Live

Live phishing findings

New certificates and domain registrations, with every hostname resolved and checked against phishing reports and bad-address lists. The newest findings, updated hourly.

Updated hourly · 2026-11-12 01:08 UTC
Certificate-log entries · 24 h
331.6M
from 84 distinct feeds
Unique certificates · 24 h
34.4M
each reviewed
Names resolved · 24 h
21.9M
16.0M with an address
Findings · 24 h
6,727
249 of 1,061 brands targeted

5,692 hostnames from the last 24 hours.

  1. dwenzarvo-tech.com NL · AS62370 · Snel Snel.com B.V.
    ListedListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    dwenzarvo-tech.com
    First seen
    2026-11-12 00:44 UTC
    Listing
    CERT Polska listed it 2026-07-21 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 00:49 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by ZeroSSL ECC DV SSL CA 2
    Valid 2026-09-19 00:00 UTC to 2026-12-18 23:59 UTC
    Logged 2026-11-12 00:40 UTC in Geomys Tuscolo2026h2, entry 1,053,250,256
    SHA-256 75ab94992de360578ddced7d18d266c9ca1a14c67fee31361dbf2af1d30c16cc
    Public key SHA-256 a1e155dc124f086ec8b21ba6c228a2b9c19358f68080517c6fbeba63967de83b
    Addresses
    185.62.57.28 · Netherlands · AS62370 Snel Snel.com B.V.
    Domain
    dwenzarvo-tech.com
    Registered
    2026-07-16 · MainReg Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-12 01:14 UTC

    Suggest a correction

  2. ecrodfag.ekfuwbzg.chuyvrpn.ustabdwj.ewsjaitz.nirfhjym.uatmfwcq.gatewaylearning.ezgateway.net FR · AS16276 · OVH OVH SAS
    ListedOVHUnder ezgateway.net, listed by USOMMX absentSPF -allDMARC rejectRegistered 7 mo ago
    DetailsHide
    Hostname
    ecrodfag.ekfuwbzg.chuyvrpn.ustabdwj.ewsjaitz.nirfhjym.uatmfwcq.gatewaylearning.ezgateway.net
    First seen
    2026-11-12 00:44 UTC
    Listing
    USOM listed it 2026-08-21 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-11 23:58 UTC
    Listed
    USOM, listing ezgateway.net and the names under it
    1. Listed by USOM
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-11 23:42 UTC to 2027-02-09 23:42 UTC
    Logged 2026-11-12 00:40 UTC in Google ParcelYard2027h1, entry 745,971,368
    SHA-256 c22ba612f67ffae35e9407b610d35f4db90b6a996e671de4641d90b2d7943b9d
    Public key SHA-256 7f4b956febe2ecfc7901a5419fe152911000d3aa941265782193f123c25ecaca
    Addresses
    15.204.116.29 · France · AS16276 OVH OVH SAS · OVH (cloud provider)
    OVH
    OVH (15.204.116.29): a cloud provider. It rents servers and addresses to its customers.
    Domain
    ezgateway.net
    Registered
    2026-04-07 · Dynu Systems Incorporated
    MX
    Publishes no mail exchanger
    SPF
    SPF record with -all: other senders fail
    DMARC
    DMARC policy p=reject
    Checked
    2026-11-11 17:26 UTC

    Suggest a correction

  3. fbszanvl.avibmqxe.jdhueoba.rdgznsfc.tomjzfci.tczglrpw.gatewaylearning.ezgateway.net FR · AS16276 · OVH OVH SAS
    ListedOVHUnder ezgateway.net, listed by USOMMX absentSPF -allDMARC rejectRegistered 7 mo ago
    DetailsHide
    Hostname
    fbszanvl.avibmqxe.jdhueoba.rdgznsfc.tomjzfci.tczglrpw.gatewaylearning.ezgateway.net
    First seen
    2026-11-12 00:44 UTC
    Listing
    USOM listed it 2026-08-21 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-11 23:58 UTC
    Listed
    USOM, listing ezgateway.net and the names under it
    1. Listed by USOM
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-11 23:41 UTC to 2027-02-09 23:41 UTC
    Logged 2026-11-12 00:40 UTC in Google ParcelYard2027h1, entry 745,964,398
    SHA-256 8ee698a3c36614d74af40748a9120a145471d87fe7d4645522709f4da2ac707e
    Public key SHA-256 5c68807a52ebc34bd57ccee5361cd1645ab0da688b46d81809fc33e7488a53b3
    Addresses
    15.204.116.29 · France · AS16276 OVH OVH SAS · OVH (cloud provider)
    OVH
    OVH (15.204.116.29): a cloud provider. It rents servers and addresses to its customers.
    Domain
    ezgateway.net
    Registered
    2026-04-07 · Dynu Systems Incorporated
    MX
    Publishes no mail exchanger
    SPF
    SPF record with -all: other senders fail
    DMARC
    DMARC policy p=reject
    Checked
    2026-11-11 17:26 UTC

    Suggest a correction

  4. fixedsmartdappsresolver.pages.dev US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishTank
    DetailsHide
    Hostname
    fixedsmartdappsresolver.pages.dev
    First seen
    2026-11-12 00:44 UTC
    Listing
    PhishTank: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-12 00:02 UTC
    Reported
    PhishTank
    1. Observed in the PhishTank feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-11 23:41 UTC to 2027-02-10 00:38 UTC
    Logged 2026-11-12 00:41 UTC in Let's Encrypt Willow2027h1, entry 1,108,939,990
    SHA-256 19dbfe4e328b3cce696856f8960a70bb529882d1ae303b1377b594fda7c142f5
    Public key SHA-256 093dc1ed1f34f48d0148cdf2cbddb3a3f0ed1539593b2e74ed26427cae0444da
    PhishTank
    PhishTank report #9375588
    Addresses
    172.66.45.13 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.66.46.243 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (172.66.45.13, 172.66.46.243): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.

    Suggest a correction

  5. gbsell.com IS · AS50613 · ThorDC-AS Advania Island ehf
    ReportedReported by PhishDestroyMX presentSPF missingDMARC missingRegistered 2 mo ago
    DetailsHide
    Hostname
    gbsell.com
    First seen
    2026-11-12 00:44 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-30 · still listed at the last successful feed check 2026-11-12 00:05 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR2 · precertificate
    Valid 2026-11-11 23:41 UTC to 2027-02-09 23:41 UTC
    Logged 2026-11-12 00:40 UTC in Let's Encrypt Willow2027h1, entry 1,108,927,592
    SHA-256 1a1eee9f9a3d5093d855180be2acff74137e79bf9253fe8ca7c9ec34cb3a9136
    Public key SHA-256 b1c1cc74080598ef33280e20a9e9108cda2ce2d41756375939a99f256df46b92
    PhishDestroy
    Addresses
    82.221.139.204 · Iceland · AS50613 ThorDC-AS Advania Island ehf
    Domain
    gbsell.com
    Registered
    2026-09-12 · Internet Domain Service BS Corp
    MX
    Receives mail at gbsell.com
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-12 01:14 UTC

    Suggest a correction

  6. incolendwej.com
    ListedListed by NPA 165 (finance and insurance)MX presentSPF ~allDMARC missingRegistered 11 mo ago
    DetailsHide
    Hostname
    incolendwej.com
    First seen
    2026-11-12 00:44 UTC
    Listing
    NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-11 13:38 UTC
    Listed
    NPA 165
    1. Observed in the NPA 165 feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-11-11 23:42 UTC to 2027-02-09 23:42 UTC
    Logged 2026-11-12 00:41 UTC in IPng Networks Halloumi2027h1, entry 462,774,713
    SHA-256 23c7ba63bbb833443b59670b005ff53da5c74eac46b66aa13f87a470d1f3dcd2
    Public key SHA-256 8878fe4701cdd98212fd2305f55802fec1392e20557ec8d37f88c93956bc1391
    Domain
    incolendwej.com
    Registered
    2025-12-19 · NameCheap, Inc.
    MX
    Receives mail at eforward1.registrar-servers.com, eforward2.registrar-servers.com, eforward3.registrar-servers.com
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-12 01:14 UTC

    Suggest a correction

  7. kra4.vip US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 11 mo ago
    DetailsHide
    Hostname
    kra4.vip
    First seen
    2026-11-12 00:44 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-12 00:05 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-11 23:41 UTC to 2027-02-10 00:40 UTC
    Logged 2026-11-12 00:41 UTC in Google PlumbersArms2027h1, entry 746,191,225
    SHA-256 609153f2b13b9628555051cf3df6788adb04aecde978a04be67faa386dae25ea
    Public key SHA-256 a3f140dc8632b3bcaf09a3640a5972806cd76e2d3046eb6355f7837163192ea0
    PhishDestroy
    Addresses
    104.21.66.102 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.159.7 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.66.102, 172.67.159.7): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    kra4.vip
    Registered
    2025-12-04 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-12 01:14 UTC

    Suggest a correction

  8. neuvemarkvere-solution.com NL · AS62370 · Snel Snel.com B.V.
    ListedListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    neuvemarkvere-solution.com
    First seen
    2026-11-12 00:44 UTC
    Listing
    CERT Polska listed it 2026-07-20 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 00:49 UTC
    PhishDestroy: first observed in the feed 2026-11-02 · still listed at the last successful feed check 2026-11-12 00:05 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-11 23:39 UTC to 2027-02-10 00:38 UTC
    Logged 2026-11-12 00:39 UTC in Geomys Tuscolo2027h1, entry 583,011,963
    SHA-256 62b83fdbea4059cfc31184621bff46cb330ce94e01e8db4828adf5129ae3a4a2
    Public key SHA-256 ff28fbd062fbc1d8037ea5d18e0b659b0cb342521f93b9ecc05aaa3ebc8f9802
    Addresses
    185.62.57.28 · Netherlands · AS62370 Snel Snel.com B.V.
    Domain
    neuvemarkvere-solution.com
    Registered
    2026-07-16 · MainReg Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-12 01:14 UTC

    Suggest a correction

  9. poker-match.org.ua US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 3 y ago
    DetailsHide
    Hostname
    poker-match.org.ua
    First seen
    2026-11-12 00:44 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-12 00:05 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-11-11 23:42 UTC to 2027-02-09 23:42 UTC
    Logged 2026-11-12 00:41 UTC in Let's Encrypt Sycamore2027h1, entry 1,154,884,054
    SHA-256 575ba32e99158dbaea399a2c3737d9a96f0dcd6b2cf3ce6868f2d2c0156364ef
    Public key SHA-256 42885558c91967eb7f4df3be3ec3688c53c22497646aea8547eb7d2bc6d0e395
    PhishDestroy
    Addresses
    104.21.15.243 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.209.48 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.15.243, 172.67.209.48): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    poker-match.org.ua
    Registered
    2023-09-13 · NIC.UA LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-12 01:14 UTC

    Suggest a correction

  10. slotlions88.store AU · AS133618 · Trellian Pty. Limited
    ReportedParking page · Above.comReported by PhishDestroyMX presentSPF -allDMARC missingRegistered 19 mo ago
    DetailsHide
    Hostname
    slotlions88.store
    First seen
    2026-11-12 00:44 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-12 00:05 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-11-11 23:41 UTC to 2027-02-09 23:41 UTC
    Logged 2026-11-12 00:40 UTC in Geomys Tuscolo2027h1, entry 583,019,841
    SHA-256 85ccebc5714c5541798a0b0d781b7805f454218b19cb210d925cfd1f1f5f2b79
    Public key SHA-256 a17715bde6580ef0ed50f6bed49c925e8c41a82ac34af7887d52443c3cc4e06b
    PhishDestroy
    Addresses
    103.224.182.242 · Australia · AS133618 TRELLIAN-AS-AP - Trellian Pty. Limited · Trellian / Above.com (parking page)
    Parking page · Above.com
    The registry delegates slotlions88.store to Above.com’s nameservers, which answer for it. Above.com: a parking service. It answers for names that are typically for sale or unused. Trellian / Above.com (103.224.182.242): a parking service. It answers for names that are typically for sale or unused.
    Domain
    slotlions88.store
    Registered
    2025-04-13 · Above.com Pty Ltd.
    MX
    Receives mail at park-mx.above.com
    SPF
    SPF record with -all: other senders fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-12 01:14 UTC

    Suggest a correction

  11. sso-en-web3-exodua.pages.dev US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMask
    DetailsHide
    Hostname
    sso-en-web3-exodua.pages.dev
    First seen
    2026-11-12 00:44 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 00:07 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-11 23:41 UTC to 2027-02-09 23:41 UTC
    Logged 2026-11-12 00:40 UTC in Google PlumbersArms2027h1, entry 746,170,017
    SHA-256 4235012638bd6e2630e483ba6465b32a9eee0a5697aeb423554e38ffa7c611a1
    Public key SHA-256 3d8412ac5b1d636902d19b3b09839c64ab35f1318f990ad5664c4a8b782482a2
    Addresses
    172.66.44.93 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.66.47.163 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (172.66.44.93, 172.66.47.163): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.

    Suggest a correction

  12. test-z10.site US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 12 mo ago
    DetailsHide
    Hostname
    test-z10.site
    First seen
    2026-11-12 00:44 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-12 00:05 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-11 23:41 UTC to 2027-02-10 00:40 UTC
    Logged 2026-11-12 00:42 UTC in Geomys Tuscolo2027h1, entry 583,045,852
    SHA-256 9bfafa439882c46c34516ccf2e1b55a0e8fdfceb679f7b33023bf3ded66514fd
    Public key SHA-256 94fbe2413a39627edb4d828a0f91aa040faf60a58b42ac496f93101149b5b6b5
    PhishDestroy
    Addresses
    104.21.67.229 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.182.121 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.67.229, 172.67.182.121): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    test-z10.site
    Registered
    2025-11-22 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-12 01:14 UTC

    Suggest a correction

  13. us05web-live-j9979.com CA · AS399486 · 12651980 CANADA INC.
    ListedListed by MetaMaskMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    us05web-live-j9979.com
    First seen
    2026-11-12 00:44 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 00:07 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-11-11 23:39 UTC to 2027-02-09 23:39 UTC
    Logged 2026-11-12 00:38 UTC in Google PlumbersArms2027h1, entry 746,144,609
    SHA-256 23bc1951d29fba3b6cc2d79e8b9795946bff285597cba6c479a44bda2a153702
    Public key SHA-256 3321c47ea249ccb1f7816763a6318ccf7aa4a85ef73289171d3b65750952e1ff
    Addresses
    205.234.181.219 · Canada · AS399486 VIRTUO - 12651980 CANADA INC.
    Domain
    us05web-live-j9979.com
    Registered
    2026-05-27 · Tucows Domains Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-12 01:14 UTC

    Suggest a correction

  14. www.gbsell.com IS · AS50613 · ThorDC-AS Advania Island ehf
    ReportedUnder gbsell.com, reported by PhishDestroyMX presentSPF missingDMARC missingRegistered 2 mo ago
    DetailsHide
    Hostname
    www.gbsell.com
    First seen
    2026-11-12 00:44 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-30 · still listed at the last successful feed check 2026-11-12 00:05 UTC
    Reported
    PhishDestroy, listing gbsell.com and the names under it
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR2 · precertificate
    Valid 2026-11-11 23:41 UTC to 2027-02-09 23:41 UTC
    Logged 2026-11-12 00:40 UTC in Let's Encrypt Willow2027h1, entry 1,108,927,592
    SHA-256 1a1eee9f9a3d5093d855180be2acff74137e79bf9253fe8ca7c9ec34cb3a9136
    Public key SHA-256 b1c1cc74080598ef33280e20a9e9108cda2ce2d41756375939a99f256df46b92
    PhishDestroy
    Addresses
    82.221.139.204 · Iceland · AS50613 ThorDC-AS Advania Island ehf
    Domain
    gbsell.com
    Registered
    2026-09-12 · Internet Domain Service BS Corp
    MX
    Receives mail at gbsell.com
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-12 01:14 UTC

    Suggest a correction

  15. ayenx.icu US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by NPA 165 (e-commerce)MX absentSPF missingDMARC missingRegistered 11 mo ago
    DetailsHide
    Hostname
    ayenx.icu
    First seen
    2026-11-12 00:38 UTC
    Listing
    NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-11 13:38 UTC
    Listed
    NPA 165
    1. Observed in the NPA 165 feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-11-11 23:36 UTC to 2027-02-09 23:36 UTC
    Logged 2026-11-12 00:34 UTC in DigiCert Wyvern2027h1, entry 505,199,091
    SHA-256 11266c8e64f08cdd06d9d1c58dbc5f2ff8ffea540d54413cf5bb61fffb86604b
    Public key SHA-256 c4683445c06b20458fb54af6f60fd85e4a54caeaf7a61bd03668be8c40532a14
    Addresses
    104.21.31.182 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.179.36 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.31.182, 172.67.179.36): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    ayenx.icu
    Registered
    2025-12-25 · Alibaba Cloud Computing Ltd. d/b/a HiChina (www.net.cn)
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-12 01:14 UTC

    Suggest a correction

  16. en-us-trezor-helps.pages.dev US · AS13335 · Cloudflare, Inc.4 addressesTrezor
    ListedCloudflareListed by MetaMask
    DetailsHide
    Hostname
    en-us-trezor-helps.pages.dev
    First seen
    2026-11-12 00:38 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 00:07 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-11 23:36 UTC to 2027-02-09 23:36 UTC
    Logged 2026-11-12 00:35 UTC in Google PlumbersArms2027h1, entry 746,089,371
    SHA-256 734b34119114c46ea067970229c81bc9df8a2ec49bc56e1639aa35d797d4270b
    Public key SHA-256 da761fcb5c2451d92d0dba3362c46cd250b7213d1f997ec1e536412c9d291e8b
    Brand
    Trezor
    Addresses
    172.66.44.69 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.66.47.187 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:310c::ac42:2c45
    2606:4700:310c::ac42:2fbb
    Cloudflare
    Cloudflare (172.66.44.69, 172.66.47.187): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.

    Suggest a correction

  17. event-flarenetworks.cfd US · AS13335 · Cloudflare, Inc.4 addressesFlare Network
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    event-flarenetworks.cfd
    First seen
    2026-11-12 00:38 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 00:07 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-11 23:37 UTC to 2027-02-09 23:37 UTC
    Logged 2026-11-12 00:36 UTC in Let's Encrypt Sycamore2027h1, entry 1,154,813,970
    SHA-256 2aa3f9cfb913a82f622ac3e18d161a1ddab0c1e632271ef1ec3eeadb9c90e282
    Public key SHA-256 5661ab6776104dc40d5e0452c8dd7924408fb7e758232abc3429b2f96824a447
    Brand
    Flare Network
    Addresses
    104.21.16.254 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.217.193 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3032::6815:10fe
    2606:4700:3035::ac43:d9c1
    Cloudflare
    Cloudflare (104.21.16.254, 172.67.217.193): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    event-flarenetworks.cfd
    Registered
    2026-05-18 · Dynadot Inc
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-12 00:41 UTC

    Suggest a correction

  18. exodas-smart-wallat.pages.dev US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMask
    DetailsHide
    Hostname
    exodas-smart-wallat.pages.dev
    First seen
    2026-11-12 00:38 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 00:07 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-11-11 23:38 UTC to 2027-02-09 23:38 UTC
    Logged 2026-11-12 00:36 UTC in Geomys Tuscolo2027h1, entry 582,974,940
    SHA-256 74beb5914874c2f8b472cd56a1116e8d43f56f6eda9a1ca4323644cfb6077adc
    Public key SHA-256 1d6a9fc9dbac35948cb29e9cb28d2cd9639dfd368582d52431f47587b89fb470
    Addresses
    172.66.44.110 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.66.47.146 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (172.66.44.110, 172.66.47.146): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.

    Suggest a correction

  19. img.tor.taxi RU · AS57724 · DDOS-GUARD DDOS-GUARD LTD
    ReportedDDoS-GuardUnder tor.taxi, reported by PhishDestroyMX presentSPF ~allDMARC rejectRegistered 5 y ago
    DetailsHide
    Hostname
    img.tor.taxi
    First seen
    2026-11-12 00:38 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-12 00:05 UTC
    Reported
    PhishDestroy, listing tor.taxi and the names under it
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR2 · precertificate
    Valid 2026-11-11 23:35 UTC to 2027-02-09 23:35 UTC
    Logged 2026-11-12 00:34 UTC in IPng Networks Gouda2027h1, entry 388,980,307
    SHA-256 070e64638e1ffb0975eb4d37b59cf1a1c1e9b18767ca05d02198400caf8708e2
    Public key SHA-256 e61000453b1c2016194064364a63939a5e7268c1afc32949507c53bd77170804
    PhishDestroy
    Addresses
    185.129.100.227 · Russia · AS57724 DDOS-GUARD DDOS-GUARD LTD · DDoS-Guard (cdn)
    DDoS-Guard
    DDoS-Guard (185.129.100.227): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    tor.taxi
    Registered
    2021-07-02 · Tucows Domains Inc.
    MX
    Receives mail at mail.protonmail.ch, mailsec.protonmail.ch
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    DMARC policy p=reject
    Checked
    2026-11-11 21:02 UTC

    Suggest a correction

  20. njkfd.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    njkfd.com
    First seen
    2026-11-12 00:38 UTC
    Listing
    CERT Polska listed it 2026-05-20 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 00:49 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-11-11 23:38 UTC to 2027-02-09 23:38 UTC
    Logged 2026-11-12 00:36 UTC in Google PlumbersArms2027h1, entry 746,122,346
    SHA-256 55baad8bd5f5469b5a26cc76b47865eeff3f09ac14eaf16a9cfe0dbfacd85100
    Public key SHA-256 1c00795e3904f7fdfc8e280a71bae56774be32ce76cda9f46872c62a6b882526
    Addresses
    104.21.20.36 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.191.76 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.20.36, 172.67.191.76): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    njkfd.com
    Registered
    2026-05-18 · Cloud Yuqu LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-12 01:14 UTC

    Suggest a correction

  21. riktborsmann-app.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    riktborsmann-app.com
    First seen
    2026-11-12 00:38 UTC
    Listing
    CERT Polska listed it 2026-07-18 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 00:49 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1
    Valid 2026-09-13 21:17 UTC to 2026-12-12 22:16 UTC
    Logged 2026-11-12 00:37 UTC in Let's Encrypt Sycamore2026h2, entry 1,102,625,489
    SHA-256 4e64dce64c866973ef30881ccf2173590df8d704d460c8e384ab9d035cd99d28
    Public key SHA-256 874fb782b82810d296bc1bb239788c8a64b3d70ae2b1e9c0f2197878ccaf83ba
    Addresses
    104.21.40.127 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.151.169 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.40.127, 172.67.151.169): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    riktborsmann-app.com
    Registered
    2026-07-16 · Eranet International Limited
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-12 01:14 UTC

    Suggest a correction

  22. stonkfun.community US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 59 d ago
    DetailsHide
    Hostname
    stonkfun.community
    First seen
    2026-11-12 00:38 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 00:07 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-11 23:38 UTC to 2027-02-09 23:38 UTC
    Logged 2026-11-12 00:37 UTC in Google ParcelYard2027h1, entry 745,926,329
    SHA-256 973987e0baf88fdff02ed6cbaf50ebfb5eab9defa2f4ac49bd572cc210aca805
    Public key SHA-256 731586f9e704b5983c34946cd26cba212de2ff065920f27ad1ddb187b0e62ceb
    Addresses
    104.21.76.183 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.198.230 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.76.183, 172.67.198.230): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    stonkfun.community
    Registered
    2026-09-14 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-12 01:14 UTC

    Suggest a correction

  23. trezor-en-logins.pages.dev US · AS13335 · Cloudflare, Inc.4 addressesTrezor
    ListedCloudflareListed by MetaMask
    DetailsHide
    Hostname
    trezor-en-logins.pages.dev
    First seen
    2026-11-12 00:38 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 00:07 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-11-11 23:35 UTC to 2027-02-09 23:35 UTC
    Logged 2026-11-12 00:33 UTC in IPng Networks Gouda2027h1, entry 388,969,491
    SHA-256 12ece4cfd494df36cf1c3665690a33962299ce449e9aa093968f446305cbdb11
    Public key SHA-256 18513d9ba54fdbc954092a4c047030c28065c4e5c3684ca21735aa17fa40b16b
    Brand
    Trezor
    Addresses
    172.66.44.115 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.66.47.141 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:310c::ac42:2c73
    2606:4700:310c::ac42:2f8d
    Cloudflare
    Cloudflare (172.66.44.115, 172.66.47.141): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.

    Suggest a correction

  24. xsmdx.shop US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by NPA 165 (e-commerce)MX absentSPF missingDMARC missingRegistered 12 mo ago
    DetailsHide
    Hostname
    xsmdx.shop
    First seen
    2026-11-12 00:38 UTC
    Listing
    NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-11 13:38 UTC
    Listed
    NPA 165
    1. Observed in the NPA 165 feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1
    Valid 2026-09-13 18:20 UTC to 2026-12-12 19:19 UTC
    Logged 2026-11-12 00:37 UTC in Geomys Tuscolo2026h2, entry 1,053,243,837
    SHA-256 6e6b7675348f66bf212a4daec97c798cd369f9b40525ce3f16a2d094067621c3
    Public key SHA-256 794e00c914ee9c18366cf097fe6f7381d07f98112825f83783d87af6debe9c30
    Addresses
    104.21.78.130 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.221.198 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.78.130, 172.67.221.198): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    xsmdx.shop
    Registered
    2025-11-21 · GoDaddy.com LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-12 01:14 UTC

    Suggest a correction

  25. 1drop.digital US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 8 mo ago
    DetailsHide
    Hostname
    1drop.digital
    First seen
    2026-11-12 00:34 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-12 00:05 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-11-11 23:31 UTC to 2027-02-09 23:31 UTC
    Logged 2026-11-12 00:30 UTC in Let's Encrypt Willow2027h1, entry 1,108,781,856
    SHA-256 1c1af6d061ed8e5016b9233a465546c9e5f618fe8ad40a4da3b855616c2beeae
    Public key SHA-256 06cb51cfa0d4c2604f3a3115aef0da0400f4019e11d91451a4774f9b392f4225
    PhishDestroy
    Addresses
    104.21.81.182 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.145.172 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.81.182, 172.67.145.172): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    1drop.digital
    Registered
    2026-03-20 · Global Domain Group LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-12 01:14 UTC

    Suggest a correction

  26. alebilet.transakcja857321.sbs DE · AS206834 · TEAMINTERNET-CA-AS Team Int…
    ListedParking page · ParkingCrew (Team Internet)Listed by CERT PolskaMX absentSPF missingDMARC missingRegistered 2 d ago
    DetailsHide
    Hostname
    alebilet.transakcja857321.sbs
    First seen
    2026-11-12 00:34 UTC
    Listing
    CERT Polska listed it 2026-11-10 · still listed at the last successful feed check 2026-11-12 00:49 UTC
    CERT Polska listed it 2026-11-10 · still listed at the last successful feed check 2026-11-12 00:49 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-11-11 23:31 UTC to 2027-02-09 23:31 UTC
    Logged 2026-11-12 00:29 UTC in Google PlumbersArms2027h1, entry 746,001,898
    SHA-256 2f17671e7160f30d0e38b8aa6e6a970cf183dc95095ee86bffcce8eb1b823a46
    Public key SHA-256 81a12fea528718879876d8585967b667d5371317058817c1c962412922231192
    Addresses
    185.53.179.136 · Germany · AS206834 TEAMINTERNET-CA-AS Team Internet AG · ParkingCrew (Team Internet) (parking page)
    Parking page · ParkingCrew (Team Internet)
    ParkingCrew (Team Internet) (185.53.179.136): a parking service. It answers for names that are typically for sale or unused.
    Domain
    transakcja857321.sbs
    Registered
    2026-11-10 · Hosting Concepts B.V. d/b/a Registrar.eu
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-11 18:52 UTC

    Suggest a correction

  27. defi-guardian.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX presentSPF ~allDMARC policy noneRegistered 3 y ago
    DetailsHide
    Hostname
    defi-guardian.com
    First seen
    2026-11-12 00:34 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 00:07 UTC
    PhishDestroy: first observed in the feed 2026-10-26 · still listed at the last successful feed check 2026-11-12 00:05 UTC
    PhishTank: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-12 00:02 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-11 23:29 UTC to 2027-02-10 00:27 UTC
    Logged 2026-11-12 00:29 UTC in DigiCert Wyvern2027h1, entry 505,132,948
    SHA-256 123f4a713e13f8aa0476a3a04e64246c86d01d28c18f72cf44ed4c52b88b5163
    Public key SHA-256 9c0a96904fa9d85a3473a56c6de8dfc7fafc270ee8e829a25ec62095ac818ddb
    Addresses
    104.21.66.90 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.158.83 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.66.90, 172.67.158.83): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    defi-guardian.com
    Registered
    2024-04-03 · HOSTINGER operations, UAB
    MX
    Receives mail at mx1.hostinger.com, mx2.hostinger.com
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    DMARC policy p=none: reports only
    Checked
    2026-11-12 01:14 UTC

    Suggest a correction

  28. noveeparvance-ai.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    noveeparvance-ai.com
    First seen
    2026-11-12 00:34 UTC
    Listing
    CERT Polska listed it 2026-07-18 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 00:49 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1
    Valid 2026-11-11 23:30 UTC to 2027-02-10 00:29 UTC
    Logged 2026-11-12 00:31 UTC in Let's Encrypt Willow2027h1, entry 1,108,792,217
    SHA-256 5ccf588c193a82be45a6e2de8173e8381f8a1c706ccc130bd627b60f8617806d
    Public key SHA-256 7e3c95706df796841b87bb8834d0f74dc06efb7975f07b4da767d9afc4872dc7
    Addresses
    104.21.75.120 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.175.148 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.75.120, 172.67.175.148): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    noveeparvance-ai.com
    Registered
    2026-07-16 · Eranet International Limited
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-12 01:14 UTC

    Suggest a correction

  29. onlyfakeai.com US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX presentSPF ~allDMARC missingRegistered 8 mo ago
    DetailsHide
    Hostname
    onlyfakeai.com
    First seen
    2026-11-12 00:34 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-12 00:05 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-11 23:34 UTC to 2027-02-09 23:34 UTC
    Logged 2026-11-12 00:32 UTC in Google ParcelYard2027h1, entry 745,851,448
    SHA-256 e7030618975ef267d1a63540538478b682974ba317b9b9ffd63ed3b4ba6b13e5
    Public key SHA-256 4a92c2daae67e7b331acf059bfbd87685143ede50271b6d89bf54207c5bf4d76
    PhishDestroy
    Addresses
    104.21.34.20 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.153.54 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.34.20, 172.67.153.54): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    onlyfakeai.com
    Registered
    2026-03-20 · NameCheap, Inc.
    MX
    Receives mail at eforward1.registrar-servers.com, eforward2.registrar-servers.com, eforward3.registrar-servers.com
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-12 01:14 UTC

    Suggest a correction

  30. start--trezor-us.pages.dev US · AS13335 · Cloudflare, Inc.4 addressesTrezor
    ListedCloudflareListed by MetaMask
    DetailsHide
    Hostname
    start--trezor-us.pages.dev
    First seen
    2026-11-12 00:34 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 00:07 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-11-11 23:34 UTC to 2027-02-09 23:34 UTC
    Logged 2026-11-12 00:32 UTC in Let's Encrypt Sycamore2027h1, entry 1,154,754,867
    SHA-256 176fc073b591c48ebd103d81cadbf8d3fbe5ad2a2fdd1b670e217d4939eaa7c2
    Public key SHA-256 c9d287e37ca78aec32a33670d7eef1565cb4ae2aa16a262731740bd86ce66601
    Brand
    Trezor
    Addresses
    172.66.45.40 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.66.46.216 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:310c::ac42:2d28
    2606:4700:310c::ac42:2ed8
    Cloudflare
    Cloudflare (172.66.45.40, 172.66.46.216): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.

    Suggest a correction

  31. trustwalletsupport.tradeTrust Wallet
    ListedListed by MetaMaskMX absentSPF missingDMARC missingRegistered 2 mo ago
    DetailsHide
    Hostname
    trustwalletsupport.trade
    First seen
    2026-11-12 00:34 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 00:07 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-11-11 23:30 UTC to 2027-02-09 23:30 UTC
    Logged 2026-11-12 00:29 UTC in IPng Networks Gouda2027h1, entry 388,911,457
    SHA-256 183117539b40e6fd3f5fd777dfd332ea7163772cb795a79cadbe8e6257786251
    Public key SHA-256 d6d3217cdd5acca3c5af7642b76ddcb5ca819d4903636790cd2c59abba3cb3d7
    Brand
    Trust Wallet
    Domain
    trustwalletsupport.trade
    Registered
    2026-09-13 · Cloudflare, Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-12 00:36 UTC

    Suggest a correction

  32. www.musor-drop.org GB · AS201738 · UFO-TECHNOLOGIES-LIMITED UF…
    ReportedUnder musor-drop.org, reported by PhishDestroyMX absentSPF missingDMARC missingRegistered 3 mo ago
    DetailsHide
    Hostname
    www.musor-drop.org
    First seen
    2026-11-12 00:34 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-29 · still listed at the last successful feed check 2026-11-12 00:05 UTC
    Reported
    PhishDestroy, listing musor-drop.org and the names under it
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR2 · precertificate
    Valid 2026-11-11 23:32 UTC to 2027-02-09 23:32 UTC
    Logged 2026-11-12 00:31 UTC in Let's Encrypt Willow2027h1, entry 1,108,792,926
    SHA-256 0add20c86d9cee69a7c50e1823740ae78af66cd932ec573336468a85042d4bbe
    Public key SHA-256 0b49169e4d7833973c6ccf920df1792e0367baab47230ad5dd6c5be29de512b0
    PhishDestroy
    Addresses
    109.238.86.133 · United Kingdom · AS201738 UFO-TECHNOLOGIES-LIMITED UFO TECHNOLOGIES LIMITED
    Domain
    musor-drop.org
    Registered
    2026-08-24 · Global Domain Group LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-11 02:09 UTC

    Suggest a correction

  33. yymmoh.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by NPA 165 (finance and insurance)MX absentSPF missingDMARC missingRegistered 10 mo ago
    DetailsHide
    Hostname
    yymmoh.com
    First seen
    2026-11-12 00:34 UTC
    Listing
    NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-11 13:38 UTC
    Listed
    NPA 165
    1. Observed in the NPA 165 feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1
    Valid 2026-09-14 05:25 UTC to 2026-12-13 06:25 UTC
    Logged 2026-11-12 00:31 UTC in IPng Networks Halloumi2026h2a, entry 1,299,710,795
    SHA-256 02819355cd3f9043cc16129a8256b5b5a4f8fcc11f3dcd98a70439acba4ff1b7
    Public key SHA-256 b2daf18b34ead4710a7f08349693f2a88c1795f76cde5c55bacbb668b30f8eb2
    Addresses
    104.21.28.169 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.146.233 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.28.169, 172.67.146.233): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    yymmoh.com
    Registered
    2026-01-20 · Metaregistrar BV
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-12 01:14 UTC

    Suggest a correction

  34. api.mellgamez.icu GB · AS200514 · KnownSRV KnownSRV Ltd.
    ReportedUnder mellgamez.icu, reported by PhishDestroyMX absentSPF missingDMARC missingRegistered 8 mo ago
    DetailsHide
    Hostname
    api.mellgamez.icu
    First seen
    2026-11-12 00:29 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-12 00:05 UTC
    Reported
    PhishDestroy, listing mellgamez.icu and the names under it
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-11-11 23:26 UTC to 2027-02-09 23:26 UTC
    Logged 2026-11-12 00:24 UTC in Geomys Tuscolo2027h1, entry 582,784,065
    SHA-256 0440a124fd5f32a68d9224d1209d0ff745fb0f4175d295a511a2ae8b0c314e20
    Public key SHA-256 6e18b6a6f3fe72e495ac46df7759f3f97848909f70cac4f9cf2cfc5649c170b7
    PhishDestroy
    Addresses
    89.248.67.179 · United Kingdom · AS200514 KnownSRV KnownSRV Ltd.
    Domain
    mellgamez.icu
    Registered
    2026-03-13 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-11 14:44 UTC

    Suggest a correction

  35. api.mellstroy.host GB · AS200514 · KnownSRV KnownSRV Ltd.
    ReportedUnder mellstroy.host, reported by PhishDestroyMX absentSPF missingDMARC missingRegistered 8 mo ago
    DetailsHide
    Hostname
    api.mellstroy.host
    First seen
    2026-11-12 00:29 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-12 00:05 UTC
    Reported
    PhishDestroy, listing mellstroy.host and the names under it
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-11-11 23:29 UTC to 2027-02-09 23:29 UTC
    Logged 2026-11-12 00:27 UTC in Geomys Tuscolo2027h1, entry 582,828,424
    SHA-256 2bfc0fac53f20c62323631ccf05b5f7efe64fd7245a27784252c2827c9a044a4
    Public key SHA-256 eb28f8e0e57fc6f6a0ab22de63cd8fff7eaae13ec9897517a27a7a7add752669
    PhishDestroy
    Addresses
    89.248.67.197 · United Kingdom · AS200514 KnownSRV KnownSRV Ltd.
    Domain
    mellstroy.host
    Registered
    2026-03-13 · NameSilo, LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-11 15:58 UTC

    Suggest a correction

  36. dmcalegal-x.com
    ListedListed by MetaMaskMX absentSPF missingDMARC missingRegistered 2 mo ago
    DetailsHide
    Hostname
    dmcalegal-x.com
    First seen
    2026-11-12 00:29 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 00:07 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-11-11 23:27 UTC to 2027-02-09 23:27 UTC
    Logged 2026-11-12 00:26 UTC in DigiCert Wyvern2027h1, entry 505,086,517
    SHA-256 12af434e7cf8e0fe38058780edbb5efa6d330651d542c538f044da2311a0d4a1
    Public key SHA-256 c0c84ae5bcafac185b2e25e9ff8de666da6ffe95cd1c956ed2c3b3304cbd3e92
    Domain
    dmcalegal-x.com
    Registered
    2026-09-13 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-12 01:14 UTC

    Suggest a correction

  37. epoetry2007.net AU · AS133618 · Trellian Pty. Limited
    ReportedParking page · Trellian / Above.comReported by PhishDestroyMX presentSPF -allDMARC missingRegistered 3 y ago
    DetailsHide
    Hostname
    epoetry2007.net
    First seen
    2026-11-12 00:29 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-12 00:05 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-11-11 23:27 UTC to 2027-02-09 23:27 UTC
    Logged 2026-11-12 00:26 UTC in Google ParcelYard2027h1, entry 745,733,220
    SHA-256 3ad7791d156d22105e9753e807ea846c8a340eca92929b18d0b7d96b3e5c44a6
    Public key SHA-256 b631a9d579ffd2f94f5a0c00c35ec6384a3d80c2654f012dc6e06eae9b09da05
    PhishDestroy
    Addresses
    103.224.182.253 · Australia · AS133618 TRELLIAN-AS-AP - Trellian Pty. Limited · Trellian / Above.com (parking page)
    Parking page · Trellian / Above.com
    Trellian / Above.com (103.224.182.253): a parking service. It answers for names that are typically for sale or unused.
    Domain
    epoetry2007.net
    Registered
    2023-11-11 · Sav.com, LLC - 18
    MX
    Receives mail at alltheemails.com
    SPF
    SPF record with -all: other senders fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-12 01:14 UTC

    Suggest a correction

  38. eth-web3.com US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 15 mo ago
    DetailsHide
    Hostname
    eth-web3.com
    First seen
    2026-11-12 00:29 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-12 00:05 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-11 23:28 UTC to 2027-02-09 23:28 UTC
    Logged 2026-11-12 00:27 UTC in Google ParcelYard2027h1, entry 745,755,498
    SHA-256 33fbeb445f5c1bb3537b9627f844f44a38943ee797e73c071e9013474aaa116b
    Public key SHA-256 8ebf86e8dab64c661e8abcdc16e70be88c4c55f7abc1d3fa63e75fc75b999f36
    PhishDestroy
    Addresses
    104.21.60.137 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.197.57 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.60.137, 172.67.197.57): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    eth-web3.com
    Registered
    2025-08-10 · Dominet (HK) Limited
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-12 01:14 UTC

    Suggest a correction

  39. etrundra.com AU · AS133618 · Trellian Pty. Limited
    ReportedParking page · Above.comReported by PhishDestroyMX presentSPF -allDMARC missingRegistered 15 y ago
    DetailsHide
    Hostname
    etrundra.com
    First seen
    2026-11-12 00:29 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-12 00:05 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-11 23:27 UTC to 2027-02-09 23:27 UTC
    Logged 2026-11-12 00:26 UTC in Google ParcelYard2027h1, entry 745,737,850
    SHA-256 116ad447c6c3e04160c518990d19ff5b2c112c8c39f7db6619338853988dc17d
    Public key SHA-256 270c4498e5bb644854c44f7cc81b4449a1bef30f3ed256648bea900c5ef2f46c
    PhishDestroy
    Addresses
    103.224.182.253 · Australia · AS133618 TRELLIAN-AS-AP - Trellian Pty. Limited · Trellian / Above.com (parking page)
    Parking page · Above.com
    The registry delegates etrundra.com to Above.com’s nameservers, which answer for it. Above.com: a parking service. It answers for names that are typically for sale or unused. Trellian / Above.com (103.224.182.253): a parking service. It answers for names that are typically for sale or unused.
    Domain
    etrundra.com
    Registered
    2012-02-13 · GoDaddy.com, LLC
    MX
    Receives mail at park-mx.above.com
    SPF
    SPF record with -all: other senders fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-12 01:14 UTC

    Suggest a correction

  40. exodeu-s-web.pages.dev US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMask
    DetailsHide
    Hostname
    exodeu-s-web.pages.dev
    First seen
    2026-11-12 00:29 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 00:07 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-11-11 23:27 UTC to 2027-02-09 23:27 UTC
    Logged 2026-11-12 00:25 UTC in Let's Encrypt Sycamore2027h1, entry 1,154,635,060
    SHA-256 b9ff98c7c27ef7edffc6d4ba147bf2b2d84d802724add4a6a5a3f13de58a3257
    Public key SHA-256 7f19d6343aa80650a7c345c1e8cbd025114acb0f138bae31297c51d86275bfbc
    Addresses
    172.66.45.18 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.66.46.238 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (172.66.45.18, 172.66.46.238): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.

    Suggest a correction

  41. exoduos-wellet.pages.dev US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMask
    DetailsHide
    Hostname
    exoduos-wellet.pages.dev
    First seen
    2026-11-12 00:29 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 00:07 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-11 23:28 UTC to 2027-02-09 23:28 UTC
    Logged 2026-11-12 00:26 UTC in Google ParcelYard2027h1, entry 745,745,984
    SHA-256 159d6171f0f7eabe8babd70c34c63347f04e01b0d34716ca36278c53c48d1e6d
    Public key SHA-256 fcbfacb51839c4dec7acd8630761f7de9511723a21a8141758bbd574b78a26ff
    Addresses
    172.66.45.35 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.66.46.221 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (172.66.45.35, 172.66.46.221): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.

    Suggest a correction

  42. firelightensodisjsahsa.pages.dev US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMask
    DetailsHide
    Hostname
    firelightensodisjsahsa.pages.dev
    First seen
    2026-11-12 00:29 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 00:07 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-11-11 23:26 UTC to 2027-02-09 23:26 UTC
    Logged 2026-11-12 00:25 UTC in DigiCert Wyvern2027h1, entry 505,073,070
    SHA-256 0e3aeb2f0645e0d8ba0d0da3cc1572ff023c6300534ea7b7f685a2681143dbea
    Public key SHA-256 2a30dc6b0e9fdebc212f64fcf575e599fb192cbf6e9b811ba2d4d5fe7399b360
    Addresses
    172.66.44.140 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.66.47.116 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (172.66.44.140, 172.66.47.116): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.

    Suggest a correction

  43. granviabitnova-app.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    granviabitnova-app.com
    First seen
    2026-11-12 00:29 UTC
    Listing
    CERT Polska listed it 2026-07-18 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 00:49 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1
    Valid 2026-09-13 20:47 UTC to 2026-12-12 21:45 UTC
    Logged 2026-11-12 00:25 UTC in IPng Networks Halloumi2026h2a, entry 1,299,698,022
    SHA-256 3cacd1ccf10afbe2391c95ba3979a2941a57859c538956ff20921407ec776a81
    Public key SHA-256 8d291cd0dbe6097f1477492229d54d36740f67284c2f626efb4c56252199c70b
    Addresses
    104.21.37.167 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.210.151 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.37.167, 172.67.210.151): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    granviabitnova-app.com
    Registered
    2026-07-16 · Eranet International Limited
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-12 01:14 UTC

    Suggest a correction

  44. hostmaster.etrundra.com AU · AS133618 · Trellian Pty. Limited
    ReportedParking page · Above.comUnder etrundra.com, reported by PhishDestroyMX presentSPF -allDMARC missingRegistered 15 y ago
    DetailsHide
    Hostname
    hostmaster.etrundra.com
    First seen
    2026-11-12 00:29 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-12 00:05 UTC
    Reported
    PhishDestroy, listing etrundra.com and the names under it
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-11 23:27 UTC to 2027-02-09 23:27 UTC
    Logged 2026-11-12 00:26 UTC in Google ParcelYard2027h1, entry 745,737,850
    SHA-256 116ad447c6c3e04160c518990d19ff5b2c112c8c39f7db6619338853988dc17d
    Public key SHA-256 270c4498e5bb644854c44f7cc81b4449a1bef30f3ed256648bea900c5ef2f46c
    PhishDestroy
    Addresses
    103.224.182.253 · Australia · AS133618 TRELLIAN-AS-AP - Trellian Pty. Limited · Trellian / Above.com (parking page)
    Parking page · Above.com
    The registry delegates etrundra.com to Above.com’s nameservers, which answer for it. Above.com: a parking service. It answers for names that are typically for sale or unused. Trellian / Above.com (103.224.182.253): a parking service. It answers for names that are typically for sale or unused.
    Domain
    etrundra.com
    Registered
    2012-02-13 · GoDaddy.com, LLC
    MX
    Receives mail at park-mx.above.com
    SPF
    SPF record with -all: other senders fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-12 01:14 UTC

    Suggest a correction

  45. kra---47.ru US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    kra---47.ru
    First seen
    2026-11-12 00:29 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-12 00:05 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1
    Valid 2026-11-11 23:26 UTC to 2027-02-10 00:25 UTC
    Logged 2026-11-12 00:27 UTC in Google ParcelYard2027h1, entry 745,752,075
    SHA-256 28f674fa5ed422ce086cfee3d923d261c6d411cdc185678ce9869dc30b7afceb
    Public key SHA-256 3d157146e5519076fbd6f4a7bf7126335264aa0d9ec8d821c85b88f9161982c3
    PhishDestroy
    Addresses
    104.21.33.28 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.140.187 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.33.28, 172.67.140.187): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    kra---47.ru
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-12 00:31 UTC

    Suggest a correction

  46. meadow-assetmere-app.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    meadow-assetmere-app.com
    First seen
    2026-11-12 00:29 UTC
    Listing
    CERT Polska listed it 2026-07-18 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 00:49 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-11 23:25 UTC to 2027-02-10 00:23 UTC
    Logged 2026-11-12 00:25 UTC in DigiCert Sphinx2027h1, entry 448,297,528
    SHA-256 2c1040f1c0d20abd3524dc1a654086411fe59cf58765225d080d7089d3c37e28
    Public key SHA-256 7d5b14c2d811a1169fdb3b90d25191657d674b0594bd625415d79f01e9c47aff
    Addresses
    104.21.81.103 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.141.166 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.81.103, 172.67.141.166): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    meadow-assetmere-app.com
    Registered
    2026-07-16 · Eranet International Limited
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-12 01:14 UTC

    Suggest a correction

  47. namethicket.org US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX presentSPF ~allDMARC rejectRegistered 6 mo ago
    DetailsHide
    Hostname
    namethicket.org
    First seen
    2026-11-12 00:29 UTC
    Listing
    CERT Polska listed it 2026-09-25 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 00:49 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1
    Valid 2026-11-11 23:27 UTC to 2027-02-10 00:26 UTC
    Logged 2026-11-12 00:27 UTC in HARICA Selene2027h1, entry 69,163,125
    SHA-256 6a174328b9fdaf61242be4c278e8c404977849ed019740b0bee0f670554d5de0
    Public key SHA-256 bf5f82838dd0d4c433310509c05ba011883e47a03e141e6eb1da277eec4b47b5
    Addresses
    104.21.8.18 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.156.178 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.8.18, 172.67.156.178): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    namethicket.org
    Registered
    2026-05-17 · Dynadot Inc
    MX
    Receives mail at mx1.improvmx.com, mx2.improvmx.com
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    DMARC policy p=reject
    Checked
    2026-11-12 01:14 UTC

    Suggest a correction

  48. token-netnetcapital.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 2 mo ago
    DetailsHide
    Hostname
    token-netnetcapital.com
    First seen
    2026-11-12 00:29 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 00:07 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-11-11 23:27 UTC to 2027-02-09 23:27 UTC
    Logged 2026-11-12 00:25 UTC in Let's Encrypt Sycamore2027h1, entry 1,154,637,008
    SHA-256 a951f6e9a005c58c8d97f8e646e1fb4fe0261d0bc2ab8b376a912ae6e8cfff19
    Public key SHA-256 27fde59a2cb4fbd44808875da8cb2e0d0e96951d20103adf3e5e4a9be65a152e
    Addresses
    104.21.10.223 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.146.208 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.10.223, 172.67.146.208): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    token-netnetcapital.com
    Registered
    2026-09-13 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-12 01:14 UTC

    Suggest a correction

  49. trx-api.com US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC rejectRegistered 18 mo ago
    DetailsHide
    Hostname
    trx-api.com
    First seen
    2026-11-12 00:29 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-12 00:05 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-11 23:27 UTC to 2027-02-09 23:27 UTC
    Logged 2026-11-12 00:26 UTC in Google ParcelYard2027h1, entry 745,740,448
    SHA-256 3a6d8889067a2a941c0f9b606fd3584419328744d07303db9362fd17ee4ddbb9
    Public key SHA-256 0eb7345a3fa0586ed261dae44a5d56ed40ed32881471fddbe28a1d11b9d09ca1
    PhishDestroy
    Addresses
    104.21.89.239 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.191.238 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.89.239, 172.67.191.238): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    trx-api.com
    Registered
    2025-05-18 · Cloudflare, Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    DMARC policy p=reject
    Checked
    2026-11-12 01:14 UTC

    Suggest a correction

  50. ww25.etrundra.com AU · AS133618 · Trellian Pty. Limited
    ReportedParking page · Above.comUnder etrundra.com, reported by PhishDestroyMX presentSPF -allDMARC missingRegistered 15 y ago
    DetailsHide
    Hostname
    ww25.etrundra.com
    First seen
    2026-11-12 00:29 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-12 00:05 UTC
    Reported
    PhishDestroy, listing etrundra.com and the names under it
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-11 23:27 UTC to 2027-02-09 23:27 UTC
    Logged 2026-11-12 00:26 UTC in Google ParcelYard2027h1, entry 745,737,850
    SHA-256 116ad447c6c3e04160c518990d19ff5b2c112c8c39f7db6619338853988dc17d
    Public key SHA-256 270c4498e5bb644854c44f7cc81b4449a1bef30f3ed256648bea900c5ef2f46c
    PhishDestroy
    Addresses
    103.224.182.253 · Australia · AS133618 TRELLIAN-AS-AP - Trellian Pty. Limited · Trellian / Above.com (parking page)
    Parking page · Above.com
    The registry delegates etrundra.com to Above.com’s nameservers, which answer for it. Above.com: a parking service. It answers for names that are typically for sale or unused. Trellian / Above.com (103.224.182.253): a parking service. It answers for names that are typically for sale or unused.
    Domain
    etrundra.com
    Registered
    2012-02-13 · GoDaddy.com, LLC
    MX
    Receives mail at park-mx.above.com
    SPF
    SPF record with -all: other senders fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-12 01:14 UTC

    Suggest a correction

  51. www.api.mellgamez.icu US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareUnder mellgamez.icu, reported by PhishDestroyMX absentSPF missingDMARC missingRegistered 8 mo ago
    DetailsHide
    Hostname
    www.api.mellgamez.icu
    First seen
    2026-11-12 00:29 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-12 00:05 UTC
    Reported
    PhishDestroy, listing mellgamez.icu and the names under it
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-11-11 23:26 UTC to 2027-02-09 23:26 UTC
    Logged 2026-11-12 00:24 UTC in Geomys Tuscolo2027h1, entry 582,784,065
    SHA-256 0440a124fd5f32a68d9224d1209d0ff745fb0f4175d295a511a2ae8b0c314e20
    Public key SHA-256 6e18b6a6f3fe72e495ac46df7759f3f97848909f70cac4f9cf2cfc5649c170b7
    PhishDestroy
    Addresses
    104.21.59.6 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.167.97 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.59.6, 172.67.167.97): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    mellgamez.icu
    Registered
    2026-03-13 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-11 14:44 UTC

    Suggest a correction

  52. www.api.mellstroy.host US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareUnder mellstroy.host, reported by PhishDestroyMX absentSPF missingDMARC missingRegistered 8 mo ago
    DetailsHide
    Hostname
    www.api.mellstroy.host
    First seen
    2026-11-12 00:29 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-12 00:05 UTC
    Reported
    PhishDestroy, listing mellstroy.host and the names under it
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-11-11 23:29 UTC to 2027-02-09 23:29 UTC
    Logged 2026-11-12 00:27 UTC in Geomys Tuscolo2027h1, entry 582,828,424
    SHA-256 2bfc0fac53f20c62323631ccf05b5f7efe64fd7245a27784252c2827c9a044a4
    Public key SHA-256 eb28f8e0e57fc6f6a0ab22de63cd8fff7eaae13ec9897517a27a7a7add752669
    PhishDestroy
    Addresses
    104.21.81.75 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.158.63 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.81.75, 172.67.158.63): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    mellstroy.host
    Registered
    2026-03-13 · NameSilo, LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-11 15:58 UTC

    Suggest a correction

  53. www.inosyt.com US · AS54113 · Fastly, Inc.
    ReportedFastlyUnder inosyt.com, reported by PhishDestroyMX presentSPF -allDMARC missingRegistered 3 y ago
    DetailsHide
    Hostname
    www.inosyt.com
    First seen
    2026-11-12 00:29 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-12 00:05 UTC
    Reported
    PhishDestroy, listing inosyt.com and the names under it
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WR3 · precertificate
    Valid 2026-11-11 23:28 UTC to 2027-02-10 00:25 UTC
    Logged 2026-11-12 00:28 UTC in Let's Encrypt Sycamore2027h1, entry 1,154,677,176
    SHA-256 f8df66223894f5dd6c1f2fafdd53937784e9004f5a3e31e316e2e651837fc5ea
    Public key SHA-256 6b81681f2127b0585ab88c74c3f801ef2c2c943ead58693cdc9d85e8fbf5a610
    PhishDestroy
    Addresses
    199.36.158.100 · United States · AS54113 FASTLY - Fastly, Inc. · Fastly (cdn)
    Fastly
    Fastly (199.36.158.100): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    inosyt.com
    Registered
    2024-04-29 · GoDaddy.com, LLC
    MX
    Receives mail at inosyt-com.mail.protection.outlook.com
    SPF
    SPF record with -all: other senders fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-11 16:35 UTC

    Suggest a correction

  54. www.tronexchange.com US · AS16509 · Amazon.com, Inc.2 addresses
    ReportedParking page · AfternicUnder tronexchange.com, reported by PhishDestroyMX absentSPF -allDMARC missingRegistered 9 y ago
    DetailsHide
    Hostname
    www.tronexchange.com
    First seen
    2026-11-12 00:29 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-12 00:05 UTC
    Reported
    PhishDestroy, listing tronexchange.com and the names under it
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by GoDaddy TLS Intermediate CA DV - R1v1 · precertificate
    Valid 2026-11-12 00:26 UTC to 2027-05-29 00:26 UTC
    Logged 2026-11-12 00:27 UTC in GoDaddy Aquamarine2027h1, entry 216,850,585
    SHA-256 457a05a0bdb9cd24bb3248e390f0d180ccb15b70e40818de93a92d12eade88e2
    Public key SHA-256 b4a5829d99d395af55e15edf1bc69603dbfa9fc69c3d2c7330fa040803da0ba9
    PhishDestroy
    Addresses
    13.248.169.48 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Afternic (parking page)
    76.223.54.146 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Afternic (parking page)
    Parking page · Afternic
    The registry delegates tronexchange.com to Afternic’s nameservers, which answer for it. Afternic (13.248.169.48, 76.223.54.146): a parking service. It answers for names that are typically for sale or unused.
    Domain
    tronexchange.com
    Registered
    2017-12-20 · GoDaddy.com, LLC
    MX
    Publishes no mail exchanger
    SPF
    SPF record with -all: other senders fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-12 01:14 UTC

    Suggest a correction

  55. zvzgm.online US · AS16509 · Amazon.com, Inc.2 addresses
    ListedAmazon Web ServicesListed by NPA 165 (e-commerce)MX absentSPF missingDMARC quarantineRegistered 12 mo ago
    DetailsHide
    Hostname
    zvzgm.online
    First seen
    2026-11-12 00:29 UTC
    Listing
    NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-11 13:38 UTC
    Listed
    NPA 165
    1. Observed in the NPA 165 feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by GoDaddy TLS Intermediate CA DV - R1v1
    Valid 2026-11-12 00:24 UTC to 2027-05-29 00:24 UTC
    Logged 2026-11-12 00:24 UTC in Google Argon2027h1, entry 992,105,189
    SHA-256 16416188dd3a178fecd36fd27b7c6801f172f7900e79035d10e80cf0c937042c
    Public key SHA-256 072a2c116706642e8bc19c2622ef70850b35579a332a27d528bc0be85d9dfd5f
    Addresses
    13.248.213.45 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
    76.223.67.189 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
    Amazon Web Services
    Amazon Web Services (13.248.213.45, 76.223.67.189): a cloud provider. It rents servers and addresses to its customers.
    Domain
    zvzgm.online
    Registered
    2025-11-05 · GoDaddy.com, LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    DMARC policy p=quarantine
    Checked
    2026-11-12 01:14 UTC

    Suggest a correction

  56. aavecasinonodeposit.click US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 9 mo ago
    DetailsHide
    Hostname
    aavecasinonodeposit.click
    First seen
    2026-11-12 00:25 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-12 00:05 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-11-11 23:25 UTC to 2027-02-09 23:25 UTC
    Logged 2026-11-12 00:24 UTC in Geomys Tuscolo2027h1, entry 582,776,640
    SHA-256 32ae6d7be3fd35ba0fec975ae81f186c6398aec5ed10b40888f189cb73437875
    Public key SHA-256 c5e9e08d1557556f828f6cfe2b900f18495189ab4791a76c264d9309018015ff
    PhishDestroy
    Addresses
    104.21.12.102 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.131.250 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.12.102, 172.67.131.250): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    aavecasinonodeposit.click
    Registered
    2026-02-12 · Spaceship, Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-12 00:26 UTC

    Suggest a correction

  57. api.mell9919.cc GB · AS200514 · KnownSRV KnownSRV Ltd.
    ReportedUnder mell9919.cc, reported by PhishDestroyMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    api.mell9919.cc
    First seen
    2026-11-12 00:25 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-12 00:05 UTC
    Reported
    PhishDestroy, listing mell9919.cc and the names under it
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-11 23:22 UTC to 2027-02-09 23:22 UTC
    Logged 2026-11-12 00:21 UTC in Google ParcelYard2027h1, entry 745,641,158
    SHA-256 3183d89a75d6869df28d200d6cfba104f7837add4128f1c4c75b55aeb7cfe29f
    Public key SHA-256 d84ee3cacc9b3343262a65cc9b13b6156da0d9c21a159d8ef89cc1d124c9f54f
    PhishDestroy
    Addresses
    89.248.67.63 · United Kingdom · AS200514 KnownSRV KnownSRV Ltd.
    Domain
    mell9919.cc
    Registered
    2026-05-15 · NameSilo, LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-11 06:10 UTC

    Suggest a correction

  58. api.mellbetgame.live GB · AS200514 · KnownSRV KnownSRV Ltd.
    ReportedUnder mellbetgame.live, reported by PhishDestroyMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    api.mellbetgame.live
    First seen
    2026-11-12 00:25 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-12 00:05 UTC
    Reported
    PhishDestroy, listing mellbetgame.live and the names under it
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-11-11 23:23 UTC to 2027-02-09 23:23 UTC
    Logged 2026-11-12 00:22 UTC in Let's Encrypt Sycamore2027h1, entry 1,154,576,940
    SHA-256 871f52302b277c377ec1dd5bcec27c0d7955192ad879f3d9da2d791e8ee62962
    Public key SHA-256 d2e05b5625c3d456164c0993277a68bda72f8d6b922bec930766248226415523
    PhishDestroy
    Addresses
    89.248.67.128 · United Kingdom · AS200514 KnownSRV KnownSRV Ltd.
    Domain
    mellbetgame.live
    Registered
    2026-05-15 · NameSilo, LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-11 10:15 UTC

    Suggest a correction

  59. carboncollectiblesfl.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    carboncollectiblesfl.com
    First seen
    2026-11-12 00:25 UTC
    Listing
    CERT Polska listed it 2026-07-16 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 00:49 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-11 23:24 UTC to 2027-02-10 00:21 UTC
    Logged 2026-11-12 00:24 UTC in Let's Encrypt Willow2027h1, entry 1,108,681,870
    SHA-256 54fcde408c6a000233287fb9b6bd9b7774a2723e4373389e1ad695d2cca4442e
    Public key SHA-256 c2bce12fa7095b2fffe14ead6933dd22cd0bdb5ad7e9fe348fdddd784f7a2e67
    Addresses
    104.21.36.181 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.198.67 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.36.181, 172.67.198.67): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    carboncollectiblesfl.com
    Registered
    2026-07-13 · NameCheap, Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-12 01:14 UTC

    Suggest a correction

  60. coinex.date US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered today
    DetailsHide
    Hostname
    coinex.date
    First seen
    2026-11-12 00:25 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-12 00:05 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by Cloudflare TLS Issuing ECC CA 4 · precertificate
    Valid 2026-11-12 00:11 UTC to 2027-02-10 00:20 UTC
    Logged 2026-11-12 00:21 UTC in Geomys Tuscolo2027h1, entry 582,725,741
    SHA-256 46e51809483894e1cc8f0ab06847589c986612e29c79432e6f30599d370c061d
    Public key SHA-256 3c6fc5ded2df15fbf92db152f261c8baf36fd5da609498e54fb9bf635b6c5233
    PhishDestroy
    Addresses
    104.21.63.63 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.143.237 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.63.63, 172.67.143.237): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    coinex.date
    Registered
    2026-11-12 · Dynadot Inc
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-12 01:14 UTC

    Suggest a correction

  61. diaaa888.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by NPA 165 (information services)MX absentSPF missingDMARC missingRegistered 11 mo ago
    DetailsHide
    Hostname
    diaaa888.com
    First seen
    2026-11-12 00:25 UTC
    Listing
    NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-11 13:38 UTC
    Listed
    NPA 165
    1. Observed in the NPA 165 feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-11-11 23:24 UTC to 2027-02-09 23:24 UTC
    Logged 2026-11-12 00:22 UTC in IPng Networks Gouda2027h1, entry 388,855,150
    SHA-256 ce800d255ccdbe0e88cba0571a1da3f6fe362f47aa5ec348358b7861be449d4f
    Public key SHA-256 f33b1e505294387bac3129c500eaefe254ffa784425a37249ff401039ceffd03
    Addresses
    104.21.78.222 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.137.220 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.78.222, 172.67.137.220): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    diaaa888.com
    Registered
    2025-12-29 · NameSilo, LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-12 01:14 UTC

    Suggest a correction

  62. dosselamazonia.org.br US · AS54113 · Fastly, Inc.
    ReportedFastlyReported by PhishDestroyMX presentSPF missingDMARC missingRegistered 8 mo ago
    DetailsHide
    Hostname
    dosselamazonia.org.br
    First seen
    2026-11-12 00:25 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-12 00:05 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WR3
    Valid 2026-09-21 07:38 UTC to 2026-12-20 08:37 UTC
    Logged 2026-11-12 00:24 UTC in IPng Networks Halloumi2026h2a, entry 1,299,695,116
    SHA-256 4c5cd4b41881d7924e0bd2ead79df2533d3b1e414c6083b7a9ce8377fe3e3919
    Public key SHA-256 17a8d38a1f559246194bccae62a794ff80d419e849fa78811a4910d7283c1f75
    PhishDestroy
    Addresses
    199.36.158.100 · United States · AS54113 FASTLY - Fastly, Inc. · Fastly (cdn)
    Fastly
    Fastly (199.36.158.100): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    dosselamazonia.org.br
    Registered
    2026-03-10
    MX
    Receives mail at smtp.google.com
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-12 01:14 UTC

    Suggest a correction

  63. ggjka.xyz
    ListedListed by NPA 165 (e-commerce)MX absentSPF missingDMARC missingRegistered 11 mo ago
    DetailsHide
    Hostname
    ggjka.xyz
    First seen
    2026-11-12 00:25 UTC
    Listing
    NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-11 13:38 UTC
    Listed
    NPA 165
    1. Observed in the NPA 165 feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-11 23:24 UTC to 2027-02-09 23:24 UTC
    Logged 2026-11-12 00:23 UTC in Google PlumbersArms2027h1, entry 745,882,442
    SHA-256 e118ab6436749df197b6947b6c5828f835a2f32deb41f01d0d88442c844dfa9f
    Public key SHA-256 5dcc3db5c9b8f47e7138c2bf45d1ed0540b07ec71c6ebfc902a4894ff26354e1
    Domain
    ggjka.xyz
    Registered
    2025-12-27 · Alibaba Cloud Computing Ltd. d/b/a HiChina (www.net.cn)
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-12 01:14 UTC

    Suggest a correction

  64. krak36.cc US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 23 mo ago
    DetailsHide
    Hostname
    krak36.cc
    First seen
    2026-11-12 00:25 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-12 00:05 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-11 23:25 UTC to 2027-02-09 23:25 UTC
    Logged 2026-11-12 00:23 UTC in Google PlumbersArms2027h1, entry 745,892,122
    SHA-256 2134b9d069a7bf867ff7e41ef96b10460d13cca31c42500347a6959426aba8fa
    Public key SHA-256 d87916c9df41ffc25460d136b61b119361e73af1b23220ee04ff06a14e34f892
    PhishDestroy
    Addresses
    104.21.56.141 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.152.125 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.56.141, 172.67.152.125): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    krak36.cc
    Registered
    2024-12-21 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-12 00:26 UTC

    Suggest a correction

  65. marsh47.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX presentSPF ~allDMARC missingRegistered 10 mo ago
    DetailsHide
    Hostname
    marsh47.com
    First seen
    2026-11-12 00:25 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 00:07 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-11 23:24 UTC to 2027-02-10 00:21 UTC
    Logged 2026-11-12 00:24 UTC in DigiCert Wyvern2027h1, entry 505,062,360
    SHA-256 96ebd587c128014c48304350436eef22efd1ab23c480e5b15ad6ad260be94327
    Public key SHA-256 5ac4730ed0688f6e65ff5a36ef6cfc7f6bbc77c1b99383dd6ad7f6c57fbf0e50
    Addresses
    104.21.0.108 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.185.197 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.0.108, 172.67.185.197): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    marsh47.com
    Registered
    2026-01-20 · Cloudflare, Inc.
    MX
    Receives mail at mx01.mail.icloud.com, mx02.mail.icloud.com
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-12 01:14 UTC

    Suggest a correction

  66. namuvanta.org US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX presentSPF ~allDMARC rejectRegistered 6 mo ago
    DetailsHide
    Hostname
    namuvanta.org
    First seen
    2026-11-12 00:25 UTC
    Listing
    CERT Polska listed it 2026-10-19 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 00:49 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-11 23:20 UTC to 2027-02-10 00:19 UTC
    Logged 2026-11-12 00:20 UTC in Google PlumbersArms2027h1, entry 745,837,319
    SHA-256 4c051d0694001c47b2c0d65d59407f2ae6aa6ba74ee21e307eae6cfcb4dd49d2
    Public key SHA-256 a8ef4e8b977006222fe6e810f89a1ef7b22f78fb962e72bcdcf0c8886e0a703d
    Addresses
    104.21.89.82 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.139.17 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.89.82, 172.67.139.17): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    namuvanta.org
    Registered
    2026-05-17 · Dynadot Inc
    MX
    Receives mail at mx1.improvmx.com, mx2.improvmx.com
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    DMARC policy p=reject
    Checked
    2026-11-12 01:14 UTC

    Suggest a correction

  67. www.api.mell9919.cc US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareUnder mell9919.cc, reported by PhishDestroyMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    www.api.mell9919.cc
    First seen
    2026-11-12 00:25 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-12 00:05 UTC
    Reported
    PhishDestroy, listing mell9919.cc and the names under it
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-11 23:22 UTC to 2027-02-09 23:22 UTC
    Logged 2026-11-12 00:21 UTC in Google ParcelYard2027h1, entry 745,641,158
    SHA-256 3183d89a75d6869df28d200d6cfba104f7837add4128f1c4c75b55aeb7cfe29f
    Public key SHA-256 d84ee3cacc9b3343262a65cc9b13b6156da0d9c21a159d8ef89cc1d124c9f54f
    PhishDestroy
    Addresses
    104.21.27.67 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.141.199 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.27.67, 172.67.141.199): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    mell9919.cc
    Registered
    2026-05-15 · NameSilo, LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-11 06:10 UTC

    Suggest a correction

  68. www.api.mellbetgame.live US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareUnder mellbetgame.live, reported by PhishDestroyMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    www.api.mellbetgame.live
    First seen
    2026-11-12 00:25 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-12 00:05 UTC
    Reported
    PhishDestroy, listing mellbetgame.live and the names under it
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-11-11 23:23 UTC to 2027-02-09 23:23 UTC
    Logged 2026-11-12 00:22 UTC in Let's Encrypt Sycamore2027h1, entry 1,154,576,940
    SHA-256 871f52302b277c377ec1dd5bcec27c0d7955192ad879f3d9da2d791e8ee62962
    Public key SHA-256 d2e05b5625c3d456164c0993277a68bda72f8d6b922bec930766248226415523
    PhishDestroy
    Addresses
    104.21.85.86 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.203.251 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.85.86, 172.67.203.251): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    mellbetgame.live
    Registered
    2026-05-15 · NameSilo, LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-11 10:15 UTC

    Suggest a correction

  69. www.hellcase.paris US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareUnder hellcase.paris, listed by MetaMaskMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    www.hellcase.paris
    First seen
    2026-11-12 00:25 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 00:07 UTC
    Listed
    MetaMask, listing hellcase.paris and the names under it
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR1
    Valid 2026-11-11 23:25 UTC to 2027-02-09 23:25 UTC
    Logged 2026-11-12 00:24 UTC in Google ParcelYard2027h1, entry 745,698,100
    SHA-256 69bae701f161c0447b00c5ab45ef8b9712bc58b4d3c086ba8bfea1cf32af1ffc
    Public key SHA-256 363b1dc71944f2309637b505fcb26e6dd87ab02d6693f7fd3e1f8c286bdc7a79
    Addresses
    104.21.63.49 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.169.242 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.63.49, 172.67.169.242): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    hellcase.paris
    Registered
    2026-05-11 · Hosting Concepts B.V. d/b/a Openprovider
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-11 17:41 UTC

    Suggest a correction

  70. api.mell6819.com GB · AS200514 · KnownSRV KnownSRV Ltd.
    ReportedUnder mell6819.com, reported by PhishDestroyMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    api.mell6819.com
    First seen
    2026-11-12 00:21 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-12 00:05 UTC
    Reported
    PhishDestroy, listing mell6819.com and the names under it
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-11 23:20 UTC to 2027-02-09 23:20 UTC
    Logged 2026-11-12 00:19 UTC in Google ParcelYard2027h1, entry 745,606,505
    SHA-256 3a7c3a418ce5e8c8ebf51d869106ce665861c8cac3d45aeb0cd0a551d856d0b5
    Public key SHA-256 1e8caf5534757fcf0103b4c58f5dedaf57b786b103dec0bf352ba1093001fd11
    PhishDestroy
    Addresses
    89.248.67.111 · United Kingdom · AS200514 KnownSRV KnownSRV Ltd.
    Domain
    mell6819.com
    Registered
    2026-05-15 · NameSilo, LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-11 15:21 UTC

    Suggest a correction

  71. apkpikashow.com.in EE · AS61254 · ESTOXY-OU ESTOXY OU
    ListedListed by MetaMaskMX absentSPF missingDMARC missingRegistered 10 mo ago
    DetailsHide
    Hostname
    apkpikashow.com.in
    First seen
    2026-11-12 00:21 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 00:07 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-11 23:18 UTC to 2027-02-10 00:16 UTC
    Logged 2026-11-12 00:18 UTC in DigiCert Wyvern2027h1, entry 504,978,538
    SHA-256 79772266d20b5f911ef3b52435e1a614fa07ba3b558c8094f50382f3ebf65bdb
    Public key SHA-256 9364bf593d7affb1ebf9ae2ee607f706725724b25482c3e106217a63fb218da3
    Addresses
    185.53.90.170 · Estonia · AS61254 ESTOXY-OU ESTOXY OU
    Domain
    apkpikashow.com.in
    Registered
    2026-01-20 · Dynadot, LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-12 01:14 UTC

    Suggest a correction

  72. aurelvanto-ai.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    aurelvanto-ai.com
    First seen
    2026-11-12 00:21 UTC
    Listing
    CERT Polska listed it 2026-07-17 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 00:49 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-11 23:20 UTC to 2027-02-10 00:18 UTC
    Logged 2026-11-12 00:20 UTC in DigiCert Wyvern2027h1, entry 505,006,482
    SHA-256 454cd8e212e3c573e2c378c8b9a7755360dfaa9a2ca01a8a1a0ba2076ef26701
    Public key SHA-256 6a89dd50575ea8b73405d57eed243f3e0e10a1d95658fc263b1c5a7419343fa0
    Addresses
    104.21.4.178 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.132.82 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.4.178, 172.67.132.82): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    aurelvanto-ai.com
    Registered
    2026-07-16 · Eranet International Limited
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-12 01:14 UTC

    Suggest a correction

  73. bounty-shib.com US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 8 mo ago
    DetailsHide
    Hostname
    bounty-shib.com
    First seen
    2026-11-12 00:21 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-12 00:05 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-11-11 23:21 UTC to 2027-02-09 23:21 UTC
    Logged 2026-11-12 00:19 UTC in Google ParcelYard2027h1, entry 745,616,093
    SHA-256 511880983e6b15f132c1d2347dab5b5c46832bf0291e2dc8fce03ee679fc70a0
    Public key SHA-256 31f607b610cdad6fa05814c552defe7f01cb83b5b600681fb51730b5a7ccb30a
    PhishDestroy
    Addresses
    104.21.46.54 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.223.226 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.46.54, 172.67.223.226): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    bounty-shib.com
    Registered
    2026-03-21 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-12 01:14 UTC

    Suggest a correction

  74. exodus-tradingai-app.com CZ · AS60592 · GRANSY Gransy s.r.o.9 addresses
    ListedParking page · ParktonsListed by MetaMaskMX presentSPF missingDMARC missingRegistered 15 mo ago
    DetailsHide
    Hostname
    exodus-tradingai-app.com
    First seen
    2026-11-12 00:21 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 00:07 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-11 23:18 UTC to 2027-02-09 23:18 UTC
    Logged 2026-11-12 00:16 UTC in Google ParcelYard2027h1, entry 745,557,678
    SHA-256 2b0ede5afe6af9509f8f1d8e081eeea6034f8efe63c82989a706a6ba61f94df7
    Public key SHA-256 6ff31e6b320f301515e0b3a666570a471543fb5349f00325816c557a7af4f34b
    Addresses
    46.8.8.220 · Czechia · AS60592 GRANSY Gransy s.r.o. · Parktons (parking page)
    46.8.8.222 · Czechia · AS60592 GRANSY Gransy s.r.o. · Parktons (parking page)
    46.8.8.223 · Czechia · AS60592 GRANSY Gransy s.r.o. · Parktons (parking page)
    46.8.8.224 · Czechia · AS60592 GRANSY Gransy s.r.o. · Parktons (parking page)
    46.8.8.225 · Czechia · AS60592 GRANSY Gransy s.r.o. · Parktons (parking page)
    46.8.8.226 · Czechia · AS60592 GRANSY Gransy s.r.o. · Parktons (parking page)
    46.8.8.227 · Czechia · AS60592 GRANSY Gransy s.r.o. · Parktons (parking page)
    46.8.8.228 · Czechia · AS60592 GRANSY Gransy s.r.o. · Parktons (parking page)
    46.8.8.229 · Czechia · AS60592 GRANSY Gransy s.r.o. · Parktons (parking page)
    Parking page · Parktons
    The registry delegates exodus-tradingai-app.com to Parktons’s nameservers, which answer for it. Parktons (46.8.8.220, 46.8.8.222, 46.8.8.223, 46.8.8.224, 46.8.8.225, 46.8.8.226, 46.8.8.227, 46.8.8.228, 46.8.8.229): a parking service. It answers for names that are typically for sale or unused.
    Domain
    exodus-tradingai-app.com
    Registered
    2025-08-13 · MainReg Inc.
    MX
    Receives mail at mail.parktons.com
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-12 01:14 UTC

    Suggest a correction

  75. iwqhk.asia US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by NPA 165 (information services)MX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    iwqhk.asia
    First seen
    2026-11-12 00:21 UTC
    Listing
    NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-11 13:38 UTC
    Listed
    NPA 165
    1. Observed in the NPA 165 feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-11-11 23:18 UTC to 2027-02-09 23:18 UTC
    Logged 2026-11-12 00:16 UTC in Google ParcelYard2027h1, entry 745,552,906
    SHA-256 46f1f575599f35898e6a1cb623452ccb8696c90326a38b1264afb08e774bb464
    Public key SHA-256 6750d315e66bf9e01c7ec20ff0da6fbc6655df8cf40a7eca68b5b28ac49b0d81
    Addresses
    104.21.48.183 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.155.188 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.48.183, 172.67.155.188): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    iwqhk.asia
    Registered
    2026-05-18 · Alibaba Cloud Computing Ltd. d/b/a HiChina (www.net.cn)
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-12 01:14 UTC

    Suggest a correction

  76. kra46at.com US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 19 mo ago
    DetailsHide
    Hostname
    kra46at.com
    First seen
    2026-11-12 00:21 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-12 00:05 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-11-11 23:21 UTC to 2027-02-09 23:21 UTC
    Logged 2026-11-12 00:19 UTC in IPng Networks Gouda2027h1, entry 388,834,257
    SHA-256 c8728d9e6aa646f00c94174905eee32739505be14f26287b1e822fde471a1e35
    Public key SHA-256 4f7448935e48c9703fb7594c22f1be71c2c2dad23be898f21dc38822ff7d5775
    PhishDestroy
    Addresses
    104.21.73.80 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.189.23 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.73.80, 172.67.189.23): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    kra46at.com
    Registered
    2025-04-25 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-12 01:14 UTC

    Suggest a correction

  77. ledgrrcom-strt.pages.dev US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMask
    DetailsHide
    Hostname
    ledgrrcom-strt.pages.dev
    First seen
    2026-11-12 00:21 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 00:07 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-11-11 23:20 UTC to 2027-02-09 23:20 UTC
    Logged 2026-11-12 00:19 UTC in IPng Networks Halloumi2027h1, entry 462,458,006
    SHA-256 63b56f050a0f5ae7524fb9be8dc9766d493e8ccc6b6fa400a54b52986dbc68fb
    Public key SHA-256 b5d4ad970588c587e1e12507c803136117950c1e11d0fbdce075cf55a388f9e4
    Addresses
    172.66.44.107 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.66.47.149 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (172.66.44.107, 172.66.47.149): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.

    Suggest a correction

  78. niafintechexchange.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by NPA 165 (finance and insurance)MX absentSPF missingDMARC missingRegistered 13 mo ago
    DetailsHide
    Hostname
    niafintechexchange.com
    First seen
    2026-11-12 00:21 UTC
    Listing
    NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-11 13:38 UTC
    Listed
    NPA 165
    1. Observed in the NPA 165 feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-11 23:19 UTC to 2027-02-09 23:19 UTC
    Logged 2026-11-12 00:18 UTC in Google ParcelYard2027h1, entry 745,577,994
    SHA-256 02015cc30b5abb71193065b84c74385b94fedbc9574702169fd6608afb60c955
    Public key SHA-256 58e9118b1801d876f9ce924223cb7d41e8229425a7407bac9ad616de71fa92ca
    Addresses
    104.21.71.83 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.143.250 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.71.83, 172.67.143.250): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    niafintechexchange.com
    Registered
    2025-10-21 · NameSilo, LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-12 01:14 UTC

    Suggest a correction

  79. online-trezor-logine.pages.dev US · AS13335 · Cloudflare, Inc.4 addressesTrezor
    ListedCloudflareListed by MetaMask
    DetailsHide
    Hostname
    online-trezor-logine.pages.dev
    First seen
    2026-11-12 00:21 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 00:07 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-11-11 23:18 UTC to 2027-02-09 23:18 UTC
    Logged 2026-11-12 00:16 UTC in Let's Encrypt Sycamore2027h1, entry 1,154,476,432
    SHA-256 09ebfbb750eb3c7c144bfe03d033f526f901254c6a708661e1828b2fd82fb209
    Public key SHA-256 eaa9b430ea21222c3023f187290da0d5f6743be32a885c7b15b2ed41301c9a9b
    Brand
    Trezor
    Addresses
    172.66.44.77 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.66.47.179 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:310c::ac42:2c4d
    2606:4700:310c::ac42:2fb3
    Cloudflare
    Cloudflare (172.66.44.77, 172.66.47.179): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.

    Suggest a correction

  80. pationordic.com US · AS13335 · Cloudflare, Inc.
    ListedCloudflareListed by CERT PolskaMX presentSPF ~allDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    pationordic.com
    First seen
    2026-11-12 00:21 UTC
    Listing
    CERT Polska listed it 2026-09-25 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 00:49 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-11 23:21 UTC to 2027-02-09 23:21 UTC
    Logged 2026-11-12 00:20 UTC in Google ParcelYard2027h1, entry 745,625,149
    SHA-256 176ea716dd302a90acd550fb8f7a5d888d0cd215176cf4d59f00f9ed2465839b
    Public key SHA-256 5cda5149cee69e3cd84e88b0e16a606bb79b55422d18851f21d3890febd97752
    Addresses
    104.18.15.59 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.18.15.59): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    pationordic.com
    Registered
    2026-05-13 · Spaceship, Inc.
    MX
    Receives mail at route2.mx.cloudflare.net, route1.mx.cloudflare.net, route3.mx.cloudflare.net
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-12 01:14 UTC

    Suggest a correction

  81. reward-neverland.xyz US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    reward-neverland.xyz
    First seen
    2026-11-12 00:21 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 00:07 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-11-11 23:21 UTC to 2027-02-09 23:21 UTC
    Logged 2026-11-12 00:19 UTC in Google ParcelYard2027h1, entry 745,613,693
    SHA-256 174781b7300c81921f5669a07c658b525677155f9b90011a2a7ec485f3406201
    Public key SHA-256 dadbd4d9b289e9c9641fd7170ffd401172c8350ff7f0f98462917bd6383f3b3f
    Addresses
    104.21.34.145 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.161.177 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.34.145, 172.67.161.177): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    reward-neverland.xyz
    Registered
    2026-05-18 · PDR Ltd. d/b/a PublicDomainRegistry.com
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-12 01:14 UTC

    Suggest a correction

  82. staging.api.hq-portal.propnumberone.com US · AS16509 · Amazon.com, Inc.2 addresses
    ReportedAmazon Web ServicesUnder propnumberone.com, reported by PhishDestroyMX presentSPF ~allDMARC policy noneRegistered 3 y ago
    DetailsHide
    Hostname
    staging.api.hq-portal.propnumberone.com
    First seen
    2026-11-12 00:21 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-12 00:05 UTC
    Reported
    PhishDestroy, listing propnumberone.com and the names under it
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by Amazon RSA 2048 S24 · precertificate
    Valid 2026-11-11 23:19 UTC to 2027-05-29 00:19 UTC
    Logged 2026-11-12 00:19 UTC in DigiCert Sphinx2027h1, entry 448,215,751
    SHA-256 bd43f31132ae0b27455c1abcf652a134fbce4698b504c9e232268a2d93e94c9a
    Public key SHA-256 c130950f83fcb0788d654b97d0a765d9d961769fd226fa49956b1896787d6af0
    PhishDestroy
    Addresses
    13.61.89.20 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
    16.192.206.31 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
    Amazon Web Services
    Amazon Web Services (13.61.89.20, 16.192.206.31): a cloud provider. It rents servers and addresses to its customers.
    Domain
    propnumberone.com
    Registered
    2023-09-13 · PDR Ltd. d/b/a PublicDomainRegistry.com
    MX
    Receives mail at mail.propnumberone.com, mxa.eu.mailgun.org, mxb.eu.mailgun.org
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    DMARC policy p=none: reports only
    Checked
    2026-11-11 08:57 UTC

    Suggest a correction

  83. staging.hq-portal.propnumberone.com US · AS16509 · Amazon.com, Inc.2 addresses
    ReportedAmazon Web ServicesUnder propnumberone.com, reported by PhishDestroyMX presentSPF ~allDMARC policy noneRegistered 3 y ago
    DetailsHide
    Hostname
    staging.hq-portal.propnumberone.com
    First seen
    2026-11-12 00:21 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-12 00:05 UTC
    Reported
    PhishDestroy, listing propnumberone.com and the names under it
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by Amazon RSA 2048 M04
    Valid 2025-12-12 00:00 UTC to 2027-01-10 23:59 UTC
    Logged 2026-11-12 00:19 UTC in Let's Encrypt Willow2027h1, entry 1,108,582,658
    SHA-256 2d1cb15bbf7d0af50a019954e0079736953b4c50100e056451c87f387c71dace
    Public key SHA-256 f437c54f869c2e4b8adaf13cd8f53a1fe86304d6bb3ede08a56af7a2a4bb4173
    PhishDestroy
    Addresses
    13.61.89.20 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
    16.192.206.31 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
    Amazon Web Services
    Amazon Web Services (13.61.89.20, 16.192.206.31): a cloud provider. It rents servers and addresses to its customers.
    Domain
    propnumberone.com
    Registered
    2023-09-13 · PDR Ltd. d/b/a PublicDomainRegistry.com
    MX
    Receives mail at mail.propnumberone.com, mxa.eu.mailgun.org, mxb.eu.mailgun.org
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    DMARC policy p=none: reports only
    Checked
    2026-11-11 08:57 UTC

    Suggest a correction

  84. stfx-5wq.pages.dev US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMask
    DetailsHide
    Hostname
    stfx-5wq.pages.dev
    First seen
    2026-11-12 00:21 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 00:07 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-11-11 23:21 UTC to 2027-02-09 23:21 UTC
    Logged 2026-11-12 00:20 UTC in Google ParcelYard2027h1, entry 745,623,336
    SHA-256 00a79c57bd4acd1e0c0dade083bffa53f379647c9b95c23b75ec0ee3e3186280
    Public key SHA-256 495b995950df190d4e077044bb81ab6957c88162424a01c7916c5c648340a056
    Addresses
    172.66.44.139 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.66.47.117 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (172.66.44.139, 172.66.47.117): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.

    Suggest a correction

  85. www.api.mell6819.com US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareUnder mell6819.com, reported by PhishDestroyMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    www.api.mell6819.com
    First seen
    2026-11-12 00:21 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-12 00:05 UTC
    Reported
    PhishDestroy, listing mell6819.com and the names under it
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-11 23:20 UTC to 2027-02-09 23:20 UTC
    Logged 2026-11-12 00:19 UTC in Google ParcelYard2027h1, entry 745,606,505
    SHA-256 3a7c3a418ce5e8c8ebf51d869106ce665861c8cac3d45aeb0cd0a551d856d0b5
    Public key SHA-256 1e8caf5534757fcf0103b4c58f5dedaf57b786b103dec0bf352ba1093001fd11
    PhishDestroy
    Addresses
    104.21.20.198 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.194.30 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.20.198, 172.67.194.30): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    mell6819.com
    Registered
    2026-05-15 · NameSilo, LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-11 15:21 UTC

    Suggest a correction

  86. 0xhares.live US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    0xhares.live
    First seen
    2026-11-12 00:16 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 00:07 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-11-11 23:17 UTC to 2027-02-09 23:17 UTC
    Logged 2026-11-12 00:15 UTC in Let's Encrypt Willow2027h1, entry 1,108,527,801
    SHA-256 00758ed8f984336986779644cc949d0f55b5f9fb0af0c652a97dd7426165e605
    Public key SHA-256 743a12825af39052489b935b1e674a8a35426d3ea157de1101f73739c5d260dc
    Addresses
    104.21.59.67 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.217.152 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.59.67, 172.67.217.152): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    0xhares.live
    Registered
    2026-05-18 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-12 01:14 UTC

    Suggest a correction

  87. bravenfundmere-ai.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    bravenfundmere-ai.com
    First seen
    2026-11-12 00:16 UTC
    Listing
    CERT Polska listed it 2026-07-17 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 00:49 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-11 23:11 UTC to 2027-02-10 00:09 UTC
    Logged 2026-11-12 00:11 UTC in DigiCert Wyvern2027h1, entry 504,916,892
    SHA-256 aba8a51365a02d9bb5bd9dd47de8c9c6c91ccc5e046650273ad646ec0e8390b7
    Public key SHA-256 5892ce7d489d8c855f478fc56a84467767f1d41691db69b876203f16e5d371b4
    Addresses
    104.21.54.148 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.139.227 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.54.148, 172.67.139.227): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    bravenfundmere-ai.com
    Registered
    2026-07-16 · Eranet International Limited
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-12 01:14 UTC

    Suggest a correction

  88. dauphinvalorif-ai.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    dauphinvalorif-ai.com
    First seen
    2026-11-12 00:16 UTC
    Listing
    CERT Polska listed it 2026-07-17 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 00:49 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-11 23:14 UTC to 2027-02-10 00:12 UTC
    Logged 2026-11-12 00:14 UTC in Google ParcelYard2027h1, entry 745,521,226
    SHA-256 53dc41dcb1d2db3c553bca25270c04666ba34901984a05056d7049c4a7c1461c
    Public key SHA-256 c8342fa2fde67bb08be61c028c25fa0b4dfbe8048ebd3f1686192bbeee1d26fe
    Addresses
    104.21.70.76 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.221.162 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.70.76, 172.67.221.162): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    dauphinvalorif-ai.com
    Registered
    2026-07-16 · Eranet International Limited
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-12 01:14 UTC

    Suggest a correction

  89. joyeriasdilusso.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX presentSPF ~allDMARC missingRegistered 10 mo ago
    DetailsHide
    Hostname
    joyeriasdilusso.com
    First seen
    2026-11-12 00:16 UTC
    Listing
    CERT Polska listed it 2026-09-25 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 00:49 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1
    Valid 2026-11-11 23:14 UTC to 2027-02-10 00:13 UTC
    Logged 2026-11-12 00:15 UTC in Let's Encrypt Willow2027h1, entry 1,108,513,339
    SHA-256 145e36aeabe266fd868cdf54599bd8600ce536f71071cc15157ae445b513a9ae
    Public key SHA-256 155458394bf2d70257dad9450bb743ad1f2794c6af3aa21db99e3ae2291b83ff
    Addresses
    104.21.72.72 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.176.21 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.72.72, 172.67.176.21): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    joyeriasdilusso.com
    Registered
    2026-01-19 · Wild West Domains, LLC
    MX
    Receives mail at route1.mx.cloudflare.net, route2.mx.cloudflare.net, route3.mx.cloudflare.net
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-12 01:14 UTC

    Suggest a correction

  90. liegerentevance-app.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    liegerentevance-app.com
    First seen
    2026-11-12 00:16 UTC
    Listing
    CERT Polska listed it 2026-07-17 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 00:49 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by Cloudflare TLS Issuing ECC CA 4 · precertificate
    Valid 2026-11-12 00:04 UTC to 2027-02-10 00:12 UTC
    Logged 2026-11-12 00:14 UTC in Let's Encrypt Sycamore2027h1, entry 1,154,430,881
    SHA-256 ae6788d4dd95566f21ff6863e21edd1fedfdbb9165bdf7913f98b3bb63eed874
    Public key SHA-256 446ad9017a389524295745ba53a5760ab14e962d8bf52409e4260ab661b24760
    Addresses
    104.21.38.232 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.140.196 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.38.232, 172.67.140.196): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    liegerentevance-app.com
    Registered
    2026-07-16 · Eranet International Limited
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-12 01:14 UTC

    Suggest a correction

  91. neuroquant-app.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    neuroquant-app.com
    First seen
    2026-11-12 00:16 UTC
    Listing
    CERT Polska listed it 2026-07-17 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 00:49 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1
    Valid 2026-09-13 20:58 UTC to 2026-12-12 21:58 UTC
    Logged 2026-11-12 00:15 UTC in IPng Networks Gouda2026h2, entry 1,252,554,221
    SHA-256 9dd6157a28479022ead204102cc946b4de65a7a4d8e2c3ad149a583d6f749320
    Public key SHA-256 45c2e9123d9008d06ef2a7db60171e296f52e2365172e13900df56db6a09f91b
    Addresses
    104.21.3.31 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.130.38 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.3.31, 172.67.130.38): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    neuroquant-app.com
    Registered
    2026-07-16 · Eranet International Limited
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-12 01:14 UTC

    Suggest a correction

  92. sovereign-velsant-92-ai.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    sovereign-velsant-92-ai.com
    First seen
    2026-11-12 00:16 UTC
    Listing
    CERT Polska listed it 2026-07-18 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 00:49 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-11 23:14 UTC to 2027-02-10 00:12 UTC
    Logged 2026-11-12 00:14 UTC in Google ParcelYard2027h1, entry 745,510,380
    SHA-256 67c341437f536cac9e278084ae350f4ccf66ac8e9049762daf73352ff41b2bdf
    Public key SHA-256 919f72ef5d02bec6061dd771b147f12751b4b492bff7fed9ec97bc81e04939f4
    Addresses
    104.21.25.242 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.134.237 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.25.242, 172.67.134.237): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    sovereign-velsant-92-ai.com
    Registered
    2026-07-16 · Eranet International Limited
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-12 01:14 UTC

    Suggest a correction

  93. tacalsports.com US · AS16509 · Amazon.com, Inc.2 addresses
    ListedAmazon Web ServicesListed by CERT PolskaMX absentSPF ~allDMARC quarantineRegistered 12 mo ago
    DetailsHide
    Hostname
    tacalsports.com
    First seen
    2026-11-12 00:16 UTC
    Listing
    CERT Polska listed it 2026-09-16 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 00:49 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by GoDaddy TLS Intermediate CA DV - R1v1 · precertificate
    Valid 2026-11-12 00:11 UTC to 2027-05-29 00:11 UTC
    Logged 2026-11-12 00:11 UTC in GoDaddy Aquamarine2027h1, entry 216,792,981
    SHA-256 2a70a82575454b24b8e41b8d59f184bc7a53ee7dbd829b039e5e8724d702d1c7
    Public key SHA-256 8f8f959b60b123396618af390980e1405a10694c32c4166709d40e2641d82373
    Addresses
    13.248.213.45 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
    76.223.67.189 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
    Amazon Web Services
    Amazon Web Services (13.248.213.45, 76.223.67.189): a cloud provider. It rents servers and addresses to its customers.
    Domain
    tacalsports.com
    Registered
    2025-11-06 · GoDaddy.com, LLC
    MX
    Publishes no mail exchanger
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    DMARC policy p=quarantine
    Checked
    2026-11-12 01:14 UTC

    Suggest a correction

  94. wenxiang01.site US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by NPA 165 (e-commerce)MX absentSPF missingDMARC missingRegistered 10 mo ago
    DetailsHide
    Hostname
    wenxiang01.site
    First seen
    2026-11-12 00:16 UTC
    Listing
    NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-11 13:38 UTC
    Listed
    NPA 165
    1. Observed in the NPA 165 feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1
    Valid 2026-11-11 23:14 UTC to 2027-02-10 00:12 UTC
    Logged 2026-11-12 00:14 UTC in IPng Networks Halloumi2027h1, entry 462,387,620
    SHA-256 1448a9101ed989342a820ba5c1632d8dde1a0d9ff8bdb9a67012bfb2d9635fe3
    Public key SHA-256 84c9b6b56411d3bdef76c775b463cf9d066e61850c1944f2a924b8b7ff38a103
    Addresses
    104.21.57.164 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.164.233 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.57.164, 172.67.164.233): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    wenxiang01.site
    Registered
    2026-01-19 · GoDaddy.com, LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-12 01:14 UTC

    Suggest a correction

  95. ww17.hermanthshocker.com VG · AS40034 · Confluence Networks Inc
    ReportedParking page · Above.comUnder hermanthshocker.com, reported by PhishDestroyMX presentSPF -allDMARC missingRegistered 20 mo ago
    DetailsHide
    Hostname
    ww17.hermanthshocker.com
    First seen
    2026-11-12 00:16 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-12 00:05 UTC
    Reported
    PhishDestroy, listing hermanthshocker.com and the names under it
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by ZeroSSL ECC DV SSL CA 2 · precertificate
    Valid 2026-11-12 00:00 UTC to 2027-02-10 23:59 UTC
    Logged 2026-11-12 00:13 UTC in Geomys Tuscolo2027h1, entry 582,581,011
    SHA-256 fee8c488bcd2423458fcc2ed032a0c455d46f599fe0463af8647863626a6aea9
    Public key SHA-256 0304f03691b69d746930883b30108cd0cc698b7b5e60be8f8cef9b486e3e8155
    PhishDestroy
    Addresses
    199.191.50.190 · British Virgin Islands · AS40034 CONFLUENCE-NETWORK-INC - Confluence Networks Inc · Confluence Networks (parking page)
    Parking page · Above.com
    The registry delegates hermanthshocker.com to Above.com’s nameservers, which answer for it. Above.com: a parking service. It answers for names that are typically for sale or unused. Confluence Networks (199.191.50.190): a parking service. It answers for names that are typically for sale or unused.
    Domain
    hermanthshocker.com
    Registered
    2025-03-08 · Above.com Pty Ltd.
    MX
    Receives mail at park-mx.above.com
    SPF
    SPF record with -all: other senders fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-11 16:59 UTC

    Suggest a correction

  96. www.rainbetpokiesau.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareUnder rainbetpokiesau.com, listed by MetaMaskMX absentSPF missingDMARC missingRegistered 13 mo ago
    DetailsHide
    Hostname
    www.rainbetpokiesau.com
    First seen
    2026-11-12 00:16 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 00:07 UTC
    PhishDestroy: observed back in the feed 2026-10-30 · still listed at the last successful feed check 2026-11-12 00:05 UTC · listed 2 times
    Earlier listing periods: 2026-10-25 to 2026-10-28 (3 days)
    Listed
    MetaMask, listing rainbetpokiesau.com and the names under it
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR2
    Valid 2026-11-11 23:14 UTC to 2027-02-09 23:14 UTC
    Logged 2026-11-12 00:13 UTC in Google ParcelYard2027h1, entry 745,490,427
    SHA-256 0d8061d69f8bb21492f6fcf88f754072130a68b3e313874d7bafc95a9dc88f80
    Public key SHA-256 bdbacf9c1ba165a83a30ba1fe81d073e9c5dce2b7cddc163aaf40cbc89340c26
    Addresses
    104.21.47.130 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.171.39 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.47.130, 172.67.171.39): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    rainbetpokiesau.com
    Registered
    2025-10-22 · Spaceship, Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-11 08:16 UTC

    Suggest a correction

  97. alpivesta-app.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    alpivesta-app.com
    First seen
    2026-11-12 00:12 UTC
    Listing
    CERT Polska listed it 2026-07-17 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 00:49 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1
    Valid 2026-11-11 23:08 UTC to 2027-02-10 00:07 UTC
    Logged 2026-11-12 00:08 UTC in Google ParcelYard2027h1, entry 745,404,136
    SHA-256 cc72924af044796e67e905d8a82eaab449d76d3ddfba69763564aa611a52cd9a
    Public key SHA-256 32a28a9def47654280a94191c3c878b36d4f049c028f855b6ee86af66c3c7842
    Addresses
    104.21.25.22 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.222.8 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.25.22, 172.67.222.8): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    alpivesta-app.com
    Registered
    2026-07-16 · Eranet International Limited
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-12 01:14 UTC

    Suggest a correction

  98. api.luxvision-exchange-system-com.financecryptoworld.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareUnder financecryptoworld.com, listed by CERT PolskaMX presentSPF ~allDMARC missingRegistered 22 mo ago
    DetailsHide
    Hostname
    api.luxvision-exchange-system-com.financecryptoworld.com
    First seen
    2026-11-12 00:12 UTC
    Listing
    CERT Polska listed it 2026-06-12 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 00:49 UTC
    Listed
    CERT Polska, listing financecryptoworld.com and the names under it
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1
    Valid 2026-11-11 23:11 UTC to 2027-02-10 00:11 UTC
    Logged 2026-11-12 00:11 UTC in HARICA Selene2027h1, entry 68,964,180
    SHA-256 2f4ce0713f1b575bd354fdbac4351fd5d4ba55376eac0499b17312503f259306
    Public key SHA-256 26441fc5a2e7eea2138732317e1a66b27d3c4a04a0a4c8b6838306af88bccd42
    Addresses
    104.21.10.130 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.131.121 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.10.130, 172.67.131.121): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    financecryptoworld.com
    Registered
    2025-01-30 · MainReg Inc.
    MX
    Receives mail at mail.financecryptoworld.com
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-11 17:26 UTC

    Suggest a correction

  99. asset-vorax32.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    asset-vorax32.com
    First seen
    2026-11-12 00:12 UTC
    Listing
    CERT Polska listed it 2026-07-17 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 00:49 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-11 23:08 UTC to 2027-02-10 00:06 UTC
    Logged 2026-11-12 00:08 UTC in Google ParcelYard2027h1, entry 745,390,831
    SHA-256 0ee33ee59d78e48e945d9edc517f118ce6ede887850efd23eeea76503c97f8e9
    Public key SHA-256 27fb2d514792fdea8a2b24e1685ee1b1128e90551af3bbb767df989371f70c93
    Addresses
    104.21.89.96 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.157.196 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.89.96, 172.67.157.196): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    asset-vorax32.com
    Registered
    2026-07-16 · Eranet International Limited
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-12 01:14 UTC

    Suggest a correction

  100. careers.1doc-shop.com AE · AS59692 · IQWEB IQWeb FZ-LLC
    ReportedUnder 1doc-shop.com, reported by PhishDestroyMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    careers.1doc-shop.com
    First seen
    2026-11-12 00:12 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-12 00:05 UTC
    Reported
    PhishDestroy, listing 1doc-shop.com and the names under it
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR1
    Valid 2026-11-11 23:09 UTC to 2027-02-09 23:09 UTC
    Logged 2026-11-12 00:08 UTC in Google PlumbersArms2027h1, entry 745,600,705
    SHA-256 44d216afc8fdb42cc75f59880d38478f16da490cc24a1b180a29eec364ba443a
    Public key SHA-256 e0cb6e67b5e8ef244b17fa61fb9afad2387c0de3cc10988c517789e3d7516498
    PhishDestroy
    Addresses
    186.2.175.208 · United Arab Emirates · AS59692 IQWEB IQWeb FZ-LLC
    Domain
    1doc-shop.com
    Registered
    2026-05-13 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-11 13:39 UTC

    Suggest a correction

Showing 101–200 of 5,692 hostnames.Back to the start
How these findings are made

Brand spoofs: findings that impersonate one of the 1,000 most-impersonated brands. The list opens on them; All shows every finding.

Reported: a hostname in a new certificate that PhishTank or PhishDestroy reports, or that CERT Polska, MetaMask, USOM, MODA, NPA 165, JPCERT/CC, the AMF, the FSMA or BaFin lists. When a listing source names the brand imitated or a category, the finding shows it. Phishing host: a brand lookalike that resolves to an address which hosted confirmed phishing in the last 48 hours. Spamhaus DROP: a brand lookalike that resolves to an address on the Spamhaus DROP list. Same certificate: another name on a finding's certificate that resolves to an address on Spamhaus DROP. Suspicious: other names on a finding's certificate, rated high for a hosting-alias name or a lookalike on a phishing host, medium for a lookalike; they join the findings once they have listing evidence of their own. Also under Suspicious: registered domains using a brand’s name that PhishDestroy’s community list includes, rated high when they resolve to an address with no parking or holding signal, medium otherwise.

Brand labels cover the 1,000 most-impersonated brands. A name gets a brand when the brand's token starts a label or follows a hyphen, with a lure word such as "login" or "verify" for common words. Hostnames appear as plain text. How it works · Sources