Live

Live phishing findings

New certificates and domain registrations, with every hostname resolved and checked against phishing reports and bad-address lists. The newest findings, updated hourly.

Updated hourly · 2026-11-12 08:07 UTC
Certificate-log entries · 24 h
338.8M
from 84 distinct feeds
Unique certificates · 24 h
34.9M
each reviewed
Names resolved · 24 h
21.9M
16.1M with an address
Findings · 24 h
6,439
253 of 1,061 brands targeted

3,008 hostnames from the last 24 hours.

  1. zlxasd.fashion US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by NPA 165 (finance and insurance)MX absentSPF missingDMARC missingRegistered 8 mo ago
    DetailsHide details for zlxasd.fashion
    Hostname
    zlxasd.fashion
    First seen
    2026-11-12 06:51 UTC
    First published
    2026-11-12 07:05 UTC
    Listing
    NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 01:38 UTC
    DNS
    Resolves · checked 2026-11-12 07:15 UTC
    Listed
    NPA 165
    1. Observed in the NPA 165 feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-11-12 05:49 UTC to 2027-02-10 05:49 UTC
    Logged 2026-11-12 06:47 UTC in Let's Encrypt Sycamore2027h1, entry 1,159,636,095
    SHA-256 b2839b0ac95c4796027207d970519be7c59cbfa97819e7571dc9e150925a4be8
    Public key SHA-256 217edc12cd1d284fdbf1e39e0b43e9de7260ef87e3291390d68da48322505964
    Addresses
    104.21.9.7 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.140.207 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.9.7, 172.67.140.207): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    zlxasd.fashion
    Registered
    2026-03-21 · Alibaba Cloud Computing Ltd. d/b/a HiChina (www.net.cn)
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-12 07:04 UTC

    Suggest a correction

  2. admin666.seb178.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareUnder seb178.com, listed by MetaMaskMX absentSPF missingDMARC missingRegistered 3 mo ago
    DetailsHide details for admin666.seb178.com
    Hostname
    admin666.seb178.com
    First seen
    2026-11-12 06:46 UTC
    First published
    2026-11-12 07:05 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 06:09 UTC
    DNS
    Resolves · checked 2026-11-12 07:15 UTC
    Listed
    MetaMask, listing seb178.com and the names under it
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR1
    Valid 2026-11-12 05:43 UTC to 2027-02-10 05:43 UTC
    Logged 2026-11-12 06:42 UTC in Google PlumbersArms2027h1, entry 750,766,884
    SHA-256 81b71830589e68175e972e478ba314dec2961686658a7e021deacbad737e5a14
    Public key SHA-256 a06194b7776d33033498fe83367e83efed4d2a9cf11df391d1fad8de622cad69
    Addresses
    104.21.4.127 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.132.22 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.4.127, 172.67.132.22): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    seb178.com
    Registered
    2026-08-06 · Cloudflare, Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-12 07:04 UTC

    Suggest a correction

  3. adminapi.seb178.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareUnder seb178.com, listed by MetaMaskMX absentSPF missingDMARC missingRegistered 3 mo ago
    DetailsHide details for adminapi.seb178.com
    Hostname
    adminapi.seb178.com
    First seen
    2026-11-12 06:46 UTC
    First published
    2026-11-12 07:05 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 06:09 UTC
    DNS
    Resolves · checked 2026-11-12 07:15 UTC
    Listed
    MetaMask, listing seb178.com and the names under it
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR2
    Valid 2026-11-12 05:43 UTC to 2027-02-10 05:43 UTC
    Logged 2026-11-12 06:42 UTC in Google ParcelYard2027h1, entry 750,576,039
    SHA-256 c0d4b1f24cd964bcfac1a4c5fb6a58fde37c624c0b7a00bbd7809643c3fc769f
    Public key SHA-256 54b6fb632a0ff6d0ca227fe3ad05033015beff47818cd0de439abaf75ff3081e
    Addresses
    104.21.4.127 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.132.22 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.4.127, 172.67.132.22): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    seb178.com
    Registered
    2026-08-06 · Cloudflare, Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-12 07:04 UTC

    Suggest a correction

  4. axgtmigrate.live US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 10 mo ago
    DetailsHide details for axgtmigrate.live
    Hostname
    axgtmigrate.live
    First seen
    2026-11-12 06:46 UTC
    First published
    2026-11-12 07:05 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-12 06:06 UTC
    DNS
    Resolves · checked 2026-11-12 07:15 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-12 05:43 UTC to 2027-02-10 06:40 UTC
    Logged 2026-11-12 06:43 UTC in Google ParcelYard2027h1, entry 750,590,229
    SHA-256 36cb631da0136af6554a57e2d6b84576b0be1fa26822a5c5ca0340c28ae5d500
    Public key SHA-256 ec98ca3fd80e192e758c6deaf473bacb16461e8ffaea60837e3eedb26d520122
    PhishDestroy
    Addresses
    104.21.64.248 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.188.55 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.64.248, 172.67.188.55): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    axgtmigrate.live
    Registered
    2026-01-20 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-12 07:04 UTC

    Suggest a correction

  5. dgcorex.com US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 8 mo ago
    DetailsHide details for dgcorex.com
    Hostname
    dgcorex.com
    First seen
    2026-11-12 06:46 UTC
    First published
    2026-11-12 07:05 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-12 06:06 UTC
    DNS
    Resolves · checked 2026-11-12 07:15 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-11-12 05:44 UTC to 2027-02-10 05:44 UTC
    Logged 2026-11-12 06:43 UTC in Google ParcelYard2027h1, entry 750,588,992
    SHA-256 4ae19065800e3b11651267ab8b9b98e126e7b38cc418d35d708e9f8671d868ee
    Public key SHA-256 8a2c204d55a4bbc60500aa85caa1c1f049f78efc2de96b554efb414594aa28ef
    PhishDestroy
    Addresses
    104.21.30.252 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.174.61 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.30.252, 172.67.174.61): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    dgcorex.com
    Registered
    2026-03-20 · Dynadot Inc
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-12 07:04 UTC

    Suggest a correction

  6. motufondura.pro US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide details for motufondura.pro
    Hostname
    motufondura.pro
    First seen
    2026-11-12 06:46 UTC
    First published
    2026-11-12 07:05 UTC
    Listing
    CERT Polska listed it 2026-07-23 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 06:50 UTC
    PhishDestroy: first observed in the feed 2026-11-02 · still listed at the last successful feed check 2026-11-12 06:06 UTC
    DNS
    Resolves · checked 2026-11-12 07:15 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-11-12 05:46 UTC to 2027-02-10 05:46 UTC
    Logged 2026-11-12 06:44 UTC in Google PlumbersArms2027h1, entry 750,792,676
    SHA-256 eb40f53df116ac7d8da4b013c9459e90bae01a7f6fb1326f7aad9f227c06418a
    Public key SHA-256 2b7fc9971e71a25ddf8d360b97099ab094bf85f893b940548a11251019579df5
    Addresses
    104.21.91.66 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.211.87 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.91.66, 172.67.211.87): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    motufondura.pro
    Registered
    2026-05-19 · Dynadot Inc
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-12 07:04 UTC

    Suggest a correction

  7. onchainex.pro US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 33 d ago
    DetailsHide details for onchainex.pro
    Hostname
    onchainex.pro
    First seen
    2026-11-12 06:46 UTC
    First published
    2026-11-12 07:05 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 06:09 UTC
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-12 06:06 UTC
    DNS
    Resolves · checked 2026-11-12 07:15 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-10-10 04:55 UTC to 2027-01-08 04:55 UTC
    Logged 2026-11-12 06:45 UTC in Geomys Trastevere2027h1, entry 47,527,277
    SHA-256 2afbb2fceecff8f8d24ed60c78f4e3877d55e9fe390d856530c7d5bf4276ea8c
    Public key SHA-256 deaf407eb9025ba0548e3b2119d6004c18cd1bbe467a99071852b931cdcb05b3
    Addresses
    104.21.78.49 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.216.238 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.78.49, 172.67.216.238): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    onchainex.pro
    Registered
    2026-10-10 · NameSilo, LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-12 07:04 UTC

    Suggest a correction

  8. onchainex3.pro US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 33 d ago
    DetailsHide details for onchainex3.pro
    Hostname
    onchainex3.pro
    First seen
    2026-11-12 06:46 UTC
    First published
    2026-11-12 07:05 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 06:09 UTC
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-12 06:06 UTC
    DNS
    Resolves · checked 2026-11-12 07:15 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-10-10 05:13 UTC to 2027-01-08 05:13 UTC
    Logged 2026-11-12 06:45 UTC in DigiCert Wyvern2027h1, entry 508,954,698
    SHA-256 43551ffd4445dfe251aaac8eaa99095ab15c09989c056aad4d9b381f2f88d9b7
    Public key SHA-256 508ba709831760f592e132db6ab7828b469aa8ecdfd9e84374ed989fc2d2c59d
    Addresses
    104.21.19.24 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.184.229 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.19.24, 172.67.184.229): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    onchainex3.pro
    Registered
    2026-10-10 · NameSilo, LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-12 07:04 UTC

    Suggest a correction

  9. trulvanqeth-platform.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide details for trulvanqeth-platform.com
    Hostname
    trulvanqeth-platform.com
    First seen
    2026-11-12 06:46 UTC
    First published
    2026-11-12 07:05 UTC
    Listing
    CERT Polska listed it 2026-09-14 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 06:50 UTC
    PhishDestroy: first observed in the feed 2026-11-10 · still listed at the last successful feed check 2026-11-12 06:06 UTC
    DNS
    Resolves · checked 2026-11-12 07:15 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1
    Valid 2026-09-14 05:18 UTC to 2026-12-13 06:16 UTC
    Logged 2026-11-12 06:45 UTC in DigiCert Wyvern2026h2, entry 2,220,324,364
    SHA-256 8e7612f4b46ba8ec81348dcceda3b6dba37090ded6021da837b3708076129a48
    Public key SHA-256 54b2917c2ff9822fd1e806331f8d512f132b05ff2f4ac15cb8611d1657bb59d4
    Addresses
    104.21.74.202 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.206.59 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.74.202, 172.67.206.59): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    trulvanqeth-platform.com
    Registered
    2026-07-17 · Dynadot Inc
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-12 07:04 UTC

    Suggest a correction

  10. vaultcapitalgrowth-ai.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide details for vaultcapitalgrowth-ai.com
    Hostname
    vaultcapitalgrowth-ai.com
    First seen
    2026-11-12 06:46 UTC
    First published
    2026-11-12 07:05 UTC
    Listing
    CERT Polska listed it 2026-07-18 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 06:50 UTC
    DNS
    Resolves · checked 2026-11-12 07:15 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1
    Valid 2026-09-14 00:36 UTC to 2026-12-13 01:33 UTC
    Logged 2026-11-12 06:41 UTC in DigiCert Wyvern2026h2, entry 2,220,317,568
    SHA-256 8b6e7cbb6365e65960f0e505d875e7f4de2c28b30414137e7902f2c707f7b79e
    Public key SHA-256 e252e562bfc8760609dbff222cb0625714bd0ab2a4f8f2ff94dc8f8cfedc67e3
    Addresses
    104.21.54.198 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.141.140 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.54.198, 172.67.141.140): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    vaultcapitalgrowth-ai.com
    Registered
    2026-07-16 · Eranet International Limited
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-12 07:04 UTC

    Suggest a correction

  11. www.ccorteiz.com US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareUnder ccorteiz.com, reported by PhishDestroyMX presentSPF ~allDMARC missingRegistered 4 mo ago
    DetailsHide details for www.ccorteiz.com
    Hostname
    www.ccorteiz.com
    First seen
    2026-11-12 06:46 UTC
    First published
    2026-11-12 07:05 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-12 06:06 UTC
    DNS
    Resolves · checked 2026-11-12 07:15 UTC
    Reported
    PhishDestroy, listing ccorteiz.com and the names under it
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR2 · precertificate
    Valid 2026-11-12 05:45 UTC to 2027-02-10 05:45 UTC
    Logged 2026-11-12 06:43 UTC in IPng Networks Halloumi2027h1, entry 466,735,331
    SHA-256 65d7c648e171cfdb0d0464045b72f520f6064231279ba4f1193785d925d6e50d
    Public key SHA-256 6a74b7d936d976929f6a3fc3788d95ee20ca037499b7cbf9e3c48e67b489c11b
    PhishDestroy
    Addresses
    104.21.13.150 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.200.160 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.13.150, 172.67.200.160): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    ccorteiz.com
    Registered
    2026-07-15 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Receives mail at mx1.titan.email, mx2.titan.email
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-11 16:03 UTC

    Suggest a correction

  12. www.jysk-depend.shop US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareUnder jysk-depend.shop, listed by CERT PolskaMX absentSPF missingDMARC missingRegistered 59 d ago
    DetailsHide details for www.jysk-depend.shop
    Hostname
    www.jysk-depend.shop
    First seen
    2026-11-12 06:46 UTC
    First published
    2026-11-12 07:05 UTC
    Listing
    CERT Polska listed it 2026-09-15 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 06:50 UTC
    PhishDestroy: first observed in the feed 2026-10-31 · still listed at the last successful feed check 2026-11-12 06:06 UTC
    DNS
    Resolves · checked 2026-11-12 07:15 UTC
    Listed
    CERT Polska, listing jysk-depend.shop and the names under it
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1
    Valid 2026-09-14 01:52 UTC to 2026-12-13 02:52 UTC
    Logged 2026-11-12 06:43 UTC in DigiCert Wyvern2026h2, entry 2,220,321,027
    SHA-256 4dc15d2c2febead4f69fedc9458c711f249a6a3c06f7c69253043dbed14b63f1
    Public key SHA-256 de2395153441fef860102a26373984adb0e8b287688c9998802b04be4673b778
    Addresses
    104.21.20.138 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.192.241 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.20.138, 172.67.192.241): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    jysk-depend.shop
    Registered
    2026-09-14 · Dynadot Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-12 05:25 UTC

    Suggest a correction

  13. github-api.virzz.icu US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareUnder virzz.icu, listed by MetaMaskMX presentSPF ~allDMARC missingRegistered 12 mo ago
    DetailsHide details for github-api.virzz.icu
    Hostname
    github-api.virzz.icu
    First seen
    2026-11-12 06:41 UTC
    First published
    2026-11-12 07:05 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 06:09 UTC
    DNS
    Resolves · checked 2026-11-12 07:15 UTC
    Listed
    MetaMask, listing virzz.icu and the names under it
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-12 05:39 UTC to 2027-02-10 06:36 UTC
    Logged 2026-11-12 06:39 UTC in Let's Encrypt Sycamore2027h1, entry 1,159,546,825
    SHA-256 0331c8010fb48e65ee2d25cbcc72e888b219e78e8a534205523b754f95425da9
    Public key SHA-256 1db21b20bc1f92563afb5acbeafde56587c3fb63701b82a3e80589d08251beee
    Addresses
    104.21.71.244 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.172.101 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.71.244, 172.67.172.101): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    virzz.icu
    Registered
    2025-11-11 · Alibaba Cloud Computing Ltd. d/b/a HiChina (www.net.cn)
    MX
    Receives mail at route1.mx.cloudflare.net, route2.mx.cloudflare.net, route3.mx.cloudflare.net
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-11 08:57 UTC

    Suggest a correction

  14. qwssxa.top US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by NPA 165 (e-commerce)MX absentSPF missingDMARC missingRegistered 10 mo ago
    DetailsHide details for qwssxa.top
    Hostname
    qwssxa.top
    First seen
    2026-11-12 06:41 UTC
    First published
    2026-11-12 07:05 UTC
    Listing
    NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 01:38 UTC
    DNS
    Resolves · checked 2026-11-12 07:15 UTC
    Listed
    NPA 165
    1. Observed in the NPA 165 feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1
    Valid 2026-11-12 05:39 UTC to 2027-02-10 06:36 UTC
    Logged 2026-11-12 06:39 UTC in DigiCert Wyvern2027h1, entry 508,899,880
    SHA-256 5ab752527a31bec44c5fa5a538829bb3d41ae6c178dbad3e4e6d10b3ed8ee47b
    Public key SHA-256 e14148c6f5175618e41af51e2f9ab9f89e1f35dc9e8d3d0aff622c794038047d
    Addresses
    104.21.17.112 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.175.196 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.17.112, 172.67.175.196): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    qwssxa.top
    Registered
    2026-01-19 · 阿里云计算有限公司
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-12 07:04 UTC

    Suggest a correction

  15. kapitalden-app.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide details for kapitalden-app.com
    Hostname
    kapitalden-app.com
    First seen
    2026-11-12 06:36 UTC
    First published
    2026-11-12 07:05 UTC
    Listing
    CERT Polska listed it 2026-07-18 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 06:50 UTC
    DNS
    Resolves · checked 2026-11-12 07:15 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-12 05:32 UTC to 2027-02-10 06:29 UTC
    Logged 2026-11-12 06:32 UTC in Let's Encrypt Willow2027h1, entry 1,113,354,012
    SHA-256 be10f7b49807696303dde2264b3926a0a9f555acb7d2de29d81e24b617f6fa7f
    Public key SHA-256 a887a2d69748ea804da620291e530284949898f9eb42418f7b12676523dd3b4c
    Addresses
    104.21.95.61 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.143.89 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.95.61, 172.67.143.89): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    kapitalden-app.com
    Registered
    2026-07-16 · Eranet International Limited
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-12 07:04 UTC

    Suggest a correction

  16. lisharcapital.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 59 d ago
    DetailsHide details for lisharcapital.com
    Hostname
    lisharcapital.com
    First seen
    2026-11-12 06:36 UTC
    First published
    2026-11-12 07:05 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 06:09 UTC
    DNS
    Resolves · checked 2026-11-12 07:15 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-11-12 05:33 UTC to 2027-02-10 05:33 UTC
    Logged 2026-11-12 06:32 UTC in Google ParcelYard2027h1, entry 750,473,616
    SHA-256 47a8ad1ec4915232bb0ba48bcf66abf65d7ff0f5e980721fd7fc57cf68ff0eb0
    Public key SHA-256 d2b5d6d8f193724920ab2abcf2699ec26a5cc3e898427edfec0d02ff6b3d1404
    Addresses
    104.21.48.22 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.176.30 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.48.22, 172.67.176.30): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    lisharcapital.com
    Registered
    2026-09-14 · Cloudflare, Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-12 07:04 UTC

    Suggest a correction

  17. mongolporn.com US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 10 mo ago
    DetailsHide details for mongolporn.com
    Hostname
    mongolporn.com
    First seen
    2026-11-12 06:36 UTC
    First published
    2026-11-12 07:05 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-12 06:06 UTC
    DNS
    Resolves · checked 2026-11-12 07:15 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-12 05:33 UTC to 2027-02-10 06:31 UTC
    Logged 2026-11-12 06:33 UTC in Google ParcelYard2027h1, entry 750,486,678
    SHA-256 8107c42670c20d0f8c52d03b88275159c7e55efe1abbf41462b1b4931c0975f9
    Public key SHA-256 6132ef8b8fab0e7c2851889f2ff0f0f7ce6fc17a6183983c1c601a2214889e45
    PhishDestroy
    Addresses
    104.21.7.23 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.135.165 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.7.23, 172.67.135.165): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    mongolporn.com
    Registered
    2026-01-20 · Atak Domain Bilgi Teknolojileri A.S.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-12 07:04 UTC

    Suggest a correction

  18. slot161.com US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 5 y ago
    DetailsHide details for slot161.com
    Hostname
    slot161.com
    First seen
    2026-11-12 06:36 UTC
    First published
    2026-11-12 07:05 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-12 06:06 UTC
    DNS
    Resolves · checked 2026-11-12 07:15 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1
    Valid 2026-11-12 05:32 UTC to 2027-02-10 06:29 UTC
    Logged 2026-11-12 06:34 UTC in DigiCert Wyvern2027h1, entry 508,849,026
    SHA-256 273fdb4866083e5b918c168a2c98ab563e79d488a5d9fe081644d15b425bc3ac
    Public key SHA-256 000bdd592136d0bb5e5dfdc438ce2311ec50eadae2213312dd6541f1f72ed17a
    PhishDestroy
    Addresses
    104.21.10.242 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.147.18 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.10.242, 172.67.147.18): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    slot161.com
    Registered
    2022-03-18 · NameCheap, Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-12 06:40 UTC

    Suggest a correction

  19. pulfreyshopping.online US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by NPA 165 (e-commerce)MX absentSPF missingDMARC quarantineRegistered 6 mo ago
    DetailsHide details for pulfreyshopping.online
    Hostname
    pulfreyshopping.online
    First seen
    2026-11-12 06:31 UTC
    First published
    2026-11-12 07:05 UTC
    Listing
    NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 01:38 UTC
    DNS
    Resolves · checked 2026-11-12 07:15 UTC
    Listed
    NPA 165
    1. Observed in the NPA 165 feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-12 05:30 UTC to 2027-02-10 05:29 UTC
    Logged 2026-11-12 06:28 UTC in Google ParcelYard2027h1, entry 750,426,699
    SHA-256 3666b9885518caf11a98ce321078addded0983102a0af115313f38f0a10b8e12
    Public key SHA-256 7d6bf49f14e39fcec3d5a8d55ba04c214d3d124847e1d8d0b4b8a543a8fef203
    Addresses
    104.21.29.167 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.149.135 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.29.167, 172.67.149.135): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    pulfreyshopping.online
    Registered
    2026-05-19 · GoDaddy.com, LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    DMARC policy p=quarantine
    Checked
    2026-11-12 07:04 UTC

    Suggest a correction

  20. shackletteshopping.online US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by NPA 165 (e-commerce)MX absentSPF missingDMARC quarantineRegistered 6 mo ago
    DetailsHide details for shackletteshopping.online
    Hostname
    shackletteshopping.online
    First seen
    2026-11-12 06:31 UTC
    First published
    2026-11-12 07:05 UTC
    Listing
    NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 01:38 UTC
    DNS
    Resolves · checked 2026-11-12 07:15 UTC
    Listed
    NPA 165
    1. Observed in the NPA 165 feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-12 05:28 UTC to 2027-02-10 05:28 UTC
    Logged 2026-11-12 06:27 UTC in Google PlumbersArms2027h1, entry 750,604,407
    SHA-256 1723f25db9863b1169e5917951602fc6ea9e5a8a883b9417675bb07d8b68bfd9
    Public key SHA-256 4e289adcec0b4c1a94980da5d5874efa7b446c33226abcb9e21b1b78128db924
    Addresses
    104.21.66.9 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.154.121 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.66.9, 172.67.154.121): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    shackletteshopping.online
    Registered
    2026-05-19 · GoDaddy.com, LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    DMARC policy p=quarantine
    Checked
    2026-11-12 07:04 UTC

    Suggest a correction

  21. stakeglobals.com US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide details for stakeglobals.com
    Hostname
    stakeglobals.com
    First seen
    2026-11-12 06:31 UTC
    First published
    2026-11-12 07:05 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-12 06:06 UTC
    DNS
    Resolves · checked 2026-11-12 07:15 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-11-12 05:28 UTC to 2027-02-10 05:28 UTC
    Logged 2026-11-12 06:26 UTC in Google PlumbersArms2027h1, entry 750,596,273
    SHA-256 3c25077eef4d1b1da53bc359df1a6b716e21eb9ce5162254cd84611b091b59cd
    Public key SHA-256 c24c711a1b51a3adc52d9e72f1f8d231859241f32fd8b79ca1e8ca881d66e54c
    PhishDestroy
    Addresses
    104.21.89.47 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.156.108 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.89.47, 172.67.156.108): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    stakeglobals.com
    Registered
    2026-05-18 · Global Domain Group LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-12 06:35 UTC

    Suggest a correction

  22. xaicore.net US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 12 mo ago
    DetailsHide details for xaicore.net
    Hostname
    xaicore.net
    First seen
    2026-11-12 06:31 UTC
    First published
    2026-11-12 07:05 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-12 06:06 UTC
    DNS
    Resolves · checked 2026-11-12 07:15 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1
    Valid 2026-09-14 03:37 UTC to 2026-12-13 04:37 UTC
    Logged 2026-11-12 06:28 UTC in TrustAsia log2026a, entry 3,035,218,611
    SHA-256 87ef24512588f4fcc9d8eefd74f70a7bbffef8181e9f47cd21a54ecbd5093ea7
    Public key SHA-256 38b791b496e330b31f4a1f68787783b59c612019742bec2f51fb44a2cbd0b3ae
    PhishDestroy
    Addresses
    104.21.66.235 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.165.218 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.66.235, 172.67.165.218): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    xaicore.net
    Registered
    2025-11-22 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-12 06:35 UTC

    Suggest a correction

  23. txt-crypto.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF ~allDMARC missingRegistered 6 mo ago
    DetailsHide details for txt-crypto.com
    Hostname
    txt-crypto.com
    First seen
    2026-11-12 06:26 UTC
    First published
    2026-11-12 07:05 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 06:09 UTC
    DNS
    Resolves · checked 2026-11-12 07:15 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-11-12 05:26 UTC to 2027-02-10 05:26 UTC
    Logged 2026-11-12 06:25 UTC in IPng Networks Halloumi2027h1, entry 466,580,362
    SHA-256 0c7e9bef6b5331988a4e37571a5d60010f7c6e755d13d115df8e26cae7c03a20
    Public key SHA-256 e429b1599a276bbca3e6c74d96194650f3ec1c904a5bdbb718a1bfc3060516f2
    Addresses
    104.21.8.90 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.130.103 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.8.90, 172.67.130.103): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    txt-crypto.com
    Registered
    2026-05-18 · Realtime Register B.V.
    MX
    Publishes no mail exchanger
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-12 07:04 UTC

    Suggest a correction

  24. update-zama.info US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide details for update-zama.info
    Hostname
    update-zama.info
    First seen
    2026-11-12 06:26 UTC
    First published
    2026-11-12 07:05 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 06:09 UTC
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-12 06:06 UTC
    DNS
    Resolves · checked 2026-11-12 07:15 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-12 05:25 UTC to 2027-02-10 06:23 UTC
    Logged 2026-11-12 06:25 UTC in IPng Networks Halloumi2027h1, entry 466,579,499
    SHA-256 15a63881fe2376903ca787072278b8a7834b5d5e2ec12446c0c2df8380439ce9
    Public key SHA-256 f48a156f5efb04f9a0a18e255d87f35fbbb20cb8e32d7bd647633657635a50df
    Addresses
    104.21.0.127 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.150.246 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.0.127, 172.67.150.246): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    update-zama.info
    Registered
    2026-07-17 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-12 07:04 UTC

    Suggest a correction

  25. zykanordrift.net US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide details for zykanordrift.net
    Hostname
    zykanordrift.net
    First seen
    2026-11-12 06:26 UTC
    First published
    2026-11-12 07:05 UTC
    Listing
    CERT Polska listed it 2026-07-23 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 06:50 UTC
    DNS
    Resolves · checked 2026-11-12 07:15 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-11-12 05:26 UTC to 2027-02-10 05:26 UTC
    Logged 2026-11-12 06:25 UTC in Geomys Tuscolo2027h1, entry 586,908,392
    SHA-256 1ea5fb5ea0557aa6658bf1bf35bd88534f8946960160a112c54ba3d70c798ce9
    Public key SHA-256 c30f9ae0b661022140f3fefeb18c3a9b62ce1a2dc80b1c045922006a1eef967d
    Addresses
    104.21.95.68 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.143.124 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.95.68, 172.67.143.124): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    zykanordrift.net
    Registered
    2026-05-18 · NameCheap, Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-12 07:04 UTC

    Suggest a correction

  26. hyperlend-vote.finance US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide details for hyperlend-vote.finance
    Hostname
    hyperlend-vote.finance
    First seen
    2026-11-12 06:21 UTC
    First published
    2026-11-12 07:05 UTC
    Listing
    MetaMask: first observed in the feed 2026-11-06 · still listed at the last successful feed check 2026-11-12 06:09 UTC
    DNS
    Resolves · checked 2026-11-12 07:15 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-11-12 05:17 UTC to 2027-02-10 05:17 UTC
    Logged 2026-11-12 06:15 UTC in Google ParcelYard2027h1, entry 750,277,739
    SHA-256 c4aed600e2eb6172b5c0538e18154464dcd1c460d0a2784e673543ffcd05453b
    Public key SHA-256 1c3664ebd3ecae22c32b37dd8b9ce0f9615010dba498c2d32effd3b9602285b9
    Addresses
    104.21.34.51 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.198.140 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.34.51, 172.67.198.140): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    hyperlend-vote.finance
    Registered
    2026-05-19 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-12 07:04 UTC

    Suggest a correction

  27. jhkvfqfm.shop US · AS13335 · Cloudflare, Inc.
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 59 d ago
    DetailsHide details for jhkvfqfm.shop
    Hostname
    jhkvfqfm.shop
    First seen
    2026-11-12 06:21 UTC
    First published
    2026-11-12 07:05 UTC
    Listing
    CERT Polska listed it 2026-09-14 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 06:50 UTC
    DNS
    Resolves · checked 2026-11-12 07:15 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-12 05:19 UTC to 2027-02-10 05:19 UTC
    Logged 2026-11-12 06:17 UTC in Google PlumbersArms2027h1, entry 750,490,621
    SHA-256 0bd5381b51c9f34c9d647f0e67119b334bcafba85fac8d69a060eb47edeb03fa
    Public key SHA-256 34f8725123cabbc886b172357e500597cf0c5017185ac5e2c0eabf9b8ccdbdeb
    Addresses
    104.17.231.54 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.17.231.54): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    jhkvfqfm.shop
    Registered
    2026-09-14 · Web Commerce Communication Ltd.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-12 07:04 UTC

    Suggest a correction

  28. staging-ashlandymca.y.org US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareUnder y.org, reported by PhishDestroyMX absentSPF missingDMARC missingRegistered 33 y ago
    DetailsHide details for staging-ashlandymca.y.org
    Hostname
    staging-ashlandymca.y.org
    First seen
    2026-11-12 06:21 UTC
    First published
    2026-11-12 07:05 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-12 06:06 UTC
    DNS
    Resolves · checked 2026-11-12 07:15 UTC
    Reported
    PhishDestroy, listing y.org and the names under it
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR2 · precertificate
    Valid 2026-11-12 05:18 UTC to 2027-02-10 05:18 UTC
    Logged 2026-11-12 06:16 UTC in DigiCert Wyvern2027h1, entry 508,673,231
    SHA-256 45054919f9fffd1e1b15e67a291a965737fd20561c01df3f2e6b98803caa2380
    Public key SHA-256 6a28ad5f29dc8edca69b65f03c5d739aeed0620764bac374b7087bba55e63c22
    PhishDestroy
    Addresses
    104.18.8.112 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    104.18.9.112 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.18.8.112, 104.18.9.112): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    y.org
    Registered
    1993-12-01 · CSC Corporate Domains, Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-11 09:10 UTC

    Suggest a correction

  29. staging-ccaymca.y.org US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareUnder y.org, reported by PhishDestroyMX absentSPF missingDMARC missingRegistered 33 y ago
    DetailsHide details for staging-ccaymca.y.org
    Hostname
    staging-ccaymca.y.org
    First seen
    2026-11-12 06:21 UTC
    First published
    2026-11-12 07:05 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-12 06:06 UTC
    DNS
    Resolves · checked 2026-11-12 07:15 UTC
    Reported
    PhishDestroy, listing y.org and the names under it
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR2
    Valid 2026-11-12 05:18 UTC to 2027-02-10 05:18 UTC
    Logged 2026-11-12 06:16 UTC in Google PlumbersArms2027h1, entry 750,476,594
    SHA-256 60ec85935207e322cea9e8825e2c2e23ba8d958a9de768fea4cc630e5ec0080d
    Public key SHA-256 34c89dc81edc2ae5d7fbb0c81dc19db1975e6208355af6131fd9869e997e85d3
    PhishDestroy
    Addresses
    104.18.8.112 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    104.18.9.112 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.18.8.112, 104.18.9.112): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    y.org
    Registered
    1993-12-01 · CSC Corporate Domains, Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-11 09:10 UTC

    Suggest a correction

  30. staging-lasvegasymca.y.org US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareUnder y.org, reported by PhishDestroyMX absentSPF missingDMARC missingRegistered 33 y ago
    DetailsHide details for staging-lasvegasymca.y.org
    Hostname
    staging-lasvegasymca.y.org
    First seen
    2026-11-12 06:21 UTC
    First published
    2026-11-12 07:05 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-12 06:06 UTC
    DNS
    Resolves · checked 2026-11-12 07:15 UTC
    Reported
    PhishDestroy, listing y.org and the names under it
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR2 · precertificate
    Valid 2026-11-12 05:18 UTC to 2027-02-10 05:18 UTC
    Logged 2026-11-12 06:16 UTC in Geomys Tuscolo2027h1, entry 586,837,602
    SHA-256 02a7ae5a3c8ec9279fbc9de55b8a649fb5c71cc6e99ed5ae3bc19fd49d04416d
    Public key SHA-256 7f5972634ac22005f332aacb95b196c406f53235a6112502ac527fb91436c189
    PhishDestroy
    Addresses
    104.18.8.112 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    104.18.9.112 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.18.8.112, 104.18.9.112): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    y.org
    Registered
    1993-12-01 · CSC Corporate Domains, Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-11 09:10 UTC

    Suggest a correction

  31. staging-owensborofamilyymca.y.org US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareUnder y.org, reported by PhishDestroyMX absentSPF missingDMARC missingRegistered 33 y ago
    DetailsHide details for staging-owensborofamilyymca.y.org
    Hostname
    staging-owensborofamilyymca.y.org
    First seen
    2026-11-12 06:21 UTC
    First published
    2026-11-12 07:05 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-12 06:06 UTC
    DNS
    Resolves · checked 2026-11-12 07:15 UTC
    Reported
    PhishDestroy, listing y.org and the names under it
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR2
    Valid 2026-11-12 05:18 UTC to 2027-02-10 05:18 UTC
    Logged 2026-11-12 06:17 UTC in Let's Encrypt Willow2027h1, entry 1,113,177,746
    SHA-256 45457bdb350e4a3e3c466f5dcfff5feb21dc4d32ae460ed378ec6470232ac6df
    Public key SHA-256 5cb30489f7ee8110208fc3fdc02ac55769c19a842802ffa81e6d4d3f77a3bc80
    PhishDestroy
    Addresses
    104.18.8.112 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    104.18.9.112 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.18.8.112, 104.18.9.112): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    y.org
    Registered
    1993-12-01 · CSC Corporate Domains, Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-11 09:10 UTC

    Suggest a correction

  32. staging-pittsburghymca.y.org US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareUnder y.org, reported by PhishDestroyMX absentSPF missingDMARC missingRegistered 33 y ago
    DetailsHide details for staging-pittsburghymca.y.org
    Hostname
    staging-pittsburghymca.y.org
    First seen
    2026-11-12 06:21 UTC
    First published
    2026-11-12 07:05 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-12 06:06 UTC
    DNS
    Resolves · checked 2026-11-12 07:15 UTC
    Reported
    PhishDestroy, listing y.org and the names under it
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR2
    Valid 2026-11-12 05:18 UTC to 2027-02-10 05:18 UTC
    Logged 2026-11-12 06:17 UTC in Google ParcelYard2027h1, entry 750,292,390
    SHA-256 356464d989c936b615a9229a68abeb9e2cb17aad38852bc4c9f578198b6cccbf
    Public key SHA-256 de7fd2db54c6aab67ded5c0c844e2071717b1c96495188e6b64294a645b0cb69
    PhishDestroy
    Addresses
    104.18.8.112 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    104.18.9.112 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.18.8.112, 104.18.9.112): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    y.org
    Registered
    1993-12-01 · CSC Corporate Domains, Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-11 09:10 UTC

    Suggest a correction

  33. staging-southsoundymcavirtual.y.org US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareUnder y.org, reported by PhishDestroyMX absentSPF missingDMARC missingRegistered 33 y ago
    DetailsHide details for staging-southsoundymcavirtual.y.org
    Hostname
    staging-southsoundymcavirtual.y.org
    First seen
    2026-11-12 06:21 UTC
    First published
    2026-11-12 07:05 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-12 06:06 UTC
    DNS
    Resolves · checked 2026-11-12 07:15 UTC
    Reported
    PhishDestroy, listing y.org and the names under it
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR2
    Valid 2026-11-12 05:18 UTC to 2027-02-10 05:18 UTC
    Logged 2026-11-12 06:17 UTC in Google PlumbersArms2027h1, entry 750,482,830
    SHA-256 5e77d55fc851171f15d7465e23983ca059c82a150ab74de7459e99f39a3299b1
    Public key SHA-256 fe9cc0f44c7d1983215a344229411dda51b028c482243e395686bdb1d2969b9a
    PhishDestroy
    Addresses
    104.18.8.112 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    104.18.9.112 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.18.8.112, 104.18.9.112): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    y.org
    Registered
    1993-12-01 · CSC Corporate Domains, Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-11 09:10 UTC

    Suggest a correction

  34. staging-yimv.y.org US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareUnder y.org, reported by PhishDestroyMX absentSPF missingDMARC missingRegistered 33 y ago
    DetailsHide details for staging-yimv.y.org
    Hostname
    staging-yimv.y.org
    First seen
    2026-11-12 06:21 UTC
    First published
    2026-11-12 07:05 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-12 06:06 UTC
    DNS
    Resolves · checked 2026-11-12 07:15 UTC
    Reported
    PhishDestroy, listing y.org and the names under it
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR1 · precertificate
    Valid 2026-11-12 05:18 UTC to 2027-02-10 05:18 UTC
    Logged 2026-11-12 06:17 UTC in Let's Encrypt Sycamore2027h1, entry 1,159,280,338
    SHA-256 17e6875b49bcde0c6fbf1ad5e280546f8e00720013ab1b0cd5d251f94b7e123e
    Public key SHA-256 cc1579cef2bc4784ebb7cde72aebd203b6e25dcf278d09220a9f6b636a22445b
    PhishDestroy
    Addresses
    104.18.8.112 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    104.18.9.112 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.18.8.112, 104.18.9.112): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    y.org
    Registered
    1993-12-01 · CSC Corporate Domains, Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-11 09:10 UTC

    Suggest a correction

  35. staging-ymcadane.y.org US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareUnder y.org, reported by PhishDestroyMX absentSPF missingDMARC missingRegistered 33 y ago
    DetailsHide details for staging-ymcadane.y.org
    Hostname
    staging-ymcadane.y.org
    First seen
    2026-11-12 06:21 UTC
    First published
    2026-11-12 07:05 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-12 06:06 UTC
    DNS
    Resolves · checked 2026-11-12 07:15 UTC
    Reported
    PhishDestroy, listing y.org and the names under it
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR1
    Valid 2026-11-12 05:18 UTC to 2027-02-10 05:18 UTC
    Logged 2026-11-12 06:17 UTC in Google PlumbersArms2027h1, entry 750,486,597
    SHA-256 17d41bc2385ecda7ab14379d4580d67dbf5f9db568f47966fbe4518a2bffda0d
    Public key SHA-256 da1fdcae7c0b5565c7b90e2840ef9018890ae091cd6589ed87b443a890d34e39
    PhishDestroy
    Addresses
    104.18.8.112 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    104.18.9.112 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.18.8.112, 104.18.9.112): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    y.org
    Registered
    1993-12-01 · CSC Corporate Domains, Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-11 09:10 UTC

    Suggest a correction

  36. staging-ymcafw.y.org US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareUnder y.org, reported by PhishDestroyMX absentSPF missingDMARC missingRegistered 33 y ago
    DetailsHide details for staging-ymcafw.y.org
    Hostname
    staging-ymcafw.y.org
    First seen
    2026-11-12 06:21 UTC
    First published
    2026-11-12 07:05 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-12 06:06 UTC
    DNS
    Resolves · checked 2026-11-12 07:15 UTC
    Reported
    PhishDestroy, listing y.org and the names under it
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR1 · precertificate
    Valid 2026-11-12 05:19 UTC to 2027-02-10 05:19 UTC
    Logged 2026-11-12 06:17 UTC in DigiCert Sphinx2027h1, entry 451,543,571
    SHA-256 6778b622576458264b0eb7103b4194babfa6b96331c92aea2933992c96231dd4
    Public key SHA-256 f6f7e90731ada8429e1e3ef212e20da7ada84713635554b0e2f85766aca947e7
    PhishDestroy
    Addresses
    104.18.8.112 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    104.18.9.112 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.18.8.112, 104.18.9.112): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    y.org
    Registered
    1993-12-01 · CSC Corporate Domains, Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-11 09:10 UTC

    Suggest a correction

  37. staging-ymcalouisville.y.org US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareUnder y.org, reported by PhishDestroyMX absentSPF missingDMARC missingRegistered 33 y ago
    DetailsHide details for staging-ymcalouisville.y.org
    Hostname
    staging-ymcalouisville.y.org
    First seen
    2026-11-12 06:21 UTC
    First published
    2026-11-12 07:05 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-12 06:06 UTC
    DNS
    Resolves · checked 2026-11-12 07:15 UTC
    Reported
    PhishDestroy, listing y.org and the names under it
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR1 · precertificate
    Valid 2026-11-12 05:19 UTC to 2027-02-10 05:19 UTC
    Logged 2026-11-12 06:17 UTC in Geomys Tuscolo2027h1, entry 586,845,835
    SHA-256 50b34744c388607d2256758536e57c87da70371ac3e9de2158bf423333213137
    Public key SHA-256 56a07c215135c7d782726e6abf49afd28fc8bac079d7816ad8f3978f961b714a
    PhishDestroy
    Addresses
    104.18.8.112 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    104.18.9.112 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.18.8.112, 104.18.9.112): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    y.org
    Registered
    1993-12-01 · CSC Corporate Domains, Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-11 09:10 UTC

    Suggest a correction

  38. zyjgl.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide details for zyjgl.com
    Hostname
    zyjgl.com
    First seen
    2026-11-12 06:21 UTC
    First published
    2026-11-12 07:05 UTC
    Listing
    CERT Polska listed it 2026-05-21 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 06:50 UTC
    DNS
    Resolves · checked 2026-11-12 07:15 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-11-12 05:20 UTC to 2027-02-10 05:20 UTC
    Logged 2026-11-12 06:19 UTC in DigiCert Sphinx2027h1, entry 451,552,282
    SHA-256 8f948ce6bd26f56f640294c73555154fcb5a4bfb04bf97d4cc82a2cb4813deb2
    Public key SHA-256 acfe840adbeb03fca530926579c1f0c575a525bd988277d45cf3488a0c70c08d
    Addresses
    104.21.72.32 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.174.103 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.72.32, 172.67.174.103): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    zyjgl.com
    Registered
    2026-05-19 · Cloud Yuqu LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-12 07:04 UTC

    Suggest a correction

  39. andrescoder.ascsonoway.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareUnder ascsonoway.com, listed by MetaMaskMX presentSPF -allDMARC quarantineRegistered 17 mo ago
    DetailsHide details for andrescoder.ascsonoway.com
    Hostname
    andrescoder.ascsonoway.com
    First seen
    2026-11-12 06:16 UTC
    First published
    2026-11-12 07:05 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 06:09 UTC
    DNS
    Resolves · checked 2026-11-12 07:15 UTC
    Listed
    MetaMask, listing ascsonoway.com and the names under it
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR2 · precertificate
    Valid 2026-11-12 05:15 UTC to 2027-02-10 05:15 UTC
    Logged 2026-11-12 06:13 UTC in Geomys Tuscolo2027h1, entry 586,812,314
    SHA-256 c020602f523756e6d3b163ab85dd09e66bceb2644f4b59e306c5dd16333cbcf9
    Public key SHA-256 2fb374880ed060b550037b76f9017bad565c220d1ffdb5d2336c899b450e9a55
    Addresses
    104.21.47.88 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.145.253 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.47.88, 172.67.145.253): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    ascsonoway.com
    Registered
    2025-06-15 · Cloudflare, Inc.
    MX
    Receives mail at route1.mx.cloudflare.net, route3.mx.cloudflare.net, route2.mx.cloudflare.net
    SPF
    SPF record with -all: other senders fail
    DMARC
    DMARC policy p=quarantine
    Checked
    2026-11-12 07:04 UTC

    Suggest a correction

  40. gwjgj.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide details for gwjgj.com
    Hostname
    gwjgj.com
    First seen
    2026-11-12 06:16 UTC
    First published
    2026-11-12 07:05 UTC
    Listing
    CERT Polska listed it 2026-05-21 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 06:50 UTC
    DNS
    Resolves · checked 2026-11-12 07:15 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-11-12 05:12 UTC to 2027-02-10 05:12 UTC
    Logged 2026-11-12 06:11 UTC in DigiCert Wyvern2027h1, entry 508,626,798
    SHA-256 77c06e8c9531e62a9e311a98adccf0dd470ab37e0b3e5f6d84b35477beed6116
    Public key SHA-256 07b988e1a7e65558143add8a4e7f9ca7fd27ff366b4d81404e1c1723139b34a9
    Addresses
    104.21.9.110 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.159.195 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.9.110, 172.67.159.195): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    gwjgj.com
    Registered
    2026-05-19 · Cloud Yuqu LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-12 07:04 UTC

    Suggest a correction

  41. nxtcoin.org US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 7 mo ago
    DetailsHide details for nxtcoin.org
    Hostname
    nxtcoin.org
    First seen
    2026-11-12 06:16 UTC
    First published
    2026-11-12 07:05 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 06:09 UTC
    DNS
    Resolves · checked 2026-11-12 07:15 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-12 05:14 UTC to 2027-02-10 06:13 UTC
    Logged 2026-11-12 06:14 UTC in Google ParcelYard2027h1, entry 750,261,364
    SHA-256 0d81c5654fcc60b9b521d4980ed18703cacfcb37c8bde2bcf239356dab77b195
    Public key SHA-256 e04e74abc5754acf46057f3f352ca6c46025bcb6dcd5912510bf21efb179c4ea
    Addresses
    104.21.28.14 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.170.39 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.28.14, 172.67.170.39): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    nxtcoin.org
    Registered
    2026-04-30 · Gname.com Pte. Ltd.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-12 07:04 UTC

    Suggest a correction

  42. smykbabyoutlets.com US · AS13335 · Cloudflare, Inc.
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide details for smykbabyoutlets.com
    Hostname
    smykbabyoutlets.com
    First seen
    2026-11-12 06:16 UTC
    First published
    2026-11-12 07:05 UTC
    Listing
    CERT Polska listed it 2026-07-19 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 06:50 UTC
    DNS
    Resolves · checked 2026-11-12 07:15 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1
    Valid 2026-09-14 05:43 UTC to 2026-12-13 06:43 UTC
    Logged 2026-11-12 06:11 UTC in DigiCert Wyvern2026h2, entry 2,220,274,832
    SHA-256 0b929adfd8ab9edc570ec625b64b4a5e31226f0e5fed78b2d1b7ae4786d68902
    Public key SHA-256 b23714e7ab1c3128db342e6edde4db1c9c746d4fac25789dc96c862daf7c667a
    Addresses
    104.18.13.234 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.18.13.234): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    smykbabyoutlets.com
    Registered
    2026-07-17 · Cloudflare, Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-12 07:04 UTC

    Suggest a correction

  43. szczegoly-8233.casa US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 59 d ago
    DetailsHide details for szczegoly-8233.casa
    Hostname
    szczegoly-8233.casa
    First seen
    2026-11-12 06:16 UTC
    First published
    2026-11-12 07:05 UTC
    Listing
    CERT Polska listed it 2026-09-15 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 06:50 UTC
    DNS
    Resolves · checked 2026-11-12 07:15 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1
    Valid 2026-09-14 04:41 UTC to 2026-12-13 05:40 UTC
    Logged 2026-11-12 06:13 UTC in GoDaddy Aquamarine2026h2, entry 34,306,807
    SHA-256 49deaeca46f484ede662be17dd6c1694eccb8e5ab7c024552422616788ec8364
    Public key SHA-256 d018f7ea0b3280c83bd339df709a640db407c77864953515dc6dbddf1457cab2
    Addresses
    104.21.77.109 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.207.47 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.77.109, 172.67.207.47): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    szczegoly-8233.casa
    Registered
    2026-09-14 · Dynadot Inc
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-12 07:04 UTC

    Suggest a correction

  44. 23-hub-concretegov.pages.dev US · AS13335 · Cloudflare, Inc.4 addresses
    ListedCloudflareListed by MetaMask
    DetailsHide details for 23-hub-concretegov.pages.dev
    Hostname
    23-hub-concretegov.pages.dev
    First seen
    2026-11-12 06:12 UTC
    First published
    2026-11-12 07:05 UTC
    Listing
    MetaMask: first observed in the feed 2026-11-12 · still listed at the last successful feed check 2026-11-12 06:09 UTC
    DNS
    Resolves · checked 2026-11-12 07:15 UTC
    Listed
    MetaMask
    1. Certificate logged in CT
    2. Observed in the MetaMask feed
    3. We matched the new listing
    4. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-11-12 01:49 UTC to 2027-02-10 01:49 UTC
    Logged 2026-11-12 02:47 UTC in DigiCert Sphinx2027h1, entry 449,645,758
    SHA-256 ed668e1c5b5b673a3e8fea00bebe1f373db65e4a66dffac3a782216861536ba1
    Public key SHA-256 1b098986060fa4c6872bc3803b20a6f10fe9ae620678359bf5fc5001e1a56e05
    Addresses
    172.66.44.169 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.66.47.87 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:310c::ac42:2ca9
    2606:4700:310c::ac42:2f57
    Cloudflare
    Cloudflare (172.66.44.169, 172.66.47.87): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.

    Suggest a correction

  45. 372-curvefi.pages.dev US · AS13335 · Cloudflare, Inc.4 addressesCurve Finance
    ListedCloudflareListed by MetaMask
    DetailsHide details for 372-curvefi.pages.dev
    Hostname
    372-curvefi.pages.dev
    First seen
    2026-11-12 06:12 UTC
    First published
    2026-11-12 07:05 UTC
    Listing
    MetaMask: first observed in the feed 2026-11-12 · still listed at the last successful feed check 2026-11-12 06:09 UTC
    DNS
    Not resolving · checked 2026-11-12 07:15 UTC
    Listed
    MetaMask
    1. Certificate logged in CT
    2. Observed in the MetaMask feed
    3. We matched the new listing
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-11-12 04:59 UTC to 2027-02-10 04:59 UTC
    Logged 2026-11-12 05:57 UTC in Google PlumbersArms2027h1, entry 750,249,863
    SHA-256 9d534841a12c831ef19961e8ec17a5f45209f8e033dc051d77674207bf3b3bc8
    Public key SHA-256 c2d04abdb607a058a21221afb25d954113b941a41b092beb6362be00479781af
    Brand
    Curve Finance
    Addresses
    172.66.44.157 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.66.47.99 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:310c::ac42:2c9d
    2606:4700:310c::ac42:2f63
    Cloudflare
    Cloudflare (172.66.44.157, 172.66.47.99): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.

    Suggest a correction

  46. au-rain-bet.com US · AS13335 · Cloudflare, Inc.4 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 5 mo ago
    DetailsHide details for au-rain-bet.com
    Hostname
    au-rain-bet.com
    First seen
    2026-11-12 06:12 UTC
    First published
    2026-11-12 07:05 UTC
    Listing
    MetaMask: first observed in the feed 2026-11-12 · still listed at the last successful feed check 2026-11-12 06:09 UTC
    DNS
    Resolves · checked 2026-11-12 07:15 UTC
    Listed
    MetaMask
    1. Certificate logged in CT
    2. Observed in the MetaMask feed
    3. We matched the new listing
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-10 21:29 UTC to 2027-02-08 22:27 UTC
    Logged 2026-11-10 22:29 UTC in Google PlumbersArms2027h1, entry 725,961,803
    SHA-256 3016f3e8862a7b1603875a21a2d6e07fd02b84df603417c5afc97012772b8d97
    Public key SHA-256 0df6d6ee0c713ccd39ebf4197fd4c208c8226dfbc47a4feb3b02e0e2ffa56a14
    Addresses
    104.21.26.128 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.136.69 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3031::6815:1a80
    2606:4700:3034::ac43:8845
    Cloudflare
    Cloudflare (104.21.26.128, 172.67.136.69): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    au-rain-bet.com
    Registered
    2026-06-05 · NameCheap, Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-12 07:04 UTC

    Suggest a correction

  47. nav--exoodus-web3-io-com.pages.dev US · AS13335 · Cloudflare, Inc.4 addresses
    ListedCloudflareListed by MetaMask
    DetailsHide details for nav--exoodus-web3-io-com.pages.dev
    Hostname
    nav--exoodus-web3-io-com.pages.dev
    First seen
    2026-11-12 06:12 UTC
    First published
    2026-11-12 07:05 UTC
    Listing
    MetaMask: first observed in the feed 2026-11-12 · still listed at the last successful feed check 2026-11-12 06:09 UTC
    DNS
    Resolves · checked 2026-11-12 07:15 UTC
    Listed
    MetaMask
    1. Certificate logged in CT
    2. Observed in the MetaMask feed
    3. We matched the new listing
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-11 22:07 UTC to 2027-02-09 23:05 UTC
    Logged 2026-11-11 23:07 UTC in IPng Networks Halloumi2027h1, entry 461,668,666
    SHA-256 72aad4bf37833864dd088a458d213e8647a55c278734f988f7c2e764b4a1e8b3
    Public key SHA-256 643f243f49f2eb695b9937df192386bbbe2749c1bd7ecdb56c1e61e712c4c387
    Addresses
    172.66.44.223 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.66.47.33 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:310c::ac42:2cdf
    2606:4700:310c::ac42:2f21
    Cloudflare
    Cloudflare (172.66.44.223, 172.66.47.33): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.

    Suggest a correction

  48. nav-exoodus--web3--io-com.pages.dev US · AS13335 · Cloudflare, Inc.4 addresses
    ListedCloudflareListed by MetaMask
    DetailsHide details for nav-exoodus--web3--io-com.pages.dev
    Hostname
    nav-exoodus--web3--io-com.pages.dev
    First seen
    2026-11-12 06:12 UTC
    First published
    2026-11-12 07:05 UTC
    Listing
    MetaMask: first observed in the feed 2026-11-12 · still listed at the last successful feed check 2026-11-12 06:09 UTC
    DNS
    Resolves · checked 2026-11-12 07:15 UTC
    Listed
    MetaMask
    1. Certificate logged in CT
    2. Observed in the MetaMask feed
    3. We matched the new listing
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-11 22:28 UTC to 2027-02-09 23:27 UTC
    Logged 2026-11-11 23:28 UTC in DigiCert Wyvern2027h1, entry 504,436,219
    SHA-256 53bf2c67aed32a7a4d03f39d2082a10cf585885b53b1d4d33fe11338b6f30883
    Public key SHA-256 a67837f056c09a28e846a45139b8cf92424da83f6e9e8056bdc79d249b0025c7
    Addresses
    172.66.44.183 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.66.47.73 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:310c::ac42:2cb7
    2606:4700:310c::ac42:2f49
    Cloudflare
    Cloudflare (172.66.44.183, 172.66.47.73): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.

    Suggest a correction

  49. proposal-kinctiq.pages.dev US · AS13335 · Cloudflare, Inc.4 addresses
    ListedCloudflareListed by MetaMask
    DetailsHide details for proposal-kinctiq.pages.dev
    Hostname
    proposal-kinctiq.pages.dev
    First seen
    2026-11-12 06:12 UTC
    First published
    2026-11-12 07:05 UTC
    Listing
    MetaMask: first observed in the feed 2026-11-12 · still listed at the last successful feed check 2026-11-12 06:09 UTC
    DNS
    Resolves · checked 2026-11-12 07:15 UTC
    Listed
    MetaMask
    1. Certificate logged in CT
    2. Observed in the MetaMask feed
    3. We matched the new listing
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-11-10 23:34 UTC to 2027-02-08 23:34 UTC
    Logged 2026-11-11 00:33 UTC in Google PlumbersArms2027h1, entry 727,593,955
    SHA-256 25be47bf035cf25427fe5bc9842b90e8ee47cb217219d7ebc18efe413578ab41
    Public key SHA-256 0a0e08ba3a34bb4d6bc8eff337e12384e986640275bd10baf7484151acba41cd
    Addresses
    172.66.44.54 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.66.47.202 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:310c::ac42:2c36
    2606:4700:310c::ac42:2fca
    Cloudflare
    Cloudflare (172.66.44.54, 172.66.47.202): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.

    Suggest a correction

  50. xrpus.io US · AS13335 · Cloudflare, Inc.4 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 1 d ago
    DetailsHide details for xrpus.io
    Hostname
    xrpus.io
    First seen
    2026-11-12 06:12 UTC
    First published
    2026-11-12 07:05 UTC
    Listing
    MetaMask: first observed in the feed 2026-11-12 · still listed at the last successful feed check 2026-11-12 06:09 UTC
    DNS
    Resolves · checked 2026-11-12 07:15 UTC
    Listed
    MetaMask
    1. Certificate logged in CT
    2. Observed in the MetaMask feed
    3. We matched the new listing
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-11-11 23:08 UTC to 2027-02-09 23:08 UTC
    Logged 2026-11-12 00:06 UTC in Google PlumbersArms2027h1, entry 745,563,263
    SHA-256 203a108762cc3e6b8fa20ea3b6afbad15f4cae0e3daa3cf3f9a6f6333e6093bf
    Public key SHA-256 0f9a41e293c605d6ea4b89bbee93ff39ab16ffba632b39cacabda71556a392c5
    Addresses
    104.21.54.24 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.222.224 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3031::6815:3618
    2606:4700:3033::ac43:dee0
    Cloudflare
    Cloudflare (104.21.54.24, 172.67.222.224): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    xrpus.io
    Registered
    2026-11-11 · Eranet International Limited
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-12 07:04 UTC

    Suggest a correction

  51. cozyavino.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX presentSPF ~allDMARC missingRegistered 10 mo ago
    DetailsHide details for cozyavino.com
    Hostname
    cozyavino.com
    First seen
    2026-11-12 06:10 UTC
    First published
    2026-11-12 07:05 UTC
    Listing
    CERT Polska listed it 2026-06-08 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 06:50 UTC
    DNS
    Resolves · checked 2026-11-12 07:15 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1
    Valid 2026-11-12 05:05 UTC to 2027-02-10 06:03 UTC
    Logged 2026-11-12 06:05 UTC in DigiCert Wyvern2027h1, entry 508,567,051
    SHA-256 0d13794c1d6553cdbb009e373e81575aec80f633e308d247719e82857f92327f
    Public key SHA-256 fe83afc9f2e5ea3fad6f77052c5aeaa253d752c29b51e19f7961bf3c9c3d9932
    Addresses
    104.21.68.19 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.185.27 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.68.19, 172.67.185.27): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    cozyavino.com
    Registered
    2026-01-20 · Spaceship, Inc.
    MX
    Receives mail at route3.mx.cloudflare.net, route1.mx.cloudflare.net, route2.mx.cloudflare.net
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-12 07:04 UTC

    Suggest a correction

  52. docker-proxy.virzz.icu US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareUnder virzz.icu, listed by MetaMaskMX presentSPF ~allDMARC missingRegistered 12 mo ago
    DetailsHide details for docker-proxy.virzz.icu
    Hostname
    docker-proxy.virzz.icu
    First seen
    2026-11-12 06:10 UTC
    First published
    2026-11-12 07:05 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 06:09 UTC
    DNS
    Resolves · checked 2026-11-12 07:15 UTC
    Listed
    MetaMask, listing virzz.icu and the names under it
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WR1 · precertificate
    Valid 2026-11-12 05:09 UTC to 2027-02-10 05:53 UTC
    Logged 2026-11-12 06:09 UTC in Geomys Tuscolo2027h1, entry 586,779,922
    SHA-256 84e78745950edeee059e974714c94f0f05bb5c0e25444852fdbd0d0a8e408338
    Public key SHA-256 2534a478dcbcb457a4984690ebefab8396ae4f4cc723df4e851b41eb5da7ea6f
    Addresses
    104.21.71.244 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.172.101 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.71.244, 172.67.172.101): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    virzz.icu
    Registered
    2025-11-11 · Alibaba Cloud Computing Ltd. d/b/a HiChina (www.net.cn)
    MX
    Receives mail at route1.mx.cloudflare.net, route2.mx.cloudflare.net, route3.mx.cloudflare.net
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-11 08:57 UTC

    Suggest a correction

  53. dphantom.pages.dev US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMask
    DetailsHide details for dphantom.pages.dev
    Hostname
    dphantom.pages.dev
    First seen
    2026-11-12 06:10 UTC
    First published
    2026-11-12 07:05 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 06:09 UTC
    DNS
    Resolves · checked 2026-11-12 07:15 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-12 05:05 UTC to 2027-02-10 06:04 UTC
    Logged 2026-11-12 06:05 UTC in Google ParcelYard2027h1, entry 750,146,921
    SHA-256 c301e6f4233e375550ddda055fc0433e58ef853e8d23e027f6600024d4f6df8f
    Public key SHA-256 b7c5af6524249dc2ca1cf33ebf20e042cd1f59501c9fd5647f482f7c84d03524
    Addresses
    172.66.44.150 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.66.47.106 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (172.66.44.150, 172.66.47.106): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.

    Suggest a correction

  54. oferty-status-6428.beer US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 59 d ago
    DetailsHide details for oferty-status-6428.beer
    Hostname
    oferty-status-6428.beer
    First seen
    2026-11-12 06:10 UTC
    First published
    2026-11-12 07:05 UTC
    Listing
    CERT Polska listed it 2026-09-14 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 06:50 UTC
    DNS
    Resolves · checked 2026-11-12 07:15 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-12 05:09 UTC to 2027-02-10 06:07 UTC
    Logged 2026-11-12 06:09 UTC in Let's Encrypt Sycamore2027h1, entry 1,159,189,589
    SHA-256 cba315e650b2b496a86d89f2086587caf026fcefe94487a276f23a687146cedb
    Public key SHA-256 968c0a3f47c6f80f59b2a039ec1fd49b7418c4012b6f850bfecfc77770caf644
    Addresses
    104.21.25.170 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.134.104 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.25.170, 172.67.134.104): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    oferty-status-6428.beer
    Registered
    2026-09-14 · Dynadot Inc
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-12 07:04 UTC

    Suggest a correction

  55. stakotoken.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 12 mo ago
    DetailsHide details for stakotoken.com
    Hostname
    stakotoken.com
    First seen
    2026-11-12 06:10 UTC
    First published
    2026-11-12 07:05 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 06:09 UTC
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-12 06:06 UTC
    DNS
    Resolves · checked 2026-11-12 07:15 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1
    Valid 2026-09-13 23:50 UTC to 2026-12-13 00:50 UTC
    Logged 2026-11-12 06:09 UTC in Geomys Tuscolo2026h2, entry 1,053,749,881
    SHA-256 01a013a17cb8804555fe4cab66cdfb0cc1b5e189a94cae10ee0160692204bfe1
    Public key SHA-256 3952ed173ef33854b85fdeea58af2a4af16c301fa33c29408e37bbd5ce76dfdb
    Addresses
    104.21.47.233 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.174.121 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.47.233, 172.67.174.121): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    stakotoken.com
    Registered
    2025-11-21 · Cloudflare, Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-12 07:04 UTC

    Suggest a correction

  56. yeldunravu-italy.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide details for yeldunravu-italy.com
    Hostname
    yeldunravu-italy.com
    First seen
    2026-11-12 06:10 UTC
    First published
    2026-11-12 07:05 UTC
    Listing
    CERT Polska listed it 2026-09-14 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 06:50 UTC
    DNS
    Resolves · checked 2026-11-12 07:15 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1
    Valid 2026-09-14 02:05 UTC to 2026-12-13 03:05 UTC
    Logged 2026-11-12 06:06 UTC in DigiCert Wyvern2026h2, entry 2,220,265,773
    SHA-256 526f4f050eeb6861832389acc3809b736ffabf97bf0ef3dd0f7ec98de5ca4216
    Public key SHA-256 9b2fe9f66072deafadc62d4c87fda7d1364de671cf95cc6fe13ce04049700ff8
    Addresses
    104.21.38.202 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.138.80 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.38.202, 172.67.138.80): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    yeldunravu-italy.com
    Registered
    2026-07-17 · Dynadot Inc
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-12 07:04 UTC

    Suggest a correction

  57. yeldunravu-netherlands.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide details for yeldunravu-netherlands.com
    Hostname
    yeldunravu-netherlands.com
    First seen
    2026-11-12 06:10 UTC
    First published
    2026-11-12 07:05 UTC
    Listing
    CERT Polska listed it 2026-09-14 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 06:50 UTC
    DNS
    Resolves · checked 2026-11-12 07:15 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1
    Valid 2026-09-14 02:05 UTC to 2026-12-13 03:05 UTC
    Logged 2026-11-12 06:07 UTC in IPng Networks Halloumi2026h2a, entry 1,300,237,173
    SHA-256 4ea832790e68d60343157b10961ca19d5eef98784716b00f4967f2163746e7f2
    Public key SHA-256 9286e1ef3b143acc63eb6df677464e0e68e3d603dca25a9374b0a45de9c199e9
    Addresses
    104.21.19.216 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.190.59 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.19.216, 172.67.190.59): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    yeldunravu-netherlands.com
    Registered
    2026-07-17 · Dynadot Inc
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-12 07:04 UTC

    Suggest a correction

  58. zjuzdjpi.shop US · AS13335 · Cloudflare, Inc.
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 59 d ago
    DetailsHide details for zjuzdjpi.shop
    Hostname
    zjuzdjpi.shop
    First seen
    2026-11-12 06:10 UTC
    First published
    2026-11-12 07:05 UTC
    Listing
    CERT Polska listed it 2026-09-16 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 06:50 UTC
    DNS
    Resolves · checked 2026-11-12 07:15 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-11-12 05:09 UTC to 2027-02-10 05:09 UTC
    Logged 2026-11-12 06:08 UTC in IPng Networks Gouda2027h1, entry 391,740,147
    SHA-256 9b9e1828c930c9d5dd7e7519099561942d3ef2e967314b93a2f03755ed949118
    Public key SHA-256 7d249f4e603042794075c42025492b81f9a77da7b6acfac26422a339e3103225
    Addresses
    104.17.231.54 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.17.231.54): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    zjuzdjpi.shop
    Registered
    2026-09-14 · Web Commerce Communication Ltd.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-12 07:04 UTC

    Suggest a correction

  59. claim-brew.family US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 59 d ago
    DetailsHide details for claim-brew.family
    Hostname
    claim-brew.family
    First seen
    2026-11-12 06:05 UTC
    First published
    2026-11-12 07:05 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 06:09 UTC
    DNS
    Resolves · checked 2026-11-12 07:15 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-12 05:03 UTC to 2027-02-10 05:03 UTC
    Logged 2026-11-12 06:01 UTC in Google PlumbersArms2027h1, entry 750,293,483
    SHA-256 7e63155758021d7f148db6805219e36e5876fb7b4ba214d80a05e397b0e39dca
    Public key SHA-256 dd3dd111366b934e39e23ae53316f56b3f9fa3734300a360ad9beeeb64520ce7
    Addresses
    104.21.10.121 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.163.82 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.10.121, 172.67.163.82): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    claim-brew.family
    Registered
    2026-09-14 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-12 07:04 UTC

    Suggest a correction

  60. pc.toop-okx.com.cn US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareUnder toop-okx.com.cn, listed by MetaMaskMX absentSPF missingDMARC missing
    DetailsHide details for pc.toop-okx.com.cn
    Hostname
    pc.toop-okx.com.cn
    First seen
    2026-11-12 06:05 UTC
    First published
    2026-11-12 07:05 UTC
    Listing
    MetaMask: first observed in the feed 2026-11-08 · still listed at the last successful feed check 2026-11-12 06:09 UTC
    DNS
    Resolves · checked 2026-11-12 07:15 UTC
    Listed
    MetaMask, listing toop-okx.com.cn and the names under it
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR2
    Valid 2026-11-12 05:04 UTC to 2027-02-10 05:04 UTC
    Logged 2026-11-12 06:02 UTC in Google ParcelYard2027h1, entry 750,117,650
    SHA-256 7c3ba3727c230056fca0452271bddd1eb3901d9c2f692357c956f92b9cca00f1
    Public key SHA-256 308df30acee81909e5a447e51ce9df0c3a9a17fe7ef31e0986a29dafe17b871c
    Addresses
    104.21.83.34 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.211.35 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.83.34, 172.67.211.35): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    toop-okx.com.cn
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-12 00:15 UTC

    Suggest a correction

  61. treasurys-pool-flare.network US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide details for treasurys-pool-flare.network
    Hostname
    treasurys-pool-flare.network
    First seen
    2026-11-12 06:05 UTC
    First published
    2026-11-12 07:05 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 06:09 UTC
    DNS
    Resolves · checked 2026-11-12 07:15 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-11-12 05:06 UTC to 2027-02-10 05:06 UTC
    Logged 2026-11-12 06:04 UTC in Let's Encrypt Willow2027h1, entry 1,113,031,277
    SHA-256 c832e5871f6d2acf61879867354d90f0121cc4c575e31964d9f89dd166b82eb4
    Public key SHA-256 2ebfe5d6afb7d58dd612395d3360742222995a024aee8c0df85c434827ed66c2
    Addresses
    104.21.88.104 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.176.226 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.88.104, 172.67.176.226): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    treasurys-pool-flare.network
    Registered
    2026-05-18 · PDR Ltd. d/b/a PublicDomainRegistry.com
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-12 07:04 UTC

    Suggest a correction

  62. watchpumpfun.live US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 59 d ago
    DetailsHide details for watchpumpfun.live
    Hostname
    watchpumpfun.live
    First seen
    2026-11-12 06:05 UTC
    First published
    2026-11-12 07:05 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 06:09 UTC
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-12 06:06 UTC
    DNS
    Resolves · checked 2026-11-12 07:15 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-11-12 05:02 UTC to 2027-02-10 05:02 UTC
    Logged 2026-11-12 06:01 UTC in Let's Encrypt Willow2027h1, entry 1,112,987,573
    SHA-256 6dafc77508782a9b38e37983a429805822957e1fefaae1aae6353f4f4c8ce845
    Public key SHA-256 baab6ce844472ae5fd898ba0911a1dd99f29a828e468f897cae49b0193308535
    Addresses
    104.21.37.206 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.212.232 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.37.206, 172.67.212.232): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    watchpumpfun.live
    Registered
    2026-09-14 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-12 07:04 UTC

    Suggest a correction

  63. www.wirexdigitalwallet.com US · AS13335 · Cloudflare, Inc.
    ListedCloudflareUnder wirexdigitalwallet.com, listed by MetaMaskMX presentSPF ~allDMARC policy noneRegistered 2 mo ago
    DetailsHide details for www.wirexdigitalwallet.com
    Hostname
    www.wirexdigitalwallet.com
    First seen
    2026-11-12 06:05 UTC
    First published
    2026-11-12 07:05 UTC
    Listing
    MetaMask: first observed in the feed 2026-11-03 · still listed at the last successful feed check 2026-11-12 06:09 UTC
    DNS
    Resolves · checked 2026-11-12 07:15 UTC
    Listed
    MetaMask, listing wirexdigitalwallet.com and the names under it
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-12 05:00 UTC to 2027-02-10 06:00 UTC
    Logged 2026-11-12 06:00 UTC in Geomys Tuscolo2027h1, entry 586,709,376
    SHA-256 158910a0963b10af5533eab205c1616e1f509537f453812d3919689b7b879108
    Public key SHA-256 aa60792d4e07e7fdebe088738e347d47c9781b03ecbe2180465673f355ce2a69
    Addresses
    185.158.133.1 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (185.158.133.1): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    wirexdigitalwallet.com
    Registered
    2026-09-07 · IONOS SE
    MX
    Receives mail at mx.zoho.com, mx2.zoho.com, mx3.zoho.com
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    DMARC policy p=none: reports only
    Checked
    2026-11-11 13:05 UTC

    Suggest a correction

  64. xanvurleqai-app.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide details for xanvurleqai-app.com
    Hostname
    xanvurleqai-app.com
    First seen
    2026-11-12 06:05 UTC
    First published
    2026-11-12 07:05 UTC
    Listing
    CERT Polska listed it 2026-07-19 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 06:50 UTC
    DNS
    Resolves · checked 2026-11-12 07:15 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-12 05:01 UTC to 2027-02-10 06:00 UTC
    Logged 2026-11-12 06:01 UTC in DigiCert Wyvern2027h1, entry 508,528,104
    SHA-256 6c7584df314b842e7f315485ed0680bbb995ef8131b370fb1ea7e14d3d6ac404
    Public key SHA-256 a504941c3bacdf7387f51e14595659d05f4beaf9f67c734b44b031e2ba61a9b7
    Addresses
    104.21.79.211 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.148.205 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.79.211, 172.67.148.205): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    xanvurleqai-app.com
    Registered
    2026-07-16 · Eranet International Limited
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-12 07:04 UTC

    Suggest a correction

  65. expensive.digital US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide details for expensive.digital
    Hostname
    expensive.digital
    First seen
    2026-11-12 05:56 UTC
    First published
    2026-11-12 07:05 UTC
    Listing
    CERT Polska listed it 2026-06-15 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 06:50 UTC
    DNS
    Resolves · checked 2026-11-12 07:15 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-11-12 04:54 UTC to 2027-02-10 04:54 UTC
    Logged 2026-11-12 05:53 UTC in DigiCert Wyvern2027h1, entry 508,451,056
    SHA-256 99e4860ff171112313ed2c02b323eddc8df505dc4bd72d74ec926b9214ab4c59
    Public key SHA-256 975dee49b5046acf9801d739a53dbadee9f0b5ecbed86714a925f01ac5eb1b49
    Addresses
    104.21.56.156 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.152.241 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.56.156, 172.67.152.241): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    expensive.digital
    Registered
    2026-05-19 · Hosting Concepts B.V. d/b/a Registrar.eu
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-12 07:04 UTC

    Suggest a correction

  66. plotfinance-dashboard.pages.dev US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMask
    DetailsHide details for plotfinance-dashboard.pages.dev
    Hostname
    plotfinance-dashboard.pages.dev
    First seen
    2026-11-12 05:56 UTC
    First published
    2026-11-12 07:05 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 06:09 UTC
    DNS
    Resolves · checked 2026-11-12 07:15 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-12 04:54 UTC to 2027-02-10 05:53 UTC
    Logged 2026-11-12 05:54 UTC in Google ParcelYard2027h1, entry 750,024,352
    SHA-256 2495f2355c8575130839fd45cf6350b96587d1d26c8de07e6a5c9dee850ec68c
    Public key SHA-256 9b98cf52d8fb70fc81f559d36ec67f7bf6ee5d0b9a01c0a571c2ce680ad3fa0c
    Addresses
    172.66.44.60 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.66.47.196 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (172.66.44.60, 172.66.47.196): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.

    Suggest a correction

  67. tesla.magical77889.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareUnder magical77889.com, listed by MetaMaskMX absentSPF missingDMARC missingRegistered 25 d ago
    DetailsHide details for tesla.magical77889.com
    Hostname
    tesla.magical77889.com
    First seen
    2026-11-12 05:56 UTC
    First published
    2026-11-12 07:05 UTC
    Listing
    MetaMask: first observed in the feed 2026-11-03 · still listed at the last successful feed check 2026-11-12 06:09 UTC
    DNS
    Resolves · checked 2026-11-12 07:15 UTC
    Listed
    MetaMask, listing magical77889.com and the names under it
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1
    Valid 2026-11-12 04:54 UTC to 2027-02-10 05:54 UTC
    Logged 2026-11-12 05:54 UTC in Let's Encrypt Willow2027h1, entry 1,112,925,784
    SHA-256 44f369077218c00e212d92a044ad5c2420024315821fdd16bdefef5a0e0bcb93
    Public key SHA-256 6bba4bc6a413f7f13c5d69af15f9e546565036bb2ca735750894573d3b0972ae
    Addresses
    104.21.44.93 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.198.61 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.44.93, 172.67.198.61): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    magical77889.com
    Registered
    2026-10-18 · Cloudflare, Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-11 18:31 UTC

    Suggest a correction

  68. ufdlsefp.shop US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by NPA 165 (e-commerce)MX absentSPF missingDMARC missingRegistered 10 mo ago
    DetailsHide details for ufdlsefp.shop
    Hostname
    ufdlsefp.shop
    First seen
    2026-11-12 05:56 UTC
    First published
    2026-11-12 07:05 UTC
    Listing
    NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 01:38 UTC
    DNS
    Resolves · checked 2026-11-12 07:15 UTC
    Listed
    NPA 165
    1. Observed in the NPA 165 feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-12 04:55 UTC to 2027-02-10 05:54 UTC
    Logged 2026-11-12 05:55 UTC in Geomys Tuscolo2027h1, entry 586,666,277
    SHA-256 10fbf756831a219c2d9254c99be1f452e499671f77b359405b18f74d26a404a9
    Public key SHA-256 37946e98774e04391e4f4d75f101ea6718a3c3fe371ce3a82476d2a9958b3416
    Addresses
    104.21.72.181 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.153.215 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.72.181, 172.67.153.215): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    ufdlsefp.shop
    Registered
    2026-01-21 · GoDaddy.com LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-12 07:04 UTC

    Suggest a correction

  69. aitcapexx5-app.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide details for aitcapexx5-app.com
    Hostname
    aitcapexx5-app.com
    First seen
    2026-11-12 05:51 UTC
    First published
    2026-11-12 07:05 UTC
    Listing
    CERT Polska listed it 2026-07-18 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 06:50 UTC
    DNS
    Resolves · checked 2026-11-12 07:15 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-12 04:48 UTC to 2027-02-10 05:47 UTC
    Logged 2026-11-12 05:48 UTC in IPng Networks Halloumi2027h1, entry 466,266,322
    SHA-256 10a0a6e1ec712b6dbc5896e68a01f5b551a5046ef1387db70c170ef8260118fa
    Public key SHA-256 04d34c43e0b4d09f517f1e7fd797df5bbca3898ee6b2f5061ab2b4f9e2130a92
    Addresses
    104.21.49.227 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.153.3 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.49.227, 172.67.153.3): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    aitcapexx5-app.com
    Registered
    2026-07-16 · Eranet International Limited
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-12 07:04 UTC

    Suggest a correction

  70. api.crycoin.club US · AS13335 · Cloudflare, Inc.16 addresses
    ListedCloudflareUnder crycoin.club, listed by MetaMaskMX absentSPF missingDMARC missingRegistered 12 mo ago
    DetailsHide details for api.crycoin.club
    Hostname
    api.crycoin.club
    First seen
    2026-11-12 05:51 UTC
    First published
    2026-11-12 07:05 UTC
    Listing
    MetaMask: first observed in the feed 2026-11-06 · still listed at the last successful feed check 2026-11-12 06:09 UTC
    DNS
    Resolves · checked 2026-11-12 07:15 UTC
    Listed
    MetaMask, listing crycoin.club and the names under it
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR1 · precertificate
    Valid 2026-11-12 04:49 UTC to 2027-02-10 04:49 UTC
    Logged 2026-11-12 05:47 UTC in Let's Encrypt Willow2027h1, entry 1,112,858,699
    SHA-256 0cee889b1762938836d944d8797780f3e7242842b8d1a1d6d49a89a4d80e9fb3
    Public key SHA-256 ae09ba4a0ef4268731147ff2722dd94f69809a5a36cb90f99775733a87600332
    Addresses
    23.145.136.251 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    23.145.232.39 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    23.145.232.40 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    23.145.232.226 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    23.145.232.227 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    23.145.232.230 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    23.180.136.55 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    23.180.136.56 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    23.180.136.90 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    23.180.136.111 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    103.204.13.41 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    103.204.13.53 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    103.204.13.71 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    103.204.13.75 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    103.204.13.78 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    103.204.13.85 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (23.145.136.251, 23.145.232.39, 23.145.232.40, 23.145.232.226, 23.145.232.227, 23.145.232.230, 23.180.136.55, 23.180.136.56, 23.180.136.90, 23.180.136.111, 103.204.13.41, 103.204.13.53, 103.204.13.71, 103.204.13.75, 103.204.13.78, 103.204.13.85): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    crycoin.club
    Registered
    2025-11-11 · Namemart Limited
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-12 07:04 UTC

    Suggest a correction

  71. sol-mix-mixer.com US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 16 mo ago
    DetailsHide details for sol-mix-mixer.com
    Hostname
    sol-mix-mixer.com
    First seen
    2026-11-12 05:51 UTC
    First published
    2026-11-12 07:05 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-12 06:06 UTC
    DNS
    Resolves · checked 2026-11-12 07:15 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-12 04:50 UTC to 2027-02-10 05:48 UTC
    Logged 2026-11-12 05:50 UTC in DigiCert Sphinx2027h1, entry 451,300,820
    SHA-256 e9d3decc4ddea1ee4aa84ae595bf7cde88f2f56656838fd089a95cb052ba6a08
    Public key SHA-256 a6e8a001a3be683fd0c89d2d49632d0c1b96dce9e7614673b31e0b4467c2dbbb
    PhishDestroy
    Addresses
    104.21.35.68 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.215.57 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.35.68, 172.67.215.57): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    sol-mix-mixer.com
    Registered
    2025-07-27 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-12 07:04 UTC

    Suggest a correction

  72. terrafinia.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX presentSPF ~allDMARC missingRegistered 10 mo ago
    DetailsHide details for terrafinia.com
    Hostname
    terrafinia.com
    First seen
    2026-11-12 05:51 UTC
    First published
    2026-11-12 07:05 UTC
    Listing
    CERT Polska listed it 2026-06-08 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 06:50 UTC
    DNS
    Resolves · checked 2026-11-12 07:15 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-12 04:49 UTC to 2027-02-10 05:47 UTC
    Logged 2026-11-12 05:49 UTC in IPng Networks Halloumi2027h1, entry 466,269,930
    SHA-256 369b6d7e9b95665884ac8a1aa6c24efe66e4cae268aedd282d6a000c4530b189
    Public key SHA-256 999d65f43d688441149509b5dbef2149dd85a22e8f6d8fd5ff3ad0b902112af0
    Addresses
    104.21.26.75 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.135.158 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.26.75, 172.67.135.158): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    terrafinia.com
    Registered
    2026-01-20 · Spaceship, Inc.
    MX
    Receives mail at route1.mx.cloudflare.net, route2.mx.cloudflare.net, route3.mx.cloudflare.net
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-12 07:04 UTC

    Suggest a correction

  73. tetsting.pages.dev US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMask
    DetailsHide details for tetsting.pages.dev
    Hostname
    tetsting.pages.dev
    First seen
    2026-11-12 05:51 UTC
    First published
    2026-11-12 07:05 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 06:09 UTC
    DNS
    Resolves · checked 2026-11-12 07:15 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-12 04:50 UTC to 2027-02-10 05:48 UTC
    Logged 2026-11-12 05:50 UTC in DigiCert Sphinx2027h1, entry 451,301,412
    SHA-256 3bddb44bc2306ba021edcdf9d31a7eb8a708e9bab60dceb072daf5e3bc7b21b4
    Public key SHA-256 1d92f18e6ca3cf074e4fa6a9161c1b466fe4cf19b79d7a8c9cf98bf2c683fb8a
    Addresses
    172.66.44.245 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.66.47.11 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (172.66.44.245, 172.66.47.11): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.

    Suggest a correction

  74. treezr-suite-eng.pages.dev US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMask
    DetailsHide details for treezr-suite-eng.pages.dev
    Hostname
    treezr-suite-eng.pages.dev
    First seen
    2026-11-12 05:51 UTC
    First published
    2026-11-12 07:05 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 06:09 UTC
    DNS
    Resolves · checked 2026-11-12 07:15 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-12 04:46 UTC to 2027-02-10 05:44 UTC
    Logged 2026-11-12 05:46 UTC in DigiCert Sphinx2027h1, entry 451,274,532
    SHA-256 4d8ed0803c386c3e16e25e7ce21caa233209bbf988fc40e5c70975db65994ec2
    Public key SHA-256 6319ad3fda8ea7fe80042071e9fe47be968e4b4bc78f24173aef5026e7ba923b
    Addresses
    172.66.44.253 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.66.47.3 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (172.66.44.253, 172.66.47.3): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.

    Suggest a correction

  75. westprimemarket.net US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 59 d ago
    DetailsHide details for westprimemarket.net
    Hostname
    westprimemarket.net
    First seen
    2026-11-12 05:51 UTC
    First published
    2026-11-12 07:05 UTC
    Listing
    CERT Polska listed it 2026-09-14 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 06:50 UTC
    DNS
    Resolves · checked 2026-11-12 07:15 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-11-12 04:47 UTC to 2027-02-10 04:47 UTC
    Logged 2026-11-12 05:46 UTC in IPng Networks Halloumi2027h1, entry 466,249,598
    SHA-256 2a77daf784d525242f6ff3a6ecc1b801c73f92808a1f3b5b4e439c5caaabfe7e
    Public key SHA-256 cdbdfe5bff3d3f85cf854d04af7782c97d89cffb56467b3e092c57ba850fc342
    Addresses
    104.21.69.174 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.210.176 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.69.174, 172.67.210.176): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    westprimemarket.net
    Registered
    2026-09-14 · Dynadot Inc
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-12 07:04 UTC

    Suggest a correction

  76. wirexdigitalwallet.com US · AS13335 · Cloudflare, Inc.
    ListedCloudflareListed by MetaMaskMX presentSPF ~allDMARC policy noneRegistered 2 mo ago
    DetailsHide details for wirexdigitalwallet.com
    Hostname
    wirexdigitalwallet.com
    First seen
    2026-11-12 05:51 UTC
    First published
    2026-11-12 07:05 UTC
    Listing
    MetaMask: first observed in the feed 2026-11-03 · still listed at the last successful feed check 2026-11-12 06:09 UTC
    DNS
    Resolves · checked 2026-11-12 07:15 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-12 04:48 UTC to 2027-02-10 05:48 UTC
    Logged 2026-11-12 05:48 UTC in Google ParcelYard2027h1, entry 749,953,730
    SHA-256 67f2da701897d830f39b1ce0c9b24831ff28b2c3e4bd49fa968c90440eeca323
    Public key SHA-256 1de3fa772b41aabcce2ac470f26e727c0e224b619b78e6a4c97e05be55f3325f
    Addresses
    185.158.133.1 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (185.158.133.1): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    wirexdigitalwallet.com
    Registered
    2026-09-07 · IONOS SE
    MX
    Receives mail at mx.zoho.com, mx2.zoho.com, mx3.zoho.com
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    DMARC policy p=none: reports only
    Checked
    2026-11-11 13:05 UTC

    Suggest a correction

  77. www.crycoin.club US · AS13335 · Cloudflare, Inc.16 addresses
    ListedCloudflareUnder crycoin.club, listed by MetaMaskMX absentSPF missingDMARC missingRegistered 12 mo ago
    DetailsHide details for www.crycoin.club
    Hostname
    www.crycoin.club
    First seen
    2026-11-12 05:51 UTC
    First published
    2026-11-12 07:05 UTC
    Listing
    MetaMask: first observed in the feed 2026-11-06 · still listed at the last successful feed check 2026-11-12 06:09 UTC
    DNS
    Resolves · checked 2026-11-12 07:15 UTC
    Listed
    MetaMask, listing crycoin.club and the names under it
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR1 · precertificate
    Valid 2026-11-12 04:49 UTC to 2027-02-10 04:49 UTC
    Logged 2026-11-12 05:47 UTC in Let's Encrypt Willow2027h1, entry 1,112,858,699
    SHA-256 0cee889b1762938836d944d8797780f3e7242842b8d1a1d6d49a89a4d80e9fb3
    Public key SHA-256 ae09ba4a0ef4268731147ff2722dd94f69809a5a36cb90f99775733a87600332
    Addresses
    23.145.136.251 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    23.145.232.39 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    23.145.232.40 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    23.145.232.226 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    23.145.232.227 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    23.145.232.230 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    23.180.136.55 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    23.180.136.56 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    23.180.136.90 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    23.180.136.111 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    103.204.13.41 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    103.204.13.53 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    103.204.13.71 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    103.204.13.75 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    103.204.13.78 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    103.204.13.85 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (23.145.136.251, 23.145.232.39, 23.145.232.40, 23.145.232.226, 23.145.232.227, 23.145.232.230, 23.180.136.55, 23.180.136.56, 23.180.136.90, 23.180.136.111, 103.204.13.41, 103.204.13.53, 103.204.13.71, 103.204.13.75, 103.204.13.78, 103.204.13.85): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    crycoin.club
    Registered
    2025-11-11 · Namemart Limited
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-12 07:04 UTC

    Suggest a correction

  78. www.globalmelange.co US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareUnder globalmelange.co, reported by PhishDestroyMX presentSPF ~allDMARC missingRegistered 4 mo ago
    DetailsHide details for www.globalmelange.co
    Hostname
    www.globalmelange.co
    First seen
    2026-11-12 05:51 UTC
    First published
    2026-11-12 07:05 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-12 06:06 UTC
    DNS
    Resolves · checked 2026-11-12 07:15 UTC
    Reported
    PhishDestroy, listing globalmelange.co and the names under it
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-11-12 04:48 UTC to 2027-02-10 04:48 UTC
    Logged 2026-11-12 05:47 UTC in IPng Networks Gouda2027h1, entry 391,623,243
    SHA-256 d273d25857cdc10f78d9f480b1b778b12eae017b9407be01a537cb877e6465f6
    Public key SHA-256 9920aba559fc67b1056e296debcec378c464187a86f904e859c4c73e86b16fe1
    PhishDestroy
    Addresses
    104.21.12.81 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.151.235 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.12.81, 172.67.151.235): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    globalmelange.co
    Registered
    2026-07-15 · NameCheap, Inc.
    MX
    Receives mail at eforward1.registrar-servers.com, eforward2.registrar-servers.com, eforward3.registrar-servers.com
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-11 12:19 UTC

    Suggest a correction

  79. credionshieldbnk.com US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX presentSPF ~allDMARC policy noneRegistered 4 mo ago
    DetailsHide details for credionshieldbnk.com
    Hostname
    credionshieldbnk.com
    First seen
    2026-11-12 05:46 UTC
    First published
    2026-11-12 05:57 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-12 06:06 UTC
    DNS
    Resolves · checked 2026-11-12 06:04 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1
    Valid 2026-09-14 03:21 UTC to 2026-12-13 04:20 UTC
    Logged 2026-11-12 05:45 UTC in IPng Networks Halloumi2026h2a, entry 1,300,210,240
    SHA-256 a27eab35ff6256e490f53135de97c6c4036ddf586e88ac4ee499681c5819297d
    Public key SHA-256 9034b9748a9d6d277637ac7ead5d562f6a93d5650514414576dcb4aa27263063
    PhishDestroy
    Addresses
    104.21.25.132 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.134.66 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.25.132, 172.67.134.66): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    credionshieldbnk.com
    Registered
    2026-07-16 · Spaceship, Inc.
    MX
    Receives mail at _dc-mx.53d584b11ac8.credionshieldbnk.com
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    DMARC policy p=none: reports only
    Checked
    2026-11-12 05:55 UTC

    Suggest a correction

  80. mariashopping.online US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by NPA 165 (e-commerce)MX absentSPF missingDMARC quarantineRegistered 6 mo ago
    DetailsHide details for mariashopping.online
    Hostname
    mariashopping.online
    First seen
    2026-11-12 05:46 UTC
    First published
    2026-11-12 05:57 UTC
    Listing
    NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 01:38 UTC
    DNS
    Resolves · checked 2026-11-12 06:04 UTC
    Listed
    NPA 165
    1. Observed in the NPA 165 feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-11-12 04:44 UTC to 2027-02-10 04:44 UTC
    Logged 2026-11-12 05:43 UTC in Let's Encrypt Sycamore2027h1, entry 1,158,891,141
    SHA-256 8630aac06c40e487a42ea55a88ece7ebc8e408fc4c5dd99bb96949f300f228e3
    Public key SHA-256 0296a7a2c49f81e2ca863d3d83c057cb07d7ac1f40451c0bf2e888a8d87915df
    Addresses
    104.21.86.235 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.137.156 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.86.235, 172.67.137.156): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    mariashopping.online
    Registered
    2026-05-19 · GoDaddy.com, LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    DMARC policy p=quarantine
    Checked
    2026-11-12 05:55 UTC

    Suggest a correction

  81. nirusfin-ai.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide details for nirusfin-ai.com
    Hostname
    nirusfin-ai.com
    First seen
    2026-11-12 05:46 UTC
    First published
    2026-11-12 05:57 UTC
    Listing
    CERT Polska listed it 2026-07-17 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 06:50 UTC
    DNS
    Resolves · checked 2026-11-12 06:04 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-12 04:43 UTC to 2027-02-10 05:41 UTC
    Logged 2026-11-12 05:43 UTC in IPng Networks Halloumi2027h1, entry 466,220,787
    SHA-256 6c8fa4091978a5276c075414b33aef59795a20d5760534fdab207e099d6b2a77
    Public key SHA-256 d78c184c27426df8b81ca0fa3b2f95004fe9ff91c91a34b930d419bf2f425170
    Addresses
    104.21.36.13 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.183.14 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.36.13, 172.67.183.14): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    nirusfin-ai.com
    Registered
    2026-07-16 · Eranet International Limited
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-12 05:55 UTC

    Suggest a correction

  82. publiclumen.sbs US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by USOMMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide details for publiclumen.sbs
    Hostname
    publiclumen.sbs
    First seen
    2026-11-12 05:46 UTC
    First published
    2026-11-12 05:57 UTC
    Listing
    USOM listed it 2026-05-20 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 07:32 UTC
    DNS
    Resolves · checked 2026-11-12 06:04 UTC
    Listed
    USOM
    1. Listed by USOM
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-11-12 04:44 UTC to 2027-02-10 04:44 UTC
    Logged 2026-11-12 05:42 UTC in Geomys Tuscolo2027h1, entry 586,556,888
    SHA-256 2fc7883753eaaf2deae04f9dd455078b8e98f9d69def667743e15bcb14a9573b
    Public key SHA-256 32153c648f0720840f1431bcfe6bc4b78f8753a7bff01e3700de65cf1a62ff09
    Addresses
    104.21.91.104 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.215.157 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.91.104, 172.67.215.157): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    publiclumen.sbs
    Registered
    2026-05-19 · Dynadot Inc
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-12 05:55 UTC

    Suggest a correction

  83. shimano-se.deal-vera.com US · AS13335 · Cloudflare, Inc.
    ListedCloudflareUnder deal-vera.com, listed by CERT PolskaMX absentSPF missingDMARC missingRegistered 3 mo ago
    DetailsHide details for shimano-se.deal-vera.com
    Hostname
    shimano-se.deal-vera.com
    First seen
    2026-11-12 05:46 UTC
    First published
    2026-11-12 05:57 UTC
    Listing
    CERT Polska listed it 2026-10-17 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 06:50 UTC
    DNS
    Resolves · checked 2026-11-12 06:04 UTC
    Listed
    CERT Polska, listing deal-vera.com and the names under it
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WR1 · precertificate
    Valid 2026-11-12 04:42 UTC to 2027-02-10 05:41 UTC
    Logged 2026-11-12 05:42 UTC in Geomys Tuscolo2027h1, entry 586,550,447
    SHA-256 d92dd84a9e62224729cb5b062abe7023e1b16a58bf3e2e06e46d492268b55b3b
    Public key SHA-256 534e0a86743c81fa24e882f7f78b2e81f951d91f2c856e0d0b86c69c522756e5
    Addresses
    104.18.13.234 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.18.13.234): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    deal-vera.com
    Registered
    2026-08-18 · Cloudflare, Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-11 17:09 UTC

    Suggest a correction

  84. simsoft.app.br US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 23 mo ago
    DetailsHide details for simsoft.app.br
    Hostname
    simsoft.app.br
    First seen
    2026-11-12 05:46 UTC
    First published
    2026-11-12 05:57 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-12 06:06 UTC
    DNS
    Resolves · checked 2026-11-12 06:04 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-12 04:44 UTC to 2027-02-10 05:42 UTC
    Logged 2026-11-12 05:44 UTC in DigiCert Wyvern2027h1, entry 508,376,032
    SHA-256 8afc5bd55b6b165bf6847df0597422948c6d7ca9e6845ebcfbd3a2b78b1b3c5c
    Public key SHA-256 56a0d98f1dfb4f889e5ac348031e28ecd3b2edd138df912bd55db522c8dec50a
    PhishDestroy
    Addresses
    104.21.81.224 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.165.100 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.81.224, 172.67.165.100): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    simsoft.app.br
    Registered
    2025-01-04
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-12 03:37 UTC

    Suggest a correction

  85. www.aiconnectors.io US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareUnder aiconnectors.io, reported by PhishDestroyMX presentSPF ~allDMARC missingRegistered 4 mo ago
    DetailsHide details for www.aiconnectors.io
    Hostname
    www.aiconnectors.io
    First seen
    2026-11-12 05:46 UTC
    First published
    2026-11-12 05:57 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-12 06:06 UTC
    DNS
    Resolves · checked 2026-11-12 06:04 UTC
    Reported
    PhishDestroy, listing aiconnectors.io and the names under it
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WR1 · precertificate
    Valid 2026-11-12 04:43 UTC to 2027-02-10 05:41 UTC
    Logged 2026-11-12 05:43 UTC in Google PlumbersArms2027h1, entry 750,086,088
    SHA-256 66883493f8f7c8cc2eb4b7320754687e5b34c8c705604ab1dd3fcdcf57e99bd9
    Public key SHA-256 49b619b8d2ac91fed477d364fbb6d7abba05a7fb07078b780c7cfe6e115a93bc
    PhishDestroy
    Addresses
    104.18.22.186 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    104.18.23.186 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.18.22.186, 104.18.23.186): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    aiconnectors.io
    Registered
    2026-07-17 · NameCheap, Inc.
    MX
    Receives mail at eforward1.registrar-servers.com, eforward2.registrar-servers.com, eforward3.registrar-servers.com
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-12 04:45 UTC

    Suggest a correction

  86. www.dannys-auto.sale US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareUnder dannys-auto.sale, reported by PhishDestroyMX presentSPF ~allDMARC policy noneRegistered 6 mo ago
    DetailsHide details for www.dannys-auto.sale
    Hostname
    www.dannys-auto.sale
    First seen
    2026-11-12 05:46 UTC
    First published
    2026-11-12 05:57 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-12 06:06 UTC
    DNS
    Resolves · checked 2026-11-12 06:04 UTC
    Reported
    PhishDestroy, listing dannys-auto.sale and the names under it
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR1
    Valid 2026-11-12 04:46 UTC to 2027-02-10 04:46 UTC
    Logged 2026-11-12 05:44 UTC in DigiCert Wyvern2027h1, entry 508,382,253
    SHA-256 1351d5ab644ae3dec598c0c5e820e729008930128c2ae16db31b93e6c9b295d3
    Public key SHA-256 b686c646c340815296be8fe02c9a772e24c5aaa967af5f990f13ec31d24b4500
    PhishDestroy
    Addresses
    104.21.51.152 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.182.21 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.51.152, 172.67.182.21): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    dannys-auto.sale
    Registered
    2026-05-08 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Receives mail at route2.mx.cloudflare.net, route1.mx.cloudflare.net, route3.mx.cloudflare.net
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    DMARC policy p=none: reports only
    Checked
    2026-11-11 09:10 UTC

    Suggest a correction

  87. demo.krakenauthtool.org US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareUnder krakenauthtool.org, reported by PhishDestroyMX absentSPF missingDMARC missingRegistered 10 mo ago
    DetailsHide details for demo.krakenauthtool.org
    Hostname
    demo.krakenauthtool.org
    First seen
    2026-11-12 05:41 UTC
    First published
    2026-11-12 05:57 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-12 06:06 UTC
    DNS
    Resolves · checked 2026-11-12 06:04 UTC
    Reported
    PhishDestroy, listing krakenauthtool.org and the names under it
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR1 · precertificate
    Valid 2026-11-12 04:37 UTC to 2027-02-10 04:37 UTC
    Logged 2026-11-12 05:36 UTC in Let's Encrypt Sycamore2027h1, entry 1,158,811,442
    SHA-256 0c834f9fcb16cf27cb8a44487d5281b7fc62b98a0fef4429cf2e011e4e27a2dd
    Public key SHA-256 6bbc6bcab5f63885ee2217ff5278a78d40b2d415970f63b87047c45fb39322c4
    PhishDestroy
    Addresses
    104.21.25.225 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.134.207 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.25.225, 172.67.134.207): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    krakenauthtool.org
    Registered
    2026-01-22 · Cloudflare, Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-11 08:57 UTC

    Suggest a correction

  88. pandemicrecords2020.com US · AS13335 · Cloudflare, Inc.
    ReportedCloudflareReported by PhishDestroyMX presentSPF ~allDMARC policy noneRegistered 2 y ago
    DetailsHide details for pandemicrecords2020.com
    Hostname
    pandemicrecords2020.com
    First seen
    2026-11-12 05:41 UTC
    First published
    2026-11-12 05:57 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-12 06:06 UTC
    DNS
    Resolves · checked 2026-11-12 06:04 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WR1 · precertificate
    Valid 2026-11-12 04:39 UTC to 2027-02-10 05:38 UTC
    Logged 2026-11-12 05:39 UTC in Let's Encrypt Sycamore2027h1, entry 1,158,849,004
    SHA-256 6909c5500a6bf6f428630aece83e15f989359a993e0a24ec4e779ca2a14d3f95
    Public key SHA-256 8e091eaf03360bbc95189d5d6e124b203875ee3faca675dae81ae255b6ea8019
    PhishDestroy
    Addresses
    23.227.38.73 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (23.227.38.73): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    pandemicrecords2020.com
    Registered
    2024-10-05 · Tucows Domains Inc.
    MX
    Receives mail at mx.pandemicrecords2020.com.cust.b.hostedemail.com
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    DMARC policy p=none: reports only
    Checked
    2026-11-12 05:55 UTC

    Suggest a correction

  89. staging.ledger-and-trust.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareUnder ledger-and-trust.com, listed by MetaMaskMX absentSPF -allDMARC quarantineRegistered 12 d ago
    DetailsHide details for staging.ledger-and-trust.com
    Hostname
    staging.ledger-and-trust.com
    First seen
    2026-11-12 05:41 UTC
    First published
    2026-11-12 05:57 UTC
    Listing
    MetaMask: first observed in the feed 2026-11-02 · still listed at the last successful feed check 2026-11-12 06:09 UTC
    DNS
    Resolves · checked 2026-11-12 06:04 UTC
    Listed
    MetaMask, listing ledger-and-trust.com and the names under it
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WR1 · precertificate
    Valid 2026-11-12 04:38 UTC to 2027-02-10 05:38 UTC
    Logged 2026-11-12 05:38 UTC in Google PlumbersArms2027h1, entry 750,033,112
    SHA-256 069dc86b265afad94cf1a1485c2352951e8f4da0f3c85bbb38ff22bcc6ed6f21
    Public key SHA-256 9b523d4bc50c4d0fe6fd41c09768246d5770eda931268a4c0bc0d56265dedd26
    Addresses
    162.159.140.98 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.66.0.96 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (162.159.140.98, 172.66.0.96): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    ledger-and-trust.com
    Registered
    2026-10-31 · Cloudflare, Inc.
    MX
    Publishes no mail exchanger
    SPF
    SPF record with -all: other senders fail
    DMARC
    DMARC policy p=quarantine
    Checked
    2026-11-12 05:55 UTC

    Suggest a correction

  90. vitakruid-nl.buy-vera.com US · AS13335 · Cloudflare, Inc.
    ListedCloudflareUnder buy-vera.com, listed by CERT PolskaMX absentSPF missingDMARC missingRegistered 3 mo ago
    DetailsHide details for vitakruid-nl.buy-vera.com
    Hostname
    vitakruid-nl.buy-vera.com
    First seen
    2026-11-12 05:41 UTC
    First published
    2026-11-12 05:57 UTC
    Listing
    CERT Polska listed it 2026-09-09 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 06:50 UTC
    DNS
    Resolves · checked 2026-11-12 06:04 UTC
    Listed
    CERT Polska, listing buy-vera.com and the names under it
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WR1 · precertificate
    Valid 2026-11-12 04:40 UTC to 2027-02-10 05:38 UTC
    Logged 2026-11-12 05:40 UTC in Google ParcelYard2027h1, entry 749,856,778
    SHA-256 18647896d117c35ca1eff88ccb58c7663546c29b31e48f9a17f8f2872dbb7547
    Public key SHA-256 027eb9970e7d2962449939ca3946a5269ede4f7a797f639aa765d05fca94757e
    Addresses
    104.18.13.234 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.18.13.234): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    buy-vera.com
    Registered
    2026-08-21 · Cloudflare, Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-11 10:21 UTC

    Suggest a correction

  91. jxkljpff.shop US · AS13335 · Cloudflare, Inc.
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 59 d ago
    DetailsHide details for jxkljpff.shop
    Hostname
    jxkljpff.shop
    First seen
    2026-11-12 05:36 UTC
    First published
    2026-11-12 05:57 UTC
    Listing
    CERT Polska listed it 2026-09-16 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 06:50 UTC
    DNS
    Resolves · checked 2026-11-12 06:04 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-12 04:33 UTC to 2027-02-10 04:33 UTC
    Logged 2026-11-12 05:32 UTC in Google ParcelYard2027h1, entry 749,763,577
    SHA-256 1756be0ce9afae7df2e39e1b87b6b2ab604041cc57b4c63b3114eb630cdae1d5
    Public key SHA-256 30fd77cf2fc8cd5e0b2b20784f0f2c1a1b5160be5c8963b406c725276cce0627
    Addresses
    104.17.231.54 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.17.231.54): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    jxkljpff.shop
    Registered
    2026-09-14 · Web Commerce Communication Ltd.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-12 05:55 UTC

    Suggest a correction

  92. kraksite-cc.pages.dev US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMask
    DetailsHide details for kraksite-cc.pages.dev
    Hostname
    kraksite-cc.pages.dev
    First seen
    2026-11-12 05:36 UTC
    First published
    2026-11-12 05:57 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 06:09 UTC
    DNS
    Resolves · checked 2026-11-12 06:04 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-12 04:34 UTC to 2027-02-10 05:32 UTC
    Logged 2026-11-12 05:34 UTC in Let's Encrypt Sycamore2027h1, entry 1,158,795,842
    SHA-256 742e51e2811eefc23c5bc62ca862bf1fdb95ad8aa3351e53d60a3c79c1f373b5
    Public key SHA-256 6dd58fa824bc6ab6d8fab55dd306c2bbbd009640d0c5083e0653c0acde7d3c41
    Addresses
    172.66.44.210 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.66.47.46 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (172.66.44.210, 172.66.47.46): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.

    Suggest a correction

  93. marea-fortencia-ai.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide details for marea-fortencia-ai.com
    Hostname
    marea-fortencia-ai.com
    First seen
    2026-11-12 05:36 UTC
    First published
    2026-11-12 05:57 UTC
    Listing
    CERT Polska listed it 2026-07-18 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 06:50 UTC
    DNS
    Resolves · checked 2026-11-12 06:04 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1
    Valid 2026-09-14 02:43 UTC to 2026-12-13 03:43 UTC
    Logged 2026-11-12 05:31 UTC in DigiCert Wyvern2026h2, entry 2,220,208,996
    SHA-256 01dc4b8c88d9af94db2c26ece243907fc6d6d7faf3c8917be4ac0f94d6151170
    Public key SHA-256 71d0f7faf87e39b3cfe3c5310cdbabeac749727d8ca46e2bcbf7347e6a5bc407
    Addresses
    104.21.88.62 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.173.82 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.88.62, 172.67.173.82): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    marea-fortencia-ai.com
    Registered
    2026-07-16 · Eranet International Limited
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-12 05:55 UTC

    Suggest a correction

  94. oferty-moje-3022.casa US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 59 d ago
    DetailsHide details for oferty-moje-3022.casa
    Hostname
    oferty-moje-3022.casa
    First seen
    2026-11-12 05:36 UTC
    First published
    2026-11-12 05:57 UTC
    Listing
    CERT Polska listed it 2026-09-14 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 06:50 UTC
    DNS
    Resolves · checked 2026-11-12 06:04 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-11-12 04:37 UTC to 2027-02-10 04:37 UTC
    Logged 2026-11-12 05:35 UTC in Google ParcelYard2027h1, entry 749,806,070
    SHA-256 74b544f0a42d737eb6327d71bf87c442a1daab6b5a13dc04ce17842428d4dead
    Public key SHA-256 34ff787da2d7800541ffa423ac01070d39d048297bd0a7a36609a08d458ca457
    Addresses
    104.21.71.247 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.172.153 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.71.247, 172.67.172.153): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    oferty-moje-3022.casa
    Registered
    2026-09-14 · Dynadot Inc
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-12 05:55 UTC

    Suggest a correction

  95. ventofinance-app.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide details for ventofinance-app.com
    Hostname
    ventofinance-app.com
    First seen
    2026-11-12 05:36 UTC
    First published
    2026-11-12 05:57 UTC
    Listing
    CERT Polska listed it 2026-07-19 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 06:50 UTC
    DNS
    Resolves · checked 2026-11-12 06:04 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1
    Valid 2026-09-13 23:33 UTC to 2026-12-13 00:31 UTC
    Logged 2026-11-12 05:34 UTC in DigiCert Wyvern2026h2, entry 2,220,215,349
    SHA-256 95c7e36be90cb50c6567cc9a76c59004c06fc8e72636749d7c8db7e75ed17df2
    Public key SHA-256 20fb2d5293626842163335c4cce943ac01fdaedbbf73984e86dbc2eda8a1571f
    Addresses
    104.21.18.65 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.180.182 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.18.65, 172.67.180.182): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    ventofinance-app.com
    Registered
    2026-07-16 · Eranet International Limited
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-12 05:55 UTC

    Suggest a correction

  96. chiarofondovio-app.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide details for chiarofondovio-app.com
    Hostname
    chiarofondovio-app.com
    First seen
    2026-11-12 05:31 UTC
    First published
    2026-11-12 05:57 UTC
    Listing
    CERT Polska listed it 2026-07-17 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 06:50 UTC
    DNS
    Resolves · checked 2026-11-12 06:04 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-12 04:29 UTC to 2027-02-10 05:28 UTC
    Logged 2026-11-12 05:29 UTC in Let's Encrypt Willow2027h1, entry 1,112,642,565
    SHA-256 6bad169ecf43e3d91d643dc1db59032bc84c69588c708303373f2c34d4c9da7a
    Public key SHA-256 b3e255d6ff3d7a0aabbcd910be384a757594d961adb446955895b6382849d6ab
    Addresses
    104.21.55.249 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.174.209 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.55.249, 172.67.174.209): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    chiarofondovio-app.com
    Registered
    2026-07-16 · Eranet International Limited
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-12 05:55 UTC

    Suggest a correction

  97. dl001.etherbank.net US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareUnder etherbank.net, reported by PhishDestroyMX absentSPF missingDMARC missingRegistered 10 mo ago
    DetailsHide details for dl001.etherbank.net
    Hostname
    dl001.etherbank.net
    First seen
    2026-11-12 05:31 UTC
    First published
    2026-11-12 05:57 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-12 06:06 UTC
    DNS
    Resolves · checked 2026-11-12 06:04 UTC
    Reported
    PhishDestroy, listing etherbank.net and the names under it
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-12 04:25 UTC to 2027-02-10 05:25 UTC
    Logged 2026-11-12 05:25 UTC in Google ParcelYard2027h1, entry 749,687,746
    SHA-256 172dd02ef95ff3d06f41108d3306b2143b7bf7609bd600a77ec70fb95722e994
    Public key SHA-256 04f9dfbede180232e7384058176a4363678b5a3e7e40e7d7d0d4651c9c9b019c
    PhishDestroy
    Addresses
    104.21.93.125 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.209.226 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.93.125, 172.67.209.226): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    etherbank.net
    Registered
    2026-01-18 · Cloudflare, Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-11 23:12 UTC

    Suggest a correction

  98. axeovixai-app.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide details for axeovixai-app.com
    Hostname
    axeovixai-app.com
    First seen
    2026-11-12 05:26 UTC
    First published
    2026-11-12 05:57 UTC
    Listing
    CERT Polska listed it 2026-07-17 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 06:50 UTC
    DNS
    Resolves · checked 2026-11-12 06:04 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-12 04:23 UTC to 2027-02-10 05:22 UTC
    Logged 2026-11-12 05:23 UTC in Google ParcelYard2027h1, entry 749,661,586
    SHA-256 60088d283163d07efbdaf7b669c90cc6a01c88edbf2ad225fc609c1dce3aa3bb
    Public key SHA-256 31ba5d3033fd08d2ea06764f03a155860a7e9703ebb8bb890dcc62f03c1b0ce7
    Addresses
    104.21.7.122 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.130.77 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.7.122, 172.67.130.77): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    axeovixai-app.com
    Registered
    2026-07-16 · Eranet International Limited
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-12 05:55 UTC

    Suggest a correction

  99. ledger-com-us-app-start.pages.dev US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMask
    DetailsHide details for ledger-com-us-app-start.pages.dev
    Hostname
    ledger-com-us-app-start.pages.dev
    First seen
    2026-11-12 05:26 UTC
    First published
    2026-11-12 05:57 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 06:09 UTC
    DNS
    Resolves · checked 2026-11-12 06:04 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-12 04:23 UTC to 2027-02-10 05:21 UTC
    Logged 2026-11-12 05:23 UTC in DigiCert Wyvern2027h1, entry 508,168,340
    SHA-256 b29702d26ea46ac8d3b9381729c42a17da8877838630172e83bcace384797c10
    Public key SHA-256 5bf90f5822b3fc7ca04483e8803fa87838067b500df12bf3c40bed3ae10c8cb5
    Addresses
    172.66.44.155 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.66.47.101 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (172.66.44.155, 172.66.47.101): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.

    Suggest a correction

  100. revgrox-ai.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide details for revgrox-ai.com
    Hostname
    revgrox-ai.com
    First seen
    2026-11-12 05:26 UTC
    First published
    2026-11-12 05:57 UTC
    Listing
    CERT Polska listed it 2026-07-18 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 06:50 UTC
    DNS
    Resolves · checked 2026-11-12 06:04 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-12 04:23 UTC to 2027-02-10 05:22 UTC
    Logged 2026-11-12 05:23 UTC in Google ParcelYard2027h1, entry 749,658,846
    SHA-256 50f92929863d103f300032a15f2d2bd25168bb13f57ac7db5d164b8a3ffc4752
    Public key SHA-256 db91daad0cf4a65d2f4de2dce146421bf4f88d1dc9ee89edf57c7f6d8a7c1c5a
    Addresses
    104.21.92.142 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.195.48 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.92.142, 172.67.195.48): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    revgrox-ai.com
    Registered
    2026-07-16 · Eranet International Limited
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-12 05:55 UTC

    Suggest a correction

Showing 101–200 of 3,008 hostnames.Back to the start
How these findings are made

Brand spoofs: findings that impersonate one of the 1,000 most-impersonated brands. The list opens on them; All shows every finding.

Reported: a hostname in a new certificate that PhishTank or PhishDestroy reports, or that CERT Polska, MetaMask, USOM, MODA, NPA 165, JPCERT/CC, the AMF, the FSMA or BaFin lists. When a listing source names the brand imitated or a category, the finding shows it. Phishing host: a brand lookalike that resolves to an address which hosted confirmed phishing in the last 48 hours. Spamhaus DROP: a brand lookalike that resolves to an address on the Spamhaus DROP list. Same certificate: another name on a finding's certificate that resolves to an address on Spamhaus DROP. Suspicious: other names on a finding's certificate, rated high for a hosting-alias name or a lookalike on a phishing host, medium for a lookalike; they join the findings once they have listing evidence of their own. Also under Suspicious: registered domains using a brand’s name that PhishDestroy’s community list includes, rated high when they resolve to an address with no parking or holding signal, medium otherwise.

Brand labels cover the 1,000 most-impersonated brands. A name gets a brand when the brand's token starts a label or follows a hyphen, with a lure word such as "login" or "verify" for common words. Hostnames appear as plain text. How it works · Sources