Live

Live phishing findings

New certificates and domain registrations, with every hostname resolved and checked against phishing reports and bad-address lists. The newest findings, updated hourly.

Updated hourly · 2026-11-10 17:50 UTC
Certificate-log entries · 24 h
392.3M
from 84 distinct feeds
Unique certificates · 24 h
35.3M
each reviewed
Names resolved · 24 h
22.8M
16.8M with an address
Findings · 24 h
6,124
262 of 1,061 brands targeted

5,190 hostnames from the last 24 hours.

  1. enusapp-ledger.pages.dev US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMask
    DetailsHide
    Hostname
    enusapp-ledger.pages.dev
    First seen
    2026-11-10 17:00 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-10 12:03 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-10 15:59 UTC to 2027-02-08 16:56 UTC
    Logged 2026-11-10 16:59 UTC in DigiCert Wyvern2027h1, entry 485,991,209
    SHA-256 8c5025212da00b32d38732154e1001733cd59b39e883a55f613c1284cd2c936b
    Public key SHA-256 7bd748ab944ae4f6fe38075a58560ea13b1758e73044d91b24ab579b7c8c2ed0
    Addresses
    172.66.44.251 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.66.47.5 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (172.66.44.251, 172.66.47.5): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.

    Suggest a correction

  2. insert-trazor-bridge.pages.dev US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMask
    DetailsHide
    Hostname
    insert-trazor-bridge.pages.dev
    First seen
    2026-11-10 17:00 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-10 12:03 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-10 15:59 UTC to 2027-02-08 16:57 UTC
    Logged 2026-11-10 16:59 UTC in IPng Networks Halloumi2027h1, entry 443,782,535
    SHA-256 f1320ec979de49083e99ff1c960f7db22bc5e853fb5f8807f7ccad67c1b8098c
    Public key SHA-256 3adcc8be00517bb0864cef38778a52368db49a5f242d9bb602b7292f5c962677
    Addresses
    172.66.45.7 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.66.46.249 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (172.66.45.7, 172.66.46.249): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.

    Suggest a correction

  3. quinceshopping.store US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by NPA 165 (e-commerce)MX absentSPF missingDMARC quarantineRegistered 4 mo ago
    DetailsHide
    Hostname
    quinceshopping.store
    First seen
    2026-11-10 17:00 UTC
    Listing
    NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-10 13:37 UTC
    Listed
    NPA 165
    1. Observed in the NPA 165 feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by Cloudflare TLS Issuing ECC CA 4 · precertificate
    Valid 2026-11-10 16:49 UTC to 2027-02-08 16:57 UTC
    Logged 2026-11-10 16:59 UTC in Let's Encrypt Sycamore2027h1, entry 1,129,162,223
    SHA-256 1d5b86b2cf2d54e8fc15fc0bda422dca75a546837635d79da7207e1e32c42d69
    Public key SHA-256 a8ed379d32df2a3e10d3eeb80fe82fbf305fee2ab6882f473fe63c35d376f28b
    Addresses
    104.21.90.199 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.161.18 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.90.199, 172.67.161.18): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    quinceshopping.store
    Registered
    2026-07-14 · GoDaddy.com, LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    DMARC policy p=quarantine
    Checked
    2026-11-10 17:57 UTC

    Suggest a correction

  4. swap.atlasdao.app US · AS16509 · Amazon.com, Inc.2 addresses
    ListedAmazon Web ServicesUnder atlasdao.app, listed by MetaMaskMX presentSPF -allDMARC quarantineRegistered 9 mo ago
    DetailsHide
    Hostname
    swap.atlasdao.app
    First seen
    2026-11-10 17:00 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-10 12:03 UTC
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-10 12:02 UTC
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-10 12:02 UTC
    Listed
    MetaMask, listing atlasdao.app and the names under it
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR1 · precertificate
    Valid 2026-11-10 16:00 UTC to 2027-02-08 16:00 UTC
    Logged 2026-11-10 16:59 UTC in IPng Networks Halloumi2027h1, entry 443,782,994
    SHA-256 102d3807e9efc9b7087b7962491cf8bd6a277347359a3acdf34fc171c5a985dd
    Public key SHA-256 16a7f129188d6d6e21814faa4f0dab66ce2428bcfcd82eabe9db2c346c2ba804
    Addresses
    216.150.1.193 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
    216.150.16.193 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
    Amazon Web Services
    Amazon Web Services (216.150.1.193, 216.150.16.193): a cloud provider. It rents servers and addresses to its customers.
    Domain
    atlasdao.app
    Registered
    2026-02-20 · Namecheap Inc.
    MX
    Receives mail at mail.atlasdao.app
    SPF
    SPF record with -all: other senders fail
    DMARC
    DMARC policy p=quarantine
    Checked
    2026-11-10 17:57 UTC

    Suggest a correction

  5. tesla99.shop
    ListedListed by NPA 165 (information services)MX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    tesla99.shop
    First seen
    2026-11-10 17:00 UTC
    Listing
    NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-10 13:37 UTC
    Listed
    NPA 165
    1. Observed in the NPA 165 feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-10 15:58 UTC to 2027-02-08 16:57 UTC
    Logged 2026-11-10 16:58 UTC in Geomys Tuscolo2027h1, entry 563,647,537
    SHA-256 ae9c559fdefaa35f34faaf964764db4d63e1b59695a948f6c52a799e49483dc2
    Public key SHA-256 6073f84c4c1c55d0c6cff68a0ec6047db05aa2d51fb8ddd1b8fda7e8f9404ece
    Domain
    tesla99.shop
    Registered
    2026-07-15 · GoDaddy.com LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-10 17:57 UTC

    Suggest a correction

  6. www.aoke-oke.com HK · AS135097 · LUOGELANG (FRANCE) LIMITED
    ReportedUnder aoke-oke.com, reported by PhishDestroyMX absentSPF missingDMARC missingRegistered 9 mo ago
    DetailsHide
    Hostname
    www.aoke-oke.com
    First seen
    2026-11-10 17:00 UTC
    Listing
    PhishDestroy: observed back in the feed 2026-11-10 · still listed at the last successful feed check 2026-11-10 12:02 UTC · listed 2 times
    Earlier listing periods: 2026-10-25 to 2026-11-08 (14 days)
    Reported
    PhishDestroy, listing aoke-oke.com and the names under it
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR1
    Valid 2026-11-10 16:00 UTC to 2027-02-08 16:00 UTC
    Logged 2026-11-10 16:59 UTC in Google ParcelYard2027h1, entry 721,154,977
    SHA-256 fd9dccfea2efd84f09ae616948e7a2c254e86a86a3bb4e6359d83a67a0b683e8
    Public key SHA-256 726404f3cbeb2aeb77c9eab13e0d1fbce376e812c4fdf9acc2e892725f3c6475
    PhishDestroy
    Addresses
    154.204.205.155 · Hong Kong · AS135097 MYCLOUD-AS-AP - LUOGELANG (FRANCE) LIMITED
    Domain
    aoke-oke.com
    Registered
    2026-02-25 · GoDaddy.com, LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-10 17:57 UTC

    Suggest a correction

  7. xaman-checker.com US · AS13335 · Cloudflare, Inc.4 addressesXaman
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    xaman-checker.com
    First seen
    2026-11-10 17:00 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-10 12:03 UTC
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-10 12:02 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-11-10 15:58 UTC to 2027-02-08 15:58 UTC
    Logged 2026-11-10 16:56 UTC in IPng Networks Gouda2027h1, entry 375,687,521
    SHA-256 465b1ad1ea44726c9caecfc91a2a28cff7c86fcd006eaa268fb06f5f03479c5d
    Public key SHA-256 8171c75d8423816df1df837ebd3b789fe37fe8152316c155b99cd607cd20bbbf
    Brand
    Xaman
    Addresses
    104.21.86.89 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.217.50 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3031::6815:5659
    2606:4700:3035::ac43:d932
    Cloudflare
    Cloudflare (104.21.86.89, 172.67.217.50): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    xaman-checker.com
    Registered
    2026-05-17 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-10 17:01 UTC

    Suggest a correction

  8. xn--hyperliqud-f9a.xyz FR · AS16276 · OVH OVH SAS2 addresses
    ListedOVHListed by MetaMaskMX presentSPF -allDMARC missingRegistered 5 mo ago
    DetailsHide
    Hostname
    xn--hyperliqud-f9a.xyz
    First seen
    2026-11-10 17:00 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-10 12:03 UTC
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-10 12:02 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-11-10 15:58 UTC to 2027-02-08 15:58 UTC
    Logged 2026-11-10 16:56 UTC in IPng Networks Gouda2027h1, entry 375,687,056
    SHA-256 56f808195eb798a1598506691bbb0195da6845295ec7a1b0c142beecba2d5371
    Public key SHA-256 932d496ea65aad720bf453dc5c80105692dd3312aee620ef9077120713e01f1f
    Addresses
    51.91.236.255 · France · AS16276 OVH OVH SAS · OVH (cloud provider)
    2001:41d0:301::29
    OVH
    OVH (51.91.236.255): a cloud provider. It rents servers and addresses to its customers.
    Domain
    xn--hyperliqud-f9a.xyz
    Registered
    2026-06-19 · OVH sas
    MX
    Receives mail at mx1.mail.ovh.net, mx2.mail.ovh.net, mx3.mail.ovh.net
    SPF
    SPF record with -all: other senders fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-10 10:12 UTC

    Suggest a correction

  9. adeptoweb-site.webozip.in IN · AS138364 · NEXTA WEB SOLUTION PRIVATE …
    ListedUnder webozip.in, listed by CERT PolskaMX presentSPF ~allDMARC policy noneRegistered 5 y ago
    DetailsHide
    Hostname
    adeptoweb-site.webozip.in
    First seen
    2026-11-10 16:57 UTC
    Listing
    CERT Polska listed it 2026-07-29 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-10 15:43 UTC
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-10 12:02 UTC
    Listed
    CERT Polska, listing webozip.in and the names under it
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR1
    Valid 2026-11-10 15:57 UTC to 2027-02-08 15:57 UTC
    Logged 2026-11-10 16:56 UTC in Google PlumbersArms2027h1, entry 721,372,107
    SHA-256 35ddcc343c21976459f4036d53cfd2104193346972f3470fda4e643a56b46ad3
    Public key SHA-256 af34d2d321e8d5e36054959aa015285ae4707a11e1a2153a8948cf062d9b5148
    Addresses
    103.49.131.239 · India · AS138364 IRINN-NEXTAWEB-AS-IN - NEXTA WEB SOLUTION PRIVATE LIMITED
    Domain
    webozip.in
    Registered
    2022-03-09 · WeboZip Media
    MX
    Receives mail at mx.zoho.in, mx2.zoho.in, mx3.zoho.in
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    DMARC policy p=none: reports only
    Checked
    2026-11-10 08:10 UTC

    Suggest a correction

  10. biocircuitlab.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by USOMMX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    biocircuitlab.com
    First seen
    2026-11-10 16:57 UTC
    Listing
    USOM listed it 2026-07-21 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-10 17:50 UTC
    Listed
    USOM
    1. Listed by USOM
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-10 15:53 UTC to 2027-02-08 16:51 UTC
    Logged 2026-11-10 16:53 UTC in Geomys Tuscolo2027h1, entry 563,582,627
    SHA-256 8a1d28feb3ff43c3d4a631a62d28a07d6fbb72f49e0203a77364e6ec26a3b5fe
    Public key SHA-256 09d920b0a6e60ad4c28177dfc4704ac4381e851e27ee10aa1b3a83eb12a1f971
    Addresses
    104.21.58.239 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.166.67 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.58.239, 172.67.166.67): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    biocircuitlab.com
    Registered
    2026-07-15 · Dynadot Inc
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-10 17:57 UTC

    Suggest a correction

  11. crm.fi-investments.com US · AS13335 · Cloudflare, Inc.
    ListedCloudflareUnder fi-investments.com, listed by MetaMaskMX presentSPF -allDMARC policy noneRegistered 3 y ago
    DetailsHide
    Hostname
    crm.fi-investments.com
    First seen
    2026-11-10 16:57 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-10 12:03 UTC
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-10 12:02 UTC
    Listed
    MetaMask, listing fi-investments.com and the names under it
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WR1 · precertificate
    Valid 2026-11-10 15:54 UTC to 2027-02-08 16:52 UTC
    Logged 2026-11-10 16:54 UTC in Google ParcelYard2027h1, entry 721,096,707
    SHA-256 6a17374381598ee6635f12488e53e1859b4bb1cffd7d1fb9b2ce94d288412efd
    Public key SHA-256 f48157e352d721a9a4503c2453dd243d25da3d4de1dbf204e3e9cb815e7d249d
    Addresses
    185.158.133.1 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (185.158.133.1): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    fi-investments.com
    Registered
    2023-08-17 · Tucows Domains Inc.
    MX
    Receives mail at fiinvestments-com0e.mail.protection.outlook.com
    SPF
    SPF record with -all: other senders fail
    DMARC
    DMARC policy p=none: reports only
    Checked
    2026-11-10 08:51 UTC

    Suggest a correction

  12. einvoicen.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by NPA 165 (finance and insurance)MX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    einvoicen.com
    First seen
    2026-11-10 16:57 UTC
    Listing
    NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-10 13:37 UTC
    Listed
    NPA 165
    1. Observed in the NPA 165 feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-11-10 15:55 UTC to 2027-02-08 15:55 UTC
    Logged 2026-11-10 16:54 UTC in IPng Networks Halloumi2027h1, entry 443,746,554
    SHA-256 650be3a0ba28a8f78c9483c0bb22aef4c41b4a3a311a33b2092f07d100aa62b6
    Public key SHA-256 65d4d91385a893a883551820a995120e63fa56ce919e34bbea999de8a0b27c5c
    Addresses
    104.21.66.2 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.167.201 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.66.2, 172.67.167.201): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    einvoicen.com
    Registered
    2026-05-17 · NameSilo, LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-10 17:57 UTC

    Suggest a correction

  13. indexerymaxark-shop.pages.dev US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT Polska
    DetailsHide
    Hostname
    indexerymaxark-shop.pages.dev
    First seen
    2026-11-10 16:57 UTC
    Listing
    CERT Polska listed it 2026-09-12 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-10 15:43 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-10 15:57 UTC to 2027-02-08 15:57 UTC
    Logged 2026-11-10 16:55 UTC in Google ParcelYard2027h1, entry 721,115,655
    SHA-256 112ca1ca09bb096105cd31d955c3647dfe022f54ca221a878e129cd08655caad
    Public key SHA-256 67a06161e83c24f03da9a7d59c9879fe5bf643174569c3a337eeb1162bb56bac
    Addresses
    172.66.44.53 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.66.47.203 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (172.66.44.53, 172.66.47.203): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.

    Suggest a correction

  14. sfjajz.asia US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by NPA 165 (e-commerce)MX absentSPF missingDMARC missingRegistered 3 mo ago
    DetailsHide
    Hostname
    sfjajz.asia
    First seen
    2026-11-10 16:57 UTC
    Listing
    NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-10 13:37 UTC
    Listed
    NPA 165
    1. Observed in the NPA 165 feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-10 15:56 UTC to 2027-02-08 15:56 UTC
    Logged 2026-11-10 16:55 UTC in Google PlumbersArms2027h1, entry 721,360,314
    SHA-256 27b7df570f3406219512c7f1a1677742169b94d8a5b6b2b9ed5d1a77343ecde8
    Public key SHA-256 c732a51043a30b0ef18348449642eff992ca0a8c6c177ceb31d5116e601ad78f
    Addresses
    104.21.28.156 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.170.232 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.28.156, 172.67.170.232): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    sfjajz.asia
    Registered
    2026-08-18 · Alibaba Cloud Computing Ltd. d/b/a HiChina (www.net.cn)
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-10 17:57 UTC

    Suggest a correction

  15. uyotrasel-italy.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    uyotrasel-italy.com
    First seen
    2026-11-10 16:57 UTC
    Listing
    CERT Polska listed it 2026-09-12 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-10 15:43 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by Cloudflare TLS Issuing ECC CA 4 · precertificate
    Valid 2026-11-10 16:45 UTC to 2027-02-08 16:53 UTC
    Logged 2026-11-10 16:55 UTC in DigiCert Sphinx2027h1, entry 430,728,972
    SHA-256 cf2e3a8cec643e9711152ad633703898097a3dc28e70e42c922747db27827f95
    Public key SHA-256 333184c288e10b6216a27d72db537bcc88bdf8a4348116c27c1d9b7919fde7a2
    Addresses
    104.21.42.218 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.210.104 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.42.218, 172.67.210.104): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    uyotrasel-italy.com
    Registered
    2026-07-15 · Dynadot Inc
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-10 17:57 UTC

    Suggest a correction

  16. veraai.digital US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    veraai.digital
    First seen
    2026-11-10 16:57 UTC
    Listing
    CERT Polska listed it 2026-07-21 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-10 15:43 UTC
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-10 12:02 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-10 15:52 UTC to 2027-02-08 16:50 UTC
    Logged 2026-11-10 16:52 UTC in Google PlumbersArms2027h1, entry 721,331,250
    SHA-256 a2039548b38c7c868bd93345f4db962f2ee21967fca63e7b44f9848e986ceae5
    Public key SHA-256 2b5fd1e856d0536a5d56e9209cee74874d9ca172a55f40c829a32f4e75aacbeb
    Addresses
    104.21.71.221 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.149.180 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.71.221, 172.67.149.180): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    veraai.digital
    Registered
    2026-07-15 · NETIM SAS
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-10 17:57 UTC

    Suggest a correction

  17. worldliberty1.pages.dev US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMask
    DetailsHide
    Hostname
    worldliberty1.pages.dev
    First seen
    2026-11-10 16:57 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-10 12:03 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-10 15:51 UTC to 2027-02-08 16:50 UTC
    Logged 2026-11-10 16:51 UTC in Google ParcelYard2027h1, entry 721,066,776
    SHA-256 1edf0e1399d1c6d88ccc766d4f617c9d32a64e4374b000225419a48d9d8b19e3
    Public key SHA-256 a39f8d4d9a8c610192665ea9e65d4c8e4284e952f6b6202c4510e30cadd5b28c
    Addresses
    172.66.45.2 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.66.46.254 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (172.66.45.2, 172.66.46.254): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.

    Suggest a correction

  18. ww19.stake-world.com VG · AS40034 · Confluence Networks Inc
    ReportedParking page · Confluence NetworksUnder stake-world.com, reported by PhishDestroyMX absentSPF missingDMARC missingRegistered 15 mo ago
    DetailsHide
    Hostname
    ww19.stake-world.com
    First seen
    2026-11-10 16:57 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-10 12:02 UTC
    Reported
    PhishDestroy, listing stake-world.com and the names under it
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by ZeroSSL ECC DV SSL CA 2
    Valid 2026-11-10 00:00 UTC to 2027-02-08 23:59 UTC
    Logged 2026-11-10 16:53 UTC in Sectigo Tiger2027h1, entry 832,845,981
    SHA-256 15858d09e825dfa22d38437fa9a261b58283fcd4ddd818729a5dcb7dc9190b83
    Public key SHA-256 5b8146c50560a8dd6effd65fe7858a7e982aabe13a59ad4c7198840225e49df5
    PhishDestroy
    Addresses
    208.91.196.145 · British Virgin Islands · AS40034 CONFLUENCE-NETWORK-INC - Confluence Networks Inc · Confluence Networks (parking page)
    Parking page · Confluence Networks
    Confluence Networks (208.91.196.145): a parking service. It answers for names that are typically for sale or unused.
    Domain
    stake-world.com
    Registered
    2025-08-20 · Dynadot Inc
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-10 17:57 UTC

    Suggest a correction

  19. www.adeptoweb-site.webozip.in IN · AS138364 · NEXTA WEB SOLUTION PRIVATE …
    ListedUnder webozip.in, listed by CERT PolskaMX presentSPF ~allDMARC policy noneRegistered 5 y ago
    DetailsHide
    Hostname
    www.adeptoweb-site.webozip.in
    First seen
    2026-11-10 16:57 UTC
    Listing
    CERT Polska listed it 2026-07-29 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-10 15:43 UTC
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-10 12:02 UTC
    Listed
    CERT Polska, listing webozip.in and the names under it
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR1
    Valid 2026-11-10 15:57 UTC to 2027-02-08 15:57 UTC
    Logged 2026-11-10 16:56 UTC in Google PlumbersArms2027h1, entry 721,372,107
    SHA-256 35ddcc343c21976459f4036d53cfd2104193346972f3470fda4e643a56b46ad3
    Public key SHA-256 af34d2d321e8d5e36054959aa015285ae4707a11e1a2153a8948cf062d9b5148
    Addresses
    103.49.131.239 · India · AS138364 IRINN-NEXTAWEB-AS-IN - NEXTA WEB SOLUTION PRIVATE LIMITED
    Domain
    webozip.in
    Registered
    2022-03-09 · WeboZip Media
    MX
    Receives mail at mx.zoho.in, mx2.zoho.in, mx3.zoho.in
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    DMARC policy p=none: reports only
    Checked
    2026-11-10 08:10 UTC

    Suggest a correction

  20. 379412-crypto.com US · AS13335 · Cloudflare, Inc.4 addressesCrypto.com
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 59 d ago
    DetailsHide
    Hostname
    379412-crypto.com
    First seen
    2026-11-10 16:51 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-10 12:03 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-11-10 15:48 UTC to 2027-02-08 15:48 UTC
    Logged 2026-11-10 16:46 UTC in Google ParcelYard2027h1, entry 721,011,282
    SHA-256 3cbe2693717653b8d700ebf5cce6512ebca0e18e7da7e90890c672e798233da0
    Public key SHA-256 4a8d6a6d2f3b5ac67a871f5c2826ed4470c83c0be33fa2cca59944aeb76a46e7
    Brand
    Crypto.com
    Addresses
    104.21.83.13 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.166.197 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3030::ac43:a6c5
    2606:4700:3031::6815:530d
    Cloudflare
    Cloudflare (104.21.83.13, 172.67.166.197): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    379412-crypto.com
    Registered
    2026-09-12 · Dynadot Inc
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-10 17:00 UTC

    Suggest a correction

  21. access-en-ledger-live-download.pages.dev US · AS13335 · Cloudflare, Inc.4 addressesLedger
    ListedCloudflareListed by MetaMask
    DetailsHide
    Hostname
    access-en-ledger-live-download.pages.dev
    First seen
    2026-11-10 16:51 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-10 12:03 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-10 15:46 UTC to 2027-02-08 16:45 UTC
    Logged 2026-11-10 16:46 UTC in IPng Networks Halloumi2027h1, entry 443,683,258
    SHA-256 4fde54e828d3d92adcad1e7b3561081eb84b162b06d881696bfb7b1341c3aa92
    Public key SHA-256 b027a22d8a4f07a60dcc40c2f3694e6127fc40d0e33f1edb88c0712bc78ed5bb
    Brand
    Ledger
    Addresses
    172.66.44.149 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.66.47.107 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:310c::ac42:2c95
    2606:4700:310c::ac42:2f6b
    Cloudflare
    Cloudflare (172.66.44.149, 172.66.47.107): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.

    Suggest a correction

  22. app.trysti.ink US · AS14956 · RouterHosting LLC
    ReportedReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 12 mo ago
    DetailsHide
    Hostname
    app.trysti.ink
    First seen
    2026-11-10 16:51 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-10 12:02 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-10 15:48 UTC to 2027-02-08 15:48 UTC
    Logged 2026-11-10 16:46 UTC in Google PlumbersArms2027h1, entry 721,261,116
    SHA-256 b5f21c3d872eaaa9a4bcb18be3d5ad7015bdfcf4c22650d93b1f2ccab9b9f36a
    Public key SHA-256 f65abf34c07d364cb4a315aa543c23c7cc275502db98077beb54f38c50879ecb
    PhishDestroy
    Addresses
    45.61.161.63 · United States · AS14956 ROUTERHOSTING - RouterHosting LLC
    Domain
    trysti.ink
    Registered
    2025-11-22 · Sav.com LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-10 16:56 UTC

    Suggest a correction

  23. aurevia-fbk.com BD · AS153568 · NEW DHAKA HARDWARE
    ReportedReported by PhishDestroyMX presentMX on Spamhaus DROPSPF ~allSPF on Spamhaus DROPDMARC policy noneRegistered 5 mo ago
    DetailsHide
    Hostname
    aurevia-fbk.com
    First seen
    2026-11-10 16:51 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-10 12:02 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR1 · precertificate
    Valid 2026-11-10 15:52 UTC to 2027-02-08 15:52 UTC
    Logged 2026-11-10 16:50 UTC in Geomys Tuscolo2027h1, entry 563,559,649
    SHA-256 1fafe63a4dfb90efcc1b638ce99184135aca32df69f4831524d412851a2ffe38
    Public key SHA-256 998d5faef0f1efd0bcc51fddfca217650ff98e102ce6758720ce897f90173b9e
    PhishDestroy
    Addresses
    163.61.188.5 · Bangladesh · AS153568 NEWDHAKAHARDWARE-AS-AP - NEW DHAKA HARDWARE
    Domain
    aurevia-fbk.com
    Registered
    2026-06-27 · Squarespace Domains LLC
    MX
    Receives mail at aurevia-fbk.com
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    DMARC policy p=none: reports only
    MX listing
    Mail server aurevia-fbk.com at 163.61.188.5 is on Spamhaus DROP: hijacked or criminal networks.
    SPF listing
    The SPF record lists 163.61.188.5 as a sender. It is on Spamhaus DROP: hijacked or criminal networks.
    Checked
    2026-11-10 17:57 UTC

    Suggest a correction

  24. auth.sellerjobchile.com US · AS16509 · Amazon.com, Inc.
    ReportedAmazon Web ServicesReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 16 mo ago
    DetailsHide
    Hostname
    auth.sellerjobchile.com
    First seen
    2026-11-10 16:51 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-10 12:02 UTC
    PhishTank: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-10 17:53 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR1
    Valid 2026-11-10 15:51 UTC to 2027-02-08 15:51 UTC
    Logged 2026-11-10 16:49 UTC in Google ParcelYard2027h1, entry 721,048,490
    SHA-256 a06a33c77829c961d17fbad43431ebb56da4cafda4fb046f3a13760b730bf72c
    Public key SHA-256 d90867daaf3ce2b2596b9ed81272b4f4da6cb5e5dbb463e1c3bd3f6aa0f48808
    PhishDestroy
    Addresses
    216.198.79.1 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
    Amazon Web Services
    Amazon Web Services (216.198.79.1): a cloud provider. It rents servers and addresses to its customers.
    Domain
    sellerjobchile.com
    Registered
    2025-07-05 · Cloudflare, Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-10 16:56 UTC

    Suggest a correction

  25. concethres.rest
    ListedListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 3 mo ago
    DetailsHide
    Hostname
    concethres.rest
    First seen
    2026-11-10 16:51 UTC
    Listing
    CERT Polska listed it 2026-08-22 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-10 15:43 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-11-10 15:47 UTC to 2027-02-08 15:47 UTC
    Logged 2026-11-10 16:46 UTC in IPng Networks Halloumi2027h1, entry 443,680,217
    SHA-256 1505371684752c6708a786df5d3f21865fad44ed15d2bc96a1e102dc171e7702
    Public key SHA-256 e5e41853d701a334ebd1351f83715cd692f236140da88fdaef85623ffec30380
    Domain
    concethres.rest
    Registered
    2026-08-22 · NAMECHEAP
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-10 17:57 UTC

    Suggest a correction

  26. corp.oojusales.com US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareUnder oojusales.com, reported by PhishDestroyMX absentSPF missingDMARC missingRegistered 16 mo ago
    DetailsHide
    Hostname
    corp.oojusales.com
    First seen
    2026-11-10 16:51 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-10 12:02 UTC
    Reported
    PhishDestroy, listing oojusales.com and the names under it
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-10 15:51 UTC to 2027-02-08 15:51 UTC
    Logged 2026-11-10 16:49 UTC in Google ParcelYard2027h1, entry 721,045,745
    SHA-256 12f6dbb0ca7d6ab0d93d1dfc5c6e87d0fd363e50c75419bd4f61157d3e41d928
    Public key SHA-256 e0a13fc6b93724cb5b2a28d83f65962ac6a184437734fc92a833934833021e0b
    PhishDestroy
    Addresses
    104.21.4.68 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.154.18 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.4.68, 172.67.154.18): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    oojusales.com
    Registered
    2025-07-13 · Wild West Domains, LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-10 07:58 UTC

    Suggest a correction

  27. crates-netnetcapital.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 59 d ago
    DetailsHide
    Hostname
    crates-netnetcapital.com
    First seen
    2026-11-10 16:51 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-10 12:03 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-10 15:50 UTC to 2027-02-08 15:50 UTC
    Logged 2026-11-10 16:49 UTC in Google PlumbersArms2027h1, entry 721,290,904
    SHA-256 4a6d03a0085fd5c3ad0c548109c7492b3f9003c5940a471e6c26678da628757a
    Public key SHA-256 30d386883be111a0a356cd7cffeeb153505ea7bab1f7529007c7eeb78131dd4f
    Addresses
    104.21.78.179 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.136.39 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.78.179, 172.67.136.39): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    crates-netnetcapital.com
    Registered
    2026-09-12 · Dominet (HK) Limited
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-10 17:57 UTC

    Suggest a correction

  28. extensivedapnod.pages.dev US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMask
    DetailsHide
    Hostname
    extensivedapnod.pages.dev
    First seen
    2026-11-10 16:51 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-10 12:03 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-10 15:48 UTC to 2027-02-08 16:47 UTC
    Logged 2026-11-10 16:48 UTC in Let's Encrypt Sycamore2027h1, entry 1,128,919,363
    SHA-256 856aeb727ef50325835e357a76e4c1075c229270feac97be5453a06e5d5fdc9b
    Public key SHA-256 7e47862778505f62dd4c21bb69677926a898838f514c617f8fa5781e5d39caef
    Addresses
    172.66.44.143 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.66.47.113 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (172.66.44.143, 172.66.47.113): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.

    Suggest a correction

  29. flarefdn-gift.live US · AS13335 · Cloudflare, Inc.4 addressesFlare Network
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    flarefdn-gift.live
    First seen
    2026-11-10 16:51 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-10 12:03 UTC
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-10 12:02 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-10 15:50 UTC to 2027-02-08 16:48 UTC
    Logged 2026-11-10 16:50 UTC in Google PlumbersArms2027h1, entry 721,308,666
    SHA-256 8c1b7164ddb9fe27487b6d6e775a9741437c81b691c9fd8615e0594abdf76a55
    Public key SHA-256 67b4390d39caf15cf049ec7e96ffe5cffc8397e5442ff670e6c8613adfa0922e
    Brand
    Flare Network
    Addresses
    104.21.91.14 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.164.149 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3034::6815:5b0e
    2606:4700:3034::ac43:a495
    Cloudflare
    Cloudflare (104.21.91.14, 172.67.164.149): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    flarefdn-gift.live
    Registered
    2026-07-15 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-10 16:56 UTC

    Suggest a correction

  30. imobiliarealtfel.ro RO · AS203053 · ClausWEB CLAUS WEB srl
    ReportedReported by PhishDestroyMX presentSPF ~allDMARC policy none
    DetailsHide
    Hostname
    imobiliarealtfel.ro
    First seen
    2026-11-10 16:51 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-10 12:02 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-11-10 15:51 UTC to 2027-02-08 15:51 UTC
    Logged 2026-11-10 16:49 UTC in IPng Networks Gouda2027h1, entry 375,657,664
    SHA-256 3bc261fa63d86c9fe9946086045168515b0a0b5925610eb607e5615a462b241f
    Public key SHA-256 4b1d794f596fc094a666ca2fcb7bfb0a4d87972a44cb0aded712a253b07b4623
    PhishDestroy
    Addresses
    91.197.247.14 · Romania · AS203053 ClausWEB CLAUS WEB srl
    Domain
    imobiliarealtfel.ro
    MX
    Receives mail at imobiliarealtfel.ro
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    DMARC policy p=none: reports only
    Checked
    2026-11-10 16:56 UTC

    Suggest a correction

  31. inviteme.us.cc US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMask
    DetailsHide
    Hostname
    inviteme.us.cc
    First seen
    2026-11-10 16:51 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-10 12:03 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-10 15:52 UTC to 2027-02-08 15:52 UTC
    Logged 2026-11-10 16:51 UTC in IPng Networks Gouda2027h1, entry 375,665,027
    SHA-256 0a6f0e2372f77296ec9b086c24ac6e8696c94e2e2631b01c4480b7b2212852f5
    Public key SHA-256 5f481475bfd49bbfaae5614f82fe38dfd604f72436b09f31d926d1cc761d8a39
    Addresses
    104.21.86.54 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.215.87 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.86.54, 172.67.215.87): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.

    Suggest a correction

  32. layuad.store SG · AS63949 · Akamai Connected Cloud
    ListedAkamai LinodeListed by NPA 165 (e-commerce)MX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    layuad.store
    First seen
    2026-11-10 16:51 UTC
    Listing
    NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-10 13:37 UTC
    Listed
    NPA 165
    1. Observed in the NPA 165 feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR2
    Valid 2026-11-10 15:48 UTC to 2027-02-08 15:48 UTC
    Logged 2026-11-10 16:46 UTC in Google PlumbersArms2027h1, entry 721,264,692
    SHA-256 2d0a6d91aa39bc567b88fc3afe187551821dedf5ace72e392941500ac6369379
    Public key SHA-256 66e97dfb5d64366d85a9fc97015cde8b69385c88d003733c3c938750611d513c
    Addresses
    172.104.185.47 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)
    Akamai Linode
    Akamai Linode (172.104.185.47): a cloud provider. It rents servers and addresses to its customers.
    Domain
    layuad.store
    Registered
    2026-07-12 · GoDaddy.com, LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-10 17:57 UTC

    Suggest a correction

  33. robloom.net US · AS6461 · Zayo Bandwidth
    ReportedReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    robloom.net
    First seen
    2026-11-10 16:51 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-10 12:02 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by Cloudflare TLS Issuing ECC CA 4 · precertificate
    Valid 2026-11-10 16:36 UTC to 2027-02-08 16:45 UTC
    Logged 2026-11-10 16:46 UTC in Let's Encrypt Willow2027h1, entry 1,083,781,772
    SHA-256 ac7f3a2801617e76b38623041fa03e8e6da85a3ffb45dde5ab41362c0697e8ac
    Public key SHA-256 868617f76c81ae87a8b7dc7856658bd1ccae458346ea34eb1f52f89dbfd12b09
    PhishDestroy
    Addresses
    45.74.7.118 · United States · AS6461 ZAYO-6461 - Zayo Bandwidth
    Domain
    robloom.net
    Registered
    2026-07-15 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-10 17:57 UTC

    Suggest a correction

  34. sbvwz.com US · AS54600 · PEG TECH INC
    ReportedReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    sbvwz.com
    First seen
    2026-11-10 16:51 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-10 12:02 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR2
    Valid 2026-11-10 15:49 UTC to 2027-02-08 15:49 UTC
    Logged 2026-11-10 16:47 UTC in Google PlumbersArms2027h1, entry 721,275,559
    SHA-256 4d934775b33fa23edf9cb013023da126db23bbe361f00a82c628bbe2eb3ca3b6
    Public key SHA-256 adb32996323648237d597dd2f769eb51eb675ac56c223d9a406838de7bd93164
    PhishDestroy
    Addresses
    38.6.172.75 · United States · AS54600 PEG-SV - PEG TECH INC
    Domain
    sbvwz.com
    Registered
    2026-05-21 · NameSilo, LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-10 17:57 UTC

    Suggest a correction

  35. solewar.cc US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 59 d ago
    DetailsHide
    Hostname
    solewar.cc
    First seen
    2026-11-10 16:51 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-10 12:02 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-10 15:47 UTC to 2027-02-08 15:47 UTC
    Logged 2026-11-10 16:46 UTC in Google ParcelYard2027h1, entry 721,006,146
    SHA-256 8ed69cda382da57582dd2d8bb1f4af1ca3339beb54ef92632fafde8f6711ba77
    Public key SHA-256 7dae50c67bf869423810ea1c8e944fe19cf16291e63c7b0410501bf80b5f6d7d
    PhishDestroy
    Addresses
    104.21.80.39 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.174.14 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.80.39, 172.67.174.14): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    solewar.cc
    Registered
    2026-09-12 · NameSilo, LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-10 17:57 UTC

    Suggest a correction

  36. www.phantomexpresss.com US · AS16509 · Amazon.com, Inc.2 addresses
    ListedAmazon Web ServicesUnder phantomexpresss.com, listed by MetaMaskMX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    www.phantomexpresss.com
    First seen
    2026-11-10 16:51 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-10 12:03 UTC
    Listed
    MetaMask, listing phantomexpresss.com and the names under it
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR2
    Valid 2026-11-10 15:48 UTC to 2027-02-08 15:48 UTC
    Logged 2026-11-10 16:47 UTC in Google ParcelYard2027h1, entry 721,019,294
    SHA-256 83cf6a3b9063a7bf9b363e5c7051c08eb5c21e6d3a991895c8ef37b3e97a6803
    Public key SHA-256 c83099279ae30853f4e0d2b691c188a11a5a05dd2e8c62a2a8f9573645143cb3
    Addresses
    64.29.17.1 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
    216.198.79.1 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
    Amazon Web Services
    Amazon Web Services (64.29.17.1, 216.198.79.1): a cloud provider. It rents servers and addresses to its customers.
    Domain
    phantomexpresss.com
    Registered
    2026-07-07 · Cloudflare, Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-10 09:02 UTC

    Suggest a correction

  37. www.sbvwz.com US · AS54600 · PEG TECH INC
    ReportedUnder sbvwz.com, reported by PhishDestroyMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    www.sbvwz.com
    First seen
    2026-11-10 16:51 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-10 12:02 UTC
    Reported
    PhishDestroy, listing sbvwz.com and the names under it
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR2
    Valid 2026-11-10 15:49 UTC to 2027-02-08 15:49 UTC
    Logged 2026-11-10 16:47 UTC in Google PlumbersArms2027h1, entry 721,275,559
    SHA-256 4d934775b33fa23edf9cb013023da126db23bbe361f00a82c628bbe2eb3ca3b6
    Public key SHA-256 adb32996323648237d597dd2f769eb51eb675ac56c223d9a406838de7bd93164
    PhishDestroy
    Addresses
    38.6.172.75 · United States · AS54600 PEG-SV - PEG TECH INC
    Domain
    sbvwz.com
    Registered
    2026-05-21 · NameSilo, LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-10 17:57 UTC

    Suggest a correction

  38. 714368-cb.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 3 mo ago
    DetailsHide
    Hostname
    714368-cb.com
    First seen
    2026-11-10 16:46 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-10 12:03 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-11-10 15:46 UTC to 2027-02-08 15:46 UTC
    Logged 2026-11-10 16:44 UTC in DigiCert Sphinx2027h1, entry 430,655,868
    SHA-256 9450be6bafa7572edb35c22f38e748b24361189161a37280ff57d503d99f31d6
    Public key SHA-256 1be5acb0448a583128f18d2d87763363a70e6612b39e788ea0ccb3aea962de1a
    Addresses
    104.21.27.176 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.169.155 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.27.176, 172.67.169.155): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    714368-cb.com
    Registered
    2026-08-22 · Dynadot Inc
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-10 17:57 UTC

    Suggest a correction

  39. alzorainvyra.shop NL · AS62370 · Snel Snel.com B.V.
    ListedListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 7 mo ago
    DetailsHide
    Hostname
    alzorainvyra.shop
    First seen
    2026-11-10 16:46 UTC
    Listing
    CERT Polska listed it 2026-07-21 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-10 15:43 UTC
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-10 12:02 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by ZeroSSL ECC DV SSL CA 2 · precertificate
    Valid 2026-11-10 00:00 UTC to 2027-02-08 23:59 UTC
    Logged 2026-11-10 16:45 UTC in IPng Networks Halloumi2027h1, entry 443,671,166
    SHA-256 15bbc27c7606eeee2707c722564e388cf0f67a97e0882ade45359389883ed499
    Public key SHA-256 f9b3cdc0aaffa1bcde6ea85973a39e5186f617d8084701902a1c0f3ea337ace4
    Addresses
    185.62.58.179 · Netherlands · AS62370 Snel Snel.com B.V.
    Domain
    alzorainvyra.shop
    Registered
    2026-04-16 · Dynadot Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-10 17:57 UTC

    Suggest a correction

  40. bestlidotrust.info US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX presentSPF ~allDMARC rejectRegistered 8 mo ago
    DetailsHide
    Hostname
    bestlidotrust.info
    First seen
    2026-11-10 16:46 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-10 12:03 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-10 15:46 UTC to 2027-02-08 16:44 UTC
    Logged 2026-11-10 16:46 UTC in Google PlumbersArms2027h1, entry 721,253,883
    SHA-256 900d700fe92162cfe0af9cd6da8146cffada2f4eb4596a52f8ae7cc52be079c9
    Public key SHA-256 7adef531051a8d11c44d364c20d0654c41119a2d34f9f7251a2e672d0ef60779
    Addresses
    104.21.72.118 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.183.180 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.72.118, 172.67.183.180): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    bestlidotrust.info
    Registered
    2026-03-28 · Dynadot Inc
    MX
    Receives mail at _dc-mx.998cebb4e3c0.bestlidotrust.info
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    DMARC policy p=reject
    Checked
    2026-11-10 08:13 UTC

    Suggest a correction

  41. drifts.trade US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    drifts.trade
    First seen
    2026-11-10 16:46 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-10 12:03 UTC
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-10 12:02 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-10 15:44 UTC to 2027-02-08 16:43 UTC
    Logged 2026-11-10 16:44 UTC in Google ParcelYard2027h1, entry 720,980,918
    SHA-256 2fe643b58116700f5e7ac864af6193e4c6b5078cd0264e82cad5352f8edb6cc3
    Public key SHA-256 6fd2a3668b93af8eb6acab47279c18f402e8650788ff305382133b61197e2675
    Addresses
    104.21.18.189 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.183.35 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.18.189, 172.67.183.35): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    drifts.trade
    Registered
    2026-07-15 · NameSilo, LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-10 17:57 UTC

    Suggest a correction

  42. eczajnik.live US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    eczajnik.live
    First seen
    2026-11-10 16:46 UTC
    Listing
    CERT Polska listed it 2026-08-18 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-10 15:43 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-10 15:46 UTC to 2027-02-08 16:43 UTC
    Logged 2026-11-10 16:46 UTC in DigiCert Sphinx2027h1, entry 430,667,672
    SHA-256 6fb18ba050a99ef3d226e8ba05f15a47ca967a06d7411762c4757a89be6e0fa9
    Public key SHA-256 75c33462aeda9b155cef74f4e657e165e52155a980a3cf5b6fc73032440bfa98
    Addresses
    104.21.31.72 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.175.66 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.31.72, 172.67.175.66): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    eczajnik.live
    Registered
    2026-07-15 · Dynadot Inc
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-10 17:57 UTC

    Suggest a correction

  43. kanha-travels-2.webozip.in IN · AS138364 · NEXTA WEB SOLUTION PRIVATE …
    ListedUnder webozip.in, listed by CERT PolskaMX presentSPF ~allDMARC policy noneRegistered 5 y ago
    DetailsHide
    Hostname
    kanha-travels-2.webozip.in
    First seen
    2026-11-10 16:46 UTC
    Listing
    CERT Polska listed it 2026-07-29 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-10 15:43 UTC
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-10 12:02 UTC
    Listed
    CERT Polska, listing webozip.in and the names under it
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR2 · precertificate
    Valid 2026-11-10 15:46 UTC to 2027-02-08 15:46 UTC
    Logged 2026-11-10 16:45 UTC in DigiCert Wyvern2027h1, entry 485,885,620
    SHA-256 819eaffd080d4f0187ff4d4480de0ef89684062474a1b580f846ba040abe00a7
    Public key SHA-256 bc766e6b4fcf72b8f91458dbcb8549b8f81c3764bd10ced68b37278b056e9893
    Addresses
    103.49.131.239 · India · AS138364 IRINN-NEXTAWEB-AS-IN - NEXTA WEB SOLUTION PRIVATE LIMITED
    Domain
    webozip.in
    Registered
    2022-03-09 · WeboZip Media
    MX
    Receives mail at mx.zoho.in, mx2.zoho.in, mx3.zoho.in
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    DMARC policy p=none: reports only
    Checked
    2026-11-10 08:10 UTC

    Suggest a correction

  44. pepecc.shop VG · AS40034 · Confluence Networks Inc
    ReportedParking page · Confluence NetworksReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    pepecc.shop
    First seen
    2026-11-10 16:46 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-10 12:02 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by ZeroSSL ECC DV SSL CA 2 · precertificate
    Valid 2026-11-10 00:00 UTC to 2027-02-08 23:59 UTC
    Logged 2026-11-10 16:44 UTC in Geomys Tuscolo2027h1, entry 563,493,328
    SHA-256 b8f805bcc1aca581a40f8deca1893f4fc943d0f8b39c33baba9f08187d22235b
    Public key SHA-256 3a850b6bf9b5f62c00a8a1ff90e2e24fc670a652fd4ea7800d1df004e0cd081c
    PhishDestroy
    Addresses
    204.11.56.246 · British Virgin Islands · AS40034 CONFLUENCE-NETWORK-INC - Confluence Networks Inc · Confluence Networks (parking page)
    Parking page · Confluence Networks
    Confluence Networks (204.11.56.246): a parking service. It answers for names that are typically for sale or unused.
    Domain
    pepecc.shop
    Registered
    2026-05-12 · GoDaddy.com LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-10 02:10 UTC

    Suggest a correction

  45. rainbets-casino-au.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX presentSPF ~allDMARC policy noneRegistered 3 mo ago
    DetailsHide
    Hostname
    rainbets-casino-au.com
    First seen
    2026-11-10 16:46 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-10 12:03 UTC
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-10 12:02 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR2
    Valid 2026-11-10 15:45 UTC to 2027-02-08 15:45 UTC
    Logged 2026-11-10 16:43 UTC in Google PlumbersArms2027h1, entry 721,223,547
    SHA-256 3261689b9f34854f7f883d1d66b33adbbd6f2237782976740a3c70a85250d28e
    Public key SHA-256 0bf848a0824df5d4161460dac345bcb8025ade5fef4a925416d242ef90b14ac9
    Addresses
    104.21.5.232 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.154.189 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.5.232, 172.67.154.189): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    rainbets-casino-au.com
    Registered
    2026-08-26 · NameSilo, LLC
    MX
    Receives mail at _dc-mx.acf4cea04c83.rainbets-casino-au.com
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    DMARC policy p=none: reports only
    Checked
    2026-11-10 17:57 UTC

    Suggest a correction

  46. telvora-gld-felquro-r6t4hp30.pages.dev US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT Polska
    DetailsHide
    Hostname
    telvora-gld-felquro-r6t4hp30.pages.dev
    First seen
    2026-11-10 16:46 UTC
    Listing
    CERT Polska listed it 2026-07-16 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-10 15:43 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-10 15:45 UTC to 2027-02-08 16:44 UTC
    Logged 2026-11-10 16:45 UTC in Google PlumbersArms2027h1, entry 721,246,493
    SHA-256 9f826e2ab42eb8b3ae87e1af553b5aecdb858cd4f8a91f7c5c9ba58884a6066a
    Public key SHA-256 12391db702341bc27c3d9bb51db547e1946e2125bb4f323e7e42d5edf5635495
    Addresses
    172.66.44.55 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.66.47.201 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (172.66.44.55, 172.66.47.201): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.

    Suggest a correction

  47. tpindd.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    tpindd.com
    First seen
    2026-11-10 16:46 UTC
    Listing
    CERT Polska listed it 2026-05-18 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-10 15:43 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-10 15:45 UTC to 2027-02-08 15:45 UTC
    Logged 2026-11-10 16:44 UTC in Google PlumbersArms2027h1, entry 721,230,548
    SHA-256 d850de30936ab8e949b18fddd5dac56c2aa145d52a2c989cc75a8b9d56651e2f
    Public key SHA-256 34bef17ebd0599ddf9db3c42000afc35901f37b731e54513efaf42fc6023f298
    Addresses
    104.21.79.56 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.142.94 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.79.56, 172.67.142.94): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    tpindd.com
    Registered
    2026-05-17 · NameCheap, Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-10 17:57 UTC

    Suggest a correction

  48. vincentmarkets.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    vincentmarkets.com
    First seen
    2026-11-10 16:46 UTC
    Listing
    CERT Polska listed it 2026-10-13 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-10 15:43 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by Cloudflare TLS Issuing ECC CA 4 · precertificate
    Valid 2026-11-10 16:36 UTC to 2027-02-08 16:44 UTC
    Logged 2026-11-10 16:46 UTC in DigiCert Sphinx2027h1, entry 430,667,825
    SHA-256 f54c297c272657d809a8d98c0d70fa91fb3db1a91df3450c914e4755e06547f3
    Public key SHA-256 4adc91abe195ecaa72234447bc6b5bd29fbd43542b16c9a48653a40c02cae178
    Addresses
    104.21.86.75 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.216.146 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.86.75, 172.67.216.146): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    vincentmarkets.com
    Registered
    2026-07-15 · TuringSign Inc. d/b/a Cosmotown
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-10 17:57 UTC

    Suggest a correction

  49. voting-flap.info US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    voting-flap.info
    First seen
    2026-11-10 16:46 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-10 12:03 UTC
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-10 12:02 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-10 15:44 UTC to 2027-02-08 16:42 UTC
    Logged 2026-11-10 16:44 UTC in Google ParcelYard2027h1, entry 720,979,448
    SHA-256 e5cdb538d25a7d1d22cf929fb2ab2e67930e2e9f2d34158cfa1ba66dbf2b3e1e
    Public key SHA-256 14582df997052042cf1cadce246f980f2aee40372064e3840165441b46908462
    Addresses
    104.21.64.160 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.152.130 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.64.160, 172.67.152.130): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    voting-flap.info
    Registered
    2026-07-15 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-10 17:57 UTC

    Suggest a correction

  50. www.kanha-travels-2.webozip.in IN · AS138364 · NEXTA WEB SOLUTION PRIVATE …
    ListedUnder webozip.in, listed by CERT PolskaMX presentSPF ~allDMARC policy noneRegistered 5 y ago
    DetailsHide
    Hostname
    www.kanha-travels-2.webozip.in
    First seen
    2026-11-10 16:46 UTC
    Listing
    CERT Polska listed it 2026-07-29 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-10 15:43 UTC
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-10 12:02 UTC
    Listed
    CERT Polska, listing webozip.in and the names under it
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR2 · precertificate
    Valid 2026-11-10 15:46 UTC to 2027-02-08 15:46 UTC
    Logged 2026-11-10 16:45 UTC in DigiCert Wyvern2027h1, entry 485,885,620
    SHA-256 819eaffd080d4f0187ff4d4480de0ef89684062474a1b580f846ba040abe00a7
    Public key SHA-256 bc766e6b4fcf72b8f91458dbcb8549b8f81c3764bd10ced68b37278b056e9893
    Addresses
    103.49.131.239 · India · AS138364 IRINN-NEXTAWEB-AS-IN - NEXTA WEB SOLUTION PRIVATE LIMITED
    Domain
    webozip.in
    Registered
    2022-03-09 · WeboZip Media
    MX
    Receives mail at mx.zoho.in, mx2.zoho.in, mx3.zoho.in
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    DMARC policy p=none: reports only
    Checked
    2026-11-10 08:10 UTC

    Suggest a correction

  51. www.rainbets-casino-au.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareUnder rainbets-casino-au.com, listed by MetaMaskMX presentSPF ~allDMARC policy noneRegistered 3 mo ago
    DetailsHide
    Hostname
    www.rainbets-casino-au.com
    First seen
    2026-11-10 16:46 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-10 12:03 UTC
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-10 12:02 UTC
    Listed
    MetaMask, listing rainbets-casino-au.com and the names under it
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR2
    Valid 2026-11-10 15:45 UTC to 2027-02-08 15:45 UTC
    Logged 2026-11-10 16:43 UTC in Google PlumbersArms2027h1, entry 721,223,547
    SHA-256 3261689b9f34854f7f883d1d66b33adbbd6f2237782976740a3c70a85250d28e
    Public key SHA-256 0bf848a0824df5d4161460dac345bcb8025ade5fef4a925416d242ef90b14ac9
    Addresses
    104.21.5.232 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.154.189 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.5.232, 172.67.154.189): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    rainbets-casino-au.com
    Registered
    2026-08-26 · NameSilo, LLC
    MX
    Receives mail at _dc-mx.acf4cea04c83.rainbets-casino-au.com
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    DMARC policy p=none: reports only
    Checked
    2026-11-10 17:57 UTC

    Suggest a correction

  52. 625904-crypto.com US · AS13335 · Cloudflare, Inc.4 addressesCrypto.com
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 59 d ago
    DetailsHide
    Hostname
    625904-crypto.com
    First seen
    2026-11-10 16:41 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-10 12:03 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-11-10 15:37 UTC to 2027-02-08 15:37 UTC
    Logged 2026-11-10 16:36 UTC in Geomys Tuscolo2027h1, entry 563,409,907
    SHA-256 681dd3539951187e4a2888a2d8891606e6973c357486eca0cc2b1dc21b4fb12b
    Public key SHA-256 c4e3b959617731b9c05d7becca67f45987c72d8d501ec0e0356d9c945a0617d9
    Brand
    Crypto.com
    Addresses
    104.21.76.45 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.187.173 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3031::6815:4c2d
    2606:4700:3037::ac43:bbad
    Cloudflare
    Cloudflare (104.21.76.45, 172.67.187.173): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    625904-crypto.com
    Registered
    2026-09-12 · Dynadot Inc
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-10 16:51 UTC

    Suggest a correction

  53. aiprosperitysociety.com GB · AS209341 · WHG-FRA WHG Hosting Service…
    ListedListed by CERT PolskaMX presentSPF ~allDMARC policy noneRegistered 7 mo ago
    DetailsHide
    Hostname
    aiprosperitysociety.com
    First seen
    2026-11-10 16:41 UTC
    Listing
    CERT Polska listed it 2026-05-11 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-10 15:43 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR1 · precertificate
    Valid 2026-11-10 15:40 UTC to 2027-02-08 15:40 UTC
    Logged 2026-11-10 16:38 UTC in IPng Networks Halloumi2027h1, entry 443,600,319
    SHA-256 1dbb293829f32599c8d3b9402b05ba58deed4531429b54804902aaeb8552aba8
    Public key SHA-256 256f00382bebe4d0811b544c518e2a89878a182ae72d6a4cdbd235870a12189a
    Addresses
    192.250.229.111 · United Kingdom · AS209341 WHG-FRA WHG Hosting Services Ltd
    Domain
    aiprosperitysociety.com
    Registered
    2026-04-07 · Netregistry Wholesale Pty Ltd
    MX
    Receives mail at mail.aiprosperitysociety.com
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    DMARC policy p=none: reports only
    Checked
    2026-11-10 14:27 UTC

    Suggest a correction

  54. apisiesa.itmsas.net CO · AS27951 · Media Commerce Partners S.A2 addresses
    ReportedUnder itmsas.net, reported by PhishDestroyMX presentSPF ~allDMARC policy noneRegistered 7 y ago
    DetailsHide
    Hostname
    apisiesa.itmsas.net
    First seen
    2026-11-10 16:41 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-10 12:02 UTC
    Reported
    PhishDestroy, listing itmsas.net and the names under it
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by ZeroSSL RSA DV SSL CA 2
    Valid 2026-11-10 00:00 UTC to 2027-02-08 23:59 UTC
    Logged 2026-11-10 16:37 UTC in IPng Networks Halloumi2027h1, entry 443,579,196
    SHA-256 0462c4fb2fc8902a8ce322df611ab94684328e2f59c47dbfa5fe7df10618219a
    Public key SHA-256 6ba341c295dbf71ff6d540cbcc7ca5282bccab50628f715ea00a6e41985c4e65
    PhishDestroy
    Addresses
    132.255.23.55 · Colombia · AS27951 AS27951 - Media Commerce Partners S.A
    190.144.138.108 · Colombia · AS14080 AS14080 - Telmex Colombia S.A.
    Domain
    itmsas.net
    Registered
    2019-06-10 · Tucows Domains Inc.
    MX
    Receives mail at aspmx.l.google.com, alt1.aspmx.l.google.com, alt2.aspmx.l.google.com
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    DMARC policy p=none: reports only
    Checked
    2026-11-10 14:47 UTC

    Suggest a correction

  55. bitgettr.com US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX presentSPF -allDMARC rejectRegistered 5 y ago
    DetailsHide
    Hostname
    bitgettr.com
    First seen
    2026-11-10 16:41 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-10 12:02 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR2
    Valid 2026-11-10 15:42 UTC to 2027-02-08 15:42 UTC
    Logged 2026-11-10 16:40 UTC in Google PlumbersArms2027h1, entry 721,182,450
    SHA-256 3b93295be530674a04a29181e59861858fca062d6832e66e8a3aab0f22369281
    Public key SHA-256 6dca925d1fc50b2660f97cc49a792ef823bb2caeebf60ed561c371702eae5b1e
    PhishDestroy
    Addresses
    104.18.28.59 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    104.18.29.59 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.18.28.59, 104.18.29.59): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    bitgettr.com
    Registered
    2021-12-06 · Amazon Registrar, Inc.
    MX
    Receives mail at aspmx.l.google.com, alt1.aspmx.l.google.com, alt2.aspmx.l.google.com
    SPF
    SPF record with -all: other senders fail
    DMARC
    DMARC policy p=reject
    Checked
    2026-11-10 17:57 UTC

    Suggest a correction

  56. fanaberia.live US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    fanaberia.live
    First seen
    2026-11-10 16:41 UTC
    Listing
    CERT Polska listed it 2026-07-19 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-10 15:43 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-10 15:38 UTC to 2027-02-08 16:37 UTC
    Logged 2026-11-10 16:39 UTC in Let's Encrypt Sycamore2027h1, entry 1,128,685,408
    SHA-256 0925de97bdc90374dbc9dd304937fa928b40db5e007ce5dc0a168338480dff57
    Public key SHA-256 f5c5e4ba6b913d9162c75c7d9a8c43cb4894522b902461719d7948ddc0f01df1
    Addresses
    104.21.44.240 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.205.68 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.44.240, 172.67.205.68): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    fanaberia.live
    Registered
    2026-07-15 · Dynadot Inc
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-10 17:57 UTC

    Suggest a correction

  57. fnb-ai-invest.digital NL · AS62370 · Snel Snel.com B.V.
    ListedListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 7 mo ago
    DetailsHide
    Hostname
    fnb-ai-invest.digital
    First seen
    2026-11-10 16:41 UTC
    Listing
    CERT Polska listed it 2026-07-20 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-10 15:43 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by ZeroSSL ECC DV SSL CA 2 · precertificate
    Valid 2026-11-10 00:00 UTC to 2027-02-08 23:59 UTC
    Logged 2026-11-10 16:41 UTC in Geomys Tuscolo2027h1, entry 563,465,701
    SHA-256 80873132489812a133e362d56ceec97e310dfd2f2706ee4015128743993402de
    Public key SHA-256 a419146edf317e508168387e59db8ea3d3de9cfdb3ccb222066e6ea743d018a4
    Addresses
    185.62.58.179 · Netherlands · AS62370 Snel Snel.com B.V.
    Domain
    fnb-ai-invest.digital
    Registered
    2026-04-12 · Dynadot Inc
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-10 17:57 UTC

    Suggest a correction

  58. kmbw.agndatacom.com DE · AS206834 · TEAMINTERNET-CA-AS Team Int…
    ListedParking page · ParkingCrew (Team Internet)Under agndatacom.com, listed by MetaMaskMX absentSPF missingDMARC missingRegistered 3 mo ago
    DetailsHide
    Hostname
    kmbw.agndatacom.com
    First seen
    2026-11-10 16:41 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-10 12:03 UTC
    Listed
    MetaMask, listing agndatacom.com and the names under it
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-11-10 15:39 UTC to 2027-02-08 15:39 UTC
    Logged 2026-11-10 16:38 UTC in DigiCert Sphinx2027h1, entry 430,588,633
    SHA-256 373a5ec37721ef5b1736b102a2f5e9731a016781e8e00e4970a05928ab6093ca
    Public key SHA-256 dc9621a04bcb13512d1c9b4381c071ef255b5bdddad0f092d3d309297d6d7d03
    Addresses
    185.53.179.136 · Germany · AS206834 TEAMINTERNET-CA-AS Team Internet AG · ParkingCrew (Team Internet) (parking page)
    Parking page · ParkingCrew (Team Internet)
    ParkingCrew (Team Internet) (185.53.179.136): a parking service. It answers for names that are typically for sale or unused.
    Domain
    agndatacom.com
    Registered
    2026-08-20 · NameSilo, LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-10 17:23 UTC

    Suggest a correction

  59. login.dev.crypto-polis.org RU · AS57724 · DDOS-GUARD DDOS-GUARD LTD2 addresses
    ReportedDDoS-GuardUnder crypto-polis.org, reported by PhishDestroyMX presentSPF -allDMARC policy noneRegistered 7 y ago
    DetailsHide
    Hostname
    login.dev.crypto-polis.org
    First seen
    2026-11-10 16:41 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-10 12:02 UTC
    Reported
    PhishDestroy, listing crypto-polis.org and the names under it
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR1 · precertificate
    Valid 2026-11-10 15:40 UTC to 2027-02-08 15:40 UTC
    Logged 2026-11-10 16:38 UTC in DigiCert Wyvern2027h1, entry 485,814,797
    SHA-256 104f81b9a60700158a3b2cd2638dc29ba11e05d24ee019bdf5c9e81fff24f6ed
    Public key SHA-256 d40ee9b44630bae0f398a339a2bb7d87396aad0b6a3afe748ee78964558d235a
    PhishDestroy
    Addresses
    185.178.208.132 · Russia · AS57724 DDOS-GUARD DDOS-GUARD LTD · DDoS-Guard (cdn)
    185.178.208.182 · Russia · AS57724 DDOS-GUARD DDOS-GUARD LTD · DDoS-Guard (cdn)
    DDoS-Guard
    DDoS-Guard (185.178.208.132, 185.178.208.182): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    crypto-polis.org
    Registered
    2019-12-20 · Internet Domain Service BS Corp
    MX
    Receives mail at mx.yandex.net
    SPF
    SPF record with -all: other senders fail
    DMARC
    DMARC policy p=none: reports only
    Checked
    2026-11-10 00:48 UTC

    Suggest a correction

  60. nutsynft.art US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX presentSPF ~allDMARC quarantineRegistered 4 mo ago
    DetailsHide
    Hostname
    nutsynft.art
    First seen
    2026-11-10 16:41 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-10 12:02 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-10 15:39 UTC to 2027-02-08 16:36 UTC
    Logged 2026-11-10 16:39 UTC in Geomys Tuscolo2027h1, entry 563,449,171
    SHA-256 807edb96d30d061c5976a8b4bff7258aa753e01862710add52eaf949ed3be3ee
    Public key SHA-256 77e14b4d7b0641de5c39d4bf3d32e7a09cdd0d1157099ca549117ba4d89d8cc6
    PhishDestroy
    Addresses
    104.21.18.26 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.179.170 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.18.26, 172.67.179.170): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    nutsynft.art
    Registered
    2026-07-11 · Spaceship, Inc.
    MX
    Receives mail at mx1.spacemail.com, mx2.spacemail.com
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    DMARC policy p=quarantine
    Checked
    2026-11-10 16:51 UTC

    Suggest a correction

  61. pocket.api.nodeshub.online US · AS13335 · Cloudflare, Inc.3 addresses
    ReportedCloudflareUnder nodeshub.online, reported by PhishDestroyMX presentDMARC policy noneRegistered 3 y ago
    DetailsHide
    Hostname
    pocket.api.nodeshub.online
    First seen
    2026-11-10 16:41 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-10 12:02 UTC
    Reported
    PhishDestroy, listing nodeshub.online and the names under it
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-11-10 15:41 UTC to 2027-02-08 15:41 UTC
    Logged 2026-11-10 16:39 UTC in Let's Encrypt Willow2027h1, entry 1,083,592,079
    SHA-256 12147e5631942dec16dc55d5d499ce398855fbb229cd82e58fe4d98f84c77965
    Public key SHA-256 5634e73c94f5e2f460350ee84847eaa16421b63b9e10936cebb02331f9213d6d
    PhishDestroy
    Addresses
    104.26.6.49 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    104.26.7.49 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.68.84 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.26.6.49, 104.26.7.49, 172.67.68.84): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    nodeshub.online
    Registered
    2023-10-30 · NameCheap, Inc.
    MX
    Receives mail at mx1.hostinger.com, eforward1.registrar-servers.com, eforward2.registrar-servers.com
    DMARC
    DMARC policy p=none: reports only
    Checked
    2026-11-10 08:55 UTC

    Suggest a correction

  62. revgroxai-digital.pages.dev US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT Polska
    DetailsHide
    Hostname
    revgroxai-digital.pages.dev
    First seen
    2026-11-10 16:41 UTC
    Listing
    CERT Polska listed it 2026-09-12 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-10 15:43 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-10 15:39 UTC to 2027-02-08 16:37 UTC
    Logged 2026-11-10 16:39 UTC in IPng Networks Halloumi2027h1, entry 443,604,830
    SHA-256 d4b385f98f962edc6e4bf86cc9edb3030519d7d5c40160f871f1d4896417f82f
    Public key SHA-256 59ff76a2718c56cdea07267d7bd34ae76300128828b4fbf715c8df34c1ddae4e
    Addresses
    172.66.44.179 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.66.47.77 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (172.66.44.179, 172.66.47.77): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.

    Suggest a correction

  63. turboexelonark-platform.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 7 mo ago
    DetailsHide
    Hostname
    turboexelonark-platform.com
    First seen
    2026-11-10 16:41 UTC
    Listing
    CERT Polska listed it 2026-07-21 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-10 15:43 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-10 15:39 UTC to 2027-02-08 16:36 UTC
    Logged 2026-11-10 16:39 UTC in Geomys Tuscolo2027h1, entry 563,448,163
    SHA-256 efbfa6f7423fe4ff4dbe5d6ffc6568ade25ce85887a29298dd6741ab026b2dba
    Public key SHA-256 4444be7fdac8e1a5645c473cea53dbfeeffb3cbd36b60814477fe6ae04d30c7c
    Addresses
    104.21.14.45 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.157.188 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.14.45, 172.67.157.188): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    turboexelonark-platform.com
    Registered
    2026-04-19 · MAT BAO CORPORATION
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-10 17:57 UTC

    Suggest a correction

  64. twmarketbrief.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by NPA 165 (finance and insurance)MX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    twmarketbrief.com
    First seen
    2026-11-10 16:41 UTC
    Listing
    NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-10 13:37 UTC
    Listed
    NPA 165
    1. Observed in the NPA 165 feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WR1 · precertificate
    Valid 2026-11-10 15:38 UTC to 2027-02-08 16:34 UTC
    Logged 2026-11-10 16:38 UTC in Let's Encrypt Willow2027h1, entry 1,083,554,467
    SHA-256 09d685b58e78121829eab6d7cbbf9b660e51d307a42d2d27ccf8cbe6eb8e2014
    Public key SHA-256 c0988d9b41f10d4faf9c7fb2d850390171adb266d3c692aa9623050956a8d4a9
    Addresses
    104.21.45.147 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.215.127 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.45.147, 172.67.215.127): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    twmarketbrief.com
    Registered
    2026-07-15 · Cloudflare, Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-10 17:57 UTC

    Suggest a correction

  65. usdai-proposals.com US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 7 mo ago
    DetailsHide
    Hostname
    usdai-proposals.com
    First seen
    2026-11-10 16:41 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-10 12:02 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-10 15:36 UTC to 2027-02-08 16:34 UTC
    Logged 2026-11-10 16:36 UTC in DigiCert Wyvern2027h1, entry 485,786,189
    SHA-256 38d38c4942e5612120acf87bb524e9c7f39df3d1c39f1677b3c0665a7ca0a673
    Public key SHA-256 9190095c4d265c030b398afdd840d25e956c5ac4d6369db1c1f5b52174c09eae
    PhishDestroy
    Addresses
    104.21.33.173 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.165.14 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.33.173, 172.67.165.14): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    usdai-proposals.com
    Registered
    2026-04-21 · PDR Ltd. d/b/a PublicDomainRegistry.com
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-10 17:57 UTC

    Suggest a correction

  66. usweb07zoom.us IL · AS202226 · GreatFlower Emil Vitukhnovs…
    ListedListed by MetaMaskMX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    usweb07zoom.us
    First seen
    2026-11-10 16:41 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-10 12:03 UTC
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-10 12:02 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-10 15:38 UTC to 2027-02-08 16:36 UTC
    Logged 2026-11-10 16:38 UTC in Let's Encrypt Willow2027h1, entry 1,083,550,950
    SHA-256 95e20d2cbaf8791a4191ed1b9b7d80fededc3719b16853969c5effb639ffb784
    Public key SHA-256 08a4f1f253703fb2064b300d9add7155c42cc0aab6474a18efb35b23a64f56c8
    Addresses
    31.76.87.48 · Israel · AS202226 GreatFlower Emil Vitukhnovskii trading as Great Flower
    Domain
    usweb07zoom.us
    Registered
    2026-07-15 · NameCheap, Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-10 17:57 UTC

    Suggest a correction

  67. view-injective.info US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    view-injective.info
    First seen
    2026-11-10 16:41 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-10 12:03 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-10 15:39 UTC to 2027-02-08 16:37 UTC
    Logged 2026-11-10 16:39 UTC in DigiCert Wyvern2027h1, entry 485,825,550
    SHA-256 843e4a64a96cab8f41d99a3bc2ff260def112086a3a75da9c120f2855a0b4ccb
    Public key SHA-256 969c11a99eb0c27b02f4dd0c5478129b16a6eb49a78477a60c80966e1fff91d2
    Addresses
    104.21.93.93 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.208.126 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.93.93, 172.67.208.126): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    view-injective.info
    Registered
    2026-07-15 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-10 17:57 UTC

    Suggest a correction

  68. 309176-crypto.com US · AS13335 · Cloudflare, Inc.4 addressesCrypto.com
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 59 d ago
    DetailsHide
    Hostname
    309176-crypto.com
    First seen
    2026-11-10 16:36 UTC
    First published
    2026-11-10 16:47 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-10 12:03 UTC
    DNS
    Resolves · checked 2026-11-10 16:59 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-11-10 15:35 UTC to 2027-02-08 15:35 UTC
    Logged 2026-11-10 16:34 UTC in Geomys Tuscolo2027h1, entry 563,384,950
    SHA-256 0b59e94420d7eaccddecaa9b8fb92bbaef038cfa874675ec09b08f08496bd568
    Public key SHA-256 d66ab01bfd550a04cdcb086b36b5ada2b774062f891fb5c87bcf95a7112a8c53
    Brand
    Crypto.com
    Addresses
    104.21.20.149 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.193.37 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3030::6815:1495
    2606:4700:3035::ac43:c125
    Cloudflare
    Cloudflare (104.21.20.149, 172.67.193.37): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    309176-crypto.com
    Registered
    2026-09-12 · Dynadot Inc
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-10 16:46 UTC

    Suggest a correction

  69. api.nurolportfoyum.com US · AS397273 · Render2 addresses
    ListedShared platform · RenderUnder nurolportfoyum.com, listed by USOMMX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    api.nurolportfoyum.com
    First seen
    2026-11-10 16:36 UTC
    First published
    2026-11-10 16:47 UTC
    Listing
    USOM listed it 2026-07-15 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-10 17:50 UTC
    DNS
    Resolves · checked 2026-11-10 16:59 UTC
    Listed
    USOM, listing nurolportfoyum.com and the names under it
    1. Listed by USOM
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-10 15:33 UTC to 2027-02-08 16:33 UTC
    Logged 2026-11-10 16:33 UTC in DigiCert Sphinx2027h1, entry 430,533,590
    SHA-256 73ecb6b77c5c3993cf94c8bc173de469a26daefe514f78f39b578449a66e4118
    Public key SHA-256 01c5c0b3ab54ed812cc6596f7440137c62749345cf54df33290b9d916d87c1a9
    Addresses
    216.24.57.16 · United States · AS397273 RENDER - Render · Render (shared platform)
    216.24.57.18 · United States · AS397273 RENDER - Render · Render (shared platform)
    Shared platform · Render
    Render (216.24.57.16, 216.24.57.18): a shared platform front end. The address serves every app deployed on the platform.
    Domain
    nurolportfoyum.com
    Registered
    2026-07-15 · NameCheap, Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-10 16:46 UTC

    Suggest a correction

  70. grid.pricer24.com DE · AS24940 · HETZNER-AS Hetzner Online G…
    ReportedHetznerUnder pricer24.com, reported by PhishDestroyMX presentSPF ~allDMARC policy noneRegistered 8 y ago
    DetailsHide
    Hostname
    grid.pricer24.com
    First seen
    2026-11-10 16:36 UTC
    First published
    2026-11-10 16:47 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-10 12:02 UTC
    DNS
    Resolves · checked 2026-11-10 16:59 UTC
    Reported
    PhishDestroy, listing pricer24.com and the names under it
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-11-10 15:33 UTC to 2027-02-08 15:33 UTC
    Logged 2026-11-10 16:32 UTC in Google ParcelYard2027h1, entry 720,802,893
    SHA-256 9dd3286aec5205e865b39457260ca9c0c130ed64e4bd7ee2aeffbfaa7f8e1d7c
    Public key SHA-256 f011e36e9da2ac2a0192584df3dee31f524d70d71a4944901358520a3ceef017
    PhishDestroy
    Addresses
    168.119.215.115 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
    Hetzner
    Hetzner (168.119.215.115): a cloud provider. It rents servers and addresses to its customers.
    Domain
    pricer24.com
    Registered
    2018-11-06 · Internet Invest, Ltd. dba Imena.ua
    MX
    Receives mail at aspmx.l.google.com, alt1.aspmx.l.google.com, alt2.aspmx.l.google.com
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    DMARC policy p=none: reports only
    Checked
    2026-11-10 13:16 UTC

    Suggest a correction

  71. immediatedefinityai.shop NL · AS62370 · Snel Snel.com B.V.
    ReportedReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    immediatedefinityai.shop
    First seen
    2026-11-10 16:36 UTC
    First published
    2026-10-28 10:00 UTC
    Listing
    CERT Polska listed it 2026-07-20 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-10 15:43 UTC
    PhishDestroy: first observed in the feed 2026-10-30 · still listed at the last successful feed check 2026-11-10 12:02 UTC
    DNS
    Resolves · checked 2026-11-10 10:11 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by ZeroSSL ECC DV SSL CA 2 · precertificate
    Valid 2026-11-10 00:00 UTC to 2027-02-08 23:59 UTC
    Logged 2026-11-10 16:33 UTC in DigiCert Wyvern2027h1, entry 485,752,058
    SHA-256 6e0e7c985ef6d3604c6b55c706e6fafaad1cc676d6dfb2807908f2b7e821ae5c
    Public key SHA-256 4233c0496450044597d96232a3fd44879716e310a2c1ae040e82ce92393f5970
    PhishDestroy
    Addresses
    185.62.56.121 · Netherlands · AS62370 Snel Snel.com B.V.
    Domain
    immediatedefinityai.shop
    Registered
    2026-07-02 · NETIM
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-10 10:58 UTC

    Suggest a correction

  72. kleertjes-nl.buy-vera.com US · AS13335 · Cloudflare, Inc.
    ListedCloudflareUnder buy-vera.com, listed by CERT PolskaMX absentSPF missingDMARC missingRegistered 3 mo ago
    DetailsHide
    Hostname
    kleertjes-nl.buy-vera.com
    First seen
    2026-11-10 16:36 UTC
    First published
    2026-11-10 16:47 UTC
    Listing
    CERT Polska listed it 2026-09-09 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-10 15:43 UTC
    DNS
    Resolves · checked 2026-11-10 16:59 UTC
    Listed
    CERT Polska, listing buy-vera.com and the names under it
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-10 15:33 UTC to 2027-02-08 16:33 UTC
    Logged 2026-11-10 16:33 UTC in Google ParcelYard2027h1, entry 720,822,569
    SHA-256 15cd5aa1085d7464ba92bbad53f1450a6f1345912b0cf6f79f0bee14471aefaa
    Public key SHA-256 92b7d6e0785e7b86e64e9041d172b65f5fa1a22d1f9948f9f08e795d7206a5f0
    Addresses
    104.18.13.234 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.18.13.234): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    buy-vera.com
    Registered
    2026-08-21 · Cloudflare, Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-10 10:17 UTC

    Suggest a correction

  73. login.tanx-fi.com AE · AS59692 · IQWEB IQWeb FZ-LLC
    ListedUnder tanx-fi.com, listed by MetaMaskMX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    login.tanx-fi.com
    First seen
    2026-11-10 16:36 UTC
    First published
    2026-11-10 16:47 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-10 12:03 UTC
    DNS
    Resolves · checked 2026-11-10 16:59 UTC
    Listed
    MetaMask, listing tanx-fi.com and the names under it
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR1 · precertificate
    Valid 2026-11-10 15:33 UTC to 2027-02-08 15:33 UTC
    Logged 2026-11-10 16:32 UTC in DigiCert Sphinx2027h1, entry 430,522,823
    SHA-256 0015b40df7f31e514eb7bda32ae0ba37389055480eeff33d6afd07aa508bb995
    Public key SHA-256 06c46aecd364b5f21dc06e9e101dd1d1be2938bc7235bfd9eed57b8e40936763
    Addresses
    186.2.175.109 · United Arab Emirates · AS59692 IQWEB IQWeb FZ-LLC
    Domain
    tanx-fi.com
    Registered
    2026-07-24 · Atak Domain Bilgi Teknolojileri A.S.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-10 08:55 UTC

    Suggest a correction

  74. nezorex.com US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 7 mo ago
    DetailsHide
    Hostname
    nezorex.com
    First seen
    2026-11-10 16:36 UTC
    First published
    2026-11-10 16:47 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-10 12:02 UTC
    DNS
    Resolves · checked 2026-11-10 16:59 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by Cloudflare TLS Issuing ECC CA 4 · precertificate
    Valid 2026-11-10 16:23 UTC to 2027-02-08 16:32 UTC
    Logged 2026-11-10 16:33 UTC in DigiCert Wyvern2027h1, entry 485,747,345
    SHA-256 fc150744f2e75d55f82d2064825f4d9a19c75a730b29f3a51e50da289c65eefa
    Public key SHA-256 9f4feea7c7eb3e99214d88584ae6dacd80823a4d058fde27c2c7ad8b5c240ad7
    PhishDestroy
    Addresses
    104.21.46.4 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.221.243 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.46.4, 172.67.221.243): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    nezorex.com
    Registered
    2026-04-28 · Atak Domain Bilgi Teknolojileri A.S.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-10 16:46 UTC

    Suggest a correction

  75. oiaeu.bar US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by NPA 165 (information services)MX absentSPF missingDMARC missingRegistered 10 mo ago
    DetailsHide
    Hostname
    oiaeu.bar
    First seen
    2026-11-10 16:36 UTC
    First published
    2026-11-10 16:47 UTC
    Listing
    NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-10 13:37 UTC
    DNS
    Resolves · checked 2026-11-10 16:59 UTC
    Listed
    NPA 165
    1. Observed in the NPA 165 feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-10 15:34 UTC to 2027-02-08 16:33 UTC
    Logged 2026-11-10 16:34 UTC in Google PlumbersArms2027h1, entry 721,089,144
    SHA-256 d34dfce08a6fb1ab74c4861d6ddc61712027ccf4c746e3e8c4723a3f68714fb6
    Public key SHA-256 eadaf1bbcdb28b5668725164da131a0a9a294fcad714f6da7c840398a7f39936
    Addresses
    104.21.2.167 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.129.119 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.2.167, 172.67.129.119): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    oiaeu.bar
    Registered
    2026-01-17 · GoDaddy
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-10 16:46 UTC

    Suggest a correction

  76. opcftest.478691.xyz US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareUnder 478691.xyz, listed by MetaMaskMX absentSPF missingDMARC missingRegistered 3 y ago
    DetailsHide
    Hostname
    opcftest.478691.xyz
    First seen
    2026-11-10 16:36 UTC
    First published
    2026-11-10 16:47 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-10 12:03 UTC
    DNS
    Not resolving · checked 2026-11-10 16:59 UTC
    Listed
    MetaMask, listing 478691.xyz and the names under it
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-10 15:33 UTC to 2027-02-08 15:33 UTC
    Logged 2026-11-10 16:31 UTC in Google ParcelYard2027h1, entry 720,792,039
    SHA-256 1339ec9a1d7b28fc0350d5cd470eb35255f86139389ebd888dcacb98549c6822
    Public key SHA-256 920bd7d1b66685f2746909039b92ca2fe56f0ddff676cbdb8ec573a491320df2
    Addresses
    104.21.37.52 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.204.39 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.37.52, 172.67.204.39): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    478691.xyz
    Registered
    2024-04-07 · NameSilo, LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-10 09:05 UTC

    Suggest a correction

  77. parser.pricer24.com DE · AS24940 · HETZNER-AS Hetzner Online G…
    ReportedHetznerUnder pricer24.com, reported by PhishDestroyMX presentSPF ~allDMARC policy noneRegistered 8 y ago
    DetailsHide
    Hostname
    parser.pricer24.com
    First seen
    2026-11-10 16:36 UTC
    First published
    2026-11-10 16:47 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-10 12:02 UTC
    DNS
    Resolves · checked 2026-11-10 16:59 UTC
    Reported
    PhishDestroy, listing pricer24.com and the names under it
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-11-10 15:34 UTC to 2027-02-08 15:34 UTC
    Logged 2026-11-10 16:32 UTC in Let's Encrypt Sycamore2027h1, entry 1,128,524,982
    SHA-256 764c35c974475e866381ae6acaa1cbcdb9899d99285ff42557fe304e928630ae
    Public key SHA-256 99ee089f6c7633c58bccc3b7b9bbdcbaaefb5754f7c8d9a58a74c4342e496f7c
    PhishDestroy
    Addresses
    168.119.215.115 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
    Hetzner
    Hetzner (168.119.215.115): a cloud provider. It rents servers and addresses to its customers.
    Domain
    pricer24.com
    Registered
    2018-11-06 · Internet Invest, Ltd. dba Imena.ua
    MX
    Receives mail at aspmx.l.google.com, alt1.aspmx.l.google.com, alt2.aspmx.l.google.com
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    DMARC policy p=none: reports only
    Checked
    2026-11-10 13:16 UTC

    Suggest a correction

  78. primexai.shop NL · AS62370 · Snel Snel.com B.V.
    ListedListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 7 mo ago
    DetailsHide
    Hostname
    primexai.shop
    First seen
    2026-11-10 16:36 UTC
    First published
    2026-11-10 16:47 UTC
    Listing
    CERT Polska listed it 2026-07-21 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-10 15:43 UTC
    DNS
    Resolves · checked 2026-11-10 16:59 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by ZeroSSL ECC DV SSL CA 2
    Valid 2026-09-11 00:00 UTC to 2026-12-10 23:59 UTC
    Logged 2026-11-10 16:35 UTC in IPng Networks Halloumi2026h2a, entry 1,297,093,617
    SHA-256 280b708f8ad4e2b7a2a0902bec64a607f155359e29b7bd535338f7169dd811b3
    Public key SHA-256 00afbb3fc3fa5e32315f984e0866a511dfd4cc185b2d780a82f3156b0e05473f
    Addresses
    185.62.56.121 · Netherlands · AS62370 Snel Snel.com B.V.
    Domain
    primexai.shop
    Registered
    2026-04-19 · Dynadot Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-10 16:46 UTC

    Suggest a correction

  79. racdt.asia US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by NPA 165 (information services)MX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    racdt.asia
    First seen
    2026-11-10 16:36 UTC
    First published
    2026-11-10 16:47 UTC
    Listing
    NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-10 13:37 UTC
    DNS
    Resolves · checked 2026-11-10 16:59 UTC
    Listed
    NPA 165
    1. Observed in the NPA 165 feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-11-10 15:34 UTC to 2027-02-08 15:34 UTC
    Logged 2026-11-10 16:32 UTC in Let's Encrypt Willow2027h1, entry 1,083,399,494
    SHA-256 7d71e4aa1c5ccbb693912b3e833fc8649a36e99da627221125407e5b7a3a9931
    Public key SHA-256 624a0aaccf22fbb513f92707d1c3cf37e444c7a5ec7880b0e42cdafa1514306f
    Addresses
    104.21.44.221 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.204.33 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.44.221, 172.67.204.33): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    racdt.asia
    Registered
    2026-05-17 · Alibaba Cloud Computing Ltd. d/b/a HiChina (www.net.cn)
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-10 16:46 UTC

    Suggest a correction

  80. sklepherbaciany.live US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    sklepherbaciany.live
    First seen
    2026-11-10 16:36 UTC
    First published
    2026-11-10 16:47 UTC
    Listing
    CERT Polska listed it 2026-08-18 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-10 15:43 UTC
    DNS
    Resolves · checked 2026-11-10 16:59 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1
    Valid 2026-11-10 15:33 UTC to 2027-02-08 16:31 UTC
    Logged 2026-11-10 16:34 UTC in Sectigo Monument2027h1, entry 120,116,491
    SHA-256 538f0eb1b99a9524f7bc5b8846c65069a383df03f709e2fabdc8cd41702b867e
    Public key SHA-256 c270eddc247cc7e23924787af6f2ea389d8722d11b8e420243d6dc5b12419260
    Addresses
    104.21.95.111 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.144.165 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.95.111, 172.67.144.165): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    sklepherbaciany.live
    Registered
    2026-07-15 · Dynadot Inc
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-10 16:46 UTC

    Suggest a correction

  81. thenordsternaigpt.net US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 59 d ago
    DetailsHide
    Hostname
    thenordsternaigpt.net
    First seen
    2026-11-10 16:36 UTC
    First published
    2026-11-10 16:47 UTC
    Listing
    CERT Polska listed it 2026-09-12 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-10 15:43 UTC
    DNS
    Resolves · checked 2026-11-10 16:59 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-11-10 15:37 UTC to 2027-02-08 15:37 UTC
    Logged 2026-11-10 16:35 UTC in Geomys Tuscolo2027h1, entry 563,407,177
    SHA-256 07c00074086a3c15db733773ee36d8f4cf2ec1671fe6f4788ac8136f59ee2f6d
    Public key SHA-256 f72269660864a7714ab918b1eb88e51fc55daeb696c71b8b92064b616c4a298b
    Addresses
    104.21.16.54 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.210.31 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.16.54, 172.67.210.31): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    thenordsternaigpt.net
    Registered
    2026-09-12 · NameCheap, Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-10 16:46 UTC

    Suggest a correction

  82. venkatin.pro US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 7 mo ago
    DetailsHide
    Hostname
    venkatin.pro
    First seen
    2026-11-10 16:36 UTC
    First published
    2026-11-10 16:47 UTC
    Listing
    CERT Polska listed it 2026-05-18 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-10 15:43 UTC
    DNS
    Resolves · checked 2026-11-10 16:59 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by Cloudflare TLS Issuing ECC CA 4 · precertificate
    Valid 2026-11-10 16:22 UTC to 2027-02-08 16:31 UTC
    Logged 2026-11-10 16:32 UTC in DigiCert Sphinx2027h1, entry 430,528,927
    SHA-256 52d4b81a0d57b1f493c07546c238f4f02200fbf876d1cfd1174343e56f8f8c1c
    Public key SHA-256 9e9635e50ae95c508a3b703d8eb1bbb45f520b225755b83d379899a7a5b2cb3a
    Addresses
    104.21.50.116 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.162.117 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.50.116, 172.67.162.117): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    venkatin.pro
    Registered
    2026-04-14 · Dynadot Inc
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-10 16:46 UTC

    Suggest a correction

  83. wealth.daqiqiu.xyz US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareUnder daqiqiu.xyz, reported by PhishDestroyMX absentSPF missingDMARC missingRegistered 8 mo ago
    DetailsHide
    Hostname
    wealth.daqiqiu.xyz
    First seen
    2026-11-10 16:36 UTC
    First published
    2026-11-10 16:47 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-10 12:02 UTC
    DNS
    Resolves · checked 2026-11-10 16:59 UTC
    Reported
    PhishDestroy, listing daqiqiu.xyz and the names under it
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WR1 · precertificate
    Valid 2026-11-10 15:36 UTC to 2027-02-08 16:34 UTC
    Logged 2026-11-10 16:36 UTC in Geomys Tuscolo2027h1, entry 563,409,101
    SHA-256 acfe26930183ac6da545655e9c4c246565fdb2af56be67dbdcd7f9dbed07de46
    Public key SHA-256 be041c2e47471c3aa870cec364817d270f5e302a6adc5f2ffd1a3d4f91ee6047
    PhishDestroy
    Addresses
    104.21.89.236 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.148.238 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.89.236, 172.67.148.238): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    daqiqiu.xyz
    Registered
    2026-03-18 · Cloudflare, Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-10 15:51 UTC

    Suggest a correction

  84. wtkpm.asia US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by NPA 165 (information services)MX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    wtkpm.asia
    First seen
    2026-11-10 16:36 UTC
    First published
    2026-11-10 16:47 UTC
    Listing
    NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-10 13:37 UTC
    DNS
    Resolves · checked 2026-11-10 16:59 UTC
    Listed
    NPA 165
    1. Observed in the NPA 165 feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-11-10 15:33 UTC to 2027-02-08 15:33 UTC
    Logged 2026-11-10 16:32 UTC in Geomys Tuscolo2027h1, entry 563,364,401
    SHA-256 42503d37caac040f8c1b2ef8563479ca5c345a28c1720a3780bd160fc7505ec3
    Public key SHA-256 733d25b94a6ef1cdbb02991cbdfd79a5ce7d2acdf5395eec0349fb7360836988
    Addresses
    104.21.72.53 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.175.166 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.72.53, 172.67.175.166): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    wtkpm.asia
    Registered
    2026-05-17 · Alibaba Cloud Computing Ltd. d/b/a HiChina (www.net.cn)
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-10 16:46 UTC

    Suggest a correction

  85. www.rctvy.ezgateway.net US · AS13335 · Cloudflare, Inc.
    ListedCloudflareUnder ezgateway.net, listed by USOMMX absentSPF -allDMARC rejectRegistered 7 mo ago
    DetailsHide
    Hostname
    www.rctvy.ezgateway.net
    First seen
    2026-11-10 16:36 UTC
    First published
    2026-11-10 16:47 UTC
    Listing
    USOM listed it 2026-08-21 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-10 17:50 UTC
    DNS
    Resolves · checked 2026-11-10 16:59 UTC
    Listed
    USOM, listing ezgateway.net and the names under it
    1. Listed by USOM
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WR1 · precertificate
    Valid 2026-11-10 15:34 UTC to 2027-02-08 16:33 UTC
    Logged 2026-11-10 16:34 UTC in DigiCert Wyvern2027h1, entry 485,762,511
    SHA-256 17763ba4ca7330290c7ceb98e48236121942ac24658cfa7fb065c74105a130a2
    Public key SHA-256 4b55aac92933e9a2668a82d966d9a071fd04aa1bdbd54af653ab10bf27aada43
    Addresses
    172.67.167.61 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (172.67.167.61): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    ezgateway.net
    Registered
    2026-04-07 · Dynu Systems Incorporated
    MX
    Publishes no mail exchanger
    SPF
    SPF record with -all: other senders fail
    DMARC
    DMARC policy p=reject
    Checked
    2026-11-10 17:23 UTC

    Suggest a correction

  86. acnesic.com US · AS54113 · Fastly, Inc.
    ReportedFastlyReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 9 y ago
    DetailsHide
    Hostname
    acnesic.com
    First seen
    2026-11-10 16:31 UTC
    First published
    2026-11-10 16:47 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-10 12:02 UTC
    DNS
    Resolves · checked 2026-11-10 16:59 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WR3 · precertificate
    Valid 2026-11-10 15:28 UTC to 2027-02-08 16:26 UTC
    Logged 2026-11-10 16:28 UTC in Let's Encrypt Willow2027h1, entry 1,083,287,764
    SHA-256 a901375269cdedf208a7b10c711348fc1fa19b7837f2b8da8317298a29fbd9fe
    Public key SHA-256 6b81681f2127b0585ab88c74c3f801ef2c2c943ead58693cdc9d85e8fbf5a610
    PhishDestroy
    Addresses
    199.36.158.100 · United States · AS54113 FASTLY - Fastly, Inc. · Fastly (cdn)
    Fastly
    Fastly (199.36.158.100): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    acnesic.com
    Registered
    2017-08-15 · NameCheap, Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-10 16:46 UTC

    Suggest a correction

  87. admin.dev.upnotch.com US · AS54113 · Fastly, Inc.
    ReportedFastlyReported by PhishDestroyMX presentSPF ~allDMARC policy noneRegistered 11 y ago
    DetailsHide
    Hostname
    admin.dev.upnotch.com
    First seen
    2026-11-10 16:31 UTC
    First published
    2026-11-10 16:47 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-10 12:02 UTC
    DNS
    Resolves · checked 2026-11-10 16:59 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WR3 · precertificate
    Valid 2026-11-10 15:28 UTC to 2027-02-08 16:26 UTC
    Logged 2026-11-10 16:28 UTC in Google PlumbersArms2027h1, entry 721,005,024
    SHA-256 62cbb72d9dbe1112b6d3f9de93b69d929b069c933cfb534082dbe97890058ab5
    Public key SHA-256 6b81681f2127b0585ab88c74c3f801ef2c2c943ead58693cdc9d85e8fbf5a610
    PhishDestroy
    Addresses
    199.36.158.100 · United States · AS54113 FASTLY - Fastly, Inc. · Fastly (cdn)
    Fastly
    Fastly (199.36.158.100): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    upnotch.com
    Registered
    2015-12-28 · Squarespace Domains II LLC
    MX
    Receives mail at aspmx.l.google.com, alt1.aspmx.l.google.com, alt2.aspmx.l.google.com
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    DMARC policy p=none: reports only
    Checked
    2026-11-10 16:46 UTC

    Suggest a correction

  88. aiblackboxfc.com US · AS54113 · Fastly, Inc.
    ReportedFastlyReported by PhishDestroyMX presentSPF missingDMARC missingRegistered 10 mo ago
    DetailsHide
    Hostname
    aiblackboxfc.com
    First seen
    2026-11-10 16:31 UTC
    First published
    2026-11-10 16:47 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-10 12:02 UTC
    DNS
    Resolves · checked 2026-11-10 16:59 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WR3 · precertificate
    Valid 2026-11-10 15:28 UTC to 2027-02-08 16:26 UTC
    Logged 2026-11-10 16:28 UTC in Let's Encrypt Willow2027h1, entry 1,083,287,764
    SHA-256 a901375269cdedf208a7b10c711348fc1fa19b7837f2b8da8317298a29fbd9fe
    Public key SHA-256 6b81681f2127b0585ab88c74c3f801ef2c2c943ead58693cdc9d85e8fbf5a610
    PhishDestroy
    Addresses
    199.36.158.100 · United States · AS54113 FASTLY - Fastly, Inc. · Fastly (cdn)
    Fastly
    Fastly (199.36.158.100): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    aiblackboxfc.com
    Registered
    2026-01-19 · Squarespace Domains LLC
    MX
    Receives mail at smtp.google.com
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-10 16:46 UTC

    Suggest a correction

  89. app.876shoppingkart.com US · AS54113 · Fastly, Inc.
    ReportedFastlyReported by PhishDestroyMX presentSPF ~allDMARC policy noneRegistered 23 mo ago
    DetailsHide
    Hostname
    app.876shoppingkart.com
    First seen
    2026-11-10 16:31 UTC
    First published
    2026-11-10 16:47 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-10 12:02 UTC
    DNS
    Resolves · checked 2026-11-10 16:59 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WR3 · precertificate
    Valid 2026-11-10 15:28 UTC to 2027-02-08 16:26 UTC
    Logged 2026-11-10 16:28 UTC in Let's Encrypt Willow2027h1, entry 1,083,287,764
    SHA-256 a901375269cdedf208a7b10c711348fc1fa19b7837f2b8da8317298a29fbd9fe
    Public key SHA-256 6b81681f2127b0585ab88c74c3f801ef2c2c943ead58693cdc9d85e8fbf5a610
    PhishDestroy
    Addresses
    199.36.158.100 · United States · AS54113 FASTLY - Fastly, Inc. · Fastly (cdn)
    Fastly
    Fastly (199.36.158.100): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    876shoppingkart.com
    Registered
    2024-12-06 · Cloudflare, Inc.
    MX
    Receives mail at mx.zoho.com, mx2.zoho.com, mx3.zoho.com
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    DMARC policy p=none: reports only
    Checked
    2026-11-10 16:46 UTC

    Suggest a correction

  90. app.kards.fr US · AS54113 · Fastly, Inc.2 addresses
    ReportedFastlyReported by PhishDestroyMX presentSPF ~allDMARC rejectRegistered 7 y ago
    DetailsHide
    Hostname
    app.kards.fr
    First seen
    2026-11-10 16:31 UTC
    First published
    2026-11-10 16:47 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-10 12:02 UTC
    DNS
    Resolves · checked 2026-11-10 16:59 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WR3 · precertificate
    Valid 2026-11-10 15:28 UTC to 2027-02-08 16:26 UTC
    Logged 2026-11-10 16:28 UTC in Google PlumbersArms2027h1, entry 721,005,024
    SHA-256 62cbb72d9dbe1112b6d3f9de93b69d929b069c933cfb534082dbe97890058ab5
    Public key SHA-256 6b81681f2127b0585ab88c74c3f801ef2c2c943ead58693cdc9d85e8fbf5a610
    PhishDestroy
    Addresses
    151.101.1.195 · United States · AS54113 FASTLY - Fastly, Inc. · Fastly (cdn)
    151.101.65.195 · United States · AS54113 FASTLY - Fastly, Inc. · Fastly (cdn)
    Fastly
    Fastly (151.101.1.195, 151.101.65.195): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    kards.fr
    Registered
    2020-04-18 · KEY-SYSTEMS GmbH
    MX
    Receives mail at aspmx.l.google.com, alt1.aspmx.l.google.com, alt2.aspmx.l.google.com
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    DMARC policy p=reject
    Checked
    2026-11-10 16:46 UTC

    Suggest a correction

  91. app.reshapeclub.com US · AS54113 · Fastly, Inc.
    ReportedFastlyReported by PhishDestroyMX presentSPF missingDMARC policy noneRegistered 9 y ago
    DetailsHide
    Hostname
    app.reshapeclub.com
    First seen
    2026-11-10 16:31 UTC
    First published
    2026-11-10 16:47 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-10 12:02 UTC
    DNS
    Resolves · checked 2026-11-10 16:59 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WR3 · precertificate
    Valid 2026-11-10 15:28 UTC to 2027-02-08 16:26 UTC
    Logged 2026-11-10 16:28 UTC in Google PlumbersArms2027h1, entry 721,005,024
    SHA-256 62cbb72d9dbe1112b6d3f9de93b69d929b069c933cfb534082dbe97890058ab5
    Public key SHA-256 6b81681f2127b0585ab88c74c3f801ef2c2c943ead58693cdc9d85e8fbf5a610
    PhishDestroy
    Addresses
    199.36.158.100 · United States · AS54113 FASTLY - Fastly, Inc. · Fastly (cdn)
    Fastly
    Fastly (199.36.158.100): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    reshapeclub.com
    Registered
    2017-12-05 · NameCheap, Inc.
    MX
    Receives mail at mx1.krystal.uk, mx2.krystal.uk
    SPF
    Publishes no SPF record
    DMARC
    DMARC policy p=none: reports only
    Checked
    2026-11-10 07:59 UTC

    Suggest a correction

  92. artoprism.com US · AS54113 · Fastly, Inc.
    ReportedFastlyReported by PhishDestroyMX presentSPF ~allDMARC missingRegistered 20 mo ago
    DetailsHide
    Hostname
    artoprism.com
    First seen
    2026-11-10 16:31 UTC
    First published
    2026-11-10 16:47 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-10 12:02 UTC
    DNS
    Resolves · checked 2026-11-10 16:59 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WR3 · precertificate
    Valid 2026-11-10 15:28 UTC to 2027-02-08 16:26 UTC
    Logged 2026-11-10 16:28 UTC in Let's Encrypt Willow2027h1, entry 1,083,287,764
    SHA-256 a901375269cdedf208a7b10c711348fc1fa19b7837f2b8da8317298a29fbd9fe
    Public key SHA-256 6b81681f2127b0585ab88c74c3f801ef2c2c943ead58693cdc9d85e8fbf5a610
    PhishDestroy
    Addresses
    199.36.158.100 · United States · AS54113 FASTLY - Fastly, Inc. · Fastly (cdn)
    Fastly
    Fastly (199.36.158.100): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    artoprism.com
    Registered
    2025-03-07 · NameCheap, Inc.
    MX
    Receives mail at eforward1.registrar-servers.com, eforward2.registrar-servers.com, eforward3.registrar-servers.com
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-10 16:46 UTC

    Suggest a correction

  93. ayurdrkaur.com US · AS54113 · Fastly, Inc.
    ReportedFastlyReported by PhishDestroyMX presentSPF ~allDMARC missingRegistered 5 y ago
    DetailsHide
    Hostname
    ayurdrkaur.com
    First seen
    2026-11-10 16:31 UTC
    First published
    2026-11-10 16:47 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-10 12:02 UTC
    DNS
    Resolves · checked 2026-11-10 16:59 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WR3 · precertificate
    Valid 2026-11-10 15:28 UTC to 2027-02-08 16:26 UTC
    Logged 2026-11-10 16:28 UTC in Google PlumbersArms2027h1, entry 721,005,024
    SHA-256 62cbb72d9dbe1112b6d3f9de93b69d929b069c933cfb534082dbe97890058ab5
    Public key SHA-256 6b81681f2127b0585ab88c74c3f801ef2c2c943ead58693cdc9d85e8fbf5a610
    PhishDestroy
    Addresses
    199.36.158.100 · United States · AS54113 FASTLY - Fastly, Inc. · Fastly (cdn)
    Fastly
    Fastly (199.36.158.100): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    ayurdrkaur.com
    Registered
    2021-08-11 · GoDaddy.com, LLC
    MX
    Receives mail at mx.zoho.com, mx2.zoho.com, mx3.zoho.com
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-10 16:46 UTC

    Suggest a correction

  94. backoffice-saas-stg.tmdigital.ag US · AS54113 · Fastly, Inc.
    ReportedFastlyReported by PhishDestroyMX presentSPF ~allDMARC policy noneRegistered 2 y ago
    DetailsHide
    Hostname
    backoffice-saas-stg.tmdigital.ag
    First seen
    2026-11-10 16:31 UTC
    First published
    2026-11-10 16:47 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-10 12:02 UTC
    DNS
    Resolves · checked 2026-11-10 16:59 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WR3 · precertificate
    Valid 2026-11-10 15:28 UTC to 2027-02-08 16:26 UTC
    Logged 2026-11-10 16:28 UTC in Google PlumbersArms2027h1, entry 721,005,024
    SHA-256 62cbb72d9dbe1112b6d3f9de93b69d929b069c933cfb534082dbe97890058ab5
    Public key SHA-256 6b81681f2127b0585ab88c74c3f801ef2c2c943ead58693cdc9d85e8fbf5a610
    PhishDestroy
    Addresses
    199.36.158.100 · United States · AS54113 FASTLY - Fastly, Inc. · Fastly (cdn)
    Fastly
    Fastly (199.36.158.100): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    tmdigital.ag
    Registered
    2024-09-23 · Hosting Concepts B.V. d/b/a Registrar.eu
    MX
    Receives mail at aspmx.l.google.com, alt1.aspmx.l.google.com, alt2.aspmx.l.google.com
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    DMARC policy p=none: reports only
    Checked
    2026-11-10 00:55 UTC

    Suggest a correction

  95. cutmovies.com US · AS54113 · Fastly, Inc.
    ReportedFastlyReported by PhishDestroyMX absentSPF -allDMARC rejectRegistered 10 mo ago
    DetailsHide
    Hostname
    cutmovies.com
    First seen
    2026-11-10 16:31 UTC
    First published
    2026-11-10 16:47 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-10 12:02 UTC
    DNS
    Resolves · checked 2026-11-10 16:59 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WR3 · precertificate
    Valid 2026-11-10 15:28 UTC to 2027-02-08 16:26 UTC
    Logged 2026-11-10 16:28 UTC in Google PlumbersArms2027h1, entry 721,005,024
    SHA-256 62cbb72d9dbe1112b6d3f9de93b69d929b069c933cfb534082dbe97890058ab5
    Public key SHA-256 6b81681f2127b0585ab88c74c3f801ef2c2c943ead58693cdc9d85e8fbf5a610
    PhishDestroy
    Addresses
    199.36.158.100 · United States · AS54113 FASTLY - Fastly, Inc. · Fastly (cdn)
    Fastly
    Fastly (199.36.158.100): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    cutmovies.com
    Registered
    2026-01-19 · Squarespace Domains LLC
    MX
    Publishes no mail exchanger
    SPF
    SPF record with -all: other senders fail
    DMARC
    DMARC policy p=reject
    Checked
    2026-11-10 16:46 UTC

    Suggest a correction

  96. dev.mydanceportal.com US · AS54113 · Fastly, Inc.
    ReportedFastlyReported by PhishDestroyMX presentSPF missingDMARC policy noneRegistered 8 y ago
    DetailsHide
    Hostname
    dev.mydanceportal.com
    First seen
    2026-11-10 16:31 UTC
    First published
    2026-11-10 16:47 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-10 12:02 UTC
    DNS
    Resolves · checked 2026-11-10 16:59 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WR3 · precertificate
    Valid 2026-11-10 15:28 UTC to 2027-02-08 16:26 UTC
    Logged 2026-11-10 16:28 UTC in Google PlumbersArms2027h1, entry 721,005,024
    SHA-256 62cbb72d9dbe1112b6d3f9de93b69d929b069c933cfb534082dbe97890058ab5
    Public key SHA-256 6b81681f2127b0585ab88c74c3f801ef2c2c943ead58693cdc9d85e8fbf5a610
    PhishDestroy
    Addresses
    199.36.158.100 · United States · AS54113 FASTLY - Fastly, Inc. · Fastly (cdn)
    Fastly
    Fastly (199.36.158.100): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    mydanceportal.com
    Registered
    2018-08-29 · Cloudflare, Inc.
    MX
    Receives mail at aspmx.l.google.com, alt1.aspmx.l.google.com, alt2.aspmx.l.google.com
    SPF
    Publishes no SPF record
    DMARC
    DMARC policy p=none: reports only
    Checked
    2026-11-10 16:46 UTC

    Suggest a correction

  97. devportal.zynix.ai US · AS54113 · Fastly, Inc.
    ReportedFastlyReported by PhishDestroyMX presentSPF ~allDMARC policy noneRegistered 3 y ago
    DetailsHide
    Hostname
    devportal.zynix.ai
    First seen
    2026-11-10 16:31 UTC
    First published
    2026-11-10 16:47 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-10 12:02 UTC
    DNS
    Resolves · checked 2026-11-10 16:59 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WR3 · precertificate
    Valid 2026-11-10 15:28 UTC to 2027-02-08 16:26 UTC
    Logged 2026-11-10 16:28 UTC in Google PlumbersArms2027h1, entry 721,005,024
    SHA-256 62cbb72d9dbe1112b6d3f9de93b69d929b069c933cfb534082dbe97890058ab5
    Public key SHA-256 6b81681f2127b0585ab88c74c3f801ef2c2c943ead58693cdc9d85e8fbf5a610
    PhishDestroy
    Addresses
    199.36.158.100 · United States · AS54113 FASTLY - Fastly, Inc. · Fastly (cdn)
    Fastly
    Fastly (199.36.158.100): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    zynix.ai
    Registered
    2024-04-23 · Key-Systems GmbH
    MX
    Receives mail at aspmx.l.google.com, alt1.aspmx.l.google.com, alt2.aspmx.l.google.com
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    DMARC policy p=none: reports only
    Checked
    2026-11-10 16:46 UTC

    Suggest a correction

  98. go.alexbr.dev US · AS54113 · Fastly, Inc.
    ReportedFastlyReported by PhishDestroyMX presentSPF ~allDMARC quarantineRegistered 6 y ago
    DetailsHide
    Hostname
    go.alexbr.dev
    First seen
    2026-11-10 16:31 UTC
    First published
    2026-11-10 16:47 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-10 12:02 UTC
    DNS
    Resolves · checked 2026-11-10 16:59 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WR3 · precertificate
    Valid 2026-11-10 15:28 UTC to 2027-02-08 16:26 UTC
    Logged 2026-11-10 16:28 UTC in Google PlumbersArms2027h1, entry 721,005,024
    SHA-256 62cbb72d9dbe1112b6d3f9de93b69d929b069c933cfb534082dbe97890058ab5
    Public key SHA-256 6b81681f2127b0585ab88c74c3f801ef2c2c943ead58693cdc9d85e8fbf5a610
    PhishDestroy
    Addresses
    199.36.158.100 · United States · AS54113 FASTLY - Fastly, Inc. · Fastly (cdn)
    Fastly
    Fastly (199.36.158.100): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    alexbr.dev
    Registered
    2021-03-06 · Namecheap Inc.
    MX
    Receives mail at mail.protonmail.ch, mailsec.protonmail.ch
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    DMARC policy p=quarantine
    Checked
    2026-11-10 16:46 UTC

    Suggest a correction

  99. halakhaoftheday.org CY · AS47583 · AS-HOSTINGER Hostinger Inte…
    ReportedHostingerReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 12 y ago
    DetailsHide
    Hostname
    halakhaoftheday.org
    First seen
    2026-11-10 16:31 UTC
    First published
    2026-11-10 16:47 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-10 12:02 UTC
    DNS
    Resolves · checked 2026-11-10 16:59 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-10 15:29 UTC to 2027-02-08 15:29 UTC
    Logged 2026-11-10 16:27 UTC in Google PlumbersArms2027h1, entry 720,988,638
    SHA-256 81e3a53181f9318619d698638e6491de01fbae3e404e2419586251a2f8fcddd2
    Public key SHA-256 b8fabdd23939712cb3b65f9d21393e2bf6cd309becdf25ef2354e1b051b9ce16
    PhishDestroy
    Addresses
    82.29.199.91 · Cyprus · AS47583 AS-HOSTINGER Hostinger International Limited · Hostinger (shared hosting)
    Hostinger
    Hostinger (82.29.199.91): shared web hosting and domain registration. One address typically serves many customer sites.
    Domain
    halakhaoftheday.org
    Registered
    2014-06-30 · Squarespace Domains II LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-10 16:46 UTC

    Suggest a correction

  100. hotelbrightondaman.in US · AS54113 · Fastly, Inc.
    ReportedFastlyReported by PhishDestroyMX presentSPF missingDMARC missingRegistered 15 y ago
    DetailsHide
    Hostname
    hotelbrightondaman.in
    First seen
    2026-11-10 16:31 UTC
    First published
    2026-11-10 16:47 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-10 12:02 UTC
    DNS
    Resolves · checked 2026-11-10 16:59 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WR3 · precertificate
    Valid 2026-11-10 15:28 UTC to 2027-02-08 16:26 UTC
    Logged 2026-11-10 16:28 UTC in Google PlumbersArms2027h1, entry 721,005,024
    SHA-256 62cbb72d9dbe1112b6d3f9de93b69d929b069c933cfb534082dbe97890058ab5
    Public key SHA-256 6b81681f2127b0585ab88c74c3f801ef2c2c943ead58693cdc9d85e8fbf5a610
    PhishDestroy
    Addresses
    199.36.158.100 · United States · AS54113 FASTLY - Fastly, Inc. · Fastly (cdn)
    Fastly
    Fastly (199.36.158.100): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    hotelbrightondaman.in
    Registered
    2012-02-13 · Hosting Concepts B.V. dba Openprovider
    MX
    Receives mail at mx.zoho.com, mx2.zoho.com
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-10 16:46 UTC

    Suggest a correction

Showing 101–200 of 5,190 hostnames.Back to the start
How these findings are made

Brand spoofs: findings that impersonate one of the 1,000 most-impersonated brands. The list opens on them; All shows every finding.

Reported: a hostname in a new certificate that PhishTank or PhishDestroy reports, or that CERT Polska, MetaMask, USOM, MODA, NPA 165, JPCERT/CC, the AMF, the FSMA or BaFin lists. When a listing source names the brand imitated or a category, the finding shows it. Phishing host: a brand lookalike that resolves to an address which hosted confirmed phishing in the last 48 hours. Spamhaus DROP: a brand lookalike that resolves to an address on the Spamhaus DROP list. Same certificate: another name on a finding's certificate that resolves to an address on Spamhaus DROP. Suspicious: other names on a finding's certificate, rated high for a hosting-alias name or a lookalike on a phishing host, medium for a lookalike; they join the findings once they have listing evidence of their own. Also under Suspicious: registered domains using a brand’s name that PhishDestroy’s community list includes, rated high when they resolve to an address with no parking or holding signal, medium otherwise.

Brand labels cover the 1,000 most-impersonated brands. A name gets a brand when the brand's token starts a label or follows a hyphen, with a lure word such as "login" or "verify" for common words. Hostnames appear as plain text. How it works · Sources