Live
Live phishing findings
New certificates and domain registrations, with every hostname resolved and checked against phishing reports and bad-address lists. The newest findings, updated hourly.
2,576 hostnames from the last 24 hours.
The findings have updated. The list starts again from the top.
- baykaryatirimprogrami.com US · AS13335 · Cloudflare, Inc.2 addressesListedCloudflareListed by USOMMX absentSPF missingDMARC missingRegistered 59 d ago
DetailsHide details for baykaryatirimprogrami.com
- Hostname
- baykaryatirimprogrami.com
- First seen
- 2026-11-09 13:00 UTC
- Listing
- USOM listed it 2026-09-11 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-09 11:41 UTC
- Listed
- USOM
- Listed by USOM
- Certificate logged in CT
- We matched its certificate name
- Latest DNS check
- Certificate
- Issued by YE1Valid 2026-11-09 11:57 UTC to 2027-02-07 11:57 UTCLogged 2026-11-09 12:56 UTC in Google ParcelYard2027h1, entry 698,054,859SHA-256 5d5b4415114101ca63508ee562a30b252489bbe62f60d9903c15c7c7bfcefd62Public key SHA-256 fb0176b90ef2958b96510c8f3ec6cb5ba63c3713b19c56f4a4e78a49f2056077
- Addresses
- 104.21.83.94 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.220.242 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
- Cloudflare
- Cloudflare (104.21.83.94, 172.67.220.242): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Domain
- baykaryatirimprogrami.com
- Registered
- 2026-09-11 · Dynadot Inc
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-09 13:11 UTC
- erasly.shop US · AS13335 · Cloudflare, Inc.2 addressesListedCloudflareListed by NPA 165 (information services)MX absentSPF missingDMARC missing
DetailsHide details for erasly.shop
- Hostname
- erasly.shop
- First seen
- 2026-11-09 13:00 UTC
- Listing
- NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-09 01:35 UTC
- Listed
- NPA 165
- Observed in the NPA 165 feed
- Certificate logged in CT
- We matched its certificate name
- Latest DNS check
- Certificate
- Issued by WE1 · precertificateValid 2026-11-09 11:59 UTC to 2027-02-07 12:58 UTCLogged 2026-11-09 12:59 UTC in Let's Encrypt Sycamore2027h1, entry 1,085,004,802SHA-256 cc0444165ac38e103bf3847847958ffa5f3783fb7b765e8a59ab409351423e42Public key SHA-256 1566d99d27741aa9bba58d81d517e9b82f494a7e35b9b154cf0f04fc29402a8e
- Addresses
- 104.21.31.111 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.176.61 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
- Cloudflare
- Cloudflare (104.21.31.111, 172.67.176.61): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Domain
- erasly.shop
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-09 13:11 UTC
- help.pricer24.com US · AS13335 · Cloudflare, Inc.ReportedCloudflareUnder pricer24.com, reported by PhishDestroyMX presentSPF ~allDMARC policy noneRegistered 8 y ago
DetailsHide details for help.pricer24.com
- Hostname
- help.pricer24.com
- First seen
- 2026-11-09 13:00 UTC
- Listing
- PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-09 11:59 UTC
- Reported
- PhishDestroy, listing pricer24.com and the names under it
- Observed in the PhishDestroy feed
- Certificate logged in CT
- We matched its certificate name
- Latest DNS check
- Certificate
- Issued by YR1 · precertificateValid 2026-11-09 11:58 UTC to 2027-02-07 11:58 UTCLogged 2026-11-09 12:56 UTC in Let's Encrypt Sycamore2027h1, entry 1,084,927,780SHA-256 21fe3bdabf5e6452ae67def6b2fe409209e44b8908bd73dd13673774a8cfcc8aPublic key SHA-256 269ff20e149f7c71f4727ad70bc9f376aa574719093bb3652d3b14b339a28115
- PhishDestroy
- Addresses
- 172.65.251.114 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
- Cloudflare
- Cloudflare (172.65.251.114): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Domain
- pricer24.com
- Registered
- 2018-11-06 · Internet Invest, Ltd. dba Imena.ua
- MX
- Receives mail at aspmx.l.google.com, alt1.aspmx.l.google.com, alt2.aspmx.l.google.com
- SPF
- SPF record with ~all: other senders soft-fail
- DMARC
- DMARC policy p=none: reports only
- Checked
- 2026-11-09 13:09 UTC
- ldhsj.com US · AS13335 · Cloudflare, Inc.2 addressesListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 6 mo ago
DetailsHide details for ldhsj.com
- Hostname
- ldhsj.com
- First seen
- 2026-11-09 13:00 UTC
- Listing
- CERT Polska listed it 2026-05-18 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-09 12:37 UTC
- Listed
- CERT Polska
- Listed by CERT Polska
- Certificate logged in CT
- We matched its certificate name
- Latest DNS check
- Certificate
- Issued by YE1 · precertificateValid 2026-11-09 12:00 UTC to 2027-02-07 12:00 UTCLogged 2026-11-09 12:58 UTC in Let's Encrypt Willow2027h1, entry 1,040,602,088SHA-256 904450e9ca804fb9e6eb5da4ce94b7504562141ea74024be512112e7344bb5c7Public key SHA-256 1ec078c9a284a7f5dd1e8af26b2f89a50d3c2163124a4065d205c603dd2a35e1
- Addresses
- 104.21.5.25 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.132.197 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
- Cloudflare
- Cloudflare (104.21.5.25, 172.67.132.197): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Domain
- ldhsj.com
- Registered
- 2026-05-16 · Cloud Yuqu LLC
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-09 13:11 UTC
- pqlfg.com US · AS13335 · Cloudflare, Inc.2 addressesListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 6 mo ago
DetailsHide details for pqlfg.com
- Hostname
- pqlfg.com
- First seen
- 2026-11-09 13:00 UTC
- Listing
- CERT Polska listed it 2026-05-18 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-09 12:37 UTC
- Listed
- CERT Polska
- Listed by CERT Polska
- Certificate logged in CT
- We matched its certificate name
- Latest DNS check
- Certificate
- Issued by YE2 · precertificateValid 2026-11-09 11:58 UTC to 2027-02-07 11:58 UTCLogged 2026-11-09 12:57 UTC in DigiCert Wyvern2027h1, entry 468,451,090SHA-256 61b0fc6b7d8f440a745cc16dcba7bb3af5e5db7e650e24ec4d0203caab7aa89fPublic key SHA-256 fc0eb14acb274d57b0d663e3106321e162885c841d9383ee8f2ecdb14735c700
- Addresses
- 104.21.60.22 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.187.187 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
- Cloudflare
- Cloudflare (104.21.60.22, 172.67.187.187): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Domain
- pqlfg.com
- Registered
- 2026-05-16 · Cloud Yuqu LLC
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-09 13:11 UTC
- suenoam.shop US · AS13335 · Cloudflare, Inc.2 addressesListedCloudflareListed by NPA 165 (e-commerce)MX absentSPF missingDMARC missing
DetailsHide details for suenoam.shop
- Hostname
- suenoam.shop
- First seen
- 2026-11-09 13:00 UTC
- Listing
- NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-09 01:35 UTC
- Listed
- NPA 165
- Observed in the NPA 165 feed
- Certificate logged in CT
- We matched its certificate name
- Latest DNS check
- Certificate
- Issued by WE1 · precertificateValid 2026-11-09 11:57 UTC to 2027-02-07 12:54 UTCLogged 2026-11-09 12:57 UTC in Google ParcelYard2027h1, entry 698,067,962SHA-256 4c4005de55ff03b79025d44a7d406d7ea5f78aec9b20884a8d4170497131e31fPublic key SHA-256 171fc2ff5a40507349155099f70e288fd00c0a6d9397945d5442f6da9f610e25
- Addresses
- 104.21.43.232 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.186.226 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
- Cloudflare
- Cloudflare (104.21.43.232, 172.67.186.226): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Domain
- suenoam.shop
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-09 13:11 UTC
- ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 15 mo ago
DetailsHide details for trx-tronlink.com
- Hostname
- trx-tronlink.com
- First seen
- 2026-11-09 13:00 UTC
- Listing
- MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-09 12:00 UTCPhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-09 11:59 UTC
- Listed
- MetaMask
- Observed in the MetaMask feed
- Certificate logged in CT
- We matched its certificate name
- Latest DNS check
- Certificate
- Issued by WE1 · precertificateValid 2026-11-09 11:56 UTC to 2027-02-07 12:55 UTCLogged 2026-11-09 12:56 UTC in DigiCert Wyvern2027h1, entry 468,445,828SHA-256 5e7f7a324dea1506ee6dbe2c8300fb1d59e0c1323801e8abfbd630c4f7f324d1Public key SHA-256 818084af23e51e5b26c3a85d8435af32b4bf4d30e1d6edb36b71537a693b4055
- Brand
- TronLink
- Addresses
- 104.21.0.175 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.128.39 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3034::6815:af2606:4700:3035::ac43:8027
- Cloudflare
- Cloudflare (104.21.0.175, 172.67.128.39): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Domain
- trx-tronlink.com
- Registered
- 2025-08-15 · Chengdu West Dimension Digital Technology Co., Ltd.
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-09 13:09 UTC
- winnersai.healingark.app US · AS13335 · Cloudflare, Inc.ListedCloudflareUnder healingark.app, listed by MetaMaskMX presentSPF ~allDMARC policy noneRegistered 16 mo ago
DetailsHide details for winnersai.healingark.app
- Hostname
- winnersai.healingark.app
- First seen
- 2026-11-09 13:00 UTC
- Listing
- MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-09 12:00 UTC
- Listed
- MetaMask, listing healingark.app and the names under it
- Observed in the MetaMask feed
- Certificate logged in CT
- We matched its certificate name
- Latest DNS check
- Certificate
- Issued by WE1 · precertificateValid 2026-11-09 11:56 UTC to 2027-02-07 12:56 UTCLogged 2026-11-09 12:56 UTC in Google PlumbersArms2027h1, entry 698,337,521SHA-256 25b85469e4f987fdc47f7eb9dea3830fe568ec9e5b9f5436ac4f7a947998364ePublic key SHA-256 be023e429cc20bee2fffc99afa0cbc91473d693e3d7237ef0c1a3cae8a44b6fd
- Addresses
- 66.71.220.1 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
- Cloudflare
- Cloudflare (66.71.220.1): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Domain
- healingark.app
- Registered
- 2025-07-17 · 1&1 Internet SE
- MX
- Receives mail at mx00.ionos.com, mx01.ionos.com
- SPF
- SPF record with ~all: other senders soft-fail
- DMARC
- DMARC policy p=none: reports only
- Checked
- 2026-11-09 00:47 UTC
- zhjqx.com US · AS13335 · Cloudflare, Inc.2 addressesListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 6 mo ago
DetailsHide details for zhjqx.com
- Hostname
- zhjqx.com
- First seen
- 2026-11-09 13:00 UTC
- Listing
- CERT Polska listed it 2026-05-18 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-09 12:37 UTC
- Listed
- CERT Polska
- Listed by CERT Polska
- Certificate logged in CT
- We matched its certificate name
- Latest DNS check
- Certificate
- Issued by YE2 · precertificateValid 2026-11-09 12:00 UTC to 2027-02-07 12:00 UTCLogged 2026-11-09 12:59 UTC in Geomys Tuscolo2027h1, entry 544,568,136SHA-256 9658937b82cb0d6939caa45b024ad536e0d8ae64c93156a0811ca9e4c14ad14aPublic key SHA-256 ce8b0196a5b56b4974396f0f8d024867c4179549cafe499ebe926d1c7ade82ce
- Addresses
- 104.21.76.133 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.195.187 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
- Cloudflare
- Cloudflare (104.21.76.133, 172.67.195.187): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Domain
- zhjqx.com
- Registered
- 2026-05-16 · Cloud Yuqu LLC
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-09 13:11 UTC
- bullheadcantina.com US · AS13335 · Cloudflare, Inc.2 addressesReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 13 mo ago
DetailsHide details for bullheadcantina.com
- Hostname
- bullheadcantina.com
- First seen
- 2026-11-09 12:56 UTC
- Listing
- PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-09 11:59 UTC
- Reported
- PhishDestroy
- Observed in the PhishDestroy feed
- Certificate logged in CT
- We matched its certificate name
- Latest DNS check
- Certificate
- Issued by WE1 · precertificateValid 2026-11-09 11:51 UTC to 2027-02-07 12:50 UTCLogged 2026-11-09 12:51 UTC in Google PlumbersArms2027h1, entry 698,257,932SHA-256 0780c36dff53864012229d8ce4d07176e61aa86e919b43bc6244fd585b50b6faPublic key SHA-256 d44dc6a87af1ee3fdc35fb2b87c33cceb834939c9ffea5418c89bb7fd1c1dd1f
- PhishDestroy
- Addresses
- 104.21.13.247 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.133.140 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
- Cloudflare
- Cloudflare (104.21.13.247, 172.67.133.140): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Domain
- bullheadcantina.com
- Registered
- 2025-10-20 · Gname.com Pte. Ltd.
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-09 13:10 UTC
- ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 59 d ago
DetailsHide details for ch-twint-ch.click
- Hostname
- ch-twint-ch.click
- First seen
- 2026-11-09 12:56 UTC
- Listing
- MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-09 12:00 UTC
- Listed
- MetaMask
- Observed in the MetaMask feed
- Certificate logged in CT
- We matched its certificate name
- Latest DNS check
- Certificate
- Issued by YE1 · precertificateValid 2026-11-09 11:53 UTC to 2027-02-07 11:53 UTCLogged 2026-11-09 12:52 UTC in Let's Encrypt Sycamore2027h1, entry 1,084,810,154SHA-256 2a5255a78295a03fc9191e3b38c9eceda8221cc5185e1981c2e25edda32f605fPublic key SHA-256 ff0f2a46f60d700e496b04be6c1e271feb82a128926591e4d64d128de769684b
- Brand
- TWINT
- Addresses
- 104.21.57.113 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.163.110 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3033::6815:39712606:4700:3035::ac43:a36e
- Cloudflare
- Cloudflare (104.21.57.113, 172.67.163.110): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Domain
- ch-twint-ch.click
- Registered
- 2026-09-11 · Gname.com Pte. Ltd.
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-09 13:00 UTC
- ethgpu.life US · AS13335 · Cloudflare, Inc.2 addressesListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 6 mo ago
DetailsHide details for ethgpu.life
- Hostname
- ethgpu.life
- First seen
- 2026-11-09 12:56 UTC
- Listing
- MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-09 12:00 UTC
- Listed
- MetaMask
- Observed in the MetaMask feed
- Certificate logged in CT
- We matched its certificate name
- Latest DNS check
- Certificate
- Issued by YE1 · precertificateValid 2026-11-09 11:56 UTC to 2027-02-07 11:56 UTCLogged 2026-11-09 12:55 UTC in Geomys Tuscolo2027h1, entry 544,523,113SHA-256 551a176c701d46d6409eb00690b6dcfd2a7b647f2a02b12efa460ae9bf1b35b3Public key SHA-256 4a6a9b53fc28513df8b5a9436befed1ca57455941d3bac7741c7ed8a3f617530
- Addresses
- 104.21.45.134 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.214.166 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
- Cloudflare
- Cloudflare (104.21.45.134, 172.67.214.166): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Domain
- ethgpu.life
- Registered
- 2026-05-16 · NICENIC INTERNATIONAL GROUP CO., LIMITED
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-09 13:10 UTC
- executordelta.ph US · AS13335 · Cloudflare, Inc.2 addressesReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missing
DetailsHide details for executordelta.ph
- Hostname
- executordelta.ph
- First seen
- 2026-11-09 12:56 UTC
- Listing
- PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-09 11:59 UTC
- Reported
- PhishDestroy
- Observed in the PhishDestroy feed
- Certificate logged in CT
- We matched its certificate name
- Latest DNS check
- Certificate
- Issued by WE1 · precertificateValid 2026-11-09 11:52 UTC to 2027-02-07 12:51 UTCLogged 2026-11-09 12:52 UTC in Google ParcelYard2027h1, entry 697,995,212SHA-256 2af4e594bb6758d564117c09c59513a9c87f38fd9417043ee3ea3792a412e4cfPublic key SHA-256 b7c1cce4bb9ce36cb2c8a8e29101e37d417e0ccd5147372aa0c26d5d2ed209f4
- PhishDestroy
- Addresses
- 104.21.85.120 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.205.152 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
- Cloudflare
- Cloudflare (104.21.85.120, 172.67.205.152): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Domain
- executordelta.ph
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-09 13:00 UTC
- jbcmigrates.live US · AS13335 · Cloudflare, Inc.2 addressesReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 10 mo ago
DetailsHide details for jbcmigrates.live
- Hostname
- jbcmigrates.live
- First seen
- 2026-11-09 12:56 UTC
- Listing
- PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-09 11:59 UTC
- Reported
- PhishDestroy
- Observed in the PhishDestroy feed
- Certificate logged in CT
- We matched its certificate name
- Latest DNS check
- Certificate
- Issued by WE1 · precertificateValid 2026-11-09 11:53 UTC to 2027-02-07 12:50 UTCLogged 2026-11-09 12:53 UTC in IPng Networks Gouda2027h1, entry 363,920,330SHA-256 2bb7567925f4ed370f38a5f77307cd8a7c127917acabd0977610925d43002e8bPublic key SHA-256 15fe0997a36b6f48d7a160d13e02339a5511a7e0fcfe0644d0b13d4001e42edf
- PhishDestroy
- Addresses
- 104.21.50.45 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.200.191 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
- Cloudflare
- Cloudflare (104.21.50.45, 172.67.200.191): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Domain
- jbcmigrates.live
- Registered
- 2026-01-18 · NICENIC INTERNATIONAL GROUP CO., LIMITED
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-09 13:00 UTC
- play.morilive.casino US · AS13335 · Cloudflare, Inc.2 addressesReportedCloudflareUnder morilive.casino, reported by PhishDestroyMX absentSPF missingDMARC missingRegistered 16 mo ago
DetailsHide details for play.morilive.casino
- Hostname
- play.morilive.casino
- First seen
- 2026-11-09 12:56 UTC
- Listing
- PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-09 11:59 UTC
- Reported
- PhishDestroy, listing morilive.casino and the names under it
- Observed in the PhishDestroy feed
- Certificate logged in CT
- We matched its certificate name
- Latest DNS check
- Certificate
- Issued by YR2 · precertificateValid 2026-11-09 11:55 UTC to 2027-02-07 11:55 UTCLogged 2026-11-09 12:54 UTC in IPng Networks Halloumi2027h1, entry 426,529,579SHA-256 28efad3eb65429bf8079973efbda37b98d4bb023eadf5de0b44b5292dfe3a75cPublic key SHA-256 6556154d52a8f482c6351bb26207aa8b51dcf5a56df49d70886eea2cb9e15694
- PhishDestroy
- Addresses
- 104.21.60.38 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.191.112 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
- Cloudflare
- Cloudflare (104.21.60.38, 172.67.191.112): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Domain
- morilive.casino
- Registered
- 2025-07-17 · NameCheap, Inc.
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-09 05:43 UTC
- rainbet-casino.com US · AS13335 · Cloudflare, Inc.2 addressesListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 6 mo ago
DetailsHide details for rainbet-casino.com
- Hostname
- rainbet-casino.com
- First seen
- 2026-11-09 12:56 UTC
- Listing
- MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-09 12:00 UTC
- Listed
- MetaMask
- Observed in the MetaMask feed
- Certificate logged in CT
- We matched its certificate name
- Latest DNS check
- Certificate
- Issued by YE1Valid 2026-11-09 11:56 UTC to 2027-02-07 11:56 UTCLogged 2026-11-09 12:55 UTC in Google PlumbersArms2027h1, entry 698,317,368SHA-256 b3b0c10eab2c6e9cb360f53d2d6e1629fb784e2efbb8b4f96a3fa76f76e7a930Public key SHA-256 7c7103cc430429e083ad430763050fdb19ab4d0fddd6c8f3f989ef07da7f139e
- Addresses
- 104.21.26.105 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.135.222 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
- Cloudflare
- Cloudflare (104.21.26.105, 172.67.135.222): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Domain
- rainbet-casino.com
- Registered
- 2026-05-16 · MAT BAO CORPORATION
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-09 13:10 UTC
- rainbet-it1-com-136321.pages.dev US · AS13335 · Cloudflare, Inc.2 addressesListedCloudflareListed by MetaMask
DetailsHide details for rainbet-it1-com-136321.pages.dev
- Hostname
- rainbet-it1-com-136321.pages.dev
- First seen
- 2026-11-09 12:56 UTC
- Listing
- MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-09 12:00 UTC
- Listed
- MetaMask
- Observed in the MetaMask feed
- Certificate logged in CT
- We matched its certificate name
- Latest DNS check
- Certificate
- Issued by YE1 · precertificateValid 2026-11-09 11:56 UTC to 2027-02-07 11:56 UTCLogged 2026-11-09 12:55 UTC in Let's Encrypt Willow2027h1, entry 1,040,519,814SHA-256 67b4f449cfa724adf8ee4af25c52086e60e06ddc2ee78508348ce3589701ed43Public key SHA-256 2812986ce7f9da4e0df63a4bd841ca9edce829b7714f051ebe2fe7d5c26390e6
- Addresses
- 172.66.44.164 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.66.47.92 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
- Cloudflare
- Cloudflare (172.66.44.164, 172.66.47.92): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- slrelink.com US · AS13335 · Cloudflare, Inc.2 addressesListedCloudflareListed by NPA 165 (information services)MX absentSPF missingDMARC missingRegistered 6 mo ago
DetailsHide details for slrelink.com
- Hostname
- slrelink.com
- First seen
- 2026-11-09 12:56 UTC
- Listing
- NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-09 01:35 UTC
- Listed
- NPA 165
- Observed in the NPA 165 feed
- Certificate logged in CT
- We matched its certificate name
- Latest DNS check
- Certificate
- Issued by YE2Valid 2026-11-09 11:53 UTC to 2027-02-07 11:53 UTCLogged 2026-11-09 12:52 UTC in Google PlumbersArms2027h1, entry 698,269,163SHA-256 a6485efa546e7e8d9b632461be88517b1ef59bf917e6c7c2e1b07adc0a707165Public key SHA-256 8e994869ef5c72bdd72626e8e2af9fba5daad23429dc282d5992ff0214eaa420
- Addresses
- 104.21.50.200 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.166.143 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
- Cloudflare
- Cloudflare (104.21.50.200, 172.67.166.143): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Domain
- slrelink.com
- Registered
- 2026-05-16 · GoDaddy.com, LLC
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-09 13:10 UTC
- vueoven.xyz US · AS13335 · Cloudflare, Inc.2 addressesListedCloudflareListed by NPA 165 (e-commerce)MX absentSPF missingDMARC missingRegistered 4 mo ago
DetailsHide details for vueoven.xyz
- Hostname
- vueoven.xyz
- First seen
- 2026-11-09 12:56 UTC
- Listing
- NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-09 01:35 UTC
- Listed
- NPA 165
- Observed in the NPA 165 feed
- Certificate logged in CT
- We matched its certificate name
- Latest DNS check
- Certificate
- Issued by WE1 · precertificateValid 2026-11-09 11:52 UTC to 2027-02-07 12:50 UTCLogged 2026-11-09 12:52 UTC in Google PlumbersArms2027h1, entry 698,274,262SHA-256 8d28863f3ddaa0af14a00623a7e7b5ca0312aab92003f370f1161303318a67e6Public key SHA-256 a6b52abd7950113c15f381c70ecbf72eac6fad477783344746f487a197528b07
- Addresses
- 104.21.62.68 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.221.14 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
- Cloudflare
- Cloudflare (104.21.62.68, 172.67.221.14): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Domain
- vueoven.xyz
- Registered
- 2026-07-14 · GoDaddy.com, LLC
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-09 13:10 UTC
- ahxrk.asia US · AS13335 · Cloudflare, Inc.2 addressesListedCloudflareListed by NPA 165 (information services)MX absentSPF missingDMARC missingRegistered 4 mo ago
DetailsHide details for ahxrk.asia
- Hostname
- ahxrk.asia
- First seen
- 2026-11-09 12:51 UTC
- Listing
- NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-09 01:35 UTC
- Listed
- NPA 165
- Observed in the NPA 165 feed
- Certificate logged in CT
- We matched its certificate name
- Latest DNS check
- Certificate
- Issued by WE1 · precertificateValid 2026-11-09 11:49 UTC to 2027-02-07 12:46 UTCLogged 2026-11-09 12:49 UTC in Let's Encrypt Sycamore2027h1, entry 1,084,734,866SHA-256 553ceb1061fb3838a574444159649ca1b651ea705072d7b0480ad371ec21517dPublic key SHA-256 1d836dfbb49616d8107d86ff8623e38307f99725ede7db34a91a28a98a18e7cc
- Addresses
- 104.21.23.19 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.208.106 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
- Cloudflare
- Cloudflare (104.21.23.19, 172.67.208.106): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Domain
- ahxrk.asia
- Registered
- 2026-07-14 · Alibaba Cloud Computing Ltd. d/b/a HiChina (www.net.cn)
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-09 13:10 UTC
- fuiwejf.monster US · AS13335 · Cloudflare, Inc.2 addressesListedCloudflareListed by NPA 165 (information services)MX absentSPF missingDMARC missingRegistered 59 d ago
DetailsHide details for fuiwejf.monster
- Hostname
- fuiwejf.monster
- First seen
- 2026-11-09 12:51 UTC
- Listing
- NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-09 01:35 UTC
- Listed
- NPA 165
- Observed in the NPA 165 feed
- Certificate logged in CT
- We matched its certificate name
- Latest DNS check
- Certificate
- Issued by YE1 · precertificateValid 2026-11-09 11:50 UTC to 2027-02-07 11:50 UTCLogged 2026-11-09 12:49 UTC in DigiCert Wyvern2027h1, entry 468,344,988SHA-256 01e73138a322c6b24d284228eb114e01d31342c44c4df4ff4ead9816db500889Public key SHA-256 488972cf37316bf366615ff32b0e1e448212cf1d29e5b744cb815e6f280ddcd3
- Addresses
- 104.21.29.171 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.149.139 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
- Cloudflare
- Cloudflare (104.21.29.171, 172.67.149.139): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Domain
- fuiwejf.monster
- Registered
- 2026-09-11 · GoDaddy.com, LLC
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-09 13:10 UTC
- kvelmoryq-france.com US · AS13335 · Cloudflare, Inc.2 addressesListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 4 mo ago
DetailsHide details for kvelmoryq-france.com
- Hostname
- kvelmoryq-france.com
- First seen
- 2026-11-09 12:51 UTC
- Listing
- CERT Polska listed it 2026-09-11 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-09 12:37 UTC
- Listed
- CERT Polska
- Listed by CERT Polska
- Certificate logged in CT
- We matched its certificate name
- Latest DNS check
- Certificate
- Issued by WE1Valid 2026-11-09 11:48 UTC to 2027-02-07 12:46 UTCLogged 2026-11-09 12:50 UTC in DigiCert Wyvern2027h1, entry 468,353,244SHA-256 eb7e9309b7b98ad13c97613be3e3db35ff256a54171750066003cf1210485331Public key SHA-256 65b407c1ea9aede5f08e1e67be936ad2bb45e64f54c5c3caa30c7f6dc136ebdb
- Addresses
- 104.21.23.36 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.208.202 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
- Cloudflare
- Cloudflare (104.21.23.36, 172.67.208.202): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Domain
- kvelmoryq-france.com
- Registered
- 2026-07-14 · Dynadot Inc
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-09 13:10 UTC
- qqipc.asia US · AS13335 · Cloudflare, Inc.2 addressesListedCloudflareListed by NPA 165 (information services)MX absentSPF missingDMARC missingRegistered 4 mo ago
DetailsHide details for qqipc.asia
- Hostname
- qqipc.asia
- First seen
- 2026-11-09 12:51 UTC
- Listing
- NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-09 01:35 UTC
- Listed
- NPA 165
- Observed in the NPA 165 feed
- Certificate logged in CT
- We matched its certificate name
- Latest DNS check
- Certificate
- Issued by WE1 · precertificateValid 2026-11-09 11:46 UTC to 2027-02-07 12:45 UTCLogged 2026-11-09 12:46 UTC in DigiCert Sphinx2027h1, entry 414,692,546SHA-256 b3c8efc2c36d712eb48cf265bf2c46b4f8611bfcaea64f5b6e04e5f36c3ab381Public key SHA-256 9a9cce91e5248f829fe11f3e156c72b7a8b2e70ac1c6e708969e9999e0322aaf
- Addresses
- 104.21.34.14 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.153.23 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
- Cloudflare
- Cloudflare (104.21.34.14, 172.67.153.23): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Domain
- qqipc.asia
- Registered
- 2026-07-14 · Alibaba Cloud Computing Ltd. d/b/a HiChina (www.net.cn)
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-09 13:10 UTC
- qubicast.site US · AS13335 · Cloudflare, Inc.2 addressesListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 4 mo ago
DetailsHide details for qubicast.site
- Hostname
- qubicast.site
- First seen
- 2026-11-09 12:51 UTC
- Listing
- CERT Polska listed it 2026-07-16 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-09 12:37 UTC
- Listed
- CERT Polska
- Listed by CERT Polska
- Certificate logged in CT
- We matched its certificate name
- Latest DNS check
- Certificate
- Issued by WE1 · precertificateValid 2026-11-09 11:49 UTC to 2027-02-07 12:48 UTCLogged 2026-11-09 12:49 UTC in DigiCert Sphinx2027h1, entry 414,722,252SHA-256 8e502f19e149355a4b43a381e13a0d84304c57a858dfe3117739415cdc023183Public key SHA-256 72a672e416cfc74b78ae33e22a9a142fb075ef313f20d7be9b01233b488bab45
- Addresses
- 104.21.79.65 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.142.143 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
- Cloudflare
- Cloudflare (104.21.79.65, 172.67.142.143): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Domain
- qubicast.site
- Registered
- 2026-07-14 · NameCheap, Inc.
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-09 13:10 UTC
- rick18.cc US · AS13335 · Cloudflare, Inc.2 addressesReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 5 y ago
DetailsHide details for rick18.cc
- Hostname
- rick18.cc
- First seen
- 2026-11-09 12:51 UTC
- Listing
- PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-09 11:59 UTC
- Reported
- PhishDestroy
- Observed in the PhishDestroy feed
- Certificate logged in CT
- We matched its certificate name
- Latest DNS check
- Certificate
- Issued by WE1 · precertificateValid 2026-11-09 11:46 UTC to 2027-02-07 12:45 UTCLogged 2026-11-09 12:46 UTC in Google PlumbersArms2027h1, entry 698,179,577SHA-256 685cd780d2a7ad4ee0c2d85170b9c94832e12bdfe3649b63107059b518a07cbdPublic key SHA-256 1b57655c1b8e92f52a169c821dfc73a33ad19d41a7175703b9a5212a5fb2517b
- PhishDestroy
- Addresses
- 104.21.18.93 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.181.137 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
- Cloudflare
- Cloudflare (104.21.18.93, 172.67.181.137): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Domain
- rick18.cc
- Registered
- 2022-03-15 · DotWee Limited
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-09 13:10 UTC
- stonk-epoch.com US · AS13335 · Cloudflare, Inc.2 addressesListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 59 d ago
DetailsHide details for stonk-epoch.com
- Hostname
- stonk-epoch.com
- First seen
- 2026-11-09 12:51 UTC
- Listing
- MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-09 12:00 UTC
- Listed
- MetaMask
- Observed in the MetaMask feed
- Certificate logged in CT
- We matched its certificate name
- Latest DNS check
- Certificate
- Issued by YE1 · precertificateValid 2026-11-09 11:48 UTC to 2027-02-07 11:48 UTCLogged 2026-11-09 12:47 UTC in Let's Encrypt Sycamore2027h1, entry 1,084,682,265SHA-256 0f9d384d8d8adc7f1ce9d03df2f2040a7c2032073b5b96d5a739700ff86bde8bPublic key SHA-256 2076c41ec29c9ef09fd7cf230023aab84d8572f2be428ec05fdec6fa8acc08b4
- Addresses
- 104.21.78.45 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.216.6 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
- Cloudflare
- Cloudflare (104.21.78.45, 172.67.216.6): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Domain
- stonk-epoch.com
- Registered
- 2026-09-11 · NameSilo, LLC
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-09 13:10 UTC
- tevehivia.help US · AS13335 · Cloudflare, Inc.2 addressesListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 6 mo ago
DetailsHide details for tevehivia.help
- Hostname
- tevehivia.help
- First seen
- 2026-11-09 12:51 UTC
- Listing
- CERT Polska listed it 2026-08-06 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-09 12:37 UTC
- Listed
- CERT Polska
- Listed by CERT Polska
- Certificate logged in CT
- We matched its certificate name
- Latest DNS check
- Certificate
- Issued by YE2 · precertificateValid 2026-11-09 11:49 UTC to 2027-02-07 11:49 UTCLogged 2026-11-09 12:47 UTC in DigiCert Sphinx2027h1, entry 414,704,080SHA-256 5f2a070e27f9a36be7bbe5f629249e86228843bca28d165b0d812f661fce6aacPublic key SHA-256 598aec422e860fe3eb4f76fc247530aad37656cd8989b8b239f7318321539a99
- Addresses
- 104.21.25.158 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.134.92 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
- Cloudflare
- Cloudflare (104.21.25.158, 172.67.134.92): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Domain
- tevehivia.help
- Registered
- 2026-05-16 · Chengdu West Dimension Digital Technology Co., Ltd.
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-09 13:10 UTC
- api.quantumtrade-ai-software-com.financecryptoworld.com US · AS13335 · Cloudflare, Inc.2 addressesListedCloudflareUnder financecryptoworld.com, listed by CERT PolskaMX presentSPF ~allDMARC missingRegistered 22 mo ago
DetailsHide details for api.quantumtrade-ai-software-com.financecryptoworld.com
- Hostname
- api.quantumtrade-ai-software-com.financecryptoworld.com
- First seen
- 2026-11-09 12:46 UTC
- Listing
- CERT Polska listed it 2026-06-12 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-09 12:37 UTC
- Listed
- CERT Polska, listing financecryptoworld.com and the names under it
- Listed by CERT Polska
- Certificate logged in CT
- We matched its certificate name
- Latest DNS check
- Certificate
- Issued by WE1Valid 2026-09-11 10:21 UTC to 2026-12-10 11:21 UTCLogged 2026-11-09 12:44 UTC in DigiCert Wyvern2026h2, entry 2,214,322,941SHA-256 8c7179cfe18b1f63caa03bce55d4581d17ac4088a097c229926a2c2e71a7e820Public key SHA-256 b5109a738c2e071ab80566937fd9814e0bde55ef3b93af00f8905a4cd933be52
- Addresses
- 104.21.10.130 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.131.121 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
- Cloudflare
- Cloudflare (104.21.10.130, 172.67.131.121): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Domain
- financecryptoworld.com
- Registered
- 2025-01-30 · MainReg Inc.
- MX
- Receives mail at mail.financecryptoworld.com
- SPF
- SPF record with ~all: other senders soft-fail
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-08 17:18 UTC
- appalxoampce.com US · AS13335 · Cloudflare, Inc.2 addressesReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 8 mo ago
DetailsHide details for appalxoampce.com
- Hostname
- appalxoampce.com
- First seen
- 2026-11-09 12:46 UTC
- Listing
- PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-09 11:59 UTC
- Reported
- PhishDestroy
- Observed in the PhishDestroy feed
- Certificate logged in CT
- We matched its certificate name
- Latest DNS check
- Certificate
- Issued by YE2Valid 2026-11-09 11:45 UTC to 2027-02-07 11:45 UTCLogged 2026-11-09 12:44 UTC in Google ParcelYard2027h1, entry 697,863,958SHA-256 ad7aaf49fda5120e820c4045caebc9475581e6ebf3942c09a94154dbfe48034fPublic key SHA-256 75dd287b012387de4fbae92237d42be6f6292bcb7f3a5003196c3e743996629d
- PhishDestroy
- Addresses
- 104.21.77.154 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.209.144 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
- Cloudflare
- Cloudflare (104.21.77.154, 172.67.209.144): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Domain
- appalxoampce.com
- Registered
- 2026-03-18 · NICENIC INTERNATIONAL GROUP CO., LIMITED
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-09 13:10 UTC
- kremen-investek.org US · AS13335 · Cloudflare, Inc.2 addressesListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 2 mo ago
DetailsHide details for kremen-investek.org
- Hostname
- kremen-investek.org
- First seen
- 2026-11-09 12:46 UTC
- Listing
- CERT Polska listed it 2026-09-10 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-09 12:37 UTC
- Listed
- CERT Polska
- Listed by CERT Polska
- Certificate logged in CT
- We matched its certificate name
- Latest DNS check
- Certificate
- Issued by YE1Valid 2026-11-09 11:45 UTC to 2027-02-07 11:45 UTCLogged 2026-11-09 12:44 UTC in Google ParcelYard2027h1, entry 697,864,000SHA-256 3f4a0da710f013cf21f15f773379371ec19708d18598082bd2e3aca71bc52f1dPublic key SHA-256 5c4d21978af7b443bcf51312cdd42bec14c84c290a702886236e67076b80ccd6
- Addresses
- 104.21.19.59 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.185.71 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
- Cloudflare
- Cloudflare (104.21.19.59, 172.67.185.71): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Domain
- kremen-investek.org
- Registered
- 2026-09-10 · Hosting Concepts B.V. d/b/a Registrar.eu
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-09 13:10 UTC
- ninecasinofrances.com US · AS13335 · Cloudflare, Inc.2 addressesReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 7 mo ago
DetailsHide details for ninecasinofrances.com
- Hostname
- ninecasinofrances.com
- First seen
- 2026-11-09 12:46 UTC
- Listing
- PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-09 11:59 UTC
- Reported
- PhishDestroy
- Observed in the PhishDestroy feed
- Certificate logged in CT
- We matched its certificate name
- Latest DNS check
- Certificate
- Issued by WR1 · precertificateValid 2026-11-09 11:42 UTC to 2027-02-07 12:40 UTCLogged 2026-11-09 12:42 UTC in DigiCert Sphinx2027h1, entry 414,655,909SHA-256 2eebdf64bcb5b29d725cdb53c6a02ca21e3e9a07004b15b31b003d7f659fe813Public key SHA-256 596948dc8393e508009a211cc92e99b59439c417a1c72192edfaa34b4a431214
- PhishDestroy
- Addresses
- 104.21.37.38 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.203.184 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
- Cloudflare
- Cloudflare (104.21.37.38, 172.67.203.184): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Domain
- ninecasinofrances.com
- Registered
- 2026-04-09 · Atak Domain Bilgi Teknolojileri A.S.
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-09 13:10 UTC
- nowadexgraph.nowa.finance US · AS13335 · Cloudflare, Inc.2 addressesReportedCloudflareUnder nowa.finance, reported by PhishDestroyMX presentSPF ~allDMARC policy noneRegistered 15 mo ago
DetailsHide details for nowadexgraph.nowa.finance
- Hostname
- nowadexgraph.nowa.finance
- First seen
- 2026-11-09 12:46 UTC
- Listing
- PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-09 11:59 UTC
- Reported
- PhishDestroy, listing nowa.finance and the names under it
- Observed in the PhishDestroy feed
- Certificate logged in CT
- We matched its certificate name
- Latest DNS check
- Certificate
- Issued by YE2Valid 2026-11-09 11:44 UTC to 2027-02-07 11:44 UTCLogged 2026-11-09 12:42 UTC in Google ParcelYard2027h1, entry 697,848,636SHA-256 0dc0cc47a5e10832fca5a282a64d177a0d7bc041fe2e1a5600c65676dd6364cbPublic key SHA-256 d3ddd9052f9867be83cbe193e8ca8f7b676d829990347e53b4f4832487922fa5
- PhishDestroy
- Addresses
- 104.21.46.136 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.139.45 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
- Cloudflare
- Cloudflare (104.21.46.136, 172.67.139.45): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Domain
- nowa.finance
- Registered
- 2025-08-08 · HOSTINGER operations, UAB
- MX
- Receives mail at mx.zoho.in, mx2.zoho.in, mx3.zoho.in
- SPF
- SPF record with ~all: other senders soft-fail
- DMARC
- DMARC policy p=none: reports only
- Checked
- 2026-11-09 08:28 UTC
- qzovarel-italy.com US · AS13335 · Cloudflare, Inc.2 addressesListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 4 mo ago
DetailsHide details for qzovarel-italy.com
- Hostname
- qzovarel-italy.com
- First seen
- 2026-11-09 12:46 UTC
- Listing
- CERT Polska listed it 2026-09-16 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-09 12:37 UTC
- Listed
- CERT Polska
- Listed by CERT Polska
- Certificate logged in CT
- We matched its certificate name
- Latest DNS check
- Certificate
- Issued by WE1 · precertificateValid 2026-11-09 11:41 UTC to 2027-02-07 12:39 UTCLogged 2026-11-09 12:41 UTC in Let's Encrypt Willow2027h1, entry 1,040,152,146SHA-256 c68f90430272aaf570ec9e53fa4a9a69087689e7a038c1ba7d05cb61cedb16e6Public key SHA-256 51497e978b866067192c15ad949da29aff806076406810334568d18246e02abb
- Addresses
- 104.21.34.39 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.196.247 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
- Cloudflare
- Cloudflare (104.21.34.39, 172.67.196.247): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Domain
- qzovarel-italy.com
- Registered
- 2026-07-14 · Dynadot Inc
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-09 13:10 UTC
- rewarding.official-platform.com US · AS13335 · Cloudflare, Inc.2 addressesListedCloudflareUnder official-platform.com, listed by CERT PolskaMX absentSPF missingDMARC missingRegistered 7 mo ago
DetailsHide details for rewarding.official-platform.com
- Hostname
- rewarding.official-platform.com
- First seen
- 2026-11-09 12:46 UTC
- Listing
- CERT Polska listed it 2026-05-19 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-09 12:37 UTC
- Listed
- CERT Polska, listing official-platform.com and the names under it
- Listed by CERT Polska
- Certificate logged in CT
- We matched its certificate name
- Latest DNS check
- Certificate
- Issued by YE2Valid 2026-11-09 11:46 UTC to 2027-02-07 11:46 UTCLogged 2026-11-09 12:45 UTC in Google PlumbersArms2027h1, entry 698,164,113SHA-256 64dee6936cb685ebefe2a0c0d7e9d415a7714981e2fd600bc8a44884dc2aaef9Public key SHA-256 bf56f27075913b51597a9a5d21a9b7b48b7864fe03e38f0b8bc7f3fd1391c4d0
- Addresses
- 104.21.35.144 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.175.188 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
- Cloudflare
- Cloudflare (104.21.35.144, 172.67.175.188): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Domain
- official-platform.com
- Registered
- 2026-04-16 · Dreamscape Networks International Pte Ltd
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-08 21:40 UTC
- adcapmarketrades.com US · AS13335 · Cloudflare, Inc.2 addressesReportedCloudflareReported by PhishDestroyMX presentSPF -allDMARC rejectRegistered 10 mo ago
DetailsHide details for adcapmarketrades.com
- Hostname
- adcapmarketrades.com
- First seen
- 2026-11-09 12:41 UTC
- Listing
- PhishDestroy: first observed in the feed 2026-10-31 · still listed at the last successful feed check 2026-11-09 11:59 UTC
- Reported
- PhishDestroy
- Observed in the PhishDestroy feed
- Certificate logged in CT
- We matched its certificate name
- Latest DNS check
- Certificate
- Issued by YR2 · precertificateValid 2026-11-09 11:38 UTC to 2027-02-07 11:38 UTCLogged 2026-11-09 12:36 UTC in Geomys Tuscolo2027h1, entry 544,319,113SHA-256 77aac1399301055c31df09041c254351d698bc81d1f2fb4b5c1da5f64722a6edPublic key SHA-256 c8b6506bcafcc39ec8e67e461419f86f0a15d7a95be59e52203cc39f1daf33e2
- PhishDestroy
- Addresses
- 104.21.63.50 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.169.243 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
- Cloudflare
- Cloudflare (104.21.63.50, 172.67.169.243): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Domain
- adcapmarketrades.com
- Registered
- 2026-01-22 · Tucows Domains Inc.
- MX
- Receives mail at igw17.site4now.net
- SPF
- SPF record with -all: other senders fail
- DMARC
- DMARC policy p=reject
- Checked
- 2026-11-09 12:44 UTC
- bist3.hissesepetim.com US · AS13335 · Cloudflare, Inc.2 addressesListedCloudflareUnder hissesepetim.com, listed by USOMMX absentSPF missingDMARC missingRegistered 8 mo ago
DetailsHide details for bist3.hissesepetim.com
- Hostname
- bist3.hissesepetim.com
- First seen
- 2026-11-09 12:41 UTC
- Listing
- USOM listed it 2026-07-16 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-09 11:41 UTC
- Listed
- USOM, listing hissesepetim.com and the names under it
- Listed by USOM
- Certificate logged in CT
- We matched its certificate name
- Latest DNS check
- Certificate
- Issued by YR2Valid 2026-11-09 11:39 UTC to 2027-02-07 11:39 UTCLogged 2026-11-09 12:38 UTC in Google PlumbersArms2027h1, entry 698,067,308SHA-256 3cf5a31dde314d99b87030b8513cf051950cb844b6f241ebef02038a55e798aaPublic key SHA-256 4c1cd13eed3962a309cca2d339d9906bcafca59c1f4d757badbf90e697e23a69
- Addresses
- 104.21.84.82 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.190.75 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
- Cloudflare
- Cloudflare (104.21.84.82, 172.67.190.75): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Domain
- hissesepetim.com
- Registered
- 2026-03-02 · Tucows Domains Inc.
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-09 08:29 UTC
- hissesepetim.com US · AS13335 · Cloudflare, Inc.2 addressesListedCloudflareListed by USOMMX absentSPF missingDMARC missingRegistered 8 mo ago
DetailsHide details for hissesepetim.com
- Hostname
- hissesepetim.com
- First seen
- 2026-11-09 12:41 UTC
- Listing
- USOM listed it 2026-07-16 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-09 11:41 UTC
- Listed
- USOM
- Listed by USOM
- Certificate logged in CT
- We matched its certificate name
- Latest DNS check
- Certificate
- Issued by YR2Valid 2026-11-09 11:39 UTC to 2027-02-07 11:39 UTCLogged 2026-11-09 12:38 UTC in Google PlumbersArms2027h1, entry 698,067,308SHA-256 3cf5a31dde314d99b87030b8513cf051950cb844b6f241ebef02038a55e798aaPublic key SHA-256 4c1cd13eed3962a309cca2d339d9906bcafca59c1f4d757badbf90e697e23a69
- Addresses
- 104.21.84.82 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.190.75 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
- Cloudflare
- Cloudflare (104.21.84.82, 172.67.190.75): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Domain
- hissesepetim.com
- Registered
- 2026-03-02 · Tucows Domains Inc.
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-09 08:29 UTC
- pampago-casino-fr1.com US · AS13335 · Cloudflare, Inc.2 addressesReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 9 mo ago
DetailsHide details for pampago-casino-fr1.com
- Hostname
- pampago-casino-fr1.com
- First seen
- 2026-11-09 12:41 UTC
- Listing
- PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-09 11:59 UTC
- Reported
- PhishDestroy
- Observed in the PhishDestroy feed
- Certificate logged in CT
- We matched its certificate name
- Latest DNS check
- Certificate
- Issued by WR1 · precertificateValid 2026-11-09 11:36 UTC to 2027-02-07 12:35 UTCLogged 2026-11-09 12:36 UTC in Let's Encrypt Willow2027h1, entry 1,040,048,335SHA-256 3e4fa2cdedbca2cbadb00ae5e2869caa40ee25000176e352fe704ec536fb4241Public key SHA-256 c1ee500de41b59130ae0fb05afd05f5e22c9bef57fd9eeeaeac04b525d5a1155
- PhishDestroy
- Addresses
- 104.21.64.61 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.176.170 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
- Cloudflare
- Cloudflare (104.21.64.61, 172.67.176.170): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Domain
- pampago-casino-fr1.com
- Registered
- 2026-02-02 · Atak Domain Bilgi Teknolojileri A.S.
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-09 13:10 UTC
- rodmareni.com US · AS13335 · Cloudflare, Inc.2 addressesListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 3 d ago
DetailsHide details for rodmareni.com
- Hostname
- rodmareni.com
- First seen
- 2026-11-09 12:41 UTC
- Listing
- CERT Polska listed it 2026-11-08 · still listed at the last successful feed check 2026-11-09 12:37 UTC
- Listed
- CERT Polska
- Listed by CERT Polska
- Certificate logged in CT
- We matched its certificate name
- Latest DNS check
- Certificate
- Issued by YE1 · precertificateValid 2026-11-09 11:41 UTC to 2027-02-07 11:41 UTCLogged 2026-11-09 12:39 UTC in Geomys Tuscolo2027h1, entry 544,351,884SHA-256 218a0020233f6a61f8da0e830190419d8aac15093567531390249ef6080cf5cdPublic key SHA-256 189dc306e1c1706f46b2b2b7590ae0c81010a3033b4a818b161c504c178f22d8
- Addresses
- 104.21.72.61 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.175.243 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
- Cloudflare
- Cloudflare (104.21.72.61, 172.67.175.243): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Domain
- rodmareni.com
- Registered
- 2026-11-06 · Dynadot Inc
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-09 13:10 UTC
- tc3ij.icu US · AS13335 · Cloudflare, Inc.2 addressesListedCloudflareListed by NPA 165 (information services)MX absentSPF missingDMARC missingRegistered 8 mo ago
DetailsHide details for tc3ij.icu
- Hostname
- tc3ij.icu
- First seen
- 2026-11-09 12:41 UTC
- Listing
- NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-09 01:35 UTC
- Listed
- NPA 165
- Observed in the NPA 165 feed
- Certificate logged in CT
- We matched its certificate name
- Latest DNS check
- Certificate
- Issued by YE2 · precertificateValid 2026-11-09 11:38 UTC to 2027-02-07 11:38 UTCLogged 2026-11-09 12:37 UTC in DigiCert Sphinx2027h1, entry 414,618,305SHA-256 072081b42e33958fd425ae245ae2ffb7e484fb96bd45b4851781ec1793b1536aPublic key SHA-256 0e2ea7ab04afbf91fc8b16d693e3a6071314d7918a775c6701eae11d47fea505
- Addresses
- 104.21.56.229 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.137.171 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
- Cloudflare
- Cloudflare (104.21.56.229, 172.67.137.171): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Domain
- tc3ij.icu
- Registered
- 2026-03-17 · Alibaba Cloud Computing Ltd. d/b/a HiChina (www.net.cn)
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-09 13:10 UTC
- tevelabra.shop US · AS13335 · Cloudflare, Inc.2 addressesListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 6 mo ago
DetailsHide details for tevelabra.shop
- Hostname
- tevelabra.shop
- First seen
- 2026-11-09 12:41 UTC
- Listing
- CERT Polska listed it 2026-07-21 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-09 12:37 UTC
- Listed
- CERT Polska
- Listed by CERT Polska
- Certificate logged in CT
- We matched its certificate name
- Latest DNS check
- Certificate
- Issued by YE1Valid 2026-11-09 11:40 UTC to 2027-02-07 11:40 UTCLogged 2026-11-09 12:38 UTC in Google ParcelYard2027h1, entry 697,794,456SHA-256 6dc81818e78b9144f9e98a5178862f224ff133b3ea4d3090fd67409d335d03caPublic key SHA-256 2861cf2bcdb05128b51e838c8a701449ccb13dd080f1f7cc075701b522b4f71f
- Addresses
- 104.21.59.15 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.167.147 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
- Cloudflare
- Cloudflare (104.21.59.15, 172.67.167.147): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Domain
- tevelabra.shop
- Registered
- 2026-05-16 · Chengdu West Dimension Digital Technology Co., LTD
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-09 13:10 UTC
- www.adcapmarketrades.com US · AS13335 · Cloudflare, Inc.2 addressesReportedCloudflareUnder adcapmarketrades.com, reported by PhishDestroyMX presentSPF -allDMARC rejectRegistered 10 mo ago
DetailsHide details for www.adcapmarketrades.com
- Hostname
- www.adcapmarketrades.com
- First seen
- 2026-11-09 12:41 UTC
- Listing
- PhishDestroy: first observed in the feed 2026-10-31 · still listed at the last successful feed check 2026-11-09 11:59 UTC
- Reported
- PhishDestroy, listing adcapmarketrades.com and the names under it
- Observed in the PhishDestroy feed
- Certificate logged in CT
- We matched its certificate name
- Latest DNS check
- Certificate
- Issued by YR2 · precertificateValid 2026-11-09 11:38 UTC to 2027-02-07 11:38 UTCLogged 2026-11-09 12:36 UTC in Geomys Tuscolo2027h1, entry 544,319,113SHA-256 77aac1399301055c31df09041c254351d698bc81d1f2fb4b5c1da5f64722a6edPublic key SHA-256 c8b6506bcafcc39ec8e67e461419f86f0a15d7a95be59e52203cc39f1daf33e2
- PhishDestroy
- Addresses
- 104.21.63.50 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.169.243 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
- Cloudflare
- Cloudflare (104.21.63.50, 172.67.169.243): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Domain
- adcapmarketrades.com
- Registered
- 2026-01-22 · Tucows Domains Inc.
- MX
- Receives mail at igw17.site4now.net
- SPF
- SPF record with -all: other senders fail
- DMARC
- DMARC policy p=reject
- Checked
- 2026-11-09 12:44 UTC
- www.hissesepetim.com US · AS13335 · Cloudflare, Inc.2 addressesListedCloudflareUnder hissesepetim.com, listed by USOMMX absentSPF missingDMARC missingRegistered 8 mo ago
DetailsHide details for www.hissesepetim.com
- Hostname
- www.hissesepetim.com
- First seen
- 2026-11-09 12:41 UTC
- Listing
- USOM listed it 2026-07-16 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-09 11:41 UTC
- Listed
- USOM, listing hissesepetim.com and the names under it
- Listed by USOM
- Certificate logged in CT
- We matched its certificate name
- Latest DNS check
- Certificate
- Issued by YR2Valid 2026-11-09 11:39 UTC to 2027-02-07 11:39 UTCLogged 2026-11-09 12:38 UTC in Google PlumbersArms2027h1, entry 698,067,308SHA-256 3cf5a31dde314d99b87030b8513cf051950cb844b6f241ebef02038a55e798aaPublic key SHA-256 4c1cd13eed3962a309cca2d339d9906bcafca59c1f4d757badbf90e697e23a69
- Addresses
- 104.21.84.82 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.190.75 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
- Cloudflare
- Cloudflare (104.21.84.82, 172.67.190.75): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Domain
- hissesepetim.com
- Registered
- 2026-03-02 · Tucows Domains Inc.
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-09 08:29 UTC
- barbaacrit.store US · AS13335 · Cloudflare, Inc.4 addressesListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 1 d ago
DetailsHide details for barbaacrit.store
- Hostname
- barbaacrit.store
- First seen
- 2026-11-09 12:39 UTC
- Listing
- CERT Polska listed it 2026-11-09 · still listed at the last successful feed check 2026-11-09 12:37 UTC
- Listed
- CERT Polska
- Certificate logged in CT
- Listed by CERT Polska
- We matched the new listing
- Latest DNS check
- Certificate
- Issued by Cloudflare TLS Issuing ECC CA 4 · precertificateValid 2026-11-08 05:33 UTC to 2027-02-06 05:41 UTCLogged 2026-11-08 05:43 UTC in DigiCert Wyvern2027h1, entry 450,123,812SHA-256 255153a81098020780294414da4604df64e6f0573bd98059b5076c0790e21f27Public key SHA-256 2b30c84c902be6fec3074fe12736dac5e1281031079a2699e2604525349bf85b
- Addresses
- 104.21.83.92 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.220.240 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3031::6815:535c2606:4700:3032::ac43:dcf0
- Cloudflare
- Cloudflare (104.21.83.92, 172.67.220.240): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Domain
- barbaacrit.store
- Registered
- 2026-11-08 · NameCheap, Inc.
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-09 13:10 UTC
- bullioncombeyard-uk.live US · AS13335 · Cloudflare, Inc.4 addressesListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered today
DetailsHide details for bullioncombeyard-uk.live
- Hostname
- bullioncombeyard-uk.live
- First seen
- 2026-11-09 12:39 UTC
- Listing
- CERT Polska listed it 2026-11-09 · still listed at the last successful feed check 2026-11-09 12:37 UTC
- Listed
- CERT Polska
- Certificate logged in CT
- Listed by CERT Polska
- We matched the new listing
- Latest DNS check
- Certificate
- Issued by YE1 · precertificateValid 2026-11-09 05:41 UTC to 2027-02-07 05:41 UTCLogged 2026-11-09 06:39 UTC in Let's Encrypt Willow2027h1, entry 1,030,661,497SHA-256 124be1b7c068c6096cc991527e5edf109c6576f2f395ff7c4cbd37ac5e5c13faPublic key SHA-256 814ba0c60a0d71febb837512fde471db51712e089fcd0cb5e9eb36b48e60cdb0
- Addresses
- 104.21.87.56 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.141.231 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3033::ac43:8de72606:4700:3034::6815:5738
- Cloudflare
- Cloudflare (104.21.87.56, 172.67.141.231): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Domain
- bullioncombeyard-uk.live
- Registered
- 2026-11-09 · Dynadot Inc
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-09 13:10 UTC
- bullioncombeyard.com US · AS13335 · Cloudflare, Inc.4 addressesListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered today
DetailsHide details for bullioncombeyard.com
- Hostname
- bullioncombeyard.com
- First seen
- 2026-11-09 12:39 UTC
- Listing
- CERT Polska listed it 2026-11-09 · still listed at the last successful feed check 2026-11-09 12:37 UTC
- Listed
- CERT Polska
- Certificate logged in CT
- Listed by CERT Polska
- We matched the new listing
- Latest DNS check
- Certificate
- Issued by YE2Valid 2026-11-09 05:31 UTC to 2027-02-07 05:31 UTCLogged 2026-11-09 06:29 UTC in Google PlumbersArms2027h1, entry 692,624,668SHA-256 8aad0fa53b05520c6bae4fc007983ac48afd0973c43f3e1c7194212a15eb9b5dPublic key SHA-256 5e641be7a65cf310e4c2ec03caf7fdb5bca864cba5280012cfbff44acc1d89f5
- Addresses
- 104.21.74.161 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.159.222 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3030::6815:4aa12606:4700:3036::ac43:9fde
- Cloudflare
- Cloudflare (104.21.74.161, 172.67.159.222): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Domain
- bullioncombeyard.com
- Registered
- 2026-11-09 · Dynadot Inc
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-09 13:10 UTC
- ceneo-homegarden.shop US · AS13335 · Cloudflare, Inc.4 addressesListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missing
DetailsHide details for ceneo-homegarden.shop
- Hostname
- ceneo-homegarden.shop
- First seen
- 2026-11-09 12:39 UTC
- Listing
- CERT Polska listed it 2026-11-09 · still listed at the last successful feed check 2026-11-09 12:37 UTC
- Listed
- CERT Polska
- Certificate logged in CT
- Listed by CERT Polska
- We matched the new listing
- Latest DNS check
- Certificate
- Issued by YE1Valid 2026-11-09 02:36 UTC to 2027-02-07 02:36 UTCLogged 2026-11-09 03:35 UTC in Google PlumbersArms2027h1, entry 690,227,193SHA-256 090958b7f55a0450d59580f0f2b6350fcbae4a9374d7b4b45b9973bbcec2be5ePublic key SHA-256 93a71ff2563adfb4769097dd37f6e0095b6ecaa9bb5f4a44e50426e371e3a4fd
- Addresses
- 104.21.69.98 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.206.251 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3033::6815:45622606:4700:3035::ac43:cefb
- Cloudflare
- Cloudflare (104.21.69.98, 172.67.206.251): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Domain
- ceneo-homegarden.shop
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-09 12:44 UTC
- disgecalcs.store US · AS13335 · Cloudflare, Inc.4 addressesListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 1 d ago
DetailsHide details for disgecalcs.store
- Hostname
- disgecalcs.store
- First seen
- 2026-11-09 12:39 UTC
- Listing
- CERT Polska listed it 2026-11-09 · still listed at the last successful feed check 2026-11-09 12:37 UTC
- Listed
- CERT Polska
- Certificate logged in CT
- Listed by CERT Polska
- We matched the new listing
- Latest DNS check
- Certificate
- Issued by YE2 · precertificateValid 2026-11-08 04:47 UTC to 2027-02-06 04:47 UTCLogged 2026-11-08 05:45 UTC in Let's Encrypt Willow2027h1, entry 997,821,427SHA-256 006e26049f7090ca68192ab762b555e57b1c2751337b17594a69ca7a6afcfeebPublic key SHA-256 d6a08455e7891b68484cad8ded8102306b3a097becf5318af8c3085a3e11c433
- Addresses
- 104.21.56.208 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.136.178 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3033::6815:38d02606:4700:3036::ac43:88b2
- Cloudflare
- Cloudflare (104.21.56.208, 172.67.136.178): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Domain
- disgecalcs.store
- Registered
- 2026-11-08 · NameCheap, Inc.
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-09 13:10 UTC
- ezebra-odorpl.sbs US · AS13335 · Cloudflare, Inc.4 addressesListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 6 mo ago
DetailsHide details for ezebra-odorpl.sbs
- Hostname
- ezebra-odorpl.sbs
- First seen
- 2026-11-09 12:39 UTC
- Listing
- CERT Polska listed it 2026-11-09 · still listed at the last successful feed check 2026-11-09 12:37 UTC
- Listed
- CERT Polska
- Certificate logged in CT
- Listed by CERT Polska
- We matched the new listing
- Latest DNS check
- Certificate
- Issued by WR1 · precertificateValid 2026-11-07 08:34 UTC to 2027-02-05 09:33 UTCLogged 2026-11-07 09:34 UTC in Let's Encrypt Willow2027h1, entry 983,623,972SHA-256 50cab676dca1465785a2ba85af1eb8d61f015d1822da1255daa95cc3c6823668Public key SHA-256 371a4bafa7c1de22d540e2de3d140944419f3d75d550286562d748f0553ecd07
- Addresses
- 104.21.30.115 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.172.224 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3035::6815:1e732606:4700:3036::ac43:ace0
- Cloudflare
- Cloudflare (104.21.30.115, 172.67.172.224): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Domain
- ezebra-odorpl.sbs
- Registered
- 2026-05-14 · Dynadot Inc
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-09 13:10 UTC
- hologpavn.store US · AS13335 · Cloudflare, Inc.4 addressesListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 1 d ago
DetailsHide details for hologpavn.store
- Hostname
- hologpavn.store
- First seen
- 2026-11-09 12:39 UTC
- Listing
- CERT Polska listed it 2026-11-09 · still listed at the last successful feed check 2026-11-09 12:37 UTC
- Listed
- CERT Polska
- Certificate logged in CT
- Listed by CERT Polska
- We matched the new listing
- Latest DNS check
- Certificate
- Issued by YE2 · precertificateValid 2026-11-08 04:46 UTC to 2027-02-06 04:46 UTCLogged 2026-11-08 05:45 UTC in DigiCert Wyvern2027h1, entry 450,128,454SHA-256 2abf326576765256afcd88ea27d7fdcc43b88502d1f2eeed8e04512585da2662Public key SHA-256 16c052638f6bc623b855f1126240e6ea7d535dbfb6dd1f24a510a8cc2b24990a
- Addresses
- 104.21.35.93 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.217.12 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3035::6815:235d2606:4700:3037::ac43:d90c
- Cloudflare
- Cloudflare (104.21.35.93, 172.67.217.12): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Domain
- hologpavn.store
- Registered
- 2026-11-08 · NameCheap, Inc.
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-09 13:10 UTC
- jhedgs45gjwggkfv.eu.cc US · AS13335 · Cloudflare, Inc.4 addressesListedCloudflareListed by CERT Polska
DetailsHide details for jhedgs45gjwggkfv.eu.cc
- Hostname
- jhedgs45gjwggkfv.eu.cc
- First seen
- 2026-11-09 12:39 UTC
- Listing
- CERT Polska listed it 2026-11-09 · still listed at the last successful feed check 2026-11-09 12:37 UTC
- Listed
- CERT Polska
- Certificate logged in CT
- Listed by CERT Polska
- We matched the new listing
- Latest DNS check
- Certificate
- Issued by YE2 · precertificateValid 2026-11-09 07:24 UTC to 2027-02-07 07:24 UTCLogged 2026-11-09 08:23 UTC in IPng Networks Gouda2027h1, entry 362,142,695SHA-256 64ba7e98357c4556cbd0d7b5a20e1e5e36ab15ecee584b9ff695c29437d5f525Public key SHA-256 c54b6eb9b01c85b12f47fd85abce6dd12c969b8f24696de5a06c2747dedb9176
- Addresses
- 104.21.88.69 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.173.164 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3034::ac43:ada42606:4700:3037::6815:5845
- Cloudflare
- Cloudflare (104.21.88.69, 172.67.173.164): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- leadspring.cyou US · AS13335 · Cloudflare, Inc.4 addressesListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered today
DetailsHide details for leadspring.cyou
- Hostname
- leadspring.cyou
- First seen
- 2026-11-09 12:39 UTC
- Listing
- CERT Polska listed it 2026-11-09 · still listed at the last successful feed check 2026-11-09 12:37 UTC
- Listed
- CERT Polska
- Certificate logged in CT
- Listed by CERT Polska
- We matched the new listing
- Latest DNS check
- Certificate
- Issued by YE1Valid 2026-11-09 05:40 UTC to 2027-02-07 05:40 UTCLogged 2026-11-09 06:39 UTC in Google PlumbersArms2027h1, entry 692,754,032SHA-256 2a69c0ce8fdd80537544fcb573d4301290fb5ee0e12c30fbd52fe8363934fbddPublic key SHA-256 89e56c38fdb8919abae21fbd52d0a063810a1bb54f2ba446de048d4c44c67294
- Addresses
- 104.21.41.155 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.148.38 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3035::ac43:94262606:4700:3037::6815:299b
- Cloudflare
- Cloudflare (104.21.41.155, 172.67.148.38): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Domain
- leadspring.cyou
- Registered
- 2026-11-09 · Spaceship, Inc.
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-09 13:10 UTC
- odorezebra-pl.sbs US · AS13335 · Cloudflare, Inc.4 addressesListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 6 mo ago
DetailsHide details for odorezebra-pl.sbs
- Hostname
- odorezebra-pl.sbs
- First seen
- 2026-11-09 12:39 UTC
- Listing
- CERT Polska listed it 2026-11-09 · still listed at the last successful feed check 2026-11-09 12:37 UTC
- Listed
- CERT Polska
- Certificate logged in CT
- Listed by CERT Polska
- We matched the new listing
- Latest DNS check
- Certificate
- Issued by YE1Valid 2026-11-07 13:54 UTC to 2027-02-05 13:54 UTCLogged 2026-11-07 14:52 UTC in Google PlumbersArms2027h1, entry 662,190,419SHA-256 a638a6055907dad7b89041b3ba7019a2fd981fd98bbe43a9bf197b4ac7ba1a54Public key SHA-256 4465ea931329a45d88a7c47b0f1ff65652b19a8d925a847e4ed25405d51b7e96
- Addresses
- 104.21.88.25 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.150.74 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3032::6815:58192606:4700:3034::ac43:964a
- Cloudflare
- Cloudflare (104.21.88.25, 172.67.150.74): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Domain
- odorezebra-pl.sbs
- Registered
- 2026-05-14 · Dynadot Inc
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-09 13:10 UTC
- pl-61725262928oferta01972739282l6283.lat US · AS13335 · Cloudflare, Inc.4 addressesListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered today
DetailsHide details for pl-61725262928oferta01972739282l6283.lat
- Hostname
- pl-61725262928oferta01972739282l6283.lat
- First seen
- 2026-11-09 12:39 UTC
- Listing
- CERT Polska listed it 2026-11-09 · still listed at the last successful feed check 2026-11-09 12:37 UTC
- Listed
- CERT Polska
- Certificate logged in CT
- Listed by CERT Polska
- We matched the new listing
- Latest DNS check
- Certificate
- Issued by YE2Valid 2026-11-09 09:26 UTC to 2027-02-07 09:26 UTCLogged 2026-11-09 10:24 UTC in Google ParcelYard2027h1, entry 695,840,020SHA-256 be83bdf953c906d0ea8a833e39973e1c6d1a9e165693891ddefb2612cd7f5c4aPublic key SHA-256 b352d10d0c2c327df3dbd5edd7a80f64add07e6529760d617549375d3d1f0b76
- Addresses
- 104.21.57.12 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.188.185 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3032::ac43:bcb92606:4700:3037::6815:390c
- Cloudflare
- Cloudflare (104.21.57.12, 172.67.188.185): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Domain
- pl-61725262928oferta01972739282l6283.lat
- Registered
- 2026-11-09 · Hosting Concepts B.V. d/b/a Registrar.eu
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-09 13:10 UTC
- pnuvelbar.net US · AS13335 · Cloudflare, Inc.4 addressesListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 4 mo ago
DetailsHide details for pnuvelbar.net
- Hostname
- pnuvelbar.net
- First seen
- 2026-11-09 12:39 UTC
- Listing
- CERT Polska listed it 2026-11-09 · still listed at the last successful feed check 2026-11-09 12:37 UTC
- Listed
- CERT Polska
- Certificate logged in CT
- Listed by CERT Polska
- We matched the new listing
- Latest DNS check
- Certificate
- Issued by WE1 · precertificateValid 2026-11-09 04:25 UTC to 2027-02-07 05:22 UTCLogged 2026-11-09 05:25 UTC in Google ParcelYard2027h1, entry 691,429,306SHA-256 38bb84d29d2a827cf7e79023a42b6fdd391091889d4823c52d0b327d4a3427ccPublic key SHA-256 15ca9cb38ad9c7f7e35f7fea3ea3f943f5e669ef59aa137eb17c7661515ca7ea
- Addresses
- 104.21.55.184 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.172.30 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3033::6815:37b82606:4700:3036::ac43:ac1e
- Cloudflare
- Cloudflare (104.21.55.184, 172.67.172.30): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Domain
- pnuvelbar.net
- Registered
- 2026-07-14 · Dynadot Inc
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-09 13:10 UTC
- preapinfan.store US · AS13335 · Cloudflare, Inc.4 addressesListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 1 d ago
DetailsHide details for preapinfan.store
- Hostname
- preapinfan.store
- First seen
- 2026-11-09 12:39 UTC
- Listing
- CERT Polska listed it 2026-11-09 · still listed at the last successful feed check 2026-11-09 12:37 UTC
- Listed
- CERT Polska
- Certificate logged in CT
- Listed by CERT Polska
- We matched the new listing
- Latest DNS check
- Certificate
- Issued by YE2 · precertificateValid 2026-11-08 04:45 UTC to 2027-02-06 04:45 UTCLogged 2026-11-08 05:43 UTC in Geomys Tuscolo2027h1, entry 523,867,300SHA-256 39cf94fe14829f0b027e75b7751b0797b0b542bd26d61277791423c024595b43Public key SHA-256 63b54920011eaeaab92296afc3528148ff3cf359c48960f17f2a805765a953ad
- Addresses
- 104.21.59.233 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.185.26 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3032::ac43:b91a2606:4700:3037::6815:3be9
- Cloudflare
- Cloudflare (104.21.59.233, 172.67.185.26): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Domain
- preapinfan.store
- Registered
- 2026-11-08 · NameCheap, Inc.
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-09 13:10 UTC
- renee-fashion.shop US · AS13335 · Cloudflare, Inc.ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missing
DetailsHide details for renee-fashion.shop
- Hostname
- renee-fashion.shop
- First seen
- 2026-11-09 12:39 UTC
- Listing
- CERT Polska listed it 2026-11-09 · still listed at the last successful feed check 2026-11-09 12:37 UTC
- Listed
- CERT Polska
- Certificate logged in CT
- Listed by CERT Polska
- We matched the new listing
- Latest DNS check
- Certificate
- Issued by WE1Valid 2026-11-09 05:10 UTC to 2027-02-07 06:10 UTCLogged 2026-11-09 06:10 UTC in Sectigo Statue2027h1, entry 102,448,551SHA-256 40c73a6c976b3b8b594003c02969f7b8d332052f662fdb4e43a77de6919ada6ePublic key SHA-256 4ea2fb7b0c7100543b6c2139062e9091b59c28ce836cd0fa87f5e093d5e31233
- Addresses
- 104.18.20.248 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
- Cloudflare
- Cloudflare (104.18.20.248): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Domain
- renee-fashion.shop
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-09 12:44 UTC
- reneestock.shop US · AS13335 · Cloudflare, Inc.ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missing
DetailsHide details for reneestock.shop
- Hostname
- reneestock.shop
- First seen
- 2026-11-09 12:39 UTC
- Listing
- CERT Polska listed it 2026-11-09 · still listed at the last successful feed check 2026-11-09 12:37 UTC
- Listed
- CERT Polska
- Certificate logged in CT
- Listed by CERT Polska
- We matched the new listing
- Latest DNS check
- Certificate
- Issued by WR1 · precertificateValid 2026-11-09 06:56 UTC to 2027-02-07 07:54 UTCLogged 2026-11-09 07:56 UTC in Google ParcelYard2027h1, entry 693,529,994SHA-256 3500ef78407773e4e1682ffbb3a00c5c50c1e695c6fe2312f1b980f1730573adPublic key SHA-256 2779f02b9358ca28998eb09a396da7141f08e1a6f5e15e226312453e5434b1ec
- Addresses
- 104.18.20.248 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
- Cloudflare
- Cloudflare (104.18.20.248): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Domain
- reneestock.shop
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-09 12:44 UTC
- siliccicch.store US · AS13335 · Cloudflare, Inc.4 addressesListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 1 d ago
DetailsHide details for siliccicch.store
- Hostname
- siliccicch.store
- First seen
- 2026-11-09 12:39 UTC
- Listing
- CERT Polska listed it 2026-11-09 · still listed at the last successful feed check 2026-11-09 12:37 UTC
- Listed
- CERT Polska
- Certificate logged in CT
- Listed by CERT Polska
- We matched the new listing
- Latest DNS check
- Certificate
- Issued by YE2Valid 2026-11-08 04:46 UTC to 2027-02-06 04:46 UTCLogged 2026-11-08 05:44 UTC in Google ParcelYard2027h1, entry 672,112,778SHA-256 5062b83d1fa0a900ca3d6f02f7286709554018027dcf0fd62b5e7231ac454c0ePublic key SHA-256 2d202a322fcda5ff33d0a25d661af9fdfca04db7695ac0dbd68b3572e68a8cb8
- Addresses
- 104.21.8.104 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.157.74 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3030::ac43:9d4a2606:4700:3032::6815:868
- Cloudflare
- Cloudflare (104.21.8.104, 172.67.157.74): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Domain
- siliccicch.store
- Registered
- 2026-11-08 · NameCheap, Inc.
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-09 13:10 UTC
- truly5-eum70.cfd US · AS13335 · Cloudflare, Inc.4 addressesListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered today
DetailsHide details for truly5-eum70.cfd
- Hostname
- truly5-eum70.cfd
- First seen
- 2026-11-09 12:39 UTC
- Listing
- CERT Polska listed it 2026-11-09 · still listed at the last successful feed check 2026-11-09 12:37 UTC
- Listed
- CERT Polska
- Certificate logged in CT
- Listed by CERT Polska
- We matched the new listing
- Latest DNS check
- Certificate
- Issued by Cloudflare TLS Issuing ECC CA 4 · precertificateValid 2026-11-09 10:00 UTC to 2027-02-07 10:08 UTCLogged 2026-11-09 10:10 UTC in DigiCert Wyvern2027h1, entry 466,835,519SHA-256 8d7c309cdbee3f16e5539b479ad937c4e197b49c6af06ebaa5817bfc41d3ed68Public key SHA-256 e25e5b9d5a02c1ac5fefec58218084780db9191df618b933b2c9af089572ef72
- Addresses
- 104.21.47.160 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.149.16 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3030::ac43:95102606:4700:3032::6815:2fa0
- Cloudflare
- Cloudflare (104.21.47.160, 172.67.149.16): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Domain
- truly5-eum70.cfd
- Registered
- 2026-11-09 · Dynadot Inc
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-09 13:10 UTC
- unvismorp.store US · AS13335 · Cloudflare, Inc.4 addressesListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 1 d ago
DetailsHide details for unvismorp.store
- Hostname
- unvismorp.store
- First seen
- 2026-11-09 12:39 UTC
- Listing
- CERT Polska listed it 2026-11-09 · still listed at the last successful feed check 2026-11-09 12:37 UTC
- Listed
- CERT Polska
- Certificate logged in CT
- Listed by CERT Polska
- We matched the new listing
- Latest DNS check
- Certificate
- Issued by Cloudflare TLS Issuing ECC CA 4 · precertificateValid 2026-11-08 05:34 UTC to 2027-02-06 05:42 UTCLogged 2026-11-08 05:44 UTC in DigiCert Sphinx2027h1, entry 398,163,137SHA-256 13e6a7dfccd2a0497717bd795c67a6d9bc9679ebb4ae4d00f581fdc5e4bbc473Public key SHA-256 6e653be88a42ebc8d04a87d1cc70cfbcbf68cd8a6b97c953821c3c2df79f8083
- Addresses
- 104.21.53.210 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.218.214 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3032::6815:35d22606:4700:3034::ac43:dad6
- Cloudflare
- Cloudflare (104.21.53.210, 172.67.218.214): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Domain
- unvismorp.store
- Registered
- 2026-11-08 · NameCheap, Inc.
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-09 13:10 UTC
- verghadfre.store US · AS13335 · Cloudflare, Inc.4 addressesListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 1 d ago
DetailsHide details for verghadfre.store
- Hostname
- verghadfre.store
- First seen
- 2026-11-09 12:39 UTC
- Listing
- CERT Polska listed it 2026-11-09 · still listed at the last successful feed check 2026-11-09 12:37 UTC
- Listed
- CERT Polska
- Certificate logged in CT
- Listed by CERT Polska
- We matched the new listing
- Latest DNS check
- Certificate
- Issued by Sectigo Public Server Authentication CA DV E36Valid 2026-11-08 00:00 UTC to 2027-02-06 05:42 UTCLogged 2026-11-08 05:44 UTC in IPng Networks Gouda2027h1, entry 350,721,220SHA-256 7cd3547ad1235e1c286b16f6c29a4f2df99ea2e22f1acdc3840fb1930d1032cdPublic key SHA-256 c799b987cde72370657ef24adaf2d6f02efd6b4c32ba3a40e5acf254964209f1
- Addresses
- 104.21.58.178 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.162.104 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3037::6815:3ab22606:4700:3037::ac43:a268
- Cloudflare
- Cloudflare (104.21.58.178, 172.67.162.104): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Domain
- verghadfre.store
- Registered
- 2026-11-08 · NameCheap, Inc.
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-09 13:10 UTC
- bioro.site US · AS13335 · Cloudflare, Inc.2 addressesListedCloudflareListed by NPA 165 (information services)MX absentSPF missingDMARC missingRegistered 59 d ago
DetailsHide details for bioro.site
- Hostname
- bioro.site
- First seen
- 2026-11-09 12:36 UTC
- Listing
- NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-09 01:35 UTC
- Listed
- NPA 165
- Observed in the NPA 165 feed
- Certificate logged in CT
- We matched its certificate name
- Latest DNS check
- Certificate
- Issued by WE1 · precertificateValid 2026-11-09 11:33 UTC to 2027-02-07 12:32 UTCLogged 2026-11-09 12:33 UTC in Google ParcelYard2027h1, entry 697,725,820SHA-256 b8c4199503775a63216424184cdffd16f2b1deb6fe74599fea67e7a7ef47d800Public key SHA-256 1df3c208115f3f9a1685856fe5f4baf2569a6b3fb00f60f1b7231a26240763e9
- Addresses
- 104.21.44.166 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.201.94 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
- Cloudflare
- Cloudflare (104.21.44.166, 172.67.201.94): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Domain
- bioro.site
- Registered
- 2026-09-11 · Chengdu West Dimension Digital Technology Co., Ltd.
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-09 13:10 UTC
- prof-9263.eu.cc US · AS13335 · Cloudflare, Inc.2 addressesListedCloudflareListed by CERT Polska
DetailsHide details for prof-9263.eu.cc
- Hostname
- prof-9263.eu.cc
- First seen
- 2026-11-09 12:36 UTC
- Listing
- CERT Polska listed it 2026-09-11 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-09 12:37 UTC
- Listed
- CERT Polska
- Listed by CERT Polska
- Certificate logged in CT
- We matched its certificate name
- Latest DNS check
- Certificate
- Issued by YE1 · precertificateValid 2026-11-09 11:34 UTC to 2027-02-07 11:34 UTCLogged 2026-11-09 12:32 UTC in Geomys Tuscolo2027h1, entry 544,273,686SHA-256 1b3774c304a7cb26e2455f4675f86b4ccac794dd6a5d431f30d802c2f5a709bbPublic key SHA-256 d105e271157f405130328b1de6fa195e0ef96e4ef5e10cd0e49f289cf5ff39c9
- Addresses
- 104.21.79.252 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.172.80 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
- Cloudflare
- Cloudflare (104.21.79.252, 172.67.172.80): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- tsldg.com US · AS13335 · Cloudflare, Inc.2 addressesListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 6 mo ago
DetailsHide details for tsldg.com
- Hostname
- tsldg.com
- First seen
- 2026-11-09 12:36 UTC
- Listing
- CERT Polska listed it 2026-05-18 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-09 12:37 UTC
- Listed
- CERT Polska
- Listed by CERT Polska
- Certificate logged in CT
- We matched its certificate name
- Latest DNS check
- Certificate
- Issued by YE1Valid 2026-11-09 11:32 UTC to 2027-02-07 11:32 UTCLogged 2026-11-09 12:30 UTC in Google PlumbersArms2027h1, entry 697,959,231SHA-256 841bccc24f2c3323ce1f7ab252a412836414cbc1ce3a1f73360a523a149df4d6Public key SHA-256 83c395fd3c438dafc70910da11c00d4c62938a15e652945e5e1e3c4b0747ede2
- Addresses
- 104.21.30.110 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.172.197 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
- Cloudflare
- Cloudflare (104.21.30.110, 172.67.172.197): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Domain
- tsldg.com
- Registered
- 2026-05-16 · Cloud Yuqu LLC
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-09 13:10 UTC
- vvddct.lat US · AS13335 · Cloudflare, Inc.2 addressesListedCloudflareListed by NPA 165 (finance and insurance)MX absentSPF missingDMARC missingRegistered 59 d ago
DetailsHide details for vvddct.lat
- Hostname
- vvddct.lat
- First seen
- 2026-11-09 12:36 UTC
- Listing
- NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-09 01:35 UTC
- Listed
- NPA 165
- Observed in the NPA 165 feed
- Certificate logged in CT
- We matched its certificate name
- Latest DNS check
- Certificate
- Issued by YE1Valid 2026-11-09 11:35 UTC to 2027-02-07 11:35 UTCLogged 2026-11-09 12:34 UTC in Google PlumbersArms2027h1, entry 698,008,917SHA-256 62af624fff624aeaff468a5385b6722bba063d7b8478bd610f6bea1139c06305Public key SHA-256 22bfc421119f25c8595e211bd555f4ca907d0daa47ab43013733841a49f640b6
- Addresses
- 104.21.75.143 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.177.124 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
- Cloudflare
- Cloudflare (104.21.75.143, 172.67.177.124): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Domain
- vvddct.lat
- Registered
- 2026-09-11 · Dynadot Inc
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-09 13:10 UTC
- www.modnakiecka-off.shop US · AS13335 · Cloudflare, Inc.2 addressesListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missing
DetailsHide details for www.modnakiecka-off.shop
- Hostname
- www.modnakiecka-off.shop
- First seen
- 2026-11-09 12:36 UTC
- Listing
- CERT Polska listed it 2026-10-27 · still listed at the last successful feed check 2026-11-09 12:37 UTC
- Listed
- CERT Polska
- Listed by CERT Polska
- Certificate logged in CT
- We matched its certificate name
- Latest DNS check
- Certificate
- Issued by WE1 · precertificateValid 2026-11-09 11:33 UTC to 2027-02-07 12:33 UTCLogged 2026-11-09 12:33 UTC in IPng Networks Halloumi2027h1, entry 426,324,116SHA-256 8728968e019029aa2b87816f189e80eb110bece2bb4a896f2ba9ac085b551d4dPublic key SHA-256 1d798e4f004cc20d14466a719662d18e8bb813a5ec90755ab9019273f5c2af98
- Addresses
- 104.21.63.251 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.173.177 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
- Cloudflare
- Cloudflare (104.21.63.251, 172.67.173.177): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Domain
- modnakiecka-off.shop
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-09 12:39 UTC
- aazzjo.mom US · AS13335 · Cloudflare, Inc.2 addressesListedCloudflareListed by NPA 165 (finance and insurance)MX absentSPF missingDMARC missingRegistered 59 d ago
DetailsHide details for aazzjo.mom
- Hostname
- aazzjo.mom
- First seen
- 2026-11-09 12:31 UTC
- Listing
- NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-09 01:35 UTC
- Listed
- NPA 165
- Observed in the NPA 165 feed
- Certificate logged in CT
- We matched its certificate name
- Latest DNS check
- Certificate
- Issued by YE2Valid 2026-11-09 11:29 UTC to 2027-02-07 11:29 UTCLogged 2026-11-09 12:27 UTC in Google ParcelYard2027h1, entry 697,637,337SHA-256 5f4f94dc00a049e3fc03ec6a0ee33cbeaaa8a8233658d032a021b15b30bbbb26Public key SHA-256 8e0af5a525f00baa67b4814ffa4c07fcb2c4cbc43df92fa4015b18ac64497881
- Addresses
- 104.21.48.82 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.182.136 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
- Cloudflare
- Cloudflare (104.21.48.82, 172.67.182.136): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Domain
- aazzjo.mom
- Registered
- 2026-09-11 · Dynadot Inc
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-09 13:10 UTC
- ajufeey.xyz US · AS13335 · Cloudflare, Inc.2 addressesListedCloudflareListed by NPA 165 (e-commerce)MX absentSPF missingDMARC missingRegistered 8 mo ago
DetailsHide details for ajufeey.xyz
- Hostname
- ajufeey.xyz
- First seen
- 2026-11-09 12:31 UTC
- Listing
- NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-09 01:35 UTC
- Listed
- NPA 165
- Observed in the NPA 165 feed
- Certificate logged in CT
- We matched its certificate name
- Latest DNS check
- Certificate
- Issued by YE1Valid 2026-11-09 11:29 UTC to 2027-02-07 11:29 UTCLogged 2026-11-09 12:27 UTC in Google PlumbersArms2027h1, entry 697,920,038SHA-256 8ec86e84aee4f26f5a81869f44751c529419c7acfb99444c62db518cf00b77dfPublic key SHA-256 7b4a8eb6286523deb7fb74ce519edf49d3dfd1fa6de95c82b2338d52f568338a
- Addresses
- 104.21.64.241 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.138.44 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
- Cloudflare
- Cloudflare (104.21.64.241, 172.67.138.44): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Domain
- ajufeey.xyz
- Registered
- 2026-03-18 · GoDaddy.com, LLC
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-09 13:10 UTC
- alfcasino.games US · AS13335 · Cloudflare, Inc.2 addressesReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 10 mo ago
DetailsHide details for alfcasino.games
- Hostname
- alfcasino.games
- First seen
- 2026-11-09 12:31 UTC
- Listing
- PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-09 11:59 UTC
- Reported
- PhishDestroy
- Observed in the PhishDestroy feed
- Certificate logged in CT
- We matched its certificate name
- Latest DNS check
- Certificate
- Issued by WE1 · precertificateValid 2026-11-09 11:28 UTC to 2027-02-07 12:26 UTCLogged 2026-11-09 12:28 UTC in Geomys Tuscolo2027h1, entry 544,231,245SHA-256 35b340c51a9cadf7704f97f525fe3c612addb87b044eeef255894ea13713d020Public key SHA-256 cfb17e5ddba7a8a6f206e2f37bab338c63b467c94ca9c2c6e384cdcf401aed3f
- PhishDestroy
- Addresses
- 104.21.75.109 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.221.200 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
- Cloudflare
- Cloudflare (104.21.75.109, 172.67.221.200): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Domain
- alfcasino.games
- Registered
- 2026-01-18 · NICENIC INTERNATIONAL GROUP CO., LIMITED
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-09 13:10 UTC
- apps-ledgre-live.pages.dev US · AS13335 · Cloudflare, Inc.2 addressesListedCloudflareListed by MetaMask
DetailsHide details for apps-ledgre-live.pages.dev
- Hostname
- apps-ledgre-live.pages.dev
- First seen
- 2026-11-09 12:31 UTC
- Listing
- MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-09 12:00 UTC
- Listed
- MetaMask
- Observed in the MetaMask feed
- Certificate logged in CT
- We matched its certificate name
- Latest DNS check
- Certificate
- Issued by WE1 · precertificateValid 2026-11-09 11:28 UTC to 2027-02-07 12:25 UTCLogged 2026-11-09 12:28 UTC in Google PlumbersArms2027h1, entry 697,925,320SHA-256 0313cc05348015ce00c6b95ee0402ea84b171e688b4a9a5a2f8c111c48e598fePublic key SHA-256 3cdeb5691b29d0d23e77e43cc678416aa786d37086889f33085f2d93cf145c55
- Addresses
- 172.66.44.145 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.66.47.111 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
- Cloudflare
- Cloudflare (172.66.44.145, 172.66.47.111): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- darknetfaq.com US · AS13335 · Cloudflare, Inc.2 addressesReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 4 y ago
DetailsHide details for darknetfaq.com
- Hostname
- darknetfaq.com
- First seen
- 2026-11-09 12:31 UTC
- Listing
- PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-09 11:59 UTC
- Reported
- PhishDestroy
- Observed in the PhishDestroy feed
- Certificate logged in CT
- We matched its certificate name
- Latest DNS check
- Certificate
- Issued by WE1 · precertificateValid 2026-11-09 11:29 UTC to 2027-02-07 12:28 UTCLogged 2026-11-09 12:29 UTC in DigiCert Sphinx2027h1, entry 414,546,415SHA-256 572177fed973511524e99264a0aeccc3a3af491f1282bf5a073474f524a2993ePublic key SHA-256 b2883d4243cda7ad4091bd26baa8ee7642ef1e353cf8e93b0b539b1f5b861293
- PhishDestroy
- Addresses
- 104.21.42.39 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.156.22 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
- Cloudflare
- Cloudflare (104.21.42.39, 172.67.156.22): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Domain
- darknetfaq.com
- Registered
- 2022-10-24 · Eranet International Limited
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-09 13:10 UTC
- frumzi-casino6.com US · AS13335 · Cloudflare, Inc.2 addressesReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 9 mo ago
DetailsHide details for frumzi-casino6.com
- Hostname
- frumzi-casino6.com
- First seen
- 2026-11-09 12:31 UTC
- Listing
- PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-09 11:59 UTC
- Reported
- PhishDestroy
- Observed in the PhishDestroy feed
- Certificate logged in CT
- We matched its certificate name
- Latest DNS check
- Certificate
- Issued by WE1 · precertificateValid 2026-11-09 11:26 UTC to 2027-02-07 12:26 UTCLogged 2026-11-09 12:26 UTC in DigiCert Sphinx2027h1, entry 414,522,451SHA-256 0e18e83c830d393795c8fa3947e58a84bed3aede3e531fad9bf0afd4e674de94Public key SHA-256 b69771e3d52b7e8200f017b21dfbcf2f86aafb994470eb0b89259bb3bfe070ef
- PhishDestroy
- Addresses
- 104.21.6.139 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.154.228 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
- Cloudflare
- Cloudflare (104.21.6.139, 172.67.154.228): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Domain
- frumzi-casino6.com
- Registered
- 2026-02-02 · Atak Domain Bilgi Teknolojileri A.S.
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-09 13:10 UTC
- lbqkg.com US · AS13335 · Cloudflare, Inc.2 addressesListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 6 mo ago
DetailsHide details for lbqkg.com
- Hostname
- lbqkg.com
- First seen
- 2026-11-09 12:31 UTC
- Listing
- CERT Polska listed it 2026-05-18 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-09 12:37 UTC
- Listed
- CERT Polska
- Listed by CERT Polska
- Certificate logged in CT
- We matched its certificate name
- Latest DNS check
- Certificate
- Issued by YE1 · precertificateValid 2026-11-09 11:28 UTC to 2027-02-07 11:28 UTCLogged 2026-11-09 12:26 UTC in IPng Networks Halloumi2027h1, entry 426,251,727SHA-256 03a1d5c67b538ea191baadfd76ca251e9c171bbdcd38c74f7b6f23e0ceb0aa47Public key SHA-256 6e96a669fe78ff70b635fbaf095e9be5acf748753f8611ea80e0b076e5fc3029
- Addresses
- 104.21.62.213 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.139.88 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
- Cloudflare
- Cloudflare (104.21.62.213, 172.67.139.88): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Domain
- lbqkg.com
- Registered
- 2026-05-16 · Cloud Yuqu LLC
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-09 13:10 UTC
- mafia-casinos-france.com US · AS13335 · Cloudflare, Inc.2 addressesReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 7 mo ago
DetailsHide details for mafia-casinos-france.com
- Hostname
- mafia-casinos-france.com
- First seen
- 2026-11-09 12:31 UTC
- Listing
- PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-09 11:59 UTC
- Reported
- PhishDestroy
- Observed in the PhishDestroy feed
- Certificate logged in CT
- We matched its certificate name
- Latest DNS check
- Certificate
- Issued by WE1 · precertificateValid 2026-11-09 11:28 UTC to 2027-02-07 12:28 UTCLogged 2026-11-09 12:28 UTC in DigiCert Sphinx2027h1, entry 414,539,734SHA-256 2bcc288eea7edbef54d0cc89e77561ecca0ec35a0e9c939bbed6e692aed5ac1ePublic key SHA-256 a108b227244b3fd1109135790d0c5cc35a50688e6abd0901c41c9da2adcdc339
- PhishDestroy
- Addresses
- 104.21.31.129 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.176.136 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
- Cloudflare
- Cloudflare (104.21.31.129, 172.67.176.136): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Domain
- mafia-casinos-france.com
- Registered
- 2026-04-09 · Atak Domain Bilgi Teknolojileri A.S.
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-09 13:10 UTC
- opendota.net US · AS13335 · Cloudflare, Inc.2 addressesReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 12 mo ago
DetailsHide details for opendota.net
- Hostname
- opendota.net
- First seen
- 2026-11-09 12:31 UTC
- Listing
- PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-09 11:59 UTC
- Reported
- PhishDestroy
- Observed in the PhishDestroy feed
- Certificate logged in CT
- We matched its certificate name
- Latest DNS check
- Certificate
- Issued by WE1Valid 2026-09-11 10:46 UTC to 2026-12-10 11:43 UTCLogged 2026-11-09 12:27 UTC in DigiCert Wyvern2026h2, entry 2,214,299,037SHA-256 5f83222b26970891d4c41e0ae259996f176fd645351e33c28016ee084437602ePublic key SHA-256 f9b75180572dc51844abb7b224c96f4c8f5b4bcd437633e052c61c795412eac2
- PhishDestroy
- Addresses
- 104.21.75.60 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.214.249 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
- Cloudflare
- Cloudflare (104.21.75.60, 172.67.214.249): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Domain
- opendota.net
- Registered
- 2025-11-20 · NICENIC INTERNATIONAL GROUP CO., LIMITED
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-09 13:10 UTC
- qzovarel-official.com US · AS13335 · Cloudflare, Inc.2 addressesListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 4 mo ago
DetailsHide details for qzovarel-official.com
- Hostname
- qzovarel-official.com
- First seen
- 2026-11-09 12:31 UTC
- Listing
- CERT Polska listed it 2026-09-11 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-09 12:37 UTC
- Listed
- CERT Polska
- Listed by CERT Polska
- Certificate logged in CT
- We matched its certificate name
- Latest DNS check
- Certificate
- Issued by WE1 · precertificateValid 2026-11-09 11:28 UTC to 2027-02-07 12:27 UTCLogged 2026-11-09 12:28 UTC in Let's Encrypt Willow2027h1, entry 1,039,830,068SHA-256 451b312b36f7e1da539a810258ca91a520d39547a2b29f284ac66916b67c4f77Public key SHA-256 41b0d18895ffe41a0cf37ea4fd2f03c677624935212dc5cbe4768ee754cb7744
- Addresses
- 104.21.79.128 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.145.174 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
- Cloudflare
- Cloudflare (104.21.79.128, 172.67.145.174): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Domain
- qzovarel-official.com
- Registered
- 2026-07-14 · Dynadot Inc
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-09 13:10 UTC
- s2-quant.network US · AS13335 · Cloudflare, Inc.2 addressesReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 12 mo ago
DetailsHide details for s2-quant.network
- Hostname
- s2-quant.network
- First seen
- 2026-11-09 12:31 UTC
- Listing
- PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-09 11:59 UTC
- Reported
- PhishDestroy
- Observed in the PhishDestroy feed
- Certificate logged in CT
- We matched its certificate name
- Latest DNS check
- Certificate
- Issued by WE1Valid 2026-11-09 11:27 UTC to 2027-02-07 12:25 UTCLogged 2026-11-09 12:30 UTC in DigiCert Wyvern2027h1, entry 468,166,785SHA-256 4c7668e152eebbe05c3262eb1da9c377f4d54108b7ea63e3de778df2d5d35a6ePublic key SHA-256 9dc7bf948cca4ad5385aa3c633e1ae5da4e35ac4455855c38edc76ff7354c515
- PhishDestroy
- Addresses
- 104.21.67.223 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.182.14 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
- Cloudflare
- Cloudflare (104.21.67.223, 172.67.182.14): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Domain
- s2-quant.network
- Registered
- 2025-11-19 · Dynadot Inc
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-09 12:34 UTC
- vaxubai.pro US · AS13335 · Cloudflare, Inc.2 addressesListedCloudflareListed by CERT PolskaMX presentSPF missingDMARC missingRegistered 4 mo ago
DetailsHide details for vaxubai.pro
- Hostname
- vaxubai.pro
- First seen
- 2026-11-09 12:31 UTC
- Listing
- CERT Polska listed it 2026-07-20 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-09 12:37 UTC
- Listed
- CERT Polska
- Listed by CERT Polska
- Certificate logged in CT
- We matched its certificate name
- Latest DNS check
- Certificate
- Issued by WE1 · precertificateValid 2026-11-09 11:28 UTC to 2027-02-07 12:27 UTCLogged 2026-11-09 12:28 UTC in IPng Networks Halloumi2027h1, entry 426,272,358SHA-256 329ba18d388b10c8a8eb8456f34928f016a5e0c923612f96ad5a8438d266b44fPublic key SHA-256 0992a9d7bf4a49934f6601ad7ed6a948e0197743de55483452adf93ee7d0d629
- Addresses
- 104.21.22.175 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.205.247 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
- Cloudflare
- Cloudflare (104.21.22.175, 172.67.205.247): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Domain
- vaxubai.pro
- Registered
- 2026-07-14 · NameCheap, Inc.
- MX
- Receives mail at mail.vaxubai.pro
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-09 13:10 UTC
- bitmarrt.trade US · AS13335 · Cloudflare, Inc.2 addressesListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 4 mo ago
DetailsHide details for bitmarrt.trade
- Hostname
- bitmarrt.trade
- First seen
- 2026-11-09 12:26 UTC
- Listing
- MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-09 12:00 UTC
- Listed
- MetaMask
- Observed in the MetaMask feed
- Certificate logged in CT
- We matched its certificate name
- Latest DNS check
- Certificate
- Issued by WE1 · precertificateValid 2026-11-09 11:24 UTC to 2027-02-07 12:21 UTCLogged 2026-11-09 12:24 UTC in Geomys Tuscolo2027h1, entry 544,183,105SHA-256 dadf9389233d8fb2d4c0556312e33d873180e176ff1acad96535c53d1b830e7aPublic key SHA-256 1cdd16d095b24acef92a28ef44bac761d731d346af26eaf1c6b1467ec8b46f04
- Addresses
- 104.21.31.71 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.175.65 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
- Cloudflare
- Cloudflare (104.21.31.71, 172.67.175.65): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Domain
- bitmarrt.trade
- Registered
- 2026-07-14 · Gname.com Pte. Ltd.
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-09 12:27 UTC
- cashcat.onsol.fun US · AS13335 · Cloudflare, Inc.2 addressesReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 4 mo ago
DetailsHide details for cashcat.onsol.fun
- Hostname
- cashcat.onsol.fun
- First seen
- 2026-11-09 12:26 UTC
- Listing
- PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-09 11:59 UTC
- Reported
- PhishDestroy
- Observed in the PhishDestroy feed
- Certificate logged in CT
- We matched its certificate name
- Latest DNS check
- Certificate
- Issued by WE1 · precertificateValid 2026-11-09 11:22 UTC to 2027-02-07 12:21 UTCLogged 2026-11-09 12:22 UTC in Google PlumbersArms2027h1, entry 697,846,990SHA-256 3fcf3625ab8d4f5da9986a3f2e42360e52a71f9c921bc34e9151ad2c7abfd414Public key SHA-256 33ae32602f9250cd5f92f9f08bd6a29e2988b1ae75804fe16067818938869d0c
- PhishDestroy
- Addresses
- 104.21.42.187 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.208.92 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
- Cloudflare
- Cloudflare (104.21.42.187, 172.67.208.92): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Domain
- onsol.fun
- Registered
- 2026-07-14 · NICENIC INTERNATIONAL GROUP CO., LIMITED
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-09 13:10 UTC
- changeiiy.to US · AS13335 · Cloudflare, Inc.2 addressesReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 12 mo ago
DetailsHide details for changeiiy.to
- Hostname
- changeiiy.to
- First seen
- 2026-11-09 12:26 UTC
- Listing
- PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-09 11:59 UTC
- Reported
- PhishDestroy
- Observed in the PhishDestroy feed
- Certificate logged in CT
- We matched its certificate name
- Latest DNS check
- Certificate
- Issued by WE1 · precertificateValid 2026-11-09 11:25 UTC to 2027-02-07 12:22 UTCLogged 2026-11-09 12:25 UTC in DigiCert Sphinx2027h1, entry 414,515,653SHA-256 902509f733e8484041735ec5e14181e3a182a8398573b8261ddf26677111f275Public key SHA-256 6aec89a0ffccd6b5843f08fdee88a6e6deee4f71fd5ce7b4fee5ad7b4b7c5d43
- PhishDestroy
- Addresses
- 104.21.58.228 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.165.215 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
- Cloudflare
- Cloudflare (104.21.58.228, 172.67.165.215): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Domain
- changeiiy.to
- Registered
- 2025-11-19 · Tonic
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-09 13:10 UTC
- crownlessgame.app US · AS13335 · Cloudflare, Inc.2 addressesReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 12 mo ago
DetailsHide details for crownlessgame.app
- Hostname
- crownlessgame.app
- First seen
- 2026-11-09 12:26 UTC
- Listing
- PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-09 11:59 UTC
- Reported
- PhishDestroy
- Observed in the PhishDestroy feed
- Certificate logged in CT
- We matched its certificate name
- Latest DNS check
- Certificate
- Issued by WE1 · precertificateValid 2026-11-09 11:21 UTC to 2027-02-07 12:20 UTCLogged 2026-11-09 12:21 UTC in Geomys Tuscolo2027h1, entry 544,151,475SHA-256 38cb41b4faeb289593046edda610d305b3a8a7005d45fef20f7828399165311dPublic key SHA-256 a3763647d9f94a4f3b60ccc8caa84a6411e3e7ec476ab656fecc4baf5cbe3270
- PhishDestroy
- Addresses
- 104.21.60.2 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.186.161 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
- Cloudflare
- Cloudflare (104.21.60.2, 172.67.186.161): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Domain
- crownlessgame.app
- Registered
- 2025-11-19 · PDR Ltd. d/b/a PublicDomainRegistry.com
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-09 13:10 UTC
- kxrhj.asia US · AS13335 · Cloudflare, Inc.2 addressesListedCloudflareListed by NPA 165 (information services)MX absentSPF missingDMARC missingRegistered 4 mo ago
DetailsHide details for kxrhj.asia
- Hostname
- kxrhj.asia
- First seen
- 2026-11-09 12:26 UTC
- Listing
- NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-09 01:35 UTC
- Listed
- NPA 165
- Observed in the NPA 165 feed
- Certificate logged in CT
- We matched its certificate name
- Latest DNS check
- Certificate
- Issued by WE1 · precertificateValid 2026-11-09 11:21 UTC to 2027-02-07 12:20 UTCLogged 2026-11-09 12:21 UTC in Google PlumbersArms2027h1, entry 697,829,149SHA-256 74fa0914ac3d783e6a23597c2791a71bd7748de0c621443f82f165336f25e1baPublic key SHA-256 89020209cfaebaf5aad01afe309c7ad77b2f9685b6f80b5b7ee42f9c3c66a1fd
- Addresses
- 104.21.36.17 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.183.18 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
- Cloudflare
- Cloudflare (104.21.36.17, 172.67.183.18): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Domain
- kxrhj.asia
- Registered
- 2026-07-14 · Alibaba Cloud Computing Ltd. d/b/a HiChina (www.net.cn)
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-09 13:10 UTC
- ListedCloudflareUnder curve-finance.com.mx, listed by MetaMaskMX absentSPF missingDMARC missing
DetailsHide details for www.curve-finance.com.mx
- Hostname
- www.curve-finance.com.mx
- First seen
- 2026-11-09 12:26 UTC
- Listing
- MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-09 12:00 UTC
- Listed
- MetaMask, listing curve-finance.com.mx and the names under it
- Observed in the MetaMask feed
- Certificate logged in CT
- We matched its certificate name
- Latest DNS check
- Certificate
- Issued by WR1 · precertificateValid 2026-11-09 11:22 UTC to 2027-02-07 12:19 UTCLogged 2026-11-09 12:22 UTC in DigiCert Wyvern2027h1, entry 468,090,330SHA-256 3dbd368fd3faafde353d4af0e1f6a9841186ce1c1d5944a2c84d7b48e172ccb2Public key SHA-256 fd4f9cb8297afb11def47492be80828cc67d5cad6d67a33309c8bcaf7477b8c2
- Brand
- Curve Finance
- Addresses
- 104.21.60.38 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.191.112 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3031::ac43:bf702606:4700:3037::6815:3c26
- Cloudflare
- Cloudflare (104.21.60.38, 172.67.191.112): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Domain
- curve-finance.com.mx
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-09 10:42 UTC
- zebec-superapp.org US · AS13335 · Cloudflare, Inc.2 addressesListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 4 mo ago
DetailsHide details for zebec-superapp.org
- Hostname
- zebec-superapp.org
- First seen
- 2026-11-09 12:26 UTC
- Listing
- MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-09 12:00 UTC
- Listed
- MetaMask
- Observed in the MetaMask feed
- Certificate logged in CT
- We matched its certificate name
- Latest DNS check
- Certificate
- Issued by WE1Valid 2026-11-09 11:23 UTC to 2027-02-07 12:22 UTCLogged 2026-11-09 12:24 UTC in DigiCert Wyvern2027h1, entry 468,116,607SHA-256 41cc7171016a8c77f8a126b8d428994aba3f6d5616baadcbbac30e57a3fad44ePublic key SHA-256 9aa546e5a9014e311a3ef74d8b6bcec9578acab8f669ba73ed0356cde3ccaa18
- Addresses
- 104.21.45.186 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.218.66 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
- Cloudflare
- Cloudflare (104.21.45.186, 172.67.218.66): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Domain
- zebec-superapp.org
- Registered
- 2026-07-08 · Tucows Domains Inc.
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-09 13:10 UTC
- zebec-supperapp.net US · AS13335 · Cloudflare, Inc.2 addressesListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 4 mo ago
DetailsHide details for zebec-supperapp.net
- Hostname
- zebec-supperapp.net
- First seen
- 2026-11-09 12:26 UTC
- Listing
- MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-09 12:00 UTC
- Listed
- MetaMask
- Observed in the MetaMask feed
- Certificate logged in CT
- We matched its certificate name
- Latest DNS check
- Certificate
- Issued by WE1Valid 2026-11-09 11:22 UTC to 2027-02-07 12:21 UTCLogged 2026-11-09 12:22 UTC in Sectigo Statue2027h1, entry 105,378,478SHA-256 089cd3dcc5991091547aa12655032eacef11de8fa740c9e9e2c97c2ffc63086aPublic key SHA-256 ce87e9bc8964946e75fd81603ef6c8c56dc9a007ca59fce243a711b09509fe17
- Addresses
- 104.21.13.112 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.155.225 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
- Cloudflare
- Cloudflare (104.21.13.112, 172.67.155.225): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Domain
- zebec-supperapp.net
- Registered
- 2026-07-08 · Tucows Domains Inc.
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-09 13:10 UTC
- 2fawalletauthenticator.us US · AS13335 · Cloudflare, Inc.2 addressesListedCloudflareListed by MetaMaskMX presentSPF ~allDMARC policy noneRegistered 59 d ago
DetailsHide details for 2fawalletauthenticator.us
- Hostname
- 2fawalletauthenticator.us
- First seen
- 2026-11-09 12:20 UTC
- Listing
- MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-09 12:00 UTCPhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-09 11:59 UTC
- Listed
- MetaMask
- Observed in the MetaMask feed
- Certificate logged in CT
- We matched its certificate name
- Latest DNS check
- Certificate
- Issued by YE2 · precertificateValid 2026-11-09 11:21 UTC to 2027-02-07 11:21 UTCLogged 2026-11-09 12:20 UTC in DigiCert Sphinx2027h1, entry 414,461,849SHA-256 9b31f75fdc2d9e83194600e6242e817582818a05e4eab717afb8269416bfeeb4Public key SHA-256 575f3bb76c27ef98849a75197a05aec3329bc5fc2e9237f277e088cf2de3569f
- Addresses
- 104.21.12.223 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.196.128 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
- Cloudflare
- Cloudflare (104.21.12.223, 172.67.196.128): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Domain
- 2fawalletauthenticator.us
- Registered
- 2026-09-11 · NameSilo, LLC
- MX
- Receives mail at _dc-mx.1e8ed4eb9e25.2fawalletauthenticator.us
- SPF
- SPF record with ~all: other senders soft-fail
- DMARC
- DMARC policy p=none: reports only
- Checked
- 2026-11-09 13:10 UTC
- aboutyou.svip-pl.com US · AS13335 · Cloudflare, Inc.2 addressesListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 4 mo ago
DetailsHide details for aboutyou.svip-pl.com
- Hostname
- aboutyou.svip-pl.com
- First seen
- 2026-11-09 12:20 UTC
- Listing
- CERT Polska listed it 2026-07-14 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-09 12:37 UTCCERT Polska listed it 2026-07-15 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-09 12:37 UTCPhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-09 11:59 UTC
- Listed
- CERT Polska
- Listed by CERT Polska
- Certificate logged in CT
- We matched its certificate name
- Latest DNS check
- Certificate
- Issued by WE1Valid 2026-09-11 09:42 UTC to 2026-12-10 10:42 UTCLogged 2026-11-09 12:16 UTC in DigiCert Wyvern2026h2, entry 2,214,280,574SHA-256 aa3d3209491f6f6d2bdfedda50916fa4b3595c7e76b18936d38d6304f07a542ePublic key SHA-256 7592b5c362835ce26386df5aad162f180e34d1c47162b817a139b1f9cb725fd4
- Addresses
- 104.21.25.164 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.134.98 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
- Cloudflare
- Cloudflare (104.21.25.164, 172.67.134.98): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Domain
- svip-pl.com
- Registered
- 2026-07-14 · Spaceship, Inc.
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-09 11:12 UTC
- bytexa.vip US · AS13335 · Cloudflare, Inc.2 addressesListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 4 mo ago
DetailsHide details for bytexa.vip
- Hostname
- bytexa.vip
- First seen
- 2026-11-09 12:20 UTC
- Listing
- CERT Polska listed it 2026-07-19 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-09 12:37 UTC
- Listed
- CERT Polska
- Listed by CERT Polska
- Certificate logged in CT
- We matched its certificate name
- Latest DNS check
- Certificate
- Issued by WE1 · precertificateValid 2026-11-09 11:17 UTC to 2027-02-07 12:15 UTCLogged 2026-11-09 12:17 UTC in Google ParcelYard2027h1, entry 697,479,741SHA-256 0f588e15ce7d37b212a27479e0f03b37d3baa066254107d8937cd0257d66c5ecPublic key SHA-256 8f7f0ca6e7a7274d1da8d781f6fd6e46c7f1995dbc94f42ec6d12c422cfaf2a6
- Addresses
- 104.21.94.206 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.139.209 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
- Cloudflare
- Cloudflare (104.21.94.206, 172.67.139.209): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Domain
- bytexa.vip
- Registered
- 2026-07-14 · Dynadot Inc
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-09 13:10 UTC
- ddqqjm.cfd US · AS13335 · Cloudflare, Inc.2 addressesListedCloudflareListed by NPA 165 (information services)MX absentSPF missingDMARC missingRegistered 59 d ago
DetailsHide details for ddqqjm.cfd
- Hostname
- ddqqjm.cfd
- First seen
- 2026-11-09 12:20 UTC
- Listing
- NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-09 01:35 UTC
- Listed
- NPA 165
- Observed in the NPA 165 feed
- Certificate logged in CT
- We matched its certificate name
- Latest DNS check
- Certificate
- Issued by YE1Valid 2026-11-09 11:17 UTC to 2027-02-07 11:17 UTCLogged 2026-11-09 12:15 UTC in Google ParcelYard2027h1, entry 697,461,410SHA-256 2dd72ec1f4b6088bb332d2151959e653ae74394d28f5a462238b500de0c9e5f4Public key SHA-256 f0e5f1d0fd6161626ffda91e126039565c8efd565b93746f0c5180b84de89d47
- Addresses
- 104.21.53.195 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.217.248 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
- Cloudflare
- Cloudflare (104.21.53.195, 172.67.217.248): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Domain
- ddqqjm.cfd
- Registered
- 2026-09-11 · Dynadot Inc
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-09 13:10 UTC
- haopingwuxing.com US · AS13335 · Cloudflare, Inc.2 addressesListedCloudflareListed by NPA 165 (information services)MX absentSPF missingDMARC missingRegistered 4 mo ago
DetailsHide details for haopingwuxing.com
- Hostname
- haopingwuxing.com
- First seen
- 2026-11-09 12:20 UTC
- Listing
- NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-09 01:35 UTC
- Listed
- NPA 165
- Observed in the NPA 165 feed
- Certificate logged in CT
- We matched its certificate name
- Latest DNS check
- Certificate
- Issued by WE1Valid 2026-09-11 14:30 UTC to 2026-12-10 15:30 UTCLogged 2026-11-09 12:19 UTC in DigiCert Wyvern2026h2, entry 2,214,285,881SHA-256 f277f12b3f9f5104d384e629239b07d4bd0175966760263fbb544a636c3ab145Public key SHA-256 e820c65f39232280264696a3ea667190689bd64b5b776361611c1d66ca557ff1
- Addresses
- 104.21.58.102 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.159.1 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
- Cloudflare
- Cloudflare (104.21.58.102, 172.67.159.1): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Domain
- haopingwuxing.com
- Registered
- 2026-07-14 · Cloudflare, Inc.
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-09 13:10 UTC
- jwzsc.asia US · AS13335 · Cloudflare, Inc.2 addressesListedCloudflareListed by NPA 165 (information services)MX absentSPF missingDMARC missingRegistered 4 mo ago
DetailsHide details for jwzsc.asia
- Hostname
- jwzsc.asia
- First seen
- 2026-11-09 12:20 UTC
- Listing
- NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-09 01:35 UTC
- Listed
- NPA 165
- Observed in the NPA 165 feed
- Certificate logged in CT
- We matched its certificate name
- Latest DNS check
- Certificate
- Issued by WE1 · precertificateValid 2026-11-09 11:19 UTC to 2027-02-07 12:17 UTCLogged 2026-11-09 12:19 UTC in Google ParcelYard2027h1, entry 697,509,720SHA-256 b6d720339be424d0ccb0b6506581da2d4abb14d7b1e8be99f14d8d42bf4c6882Public key SHA-256 2edd96c55afeeb44184b838dffb172b1e5db3ef52006f3b1fe8410c9b6fe0aea
- Addresses
- 104.21.20.109 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.192.91 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
- Cloudflare
- Cloudflare (104.21.20.109, 172.67.192.91): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Domain
- jwzsc.asia
- Registered
- 2026-07-14 · Alibaba Cloud Computing Ltd. d/b/a HiChina (www.net.cn)
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-09 13:10 UTC
- lighters.digital US · AS13335 · Cloudflare, Inc.2 addressesListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 6 mo ago
DetailsHide details for lighters.digital
- Hostname
- lighters.digital
- First seen
- 2026-11-09 12:20 UTC
- Listing
- MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-09 12:00 UTC
- Listed
- MetaMask
- Observed in the MetaMask feed
- Certificate logged in CT
- We matched its certificate name
- Latest DNS check
- Certificate
- Issued by YE1Valid 2026-11-09 11:17 UTC to 2027-02-07 11:17 UTCLogged 2026-11-09 12:15 UTC in Google ParcelYard2027h1, entry 697,461,919SHA-256 1d824c529ba150eec9092bc9383180f2fea31bd8a7c27aef5e6449b4f2f6e057Public key SHA-256 b7ce2e3618e0702a792d4fa08a950ee1ba6fa0bcd21010d26a5fd6b80d6414d9
- Addresses
- 104.21.60.245 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.202.202 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
- Cloudflare
- Cloudflare (104.21.60.245, 172.67.202.202): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Domain
- lighters.digital
- Registered
- 2026-05-15 · PDR Ltd. d/b/a PublicDomainRegistry.com
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-09 13:10 UTC
- stackiq.vip US · AS13335 · Cloudflare, Inc.2 addressesListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 4 mo ago
DetailsHide details for stackiq.vip
- Hostname
- stackiq.vip
- First seen
- 2026-11-09 12:20 UTC
- Listing
- CERT Polska listed it 2026-10-22 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-09 12:37 UTC
- Listed
- CERT Polska
- Listed by CERT Polska
- Certificate logged in CT
- We matched its certificate name
- Latest DNS check
- Certificate
- Issued by WE1 · precertificateValid 2026-11-09 11:19 UTC to 2027-02-07 12:18 UTCLogged 2026-11-09 12:19 UTC in Google PlumbersArms2027h1, entry 697,798,937SHA-256 86cc0ee2e87ee6bfdc38d1296a1ad4d3c6a74e0ed125f163b4e1e95078fab52fPublic key SHA-256 8281888e873f8b6a675c1fcbc8988e0cf91e76c9179bb0fbf386b88d97f3e96d
- Addresses
- 104.21.15.159 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.163.27 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
- Cloudflare
- Cloudflare (104.21.15.159, 172.67.163.27): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Domain
- stackiq.vip
- Registered
- 2026-07-14 · Dynadot Inc
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-09 13:10 UTC
- atuboasset.com US · AS13335 · Cloudflare, Inc.ListedCloudflareListed by NPA 165 (finance and insurance)MX presentSPF ~allDMARC missingRegistered 4 mo ago
DetailsHide details for atuboasset.com
- Hostname
- atuboasset.com
- First seen
- 2026-11-09 12:15 UTC
- Listing
- NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-09 01:35 UTC
- Listed
- NPA 165
- Observed in the NPA 165 feed
- Certificate logged in CT
- We matched its certificate name
- Latest DNS check
- Certificate
- Issued by WE1 · precertificateValid 2026-11-09 11:12 UTC to 2027-02-07 12:12 UTCLogged 2026-11-09 12:12 UTC in Google PlumbersArms2027h1, entry 697,707,258SHA-256 43089f5ed63979aa9754d24f96e4f0c45351a81fdcfed58655db04893f3775e2Public key SHA-256 9453c779ebf30a7de147e8d1a4a00e6239508622e0d02772ff1f53ec8b9bfbf7
- Addresses
- 104.18.220.38 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
- Cloudflare
- Cloudflare (104.18.220.38): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Domain
- atuboasset.com
- Registered
- 2026-07-14 · NameCheap, Inc.
- MX
- Receives mail at eforward1.registrar-servers.com, eforward2.registrar-servers.com, eforward3.registrar-servers.com
- SPF
- SPF record with ~all: other senders soft-fail
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-09 13:10 UTC
- capitalflowtrader.com US · AS13335 · Cloudflare, Inc.3 addressesListedCloudflareListed by MetaMaskMX presentSPF -allDMARC quarantineRegistered 24 mo ago
DetailsHide details for capitalflowtrader.com
- Hostname
- capitalflowtrader.com
- First seen
- 2026-11-09 12:15 UTC
- Listing
- MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-09 12:00 UTCPhishDestroy: observed back in the feed 2026-11-02 · still listed at the last successful feed check 2026-11-09 11:59 UTC · listed 2 timesEarlier listing periods: 2026-10-25 to 2026-11-01 (7 days)
- Listed
- MetaMask
- Observed in the MetaMask feed
- Certificate logged in CT
- We matched its certificate name
- Latest DNS check
- Certificate
- Issued by YE2Valid 2026-11-09 11:16 UTC to 2027-02-07 11:16 UTCLogged 2026-11-09 12:14 UTC in Google PlumbersArms2027h1, entry 697,729,274SHA-256 416410936602413725cf5cdff08c156a7fb5d20134df22b26972cc5f879b4794Public key SHA-256 709da8e0f0b0ad5cdf0d993853910f217ae647a95f3c67680dcece9e03cf13fa
- Addresses
- 104.26.12.142 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)104.26.13.142 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.68.71 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
- Cloudflare
- Cloudflare (104.26.12.142, 104.26.13.142, 172.67.68.71): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Domain
- capitalflowtrader.com
- Registered
- 2024-11-22 · GoDaddy.com, LLC
- MX
- Receives mail at capitalflowtrader-com.mail.protection.outlook.com
- SPF
- SPF record with -all: other senders fail
- DMARC
- DMARC policy p=quarantine
- Checked
- 2026-11-09 07:04 UTC
- capscutapk.com US · AS13335 · Cloudflare, Inc.2 addressesReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 3 y ago
DetailsHide details for capscutapk.com
- Hostname
- capscutapk.com
- First seen
- 2026-11-09 12:15 UTC
- Listing
- PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-09 11:59 UTC
- Reported
- PhishDestroy
- Observed in the PhishDestroy feed
- Certificate logged in CT
- We matched its certificate name
- Latest DNS check
- Certificate
- Issued by YR2 · precertificateValid 2026-11-09 11:15 UTC to 2027-02-07 11:15 UTCLogged 2026-11-09 12:13 UTC in DigiCert Sphinx2027h1, entry 414,392,866SHA-256 47333db9e3f68aaabeadd9c45d48ca5c26a7619c8b0a6ff53d74fba8fa9015e5Public key SHA-256 26465476b58402c18ad1f5a4c51fee26b032ea47e70a623128f3aae1a4a45cc5
- PhishDestroy
- Addresses
- 104.21.47.113 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.147.56 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
- Cloudflare
- Cloudflare (104.21.47.113, 172.67.147.56): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Domain
- capscutapk.com
- Registered
- 2023-06-01 · NameCheap, Inc.
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-09 13:10 UTC
- evisa-gov-tr.com US · AS13335 · Cloudflare, Inc.2 addressesListedCloudflareListed by USOMMX presentSPF ~allDMARC missingRegistered 5 mo ago
DetailsHide details for evisa-gov-tr.com
- Hostname
- evisa-gov-tr.com
- First seen
- 2026-11-09 12:15 UTC
- Listing
- USOM listed it 2026-06-27 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-09 11:41 UTC
- Listed
- USOM
- Listed by USOM
- Certificate logged in CT
- We matched its certificate name
- Latest DNS check
- Certificate
- Issued by WE1 · precertificateValid 2026-11-09 11:12 UTC to 2027-02-07 12:11 UTCLogged 2026-11-09 12:12 UTC in IPng Networks Halloumi2027h1, entry 426,099,381SHA-256 f17d4345a6e1218f713fcc9e837df12401199b4acd3e46603beaa28cf8522a6cPublic key SHA-256 10b0fb8c09e6190dd87e9bdbf3fbf2c86eeb3932673623ee926144802c236c04
- Addresses
- 104.21.73.204 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.192.36 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
- Cloudflare
- Cloudflare (104.21.73.204, 172.67.192.36): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Domain
- evisa-gov-tr.com
- Registered
- 2026-06-26 · BigRock Solutions Ltd
- MX
- Receives mail at _dc-mx.b80c487882a7.evisa-gov-tr.com
- SPF
- SPF record with ~all: other senders soft-fail
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-09 13:10 UTC
- metricsweb3.com US · AS13335 · Cloudflare, Inc.2 addressesReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 2 y ago
DetailsHide details for metricsweb3.com
- Hostname
- metricsweb3.com
- First seen
- 2026-11-09 12:15 UTC
- Listing
- PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-09 11:59 UTC
- Reported
- PhishDestroy
- Observed in the PhishDestroy feed
- Certificate logged in CT
- We matched its certificate name
- Latest DNS check
- Certificate
- Issued by WE1 · precertificateValid 2026-11-09 11:14 UTC to 2027-02-07 12:12 UTCLogged 2026-11-09 12:14 UTC in Google ParcelYard2027h1, entry 697,441,777SHA-256 61278327d27f6c67075630a161a2b9c162dae6b013ead44563cb236549d00f80Public key SHA-256 d314789f0c31a177b8e280641708f91a5da18e1ce3d30a984fec7b1442089cf7
- PhishDestroy
- Addresses
- 104.21.40.170 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.155.21 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
- Cloudflare
- Cloudflare (104.21.40.170, 172.67.155.21): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Domain
- metricsweb3.com
- Registered
- 2024-08-09 · NameCheap, Inc.
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-09 13:10 UTC
How these findings are made
Brand spoofs: findings that impersonate one of the 1,000 most-impersonated brands. The list opens on them; All shows every finding.
Reported: a hostname in a new certificate that PhishTank or PhishDestroy reports, or that CERT Polska, MetaMask, USOM, MODA, NPA 165, JPCERT/CC, the AMF, the FSMA or BaFin lists. When a listing source names the brand imitated or a category, the finding shows it. Phishing host: a brand lookalike that resolves to an address which hosted confirmed phishing in the last 48 hours. Spamhaus DROP: a brand lookalike that resolves to an address on the Spamhaus DROP list. Same certificate: another name on a finding's certificate that resolves to an address on Spamhaus DROP. Suspicious: other names on a finding's certificate, rated high for a hosting-alias name or a lookalike on a phishing host, medium for a lookalike; they join the findings once they have listing evidence of their own. Also under Suspicious: registered domains using a brand’s name that PhishDestroy’s community list includes, rated high when they resolve to an address with no parking or holding signal, medium otherwise.
Brand labels cover the 1,000 most-impersonated brands. A name gets a brand when the brand's token starts a label or follows a hyphen, with a lure word such as "login" or "verify" for common words. Hostnames appear as plain text. How it works · Sources

