Live

Live phishing findings

New certificates and domain registrations, with every hostname resolved and checked against phishing reports and bad-address lists. The newest findings, updated hourly.

Updated hourly · 2026-11-11 20:25 UTC
Certificate-log entries · 24 h
329.8M
from 84 distinct feeds
Unique certificates · 24 h
34.1M
each reviewed
Names resolved · 24 h
21.9M
15.9M with an address
Findings · 24 h
6,687
249 of 1,061 brands targeted

2,893 hostnames from the last 24 hours.

The findings have updated. The list starts again from the top.

  1. 1drop.life US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 8 mo ago
    DetailsHide
    Hostname
    1drop.life
    First seen
    2026-11-11 20:21 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-11 18:05 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-11-11 19:19 UTC to 2027-02-09 19:19 UTC
    Logged 2026-11-11 20:18 UTC in IPng Networks Halloumi2027h1, entry 460,136,025
    SHA-256 49ca620dd0b4b0ed269a9ec0a3c6a506c6c6e59e1ca1d6aca0e8609dc10cdb69
    Public key SHA-256 fbb86b157842d006c7013fe4dfe65b17f32b314fce3aa93bf8e433b9b5cdb940
    PhishDestroy
    Addresses
    104.21.57.244 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.152.27 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.57.244, 172.67.152.27): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    1drop.life
    Registered
    2026-03-20 · Global Domain Group LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-11 20:32 UTC

    Suggest a correction

  2. auth.krevetka.cc US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX presentSPF ~allDMARC policy noneRegistered 23 mo ago
    DetailsHide
    Hostname
    auth.krevetka.cc
    First seen
    2026-11-11 20:21 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-11 18:05 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-11-11 19:21 UTC to 2027-02-09 19:21 UTC
    Logged 2026-11-11 20:19 UTC in Google PlumbersArms2027h1, entry 742,490,453
    SHA-256 14e52f2dba710dce11fc14879b1b972385c958e9610c0d955e71b6b8dbd8f804
    Public key SHA-256 0d75ef65c52ba2bddf14463be092c151bd463efff683992db2b117b2600c3bc5
    PhishDestroy
    Addresses
    104.21.77.173 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.210.156 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.77.173, 172.67.210.156): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    krevetka.cc
    Registered
    2024-12-27 · NameCheap, Inc.
    MX
    Receives mail at mx1.timeweb.ru, mx2.timeweb.ru
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    DMARC policy p=none: reports only
    Checked
    2026-11-11 20:32 UTC

    Suggest a correction

  3. dmca-notice-x.com CY · AS47583 · AS-HOSTINGER Hostinger Inte…2 addresses
    ListedHostingerCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    dmca-notice-x.com
    First seen
    2026-11-11 20:21 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-11 18:06 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-11 19:19 UTC to 2027-02-09 20:19 UTC
    Logged 2026-11-11 20:19 UTC in DigiCert Sphinx2027h1, entry 445,912,528
    SHA-256 c7a6b1a847a84a6f3de0a3c3cce7863926db0647b26f77d4bfd5d33395efdfaf
    Public key SHA-256 d90838d92ceabd36f09cb31d3e56203f21d17e80fee901c00a733bdae15be112
    Addresses
    2.57.91.91 · Cyprus · AS47583 AS-HOSTINGER Hostinger International Limited · Hostinger (shared hosting)
    185.158.133.1 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Hostinger
    Hostinger (2.57.91.91): shared web hosting and domain registration. One address typically serves many customer sites.
    Cloudflare
    Cloudflare (185.158.133.1): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    dmca-notice-x.com
    Registered
    2026-05-17 · HOSTINGER operations, UAB
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-11 18:12 UTC

    Suggest a correction

  4. edhar73248dd.my.id US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    edhar73248dd.my.id
    First seen
    2026-11-11 20:21 UTC
    Listing
    CERT Polska listed it 2026-07-17 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-11 18:48 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by Cloudflare TLS Issuing ECC CA 4 · precertificate
    Valid 2026-11-11 20:08 UTC to 2027-02-09 20:16 UTC
    Logged 2026-11-11 20:18 UTC in DigiCert Wyvern2027h1, entry 502,447,860
    SHA-256 41f0a8b68b3ed52ac211ca7411c7e40fa4efb7ede80126538538f53a70e0d9e0
    Public key SHA-256 54c4db5a3f80f5f296e0e94a4f2e52586c7884f21361c23fe21456b0a4cd1dc7
    Addresses
    104.21.27.61 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.141.193 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.27.61, 172.67.141.193): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    edhar73248dd.my.id
    Registered
    2026-07-16 · PT Jagoan Hosting Indonesia
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-11 20:32 UTC

    Suggest a correction

  5. en-us-app-ledgerr.pages.dev US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMask
    DetailsHide
    Hostname
    en-us-app-ledgerr.pages.dev
    First seen
    2026-11-11 20:21 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-11 18:06 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-11 19:20 UTC to 2027-02-09 20:18 UTC
    Logged 2026-11-11 20:20 UTC in Google PlumbersArms2027h1, entry 742,494,921
    SHA-256 efb7833e998c56f2159f6600dd82a5e1d3d1a5aea4c424a7a6163a6a91c3b296
    Public key SHA-256 6c9c6524864f04b812189c439a536737e65ec15dfb2332f511d442888b4c61f1
    Addresses
    172.66.45.34 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.66.46.222 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (172.66.45.34, 172.66.46.222): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.

    Suggest a correction

  6. enjoky.shop US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by NPA 165 (finance and insurance)MX absentSPF missingDMARC missingRegistered 3 mo ago
    DetailsHide
    Hostname
    enjoky.shop
    First seen
    2026-11-11 20:21 UTC
    Listing
    NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-11 13:38 UTC
    Listed
    NPA 165
    1. Observed in the NPA 165 feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by Sectigo Public Server Authentication CA DV E36 · precertificate
    Valid 2026-11-11 00:00 UTC to 2027-02-09 20:14 UTC
    Logged 2026-11-11 20:16 UTC in Let's Encrypt Willow2027h1, entry 1,105,382,233
    SHA-256 e1beacb99563f3a27da72e43c80f84aac33d8f9a1b034a1c2ab212745aaf0122
    Public key SHA-256 676514392918d9cebef9724e0c8a968a2e7ceff3c60afeb09d3dd75d484a8540
    Addresses
    104.21.34.23 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.196.120 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.34.23, 172.67.196.120): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    enjoky.shop
    Registered
    2026-08-20 · NameSilo
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-11 20:32 UTC

    Suggest a correction

  7. hgaytr.help US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by NPA 165 (finance and insurance)MX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    hgaytr.help
    First seen
    2026-11-11 20:21 UTC
    Listing
    NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-11 13:38 UTC
    Listed
    NPA 165
    1. Observed in the NPA 165 feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-11 19:16 UTC to 2027-02-09 20:14 UTC
    Logged 2026-11-11 20:16 UTC in Google PlumbersArms2027h1, entry 742,451,589
    SHA-256 4593a641bbe349329bed16188b81f446ab811570fd0437042112a84b83dc47b1
    Public key SHA-256 6a132731ee6d28900b0f7e96772ab7d8c08b0a556e1c07d475c7a5d1796f6dba
    Addresses
    104.21.81.145 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.189.252 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.81.145, 172.67.189.252): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    hgaytr.help
    Registered
    2026-07-16 · NameSilo, LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-11 20:32 UTC

    Suggest a correction

  8. horwoodhouse.live US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    horwoodhouse.live
    First seen
    2026-11-11 20:21 UTC
    Listing
    CERT Polska listed it 2026-08-12 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-11 18:48 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-11 19:16 UTC to 2027-02-09 20:15 UTC
    Logged 2026-11-11 20:16 UTC in Google ParcelYard2027h1, entry 742,246,741
    SHA-256 039531c583d493a6df9d4055509a67c500380fb6fe2c4f4579a53bfca7d8d5f3
    Public key SHA-256 3c8fe9c2f633ca587a5f1740ffbaa4b479aca596ff8d163d68bc3876a06d57ec
    Addresses
    104.21.56.236 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.137.253 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.56.236, 172.67.137.253): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    horwoodhouse.live
    Registered
    2026-07-16 · Dynadot Inc
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-11 20:32 UTC

    Suggest a correction

  9. hyperliquidx.xyz US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 3 mo ago
    DetailsHide
    Hostname
    hyperliquidx.xyz
    First seen
    2026-11-11 20:21 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-11 18:05 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by Sectigo Public Server Authentication CA DV E36 · precertificate
    Valid 2026-11-11 00:00 UTC to 2027-02-09 20:14 UTC
    Logged 2026-11-11 20:17 UTC in Let's Encrypt Willow2027h1, entry 1,105,394,064
    SHA-256 24e9add45f4ee92e688085cb1f0bb0aec1baf690f9ed0dd11b078509fa9f3470
    Public key SHA-256 c93abda2b690072871c44ebf3024e07e51348a24b9d1aa9e75461cb60fe791ab
    PhishDestroy
    Addresses
    104.21.67.244 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.183.45 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.67.244, 172.67.183.45): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    hyperliquidx.xyz
    Registered
    2026-08-18 · NameCheap, Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-11 20:24 UTC

    Suggest a correction

  10. ledgrr-live-io-faq.pages.dev US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMask
    DetailsHide
    Hostname
    ledgrr-live-io-faq.pages.dev
    First seen
    2026-11-11 20:21 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-11 18:06 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-11 19:16 UTC to 2027-02-09 20:14 UTC
    Logged 2026-11-11 20:16 UTC in Geomys Tuscolo2027h1, entry 580,245,693
    SHA-256 7154eb840bfd22d7a3af4f882db46f80e18e83934f75c9f9e59eed7e6f509e90
    Public key SHA-256 70c10e1ac383ce52d68495c190c8b23648086aa55649c5b1224cb5271f58e366
    Addresses
    172.66.44.247 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.66.47.9 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (172.66.44.247, 172.66.47.9): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.

    Suggest a correction

  11. morn.digital US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 3 mo ago
    DetailsHide
    Hostname
    morn.digital
    First seen
    2026-11-11 20:21 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-11 18:05 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by Sectigo Public Server Authentication CA DV E36 · precertificate
    Valid 2026-11-11 00:00 UTC to 2027-02-09 20:15 UTC
    Logged 2026-11-11 20:17 UTC in DigiCert Wyvern2027h1, entry 502,438,955
    SHA-256 5ec0e0c53217f2dd50511a3f78c053e9d2544689a1a362b5f07258739f2352e4
    Public key SHA-256 2a869b63925e6a302e99784f3cd4c3efe1f89f64ba02a71615a84c00dedfb1a4
    PhishDestroy
    Addresses
    104.21.92.41 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.186.51 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.92.41, 172.67.186.51): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    morn.digital
    Registered
    2026-08-17 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-11 20:24 UTC

    Suggest a correction

  12. multiply-flare.info US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    multiply-flare.info
    First seen
    2026-11-11 20:21 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-11 18:06 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-11-11 19:21 UTC to 2027-02-09 19:21 UTC
    Logged 2026-11-11 20:19 UTC in Google ParcelYard2027h1, entry 742,278,041
    SHA-256 5149fc5e3a92e17209c0f462a71e6edd8e23a13a0e194b89e1462e169d49884e
    Public key SHA-256 49b8b523af34023d1f443a5637547e2c0730f5addfbeb0ab1ad26a1b2a3c3667
    Addresses
    104.21.91.188 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.177.214 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.91.188, 172.67.177.214): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    multiply-flare.info
    Registered
    2026-05-18 · PDR Ltd. d/b/a PublicDomainRegistry.com
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-11 20:32 UTC

    Suggest a correction

  13. nova-crypto.xyz US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX presentSPF ~allDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    nova-crypto.xyz
    First seen
    2026-11-11 20:21 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-11 18:06 UTC
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-11 18:05 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-11 19:16 UTC to 2027-02-09 20:15 UTC
    Logged 2026-11-11 20:16 UTC in Google ParcelYard2027h1, entry 742,244,759
    SHA-256 c21c4b2dd029ac964b2f33a6084d5ad3db8b652dab9366e812ba022d4576ce4e
    Public key SHA-256 2725e6d3f0aba26626a5df6717043b6b76d0d2a056c274513cca78fb9b8da622
    Addresses
    104.21.42.145 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.162.132 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.42.145, 172.67.162.132): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    nova-crypto.xyz
    Registered
    2026-07-07 · NameCheap, Inc.
    MX
    Receives mail at eforward1.registrar-servers.com, eforward2.registrar-servers.com, eforward3.registrar-servers.com
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-11 20:32 UTC

    Suggest a correction

  14. scorpioncc.org US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 22 mo ago
    DetailsHide
    Hostname
    scorpioncc.org
    First seen
    2026-11-11 20:21 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-11 18:05 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-11 19:21 UTC to 2027-02-09 19:21 UTC
    Logged 2026-11-11 20:20 UTC in Google ParcelYard2027h1, entry 742,285,819
    SHA-256 29d5e3c07e2f5a158edbb2a845b2706fa70c179f7abd9eb305bb4b92bc867c06
    Public key SHA-256 eeaee410e334ea58d9ef5421da47a0efa179b7b66b90b725ae6c9f6ae24aad7b
    PhishDestroy
    Addresses
    104.21.95.12 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.142.127 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.95.12, 172.67.142.127): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    scorpioncc.org
    Registered
    2025-01-23 · Dynadot Inc
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-11 20:32 UTC

    Suggest a correction

  15. shareholders-netnet.capital US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 59 d ago
    DetailsHide
    Hostname
    shareholders-netnet.capital
    First seen
    2026-11-11 20:21 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-11 18:06 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-11-11 19:17 UTC to 2027-02-09 19:17 UTC
    Logged 2026-11-11 20:15 UTC in Geomys Tuscolo2027h1, entry 580,241,846
    SHA-256 0892b4a351f0822e6cac993c192899bae84f8933f3fed37d5783ea28bce658ed
    Public key SHA-256 b0811f009187fb3512ba60e1580dff97acdb69af579db00cc7163531e4e533ef
    Addresses
    104.21.91.102 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.215.155 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.91.102, 172.67.215.155): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    shareholders-netnet.capital
    Registered
    2026-09-13 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-11 20:32 UTC

    Suggest a correction

  16. srupelghavo-france.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    srupelghavo-france.com
    First seen
    2026-11-11 20:21 UTC
    Listing
    CERT Polska listed it 2026-09-13 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-11 18:48 UTC
    PhishDestroy: first observed in the feed 2026-11-07 · still listed at the last successful feed check 2026-11-11 18:05 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-11 19:15 UTC to 2027-02-09 20:13 UTC
    Logged 2026-11-11 20:15 UTC in Let's Encrypt Sycamore2027h1, entry 1,151,206,557
    SHA-256 184bf3330d632e3384109cfa252ed9da7e4da72abadfb2433dfe984582eaa59a
    Public key SHA-256 cf6f1e70289439b9db25cb274ac6f515984d511ee3abc16c4afd73b25c7f0326
    Addresses
    104.21.68.239 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.200.68 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.68.239, 172.67.200.68): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    srupelghavo-france.com
    Registered
    2026-07-16 · Dynadot Inc
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-11 20:24 UTC

    Suggest a correction

  17. yetgsas.top US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by NPA 165 (e-commerce)MX absentSPF missingDMARC missingRegistered 10 mo ago
    DetailsHide
    Hostname
    yetgsas.top
    First seen
    2026-11-11 20:21 UTC
    Listing
    NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-11 13:38 UTC
    Listed
    NPA 165
    1. Observed in the NPA 165 feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-11 19:16 UTC to 2027-02-09 20:15 UTC
    Logged 2026-11-11 20:16 UTC in Google PlumbersArms2027h1, entry 742,453,557
    SHA-256 b724bded8033dad1471e4585755e4bf630da4f414af74f13194b3283ef95770c
    Public key SHA-256 b149ff875da9050f7b15e63946c2570fa72f72f5e3996443d5f3d1e92dbc3919
    Addresses
    104.21.78.233 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.138.105 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.78.233, 172.67.138.105): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    yetgsas.top
    Registered
    2026-01-19 · 阿里云计算有限公司
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-11 20:32 UTC

    Suggest a correction

  18. alchemixfi-allocations.xyz US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    alchemixfi-allocations.xyz
    First seen
    2026-11-11 20:16 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-11 18:06 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-11 19:13 UTC to 2027-02-09 19:13 UTC
    Logged 2026-11-11 20:11 UTC in Google ParcelYard2027h1, entry 742,180,961
    SHA-256 22ee248f3edb7ca827b81eb9c8e777852289984e8f9393ab0d38b377c5a4c5b2
    Public key SHA-256 abcb59a5b5be7d71aab6e11dca736bb981e1b593b5700b555e95842858fc33dc
    Addresses
    104.21.5.146 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.154.181 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.5.146, 172.67.154.181): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    alchemixfi-allocations.xyz
    Registered
    2026-05-18 · PDR Ltd. d/b/a PublicDomainRegistry.com
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-11 20:32 UTC

    Suggest a correction

  19. beta-api.paymento.io US · AS13335 · Cloudflare, Inc.3 addresses
    ReportedCloudflareUnder paymento.io, reported by PhishDestroyMX presentSPF ~allDMARC policy noneRegistered 7 y ago
    DetailsHide
    Hostname
    beta-api.paymento.io
    First seen
    2026-11-11 20:16 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-11-10 · still listed at the last successful feed check 2026-11-11 18:05 UTC
    Reported
    PhishDestroy, listing paymento.io and the names under it
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-11-11 19:13 UTC to 2027-02-09 19:13 UTC
    Logged 2026-11-11 20:11 UTC in Google ParcelYard2027h1, entry 742,183,485
    SHA-256 3b394915cab23c513952e4f39c76aa102b3020b7654e6d530045bc235ed13595
    Public key SHA-256 659a7737b5a08a785929eec92b22795ee8a244d26f35303f1c2a8e8e9421921c
    PhishDestroy
    Addresses
    104.26.14.44 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    104.26.15.44 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.74.210 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.26.14.44, 104.26.15.44, 172.67.74.210): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    paymento.io
    Registered
    2020-01-10 · NameCheap, Inc.
    MX
    Receives mail at aspmx.l.google.com, alt1.aspmx.l.google.com, alt2.aspmx.l.google.com
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    DMARC policy p=none: reports only
    Checked
    2026-11-11 20:32 UTC

    Suggest a correction

  20. beta-integration.paymento.io US · AS13335 · Cloudflare, Inc.3 addresses
    ReportedCloudflareUnder paymento.io, reported by PhishDestroyMX presentSPF ~allDMARC policy noneRegistered 7 y ago
    DetailsHide
    Hostname
    beta-integration.paymento.io
    First seen
    2026-11-11 20:16 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-11-10 · still listed at the last successful feed check 2026-11-11 18:05 UTC
    Reported
    PhishDestroy, listing paymento.io and the names under it
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-11-11 19:13 UTC to 2027-02-09 19:13 UTC
    Logged 2026-11-11 20:11 UTC in Google ParcelYard2027h1, entry 742,185,382
    SHA-256 b1a8eff538d33048431f3bdd07e8bad4da70a29d86118908d34618ee7b8eedcd
    Public key SHA-256 45756f14dc3bb39c2c91f464cb05d46bf5e54bfcc1c2c776a533274d57135a7b
    PhishDestroy
    Addresses
    104.26.14.44 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    104.26.15.44 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.74.210 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.26.14.44, 104.26.15.44, 172.67.74.210): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    paymento.io
    Registered
    2020-01-10 · NameCheap, Inc.
    MX
    Receives mail at aspmx.l.google.com, alt1.aspmx.l.google.com, alt2.aspmx.l.google.com
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    DMARC policy p=none: reports only
    Checked
    2026-11-11 20:32 UTC

    Suggest a correction

  21. beta.paymento.io US · AS13335 · Cloudflare, Inc.3 addresses
    ReportedCloudflareUnder paymento.io, reported by PhishDestroyMX presentSPF ~allDMARC policy noneRegistered 7 y ago
    DetailsHide
    Hostname
    beta.paymento.io
    First seen
    2026-11-11 20:16 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-11-10 · still listed at the last successful feed check 2026-11-11 18:05 UTC
    Reported
    PhishDestroy, listing paymento.io and the names under it
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-11-11 19:13 UTC to 2027-02-09 19:13 UTC
    Logged 2026-11-11 20:11 UTC in IPng Networks Gouda2027h1, entry 386,819,425
    SHA-256 c827b24e2202cddf9ca6904856c80292fb6f5260b70676c6154c428139e1b04e
    Public key SHA-256 765b00b9ca5511b944efd12b3804fa1b15bfcc5f6225369bb016d4ec34b0558f
    PhishDestroy
    Addresses
    104.26.14.44 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    104.26.15.44 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.74.210 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.26.14.44, 104.26.15.44, 172.67.74.210): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    paymento.io
    Registered
    2020-01-10 · NameCheap, Inc.
    MX
    Receives mail at aspmx.l.google.com, alt1.aspmx.l.google.com, alt2.aspmx.l.google.com
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    DMARC policy p=none: reports only
    Checked
    2026-11-11 20:32 UTC

    Suggest a correction

  22. bfgxe.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    bfgxe.com
    First seen
    2026-11-11 20:16 UTC
    Listing
    CERT Polska listed it 2026-05-18 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-11 18:48 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-11-11 19:13 UTC to 2027-02-09 19:13 UTC
    Logged 2026-11-11 20:12 UTC in Google ParcelYard2027h1, entry 742,192,669
    SHA-256 81a07d1116f89d5bd09667b94905ff607b3ae67b95360e0b859cd8629c0c8956
    Public key SHA-256 ae791c58124dc864fd58d166199856bdb399b0e970058e4125451607244b1c22
    Addresses
    104.21.16.81 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.166.243 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.16.81, 172.67.166.243): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    bfgxe.com
    Registered
    2026-05-18 · Cloud Yuqu LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-11 20:32 UTC

    Suggest a correction

  23. connect-start-ledger-ens.pages.dev US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMask
    DetailsHide
    Hostname
    connect-start-ledger-ens.pages.dev
    First seen
    2026-11-11 20:16 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-11 18:06 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-11 19:13 UTC to 2027-02-09 20:11 UTC
    Logged 2026-11-11 20:13 UTC in DigiCert Wyvern2027h1, entry 502,414,074
    SHA-256 372bd73540a8ae2215b6cf1c160e6b8f02fa5f68f74a736480a6fd35731c22ac
    Public key SHA-256 3f3f33767c0597fcc190eb3712aa1c99484a87fdbdb7c65ae24b515e856e36f7
    Addresses
    172.66.44.207 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.66.47.49 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (172.66.44.207, 172.66.47.49): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.

    Suggest a correction

  24. craftedwithfuture.digital US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    craftedwithfuture.digital
    First seen
    2026-11-11 20:16 UTC
    Listing
    CERT Polska listed it 2026-05-29 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-11 18:48 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-11-11 19:14 UTC to 2027-02-09 19:14 UTC
    Logged 2026-11-11 20:13 UTC in Let's Encrypt Sycamore2027h1, entry 1,151,177,014
    SHA-256 33ea95b2fb06e1076b00182c1f26e8fcff04d7155bf268f2c6a989903963fdad
    Public key SHA-256 4b25b6e043cf23124a5a6a098fb0ccca8fb8d6a2fa9097056e5e03c0c9a662c4
    Addresses
    104.21.82.115 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.157.47 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.82.115, 172.67.157.47): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    craftedwithfuture.digital
    Registered
    2026-05-18 · Dynadot Inc
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-11 20:32 UTC

    Suggest a correction

  25. get-xverse.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 59 d ago
    DetailsHide
    Hostname
    get-xverse.com
    First seen
    2026-11-11 20:16 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-11 18:06 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-11-11 19:15 UTC to 2027-02-09 19:15 UTC
    Logged 2026-11-11 20:14 UTC in Let's Encrypt Sycamore2027h1, entry 1,151,189,106
    SHA-256 d5f1c3abfe9fa96546d22abf8e4960211c20c865a1a68e8c6adc2ea11584e6d0
    Public key SHA-256 32aee2fae9a36b28a0c96f547997cbaf04f2b78bdf3376791e5f1fab372ba41a
    Addresses
    104.21.75.87 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.217.158 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.75.87, 172.67.217.158): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    get-xverse.com
    Registered
    2026-09-13 · NameSilo, LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-11 20:32 UTC

    Suggest a correction

  26. graftonspa.live US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    graftonspa.live
    First seen
    2026-11-11 20:16 UTC
    Listing
    CERT Polska listed it 2026-08-17 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-11 18:48 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-11 19:13 UTC to 2027-02-09 20:11 UTC
    Logged 2026-11-11 20:13 UTC in Geomys Tuscolo2027h1, entry 580,221,182
    SHA-256 e4a5d68214609234ecd140a880269220a541e20ce5329cac2c024b42ea67f8ca
    Public key SHA-256 89c8759471fba111de885652a5f37a92832d82d26be54fa8fe4d2b4a6124e4d8
    Addresses
    104.21.48.119 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.151.15 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.48.119, 172.67.151.15): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    graftonspa.live
    Registered
    2026-07-16 · Dynadot Inc
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-11 20:32 UTC

    Suggest a correction

  27. ledger-com-live.app US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    ledger-com-live.app
    First seen
    2026-11-11 20:16 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-11 18:06 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-11 19:12 UTC to 2027-02-09 20:11 UTC
    Logged 2026-11-11 20:12 UTC in DigiCert Wyvern2027h1, entry 502,404,669
    SHA-256 2dd941c5c78ed7c5b4c3aa43a66e6a2d50d9e90bae2f7b0ec8b17d7884327b4a
    Public key SHA-256 5794b60350fbe82278316ffa1a227206a69d283b34d60ea9a4ebd76ebc005783
    Addresses
    104.21.5.155 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.133.135 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.5.155, 172.67.133.135): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    ledger-com-live.app
    Registered
    2026-07-16 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-11 20:32 UTC

    Suggest a correction

  28. tachzeware.site US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 3 mo ago
    DetailsHide
    Hostname
    tachzeware.site
    First seen
    2026-11-11 20:16 UTC
    Listing
    CERT Polska listed it 2026-08-18 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-11 18:48 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by Sectigo Public Server Authentication CA DV E36 · precertificate
    Valid 2026-11-11 00:00 UTC to 2027-02-09 20:11 UTC
    Logged 2026-11-11 20:14 UTC in Let's Encrypt Willow2027h1, entry 1,105,359,232
    SHA-256 1adb4e24132e02064e2852a3a7eea6a40e623d42550943622dfbccf89dd3581a
    Public key SHA-256 b995b1515d7a832d1caa0a68b33f1fb16104cc50044c7d907858d45f6feb545f
    Addresses
    104.21.0.125 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.185.254 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.0.125, 172.67.185.254): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    tachzeware.site
    Registered
    2026-08-18 · NameCheap, Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-11 20:32 UTC

    Suggest a correction

  29. tokens-netnetcapital.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 59 d ago
    DetailsHide
    Hostname
    tokens-netnetcapital.com
    First seen
    2026-11-11 20:16 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-11 18:06 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-11-11 19:13 UTC to 2027-02-09 19:13 UTC
    Logged 2026-11-11 20:12 UTC in Google ParcelYard2027h1, entry 742,187,386
    SHA-256 6d1e3d74d75a10d5f7e790857e9c80b245c3b26b622397141e693c42cfba6748
    Public key SHA-256 3d0ac3c4eb33e9b43c4f4799c6e007adb508728e3c45b071873db689b199ac78
    Addresses
    104.21.17.128 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.176.197 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.17.128, 172.67.176.197): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    tokens-netnetcapital.com
    Registered
    2026-09-13 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-11 20:32 UTC

    Suggest a correction

  30. xn--krb1-rzb.com US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX presentSPF -allDMARC quarantineRegistered 11 mo ago
    DetailsHide
    Hostname
    xn--krb1-rzb.com
    First seen
    2026-11-11 20:16 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-11 18:05 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-11 19:12 UTC to 2027-02-09 19:12 UTC
    Logged 2026-11-11 20:11 UTC in Google ParcelYard2027h1, entry 742,175,970
    SHA-256 6cbca6804ae076c348512e4cb24738813426339a2c4dcb4a33d72d90a6de0552
    Public key SHA-256 69aecfe310f68a5f75bc98efbf6ccb9140766f78d786a288bbd89d0b39c47ae4
    PhishDestroy
    Addresses
    104.21.28.73 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.144.185 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.28.73, 172.67.144.185): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    xn--krb1-rzb.com
    Registered
    2025-12-09 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Receives mail at mail.xn--krb1-rzb.com
    SPF
    SPF record with -all: other senders fail
    DMARC
    DMARC policy p=quarantine
    Checked
    2026-11-11 20:32 UTC

    Suggest a correction

  31. activedutycup.com US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 10 mo ago
    DetailsHide
    Hostname
    activedutycup.com
    First seen
    2026-11-11 20:10 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-11 18:05 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-11 19:08 UTC to 2027-02-09 20:06 UTC
    Logged 2026-11-11 20:08 UTC in Google ParcelYard2027h1, entry 742,135,967
    SHA-256 84580b0e6141794c6f4c2cbc75696ac9ad9b73d5d0eabbf44264539666b25943
    Public key SHA-256 ebb7f3fa3ec5ff64676b34d51fa474b595e343138d666e280cd22fb3a81d79fe
    PhishDestroy
    Addresses
    104.21.38.14 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.217.11 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.38.14, 172.67.217.11): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    activedutycup.com
    Registered
    2026-01-19 · Registrar of Domain Names REG.RU LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-11 20:32 UTC

    Suggest a correction

  32. app-triasclaimmigrationcampaign.pages.dev US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMask
    DetailsHide
    Hostname
    app-triasclaimmigrationcampaign.pages.dev
    First seen
    2026-11-11 20:10 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-11 18:06 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-11 19:09 UTC to 2027-02-09 20:07 UTC
    Logged 2026-11-11 20:09 UTC in DigiCert Wyvern2027h1, entry 502,366,683
    SHA-256 4bd58858e1f355bf9ea647c8785a77053f95ed54a1d8a64ec99c20eb9b22d44d
    Public key SHA-256 22e044cbabc881bbdebe67de9a895bc72bb14aa90af92762521b4a2fcf1fced0
    Addresses
    172.66.44.54 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.66.47.202 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (172.66.44.54, 172.66.47.202): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.

    Suggest a correction

  33. blemder.io US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    blemder.io
    First seen
    2026-11-11 20:10 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-11 18:06 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-11 19:10 UTC to 2027-02-09 19:10 UTC
    Logged 2026-11-11 20:08 UTC in Google PlumbersArms2027h1, entry 742,355,938
    SHA-256 373d1856a48b19e5ceda0816cdc7f1a13801bf11746cf28f28a19fd2a5e99069
    Public key SHA-256 cb594077ef4219f024eb10551e4f3d591deb6a1f46a7e9f0298af72d1c3afab5
    Addresses
    104.21.73.113 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.144.179 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.73.113, 172.67.144.179): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    blemder.io
    Registered
    2026-05-18 · TLD Registrar Solutions Ltd.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-11 20:32 UTC

    Suggest a correction

  34. delwickgainstead.live US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 5 mo ago
    DetailsHide
    Hostname
    delwickgainstead.live
    First seen
    2026-11-11 20:10 UTC
    Listing
    CERT Polska listed it 2026-07-17 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-11 18:48 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by Sectigo Public Server Authentication CA DV E36 · precertificate
    Valid 2026-11-11 00:00 UTC to 2027-02-09 20:06 UTC
    Logged 2026-11-11 20:08 UTC in DigiCert Wyvern2027h1, entry 502,354,212
    SHA-256 80cfda1a92dadbd3557740ab087fff24b1aa20dfe54cb5489f1359ab9212b071
    Public key SHA-256 1f19c3966e04c6964137af7777f36bc414d4827388f816539845daf42e15b44c
    Addresses
    104.21.56.47 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.177.143 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.56.47, 172.67.177.143): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    delwickgainstead.live
    Registered
    2026-06-05 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-11 20:32 UTC

    Suggest a correction

  35. oferta-584392143.live US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 59 d ago
    DetailsHide
    Hostname
    oferta-584392143.live
    First seen
    2026-11-11 20:10 UTC
    Listing
    CERT Polska listed it 2026-09-13 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-11 18:48 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by Sectigo Public Server Authentication CA DV E36
    Valid 2026-11-11 00:00 UTC to 2027-02-09 20:00 UTC
    Logged 2026-11-11 20:05 UTC in DigiCert Sphinx2027h1, entry 445,795,097
    SHA-256 404ae53eb9299c2bb4f1474cac8c2c9ff833004cf1b92321bd7bfbc925ea09a1
    Public key SHA-256 bde21a457edb05c9e8ede3b00a7356ed8fd45eb1deddac100ff858227dd48750
    Addresses
    104.21.41.31 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.159.127 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.41.31, 172.67.159.127): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    oferta-584392143.live
    Registered
    2026-09-13 · Global Domain Group LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-11 20:32 UTC

    Suggest a correction

  36. thesymbiotelab.sbs US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    thesymbiotelab.sbs
    First seen
    2026-11-11 20:10 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-11 18:06 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-11-11 19:11 UTC to 2027-02-09 19:11 UTC
    Logged 2026-11-11 20:09 UTC in Google PlumbersArms2027h1, entry 742,367,452
    SHA-256 48a5df3c0d4518df1bf16699a2bf344d034a7089dbc7d0b2b4463704fa78cf3a
    Public key SHA-256 3e186cf64375976d62c6b082bc07a5385595eb0a27c5e2f39d14932932119ef4
    Addresses
    104.21.6.80 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.134.159 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.6.80, 172.67.134.159): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    thesymbiotelab.sbs
    Registered
    2026-05-18 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-11 20:32 UTC

    Suggest a correction

  37. uioonk.uk US · AS13335 · Cloudflare, Inc.
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 5 mo ago
    DetailsHide
    Hostname
    uioonk.uk
    First seen
    2026-11-11 20:10 UTC
    Listing
    CERT Polska listed it 2026-09-02 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-11 18:48 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1
    Valid 2026-10-24 22:57 UTC to 2027-01-22 23:57 UTC
    Logged 2026-11-11 20:09 UTC in Google PlumbersArms2027h1, entry 742,368,134
    SHA-256 9e292ca3d7c98511075b5b946ed26115882a7958c61c9420dd033b9ab024abda
    Public key SHA-256 054a761c404840f3aa23024dbb6197c74f83bdaf08dd5bde81bb681929b5bcc4
    Addresses
    104.18.71.116 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.18.71.116): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    uioonk.uk
    Registered
    2026-06-27 · Cloudflare, Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-11 20:32 UTC

    Suggest a correction

  38. xb0fil.shop US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by NPA 165 (information services)MX absentSPF missingDMARC missingRegistered 10 mo ago
    DetailsHide
    Hostname
    xb0fil.shop
    First seen
    2026-11-11 20:10 UTC
    Listing
    NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-11 13:38 UTC
    Listed
    NPA 165
    1. Observed in the NPA 165 feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-11 19:05 UTC to 2027-02-09 20:04 UTC
    Logged 2026-11-11 20:05 UTC in DigiCert Wyvern2027h1, entry 502,323,814
    SHA-256 8397e30b29ca9eccd2e3c4bb8a8c28ae999acd9c1ed0d3c81ef008576ddafe4a
    Public key SHA-256 b00b2a688a1efa4d60f04296bc6a8a0cf2c889e1c0a889ea231a8ad9b769b959
    Addresses
    104.21.30.30 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.150.115 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.30.30, 172.67.150.115): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    xb0fil.shop
    Registered
    2026-01-20 · Alibaba Cloud Computing Ltd.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-11 20:32 UTC

    Suggest a correction

  39. eng-trezor-help.pages.dev US · AS13335 · Cloudflare, Inc.4 addressesTrezor
    ListedCloudflareListed by MetaMask
    DetailsHide
    Hostname
    eng-trezor-help.pages.dev
    First seen
    2026-11-11 20:05 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-11 18:06 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-11 19:03 UTC to 2027-02-09 20:02 UTC
    Logged 2026-11-11 20:03 UTC in Let's Encrypt Willow2027h1, entry 1,105,221,652
    SHA-256 dbaf1c58c0e1a62ec9822a65c871a1d3d0f3890013c5a2dee25c0e45843044bc
    Public key SHA-256 30c69080c74bc14d3b04e61d0c4ac5e3ea8beca49a39ee1851fb85ce48d78d31
    Brand
    Trezor
    Addresses
    172.66.45.39 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.66.46.217 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:310c::ac42:2d27
    2606:4700:310c::ac42:2ed9
    Cloudflare
    Cloudflare (172.66.45.39, 172.66.46.217): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.

    Suggest a correction

  40. fenokai.click US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    fenokai.click
    First seen
    2026-11-11 20:05 UTC
    Listing
    CERT Polska listed it 2026-07-24 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-11 18:48 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-11-11 19:03 UTC to 2027-02-09 19:03 UTC
    Logged 2026-11-11 20:02 UTC in Google ParcelYard2027h1, entry 742,051,236
    SHA-256 186a13096c60b5156268842b13312836d6599d11960d8036b6e8a7867fff92fc
    Public key SHA-256 3ba36043c14bf08e782db054e57848532f0446d75bc98438f36b3fb054577226
    Addresses
    104.21.74.142 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.158.252 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.74.142, 172.67.158.252): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    fenokai.click
    Registered
    2026-05-18 · NAMECHEAP
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-11 20:32 UTC

    Suggest a correction

  41. gomarsmarket.com US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    gomarsmarket.com
    First seen
    2026-11-11 20:05 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-11 18:05 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by Sectigo Public Server Authentication CA DV E36
    Valid 2026-11-11 00:00 UTC to 2027-02-09 20:03 UTC
    Logged 2026-11-11 20:04 UTC in DigiCert Sphinx2027h1, entry 445,788,643
    SHA-256 658ae9601cd9a0196ee7ba5cd4fc258afa20049b27246652f991a7ce34bb55d7
    Public key SHA-256 c011f2cee364a7e9c11d0c1d7a00eb227f0e01b50d026ce3cb285f46a62f6ee6
    PhishDestroy
    Addresses
    104.21.80.8 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.172.143 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.80.8, 172.67.172.143): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    gomarsmarket.com
    Registered
    2026-05-29 · Eranet International Limited
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-11 20:32 UTC

    Suggest a correction

  42. htpxz.asia US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by NPA 165 (information services)MX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    htpxz.asia
    First seen
    2026-11-11 20:05 UTC
    Listing
    NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-11 13:38 UTC
    Listed
    NPA 165
    1. Observed in the NPA 165 feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-11-11 19:04 UTC to 2027-02-09 19:04 UTC
    Logged 2026-11-11 20:02 UTC in DigiCert Sphinx2027h1, entry 445,767,073
    SHA-256 04e59119e10343d08a6d448cbdc109942ae063e346a32982c3177f4ec8dcf942
    Public key SHA-256 6f20fb44566235f6d83a3e55f87c4135802c41b263407035010ef54c704b079f
    Addresses
    104.21.36.174 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.197.231 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.36.174, 172.67.197.231): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    htpxz.asia
    Registered
    2026-05-18 · Alibaba Cloud Computing Ltd. d/b/a HiChina (www.net.cn)
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-11 20:32 UTC

    Suggest a correction

  43. moon-pay-io.pages.dev US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMask
    DetailsHide
    Hostname
    moon-pay-io.pages.dev
    First seen
    2026-11-11 20:05 UTC
    Listing
    MetaMask: first observed in the feed 2026-11-03 · still listed at the last successful feed check 2026-11-11 18:06 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-11 19:02 UTC to 2027-02-09 20:01 UTC
    Logged 2026-11-11 20:02 UTC in Google ParcelYard2027h1, entry 742,061,133
    SHA-256 dd1e590555c2b4eff1fbcd9c7d3c423604c91c35b9d4892fb13645d9a66bf1f0
    Public key SHA-256 71b3ea6f66d104d1270f2abb790ebd82687e51a7b49013eff9363f8904ae6f12
    Addresses
    172.66.44.79 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.66.47.177 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (172.66.44.79, 172.66.47.177): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.

    Suggest a correction

  44. savonatrade91.it US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    savonatrade91.it
    First seen
    2026-11-11 20:05 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-11 18:05 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-11 19:01 UTC to 2027-02-09 19:58 UTC
    Logged 2026-11-11 20:01 UTC in Geomys Tuscolo2027h1, entry 580,101,027
    SHA-256 3ad3400186e10e09a56e772c103c1efedca0403a4c328e04667c6725774d1759
    Public key SHA-256 b7f8211e51be5458ccebdecd5aa55b520244999f07b7819c82841074733f250e
    PhishDestroy
    Addresses
    104.21.19.252 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.190.182 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.19.252, 172.67.190.182): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    savonatrade91.it
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-11 20:08 UTC

    Suggest a correction

  45. spribter.click US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    spribter.click
    First seen
    2026-11-11 20:05 UTC
    Listing
    CERT Polska listed it 2026-07-24 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-11 18:48 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-11-11 19:03 UTC to 2027-02-09 19:03 UTC
    Logged 2026-11-11 20:01 UTC in Let's Encrypt Willow2027h1, entry 1,105,193,593
    SHA-256 b7bd205e5e28d5d2c192625e717fd24f4fea15c395f711934d45d72c86f44a30
    Public key SHA-256 69987db84a36f41d86111b6c791c4f7074f05d35c18f39afec8545629cae5c57
    Addresses
    104.21.13.87 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.199.28 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.13.87, 172.67.199.28): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    spribter.click
    Registered
    2026-05-18 · NAMECHEAP
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-11 20:32 UTC

    Suggest a correction

  46. ticket-coin-base.com US · AS13335 · Cloudflare, Inc.4 addressesCoinbase
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    ticket-coin-base.com
    First seen
    2026-11-11 20:05 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-11 18:06 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-11-11 19:02 UTC to 2027-02-09 19:02 UTC
    Logged 2026-11-11 20:01 UTC in Let's Encrypt Sycamore2027h1, entry 1,151,011,422
    SHA-256 6ef5b879abe33940d9d05b4c7f405e449e869994f670451a72ec41d3a9aae52d
    Public key SHA-256 ed03cebce80ad74c2bc9b59af26a26ababae6aa202f39c4d50b2584a060534ff
    Brand
    Coinbase
    Addresses
    104.21.11.122 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.166.5 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3030::6815:b7a
    2606:4700:3035::ac43:a605
    Cloudflare
    Cloudflare (104.21.11.122, 172.67.166.5): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    ticket-coin-base.com
    Registered
    2026-05-18 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-11 20:32 UTC

    Suggest a correction

  47. auction-zkp.app US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 9 mo ago
    DetailsHide
    Hostname
    auction-zkp.app
    First seen
    2026-11-11 20:00 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-11 18:05 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-11 18:58 UTC to 2027-02-09 19:57 UTC
    Logged 2026-11-11 19:58 UTC in DigiCert Wyvern2027h1, entry 502,236,847
    SHA-256 f168e8c6e75fde16c4e9b7c426d45e216037f8f40ae141405b21c70726848f8a
    Public key SHA-256 97024de9f7f297d2f7882a363b4e113f15f785787c385d07c3543b328d8eab22
    PhishDestroy
    Addresses
    104.21.41.107 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.164.109 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.41.107, 172.67.164.109): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    auction-zkp.app
    Registered
    2026-02-27 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-11 20:32 UTC

    Suggest a correction

  48. occsdc.org US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 8 mo ago
    DetailsHide
    Hostname
    occsdc.org
    First seen
    2026-11-11 20:00 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-11 18:05 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-11 19:00 UTC to 2027-02-09 19:00 UTC
    Logged 2026-11-11 19:59 UTC in IPng Networks Halloumi2027h1, entry 459,953,537
    SHA-256 0392ae552101cd9ae2a22182243b16834306a9fa6f0e74a8991acf98d2425a8d
    Public key SHA-256 078da9cffec531f54eb27f7878a626e7fe24a53ccc382141fe3888189556a8a0
    PhishDestroy
    Addresses
    104.21.64.182 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.154.76 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.64.182, 172.67.154.76): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    occsdc.org
    Registered
    2026-03-20 · Cloudflare, Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-11 20:03 UTC

    Suggest a correction

  49. aiinvest.us US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX presentSPF ~allDMARC missingRegistered 8 mo ago
    DetailsHide
    Hostname
    aiinvest.us
    First seen
    2026-11-11 19:57 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-11 18:06 UTC
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-11 18:05 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR1 · precertificate
    Valid 2026-11-11 18:56 UTC to 2027-02-09 18:56 UTC
    Logged 2026-11-11 19:55 UTC in DigiCert Sphinx2027h1, entry 445,683,636
    SHA-256 278ef6d3b34479e1136c94c48bfdfc7951497810e18800fbb64e9993b4d82987
    Public key SHA-256 e26794340c978821f8daef84e0104bbaaa6f3667947ef8d9ed0c07be29bd6852
    Addresses
    104.21.68.112 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.195.4 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.68.112, 172.67.195.4): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    aiinvest.us
    Registered
    2026-03-31 · NameSilo, LLC
    MX
    Receives mail at mx.zoho.com, mx2.zoho.com, mx3.zoho.com
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-11 20:32 UTC

    Suggest a correction

  50. cmqxx.icu US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by NPA 165 (e-commerce)MX absentSPF missingDMARC missingRegistered 7 mo ago
    DetailsHide
    Hostname
    cmqxx.icu
    First seen
    2026-11-11 19:57 UTC
    Listing
    NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-11 13:38 UTC
    Listed
    NPA 165
    1. Observed in the NPA 165 feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-11 18:51 UTC to 2027-02-09 19:50 UTC
    Logged 2026-11-11 19:51 UTC in Google ParcelYard2027h1, entry 741,919,170
    SHA-256 1f59a0305409261bb4d10f304fadbddbb274f822f7bd3cc6c0be1c86fc74b08d
    Public key SHA-256 dc827bb07e2f485f77ffbf25f069a8f2d7b9e88df98d1057e6f3fa6c382e9109
    Addresses
    104.21.75.251 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.184.140 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.75.251, 172.67.184.140): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    cmqxx.icu
    Registered
    2026-04-25 · Alibaba Cloud Computing Ltd. d/b/a HiChina (www.net.cn)
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-11 20:32 UTC

    Suggest a correction

  51. collectorscryptcards.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 59 d ago
    DetailsHide
    Hostname
    collectorscryptcards.com
    First seen
    2026-11-11 19:57 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-11 18:06 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-11 18:51 UTC to 2027-02-09 19:50 UTC
    Logged 2026-11-11 19:51 UTC in Geomys Tuscolo2027h1, entry 580,005,350
    SHA-256 8ffea3f11597c4673f7b45cfffd4e03d3352e8847f150d4380fa28ede95c958a
    Public key SHA-256 2c8ef450bd705d68fb2b123f8cc1d367ddf788d456dc93a1c68499fdc8139f86
    Addresses
    104.21.61.205 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.214.116 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.61.205, 172.67.214.116): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    collectorscryptcards.com
    Registered
    2026-09-13 · PDR Ltd. d/b/a PublicDomainRegistry.com
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-11 20:32 UTC

    Suggest a correction

  52. flare-multiplier.info US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    flare-multiplier.info
    First seen
    2026-11-11 19:57 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-11 18:06 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-11 18:53 UTC to 2027-02-09 18:53 UTC
    Logged 2026-11-11 19:52 UTC in Let's Encrypt Willow2027h1, entry 1,105,074,671
    SHA-256 0abdd5547489342d74d2401a892442974a97bab8abe7007b985d778f06536f9e
    Public key SHA-256 fdb6f41aa0641a31bbd940b33d3c0690698743ddadafa3e784dec8c86ef5d723
    Addresses
    104.21.5.202 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.133.209 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.5.202, 172.67.133.209): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    flare-multiplier.info
    Registered
    2026-05-18 · PDR Ltd. d/b/a PublicDomainRegistry.com
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-11 20:32 UTC

    Suggest a correction

  53. kxt.aiinvest.us US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareUnder aiinvest.us, listed by MetaMaskMX presentSPF ~allDMARC missingRegistered 8 mo ago
    DetailsHide
    Hostname
    kxt.aiinvest.us
    First seen
    2026-11-11 19:57 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-11 18:06 UTC
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-11 18:05 UTC
    Listed
    MetaMask, listing aiinvest.us and the names under it
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR1 · precertificate
    Valid 2026-11-11 18:56 UTC to 2027-02-09 18:56 UTC
    Logged 2026-11-11 19:55 UTC in DigiCert Sphinx2027h1, entry 445,683,636
    SHA-256 278ef6d3b34479e1136c94c48bfdfc7951497810e18800fbb64e9993b4d82987
    Public key SHA-256 e26794340c978821f8daef84e0104bbaaa6f3667947ef8d9ed0c07be29bd6852
    Addresses
    104.21.68.112 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.195.4 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.68.112, 172.67.195.4): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    aiinvest.us
    Registered
    2026-03-31 · NameSilo, LLC
    MX
    Receives mail at mx.zoho.com, mx2.zoho.com, mx3.zoho.com
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-11 20:32 UTC

    Suggest a correction

  54. logicharbor.buzz US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by USOMMX absentSPF missingDMARC missingRegistered 7 mo ago
    DetailsHide
    Hostname
    logicharbor.buzz
    First seen
    2026-11-11 19:57 UTC
    Listing
    USOM listed it 2026-05-24 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-11 19:27 UTC
    Listed
    USOM
    1. Listed by USOM
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by Cloudflare TLS Issuing ECC CA 4 · precertificate
    Valid 2026-11-11 19:44 UTC to 2027-02-09 19:51 UTC
    Logged 2026-11-11 19:54 UTC in Google ParcelYard2027h1, entry 741,946,255
    SHA-256 70366492c5580e2e9002678d7b68e796527fb5d4d1ccad81d6f7f0ae09eaedeb
    Public key SHA-256 f6ec39778c7b9b7d9f978cc824c8e0f8fe8852a790e9a2e70e77f7fe5376c5e1
    Addresses
    104.21.7.23 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.135.165 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.7.23, 172.67.135.165): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    logicharbor.buzz
    Registered
    2026-04-13 · Dynadot Inc
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-11 20:32 UTC

    Suggest a correction

  55. scsho.icu US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by NPA 165 (e-commerce)MX absentSPF missingDMARC missingRegistered 7 mo ago
    DetailsHide
    Hostname
    scsho.icu
    First seen
    2026-11-11 19:57 UTC
    Listing
    NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-11 13:38 UTC
    Listed
    NPA 165
    1. Observed in the NPA 165 feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by Cloudflare TLS Issuing ECC CA 4 · precertificate
    Valid 2026-11-11 19:43 UTC to 2027-02-09 19:51 UTC
    Logged 2026-11-11 19:53 UTC in DigiCert Sphinx2027h1, entry 445,669,041
    SHA-256 94c0c4ed7103f71750425bd62ef4d40f520d4c9c59d9563d448cfc5e9d3e57f9
    Public key SHA-256 7bbabd9ebd6a427e182e0df07d5986169a1263c0ed13d35c6e0a51aff9a150fd
    Addresses
    104.21.86.134 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.220.87 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.86.134, 172.67.220.87): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    scsho.icu
    Registered
    2026-04-24 · Alibaba Cloud Computing Ltd. d/b/a HiChina (www.net.cn)
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-11 20:32 UTC

    Suggest a correction

  56. www.aiinvest.us US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareUnder aiinvest.us, listed by MetaMaskMX presentSPF ~allDMARC missingRegistered 8 mo ago
    DetailsHide
    Hostname
    www.aiinvest.us
    First seen
    2026-11-11 19:57 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-11 18:06 UTC
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-11 18:05 UTC
    Listed
    MetaMask, listing aiinvest.us and the names under it
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR1 · precertificate
    Valid 2026-11-11 18:56 UTC to 2027-02-09 18:56 UTC
    Logged 2026-11-11 19:55 UTC in DigiCert Sphinx2027h1, entry 445,683,636
    SHA-256 278ef6d3b34479e1136c94c48bfdfc7951497810e18800fbb64e9993b4d82987
    Public key SHA-256 e26794340c978821f8daef84e0104bbaaa6f3667947ef8d9ed0c07be29bd6852
    Addresses
    104.21.68.112 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.195.4 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.68.112, 172.67.195.4): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    aiinvest.us
    Registered
    2026-03-31 · NameSilo, LLC
    MX
    Receives mail at mx.zoho.com, mx2.zoho.com, mx3.zoho.com
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-11 20:32 UTC

    Suggest a correction

  57. 2-gov-usenest.pages.dev US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMask
    DetailsHide
    Hostname
    2-gov-usenest.pages.dev
    First seen
    2026-11-11 19:52 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-28 · still listed at the last successful feed check 2026-11-11 18:06 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-11-11 18:49 UTC to 2027-02-09 18:49 UTC
    Logged 2026-11-11 19:47 UTC in DigiCert Wyvern2027h1, entry 502,139,387
    SHA-256 ba590abaa56cf06cdacb035c70c14726b1873ff8a0626dcee18bca036410eabf
    Public key SHA-256 e708fa5a39d207e3b78c36e1e00845ace4ca5ecd555c3f3526e285d0b7876df0
    Addresses
    172.66.44.182 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.66.47.74 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (172.66.44.182, 172.66.47.74): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.

    Suggest a correction

  58. centrifuges.digital US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    centrifuges.digital
    First seen
    2026-11-11 19:52 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-11 18:06 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-11-11 18:51 UTC to 2027-02-09 18:51 UTC
    Logged 2026-11-11 19:50 UTC in Google ParcelYard2027h1, entry 741,902,801
    SHA-256 8e663e031a0b21a119256f97fc2ab56a6e6d6b4705e617dfde0e423c68288bbb
    Public key SHA-256 f8f1a2711b92f5e9ae4c1579cd0fd27face1fdef9b8a275c695eefdeae931683
    Addresses
    104.21.50.100 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.204.182 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.50.100, 172.67.204.182): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    centrifuges.digital
    Registered
    2026-05-18 · PDR Ltd. d/b/a PublicDomainRegistry.com
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-11 20:32 UTC

    Suggest a correction

  59. naplesoldport.com US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 6 y ago
    DetailsHide
    Hostname
    naplesoldport.com
    First seen
    2026-11-11 19:52 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-11 18:05 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-11-11 18:47 UTC to 2027-02-09 18:47 UTC
    Logged 2026-11-11 19:46 UTC in Google ParcelYard2027h1, entry 741,857,934
    SHA-256 07c574cec0fd8a062a69c16dd2a4758b51203e46d5bef1c507a0817d3e29e1b3
    Public key SHA-256 e854ca5170ce0e2fd32b1f1b35421d7df389570cbc4847893d4c1897f9d2a993
    PhishDestroy
    Addresses
    104.21.17.82 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.175.80 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.17.82, 172.67.175.80): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    naplesoldport.com
    Registered
    2020-07-27 · GoDaddy.com, LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-11 20:32 UTC

    Suggest a correction

  60. rofutoo.pro US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 7 mo ago
    DetailsHide
    Hostname
    rofutoo.pro
    First seen
    2026-11-11 19:52 UTC
    Listing
    CERT Polska listed it 2026-06-13 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-11 18:48 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-10-09 09:59 UTC to 2027-01-07 09:59 UTC
    Logged 2026-11-11 19:47 UTC in Sectigo Statue2027h1, entry 134,028,477
    SHA-256 44db18776af0f1d8418bafd945695473b54dc8dfc90eadd52dbfdd6c09d68adf
    Public key SHA-256 2f36446151ce0dc50b971d5cd9d1069b13fdab3d29f7aea5f1e58b7dbaa8fb95
    Addresses
    104.21.92.130 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.194.35 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.92.130, 172.67.194.35): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    rofutoo.pro
    Registered
    2026-04-15 · NameCheap, Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-11 20:32 UTC

    Suggest a correction

  61. solstice-tge.xyz US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    solstice-tge.xyz
    First seen
    2026-11-11 19:52 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-11 18:06 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-11-11 18:47 UTC to 2027-02-09 18:47 UTC
    Logged 2026-11-11 19:46 UTC in Google ParcelYard2027h1, entry 741,858,356
    SHA-256 40c5dae9e4c42192fad66172b3f6831346adc34a2d5a893697a4ddd683310f43
    Public key SHA-256 61adfd2def1cabfb582e96201ca08993501d442be6f873931677eb309430cbf2
    Addresses
    104.21.0.229 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.128.93 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.0.229, 172.67.128.93): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    solstice-tge.xyz
    Registered
    2026-05-18 · PDR Ltd. d/b/a PublicDomainRegistry.com
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-11 20:32 UTC

    Suggest a correction

  62. xn--moonshts-8e1d.net US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 9 mo ago
    DetailsHide
    Hostname
    xn--moonshts-8e1d.net
    First seen
    2026-11-11 19:52 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-11 18:05 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-10-05 19:51 UTC to 2027-01-03 19:51 UTC
    Logged 2026-11-11 19:47 UTC in DigiCert Wyvern2027h1, entry 502,138,223
    SHA-256 b537c2680acc57390c8eb5b6302699d94a9b19c4b7dfb6e707fcfb7eb0698b96
    Public key SHA-256 67330fa529c7a1be221169dd5a67caeb2bce8480b2a58dbd0d09a9e835bcac3d
    PhishDestroy
    Addresses
    104.21.15.254 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.165.158 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.15.254, 172.67.165.158): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    xn--moonshts-8e1d.net
    Registered
    2026-02-11 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-11 20:32 UTC

    Suggest a correction

  63. 1-gov-usenest.pages.dev US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMask
    DetailsHide
    Hostname
    1-gov-usenest.pages.dev
    First seen
    2026-11-11 19:47 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-11 18:06 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-11-11 18:44 UTC to 2027-02-09 18:44 UTC
    Logged 2026-11-11 19:42 UTC in IPng Networks Gouda2027h1, entry 386,620,639
    SHA-256 1410946c6165f6db0468daceafbb0797d68c4a0eb41cbd574f305a450f3ad20a
    Public key SHA-256 1398ec1a0a0ce1d6c5a863edbec8c0b2dc17dc2e53d0da04839de812783d0e99
    Addresses
    172.66.44.96 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.66.47.160 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (172.66.44.96, 172.66.47.160): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.

    Suggest a correction

  64. checker-hylo.network US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 59 d ago
    DetailsHide
    Hostname
    checker-hylo.network
    First seen
    2026-11-11 19:47 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-11 18:06 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-11 18:47 UTC to 2027-02-09 18:47 UTC
    Logged 2026-11-11 19:45 UTC in Google PlumbersArms2027h1, entry 742,062,522
    SHA-256 8611dac9a0948dfff7f1ce90227a3f746a1e68d36127b0326baed1243bd257d0
    Public key SHA-256 39585fe27bc994eab1d55810d9d068d7fee9255278be328bb7faa55286fbd61c
    Addresses
    104.21.82.155 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.158.240 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.82.155, 172.67.158.240): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    checker-hylo.network
    Registered
    2026-09-13 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-11 20:32 UTC

    Suggest a correction

  65. claimyourevrrewardsntwk.icu US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 12 mo ago
    DetailsHide
    Hostname
    claimyourevrrewardsntwk.icu
    First seen
    2026-11-11 19:47 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-11 18:05 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-11 18:41 UTC to 2027-02-09 19:38 UTC
    Logged 2026-11-11 19:41 UTC in Let's Encrypt Sycamore2027h1, entry 1,150,759,553
    SHA-256 1c79d4b23c93ff7d708184ff969c5dab3459ccae901f2ea704fa7349d3d1035c
    Public key SHA-256 926841be6e3736d957f5d2a563046e7228bbbd86dc8a1ca035f8e153bff1ef41
    PhishDestroy
    Addresses
    104.21.3.45 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.130.59 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.3.45, 172.67.130.59): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    claimyourevrrewardsntwk.icu
    Registered
    2025-11-21 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-11 20:32 UTC

    Suggest a correction

  66. fgddfef.top US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by NPA 165 (e-commerce)MX absentSPF missingDMARC missingRegistered 9 mo ago
    DetailsHide
    Hostname
    fgddfef.top
    First seen
    2026-11-11 19:47 UTC
    Listing
    NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-11 13:38 UTC
    Listed
    NPA 165
    1. Observed in the NPA 165 feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-11 18:44 UTC to 2027-02-09 19:41 UTC
    Logged 2026-11-11 19:44 UTC in DigiCert Sphinx2027h1, entry 445,588,729
    SHA-256 e4caceca67fc5b69a9ea9032e555106fbb2fb84a35ebf37c2cd884487119f243
    Public key SHA-256 755195dd088315c82b62237d7dfb65eff6be93c6851dba2b9551b379ca7cffd2
    Addresses
    104.21.21.79 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.197.11 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.21.79, 172.67.197.11): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    fgddfef.top
    Registered
    2026-02-26 · 阿里云计算有限公司
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-11 20:32 UTC

    Suggest a correction

  67. grant-nanoeth.net US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 9 mo ago
    DetailsHide
    Hostname
    grant-nanoeth.net
    First seen
    2026-11-11 19:47 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-11 18:06 UTC
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-11 18:05 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by Cloudflare TLS Issuing ECC CA 4 · precertificate
    Valid 2026-11-11 19:32 UTC to 2027-02-09 19:41 UTC
    Logged 2026-11-11 19:42 UTC in DigiCert Wyvern2027h1, entry 502,081,130
    SHA-256 03d782e590b090ec3d57c75fb9f6769ac100cdac5a1b2b150d5f7d4e02d2cd3e
    Public key SHA-256 7c25496069daf21e987391e6ddbda9c2f71cbb08c7246c102c39cb2d34f014a8
    Addresses
    104.21.32.106 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.185.143 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.32.106, 172.67.185.143): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    grant-nanoeth.net
    Registered
    2026-02-26 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-11 20:32 UTC

    Suggest a correction

  68. helps-desktop-ledgrer.pages.dev US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMask
    DetailsHide
    Hostname
    helps-desktop-ledgrer.pages.dev
    First seen
    2026-11-11 19:47 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-11 18:06 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-11 18:45 UTC to 2027-02-09 19:44 UTC
    Logged 2026-11-11 19:45 UTC in Let's Encrypt Willow2027h1, entry 1,105,011,675
    SHA-256 6e5d6ce44e323f43d185a9831207fb19269d208ff9dda8ca91f4adff2fa10408
    Public key SHA-256 54962700d66cd2bea8223a83c4c7d237a9e95cc9af6b62a104794149bba88f10
    Addresses
    172.66.44.148 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.66.47.108 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (172.66.44.148, 172.66.47.108): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.

    Suggest a correction

  69. nubena.shop US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by NPA 165 (e-commerce)MX absentSPF missingDMARC missingRegistered 10 mo ago
    DetailsHide
    Hostname
    nubena.shop
    First seen
    2026-11-11 19:47 UTC
    Listing
    NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-11 13:38 UTC
    Listed
    NPA 165
    1. Observed in the NPA 165 feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1
    Valid 2026-09-13 14:26 UTC to 2026-12-12 15:26 UTC
    Logged 2026-11-11 19:45 UTC in DigiCert Wyvern2026h2, entry 2,219,273,908
    SHA-256 0ddea77f68cb249210a3a958ce96bc82b6a0a1fb0065833cacca12f6bb16d41c
    Public key SHA-256 258b3e713c20801a7fc1cf2f949472096cd516e6279ec042aed818b7e5b30b19
    Addresses
    104.21.22.9 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.201.177 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.22.9, 172.67.201.177): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    nubena.shop
    Registered
    2026-01-19 · GoDaddy.com LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-11 20:32 UTC

    Suggest a correction

  70. nvudaiea.click US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by NPA 165 (finance and insurance)MX absentSPF missingDMARC missingRegistered 10 mo ago
    DetailsHide
    Hostname
    nvudaiea.click
    First seen
    2026-11-11 19:47 UTC
    Listing
    NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-11 13:38 UTC
    Listed
    NPA 165
    1. Observed in the NPA 165 feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1
    Valid 2026-09-13 18:06 UTC to 2026-12-12 19:04 UTC
    Logged 2026-11-11 19:44 UTC in DigiCert Wyvern2026h2, entry 2,219,272,709
    SHA-256 4c25b16621600c1746b50435886f3aff42e230638c2b45f4d217348742bf3dd9
    Public key SHA-256 e59b7300100c94ff04f33760f146d180851a0a51ac69be3c4984e9a841b83041
    Addresses
    104.21.35.216 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.179.231 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.35.216, 172.67.179.231): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    nvudaiea.click
    Registered
    2026-01-19 · NameSilo, LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-11 20:32 UTC

    Suggest a correction

  71. pico-lucrenca-ai.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    pico-lucrenca-ai.com
    First seen
    2026-11-11 19:47 UTC
    Listing
    CERT Polska listed it 2026-07-17 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-11 18:48 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-11 18:45 UTC to 2027-02-09 19:44 UTC
    Logged 2026-11-11 19:45 UTC in IPng Networks Halloumi2027h1, entry 459,825,378
    SHA-256 7ac8eb17f89881bcb399c6a4614b902a833cadaa1fbe72c629b86bfc92b3520b
    Public key SHA-256 915124ab0e33f9bbe9bff89f791924dbabeb3d6f2f4724f1bf5ae40ad53d0d90
    Addresses
    104.21.8.73 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.156.235 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.8.73, 172.67.156.235): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    pico-lucrenca-ai.com
    Registered
    2026-07-16 · Eranet International Limited
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-11 20:32 UTC

    Suggest a correction

  72. sarservizi.it US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX presentSPF ~allDMARC policy none
    DetailsHide
    Hostname
    sarservizi.it
    First seen
    2026-11-11 19:47 UTC
    First published
    2026-11-05 15:33 UTC
    Listing
    CERT Polska listed it 2026-05-20 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-11 18:48 UTC
    PhishDestroy: first observed in the feed 2026-11-10 · still listed at the last successful feed check 2026-11-11 18:05 UTC
    DNS
    Resolves · checked 2026-11-11 15:48 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-11 18:44 UTC to 2027-02-09 19:43 UTC
    Logged 2026-11-11 19:44 UTC in IPng Networks Halloumi2027h1, entry 459,817,640
    SHA-256 8fe9bdc9abb76f54974d87bc1650981342737e45c88bd8e1d9b13030d9b3cd5f
    Public key SHA-256 0d21f187cbd5cc88b24aafe04320671d112504d3f8ebda5aaef39ea0e21f63ad
    PhishDestroy
    Addresses
    104.21.8.55 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.156.224 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.8.55, 172.67.156.224): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    sarservizi.it
    MX
    Receives mail at _dc-mx.3b745bb593d7.sarservizi.it
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    DMARC policy p=none: reports only
    Checked
    2026-11-11 15:00 UTC

    Suggest a correction

  73. scan-across.xyz US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 7 mo ago
    DetailsHide
    Hostname
    scan-across.xyz
    First seen
    2026-11-11 19:47 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-11 18:06 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-11 18:42 UTC to 2027-02-09 19:41 UTC
    Logged 2026-11-11 19:42 UTC in Google ParcelYard2027h1, entry 741,812,676
    SHA-256 d7c1734fc8e2163fb584e981e58e2bc7407741622d16dae686f62c5f604d386f
    Public key SHA-256 f633fee1d4186eaab2c573132225752159debd3c9619858b846824c9b2ea17b4
    Addresses
    104.21.85.145 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.206.171 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.85.145, 172.67.206.171): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    scan-across.xyz
    Registered
    2026-04-29 · Dynadot Inc
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-11 20:32 UTC

    Suggest a correction

  74. viptak.click US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 7 mo ago
    DetailsHide
    Hostname
    viptak.click
    First seen
    2026-11-11 19:47 UTC
    Listing
    CERT Polska listed it 2026-07-24 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-11 18:48 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-11 18:43 UTC to 2027-02-09 19:42 UTC
    Logged 2026-11-11 19:43 UTC in DigiCert Wyvern2027h1, entry 502,089,166
    SHA-256 7c659fead6d311faf7277a4f2ab613b5a80f0f46d3928d01165e0780b515e73e
    Public key SHA-256 be2d133158020a935505f19b90a3b963020fd6383e83a1b3f0588592d5c881e6
    Addresses
    104.21.42.178 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.164.40 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.42.178, 172.67.164.40): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    viptak.click
    Registered
    2026-04-16 · NAMECHEAP
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-11 20:32 UTC

    Suggest a correction

  75. www.komputernia.eu US · AS13335 · Cloudflare, Inc.
    ListedCloudflareUnder komputernia.eu, listed by CERT PolskaMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    www.komputernia.eu
    First seen
    2026-11-11 19:47 UTC
    Listing
    CERT Polska listed it 2026-11-02 · still listed at the last successful feed check 2026-11-11 18:48 UTC
    Listed
    CERT Polska, listing komputernia.eu and the names under it
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-11-11 18:45 UTC to 2027-02-09 18:45 UTC
    Logged 2026-11-11 19:44 UTC in DigiCert Sphinx2027h1, entry 445,589,334
    SHA-256 48c67075f7d758cc781a4cc3c519032ec383942dc84b995df597a0dce993efc7
    Public key SHA-256 945279cb25131b0d3ca6f89e650ca21675787e52dab11fbe3c5532c98e634965
    Addresses
    23.227.38.74 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (23.227.38.74): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    komputernia.eu
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-11 07:23 UTC

    Suggest a correction

  76. www.modplug.org US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareUnder modplug.org, reported by PhishDestroyMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    www.modplug.org
    First seen
    2026-11-11 19:47 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-11 18:05 UTC
    Reported
    PhishDestroy, listing modplug.org and the names under it
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR2 · precertificate
    Valid 2026-11-11 18:43 UTC to 2027-02-09 18:43 UTC
    Logged 2026-11-11 19:42 UTC in DigiCert Sphinx2027h1, entry 445,567,242
    SHA-256 301c57c19130bdf15e76535b4c6b0e5a5ce83becb958c33ab3f763be03b5ab35
    Public key SHA-256 1fb9afc1ba1f4396a07983e8dcaec694e0cdb447451a98f0c96f2ec3dab317d6
    PhishDestroy
    Addresses
    104.21.92.89 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.190.221 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.92.89, 172.67.190.221): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    modplug.org
    Registered
    2026-05-12 · NameSilo, LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-10 20:36 UTC

    Suggest a correction

  77. albafundorix-app.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    albafundorix-app.com
    First seen
    2026-11-11 19:41 UTC
    Listing
    CERT Polska listed it 2026-07-18 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-11 18:48 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-11 18:38 UTC to 2027-02-09 19:35 UTC
    Logged 2026-11-11 19:38 UTC in Geomys Tuscolo2027h1, entry 579,879,901
    SHA-256 09161187594c101b7acc23cab377d9a1a2c220628bc8b86ed5012a039020c1ce
    Public key SHA-256 41a2ba02b29cbf2ab4a5fd6c69d2901b1187f5f9392f590487a3f5d5f9d226c4
    Addresses
    104.21.48.112 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.150.180 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.48.112, 172.67.150.180): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    albafundorix-app.com
    Registered
    2026-07-16 · Eranet International Limited
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-11 20:32 UTC

    Suggest a correction

  78. digital-trust-wallet.com US · AS13335 · Cloudflare, Inc.4 addressesTrust Wallet
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 9 mo ago
    DetailsHide
    Hostname
    digital-trust-wallet.com
    First seen
    2026-11-11 19:41 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-11 18:06 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-11 18:36 UTC to 2027-02-09 19:33 UTC
    Logged 2026-11-11 19:36 UTC in DigiCert Wyvern2027h1, entry 502,019,559
    SHA-256 c098598abe39004ec629a7cf4077bbac88076049cdb02021fd087e3e76b8c3eb
    Public key SHA-256 7bfcc6e8665beeb219a35bd590d365cd4b495d621a30f11355a0f9014b7c4d6c
    Brand
    Trust Wallet
    Addresses
    104.21.28.230 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.147.196 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3032::6815:1ce6
    2606:4700:3037::ac43:93c4
    Cloudflare
    Cloudflare (104.21.28.230, 172.67.147.196): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    digital-trust-wallet.com
    Registered
    2026-02-24 · Cloudflare, Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-11 19:57 UTC

    Suggest a correction

  79. gov-usenest.pages.dev US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMask
    DetailsHide
    Hostname
    gov-usenest.pages.dev
    First seen
    2026-11-11 19:41 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-11 18:06 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-11-11 18:40 UTC to 2027-02-09 18:40 UTC
    Logged 2026-11-11 19:39 UTC in Google PlumbersArms2027h1, entry 741,974,702
    SHA-256 03a9afa360a087580ae6d6857d62e54f276e7a4b3f468ce6d0463b7516fe6ae0
    Public key SHA-256 ced0595b706c370b69038a60f32b667b5b9eb080c4fdf25bf4075271a597ac31
    Addresses
    172.66.44.158 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.66.47.98 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (172.66.44.158, 172.66.47.98): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.

    Suggest a correction

  80. idjiq.icu US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by NPA 165 (e-commerce)MX absentSPF missingDMARC missingRegistered 7 mo ago
    DetailsHide
    Hostname
    idjiq.icu
    First seen
    2026-11-11 19:41 UTC
    Listing
    NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-11 13:38 UTC
    Listed
    NPA 165
    1. Observed in the NPA 165 feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by Cloudflare TLS Issuing ECC CA 4 · precertificate
    Valid 2026-11-11 19:26 UTC to 2027-02-09 19:35 UTC
    Logged 2026-11-11 19:36 UTC in Let's Encrypt Sycamore2027h1, entry 1,150,694,356
    SHA-256 cc5fed61dd49cf6ba3fa191005814cd04dcb743dc5785663b40a7789c70f6224
    Public key SHA-256 05d1007a73409c062e859a3e821c975947907503cad3c304791b40a36908866b
    Addresses
    104.21.2.137 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.129.70 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.2.137, 172.67.129.70): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    idjiq.icu
    Registered
    2026-04-23 · Alibaba Cloud Computing Ltd. d/b/a HiChina (www.net.cn)
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-11 20:32 UTC

    Suggest a correction

  81. kuangcheng0a1.site US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by NPA 165 (e-commerce)MX absentSPF missingDMARC missingRegistered 8 mo ago
    DetailsHide
    Hostname
    kuangcheng0a1.site
    First seen
    2026-11-11 19:41 UTC
    Listing
    NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-11 13:38 UTC
    Listed
    NPA 165
    1. Observed in the NPA 165 feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-11-11 18:38 UTC to 2027-02-09 18:38 UTC
    Logged 2026-11-11 19:37 UTC in Google PlumbersArms2027h1, entry 741,944,445
    SHA-256 425fa0ed34fa9c3949b7f91f75730c1c5b4e2b7967f99c60db01648615f52cee
    Public key SHA-256 f39c3d0d7d9cf64bdfeffc34b04a695d51d0140f35c2b35c790c5d98980b69a4
    Addresses
    104.21.49.149 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.164.108 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.49.149, 172.67.164.108): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    kuangcheng0a1.site
    Registered
    2026-03-17 · GoDaddy.com, LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-11 20:32 UTC

    Suggest a correction

  82. webinar-children.ostkap.school US · AS209242 · CLOUDFLARESPECTRUM Cloudfla…
    ReportedCloudflareUnder ostkap.school, reported by PhishDestroyMX presentSPF missingDMARC missingRegistered 3 y ago
    DetailsHide
    Hostname
    webinar-children.ostkap.school
    First seen
    2026-11-11 19:41 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-11 18:05 UTC
    Reported
    PhishDestroy, listing ostkap.school and the names under it
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-11 18:37 UTC to 2027-02-09 19:37 UTC
    Logged 2026-11-11 19:37 UTC in Google ParcelYard2027h1, entry 741,736,331
    SHA-256 0f1f82cfe7e8b90827253c8a5744e68f331c7c211c3bf5d0b73e2b6e089de7b4
    Public key SHA-256 142da2d26e5d039850737b23500566f36835976031ab0346dd04d8d7be771d02
    PhishDestroy
    Addresses
    198.202.211.1 · United States · AS209242 CLOUDFLARESPECTRUM Cloudflare London, LLC · Cloudflare (cdn)
    Cloudflare
    Cloudflare (198.202.211.1): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    ostkap.school
    Registered
    2023-08-27 · Hosting Ukraine LLC
    MX
    Receives mail at smtp.google.com
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-11 13:39 UTC

    Suggest a correction

  83. www.pumpfunairdrop.com US · AS13335 · Cloudflare, Inc.pump.fun
    ReportedCloudflareUnder pumpfunairdrop.com, reported by PhishDestroyMX absentSPF missingDMARC missingRegistered 59 d ago
    DetailsHide
    Hostname
    www.pumpfunairdrop.com
    First seen
    2026-11-11 19:41 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-11 18:05 UTC
    Reported
    PhishDestroy, listing pumpfunairdrop.com and the names under it
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WR1 · precertificate
    Valid 2026-11-11 18:37 UTC to 2027-02-09 19:36 UTC
    Logged 2026-11-11 19:37 UTC in Geomys Tuscolo2027h1, entry 579,875,909
    SHA-256 231f9dc4a2c0843c6c07fd1a7c6a4bbc85be8e4c38be31fb7089ea20acb25f01
    Public key SHA-256 a169a775f853a557f133d55757fd3c436a4f3ca5d0f65c0364436250b6a88c6e
    PhishDestroy
    Brand
    pump.fun
    Addresses
    185.158.133.1 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (185.158.133.1): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    pumpfunairdrop.com
    Registered
    2026-09-13 · Name.com, Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-11 20:32 UTC

    Suggest a correction

  84. xn--monsho-ukb.com US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 9 mo ago
    DetailsHide
    Hostname
    xn--monsho-ukb.com
    First seen
    2026-11-11 19:41 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-11 18:05 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by Cloudflare TLS Issuing ECC CA 4 · precertificate
    Valid 2026-11-11 19:29 UTC to 2027-02-09 19:37 UTC
    Logged 2026-11-11 19:39 UTC in DigiCert Wyvern2027h1, entry 502,037,047
    SHA-256 140b153ee2ecec5c296afb463be747c73619e51081f6c01d2e71ce7f31a4be77
    Public key SHA-256 a9c61dee3cd40be925734a584146ee6333cae8ed7f7beb401c21e5b697388ba9
    PhishDestroy
    Addresses
    104.21.87.243 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.171.132 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.87.243, 172.67.171.132): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    xn--monsho-ukb.com
    Registered
    2026-02-13 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-11 20:32 UTC

    Suggest a correction

  85. bizgowu.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by NPA 165 (information services)MX absentSPF missingDMARC missingRegistered 10 mo ago
    DetailsHide
    Hostname
    bizgowu.com
    First seen
    2026-11-11 19:36 UTC
    Listing
    NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-11 13:38 UTC
    Listed
    NPA 165
    1. Observed in the NPA 165 feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-11 18:35 UTC to 2027-02-09 19:33 UTC
    Logged 2026-11-11 19:35 UTC in IPng Networks Halloumi2027h1, entry 459,716,690
    SHA-256 811d9f47c5013f51d79e80735ec9ca9d93c29d51ab866d4822d96c9a002065b7
    Public key SHA-256 89ce0395ecc63a1acc1f1b3bd8f2de055055cf2022b21e7ecd251192cdbd8317
    Addresses
    104.21.14.199 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.160.79 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.14.199, 172.67.160.79): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    bizgowu.com
    Registered
    2026-01-20 · NameSilo, LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-11 20:32 UTC

    Suggest a correction

  86. cherinailsspa.live US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    cherinailsspa.live
    First seen
    2026-11-11 19:36 UTC
    Listing
    CERT Polska listed it 2026-08-18 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-11 18:48 UTC
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-11 18:05 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-11 18:32 UTC to 2027-02-09 19:31 UTC
    Logged 2026-11-11 19:32 UTC in DigiCert Wyvern2027h1, entry 501,970,927
    SHA-256 b2b83269e69331add382c64549bb1fa9a18cc8a122c7d651e5625b964c44201a
    Public key SHA-256 1d641856757a1db2323544600a80622ca00ea99a8098871d37d52a98b9c70051
    Addresses
    104.21.58.161 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.205.104 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.58.161, 172.67.205.104): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    cherinailsspa.live
    Registered
    2026-07-16 · Dynadot Inc
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-11 20:32 UTC

    Suggest a correction

  87. freshrise.top US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 10 mo ago
    DetailsHide
    Hostname
    freshrise.top
    First seen
    2026-11-11 19:36 UTC
    Listing
    CERT Polska listed it 2026-05-21 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-11 18:48 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-11 18:34 UTC to 2027-02-09 19:33 UTC
    Logged 2026-11-11 19:34 UTC in Let's Encrypt Sycamore2027h1, entry 1,150,665,089
    SHA-256 2784da14aca511b19a2519727ffed88178011ea54b116c943d3f5b48191cf1c7
    Public key SHA-256 b53b3d0da49b5a5a9315b8525076b157ed91890e942ed78a54e2817c9974b500
    Addresses
    104.21.21.113 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.198.75 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.21.113, 172.67.198.75): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    freshrise.top
    Registered
    2026-01-16 · Dynadot LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-11 20:32 UTC

    Suggest a correction

  88. io-z-eu.cc US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 2 mo ago
    DetailsHide
    Hostname
    io-z-eu.cc
    First seen
    2026-11-11 19:36 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-11 18:06 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-11-11 18:36 UTC to 2027-02-09 18:36 UTC
    Logged 2026-11-11 19:35 UTC in Google ParcelYard2027h1, entry 741,706,664
    SHA-256 5e05405006abecfbdcc9769d5df291abbfef4e6dadefb14991ede79ff273bb6c
    Public key SHA-256 017fc2daf8eea2ba8cd5cb50c8f3af4b0bc2db7c9534c2295351d014c3986b76
    Addresses
    104.21.49.221 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.152.251 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.49.221, 172.67.152.251): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    io-z-eu.cc
    Registered
    2026-09-12 · Gname.com Pte. Ltd.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-11 20:32 UTC

    Suggest a correction

  89. loveshop5.com US · AS209242 · CLOUDFLARESPECTRUM Cloudfla…
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 3 y ago
    DetailsHide
    Hostname
    loveshop5.com
    First seen
    2026-11-11 19:36 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-11 18:05 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WR1 · precertificate
    Valid 2026-11-11 18:34 UTC to 2027-02-09 19:33 UTC
    Logged 2026-11-11 19:34 UTC in Google PlumbersArms2027h1, entry 741,913,059
    SHA-256 044dd1af0135b76b066632d79f581172a3889a731acc6e8ac2db29bdd1575812
    Public key SHA-256 25322dfe34829e4ab63f0b6b107e9d3eea77f5fd051e0c38672acdd1ee1965e8
    PhishDestroy
    Addresses
    5.175.141.236 · United States · AS209242 CLOUDFLARESPECTRUM Cloudflare London, LLC · Cloudflare (cdn)
    Cloudflare
    Cloudflare (5.175.141.236): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    loveshop5.com
    Registered
    2023-11-10 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-11 20:32 UTC

    Suggest a correction

  90. paradex.us US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 8 mo ago
    DetailsHide
    Hostname
    paradex.us
    First seen
    2026-11-11 19:36 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-11 18:05 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-11-11 18:37 UTC to 2027-02-09 18:37 UTC
    Logged 2026-11-11 19:35 UTC in DigiCert Wyvern2027h1, entry 502,009,904
    SHA-256 74bf25aa0684e0da5b4454147a6508f1fb4b53da0b715c476915e4a2ffa65f3a
    Public key SHA-256 d2d72190a2f07cfd636073db56e729a965cf14115608e997950a3e954dc7f0a4
    PhishDestroy
    Addresses
    104.21.36.128 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.194.94 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.36.128, 172.67.194.94): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    paradex.us
    Registered
    2026-03-20 · PDR Ltd. d/b/a PublicDomainRegistry.com
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-11 19:41 UTC

    Suggest a correction

  91. special-on-pl.site US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    special-on-pl.site
    First seen
    2026-11-11 19:36 UTC
    Listing
    CERT Polska listed it 2026-05-18 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-11 18:48 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-11 18:33 UTC to 2027-02-09 18:33 UTC
    Logged 2026-11-11 19:32 UTC in Google ParcelYard2027h1, entry 741,665,221
    SHA-256 7773ccdcc79ea3c68f1653fcfc248178b44f89a2158480dace6dfb81d623dca1
    Public key SHA-256 d6d48f2b0fbad05f3f9a14111eb2c43aec47f4a0884d227829ad17a9865a42e1
    Addresses
    104.21.42.85 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.203.101 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.42.85, 172.67.203.101): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    special-on-pl.site
    Registered
    2026-05-18 · NameCheap, Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-11 20:32 UTC

    Suggest a correction

  92. vaulto-bank.com US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX presentSPF ~allDMARC policy noneRegistered 7 mo ago
    DetailsHide
    Hostname
    vaulto-bank.com
    First seen
    2026-11-11 19:36 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-11 18:05 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-11 18:34 UTC to 2027-02-09 19:32 UTC
    Logged 2026-11-11 19:34 UTC in Google ParcelYard2027h1, entry 741,692,426
    SHA-256 af0228d72ed600002fe2dc6902d3a03c4c3833e5bca80f1bbe908b626aa49637
    Public key SHA-256 0e14c1ca838f56950ec8622a9163756f869994ea6a599ed93a6e6a97711ec52d
    PhishDestroy
    Addresses
    104.21.6.217 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.135.79 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.6.217, 172.67.135.79): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    vaulto-bank.com
    Registered
    2026-04-12 · Atak Domain Bilgi Teknolojileri A.S.
    MX
    Receives mail at hernmann.uberspace.de
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    DMARC policy p=none: reports only
    Checked
    2026-11-11 20:32 UTC

    Suggest a correction

  93. yurodex.com US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    yurodex.com
    First seen
    2026-11-11 19:36 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-11 18:05 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-11 18:35 UTC to 2027-02-09 19:34 UTC
    Logged 2026-11-11 19:35 UTC in Google PlumbersArms2027h1, entry 741,921,629
    SHA-256 1d154358cde76446fae9231f582a51061b90d587e2aa7b9ab04f93522411bc22
    Public key SHA-256 6fc7d39c4dc2ab77e60b1900ec132e73cc8b0aee58f20c6486ca9441c067da09
    PhishDestroy
    Addresses
    104.21.81.39 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.188.42 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.81.39, 172.67.188.42): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    yurodex.com
    Registered
    2026-07-16 · Atak Domain Bilgi Teknolojileri A.S.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-11 20:32 UTC

    Suggest a correction

  94. zynft.xyz US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX presentSPF -allDMARC missingRegistered 19 mo ago
    DetailsHide
    Hostname
    zynft.xyz
    First seen
    2026-11-11 19:36 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-11 18:05 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-11 18:33 UTC to 2027-02-09 19:32 UTC
    Logged 2026-11-11 19:33 UTC in DigiCert Wyvern2027h1, entry 501,985,565
    SHA-256 3bf1a2a094ce57fa92a5ac90f5a021a25eaa840879bcb634d0fb9bb39eb81834
    Public key SHA-256 432db3e1da60dfd9c52ff7f0034a3ffc53514aa4a80369f94c22ccf2e77f4ac1
    PhishDestroy
    Addresses
    104.21.19.31 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.184.236 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.19.31, 172.67.184.236): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    zynft.xyz
    Registered
    2025-04-22 · OVH sas
    MX
    Receives mail at mx1.mail.ovh.net, mx2.mail.ovh.net, mx3.mail.ovh.net
    SPF
    SPF record with -all: other senders fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-11 20:32 UTC

    Suggest a correction

  95. casgek.com US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    casgek.com
    First seen
    2026-11-11 19:31 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-11 18:05 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-11 18:25 UTC to 2027-02-09 19:24 UTC
    Logged 2026-11-11 19:25 UTC in DigiCert Wyvern2027h1, entry 501,897,521
    SHA-256 3948e0864df69f80979c86bfd48b140dead9d780d63882c9a58714d67c42ee48
    Public key SHA-256 0a35c6990d628d71192840fcdc3c868f651f2da1e099e7109b72c0ea424cec80
    PhishDestroy
    Addresses
    104.21.67.96 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.220.71 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.67.96, 172.67.220.71): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    casgek.com
    Registered
    2026-07-16 · Atak Domain Bilgi Teknolojileri A.S.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-11 20:32 UTC

    Suggest a correction

  96. dijitalbasvurukanallarim.sbs US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by USOMMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    dijitalbasvurukanallarim.sbs
    First seen
    2026-11-11 19:31 UTC
    Listing
    USOM listed it 2026-05-19 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-11 19:27 UTC
    Listed
    USOM
    1. Listed by USOM
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-11-11 18:29 UTC to 2027-02-09 18:29 UTC
    Logged 2026-11-11 19:27 UTC in DigiCert Sphinx2027h1, entry 445,424,601
    SHA-256 950be4c4e285c6e3878f0a287bc72a90ac1a499ae8f1d5318a8dd9d485188653
    Public key SHA-256 4bd082681fb1a95a19a97c40136a4f957dda0ce40a80ef4352c9d35aa420a6e6
    Addresses
    104.21.49.98 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.161.155 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.49.98, 172.67.161.155): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    dijitalbasvurukanallarim.sbs
    Registered
    2026-05-18 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-11 20:32 UTC

    Suggest a correction

  97. khaelyon-official.com US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 9 mo ago
    DetailsHide
    Hostname
    khaelyon-official.com
    First seen
    2026-11-11 19:31 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-11 18:05 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by Cloudflare TLS Issuing ECC CA 4 · precertificate
    Valid 2026-11-11 19:19 UTC to 2027-02-09 19:28 UTC
    Logged 2026-11-11 19:29 UTC in DigiCert Sphinx2027h1, entry 445,440,936
    SHA-256 0b4c46d553467cc7f4ee305e3892962ca82c7cdb5539c58985874095a9e8b2e0
    Public key SHA-256 0e251f6313704e8b3f8804fb070a9355ab7b2116e469b56a821a80e3bc6cd4f4
    PhishDestroy
    Addresses
    104.21.74.175 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.160.88 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.74.175, 172.67.160.88): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    khaelyon-official.com
    Registered
    2026-02-13 · Dynadot Inc
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-11 20:32 UTC

    Suggest a correction

  98. spolaven.digital US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    spolaven.digital
    First seen
    2026-11-11 19:31 UTC
    Listing
    CERT Polska listed it 2026-07-16 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-11 18:48 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-11 18:26 UTC to 2027-02-09 19:23 UTC
    Logged 2026-11-11 19:26 UTC in Google ParcelYard2027h1, entry 741,591,524
    SHA-256 8bf4be12f194a6c6f52cf9d08d7ddf11c7b9da4ac868a52604f003d424587e02
    Public key SHA-256 ba96c580d285869091c5cbb8cd2187fac08ef88754392301563b56237256b579
    Addresses
    104.21.58.73 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.157.123 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.58.73, 172.67.157.123): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    spolaven.digital
    Registered
    2026-07-16 · PDR Ltd. d/b/a PublicDomainRegistry.com
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-11 20:32 UTC

    Suggest a correction

  99. spolavenpros.digital US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    spolavenpros.digital
    First seen
    2026-11-11 19:31 UTC
    Listing
    CERT Polska listed it 2026-07-17 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-11 18:48 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-11 18:30 UTC to 2027-02-09 19:29 UTC
    Logged 2026-11-11 19:30 UTC in DigiCert Wyvern2027h1, entry 501,941,740
    SHA-256 4593673a86dd46f100188fc6b2c34754358f2035f0bf4daae0eedcfdf010f6a5
    Public key SHA-256 f07ca597fe783f679944fe9ed8581d8540b82579866856ba3bcb94f6262322cd
    Addresses
    104.21.35.116 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.219.138 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.35.116, 172.67.219.138): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    spolavenpros.digital
    Registered
    2026-07-16 · PDR Ltd. d/b/a PublicDomainRegistry.com
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-11 20:32 UTC

    Suggest a correction

  100. srupelghavo-uk.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    srupelghavo-uk.com
    First seen
    2026-11-11 19:31 UTC
    Listing
    CERT Polska listed it 2026-09-13 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-11 18:48 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-11 18:29 UTC to 2027-02-09 19:28 UTC
    Logged 2026-11-11 19:29 UTC in Google PlumbersArms2027h1, entry 741,840,062
    SHA-256 fa00f81fb724ef272295c74e8c4353bc9a4eea259f0b28be9952d1af6f7b5c92
    Public key SHA-256 9db19553383dbd99f597421eb36eda5c17b3fcdbab41636264c1ee07c7916f59
    Addresses
    104.21.59.68 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.217.153 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.59.68, 172.67.217.153): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    srupelghavo-uk.com
    Registered
    2026-07-16 · Dynadot Inc
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-11 20:32 UTC

    Suggest a correction

Showing 1–100 of 2,893 hostnames.
How these findings are made

Brand spoofs: findings that impersonate one of the 1,000 most-impersonated brands. The list opens on them; All shows every finding.

Reported: a hostname in a new certificate that PhishTank or PhishDestroy reports, or that CERT Polska, MetaMask, USOM, MODA, NPA 165, JPCERT/CC, the AMF, the FSMA or BaFin lists. When a listing source names the brand imitated or a category, the finding shows it. Phishing host: a brand lookalike that resolves to an address which hosted confirmed phishing in the last 48 hours. Spamhaus DROP: a brand lookalike that resolves to an address on the Spamhaus DROP list. Same certificate: another name on a finding's certificate that resolves to an address on Spamhaus DROP. Suspicious: other names on a finding's certificate, rated high for a hosting-alias name or a lookalike on a phishing host, medium for a lookalike; they join the findings once they have listing evidence of their own. Also under Suspicious: registered domains using a brand’s name that PhishDestroy’s community list includes, rated high when they resolve to an address with no parking or holding signal, medium otherwise.

Brand labels cover the 1,000 most-impersonated brands. A name gets a brand when the brand's token starts a label or follows a hyphen, with a lure word such as "login" or "verify" for common words. Hostnames appear as plain text. How it works · Sources