Live

Live phishing findings

New certificates and domain registrations, with every hostname resolved and checked against phishing reports and bad-address lists. The newest findings, updated hourly.

Updated hourly · 2026-11-12 05:48 UTC
Certificate-log entries · 24 h
343.8M
from 84 distinct feeds
Unique certificates · 24 h
35.3M
each reviewed
Names resolved · 24 h
22.7M
16.7M with an address
Findings · 24 h
6,848
254 of 1,061 brands targeted

3,076 hostnames from the last 24 hours.

The findings have updated. The list starts again from the top.

  1. credionshieldbnk.com US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX presentSPF ~allDMARC policy noneRegistered 4 mo ago
    DetailsHide
    Hostname
    credionshieldbnk.com
    First seen
    2026-11-12 05:46 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-12 00:05 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1
    Valid 2026-09-14 03:21 UTC to 2026-12-13 04:20 UTC
    Logged 2026-11-12 05:45 UTC in IPng Networks Halloumi2026h2a, entry 1,300,210,240
    SHA-256 a27eab35ff6256e490f53135de97c6c4036ddf586e88ac4ee499681c5819297d
    Public key SHA-256 9034b9748a9d6d277637ac7ead5d562f6a93d5650514414576dcb4aa27263063
    PhishDestroy
    Addresses
    104.21.25.132 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.134.66 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.25.132, 172.67.134.66): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    credionshieldbnk.com
    Registered
    2026-07-16 · Spaceship, Inc.
    MX
    Receives mail at _dc-mx.53d584b11ac8.credionshieldbnk.com
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    DMARC policy p=none: reports only
    Checked
    2026-11-12 05:55 UTC

    Suggest a correction

  2. mariashopping.online US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by NPA 165 (e-commerce)MX absentSPF missingDMARC quarantineRegistered 6 mo ago
    DetailsHide
    Hostname
    mariashopping.online
    First seen
    2026-11-12 05:46 UTC
    Listing
    NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 01:38 UTC
    Listed
    NPA 165
    1. Observed in the NPA 165 feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-11-12 04:44 UTC to 2027-02-10 04:44 UTC
    Logged 2026-11-12 05:43 UTC in Let's Encrypt Sycamore2027h1, entry 1,158,891,141
    SHA-256 8630aac06c40e487a42ea55a88ece7ebc8e408fc4c5dd99bb96949f300f228e3
    Public key SHA-256 0296a7a2c49f81e2ca863d3d83c057cb07d7ac1f40451c0bf2e888a8d87915df
    Addresses
    104.21.86.235 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.137.156 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.86.235, 172.67.137.156): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    mariashopping.online
    Registered
    2026-05-19 · GoDaddy.com, LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    DMARC policy p=quarantine
    Checked
    2026-11-12 05:55 UTC

    Suggest a correction

  3. nirusfin-ai.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    nirusfin-ai.com
    First seen
    2026-11-12 05:46 UTC
    Listing
    CERT Polska listed it 2026-07-17 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 03:50 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-12 04:43 UTC to 2027-02-10 05:41 UTC
    Logged 2026-11-12 05:43 UTC in IPng Networks Halloumi2027h1, entry 466,220,787
    SHA-256 6c8fa4091978a5276c075414b33aef59795a20d5760534fdab207e099d6b2a77
    Public key SHA-256 d78c184c27426df8b81ca0fa3b2f95004fe9ff91c91a34b930d419bf2f425170
    Addresses
    104.21.36.13 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.183.14 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.36.13, 172.67.183.14): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    nirusfin-ai.com
    Registered
    2026-07-16 · Eranet International Limited
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-12 05:55 UTC

    Suggest a correction

  4. publiclumen.sbs US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by USOMMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    publiclumen.sbs
    First seen
    2026-11-12 05:46 UTC
    Listing
    USOM listed it 2026-05-20 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 04:30 UTC
    Listed
    USOM
    1. Listed by USOM
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-11-12 04:44 UTC to 2027-02-10 04:44 UTC
    Logged 2026-11-12 05:42 UTC in Geomys Tuscolo2027h1, entry 586,556,888
    SHA-256 2fc7883753eaaf2deae04f9dd455078b8e98f9d69def667743e15bcb14a9573b
    Public key SHA-256 32153c648f0720840f1431bcfe6bc4b78f8753a7bff01e3700de65cf1a62ff09
    Addresses
    104.21.91.104 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.215.157 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.91.104, 172.67.215.157): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    publiclumen.sbs
    Registered
    2026-05-19 · Dynadot Inc
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-12 05:55 UTC

    Suggest a correction

  5. shimano-se.deal-vera.com US · AS13335 · Cloudflare, Inc.
    ListedCloudflareUnder deal-vera.com, listed by CERT PolskaMX absentSPF missingDMARC missingRegistered 3 mo ago
    DetailsHide
    Hostname
    shimano-se.deal-vera.com
    First seen
    2026-11-12 05:46 UTC
    Listing
    CERT Polska listed it 2026-10-17 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 03:50 UTC
    Listed
    CERT Polska, listing deal-vera.com and the names under it
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WR1 · precertificate
    Valid 2026-11-12 04:42 UTC to 2027-02-10 05:41 UTC
    Logged 2026-11-12 05:42 UTC in Geomys Tuscolo2027h1, entry 586,550,447
    SHA-256 d92dd84a9e62224729cb5b062abe7023e1b16a58bf3e2e06e46d492268b55b3b
    Public key SHA-256 534e0a86743c81fa24e882f7f78b2e81f951d91f2c856e0d0b86c69c522756e5
    Addresses
    104.18.13.234 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.18.13.234): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    deal-vera.com
    Registered
    2026-08-18 · Cloudflare, Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-11 17:09 UTC

    Suggest a correction

  6. simsoft.app.br US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 23 mo ago
    DetailsHide
    Hostname
    simsoft.app.br
    First seen
    2026-11-12 05:46 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-12 00:05 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-12 04:44 UTC to 2027-02-10 05:42 UTC
    Logged 2026-11-12 05:44 UTC in DigiCert Wyvern2027h1, entry 508,376,032
    SHA-256 8afc5bd55b6b165bf6847df0597422948c6d7ca9e6845ebcfbd3a2b78b1b3c5c
    Public key SHA-256 56a0d98f1dfb4f889e5ac348031e28ecd3b2edd138df912bd55db522c8dec50a
    PhishDestroy
    Addresses
    104.21.81.224 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.165.100 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.81.224, 172.67.165.100): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    simsoft.app.br
    Registered
    2025-01-04
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-12 03:37 UTC

    Suggest a correction

  7. www.aiconnectors.io US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareUnder aiconnectors.io, reported by PhishDestroyMX presentSPF ~allDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    www.aiconnectors.io
    First seen
    2026-11-12 05:46 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-12 00:05 UTC
    Reported
    PhishDestroy, listing aiconnectors.io and the names under it
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WR1 · precertificate
    Valid 2026-11-12 04:43 UTC to 2027-02-10 05:41 UTC
    Logged 2026-11-12 05:43 UTC in Google PlumbersArms2027h1, entry 750,086,088
    SHA-256 66883493f8f7c8cc2eb4b7320754687e5b34c8c705604ab1dd3fcdcf57e99bd9
    Public key SHA-256 49b619b8d2ac91fed477d364fbb6d7abba05a7fb07078b780c7cfe6e115a93bc
    PhishDestroy
    Addresses
    104.18.22.186 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    104.18.23.186 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.18.22.186, 104.18.23.186): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    aiconnectors.io
    Registered
    2026-07-17 · NameCheap, Inc.
    MX
    Receives mail at eforward1.registrar-servers.com, eforward2.registrar-servers.com, eforward3.registrar-servers.com
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-12 04:45 UTC

    Suggest a correction

  8. www.dannys-auto.sale US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareUnder dannys-auto.sale, reported by PhishDestroyMX presentSPF ~allDMARC policy noneRegistered 6 mo ago
    DetailsHide
    Hostname
    www.dannys-auto.sale
    First seen
    2026-11-12 05:46 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-12 00:05 UTC
    Reported
    PhishDestroy, listing dannys-auto.sale and the names under it
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR1
    Valid 2026-11-12 04:46 UTC to 2027-02-10 04:46 UTC
    Logged 2026-11-12 05:44 UTC in DigiCert Wyvern2027h1, entry 508,382,253
    SHA-256 1351d5ab644ae3dec598c0c5e820e729008930128c2ae16db31b93e6c9b295d3
    Public key SHA-256 b686c646c340815296be8fe02c9a772e24c5aaa967af5f990f13ec31d24b4500
    PhishDestroy
    Addresses
    104.21.51.152 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.182.21 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.51.152, 172.67.182.21): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    dannys-auto.sale
    Registered
    2026-05-08 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Receives mail at route2.mx.cloudflare.net, route1.mx.cloudflare.net, route3.mx.cloudflare.net
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    DMARC policy p=none: reports only
    Checked
    2026-11-11 09:10 UTC

    Suggest a correction

  9. demo.krakenauthtool.org US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareUnder krakenauthtool.org, reported by PhishDestroyMX absentSPF missingDMARC missingRegistered 10 mo ago
    DetailsHide
    Hostname
    demo.krakenauthtool.org
    First seen
    2026-11-12 05:41 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-12 00:05 UTC
    Reported
    PhishDestroy, listing krakenauthtool.org and the names under it
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR1 · precertificate
    Valid 2026-11-12 04:37 UTC to 2027-02-10 04:37 UTC
    Logged 2026-11-12 05:36 UTC in Let's Encrypt Sycamore2027h1, entry 1,158,811,442
    SHA-256 0c834f9fcb16cf27cb8a44487d5281b7fc62b98a0fef4429cf2e011e4e27a2dd
    Public key SHA-256 6bbc6bcab5f63885ee2217ff5278a78d40b2d415970f63b87047c45fb39322c4
    PhishDestroy
    Addresses
    104.21.25.225 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.134.207 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.25.225, 172.67.134.207): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    krakenauthtool.org
    Registered
    2026-01-22 · Cloudflare, Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-11 08:57 UTC

    Suggest a correction

  10. pandemicrecords2020.com US · AS13335 · Cloudflare, Inc.
    ReportedCloudflareReported by PhishDestroyMX presentSPF ~allDMARC policy noneRegistered 2 y ago
    DetailsHide
    Hostname
    pandemicrecords2020.com
    First seen
    2026-11-12 05:41 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-12 00:05 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WR1 · precertificate
    Valid 2026-11-12 04:39 UTC to 2027-02-10 05:38 UTC
    Logged 2026-11-12 05:39 UTC in Let's Encrypt Sycamore2027h1, entry 1,158,849,004
    SHA-256 6909c5500a6bf6f428630aece83e15f989359a993e0a24ec4e779ca2a14d3f95
    Public key SHA-256 8e091eaf03360bbc95189d5d6e124b203875ee3faca675dae81ae255b6ea8019
    PhishDestroy
    Addresses
    23.227.38.73 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (23.227.38.73): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    pandemicrecords2020.com
    Registered
    2024-10-05 · Tucows Domains Inc.
    MX
    Receives mail at mx.pandemicrecords2020.com.cust.b.hostedemail.com
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    DMARC policy p=none: reports only
    Checked
    2026-11-12 05:55 UTC

    Suggest a correction

  11. staging.ledger-and-trust.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareUnder ledger-and-trust.com, listed by MetaMaskMX absentSPF -allDMARC quarantineRegistered 12 d ago
    DetailsHide
    Hostname
    staging.ledger-and-trust.com
    First seen
    2026-11-12 05:41 UTC
    Listing
    MetaMask: first observed in the feed 2026-11-02 · still listed at the last successful feed check 2026-11-12 00:07 UTC
    Listed
    MetaMask, listing ledger-and-trust.com and the names under it
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WR1 · precertificate
    Valid 2026-11-12 04:38 UTC to 2027-02-10 05:38 UTC
    Logged 2026-11-12 05:38 UTC in Google PlumbersArms2027h1, entry 750,033,112
    SHA-256 069dc86b265afad94cf1a1485c2352951e8f4da0f3c85bbb38ff22bcc6ed6f21
    Public key SHA-256 9b523d4bc50c4d0fe6fd41c09768246d5770eda931268a4c0bc0d56265dedd26
    Addresses
    162.159.140.98 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.66.0.96 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (162.159.140.98, 172.66.0.96): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    ledger-and-trust.com
    Registered
    2026-10-31 · Cloudflare, Inc.
    MX
    Publishes no mail exchanger
    SPF
    SPF record with -all: other senders fail
    DMARC
    DMARC policy p=quarantine
    Checked
    2026-11-12 05:55 UTC

    Suggest a correction

  12. vitakruid-nl.buy-vera.com US · AS13335 · Cloudflare, Inc.
    ListedCloudflareUnder buy-vera.com, listed by CERT PolskaMX absentSPF missingDMARC missingRegistered 3 mo ago
    DetailsHide
    Hostname
    vitakruid-nl.buy-vera.com
    First seen
    2026-11-12 05:41 UTC
    Listing
    CERT Polska listed it 2026-09-09 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 03:50 UTC
    Listed
    CERT Polska, listing buy-vera.com and the names under it
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WR1 · precertificate
    Valid 2026-11-12 04:40 UTC to 2027-02-10 05:38 UTC
    Logged 2026-11-12 05:40 UTC in Google ParcelYard2027h1, entry 749,856,778
    SHA-256 18647896d117c35ca1eff88ccb58c7663546c29b31e48f9a17f8f2872dbb7547
    Public key SHA-256 027eb9970e7d2962449939ca3946a5269ede4f7a797f639aa765d05fca94757e
    Addresses
    104.18.13.234 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.18.13.234): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    buy-vera.com
    Registered
    2026-08-21 · Cloudflare, Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-11 10:21 UTC

    Suggest a correction

  13. jxkljpff.shop US · AS13335 · Cloudflare, Inc.
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 59 d ago
    DetailsHide
    Hostname
    jxkljpff.shop
    First seen
    2026-11-12 05:36 UTC
    Listing
    CERT Polska listed it 2026-09-16 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 03:50 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-12 04:33 UTC to 2027-02-10 04:33 UTC
    Logged 2026-11-12 05:32 UTC in Google ParcelYard2027h1, entry 749,763,577
    SHA-256 1756be0ce9afae7df2e39e1b87b6b2ab604041cc57b4c63b3114eb630cdae1d5
    Public key SHA-256 30fd77cf2fc8cd5e0b2b20784f0f2c1a1b5160be5c8963b406c725276cce0627
    Addresses
    104.17.231.54 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.17.231.54): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    jxkljpff.shop
    Registered
    2026-09-14 · Web Commerce Communication Ltd.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-12 05:55 UTC

    Suggest a correction

  14. kraksite-cc.pages.dev US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMask
    DetailsHide
    Hostname
    kraksite-cc.pages.dev
    First seen
    2026-11-12 05:36 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 00:07 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-12 04:34 UTC to 2027-02-10 05:32 UTC
    Logged 2026-11-12 05:34 UTC in Let's Encrypt Sycamore2027h1, entry 1,158,795,842
    SHA-256 742e51e2811eefc23c5bc62ca862bf1fdb95ad8aa3351e53d60a3c79c1f373b5
    Public key SHA-256 6dd58fa824bc6ab6d8fab55dd306c2bbbd009640d0c5083e0653c0acde7d3c41
    Addresses
    172.66.44.210 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.66.47.46 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (172.66.44.210, 172.66.47.46): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.

    Suggest a correction

  15. marea-fortencia-ai.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    marea-fortencia-ai.com
    First seen
    2026-11-12 05:36 UTC
    Listing
    CERT Polska listed it 2026-07-18 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 03:50 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1
    Valid 2026-09-14 02:43 UTC to 2026-12-13 03:43 UTC
    Logged 2026-11-12 05:31 UTC in DigiCert Wyvern2026h2, entry 2,220,208,996
    SHA-256 01dc4b8c88d9af94db2c26ece243907fc6d6d7faf3c8917be4ac0f94d6151170
    Public key SHA-256 71d0f7faf87e39b3cfe3c5310cdbabeac749727d8ca46e2bcbf7347e6a5bc407
    Addresses
    104.21.88.62 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.173.82 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.88.62, 172.67.173.82): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    marea-fortencia-ai.com
    Registered
    2026-07-16 · Eranet International Limited
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-12 05:55 UTC

    Suggest a correction

  16. oferty-moje-3022.casa US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 59 d ago
    DetailsHide
    Hostname
    oferty-moje-3022.casa
    First seen
    2026-11-12 05:36 UTC
    Listing
    CERT Polska listed it 2026-09-14 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 03:50 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-11-12 04:37 UTC to 2027-02-10 04:37 UTC
    Logged 2026-11-12 05:35 UTC in Google ParcelYard2027h1, entry 749,806,070
    SHA-256 74b544f0a42d737eb6327d71bf87c442a1daab6b5a13dc04ce17842428d4dead
    Public key SHA-256 34ff787da2d7800541ffa423ac01070d39d048297bd0a7a36609a08d458ca457
    Addresses
    104.21.71.247 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.172.153 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.71.247, 172.67.172.153): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    oferty-moje-3022.casa
    Registered
    2026-09-14 · Dynadot Inc
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-12 05:55 UTC

    Suggest a correction

  17. ventofinance-app.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    ventofinance-app.com
    First seen
    2026-11-12 05:36 UTC
    Listing
    CERT Polska listed it 2026-07-19 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 03:50 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1
    Valid 2026-09-13 23:33 UTC to 2026-12-13 00:31 UTC
    Logged 2026-11-12 05:34 UTC in DigiCert Wyvern2026h2, entry 2,220,215,349
    SHA-256 95c7e36be90cb50c6567cc9a76c59004c06fc8e72636749d7c8db7e75ed17df2
    Public key SHA-256 20fb2d5293626842163335c4cce943ac01fdaedbbf73984e86dbc2eda8a1571f
    Addresses
    104.21.18.65 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.180.182 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.18.65, 172.67.180.182): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    ventofinance-app.com
    Registered
    2026-07-16 · Eranet International Limited
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-12 05:55 UTC

    Suggest a correction

  18. chiarofondovio-app.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    chiarofondovio-app.com
    First seen
    2026-11-12 05:31 UTC
    Listing
    CERT Polska listed it 2026-07-17 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 03:50 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-12 04:29 UTC to 2027-02-10 05:28 UTC
    Logged 2026-11-12 05:29 UTC in Let's Encrypt Willow2027h1, entry 1,112,642,565
    SHA-256 6bad169ecf43e3d91d643dc1db59032bc84c69588c708303373f2c34d4c9da7a
    Public key SHA-256 b3e255d6ff3d7a0aabbcd910be384a757594d961adb446955895b6382849d6ab
    Addresses
    104.21.55.249 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.174.209 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.55.249, 172.67.174.209): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    chiarofondovio-app.com
    Registered
    2026-07-16 · Eranet International Limited
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-12 05:55 UTC

    Suggest a correction

  19. dl001.etherbank.net US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareUnder etherbank.net, reported by PhishDestroyMX absentSPF missingDMARC missingRegistered 10 mo ago
    DetailsHide
    Hostname
    dl001.etherbank.net
    First seen
    2026-11-12 05:31 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-12 00:05 UTC
    Reported
    PhishDestroy, listing etherbank.net and the names under it
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-12 04:25 UTC to 2027-02-10 05:25 UTC
    Logged 2026-11-12 05:25 UTC in Google ParcelYard2027h1, entry 749,687,746
    SHA-256 172dd02ef95ff3d06f41108d3306b2143b7bf7609bd600a77ec70fb95722e994
    Public key SHA-256 04f9dfbede180232e7384058176a4363678b5a3e7e40e7d7d0d4651c9c9b019c
    PhishDestroy
    Addresses
    104.21.93.125 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.209.226 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.93.125, 172.67.209.226): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    etherbank.net
    Registered
    2026-01-18 · Cloudflare, Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-11 23:12 UTC

    Suggest a correction

  20. axeovixai-app.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    axeovixai-app.com
    First seen
    2026-11-12 05:26 UTC
    Listing
    CERT Polska listed it 2026-07-17 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 03:50 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-12 04:23 UTC to 2027-02-10 05:22 UTC
    Logged 2026-11-12 05:23 UTC in Google ParcelYard2027h1, entry 749,661,586
    SHA-256 60088d283163d07efbdaf7b669c90cc6a01c88edbf2ad225fc609c1dce3aa3bb
    Public key SHA-256 31ba5d3033fd08d2ea06764f03a155860a7e9703ebb8bb890dcc62f03c1b0ce7
    Addresses
    104.21.7.122 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.130.77 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.7.122, 172.67.130.77): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    axeovixai-app.com
    Registered
    2026-07-16 · Eranet International Limited
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-12 05:55 UTC

    Suggest a correction

  21. ledger-com-us-app-start.pages.dev US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMask
    DetailsHide
    Hostname
    ledger-com-us-app-start.pages.dev
    First seen
    2026-11-12 05:26 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 00:07 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-12 04:23 UTC to 2027-02-10 05:21 UTC
    Logged 2026-11-12 05:23 UTC in DigiCert Wyvern2027h1, entry 508,168,340
    SHA-256 b29702d26ea46ac8d3b9381729c42a17da8877838630172e83bcace384797c10
    Public key SHA-256 5bf90f5822b3fc7ca04483e8803fa87838067b500df12bf3c40bed3ae10c8cb5
    Addresses
    172.66.44.155 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.66.47.101 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (172.66.44.155, 172.66.47.101): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.

    Suggest a correction

  22. revgrox-ai.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    revgrox-ai.com
    First seen
    2026-11-12 05:26 UTC
    Listing
    CERT Polska listed it 2026-07-18 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 03:50 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-12 04:23 UTC to 2027-02-10 05:22 UTC
    Logged 2026-11-12 05:23 UTC in Google ParcelYard2027h1, entry 749,658,846
    SHA-256 50f92929863d103f300032a15f2d2bd25168bb13f57ac7db5d164b8a3ffc4752
    Public key SHA-256 db91daad0cf4a65d2f4de2dce146421bf4f88d1dc9ee89edf57c7f6d8a7c1c5a
    Addresses
    104.21.92.142 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.195.48 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.92.142, 172.67.195.48): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    revgrox-ai.com
    Registered
    2026-07-16 · Eranet International Limited
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-12 05:55 UTC

    Suggest a correction

  23. xaicore-fxempire.com US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 12 mo ago
    DetailsHide
    Hostname
    xaicore-fxempire.com
    First seen
    2026-11-12 05:26 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-12 00:05 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1
    Valid 2026-09-14 05:30 UTC to 2026-12-13 06:30 UTC
    Logged 2026-11-12 05:24 UTC in Let's Encrypt Sycamore2026h2, entry 1,102,999,531
    SHA-256 4b80a7d02f275381b38d1e6e422264f41fb5cc94044f7fd2351290eb00499c1f
    Public key SHA-256 cbaf32818c0a21ccdfcc3406409a65337c743a83bdf68c26c11ad01471ff1e42
    PhishDestroy
    Addresses
    104.21.39.148 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.170.209 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.39.148, 172.67.170.209): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    xaicore-fxempire.com
    Registered
    2025-11-23 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-12 05:30 UTC

    Suggest a correction

  24. yeldunravu-belgium.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    yeldunravu-belgium.com
    First seen
    2026-11-12 05:26 UTC
    Listing
    CERT Polska listed it 2026-09-14 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 03:50 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1
    Valid 2026-11-12 04:23 UTC to 2027-02-10 05:21 UTC
    Logged 2026-11-12 05:25 UTC in Sectigo Monument2027h1, entry 139,483,781
    SHA-256 a4859dffd3648844aa062815ff3e24a6ceece41b52de16a8c7fc646698632218
    Public key SHA-256 a024e4e310f8bae3d525f108d40449543d5e574a1709fe55f299af7ef757eda9
    Addresses
    104.21.83.6 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.210.53 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.83.6, 172.67.210.53): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    yeldunravu-belgium.com
    Registered
    2026-07-17 · Dynadot Inc
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-12 05:55 UTC

    Suggest a correction

  25. crescivoltaai-app.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    crescivoltaai-app.com
    First seen
    2026-11-12 05:21 UTC
    Listing
    CERT Polska listed it 2026-07-17 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 03:50 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-12 04:16 UTC to 2027-02-10 05:14 UTC
    Logged 2026-11-12 05:16 UTC in Google ParcelYard2027h1, entry 749,577,126
    SHA-256 ba0af2795bd9c21ac8e77c6bf5b94530320749460e8e37ecc4438a3f4f7ef677
    Public key SHA-256 b8ec33e98c2c7afa8b53e62b7533c12eb5c804dd3911978e5bf5b633de8a7256
    Addresses
    104.21.80.121 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.181.11 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.80.121, 172.67.181.11): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    crescivoltaai-app.com
    Registered
    2026-07-16 · Eranet International Limited
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-12 05:55 UTC

    Suggest a correction

  26. gvvacademy.com US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 3 y ago
    DetailsHide
    Hostname
    gvvacademy.com
    First seen
    2026-11-12 05:21 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-12 00:05 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-12 04:15 UTC to 2027-02-10 05:12 UTC
    Logged 2026-11-12 05:15 UTC in Google ParcelYard2027h1, entry 749,564,497
    SHA-256 864fa36fcf4c6db8d5b9b857286887902915899fcfd57ecaff696eab347696e9
    Public key SHA-256 4dacdacb15b953f3a8a75567ecc99a4990fed0a2bd8bde520bdafec84c84c336
    PhishDestroy
    Addresses
    104.21.23.128 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.211.71 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.23.128, 172.67.211.71): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    gvvacademy.com
    Registered
    2023-05-31 · GoDaddy.com, LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-12 05:55 UTC

    Suggest a correction

  27. jysk-depend.shop US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 59 d ago
    DetailsHide
    Hostname
    jysk-depend.shop
    First seen
    2026-11-12 05:21 UTC
    Listing
    CERT Polska listed it 2026-09-15 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 03:50 UTC
    PhishDestroy: first observed in the feed 2026-10-31 · still listed at the last successful feed check 2026-11-12 00:05 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-12 04:16 UTC to 2027-02-10 05:16 UTC
    Logged 2026-11-12 05:16 UTC in Geomys Tuscolo2027h1, entry 586,258,254
    SHA-256 37ca6db73d175f1a71334195ae7f4c332c938096dde875bc948539a43490b463
    Public key SHA-256 617ba05c3ed7365be821be4791f5d540e893cb3f7addf0c7cf1d7ff70561c69e
    Addresses
    104.21.20.138 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.192.241 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.20.138, 172.67.192.241): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    jysk-depend.shop
    Registered
    2026-09-14 · Dynadot Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-12 05:25 UTC

    Suggest a correction

  28. metamask.team US · AS13335 · Cloudflare, Inc.4 addressesMetaMask
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    metamask.team
    First seen
    2026-11-12 05:21 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 00:07 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-11-12 04:21 UTC to 2027-02-10 04:21 UTC
    Logged 2026-11-12 05:19 UTC in Google ParcelYard2027h1, entry 749,611,534
    SHA-256 7b90eead5a136fbad6ac656d5593acee6bc30bf7f5afa0df8bc29993f13c32bc
    Public key SHA-256 eaf2d2192657a0bb77b864dcdf52dd4edaa2debf7e8847a6d19b29adb9a1d70d
    Brand
    MetaMask
    Addresses
    104.21.61.17 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.204.225 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3031::ac43:cce1
    2606:4700:3036::6815:3d11
    Cloudflare
    Cloudflare (104.21.61.17, 172.67.204.225): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    metamask.team
    Registered
    2026-05-19 · Devexpanse Ltd d/b/a Regery.com
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-12 05:25 UTC

    Suggest a correction

  29. ripplesoc.com US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    ripplesoc.com
    First seen
    2026-11-12 05:21 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-12 00:05 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-11-12 04:21 UTC to 2027-02-10 04:21 UTC
    Logged 2026-11-12 05:19 UTC in IPng Networks Gouda2027h1, entry 391,412,085
    SHA-256 5cb5a7291d1deaf25532ab8af1aea78705982234e8e2db9139b868ce37cbfea0
    Public key SHA-256 d6dff57c708a4b1c09ce6634171834a3795243e8edc09cc244859bef8842ce6f
    PhishDestroy
    Addresses
    104.21.91.34 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.165.96 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.91.34, 172.67.165.96): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    ripplesoc.com
    Registered
    2026-05-19 · Atak Domain Bilgi Teknolojileri A.S.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-12 05:55 UTC

    Suggest a correction

  30. www.testdisk.app US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareUnder testdisk.app, listed by MetaMaskMX absentSPF missingDMARC missingRegistered 8 mo ago
    DetailsHide
    Hostname
    www.testdisk.app
    First seen
    2026-11-12 05:21 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 00:07 UTC
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-12 00:05 UTC
    Listed
    MetaMask, listing testdisk.app and the names under it
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR2
    Valid 2026-11-12 04:16 UTC to 2027-02-10 04:16 UTC
    Logged 2026-11-12 05:15 UTC in Google ParcelYard2027h1, entry 749,557,757
    SHA-256 b35c12e45b1898ad92dbd528c1bbf6461c4357f7d8c83a948ece354b6f01f034
    Public key SHA-256 a7e78a6a4a5be7e6f2fafc92d2235017f958757b2226a19677c8d79f037222da
    Addresses
    104.21.9.236 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.131.17 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.9.236, 172.67.131.17): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    testdisk.app
    Registered
    2026-03-03 · Namecheap Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-11 08:09 UTC

    Suggest a correction

  31. 19599993333.com US · AS13335 · Cloudflare, Inc.
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 4 y ago
    DetailsHide
    Hostname
    19599993333.com
    First seen
    2026-11-12 05:15 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-12 00:05 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-12 04:14 UTC to 2027-02-10 05:13 UTC
    Logged 2026-11-12 05:14 UTC in Geomys Tuscolo2027h1, entry 586,242,697
    SHA-256 a21302601fdf20140f23e11a2bed8acfa2894244dc88054ca727e0ea24d7decb
    Public key SHA-256 160310f209325eca88f3ff113052df30b51fed5dc93fb9296d6a8681f89bf4d2
    PhishDestroy
    Addresses
    23.145.152.202 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (23.145.152.202): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    19599993333.com
    Registered
    2022-06-13 · GoDaddy.com, LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-12 05:20 UTC

    Suggest a correction

  32. bornsevut-app.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    bornsevut-app.com
    First seen
    2026-11-12 05:15 UTC
    Listing
    CERT Polska listed it 2026-07-17 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 03:50 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1
    Valid 2026-11-12 04:14 UTC to 2027-02-10 05:13 UTC
    Logged 2026-11-12 05:14 UTC in GoDaddy Aquamarine2027h1, entry 217,961,466
    SHA-256 54304261c06047a5c040f1e3775de111ea889c4fed46e99344e23ca1bc70f8e3
    Public key SHA-256 9feee267359aecbc70e93e4d13e456f654c5824fe246a7f777391a4508bb1a83
    Addresses
    104.21.49.117 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.162.120 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.49.117, 172.67.162.120): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    bornsevut-app.com
    Registered
    2026-07-16 · Eranet International Limited
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-12 05:55 UTC

    Suggest a correction

  33. jaxx-wallet.us US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX presentSPF -allDMARC missingRegistered 5 mo ago
    DetailsHide
    Hostname
    jaxx-wallet.us
    First seen
    2026-11-12 05:15 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-12 00:05 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-12 04:11 UTC to 2027-02-10 05:10 UTC
    Logged 2026-11-12 05:12 UTC in DigiCert Wyvern2027h1, entry 508,066,199
    SHA-256 02c559438c5bafa3a9d314c3122e4ad88a76d523fc23ffdffca1f976c6d205a3
    Public key SHA-256 b010a462230a7728b6c861bc0e2d5e4f110ae86d5aa486704ce60a32ea7c71cd
    PhishDestroy
    Addresses
    104.21.56.240 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.188.48 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.56.240, 172.67.188.48): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    jaxx-wallet.us
    Registered
    2026-06-07 · Spaceship, Inc.
    MX
    Receives mail at mx.stackmail.com
    SPF
    SPF record with -all: other senders fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-12 05:55 UTC

    Suggest a correction

  34. ravelelia-ai.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    ravelelia-ai.com
    First seen
    2026-11-12 05:15 UTC
    Listing
    CERT Polska listed it 2026-07-18 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 03:50 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-12 04:15 UTC to 2027-02-10 05:13 UTC
    Logged 2026-11-12 05:15 UTC in DigiCert Wyvern2027h1, entry 508,088,965
    SHA-256 6ab40c68e32127632251b10e12f3c19b774bff020438cae5f7477940e465741c
    Public key SHA-256 3362a1983c85c4f89238b7ba23310ecac366c1042d70693b6cd2f5ba648b8703
    Addresses
    104.21.30.74 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.172.62 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.30.74, 172.67.172.62): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    ravelelia-ai.com
    Registered
    2026-07-16 · Eranet International Limited
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-12 05:55 UTC

    Suggest a correction

  35. 598437coinbase.com US · AS13335 · Cloudflare, Inc.4 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    598437coinbase.com
    First seen
    2026-11-12 05:10 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 00:07 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-11-12 04:11 UTC to 2027-02-10 04:11 UTC
    Logged 2026-11-12 05:10 UTC in DigiCert Sphinx2027h1, entry 450,948,280
    SHA-256 34a22ee5d5c42dff014468a7755756a17941c6f47197ff104bfa233c8dbdf243
    Public key SHA-256 43a369ccfcbb9240c56cf170f66afcaee5fe01dd7361d319a3bb8d79cdcff48d
    Addresses
    104.21.19.235 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.190.120 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3030::ac43:be78
    2606:4700:3035::6815:13eb
    Cloudflare
    Cloudflare (104.21.19.235, 172.67.190.120): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    598437coinbase.com
    Registered
    2026-05-19 · Atak Domain Bilgi Teknolojileri A.S.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-12 05:55 UTC

    Suggest a correction

  36. bluequbitai-pro.pages.dev US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT Polska
    DetailsHide
    Hostname
    bluequbitai-pro.pages.dev
    First seen
    2026-11-12 05:10 UTC
    Listing
    CERT Polska listed it 2026-10-25 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 03:50 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-09-30 18:40 UTC to 2026-12-29 18:40 UTC
    Logged 2026-11-12 05:09 UTC in DigiCert Wyvern2026h2, entry 2,220,177,810
    SHA-256 6420732e478927270b1cea1ff577a3f169df7244f08d65b25204bb4e030f4828
    Public key SHA-256 83fb6fb753eca6c3aa056df684d9eab5a0763beb82292af2ecd46d33a391acfe
    Addresses
    172.66.44.58 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.66.47.198 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (172.66.44.58, 172.66.47.198): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.

    Suggest a correction

  37. connect-ledgre.pages.dev US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMask
    DetailsHide
    Hostname
    connect-ledgre.pages.dev
    First seen
    2026-11-12 05:10 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 00:07 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1
    Valid 2026-11-12 04:06 UTC to 2027-02-10 05:05 UTC
    Logged 2026-11-12 05:06 UTC in DigiCert Wyvern2027h1, entry 508,014,562
    SHA-256 cdc8dc21ef846474852e2673a517d3d477e9965c7d8d673307c428ff084fe16a
    Public key SHA-256 05e15026ecaeb3479b493769f7e335e99a05b976a05595cec9b02a9b522d8ddc
    Addresses
    172.66.44.244 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.66.47.12 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (172.66.44.244, 172.66.47.12): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.

    Suggest a correction

  38. enter-hyperfoundations.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    enter-hyperfoundations.com
    First seen
    2026-11-12 05:10 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 00:07 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-12 04:06 UTC to 2027-02-10 04:06 UTC
    Logged 2026-11-12 05:05 UTC in Google PlumbersArms2027h1, entry 749,626,753
    SHA-256 2ee01e3847e66166b010ea9622a82c1de98e08cab39b33cf621554d6d4e7477f
    Public key SHA-256 0215673bfcbdc14e41673de23668dc4e991713dc33ea52f2dee722ab38b0e5f3
    Addresses
    104.21.95.182 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.170.249 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.95.182, 172.67.170.249): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    enter-hyperfoundations.com
    Registered
    2026-05-18 · Dynadot Inc
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-12 05:55 UTC

    Suggest a correction

  39. hsven.shop US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by NPA 165 (e-commerce)MX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    hsven.shop
    First seen
    2026-11-12 05:10 UTC
    Listing
    NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 01:38 UTC
    Listed
    NPA 165
    1. Observed in the NPA 165 feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-11-12 04:08 UTC to 2027-02-10 04:08 UTC
    Logged 2026-11-12 05:06 UTC in IPng Networks Halloumi2027h1, entry 465,810,694
    SHA-256 a344fcd1c049a5a895a955ca64a9a77e861c9f386f93ecc5f0647cb0b4d4f96f
    Public key SHA-256 e56c0f5b47ff419dc8fce820341cc14c8ee42c9def6ad20fca3d74466369618c
    Addresses
    104.21.9.216 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.131.10 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.9.216, 172.67.131.10): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    hsven.shop
    Registered
    2026-05-19 · GoDaddy.com LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-12 05:55 UTC

    Suggest a correction

  40. rtbry.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    rtbry.com
    First seen
    2026-11-12 05:10 UTC
    Listing
    CERT Polska listed it 2026-05-20 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 03:50 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-11-12 04:07 UTC to 2027-02-10 04:07 UTC
    Logged 2026-11-12 05:06 UTC in IPng Networks Halloumi2027h1, entry 465,802,763
    SHA-256 37f04a26bc6888809a63b4e09b3ecc5c8a9c933407bd0a98c42083c3bb60c451
    Public key SHA-256 bcca59756f8cf64ab28445ae240b459c43493a0213da111c5e0d875e0b40cc80
    Addresses
    104.21.68.28 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.185.122 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.68.28, 172.67.185.122): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    rtbry.com
    Registered
    2026-05-18 · Cloud Yuqu LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-12 05:55 UTC

    Suggest a correction

  41. 111pj8.cc US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 12 mo ago
    DetailsHide
    Hostname
    111pj8.cc
    First seen
    2026-11-12 05:06 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-12 00:05 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1
    Valid 2026-11-12 04:01 UTC to 2027-02-10 04:59 UTC
    Logged 2026-11-12 05:01 UTC in DigiCert Wyvern2027h1, entry 507,949,907
    SHA-256 512880ef8f438b9ae69e0f5f923539eaf8e63242746f0261acaa0a4d863bec74
    Public key SHA-256 85c8c2640b2e8e78e9bb1492fcf25eb4cd2ce6d4f652441f25a18614c099ed01
    PhishDestroy
    Addresses
    104.21.35.167 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.177.173 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.35.167, 172.67.177.173): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    111pj8.cc
    Registered
    2025-11-21 · Dynadot Inc
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-12 05:09 UTC

    Suggest a correction

  42. 11ysb8.com US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 8 mo ago
    DetailsHide
    Hostname
    11ysb8.com
    First seen
    2026-11-12 05:06 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-12 00:05 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-11-12 04:05 UTC to 2027-02-10 04:05 UTC
    Logged 2026-11-12 05:04 UTC in DigiCert Sphinx2027h1, entry 450,892,734
    SHA-256 48ffa748389fe100003a68d468aa545951d1a3f90a6bc3becafb21e4e959b33e
    Public key SHA-256 2f6a2d9723381ae74346a932b5408535c50a8a066fd543bc3a76c46a0ee3a010
    PhishDestroy
    Addresses
    104.21.94.87 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.221.147 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.94.87, 172.67.221.147): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    11ysb8.com
    Registered
    2026-03-17 · Hello Internet Corp
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-12 05:55 UTC

    Suggest a correction

  43. 482932-coinspot.com US · AS13335 · Cloudflare, Inc.4 addressesCoinSpot
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 59 d ago
    DetailsHide
    Hostname
    482932-coinspot.com
    First seen
    2026-11-12 05:06 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 00:07 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-11-12 04:06 UTC to 2027-02-10 04:06 UTC
    Logged 2026-11-12 05:04 UTC in DigiCert Sphinx2027h1, entry 450,901,212
    SHA-256 98906de5590dd077e649bf1956b8d99aea9a151994ab3252bd973af00d607270
    Public key SHA-256 70e4a2a5a5f3eac355b37965999062c962c16719d4bc0ea13ef0097c8c8ed032
    Brand
    CoinSpot
    Addresses
    104.21.31.70 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.175.64 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3031::ac43:af40
    2606:4700:3037::6815:1f46
    Cloudflare
    Cloudflare (104.21.31.70, 172.67.175.64): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    482932-coinspot.com
    Registered
    2026-09-14 · CNOBIN INFORMATION TECHNOLOGY LIMITED
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-12 05:15 UTC

    Suggest a correction

  44. checker-hylo.app US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 59 d ago
    DetailsHide
    Hostname
    checker-hylo.app
    First seen
    2026-11-12 05:06 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 00:07 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-12 04:04 UTC to 2027-02-10 05:03 UTC
    Logged 2026-11-12 05:04 UTC in DigiCert Wyvern2027h1, entry 507,991,655
    SHA-256 135d1342b6b7a106eaea60f380d2e09f660aade51794b6af950772eb611c41dc
    Public key SHA-256 1ac38616215b27b628c6db730fbe8c39229e759376959b360aa3868c9e3112b9
    Addresses
    104.21.91.157 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.175.86 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.91.157, 172.67.175.86): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    checker-hylo.app
    Registered
    2026-09-14 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-12 05:55 UTC

    Suggest a correction

  45. militaria-discount.shop US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    militaria-discount.shop
    First seen
    2026-11-12 05:06 UTC
    Listing
    CERT Polska listed it 2026-05-22 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 03:50 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-11-12 04:06 UTC to 2027-02-10 04:06 UTC
    Logged 2026-11-12 05:05 UTC in DigiCert Wyvern2027h1, entry 507,995,049
    SHA-256 796ff8253bb6e02c8d04807658a52a4a015b047f4a64b3fe1c2abde2c4e5edc3
    Public key SHA-256 9a253eb99320fba2f9aab69d4e98f2bea69f00fbe983a8d953aa3e87ee04b335
    Addresses
    104.21.72.143 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.151.95 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.72.143, 172.67.151.95): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    militaria-discount.shop
    Registered
    2026-05-19 · Spaceship, Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-12 05:55 UTC

    Suggest a correction

  46. tiasakura-app.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    tiasakura-app.com
    First seen
    2026-11-12 05:06 UTC
    Listing
    CERT Polska listed it 2026-07-17 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 03:50 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1
    Valid 2026-11-12 04:00 UTC to 2027-02-10 04:57 UTC
    Logged 2026-11-12 05:00 UTC in DigiCert Wyvern2027h1, entry 507,938,345
    SHA-256 40ede5f6f459b171f162c6d8efd3e35e0fd6acaeaeb5a5b54418973c34bbe2b3
    Public key SHA-256 7a5916574d8c9c3c004b9156dc2ba094d2d19f2e50e097984e6bacf0cf1d9222
    Addresses
    104.21.31.226 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.180.64 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.31.226, 172.67.180.64): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    tiasakura-app.com
    Registered
    2026-07-16 · Eranet International Limited
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-12 05:55 UTC

    Suggest a correction

  47. api.zetaprofitronsoftware-com.financecryptoworld.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareUnder financecryptoworld.com, listed by CERT PolskaMX presentSPF ~allDMARC missingRegistered 22 mo ago
    DetailsHide
    Hostname
    api.zetaprofitronsoftware-com.financecryptoworld.com
    First seen
    2026-11-12 05:00 UTC
    Listing
    CERT Polska listed it 2026-06-12 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 03:50 UTC
    Listed
    CERT Polska, listing financecryptoworld.com and the names under it
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1
    Valid 2026-09-14 01:47 UTC to 2026-12-13 02:46 UTC
    Logged 2026-11-12 04:57 UTC in DigiCert Wyvern2026h2, entry 2,220,159,404
    SHA-256 2393a330af5a59175ed0e887d548d195b7f063a8038e68022c26d07eb31f49fa
    Public key SHA-256 ac1a2727042b80a0d73bc0fde8fba4415ce52672ca5955359a81d3bde88b8ebc
    Addresses
    104.21.10.130 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.131.121 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.10.130, 172.67.131.121): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    financecryptoworld.com
    Registered
    2025-01-30 · MainReg Inc.
    MX
    Receives mail at mail.financecryptoworld.com
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-11 17:26 UTC

    Suggest a correction

  48. aurextradeai-app.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    aurextradeai-app.com
    First seen
    2026-11-12 05:00 UTC
    Listing
    CERT Polska listed it 2026-07-18 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 03:50 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1
    Valid 2026-09-14 01:31 UTC to 2026-12-13 02:29 UTC
    Logged 2026-11-12 04:57 UTC in DigiCert Wyvern2026h2, entry 2,220,158,783
    SHA-256 8c93756b9bb0b9acf49de04831c9b0996f500b5d524d9e1505cae3e59d77154b
    Public key SHA-256 8329176b9a49fafc2bd5a263d71e191dfc383ee27f10ba13f54d4c735b72ff98
    Addresses
    104.21.25.8 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.221.137 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.25.8, 172.67.221.137): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    aurextradeai-app.com
    Registered
    2026-07-16 · Eranet International Limited
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-12 05:55 UTC

    Suggest a correction

  49. rewards-paal-ai-6da.pages.dev US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMask
    DetailsHide
    Hostname
    rewards-paal-ai-6da.pages.dev
    First seen
    2026-11-12 05:00 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 00:07 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-12 04:00 UTC to 2027-02-10 04:58 UTC
    Logged 2026-11-12 05:00 UTC in Google PlumbersArms2027h1, entry 749,557,471
    SHA-256 b8ff31c8e00daa5c79a9a95ac16ed008064080f8b89f663a66f3f215ebc93d6d
    Public key SHA-256 5047c36428aab351f9a54d3ddbdb97a5ad055bb904500d7c01e9a50783a915fa
    Addresses
    172.66.44.60 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.66.47.196 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (172.66.44.60, 172.66.47.196): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.

    Suggest a correction

  50. dappfixresolver.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX presentSPF ~allDMARC policy noneRegistered 6 mo ago
    DetailsHide
    Hostname
    dappfixresolver.com
    First seen
    2026-11-12 04:57 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 00:07 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-11-12 03:54 UTC to 2027-02-10 03:54 UTC
    Logged 2026-11-12 04:53 UTC in Google ParcelYard2027h1, entry 749,290,108
    SHA-256 e1b3b5d43d9c83ea313e350f9b409e5d85a08987b571bbdf881c2136b460ff5a
    Public key SHA-256 a4f5d6ac3c72d568dce9c3854c86a0a752378470736bbf39b4f277cfcd806f97
    Addresses
    104.21.61.112 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.209.153 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.61.112, 172.67.209.153): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    dappfixresolver.com
    Registered
    2026-05-17 · Gname.com Pte. Ltd.
    MX
    Receives mail at _dc-mx.5706a165d2b0.dappfixresolver.com
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    DMARC policy p=none: reports only
    Checked
    2026-11-12 05:55 UTC

    Suggest a correction

  51. egyouxuantw.shop US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by NPA 165 (healthcare)MX absentSPF missingDMARC missingRegistered 12 mo ago
    DetailsHide
    Hostname
    egyouxuantw.shop
    First seen
    2026-11-12 04:57 UTC
    Listing
    NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 01:38 UTC
    Listed
    NPA 165
    1. Observed in the NPA 165 feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-12 03:56 UTC to 2027-02-10 04:54 UTC
    Logged 2026-11-12 04:56 UTC in Google PlumbersArms2027h1, entry 749,520,080
    SHA-256 8d0dc669ac8a240ed13bddb4ee5316fc7dcf6e8ded58e258c7ac598b5c721571
    Public key SHA-256 f16f58514219b1b43ce38c5e5072ccc24ccd094ba51f37b5ceac68686a6b65c0
    Addresses
    104.21.68.151 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.196.82 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.68.151, 172.67.196.82): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    egyouxuantw.shop
    Registered
    2025-11-22 · GoDaddy.com LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-12 05:55 UTC

    Suggest a correction

  52. gxcctw.vip US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 12 mo ago
    DetailsHide
    Hostname
    gxcctw.vip
    First seen
    2026-11-12 04:57 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-12 00:05 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1
    Valid 2026-11-12 03:52 UTC to 2027-02-10 04:50 UTC
    Logged 2026-11-12 04:52 UTC in Google ParcelYard2027h1, entry 749,280,006
    SHA-256 bc95eae032c4afa777072c2b7b322d64b5e9931972231ee21235b8b9ec67ad1f
    Public key SHA-256 5c8c6208ced7edef1d2e4b39494fd67326215593d85f67add886382dccb2f062
    PhishDestroy
    Addresses
    104.21.81.120 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.189.83 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.81.120, 172.67.189.83): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    gxcctw.vip
    Registered
    2025-11-22 · Gname.com Pte. Ltd.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-12 05:55 UTC

    Suggest a correction

  53. trwin601.com US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 10 mo ago
    DetailsHide
    Hostname
    trwin601.com
    First seen
    2026-11-12 04:57 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-12 00:05 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-12 03:53 UTC to 2027-02-10 03:53 UTC
    Logged 2026-11-12 04:51 UTC in Google PlumbersArms2027h1, entry 749,469,947
    SHA-256 5b57445998ec8fcecc8af63938cb4f360c120109c76abf5102391453ffd29a04
    Public key SHA-256 8678b80a39b8d405eb9823a50e51cf5a3bef139598db67a3f08329bf239949fb
    PhishDestroy
    Addresses
    104.21.77.212 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.211.198 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.77.212, 172.67.211.198): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    trwin601.com
    Registered
    2026-01-03 · Dynadot Inc
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-12 05:55 UTC

    Suggest a correction

  54. era7capone5.sbs US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by USOMMX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    era7capone5.sbs
    First seen
    2026-11-12 04:51 UTC
    Listing
    USOM listed it 2026-07-28 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 04:30 UTC
    Listed
    USOM
    1. Listed by USOM
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1
    Valid 2026-09-14 00:30 UTC to 2026-12-13 01:28 UTC
    Logged 2026-11-12 04:49 UTC in IPng Networks Gouda2026h2, entry 1,252,918,502
    SHA-256 7e8d6112b913488bb5885d3874c732ea27d2c19b0f9d791d1f7e50afecd89568
    Public key SHA-256 3b0beb9448a055ca964d31d2f3150e81db7a031ce9c8c44ef32298da26ff46a7
    Addresses
    104.21.92.206 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.198.83 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.92.206, 172.67.198.83): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    era7capone5.sbs
    Registered
    2026-07-16 · Dynadot Inc
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-12 05:55 UTC

    Suggest a correction

  55. exoodusweb3-portal-en.pages.dev US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMask
    DetailsHide
    Hostname
    exoodusweb3-portal-en.pages.dev
    First seen
    2026-11-12 04:51 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 00:07 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-12 03:48 UTC to 2027-02-10 04:46 UTC
    Logged 2026-11-12 04:48 UTC in Geomys Tuscolo2027h1, entry 585,949,105
    SHA-256 dfa099fb9b8dae91992fc31f64757ad90a1a0bfde3bac6fdbc3aef430ec25f0b
    Public key SHA-256 3728f03f83ebeb93fd718dcebc354b830982807775a3c6478db3f1ad566008d2
    Addresses
    172.66.44.83 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.66.47.173 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (172.66.44.83, 172.66.47.173): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.

    Suggest a correction

  56. ltwex.shop US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by NPA 165 (e-commerce)MX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    ltwex.shop
    First seen
    2026-11-12 04:51 UTC
    Listing
    NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 01:38 UTC
    Listed
    NPA 165
    1. Observed in the NPA 165 feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-11-12 03:49 UTC to 2027-02-10 03:49 UTC
    Logged 2026-11-12 04:47 UTC in Let's Encrypt Willow2027h1, entry 1,112,145,990
    SHA-256 7bf8f15912927e11ac7015dc102021c1d6c5e5d978bf023008fcc9d2f626952c
    Public key SHA-256 540e2175c0ea3be1bf496fd5f947649f04c11ddef214baff4a2219af0fa9cfac
    Addresses
    104.21.4.197 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.187.56 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.4.197, 172.67.187.56): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    ltwex.shop
    Registered
    2026-05-19 · GoDaddy.com LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-12 05:55 UTC

    Suggest a correction

  57. ondovoting.app US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    ondovoting.app
    First seen
    2026-11-12 04:51 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 00:07 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-12 03:49 UTC to 2027-02-10 03:49 UTC
    Logged 2026-11-12 04:47 UTC in Google ParcelYard2027h1, entry 749,228,991
    SHA-256 5ab40b62f68fc0605ded857a42b2bba47bd73f88a5ad95c0045b43f0779bfa9a
    Public key SHA-256 b3680eb8e3572f6f9ea7ddae4070b929e5456f1286b812baf65ede5eae6c365a
    Addresses
    104.21.72.47 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.175.23 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.72.47, 172.67.175.23): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    ondovoting.app
    Registered
    2026-05-18 · PDR Ltd. d/b/a PublicDomainRegistry.com
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-12 05:55 UTC

    Suggest a correction

  58. quattrovix-digital.pages.dev US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT Polska
    DetailsHide
    Hostname
    quattrovix-digital.pages.dev
    First seen
    2026-11-12 04:51 UTC
    Listing
    CERT Polska listed it 2026-10-13 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 03:50 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-10-13 15:18 UTC to 2027-01-11 15:18 UTC
    Logged 2026-11-12 04:46 UTC in IPng Networks Halloumi2027h1, entry 465,587,236
    SHA-256 4e249b41549689df205519403ee58e1f447014f5bac9498ac718fd904fcb7fd5
    Public key SHA-256 c15d4a329549df655abd0770f163ee48db13f539120fc5e64093d9a8c30746c1
    Addresses
    172.66.45.39 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.66.46.217 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (172.66.45.39, 172.66.46.217): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.

    Suggest a correction

  59. slidedex.app US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 10 mo ago
    DetailsHide
    Hostname
    slidedex.app
    First seen
    2026-11-12 04:51 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-12 00:05 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1
    Valid 2026-09-14 00:47 UTC to 2026-12-13 01:45 UTC
    Logged 2026-11-12 04:50 UTC in DigiCert Wyvern2026h2, entry 2,220,147,895
    SHA-256 649a46ad787bdf74b1c509987a58dae28464d3e387cc86cc71f588af4df06e07
    Public key SHA-256 8adea522c7b678ac6ce652533b1158e7d946bace748a94da5f60bbfa433ef44b
    PhishDestroy
    Addresses
    104.21.73.230 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.192.176 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.73.230, 172.67.192.176): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    slidedex.app
    Registered
    2026-01-20 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-12 05:55 UTC

    Suggest a correction

  60. usor.lat US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 10 mo ago
    DetailsHide
    Hostname
    usor.lat
    First seen
    2026-11-12 04:51 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-12 00:05 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-12 03:48 UTC to 2027-02-10 04:45 UTC
    Logged 2026-11-12 04:48 UTC in Google ParcelYard2027h1, entry 749,232,332
    SHA-256 46ec0b2374bbcb3159cd1cc28f379e1f9c0167b0ca5f64d8507a24142701e406
    Public key SHA-256 5e632195371f76152120abf026c2327f69d96997fbacc13d8cb8e6ba09441512
    PhishDestroy
    Addresses
    104.21.45.179 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.217.184 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.45.179, 172.67.217.184): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    usor.lat
    Registered
    2026-01-16 · Global Domain Group LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-12 05:55 UTC

    Suggest a correction

  61. www.bizureanresa.net US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareUnder bizureanresa.net, listed by CERT PolskaMX absentSPF missingDMARC missingRegistered 10 d ago
    DetailsHide
    Hostname
    www.bizureanresa.net
    First seen
    2026-11-12 04:51 UTC
    Listing
    CERT Polska listed it 2026-11-02 · still listed at the last successful feed check 2026-11-12 03:50 UTC
    Listed
    CERT Polska, listing bizureanresa.net and the names under it
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-12 03:48 UTC to 2027-02-10 03:48 UTC
    Logged 2026-11-12 04:46 UTC in Google ParcelYard2027h1, entry 749,217,759
    SHA-256 a4cbf27e745b1090b3a3a3023bd2f1e1a162fe2f86aa7b6663688fd0dd4537f5
    Public key SHA-256 a51bb428a13b638b556181ae7b7af300ae3360ebb198ca5dfa0a9c32be61a93c
    Addresses
    104.21.91.114 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.215.252 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.91.114, 172.67.215.252): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    bizureanresa.net
    Registered
    2026-11-02 · Dynadot Inc
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-11 09:14 UTC

    Suggest a correction

  62. drogerienatura-pl-sale.sbs US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 8 mo ago
    DetailsHide
    Hostname
    drogerienatura-pl-sale.sbs
    First seen
    2026-11-12 04:46 UTC
    Listing
    CERT Polska listed it 2026-06-02 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 03:50 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-11-12 03:43 UTC to 2027-02-10 03:43 UTC
    Logged 2026-11-12 04:41 UTC in DigiCert Wyvern2027h1, entry 507,762,368
    SHA-256 db598522aec3790213185d70f32c680cf50c50715f894e362adcafbf8203710f
    Public key SHA-256 13ad2617b08af542e0ab879455359dea99eb9c255b626817dcfd5a8d7322ef63
    Addresses
    104.21.14.253 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.160.216 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.14.253, 172.67.160.216): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    drogerienatura-pl-sale.sbs
    Registered
    2026-03-21 · NameSilo, LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-12 05:55 UTC

    Suggest a correction

  63. framework-mericent.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    framework-mericent.com
    First seen
    2026-11-12 04:46 UTC
    Listing
    CERT Polska listed it 2026-07-17 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 03:50 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-12 03:44 UTC to 2027-02-10 04:42 UTC
    Logged 2026-11-12 04:44 UTC in IPng Networks Halloumi2027h1, entry 465,560,077
    SHA-256 4e28a176969877ffa558212a80a877206574b675502dd7f7a519429b5267be7c
    Public key SHA-256 87b0b26ec8d6dec1456b30118805085243a1b09f6ae15ffe0dad7e48be81f25b
    Addresses
    104.21.26.45 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.135.96 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.26.45, 172.67.135.96): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    framework-mericent.com
    Registered
    2026-07-16 · Eranet International Limited
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-12 05:55 UTC

    Suggest a correction

  64. gewinnekta-ai.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    gewinnekta-ai.com
    First seen
    2026-11-12 04:46 UTC
    Listing
    CERT Polska listed it 2026-07-17 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 03:50 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1
    Valid 2026-09-13 23:48 UTC to 2026-12-13 00:45 UTC
    Logged 2026-11-12 04:45 UTC in DigiCert Wyvern2026h2, entry 2,220,138,178
    SHA-256 414d01d23c6eb641782644f48ec15bf86b9f2d66622c8eec8cad2320367c00c9
    Public key SHA-256 1308ee2fb9f26ec055bcd3dc95a0af5885f3528e4e7a40d22acd840de839792e
    Addresses
    104.21.26.160 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.137.46 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.26.160, 172.67.137.46): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    gewinnekta-ai.com
    Registered
    2026-07-16 · Eranet International Limited
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-12 05:55 UTC

    Suggest a correction

  65. e-visacan.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by NPA 165 (finance and insurance)MX presentSPF ~allDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    e-visacan.com
    First seen
    2026-11-12 04:41 UTC
    Listing
    NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 01:38 UTC
    Listed
    NPA 165
    1. Observed in the NPA 165 feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-11-12 03:40 UTC to 2027-02-10 03:40 UTC
    Logged 2026-11-12 04:39 UTC in Google ParcelYard2027h1, entry 749,119,975
    SHA-256 54ca900eb77ee5d002be85138b3ce978f90dbfb9225c38544b6a627139a849ed
    Public key SHA-256 c505bf2a719600a10b2980a5be2efd3cf5693cc4a052998c6ba9b7ce7f405148
    Addresses
    162.159.129.73 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    162.159.130.73 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (162.159.129.73, 162.159.130.73): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    e-visacan.com
    Registered
    2026-05-18 · MarkMonitor Inc.
    MX
    Receives mail at mx.zoho.com, mx2.zoho.com, mx3.zoho.com
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-12 05:55 UTC

    Suggest a correction

  66. osojsa.top US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by NPA 165 (e-commerce)MX absentSPF missingDMARC missingRegistered 10 mo ago
    DetailsHide
    Hostname
    osojsa.top
    First seen
    2026-11-12 04:41 UTC
    Listing
    NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 01:38 UTC
    Listed
    NPA 165
    1. Observed in the NPA 165 feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-12 03:37 UTC to 2027-02-10 04:36 UTC
    Logged 2026-11-12 04:37 UTC in DigiCert Sphinx2027h1, entry 450,656,032
    SHA-256 261b1123644b524aaa33c38b609e69ec5521ae11a7a558e8423d382448e665fb
    Public key SHA-256 8827f767418e494f5af8580ee77e3874a78788cb5519e9addcca2ba40e164e36
    Addresses
    104.21.55.73 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.170.187 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.55.73, 172.67.170.187): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    osojsa.top
    Registered
    2026-01-19 · 阿里云计算有限公司
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-12 05:55 UTC

    Suggest a correction

  67. teveqplzri.help US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    teveqplzri.help
    First seen
    2026-11-12 04:41 UTC
    Listing
    CERT Polska listed it 2026-08-15 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 03:50 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-12 03:39 UTC to 2027-02-10 03:39 UTC
    Logged 2026-11-12 04:37 UTC in Google PlumbersArms2027h1, entry 749,296,422
    SHA-256 00ccc110bff418fe59872aaa7d61c4094f105e066d4adf16fed0bfadd60154c5
    Public key SHA-256 de1bce1e9df61018e2c99d76a11de5e5540496474552b57c870bf0eb06481641
    Addresses
    104.21.82.115 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.157.47 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.82.115, 172.67.157.47): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    teveqplzri.help
    Registered
    2026-05-18 · Chengdu West Dimension Digital Technology Co., Ltd.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-12 05:55 UTC

    Suggest a correction

  68. landeavoirecto-ai.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    landeavoirecto-ai.com
    First seen
    2026-11-12 04:36 UTC
    First published
    2026-11-12 04:47 UTC
    Listing
    CERT Polska listed it 2026-07-17 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 03:50 UTC
    DNS
    Resolves · checked 2026-11-12 04:52 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-12 03:32 UTC to 2027-02-10 04:31 UTC
    Logged 2026-11-12 04:32 UTC in DigiCert Wyvern2027h1, entry 507,679,716
    SHA-256 5bdaeafb75a3a20f5dce1f10954e333df07b38724ca7963215dd43581b93f669
    Public key SHA-256 9bf90baba240bd645ae96fd87bac8cf8f1774b5b8687dd6f766cabc72b643bfb
    Addresses
    104.21.3.156 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.130.232 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.3.156, 172.67.130.232): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    landeavoirecto-ai.com
    Registered
    2026-07-16 · Eranet International Limited
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-12 04:45 UTC

    Suggest a correction

  69. topmatch.ks.ua US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 20 mo ago
    DetailsHide
    Hostname
    topmatch.ks.ua
    First seen
    2026-11-12 04:36 UTC
    First published
    2026-11-12 04:47 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-12 00:05 UTC
    DNS
    Resolves · checked 2026-11-12 04:52 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR2
    Valid 2026-11-12 03:37 UTC to 2027-02-10 03:37 UTC
    Logged 2026-11-12 04:35 UTC in Google PlumbersArms2027h1, entry 749,274,493
    SHA-256 cd0a9a370486d1f43809a1b314a7992d2119d21d0b7267ed8e455f0e9ee3b897
    Public key SHA-256 a81c5acb2890d1410ff560765e9ce2a99c48b82a92fb8f0d18eb8a2d1aadf1c9
    PhishDestroy
    Addresses
    104.21.50.122 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.163.43 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.50.122, 172.67.163.43): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    topmatch.ks.ua
    Registered
    2025-03-27 · Ukrainian internet names Center LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-12 04:37 UTC

    Suggest a correction

  70. vyrgolen-app.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    vyrgolen-app.com
    First seen
    2026-11-12 04:36 UTC
    First published
    2026-11-12 04:47 UTC
    Listing
    CERT Polska listed it 2026-07-18 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 03:50 UTC
    DNS
    Resolves · checked 2026-11-12 04:52 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1
    Valid 2026-09-13 23:03 UTC to 2026-12-13 00:01 UTC
    Logged 2026-11-12 04:32 UTC in IPng Networks Gouda2026h2, entry 1,252,893,178
    SHA-256 6112113b171b7f80134e18a8f4f6bba731d5b0eb48ecc1ef6abd78774c539f36
    Public key SHA-256 b18f367c73cade053cfab7ec711ac47fd01c8f8e66c3d674ef8561b59a20f0c6
    Addresses
    104.21.81.104 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.141.167 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.81.104, 172.67.141.167): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    vyrgolen-app.com
    Registered
    2026-07-16 · Eranet International Limited
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-12 04:45 UTC

    Suggest a correction

  71. www.topmatch.ks.ua US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareUnder topmatch.ks.ua, reported by PhishDestroyMX absentSPF missingDMARC missingRegistered 20 mo ago
    DetailsHide
    Hostname
    www.topmatch.ks.ua
    First seen
    2026-11-12 04:36 UTC
    First published
    2026-11-12 04:47 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-12 00:05 UTC
    DNS
    Resolves · checked 2026-11-12 04:52 UTC
    Reported
    PhishDestroy, listing topmatch.ks.ua and the names under it
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR2
    Valid 2026-11-12 03:37 UTC to 2027-02-10 03:37 UTC
    Logged 2026-11-12 04:35 UTC in Google PlumbersArms2027h1, entry 749,274,493
    SHA-256 cd0a9a370486d1f43809a1b314a7992d2119d21d0b7267ed8e455f0e9ee3b897
    Public key SHA-256 a81c5acb2890d1410ff560765e9ce2a99c48b82a92fb8f0d18eb8a2d1aadf1c9
    PhishDestroy
    Addresses
    104.21.50.122 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.163.43 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.50.122, 172.67.163.43): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    topmatch.ks.ua
    Registered
    2025-03-27 · Ukrainian internet names Center LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-12 04:37 UTC

    Suggest a correction

  72. zestprotocol-claim.xyz US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    zestprotocol-claim.xyz
    First seen
    2026-11-12 04:36 UTC
    First published
    2026-11-12 04:47 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 00:07 UTC
    DNS
    Resolves · checked 2026-11-12 04:52 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-11-12 03:32 UTC to 2027-02-10 03:32 UTC
    Logged 2026-11-12 04:30 UTC in Google PlumbersArms2027h1, entry 749,223,544
    SHA-256 3608a85404c42ba548a1b5b755d8f89a1f602cb644f8d08dff0811a0ed9f14bd
    Public key SHA-256 4259d00425adccce63b009f7963517f1c654a2e780e46c553298ccb1beabfb04
    Addresses
    104.21.29.200 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.149.197 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.29.200, 172.67.149.197): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    zestprotocol-claim.xyz
    Registered
    2026-05-18 · PDR Ltd. d/b/a PublicDomainRegistry.com
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-12 04:45 UTC

    Suggest a correction

  73. iridiumsolarium.live US · AS13335 · Cloudflare, Inc.4 addressesInteractive Brokers
    ReportedCloudflareReported by PhishTank as imitating Interactive BrokersMX absentSPF missingDMARC missingRegistered 1 d ago
    DetailsHide
    Hostname
    iridiumsolarium.live
    First seen
    2026-11-12 04:35 UTC
    First published
    2026-11-12 04:47 UTC
    Listing
    PhishTank: first observed in the feed 2026-11-12 · still listed at the last successful feed check 2026-11-12 04:33 UTC
    DNS
    Resolves · checked 2026-11-12 04:52 UTC
    Reported
    PhishTank
    1. Certificate logged in CT
    2. Observed in the PhishTank feed
    3. We matched the new listing
    4. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-11-11 05:41 UTC to 2027-02-09 05:41 UTC
    Logged 2026-11-11 06:40 UTC in IPng Networks Gouda2027h1, entry 381,301,378
    SHA-256 4beabe11dd3d07aea2dee2a0ce19b1c76025dd2608693de7bb627e251ff1a536
    Public key SHA-256 e6ea588b9f07edbbcb2c941079fc12184b445e10c4746326a9605126b75f8b96
    PhishTank
    PhishTank report #9558488
    Brand
    Interactive Brokers
    Addresses
    104.21.63.37 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.169.114 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3032::6815:3f25
    2606:4700:3033::ac43:a972
    Cloudflare
    Cloudflare (104.21.63.37, 172.67.169.114): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    iridiumsolarium.live
    Registered
    2026-11-11 · GNAME.COM PTE. LTD.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-12 04:45 UTC

    Suggest a correction

  74. admin.com-web3.vip US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareUnder com-web3.vip, listed by MetaMaskMX absentSPF missingDMARC missingRegistered 23 d ago
    DetailsHide
    Hostname
    admin.com-web3.vip
    First seen
    2026-11-12 04:31 UTC
    First published
    2026-11-12 04:47 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 00:07 UTC
    DNS
    Resolves · checked 2026-11-12 04:52 UTC
    Listed
    MetaMask, listing com-web3.vip and the names under it
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR2 · precertificate
    Valid 2026-11-12 03:30 UTC to 2027-02-10 03:30 UTC
    Logged 2026-11-12 04:29 UTC in IPng Networks Halloumi2027h1, entry 465,393,673
    SHA-256 8658db3c8d0d44fbb5b8c4850413d343324d4cbac7aebd0490b78132d6af447e
    Public key SHA-256 c1513636952d9f4b485aa84db4984cfecbc071b0cecfd19479aa570a0fc49a3e
    Addresses
    104.21.17.234 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.178.169 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.17.234, 172.67.178.169): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    com-web3.vip
    Registered
    2026-10-20 · Dynadot Inc
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-11 07:29 UTC

    Suggest a correction

  75. relay.com-web3.vip US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareUnder com-web3.vip, listed by MetaMaskMX absentSPF missingDMARC missingRegistered 23 d ago
    DetailsHide
    Hostname
    relay.com-web3.vip
    First seen
    2026-11-12 04:31 UTC
    First published
    2026-11-12 04:47 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 00:07 UTC
    DNS
    Resolves · checked 2026-11-12 04:52 UTC
    Listed
    MetaMask, listing com-web3.vip and the names under it
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR2 · precertificate
    Valid 2026-11-12 03:30 UTC to 2027-02-10 03:30 UTC
    Logged 2026-11-12 04:29 UTC in IPng Networks Halloumi2027h1, entry 465,393,673
    SHA-256 8658db3c8d0d44fbb5b8c4850413d343324d4cbac7aebd0490b78132d6af447e
    Public key SHA-256 c1513636952d9f4b485aa84db4984cfecbc071b0cecfd19479aa570a0fc49a3e
    Addresses
    104.21.17.234 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.178.169 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.17.234, 172.67.178.169): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    com-web3.vip
    Registered
    2026-10-20 · Dynadot Inc
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-11 07:29 UTC

    Suggest a correction

  76. valtrevia-app.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    valtrevia-app.com
    First seen
    2026-11-12 04:31 UTC
    First published
    2026-11-12 04:47 UTC
    Listing
    CERT Polska listed it 2026-07-17 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 03:50 UTC
    DNS
    Resolves · checked 2026-11-12 04:52 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-12 03:26 UTC to 2027-02-10 04:23 UTC
    Logged 2026-11-12 04:26 UTC in DigiCert Wyvern2027h1, entry 507,612,289
    SHA-256 995a3918c6cf9b4ddc5535343d910ce132d088a962becccaa7c87b8dd8114239
    Public key SHA-256 5017588d7f203432bd9f556033626f5b34518e4c17c7ce4b660ac982cd270895
    Addresses
    104.21.88.43 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.172.136 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.88.43, 172.67.172.136): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    valtrevia-app.com
    Registered
    2026-07-16 · Eranet International Limited
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-12 04:45 UTC

    Suggest a correction

  77. velqorabit-app.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    velqorabit-app.com
    First seen
    2026-11-12 04:31 UTC
    First published
    2026-11-12 04:47 UTC
    Listing
    CERT Polska listed it 2026-07-17 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 03:50 UTC
    DNS
    Resolves · checked 2026-11-12 04:52 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-12 03:30 UTC to 2027-02-10 04:28 UTC
    Logged 2026-11-12 04:30 UTC in Google PlumbersArms2027h1, entry 749,215,794
    SHA-256 05c9868a3212b95c8de48cbc16fc97237cdcbca87403d81f988d9bb969516019
    Public key SHA-256 56838a6de37e7e2dd84ade99947b006bb322998d97b80e8a99f6d13ed412a14e
    Addresses
    104.21.83.212 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.181.245 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.83.212, 172.67.181.245): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    velqorabit-app.com
    Registered
    2026-07-16 · Eranet International Limited
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-12 04:45 UTC

    Suggest a correction

  78. shape.lat US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 8 mo ago
    DetailsHide
    Hostname
    shape.lat
    First seen
    2026-11-12 04:26 UTC
    First published
    2026-11-12 04:47 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-12 00:05 UTC
    DNS
    Resolves · checked 2026-11-12 04:52 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-12 03:22 UTC to 2027-02-10 03:22 UTC
    Logged 2026-11-12 04:21 UTC in Google ParcelYard2027h1, entry 748,926,610
    SHA-256 4bdb027a3eb0c473cc34a84d09fe083c1a46f88f1e45c313c19107bec851f2c3
    Public key SHA-256 0b5d37fbd5beb82560fb37cffa26e928d2983e8c8121bce0dfdfffcb2db4369d
    PhishDestroy
    Addresses
    104.21.23.93 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.210.38 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.23.93, 172.67.210.38): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    shape.lat
    Registered
    2026-03-20 · PDR Ltd. d/b/a PublicDomainRegistry.com
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-12 04:27 UTC

    Suggest a correction

  79. spinfinty.com US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 10 mo ago
    DetailsHide
    Hostname
    spinfinty.com
    First seen
    2026-11-12 04:26 UTC
    First published
    2026-11-12 04:47 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-12 00:05 UTC
    DNS
    Resolves · checked 2026-11-12 04:52 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1
    Valid 2026-09-14 02:32 UTC to 2026-12-13 03:30 UTC
    Logged 2026-11-12 04:22 UTC in Let's Encrypt Sycamore2026h2, entry 1,102,920,667
    SHA-256 32eb864461cd0148c003cb3948bc8ecb59ec4ea3196fc130a016ae57c762b491
    Public key SHA-256 161490d91ddba3e5154c23fdaa6b0df5b8645ade274a752512531cc3eff6a817
    PhishDestroy
    Addresses
    104.21.5.23 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.132.195 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.5.23, 172.67.132.195): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    spinfinty.com
    Registered
    2026-01-18 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-12 04:27 UTC

    Suggest a correction

  80. zykanordrift.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    zykanordrift.com
    First seen
    2026-11-12 04:26 UTC
    First published
    2026-11-12 04:47 UTC
    Listing
    CERT Polska listed it 2026-07-24 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 03:50 UTC
    DNS
    Resolves · checked 2026-11-12 04:52 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-11-12 03:25 UTC to 2027-02-10 03:25 UTC
    Logged 2026-11-12 04:23 UTC in DigiCert Sphinx2027h1, entry 450,538,293
    SHA-256 1a6d50d4e6003cd7662f45e93c94830a864d8db528949593e3281a72c9ed2fb7
    Public key SHA-256 f2d0198b12a97b91f6f087516e80c786a5b93b253ae18203e080d19ecdf73090
    Addresses
    104.21.68.160 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.196.223 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.68.160, 172.67.196.223): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    zykanordrift.com
    Registered
    2026-05-18 · NameCheap, Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-12 04:45 UTC

    Suggest a correction

  81. efyouxuantw.shop US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by NPA 165 (e-commerce)MX absentSPF missingDMARC missingRegistered 12 mo ago
    DetailsHide
    Hostname
    efyouxuantw.shop
    First seen
    2026-11-12 04:21 UTC
    First published
    2026-11-12 04:47 UTC
    Listing
    NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 01:38 UTC
    DNS
    Resolves · checked 2026-11-12 04:52 UTC
    Listed
    NPA 165
    1. Observed in the NPA 165 feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1
    Valid 2026-11-12 03:15 UTC to 2027-02-10 04:14 UTC
    Logged 2026-11-12 04:16 UTC in Sectigo Monument2027h1, entry 138,795,514
    SHA-256 b516de9a0085e3633671934b2f0aa489b0b6050315782c75b86ce81ec7e52547
    Public key SHA-256 1a970015b639bc94843ed3a7062d860d5d4934d7262020e4968fa0085cdd7660
    Addresses
    104.21.55.63 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.145.93 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.55.63, 172.67.145.93): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    efyouxuantw.shop
    Registered
    2025-11-22 · GoDaddy.com LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-12 04:45 UTC

    Suggest a correction

  82. fifa-com.shop US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 8 mo ago
    DetailsHide
    Hostname
    fifa-com.shop
    First seen
    2026-11-12 04:21 UTC
    First published
    2026-11-12 04:47 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-12 00:05 UTC
    USOM listed it 2026-06-05 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 04:30 UTC
    DNS
    Resolves · checked 2026-11-12 04:52 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-12 03:18 UTC to 2027-02-10 03:18 UTC
    Logged 2026-11-12 04:16 UTC in Google ParcelYard2027h1, entry 748,880,727
    SHA-256 6124cce8cb85235b38c1b31c568d64704bc6afbddb60c275fd7a82e00515fbc0
    Public key SHA-256 5bdb31d37a727c4521da4230946af5e7c9c28e0331e3fcd7059bcf200a6d23b6
    PhishDestroy
    Addresses
    104.21.57.170 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.147.219 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.57.170, 172.67.147.219): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    fifa-com.shop
    Registered
    2026-03-20 · GoDaddy.com LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-12 04:46 UTC

    Suggest a correction

  83. fohre-wertthal.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    fohre-wertthal.com
    First seen
    2026-11-12 04:21 UTC
    First published
    2026-11-12 04:47 UTC
    Listing
    CERT Polska listed it 2026-07-18 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 03:50 UTC
    DNS
    Resolves · checked 2026-11-12 04:52 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-12 03:17 UTC to 2027-02-10 04:16 UTC
    Logged 2026-11-12 04:17 UTC in Google PlumbersArms2027h1, entry 749,090,379
    SHA-256 5014293aac91fc14241a7de9abf437202f28b0f8d4a1e1ba01be3563a41974a8
    Public key SHA-256 bab380feb539bd224050eee7bf9d348e370eb2eae93a902ccb51c928e621c304
    Addresses
    104.21.85.120 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.205.152 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.85.120, 172.67.205.152): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    fohre-wertthal.com
    Registered
    2026-07-16 · Eranet International Limited
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-12 04:46 UTC

    Suggest a correction

  84. moonedge-earn.pages.dev US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMask
    DetailsHide
    Hostname
    moonedge-earn.pages.dev
    First seen
    2026-11-12 04:21 UTC
    First published
    2026-11-12 04:47 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 00:07 UTC
    DNS
    Resolves · checked 2026-11-12 04:52 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1
    Valid 2026-09-14 02:14 UTC to 2026-12-13 03:13 UTC
    Logged 2026-11-12 04:17 UTC in DigiCert Wyvern2026h2, entry 2,220,091,037
    SHA-256 5123e925c2a7f224474017dcaf73d3850f4a26fe42a2d6662af1dbc3b2ffa28c
    Public key SHA-256 f0c3a641c6b241e3ee9963489e37b341e1dce5bb899e98b6fe40a961362f43f9
    Addresses
    172.66.44.143 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.66.47.113 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (172.66.44.143, 172.66.47.113): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.

    Suggest a correction

  85. nngresearch.net US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by USOMMX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    nngresearch.net
    First seen
    2026-11-12 04:16 UTC
    First published
    2026-11-12 04:47 UTC
    Listing
    USOM listed it 2026-10-30 · still listed at the last successful feed check 2026-11-12 04:30 UTC
    DNS
    Resolves · checked 2026-11-12 04:52 UTC
    Listed
    USOM
    1. Listed by USOM
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1
    Valid 2026-11-12 03:12 UTC to 2027-02-10 04:11 UTC
    Logged 2026-11-12 04:12 UTC in Geomys Tuscolo2027h1, entry 585,572,580
    SHA-256 518fb4ef3c485743e9c164190f1f3b764788313ca8ebc3958f978fed97bbf8b2
    Public key SHA-256 431221816ed8cfad8a0badd55accce5f865aff8c548fa92dfae3eedc206a9d2f
    Addresses
    104.21.74.158 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.159.219 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.74.158, 172.67.159.219): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    nngresearch.net
    Registered
    2026-07-16 · Dynadot Inc
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-12 04:46 UTC

    Suggest a correction

  86. pumpfunlaunch.live US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 59 d ago
    DetailsHide
    Hostname
    pumpfunlaunch.live
    First seen
    2026-11-12 04:16 UTC
    First published
    2026-11-12 04:47 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 00:07 UTC
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-12 00:05 UTC
    DNS
    Resolves · checked 2026-11-12 04:52 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-11-12 03:13 UTC to 2027-02-10 03:13 UTC
    Logged 2026-11-12 04:11 UTC in Let's Encrypt Willow2027h1, entry 1,111,726,402
    SHA-256 28e06a6a5220746f89bf59887cf45b288c83c55dc416d1c1f6e8591225a24efb
    Public key SHA-256 019b04dfff30180e1eab158a66d0b55409cac895ffd084cf30c205fe137b0b48
    Addresses
    104.21.51.171 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.183.4 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.51.171, 172.67.183.4): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    pumpfunlaunch.live
    Registered
    2026-09-14 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-12 04:45 UTC

    Suggest a correction

  87. tqjor.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    tqjor.com
    First seen
    2026-11-12 04:16 UTC
    First published
    2026-11-12 04:47 UTC
    Listing
    CERT Polska listed it 2026-05-18 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 03:50 UTC
    DNS
    Resolves · checked 2026-11-12 04:52 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-11-12 03:15 UTC to 2027-02-10 03:15 UTC
    Logged 2026-11-12 04:13 UTC in DigiCert Sphinx2027h1, entry 450,465,759
    SHA-256 63b9883048e6463792207436bbba86dc787d8b9414bfd913fcc6ab707b5eabd4
    Public key SHA-256 b7e732df5f1f7034d8ca2fa515d63ebc56f0057ba3c05eee85cd1860dd818c3a
    Addresses
    104.21.66.22 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.155.81 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.66.22, 172.67.155.81): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    tqjor.com
    Registered
    2026-05-18 · Cloud Yuqu LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-12 04:46 UTC

    Suggest a correction

  88. allocation-xl.money US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 59 d ago
    DetailsHide
    Hostname
    allocation-xl.money
    First seen
    2026-11-12 04:10 UTC
    First published
    2026-11-12 04:47 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 00:07 UTC
    DNS
    Resolves · checked 2026-11-12 04:52 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1
    Valid 2026-11-12 03:09 UTC to 2027-02-10 04:07 UTC
    Logged 2026-11-12 04:09 UTC in Sectigo Monument2027h1, entry 138,727,005
    SHA-256 265e0b6dea54286feda802a9d2ae2169192b274598613a60a9cf1a5863276bf3
    Public key SHA-256 697ddf694917a57c739cd66b51086a1810fa6c36eaaf23e1b54c8d0726e68a32
    Addresses
    104.21.50.205 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.166.203 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.50.205, 172.67.166.203): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    allocation-xl.money
    Registered
    2026-09-14 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-12 04:45 UTC

    Suggest a correction

  89. baykaritalia.shop US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by USOMMX absentSPF missingDMARC missingRegistered 8 mo ago
    DetailsHide
    Hostname
    baykaritalia.shop
    First seen
    2026-11-12 04:10 UTC
    First published
    2026-11-12 04:47 UTC
    Listing
    USOM listed it 2026-06-10 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 04:30 UTC
    DNS
    Resolves · checked 2026-11-12 04:52 UTC
    Listed
    USOM
    1. Listed by USOM
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-11-12 03:11 UTC to 2027-02-10 03:10 UTC
    Logged 2026-11-12 04:09 UTC in Google ParcelYard2027h1, entry 748,798,568
    SHA-256 585268e1e7a12d610e2550aa03637dfd4a9a83b48c1501fd02a40cba973adfa1
    Public key SHA-256 d05c1c94dad0fb4b48082c409bd3fd5e9bf2197fb99b1f4325741ad986362652
    Addresses
    104.21.93.5 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.201.217 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.93.5, 172.67.201.217): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    baykaritalia.shop
    Registered
    2026-03-20 · Spaceship, Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-12 04:46 UTC

    Suggest a correction

  90. nljnjtpe.shop US · AS13335 · Cloudflare, Inc.
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 59 d ago
    DetailsHide
    Hostname
    nljnjtpe.shop
    First seen
    2026-11-12 04:10 UTC
    First published
    2026-11-12 04:47 UTC
    Listing
    CERT Polska listed it 2026-09-15 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 03:50 UTC
    DNS
    Resolves · checked 2026-11-12 04:52 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-11-12 03:08 UTC to 2027-02-10 03:08 UTC
    Logged 2026-11-12 04:06 UTC in Google ParcelYard2027h1, entry 748,756,601
    SHA-256 70038e35785284031254ae031ed6864a4deafbdaa4d3beb857dc887e8e841940
    Public key SHA-256 a1c20e826f4b02bdb1bca1b286796171da60bfd353da764fa0b107d818440547
    Addresses
    104.17.231.54 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.17.231.54): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    nljnjtpe.shop
    Registered
    2026-09-14 · Web Commerce Communication Ltd.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-12 04:46 UTC

    Suggest a correction

  91. ourbusinessloans.com US · AS209242 · CLOUDFLARESPECTRUM Cloudfla…
    ReportedCloudflareReported by PhishDestroyMX presentSPF ~allDMARC policy noneRegistered 5 y ago
    DetailsHide
    Hostname
    ourbusinessloans.com
    First seen
    2026-11-12 04:10 UTC
    First published
    2026-11-12 04:47 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-12 00:05 UTC
    DNS
    Resolves · checked 2026-11-12 04:52 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WR1 · precertificate
    Valid 2026-11-12 03:09 UTC to 2027-02-10 04:07 UTC
    Logged 2026-11-12 04:09 UTC in DigiCert Wyvern2027h1, entry 507,465,478
    SHA-256 16b5fc09a73e14d5346292b409f2a6e73ee04be2f7a97c6e117eafbaafa81a85
    Public key SHA-256 2c0d835e68a81fb4d3c00c068937551459b974d0e052c4a38eb9403b3f21d384
    PhishDestroy
    Addresses
    160.153.0.178 · United States · AS209242 CLOUDFLARESPECTRUM Cloudflare London, LLC · Cloudflare (cdn)
    Cloudflare
    Cloudflare (160.153.0.178): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    ourbusinessloans.com
    Registered
    2021-07-29 · GoDaddy.com, LLC
    MX
    Receives mail at aspmx.l.google.com, alt1.aspmx.l.google.com, alt2.aspmx.l.google.com
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    DMARC policy p=none: reports only
    Checked
    2026-11-12 04:46 UTC

    Suggest a correction

  92. speakivelvety.click US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    speakivelvety.click
    First seen
    2026-11-12 04:10 UTC
    First published
    2026-11-12 04:47 UTC
    Listing
    CERT Polska listed it 2026-05-21 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 03:50 UTC
    DNS
    Resolves · checked 2026-11-12 04:52 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-12 03:06 UTC to 2027-02-10 03:06 UTC
    Logged 2026-11-12 04:05 UTC in Google PlumbersArms2027h1, entry 748,937,094
    SHA-256 7e3aaf13979cb51fb6bb56f01bba1fd3ee66ebf92cb634aff45f06cdbd431c82
    Public key SHA-256 7bc7e97e546063382131433b6555b056426de54e21ad706965bb695ba092e300
    Addresses
    104.21.4.34 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.131.155 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.4.34, 172.67.131.155): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    speakivelvety.click
    Registered
    2026-05-18 · Dynadot, LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-12 04:45 UTC

    Suggest a correction

  93. ushemployeetix.pages.dev US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishTank
    DetailsHide
    Hostname
    ushemployeetix.pages.dev
    First seen
    2026-11-12 04:10 UTC
    First published
    2026-11-12 04:47 UTC
    Listing
    PhishTank: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-12 04:33 UTC
    DNS
    Resolves · checked 2026-11-12 04:52 UTC
    Reported
    PhishTank
    1. Observed in the PhishTank feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1
    Valid 2026-09-14 02:09 UTC to 2026-12-13 03:08 UTC
    Logged 2026-11-12 04:07 UTC in Let's Encrypt Sycamore2026h2, entry 1,102,898,634
    SHA-256 10e56080c4bc2cae6bdd836b17fd8cef85a9e49c0269e087bd4787bfdb9e6d8a
    Public key SHA-256 9d47a3bb4725b4fdc117c1be8db569f1cb517b358689dbb4656edd1d5bc48218
    PhishTank
    PhishTank report #8609207
    Addresses
    172.66.44.249 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.66.47.7 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (172.66.44.249, 172.66.47.7): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.

    Suggest a correction

  94. xn--e1agc6agh.com US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 18 mo ago
    DetailsHide
    Hostname
    xn--e1agc6agh.com
    First seen
    2026-11-12 04:10 UTC
    First published
    2026-11-12 04:47 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-12 00:05 UTC
    DNS
    Resolves · checked 2026-11-12 04:52 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-12 03:09 UTC to 2027-02-10 03:09 UTC
    Logged 2026-11-12 04:07 UTC in Google PlumbersArms2027h1, entry 748,972,543
    SHA-256 672919d7cd255bdb37944994141a370cc49d285169fa859169b4f707c039e4be
    Public key SHA-256 912500ab9ef40c4c1f5a1144dce5d0351adce29205d0ac60a9cda98fedb7a9f7
    PhishDestroy
    Addresses
    104.21.53.76 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.210.99 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.53.76, 172.67.210.99): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    xn--e1agc6agh.com
    Registered
    2025-05-28 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-12 04:46 UTC

    Suggest a correction

  95. defi-flarefdn.live US · AS13335 · Cloudflare, Inc.4 addressesFlare Network
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    defi-flarefdn.live
    First seen
    2026-11-12 04:05 UTC
    First published
    2026-11-12 04:47 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 00:07 UTC
    DNS
    Resolves · checked 2026-11-12 04:52 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1
    Valid 2026-11-12 03:00 UTC to 2027-02-10 03:58 UTC
    Logged 2026-11-12 04:01 UTC in IPng Networks Halloumi2027h1, entry 465,093,240
    SHA-256 d732ab426a3cb25fa20fedb2ea2247b2e07fbcd65e29499d743658c97e6951ba
    Public key SHA-256 adfb17ec907cb4a7cd6216689b13e653e40715c6edcebf2c9689b5b08bf17ea6
    Brand
    Flare Network
    Addresses
    104.21.30.38 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.150.133 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3033::6815:1e26
    2606:4700:3033::ac43:9685
    Cloudflare
    Cloudflare (104.21.30.38, 172.67.150.133): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    defi-flarefdn.live
    Registered
    2026-07-16 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-12 04:06 UTC

    Suggest a correction

  96. ethgasfourdation.org US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 10 mo ago
    DetailsHide
    Hostname
    ethgasfourdation.org
    First seen
    2026-11-12 04:05 UTC
    First published
    2026-11-12 04:47 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-12 00:05 UTC
    DNS
    Resolves · checked 2026-11-12 04:52 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1
    Valid 2026-11-12 03:01 UTC to 2027-02-10 03:59 UTC
    Logged 2026-11-12 04:01 UTC in HARICA Selene2027h1, entry 70,619,455
    SHA-256 9428888c5043cf8696bfb76a2cabf9dd7578640569af77576dbef698f84d6ae6
    Public key SHA-256 27f1850d1b88d52219a48cb7d5de151b5f29cfa1f6de86a1d56d04097b57e748
    PhishDestroy
    Addresses
    104.21.64.212 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.187.224 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.64.212, 172.67.187.224): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    ethgasfourdation.org
    Registered
    2026-01-20 · Global Domain Group LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-12 04:45 UTC

    Suggest a correction

  97. skupka.cc US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 12 mo ago
    DetailsHide
    Hostname
    skupka.cc
    First seen
    2026-11-12 04:05 UTC
    First published
    2026-11-12 04:47 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-12 00:05 UTC
    DNS
    Resolves · checked 2026-11-12 04:52 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-12 03:04 UTC to 2027-02-10 04:03 UTC
    Logged 2026-11-12 04:04 UTC in Let's Encrypt Willow2027h1, entry 1,111,633,374
    SHA-256 26e7a7f03ff635c06571db40f293cd1acf7679952d6d786568c92c64219f86c0
    Public key SHA-256 71cc1e623017d0da57081eed3ae6810e4ec5dc289f410d982f8f41d73cc59a4b
    PhishDestroy
    Addresses
    104.21.56.36 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.176.106 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.56.36, 172.67.176.106): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    skupka.cc
    Registered
    2025-11-22 · NameSilo, LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-12 04:06 UTC

    Suggest a correction

  98. srupelghavo-japan.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    srupelghavo-japan.com
    First seen
    2026-11-12 04:05 UTC
    First published
    2026-11-12 04:47 UTC
    Listing
    CERT Polska listed it 2026-09-13 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 03:50 UTC
    DNS
    Resolves · checked 2026-11-12 04:52 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-12 03:01 UTC to 2027-02-10 04:00 UTC
    Logged 2026-11-12 04:01 UTC in DigiCert Wyvern2027h1, entry 507,375,178
    SHA-256 3cb983d12d9dd7d26e2d67bdbf0f4ce1e96329ce217d5c53583554f6275384af
    Public key SHA-256 720692f339dffa868c32919cf3812589c7dd4f14e48063fa383ff28ecbd81506
    Addresses
    104.21.56.182 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.155.70 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.56.182, 172.67.155.70): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    srupelghavo-japan.com
    Registered
    2026-07-16 · Dynadot Inc
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-12 04:46 UTC

    Suggest a correction

  99. taiseijyu-taku-ai.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    taiseijyu-taku-ai.com
    First seen
    2026-11-12 04:05 UTC
    First published
    2026-11-12 04:47 UTC
    Listing
    CERT Polska listed it 2026-07-17 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 03:50 UTC
    DNS
    Resolves · checked 2026-11-12 04:52 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1
    Valid 2026-09-14 01:06 UTC to 2026-12-13 02:05 UTC
    Logged 2026-11-12 04:04 UTC in IPng Networks Halloumi2026h2a, entry 1,300,047,929
    SHA-256 131f0e8017fa9f099a6c824eb57e4710a9296d68adcf1303813dffb2a46e4f1e
    Public key SHA-256 6377b6035f0cdb6923715f8d2af462d0a19ff6b64fe95d3ef48b38b586e02f43
    Addresses
    104.21.0.224 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.128.88 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.0.224, 172.67.128.88): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    taiseijyu-taku-ai.com
    Registered
    2026-07-16 · Eranet International Limited
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-12 04:46 UTC

    Suggest a correction

  100. token-humidifi.org US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 11 mo ago
    DetailsHide
    Hostname
    token-humidifi.org
    First seen
    2026-11-12 04:05 UTC
    First published
    2026-11-12 04:47 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-12 00:05 UTC
    DNS
    Resolves · checked 2026-11-12 04:52 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by Sectigo Public Server Authentication CA DV E36 · precertificate
    Valid 2026-11-12 00:00 UTC to 2027-02-10 04:00 UTC
    Logged 2026-11-12 04:04 UTC in Geomys Tuscolo2027h1, entry 585,452,264
    SHA-256 c0661f57205ff3953e2e15d777dcc1d726ba8e667915b9fefb85e6979adcfef2
    Public key SHA-256 a1f9e0a2057740281400ba79b578e67bb7996693d35e8134da6e1fc3e1c7407e
    PhishDestroy
    Addresses
    104.21.46.153 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.140.104 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.46.153, 172.67.140.104): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    token-humidifi.org
    Registered
    2025-12-03 · Cloudflare, Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-12 04:45 UTC

    Suggest a correction

Showing 1–100 of 3,076 hostnames.
How these findings are made

Brand spoofs: findings that impersonate one of the 1,000 most-impersonated brands. The list opens on them; All shows every finding.

Reported: a hostname in a new certificate that PhishTank or PhishDestroy reports, or that CERT Polska, MetaMask, USOM, MODA, NPA 165, JPCERT/CC, the AMF, the FSMA or BaFin lists. When a listing source names the brand imitated or a category, the finding shows it. Phishing host: a brand lookalike that resolves to an address which hosted confirmed phishing in the last 48 hours. Spamhaus DROP: a brand lookalike that resolves to an address on the Spamhaus DROP list. Same certificate: another name on a finding's certificate that resolves to an address on Spamhaus DROP. Suspicious: other names on a finding's certificate, rated high for a hosting-alias name or a lookalike on a phishing host, medium for a lookalike; they join the findings once they have listing evidence of their own. Also under Suspicious: registered domains using a brand’s name that PhishDestroy’s community list includes, rated high when they resolve to an address with no parking or holding signal, medium otherwise.

Brand labels cover the 1,000 most-impersonated brands. A name gets a brand when the brand's token starts a label or follows a hyphen, with a lure word such as "login" or "verify" for common words. Hostnames appear as plain text. How it works · Sources