Live

Live phishing findings

New certificates and domain registrations, with every hostname resolved and checked against phishing reports and bad-address lists. The newest findings, updated hourly.

Updated hourly · 2026-11-11 09:55 UTC
Certificate-log entries · 24 h
351.2M
from 84 distinct feeds
Unique certificates · 24 h
35.2M
each reviewed
Names resolved · 24 h
21.6M
15.8M with an address
Findings · 24 h
6,712
249 of 1,061 brands targeted

2,540 hostnames from the last 24 hours.

The findings have updated. The list starts again from the top.

  1. brokersstep.casa US · AS13335 · Cloudflare, Inc.4 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    brokersstep.casa
    First seen
    2026-11-11 09:51 UTC
    Listing
    CERT Polska listed it 2026-06-09 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-11 09:46 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-11 08:47 UTC to 2027-02-09 08:47 UTC
    Logged 2026-11-11 09:46 UTC in Google ParcelYard2027h1, entry 734,117,310
    SHA-256 a1830ff217cae0cc1bb5d9733fe891595cec8697acdd9e57fa0eb847c6892010
    Public key SHA-256 042bfa0886b344eed26bf4eb03e876353a77ae7ece6fa658cec549bfc6cbb572
    Addresses
    104.21.84.75 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.188.165 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3035::ac43:bca5
    2606:4700:3037::6815:544b
    Cloudflare
    Cloudflare (104.21.84.75, 172.67.188.165): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    brokersstep.casa
    Registered
    2026-05-18 · Dynadot Inc
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-11 10:01 UTC

    Suggest a correction

  2. civanto.info US · AS13335 · Cloudflare, Inc.4 addresses
    ListedCloudflareListed by USOMMX absentSPF missingDMARC missingRegistered 5 mo ago
    DetailsHide
    Hostname
    civanto.info
    First seen
    2026-11-11 09:51 UTC
    Listing
    USOM listed it 2026-06-16 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-11 08:56 UTC
    Listed
    USOM
    1. Listed by USOM
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by Sectigo Public Server Authentication CA DV E36 · precertificate
    Valid 2026-11-11 00:00 UTC to 2027-02-09 09:44 UTC
    Logged 2026-11-11 09:50 UTC in Geomys Tuscolo2027h1, entry 574,215,077
    SHA-256 9496afc623aee0b74063aaa17ac78a8711c5534ffb106c9bc503b0c905f49ba9
    Public key SHA-256 9e6c70a912d33dd9f0cb2eca70470406d3fe7c091079504792faf11540326354
    Addresses
    104.21.47.123 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.147.163 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3030::6815:2f7b
    2606:4700:3037::ac43:93a3
    Cloudflare
    Cloudflare (104.21.47.123, 172.67.147.163): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    civanto.info
    Registered
    2026-06-08 · Dynadot Inc
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-11 10:01 UTC

    Suggest a correction

  3. dropboxdash.com US · AS209242 · CLOUDFLARESPECTRUM Cloudfla…
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC rejectRegistered 4 y ago
    DetailsHide
    Hostname
    dropboxdash.com
    First seen
    2026-11-11 09:51 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-11 06:03 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WR1 · precertificate
    Valid 2026-11-11 08:49 UTC to 2027-02-09 09:47 UTC
    Logged 2026-11-11 09:49 UTC in Google ParcelYard2027h1, entry 734,161,665
    SHA-256 9a7bbf11d426ea7bd77735d52f112e570934c9f88dd78326c56cdd54afcc0e6b
    Public key SHA-256 c88b9365582fcb81a35455cbf9e882fa939a7685723df9cf348b46e1f12da2da
    PhishDestroy
    Addresses
    198.202.211.1 · United States · AS209242 CLOUDFLARESPECTRUM Cloudflare London, LLC · Cloudflare (cdn)
    Cloudflare
    Cloudflare (198.202.211.1): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    dropboxdash.com
    Registered
    2022-12-31 · MarkMonitor Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    DMARC policy p=reject
    Checked
    2026-11-11 10:01 UTC

    Suggest a correction

  4. eiojfds.online US · AS13335 · Cloudflare, Inc.4 addresses
    ListedCloudflareListed by NPA 165 (e-commerce)MX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    eiojfds.online
    First seen
    2026-11-11 09:51 UTC
    Listing
    NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-11 01:37 UTC
    Listed
    NPA 165
    1. Observed in the NPA 165 feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-11 08:46 UTC to 2027-02-09 09:45 UTC
    Logged 2026-11-11 09:46 UTC in Google ParcelYard2027h1, entry 734,122,572
    SHA-256 f621a8f96d83550622507996d4b529e1a0255d28abaa922bd8c937cde821ef43
    Public key SHA-256 5db61d3ae59ebc0c8c95f9b90dab9e0614acc1dfb83b2380129618a7ea2600d1
    Addresses
    104.21.36.113 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.192.210 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3033::6815:2471
    2606:4700:3033::ac43:c0d2
    Cloudflare
    Cloudflare (104.21.36.113, 172.67.192.210): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    eiojfds.online
    Registered
    2026-07-16 · GoDaddy.com, LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-11 10:01 UTC

    Suggest a correction

  5. eis.amlofficer.org US · AS13335 · Cloudflare, Inc.4 addresses
    ReportedCloudflareUnder amlofficer.org, reported by PhishDestroyMX presentSPF ~allDMARC policy noneRegistered 2 y ago
    DetailsHide
    Hostname
    eis.amlofficer.org
    First seen
    2026-11-11 09:51 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-11 06:03 UTC
    Reported
    PhishDestroy, listing amlofficer.org and the names under it
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR2
    Valid 2026-11-11 08:51 UTC to 2027-02-09 08:51 UTC
    Logged 2026-11-11 09:50 UTC in Google ParcelYard2027h1, entry 734,175,935
    SHA-256 3c823944a6d4169af37c39846b19f2c93ed0761590b6ec60d90023da44f77ffb
    Public key SHA-256 63703ac80ef5fc57a2ef08eca002b8fc2cb4f73ba01dd5195230b2d92ce33e50
    PhishDestroy
    Addresses
    104.21.58.14 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.197.50 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3030::ac43:c532
    2606:4700:3031::6815:3a0e
    Cloudflare
    Cloudflare (104.21.58.14, 172.67.197.50): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    amlofficer.org
    Registered
    2024-07-19 · GoDaddy.com, LLC
    MX
    Receives mail at smtp.google.com
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    DMARC policy p=none: reports only
    Checked
    2026-11-11 08:07 UTC

    Suggest a correction

  6. home-live-eno-ledgeer.pages.dev US · AS13335 · Cloudflare, Inc.4 addresses
    ListedCloudflareListed by MetaMask
    DetailsHide
    Hostname
    home-live-eno-ledgeer.pages.dev
    First seen
    2026-11-11 09:51 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-11 06:04 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-11 08:49 UTC to 2027-02-09 09:47 UTC
    Logged 2026-11-11 09:49 UTC in IPng Networks Halloumi2027h1, entry 454,137,668
    SHA-256 59c5b37c2916eec1b69e1c69cb8a6e9f927a66b89cd38d13b4b24ac5d351965e
    Public key SHA-256 7075b9ccc8c9e04a54b2fc30df6298487fa3244919c755264b6e74d0374b5372
    Addresses
    172.66.44.73 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.66.47.183 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:310c::ac42:2c49
    2606:4700:310c::ac42:2fb7
    Cloudflare
    Cloudflare (172.66.44.73, 172.66.47.183): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.

    Suggest a correction

  7. pcash-ftol.site US · AS13335 · Cloudflare, Inc.4 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    pcash-ftol.site
    First seen
    2026-11-11 09:51 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-11 06:03 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-11 08:48 UTC to 2027-02-09 08:48 UTC
    Logged 2026-11-11 09:47 UTC in Google ParcelYard2027h1, entry 734,128,596
    SHA-256 351c5bc71c3a27fbad47f3e2e9e6edc4e8679a5223dfb3d8194ee8def2c6039e
    Public key SHA-256 e302786f5be70204fefb38c0ae2e66a574102025363013367ac9ff254583fb12
    PhishDestroy
    Addresses
    104.21.50.59 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.157.136 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3031::6815:323b
    2606:4700:3031::ac43:9d88
    Cloudflare
    Cloudflare (104.21.50.59, 172.67.157.136): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    pcash-ftol.site
    Registered
    2026-05-18 · NameCheap, Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-11 09:52 UTC

    Suggest a correction

  8. www.damanworld1.com US · AS13335 · Cloudflare, Inc.4 addresses
    ReportedCloudflareUnder damanworld1.com, reported by PhishDestroyMX absentSPF missingDMARC missingRegistered 22 mo ago
    DetailsHide
    Hostname
    www.damanworld1.com
    First seen
    2026-11-11 09:51 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-11 06:03 UTC
    Reported
    PhishDestroy, listing damanworld1.com and the names under it
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-11 08:50 UTC to 2027-02-09 09:49 UTC
    Logged 2026-11-11 09:50 UTC in DigiCert Wyvern2027h1, entry 496,258,675
    SHA-256 b0c07297b661d32307701b3ab5599fede7d466cec6668b2ed4c205d7bc228a6d
    Public key SHA-256 35e20fffac4be136380b5306e76c1f3083f798ea2874553a3e825de600dc9e66
    PhishDestroy
    Addresses
    104.21.75.65 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.215.184 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3031::ac43:d7b8
    2606:4700:3036::6815:4b41
    Cloudflare
    Cloudflare (104.21.75.65, 172.67.215.184): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    damanworld1.com
    Registered
    2025-01-07 · Name.com, Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-11 01:54 UTC

    Suggest a correction

  9. www.usd100.us US · AS13335 · Cloudflare, Inc.
    ReportedCloudflareUnder usd100.us, reported by PhishDestroyMX presentSPF ~allDMARC missingRegistered 10 mo ago
    DetailsHide
    Hostname
    www.usd100.us
    First seen
    2026-11-11 09:51 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-11 06:03 UTC
    Reported
    PhishDestroy, listing usd100.us and the names under it
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WR1 · precertificate
    Valid 2026-11-11 08:48 UTC to 2027-02-09 09:46 UTC
    Logged 2026-11-11 09:48 UTC in DigiCert Sphinx2027h1, entry 440,187,878
    SHA-256 09afe7258b40619bf6f4f183fc57051ba700fd0dc489073b26ac294a191716d9
    Public key SHA-256 de412888b7a601f14d0c928bc0507f41b645eb6195d828adfe0c4c393bdc401c
    PhishDestroy
    Addresses
    185.158.133.1 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (185.158.133.1): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    usd100.us
    Registered
    2026-01-19 · NameCheap, Inc.
    MX
    Receives mail at eforward1.registrar-servers.com, eforward2.registrar-servers.com, eforward3.registrar-servers.com
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-11 06:32 UTC

    Suggest a correction

  10. cajocebi.top US · AS13335 · Cloudflare, Inc.4 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 1 d ago
    DetailsHide
    Hostname
    cajocebi.top
    First seen
    2026-11-11 09:48 UTC
    Listing
    CERT Polska listed it 2026-11-11 · still listed at the last successful feed check 2026-11-11 09:46 UTC
    Listed
    CERT Polska
    1. Certificate logged in CT
    2. Listed by CERT Polska
    3. We matched the new listing
    4. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-11-10 13:30 UTC to 2027-02-08 13:30 UTC
    Logged 2026-11-10 14:28 UTC in Geomys Tuscolo2027h1, entry 562,089,139
    SHA-256 5c12f00199a6c87f48f2e2b9b166b0786a980e83beb68aa26dbf2ac93ae0d526
    Public key SHA-256 a5c8ed0f71f041d6f5a8d7580dd65f600acbb5c0c8632dbb0d5f63e20d191c4f
    Addresses
    104.21.83.4 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.166.117 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3032::6815:5304
    2606:4700:3034::ac43:a675
    Cloudflare
    Cloudflare (104.21.83.4, 172.67.166.117): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    cajocebi.top
    Registered
    2026-11-10 · Dynadot LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-11 10:01 UTC

    Suggest a correction

  11. fepawu.top US · AS13335 · Cloudflare, Inc.4 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 1 d ago
    DetailsHide
    Hostname
    fepawu.top
    First seen
    2026-11-11 09:48 UTC
    Listing
    CERT Polska listed it 2026-11-11 · still listed at the last successful feed check 2026-11-11 09:46 UTC
    Listed
    CERT Polska
    1. Certificate logged in CT
    2. Listed by CERT Polska
    3. We matched the new listing
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-10 13:16 UTC to 2027-02-08 14:14 UTC
    Logged 2026-11-10 14:16 UTC in Google ParcelYard2027h1, entry 718,953,582
    SHA-256 14f4431fa72797c47da32aebf995e3e6e3abcd69352eb6a3bcf2fa6ecbef9637
    Public key SHA-256 58d8b4832c0b8bc5dcac15a40935929e2f05b261b20c1dcf18282b3d1f8167f8
    Addresses
    104.21.61.78 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.207.99 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3031::6815:3d4e
    2606:4700:3031::ac43:cf63
    Cloudflare
    Cloudflare (104.21.61.78, 172.67.207.99): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    fepawu.top
    Registered
    2026-11-10 · Dynadot LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-11 10:01 UTC

    Suggest a correction

  12. gamosvaria.store US · AS13335 · Cloudflare, Inc.4 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 1 d ago
    DetailsHide
    Hostname
    gamosvaria.store
    First seen
    2026-11-11 09:48 UTC
    Listing
    CERT Polska listed it 2026-11-11 · still listed at the last successful feed check 2026-11-11 09:46 UTC
    Listed
    CERT Polska
    1. Certificate logged in CT
    2. Listed by CERT Polska
    3. We matched the new listing
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-11-10 06:00 UTC to 2027-02-08 06:00 UTC
    Logged 2026-11-10 06:58 UTC in Let's Encrypt Sycamore2027h1, entry 1,114,000,033
    SHA-256 350829a6ccd1ca1840a60d8f1b98edffd5bae722094271cc11b1f8d30d1125dc
    Public key SHA-256 51cb4d4772fe275bb1b82a822b69a1ffb5cff7ffb1918d2b5b7599adecf0bc0e
    Addresses
    104.21.5.81 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.133.50 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3033::ac43:8532
    2606:4700:3037::6815:551
    Cloudflare
    Cloudflare (104.21.5.81, 172.67.133.50): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    gamosvaria.store
    Registered
    2026-11-10 · NameCheap, Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-11 10:01 UTC

    Suggest a correction

  13. persocavil.store US · AS13335 · Cloudflare, Inc.4 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 1 d ago
    DetailsHide
    Hostname
    persocavil.store
    First seen
    2026-11-11 09:48 UTC
    Listing
    CERT Polska listed it 2026-11-11 · still listed at the last successful feed check 2026-11-11 09:46 UTC
    Listed
    CERT Polska
    1. Certificate logged in CT
    2. Listed by CERT Polska
    3. We matched the new listing
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-11-10 06:01 UTC to 2027-02-08 06:01 UTC
    Logged 2026-11-10 07:00 UTC in Google ParcelYard2027h1, entry 713,092,372
    SHA-256 29fddcc4fd882be4fbb6d80bf05007791a016766f8a5743295084160f0ce8472
    Public key SHA-256 49ea3356f19c84b1a5b84291ff6776482a2aef1e973e7062df01c1c9bcce1940
    Addresses
    104.21.77.118 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.207.92 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3031::6815:4d76
    2606:4700:3035::ac43:cf5c
    Cloudflare
    Cloudflare (104.21.77.118, 172.67.207.92): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    persocavil.store
    Registered
    2026-11-10 · NameCheap, Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-11 10:01 UTC

    Suggest a correction

  14. piffescrd.store US · AS13335 · Cloudflare, Inc.4 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 1 d ago
    DetailsHide
    Hostname
    piffescrd.store
    First seen
    2026-11-11 09:48 UTC
    Listing
    CERT Polska listed it 2026-11-11 · still listed at the last successful feed check 2026-11-11 09:46 UTC
    Listed
    CERT Polska
    1. Certificate logged in CT
    2. Listed by CERT Polska
    3. We matched the new listing
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-11-10 05:56 UTC to 2027-02-08 05:56 UTC
    Logged 2026-11-10 06:54 UTC in Let's Encrypt Willow2027h1, entry 1,069,002,110
    SHA-256 24eeabeea35d465d1c9478851af88186e8464df58891d06cb4e5bae4fe981df9
    Public key SHA-256 b7c8e67accf46149abe404d3fc878d1c8818eb126d00334c5ed1fddd2be9e947
    Addresses
    104.21.86.111 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.218.146 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3030::ac43:da92
    2606:4700:3037::6815:566f
    Cloudflare
    Cloudflare (104.21.86.111, 172.67.218.146): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    piffescrd.store
    Registered
    2026-11-10 · NameCheap, Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-11 10:01 UTC

    Suggest a correction

  15. pk-dosataw24inpost.rest US · AS13335 · Cloudflare, Inc.4 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered today
    DetailsHide
    Hostname
    pk-dosataw24inpost.rest
    First seen
    2026-11-11 09:48 UTC
    Listing
    CERT Polska listed it 2026-11-11 · still listed at the last successful feed check 2026-11-11 09:46 UTC
    Listed
    CERT Polska
    1. Certificate logged in CT
    2. Listed by CERT Polska
    3. We matched the new listing
    4. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-11-11 07:49 UTC to 2027-02-09 07:49 UTC
    Logged 2026-11-11 08:48 UTC in IPng Networks Halloumi2027h1, entry 453,399,480
    SHA-256 0d3b491c7ceee2ca7c9074705d9e2d7f2d50c07eed5733a7fc98b948899bd4f4
    Public key SHA-256 a788605ed85c79b87c188de45fe8babfaac8016dfacfe2fd126426ed0060489a
    Addresses
    104.21.43.126 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.179.134 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3035::6815:2b7e
    2606:4700:3037::ac43:b386
    Cloudflare
    Cloudflare (104.21.43.126, 172.67.179.134): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    pk-dosataw24inpost.rest
    Registered
    2026-11-11 · Registrar.eu
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-11 10:01 UTC

    Suggest a correction

  16. scarimetho.store US · AS13335 · Cloudflare, Inc.4 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 1 d ago
    DetailsHide
    Hostname
    scarimetho.store
    First seen
    2026-11-11 09:48 UTC
    Listing
    CERT Polska listed it 2026-11-11 · still listed at the last successful feed check 2026-11-11 09:46 UTC
    Listed
    CERT Polska
    1. Certificate logged in CT
    2. Listed by CERT Polska
    3. We matched the new listing
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-10 06:01 UTC to 2027-02-08 06:01 UTC
    Logged 2026-11-10 06:59 UTC in Google PlumbersArms2027h1, entry 713,339,436
    SHA-256 8fc729c77c60964780538829ede9303a74f240ebb8985a7bc28d83568ec976de
    Public key SHA-256 1d88ba700a02ee68a6cb5ff83ecca8a814bb37c4e56266abc82534a7695f56ba
    Addresses
    104.21.30.181 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.173.129 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3033::ac43:ad81
    2606:4700:3034::6815:1eb5
    Cloudflare
    Cloudflare (104.21.30.181, 172.67.173.129): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    scarimetho.store
    Registered
    2026-11-10 · NameCheap, Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-11 10:01 UTC

    Suggest a correction

  17. sierorekni.store US · AS13335 · Cloudflare, Inc.4 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 1 d ago
    DetailsHide
    Hostname
    sierorekni.store
    First seen
    2026-11-11 09:48 UTC
    Listing
    CERT Polska listed it 2026-11-11 · still listed at the last successful feed check 2026-11-11 09:46 UTC
    Listed
    CERT Polska
    1. Certificate logged in CT
    2. Listed by CERT Polska
    3. We matched the new listing
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-10 05:59 UTC to 2027-02-08 06:57 UTC
    Logged 2026-11-10 06:59 UTC in Geomys Tuscolo2027h1, entry 557,515,731
    SHA-256 5acd18be3c801b37d1b370aa4c594d9f9ad6cf1e79387c67dce9e4d353c9eb6a
    Public key SHA-256 49825e86d87352791107905ddbf44f0cbe6a4dede7ea99b8654084a59a0d6fca
    Addresses
    104.21.29.13 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.148.71 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3036::6815:1d0d
    2606:4700:3036::ac43:9447
    Cloudflare
    Cloudflare (104.21.29.13, 172.67.148.71): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    sierorekni.store
    Registered
    2026-11-10 · NameCheap, Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-11 10:01 UTC

    Suggest a correction

  18. w38wb8eoptu238kebxg2736jwe.cfd US · AS13335 · Cloudflare, Inc.4 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered today
    DetailsHide
    Hostname
    w38wb8eoptu238kebxg2736jwe.cfd
    First seen
    2026-11-11 09:48 UTC
    Listing
    CERT Polska listed it 2026-11-11 · still listed at the last successful feed check 2026-11-11 09:46 UTC
    Listed
    CERT Polska
    1. Certificate logged in CT
    2. Listed by CERT Polska
    3. We matched the new listing
    4. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-11-11 05:24 UTC to 2027-02-09 05:24 UTC
    Logged 2026-11-11 06:23 UTC in Geomys Tuscolo2027h1, entry 571,730,466
    SHA-256 9f05cd0b4e4c76987a84332f72472aebfa1be7581c62482f5ac9d2d7195ac32f
    Public key SHA-256 16265985597a1eca0351598d8b8e7a582045b7dfeb809f12bb0c12db4cf044c5
    Addresses
    104.21.27.171 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.169.150 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3031::ac43:a996
    2606:4700:3037::6815:1bab
    Cloudflare
    Cloudflare (104.21.27.171, 172.67.169.150): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    w38wb8eoptu238kebxg2736jwe.cfd
    Registered
    2026-11-11 · NameSilo, LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-11 10:01 UTC

    Suggest a correction

  19. ae888.cheap US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 3 y ago
    DetailsHide
    Hostname
    ae888.cheap
    First seen
    2026-11-11 09:46 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-11 06:04 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-11-11 08:45 UTC to 2027-02-09 08:45 UTC
    Logged 2026-11-11 09:44 UTC in Geomys Tuscolo2027h1, entry 574,159,055
    SHA-256 f5bcf0aa4b6930e563c36ee7f07a4197bb9ec16bc244aa438d6a49db59f440e9
    Public key SHA-256 3f593c2eed2ee6134881c1f2bcfa59135add24757c71ad9b9537a8d23f2eb620
    Addresses
    104.21.47.156 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.148.222 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.47.156, 172.67.148.222): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    ae888.cheap
    Registered
    2023-08-05 · Porkbun LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-11 10:01 UTC

    Suggest a correction

  20. aethersignalworks.com US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX presentSPF ~allDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    aethersignalworks.com
    First seen
    2026-11-11 09:46 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-11 06:03 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-11 08:41 UTC to 2027-02-09 09:39 UTC
    Logged 2026-11-11 09:41 UTC in DigiCert Sphinx2027h1, entry 440,135,086
    SHA-256 2aa32c8d7764e68466d7079bbc447116b3ff9854f536d91d4343df98a7881649
    Public key SHA-256 f379c5bebf287a33b0761fcc106c2089b289f4c62c42368cd0c73f6b215b9571
    PhishDestroy
    Addresses
    104.21.56.240 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.188.48 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.56.240, 172.67.188.48): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    aethersignalworks.com
    Registered
    2026-07-15 · Ultahost, Inc.
    MX
    Receives mail at route2.mx.cloudflare.net, route3.mx.cloudflare.net, route1.mx.cloudflare.net
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-11 09:46 UTC

    Suggest a correction

  21. cdn.bestproxy.com US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareUnder bestproxy.com, reported by PhishDestroyMX presentSPF -allRegistered 22 y ago
    DetailsHide
    Hostname
    cdn.bestproxy.com
    First seen
    2026-11-11 09:46 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-11 06:03 UTC
    Reported
    PhishDestroy, listing bestproxy.com and the names under it
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WR1 · precertificate
    Valid 2026-11-11 08:42 UTC to 2027-02-09 09:40 UTC
    Logged 2026-11-11 09:42 UTC in DigiCert Wyvern2027h1, entry 496,198,771
    SHA-256 3d54a42f39f4c03facdf34ee1d32f7fff011222cd0c96ea7af62487b0b032fa6
    Public key SHA-256 dc98511c5d08de2ce42386104498310367bb9ba04950df3187eb03762c859786
    PhishDestroy
    Addresses
    104.21.3.105 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.130.145 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.3.105, 172.67.130.145): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    bestproxy.com
    Registered
    2004-07-08 · GoDaddy.com, LLC
    MX
    Receives mail at mxn.mxhichina.com, mxw.mxhichina.com
    SPF
    SPF record with -all: other senders fail
    Checked
    2026-11-11 09:10 UTC

    Suggest a correction

  22. clothing.storepl.shop US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareUnder storepl.shop, listed by CERT PolskaMX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    clothing.storepl.shop
    First seen
    2026-11-11 09:46 UTC
    Listing
    CERT Polska listed it 2026-10-21 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-11 09:46 UTC
    Listed
    CERT Polska, listing storepl.shop and the names under it
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-11 08:41 UTC to 2027-02-09 09:41 UTC
    Logged 2026-11-11 09:41 UTC in IPng Networks Halloumi2027h1, entry 454,075,426
    SHA-256 6919055b721308a55a6e1c2cfd1cd2b2a31989ce1a74d4d46681e03535bd0763
    Public key SHA-256 cec81386ec8062ef93d1deab7860b4653bd3135a856e2b9995d7cab85365dc6a
    Addresses
    104.21.28.73 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.144.185 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.28.73, 172.67.144.185): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    storepl.shop
    Registered
    2026-07-16 · Spaceship, Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-11 09:00 UTC

    Suggest a correction

  23. kraa23.cc US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 10 mo ago
    DetailsHide
    Hostname
    kraa23.cc
    First seen
    2026-11-11 09:46 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-11 06:03 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-11 08:41 UTC to 2027-02-09 09:39 UTC
    Logged 2026-11-11 09:41 UTC in Google PlumbersArms2027h1, entry 734,282,425
    SHA-256 620e505aec863752eb05caf84ec107ba5e417f05b9d6c26f1d0ec9d4d82b2bfa
    Public key SHA-256 84915f5e25597408e6cde9847b33c891cb4fa07883f5449de40728fcf7615d9f
    PhishDestroy
    Addresses
    104.21.8.252 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.188.220 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.8.252, 172.67.188.220): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    kraa23.cc
    Registered
    2026-01-21 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-11 10:01 UTC

    Suggest a correction

  24. livepeer-migration.xyz US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 8 mo ago
    DetailsHide
    Hostname
    livepeer-migration.xyz
    First seen
    2026-11-11 09:46 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-11 06:04 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-11-11 08:46 UTC to 2027-02-09 08:46 UTC
    Logged 2026-11-11 09:45 UTC in Google PlumbersArms2027h1, entry 734,330,173
    SHA-256 3ab72737f92e7ae79dce0a8bfacc7dc2d4284ed298bdbcf4372dc9fd25081aac
    Public key SHA-256 35f6cd1f51faae7548f2460005a2d11b8a51116d5b7b42466080d12b1a740a94
    Addresses
    104.21.84.55 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.187.24 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.84.55, 172.67.187.24): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    livepeer-migration.xyz
    Registered
    2026-03-17 · OwnRegistrar, Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-11 10:01 UTC

    Suggest a correction

  25. manager.csst.at US · AS13335 · Cloudflare, Inc.3 addresses
    ReportedCloudflareUnder csst.at, reported by PhishDestroyMX presentSPF ~allDMARC quarantine
    DetailsHide
    Hostname
    manager.csst.at
    First seen
    2026-11-11 09:46 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-11 06:03 UTC
    Reported
    PhishDestroy, listing csst.at and the names under it
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-11-11 08:43 UTC to 2027-02-09 08:43 UTC
    Logged 2026-11-11 09:42 UTC in IPng Networks Halloumi2027h1, entry 454,080,922
    SHA-256 21d2994382bcb724bd063d939089da48f8181dfb1b40de0eedfd9a9a6f490b6f
    Public key SHA-256 9e0c5e7e116e244faf16051cc64221299d41d9161c4e41c67fc87eec4295dba4
    PhishDestroy
    Addresses
    104.26.12.166 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    104.26.13.166 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.75.230 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.26.12.166, 104.26.13.166, 172.67.75.230): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    csst.at
    MX
    Receives mail at mail.protonmail.ch, mailsec.protonmail.ch
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    DMARC policy p=quarantine
    Checked
    2026-11-11 09:46 UTC

    Suggest a correction

  26. mapleprotocol.run US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    mapleprotocol.run
    First seen
    2026-11-11 09:46 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-11 06:04 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-11-11 08:43 UTC to 2027-02-09 08:43 UTC
    Logged 2026-11-11 09:41 UTC in Google ParcelYard2027h1, entry 734,058,946
    SHA-256 52d3d8551d9df7d380e53d7d10447494fbad15597caa85d977a094521bc0add6
    Public key SHA-256 5866a0e86f2860b4c8a25fbe030cf164711d7e615bbd37823566b1e09b5cb05c
    Addresses
    104.21.71.9 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.141.69 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.71.9, 172.67.141.69): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    mapleprotocol.run
    Registered
    2026-05-18 · PDR Ltd. d/b/a PublicDomainRegistry.com
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-11 10:01 UTC

    Suggest a correction

  27. ofersup.website US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 10 mo ago
    DetailsHide
    Hostname
    ofersup.website
    First seen
    2026-11-11 09:46 UTC
    Listing
    CERT Polska listed it 2026-09-03 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-11 09:46 UTC
    PhishDestroy: first observed in the feed 2026-11-02 · still listed at the last successful feed check 2026-11-11 06:03 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-11 08:41 UTC to 2027-02-09 09:39 UTC
    Logged 2026-11-11 09:41 UTC in DigiCert Wyvern2027h1, entry 496,193,915
    SHA-256 d05abf395b29476e90291a8a3977e79712800e98f0096beaa99952a01114fcb0
    Public key SHA-256 2aa94ccde9f91b518fe70c1b3d9daec1650f21ecbd2d2a247132930fdf4bae6e
    Addresses
    104.21.54.69 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.136.60 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.54.69, 172.67.136.60): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    ofersup.website
    Registered
    2026-01-19 · NameSilo, LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-11 10:01 UTC

    Suggest a correction

  28. skurvonilanz-netherlands.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    skurvonilanz-netherlands.com
    First seen
    2026-11-11 09:46 UTC
    Listing
    CERT Polska listed it 2026-09-13 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-11 09:46 UTC
    PhishDestroy: first observed in the feed 2026-11-07 · still listed at the last successful feed check 2026-11-11 06:03 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-11 08:45 UTC to 2027-02-09 09:43 UTC
    Logged 2026-11-11 09:45 UTC in DigiCert Sphinx2027h1, entry 440,169,005
    SHA-256 c3a44aefa764b0e4d8855cf55f067149dd15ad0e14a35ba7ac646ef7ad1f51c4
    Public key SHA-256 2cd83415e36eca24ea4db2e60cd842609f5d6461bf28a39cd764bac4f8c79c36
    Addresses
    104.21.53.232 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.219.169 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.53.232, 172.67.219.169): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    skurvonilanz-netherlands.com
    Registered
    2026-07-16 · Dynadot Inc
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-11 10:01 UTC

    Suggest a correction

  29. token2049.click US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 59 d ago
    DetailsHide
    Hostname
    token2049.click
    First seen
    2026-11-11 09:46 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-11 06:04 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-11-11 08:43 UTC to 2027-02-09 08:43 UTC
    Logged 2026-11-11 09:41 UTC in DigiCert Wyvern2027h1, entry 496,192,608
    SHA-256 0d17b31b55b7c412e68af7845efa3f26ae9b88c046e368f1205cea328fb6f01f
    Public key SHA-256 3894560226271aca1d6ca8cae7d0808e8fab1a82a4ed31cbe39ba43f95394185
    Addresses
    104.21.48.143 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.186.179 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.48.143, 172.67.186.179): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    token2049.click
    Registered
    2026-09-13 · Global Domain Group LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-11 10:01 UTC

    Suggest a correction

  30. txcguardian.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    txcguardian.com
    First seen
    2026-11-11 09:46 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-11 06:04 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by Sectigo Public Server Authentication CA DV E36
    Valid 2026-11-11 00:00 UTC to 2027-02-09 09:37 UTC
    Logged 2026-11-11 09:42 UTC in Sectigo Elephant2027h1, entry 830,156,817
    SHA-256 9dc3634880ac9d0f41e568e93e42f790297fc4a2645515644a60ca08c97a26a2
    Public key SHA-256 addcf81adf18903d8686a8c2ce129c348900dc75fc567f10f6df50b1613de157
    Addresses
    104.21.80.126 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.181.16 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.80.126, 172.67.181.16): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    txcguardian.com
    Registered
    2026-05-03 · Unstoppable Domains Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-11 10:01 UTC

    Suggest a correction

  31. atbsh.online US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by NPA 165 (e-commerce)MX absentSPF missingDMARC missingRegistered 12 mo ago
    DetailsHide
    Hostname
    atbsh.online
    First seen
    2026-11-11 09:41 UTC
    Listing
    NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-11 01:37 UTC
    Listed
    NPA 165
    1. Observed in the NPA 165 feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-11 08:38 UTC to 2027-02-09 09:36 UTC
    Logged 2026-11-11 09:38 UTC in Google PlumbersArms2027h1, entry 734,239,870
    SHA-256 7cffe16554c62936d8e832c33a1b1db2e73b44983f995ef8d5dc632285fd915e
    Public key SHA-256 d3d8e7ec16ce9c8072b84273a7fc94bebff6cd3f58ce2516dd17c22c0efd3faf
    Addresses
    104.21.6.200 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.135.61 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.6.200, 172.67.135.61): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    atbsh.online
    Registered
    2025-11-21 · GoDaddy.com, LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-11 10:01 UTC

    Suggest a correction

  32. bvixv.asia US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by NPA 165 (information services)MX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    bvixv.asia
    First seen
    2026-11-11 09:41 UTC
    Listing
    NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-11 01:37 UTC
    Listed
    NPA 165
    1. Observed in the NPA 165 feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-11-11 08:40 UTC to 2027-02-09 08:40 UTC
    Logged 2026-11-11 09:39 UTC in Let's Encrypt Willow2027h1, entry 1,097,302,451
    SHA-256 4aef82149d2015723a1efc56f15b7dd33fa8b9d974299203d8be8f81e4f2b96c
    Public key SHA-256 ffced15e573040f79a0ea060d0f0dda199d56bdd364f2a4981abf85da1a66b6d
    Addresses
    104.21.59.247 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.186.74 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.59.247, 172.67.186.74): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    bvixv.asia
    Registered
    2026-05-18 · Alibaba Cloud Computing Ltd. d/b/a HiChina (www.net.cn)
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-11 10:01 UTC

    Suggest a correction

  33. crypto-investmanagements.com US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX presentSPF -allDMARC quarantineRegistered 6 mo ago
    DetailsHide
    Hostname
    crypto-investmanagements.com
    First seen
    2026-11-11 09:41 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-11 06:03 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-11-11 08:40 UTC to 2027-02-09 08:40 UTC
    Logged 2026-11-11 09:39 UTC in Google PlumbersArms2027h1, entry 734,252,983
    SHA-256 6c145a76779fc14e7b538a854c2c8fff5968d63199ad91d64b880243630da4f5
    Public key SHA-256 4a36dbfc7bc17b6ed042cbf29b153b4f788057ff9c1a6565c0249a73e4f5abd4
    PhishDestroy
    Addresses
    104.21.34.17 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.153.45 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.34.17, 172.67.153.45): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    crypto-investmanagements.com
    Registered
    2026-05-18 · TuringSign Inc. d/b/a Cosmotown
    MX
    Receives mail at mail.crypto-investmanagements.com
    SPF
    SPF record with -all: other senders fail
    DMARC
    DMARC policy p=quarantine
    Checked
    2026-11-11 10:01 UTC

    Suggest a correction

  34. kxtlo.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    kxtlo.com
    First seen
    2026-11-11 09:41 UTC
    Listing
    CERT Polska listed it 2026-05-18 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-11 09:46 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-11-11 08:39 UTC to 2027-02-09 08:39 UTC
    Logged 2026-11-11 09:37 UTC in Google ParcelYard2027h1, entry 734,011,771
    SHA-256 880aaeefa45a960eedfbf228f2ad208fcb359fe26e36c0d14518d8aec4cbcad6
    Public key SHA-256 09a49e3e435f7143f5f7976da1ef37e6a7f672cc600b2af90ccb77cfcb2e3cee
    Addresses
    104.21.93.140 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.210.221 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.93.140, 172.67.210.221): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    kxtlo.com
    Registered
    2026-05-18 · Cloud Yuqu LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-11 10:01 UTC

    Suggest a correction

  35. ledger-3d0.pages.dev US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMask
    DetailsHide
    Hostname
    ledger-3d0.pages.dev
    First seen
    2026-11-11 09:41 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-11 06:04 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-11 08:37 UTC to 2027-02-09 09:36 UTC
    Logged 2026-11-11 09:37 UTC in Geomys Tuscolo2027h1, entry 574,099,354
    SHA-256 817300b232db5965c83c522791a86caea8377a3dac09ac52f90092d225ac35c1
    Public key SHA-256 ceaab20c3e8a525bbd1f9acc8d1a6c923d7e41789def9f5b30c8b0f763aa8906
    Addresses
    172.66.45.36 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.66.46.220 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (172.66.45.36, 172.66.46.220): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.

    Suggest a correction

  36. midnight-ridge.pages.dev US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMask
    DetailsHide
    Hostname
    midnight-ridge.pages.dev
    First seen
    2026-11-11 09:41 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-11 06:04 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-11 08:39 UTC to 2027-02-09 09:38 UTC
    Logged 2026-11-11 09:39 UTC in DigiCert Wyvern2027h1, entry 496,166,232
    SHA-256 2f9e1574eb2be02d727fa718098d76054c84de0a4477d97c6e445558b233a06f
    Public key SHA-256 18fdb11c79c63cef865f881fbe7977c4100f9b345131c005ee1a241db68b7205
    Addresses
    172.66.45.8 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.66.46.248 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (172.66.45.8, 172.66.46.248): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.

    Suggest a correction

  37. munebua.shop US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by NPA 165 (e-commerce)MX absentSPF missingDMARC missingRegistered 10 mo ago
    DetailsHide
    Hostname
    munebua.shop
    First seen
    2026-11-11 09:41 UTC
    Listing
    NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-11 01:37 UTC
    Listed
    NPA 165
    1. Observed in the NPA 165 feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1
    Valid 2026-11-11 08:36 UTC to 2027-02-09 09:34 UTC
    Logged 2026-11-11 09:40 UTC in DigiCert Wyvern2027h1, entry 496,174,197
    SHA-256 0e94c350e7741e26ab4c729c3c1d269d0660aba4dcfc42f638d6f68ca98d24cc
    Public key SHA-256 3b60aa348df0ca5258fc7422c18853f3690e3e9900e45433c95d940833882eb1
    Addresses
    104.21.3.194 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.131.33 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.3.194, 172.67.131.33): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    munebua.shop
    Registered
    2026-01-19 · GoDaddy.com LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-11 10:01 UTC

    Suggest a correction

  38. piotr-3vt.pages.dev US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT Polska
    DetailsHide
    Hostname
    piotr-3vt.pages.dev
    First seen
    2026-11-11 09:41 UTC
    Listing
    CERT Polska listed it 2026-05-18 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-11 09:46 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-11-11 08:38 UTC to 2027-02-09 08:38 UTC
    Logged 2026-11-11 09:37 UTC in Google ParcelYard2027h1, entry 734,005,648
    SHA-256 032faade5a48fa3209ed45978dcde8a6da6873cee532012e82cf63585f86e5e5
    Public key SHA-256 ed1653fcc9a63f974d0e976109307566f302a53b0bb8be753c72212fdad9c77a
    Addresses
    172.66.44.157 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.66.47.99 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (172.66.44.157, 172.66.47.99): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.

    Suggest a correction

  39. zixuntw.shop US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by NPA 165 (finance and insurance)MX absentSPF missingDMARC missingRegistered 2 mo ago
    DetailsHide
    Hostname
    zixuntw.shop
    First seen
    2026-11-11 09:41 UTC
    Listing
    NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-11 01:37 UTC
    Listed
    NPA 165
    1. Observed in the NPA 165 feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-11-11 08:37 UTC to 2027-02-09 08:37 UTC
    Logged 2026-11-11 09:35 UTC in IPng Networks Gouda2027h1, entry 382,735,189
    SHA-256 8e2cff127a20828cff2e2dc4d289fffae46993fcf59612960cfbd158b1a5973a
    Public key SHA-256 f6109aaa07d275227c1a0fbe17a5409420d3ee5a5b0a243d465a6aa11fc12e33
    Addresses
    104.21.72.165 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.153.80 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.72.165, 172.67.153.80): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    zixuntw.shop
    Registered
    2026-09-10 · NameSilo
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-11 10:01 UTC

    Suggest a correction

  40. checkid-731s.eu.cc US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT Polska
    DetailsHide
    Hostname
    checkid-731s.eu.cc
    First seen
    2026-11-11 09:36 UTC
    Listing
    CERT Polska listed it 2026-09-13 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-11 09:46 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-11-11 08:35 UTC to 2027-02-09 08:35 UTC
    Logged 2026-11-11 09:33 UTC in Let's Encrypt Sycamore2027h1, entry 1,142,783,472
    SHA-256 14bd3726073a9d69e3829e9d28b33d46f93a7c329825cbd36d101c7c49b14963
    Public key SHA-256 215fc5af306414f2aeb19d6979c85c579747c393430bcaa3a2f93ec6097b7d22
    Addresses
    104.21.65.41 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.158.2 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.65.41, 172.67.158.2): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.

    Suggest a correction

  41. estate-ledger-varada-staging.pages.dev US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMask
    DetailsHide
    Hostname
    estate-ledger-varada-staging.pages.dev
    First seen
    2026-11-11 09:36 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-11 06:04 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-11 08:31 UTC to 2027-02-09 09:29 UTC
    Logged 2026-11-11 09:31 UTC in Let's Encrypt Willow2027h1, entry 1,097,193,907
    SHA-256 149d6ee0b555fc70efe9255f74455b415a41485d0dda4890d657836b39c6216a
    Public key SHA-256 13682d887ad0f378cf7aabe4d5171fd32b2a607052de09fcdfd5b23aa1a0bf51
    Addresses
    172.66.44.74 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.66.47.182 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (172.66.44.74, 172.66.47.182): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.

    Suggest a correction

  42. htene.beer US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by NPA 165 (information services)MX absentSPF missingDMARC missingRegistered 7 mo ago
    DetailsHide
    Hostname
    htene.beer
    First seen
    2026-11-11 09:36 UTC
    Listing
    NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-11 01:37 UTC
    Listed
    NPA 165
    1. Observed in the NPA 165 feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by Cloudflare TLS Issuing ECC CA 4 · precertificate
    Valid 2026-11-11 09:21 UTC to 2027-02-09 09:30 UTC
    Logged 2026-11-11 09:31 UTC in Let's Encrypt Willow2027h1, entry 1,097,197,634
    SHA-256 e3f5087262ad2392f43564421f43d502dc9bfae625815e0182a4a66b08e5d678
    Public key SHA-256 12c9e39002bf04fc43a072ad3cff8aeafcf39128b38bb53a989caa6add405ab4
    Addresses
    104.21.43.200 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.184.176 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.43.200, 172.67.184.176): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    htene.beer
    Registered
    2026-04-27 · Alibaba Cloud Computing Ltd. d/b/a HiChina (www.net.cn)
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-11 10:01 UTC

    Suggest a correction

  43. nmeasx.asia US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by NPA 165 (information services)MX absentSPF missingDMARC missingRegistered 3 mo ago
    DetailsHide
    Hostname
    nmeasx.asia
    First seen
    2026-11-11 09:36 UTC
    Listing
    NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-11 01:37 UTC
    Listed
    NPA 165
    1. Observed in the NPA 165 feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1
    Valid 2026-10-12 04:19 UTC to 2027-01-10 05:18 UTC
    Logged 2026-11-11 09:34 UTC in DigiCert Wyvern2027h1, entry 496,117,056
    SHA-256 ca354c6351a5e82776c3c5fa2d039c906c8035e4822bace126327fb6075a0506
    Public key SHA-256 d1f443367b19d4248038e1bbf0fdce34e7d8ede43a94d61fc7d2a864b1ee6682
    Addresses
    104.21.3.105 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.130.145 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.3.105, 172.67.130.145): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    nmeasx.asia
    Registered
    2026-08-14 · Alibaba Cloud Computing Ltd. d/b/a HiChina (www.net.cn)
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-11 10:01 UTC

    Suggest a correction

  44. stakobase.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 12 mo ago
    DetailsHide
    Hostname
    stakobase.com
    First seen
    2026-11-11 09:36 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-11 06:04 UTC
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-11 06:03 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-11 08:32 UTC to 2027-02-09 09:31 UTC
    Logged 2026-11-11 09:32 UTC in Geomys Tuscolo2027h1, entry 574,033,667
    SHA-256 4a751508ddf7b7e4aaecd801051105fda7bb7b7f8571518114736e60e05c35b4
    Public key SHA-256 03b1776a3354251247b527b0d7b27667598093fb2232a5372cca024bcab762ff
    Addresses
    104.21.78.146 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.223.5 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.78.146, 172.67.223.5): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    stakobase.com
    Registered
    2025-11-21 · Cloudflare, Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-11 10:01 UTC

    Suggest a correction

  45. suncurve-dex.com US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    suncurve-dex.com
    First seen
    2026-11-11 09:36 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-11 06:03 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-11-11 08:34 UTC to 2027-02-09 08:34 UTC
    Logged 2026-11-11 09:33 UTC in Let's Encrypt Willow2027h1, entry 1,097,223,540
    SHA-256 76c6e94f74ae65da5afb6f9abd7d6b980c69ac47c91e6723ca2f73335b93a40f
    Public key SHA-256 7e671057c3c6528a3c2b29f8978d8c71856d5f26c074ba197e5b75601607d0b4
    PhishDestroy
    Addresses
    104.21.29.52 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.171.94 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.29.52, 172.67.171.94): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    suncurve-dex.com
    Registered
    2026-05-18 · Gname.com Pte. Ltd.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-11 10:01 UTC

    Suggest a correction

  46. tectonic-finance.site US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 59 d ago
    DetailsHide
    Hostname
    tectonic-finance.site
    First seen
    2026-11-11 09:36 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-11 06:04 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by Cloudflare TLS Issuing ECC CA 4 · precertificate
    Valid 2026-11-11 09:24 UTC to 2027-02-09 09:32 UTC
    Logged 2026-11-11 09:34 UTC in DigiCert Wyvern2027h1, entry 496,110,415
    SHA-256 6ca8807150ef3d9c9beb3ef26cc5e72435cb6154eb8cc924d33f0223c691f9b8
    Public key SHA-256 2534edf2901e25fbd6457398250bd2d37eb87b2bde5af69b21b73ada915b1b86
    Addresses
    104.21.41.112 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.164.114 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.41.112, 172.67.164.114): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    tectonic-finance.site
    Registered
    2026-09-13 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-11 10:01 UTC

    Suggest a correction

  47. u.game US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX presentSPF ~allDMARC rejectRegistered 10 y ago
    DetailsHide
    Hostname
    u.game
    First seen
    2026-11-11 09:36 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-11 06:03 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WR1 · precertificate
    Valid 2026-11-11 08:34 UTC to 2027-02-09 09:31 UTC
    Logged 2026-11-11 09:34 UTC in Google ParcelYard2027h1, entry 733,962,382
    SHA-256 55cf4e9de5926fc134ad997048344ee1e5826d11d36d2d7e85ab8da823e07d1c
    Public key SHA-256 81d5bc444fc8c521965f874594856a052fd1766c39f7fd57a64fe984b5a367b2
    PhishDestroy
    Addresses
    104.18.0.4 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    104.18.1.4 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.18.0.4, 104.18.1.4): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    u.game
    Registered
    2016-05-24 · 1API GmbH
    MX
    Receives mail at route2.mx.cloudflare.net, route3.mx.cloudflare.net, route1.mx.cloudflare.net
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    DMARC policy p=reject
    Checked
    2026-11-10 17:38 UTC

    Suggest a correction

  48. www.eobuwie-depend.shop US · AS13335 · Cloudflare, Inc.4 addresseseobuwie
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 59 d ago
    DetailsHide
    Hostname
    www.eobuwie-depend.shop
    First seen
    2026-11-11 09:36 UTC
    Listing
    CERT Polska listed it 2026-09-15 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-11 09:46 UTC
    CERT Polska listed it 2026-09-16 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-11 09:46 UTC
    PhishDestroy: first observed in the feed 2026-10-26 · still listed at the last successful feed check 2026-11-11 06:03 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WR1 · precertificate
    Valid 2026-11-11 08:34 UTC to 2027-02-09 09:32 UTC
    Logged 2026-11-11 09:34 UTC in Google PlumbersArms2027h1, entry 734,184,161
    SHA-256 ac75406679be87ac8c99a8ed72e6a6beccbe13a9e0853a2c9b6a0300c7d26207
    Public key SHA-256 0505ca220393b87e6caa27f3a7a07e11da5027fe4fea699460ffa01e8ff69226
    Brand
    eobuwie
    Addresses
    104.21.60.154 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.197.254 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3037::6815:3c9a
    2606:4700:3037::ac43:c5fe
    Cloudflare
    Cloudflare (104.21.60.154, 172.67.197.254): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    eobuwie-depend.shop
    Registered
    2026-09-13 · Dynadot Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-11 08:31 UTC

    Suggest a correction

  49. xverse-desk.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 59 d ago
    DetailsHide
    Hostname
    xverse-desk.com
    First seen
    2026-11-11 09:36 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-11 06:04 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-11 08:33 UTC to 2027-02-09 08:33 UTC
    Logged 2026-11-11 09:32 UTC in Google PlumbersArms2027h1, entry 734,160,622
    SHA-256 203bbd25920c94cfe81b70c43af1a483368bb38747b0df2e94114cd048a739dd
    Public key SHA-256 9ac3eeced67b1e9da25b0628f570335233453d2a59c5e4f8fd2a338c2266f22a
    Addresses
    104.21.77.14 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.203.24 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.77.14, 172.67.203.24): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    xverse-desk.com
    Registered
    2026-09-13 · NameSilo, LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-11 10:01 UTC

    Suggest a correction

  50. zixuntaiwan.shop US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by NPA 165 (finance and insurance)MX absentSPF missingDMARC missingRegistered 2 mo ago
    DetailsHide
    Hostname
    zixuntaiwan.shop
    First seen
    2026-11-11 09:36 UTC
    Listing
    NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-11 01:37 UTC
    Listed
    NPA 165
    1. Observed in the NPA 165 feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-11-11 08:34 UTC to 2027-02-09 08:34 UTC
    Logged 2026-11-11 09:33 UTC in Let's Encrypt Sycamore2027h1, entry 1,142,775,829
    SHA-256 ba529ea5d9103ad7db1d1053076024a3475dd1f283332ab9f057a8f7224dd7fe
    Public key SHA-256 ad0db0db46515004d54440a08fd71fc11ee766bc0a9a1a5be882a3e494d159eb
    Addresses
    104.21.57.11 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.188.184 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.57.11, 172.67.188.184): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    zixuntaiwan.shop
    Registered
    2026-09-10 · NameSilo
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-11 10:01 UTC

    Suggest a correction

  51. contect-io-trezor.pages.dev US · AS13335 · Cloudflare, Inc.4 addressesTrezor
    ListedCloudflareListed by MetaMask
    DetailsHide
    Hostname
    contect-io-trezor.pages.dev
    First seen
    2026-11-11 09:31 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-11 06:04 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-11 08:27 UTC to 2027-02-09 09:26 UTC
    Logged 2026-11-11 09:27 UTC in Google ParcelYard2027h1, entry 733,864,685
    SHA-256 9992679a86aa0ad29bfae7209c7747c32511ecd043bc697444ee5529d5b24860
    Public key SHA-256 70879a6f0c1f7752c4add329b6b84aff409a505501f1a311961301d8f3e04c44
    Brand
    Trezor
    Addresses
    172.66.44.113 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.66.47.143 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:310c::ac42:2c71
    2606:4700:310c::ac42:2f8f
    Cloudflare
    Cloudflare (172.66.44.113, 172.66.47.143): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.

    Suggest a correction

  52. doc-exodue-web.pages.dev US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMask
    DetailsHide
    Hostname
    doc-exodue-web.pages.dev
    First seen
    2026-11-11 09:31 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-11 06:04 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-11 08:25 UTC to 2027-02-09 09:24 UTC
    Logged 2026-11-11 09:25 UTC in DigiCert Sphinx2027h1, entry 439,990,783
    SHA-256 69551ebc2bc012a55fec7d15e07b3cef4fd5f71f5445991d81bcf9f90f2b4354
    Public key SHA-256 af96b006296ee5445bd45d5afa61919d1606d6f55b4aa91c69f1b08dc5e0f0b1
    Addresses
    172.66.44.254 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.66.47.2 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (172.66.44.254, 172.66.47.2): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.

    Suggest a correction

  53. ewsjd.beer US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by NPA 165 (information services)MX absentSPF missingDMARC missingRegistered 7 mo ago
    DetailsHide
    Hostname
    ewsjd.beer
    First seen
    2026-11-11 09:31 UTC
    Listing
    NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-11 01:37 UTC
    Listed
    NPA 165
    1. Observed in the NPA 165 feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by Cloudflare TLS Issuing ECC CA 4 · precertificate
    Valid 2026-11-11 09:18 UTC to 2027-02-09 09:26 UTC
    Logged 2026-11-11 09:28 UTC in DigiCert Wyvern2027h1, entry 496,052,682
    SHA-256 b9f59dd75e335c12480d1a9b687b1cc10b4a0cbe5d0b0d48858fea33396ca064
    Public key SHA-256 5fc6b62660417bf4f158a313720bf9831670c6a5cb1f828c552f77e435d2a2c0
    Addresses
    104.21.25.176 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.134.110 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.25.176, 172.67.134.110): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    ewsjd.beer
    Registered
    2026-04-12 · Alibaba Cloud Computing Ltd. d/b/a HiChina (www.net.cn)
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-11 10:01 UTC

    Suggest a correction

  54. gtasahub.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX presentSPF ~allDMARC policy noneRegistered 7 mo ago
    DetailsHide
    Hostname
    gtasahub.com
    First seen
    2026-11-11 09:31 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-11 06:04 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by Cloudflare TLS Issuing ECC CA 4 · precertificate
    Valid 2026-11-11 09:18 UTC to 2027-02-09 09:25 UTC
    Logged 2026-11-11 09:28 UTC in DigiCert Wyvern2027h1, entry 496,050,606
    SHA-256 6a61f46a5a6de35b7e14c9736e9702386706b128325bf8d6dd2b89be1a5dc90b
    Public key SHA-256 356f96dd5808aa7258ea8fa4419ae88123f1931c77ad3e22896de81c7b947b26
    Addresses
    104.21.88.65 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.173.160 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.88.65, 172.67.173.160): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    gtasahub.com
    Registered
    2026-04-06 · Spaceship, Inc.
    MX
    Receives mail at mx1.hostinger.com, mx1.hostinger.pk, mx2.hostinger.com
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    DMARC policy p=none: reports only
    Checked
    2026-11-11 10:01 UTC

    Suggest a correction

  55. oosjwe.top US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by NPA 165 (e-commerce)MX absentSPF missingDMARC missingRegistered 10 mo ago
    DetailsHide
    Hostname
    oosjwe.top
    First seen
    2026-11-11 09:31 UTC
    Listing
    NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-11 01:37 UTC
    Listed
    NPA 165
    1. Observed in the NPA 165 feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-11 08:30 UTC to 2027-02-09 09:28 UTC
    Logged 2026-11-11 09:30 UTC in Let's Encrypt Sycamore2027h1, entry 1,142,726,787
    SHA-256 ee627bd8c16543b1a9f8ebddbadb329be1e0c235de921ce14891f297b48f8d15
    Public key SHA-256 4a89311632ba3f01bb3559bfe0affd88685af83a2c04a6dfe9938a30091eb5d8
    Addresses
    104.21.48.109 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.184.45 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.48.109, 172.67.184.45): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    oosjwe.top
    Registered
    2026-01-19 · 阿里云计算有限公司
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-11 10:01 UTC

    Suggest a correction

  56. renzzzo.cc US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 7 mo ago
    DetailsHide
    Hostname
    renzzzo.cc
    First seen
    2026-11-11 09:31 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-11 06:04 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by Cloudflare TLS Issuing ECC CA 4 · precertificate
    Valid 2026-11-11 09:16 UTC to 2027-02-09 09:25 UTC
    Logged 2026-11-11 09:26 UTC in DigiCert Sphinx2027h1, entry 439,996,459
    SHA-256 6966b8934836d046ef174196b914285a9887446e63208acc2c8f161f3920be94
    Public key SHA-256 f74008b87369a28c05998bafa263eae3396e3f4fd2a0d3bc514049ee9727f9b0
    Addresses
    104.21.83.240 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.183.118 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.83.240, 172.67.183.118): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    renzzzo.cc
    Registered
    2026-04-29 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-11 10:01 UTC

    Suggest a correction

  57. 3vdo9.shop US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by NPA 165 (finance and insurance)MX absentSPF missingDMARC missingRegistered 7 mo ago
    DetailsHide
    Hostname
    3vdo9.shop
    First seen
    2026-11-11 09:26 UTC
    Listing
    NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-11 01:37 UTC
    Listed
    NPA 165
    1. Observed in the NPA 165 feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-11 08:23 UTC to 2027-02-09 09:21 UTC
    Logged 2026-11-11 09:23 UTC in Google PlumbersArms2027h1, entry 734,041,066
    SHA-256 fc1993621e326e2708ccfe07e43628b7d505f4b8fb1053b2120f41e9769fee42
    Public key SHA-256 39e9dd192068e4f62c3e41c38a5b5896c6f3f430d1bb07d75bfccd836d0cb9aa
    Addresses
    104.21.64.158 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.186.172 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.64.158, 172.67.186.172): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    3vdo9.shop
    Registered
    2026-04-21 · GoDaddy.com LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-11 10:01 UTC

    Suggest a correction

  58. bhrki.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    bhrki.com
    First seen
    2026-11-11 09:26 UTC
    Listing
    CERT Polska listed it 2026-05-18 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-11 09:46 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-11 08:22 UTC to 2027-02-09 08:22 UTC
    Logged 2026-11-11 09:21 UTC in Google ParcelYard2027h1, entry 733,786,569
    SHA-256 6bfde885e113342da62ecbea23d0171cfeb485b2c77b9a4f330b5d77e07a61cc
    Public key SHA-256 65ce6815f2a62a062d5239603e7a1be3d8a3205f131b242a5d7fe6bd5bfe35d8
    Addresses
    104.21.36.2 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.182.147 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.36.2, 172.67.182.147): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    bhrki.com
    Registered
    2026-05-18 · Cloud Yuqu LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-11 10:01 UTC

    Suggest a correction

  59. eloncreditunion.com US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX presentSPF ~allDMARC policy noneRegistered 20 mo ago
    DetailsHide
    Hostname
    eloncreditunion.com
    First seen
    2026-11-11 09:26 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-11 06:03 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-11-11 08:24 UTC to 2027-02-09 08:24 UTC
    Logged 2026-11-11 09:22 UTC in Google ParcelYard2027h1, entry 733,807,091
    SHA-256 9f75d3b64229c8bf82718ca84a6d2d1baa1f20368adb2d1cfd237ddf3b1f35f4
    Public key SHA-256 efa1af8f3866da1f78d9f373131f2b53b6ea0dff997db725c40ef725ad6dfdf5
    PhishDestroy
    Addresses
    104.21.62.81 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.221.221 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.62.81, 172.67.221.221): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    eloncreditunion.com
    Registered
    2025-03-07 · TuringSign Inc. d/b/a Cosmotown
    MX
    Receives mail at mail.excelaxcp.com
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    DMARC policy p=none: reports only
    Checked
    2026-11-11 10:01 UTC

    Suggest a correction

  60. estate-ledger-sr-staging.pages.dev US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMask
    DetailsHide
    Hostname
    estate-ledger-sr-staging.pages.dev
    First seen
    2026-11-11 09:26 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-11 06:04 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-11 08:23 UTC to 2027-02-09 09:22 UTC
    Logged 2026-11-11 09:23 UTC in Google ParcelYard2027h1, entry 733,819,863
    SHA-256 45e327536dce9e14cf5a6eef38f29e1e6ccc28211cdde65c368f9d7f9cd222a8
    Public key SHA-256 483fa6c2cc3395f9ebaf6abd389ca4bc7e33bf09190ea02d9aade5db6e4c3360
    Addresses
    172.66.45.44 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.66.46.212 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (172.66.45.44, 172.66.46.212): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.

    Suggest a correction

  61. indexcoop.pro US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 8 mo ago
    DetailsHide
    Hostname
    indexcoop.pro
    First seen
    2026-11-11 09:26 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-11 06:03 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-11 08:24 UTC to 2027-02-09 08:24 UTC
    Logged 2026-11-11 09:23 UTC in Google PlumbersArms2027h1, entry 734,038,651
    SHA-256 2d272c03981aea167954696a96f05d0af59328a3d7f103e34b9cc8046ea37fd0
    Public key SHA-256 d12f964bc01d15c35192aa537b03396122b3bf3113a14f671cf4211eb1340fe9
    PhishDestroy
    Addresses
    104.21.73.116 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.162.68 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.73.116, 172.67.162.68): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    indexcoop.pro
    Registered
    2026-03-19 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-11 10:01 UTC

    Suggest a correction

  62. plasma-hold.pages.dev US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMask
    DetailsHide
    Hostname
    plasma-hold.pages.dev
    First seen
    2026-11-11 09:26 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-11 06:04 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by Cloudflare TLS Issuing ECC CA 4 · precertificate
    Valid 2026-11-11 09:15 UTC to 2027-02-09 09:22 UTC
    Logged 2026-11-11 09:25 UTC in DigiCert Sphinx2027h1, entry 439,986,517
    SHA-256 635f7c09d3fdb1c528a1198afa8bccb7ef682151394128fc801ba2a8ca61fc19
    Public key SHA-256 a69ada17e9af0c9f64d790f1dca3a5470231c3f95ea360788f25cb3e87f56b38
    Addresses
    172.66.44.172 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.66.47.84 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (172.66.44.172, 172.66.47.84): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.

    Suggest a correction

  63. rwusdtcr.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by NPA 165 (finance and insurance)MX absentSPF missingDMARC missingRegistered 9 mo ago
    DetailsHide
    Hostname
    rwusdtcr.com
    First seen
    2026-11-11 09:26 UTC
    Listing
    NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-11 01:37 UTC
    Listed
    NPA 165
    1. Observed in the NPA 165 feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by Cloudflare TLS Issuing ECC CA 4 · precertificate
    Valid 2026-11-11 09:12 UTC to 2027-02-09 09:20 UTC
    Logged 2026-11-11 09:22 UTC in DigiCert Wyvern2027h1, entry 496,006,340
    SHA-256 ead7c51570d6abfa55eebef5e79b22cb91f56e38d7a00393fe8840d301c12b83
    Public key SHA-256 50dabda6ef60040bd4f4025883546c54598a759dc6349f6a30335d9afc404867
    Addresses
    104.21.77.54 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.204.171 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.77.54, 172.67.204.171): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    rwusdtcr.com
    Registered
    2026-02-01 · NameSilo, LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-11 10:01 UTC

    Suggest a correction

  64. thalrune.click US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    thalrune.click
    First seen
    2026-11-11 09:26 UTC
    Listing
    CERT Polska listed it 2026-07-24 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-11 09:46 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-11 08:24 UTC to 2027-02-09 08:24 UTC
    Logged 2026-11-11 09:23 UTC in Google ParcelYard2027h1, entry 733,815,926
    SHA-256 0a7b689df4703fb93b94ad118433bf648c2eadd9558ba34795f6d26098cb20ce
    Public key SHA-256 3f6c9c0444025b296a059f2dc3b7ed6fa1f2fcba8542294c6a5e8f5c37058249
    Addresses
    104.21.2.57 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.128.207 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.2.57, 172.67.128.207): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    thalrune.click
    Registered
    2026-05-18 · NAMECHEAP
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-11 10:01 UTC

    Suggest a correction

  65. tjzjm.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    tjzjm.com
    First seen
    2026-11-11 09:26 UTC
    Listing
    CERT Polska listed it 2026-05-22 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-11 09:46 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-11 08:23 UTC to 2027-02-09 08:23 UTC
    Logged 2026-11-11 09:21 UTC in Google ParcelYard2027h1, entry 733,792,330
    SHA-256 894c8073c20eda681c5844d6318665dbae12aa45fafc9ebeb69e8675c8f1b355
    Public key SHA-256 f7fe882004abb4346398fc403ecccc77062284b8be92c9c46fd11b18dacc0b76
    Addresses
    104.21.59.108 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.223.132 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.59.108, 172.67.223.132): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    tjzjm.com
    Registered
    2026-05-17 · Cloud Yuqu LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-11 10:01 UTC

    Suggest a correction

  66. aeoiu.bar US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by NPA 165 (e-commerce)MX absentSPF missingDMARC missingRegistered 10 mo ago
    DetailsHide
    Hostname
    aeoiu.bar
    First seen
    2026-11-11 09:20 UTC
    Listing
    NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-11 01:37 UTC
    Listed
    NPA 165
    1. Observed in the NPA 165 feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-11 08:16 UTC to 2027-02-09 09:14 UTC
    Logged 2026-11-11 09:16 UTC in Geomys Tuscolo2027h1, entry 573,828,415
    SHA-256 10332a1bbc43e0ddc62212c90e4cd6c60326337fb35f3118bdf4fc6af4fd8047
    Public key SHA-256 4c980cae05d772dc395bebbad3a19d25c7730fc606e57a2febb43a9e590cbe1c
    Addresses
    104.21.69.229 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.215.108 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.69.229, 172.67.215.108): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    aeoiu.bar
    Registered
    2026-01-17 · GoDaddy
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-11 10:01 UTC

    Suggest a correction

  67. airfryershub.com US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 3 y ago
    DetailsHide
    Hostname
    airfryershub.com
    First seen
    2026-11-11 09:20 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-11 06:03 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by Cloudflare TLS Issuing ECC CA 4 · precertificate
    Valid 2026-11-11 09:06 UTC to 2027-02-09 09:15 UTC
    Logged 2026-11-11 09:16 UTC in DigiCert Wyvern2027h1, entry 495,952,878
    SHA-256 e68914f0cd414179246d40a145df80f1ef86f2821b443d806cfae4e67256c166
    Public key SHA-256 5e1626036647b1587b453a3acbd9fc71b2da86be8d1347937ffbdcfcac92e534
    PhishDestroy
    Addresses
    104.21.76.125 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.195.118 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.76.125, 172.67.195.118): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    airfryershub.com
    Registered
    2024-03-16 · Wild West Domains, LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-11 10:01 UTC

    Suggest a correction

  68. claim-cryptoallstars-cco.pages.dev US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMask
    DetailsHide
    Hostname
    claim-cryptoallstars-cco.pages.dev
    First seen
    2026-11-11 09:20 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-11 06:04 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-11 08:16 UTC to 2027-02-09 09:15 UTC
    Logged 2026-11-11 09:16 UTC in Google ParcelYard2027h1, entry 733,714,964
    SHA-256 35b02ea291b5906321772d99eaff4da5e01e40409a5f345f9b97fcbb43506b28
    Public key SHA-256 76da5f82b5632beb245c1e53ea82aa03ad9482a05a671eb8fc9282ce6ae1d044
    Addresses
    172.66.44.205 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.66.47.51 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (172.66.44.205, 172.66.47.51): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.

    Suggest a correction

  69. hub-ledgr--live-en.pages.dev US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMask
    DetailsHide
    Hostname
    hub-ledgr--live-en.pages.dev
    First seen
    2026-11-11 09:20 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-11 06:04 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-11 08:16 UTC to 2027-02-09 09:14 UTC
    Logged 2026-11-11 09:16 UTC in Google ParcelYard2027h1, entry 733,712,171
    SHA-256 04da18327e6307f6f7b836dd8f52d7e07a866b40a6f7f1845d17387704f48c76
    Public key SHA-256 6914ec18f87952735d9db9f2d45fbc089f091d42a802c0620ade9fc30ee8e2d0
    Addresses
    172.66.44.199 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.66.47.57 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (172.66.44.199, 172.66.47.57): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.

    Suggest a correction

  70. interface-initia.xyz US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 8 mo ago
    DetailsHide
    Hostname
    interface-initia.xyz
    First seen
    2026-11-11 09:20 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-11 06:04 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-11-11 08:20 UTC to 2027-02-09 08:20 UTC
    Logged 2026-11-11 09:19 UTC in Let's Encrypt Willow2027h1, entry 1,097,036,917
    SHA-256 595aacefd699bb63be76146f34aeb23c2628275378067d7acf8f982a49a44b45
    Public key SHA-256 4091013943642aad1ef4c25039402be3ca2f986c9e4d4f00f59b4bca89f0a222
    Addresses
    104.21.85.173 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.208.136 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.85.173, 172.67.208.136): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    interface-initia.xyz
    Registered
    2026-03-19 · Dynadot Inc
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-11 10:01 UTC

    Suggest a correction

  71. nominiit.net US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 9 mo ago
    DetailsHide
    Hostname
    nominiit.net
    First seen
    2026-11-11 09:20 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-11 06:03 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by Cloudflare TLS Issuing ECC CA 4 · precertificate
    Valid 2026-11-11 09:06 UTC to 2027-02-09 09:14 UTC
    Logged 2026-11-11 09:16 UTC in Let's Encrypt Sycamore2027h1, entry 1,142,543,306
    SHA-256 2dc9e832f97a12b0fbe6c02aa4727219fe123d80bc2efd716274c63dd23794b9
    Public key SHA-256 b0c362f477041ace5f8ac7c5ccfd1f81da327d0e5c821a5bf6455f55cdde419d
    PhishDestroy
    Addresses
    104.21.79.147 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.146.78 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.79.147, 172.67.146.78): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    nominiit.net
    Registered
    2026-02-06 · Atak Domain Bilgi Teknolojileri A.S.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-11 10:01 UTC

    Suggest a correction

  72. ooijmhj.xyz US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by NPA 165 (e-commerce)MX absentSPF missingDMARC missingRegistered 11 mo ago
    DetailsHide
    Hostname
    ooijmhj.xyz
    First seen
    2026-11-11 09:20 UTC
    Listing
    NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-11 01:37 UTC
    Listed
    NPA 165
    1. Observed in the NPA 165 feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by Cloudflare TLS Issuing ECC CA 4 · precertificate
    Valid 2026-11-11 09:05 UTC to 2027-02-09 09:13 UTC
    Logged 2026-11-11 09:15 UTC in DigiCert Sphinx2027h1, entry 439,910,296
    SHA-256 1660c17093bf1eb16d098191fd88db65a2d3c61d9d165d75661bde7410933159
    Public key SHA-256 fd3336df41353c61dd830847bb1459a8a00fca924a1ffe98886ce4318fb05110
    Addresses
    104.21.29.244 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.150.3 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.29.244, 172.67.150.3): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    ooijmhj.xyz
    Registered
    2025-12-08 · GoDaddy.com, LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-11 10:01 UTC

    Suggest a correction

  73. smpmw.shop US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by NPA 165 (e-commerce)MX absentSPF missingDMARC missingRegistered 12 mo ago
    DetailsHide
    Hostname
    smpmw.shop
    First seen
    2026-11-11 09:20 UTC
    Listing
    NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-11 01:37 UTC
    Listed
    NPA 165
    1. Observed in the NPA 165 feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-11 08:19 UTC to 2027-02-09 09:18 UTC
    Logged 2026-11-11 09:19 UTC in DigiCert Sphinx2027h1, entry 439,941,013
    SHA-256 720e079959bb921ccb9be987cdef43f71ce828699e528618a535edf8f98cfa80
    Public key SHA-256 3d87e7ffa2d448c6dd434d87724f03503b5b9c2d67f9c7209cdc8d6720f1f044
    Addresses
    104.21.51.254 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.192.134 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.51.254, 172.67.192.134): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    smpmw.shop
    Registered
    2025-11-21 · GoDaddy.com LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-11 10:01 UTC

    Suggest a correction

  74. teredeqzsn.click US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 7 mo ago
    DetailsHide
    Hostname
    teredeqzsn.click
    First seen
    2026-11-11 09:20 UTC
    Listing
    CERT Polska listed it 2026-06-15 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-11 09:46 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-11 08:15 UTC to 2027-02-09 09:13 UTC
    Logged 2026-11-11 09:15 UTC in DigiCert Sphinx2027h1, entry 439,910,126
    SHA-256 0db62ca6e5c1ec79f2268aaf79f41bb4fd06a64aac2a583db0bfbf121078178c
    Public key SHA-256 dcfd4750d5a32020253b7ee706bc68660bad4e3487d6d7ff337f851f2d2ec1d0
    Addresses
    104.21.2.44 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.152.131 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.2.44, 172.67.152.131): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    teredeqzsn.click
    Registered
    2026-04-17 · Chengdu West Dimension Digital Technology Co., LTD
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-11 10:01 UTC

    Suggest a correction

  75. teredhnolq.work US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 7 mo ago
    DetailsHide
    Hostname
    teredhnolq.work
    First seen
    2026-11-11 09:20 UTC
    Listing
    CERT Polska listed it 2026-06-24 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-11 09:46 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by Cloudflare TLS Issuing ECC CA 4 · precertificate
    Valid 2026-11-11 09:06 UTC to 2027-02-09 09:15 UTC
    Logged 2026-11-11 09:16 UTC in DigiCert Sphinx2027h1, entry 439,917,001
    SHA-256 eb16b212de57cf1b7596e4c6a29751a0fad2618cd2c6136a25d9be940cce5130
    Public key SHA-256 bcbfc4984af86529db04d55e7e2fabb9be0c3683b2b9ec350437fc929daa9256
    Addresses
    104.21.73.46 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.140.149 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.73.46, 172.67.140.149): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    teredhnolq.work
    Registered
    2026-04-26 · Chengdu West Dimension Digital Technology Co., Ltd.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-11 10:01 UTC

    Suggest a correction

  76. terefhyned.club US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 7 mo ago
    DetailsHide
    Hostname
    terefhyned.club
    First seen
    2026-11-11 09:20 UTC
    Listing
    CERT Polska listed it 2026-06-25 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-11 09:46 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-11 08:16 UTC to 2027-02-09 09:15 UTC
    Logged 2026-11-11 09:16 UTC in Let's Encrypt Willow2027h1, entry 1,096,999,280
    SHA-256 346f4fcf30db59273fbf8ac18b250d23143a90ae568854c9b5d2b5de5b794648
    Public key SHA-256 c20442ae62fa8f5900c4d7fd54892e7ebf1cc8d259ee1d2d7c4da9af22669e74
    Addresses
    104.21.79.25 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.140.154 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.79.25, 172.67.140.154): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    terefhyned.club
    Registered
    2026-04-27 · Chengdu West Dimension Digital Technology Co., Ltd.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-11 10:01 UTC

    Suggest a correction

  77. usdc022.com US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 12 mo ago
    DetailsHide
    Hostname
    usdc022.com
    First seen
    2026-11-11 09:20 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-11 06:03 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by Cloudflare TLS Issuing ECC CA 4 · precertificate
    Valid 2026-11-11 09:07 UTC to 2027-02-09 09:15 UTC
    Logged 2026-11-11 09:18 UTC in Let's Encrypt Willow2027h1, entry 1,097,021,596
    SHA-256 d50c99b372e7028adcf9ab5e153772f9300848a31419d0c135ea2c3ec7e52769
    Public key SHA-256 0be5d8e1b4139b8f6e0b53ac3ae99d5672eac0c603d561654a87e121f01dc066
    PhishDestroy
    Addresses
    104.21.52.67 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.196.83 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.52.67, 172.67.196.83): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    usdc022.com
    Registered
    2025-11-09 · Gname.com Pte. Ltd.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-11 09:20 UTC

    Suggest a correction

  78. zneltarvo-italy.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    zneltarvo-italy.com
    First seen
    2026-11-11 09:20 UTC
    Listing
    CERT Polska listed it 2026-09-13 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-11 09:46 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-11 08:18 UTC to 2027-02-09 09:17 UTC
    Logged 2026-11-11 09:18 UTC in DigiCert Wyvern2027h1, entry 495,972,264
    SHA-256 762049272a6a22344d4d7467a0e7eccc1e8538e7f14a9cd1a56fa0f130ee1caa
    Public key SHA-256 abbbfcaa81f6e6593d43d317210d7c3acd30cd6ca60eeaddcd2c338d6ae9009a
    Addresses
    104.21.72.117 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.183.179 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.72.117, 172.67.183.179): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    zneltarvo-italy.com
    Registered
    2026-07-16 · Dynadot Inc
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-11 10:01 UTC

    Suggest a correction

  79. zooart.shop US · AS13335 · Cloudflare, Inc.
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 8 mo ago
    DetailsHide
    Hostname
    zooart.shop
    First seen
    2026-11-11 09:20 UTC
    Listing
    CERT Polska listed it 2026-09-13 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-11 09:46 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WR1 · precertificate
    Valid 2026-11-11 08:17 UTC to 2027-02-09 09:16 UTC
    Logged 2026-11-11 09:17 UTC in DigiCert Sphinx2027h1, entry 439,923,946
    SHA-256 1d40a0165554f91d0049d2fb6c5ac74b427b4bd83c800a80bed86cfc32825be0
    Public key SHA-256 7848d9ecbd28a8ddd4eb4f350928346ab9ac1f69ce20c472ab7db2963cebe5d6
    Addresses
    104.16.145.247 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.16.145.247): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    zooart.shop
    Registered
    2026-03-20 · Dynadot Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-11 10:01 UTC

    Suggest a correction

  80. dynamics-trustwallet.com US · AS13335 · Cloudflare, Inc.4 addressesTrust Wallet
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    dynamics-trustwallet.com
    First seen
    2026-11-11 09:15 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-11 06:04 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-11 08:15 UTC to 2027-02-09 09:13 UTC
    Logged 2026-11-11 09:15 UTC in DigiCert Wyvern2027h1, entry 495,935,167
    SHA-256 8e846b92e4e8a0c4771bb80c5fc2fa9a7ddffd0dd852549aba20030814a12ba8
    Public key SHA-256 59571be2def388f8eb5fa9c91a449e9b6ca4a0d722b2853e27fcdc383d9177ed
    Brand
    Trust Wallet
    Addresses
    104.21.59.127 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.177.130 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3031::ac43:b182
    2606:4700:3032::6815:3b7f
    Cloudflare
    Cloudflare (104.21.59.127, 172.67.177.130): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    dynamics-trustwallet.com
    Registered
    2026-07-15 · Cloudflare, Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-11 09:24 UTC

    Suggest a correction

  81. fumxf.beer US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by NPA 165 (information services)MX absentSPF missingDMARC missingRegistered 7 mo ago
    DetailsHide
    Hostname
    fumxf.beer
    First seen
    2026-11-11 09:15 UTC
    Listing
    NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-11 01:37 UTC
    Listed
    NPA 165
    1. Observed in the NPA 165 feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-11 08:11 UTC to 2027-02-09 09:10 UTC
    Logged 2026-11-11 09:11 UTC in DigiCert Wyvern2027h1, entry 495,891,358
    SHA-256 27e404516110d807e1777246ad9892f9a898fe8bb73668908055b6b22dbeafde
    Public key SHA-256 588beaaa361dfd6e07b795cf1ce5d9a611c8fda1f3c15664797b0e8e3d456002
    Addresses
    104.21.67.177 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.179.4 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.67.177, 172.67.179.4): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    fumxf.beer
    Registered
    2026-04-12 · Alibaba Cloud Computing Ltd. d/b/a HiChina (www.net.cn)
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-11 10:01 UTC

    Suggest a correction

  82. glint-wind.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 10 mo ago
    DetailsHide
    Hostname
    glint-wind.com
    First seen
    2026-11-11 09:15 UTC
    Listing
    CERT Polska listed it 2026-05-21 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-11 09:46 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by Cloudflare TLS Issuing ECC CA 4 · precertificate
    Valid 2026-11-11 09:04 UTC to 2027-02-09 09:12 UTC
    Logged 2026-11-11 09:14 UTC in DigiCert Wyvern2027h1, entry 495,924,042
    SHA-256 78ac698770a25a6e16e06139077f380f0e7e3b551afaf83a21d12311f2a2006e
    Public key SHA-256 571cdc5f3984021f3d523e6befeb93bd280f2fd6c70a29c0ddcb5cdb8c65f3a9
    Addresses
    104.21.69.174 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.210.176 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.69.174, 172.67.210.176): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    glint-wind.com
    Registered
    2026-01-02 · Dynadot Inc
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-11 10:01 UTC

    Suggest a correction

  83. invefeaz.net US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 8 d ago
    DetailsHide
    Hostname
    invefeaz.net
    First seen
    2026-11-11 09:15 UTC
    Listing
    MetaMask: first observed in the feed 2026-11-06 · still listed at the last successful feed check 2026-11-11 06:04 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR1 · precertificate
    Valid 2026-11-11 08:13 UTC to 2027-02-09 08:13 UTC
    Logged 2026-11-11 09:11 UTC in DigiCert Wyvern2027h1, entry 495,890,898
    SHA-256 2933bf00bd124d93c173ec8547e108e553a48277b9ed122826807a6b2a07a76a
    Public key SHA-256 e13ffd96d0b0081d31f9d99939b761193052847320fe97ccfd061565157731ab
    Addresses
    104.21.36.139 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.194.216 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.36.139, 172.67.194.216): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    invefeaz.net
    Registered
    2026-11-03 · Gname.com Pte. Ltd.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-11 10:01 UTC

    Suggest a correction

  84. jetxfrance.com US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 23 mo ago
    DetailsHide
    Hostname
    jetxfrance.com
    First seen
    2026-11-11 09:15 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-11 06:03 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1
    Valid 2026-11-11 08:12 UTC to 2027-02-09 09:11 UTC
    Logged 2026-11-11 09:14 UTC in DigiCert Wyvern2027h1, entry 495,929,654
    SHA-256 2158965403e43886196a74ec449ef1c2264a946c4e45f68cf6119e11b92891d0
    Public key SHA-256 115f00a847e6d7f5f29a71701029d0accf6685623a1dc7accc311ff0271ccee8
    PhishDestroy
    Addresses
    104.21.84.46 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.186.63 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.84.46, 172.67.186.63): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    jetxfrance.com
    Registered
    2024-12-16 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-11 10:01 UTC

    Suggest a correction

  85. lger-live-waleet.pages.dev US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMask
    DetailsHide
    Hostname
    lger-live-waleet.pages.dev
    First seen
    2026-11-11 09:15 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-11 06:04 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1
    Valid 2026-09-13 06:51 UTC to 2026-12-12 07:50 UTC
    Logged 2026-11-11 09:14 UTC in Let's Encrypt Sycamore2026h2, entry 1,101,512,343
    SHA-256 460fbf75431d47d1e895029306b699d36999e1c1b56b9d0497a4cf2ac3accac0
    Public key SHA-256 9803beaa07d23cfb2bf974bfd7de864c547d4c68bfa9d3eba3ce8814b1b5b9ae
    Addresses
    172.66.44.165 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.66.47.91 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (172.66.44.165, 172.66.47.91): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.

    Suggest a correction

  86. pepemainnetnode.live US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 9 mo ago
    DetailsHide
    Hostname
    pepemainnetnode.live
    First seen
    2026-11-11 09:15 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-11 06:03 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by Cloudflare TLS Issuing ECC CA 4 · precertificate
    Valid 2026-11-11 09:01 UTC to 2027-02-09 09:09 UTC
    Logged 2026-11-11 09:11 UTC in DigiCert Wyvern2027h1, entry 495,882,936
    SHA-256 8051c34132810558f3eb6c10df50f9a8f95edd6fb6d55f94130949100818710f
    Public key SHA-256 e018d955d26bea7e46cfb49df30225ced73dc9473cae50554f7b1a46a2f32663
    PhishDestroy
    Addresses
    104.21.96.69 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.174.1 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.96.69, 172.67.174.1): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    pepemainnetnode.live
    Registered
    2026-02-02 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-11 10:01 UTC

    Suggest a correction

  87. rgxvb.beer US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by NPA 165 (e-commerce)MX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    rgxvb.beer
    First seen
    2026-11-11 09:15 UTC
    Listing
    NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-11 01:37 UTC
    Listed
    NPA 165
    1. Observed in the NPA 165 feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-11-11 08:15 UTC to 2027-02-09 08:15 UTC
    Logged 2026-11-11 09:14 UTC in DigiCert Wyvern2027h1, entry 495,918,817
    SHA-256 897ec491dc993052b949832fd290d37af96457c995fbb3ffd437c0e0a91a47dc
    Public key SHA-256 9d7825546efdcd90dea31e1a5c3ec851037d35818fc478292b4daa56f540f1ca
    Addresses
    104.21.32.209 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.155.35 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.32.209, 172.67.155.35): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    rgxvb.beer
    Registered
    2026-05-18 · GoDaddy.com, LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-11 10:01 UTC

    Suggest a correction

  88. sewtfg.xyz US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by NPA 165 (e-commerce)MX absentSPF missingDMARC missingRegistered 8 mo ago
    DetailsHide
    Hostname
    sewtfg.xyz
    First seen
    2026-11-11 09:15 UTC
    Listing
    NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-11 01:37 UTC
    Listed
    NPA 165
    1. Observed in the NPA 165 feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-11-11 08:13 UTC to 2027-02-09 08:13 UTC
    Logged 2026-11-11 09:11 UTC in Google ParcelYard2027h1, entry 733,644,358
    SHA-256 7e3edf20044c6d24db7d7191a790d29fe2f22cbc293421737234fe43440995cf
    Public key SHA-256 dbbf46ca92cf60745113b71c2d2d3db2e1340ae3b9b544b2b7929bfb46d8cb6c
    Addresses
    104.21.30.101 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.172.188 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.30.101, 172.67.172.188): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    sewtfg.xyz
    Registered
    2026-03-18 · GoDaddy.com, LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-11 10:01 UTC

    Suggest a correction

  89. terepwaqlf.club US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 7 mo ago
    DetailsHide
    Hostname
    terepwaqlf.club
    First seen
    2026-11-11 09:15 UTC
    Listing
    CERT Polska listed it 2026-06-09 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-11 09:46 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-11 08:13 UTC to 2027-02-09 09:12 UTC
    Logged 2026-11-11 09:13 UTC in IPng Networks Halloumi2027h1, entry 453,747,027
    SHA-256 e9cd54eada7b819c50d3700d6f9a1943916a094c713da5671df9047e59924b89
    Public key SHA-256 8332e93ba1646a0476ace82254e70a3557882e0fdd0942fb592b0099a21ba4d9
    Addresses
    104.21.58.60 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.168.9 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.58.60, 172.67.168.9): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    terepwaqlf.club
    Registered
    2026-04-11 · Chengdu West Dimension Digital Technology Co., Ltd.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-11 10:01 UTC

    Suggest a correction

  90. udxtw.icu US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by NPA 165 (e-commerce)MX absentSPF missingDMARC missingRegistered 7 mo ago
    DetailsHide
    Hostname
    udxtw.icu
    First seen
    2026-11-11 09:15 UTC
    Listing
    NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-11 01:37 UTC
    Listed
    NPA 165
    1. Observed in the NPA 165 feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by Cloudflare TLS Issuing ECC CA 4 · precertificate
    Valid 2026-11-11 09:03 UTC to 2027-02-09 09:10 UTC
    Logged 2026-11-11 09:13 UTC in DigiCert Sphinx2027h1, entry 439,878,353
    SHA-256 0ec9c205f0bd538ec710969cd0ec706f7b86a543fd1169e5f383f21d76c61402
    Public key SHA-256 3f9c33609587d7c00ede81fb6e8f22eb3ae8a6d0174119e3cedaa14837708e0a
    Addresses
    104.21.87.194 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.145.181 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.87.194, 172.67.145.181): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    udxtw.icu
    Registered
    2026-04-23 · Alibaba Cloud Computing Ltd. d/b/a HiChina (www.net.cn)
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-11 10:01 UTC

    Suggest a correction

  91. v2-aave.xyz US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 7 mo ago
    DetailsHide
    Hostname
    v2-aave.xyz
    First seen
    2026-11-11 09:15 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-11 06:03 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-10-14 11:17 UTC to 2027-01-12 11:17 UTC
    Logged 2026-11-11 09:14 UTC in DigiCert Wyvern2027h1, entry 495,932,032
    SHA-256 b34ee2ffa4085dfb6190b07d797aea0b3cc55a6d665a83727bbc84270ee77ad6
    Public key SHA-256 380f5dce90dc0c8cfbcfd3c8cce1cc0607832488ed467a399196f4324903f7d2
    PhishDestroy
    Addresses
    104.21.77.214 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.211.229 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.77.214, 172.67.211.229): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    v2-aave.xyz
    Registered
    2026-04-20 · Dynadot Inc
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-11 10:01 UTC

    Suggest a correction

  92. www.invefeaz.net US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareUnder invefeaz.net, listed by MetaMaskMX absentSPF missingDMARC missingRegistered 8 d ago
    DetailsHide
    Hostname
    www.invefeaz.net
    First seen
    2026-11-11 09:15 UTC
    Listing
    MetaMask: first observed in the feed 2026-11-06 · still listed at the last successful feed check 2026-11-11 06:04 UTC
    Listed
    MetaMask, listing invefeaz.net and the names under it
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR1 · precertificate
    Valid 2026-11-11 08:13 UTC to 2027-02-09 08:13 UTC
    Logged 2026-11-11 09:11 UTC in DigiCert Wyvern2027h1, entry 495,890,898
    SHA-256 2933bf00bd124d93c173ec8547e108e553a48277b9ed122826807a6b2a07a76a
    Public key SHA-256 e13ffd96d0b0081d31f9d99939b761193052847320fe97ccfd061565157731ab
    Addresses
    104.21.36.139 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.194.216 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.36.139, 172.67.194.216): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    invefeaz.net
    Registered
    2026-11-03 · Gname.com Pte. Ltd.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-11 10:01 UTC

    Suggest a correction

  93. deddp.asia US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by NPA 165 (information services)MX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    deddp.asia
    First seen
    2026-11-11 09:10 UTC
    Listing
    NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-11 01:37 UTC
    Listed
    NPA 165
    1. Observed in the NPA 165 feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-11-11 08:06 UTC to 2027-02-09 08:06 UTC
    Logged 2026-11-11 09:05 UTC in IPng Networks Gouda2027h1, entry 382,488,312
    SHA-256 a74eee69ee1159ef1b45bd3b5641105ee7f0ef7471aea00d23d9c21808d570f8
    Public key SHA-256 67e631e2a725b6b6f0ec63203c3f202e60546860d22a246f75649e5f92f5d7be
    Addresses
    104.21.47.226 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.173.208 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.47.226, 172.67.173.208): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    deddp.asia
    Registered
    2026-05-18 · Alibaba Cloud Computing Ltd. d/b/a HiChina (www.net.cn)
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-11 10:01 UTC

    Suggest a correction

  94. hashmetasg.com US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    hashmetasg.com
    First seen
    2026-11-11 09:10 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-11 06:03 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1
    Valid 2026-11-11 08:07 UTC to 2027-02-09 09:05 UTC
    Logged 2026-11-11 09:08 UTC in IPng Networks Gouda2027h1, entry 382,511,981
    SHA-256 20c4705155196a52d49fe1d490b043acd9cd08dc2f24cac74869ee412deba4d9
    Public key SHA-256 bf9494fc8cac8e726232c12ef6042b03e4cf1c9bdd7f5efc2a1c05a381d103d2
    PhishDestroy
    Addresses
    104.21.10.144 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.131.130 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.10.144, 172.67.131.130): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    hashmetasg.com
    Registered
    2026-07-16 · Gransy, s.r.o.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-11 10:01 UTC

    Suggest a correction

  95. lkzzy.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    lkzzy.com
    First seen
    2026-11-11 09:10 UTC
    Listing
    CERT Polska listed it 2026-05-18 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-11 09:46 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-11 08:08 UTC to 2027-02-09 08:08 UTC
    Logged 2026-11-11 09:06 UTC in Google PlumbersArms2027h1, entry 733,806,477
    SHA-256 3d5e84a32ca5e8c1716542a396c1235e862dc8bd98c187efc2a747bc512534d4
    Public key SHA-256 0a4daba4fc3ce2c9a1f3665bc25191ff609a6247838fb0726ceb89e37a676b39
    Addresses
    104.21.11.12 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.147.137 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.11.12, 172.67.147.137): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    lkzzy.com
    Registered
    2026-05-18 · Cloud Yuqu LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-11 10:01 UTC

    Suggest a correction

  96. shortyyy.com US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX presentSPF ~allDMARC missingRegistered 15 mo ago
    DetailsHide
    Hostname
    shortyyy.com
    First seen
    2026-11-11 09:10 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-11 06:03 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-11 08:06 UTC to 2027-02-09 09:04 UTC
    Logged 2026-11-11 09:06 UTC in Let's Encrypt Sycamore2027h1, entry 1,142,387,918
    SHA-256 ff9c7b5f8acba357473618c45682e0d34cd5ad9827a8337fcec703380781b1df
    Public key SHA-256 a7f510aecdb42620c9eecb323b9418d5e5d60fa84f6bed393f5fdd98feff6019
    PhishDestroy
    Addresses
    104.21.14.232 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.160.192 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.14.232, 172.67.160.192): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    shortyyy.com
    Registered
    2025-08-06 · NameCheap, Inc.
    MX
    Receives mail at eforward1.registrar-servers.com, eforward2.registrar-servers.com, eforward3.registrar-servers.com
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-11 10:01 UTC

    Suggest a correction

  97. thexenvorpulse.net US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 8 mo ago
    DetailsHide
    Hostname
    thexenvorpulse.net
    First seen
    2026-11-11 09:10 UTC
    Listing
    CERT Polska listed it 2026-07-24 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-11 09:46 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-11 08:08 UTC to 2027-02-09 08:08 UTC
    Logged 2026-11-11 09:07 UTC in Google PlumbersArms2027h1, entry 733,809,275
    SHA-256 18739529de9abb67682e4560bfa51eec80f9dee5570006239ff45dbd7c214403
    Public key SHA-256 ef5fdc3ed7d0c42f7d9607f06d1e3ba93ea7033931fdb76eb487b0ec134815c3
    Addresses
    104.21.43.86 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.176.251 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.43.86, 172.67.176.251): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    thexenvorpulse.net
    Registered
    2026-03-19 · NameCheap, Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-11 10:01 UTC

    Suggest a correction

  98. weeedcat.com US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 4 y ago
    DetailsHide
    Hostname
    weeedcat.com
    First seen
    2026-11-11 09:10 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-11 06:03 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1
    Valid 2026-11-11 08:06 UTC to 2027-02-09 09:06 UTC
    Logged 2026-11-11 09:07 UTC in Let's Encrypt Willow2027h1, entry 1,096,872,050
    SHA-256 15c0c8f667a5435d02b1005327af37a6d3349df75d63e618ac77b0310833ee6c
    Public key SHA-256 1aa45ff45dcb84c55c291dc0ff8f31d562ab8b63113a42268dde16850678c211
    PhishDestroy
    Addresses
    104.18.20.170 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    104.18.21.170 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.18.20.170, 104.18.21.170): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    weeedcat.com
    Registered
    2022-09-05 · Cloudflare, Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-11 10:01 UTC

    Suggest a correction

  99. weryfi-7764.casa US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 59 d ago
    DetailsHide
    Hostname
    weryfi-7764.casa
    First seen
    2026-11-11 09:10 UTC
    Listing
    CERT Polska listed it 2026-09-13 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-11 09:46 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-11-11 08:09 UTC to 2027-02-09 08:09 UTC
    Logged 2026-11-11 09:07 UTC in Google ParcelYard2027h1, entry 733,591,355
    SHA-256 2bb16e5db5ce9c543d6cb8106802411d291e3de98a44eb2be444e6d1a7a3a247
    Public key SHA-256 15ba67cd705b57070058470fc10f94295f3b5f4705e8bdf7356614bd7f338021
    Addresses
    104.21.39.42 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.143.44 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.39.42, 172.67.143.44): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    weryfi-7764.casa
    Registered
    2026-09-13 · Dynadot Inc
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-11 10:01 UTC

    Suggest a correction

  100. xorqevin.work US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 7 mo ago
    DetailsHide
    Hostname
    xorqevin.work
    First seen
    2026-11-11 09:10 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-11 06:04 UTC
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-11 06:03 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-10-05 16:52 UTC to 2027-01-03 16:52 UTC
    Logged 2026-11-11 09:07 UTC in Sectigo Statue2027h1, entry 128,913,267
    SHA-256 6cab79e1482e2a9e723af2cabfa27aaea56dfc4911012a7893a542134b7616fd
    Public key SHA-256 adee6f38f182c1c5ba12151cbb52f545ab8ca4cd27ca27713f0910e0b776c1e9
    Addresses
    104.21.31.227 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.180.94 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.31.227, 172.67.180.94): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    xorqevin.work
    Registered
    2026-04-11 · Cloudflare, Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-11 10:01 UTC

    Suggest a correction

Showing 1–100 of 2,540 hostnames.
How these findings are made

Brand spoofs: findings that impersonate one of the 1,000 most-impersonated brands. The list opens on them; All shows every finding.

Reported: a hostname in a new certificate that PhishTank or PhishDestroy reports, or that CERT Polska, MetaMask, USOM, MODA, NPA 165, JPCERT/CC, the AMF, the FSMA or BaFin lists. When a listing source names the brand imitated or a category, the finding shows it. Phishing host: a brand lookalike that resolves to an address which hosted confirmed phishing in the last 48 hours. Spamhaus DROP: a brand lookalike that resolves to an address on the Spamhaus DROP list. Same certificate: another name on a finding's certificate that resolves to an address on Spamhaus DROP. Suspicious: other names on a finding's certificate, rated high for a hosting-alias name or a lookalike on a phishing host, medium for a lookalike; they join the findings once they have listing evidence of their own. Also under Suspicious: registered domains using a brand’s name that PhishDestroy’s community list includes, rated high when they resolve to an address with no parking or holding signal, medium otherwise.

Brand labels cover the 1,000 most-impersonated brands. A name gets a brand when the brand's token starts a label or follows a hyphen, with a lure word such as "login" or "verify" for common words. Hostnames appear as plain text. How it works · Sources