avsfilocar.org
    Registered
    2026-05-30 · NameCheap, Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 19:05 UTC

    Suggest a correction

  55. www.instander.org.pk EE · AS61254 · ESTOXY-OU ESTOXY OU
    ReportedUnder instander.org.pk, reported by PhishDestroyMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    www.instander.org.pk
    First seen
    2026-11-08 18:46 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-08 17:58 UTC
    Reported
    PhishDestroy, listing instander.org.pk and the names under it
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR1
    Valid 2026-09-24 10:21 UTC to 2026-12-23 10:21 UTC
    Logged 2026-11-08 18:42 UTC in DigiCert Sphinx2026h2, entry 2,174,042,067
    SHA-256 339604839ed499a4adc31fe7842e2f743ac0bfeac0e57ced7492eaf1b8c60cbc
    Public key SHA-256 d372313a73040ca9a766d38d6fda7f9069205843c9aeaf67c369f6e2f7ab48b4
    PhishDestroy
    Addresses
    37.49.225.209 · Estonia · AS61254 ESTOXY-OU ESTOXY OU
    Domain
    instander.org.pk
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 18:38 UTC

    Suggest a correction

  56. 293714-crypto.com US · AS13335 · Cloudflare, Inc.4 addressesCrypto.com
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 59 d ago
    DetailsHide
    Hostname
    293714-crypto.com
    First seen
    2026-11-08 18:41 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 17:59 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-08 17:38 UTC to 2027-02-06 18:36 UTC
    Logged 2026-11-08 18:38 UTC in DigiCert Wyvern2027h1, entry 457,636,102
    SHA-256 f8eb99602f213a84ec02cad5f5773cd33373a8e5f447cf4d6a708b00ac60ecbf
    Public key SHA-256 9308212f8f9f8041e5ef91ca1f8a1abebc6969727a6a66be50e7f6c6069ffac7
    Brand
    Crypto.com
    Addresses
    104.21.8.16 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.130.91 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3035::6815:810
    2606:4700:3035::ac43:825b
    Cloudflare
    Cloudflare (104.21.8.16, 172.67.130.91): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    293714-crypto.com
    Registered
    2026-09-10 · Dynadot Inc
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 19:05 UTC

    Suggest a correction

  57. canksfsdsdsss.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    canksfsdsdsss.com
    First seen
    2026-11-08 18:41 UTC
    Listing
    CERT Polska listed it 2026-07-13 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 18:34 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-08 17:38 UTC to 2027-02-06 18:36 UTC
    Logged 2026-11-08 18:38 UTC in Google ParcelYard2027h1, entry 682,670,866
    SHA-256 6a10d1f2c3a1c718cd8f91ef22ecb59fefaf6914d558039c9e848ef38683d2d7
    Public key SHA-256 945c78493c9daa1ed97bd19568f775c4b4bb5d68c953efa471b04b57cddec54f
    Addresses
    104.21.67.176 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.179.3 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.67.176, 172.67.179.3): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    canksfsdsdsss.com
    Registered
    2026-07-13 · NameCheap, Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 19:05 UTC

    Suggest a correction

  58. dmcllnical.com US · AS36352 · HostPapa
    ReportedColoCrossingReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 9 mo ago
    DetailsHide
    Hostname
    dmcllnical.com
    First seen
    2026-11-08 18:41 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-08 17:58 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-08 17:37 UTC to 2027-02-06 18:35 UTC
    Logged 2026-11-08 18:37 UTC in Google ParcelYard2027h1, entry 682,655,970
    SHA-256 d1b728e1ca500d0a9a6928724a95e54762d605710b1decee0a724c62bcf03fd2
    Public key SHA-256 060e12c90306543284ba68b6df1f72f190cef782afa744b52c3247e1adbac5fa
    PhishDestroy
    Addresses
    172.245.246.78 · United States · AS36352 AS-COLOCROSSING - HostPapa · ColoCrossing (shared hosting)
    ColoCrossing
    ColoCrossing (172.245.246.78): shared web hosting and domain registration. One address typically serves many customer sites.
    Domain
    dmcllnical.com
    Registered
    2026-02-23 · Dynadot Inc
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 18:43 UTC

    Suggest a correction

  59. fortmoaz.com BD · AS153947 · FAST ZONE IT
    ReportedReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 58 d ago
    DetailsHide
    Hostname
    fortmoaz.com
    First seen
    2026-11-08 18:41 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-08 17:58 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR2 · precertificate
    Valid 2026-11-08 17:41 UTC to 2027-02-06 17:41 UTC
    Logged 2026-11-08 18:40 UTC in Geomys Tuscolo2027h1, entry 531,961,332
    SHA-256 7d8308df211284d68a23e1761a569863b42f82d3891426e99bfee9d2e7e51cd9
    Public key SHA-256 7b05f40a48baaa1f95e1aef3b9bf43081d038476fec976433e1767e53667ca65
    PhishDestroy
    Addresses
    193.187.110.10 · Bangladesh · AS153947 FASTZONEIT-AS-AP - FAST ZONE IT
    Domain
    fortmoaz.com
    Registered
    2026-09-11 · Dominet (HK) Limited
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 19:05 UTC

    Suggest a correction

  60. live.microsoft.com.signon.help US · AS13335 · Cloudflare, Inc.4 addressesMicrosoft
    ListedCloudflareUnder signon.help, listed by MetaMaskMX presentSPF ~allDMARC policy noneRegistered 5 mo ago
    DetailsHide
    Hostname
    live.microsoft.com.signon.help
    First seen
    2026-11-08 18:41 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 17:59 UTC
    Listed
    MetaMask, listing signon.help and the names under it
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WR1 · precertificate
    Valid 2026-11-08 17:37 UTC to 2027-02-05 12:58 UTC
    Logged 2026-11-08 18:37 UTC in Google ParcelYard2027h1, entry 682,664,473
    SHA-256 4f9e298afcc3fb2aab4ba86b357e2a268a9bb907b0989ef27cccfd12ce472537
    Public key SHA-256 751c4abb97292c754ab3ae6c2130db3682e7f0b52cfccb33fa54ded1db9ef23d
    Brand
    Microsoft
    Addresses
    104.21.23.49 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.209.50 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3034::ac43:d132
    2606:4700:3037::6815:1731
    Cloudflare
    Cloudflare (104.21.23.49, 172.67.209.50): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    signon.help
    Registered
    2026-06-05 · NameCheap, Inc.
    MX
    Receives mail at _dc-mx.6059c93ec22f.signon.help
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    DMARC policy p=none: reports only
    Checked
    2026-11-08 17:57 UTC

    Suggest a correction

  61. microsoft365updates.com US · AS13335 · Cloudflare, Inc.4 addresses
    ReportedCloudflareReported by PhishDestroyMX presentSPF ~allDMARC policy noneRegistered 8 mo ago
    DetailsHide
    Hostname
    microsoft365updates.com
    First seen
    2026-11-08 18:41 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-08 17:58 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-11-08 17:38 UTC to 2027-02-06 17:38 UTC
    Logged 2026-11-08 18:37 UTC in Google ParcelYard2027h1, entry 682,655,420
    SHA-256 0f5ace274769729ba013054986f7c0cfdcd7d045ad9e48107b76d6f58372ece5
    Public key SHA-256 ce861a6d694abe46670f556e0c182c501d3fc1be3d00834b2d4cb5b3aa4253f6
    PhishDestroy
    Addresses
    104.21.10.231 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.146.245 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3032::6815:ae7
    2606:4700:3035::ac43:92f5
    Cloudflare
    Cloudflare (104.21.10.231, 172.67.146.245): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    microsoft365updates.com
    Registered
    2026-03-17 · Cloudflare, Inc.
    MX
    Receives mail at ms53768310.msv1.invalid
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    DMARC policy p=none: reports only
    Checked
    2026-11-08 19:05 UTC

    Suggest a correction

  62. mrtg.androidloading.com RU · AS57724 · DDOS-GUARD DDOS-GUARD LTD
    ReportedDDoS-GuardUnder androidloading.com, reported by PhishDestroyMX absentSPF missingDMARC missingRegistered 4 y ago
    DetailsHide
    Hostname
    mrtg.androidloading.com
    First seen
    2026-11-08 18:41 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-08 17:58 UTC
    Reported
    PhishDestroy, listing androidloading.com and the names under it
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR2
    Valid 2026-11-08 17:40 UTC to 2027-02-06 17:40 UTC
    Logged 2026-11-08 18:38 UTC in Google PlumbersArms2027h1, entry 682,979,770
    SHA-256 92cd0ae024da8215a1941d4a4dfd982ef5400cf20e7b1111575be2629432b8e0
    Public key SHA-256 d84102110164edd652ef6a61b49485141f82b2ba493553981b0c4483b6fe68fa
    PhishDestroy
    Addresses
    185.178.208.191 · Russia · AS57724 DDOS-GUARD DDOS-GUARD LTD · DDoS-Guard (cdn)
    DDoS-Guard
    DDoS-Guard (185.178.208.191): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    androidloading.com
    Registered
    2023-04-19 · Center of Ukrainian Internet Names (UKRNAMES)
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-07 22:30 UTC

    Suggest a correction

  63. notifyhubss.net US · AS13335 · Cloudflare, Inc.3 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 7 y ago
    DetailsHide
    Hostname
    notifyhubss.net
    First seen
    2026-11-08 18:41 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-08 17:58 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-08 17:39 UTC to 2027-02-06 18:39 UTC
    Logged 2026-11-08 18:39 UTC in DigiCert Wyvern2027h1, entry 457,649,623
    SHA-256 606866113332854fa8308a034c1d626716e4b953934ad4eadbd05d26f256c73a
    Public key SHA-256 ce21c74f9214d5b18d50a0cd1ed1c0f3ac22d7425eeef760023bd694d9bb7961
    PhishDestroy
    Addresses
    104.26.8.237 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    104.26.9.237 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.72.147 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.26.8.237, 104.26.9.237, 172.67.72.147): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    notifyhubss.net
    Registered
    2020-04-30 · Cloudflare, Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 19:05 UTC

    Suggest a correction

  64. static.ctnft.net US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareUnder ctnft.net, reported by PhishDestroyMX presentSPF missingDMARC quarantineRegistered 5 y ago
    DetailsHide
    Hostname
    static.ctnft.net
    First seen
    2026-11-08 18:41 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-08 17:58 UTC
    Reported
    PhishDestroy, listing ctnft.net and the names under it
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR2
    Valid 2026-11-08 17:41 UTC to 2027-02-06 17:41 UTC
    Logged 2026-11-08 18:40 UTC in Google ParcelYard2027h1, entry 682,698,816
    SHA-256 a48e6be11d12dfe4fb0cfb8ef1ac53edc039cdbb82ff3ef170d2eb92f018ae82
    Public key SHA-256 0a645cf4defee66c01789ecd34fe2785993ec0f5269a8870f46e9974d162233a
    PhishDestroy
    Addresses
    104.21.55.146 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.149.36 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.55.146, 172.67.149.36): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    ctnft.net
    Registered
    2022-03-04 · Dominet (HK) Limited
    MX
    Receives mail at mail.ctnft.net
    SPF
    Publishes no SPF record
    DMARC
    DMARC policy p=quarantine
    Checked
    2026-11-08 13:32 UTC

    Suggest a correction

  65. tokencreator.pro BD · AS153947 · FAST ZONE IT
    ReportedReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 5 mo ago
    DetailsHide
    Hostname
    tokencreator.pro
    First seen
    2026-11-08 18:41 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-08 17:58 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR2
    Valid 2026-11-08 17:39 UTC to 2027-02-06 17:39 UTC
    Logged 2026-11-08 18:38 UTC in Google ParcelYard2027h1, entry 682,668,860
    SHA-256 ccf679fb4d7240c63573e942cb0f3a719a0cc75975150d6f9c041dcb017df088
    Public key SHA-256 8ce4fd83ef5c87b94ca2fb2363a8fd541b30c06731fa60a7c43d3fef950633f8
    PhishDestroy
    Addresses
    193.187.110.18 · Bangladesh · AS153947 FASTZONEIT-AS-AP - FAST ZONE IT
    Domain
    tokencreator.pro
    Registered
    2026-06-05 · Spaceship, Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 19:05 UTC

    Suggest a correction

  66. trx-dx.com US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 12 mo ago
    DetailsHide
    Hostname
    trx-dx.com
    First seen
    2026-11-08 18:41 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-08 17:58 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-08 17:37 UTC to 2027-02-06 18:34 UTC
    Logged 2026-11-08 18:37 UTC in Google ParcelYard2027h1, entry 682,655,346
    SHA-256 c54c38b1850bb6fe87f85606f53931951a3e4bdcde22f5a547ce5e450d0dcb0f
    Public key SHA-256 40bf79566b10cdd19bfefa94cb6dbd93f662b57947d8f6b8d9973847c35991a5
    PhishDestroy
    Addresses
    104.21.1.175 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.129.171 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.1.175, 172.67.129.171): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    trx-dx.com
    Registered
    2025-11-12 · Global Domain Group LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 19:05 UTC

    Suggest a correction

  67. veritonixmedia.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by USOMMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    veritonixmedia.com
    First seen
    2026-11-08 18:41 UTC
    Listing
    USOM listed it 2026-06-09 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 17:36 UTC
    Listed
    USOM
    1. Listed by USOM
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-11-08 17:40 UTC to 2027-02-06 17:40 UTC
    Logged 2026-11-08 18:39 UTC in Google ParcelYard2027h1, entry 682,688,590
    SHA-256 23aa39efba7a0c2b4500c747817f899e01e0bb8edd02a6c070efa2995148f435
    Public key SHA-256 2c60d376d353e022d39d9c5453cf908355ccb05abab191be346c36cb40d50bc6
    Addresses
    104.21.81.136 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.189.156 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.81.136, 172.67.189.156): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    veritonixmedia.com
    Registered
    2026-05-14 · Realtime Register B.V.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 19:05 UTC

    Suggest a correction

  68. www.live.ledgerofficial.co.uk US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareUnder ledgerofficial.co.uk, listed by MetaMaskMX absentSPF missingDMARC missingRegistered 7 mo ago
    DetailsHide
    Hostname
    www.live.ledgerofficial.co.uk
    First seen
    2026-11-08 18:41 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 17:59 UTC
    PhishDestroy: observed back in the feed 2026-11-07 · still listed at the last successful feed check 2026-11-08 17:58 UTC · listed 2 times
    Earlier listing periods: 2026-10-25 to 2026-11-02 (8 days)
    Listed
    MetaMask, listing ledgerofficial.co.uk and the names under it
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by Cloudflare TLS Issuing ECC CA 4
    Valid 2026-11-08 18:26 UTC to 2027-02-06 18:35 UTC
    Logged 2026-11-08 18:36 UTC in Sectigo Elephant2027h1, entry 784,058,832
    SHA-256 2060b445cea0e03892367f834dee7299f9aa69f371a216af9131a27df69174dd
    Public key SHA-256 fab51429da67503fcfe825e5db3ac0c375a53b0f951e13cf35a48a62563283ca
    Addresses
    104.21.2.175 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.129.130 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.2.175, 172.67.129.130): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    ledgerofficial.co.uk
    Registered
    2026-04-07 · Hosting Concepts B.V.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 08:09 UTC

    Suggest a correction

  69. 5356468.cfd US · AS13335 · Cloudflare, Inc.4 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered today
    DetailsHide
    Hostname
    5356468.cfd
    First seen
    2026-11-08 18:36 UTC
    Listing
    CERT Polska listed it 2026-11-08 · still listed at the last successful feed check 2026-11-08 18:34 UTC
    Listed
    CERT Polska
    1. Certificate logged in CT
    2. Listed by CERT Polska
    3. We matched the new listing
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-11-08 13:24 UTC to 2027-02-06 13:24 UTC
    Logged 2026-11-08 14:22 UTC in Google PlumbersArms2027h1, entry 679,489,868
    SHA-256 579bbae5d0504b28c9d6f5d364f55c383a678d3186c9fdb6da9c5818185c71f6
    Public key SHA-256 c74d4a0dc5446292a0995aff0243a2381edab067261a2612717da8c6424ac02b
    Addresses
    104.21.15.38 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.161.79 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3033::6815:f26
    2606:4700:3034::ac43:a14f
    Cloudflare
    Cloudflare (104.21.15.38, 172.67.161.79): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    5356468.cfd
    Registered
    2026-11-08 · Hosting Concepts B.V. d/b/a Registrar.eu
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 19:05 UTC

    Suggest a correction

  70. bet365korea.org US · AS13335 · Cloudflare, Inc.
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 2 y ago
    DetailsHide
    Hostname
    bet365korea.org
    First seen
    2026-11-08 18:36 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-08 17:58 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR2
    Valid 2026-11-08 17:36 UTC to 2027-02-06 17:36 UTC
    Logged 2026-11-08 18:35 UTC in Google ParcelYard2027h1, entry 682,628,287
    SHA-256 a73fe682702289a2e1aa4e2e2ab95e17d574bb7cee879b47dce1a682478c4e3b
    Public key SHA-256 0c5bd3beccddb35a97a91a485202c75c84ec66edf61e09049e9b6e8ac806d7e8
    PhishDestroy
    Addresses
    104.19.154.92 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.19.154.92): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    bet365korea.org
    Registered
    2024-08-20 · NameCheap, Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 19:05 UTC

    Suggest a correction

  71. boausb.shop US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by NPA 165 (finance and insurance)MX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    boausb.shop
    First seen
    2026-11-08 18:36 UTC
    Listing
    NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 13:35 UTC
    Listed
    NPA 165
    1. Observed in the NPA 165 feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-11-08 17:36 UTC to 2027-02-06 17:36 UTC
    Logged 2026-11-08 18:34 UTC in Let's Encrypt Sycamore2027h1, entry 1,056,962,796
    SHA-256 7515cd14736b891be4f48f289349d0ee8a3d4c4f1771ee438758578e19ecc236
    Public key SHA-256 53722a11cf558dfa4df0235f8b73cef9441d5319ed93a00b033239b12ef2758a
    Addresses
    104.21.62.120 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.223.133 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.62.120, 172.67.223.133): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    boausb.shop
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 18:38 UTC

    Suggest a correction

  72. catonit.club US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    catonit.club
    First seen
    2026-11-08 18:36 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 17:59 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-08 17:35 UTC to 2027-02-06 18:33 UTC
    Logged 2026-11-08 18:35 UTC in Google PlumbersArms2027h1, entry 682,932,370
    SHA-256 28f5cd765966ad6ed4871fd62f3c07f813612627aa2004ef6de1c6a6db3ab17b
    Public key SHA-256 942d3e48317b6ce98031b8fbf45bca69bcabd6389746c1b50071dbfdd9e35f61
    Addresses
    104.21.4.26 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.131.147 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.4.26, 172.67.131.147): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    catonit.club
    Registered
    2026-07-13 · Global Domain Group LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 19:05 UTC

    Suggest a correction

  73. chinkasser.store US · AS13335 · Cloudflare, Inc.4 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered today
    DetailsHide
    Hostname
    chinkasser.store
    First seen
    2026-11-08 18:36 UTC
    Listing
    CERT Polska listed it 2026-11-08 · still listed at the last successful feed check 2026-11-08 18:34 UTC
    Listed
    CERT Polska
    1. Certificate logged in CT
    2. Listed by CERT Polska
    3. We matched the new listing
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-08 04:26 UTC to 2027-02-06 04:26 UTC
    Logged 2026-11-08 05:25 UTC in Google PlumbersArms2027h1, entry 672,256,723
    SHA-256 11dc7432b52e8cd576b8b37c96455a73de006527f4d6645ed198072d92812a82
    Public key SHA-256 3d932d76d26f912bfa383cb9ef6d8aac9479ef6695ca3012460b17fb0f99fc3a
    Addresses
    104.21.88.153 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.223.178 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3031::6815:5899
    2606:4700:3037::ac43:dfb2
    Cloudflare
    Cloudflare (104.21.88.153, 172.67.223.178): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    chinkasser.store
    Registered
    2026-11-08 · NameCheap, Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 19:05 UTC

    Suggest a correction

  74. fenoquoti.store US · AS13335 · Cloudflare, Inc.4 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered today
    DetailsHide
    Hostname
    fenoquoti.store
    First seen
    2026-11-08 18:36 UTC
    Listing
    CERT Polska listed it 2026-11-08 · still listed at the last successful feed check 2026-11-08 18:34 UTC
    Listed
    CERT Polska
    1. Certificate logged in CT
    2. Listed by CERT Polska
    3. We matched the new listing
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-11-08 04:26 UTC to 2027-02-06 04:26 UTC
    Logged 2026-11-08 05:24 UTC in Let's Encrypt Sycamore2027h1, entry 1,037,724,319
    SHA-256 065682a80ed1f279397b67c9694b2ac9106d6bdcd75652097e6625c150d5cc51
    Public key SHA-256 6ca2cee3d28e110e382368373977af3e1ae2e291175d66b5e2924b0cf26bd3f5
    Addresses
    104.21.38.128 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.222.239 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3036::ac43:deef
    2606:4700:3037::6815:2680
    Cloudflare
    Cloudflare (104.21.38.128, 172.67.222.239): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    fenoquoti.store
    Registered
    2026-11-08 · NameCheap, Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 19:05 UTC

    Suggest a correction

  75. gealpha.shop US · AS13335 · Cloudflare, Inc.
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    gealpha.shop
    First seen
    2026-11-08 18:36 UTC
    Listing
    CERT Polska listed it 2026-11-08 · still listed at the last successful feed check 2026-11-08 18:34 UTC
    Listed
    CERT Polska
    1. Certificate logged in CT
    2. Listed by CERT Polska
    3. We matched the new listing
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-08 11:44 UTC to 2027-02-06 12:44 UTC
    Logged 2026-11-08 12:44 UTC in Geomys Tuscolo2027h1, entry 528,185,437
    SHA-256 31261cdd1a95c92886474c10b893384c7490826e5cee20be72e5c9ff3165a258
    Public key SHA-256 94705e72b0d8b89caeeea7bc5f7d7bba52a2b9f79833115c75a6b1326a0ce83d
    Addresses
    104.18.20.248 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.18.20.248): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    gealpha.shop
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 18:38 UTC

    Suggest a correction

  76. homlaofertas.shop US · AS13335 · Cloudflare, Inc.
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    homlaofertas.shop
    First seen
    2026-11-08 18:36 UTC
    Listing
    CERT Polska listed it 2026-11-08 · still listed at the last successful feed check 2026-11-08 18:34 UTC
    Listed
    CERT Polska
    1. Certificate logged in CT
    2. Listed by CERT Polska
    3. We matched the new listing
    4. Latest DNS check
    Certificate
    Issued by WR1 · precertificate
    Valid 2026-11-08 13:47 UTC to 2027-02-06 14:45 UTC
    Logged 2026-11-08 14:47 UTC in DigiCert Wyvern2027h1, entry 455,461,044
    SHA-256 59da023374241b17568df882a2fb0b56f3851f9be4cf03ba18916673c19e3f96
    Public key SHA-256 3d8926cc1a69ba15561192b49c6d460412a667c39aec8a4c6f6e5b90882b0a97
    Addresses
    104.18.20.248 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.18.20.248): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    homlaofertas.shop
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 18:38 UTC

    Suggest a correction

  77. impuzkrish.store US · AS13335 · Cloudflare, Inc.4 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered today
    DetailsHide
    Hostname
    impuzkrish.store
    First seen
    2026-11-08 18:36 UTC
    Listing
    CERT Polska listed it 2026-11-08 · still listed at the last successful feed check 2026-11-08 18:34 UTC
    Listed
    CERT Polska
    1. Certificate logged in CT
    2. Listed by CERT Polska
    3. We matched the new listing
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-08 04:24 UTC to 2027-02-06 05:21 UTC
    Logged 2026-11-08 05:24 UTC in Google ParcelYard2027h1, entry 671,931,023
    SHA-256 037955b90e320aab6db2e36ada940a96878a0100c50ca9239a22ba09ff328bcb
    Public key SHA-256 6e3d54d99bf8d9e17183c86728a63801b7cd94014ae266a1bf79f2acde925d68
    Addresses
    104.21.2.164 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.129.100 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3035::ac43:8164
    2606:4700:3037::6815:2a4
    Cloudflare
    Cloudflare (104.21.2.164, 172.67.129.100): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    impuzkrish.store
    Registered
    2026-11-08 · NameCheap, Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 19:05 UTC

    Suggest a correction

  78. instander.org.pk EE · AS61254 · ESTOXY-OU ESTOXY OU
    ReportedReported by PhishDestroyMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    instander.org.pk
    First seen
    2026-11-08 18:36 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-08 17:58 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-08 17:35 UTC to 2027-02-06 18:33 UTC
    Logged 2026-11-08 18:35 UTC in Google PlumbersArms2027h1, entry 682,932,079
    SHA-256 b4485525bba42ec5c4fe719a65f8772b9761d9ba2509bcf1cca9513b4b94a1fd
    Public key SHA-256 8214d302c5ed399f0d993ce90b56805a5dac42d8c3d17f96b766ec5529d14cd9
    PhishDestroy
    Addresses
    37.49.225.209 · Estonia · AS61254 ESTOXY-OU ESTOXY OU
    Domain
    instander.org.pk
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 18:38 UTC

    Suggest a correction

  79. kurumsorgu.org US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by USOMMX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    kurumsorgu.org
    First seen
    2026-11-08 18:36 UTC
    Listing
    USOM listed it 2026-07-14 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 17:36 UTC
    Listed
    USOM
    1. Listed by USOM
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-08 17:34 UTC to 2027-02-06 18:33 UTC
    Logged 2026-11-08 18:34 UTC in Geomys Tuscolo2027h1, entry 531,901,409
    SHA-256 cdc35e81ac9a75e960862109ac7360588c0a0e60ee1d63de2f4d296dcca49b87
    Public key SHA-256 9412ea4bdfd9849781b9374472a0fc9e5534689a6e6ceb72cea7eb90d2321193
    Addresses
    104.21.52.38 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.194.203 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.52.38, 172.67.194.203): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    kurumsorgu.org
    Registered
    2026-07-13 · NameSilo, LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 19:05 UTC

    Suggest a correction

  80. obtruphilo.store US · AS13335 · Cloudflare, Inc.4 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered today
    DetailsHide
    Hostname
    obtruphilo.store
    First seen
    2026-11-08 18:36 UTC
    Listing
    CERT Polska listed it 2026-11-08 · still listed at the last successful feed check 2026-11-08 18:34 UTC
    Listed
    CERT Polska
    1. Certificate logged in CT
    2. Listed by CERT Polska
    3. We matched the new listing
    4. Latest DNS check
    Certificate
    Issued by Cloudflare TLS Issuing ECC CA 4 · precertificate
    Valid 2026-11-08 05:14 UTC to 2027-02-06 05:22 UTC
    Logged 2026-11-08 05:24 UTC in DigiCert Wyvern2027h1, entry 449,987,993
    SHA-256 ddd6d1f21c976be872f0add205fb40cf17cffb003229db71174d9fe9f17441a5
    Public key SHA-256 cf6b01250476386a5db8acd7320f6bb514a6750dd2f32abc83e46e7fe3520cfd
    Addresses
    104.21.13.25 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.197.16 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3030::ac43:c510
    2606:4700:3034::6815:d19
    Cloudflare
    Cloudflare (104.21.13.25, 172.67.197.16): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    obtruphilo.store
    Registered
    2026-11-08 · NameCheap, Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 19:05 UTC

    Suggest a correction

  81. oferta-33742115.cfd US · AS13335 · Cloudflare, Inc.4 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered today
    DetailsHide
    Hostname
    oferta-33742115.cfd
    First seen
    2026-11-08 18:36 UTC
    Listing
    CERT Polska listed it 2026-11-08 · still listed at the last successful feed check 2026-11-08 18:34 UTC
    Listed
    CERT Polska
    1. Certificate logged in CT
    2. Listed by CERT Polska
    3. We matched the new listing
    4. Latest DNS check
    Certificate
    Issued by Cloudflare TLS Issuing ECC CA 4 · precertificate
    Valid 2026-11-08 15:36 UTC to 2027-02-06 15:44 UTC
    Logged 2026-11-08 15:46 UTC in DigiCert Wyvern2027h1, entry 455,940,180
    SHA-256 1eef56670fa671daf3818feaeb4e2a25b97557f166b7ec040477b3101e641e9f
    Public key SHA-256 9c533ac910287448301dbc2733ffd4d300ced5b5575691ea49e545fc6e556e1f
    Addresses
    104.21.93.194 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.214.47 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3035::6815:5dc2
    2606:4700:3036::ac43:d62f
    Cloudflare
    Cloudflare (104.21.93.194, 172.67.214.47): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    oferta-33742115.cfd
    Registered
    2026-11-08 · Hosting Concepts B.V. d/b/a Registrar.eu
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 19:05 UTC

    Suggest a correction

  82. ogoszenie-83201572.sbs US · AS13335 · Cloudflare, Inc.4 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered today
    DetailsHide
    Hostname
    ogoszenie-83201572.sbs
    First seen
    2026-11-08 18:36 UTC
    Listing
    CERT Polska listed it 2026-11-08 · still listed at the last successful feed check 2026-11-08 18:34 UTC
    Listed
    CERT Polska
    1. Certificate logged in CT
    2. Listed by CERT Polska
    3. We matched the new listing
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-08 11:19 UTC to 2027-02-06 11:19 UTC
    Logged 2026-11-08 12:18 UTC in Google ParcelYard2027h1, entry 677,438,443
    SHA-256 1ded96abc758c6fa4d4b140d95504082f8dd393b7c258af65be6571e8d57d9be
    Public key SHA-256 5d285d91d16d85d5b67331e86150d86b48cfd02a638167d6aea36a89f5be06da
    Addresses
    104.21.46.159 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.140.110 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3032::6815:2e9f
    2606:4700:3032::ac43:8c6e
    Cloudflare
    Cloudflare (104.21.46.159, 172.67.140.110): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    ogoszenie-83201572.sbs
    Registered
    2026-11-08 · Hosting Concepts B.V. d/b/a Registrar.eu
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 19:05 UTC

    Suggest a correction

  83. pi-oferta8975127.lat fd10:aec2:5dae::
    ListedListed by CERT PolskaMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    pi-oferta8975127.lat
    First seen
    2026-11-08 18:36 UTC
    Listing
    CERT Polska listed it 2026-11-08 · still listed at the last successful feed check 2026-11-08 18:34 UTC
    Listed
    CERT Polska
    1. Certificate logged in CT
    2. Listed by CERT Polska
    3. We matched the new listing
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-08 14:39 UTC to 2027-02-06 15:37 UTC
    Logged 2026-11-08 15:39 UTC in Google ParcelYard2027h1, entry 680,245,321
    SHA-256 dc180a624873a700b29894cf68ffe7c354998fc4129a7eee36b876292c246d18
    Public key SHA-256 e149730842dd3cd764b83f5e313650ac458df78184fadfa907d8fc4a80048db0
    Addresses
    fd10:aec2:5dae::
    Domain
    pi-oferta8975127.lat
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 18:38 UTC

    Suggest a correction

  84. pl-numerbiletu832139193.sbs fd10:aec2:5dae::
    ListedListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 1 d ago
    DetailsHide
    Hostname
    pl-numerbiletu832139193.sbs
    First seen
    2026-11-08 18:36 UTC
    Listing
    CERT Polska listed it 2026-11-08 · still listed at the last successful feed check 2026-11-08 18:34 UTC
    Listed
    CERT Polska
    1. Certificate logged in CT
    2. Listed by CERT Polska
    3. We matched the new listing
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-08 14:58 UTC to 2027-02-06 14:58 UTC
    Logged 2026-11-08 15:57 UTC in Sectigo Statue2027h1, entry 95,328,130
    SHA-256 35c8021402af4d8bbb16e92566b4997e92a04b74516fbdfbbdf2908c23e22b98
    Public key SHA-256 bb17059ac0ef25442f1848a16d4d1afaf11422ac7ee5288c4aa770014e6ed653
    Addresses
    fd10:aec2:5dae::
    Domain
    pl-numerbiletu832139193.sbs
    Registered
    2026-11-07 · Hosting Concepts B.V. d/b/a Registrar.eu
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 19:05 UTC

    Suggest a correction

  85. pr-2.radstation.byway.dev DE · AS24940 · HETZNER-AS Hetzner Online G…
    ListedHetznerUnder byway.dev, listed by MetaMaskMX absentSPF missingDMARC missingRegistered 5 y ago
    DetailsHide
    Hostname
    pr-2.radstation.byway.dev
    First seen
    2026-11-08 18:36 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 17:59 UTC
    Listed
    MetaMask, listing byway.dev and the names under it
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-11-08 17:36 UTC to 2027-02-06 17:36 UTC
    Logged 2026-11-08 18:35 UTC in IPng Networks Halloumi2027h1, entry 415,035,118
    SHA-256 3debdd6279c9c00e3509a394992d934dbf60aa81a82b3b9e0d3f1ff63ea679af
    Public key SHA-256 0fa21f28e12811eba588fe4d346abe91849d86f317db4545d6c77afcbfa8b835
    Addresses
    91.99.178.72 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
    Hetzner
    Hetzner (91.99.178.72): a cloud provider. It rents servers and addresses to its customers.
    Domain
    byway.dev
    Registered
    2022-01-21 · Namecheap Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 18:26 UTC

    Suggest a correction

  86. proslindig.store US · AS13335 · Cloudflare, Inc.4 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered today
    DetailsHide
    Hostname
    proslindig.store
    First seen
    2026-11-08 18:36 UTC
    Listing
    CERT Polska listed it 2026-11-08 · still listed at the last successful feed check 2026-11-08 18:34 UTC
    Listed
    CERT Polska
    1. Certificate logged in CT
    2. Listed by CERT Polska
    3. We matched the new listing
    4. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-11-08 04:28 UTC to 2027-02-06 04:28 UTC
    Logged 2026-11-08 05:27 UTC in Let's Encrypt Willow2027h1, entry 997,647,200
    SHA-256 097efb59467699cbf1a260384dbd85e6d0eaf973b09e602cdff65ba3e71e9e4d
    Public key SHA-256 e9b3e73981e4ce4f5b6c69ae79b2cd71f2abb0bb55bc09e4ac627b1c53dd1df9
    Addresses
    104.21.9.200 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.189.141 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3035::6815:9c8
    2606:4700:3036::ac43:bd8d
    Cloudflare
    Cloudflare (104.21.9.200, 172.67.189.141): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    proslindig.store
    Registered
    2026-11-08 · NameCheap, Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 19:05 UTC

    Suggest a correction

  87. qa.1doc-shop.com AE · AS59692 · IQWEB IQWeb FZ-LLC
    ReportedUnder 1doc-shop.com, reported by PhishDestroyMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    qa.1doc-shop.com
    First seen
    2026-11-08 18:36 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-08 17:58 UTC
    Reported
    PhishDestroy, listing 1doc-shop.com and the names under it
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR2 · precertificate
    Valid 2026-11-08 17:37 UTC to 2027-02-06 17:37 UTC
    Logged 2026-11-08 18:35 UTC in DigiCert Wyvern2027h1, entry 457,608,833
    SHA-256 503828f3d495ce63e70577ba2597a702734589e12cf58358c7749c0a4b66dbd2
    Public key SHA-256 80ff38b49babbea34db7d4425fc1a4d1227878979749799c498c7258a399d4de
    PhishDestroy
    Addresses
    186.2.175.208 · United Arab Emirates · AS59692 IQWEB IQWeb FZ-LLC
    Domain
    1doc-shop.com
    Registered
    2026-05-13 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 13:32 UTC

    Suggest a correction

  88. reneestly.shop US · AS13335 · Cloudflare, Inc.
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    reneestly.shop
    First seen
    2026-11-08 18:36 UTC
    Listing
    CERT Polska listed it 2026-11-08 · still listed at the last successful feed check 2026-11-08 18:34 UTC
    Listed
    CERT Polska
    1. Certificate logged in CT
    2. Listed by CERT Polska
    3. We matched the new listing
    4. Latest DNS check
    Certificate
    Issued by WR1 · precertificate
    Valid 2026-11-08 12:06 UTC to 2027-02-06 13:05 UTC
    Logged 2026-11-08 13:06 UTC in Geomys Tuscolo2027h1, entry 528,422,744
    SHA-256 4b92cd87ff7732936e2df3e203d861c1a56462c782d0fd931b3793f04979646d
    Public key SHA-256 4e596a3b2fe57e93d156da3ef9274b0ab6ac5ca6086c351dc68764335757efa4
    Addresses
    104.18.20.248 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.18.20.248): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    reneestly.shop
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 18:38 UTC

    Suggest a correction

  89. riesptechn.store US · AS13335 · Cloudflare, Inc.4 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered today
    DetailsHide
    Hostname
    riesptechn.store
    First seen
    2026-11-08 18:36 UTC
    Listing
    CERT Polska listed it 2026-11-08 · still listed at the last successful feed check 2026-11-08 18:34 UTC
    Listed
    CERT Polska
    1. Certificate logged in CT
    2. Listed by CERT Polska
    3. We matched the new listing
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-08 04:25 UTC to 2027-02-06 05:23 UTC
    Logged 2026-11-08 05:25 UTC in Let's Encrypt Sycamore2027h1, entry 1,037,731,740
    SHA-256 365d4a723bc5903caffd1d71e21fbfe7a957384f14a27a1baa359fb9303c1b77
    Public key SHA-256 1545268c7dfb9a68fb6bf149370110ee66fd8986ccbdb22b4c1f490be21131ae
    Addresses
    104.21.17.173 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.177.185 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3033::6815:11ad
    2606:4700:3034::ac43:b1b9
    Cloudflare
    Cloudflare (104.21.17.173, 172.67.177.185): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    riesptechn.store
    Registered
    2026-11-08 · NameCheap, Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 19:05 UTC

    Suggest a correction

  90. seripdelib.store US · AS13335 · Cloudflare, Inc.4 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered today
    DetailsHide
    Hostname
    seripdelib.store
    First seen
    2026-11-08 18:36 UTC
    Listing
    CERT Polska listed it 2026-11-08 · still listed at the last successful feed check 2026-11-08 18:34 UTC
    Listed
    CERT Polska
    1. Certificate logged in CT
    2. Listed by CERT Polska
    3. We matched the new listing
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-11-08 04:25 UTC to 2027-02-06 04:25 UTC
    Logged 2026-11-08 05:23 UTC in Google PlumbersArms2027h1, entry 672,246,947
    SHA-256 01a7be84684741b745e84aa8829987da92e8e76b3a35c86a40fb8370f85c7c50
    Public key SHA-256 b4f3caf826c74f1833733745f9bbbefbbc18a19ba9940f34918d61a763a71e23
    Addresses
    104.21.22.200 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.206.231 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3032::ac43:cee7
    2606:4700:3035::6815:16c8
    Cloudflare
    Cloudflare (104.21.22.200, 172.67.206.231): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    seripdelib.store
    Registered
    2026-11-08 · NameCheap, Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 19:05 UTC

    Suggest a correction

  91. sopprpipet.store US · AS13335 · Cloudflare, Inc.4 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered today
    DetailsHide
    Hostname
    sopprpipet.store
    First seen
    2026-11-08 18:36 UTC
    Listing
    CERT Polska listed it 2026-11-08 · still listed at the last successful feed check 2026-11-08 18:34 UTC
    Listed
    CERT Polska
    1. Certificate logged in CT
    2. Listed by CERT Polska
    3. We matched the new listing
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-08 04:27 UTC to 2027-02-06 04:27 UTC
    Logged 2026-11-08 05:25 UTC in Google ParcelYard2027h1, entry 671,945,335
    SHA-256 3eed0ec29fc74cee0b68c917df22a01efc897039dc2c449b6944045d4f8c1fd1
    Public key SHA-256 fd8184081a8d05d71d5455eb69c032e628ffdeda798074e8afc608a225a8a62b
    Addresses
    104.21.33.50 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.141.103 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3034::6815:2132
    2606:4700:3034::ac43:8d67
    Cloudflare
    Cloudflare (104.21.33.50, 172.67.141.103): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    sopprpipet.store
    Registered
    2026-11-08 · NameCheap, Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 19:05 UTC

    Suggest a correction

  92. truly7-distinctio56.cfd
    ListedListed by CERT PolskaMX absentSPF missingDMARC missingRegistered today
    DetailsHide
    Hostname
    truly7-distinctio56.cfd
    First seen
    2026-11-08 18:36 UTC
    Listing
    CERT Polska listed it 2026-11-08 · still listed at the last successful feed check 2026-11-08 18:34 UTC
    Listed
    CERT Polska
    1. Certificate logged in CT
    2. Listed by CERT Polska
    3. We matched the new listing
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-08 11:09 UTC to 2027-02-06 12:05 UTC
    Logged 2026-11-08 12:09 UTC in IPng Networks Halloumi2027h1, entry 411,290,152
    SHA-256 602c84b9fe9f0c4945957b1ad67c6e60eb9ce305125194de1bc76eaf0cfee2a3
    Public key SHA-256 ca7cd24ebf7dd26e48ed9f9a86f9a942c86cf641fbbc7216b3d80141e4a9b382
    Domain
    truly7-distinctio56.cfd
    Registered
    2026-11-08 · Dynadot Inc
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 19:05 UTC

    Suggest a correction

  93. truly9-saepe55.cfd
    ListedListed by CERT PolskaMX absentSPF missingDMARC missingRegistered today
    DetailsHide
    Hostname
    truly9-saepe55.cfd
    First seen
    2026-11-08 18:36 UTC
    Listing
    CERT Polska listed it 2026-11-08 · still listed at the last successful feed check 2026-11-08 18:34 UTC
    Listed
    CERT Polska
    1. Certificate logged in CT
    2. Listed by CERT Polska
    3. We matched the new listing
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-11-08 10:12 UTC to 2027-02-06 10:12 UTC
    Logged 2026-11-08 11:10 UTC in Google PlumbersArms2027h1, entry 676,815,348
    SHA-256 79c71b6a4faabee074cbc5baddcf7769768ada4a251d82aa30efda03116e966e
    Public key SHA-256 84d7ed99b0e10246cc65f3e07fa46929a61bd2d5d9f5862e35a6dd4531136b15
    Domain
    truly9-saepe55.cfd
    Registered
    2026-11-08 · Dynadot Inc
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 19:05 UTC

    Suggest a correction

  94. tuvtavtuvtav.com US · AS16509 · Amazon.com, Inc.2 addresses
    ListedAmazon Web ServicesListed by USOMMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    tuvtavtuvtav.com
    First seen
    2026-11-08 18:36 UTC
    Listing
    USOM listed it 2026-09-28 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 17:36 UTC
    Listed
    USOM
    1. Listed by USOM
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by GoDaddy TLS Intermediate CA DV - R1v1 · precertificate
    Valid 2026-11-08 18:35 UTC to 2027-05-25 18:35 UTC
    Logged 2026-11-08 18:35 UTC in GoDaddy Aquamarine2027h1, entry 197,000,633
    SHA-256 2ce00208af9874d63e16e5cfeddcdfc1ee8e7aa9d0fcc28da37c96b8b0401acf
    Public key SHA-256 63564deaac6a3467a9ccb3fb06ec6f50e12147de540cc89d038a8ca414da5a9a
    Addresses
    13.248.213.45 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
    76.223.67.189 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
    Amazon Web Services
    Amazon Web Services (13.248.213.45, 76.223.67.189): a cloud provider. It rents servers and addresses to its customers.
    Domain
    tuvtavtuvtav.com
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 18:38 UTC

    Suggest a correction

  95. www.bet365korea.org US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareUnder bet365korea.org, reported by PhishDestroyMX absentSPF missingDMARC missingRegistered 2 y ago
    DetailsHide
    Hostname
    www.bet365korea.org
    First seen
    2026-11-08 18:36 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-08 17:58 UTC
    Reported
    PhishDestroy, listing bet365korea.org and the names under it
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR2
    Valid 2026-11-08 17:36 UTC to 2027-02-06 17:36 UTC
    Logged 2026-11-08 18:35 UTC in Google ParcelYard2027h1, entry 682,628,287
    SHA-256 a73fe682702289a2e1aa4e2e2ab95e17d574bb7cee879b47dce1a682478c4e3b
    Public key SHA-256 0c5bd3beccddb35a97a91a485202c75c84ec66edf61e09049e9b6e8ac806d7e8
    PhishDestroy
    Addresses
    104.16.150.108 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    104.16.151.108 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.16.150.108, 104.16.151.108): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    bet365korea.org
    Registered
    2024-08-20 · NameCheap, Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 19:05 UTC

    Suggest a correction

  96. www.polskiemeble.shop US · AS13335 · Cloudflare, Inc.
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    www.polskiemeble.shop
    First seen
    2026-11-08 18:36 UTC
    Listing
    CERT Polska listed it 2026-11-08 · still listed at the last successful feed check 2026-11-08 18:34 UTC
    Listed
    CERT Polska
    1. Certificate logged in CT
    2. Listed by CERT Polska
    3. We matched the new listing
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-07 08:01 UTC to 2027-02-05 09:01 UTC
    Logged 2026-11-07 09:01 UTC in Let's Encrypt Willow2027h1, entry 983,232,157
    SHA-256 b2b501b1b08a240d35f100abc4cac64da9a9e1894d8ebe354866de0ceac27cb8
    Public key SHA-256 fa2aa41f776a482772dda03ebfc9c6a3c70f60fb5fc39f9772a750c7a4f2ce42
    Addresses
    104.18.23.122 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.18.23.122): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    polskiemeble.shop
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 18:38 UTC

    Suggest a correction

  97. www.t19299coinbase.com US · AS13335 · Cloudflare, Inc.4 addresses
    ReportedCloudflareUnder t19299coinbase.com, reported by PhishDestroyMX absentSPF missingDMARC missingRegistered 12 mo ago
    DetailsHide
    Hostname
    www.t19299coinbase.com
    First seen
    2026-11-08 18:36 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-08 17:58 UTC
    Reported
    PhishDestroy, listing t19299coinbase.com and the names under it
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-08 17:35 UTC to 2027-02-06 17:35 UTC
    Logged 2026-11-08 18:33 UTC in Google PlumbersArms2027h1, entry 682,916,246
    SHA-256 0dd84a80fcbc54a0b2772ecd1e8f95a35d84e154d26a7cd0634d1f82a83a7e18
    Public key SHA-256 04bf6a2c845092402d605c7edf5483494d7e68379da63b265e42a9cbd46759ba
    PhishDestroy
    Addresses
    104.21.74.171 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.160.83 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3030::6815:4aab
    2606:4700:3032::ac43:a053
    Cloudflare
    Cloudflare (104.21.74.171, 172.67.160.83): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    t19299coinbase.com
    Registered
    2025-11-16 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 07:13 UTC

    Suggest a correction

  98. www4.cloudflaer.com RU · AS57724 · DDOS-GUARD DDOS-GUARD LTD
    ListedDDoS-GuardUnder cloudflaer.com, listed by MetaMaskMX absentSPF missingDMARC missingRegistered 6 y ago
    DetailsHide
    Hostname
    www4.cloudflaer.com
    First seen
    2026-11-08 18:36 UTC
    Listing
    MetaMask: first observed in the feed 2026-11-01 · still listed at the last successful feed check 2026-11-08 17:59 UTC
    PhishDestroy: first observed in the feed 2026-11-08 · still listed at the last successful feed check 2026-11-08 17:58 UTC
    Listed
    MetaMask, listing cloudflaer.com and the names under it
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR2 · precertificate
    Valid 2026-11-08 17:34 UTC to 2027-02-06 17:34 UTC
    Logged 2026-11-08 18:33 UTC in Let's Encrypt Willow2027h1, entry 1,012,752,168
    SHA-256 12955d77fae8cc4ef07cffde4d90bb5145f81bf5d0d8e35f663e59c3f9049900
    Public key SHA-256 846d614e8de84af12dc94589e776aa1e662f179b6213f500082fd2a0eca72c88
    Addresses
    45.10.243.43 · Russia · AS57724 DDOS-GUARD DDOS-GUARD LTD · DDoS-Guard (cdn)
    DDoS-Guard
    DDoS-Guard (45.10.243.43): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    cloudflaer.com
    Registered
    2020-10-20 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 08:41 UTC

    Suggest a correction

  99. xxjqntxhhcszxizakzhfmmkuiknbn.cryptopayment.xyz US · AS14061 · DigitalOcean, LLC
    ListedDigitalOceanUnder cryptopayment.xyz, listed by MetaMaskMX absentSPF missingDMARC missingRegistered 6 y ago
    DetailsHide
    Hostname
    xxjqntxhhcszxizakzhfmmkuiknbn.cryptopayment.xyz
    First seen
    2026-11-08 18:36 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 17:59 UTC
    Listed
    MetaMask, listing cryptopayment.xyz and the names under it
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-08 17:34 UTC to 2027-02-06 17:34 UTC
    Logged 2026-11-08 18:33 UTC in Google ParcelYard2027h1, entry 682,607,654
    SHA-256 6c6623a26a94dd5ee41b968f80da4917218f05df102cb74bd97ab133eb0a1c6e
    Public key SHA-256 4226a99fe2b52b2e198c0e0ccf947f77bfaeaa0cbe2a196330cc3be31edfb758
    Addresses
    143.244.211.82 · United States · AS14061 DIGITALOCEAN-ASN - DigitalOcean, LLC · DigitalOcean (cloud provider)
    DigitalOcean
    DigitalOcean (143.244.211.82): a cloud provider. It rents servers and addresses to its customers.
    Domain
    cryptopayment.xyz
    Registered
    2020-11-20 · Interstellar Registrar Limited
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 17:18 UTC

    Suggest a correction

  100. bofae.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    bofae.com
    First seen
    2026-11-08 18:31 UTC
    Listing
    CERT Polska listed it 2026-05-17 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-08 18:34 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-08 17:29 UTC to 2027-02-06 17:29 UTC
    Logged 2026-11-08 18:27 UTC in Google ParcelYard2027h1, entry 682,531,507
    SHA-256 9a133476b2237be8ba37c4c4fd7bf6e5e7e0866a389dbd479699476ed186f91b
    Public key SHA-256 5bc387eb853882fcaad3b545ca3f5a8873e821f1b0f323fd56787ce2ba1c326c
    Addresses
    104.21.44.225 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.204.37 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.44.225, 172.67.204.37): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    bofae.com
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-08 18:32 UTC

    Suggest a correction

Showing 1–100 of 4,882 hostnames.
How these findings are made

Brand spoofs: findings that impersonate one of the 1,000 most-impersonated brands. The list opens on them; All shows every finding.

Reported: a hostname in a new certificate that PhishTank or PhishDestroy reports, or that CERT Polska, MetaMask, USOM, MODA, NPA 165, JPCERT/CC, the AMF, the FSMA or BaFin lists. When a listing source names the brand imitated or a category, the finding shows it. Phishing host: a brand lookalike that resolves to an address which hosted confirmed phishing in the last 48 hours. Spamhaus DROP: a brand lookalike that resolves to an address on the Spamhaus DROP list. Same certificate: another name on a finding's certificate that resolves to an address on Spamhaus DROP. Suspicious: other names on a finding's certificate, rated high for a hosting-alias name or a lookalike on a phishing host, medium for a lookalike; they join the findings once they have listing evidence of their own. Also under Suspicious: registered domains using a brand’s name that PhishDestroy’s community list includes, rated high when they resolve to an address with no parking or holding signal, medium otherwise.

Brand labels cover the 1,000 most-impersonated brands. A name gets a brand when the brand's token starts a label or follows a hyphen, with a lure word such as "login" or "verify" for common words. Hostnames appear as plain text. How it works · Sources