Live
Live phishing findings
New certificates and domain registrations, with every hostname resolved and checked against phishing reports and bad-address lists. The newest findings, updated hourly.
3,008 hostnames from the last 24 hours.
- zlxasd.fashion US · AS13335 · Cloudflare, Inc.2 addressesListedCloudflareListed by NPA 165 (finance and insurance)MX absentSPF missingDMARC missingRegistered 8 mo ago
DetailsHide details for zlxasd.fashion
- Hostname
- zlxasd.fashion
- First seen
- 2026-11-12 06:51 UTC
- First published
- 2026-11-12 07:05 UTC
- Listing
- NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 01:38 UTC
- DNS
- Resolves · checked 2026-11-12 07:15 UTC
- Listed
- NPA 165
- Observed in the NPA 165 feed
- Certificate logged in CT
- We matched its certificate name
- Latest DNS check
- Certificate
- Issued by YE1 · precertificateValid 2026-11-12 05:49 UTC to 2027-02-10 05:49 UTCLogged 2026-11-12 06:47 UTC in Let's Encrypt Sycamore2027h1, entry 1,159,636,095SHA-256 b2839b0ac95c4796027207d970519be7c59cbfa97819e7571dc9e150925a4be8Public key SHA-256 217edc12cd1d284fdbf1e39e0b43e9de7260ef87e3291390d68da48322505964
- Addresses
- 104.21.9.7 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.140.207 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
- Cloudflare
- Cloudflare (104.21.9.7, 172.67.140.207): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Domain
- zlxasd.fashion
- Registered
- 2026-03-21 · Alibaba Cloud Computing Ltd. d/b/a HiChina (www.net.cn)
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-12 07:04 UTC
- admin666.seb178.com US · AS13335 · Cloudflare, Inc.2 addressesListedCloudflareUnder seb178.com, listed by MetaMaskMX absentSPF missingDMARC missingRegistered 3 mo ago
DetailsHide details for admin666.seb178.com
- Hostname
- admin666.seb178.com
- First seen
- 2026-11-12 06:46 UTC
- First published
- 2026-11-12 07:05 UTC
- Listing
- MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 06:09 UTC
- DNS
- Resolves · checked 2026-11-12 07:15 UTC
- Listed
- MetaMask, listing seb178.com and the names under it
- Observed in the MetaMask feed
- Certificate logged in CT
- We matched its certificate name
- Latest DNS check
- Certificate
- Issued by YR1Valid 2026-11-12 05:43 UTC to 2027-02-10 05:43 UTCLogged 2026-11-12 06:42 UTC in Google PlumbersArms2027h1, entry 750,766,884SHA-256 81b71830589e68175e972e478ba314dec2961686658a7e021deacbad737e5a14Public key SHA-256 a06194b7776d33033498fe83367e83efed4d2a9cf11df391d1fad8de622cad69
- Addresses
- 104.21.4.127 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.132.22 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
- Cloudflare
- Cloudflare (104.21.4.127, 172.67.132.22): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Domain
- seb178.com
- Registered
- 2026-08-06 · Cloudflare, Inc.
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-12 07:04 UTC
- adminapi.seb178.com US · AS13335 · Cloudflare, Inc.2 addressesListedCloudflareUnder seb178.com, listed by MetaMaskMX absentSPF missingDMARC missingRegistered 3 mo ago
DetailsHide details for adminapi.seb178.com
- Hostname
- adminapi.seb178.com
- First seen
- 2026-11-12 06:46 UTC
- First published
- 2026-11-12 07:05 UTC
- Listing
- MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 06:09 UTC
- DNS
- Resolves · checked 2026-11-12 07:15 UTC
- Listed
- MetaMask, listing seb178.com and the names under it
- Observed in the MetaMask feed
- Certificate logged in CT
- We matched its certificate name
- Latest DNS check
- Certificate
- Issued by YR2Valid 2026-11-12 05:43 UTC to 2027-02-10 05:43 UTCLogged 2026-11-12 06:42 UTC in Google ParcelYard2027h1, entry 750,576,039SHA-256 c0d4b1f24cd964bcfac1a4c5fb6a58fde37c624c0b7a00bbd7809643c3fc769fPublic key SHA-256 54b6fb632a0ff6d0ca227fe3ad05033015beff47818cd0de439abaf75ff3081e
- Addresses
- 104.21.4.127 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.132.22 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
- Cloudflare
- Cloudflare (104.21.4.127, 172.67.132.22): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Domain
- seb178.com
- Registered
- 2026-08-06 · Cloudflare, Inc.
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-12 07:04 UTC
- axgtmigrate.live US · AS13335 · Cloudflare, Inc.2 addressesReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 10 mo ago
DetailsHide details for axgtmigrate.live
- Hostname
- axgtmigrate.live
- First seen
- 2026-11-12 06:46 UTC
- First published
- 2026-11-12 07:05 UTC
- Listing
- PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-12 06:06 UTC
- DNS
- Resolves · checked 2026-11-12 07:15 UTC
- Reported
- PhishDestroy
- Observed in the PhishDestroy feed
- Certificate logged in CT
- We matched its certificate name
- Latest DNS check
- Certificate
- Issued by WE1 · precertificateValid 2026-11-12 05:43 UTC to 2027-02-10 06:40 UTCLogged 2026-11-12 06:43 UTC in Google ParcelYard2027h1, entry 750,590,229SHA-256 36cb631da0136af6554a57e2d6b84576b0be1fa26822a5c5ca0340c28ae5d500Public key SHA-256 ec98ca3fd80e192e758c6deaf473bacb16461e8ffaea60837e3eedb26d520122
- PhishDestroy
- Addresses
- 104.21.64.248 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.188.55 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
- Cloudflare
- Cloudflare (104.21.64.248, 172.67.188.55): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Domain
- axgtmigrate.live
- Registered
- 2026-01-20 · NICENIC INTERNATIONAL GROUP CO., LIMITED
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-12 07:04 UTC
- dgcorex.com US · AS13335 · Cloudflare, Inc.2 addressesReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 8 mo ago
DetailsHide details for dgcorex.com
- Hostname
- dgcorex.com
- First seen
- 2026-11-12 06:46 UTC
- First published
- 2026-11-12 07:05 UTC
- Listing
- PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-12 06:06 UTC
- DNS
- Resolves · checked 2026-11-12 07:15 UTC
- Reported
- PhishDestroy
- Observed in the PhishDestroy feed
- Certificate logged in CT
- We matched its certificate name
- Latest DNS check
- Certificate
- Issued by YE2Valid 2026-11-12 05:44 UTC to 2027-02-10 05:44 UTCLogged 2026-11-12 06:43 UTC in Google ParcelYard2027h1, entry 750,588,992SHA-256 4ae19065800e3b11651267ab8b9b98e126e7b38cc418d35d708e9f8671d868eePublic key SHA-256 8a2c204d55a4bbc60500aa85caa1c1f049f78efc2de96b554efb414594aa28ef
- PhishDestroy
- Addresses
- 104.21.30.252 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.174.61 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
- Cloudflare
- Cloudflare (104.21.30.252, 172.67.174.61): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Domain
- dgcorex.com
- Registered
- 2026-03-20 · Dynadot Inc
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-12 07:04 UTC
- motufondura.pro US · AS13335 · Cloudflare, Inc.2 addressesListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 6 mo ago
DetailsHide details for motufondura.pro
- Hostname
- motufondura.pro
- First seen
- 2026-11-12 06:46 UTC
- First published
- 2026-11-12 07:05 UTC
- Listing
- CERT Polska listed it 2026-07-23 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 06:50 UTCPhishDestroy: first observed in the feed 2026-11-02 · still listed at the last successful feed check 2026-11-12 06:06 UTC
- DNS
- Resolves · checked 2026-11-12 07:15 UTC
- Listed
- CERT Polska
- Listed by CERT Polska
- Certificate logged in CT
- We matched its certificate name
- Latest DNS check
- Certificate
- Issued by YE2Valid 2026-11-12 05:46 UTC to 2027-02-10 05:46 UTCLogged 2026-11-12 06:44 UTC in Google PlumbersArms2027h1, entry 750,792,676SHA-256 eb40f53df116ac7d8da4b013c9459e90bae01a7f6fb1326f7aad9f227c06418aPublic key SHA-256 2b7fc9971e71a25ddf8d360b97099ab094bf85f893b940548a11251019579df5
- Addresses
- 104.21.91.66 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.211.87 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
- Cloudflare
- Cloudflare (104.21.91.66, 172.67.211.87): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Domain
- motufondura.pro
- Registered
- 2026-05-19 · Dynadot Inc
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-12 07:04 UTC
- onchainex.pro US · AS13335 · Cloudflare, Inc.2 addressesListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 33 d ago
DetailsHide details for onchainex.pro
- Hostname
- onchainex.pro
- First seen
- 2026-11-12 06:46 UTC
- First published
- 2026-11-12 07:05 UTC
- Listing
- MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 06:09 UTCPhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-12 06:06 UTC
- DNS
- Resolves · checked 2026-11-12 07:15 UTC
- Listed
- MetaMask
- Observed in the MetaMask feed
- Certificate logged in CT
- We matched its certificate name
- Latest DNS check
- Certificate
- Issued by YE1Valid 2026-10-10 04:55 UTC to 2027-01-08 04:55 UTCLogged 2026-11-12 06:45 UTC in Geomys Trastevere2027h1, entry 47,527,277SHA-256 2afbb2fceecff8f8d24ed60c78f4e3877d55e9fe390d856530c7d5bf4276ea8cPublic key SHA-256 deaf407eb9025ba0548e3b2119d6004c18cd1bbe467a99071852b931cdcb05b3
- Addresses
- 104.21.78.49 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.216.238 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
- Cloudflare
- Cloudflare (104.21.78.49, 172.67.216.238): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Domain
- onchainex.pro
- Registered
- 2026-10-10 · NameSilo, LLC
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-12 07:04 UTC
- onchainex3.pro US · AS13335 · Cloudflare, Inc.2 addressesListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 33 d ago
DetailsHide details for onchainex3.pro
- Hostname
- onchainex3.pro
- First seen
- 2026-11-12 06:46 UTC
- First published
- 2026-11-12 07:05 UTC
- Listing
- MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 06:09 UTCPhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-12 06:06 UTC
- DNS
- Resolves · checked 2026-11-12 07:15 UTC
- Listed
- MetaMask
- Observed in the MetaMask feed
- Certificate logged in CT
- We matched its certificate name
- Latest DNS check
- Certificate
- Issued by YE2Valid 2026-10-10 05:13 UTC to 2027-01-08 05:13 UTCLogged 2026-11-12 06:45 UTC in DigiCert Wyvern2027h1, entry 508,954,698SHA-256 43551ffd4445dfe251aaac8eaa99095ab15c09989c056aad4d9b381f2f88d9b7Public key SHA-256 508ba709831760f592e132db6ab7828b469aa8ecdfd9e84374ed989fc2d2c59d
- Addresses
- 104.21.19.24 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.184.229 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
- Cloudflare
- Cloudflare (104.21.19.24, 172.67.184.229): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Domain
- onchainex3.pro
- Registered
- 2026-10-10 · NameSilo, LLC
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-12 07:04 UTC
- trulvanqeth-platform.com US · AS13335 · Cloudflare, Inc.2 addressesListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 4 mo ago
DetailsHide details for trulvanqeth-platform.com
- Hostname
- trulvanqeth-platform.com
- First seen
- 2026-11-12 06:46 UTC
- First published
- 2026-11-12 07:05 UTC
- Listing
- CERT Polska listed it 2026-09-14 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 06:50 UTCPhishDestroy: first observed in the feed 2026-11-10 · still listed at the last successful feed check 2026-11-12 06:06 UTC
- DNS
- Resolves · checked 2026-11-12 07:15 UTC
- Listed
- CERT Polska
- Listed by CERT Polska
- Certificate logged in CT
- We matched its certificate name
- Latest DNS check
- Certificate
- Issued by WE1Valid 2026-09-14 05:18 UTC to 2026-12-13 06:16 UTCLogged 2026-11-12 06:45 UTC in DigiCert Wyvern2026h2, entry 2,220,324,364SHA-256 8e7612f4b46ba8ec81348dcceda3b6dba37090ded6021da837b3708076129a48Public key SHA-256 54b2917c2ff9822fd1e806331f8d512f132b05ff2f4ac15cb8611d1657bb59d4
- Addresses
- 104.21.74.202 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.206.59 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
- Cloudflare
- Cloudflare (104.21.74.202, 172.67.206.59): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Domain
- trulvanqeth-platform.com
- Registered
- 2026-07-17 · Dynadot Inc
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-12 07:04 UTC
- vaultcapitalgrowth-ai.com US · AS13335 · Cloudflare, Inc.2 addressesListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 4 mo ago
DetailsHide details for vaultcapitalgrowth-ai.com
- Hostname
- vaultcapitalgrowth-ai.com
- First seen
- 2026-11-12 06:46 UTC
- First published
- 2026-11-12 07:05 UTC
- Listing
- CERT Polska listed it 2026-07-18 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 06:50 UTC
- DNS
- Resolves · checked 2026-11-12 07:15 UTC
- Listed
- CERT Polska
- Listed by CERT Polska
- Certificate logged in CT
- We matched its certificate name
- Latest DNS check
- Certificate
- Issued by WE1Valid 2026-09-14 00:36 UTC to 2026-12-13 01:33 UTCLogged 2026-11-12 06:41 UTC in DigiCert Wyvern2026h2, entry 2,220,317,568SHA-256 8b6e7cbb6365e65960f0e505d875e7f4de2c28b30414137e7902f2c707f7b79ePublic key SHA-256 e252e562bfc8760609dbff222cb0625714bd0ab2a4f8f2ff94dc8f8cfedc67e3
- Addresses
- 104.21.54.198 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.141.140 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
- Cloudflare
- Cloudflare (104.21.54.198, 172.67.141.140): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Domain
- vaultcapitalgrowth-ai.com
- Registered
- 2026-07-16 · Eranet International Limited
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-12 07:04 UTC
- www.ccorteiz.com US · AS13335 · Cloudflare, Inc.2 addressesReportedCloudflareUnder ccorteiz.com, reported by PhishDestroyMX presentSPF ~allDMARC missingRegistered 4 mo ago
DetailsHide details for www.ccorteiz.com
- Hostname
- www.ccorteiz.com
- First seen
- 2026-11-12 06:46 UTC
- First published
- 2026-11-12 07:05 UTC
- Listing
- PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-12 06:06 UTC
- DNS
- Resolves · checked 2026-11-12 07:15 UTC
- Reported
- PhishDestroy, listing ccorteiz.com and the names under it
- Observed in the PhishDestroy feed
- Certificate logged in CT
- We matched its certificate name
- Latest DNS check
- Certificate
- Issued by YR2 · precertificateValid 2026-11-12 05:45 UTC to 2027-02-10 05:45 UTCLogged 2026-11-12 06:43 UTC in IPng Networks Halloumi2027h1, entry 466,735,331SHA-256 65d7c648e171cfdb0d0464045b72f520f6064231279ba4f1193785d925d6e50dPublic key SHA-256 6a74b7d936d976929f6a3fc3788d95ee20ca037499b7cbf9e3c48e67b489c11b
- PhishDestroy
- Addresses
- 104.21.13.150 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.200.160 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
- Cloudflare
- Cloudflare (104.21.13.150, 172.67.200.160): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Domain
- ccorteiz.com
- Registered
- 2026-07-15 · NICENIC INTERNATIONAL GROUP CO., LIMITED
- MX
- Receives mail at mx1.titan.email, mx2.titan.email
- SPF
- SPF record with ~all: other senders soft-fail
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-11 16:03 UTC
- www.jysk-depend.shop US · AS13335 · Cloudflare, Inc.2 addressesListedCloudflareUnder jysk-depend.shop, listed by CERT PolskaMX absentSPF missingDMARC missingRegistered 59 d ago
DetailsHide details for www.jysk-depend.shop
- Hostname
- www.jysk-depend.shop
- First seen
- 2026-11-12 06:46 UTC
- First published
- 2026-11-12 07:05 UTC
- Listing
- CERT Polska listed it 2026-09-15 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 06:50 UTCPhishDestroy: first observed in the feed 2026-10-31 · still listed at the last successful feed check 2026-11-12 06:06 UTC
- DNS
- Resolves · checked 2026-11-12 07:15 UTC
- Listed
- CERT Polska, listing jysk-depend.shop and the names under it
- Listed by CERT Polska
- Certificate logged in CT
- We matched its certificate name
- Latest DNS check
- Certificate
- Issued by WE1Valid 2026-09-14 01:52 UTC to 2026-12-13 02:52 UTCLogged 2026-11-12 06:43 UTC in DigiCert Wyvern2026h2, entry 2,220,321,027SHA-256 4dc15d2c2febead4f69fedc9458c711f249a6a3c06f7c69253043dbed14b63f1Public key SHA-256 de2395153441fef860102a26373984adb0e8b287688c9998802b04be4673b778
- Addresses
- 104.21.20.138 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.192.241 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
- Cloudflare
- Cloudflare (104.21.20.138, 172.67.192.241): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Domain
- jysk-depend.shop
- Registered
- 2026-09-14 · Dynadot Inc.
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-12 05:25 UTC
- github-api.virzz.icu US · AS13335 · Cloudflare, Inc.2 addressesListedCloudflareUnder virzz.icu, listed by MetaMaskMX presentSPF ~allDMARC missingRegistered 12 mo ago
DetailsHide details for github-api.virzz.icu
- Hostname
- github-api.virzz.icu
- First seen
- 2026-11-12 06:41 UTC
- First published
- 2026-11-12 07:05 UTC
- Listing
- MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 06:09 UTC
- DNS
- Resolves · checked 2026-11-12 07:15 UTC
- Listed
- MetaMask, listing virzz.icu and the names under it
- Observed in the MetaMask feed
- Certificate logged in CT
- We matched its certificate name
- Latest DNS check
- Certificate
- Issued by WE1 · precertificateValid 2026-11-12 05:39 UTC to 2027-02-10 06:36 UTCLogged 2026-11-12 06:39 UTC in Let's Encrypt Sycamore2027h1, entry 1,159,546,825SHA-256 0331c8010fb48e65ee2d25cbcc72e888b219e78e8a534205523b754f95425da9Public key SHA-256 1db21b20bc1f92563afb5acbeafde56587c3fb63701b82a3e80589d08251beee
- Addresses
- 104.21.71.244 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.172.101 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
- Cloudflare
- Cloudflare (104.21.71.244, 172.67.172.101): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Domain
- virzz.icu
- Registered
- 2025-11-11 · Alibaba Cloud Computing Ltd. d/b/a HiChina (www.net.cn)
- MX
- Receives mail at route1.mx.cloudflare.net, route2.mx.cloudflare.net, route3.mx.cloudflare.net
- SPF
- SPF record with ~all: other senders soft-fail
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-11 08:57 UTC
- qwssxa.top US · AS13335 · Cloudflare, Inc.2 addressesListedCloudflareListed by NPA 165 (e-commerce)MX absentSPF missingDMARC missingRegistered 10 mo ago
DetailsHide details for qwssxa.top
- Hostname
- qwssxa.top
- First seen
- 2026-11-12 06:41 UTC
- First published
- 2026-11-12 07:05 UTC
- Listing
- NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 01:38 UTC
- DNS
- Resolves · checked 2026-11-12 07:15 UTC
- Listed
- NPA 165
- Observed in the NPA 165 feed
- Certificate logged in CT
- We matched its certificate name
- Latest DNS check
- Certificate
- Issued by WE1Valid 2026-11-12 05:39 UTC to 2027-02-10 06:36 UTCLogged 2026-11-12 06:39 UTC in DigiCert Wyvern2027h1, entry 508,899,880SHA-256 5ab752527a31bec44c5fa5a538829bb3d41ae6c178dbad3e4e6d10b3ed8ee47bPublic key SHA-256 e14148c6f5175618e41af51e2f9ab9f89e1f35dc9e8d3d0aff622c794038047d
- Addresses
- 104.21.17.112 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.175.196 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
- Cloudflare
- Cloudflare (104.21.17.112, 172.67.175.196): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Domain
- qwssxa.top
- Registered
- 2026-01-19 · 阿里云计算有限公司
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-12 07:04 UTC
- kapitalden-app.com US · AS13335 · Cloudflare, Inc.2 addressesListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 4 mo ago
DetailsHide details for kapitalden-app.com
- Hostname
- kapitalden-app.com
- First seen
- 2026-11-12 06:36 UTC
- First published
- 2026-11-12 07:05 UTC
- Listing
- CERT Polska listed it 2026-07-18 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 06:50 UTC
- DNS
- Resolves · checked 2026-11-12 07:15 UTC
- Listed
- CERT Polska
- Listed by CERT Polska
- Certificate logged in CT
- We matched its certificate name
- Latest DNS check
- Certificate
- Issued by WE1 · precertificateValid 2026-11-12 05:32 UTC to 2027-02-10 06:29 UTCLogged 2026-11-12 06:32 UTC in Let's Encrypt Willow2027h1, entry 1,113,354,012SHA-256 be10f7b49807696303dde2264b3926a0a9f555acb7d2de29d81e24b617f6fa7fPublic key SHA-256 a887a2d69748ea804da620291e530284949898f9eb42418f7b12676523dd3b4c
- Addresses
- 104.21.95.61 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.143.89 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
- Cloudflare
- Cloudflare (104.21.95.61, 172.67.143.89): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Domain
- kapitalden-app.com
- Registered
- 2026-07-16 · Eranet International Limited
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-12 07:04 UTC
- lisharcapital.com US · AS13335 · Cloudflare, Inc.2 addressesListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 59 d ago
DetailsHide details for lisharcapital.com
- Hostname
- lisharcapital.com
- First seen
- 2026-11-12 06:36 UTC
- First published
- 2026-11-12 07:05 UTC
- Listing
- MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 06:09 UTC
- DNS
- Resolves · checked 2026-11-12 07:15 UTC
- Listed
- MetaMask
- Observed in the MetaMask feed
- Certificate logged in CT
- We matched its certificate name
- Latest DNS check
- Certificate
- Issued by YE2Valid 2026-11-12 05:33 UTC to 2027-02-10 05:33 UTCLogged 2026-11-12 06:32 UTC in Google ParcelYard2027h1, entry 750,473,616SHA-256 47a8ad1ec4915232bb0ba48bcf66abf65d7ff0f5e980721fd7fc57cf68ff0eb0Public key SHA-256 d2b5d6d8f193724920ab2abcf2699ec26a5cc3e898427edfec0d02ff6b3d1404
- Addresses
- 104.21.48.22 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.176.30 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
- Cloudflare
- Cloudflare (104.21.48.22, 172.67.176.30): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Domain
- lisharcapital.com
- Registered
- 2026-09-14 · Cloudflare, Inc.
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-12 07:04 UTC
- mongolporn.com US · AS13335 · Cloudflare, Inc.2 addressesReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 10 mo ago
DetailsHide details for mongolporn.com
- Hostname
- mongolporn.com
- First seen
- 2026-11-12 06:36 UTC
- First published
- 2026-11-12 07:05 UTC
- Listing
- PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-12 06:06 UTC
- DNS
- Resolves · checked 2026-11-12 07:15 UTC
- Reported
- PhishDestroy
- Observed in the PhishDestroy feed
- Certificate logged in CT
- We matched its certificate name
- Latest DNS check
- Certificate
- Issued by WE1 · precertificateValid 2026-11-12 05:33 UTC to 2027-02-10 06:31 UTCLogged 2026-11-12 06:33 UTC in Google ParcelYard2027h1, entry 750,486,678SHA-256 8107c42670c20d0f8c52d03b88275159c7e55efe1abbf41462b1b4931c0975f9Public key SHA-256 6132ef8b8fab0e7c2851889f2ff0f0f7ce6fc17a6183983c1c601a2214889e45
- PhishDestroy
- Addresses
- 104.21.7.23 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.135.165 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
- Cloudflare
- Cloudflare (104.21.7.23, 172.67.135.165): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Domain
- mongolporn.com
- Registered
- 2026-01-20 · Atak Domain Bilgi Teknolojileri A.S.
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-12 07:04 UTC
- slot161.com US · AS13335 · Cloudflare, Inc.2 addressesReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 5 y ago
DetailsHide details for slot161.com
- Hostname
- slot161.com
- First seen
- 2026-11-12 06:36 UTC
- First published
- 2026-11-12 07:05 UTC
- Listing
- PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-12 06:06 UTC
- DNS
- Resolves · checked 2026-11-12 07:15 UTC
- Reported
- PhishDestroy
- Observed in the PhishDestroy feed
- Certificate logged in CT
- We matched its certificate name
- Latest DNS check
- Certificate
- Issued by WE1Valid 2026-11-12 05:32 UTC to 2027-02-10 06:29 UTCLogged 2026-11-12 06:34 UTC in DigiCert Wyvern2027h1, entry 508,849,026SHA-256 273fdb4866083e5b918c168a2c98ab563e79d488a5d9fe081644d15b425bc3acPublic key SHA-256 000bdd592136d0bb5e5dfdc438ce2311ec50eadae2213312dd6541f1f72ed17a
- PhishDestroy
- Addresses
- 104.21.10.242 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.147.18 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
- Cloudflare
- Cloudflare (104.21.10.242, 172.67.147.18): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Domain
- slot161.com
- Registered
- 2022-03-18 · NameCheap, Inc.
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-12 06:40 UTC
- pulfreyshopping.online US · AS13335 · Cloudflare, Inc.2 addressesListedCloudflareListed by NPA 165 (e-commerce)MX absentSPF missingDMARC quarantineRegistered 6 mo ago
DetailsHide details for pulfreyshopping.online
- Hostname
- pulfreyshopping.online
- First seen
- 2026-11-12 06:31 UTC
- First published
- 2026-11-12 07:05 UTC
- Listing
- NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 01:38 UTC
- DNS
- Resolves · checked 2026-11-12 07:15 UTC
- Listed
- NPA 165
- Observed in the NPA 165 feed
- Certificate logged in CT
- We matched its certificate name
- Latest DNS check
- Certificate
- Issued by YE1Valid 2026-11-12 05:30 UTC to 2027-02-10 05:29 UTCLogged 2026-11-12 06:28 UTC in Google ParcelYard2027h1, entry 750,426,699SHA-256 3666b9885518caf11a98ce321078addded0983102a0af115313f38f0a10b8e12Public key SHA-256 7d6bf49f14e39fcec3d5a8d55ba04c214d3d124847e1d8d0b4b8a543a8fef203
- Addresses
- 104.21.29.167 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.149.135 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
- Cloudflare
- Cloudflare (104.21.29.167, 172.67.149.135): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Domain
- pulfreyshopping.online
- Registered
- 2026-05-19 · GoDaddy.com, LLC
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- DMARC policy p=quarantine
- Checked
- 2026-11-12 07:04 UTC
- shackletteshopping.online US · AS13335 · Cloudflare, Inc.2 addressesListedCloudflareListed by NPA 165 (e-commerce)MX absentSPF missingDMARC quarantineRegistered 6 mo ago
DetailsHide details for shackletteshopping.online
- Hostname
- shackletteshopping.online
- First seen
- 2026-11-12 06:31 UTC
- First published
- 2026-11-12 07:05 UTC
- Listing
- NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 01:38 UTC
- DNS
- Resolves · checked 2026-11-12 07:15 UTC
- Listed
- NPA 165
- Observed in the NPA 165 feed
- Certificate logged in CT
- We matched its certificate name
- Latest DNS check
- Certificate
- Issued by YE1Valid 2026-11-12 05:28 UTC to 2027-02-10 05:28 UTCLogged 2026-11-12 06:27 UTC in Google PlumbersArms2027h1, entry 750,604,407SHA-256 1723f25db9863b1169e5917951602fc6ea9e5a8a883b9417675bb07d8b68bfd9Public key SHA-256 4e289adcec0b4c1a94980da5d5874efa7b446c33226abcb9e21b1b78128db924
- Addresses
- 104.21.66.9 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.154.121 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
- Cloudflare
- Cloudflare (104.21.66.9, 172.67.154.121): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Domain
- shackletteshopping.online
- Registered
- 2026-05-19 · GoDaddy.com, LLC
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- DMARC policy p=quarantine
- Checked
- 2026-11-12 07:04 UTC
- stakeglobals.com US · AS13335 · Cloudflare, Inc.2 addressesReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 6 mo ago
DetailsHide details for stakeglobals.com
- Hostname
- stakeglobals.com
- First seen
- 2026-11-12 06:31 UTC
- First published
- 2026-11-12 07:05 UTC
- Listing
- PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-12 06:06 UTC
- DNS
- Resolves · checked 2026-11-12 07:15 UTC
- Reported
- PhishDestroy
- Observed in the PhishDestroy feed
- Certificate logged in CT
- We matched its certificate name
- Latest DNS check
- Certificate
- Issued by YE2Valid 2026-11-12 05:28 UTC to 2027-02-10 05:28 UTCLogged 2026-11-12 06:26 UTC in Google PlumbersArms2027h1, entry 750,596,273SHA-256 3c25077eef4d1b1da53bc359df1a6b716e21eb9ce5162254cd84611b091b59cdPublic key SHA-256 c24c711a1b51a3adc52d9e72f1f8d231859241f32fd8b79ca1e8ca881d66e54c
- PhishDestroy
- Addresses
- 104.21.89.47 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.156.108 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
- Cloudflare
- Cloudflare (104.21.89.47, 172.67.156.108): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Domain
- stakeglobals.com
- Registered
- 2026-05-18 · Global Domain Group LLC
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-12 06:35 UTC
- xaicore.net US · AS13335 · Cloudflare, Inc.2 addressesReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 12 mo ago
DetailsHide details for xaicore.net
- Hostname
- xaicore.net
- First seen
- 2026-11-12 06:31 UTC
- First published
- 2026-11-12 07:05 UTC
- Listing
- PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-12 06:06 UTC
- DNS
- Resolves · checked 2026-11-12 07:15 UTC
- Reported
- PhishDestroy
- Observed in the PhishDestroy feed
- Certificate logged in CT
- We matched its certificate name
- Latest DNS check
- Certificate
- Issued by WE1Valid 2026-09-14 03:37 UTC to 2026-12-13 04:37 UTCLogged 2026-11-12 06:28 UTC in TrustAsia log2026a, entry 3,035,218,611SHA-256 87ef24512588f4fcc9d8eefd74f70a7bbffef8181e9f47cd21a54ecbd5093ea7Public key SHA-256 38b791b496e330b31f4a1f68787783b59c612019742bec2f51fb44a2cbd0b3ae
- PhishDestroy
- Addresses
- 104.21.66.235 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.165.218 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
- Cloudflare
- Cloudflare (104.21.66.235, 172.67.165.218): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Domain
- xaicore.net
- Registered
- 2025-11-22 · NICENIC INTERNATIONAL GROUP CO., LIMITED
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-12 06:35 UTC
- txt-crypto.com US · AS13335 · Cloudflare, Inc.2 addressesListedCloudflareListed by MetaMaskMX absentSPF ~allDMARC missingRegistered 6 mo ago
DetailsHide details for txt-crypto.com
- Hostname
- txt-crypto.com
- First seen
- 2026-11-12 06:26 UTC
- First published
- 2026-11-12 07:05 UTC
- Listing
- MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 06:09 UTC
- DNS
- Resolves · checked 2026-11-12 07:15 UTC
- Listed
- MetaMask
- Observed in the MetaMask feed
- Certificate logged in CT
- We matched its certificate name
- Latest DNS check
- Certificate
- Issued by YE1 · precertificateValid 2026-11-12 05:26 UTC to 2027-02-10 05:26 UTCLogged 2026-11-12 06:25 UTC in IPng Networks Halloumi2027h1, entry 466,580,362SHA-256 0c7e9bef6b5331988a4e37571a5d60010f7c6e755d13d115df8e26cae7c03a20Public key SHA-256 e429b1599a276bbca3e6c74d96194650f3ec1c904a5bdbb718a1bfc3060516f2
- Addresses
- 104.21.8.90 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.130.103 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
- Cloudflare
- Cloudflare (104.21.8.90, 172.67.130.103): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Domain
- txt-crypto.com
- Registered
- 2026-05-18 · Realtime Register B.V.
- MX
- Publishes no mail exchanger
- SPF
- SPF record with ~all: other senders soft-fail
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-12 07:04 UTC
- update-zama.info US · AS13335 · Cloudflare, Inc.2 addressesListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 4 mo ago
DetailsHide details for update-zama.info
- Hostname
- update-zama.info
- First seen
- 2026-11-12 06:26 UTC
- First published
- 2026-11-12 07:05 UTC
- Listing
- MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 06:09 UTCPhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-12 06:06 UTC
- DNS
- Resolves · checked 2026-11-12 07:15 UTC
- Listed
- MetaMask
- Observed in the MetaMask feed
- Certificate logged in CT
- We matched its certificate name
- Latest DNS check
- Certificate
- Issued by WE1 · precertificateValid 2026-11-12 05:25 UTC to 2027-02-10 06:23 UTCLogged 2026-11-12 06:25 UTC in IPng Networks Halloumi2027h1, entry 466,579,499SHA-256 15a63881fe2376903ca787072278b8a7834b5d5e2ec12446c0c2df8380439ce9Public key SHA-256 f48a156f5efb04f9a0a18e255d87f35fbbb20cb8e32d7bd647633657635a50df
- Addresses
- 104.21.0.127 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.150.246 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
- Cloudflare
- Cloudflare (104.21.0.127, 172.67.150.246): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Domain
- update-zama.info
- Registered
- 2026-07-17 · NICENIC INTERNATIONAL GROUP CO., LIMITED
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-12 07:04 UTC
- zykanordrift.net US · AS13335 · Cloudflare, Inc.2 addressesListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 6 mo ago
DetailsHide details for zykanordrift.net
- Hostname
- zykanordrift.net
- First seen
- 2026-11-12 06:26 UTC
- First published
- 2026-11-12 07:05 UTC
- Listing
- CERT Polska listed it 2026-07-23 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 06:50 UTC
- DNS
- Resolves · checked 2026-11-12 07:15 UTC
- Listed
- CERT Polska
- Listed by CERT Polska
- Certificate logged in CT
- We matched its certificate name
- Latest DNS check
- Certificate
- Issued by YE2 · precertificateValid 2026-11-12 05:26 UTC to 2027-02-10 05:26 UTCLogged 2026-11-12 06:25 UTC in Geomys Tuscolo2027h1, entry 586,908,392SHA-256 1ea5fb5ea0557aa6658bf1bf35bd88534f8946960160a112c54ba3d70c798ce9Public key SHA-256 c30f9ae0b661022140f3fefeb18c3a9b62ce1a2dc80b1c045922006a1eef967d
- Addresses
- 104.21.95.68 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.143.124 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
- Cloudflare
- Cloudflare (104.21.95.68, 172.67.143.124): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Domain
- zykanordrift.net
- Registered
- 2026-05-18 · NameCheap, Inc.
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-12 07:04 UTC
- hyperlend-vote.finance US · AS13335 · Cloudflare, Inc.2 addressesListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 6 mo ago
DetailsHide details for hyperlend-vote.finance
- Hostname
- hyperlend-vote.finance
- First seen
- 2026-11-12 06:21 UTC
- First published
- 2026-11-12 07:05 UTC
- Listing
- MetaMask: first observed in the feed 2026-11-06 · still listed at the last successful feed check 2026-11-12 06:09 UTC
- DNS
- Resolves · checked 2026-11-12 07:15 UTC
- Listed
- MetaMask
- Observed in the MetaMask feed
- Certificate logged in CT
- We matched its certificate name
- Latest DNS check
- Certificate
- Issued by YE2Valid 2026-11-12 05:17 UTC to 2027-02-10 05:17 UTCLogged 2026-11-12 06:15 UTC in Google ParcelYard2027h1, entry 750,277,739SHA-256 c4aed600e2eb6172b5c0538e18154464dcd1c460d0a2784e673543ffcd05453bPublic key SHA-256 1c3664ebd3ecae22c32b37dd8b9ce0f9615010dba498c2d32effd3b9602285b9
- Addresses
- 104.21.34.51 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.198.140 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
- Cloudflare
- Cloudflare (104.21.34.51, 172.67.198.140): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Domain
- hyperlend-vote.finance
- Registered
- 2026-05-19 · NICENIC INTERNATIONAL GROUP CO., LIMITED
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-12 07:04 UTC
- jhkvfqfm.shop US · AS13335 · Cloudflare, Inc.ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 59 d ago
DetailsHide details for jhkvfqfm.shop
- Hostname
- jhkvfqfm.shop
- First seen
- 2026-11-12 06:21 UTC
- First published
- 2026-11-12 07:05 UTC
- Listing
- CERT Polska listed it 2026-09-14 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 06:50 UTC
- DNS
- Resolves · checked 2026-11-12 07:15 UTC
- Listed
- CERT Polska
- Listed by CERT Polska
- Certificate logged in CT
- We matched its certificate name
- Latest DNS check
- Certificate
- Issued by YE1Valid 2026-11-12 05:19 UTC to 2027-02-10 05:19 UTCLogged 2026-11-12 06:17 UTC in Google PlumbersArms2027h1, entry 750,490,621SHA-256 0bd5381b51c9f34c9d647f0e67119b334bcafba85fac8d69a060eb47edeb03faPublic key SHA-256 34f8725123cabbc886b172357e500597cf0c5017185ac5e2c0eabf9b8ccdbdeb
- Addresses
- 104.17.231.54 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
- Cloudflare
- Cloudflare (104.17.231.54): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Domain
- jhkvfqfm.shop
- Registered
- 2026-09-14 · Web Commerce Communication Ltd.
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-12 07:04 UTC
- staging-ashlandymca.y.org US · AS13335 · Cloudflare, Inc.2 addressesReportedCloudflareUnder y.org, reported by PhishDestroyMX absentSPF missingDMARC missingRegistered 33 y ago
DetailsHide details for staging-ashlandymca.y.org
- Hostname
- staging-ashlandymca.y.org
- First seen
- 2026-11-12 06:21 UTC
- First published
- 2026-11-12 07:05 UTC
- Listing
- PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-12 06:06 UTC
- DNS
- Resolves · checked 2026-11-12 07:15 UTC
- Reported
- PhishDestroy, listing y.org and the names under it
- Observed in the PhishDestroy feed
- Certificate logged in CT
- We matched its certificate name
- Latest DNS check
- Certificate
- Issued by YR2 · precertificateValid 2026-11-12 05:18 UTC to 2027-02-10 05:18 UTCLogged 2026-11-12 06:16 UTC in DigiCert Wyvern2027h1, entry 508,673,231SHA-256 45054919f9fffd1e1b15e67a291a965737fd20561c01df3f2e6b98803caa2380Public key SHA-256 6a28ad5f29dc8edca69b65f03c5d739aeed0620764bac374b7087bba55e63c22
- PhishDestroy
- Addresses
- 104.18.8.112 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)104.18.9.112 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
- Cloudflare
- Cloudflare (104.18.8.112, 104.18.9.112): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Domain
- y.org
- Registered
- 1993-12-01 · CSC Corporate Domains, Inc.
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-11 09:10 UTC
- staging-ccaymca.y.org US · AS13335 · Cloudflare, Inc.2 addressesReportedCloudflareUnder y.org, reported by PhishDestroyMX absentSPF missingDMARC missingRegistered 33 y ago
DetailsHide details for staging-ccaymca.y.org
- Hostname
- staging-ccaymca.y.org
- First seen
- 2026-11-12 06:21 UTC
- First published
- 2026-11-12 07:05 UTC
- Listing
- PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-12 06:06 UTC
- DNS
- Resolves · checked 2026-11-12 07:15 UTC
- Reported
- PhishDestroy, listing y.org and the names under it
- Observed in the PhishDestroy feed
- Certificate logged in CT
- We matched its certificate name
- Latest DNS check
- Certificate
- Issued by YR2Valid 2026-11-12 05:18 UTC to 2027-02-10 05:18 UTCLogged 2026-11-12 06:16 UTC in Google PlumbersArms2027h1, entry 750,476,594SHA-256 60ec85935207e322cea9e8825e2c2e23ba8d958a9de768fea4cc630e5ec0080dPublic key SHA-256 34c89dc81edc2ae5d7fbb0c81dc19db1975e6208355af6131fd9869e997e85d3
- PhishDestroy
- Addresses
- 104.18.8.112 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)104.18.9.112 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
- Cloudflare
- Cloudflare (104.18.8.112, 104.18.9.112): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Domain
- y.org
- Registered
- 1993-12-01 · CSC Corporate Domains, Inc.
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-11 09:10 UTC
- staging-lasvegasymca.y.org US · AS13335 · Cloudflare, Inc.2 addressesReportedCloudflareUnder y.org, reported by PhishDestroyMX absentSPF missingDMARC missingRegistered 33 y ago
DetailsHide details for staging-lasvegasymca.y.org
- Hostname
- staging-lasvegasymca.y.org
- First seen
- 2026-11-12 06:21 UTC
- First published
- 2026-11-12 07:05 UTC
- Listing
- PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-12 06:06 UTC
- DNS
- Resolves · checked 2026-11-12 07:15 UTC
- Reported
- PhishDestroy, listing y.org and the names under it
- Observed in the PhishDestroy feed
- Certificate logged in CT
- We matched its certificate name
- Latest DNS check
- Certificate
- Issued by YR2 · precertificateValid 2026-11-12 05:18 UTC to 2027-02-10 05:18 UTCLogged 2026-11-12 06:16 UTC in Geomys Tuscolo2027h1, entry 586,837,602SHA-256 02a7ae5a3c8ec9279fbc9de55b8a649fb5c71cc6e99ed5ae3bc19fd49d04416dPublic key SHA-256 7f5972634ac22005f332aacb95b196c406f53235a6112502ac527fb91436c189
- PhishDestroy
- Addresses
- 104.18.8.112 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)104.18.9.112 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
- Cloudflare
- Cloudflare (104.18.8.112, 104.18.9.112): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Domain
- y.org
- Registered
- 1993-12-01 · CSC Corporate Domains, Inc.
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-11 09:10 UTC
- staging-owensborofamilyymca.y.org US · AS13335 · Cloudflare, Inc.2 addressesReportedCloudflareUnder y.org, reported by PhishDestroyMX absentSPF missingDMARC missingRegistered 33 y ago
DetailsHide details for staging-owensborofamilyymca.y.org
- Hostname
- staging-owensborofamilyymca.y.org
- First seen
- 2026-11-12 06:21 UTC
- First published
- 2026-11-12 07:05 UTC
- Listing
- PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-12 06:06 UTC
- DNS
- Resolves · checked 2026-11-12 07:15 UTC
- Reported
- PhishDestroy, listing y.org and the names under it
- Observed in the PhishDestroy feed
- Certificate logged in CT
- We matched its certificate name
- Latest DNS check
- Certificate
- Issued by YR2Valid 2026-11-12 05:18 UTC to 2027-02-10 05:18 UTCLogged 2026-11-12 06:17 UTC in Let's Encrypt Willow2027h1, entry 1,113,177,746SHA-256 45457bdb350e4a3e3c466f5dcfff5feb21dc4d32ae460ed378ec6470232ac6dfPublic key SHA-256 5cb30489f7ee8110208fc3fdc02ac55769c19a842802ffa81e6d4d3f77a3bc80
- PhishDestroy
- Addresses
- 104.18.8.112 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)104.18.9.112 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
- Cloudflare
- Cloudflare (104.18.8.112, 104.18.9.112): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Domain
- y.org
- Registered
- 1993-12-01 · CSC Corporate Domains, Inc.
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-11 09:10 UTC
- staging-pittsburghymca.y.org US · AS13335 · Cloudflare, Inc.2 addressesReportedCloudflareUnder y.org, reported by PhishDestroyMX absentSPF missingDMARC missingRegistered 33 y ago
DetailsHide details for staging-pittsburghymca.y.org
- Hostname
- staging-pittsburghymca.y.org
- First seen
- 2026-11-12 06:21 UTC
- First published
- 2026-11-12 07:05 UTC
- Listing
- PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-12 06:06 UTC
- DNS
- Resolves · checked 2026-11-12 07:15 UTC
- Reported
- PhishDestroy, listing y.org and the names under it
- Observed in the PhishDestroy feed
- Certificate logged in CT
- We matched its certificate name
- Latest DNS check
- Certificate
- Issued by YR2Valid 2026-11-12 05:18 UTC to 2027-02-10 05:18 UTCLogged 2026-11-12 06:17 UTC in Google ParcelYard2027h1, entry 750,292,390SHA-256 356464d989c936b615a9229a68abeb9e2cb17aad38852bc4c9f578198b6cccbfPublic key SHA-256 de7fd2db54c6aab67ded5c0c844e2071717b1c96495188e6b64294a645b0cb69
- PhishDestroy
- Addresses
- 104.18.8.112 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)104.18.9.112 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
- Cloudflare
- Cloudflare (104.18.8.112, 104.18.9.112): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Domain
- y.org
- Registered
- 1993-12-01 · CSC Corporate Domains, Inc.
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-11 09:10 UTC
- staging-southsoundymcavirtual.y.org US · AS13335 · Cloudflare, Inc.2 addressesReportedCloudflareUnder y.org, reported by PhishDestroyMX absentSPF missingDMARC missingRegistered 33 y ago
DetailsHide details for staging-southsoundymcavirtual.y.org
- Hostname
- staging-southsoundymcavirtual.y.org
- First seen
- 2026-11-12 06:21 UTC
- First published
- 2026-11-12 07:05 UTC
- Listing
- PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-12 06:06 UTC
- DNS
- Resolves · checked 2026-11-12 07:15 UTC
- Reported
- PhishDestroy, listing y.org and the names under it
- Observed in the PhishDestroy feed
- Certificate logged in CT
- We matched its certificate name
- Latest DNS check
- Certificate
- Issued by YR2Valid 2026-11-12 05:18 UTC to 2027-02-10 05:18 UTCLogged 2026-11-12 06:17 UTC in Google PlumbersArms2027h1, entry 750,482,830SHA-256 5e77d55fc851171f15d7465e23983ca059c82a150ab74de7459e99f39a3299b1Public key SHA-256 fe9cc0f44c7d1983215a344229411dda51b028c482243e395686bdb1d2969b9a
- PhishDestroy
- Addresses
- 104.18.8.112 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)104.18.9.112 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
- Cloudflare
- Cloudflare (104.18.8.112, 104.18.9.112): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Domain
- y.org
- Registered
- 1993-12-01 · CSC Corporate Domains, Inc.
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-11 09:10 UTC
- staging-yimv.y.org US · AS13335 · Cloudflare, Inc.2 addressesReportedCloudflareUnder y.org, reported by PhishDestroyMX absentSPF missingDMARC missingRegistered 33 y ago
DetailsHide details for staging-yimv.y.org
- Hostname
- staging-yimv.y.org
- First seen
- 2026-11-12 06:21 UTC
- First published
- 2026-11-12 07:05 UTC
- Listing
- PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-12 06:06 UTC
- DNS
- Resolves · checked 2026-11-12 07:15 UTC
- Reported
- PhishDestroy, listing y.org and the names under it
- Observed in the PhishDestroy feed
- Certificate logged in CT
- We matched its certificate name
- Latest DNS check
- Certificate
- Issued by YR1 · precertificateValid 2026-11-12 05:18 UTC to 2027-02-10 05:18 UTCLogged 2026-11-12 06:17 UTC in Let's Encrypt Sycamore2027h1, entry 1,159,280,338SHA-256 17e6875b49bcde0c6fbf1ad5e280546f8e00720013ab1b0cd5d251f94b7e123ePublic key SHA-256 cc1579cef2bc4784ebb7cde72aebd203b6e25dcf278d09220a9f6b636a22445b
- PhishDestroy
- Addresses
- 104.18.8.112 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)104.18.9.112 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
- Cloudflare
- Cloudflare (104.18.8.112, 104.18.9.112): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Domain
- y.org
- Registered
- 1993-12-01 · CSC Corporate Domains, Inc.
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-11 09:10 UTC
- staging-ymcadane.y.org US · AS13335 · Cloudflare, Inc.2 addressesReportedCloudflareUnder y.org, reported by PhishDestroyMX absentSPF missingDMARC missingRegistered 33 y ago
DetailsHide details for staging-ymcadane.y.org
- Hostname
- staging-ymcadane.y.org
- First seen
- 2026-11-12 06:21 UTC
- First published
- 2026-11-12 07:05 UTC
- Listing
- PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-12 06:06 UTC
- DNS
- Resolves · checked 2026-11-12 07:15 UTC
- Reported
- PhishDestroy, listing y.org and the names under it
- Observed in the PhishDestroy feed
- Certificate logged in CT
- We matched its certificate name
- Latest DNS check
- Certificate
- Issued by YR1Valid 2026-11-12 05:18 UTC to 2027-02-10 05:18 UTCLogged 2026-11-12 06:17 UTC in Google PlumbersArms2027h1, entry 750,486,597SHA-256 17d41bc2385ecda7ab14379d4580d67dbf5f9db568f47966fbe4518a2bffda0dPublic key SHA-256 da1fdcae7c0b5565c7b90e2840ef9018890ae091cd6589ed87b443a890d34e39
- PhishDestroy
- Addresses
- 104.18.8.112 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)104.18.9.112 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
- Cloudflare
- Cloudflare (104.18.8.112, 104.18.9.112): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Domain
- y.org
- Registered
- 1993-12-01 · CSC Corporate Domains, Inc.
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-11 09:10 UTC
- staging-ymcafw.y.org US · AS13335 · Cloudflare, Inc.2 addressesReportedCloudflareUnder y.org, reported by PhishDestroyMX absentSPF missingDMARC missingRegistered 33 y ago
DetailsHide details for staging-ymcafw.y.org
- Hostname
- staging-ymcafw.y.org
- First seen
- 2026-11-12 06:21 UTC
- First published
- 2026-11-12 07:05 UTC
- Listing
- PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-12 06:06 UTC
- DNS
- Resolves · checked 2026-11-12 07:15 UTC
- Reported
- PhishDestroy, listing y.org and the names under it
- Observed in the PhishDestroy feed
- Certificate logged in CT
- We matched its certificate name
- Latest DNS check
- Certificate
- Issued by YR1 · precertificateValid 2026-11-12 05:19 UTC to 2027-02-10 05:19 UTCLogged 2026-11-12 06:17 UTC in DigiCert Sphinx2027h1, entry 451,543,571SHA-256 6778b622576458264b0eb7103b4194babfa6b96331c92aea2933992c96231dd4Public key SHA-256 f6f7e90731ada8429e1e3ef212e20da7ada84713635554b0e2f85766aca947e7
- PhishDestroy
- Addresses
- 104.18.8.112 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)104.18.9.112 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
- Cloudflare
- Cloudflare (104.18.8.112, 104.18.9.112): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Domain
- y.org
- Registered
- 1993-12-01 · CSC Corporate Domains, Inc.
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-11 09:10 UTC
- staging-ymcalouisville.y.org US · AS13335 · Cloudflare, Inc.2 addressesReportedCloudflareUnder y.org, reported by PhishDestroyMX absentSPF missingDMARC missingRegistered 33 y ago
DetailsHide details for staging-ymcalouisville.y.org
- Hostname
- staging-ymcalouisville.y.org
- First seen
- 2026-11-12 06:21 UTC
- First published
- 2026-11-12 07:05 UTC
- Listing
- PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-12 06:06 UTC
- DNS
- Resolves · checked 2026-11-12 07:15 UTC
- Reported
- PhishDestroy, listing y.org and the names under it
- Observed in the PhishDestroy feed
- Certificate logged in CT
- We matched its certificate name
- Latest DNS check
- Certificate
- Issued by YR1 · precertificateValid 2026-11-12 05:19 UTC to 2027-02-10 05:19 UTCLogged 2026-11-12 06:17 UTC in Geomys Tuscolo2027h1, entry 586,845,835SHA-256 50b34744c388607d2256758536e57c87da70371ac3e9de2158bf423333213137Public key SHA-256 56a07c215135c7d782726e6abf49afd28fc8bac079d7816ad8f3978f961b714a
- PhishDestroy
- Addresses
- 104.18.8.112 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)104.18.9.112 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
- Cloudflare
- Cloudflare (104.18.8.112, 104.18.9.112): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Domain
- y.org
- Registered
- 1993-12-01 · CSC Corporate Domains, Inc.
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-11 09:10 UTC
- zyjgl.com US · AS13335 · Cloudflare, Inc.2 addressesListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 6 mo ago
DetailsHide details for zyjgl.com
- Hostname
- zyjgl.com
- First seen
- 2026-11-12 06:21 UTC
- First published
- 2026-11-12 07:05 UTC
- Listing
- CERT Polska listed it 2026-05-21 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 06:50 UTC
- DNS
- Resolves · checked 2026-11-12 07:15 UTC
- Listed
- CERT Polska
- Listed by CERT Polska
- Certificate logged in CT
- We matched its certificate name
- Latest DNS check
- Certificate
- Issued by YE1 · precertificateValid 2026-11-12 05:20 UTC to 2027-02-10 05:20 UTCLogged 2026-11-12 06:19 UTC in DigiCert Sphinx2027h1, entry 451,552,282SHA-256 8f948ce6bd26f56f640294c73555154fcb5a4bfb04bf97d4cc82a2cb4813deb2Public key SHA-256 acfe840adbeb03fca530926579c1f0c575a525bd988277d45cf3488a0c70c08d
- Addresses
- 104.21.72.32 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.174.103 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
- Cloudflare
- Cloudflare (104.21.72.32, 172.67.174.103): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Domain
- zyjgl.com
- Registered
- 2026-05-19 · Cloud Yuqu LLC
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-12 07:04 UTC
- andrescoder.ascsonoway.com US · AS13335 · Cloudflare, Inc.2 addressesListedCloudflareUnder ascsonoway.com, listed by MetaMaskMX presentSPF -allDMARC quarantineRegistered 17 mo ago
DetailsHide details for andrescoder.ascsonoway.com
- Hostname
- andrescoder.ascsonoway.com
- First seen
- 2026-11-12 06:16 UTC
- First published
- 2026-11-12 07:05 UTC
- Listing
- MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 06:09 UTC
- DNS
- Resolves · checked 2026-11-12 07:15 UTC
- Listed
- MetaMask, listing ascsonoway.com and the names under it
- Observed in the MetaMask feed
- Certificate logged in CT
- We matched its certificate name
- Latest DNS check
- Certificate
- Issued by YR2 · precertificateValid 2026-11-12 05:15 UTC to 2027-02-10 05:15 UTCLogged 2026-11-12 06:13 UTC in Geomys Tuscolo2027h1, entry 586,812,314SHA-256 c020602f523756e6d3b163ab85dd09e66bceb2644f4b59e306c5dd16333cbcf9Public key SHA-256 2fb374880ed060b550037b76f9017bad565c220d1ffdb5d2336c899b450e9a55
- Addresses
- 104.21.47.88 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.145.253 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
- Cloudflare
- Cloudflare (104.21.47.88, 172.67.145.253): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Domain
- ascsonoway.com
- Registered
- 2025-06-15 · Cloudflare, Inc.
- MX
- Receives mail at route1.mx.cloudflare.net, route3.mx.cloudflare.net, route2.mx.cloudflare.net
- SPF
- SPF record with -all: other senders fail
- DMARC
- DMARC policy p=quarantine
- Checked
- 2026-11-12 07:04 UTC
- gwjgj.com US · AS13335 · Cloudflare, Inc.2 addressesListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 6 mo ago
DetailsHide details for gwjgj.com
- Hostname
- gwjgj.com
- First seen
- 2026-11-12 06:16 UTC
- First published
- 2026-11-12 07:05 UTC
- Listing
- CERT Polska listed it 2026-05-21 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 06:50 UTC
- DNS
- Resolves · checked 2026-11-12 07:15 UTC
- Listed
- CERT Polska
- Listed by CERT Polska
- Certificate logged in CT
- We matched its certificate name
- Latest DNS check
- Certificate
- Issued by YE2 · precertificateValid 2026-11-12 05:12 UTC to 2027-02-10 05:12 UTCLogged 2026-11-12 06:11 UTC in DigiCert Wyvern2027h1, entry 508,626,798SHA-256 77c06e8c9531e62a9e311a98adccf0dd470ab37e0b3e5f6d84b35477beed6116Public key SHA-256 07b988e1a7e65558143add8a4e7f9ca7fd27ff366b4d81404e1c1723139b34a9
- Addresses
- 104.21.9.110 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.159.195 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
- Cloudflare
- Cloudflare (104.21.9.110, 172.67.159.195): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Domain
- gwjgj.com
- Registered
- 2026-05-19 · Cloud Yuqu LLC
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-12 07:04 UTC
- nxtcoin.org US · AS13335 · Cloudflare, Inc.2 addressesListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 7 mo ago
DetailsHide details for nxtcoin.org
- Hostname
- nxtcoin.org
- First seen
- 2026-11-12 06:16 UTC
- First published
- 2026-11-12 07:05 UTC
- Listing
- MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 06:09 UTC
- DNS
- Resolves · checked 2026-11-12 07:15 UTC
- Listed
- MetaMask
- Observed in the MetaMask feed
- Certificate logged in CT
- We matched its certificate name
- Latest DNS check
- Certificate
- Issued by WE1 · precertificateValid 2026-11-12 05:14 UTC to 2027-02-10 06:13 UTCLogged 2026-11-12 06:14 UTC in Google ParcelYard2027h1, entry 750,261,364SHA-256 0d81c5654fcc60b9b521d4980ed18703cacfcb37c8bde2bcf239356dab77b195Public key SHA-256 e04e74abc5754acf46057f3f352ca6c46025bcb6dcd5912510bf21efb179c4ea
- Addresses
- 104.21.28.14 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.170.39 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
- Cloudflare
- Cloudflare (104.21.28.14, 172.67.170.39): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Domain
- nxtcoin.org
- Registered
- 2026-04-30 · Gname.com Pte. Ltd.
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-12 07:04 UTC
- smykbabyoutlets.com US · AS13335 · Cloudflare, Inc.ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 4 mo ago
DetailsHide details for smykbabyoutlets.com
- Hostname
- smykbabyoutlets.com
- First seen
- 2026-11-12 06:16 UTC
- First published
- 2026-11-12 07:05 UTC
- Listing
- CERT Polska listed it 2026-07-19 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 06:50 UTC
- DNS
- Resolves · checked 2026-11-12 07:15 UTC
- Listed
- CERT Polska
- Listed by CERT Polska
- Certificate logged in CT
- We matched its certificate name
- Latest DNS check
- Certificate
- Issued by WE1Valid 2026-09-14 05:43 UTC to 2026-12-13 06:43 UTCLogged 2026-11-12 06:11 UTC in DigiCert Wyvern2026h2, entry 2,220,274,832SHA-256 0b929adfd8ab9edc570ec625b64b4a5e31226f0e5fed78b2d1b7ae4786d68902Public key SHA-256 b23714e7ab1c3128db342e6edde4db1c9c746d4fac25789dc96c862daf7c667a
- Addresses
- 104.18.13.234 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
- Cloudflare
- Cloudflare (104.18.13.234): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Domain
- smykbabyoutlets.com
- Registered
- 2026-07-17 · Cloudflare, Inc.
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-12 07:04 UTC
- szczegoly-8233.casa US · AS13335 · Cloudflare, Inc.2 addressesListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 59 d ago
DetailsHide details for szczegoly-8233.casa
- Hostname
- szczegoly-8233.casa
- First seen
- 2026-11-12 06:16 UTC
- First published
- 2026-11-12 07:05 UTC
- Listing
- CERT Polska listed it 2026-09-15 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 06:50 UTC
- DNS
- Resolves · checked 2026-11-12 07:15 UTC
- Listed
- CERT Polska
- Listed by CERT Polska
- Certificate logged in CT
- We matched its certificate name
- Latest DNS check
- Certificate
- Issued by WE1Valid 2026-09-14 04:41 UTC to 2026-12-13 05:40 UTCLogged 2026-11-12 06:13 UTC in GoDaddy Aquamarine2026h2, entry 34,306,807SHA-256 49deaeca46f484ede662be17dd6c1694eccb8e5ab7c024552422616788ec8364Public key SHA-256 d018f7ea0b3280c83bd339df709a640db407c77864953515dc6dbddf1457cab2
- Addresses
- 104.21.77.109 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.207.47 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
- Cloudflare
- Cloudflare (104.21.77.109, 172.67.207.47): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Domain
- szczegoly-8233.casa
- Registered
- 2026-09-14 · Dynadot Inc
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-12 07:04 UTC
- 23-hub-concretegov.pages.dev US · AS13335 · Cloudflare, Inc.4 addressesListedCloudflareListed by MetaMask
DetailsHide details for 23-hub-concretegov.pages.dev
- Hostname
- 23-hub-concretegov.pages.dev
- First seen
- 2026-11-12 06:12 UTC
- First published
- 2026-11-12 07:05 UTC
- Listing
- MetaMask: first observed in the feed 2026-11-12 · still listed at the last successful feed check 2026-11-12 06:09 UTC
- DNS
- Resolves · checked 2026-11-12 07:15 UTC
- Listed
- MetaMask
- Certificate logged in CT
- Observed in the MetaMask feed
- We matched the new listing
- Latest DNS check
- Certificate
- Issued by YE2 · precertificateValid 2026-11-12 01:49 UTC to 2027-02-10 01:49 UTCLogged 2026-11-12 02:47 UTC in DigiCert Sphinx2027h1, entry 449,645,758SHA-256 ed668e1c5b5b673a3e8fea00bebe1f373db65e4a66dffac3a782216861536ba1Public key SHA-256 1b098986060fa4c6872bc3803b20a6f10fe9ae620678359bf5fc5001e1a56e05
- Addresses
- 172.66.44.169 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.66.47.87 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:310c::ac42:2ca92606:4700:310c::ac42:2f57
- Cloudflare
- Cloudflare (172.66.44.169, 172.66.47.87): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- ListedCloudflareListed by MetaMask
DetailsHide details for 372-curvefi.pages.dev
- Hostname
- 372-curvefi.pages.dev
- First seen
- 2026-11-12 06:12 UTC
- First published
- 2026-11-12 07:05 UTC
- Listing
- MetaMask: first observed in the feed 2026-11-12 · still listed at the last successful feed check 2026-11-12 06:09 UTC
- DNS
- Not resolving · checked 2026-11-12 07:15 UTC
- Listed
- MetaMask
- Certificate logged in CT
- Observed in the MetaMask feed
- We matched the new listing
- Latest DNS check
- Certificate
- Issued by YE2Valid 2026-11-12 04:59 UTC to 2027-02-10 04:59 UTCLogged 2026-11-12 05:57 UTC in Google PlumbersArms2027h1, entry 750,249,863SHA-256 9d534841a12c831ef19961e8ec17a5f45209f8e033dc051d77674207bf3b3bc8Public key SHA-256 c2d04abdb607a058a21221afb25d954113b941a41b092beb6362be00479781af
- Brand
- Curve Finance
- Addresses
- 172.66.44.157 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.66.47.99 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:310c::ac42:2c9d2606:4700:310c::ac42:2f63
- Cloudflare
- Cloudflare (172.66.44.157, 172.66.47.99): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- au-rain-bet.com US · AS13335 · Cloudflare, Inc.4 addressesListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 5 mo ago
DetailsHide details for au-rain-bet.com
- Hostname
- au-rain-bet.com
- First seen
- 2026-11-12 06:12 UTC
- First published
- 2026-11-12 07:05 UTC
- Listing
- MetaMask: first observed in the feed 2026-11-12 · still listed at the last successful feed check 2026-11-12 06:09 UTC
- DNS
- Resolves · checked 2026-11-12 07:15 UTC
- Listed
- MetaMask
- Certificate logged in CT
- Observed in the MetaMask feed
- We matched the new listing
- Latest DNS check
- Certificate
- Issued by WE1 · precertificateValid 2026-11-10 21:29 UTC to 2027-02-08 22:27 UTCLogged 2026-11-10 22:29 UTC in Google PlumbersArms2027h1, entry 725,961,803SHA-256 3016f3e8862a7b1603875a21a2d6e07fd02b84df603417c5afc97012772b8d97Public key SHA-256 0df6d6ee0c713ccd39ebf4197fd4c208c8226dfbc47a4feb3b02e0e2ffa56a14
- Addresses
- 104.21.26.128 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.136.69 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3031::6815:1a802606:4700:3034::ac43:8845
- Cloudflare
- Cloudflare (104.21.26.128, 172.67.136.69): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Domain
- au-rain-bet.com
- Registered
- 2026-06-05 · NameCheap, Inc.
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-12 07:04 UTC
- nav--exoodus-web3-io-com.pages.dev US · AS13335 · Cloudflare, Inc.4 addressesListedCloudflareListed by MetaMask
DetailsHide details for nav--exoodus-web3-io-com.pages.dev
- Hostname
- nav--exoodus-web3-io-com.pages.dev
- First seen
- 2026-11-12 06:12 UTC
- First published
- 2026-11-12 07:05 UTC
- Listing
- MetaMask: first observed in the feed 2026-11-12 · still listed at the last successful feed check 2026-11-12 06:09 UTC
- DNS
- Resolves · checked 2026-11-12 07:15 UTC
- Listed
- MetaMask
- Certificate logged in CT
- Observed in the MetaMask feed
- We matched the new listing
- Latest DNS check
- Certificate
- Issued by WE1 · precertificateValid 2026-11-11 22:07 UTC to 2027-02-09 23:05 UTCLogged 2026-11-11 23:07 UTC in IPng Networks Halloumi2027h1, entry 461,668,666SHA-256 72aad4bf37833864dd088a458d213e8647a55c278734f988f7c2e764b4a1e8b3Public key SHA-256 643f243f49f2eb695b9937df192386bbbe2749c1bd7ecdb56c1e61e712c4c387
- Addresses
- 172.66.44.223 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.66.47.33 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:310c::ac42:2cdf2606:4700:310c::ac42:2f21
- Cloudflare
- Cloudflare (172.66.44.223, 172.66.47.33): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- nav-exoodus--web3--io-com.pages.dev US · AS13335 · Cloudflare, Inc.4 addressesListedCloudflareListed by MetaMask
DetailsHide details for nav-exoodus--web3--io-com.pages.dev
- Hostname
- nav-exoodus--web3--io-com.pages.dev
- First seen
- 2026-11-12 06:12 UTC
- First published
- 2026-11-12 07:05 UTC
- Listing
- MetaMask: first observed in the feed 2026-11-12 · still listed at the last successful feed check 2026-11-12 06:09 UTC
- DNS
- Resolves · checked 2026-11-12 07:15 UTC
- Listed
- MetaMask
- Certificate logged in CT
- Observed in the MetaMask feed
- We matched the new listing
- Latest DNS check
- Certificate
- Issued by WE1 · precertificateValid 2026-11-11 22:28 UTC to 2027-02-09 23:27 UTCLogged 2026-11-11 23:28 UTC in DigiCert Wyvern2027h1, entry 504,436,219SHA-256 53bf2c67aed32a7a4d03f39d2082a10cf585885b53b1d4d33fe11338b6f30883Public key SHA-256 a67837f056c09a28e846a45139b8cf92424da83f6e9e8056bdc79d249b0025c7
- Addresses
- 172.66.44.183 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.66.47.73 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:310c::ac42:2cb72606:4700:310c::ac42:2f49
- Cloudflare
- Cloudflare (172.66.44.183, 172.66.47.73): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- proposal-kinctiq.pages.dev US · AS13335 · Cloudflare, Inc.4 addressesListedCloudflareListed by MetaMask
DetailsHide details for proposal-kinctiq.pages.dev
- Hostname
- proposal-kinctiq.pages.dev
- First seen
- 2026-11-12 06:12 UTC
- First published
- 2026-11-12 07:05 UTC
- Listing
- MetaMask: first observed in the feed 2026-11-12 · still listed at the last successful feed check 2026-11-12 06:09 UTC
- DNS
- Resolves · checked 2026-11-12 07:15 UTC
- Listed
- MetaMask
- Certificate logged in CT
- Observed in the MetaMask feed
- We matched the new listing
- Latest DNS check
- Certificate
- Issued by YE2Valid 2026-11-10 23:34 UTC to 2027-02-08 23:34 UTCLogged 2026-11-11 00:33 UTC in Google PlumbersArms2027h1, entry 727,593,955SHA-256 25be47bf035cf25427fe5bc9842b90e8ee47cb217219d7ebc18efe413578ab41Public key SHA-256 0a0e08ba3a34bb4d6bc8eff337e12384e986640275bd10baf7484151acba41cd
- Addresses
- 172.66.44.54 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.66.47.202 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:310c::ac42:2c362606:4700:310c::ac42:2fca
- Cloudflare
- Cloudflare (172.66.44.54, 172.66.47.202): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- xrpus.io US · AS13335 · Cloudflare, Inc.4 addressesListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 1 d ago
DetailsHide details for xrpus.io
- Hostname
- xrpus.io
- First seen
- 2026-11-12 06:12 UTC
- First published
- 2026-11-12 07:05 UTC
- Listing
- MetaMask: first observed in the feed 2026-11-12 · still listed at the last successful feed check 2026-11-12 06:09 UTC
- DNS
- Resolves · checked 2026-11-12 07:15 UTC
- Listed
- MetaMask
- Certificate logged in CT
- Observed in the MetaMask feed
- We matched the new listing
- Latest DNS check
- Certificate
- Issued by YE2Valid 2026-11-11 23:08 UTC to 2027-02-09 23:08 UTCLogged 2026-11-12 00:06 UTC in Google PlumbersArms2027h1, entry 745,563,263SHA-256 203a108762cc3e6b8fa20ea3b6afbad15f4cae0e3daa3cf3f9a6f6333e6093bfPublic key SHA-256 0f9a41e293c605d6ea4b89bbee93ff39ab16ffba632b39cacabda71556a392c5
- Addresses
- 104.21.54.24 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.222.224 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3031::6815:36182606:4700:3033::ac43:dee0
- Cloudflare
- Cloudflare (104.21.54.24, 172.67.222.224): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Domain
- xrpus.io
- Registered
- 2026-11-11 · Eranet International Limited
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-12 07:04 UTC
- cozyavino.com US · AS13335 · Cloudflare, Inc.2 addressesListedCloudflareListed by CERT PolskaMX presentSPF ~allDMARC missingRegistered 10 mo ago
DetailsHide details for cozyavino.com
- Hostname
- cozyavino.com
- First seen
- 2026-11-12 06:10 UTC
- First published
- 2026-11-12 07:05 UTC
- Listing
- CERT Polska listed it 2026-06-08 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 06:50 UTC
- DNS
- Resolves · checked 2026-11-12 07:15 UTC
- Listed
- CERT Polska
- Listed by CERT Polska
- Certificate logged in CT
- We matched its certificate name
- Latest DNS check
- Certificate
- Issued by WE1Valid 2026-11-12 05:05 UTC to 2027-02-10 06:03 UTCLogged 2026-11-12 06:05 UTC in DigiCert Wyvern2027h1, entry 508,567,051SHA-256 0d13794c1d6553cdbb009e373e81575aec80f633e308d247719e82857f92327fPublic key SHA-256 fe83afc9f2e5ea3fad6f77052c5aeaa253d752c29b51e19f7961bf3c9c3d9932
- Addresses
- 104.21.68.19 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.185.27 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
- Cloudflare
- Cloudflare (104.21.68.19, 172.67.185.27): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Domain
- cozyavino.com
- Registered
- 2026-01-20 · Spaceship, Inc.
- MX
- Receives mail at route3.mx.cloudflare.net, route1.mx.cloudflare.net, route2.mx.cloudflare.net
- SPF
- SPF record with ~all: other senders soft-fail
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-12 07:04 UTC
- docker-proxy.virzz.icu US · AS13335 · Cloudflare, Inc.2 addressesListedCloudflareUnder virzz.icu, listed by MetaMaskMX presentSPF ~allDMARC missingRegistered 12 mo ago
DetailsHide details for docker-proxy.virzz.icu
- Hostname
- docker-proxy.virzz.icu
- First seen
- 2026-11-12 06:10 UTC
- First published
- 2026-11-12 07:05 UTC
- Listing
- MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 06:09 UTC
- DNS
- Resolves · checked 2026-11-12 07:15 UTC
- Listed
- MetaMask, listing virzz.icu and the names under it
- Observed in the MetaMask feed
- Certificate logged in CT
- We matched its certificate name
- Latest DNS check
- Certificate
- Issued by WR1 · precertificateValid 2026-11-12 05:09 UTC to 2027-02-10 05:53 UTCLogged 2026-11-12 06:09 UTC in Geomys Tuscolo2027h1, entry 586,779,922SHA-256 84e78745950edeee059e974714c94f0f05bb5c0e25444852fdbd0d0a8e408338Public key SHA-256 2534a478dcbcb457a4984690ebefab8396ae4f4cc723df4e851b41eb5da7ea6f
- Addresses
- 104.21.71.244 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.172.101 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
- Cloudflare
- Cloudflare (104.21.71.244, 172.67.172.101): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Domain
- virzz.icu
- Registered
- 2025-11-11 · Alibaba Cloud Computing Ltd. d/b/a HiChina (www.net.cn)
- MX
- Receives mail at route1.mx.cloudflare.net, route2.mx.cloudflare.net, route3.mx.cloudflare.net
- SPF
- SPF record with ~all: other senders soft-fail
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-11 08:57 UTC
- dphantom.pages.dev US · AS13335 · Cloudflare, Inc.2 addressesListedCloudflareListed by MetaMask
DetailsHide details for dphantom.pages.dev
- Hostname
- dphantom.pages.dev
- First seen
- 2026-11-12 06:10 UTC
- First published
- 2026-11-12 07:05 UTC
- Listing
- MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 06:09 UTC
- DNS
- Resolves · checked 2026-11-12 07:15 UTC
- Listed
- MetaMask
- Observed in the MetaMask feed
- Certificate logged in CT
- We matched its certificate name
- Latest DNS check
- Certificate
- Issued by WE1 · precertificateValid 2026-11-12 05:05 UTC to 2027-02-10 06:04 UTCLogged 2026-11-12 06:05 UTC in Google ParcelYard2027h1, entry 750,146,921SHA-256 c301e6f4233e375550ddda055fc0433e58ef853e8d23e027f6600024d4f6df8fPublic key SHA-256 b7c5af6524249dc2ca1cf33ebf20e042cd1f59501c9fd5647f482f7c84d03524
- Addresses
- 172.66.44.150 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.66.47.106 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
- Cloudflare
- Cloudflare (172.66.44.150, 172.66.47.106): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- oferty-status-6428.beer US · AS13335 · Cloudflare, Inc.2 addressesListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 59 d ago
DetailsHide details for oferty-status-6428.beer
- Hostname
- oferty-status-6428.beer
- First seen
- 2026-11-12 06:10 UTC
- First published
- 2026-11-12 07:05 UTC
- Listing
- CERT Polska listed it 2026-09-14 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 06:50 UTC
- DNS
- Resolves · checked 2026-11-12 07:15 UTC
- Listed
- CERT Polska
- Listed by CERT Polska
- Certificate logged in CT
- We matched its certificate name
- Latest DNS check
- Certificate
- Issued by WE1 · precertificateValid 2026-11-12 05:09 UTC to 2027-02-10 06:07 UTCLogged 2026-11-12 06:09 UTC in Let's Encrypt Sycamore2027h1, entry 1,159,189,589SHA-256 cba315e650b2b496a86d89f2086587caf026fcefe94487a276f23a687146cedbPublic key SHA-256 968c0a3f47c6f80f59b2a039ec1fd49b7418c4012b6f850bfecfc77770caf644
- Addresses
- 104.21.25.170 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.134.104 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
- Cloudflare
- Cloudflare (104.21.25.170, 172.67.134.104): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Domain
- oferty-status-6428.beer
- Registered
- 2026-09-14 · Dynadot Inc
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-12 07:04 UTC
- stakotoken.com US · AS13335 · Cloudflare, Inc.2 addressesListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 12 mo ago
DetailsHide details for stakotoken.com
- Hostname
- stakotoken.com
- First seen
- 2026-11-12 06:10 UTC
- First published
- 2026-11-12 07:05 UTC
- Listing
- MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 06:09 UTCPhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-12 06:06 UTC
- DNS
- Resolves · checked 2026-11-12 07:15 UTC
- Listed
- MetaMask
- Observed in the MetaMask feed
- Certificate logged in CT
- We matched its certificate name
- Latest DNS check
- Certificate
- Issued by WE1Valid 2026-09-13 23:50 UTC to 2026-12-13 00:50 UTCLogged 2026-11-12 06:09 UTC in Geomys Tuscolo2026h2, entry 1,053,749,881SHA-256 01a013a17cb8804555fe4cab66cdfb0cc1b5e189a94cae10ee0160692204bfe1Public key SHA-256 3952ed173ef33854b85fdeea58af2a4af16c301fa33c29408e37bbd5ce76dfdb
- Addresses
- 104.21.47.233 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.174.121 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
- Cloudflare
- Cloudflare (104.21.47.233, 172.67.174.121): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Domain
- stakotoken.com
- Registered
- 2025-11-21 · Cloudflare, Inc.
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-12 07:04 UTC
- yeldunravu-italy.com US · AS13335 · Cloudflare, Inc.2 addressesListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 4 mo ago
DetailsHide details for yeldunravu-italy.com
- Hostname
- yeldunravu-italy.com
- First seen
- 2026-11-12 06:10 UTC
- First published
- 2026-11-12 07:05 UTC
- Listing
- CERT Polska listed it 2026-09-14 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 06:50 UTC
- DNS
- Resolves · checked 2026-11-12 07:15 UTC
- Listed
- CERT Polska
- Listed by CERT Polska
- Certificate logged in CT
- We matched its certificate name
- Latest DNS check
- Certificate
- Issued by WE1Valid 2026-09-14 02:05 UTC to 2026-12-13 03:05 UTCLogged 2026-11-12 06:06 UTC in DigiCert Wyvern2026h2, entry 2,220,265,773SHA-256 526f4f050eeb6861832389acc3809b736ffabf97bf0ef3dd0f7ec98de5ca4216Public key SHA-256 9b2fe9f66072deafadc62d4c87fda7d1364de671cf95cc6fe13ce04049700ff8
- Addresses
- 104.21.38.202 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.138.80 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
- Cloudflare
- Cloudflare (104.21.38.202, 172.67.138.80): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Domain
- yeldunravu-italy.com
- Registered
- 2026-07-17 · Dynadot Inc
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-12 07:04 UTC
- yeldunravu-netherlands.com US · AS13335 · Cloudflare, Inc.2 addressesListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 4 mo ago
DetailsHide details for yeldunravu-netherlands.com
- Hostname
- yeldunravu-netherlands.com
- First seen
- 2026-11-12 06:10 UTC
- First published
- 2026-11-12 07:05 UTC
- Listing
- CERT Polska listed it 2026-09-14 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 06:50 UTC
- DNS
- Resolves · checked 2026-11-12 07:15 UTC
- Listed
- CERT Polska
- Listed by CERT Polska
- Certificate logged in CT
- We matched its certificate name
- Latest DNS check
- Certificate
- Issued by WE1Valid 2026-09-14 02:05 UTC to 2026-12-13 03:05 UTCLogged 2026-11-12 06:07 UTC in IPng Networks Halloumi2026h2a, entry 1,300,237,173SHA-256 4ea832790e68d60343157b10961ca19d5eef98784716b00f4967f2163746e7f2Public key SHA-256 9286e1ef3b143acc63eb6df677464e0e68e3d603dca25a9374b0a45de9c199e9
- Addresses
- 104.21.19.216 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.190.59 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
- Cloudflare
- Cloudflare (104.21.19.216, 172.67.190.59): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Domain
- yeldunravu-netherlands.com
- Registered
- 2026-07-17 · Dynadot Inc
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-12 07:04 UTC
- zjuzdjpi.shop US · AS13335 · Cloudflare, Inc.ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 59 d ago
DetailsHide details for zjuzdjpi.shop
- Hostname
- zjuzdjpi.shop
- First seen
- 2026-11-12 06:10 UTC
- First published
- 2026-11-12 07:05 UTC
- Listing
- CERT Polska listed it 2026-09-16 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 06:50 UTC
- DNS
- Resolves · checked 2026-11-12 07:15 UTC
- Listed
- CERT Polska
- Listed by CERT Polska
- Certificate logged in CT
- We matched its certificate name
- Latest DNS check
- Certificate
- Issued by YE1 · precertificateValid 2026-11-12 05:09 UTC to 2027-02-10 05:09 UTCLogged 2026-11-12 06:08 UTC in IPng Networks Gouda2027h1, entry 391,740,147SHA-256 9b9e1828c930c9d5dd7e7519099561942d3ef2e967314b93a2f03755ed949118Public key SHA-256 7d249f4e603042794075c42025492b81f9a77da7b6acfac26422a339e3103225
- Addresses
- 104.17.231.54 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
- Cloudflare
- Cloudflare (104.17.231.54): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Domain
- zjuzdjpi.shop
- Registered
- 2026-09-14 · Web Commerce Communication Ltd.
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-12 07:04 UTC
- claim-brew.family US · AS13335 · Cloudflare, Inc.2 addressesListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 59 d ago
DetailsHide details for claim-brew.family
- Hostname
- claim-brew.family
- First seen
- 2026-11-12 06:05 UTC
- First published
- 2026-11-12 07:05 UTC
- Listing
- MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 06:09 UTC
- DNS
- Resolves · checked 2026-11-12 07:15 UTC
- Listed
- MetaMask
- Observed in the MetaMask feed
- Certificate logged in CT
- We matched its certificate name
- Latest DNS check
- Certificate
- Issued by YE1Valid 2026-11-12 05:03 UTC to 2027-02-10 05:03 UTCLogged 2026-11-12 06:01 UTC in Google PlumbersArms2027h1, entry 750,293,483SHA-256 7e63155758021d7f148db6805219e36e5876fb7b4ba214d80a05e397b0e39dcaPublic key SHA-256 dd3dd111366b934e39e23ae53316f56b3f9fa3734300a360ad9beeeb64520ce7
- Addresses
- 104.21.10.121 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.163.82 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
- Cloudflare
- Cloudflare (104.21.10.121, 172.67.163.82): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Domain
- claim-brew.family
- Registered
- 2026-09-14 · NICENIC INTERNATIONAL GROUP CO., LIMITED
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-12 07:04 UTC
- pc.toop-okx.com.cn US · AS13335 · Cloudflare, Inc.2 addressesListedCloudflareUnder toop-okx.com.cn, listed by MetaMaskMX absentSPF missingDMARC missing
DetailsHide details for pc.toop-okx.com.cn
- Hostname
- pc.toop-okx.com.cn
- First seen
- 2026-11-12 06:05 UTC
- First published
- 2026-11-12 07:05 UTC
- Listing
- MetaMask: first observed in the feed 2026-11-08 · still listed at the last successful feed check 2026-11-12 06:09 UTC
- DNS
- Resolves · checked 2026-11-12 07:15 UTC
- Listed
- MetaMask, listing toop-okx.com.cn and the names under it
- Observed in the MetaMask feed
- Certificate logged in CT
- We matched its certificate name
- Latest DNS check
- Certificate
- Issued by YR2Valid 2026-11-12 05:04 UTC to 2027-02-10 05:04 UTCLogged 2026-11-12 06:02 UTC in Google ParcelYard2027h1, entry 750,117,650SHA-256 7c3ba3727c230056fca0452271bddd1eb3901d9c2f692357c956f92b9cca00f1Public key SHA-256 308df30acee81909e5a447e51ce9df0c3a9a17fe7ef31e0986a29dafe17b871c
- Addresses
- 104.21.83.34 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.211.35 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
- Cloudflare
- Cloudflare (104.21.83.34, 172.67.211.35): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Domain
- toop-okx.com.cn
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-12 00:15 UTC
- treasurys-pool-flare.network US · AS13335 · Cloudflare, Inc.2 addressesListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 6 mo ago
DetailsHide details for treasurys-pool-flare.network
- Hostname
- treasurys-pool-flare.network
- First seen
- 2026-11-12 06:05 UTC
- First published
- 2026-11-12 07:05 UTC
- Listing
- MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 06:09 UTC
- DNS
- Resolves · checked 2026-11-12 07:15 UTC
- Listed
- MetaMask
- Observed in the MetaMask feed
- Certificate logged in CT
- We matched its certificate name
- Latest DNS check
- Certificate
- Issued by YE1 · precertificateValid 2026-11-12 05:06 UTC to 2027-02-10 05:06 UTCLogged 2026-11-12 06:04 UTC in Let's Encrypt Willow2027h1, entry 1,113,031,277SHA-256 c832e5871f6d2acf61879867354d90f0121cc4c575e31964d9f89dd166b82eb4Public key SHA-256 2ebfe5d6afb7d58dd612395d3360742222995a024aee8c0df85c434827ed66c2
- Addresses
- 104.21.88.104 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.176.226 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
- Cloudflare
- Cloudflare (104.21.88.104, 172.67.176.226): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Domain
- treasurys-pool-flare.network
- Registered
- 2026-05-18 · PDR Ltd. d/b/a PublicDomainRegistry.com
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-12 07:04 UTC
- watchpumpfun.live US · AS13335 · Cloudflare, Inc.2 addressesListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 59 d ago
DetailsHide details for watchpumpfun.live
- Hostname
- watchpumpfun.live
- First seen
- 2026-11-12 06:05 UTC
- First published
- 2026-11-12 07:05 UTC
- Listing
- MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 06:09 UTCPhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-12 06:06 UTC
- DNS
- Resolves · checked 2026-11-12 07:15 UTC
- Listed
- MetaMask
- Observed in the MetaMask feed
- Certificate logged in CT
- We matched its certificate name
- Latest DNS check
- Certificate
- Issued by YE1 · precertificateValid 2026-11-12 05:02 UTC to 2027-02-10 05:02 UTCLogged 2026-11-12 06:01 UTC in Let's Encrypt Willow2027h1, entry 1,112,987,573SHA-256 6dafc77508782a9b38e37983a429805822957e1fefaae1aae6353f4f4c8ce845Public key SHA-256 baab6ce844472ae5fd898ba0911a1dd99f29a828e468f897cae49b0193308535
- Addresses
- 104.21.37.206 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.212.232 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
- Cloudflare
- Cloudflare (104.21.37.206, 172.67.212.232): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Domain
- watchpumpfun.live
- Registered
- 2026-09-14 · NICENIC INTERNATIONAL GROUP CO., LIMITED
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-12 07:04 UTC
- www.wirexdigitalwallet.com US · AS13335 · Cloudflare, Inc.ListedCloudflareUnder wirexdigitalwallet.com, listed by MetaMaskMX presentSPF ~allDMARC policy noneRegistered 2 mo ago
DetailsHide details for www.wirexdigitalwallet.com
- Hostname
- www.wirexdigitalwallet.com
- First seen
- 2026-11-12 06:05 UTC
- First published
- 2026-11-12 07:05 UTC
- Listing
- MetaMask: first observed in the feed 2026-11-03 · still listed at the last successful feed check 2026-11-12 06:09 UTC
- DNS
- Resolves · checked 2026-11-12 07:15 UTC
- Listed
- MetaMask, listing wirexdigitalwallet.com and the names under it
- Observed in the MetaMask feed
- Certificate logged in CT
- We matched its certificate name
- Latest DNS check
- Certificate
- Issued by WE1 · precertificateValid 2026-11-12 05:00 UTC to 2027-02-10 06:00 UTCLogged 2026-11-12 06:00 UTC in Geomys Tuscolo2027h1, entry 586,709,376SHA-256 158910a0963b10af5533eab205c1616e1f509537f453812d3919689b7b879108Public key SHA-256 aa60792d4e07e7fdebe088738e347d47c9781b03ecbe2180465673f355ce2a69
- Addresses
- 185.158.133.1 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
- Cloudflare
- Cloudflare (185.158.133.1): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Domain
- wirexdigitalwallet.com
- Registered
- 2026-09-07 · IONOS SE
- MX
- Receives mail at mx.zoho.com, mx2.zoho.com, mx3.zoho.com
- SPF
- SPF record with ~all: other senders soft-fail
- DMARC
- DMARC policy p=none: reports only
- Checked
- 2026-11-11 13:05 UTC
- xanvurleqai-app.com US · AS13335 · Cloudflare, Inc.2 addressesListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 4 mo ago
DetailsHide details for xanvurleqai-app.com
- Hostname
- xanvurleqai-app.com
- First seen
- 2026-11-12 06:05 UTC
- First published
- 2026-11-12 07:05 UTC
- Listing
- CERT Polska listed it 2026-07-19 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 06:50 UTC
- DNS
- Resolves · checked 2026-11-12 07:15 UTC
- Listed
- CERT Polska
- Listed by CERT Polska
- Certificate logged in CT
- We matched its certificate name
- Latest DNS check
- Certificate
- Issued by WE1 · precertificateValid 2026-11-12 05:01 UTC to 2027-02-10 06:00 UTCLogged 2026-11-12 06:01 UTC in DigiCert Wyvern2027h1, entry 508,528,104SHA-256 6c7584df314b842e7f315485ed0680bbb995ef8131b370fb1ea7e14d3d6ac404Public key SHA-256 a504941c3bacdf7387f51e14595659d05f4beaf9f67c734b44b031e2ba61a9b7
- Addresses
- 104.21.79.211 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.148.205 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
- Cloudflare
- Cloudflare (104.21.79.211, 172.67.148.205): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Domain
- xanvurleqai-app.com
- Registered
- 2026-07-16 · Eranet International Limited
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-12 07:04 UTC
- expensive.digital US · AS13335 · Cloudflare, Inc.2 addressesListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 6 mo ago
DetailsHide details for expensive.digital
- Hostname
- expensive.digital
- First seen
- 2026-11-12 05:56 UTC
- First published
- 2026-11-12 07:05 UTC
- Listing
- CERT Polska listed it 2026-06-15 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 06:50 UTC
- DNS
- Resolves · checked 2026-11-12 07:15 UTC
- Listed
- CERT Polska
- Listed by CERT Polska
- Certificate logged in CT
- We matched its certificate name
- Latest DNS check
- Certificate
- Issued by YE2Valid 2026-11-12 04:54 UTC to 2027-02-10 04:54 UTCLogged 2026-11-12 05:53 UTC in DigiCert Wyvern2027h1, entry 508,451,056SHA-256 99e4860ff171112313ed2c02b323eddc8df505dc4bd72d74ec926b9214ab4c59Public key SHA-256 975dee49b5046acf9801d739a53dbadee9f0b5ecbed86714a925f01ac5eb1b49
- Addresses
- 104.21.56.156 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.152.241 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
- Cloudflare
- Cloudflare (104.21.56.156, 172.67.152.241): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Domain
- expensive.digital
- Registered
- 2026-05-19 · Hosting Concepts B.V. d/b/a Registrar.eu
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-12 07:04 UTC
- plotfinance-dashboard.pages.dev US · AS13335 · Cloudflare, Inc.2 addressesListedCloudflareListed by MetaMask
DetailsHide details for plotfinance-dashboard.pages.dev
- Hostname
- plotfinance-dashboard.pages.dev
- First seen
- 2026-11-12 05:56 UTC
- First published
- 2026-11-12 07:05 UTC
- Listing
- MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 06:09 UTC
- DNS
- Resolves · checked 2026-11-12 07:15 UTC
- Listed
- MetaMask
- Observed in the MetaMask feed
- Certificate logged in CT
- We matched its certificate name
- Latest DNS check
- Certificate
- Issued by WE1 · precertificateValid 2026-11-12 04:54 UTC to 2027-02-10 05:53 UTCLogged 2026-11-12 05:54 UTC in Google ParcelYard2027h1, entry 750,024,352SHA-256 2495f2355c8575130839fd45cf6350b96587d1d26c8de07e6a5c9dee850ec68cPublic key SHA-256 9b98cf52d8fb70fc81f559d36ec67f7bf6ee5d0b9a01c0a571c2ce680ad3fa0c
- Addresses
- 172.66.44.60 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.66.47.196 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
- Cloudflare
- Cloudflare (172.66.44.60, 172.66.47.196): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- tesla.magical77889.com US · AS13335 · Cloudflare, Inc.2 addressesListedCloudflareUnder magical77889.com, listed by MetaMaskMX absentSPF missingDMARC missingRegistered 25 d ago
DetailsHide details for tesla.magical77889.com
- Hostname
- tesla.magical77889.com
- First seen
- 2026-11-12 05:56 UTC
- First published
- 2026-11-12 07:05 UTC
- Listing
- MetaMask: first observed in the feed 2026-11-03 · still listed at the last successful feed check 2026-11-12 06:09 UTC
- DNS
- Resolves · checked 2026-11-12 07:15 UTC
- Listed
- MetaMask, listing magical77889.com and the names under it
- Observed in the MetaMask feed
- Certificate logged in CT
- We matched its certificate name
- Latest DNS check
- Certificate
- Issued by WE1Valid 2026-11-12 04:54 UTC to 2027-02-10 05:54 UTCLogged 2026-11-12 05:54 UTC in Let's Encrypt Willow2027h1, entry 1,112,925,784SHA-256 44f369077218c00e212d92a044ad5c2420024315821fdd16bdefef5a0e0bcb93Public key SHA-256 6bba4bc6a413f7f13c5d69af15f9e546565036bb2ca735750894573d3b0972ae
- Addresses
- 104.21.44.93 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.198.61 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
- Cloudflare
- Cloudflare (104.21.44.93, 172.67.198.61): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Domain
- magical77889.com
- Registered
- 2026-10-18 · Cloudflare, Inc.
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-11 18:31 UTC
- ufdlsefp.shop US · AS13335 · Cloudflare, Inc.2 addressesListedCloudflareListed by NPA 165 (e-commerce)MX absentSPF missingDMARC missingRegistered 10 mo ago
DetailsHide details for ufdlsefp.shop
- Hostname
- ufdlsefp.shop
- First seen
- 2026-11-12 05:56 UTC
- First published
- 2026-11-12 07:05 UTC
- Listing
- NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 01:38 UTC
- DNS
- Resolves · checked 2026-11-12 07:15 UTC
- Listed
- NPA 165
- Observed in the NPA 165 feed
- Certificate logged in CT
- We matched its certificate name
- Latest DNS check
- Certificate
- Issued by WE1 · precertificateValid 2026-11-12 04:55 UTC to 2027-02-10 05:54 UTCLogged 2026-11-12 05:55 UTC in Geomys Tuscolo2027h1, entry 586,666,277SHA-256 10fbf756831a219c2d9254c99be1f452e499671f77b359405b18f74d26a404a9Public key SHA-256 37946e98774e04391e4f4d75f101ea6718a3c3fe371ce3a82476d2a9958b3416
- Addresses
- 104.21.72.181 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.153.215 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
- Cloudflare
- Cloudflare (104.21.72.181, 172.67.153.215): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Domain
- ufdlsefp.shop
- Registered
- 2026-01-21 · GoDaddy.com LLC
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-12 07:04 UTC
- aitcapexx5-app.com US · AS13335 · Cloudflare, Inc.2 addressesListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 4 mo ago
DetailsHide details for aitcapexx5-app.com
- Hostname
- aitcapexx5-app.com
- First seen
- 2026-11-12 05:51 UTC
- First published
- 2026-11-12 07:05 UTC
- Listing
- CERT Polska listed it 2026-07-18 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 06:50 UTC
- DNS
- Resolves · checked 2026-11-12 07:15 UTC
- Listed
- CERT Polska
- Listed by CERT Polska
- Certificate logged in CT
- We matched its certificate name
- Latest DNS check
- Certificate
- Issued by WE1 · precertificateValid 2026-11-12 04:48 UTC to 2027-02-10 05:47 UTCLogged 2026-11-12 05:48 UTC in IPng Networks Halloumi2027h1, entry 466,266,322SHA-256 10a0a6e1ec712b6dbc5896e68a01f5b551a5046ef1387db70c170ef8260118faPublic key SHA-256 04d34c43e0b4d09f517f1e7fd797df5bbca3898ee6b2f5061ab2b4f9e2130a92
- Addresses
- 104.21.49.227 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.153.3 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
- Cloudflare
- Cloudflare (104.21.49.227, 172.67.153.3): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Domain
- aitcapexx5-app.com
- Registered
- 2026-07-16 · Eranet International Limited
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-12 07:04 UTC
- api.crycoin.club US · AS13335 · Cloudflare, Inc.16 addressesListedCloudflareUnder crycoin.club, listed by MetaMaskMX absentSPF missingDMARC missingRegistered 12 mo ago
DetailsHide details for api.crycoin.club
- Hostname
- api.crycoin.club
- First seen
- 2026-11-12 05:51 UTC
- First published
- 2026-11-12 07:05 UTC
- Listing
- MetaMask: first observed in the feed 2026-11-06 · still listed at the last successful feed check 2026-11-12 06:09 UTC
- DNS
- Resolves · checked 2026-11-12 07:15 UTC
- Listed
- MetaMask, listing crycoin.club and the names under it
- Observed in the MetaMask feed
- Certificate logged in CT
- We matched its certificate name
- Latest DNS check
- Certificate
- Issued by YR1 · precertificateValid 2026-11-12 04:49 UTC to 2027-02-10 04:49 UTCLogged 2026-11-12 05:47 UTC in Let's Encrypt Willow2027h1, entry 1,112,858,699SHA-256 0cee889b1762938836d944d8797780f3e7242842b8d1a1d6d49a89a4d80e9fb3Public key SHA-256 ae09ba4a0ef4268731147ff2722dd94f69809a5a36cb90f99775733a87600332
- Addresses
- 23.145.136.251 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)23.145.232.39 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)23.145.232.40 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)23.145.232.226 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)23.145.232.227 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)23.145.232.230 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)23.180.136.55 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)23.180.136.56 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)23.180.136.90 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)23.180.136.111 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)103.204.13.41 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)103.204.13.53 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)103.204.13.71 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)103.204.13.75 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)103.204.13.78 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)103.204.13.85 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
- Cloudflare
- Cloudflare (23.145.136.251, 23.145.232.39, 23.145.232.40, 23.145.232.226, 23.145.232.227, 23.145.232.230, 23.180.136.55, 23.180.136.56, 23.180.136.90, 23.180.136.111, 103.204.13.41, 103.204.13.53, 103.204.13.71, 103.204.13.75, 103.204.13.78, 103.204.13.85): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Domain
- crycoin.club
- Registered
- 2025-11-11 · Namemart Limited
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-12 07:04 UTC
- sol-mix-mixer.com US · AS13335 · Cloudflare, Inc.2 addressesReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 16 mo ago
DetailsHide details for sol-mix-mixer.com
- Hostname
- sol-mix-mixer.com
- First seen
- 2026-11-12 05:51 UTC
- First published
- 2026-11-12 07:05 UTC
- Listing
- PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-12 06:06 UTC
- DNS
- Resolves · checked 2026-11-12 07:15 UTC
- Reported
- PhishDestroy
- Observed in the PhishDestroy feed
- Certificate logged in CT
- We matched its certificate name
- Latest DNS check
- Certificate
- Issued by WE1 · precertificateValid 2026-11-12 04:50 UTC to 2027-02-10 05:48 UTCLogged 2026-11-12 05:50 UTC in DigiCert Sphinx2027h1, entry 451,300,820SHA-256 e9d3decc4ddea1ee4aa84ae595bf7cde88f2f56656838fd089a95cb052ba6a08Public key SHA-256 a6e8a001a3be683fd0c89d2d49632d0c1b96dce9e7614673b31e0b4467c2dbbb
- PhishDestroy
- Addresses
- 104.21.35.68 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.215.57 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
- Cloudflare
- Cloudflare (104.21.35.68, 172.67.215.57): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Domain
- sol-mix-mixer.com
- Registered
- 2025-07-27 · NICENIC INTERNATIONAL GROUP CO., LIMITED
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-12 07:04 UTC
- terrafinia.com US · AS13335 · Cloudflare, Inc.2 addressesListedCloudflareListed by CERT PolskaMX presentSPF ~allDMARC missingRegistered 10 mo ago
DetailsHide details for terrafinia.com
- Hostname
- terrafinia.com
- First seen
- 2026-11-12 05:51 UTC
- First published
- 2026-11-12 07:05 UTC
- Listing
- CERT Polska listed it 2026-06-08 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 06:50 UTC
- DNS
- Resolves · checked 2026-11-12 07:15 UTC
- Listed
- CERT Polska
- Listed by CERT Polska
- Certificate logged in CT
- We matched its certificate name
- Latest DNS check
- Certificate
- Issued by WE1 · precertificateValid 2026-11-12 04:49 UTC to 2027-02-10 05:47 UTCLogged 2026-11-12 05:49 UTC in IPng Networks Halloumi2027h1, entry 466,269,930SHA-256 369b6d7e9b95665884ac8a1aa6c24efe66e4cae268aedd282d6a000c4530b189Public key SHA-256 999d65f43d688441149509b5dbef2149dd85a22e8f6d8fd5ff3ad0b902112af0
- Addresses
- 104.21.26.75 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.135.158 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
- Cloudflare
- Cloudflare (104.21.26.75, 172.67.135.158): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Domain
- terrafinia.com
- Registered
- 2026-01-20 · Spaceship, Inc.
- MX
- Receives mail at route1.mx.cloudflare.net, route2.mx.cloudflare.net, route3.mx.cloudflare.net
- SPF
- SPF record with ~all: other senders soft-fail
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-12 07:04 UTC
- tetsting.pages.dev US · AS13335 · Cloudflare, Inc.2 addressesListedCloudflareListed by MetaMask
DetailsHide details for tetsting.pages.dev
- Hostname
- tetsting.pages.dev
- First seen
- 2026-11-12 05:51 UTC
- First published
- 2026-11-12 07:05 UTC
- Listing
- MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 06:09 UTC
- DNS
- Resolves · checked 2026-11-12 07:15 UTC
- Listed
- MetaMask
- Observed in the MetaMask feed
- Certificate logged in CT
- We matched its certificate name
- Latest DNS check
- Certificate
- Issued by WE1 · precertificateValid 2026-11-12 04:50 UTC to 2027-02-10 05:48 UTCLogged 2026-11-12 05:50 UTC in DigiCert Sphinx2027h1, entry 451,301,412SHA-256 3bddb44bc2306ba021edcdf9d31a7eb8a708e9bab60dceb072daf5e3bc7b21b4Public key SHA-256 1d92f18e6ca3cf074e4fa6a9161c1b466fe4cf19b79d7a8c9cf98bf2c683fb8a
- Addresses
- 172.66.44.245 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.66.47.11 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
- Cloudflare
- Cloudflare (172.66.44.245, 172.66.47.11): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- treezr-suite-eng.pages.dev US · AS13335 · Cloudflare, Inc.2 addressesListedCloudflareListed by MetaMask
DetailsHide details for treezr-suite-eng.pages.dev
- Hostname
- treezr-suite-eng.pages.dev
- First seen
- 2026-11-12 05:51 UTC
- First published
- 2026-11-12 07:05 UTC
- Listing
- MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 06:09 UTC
- DNS
- Resolves · checked 2026-11-12 07:15 UTC
- Listed
- MetaMask
- Observed in the MetaMask feed
- Certificate logged in CT
- We matched its certificate name
- Latest DNS check
- Certificate
- Issued by WE1 · precertificateValid 2026-11-12 04:46 UTC to 2027-02-10 05:44 UTCLogged 2026-11-12 05:46 UTC in DigiCert Sphinx2027h1, entry 451,274,532SHA-256 4d8ed0803c386c3e16e25e7ce21caa233209bbf988fc40e5c70975db65994ec2Public key SHA-256 6319ad3fda8ea7fe80042071e9fe47be968e4b4bc78f24173aef5026e7ba923b
- Addresses
- 172.66.44.253 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.66.47.3 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
- Cloudflare
- Cloudflare (172.66.44.253, 172.66.47.3): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- westprimemarket.net US · AS13335 · Cloudflare, Inc.2 addressesListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 59 d ago
DetailsHide details for westprimemarket.net
- Hostname
- westprimemarket.net
- First seen
- 2026-11-12 05:51 UTC
- First published
- 2026-11-12 07:05 UTC
- Listing
- CERT Polska listed it 2026-09-14 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 06:50 UTC
- DNS
- Resolves · checked 2026-11-12 07:15 UTC
- Listed
- CERT Polska
- Listed by CERT Polska
- Certificate logged in CT
- We matched its certificate name
- Latest DNS check
- Certificate
- Issued by YE2 · precertificateValid 2026-11-12 04:47 UTC to 2027-02-10 04:47 UTCLogged 2026-11-12 05:46 UTC in IPng Networks Halloumi2027h1, entry 466,249,598SHA-256 2a77daf784d525242f6ff3a6ecc1b801c73f92808a1f3b5b4e439c5caaabfe7ePublic key SHA-256 cdbdfe5bff3d3f85cf854d04af7782c97d89cffb56467b3e092c57ba850fc342
- Addresses
- 104.21.69.174 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.210.176 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
- Cloudflare
- Cloudflare (104.21.69.174, 172.67.210.176): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Domain
- westprimemarket.net
- Registered
- 2026-09-14 · Dynadot Inc
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-12 07:04 UTC
- wirexdigitalwallet.com US · AS13335 · Cloudflare, Inc.ListedCloudflareListed by MetaMaskMX presentSPF ~allDMARC policy noneRegistered 2 mo ago
DetailsHide details for wirexdigitalwallet.com
- Hostname
- wirexdigitalwallet.com
- First seen
- 2026-11-12 05:51 UTC
- First published
- 2026-11-12 07:05 UTC
- Listing
- MetaMask: first observed in the feed 2026-11-03 · still listed at the last successful feed check 2026-11-12 06:09 UTC
- DNS
- Resolves · checked 2026-11-12 07:15 UTC
- Listed
- MetaMask
- Observed in the MetaMask feed
- Certificate logged in CT
- We matched its certificate name
- Latest DNS check
- Certificate
- Issued by WE1 · precertificateValid 2026-11-12 04:48 UTC to 2027-02-10 05:48 UTCLogged 2026-11-12 05:48 UTC in Google ParcelYard2027h1, entry 749,953,730SHA-256 67f2da701897d830f39b1ce0c9b24831ff28b2c3e4bd49fa968c90440eeca323Public key SHA-256 1de3fa772b41aabcce2ac470f26e727c0e224b619b78e6a4c97e05be55f3325f
- Addresses
- 185.158.133.1 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
- Cloudflare
- Cloudflare (185.158.133.1): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Domain
- wirexdigitalwallet.com
- Registered
- 2026-09-07 · IONOS SE
- MX
- Receives mail at mx.zoho.com, mx2.zoho.com, mx3.zoho.com
- SPF
- SPF record with ~all: other senders soft-fail
- DMARC
- DMARC policy p=none: reports only
- Checked
- 2026-11-11 13:05 UTC
- www.crycoin.club US · AS13335 · Cloudflare, Inc.16 addressesListedCloudflareUnder crycoin.club, listed by MetaMaskMX absentSPF missingDMARC missingRegistered 12 mo ago
DetailsHide details for www.crycoin.club
- Hostname
- www.crycoin.club
- First seen
- 2026-11-12 05:51 UTC
- First published
- 2026-11-12 07:05 UTC
- Listing
- MetaMask: first observed in the feed 2026-11-06 · still listed at the last successful feed check 2026-11-12 06:09 UTC
- DNS
- Resolves · checked 2026-11-12 07:15 UTC
- Listed
- MetaMask, listing crycoin.club and the names under it
- Observed in the MetaMask feed
- Certificate logged in CT
- We matched its certificate name
- Latest DNS check
- Certificate
- Issued by YR1 · precertificateValid 2026-11-12 04:49 UTC to 2027-02-10 04:49 UTCLogged 2026-11-12 05:47 UTC in Let's Encrypt Willow2027h1, entry 1,112,858,699SHA-256 0cee889b1762938836d944d8797780f3e7242842b8d1a1d6d49a89a4d80e9fb3Public key SHA-256 ae09ba4a0ef4268731147ff2722dd94f69809a5a36cb90f99775733a87600332
- Addresses
- 23.145.136.251 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)23.145.232.39 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)23.145.232.40 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)23.145.232.226 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)23.145.232.227 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)23.145.232.230 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)23.180.136.55 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)23.180.136.56 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)23.180.136.90 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)23.180.136.111 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)103.204.13.41 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)103.204.13.53 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)103.204.13.71 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)103.204.13.75 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)103.204.13.78 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)103.204.13.85 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
- Cloudflare
- Cloudflare (23.145.136.251, 23.145.232.39, 23.145.232.40, 23.145.232.226, 23.145.232.227, 23.145.232.230, 23.180.136.55, 23.180.136.56, 23.180.136.90, 23.180.136.111, 103.204.13.41, 103.204.13.53, 103.204.13.71, 103.204.13.75, 103.204.13.78, 103.204.13.85): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Domain
- crycoin.club
- Registered
- 2025-11-11 · Namemart Limited
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-12 07:04 UTC
- www.globalmelange.co US · AS13335 · Cloudflare, Inc.2 addressesReportedCloudflareUnder globalmelange.co, reported by PhishDestroyMX presentSPF ~allDMARC missingRegistered 4 mo ago
DetailsHide details for www.globalmelange.co
- Hostname
- www.globalmelange.co
- First seen
- 2026-11-12 05:51 UTC
- First published
- 2026-11-12 07:05 UTC
- Listing
- PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-12 06:06 UTC
- DNS
- Resolves · checked 2026-11-12 07:15 UTC
- Reported
- PhishDestroy, listing globalmelange.co and the names under it
- Observed in the PhishDestroy feed
- Certificate logged in CT
- We matched its certificate name
- Latest DNS check
- Certificate
- Issued by YE1 · precertificateValid 2026-11-12 04:48 UTC to 2027-02-10 04:48 UTCLogged 2026-11-12 05:47 UTC in IPng Networks Gouda2027h1, entry 391,623,243SHA-256 d273d25857cdc10f78d9f480b1b778b12eae017b9407be01a537cb877e6465f6Public key SHA-256 9920aba559fc67b1056e296debcec378c464187a86f904e859c4c73e86b16fe1
- PhishDestroy
- Addresses
- 104.21.12.81 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.151.235 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
- Cloudflare
- Cloudflare (104.21.12.81, 172.67.151.235): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Domain
- globalmelange.co
- Registered
- 2026-07-15 · NameCheap, Inc.
- MX
- Receives mail at eforward1.registrar-servers.com, eforward2.registrar-servers.com, eforward3.registrar-servers.com
- SPF
- SPF record with ~all: other senders soft-fail
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-11 12:19 UTC
- credionshieldbnk.com US · AS13335 · Cloudflare, Inc.2 addressesReportedCloudflareReported by PhishDestroyMX presentSPF ~allDMARC policy noneRegistered 4 mo ago
DetailsHide details for credionshieldbnk.com
- Hostname
- credionshieldbnk.com
- First seen
- 2026-11-12 05:46 UTC
- First published
- 2026-11-12 05:57 UTC
- Listing
- PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-12 06:06 UTC
- DNS
- Resolves · checked 2026-11-12 06:04 UTC
- Reported
- PhishDestroy
- Observed in the PhishDestroy feed
- Certificate logged in CT
- We matched its certificate name
- Latest DNS check
- Certificate
- Issued by WE1Valid 2026-09-14 03:21 UTC to 2026-12-13 04:20 UTCLogged 2026-11-12 05:45 UTC in IPng Networks Halloumi2026h2a, entry 1,300,210,240SHA-256 a27eab35ff6256e490f53135de97c6c4036ddf586e88ac4ee499681c5819297dPublic key SHA-256 9034b9748a9d6d277637ac7ead5d562f6a93d5650514414576dcb4aa27263063
- PhishDestroy
- Addresses
- 104.21.25.132 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.134.66 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
- Cloudflare
- Cloudflare (104.21.25.132, 172.67.134.66): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Domain
- credionshieldbnk.com
- Registered
- 2026-07-16 · Spaceship, Inc.
- MX
- Receives mail at _dc-mx.53d584b11ac8.credionshieldbnk.com
- SPF
- SPF record with ~all: other senders soft-fail
- DMARC
- DMARC policy p=none: reports only
- Checked
- 2026-11-12 05:55 UTC
- mariashopping.online US · AS13335 · Cloudflare, Inc.2 addressesListedCloudflareListed by NPA 165 (e-commerce)MX absentSPF missingDMARC quarantineRegistered 6 mo ago
DetailsHide details for mariashopping.online
- Hostname
- mariashopping.online
- First seen
- 2026-11-12 05:46 UTC
- First published
- 2026-11-12 05:57 UTC
- Listing
- NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 01:38 UTC
- DNS
- Resolves · checked 2026-11-12 06:04 UTC
- Listed
- NPA 165
- Observed in the NPA 165 feed
- Certificate logged in CT
- We matched its certificate name
- Latest DNS check
- Certificate
- Issued by YE2 · precertificateValid 2026-11-12 04:44 UTC to 2027-02-10 04:44 UTCLogged 2026-11-12 05:43 UTC in Let's Encrypt Sycamore2027h1, entry 1,158,891,141SHA-256 8630aac06c40e487a42ea55a88ece7ebc8e408fc4c5dd99bb96949f300f228e3Public key SHA-256 0296a7a2c49f81e2ca863d3d83c057cb07d7ac1f40451c0bf2e888a8d87915df
- Addresses
- 104.21.86.235 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.137.156 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
- Cloudflare
- Cloudflare (104.21.86.235, 172.67.137.156): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Domain
- mariashopping.online
- Registered
- 2026-05-19 · GoDaddy.com, LLC
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- DMARC policy p=quarantine
- Checked
- 2026-11-12 05:55 UTC
- nirusfin-ai.com US · AS13335 · Cloudflare, Inc.2 addressesListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 4 mo ago
DetailsHide details for nirusfin-ai.com
- Hostname
- nirusfin-ai.com
- First seen
- 2026-11-12 05:46 UTC
- First published
- 2026-11-12 05:57 UTC
- Listing
- CERT Polska listed it 2026-07-17 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 06:50 UTC
- DNS
- Resolves · checked 2026-11-12 06:04 UTC
- Listed
- CERT Polska
- Listed by CERT Polska
- Certificate logged in CT
- We matched its certificate name
- Latest DNS check
- Certificate
- Issued by WE1 · precertificateValid 2026-11-12 04:43 UTC to 2027-02-10 05:41 UTCLogged 2026-11-12 05:43 UTC in IPng Networks Halloumi2027h1, entry 466,220,787SHA-256 6c8fa4091978a5276c075414b33aef59795a20d5760534fdab207e099d6b2a77Public key SHA-256 d78c184c27426df8b81ca0fa3b2f95004fe9ff91c91a34b930d419bf2f425170
- Addresses
- 104.21.36.13 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.183.14 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
- Cloudflare
- Cloudflare (104.21.36.13, 172.67.183.14): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Domain
- nirusfin-ai.com
- Registered
- 2026-07-16 · Eranet International Limited
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-12 05:55 UTC
- publiclumen.sbs US · AS13335 · Cloudflare, Inc.2 addressesListedCloudflareListed by USOMMX absentSPF missingDMARC missingRegistered 6 mo ago
DetailsHide details for publiclumen.sbs
- Hostname
- publiclumen.sbs
- First seen
- 2026-11-12 05:46 UTC
- First published
- 2026-11-12 05:57 UTC
- Listing
- USOM listed it 2026-05-20 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 07:32 UTC
- DNS
- Resolves · checked 2026-11-12 06:04 UTC
- Listed
- USOM
- Listed by USOM
- Certificate logged in CT
- We matched its certificate name
- Latest DNS check
- Certificate
- Issued by YE1 · precertificateValid 2026-11-12 04:44 UTC to 2027-02-10 04:44 UTCLogged 2026-11-12 05:42 UTC in Geomys Tuscolo2027h1, entry 586,556,888SHA-256 2fc7883753eaaf2deae04f9dd455078b8e98f9d69def667743e15bcb14a9573bPublic key SHA-256 32153c648f0720840f1431bcfe6bc4b78f8753a7bff01e3700de65cf1a62ff09
- Addresses
- 104.21.91.104 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.215.157 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
- Cloudflare
- Cloudflare (104.21.91.104, 172.67.215.157): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Domain
- publiclumen.sbs
- Registered
- 2026-05-19 · Dynadot Inc
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-12 05:55 UTC
- shimano-se.deal-vera.com US · AS13335 · Cloudflare, Inc.ListedCloudflareUnder deal-vera.com, listed by CERT PolskaMX absentSPF missingDMARC missingRegistered 3 mo ago
DetailsHide details for shimano-se.deal-vera.com
- Hostname
- shimano-se.deal-vera.com
- First seen
- 2026-11-12 05:46 UTC
- First published
- 2026-11-12 05:57 UTC
- Listing
- CERT Polska listed it 2026-10-17 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 06:50 UTC
- DNS
- Resolves · checked 2026-11-12 06:04 UTC
- Listed
- CERT Polska, listing deal-vera.com and the names under it
- Listed by CERT Polska
- Certificate logged in CT
- We matched its certificate name
- Latest DNS check
- Certificate
- Issued by WR1 · precertificateValid 2026-11-12 04:42 UTC to 2027-02-10 05:41 UTCLogged 2026-11-12 05:42 UTC in Geomys Tuscolo2027h1, entry 586,550,447SHA-256 d92dd84a9e62224729cb5b062abe7023e1b16a58bf3e2e06e46d492268b55b3bPublic key SHA-256 534e0a86743c81fa24e882f7f78b2e81f951d91f2c856e0d0b86c69c522756e5
- Addresses
- 104.18.13.234 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
- Cloudflare
- Cloudflare (104.18.13.234): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Domain
- deal-vera.com
- Registered
- 2026-08-18 · Cloudflare, Inc.
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-11 17:09 UTC
- simsoft.app.br US · AS13335 · Cloudflare, Inc.2 addressesReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 23 mo ago
DetailsHide details for simsoft.app.br
- Hostname
- simsoft.app.br
- First seen
- 2026-11-12 05:46 UTC
- First published
- 2026-11-12 05:57 UTC
- Listing
- PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-12 06:06 UTC
- DNS
- Resolves · checked 2026-11-12 06:04 UTC
- Reported
- PhishDestroy
- Observed in the PhishDestroy feed
- Certificate logged in CT
- We matched its certificate name
- Latest DNS check
- Certificate
- Issued by WE1 · precertificateValid 2026-11-12 04:44 UTC to 2027-02-10 05:42 UTCLogged 2026-11-12 05:44 UTC in DigiCert Wyvern2027h1, entry 508,376,032SHA-256 8afc5bd55b6b165bf6847df0597422948c6d7ca9e6845ebcfbd3a2b78b1b3c5cPublic key SHA-256 56a0d98f1dfb4f889e5ac348031e28ecd3b2edd138df912bd55db522c8dec50a
- PhishDestroy
- Addresses
- 104.21.81.224 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.165.100 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
- Cloudflare
- Cloudflare (104.21.81.224, 172.67.165.100): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Domain
- simsoft.app.br
- Registered
- 2025-01-04
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-12 03:37 UTC
- www.aiconnectors.io US · AS13335 · Cloudflare, Inc.2 addressesReportedCloudflareUnder aiconnectors.io, reported by PhishDestroyMX presentSPF ~allDMARC missingRegistered 4 mo ago
DetailsHide details for www.aiconnectors.io
- Hostname
- www.aiconnectors.io
- First seen
- 2026-11-12 05:46 UTC
- First published
- 2026-11-12 05:57 UTC
- Listing
- PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-12 06:06 UTC
- DNS
- Resolves · checked 2026-11-12 06:04 UTC
- Reported
- PhishDestroy, listing aiconnectors.io and the names under it
- Observed in the PhishDestroy feed
- Certificate logged in CT
- We matched its certificate name
- Latest DNS check
- Certificate
- Issued by WR1 · precertificateValid 2026-11-12 04:43 UTC to 2027-02-10 05:41 UTCLogged 2026-11-12 05:43 UTC in Google PlumbersArms2027h1, entry 750,086,088SHA-256 66883493f8f7c8cc2eb4b7320754687e5b34c8c705604ab1dd3fcdcf57e99bd9Public key SHA-256 49b619b8d2ac91fed477d364fbb6d7abba05a7fb07078b780c7cfe6e115a93bc
- PhishDestroy
- Addresses
- 104.18.22.186 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)104.18.23.186 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
- Cloudflare
- Cloudflare (104.18.22.186, 104.18.23.186): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Domain
- aiconnectors.io
- Registered
- 2026-07-17 · NameCheap, Inc.
- MX
- Receives mail at eforward1.registrar-servers.com, eforward2.registrar-servers.com, eforward3.registrar-servers.com
- SPF
- SPF record with ~all: other senders soft-fail
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-12 04:45 UTC
- www.dannys-auto.sale US · AS13335 · Cloudflare, Inc.2 addressesReportedCloudflareUnder dannys-auto.sale, reported by PhishDestroyMX presentSPF ~allDMARC policy noneRegistered 6 mo ago
DetailsHide details for www.dannys-auto.sale
- Hostname
- www.dannys-auto.sale
- First seen
- 2026-11-12 05:46 UTC
- First published
- 2026-11-12 05:57 UTC
- Listing
- PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-12 06:06 UTC
- DNS
- Resolves · checked 2026-11-12 06:04 UTC
- Reported
- PhishDestroy, listing dannys-auto.sale and the names under it
- Observed in the PhishDestroy feed
- Certificate logged in CT
- We matched its certificate name
- Latest DNS check
- Certificate
- Issued by YR1Valid 2026-11-12 04:46 UTC to 2027-02-10 04:46 UTCLogged 2026-11-12 05:44 UTC in DigiCert Wyvern2027h1, entry 508,382,253SHA-256 1351d5ab644ae3dec598c0c5e820e729008930128c2ae16db31b93e6c9b295d3Public key SHA-256 b686c646c340815296be8fe02c9a772e24c5aaa967af5f990f13ec31d24b4500
- PhishDestroy
- Addresses
- 104.21.51.152 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.182.21 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
- Cloudflare
- Cloudflare (104.21.51.152, 172.67.182.21): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Domain
- dannys-auto.sale
- Registered
- 2026-05-08 · NICENIC INTERNATIONAL GROUP CO., LIMITED
- MX
- Receives mail at route2.mx.cloudflare.net, route1.mx.cloudflare.net, route3.mx.cloudflare.net
- SPF
- SPF record with ~all: other senders soft-fail
- DMARC
- DMARC policy p=none: reports only
- Checked
- 2026-11-11 09:10 UTC
- demo.krakenauthtool.org US · AS13335 · Cloudflare, Inc.2 addressesReportedCloudflareUnder krakenauthtool.org, reported by PhishDestroyMX absentSPF missingDMARC missingRegistered 10 mo ago
DetailsHide details for demo.krakenauthtool.org
- Hostname
- demo.krakenauthtool.org
- First seen
- 2026-11-12 05:41 UTC
- First published
- 2026-11-12 05:57 UTC
- Listing
- PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-12 06:06 UTC
- DNS
- Resolves · checked 2026-11-12 06:04 UTC
- Reported
- PhishDestroy, listing krakenauthtool.org and the names under it
- Observed in the PhishDestroy feed
- Certificate logged in CT
- We matched its certificate name
- Latest DNS check
- Certificate
- Issued by YR1 · precertificateValid 2026-11-12 04:37 UTC to 2027-02-10 04:37 UTCLogged 2026-11-12 05:36 UTC in Let's Encrypt Sycamore2027h1, entry 1,158,811,442SHA-256 0c834f9fcb16cf27cb8a44487d5281b7fc62b98a0fef4429cf2e011e4e27a2ddPublic key SHA-256 6bbc6bcab5f63885ee2217ff5278a78d40b2d415970f63b87047c45fb39322c4
- PhishDestroy
- Addresses
- 104.21.25.225 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.134.207 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
- Cloudflare
- Cloudflare (104.21.25.225, 172.67.134.207): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Domain
- krakenauthtool.org
- Registered
- 2026-01-22 · Cloudflare, Inc.
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-11 08:57 UTC
- pandemicrecords2020.com US · AS13335 · Cloudflare, Inc.ReportedCloudflareReported by PhishDestroyMX presentSPF ~allDMARC policy noneRegistered 2 y ago
DetailsHide details for pandemicrecords2020.com
- Hostname
- pandemicrecords2020.com
- First seen
- 2026-11-12 05:41 UTC
- First published
- 2026-11-12 05:57 UTC
- Listing
- PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-12 06:06 UTC
- DNS
- Resolves · checked 2026-11-12 06:04 UTC
- Reported
- PhishDestroy
- Observed in the PhishDestroy feed
- Certificate logged in CT
- We matched its certificate name
- Latest DNS check
- Certificate
- Issued by WR1 · precertificateValid 2026-11-12 04:39 UTC to 2027-02-10 05:38 UTCLogged 2026-11-12 05:39 UTC in Let's Encrypt Sycamore2027h1, entry 1,158,849,004SHA-256 6909c5500a6bf6f428630aece83e15f989359a993e0a24ec4e779ca2a14d3f95Public key SHA-256 8e091eaf03360bbc95189d5d6e124b203875ee3faca675dae81ae255b6ea8019
- PhishDestroy
- Addresses
- 23.227.38.73 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
- Cloudflare
- Cloudflare (23.227.38.73): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Domain
- pandemicrecords2020.com
- Registered
- 2024-10-05 · Tucows Domains Inc.
- MX
- Receives mail at mx.pandemicrecords2020.com.cust.b.hostedemail.com
- SPF
- SPF record with ~all: other senders soft-fail
- DMARC
- DMARC policy p=none: reports only
- Checked
- 2026-11-12 05:55 UTC
- staging.ledger-and-trust.com US · AS13335 · Cloudflare, Inc.2 addressesListedCloudflareUnder ledger-and-trust.com, listed by MetaMaskMX absentSPF -allDMARC quarantineRegistered 12 d ago
DetailsHide details for staging.ledger-and-trust.com
- Hostname
- staging.ledger-and-trust.com
- First seen
- 2026-11-12 05:41 UTC
- First published
- 2026-11-12 05:57 UTC
- Listing
- MetaMask: first observed in the feed 2026-11-02 · still listed at the last successful feed check 2026-11-12 06:09 UTC
- DNS
- Resolves · checked 2026-11-12 06:04 UTC
- Listed
- MetaMask, listing ledger-and-trust.com and the names under it
- Observed in the MetaMask feed
- Certificate logged in CT
- We matched its certificate name
- Latest DNS check
- Certificate
- Issued by WR1 · precertificateValid 2026-11-12 04:38 UTC to 2027-02-10 05:38 UTCLogged 2026-11-12 05:38 UTC in Google PlumbersArms2027h1, entry 750,033,112SHA-256 069dc86b265afad94cf1a1485c2352951e8f4da0f3c85bbb38ff22bcc6ed6f21Public key SHA-256 9b523d4bc50c4d0fe6fd41c09768246d5770eda931268a4c0bc0d56265dedd26
- Addresses
- 162.159.140.98 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.66.0.96 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
- Cloudflare
- Cloudflare (162.159.140.98, 172.66.0.96): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Domain
- ledger-and-trust.com
- Registered
- 2026-10-31 · Cloudflare, Inc.
- MX
- Publishes no mail exchanger
- SPF
- SPF record with -all: other senders fail
- DMARC
- DMARC policy p=quarantine
- Checked
- 2026-11-12 05:55 UTC
- vitakruid-nl.buy-vera.com US · AS13335 · Cloudflare, Inc.ListedCloudflareUnder buy-vera.com, listed by CERT PolskaMX absentSPF missingDMARC missingRegistered 3 mo ago
DetailsHide details for vitakruid-nl.buy-vera.com
- Hostname
- vitakruid-nl.buy-vera.com
- First seen
- 2026-11-12 05:41 UTC
- First published
- 2026-11-12 05:57 UTC
- Listing
- CERT Polska listed it 2026-09-09 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 06:50 UTC
- DNS
- Resolves · checked 2026-11-12 06:04 UTC
- Listed
- CERT Polska, listing buy-vera.com and the names under it
- Listed by CERT Polska
- Certificate logged in CT
- We matched its certificate name
- Latest DNS check
- Certificate
- Issued by WR1 · precertificateValid 2026-11-12 04:40 UTC to 2027-02-10 05:38 UTCLogged 2026-11-12 05:40 UTC in Google ParcelYard2027h1, entry 749,856,778SHA-256 18647896d117c35ca1eff88ccb58c7663546c29b31e48f9a17f8f2872dbb7547Public key SHA-256 027eb9970e7d2962449939ca3946a5269ede4f7a797f639aa765d05fca94757e
- Addresses
- 104.18.13.234 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
- Cloudflare
- Cloudflare (104.18.13.234): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Domain
- buy-vera.com
- Registered
- 2026-08-21 · Cloudflare, Inc.
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-11 10:21 UTC
- jxkljpff.shop US · AS13335 · Cloudflare, Inc.ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 59 d ago
DetailsHide details for jxkljpff.shop
- Hostname
- jxkljpff.shop
- First seen
- 2026-11-12 05:36 UTC
- First published
- 2026-11-12 05:57 UTC
- Listing
- CERT Polska listed it 2026-09-16 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 06:50 UTC
- DNS
- Resolves · checked 2026-11-12 06:04 UTC
- Listed
- CERT Polska
- Listed by CERT Polska
- Certificate logged in CT
- We matched its certificate name
- Latest DNS check
- Certificate
- Issued by YE1Valid 2026-11-12 04:33 UTC to 2027-02-10 04:33 UTCLogged 2026-11-12 05:32 UTC in Google ParcelYard2027h1, entry 749,763,577SHA-256 1756be0ce9afae7df2e39e1b87b6b2ab604041cc57b4c63b3114eb630cdae1d5Public key SHA-256 30fd77cf2fc8cd5e0b2b20784f0f2c1a1b5160be5c8963b406c725276cce0627
- Addresses
- 104.17.231.54 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
- Cloudflare
- Cloudflare (104.17.231.54): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Domain
- jxkljpff.shop
- Registered
- 2026-09-14 · Web Commerce Communication Ltd.
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-12 05:55 UTC
- kraksite-cc.pages.dev US · AS13335 · Cloudflare, Inc.2 addressesListedCloudflareListed by MetaMask
DetailsHide details for kraksite-cc.pages.dev
- Hostname
- kraksite-cc.pages.dev
- First seen
- 2026-11-12 05:36 UTC
- First published
- 2026-11-12 05:57 UTC
- Listing
- MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 06:09 UTC
- DNS
- Resolves · checked 2026-11-12 06:04 UTC
- Listed
- MetaMask
- Observed in the MetaMask feed
- Certificate logged in CT
- We matched its certificate name
- Latest DNS check
- Certificate
- Issued by WE1 · precertificateValid 2026-11-12 04:34 UTC to 2027-02-10 05:32 UTCLogged 2026-11-12 05:34 UTC in Let's Encrypt Sycamore2027h1, entry 1,158,795,842SHA-256 742e51e2811eefc23c5bc62ca862bf1fdb95ad8aa3351e53d60a3c79c1f373b5Public key SHA-256 6dd58fa824bc6ab6d8fab55dd306c2bbbd009640d0c5083e0653c0acde7d3c41
- Addresses
- 172.66.44.210 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.66.47.46 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
- Cloudflare
- Cloudflare (172.66.44.210, 172.66.47.46): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- marea-fortencia-ai.com US · AS13335 · Cloudflare, Inc.2 addressesListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 4 mo ago
DetailsHide details for marea-fortencia-ai.com
- Hostname
- marea-fortencia-ai.com
- First seen
- 2026-11-12 05:36 UTC
- First published
- 2026-11-12 05:57 UTC
- Listing
- CERT Polska listed it 2026-07-18 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 06:50 UTC
- DNS
- Resolves · checked 2026-11-12 06:04 UTC
- Listed
- CERT Polska
- Listed by CERT Polska
- Certificate logged in CT
- We matched its certificate name
- Latest DNS check
- Certificate
- Issued by WE1Valid 2026-09-14 02:43 UTC to 2026-12-13 03:43 UTCLogged 2026-11-12 05:31 UTC in DigiCert Wyvern2026h2, entry 2,220,208,996SHA-256 01dc4b8c88d9af94db2c26ece243907fc6d6d7faf3c8917be4ac0f94d6151170Public key SHA-256 71d0f7faf87e39b3cfe3c5310cdbabeac749727d8ca46e2bcbf7347e6a5bc407
- Addresses
- 104.21.88.62 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.173.82 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
- Cloudflare
- Cloudflare (104.21.88.62, 172.67.173.82): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Domain
- marea-fortencia-ai.com
- Registered
- 2026-07-16 · Eranet International Limited
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-12 05:55 UTC
- oferty-moje-3022.casa US · AS13335 · Cloudflare, Inc.2 addressesListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 59 d ago
DetailsHide details for oferty-moje-3022.casa
- Hostname
- oferty-moje-3022.casa
- First seen
- 2026-11-12 05:36 UTC
- First published
- 2026-11-12 05:57 UTC
- Listing
- CERT Polska listed it 2026-09-14 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 06:50 UTC
- DNS
- Resolves · checked 2026-11-12 06:04 UTC
- Listed
- CERT Polska
- Listed by CERT Polska
- Certificate logged in CT
- We matched its certificate name
- Latest DNS check
- Certificate
- Issued by YE2Valid 2026-11-12 04:37 UTC to 2027-02-10 04:37 UTCLogged 2026-11-12 05:35 UTC in Google ParcelYard2027h1, entry 749,806,070SHA-256 74b544f0a42d737eb6327d71bf87c442a1daab6b5a13dc04ce17842428d4deadPublic key SHA-256 34ff787da2d7800541ffa423ac01070d39d048297bd0a7a36609a08d458ca457
- Addresses
- 104.21.71.247 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.172.153 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
- Cloudflare
- Cloudflare (104.21.71.247, 172.67.172.153): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Domain
- oferty-moje-3022.casa
- Registered
- 2026-09-14 · Dynadot Inc
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-12 05:55 UTC
- ventofinance-app.com US · AS13335 · Cloudflare, Inc.2 addressesListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 4 mo ago
DetailsHide details for ventofinance-app.com
- Hostname
- ventofinance-app.com
- First seen
- 2026-11-12 05:36 UTC
- First published
- 2026-11-12 05:57 UTC
- Listing
- CERT Polska listed it 2026-07-19 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 06:50 UTC
- DNS
- Resolves · checked 2026-11-12 06:04 UTC
- Listed
- CERT Polska
- Listed by CERT Polska
- Certificate logged in CT
- We matched its certificate name
- Latest DNS check
- Certificate
- Issued by WE1Valid 2026-09-13 23:33 UTC to 2026-12-13 00:31 UTCLogged 2026-11-12 05:34 UTC in DigiCert Wyvern2026h2, entry 2,220,215,349SHA-256 95c7e36be90cb50c6567cc9a76c59004c06fc8e72636749d7c8db7e75ed17df2Public key SHA-256 20fb2d5293626842163335c4cce943ac01fdaedbbf73984e86dbc2eda8a1571f
- Addresses
- 104.21.18.65 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.180.182 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
- Cloudflare
- Cloudflare (104.21.18.65, 172.67.180.182): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Domain
- ventofinance-app.com
- Registered
- 2026-07-16 · Eranet International Limited
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-12 05:55 UTC
- chiarofondovio-app.com US · AS13335 · Cloudflare, Inc.2 addressesListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 4 mo ago
DetailsHide details for chiarofondovio-app.com
- Hostname
- chiarofondovio-app.com
- First seen
- 2026-11-12 05:31 UTC
- First published
- 2026-11-12 05:57 UTC
- Listing
- CERT Polska listed it 2026-07-17 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 06:50 UTC
- DNS
- Resolves · checked 2026-11-12 06:04 UTC
- Listed
- CERT Polska
- Listed by CERT Polska
- Certificate logged in CT
- We matched its certificate name
- Latest DNS check
- Certificate
- Issued by WE1 · precertificateValid 2026-11-12 04:29 UTC to 2027-02-10 05:28 UTCLogged 2026-11-12 05:29 UTC in Let's Encrypt Willow2027h1, entry 1,112,642,565SHA-256 6bad169ecf43e3d91d643dc1db59032bc84c69588c708303373f2c34d4c9da7aPublic key SHA-256 b3e255d6ff3d7a0aabbcd910be384a757594d961adb446955895b6382849d6ab
- Addresses
- 104.21.55.249 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.174.209 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
- Cloudflare
- Cloudflare (104.21.55.249, 172.67.174.209): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Domain
- chiarofondovio-app.com
- Registered
- 2026-07-16 · Eranet International Limited
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-12 05:55 UTC
- dl001.etherbank.net US · AS13335 · Cloudflare, Inc.2 addressesReportedCloudflareUnder etherbank.net, reported by PhishDestroyMX absentSPF missingDMARC missingRegistered 10 mo ago
DetailsHide details for dl001.etherbank.net
- Hostname
- dl001.etherbank.net
- First seen
- 2026-11-12 05:31 UTC
- First published
- 2026-11-12 05:57 UTC
- Listing
- PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-12 06:06 UTC
- DNS
- Resolves · checked 2026-11-12 06:04 UTC
- Reported
- PhishDestroy, listing etherbank.net and the names under it
- Observed in the PhishDestroy feed
- Certificate logged in CT
- We matched its certificate name
- Latest DNS check
- Certificate
- Issued by WE1 · precertificateValid 2026-11-12 04:25 UTC to 2027-02-10 05:25 UTCLogged 2026-11-12 05:25 UTC in Google ParcelYard2027h1, entry 749,687,746SHA-256 172dd02ef95ff3d06f41108d3306b2143b7bf7609bd600a77ec70fb95722e994Public key SHA-256 04f9dfbede180232e7384058176a4363678b5a3e7e40e7d7d0d4651c9c9b019c
- PhishDestroy
- Addresses
- 104.21.93.125 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.209.226 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
- Cloudflare
- Cloudflare (104.21.93.125, 172.67.209.226): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Domain
- etherbank.net
- Registered
- 2026-01-18 · Cloudflare, Inc.
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-11 23:12 UTC
- axeovixai-app.com US · AS13335 · Cloudflare, Inc.2 addressesListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 4 mo ago
DetailsHide details for axeovixai-app.com
- Hostname
- axeovixai-app.com
- First seen
- 2026-11-12 05:26 UTC
- First published
- 2026-11-12 05:57 UTC
- Listing
- CERT Polska listed it 2026-07-17 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 06:50 UTC
- DNS
- Resolves · checked 2026-11-12 06:04 UTC
- Listed
- CERT Polska
- Listed by CERT Polska
- Certificate logged in CT
- We matched its certificate name
- Latest DNS check
- Certificate
- Issued by WE1 · precertificateValid 2026-11-12 04:23 UTC to 2027-02-10 05:22 UTCLogged 2026-11-12 05:23 UTC in Google ParcelYard2027h1, entry 749,661,586SHA-256 60088d283163d07efbdaf7b669c90cc6a01c88edbf2ad225fc609c1dce3aa3bbPublic key SHA-256 31ba5d3033fd08d2ea06764f03a155860a7e9703ebb8bb890dcc62f03c1b0ce7
- Addresses
- 104.21.7.122 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.130.77 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
- Cloudflare
- Cloudflare (104.21.7.122, 172.67.130.77): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Domain
- axeovixai-app.com
- Registered
- 2026-07-16 · Eranet International Limited
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-12 05:55 UTC
- ledger-com-us-app-start.pages.dev US · AS13335 · Cloudflare, Inc.2 addressesListedCloudflareListed by MetaMask
DetailsHide details for ledger-com-us-app-start.pages.dev
- Hostname
- ledger-com-us-app-start.pages.dev
- First seen
- 2026-11-12 05:26 UTC
- First published
- 2026-11-12 05:57 UTC
- Listing
- MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 06:09 UTC
- DNS
- Resolves · checked 2026-11-12 06:04 UTC
- Listed
- MetaMask
- Observed in the MetaMask feed
- Certificate logged in CT
- We matched its certificate name
- Latest DNS check
- Certificate
- Issued by WE1 · precertificateValid 2026-11-12 04:23 UTC to 2027-02-10 05:21 UTCLogged 2026-11-12 05:23 UTC in DigiCert Wyvern2027h1, entry 508,168,340SHA-256 b29702d26ea46ac8d3b9381729c42a17da8877838630172e83bcace384797c10Public key SHA-256 5bf90f5822b3fc7ca04483e8803fa87838067b500df12bf3c40bed3ae10c8cb5
- Addresses
- 172.66.44.155 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.66.47.101 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
- Cloudflare
- Cloudflare (172.66.44.155, 172.66.47.101): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- revgrox-ai.com US · AS13335 · Cloudflare, Inc.2 addressesListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 4 mo ago
DetailsHide details for revgrox-ai.com
- Hostname
- revgrox-ai.com
- First seen
- 2026-11-12 05:26 UTC
- First published
- 2026-11-12 05:57 UTC
- Listing
- CERT Polska listed it 2026-07-18 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 06:50 UTC
- DNS
- Resolves · checked 2026-11-12 06:04 UTC
- Listed
- CERT Polska
- Listed by CERT Polska
- Certificate logged in CT
- We matched its certificate name
- Latest DNS check
- Certificate
- Issued by WE1 · precertificateValid 2026-11-12 04:23 UTC to 2027-02-10 05:22 UTCLogged 2026-11-12 05:23 UTC in Google ParcelYard2027h1, entry 749,658,846SHA-256 50f92929863d103f300032a15f2d2bd25168bb13f57ac7db5d164b8a3ffc4752Public key SHA-256 db91daad0cf4a65d2f4de2dce146421bf4f88d1dc9ee89edf57c7f6d8a7c1c5a
- Addresses
- 104.21.92.142 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.195.48 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
- Cloudflare
- Cloudflare (104.21.92.142, 172.67.195.48): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Domain
- revgrox-ai.com
- Registered
- 2026-07-16 · Eranet International Limited
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-12 05:55 UTC
How these findings are made
Brand spoofs: findings that impersonate one of the 1,000 most-impersonated brands. The list opens on them; All shows every finding.
Reported: a hostname in a new certificate that PhishTank or PhishDestroy reports, or that CERT Polska, MetaMask, USOM, MODA, NPA 165, JPCERT/CC, the AMF, the FSMA or BaFin lists. When a listing source names the brand imitated or a category, the finding shows it. Phishing host: a brand lookalike that resolves to an address which hosted confirmed phishing in the last 48 hours. Spamhaus DROP: a brand lookalike that resolves to an address on the Spamhaus DROP list. Same certificate: another name on a finding's certificate that resolves to an address on Spamhaus DROP. Suspicious: other names on a finding's certificate, rated high for a hosting-alias name or a lookalike on a phishing host, medium for a lookalike; they join the findings once they have listing evidence of their own. Also under Suspicious: registered domains using a brand’s name that PhishDestroy’s community list includes, rated high when they resolve to an address with no parking or holding signal, medium otherwise.
Brand labels cover the 1,000 most-impersonated brands. A name gets a brand when the brand's token starts a label or follows a hyphen, with a lure word such as "login" or "verify" for common words. Hostnames appear as plain text. How it works · Sources

