Live

Live phishing findings

New certificates and domain registrations, with every hostname resolved and checked against phishing reports and bad-address lists. The newest findings, updated hourly.

Updated hourly · 2026-11-12 14:27 UTC
Certificate-log entries · 24 h
331.7M
from 84 distinct feeds
Unique certificates · 24 h
34.4M
each reviewed
Names resolved · 24 h
22.5M
16.6M with an address
Findings · 24 h
6,701
261 of 1,061 brands targeted

3,003 hostnames from the last 24 hours.

The findings have updated. The list starts again from the top.

  1. bduppe.shop US · AS13335 · Cloudflare, Inc.4 addresses
    ListedCloudflareListed by NPA 165 (finance and insurance)Registered 59 d ago
    DetailsHide
    Hostname
    bduppe.shop
    First seen
    2026-11-12 14:25 UTC
    Listing
    NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 13:39 UTC
    Listed
    NPA 165
    1. Observed in the NPA 165 feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-12 13:25 UTC to 2027-02-10 14:24 UTC
    Logged 2026-11-12 14:25 UTC in Geomys Tuscolo2027h1, entry 591,451,858
    SHA-256 47023a33a1d2bff8d0c2d7a7acceeb56b8cffbc88534b5f89e5a0ae2f6fdeb59
    Public key SHA-256 7e8084eeafba236e1c7bd324e5cb1f863b389ccf75079ec004587b211279c21a
    Addresses
    104.21.89.44 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.156.90 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3031::ac43:9c5a
    2606:4700:3037::6815:592c
    Cloudflare
    Cloudflare (104.21.89.44, 172.67.156.90): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    bduppe.shop
    Registered
    2026-09-14 · NameSilo
    Checked
    2026-11-12 14:34 UTC

    Suggest a correction

  2. bitkelttrade-ai.live US · AS13335 · Cloudflare, Inc.4 addresses
    ListedCloudflareListed by CERT PolskaRegistered 5 mo ago
    DetailsHide
    Hostname
    bitkelttrade-ai.live
    First seen
    2026-11-12 14:25 UTC
    Listing
    CERT Polska listed it 2026-07-31 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 12:52 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by Sectigo Public Server Authentication CA DV E36 · precertificate
    Valid 2026-11-12 00:00 UTC to 2027-02-10 14:17 UTC
    Logged 2026-11-12 14:21 UTC in Geomys Tuscolo2027h1, entry 591,411,300
    SHA-256 d0e44d22bfd4f72318afa59402b69003189001b3469b080b99142e8469364b49
    Public key SHA-256 18836e0290dba02f797277d7e01fe61fa1d881e9e8dd873733b331345d855525
    Addresses
    104.21.94.211 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.140.80 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3033::ac43:8c50
    2606:4700:3035::6815:5ed3
    Cloudflare
    Cloudflare (104.21.94.211, 172.67.140.80): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    bitkelttrade-ai.live
    Registered
    2026-06-05 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    Checked
    2026-11-12 14:34 UTC

    Suggest a correction

  3. blocksweep.click US · AS13335 · Cloudflare, Inc.4 addresses
    ListedCloudflareListed by CERT PolskaRegistered 6 mo ago
    DetailsHide
    Hostname
    blocksweep.click
    First seen
    2026-11-12 14:25 UTC
    Listing
    CERT Polska listed it 2026-05-19 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 12:52 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-11-12 13:25 UTC to 2027-02-10 13:25 UTC
    Logged 2026-11-12 14:23 UTC in Let's Encrypt Willow2027h1, entry 1,119,613,044
    SHA-256 30506d8b5a00032482001bfc6b37ef3314c2e3310ddba86784f86168924b82fb
    Public key SHA-256 eb1846c729e369573d18c8bb8cc0754c311cf7963dffe80d335bf3a42dc4a587
    Addresses
    104.21.0.182 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.128.46 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3030::6815:b6
    2606:4700:3033::ac43:802e
    Cloudflare
    Cloudflare (104.21.0.182, 172.67.128.46): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    blocksweep.click
    Registered
    2026-05-19 · Dynadot, LLC
    Checked
    2026-11-12 14:34 UTC

    Suggest a correction

  4. loggin-ledger-live-en.pages.dev US · AS13335 · Cloudflare, Inc.4 addressesLedger
    ListedCloudflareListed by MetaMask
    DetailsHide
    Hostname
    loggin-ledger-live-en.pages.dev
    First seen
    2026-11-12 14:25 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 12:11 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-12 13:20 UTC to 2027-02-10 14:18 UTC
    Logged 2026-11-12 14:20 UTC in Geomys Tuscolo2027h1, entry 591,396,599
    SHA-256 5083e0d106b7273dbb9a4cd7f58e9396d6cb0c35d57ad9177da81be29e3adc5c
    Public key SHA-256 f32ac2189b09e10d6b6e8c853f3ca3da57abcbbd8fd1571598663a7d755d0095
    Brand
    Ledger
    Addresses
    172.66.44.162 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.66.47.94 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:310c::ac42:2ca2
    2606:4700:310c::ac42:2f5e
    Cloudflare
    Cloudflare (172.66.44.162, 172.66.47.94): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.

    Suggest a correction

  5. proposal-tenero.io US · AS13335 · Cloudflare, Inc.4 addresses
    ListedCloudflareListed by MetaMaskRegistered 6 mo ago
    DetailsHide
    Hostname
    proposal-tenero.io
    First seen
    2026-11-12 14:25 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 12:11 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-11-12 13:25 UTC to 2027-02-10 13:25 UTC
    Logged 2026-11-12 14:24 UTC in DigiCert Sphinx2027h1, entry 456,431,156
    SHA-256 9227223c272a782eace270b89a08f4a2a1d5ed78fbac22891c6b92e77b70376f
    Public key SHA-256 0d904eb8ffb7396ef940fb024fb46883e87626e01ffb7f1b85ad25f1f15e1612
    Addresses
    104.21.17.224 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.178.158 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3030::ac43:b29e
    2606:4700:3032::6815:11e0
    Cloudflare
    Cloudflare (104.21.17.224, 172.67.178.158): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    proposal-tenero.io
    Registered
    2026-05-19 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    Checked
    2026-11-12 14:34 UTC

    Suggest a correction

  6. roocketx.exchange US · AS13335 · Cloudflare, Inc.4 addresses
    ListedCloudflareListed by MetaMaskRegistered 12 mo ago
    DetailsHide
    Hostname
    roocketx.exchange
    First seen
    2026-11-12 14:25 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 12:11 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1
    Valid 2026-10-23 17:45 UTC to 2027-01-21 18:45 UTC
    Logged 2026-11-12 14:21 UTC in Let's Encrypt Sycamore2027h1, entry 1,165,891,978
    SHA-256 3256d0ed6d90fc0ba8e6457b0f4a73ff3cef3fb7fdec747278390595515cc467
    Public key SHA-256 25bb4a08c145e06b4c97dc07ca5da416b6f9fa8781130cc3415613df0bfe74e1
    Addresses
    104.21.31.195 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.179.157 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3031::ac43:b39d
    2606:4700:3036::6815:1fc3
    Cloudflare
    Cloudflare (104.21.31.195, 172.67.179.157): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    roocketx.exchange
    Registered
    2025-11-30 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    Checked
    2026-11-12 14:34 UTC

    Suggest a correction

  7. seekerallocation1.pages.dev US · AS13335 · Cloudflare, Inc.4 addresses
    ListedCloudflareListed by MetaMask
    DetailsHide
    Hostname
    seekerallocation1.pages.dev
    First seen
    2026-11-12 14:25 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 12:11 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-12 13:24 UTC to 2027-02-10 14:21 UTC
    Logged 2026-11-12 14:24 UTC in Google ParcelYard2027h1, entry 757,148,819
    SHA-256 eefb66cd09ca8d5109d35984183d30d1d9c3d865abfadce19a0f500a6ae4b70e
    Public key SHA-256 b139eef0f55dae9bdcd3d9262cfb6a21d2aa105725f6f615fa7d0dd2ca810e1e
    Addresses
    172.66.44.84 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.66.47.172 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:310c::ac42:2c54
    2606:4700:310c::ac42:2fac
    Cloudflare
    Cloudflare (172.66.44.84, 172.66.47.172): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.

    Suggest a correction

  8. states-x.com US · AS13335 · Cloudflare, Inc.4 addresses
    ListedCloudflareListed by MetaMaskRegistered 59 d ago
    DetailsHide
    Hostname
    states-x.com
    First seen
    2026-11-12 14:25 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 12:11 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-12 13:24 UTC to 2027-02-10 13:24 UTC
    Logged 2026-11-12 14:22 UTC in Google ParcelYard2027h1, entry 757,116,231
    SHA-256 20ebdbaa713334c8ec2a84e18d4d13be7d7fcfc27e717208022c6910f4960f46
    Public key SHA-256 09905fe96ef56c37a7f68d15beedf6f8b7099e03b25cbd23af358f032b2af7b5
    Addresses
    104.21.41.166 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.191.185 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3030::ac43:bfb9
    2606:4700:3037::6815:29a6
    Cloudflare
    Cloudflare (104.21.41.166, 172.67.191.185): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    states-x.com
    Registered
    2026-09-14 · Dynadot Inc
    Checked
    2026-11-12 14:34 UTC

    Suggest a correction

  9. tevefxqlrn.help US · AS13335 · Cloudflare, Inc.4 addresses
    ListedCloudflareListed by CERT PolskaRegistered 6 mo ago
    DetailsHide
    Hostname
    tevefxqlrn.help
    First seen
    2026-11-12 14:25 UTC
    Listing
    CERT Polska listed it 2026-07-20 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 12:52 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-12 13:22 UTC to 2027-02-10 13:22 UTC
    Logged 2026-11-12 14:21 UTC in Google ParcelYard2027h1, entry 757,094,597
    SHA-256 a952537e596e8187fed6445b6ded6c4d1a85d30db06cf2cd41630fd32c936520
    Public key SHA-256 f5c8a01789c6a2cda89da53c0e6ddad9f4f2a73ab628d6ca300cd48aaef0cd2b
    Addresses
    104.21.64.37 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.175.233 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3031::ac43:afe9
    2606:4700:3033::6815:4025
    Cloudflare
    Cloudflare (104.21.64.37, 172.67.175.233): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    tevefxqlrn.help
    Registered
    2026-05-19 · Chengdu West Dimension Digital Technology Co., Ltd.
    Checked
    2026-11-12 14:34 UTC

    Suggest a correction

  10. trixalvent.com US · AS13335 · Cloudflare, Inc.4 addresses
    ListedCloudflareListed by CERT PolskaRegistered 4 mo ago
    DetailsHide
    Hostname
    trixalvent.com
    First seen
    2026-11-12 14:25 UTC
    Listing
    CERT Polska listed it 2026-07-17 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 12:52 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-12 13:20 UTC to 2027-02-10 14:18 UTC
    Logged 2026-11-12 14:20 UTC in DigiCert Wyvern2027h1, entry 513,870,704
    SHA-256 553759aa32ff0514ce110513dfbf536221dfc3aca3d39147056065f651e86230
    Public key SHA-256 ad118bf0b274327d34545ad6c28fd3142dcc4a5e955f805e241fda597fa7622f
    Addresses
    104.21.57.174 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.147.223 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3032::ac43:93df
    2606:4700:3035::6815:39ae
    Cloudflare
    Cloudflare (104.21.57.174, 172.67.147.223): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    trixalvent.com
    Registered
    2026-07-17 · NameCheap, Inc.
    Checked
    2026-11-12 14:34 UTC

    Suggest a correction

  11. trustcryptocard.click US · AS13335 · Cloudflare, Inc.4 addresses
    ListedCloudflareListed by CERT PolskaRegistered 6 mo ago
    DetailsHide
    Hostname
    trustcryptocard.click
    First seen
    2026-11-12 14:25 UTC
    Listing
    CERT Polska listed it 2026-07-21 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 12:52 UTC
    PhishDestroy: first observed in the feed 2026-11-10 · still listed at the last successful feed check 2026-11-12 12:07 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-11-12 13:25 UTC to 2027-02-10 13:25 UTC
    Logged 2026-11-12 14:23 UTC in Google ParcelYard2027h1, entry 757,133,700
    SHA-256 5a4b63a94a0c1e68add3a88d26a7a3792d60e2ba394835f7bb1c3d84cb3090fb
    Public key SHA-256 878e6cd64604321f00e34caa97467cd294910459a0569e4dd3c545dffafa5571
    Addresses
    104.21.17.36 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.220.131 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3033::ac43:dc83
    2606:4700:3034::6815:1124
    Cloudflare
    Cloudflare (104.21.17.36, 172.67.220.131): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    trustcryptocard.click
    Registered
    2026-05-19 · Spaceship, Inc.
    Checked
    2026-11-12 14:34 UTC

    Suggest a correction

  12. usb-ledgerx.pages.dev US · AS13335 · Cloudflare, Inc.4 addresses
    ListedCloudflareListed by MetaMask
    DetailsHide
    Hostname
    usb-ledgerx.pages.dev
    First seen
    2026-11-12 14:25 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 12:11 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-12 13:20 UTC to 2027-02-10 14:18 UTC
    Logged 2026-11-12 14:20 UTC in DigiCert Wyvern2027h1, entry 513,871,550
    SHA-256 14703f2f535342f116592df942aeb08a3bd24517abfb68fd49fcfa542b6c7736
    Public key SHA-256 3fc33aa67f4caee08d725c1fb12ea293bff32d071ea8ca77268218f3d421377d
    Addresses
    172.66.44.229 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.66.47.27 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:310c::ac42:2ce5
    2606:4700:310c::ac42:2f1b
    Cloudflare
    Cloudflare (172.66.44.229, 172.66.47.27): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.

    Suggest a correction

  13. 338539-trezor.io US · AS13335 · Cloudflare, Inc.4 addressesTrezor
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 5 mo ago
    DetailsHide
    Hostname
    338539-trezor.io
    First seen
    2026-11-12 14:20 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 12:11 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by Sectigo Public Server Authentication CA DV E36
    Valid 2026-11-12 00:00 UTC to 2027-02-10 14:18 UTC
    Logged 2026-11-12 14:19 UTC in GoDaddy Aquamarine2027h1, entry 219,988,880
    SHA-256 c024dab4c557acf5f5b803784900207101275d940c4fc0fa9f281264879673bc
    Public key SHA-256 60524b164f138c2ca9a9eead848c361aa743ce844a91ff3a643c40d87a0ebc8e
    Brand
    Trezor
    Addresses
    104.21.76.16 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.185.16 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3036::ac43:b910
    2606:4700:3037::6815:4c10
    Cloudflare
    Cloudflare (104.21.76.16, 172.67.185.16): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    338539-trezor.io
    Registered
    2026-06-04 · Atak Domain Bilgi Teknolojileri A.Ş.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-12 14:34 UTC

    Suggest a correction

  14. domdobr43.eu.cc US · AS13335 · Cloudflare, Inc.4 addresses
    ListedCloudflareListed by CERT Polska
    DetailsHide
    Hostname
    domdobr43.eu.cc
    First seen
    2026-11-12 14:20 UTC
    Listing
    CERT Polska listed it 2026-09-15 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 12:52 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-11-12 13:20 UTC to 2027-02-10 13:20 UTC
    Logged 2026-11-12 14:18 UTC in IPng Networks Halloumi2027h1, entry 471,295,372
    SHA-256 48fd39ecd1cc0729ece3585441cc306198f8270fb10b8d20bae89f8696c8e9b0
    Public key SHA-256 eda74d5f5e56c2eb1a2da17cc01320fddbee1b6dfc2d7d4ba06784825c873540
    Addresses
    104.21.63.102 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.170.140 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3036::6815:3f66
    2606:4700:3036::ac43:aa8c
    Cloudflare
    Cloudflare (104.21.63.102, 172.67.170.140): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.

    Suggest a correction

  15. fondavind.pro US · AS13335 · Cloudflare, Inc.4 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    fondavind.pro
    First seen
    2026-11-12 14:20 UTC
    Listing
    CERT Polska listed it 2026-09-14 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 12:52 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-12 13:17 UTC to 2027-02-10 13:17 UTC
    Logged 2026-11-12 14:15 UTC in Google PlumbersArms2027h1, entry 757,153,230
    SHA-256 c9109d4861e71c171cdf3e0d69607af8b372a2795af39c514bbfb37f67dedb7c
    Public key SHA-256 ed89b67cbd1d4bc9bcb4524d766cfb3acd95b2ff5d5a64551f9da6ddab62993f
    Addresses
    104.21.30.18 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.150.54 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3031::6815:1e12
    2606:4700:3031::ac43:9636
    Cloudflare
    Cloudflare (104.21.30.18, 172.67.150.54): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    fondavind.pro
    Registered
    2026-05-19 · Dynadot Inc
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-12 14:34 UTC

    Suggest a correction

  16. ieixntbg.shop US · AS13335 · Cloudflare, Inc.4 addresses
    ListedCloudflareListed by NPA 165 (finance and insurance)MX absentSPF missingDMARC missingRegistered 59 d ago
    DetailsHide
    Hostname
    ieixntbg.shop
    First seen
    2026-11-12 14:20 UTC
    Listing
    NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 13:39 UTC
    Listed
    NPA 165
    1. Observed in the NPA 165 feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-12 13:19 UTC to 2027-02-10 14:18 UTC
    Logged 2026-11-12 14:19 UTC in DigiCert Wyvern2027h1, entry 513,864,907
    SHA-256 3b2f80aa1929cfb8f8e46d7bed49692d522f9dddebd2b35f67c97f5d6313579f
    Public key SHA-256 3ad54bb0c70cb50f109e424e19d692f544dbc1f09a2ccaaf33289ce6c8fe69a3
    Addresses
    104.21.30.103 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.172.190 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3033::6815:1e67
    2606:4700:3037::ac43:acbe
    Cloudflare
    Cloudflare (104.21.30.103, 172.67.172.190): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    ieixntbg.shop
    Registered
    2026-09-14 · NameSilo
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-12 14:34 UTC

    Suggest a correction

  17. kapitarynvexonai.com US · AS13335 · Cloudflare, Inc.4 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    kapitarynvexonai.com
    First seen
    2026-11-12 14:20 UTC
    Listing
    CERT Polska listed it 2026-07-27 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 12:52 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-12 13:19 UTC to 2027-02-10 14:17 UTC
    Logged 2026-11-12 14:19 UTC in Let's Encrypt Willow2027h1, entry 1,119,541,593
    SHA-256 66c8b2d5cc2e59356d3a69714f760a9d2f8450ae9b4763ae301c4b00be7be166
    Public key SHA-256 b79054983fc4c8b3b92dee43d48cf3d42082a4a1404e05db29721fa84d40ad96
    Addresses
    104.21.58.220 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.209.17 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3030::6815:3adc
    2606:4700:3032::ac43:d111
    Cloudflare
    Cloudflare (104.21.58.220, 172.67.209.17): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    kapitarynvexonai.com
    Registered
    2026-07-17 · Hosting Concepts B.V. d/b/a Registrar.eu
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-12 14:34 UTC

    Suggest a correction

  18. kronex.date US · AS13335 · Cloudflare, Inc.4 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    kronex.date
    First seen
    2026-11-12 14:20 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-12 12:07 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-12 13:18 UTC to 2027-02-10 14:16 UTC
    Logged 2026-11-12 14:18 UTC in DigiCert Sphinx2027h1, entry 456,361,200
    SHA-256 968d8aa72e47300ad172c39274d097aad9f6608deb186831df069ba55f3e5961
    Public key SHA-256 b50868c961b4c6c989fe59fcb19677ee681dffcd9adebd6e2721c18bcd698371
    PhishDestroy
    Addresses
    104.21.61.31 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.205.165 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3031::ac43:cda5
    2606:4700:3032::6815:3d1f
    Cloudflare
    Cloudflare (104.21.61.31, 172.67.205.165): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    kronex.date
    Registered
    2026-07-17 · Ultahost, Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-12 14:25 UTC

    Suggest a correction

  19. kumowallet.net US · AS13335 · Cloudflare, Inc.4 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    kumowallet.net
    First seen
    2026-11-12 14:20 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-12 12:07 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-11-12 13:21 UTC to 2027-02-10 13:21 UTC
    Logged 2026-11-12 14:19 UTC in IPng Networks Halloumi2027h1, entry 471,306,404
    SHA-256 5cb7a378704f67313936b250d1b0a072ff47527e397621d2d1cc230ec57a3f5e
    Public key SHA-256 8ff90886b101be270f16aa126e269b5c7b4ecc0584f81ef515636653d38ed68d
    PhishDestroy
    Addresses
    104.21.78.202 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.137.113 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3030::ac43:8971
    2606:4700:3035::6815:4eca
    Cloudflare
    Cloudflare (104.21.78.202, 172.67.137.113): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    kumowallet.net
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-12 14:25 UTC

    Suggest a correction

  20. taururchl.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 10 mo ago
    DetailsHide
    Hostname
    taururchl.com
    First seen
    2026-11-12 14:20 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 12:11 UTC
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-12 12:07 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1
    Valid 2026-11-12 13:18 UTC to 2027-02-10 14:16 UTC
    Logged 2026-11-12 14:18 UTC in Let's Encrypt Willow2027h1, entry 1,119,538,606
    SHA-256 b46148876b941b71480da052d1335c49ccca59ef27147fb5c217a4b7f9942847
    Public key SHA-256 d126d9ef732e178707d001ea0f39921bcb1b5d4546d0e8b116a3bfab7cfa1963
    Addresses
    104.21.57.100 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.162.239 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.57.100, 172.67.162.239): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    taururchl.com
    Registered
    2026-01-21 · Gname.com Pte. Ltd.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-12 14:25 UTC

    Suggest a correction

  21. vbrsbyc.shop US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by NPA 165 (information services)MX absentSPF missingDMARC missingRegistered 59 d ago
    DetailsHide
    Hostname
    vbrsbyc.shop
    First seen
    2026-11-12 14:20 UTC
    Listing
    NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 13:39 UTC
    Listed
    NPA 165
    1. Observed in the NPA 165 feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-12 13:15 UTC to 2027-02-10 14:13 UTC
    Logged 2026-11-12 14:15 UTC in IPng Networks Halloumi2027h1, entry 471,263,974
    SHA-256 d3dc88eab022e91d22a1c9cbc943c1e606136b63ea5dd9367314e654bc69b153
    Public key SHA-256 fee61683b433254b23cdeac992f4a6e5eff931585be329f24b31d8cad0390249
    Addresses
    104.21.72.95 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.179.200 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.72.95, 172.67.179.200): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    vbrsbyc.shop
    Registered
    2026-09-14 · NameSilo
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-12 14:34 UTC

    Suggest a correction

  22. 324803274832432.sbs US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by USOMMX absentSPF missingDMARC missingRegistered 59 d ago
    DetailsHide
    Hostname
    324803274832432.sbs
    First seen
    2026-11-12 14:15 UTC
    Listing
    USOM listed it 2026-09-14 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 13:33 UTC
    Listed
    USOM
    1. Listed by USOM
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-12 13:16 UTC to 2027-02-10 13:16 UTC
    Logged 2026-11-12 14:14 UTC in Google ParcelYard2027h1, entry 757,010,113
    SHA-256 978c366459db4d80e13a9a9ed2346c30b6671b0e3c31ed9a18b13ce472841bf9
    Public key SHA-256 51297e2092b8c4ebf0a162372dfd22240b4ec4dc44918c41fb978b014274a5ea
    Addresses
    104.21.32.213 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.136.21 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.32.213, 172.67.136.21): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    324803274832432.sbs
    Registered
    2026-09-14 · Dynadot Inc
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-12 14:34 UTC

    Suggest a correction

  23. acaronlinesube.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by USOMMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    acaronlinesube.com
    First seen
    2026-11-12 14:15 UTC
    Listing
    USOM listed it 2026-06-05 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 13:33 UTC
    Listed
    USOM
    1. Listed by USOM
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-12 13:14 UTC to 2027-02-10 13:14 UTC
    Logged 2026-11-12 14:13 UTC in Google PlumbersArms2027h1, entry 757,117,612
    SHA-256 19f4269ce1d606d79017e9cfb6e873b95dc4d35e3663625f6222c06aebb44b0c
    Public key SHA-256 d5cba63e3650b4c9533ad0b393ed331e50875922dbbe3bd9f706d184f70f919f
    Addresses
    104.21.13.94 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.167.236 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.13.94, 172.67.167.236): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    acaronlinesube.com
    Registered
    2026-05-15 · Ultahost, Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-12 14:34 UTC

    Suggest a correction

  24. decrerd.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by NPA 165 (finance and insurance)MX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    decrerd.com
    First seen
    2026-11-12 14:15 UTC
    Listing
    NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 13:39 UTC
    Listed
    NPA 165
    1. Observed in the NPA 165 feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-11-12 13:16 UTC to 2027-02-10 13:16 UTC
    Logged 2026-11-12 14:14 UTC in DigiCert Sphinx2027h1, entry 456,328,418
    SHA-256 066c3162ebb5315a2e6e91151fb6b7b7db95f105ad0c269abc8b568fc03a5085
    Public key SHA-256 4c5fd3f3805b6c9985cef650dd0108084766a44d5eeee6fdb6cd8ab94ab86cdc
    Addresses
    104.21.2.68 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.128.219 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.2.68, 172.67.128.219): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    decrerd.com
    Registered
    2026-05-19 · NameSilo, LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-12 14:35 UTC

    Suggest a correction

  25. early-alt.fun US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    early-alt.fun
    First seen
    2026-11-12 14:15 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 12:11 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-11-12 13:15 UTC to 2027-02-10 13:15 UTC
    Logged 2026-11-12 14:14 UTC in Let's Encrypt Willow2027h1, entry 1,119,478,560
    SHA-256 e13ebf8742085c9aceaf78cbf987663dd68d096f785954bd7b6103fab592cf7b
    Public key SHA-256 d7517cdcb96978e660a3b660ec542ab41b39dcb03c5051465139a47bd5c02e39
    Addresses
    104.21.67.87 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.219.33 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.67.87, 172.67.219.33): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    early-alt.fun
    Registered
    2026-05-19 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-12 14:34 UTC

    Suggest a correction

  26. fantiao2.shop US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by NPA 165 (information services)MX absentSPF missingDMARC missingRegistered 59 d ago
    DetailsHide
    Hostname
    fantiao2.shop
    First seen
    2026-11-12 14:15 UTC
    Listing
    NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 13:39 UTC
    Listed
    NPA 165
    1. Observed in the NPA 165 feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1
    Valid 2026-11-12 13:11 UTC to 2027-02-10 14:09 UTC
    Logged 2026-11-12 14:12 UTC in Google Xenon2027h1, entry 843,130,224
    SHA-256 1a1b5b6e197e544a33ffe79daeb7e092507b921a28363a326f51930143b656ab
    Public key SHA-256 463ebeea3d562cc77b6011ea491075f4b88de2f5229b50607b6c0cc33cafac34
    Addresses
    104.21.81.82 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.140.230 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.81.82, 172.67.140.230): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    fantiao2.shop
    Registered
    2026-09-14 · GoDaddy.com LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-12 14:34 UTC

    Suggest a correction

  27. ouzongjiba.top US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by NPA 165 (information services)MX absentSPF missingDMARC missingRegistered 59 d ago
    DetailsHide
    Hostname
    ouzongjiba.top
    First seen
    2026-11-12 14:15 UTC
    Listing
    NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 13:39 UTC
    Listed
    NPA 165
    1. Observed in the NPA 165 feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-12 13:13 UTC to 2027-02-10 14:12 UTC
    Logged 2026-11-12 14:13 UTC in Geomys Tuscolo2027h1, entry 591,333,898
    SHA-256 25d32b32b07a5e29b2948881745061cfcd6870d82a4687928c69945954503772
    Public key SHA-256 f66f22b776144e58067a90fc3ccc307832f81849373da70ff67a3db306440888
    Addresses
    104.21.42.115 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.161.168 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.42.115, 172.67.161.168): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    ouzongjiba.top
    Registered
    2026-09-14 · NameSilo,LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-12 14:34 UTC

    Suggest a correction

  28. pwalkp.co US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    pwalkp.co
    First seen
    2026-11-12 14:15 UTC
    Listing
    CERT Polska listed it 2026-05-30 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 12:52 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-11-12 13:14 UTC to 2027-02-10 13:14 UTC
    Logged 2026-11-12 14:13 UTC in Google ParcelYard2027h1, entry 756,993,396
    SHA-256 2575f7afbd1304ffe77edc77ccf56ed867b825b811e16550627c73dd9b993491
    Public key SHA-256 c75e86cfb923242ea415056aaaa7a6cdd742de132c1f5ffa5c17326a365c346e
    Addresses
    104.21.14.114 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.202.233 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.14.114, 172.67.202.233): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    pwalkp.co
    Registered
    2026-05-19 · Dynadot Inc
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-12 14:34 UTC

    Suggest a correction

  29. rainbet-casino-ch.net US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    rainbet-casino-ch.net
    First seen
    2026-11-12 14:15 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 12:11 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-12 13:12 UTC to 2027-02-10 14:11 UTC
    Logged 2026-11-12 14:12 UTC in IPng Networks Halloumi2027h1, entry 471,242,642
    SHA-256 605127126ee71a9288def42a829fc7e991e4bd95af6246f88f448d36e3f2d046
    Public key SHA-256 525c80598f5e291f0fa7ead5b454b03dc7693789b10f8f08d314ede1e2d20a01
    Addresses
    104.21.84.147 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.194.43 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.84.147, 172.67.194.43): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    rainbet-casino-ch.net
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-12 14:19 UTC

    Suggest a correction

  30. vortexcapital.shop US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    vortexcapital.shop
    First seen
    2026-11-12 14:15 UTC
    Listing
    CERT Polska listed it 2026-07-23 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 12:52 UTC
    PhishDestroy: first observed in the feed 2026-11-11 · still listed at the last successful feed check 2026-11-12 12:07 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-12 13:14 UTC to 2027-02-10 13:14 UTC
    Logged 2026-11-12 14:13 UTC in Google ParcelYard2027h1, entry 756,994,206
    SHA-256 677a8375e3345807b40f911d79a54022fb8d4ca57e74706daafa05f1e37e1198
    Public key SHA-256 e211e67d0bbbc462a248bc5369a2796ec4ee55f78d3b3b7cafdec2b6fc75e504
    Addresses
    104.21.84.154 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.194.143 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.84.154, 172.67.194.143): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    vortexcapital.shop
    Registered
    2026-05-19 · Spaceship, Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-12 14:34 UTC

    Suggest a correction

  31. 08pump.fun US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 10 mo ago
    DetailsHide
    Hostname
    08pump.fun
    First seen
    2026-11-12 14:10 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-12 12:07 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-12 13:06 UTC to 2027-02-10 14:05 UTC
    Logged 2026-11-12 14:06 UTC in Google ParcelYard2027h1, entry 756,899,298
    SHA-256 d8ef7b2dde18548331c5210533f42afbdbc290c6eee40b80264ee197720da054
    Public key SHA-256 e0d666b892a9a40fb9b178412f3211597af5dd0557adca02932782c9529fdc42
    PhishDestroy
    Addresses
    104.21.63.46 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.143.178 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.63.46, 172.67.143.178): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    08pump.fun
    Registered
    2026-01-20 · NameSilo, LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-12 14:34 UTC

    Suggest a correction

  32. 2us91ol.vip US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 12 mo ago
    DetailsHide
    Hostname
    2us91ol.vip
    First seen
    2026-11-12 14:10 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 12:11 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by Sectigo Public Server Authentication CA DV E36 · precertificate
    Valid 2026-11-12 00:00 UTC to 2027-02-10 14:05 UTC
    Logged 2026-11-12 14:06 UTC in Let's Encrypt Sycamore2027h1, entry 1,165,678,525
    SHA-256 dab2944ff38f3246b00f849c93225d890c77add08b99a4e6ebad6ab554a704ca
    Public key SHA-256 df616a834c3722a908ed3e52f00b58c27f98b2b7ae465fd21a5271946d933663
    Addresses
    104.21.71.119 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.144.205 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.71.119, 172.67.144.205): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    2us91ol.vip
    Registered
    2025-11-23 · Gname.com Pte. Ltd.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-12 14:34 UTC

    Suggest a correction

  33. admin.gwavellc.com US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareUnder gwavellc.com, reported by PhishDestroyMX absentSPF -allDMARC rejectRegistered 7 mo ago
    DetailsHide
    Hostname
    admin.gwavellc.com
    First seen
    2026-11-12 14:10 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-12 12:07 UTC
    Reported
    PhishDestroy, listing gwavellc.com and the names under it
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-12 13:07 UTC to 2027-02-10 14:05 UTC
    Logged 2026-11-12 14:07 UTC in DigiCert Sphinx2027h1, entry 456,254,768
    SHA-256 5ecf006a8afaefbe0ee4768210cdbb243f533168ee4e3c0b1de2bf05e56526b5
    Public key SHA-256 fab214f74ec8b1ff71f5c7718e4ad0dfc8d5d347d983787a6653b65c781b65cf
    PhishDestroy
    Addresses
    104.21.22.4 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.201.172 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.22.4, 172.67.201.172): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    gwavellc.com
    Registered
    2026-05-01 · Squarespace Domains LLC
    MX
    Publishes no mail exchanger
    SPF
    SPF record with -all: other senders fail
    DMARC
    DMARC policy p=reject
    Checked
    2026-11-12 01:57 UTC

    Suggest a correction

  34. assets.pulse.domains US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareUnder pulse.domains, listed by MetaMaskMX presentSPF ~allDMARC policy noneRegistered 4 y ago
    DetailsHide
    Hostname
    assets.pulse.domains
    First seen
    2026-11-12 14:10 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 12:11 UTC
    Listed
    MetaMask, listing pulse.domains and the names under it
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-12 13:08 UTC to 2027-02-10 14:08 UTC
    Logged 2026-11-12 14:08 UTC in Google ParcelYard2027h1, entry 756,924,353
    SHA-256 7986051b9f9e584fee64b9209ea0eacc6b8ecd42ab9feefa8d089bcb10379d5b
    Public key SHA-256 11eede15252973319e32f14707dde36e80fde1c0f5114226e574be665eeb3179
    Addresses
    104.21.92.148 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.195.55 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.92.148, 172.67.195.55): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    pulse.domains
    Registered
    2022-07-25 · NameCheap, Inc.
    MX
    Receives mail at mail.protonmail.ch, mailsec.protonmail.ch, smtp.google.com
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    DMARC policy p=none: reports only
    Checked
    2026-11-12 00:58 UTC

    Suggest a correction

  35. bitstack.click US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    bitstack.click
    First seen
    2026-11-12 14:10 UTC
    Listing
    CERT Polska listed it 2026-09-28 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 12:52 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-11-12 13:09 UTC to 2027-02-10 13:09 UTC
    Logged 2026-11-12 14:08 UTC in Google ParcelYard2027h1, entry 756,923,917
    SHA-256 060d2e9ada6acb975e71d8f72b3cecbac7a42c89aa4596a2a16ea59baadac881
    Public key SHA-256 db2d55a31622363c6d9a620fdb85e3b40fa0c2e9367958d1bf6c1f3114ec84f7
    Addresses
    104.21.43.179 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.182.168 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.43.179, 172.67.182.168): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    bitstack.click
    Registered
    2026-05-19 · Dynadot, LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-12 14:34 UTC

    Suggest a correction

  36. desktop-hub-ledgr.pages.dev US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMask
    DetailsHide
    Hostname
    desktop-hub-ledgr.pages.dev
    First seen
    2026-11-12 14:10 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 12:11 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-12 13:08 UTC to 2027-02-10 14:06 UTC
    Logged 2026-11-12 14:08 UTC in Google ParcelYard2027h1, entry 756,921,547
    SHA-256 97f0ed0bb0976bf47ac5674ca23c42e1e413eab4f90f09b1fca597df2ded0aa1
    Public key SHA-256 38d3509a8a697527e1589390248fd513a935c0b672e306ce30194be90b2f423f
    Addresses
    172.66.44.74 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.66.47.182 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (172.66.44.74, 172.66.47.182): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.

    Suggest a correction

  37. earlscruggs.com US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    earlscruggs.com
    First seen
    2026-11-12 14:10 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-12 12:07 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-11-12 13:07 UTC to 2027-02-10 13:07 UTC
    Logged 2026-11-12 14:06 UTC in IPng Networks Gouda2027h1, entry 394,926,796
    SHA-256 62caa41fd17f55abc93dcfc4dbee1c0067530c586869c117f5c90a0b0acfdf02
    Public key SHA-256 cc87a0cda87c8cc23921279601628d1bf314398d89d00ac094ef31afd76aba3a
    PhishDestroy
    Addresses
    104.21.90.28 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.193.195 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.90.28, 172.67.193.195): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    earlscruggs.com
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-12 14:14 UTC

    Suggest a correction

  38. neonfortune.top US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 8 mo ago
    DetailsHide
    Hostname
    neonfortune.top
    First seen
    2026-11-12 14:10 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-12 12:07 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-11-12 13:08 UTC to 2027-02-10 13:08 UTC
    Logged 2026-11-12 14:07 UTC in Let's Encrypt Sycamore2027h1, entry 1,165,685,210
    SHA-256 633704eeef81ae272b7efa38b552f1a5326fc5f6124ad27e08208b648ab8f954
    Public key SHA-256 2f17ced62909bb433b063c8020100fc5d214d75210eb6527bb540f4881aa3386
    PhishDestroy
    Addresses
    104.21.20.197 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.194.29 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.20.197, 172.67.194.29): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    neonfortune.top
    Registered
    2026-03-20 · Name.com, Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-12 14:34 UTC

    Suggest a correction

  39. privy.true-north.xyz US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareUnder true-north.xyz, reported by PhishDestroyMX presentSPF ~allDMARC missingRegistered 22 mo ago
    DetailsHide
    Hostname
    privy.true-north.xyz
    First seen
    2026-11-12 14:10 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-12 12:07 UTC
    Reported
    PhishDestroy, listing true-north.xyz and the names under it
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR1 · precertificate
    Valid 2026-11-12 13:07 UTC to 2027-02-10 13:07 UTC
    Logged 2026-11-12 14:06 UTC in Let's Encrypt Willow2027h1, entry 1,119,357,421
    SHA-256 1594f913f3e17f28cde30a16a70fcb486ce9f31822c473d11a4ea3a4bd85f29b
    Public key SHA-256 07dee8ca994c0555ed41c28ba963e89bd72549cae4061b81d1a6ec8cc9362663
    PhishDestroy
    Addresses
    104.18.24.69 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    104.18.25.69 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.18.24.69, 104.18.25.69): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    true-north.xyz
    Registered
    2025-01-09 · GoDaddy.com, LLC
    MX
    Receives mail at aspmx.l.google.com, alt1.aspmx.l.google.com, alt2.aspmx.l.google.com
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-12 07:59 UTC

    Suggest a correction

  40. www.gununhaberleri.online US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareUnder gununhaberleri.online, listed by USOMMX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    www.gununhaberleri.online
    First seen
    2026-11-12 14:10 UTC
    Listing
    USOM listed it 2026-10-12 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 13:33 UTC
    Listed
    USOM, listing gununhaberleri.online and the names under it
    1. Listed by USOM
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-11-12 13:09 UTC to 2027-02-10 13:09 UTC
    Logged 2026-11-12 14:08 UTC in Google ParcelYard2027h1, entry 756,919,997
    SHA-256 01f9ee111c07b0067c3fa8ac94c0cbb0aeac948f06a28195ed852bda1caf339e
    Public key SHA-256 8d2f87d6e5ea884226e6431f22fa4e4dec378c4ad2b42def92a040fec7f9e213
    Addresses
    104.21.34.247 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.166.163 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.34.247, 172.67.166.163): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    gununhaberleri.online
    Registered
    2026-07-26 · Porkbun LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-12 14:34 UTC

    Suggest a correction

  41. zephwrap.site US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    zephwrap.site
    First seen
    2026-11-12 14:10 UTC
    Listing
    CERT Polska listed it 2026-07-29 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 12:52 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-12 13:05 UTC to 2027-02-10 14:04 UTC
    Logged 2026-11-12 14:05 UTC in Google ParcelYard2027h1, entry 756,877,665
    SHA-256 d28c78987ffea698c45a003b767c4c56cda8eb0fc234f1700bd8ebca1a510fc5
    Public key SHA-256 889bbf90e95b28d49b5d0fcc4329ec313af670d5df1216eab0470695479a4a76
    Addresses
    104.21.73.151 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.190.83 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.73.151, 172.67.190.83): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    zephwrap.site
    Registered
    2026-07-17 · NameCheap, Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-12 14:34 UTC

    Suggest a correction

  42. aifpleasurebeh.org US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    aifpleasurebeh.org
    First seen
    2026-11-12 14:05 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-12 12:07 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-11-12 13:05 UTC to 2027-02-10 13:05 UTC
    Logged 2026-11-12 14:03 UTC in Google ParcelYard2027h1, entry 756,847,495
    SHA-256 b0906150f5b14bef9f06aea939779920066c616ec0e35c70cfe01007788e69e6
    Public key SHA-256 99a1c0648413afdb86603b7b963cad6635d686e7e5a7915487b8b33756da0cbb
    PhishDestroy
    Addresses
    104.21.16.29 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.166.12 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.16.29, 172.67.166.12): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    aifpleasurebeh.org
    Registered
    2026-05-19 · NameCheap, Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-12 14:09 UTC

    Suggest a correction

  43. beneficmapance.capital US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    beneficmapance.capital
    First seen
    2026-11-12 14:05 UTC
    Listing
    CERT Polska listed it 2026-08-09 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 12:52 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-11-12 13:03 UTC to 2027-02-10 13:03 UTC
    Logged 2026-11-12 14:02 UTC in Google ParcelYard2027h1, entry 756,821,552
    SHA-256 18bf6b34e3585e2c024b5bf588f17cfbba9bf405f311529d1c44573396800cf0
    Public key SHA-256 c7e98b6dcf2e7664a3726b5ce10975aabf3463b6b5afbeefbcf99c280ea6c650
    Addresses
    104.21.93.135 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.210.49 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.93.135, 172.67.210.49): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    beneficmapance.capital
    Registered
    2026-05-19 · Dynadot Inc
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-12 14:34 UTC

    Suggest a correction

  44. diufyew.monster US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by NPA 165 (information services)MX absentSPF missingDMARC missingRegistered 59 d ago
    DetailsHide
    Hostname
    diufyew.monster
    First seen
    2026-11-12 14:05 UTC
    Listing
    NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 13:39 UTC
    Listed
    NPA 165
    1. Observed in the NPA 165 feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-11-12 13:02 UTC to 2027-02-10 13:02 UTC
    Logged 2026-11-12 14:01 UTC in IPng Networks Gouda2027h1, entry 394,884,805
    SHA-256 b74b310dd52eff83489cbb0b1023ff1098750bc8be443f08512b4ef65c233ff4
    Public key SHA-256 868551450cbff3c6838e4491c883efea01052deb61c92feac172302c7f93eec3
    Addresses
    104.21.54.75 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.136.100 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.54.75, 172.67.136.100): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    diufyew.monster
    Registered
    2026-09-14 · GoDaddy.com, LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-12 14:34 UTC

    Suggest a correction

  45. fcvpy.asia US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by NPA 165 (e-commerce)MX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    fcvpy.asia
    First seen
    2026-11-12 14:05 UTC
    Listing
    NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 13:39 UTC
    Listed
    NPA 165
    1. Observed in the NPA 165 feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-11-12 13:04 UTC to 2027-02-10 13:04 UTC
    Logged 2026-11-12 14:03 UTC in Let's Encrypt Sycamore2027h1, entry 1,165,628,440
    SHA-256 57f16578f3e78b25ffcca164521cc3111fd57bf74399cb1ad632e852c514d9af
    Public key SHA-256 5a572f6360cc363e3c4f46183f8992691aef3fd5883b80e9fb224c4739892b5a
    Addresses
    104.21.45.33 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.208.91 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.45.33, 172.67.208.91): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    fcvpy.asia
    Registered
    2026-05-19 · Alibaba Cloud Computing Ltd. d/b/a HiChina (www.net.cn)
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-12 14:34 UTC

    Suggest a correction

  46. ghaph.com US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 4 y ago
    DetailsHide
    Hostname
    ghaph.com
    First seen
    2026-11-12 14:05 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-12 12:07 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-12 13:00 UTC to 2027-02-10 13:59 UTC
    Logged 2026-11-12 14:00 UTC in Geomys Tuscolo2027h1, entry 591,193,306
    SHA-256 a0f347985d074368552cdbc9e84ea098b4b7c170c72be2f7ca106c77ebc04348
    Public key SHA-256 3d16243a1514a5675820c8196ceda94fd839f0d477ce444685d68c5e02765a4b
    PhishDestroy
    Addresses
    104.21.14.179 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.160.31 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.14.179, 172.67.160.31): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    ghaph.com
    Registered
    2022-06-08 · NameCheap, Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-12 14:09 UTC

    Suggest a correction

  47. id8464837627.click US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 8 mo ago
    DetailsHide
    Hostname
    id8464837627.click
    First seen
    2026-11-12 14:05 UTC
    Listing
    CERT Polska listed it 2026-09-11 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 12:52 UTC
    PhishDestroy: first observed in the feed 2026-10-30 · still listed at the last successful feed check 2026-11-12 12:07 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-12 13:01 UTC to 2027-02-10 13:01 UTC
    Logged 2026-11-12 14:00 UTC in Google ParcelYard2027h1, entry 756,786,654
    SHA-256 078531f8420b4b9551a4dae2d43af5f2c02a0065f44150a45e1d59a8d0f36872
    Public key SHA-256 b733c1593c52f81a0a184573136478649105fb227c42fd564fe6f94893ac966f
    Addresses
    104.21.68.63 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.191.36 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.68.63, 172.67.191.36): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    id8464837627.click
    Registered
    2026-03-21 · NameSilo, LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-12 14:34 UTC

    Suggest a correction

  48. justokredowia.org US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    justokredowia.org
    First seen
    2026-11-12 14:05 UTC
    Listing
    CERT Polska listed it 2026-09-15 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 12:52 UTC
    PhishDestroy: first observed in the feed 2026-10-31 · still listed at the last successful feed check 2026-11-12 12:07 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-12 13:02 UTC to 2027-02-10 14:01 UTC
    Logged 2026-11-12 14:02 UTC in Let's Encrypt Sycamore2027h1, entry 1,165,621,396
    SHA-256 5785d5ef0b807355b1912bbb4f93a89629b8f1419c661f380a658608c4ad6f35
    Public key SHA-256 87a6e7e9d83ed49a8c1edccf37f24ac6d8fb8fe5ecd492e1d6eee54ef2751645
    Addresses
    104.21.70.229 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.140.43 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.70.229, 172.67.140.43): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    justokredowia.org
    Registered
    2026-07-17 · Dynadot Inc
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-12 14:34 UTC

    Suggest a correction

  49. lkbbrbaea.shop US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by NPA 165 (finance and insurance)MX absentSPF missingDMARC missingRegistered 59 d ago
    DetailsHide
    Hostname
    lkbbrbaea.shop
    First seen
    2026-11-12 14:05 UTC
    Listing
    NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 13:39 UTC
    Listed
    NPA 165
    1. Observed in the NPA 165 feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-11-12 13:04 UTC to 2027-02-10 13:04 UTC
    Logged 2026-11-12 14:03 UTC in IPng Networks Halloumi2027h1, entry 471,134,411
    SHA-256 1c982a99b94dfd5dcdc8d9555bebb8f46ccbdfcdc1377cd49a6e4c10b78d05fe
    Public key SHA-256 cb91a42b2f8bce86dc6510e0826f39e4576b79251743eaca140bae802386fccd
    Addresses
    104.21.28.249 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.171.50 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.28.249, 172.67.171.50): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    lkbbrbaea.shop
    Registered
    2026-09-14 · NameSilo
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-12 14:34 UTC

    Suggest a correction

  50. mcp.keeperhub.com US · AS13335 · Cloudflare, Inc.3 addresses
    ReportedCloudflareUnder keeperhub.com, reported by PhishDestroyMX presentSPF -allDMARC rejectRegistered 9 y ago
    DetailsHide
    Hostname
    mcp.keeperhub.com
    First seen
    2026-11-12 14:05 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-12 12:07 UTC
    Reported
    PhishDestroy, listing keeperhub.com and the names under it
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR2 · precertificate
    Valid 2026-11-12 13:06 UTC to 2027-02-10 13:06 UTC
    Logged 2026-11-12 14:04 UTC in Let's Encrypt Willow2027h1, entry 1,119,331,015
    SHA-256 269c522b58dc592bb704a713d172c437f152981e4d65a2a5766c0f06b667f4ac
    Public key SHA-256 a72198f9b1898e136a4c554329e9260a6ef699ef46852e66edc75c9d3399671d
    PhishDestroy
    Addresses
    104.26.12.47 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    104.26.13.47 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.74.127 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.26.12.47, 104.26.13.47, 172.67.74.127): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    keeperhub.com
    Registered
    2017-07-28 · Cloudflare, Inc.
    MX
    Receives mail at aspmx.l.google.com, alt1.aspmx.l.google.com, alt2.aspmx.l.google.com
    SPF
    SPF record with -all: other senders fail
    DMARC
    DMARC policy p=reject
    Checked
    2026-11-12 09:06 UTC

    Suggest a correction

  51. myship711-dsbt-tw.shop US · AS13335 · Cloudflare, Inc.4 addresses7-ELEVEN Taiwan
    ListedCloudflareListed by NPA 165 (transport and delivery)MX absentSPF missingDMARC missingRegistered 8 mo ago
    DetailsHide
    Hostname
    myship711-dsbt-tw.shop
    First seen
    2026-11-12 14:05 UTC
    Listing
    NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 13:39 UTC
    Listed
    NPA 165
    1. Observed in the NPA 165 feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-11-12 13:04 UTC to 2027-02-10 13:04 UTC
    Logged 2026-11-12 14:03 UTC in Google PlumbersArms2027h1, entry 756,996,541
    SHA-256 75b55bfcb96c8672e9781d4389670a8cd87865e97dcafc5fe3522dadcea05c3f
    Public key SHA-256 964050f7d7e1ad85f1a823f580337ea09fb44c47ebe3fcc6f40474c036245029
    Brand
    7-ELEVEN Taiwan
    Addresses
    104.21.59.101 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.174.196 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3036::ac43:aec4
    2606:4700:3037::6815:3b65
    Cloudflare
    Cloudflare (104.21.59.101, 172.67.174.196): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    myship711-dsbt-tw.shop
    Registered
    2026-03-21 · GNAME.COM PTE. LTD.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-12 14:09 UTC

    Suggest a correction

  52. riofg.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    riofg.com
    First seen
    2026-11-12 14:05 UTC
    Listing
    CERT Polska listed it 2026-05-20 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 12:52 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-11-12 13:05 UTC to 2027-02-10 13:05 UTC
    Logged 2026-11-12 14:04 UTC in Google PlumbersArms2027h1, entry 757,010,566
    SHA-256 6d2b220d9858334a2a553e1b60b9f62b5e09b8af51bb35c41d6d9c2f20f78814
    Public key SHA-256 df43c12a8181d1e85cde0e57aee107aaf3e9be1d01ea9d9c49637cf93cf28e05
    Addresses
    104.21.6.30 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.154.156 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.6.30, 172.67.154.156): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    riofg.com
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-12 14:09 UTC

    Suggest a correction

  53. trust-to-ols.pages.dev US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMask
    DetailsHide
    Hostname
    trust-to-ols.pages.dev
    First seen
    2026-11-12 14:05 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-28 · still listed at the last successful feed check 2026-11-12 12:11 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-12 13:01 UTC to 2027-02-10 13:57 UTC
    Logged 2026-11-12 14:01 UTC in Geomys Tuscolo2027h1, entry 591,204,851
    SHA-256 fcf67bebe695c58d6e826e5d47980bbad1696bd45d5afbdc3f1d2f18deacd687
    Public key SHA-256 ac142fc1cdd38ae41aff0731c67a7d4dc30d1173ada8baa6874ee89deec11bc0
    Addresses
    172.66.44.164 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.66.47.92 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (172.66.44.164, 172.66.47.92): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.

    Suggest a correction

  54. yuubb.art US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by NPA 165 (finance and insurance)MX absentSPF missingDMARC quarantineRegistered 10 mo ago
    DetailsHide
    Hostname
    yuubb.art
    First seen
    2026-11-12 14:05 UTC
    Listing
    NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 13:39 UTC
    Listed
    NPA 165
    1. Observed in the NPA 165 feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-12 13:02 UTC to 2027-02-10 14:01 UTC
    Logged 2026-11-12 14:02 UTC in DigiCert Sphinx2027h1, entry 456,200,613
    SHA-256 25a551240a87abf2596005e26f28b44a814d37ad7fa935db5fc0057f4d81594a
    Public key SHA-256 3c0fed875f7fe64fd64418395d67185ffcf7f00f9bcc4ec2bac6e64650dc003f
    Addresses
    104.21.42.2 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.154.89 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.42.2, 172.67.154.89): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    yuubb.art
    Registered
    2026-01-14 · GoDaddy.com, LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    DMARC policy p=quarantine
    Checked
    2026-11-12 14:34 UTC

    Suggest a correction

  55. aml-servicecheck.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    aml-servicecheck.com
    First seen
    2026-11-12 14:00 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 12:11 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-11-12 13:00 UTC to 2027-02-10 12:59 UTC
    Logged 2026-11-12 13:58 UTC in Google ParcelYard2027h1, entry 756,761,099
    SHA-256 293b15a3bd249864eb4d635bc74ef2c6558b74fa8d370964142fec987723b570
    Public key SHA-256 3e9d9a6c62893760589b0816fb81d32d2cb204508dd0b895baf89482e2f5add8
    Addresses
    104.21.11.81 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.165.170 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.11.81, 172.67.165.170): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    aml-servicecheck.com
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-12 14:04 UTC

    Suggest a correction

  56. anyiner.com US · AS13335 · Cloudflare, Inc.2 addressesYahoo! JAPAN
    ListedCloudflareListed by JPCERT/CC as imitating Yahoo! JAPANMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    anyiner.com
    First seen
    2026-11-12 14:00 UTC
    Listing
    JPCERT/CC confirmed it 2026-06-26 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 14:17 UTC
    Listed
    JPCERT/CC
    1. Confirmed by JPCERT/CC
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-11-12 12:58 UTC to 2027-02-10 12:58 UTC
    Logged 2026-11-12 13:56 UTC in Geomys Tuscolo2027h1, entry 591,160,396
    SHA-256 5cef64180179dabe56e776db946bf529d6cbe6936fe9923fa1875f2b1b3b1311
    Public key SHA-256 1de2426b384031712a9249252d349a2a332062548485a6448c847f229ff35073
    Brand
    Yahoo! JAPAN
    Addresses
    104.21.2.179 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.129.134 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.2.179, 172.67.129.134): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    anyiner.com
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-12 14:04 UTC

    Suggest a correction

  57. clrvbe.top US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by NPA 165 (finance and insurance)MX absentSPF missingDMARC missingRegistered 59 d ago
    DetailsHide
    Hostname
    clrvbe.top
    First seen
    2026-11-12 14:00 UTC
    Listing
    NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 13:39 UTC
    Listed
    NPA 165
    1. Observed in the NPA 165 feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-11-12 12:57 UTC to 2027-02-10 12:57 UTC
    Logged 2026-11-12 13:56 UTC in DigiCert Wyvern2027h1, entry 513,617,303
    SHA-256 a90eef677f45756ea85c5c1328f1ebc60c0ede767cc7c4aed6b69b79424191d9
    Public key SHA-256 3c09618edc4c9cc7d907c08da63a164dc91ba23b97187386f75fdd12f7784f63
    Addresses
    104.21.66.22 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.155.81 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.66.22, 172.67.155.81): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    clrvbe.top
    Registered
    2026-09-14 · NameSilo,LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-12 14:34 UTC

    Suggest a correction

  58. nfcyga.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by NPA 165 (finance and insurance)MX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    nfcyga.com
    First seen
    2026-11-12 14:00 UTC
    Listing
    NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 13:39 UTC
    Listed
    NPA 165
    1. Observed in the NPA 165 feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1
    Valid 2026-10-10 09:22 UTC to 2027-01-08 10:22 UTC
    Logged 2026-11-12 13:59 UTC in DigiCert Wyvern2027h1, entry 513,641,286
    SHA-256 606c1d55c9b89666ec410d47b92af41949676ae8690d5008354d30af34794ce9
    Public key SHA-256 9f09a841868281e427b383775c44cce49807f0114caa9622f8adad69ccff1994
    Addresses
    104.21.22.125 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.205.7 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.22.125, 172.67.205.7): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    nfcyga.com
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-12 14:04 UTC

    Suggest a correction

  59. plasfield.info US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    plasfield.info
    First seen
    2026-11-12 14:00 UTC
    Listing
    CERT Polska listed it 2026-09-07 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 12:52 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-12 12:57 UTC to 2027-02-10 13:55 UTC
    Logged 2026-11-12 13:57 UTC in Google PlumbersArms2027h1, entry 756,900,351
    SHA-256 c77ba10125c4b7f279907593a3d63858160e2c89030d63d279dbbe1dabed3733
    Public key SHA-256 5fd16dbcc84310120b962cd52d1afb5840f93ff3019a79b1d6684741c3f8cac0
    Addresses
    104.21.31.242 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.180.246 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.31.242, 172.67.180.246): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    plasfield.info
    Registered
    2026-07-17 · NameCheap, Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-12 14:35 UTC

    Suggest a correction

  60. plpefgirferer.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    plpefgirferer.com
    First seen
    2026-11-12 14:00 UTC
    Listing
    CERT Polska listed it 2026-05-19 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 12:52 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-12 13:00 UTC to 2027-02-10 13:00 UTC
    Logged 2026-11-12 13:58 UTC in Google ParcelYard2027h1, entry 756,766,929
    SHA-256 94e9fe60408597829ece5515aeb79c10dc5f784fbfdeeef08b728a89d54b4828
    Public key SHA-256 3a20f6385c5450e06ca342a3bead77deb93de48d743a73c0a2d11b69bbb167a1
    Addresses
    104.21.52.177 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.202.89 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.52.177, 172.67.202.89): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    plpefgirferer.com
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-12 14:04 UTC

    Suggest a correction

  61. plpefgirfereri.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    plpefgirfereri.com
    First seen
    2026-11-12 14:00 UTC
    Listing
    CERT Polska listed it 2026-05-19 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 12:52 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-12 12:59 UTC to 2027-02-10 12:59 UTC
    Logged 2026-11-12 13:57 UTC in Google ParcelYard2027h1, entry 756,751,066
    SHA-256 21134641f8fde4ce3ccacea0a0a6dda7dbb9ac28db6ea9b3855a2bfae3dbc0e9
    Public key SHA-256 b365a3f70f62dda77eeffd983460828075ce71878877fd1efcdf0fb375169b08
    Addresses
    104.21.19.165 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.186.249 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.19.165, 172.67.186.249): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    plpefgirfereri.com
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-12 14:04 UTC

    Suggest a correction

  62. tevecvjqpk.help US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    tevecvjqpk.help
    First seen
    2026-11-12 14:00 UTC
    Listing
    CERT Polska listed it 2026-07-20 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 12:52 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-11-12 12:59 UTC to 2027-02-10 12:59 UTC
    Logged 2026-11-12 13:57 UTC in IPng Networks Gouda2027h1, entry 394,863,913
    SHA-256 517d674f8ca2c4ddb27210e697f150ded054d6173197481bb121793bc21cd3a2
    Public key SHA-256 07be1c8a6c3ece0b1f430ca2459392eb8c6bc01e02dba0bf0a827b208f2bf995
    Addresses
    104.21.22.4 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.201.172 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.22.4, 172.67.201.172): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    tevecvjqpk.help
    Registered
    2026-05-18 · Chengdu West Dimension Digital Technology Co., Ltd.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-12 14:34 UTC

    Suggest a correction

  63. trustbank.club US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 8 mo ago
    DetailsHide
    Hostname
    trustbank.club
    First seen
    2026-11-12 14:00 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-12 12:07 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-12 13:01 UTC to 2027-02-10 13:01 UTC
    Logged 2026-11-12 13:59 UTC in Google PlumbersArms2027h1, entry 756,935,884
    SHA-256 e37359aae39d1d38f3623cea461be4614e6c9403dc67fc3a4655de5a39e7b0d3
    Public key SHA-256 b8793e6cf17e230367d10a31201584f3d5be7863b66384febdd39b261a882fd8
    PhishDestroy
    Addresses
    104.21.8.99 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.130.109 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.8.99, 172.67.130.109): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    trustbank.club
    Registered
    2026-03-20 · Global Domain Group LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-12 14:04 UTC

    Suggest a correction

  64. uchgz.beer US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by NPA 165 (information services)MX absentSPF missingDMARC missingRegistered 7 mo ago
    DetailsHide
    Hostname
    uchgz.beer
    First seen
    2026-11-12 14:00 UTC
    Listing
    NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 13:39 UTC
    Listed
    NPA 165
    1. Observed in the NPA 165 feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by Cloudflare TLS Issuing ECC CA 4 · precertificate
    Valid 2026-11-12 13:49 UTC to 2027-02-10 13:58 UTC
    Logged 2026-11-12 13:59 UTC in IPng Networks Gouda2027h1, entry 394,871,549
    SHA-256 3d2cb20bb521cf33f3e1a8e378998bad9554bddb56f3df8f5eb8b39a2aeb2b07
    Public key SHA-256 ae4335c0bf341520270b7cc57bb2733ed781d6a1f944250e222734abdd99e21b
    Addresses
    104.21.58.116 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.159.104 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.58.116, 172.67.159.104): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    uchgz.beer
    Registered
    2026-04-12 · Alibaba Cloud Computing Ltd. d/b/a HiChina (www.net.cn)
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-12 14:34 UTC

    Suggest a correction

  65. wvvw-ledgar.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    wvvw-ledgar.com
    First seen
    2026-11-12 14:00 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 12:11 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-11-12 13:01 UTC to 2027-02-10 13:01 UTC
    Logged 2026-11-12 13:59 UTC in IPng Networks Halloumi2027h1, entry 471,094,258
    SHA-256 6b77b3fba9e37f771824b6669f58c67eaf971d93bdbeb1c89ebb991cc580e857
    Public key SHA-256 e42e666cc6c9787c09971ab23e0464fd89f4c9d8a261b00f6675858e0b37cceb
    Addresses
    104.21.8.121 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.139.111 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.8.121, 172.67.139.111): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    wvvw-ledgar.com
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-12 14:04 UTC

    Suggest a correction

  66. allneedsmarket.shop US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX presentSPF ~allDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    allneedsmarket.shop
    First seen
    2026-11-12 13:56 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-12 12:07 UTC
    USOM listed it 2026-07-29 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 13:33 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-12 12:51 UTC to 2027-02-10 13:49 UTC
    Logged 2026-11-12 13:51 UTC in Let's Encrypt Willow2027h1, entry 1,119,196,563
    SHA-256 1795ed73d51033b347e4c0768f6a186b802168d863be0844628f6135e4494eb5
    Public key SHA-256 148ec4d09aeb702681972d0d68178adeeee45bd477d161c4054f964988237f00
    PhishDestroy
    Addresses
    104.21.56.182 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.155.70 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.56.182, 172.67.155.70): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    allneedsmarket.shop
    Registered
    2026-07-17 · Sav.com, LLC
    MX
    Receives mail at route1.mx.cloudflare.net, route2.mx.cloudflare.net, route3.mx.cloudflare.net
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-12 14:34 UTC

    Suggest a correction

  67. bountymiining.com US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    bountymiining.com
    First seen
    2026-11-12 13:56 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-12 12:07 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-12 12:53 UTC to 2027-02-10 12:53 UTC
    Logged 2026-11-12 13:51 UTC in Google ParcelYard2027h1, entry 756,667,472
    SHA-256 e7ca11c5eb6db2c2250ef56a559542faf7c3759953784f7da444cb60b1ba1ba9
    Public key SHA-256 fba9448c792b466806affbea5e4aecad0506fbc24e847ae3ffe1efc4b779949c
    PhishDestroy
    Addresses
    104.21.73.11 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.136.235 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.73.11, 172.67.136.235): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    bountymiining.com
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-12 13:59 UTC

    Suggest a correction

  68. dreamshopglobalmall.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by NPA 165 (e-commerce)MX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    dreamshopglobalmall.com
    First seen
    2026-11-12 13:56 UTC
    Listing
    NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 13:39 UTC
    Listed
    NPA 165
    1. Observed in the NPA 165 feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-11-12 12:54 UTC to 2027-02-10 12:54 UTC
    Logged 2026-11-12 13:53 UTC in Google ParcelYard2027h1, entry 756,682,902
    SHA-256 08135737ecb64e276ede8717b30a8bf899c3b0ec456f52361da7e426a781a339
    Public key SHA-256 b38896aeac1bef2bfb03b151debdedd02beed0886261b86b51429b861c35f7a2
    Addresses
    104.21.56.147 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.152.187 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.56.147, 172.67.152.187): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    dreamshopglobalmall.com
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-12 13:59 UTC

    Suggest a correction

  69. en-app-ledgrlive.pages.dev US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMask
    DetailsHide
    Hostname
    en-app-ledgrlive.pages.dev
    First seen
    2026-11-12 13:56 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 12:11 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-12 12:55 UTC to 2027-02-10 13:53 UTC
    Logged 2026-11-12 13:55 UTC in Geomys Tuscolo2027h1, entry 591,147,447
    SHA-256 f149db58087e262ecf0bbd1f934683c3e488ea9f95674a5d3dab89a31316698c
    Public key SHA-256 a901f283c96fd3e0ebe701df449685a8b823d1cfc644416c1711a53267fa5813
    Addresses
    172.66.44.192 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.66.47.64 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (172.66.44.192, 172.66.47.64): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.

    Suggest a correction

  70. jamslots-casino.net US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX presentSPF ~allDMARC missing
    DetailsHide
    Hostname
    jamslots-casino.net
    First seen
    2026-11-12 13:56 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-12 12:07 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-12 12:51 UTC to 2027-02-10 13:51 UTC
    Logged 2026-11-12 13:51 UTC in DigiCert Sphinx2027h1, entry 456,113,255
    SHA-256 14baec58e0640655c1365cdf82bde88745f96af66788cf54f4e8c2b336c77b13
    Public key SHA-256 5ace6662740c88d1cb3af427b9a07a734e6157dad632927c709fb65dc444f62b
    PhishDestroy
    Addresses
    104.21.13.141 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.132.227 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.13.141, 172.67.132.227): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    jamslots-casino.net
    MX
    Receives mail at route3.mx.cloudflare.net, route1.mx.cloudflare.net, route2.mx.cloudflare.net
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-12 13:59 UTC

    Suggest a correction

  71. krab14cc.com US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    krab14cc.com
    First seen
    2026-11-12 13:56 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-12 12:07 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1
    Valid 2026-10-21 09:42 UTC to 2027-01-19 10:42 UTC
    Logged 2026-11-12 13:55 UTC in DigiCert Wyvern2027h1, entry 513,609,661
    SHA-256 1d5947ddbead77dfe1a4111c762f3177ad6c85745cae09d10a144943e389d5da
    Public key SHA-256 7998d2e12fc6a208cf48317fd8b6f87d281f66b03992638d07f75e0884664075
    PhishDestroy
    Addresses
    104.21.61.55 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.206.128 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.61.55, 172.67.206.128): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    krab14cc.com
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-12 13:59 UTC

    Suggest a correction

  72. mycsfail.com US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX presentSPF missingDMARC missingRegistered 18 mo ago
    DetailsHide
    Hostname
    mycsfail.com
    First seen
    2026-11-12 13:56 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-12 12:07 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-12 12:51 UTC to 2027-02-10 13:50 UTC
    Logged 2026-11-12 13:51 UTC in DigiCert Sphinx2027h1, entry 456,112,976
    SHA-256 d1dc62d912f102573e5acd8bddeee017792729fabd19390e29ae4a8b80308ec1
    Public key SHA-256 405ff2cf9ec9503cc8c0e3a0f185bbe2c136f05f0e2ae584830c0a56ce80cad0
    PhishDestroy
    Addresses
    104.21.22.29 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.202.48 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.22.29, 172.67.202.48): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    mycsfail.com
    Registered
    2025-05-28 · NameCheap, Inc.
    MX
    Receives mail at _dc-mx.7f53ea6c200b.mycsfail.com
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-12 13:59 UTC

    Suggest a correction

  73. satinalsepetimodeme.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by USOMMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    satinalsepetimodeme.com
    First seen
    2026-11-12 13:56 UTC
    Listing
    USOM listed it 2026-05-19 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 13:33 UTC
    Listed
    USOM
    1. Listed by USOM
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-11-12 12:52 UTC to 2027-02-10 12:52 UTC
    Logged 2026-11-12 13:51 UTC in Geomys Tuscolo2027h1, entry 591,113,686
    SHA-256 6436ce234f09b9b6e598332c8ae4eb94cce28c46d1f354d48b83278c8df4546f
    Public key SHA-256 2e5757582c68ef0033aef413c5b172eb6edded6a319aef58b696903533669912
    Addresses
    104.21.53.104 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.212.2 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.53.104, 172.67.212.2): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    satinalsepetimodeme.com
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-12 13:59 UTC

    Suggest a correction

  74. status-id9273.eu.cc US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT Polska
    DetailsHide
    Hostname
    status-id9273.eu.cc
    First seen
    2026-11-12 13:56 UTC
    Listing
    CERT Polska listed it 2026-09-14 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 12:52 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-12 12:54 UTC to 2027-02-10 13:53 UTC
    Logged 2026-11-12 13:54 UTC in Google ParcelYard2027h1, entry 756,703,193
    SHA-256 75c7730d99c13ae4a2cc870f66a7d0b15de08c01315775bcfd7ff8d9fc95fbd9
    Public key SHA-256 de6d76aab39086ede13b7e199a0183ebc7130f3fb1f16d22f40083c977644723
    Addresses
    104.21.0.114 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.150.234 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.0.114, 172.67.150.234): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.

    Suggest a correction

  75. yigaxa.digital US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    yigaxa.digital
    First seen
    2026-11-12 13:56 UTC
    Listing
    CERT Polska listed it 2026-10-22 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 12:52 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-11-12 12:55 UTC to 2027-02-10 12:55 UTC
    Logged 2026-11-12 13:54 UTC in Google PlumbersArms2027h1, entry 756,855,637
    SHA-256 5374d9660d97c9599440c822d5fff361273fb27df3e700604aef397b0b156764
    Public key SHA-256 6ff456d261b1b2bbee5685d13beb6a693a27e2bd9a24d730a715e6d916975d00
    Addresses
    104.21.90.94 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.155.106 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.90.94, 172.67.155.106): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    yigaxa.digital
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-12 13:59 UTC

    Suggest a correction

  76. agileodyssey.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by NPA 165 (finance and insurance)MX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    agileodyssey.com
    First seen
    2026-11-12 13:51 UTC
    Listing
    NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 13:39 UTC
    Listed
    NPA 165
    1. Observed in the NPA 165 feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-12 12:49 UTC to 2027-02-10 13:48 UTC
    Logged 2026-11-12 13:49 UTC in Let's Encrypt Sycamore2027h1, entry 1,165,499,282
    SHA-256 f2a2c9821b7206cf275ac4733703ffd63a49a6787bdf845824855f159b0ef2a9
    Public key SHA-256 fbe3b7d02af072442558a40b0cb63f7e33574d14041464143b28535c7a2b3cd0
    Addresses
    104.21.88.121 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.178.181 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.88.121, 172.67.178.181): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    agileodyssey.com
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-12 13:54 UTC

    Suggest a correction

  77. basis-invionpro-com.pages.dev US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT Polska
    DetailsHide
    Hostname
    basis-invionpro-com.pages.dev
    First seen
    2026-11-12 13:51 UTC
    Listing
    CERT Polska listed it 2026-09-17 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 12:52 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by Cloudflare TLS Issuing ECC CA 4 · precertificate
    Valid 2026-11-12 13:40 UTC to 2027-02-10 13:49 UTC
    Logged 2026-11-12 13:50 UTC in DigiCert Wyvern2027h1, entry 513,572,398
    SHA-256 5c5b72e45f173dd96d220eb27dc92afeadccb691ad2521ad45e6c8398dbd3db1
    Public key SHA-256 e75eed7a820fc64e3c4611aa688583f720202cfd96377e0577091230ac91e913
    Addresses
    172.66.45.6 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.66.46.250 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (172.66.45.6, 172.66.46.250): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.

    Suggest a correction

  78. bep20-defi.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by NPA 165 (finance and insurance)MX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    bep20-defi.com
    First seen
    2026-11-12 13:51 UTC
    Listing
    NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 13:39 UTC
    Listed
    NPA 165
    1. Observed in the NPA 165 feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by Cloudflare TLS Issuing ECC CA 4 · precertificate
    Valid 2026-11-12 13:40 UTC to 2027-02-10 13:49 UTC
    Logged 2026-11-12 13:50 UTC in DigiCert Wyvern2027h1, entry 513,573,033
    SHA-256 08ca6963e0e0df8d79acab63530891b0423045032b985b4c22c6ad77fe91b4d0
    Public key SHA-256 16513cfc9f36253ebd7c18c37db2978f1940f016ed54ecabf296b0a5dd6f3579
    Addresses
    104.21.41.85 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.163.67 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.41.85, 172.67.163.67): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    bep20-defi.com
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-12 13:54 UTC

    Suggest a correction

  79. com-edge-api-gateway-service-gateway.pro US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    com-edge-api-gateway-service-gateway.pro
    First seen
    2026-11-12 13:51 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-12 12:07 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-12 12:48 UTC to 2027-02-10 13:46 UTC
    Logged 2026-11-12 13:48 UTC in Google PlumbersArms2027h1, entry 756,776,780
    SHA-256 42d66fa57ed5573510931cef0855c97bc2753101fa2def35af6f60de077eed51
    Public key SHA-256 ee25976625ca937f8745fbecef82e5876d04e9db9535b6ee53cccf61300af937
    PhishDestroy
    Addresses
    104.21.96.15 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.171.246 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.96.15, 172.67.171.246): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    com-edge-api-gateway-service-gateway.pro
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-12 13:54 UTC

    Suggest a correction

  80. darkweb101.com US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX presentSPF ~allDMARC missing
    DetailsHide
    Hostname
    darkweb101.com
    First seen
    2026-11-12 13:51 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-12 12:07 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-12 12:47 UTC to 2027-02-10 13:45 UTC
    Logged 2026-11-12 13:47 UTC in Google ParcelYard2027h1, entry 756,607,633
    SHA-256 4ffaee6e8a4c71412c22bf003fa0aba726de3abc1d9192f8515b76e0729630ff
    Public key SHA-256 01b793953ba235b51bbed3556ed6c10002e899b908070f6151ef6389960a001d
    PhishDestroy
    Addresses
    104.21.85.112 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.204.211 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.85.112, 172.67.204.211): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    darkweb101.com
    MX
    Receives mail at route2.mx.cloudflare.net, route1.mx.cloudflare.net, route3.mx.cloudflare.net
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-12 13:54 UTC

    Suggest a correction

  81. ethgasfoundation.info US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    ethgasfoundation.info
    First seen
    2026-11-12 13:51 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-12 12:07 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-12 12:46 UTC to 2027-02-10 13:45 UTC
    Logged 2026-11-12 13:46 UTC in DigiCert Wyvern2027h1, entry 513,534,194
    SHA-256 7d3725b6c650662bfb54e812bf6b1d51d5ec0f5a001614b07407750a55ffded3
    Public key SHA-256 a226ebdee9eff7e51be1d4eb5e92b90a074917fd5caec17a63418b9f8ab9dbe8
    PhishDestroy
    Addresses
    104.21.89.40 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.156.86 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.89.40, 172.67.156.86): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    ethgasfoundation.info
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-12 13:54 UTC

    Suggest a correction

  82. grafana.odin.tools US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareUnder odin.tools, reported by PhishDestroyMX absentSPF -allDMARC rejectRegistered 23 mo ago
    DetailsHide
    Hostname
    grafana.odin.tools
    First seen
    2026-11-12 13:51 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-12 12:07 UTC
    Reported
    PhishDestroy, listing odin.tools and the names under it
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-12 12:46 UTC to 2027-02-10 13:46 UTC
    Logged 2026-11-12 13:46 UTC in Geomys Tuscolo2027h1, entry 591,075,676
    SHA-256 60f236ec0c4fb7daba59cd4ba6cb0bc089e7f35eeb3218c3343ef600e7292b25
    Public key SHA-256 fa3cbe52a73818b065d7a861aa3b3b677a28a1d97f82b46fdbfce51a40367a65
    PhishDestroy
    Addresses
    104.21.27.119 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.169.68 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.27.119, 172.67.169.68): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    odin.tools
    Registered
    2024-12-17 · NameCheap, Inc.
    MX
    Publishes no mail exchanger
    SPF
    SPF record with -all: other senders fail
    DMARC
    DMARC policy p=reject
    Checked
    2026-11-12 08:27 UTC

    Suggest a correction

  83. io-faget-trust.pages.dev US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMask
    DetailsHide
    Hostname
    io-faget-trust.pages.dev
    First seen
    2026-11-12 13:51 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 12:11 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-12 12:49 UTC to 2027-02-10 13:48 UTC
    Logged 2026-11-12 13:49 UTC in Let's Encrypt Sycamore2027h1, entry 1,165,497,519
    SHA-256 69eb449f8d7a5eb8ec62e1b0de3be5f2fd48ebef27cde929926d9de64ad08710
    Public key SHA-256 f4fb8db28646c12870fa218981f365d26cbd3b59c403130cfe2c1d0955c96627
    Addresses
    172.66.45.6 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.66.46.250 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (172.66.45.6, 172.66.46.250): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.

    Suggest a correction

  84. mnduaod.shop US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by NPA 165 (e-commerce)MX absentSPF missingDMARC missingRegistered 11 mo ago
    DetailsHide
    Hostname
    mnduaod.shop
    First seen
    2026-11-12 13:51 UTC
    Listing
    NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 13:39 UTC
    Listed
    NPA 165
    1. Observed in the NPA 165 feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by Cloudflare TLS Issuing ECC CA 4 · precertificate
    Valid 2026-11-12 13:35 UTC to 2027-02-10 13:44 UTC
    Logged 2026-11-12 13:45 UTC in DigiCert Wyvern2027h1, entry 513,527,508
    SHA-256 c534a54d7e2ceb0e88ede07d47ce1e37b7e77f2498c1226a717c47e67ef75a5a
    Public key SHA-256 c3c2fca2c893c7d82ff9392de487b11b54f1a628defa18c82b3503fbcd192cf9
    Addresses
    104.21.36.221 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.200.3 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.36.221, 172.67.200.3): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    mnduaod.shop
    Registered
    2025-12-19 · GoDaddy.com LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-12 14:34 UTC

    Suggest a correction

  85. rewards-dexscreener.com US · AS13335 · Cloudflare, Inc.4 addressesDEX Screener
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    rewards-dexscreener.com
    First seen
    2026-11-12 13:51 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 12:11 UTC
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-12 12:07 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WR1 · precertificate
    Valid 2026-11-12 12:49 UTC to 2027-02-10 13:46 UTC
    Logged 2026-11-12 13:49 UTC in DigiCert Wyvern2027h1, entry 513,569,065
    SHA-256 d199c936c623af78e78a2670f534f572a569741fa4a02f98483c0d297841c8ed
    Public key SHA-256 669b85e204e914fa3edf2a192e6a70d4d76ffd73c0d9a59d1a717a5637b9c016
    Brand
    DEX Screener
    Addresses
    104.21.54.10 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.222.49 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3033::6815:360a
    2606:4700:3036::ac43:de31
    Cloudflare
    Cloudflare (104.21.54.10, 172.67.222.49): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    rewards-dexscreener.com
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-12 13:54 UTC

    Suggest a correction

  86. telerosstu.help US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 59 d ago
    DetailsHide
    Hostname
    telerosstu.help
    First seen
    2026-11-12 13:51 UTC
    Listing
    CERT Polska listed it 2026-09-18 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 12:52 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-11-12 12:52 UTC to 2027-02-10 12:52 UTC
    Logged 2026-11-12 13:50 UTC in DigiCert Sphinx2027h1, entry 456,106,945
    SHA-256 57559ab5eb35d32bf6a7fb6675d8508424e7f7c7a982576b3e309cb44fcd73f5
    Public key SHA-256 1e305bf19cf13a4a0ba39064da0e42d6ff6b58eb0b5089e41c7517d798a5a557
    Addresses
    104.21.5.50 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.132.251 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.5.50, 172.67.132.251): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    telerosstu.help
    Registered
    2026-09-14 · Chengdu West Dimension Digital Technology Co., Ltd.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-12 14:34 UTC

    Suggest a correction

  87. tereqozmrc.ink US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 7 mo ago
    DetailsHide
    Hostname
    tereqozmrc.ink
    First seen
    2026-11-12 13:51 UTC
    Listing
    CERT Polska listed it 2026-06-29 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 12:52 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-12 12:48 UTC to 2027-02-10 13:46 UTC
    Logged 2026-11-12 13:48 UTC in Google ParcelYard2027h1, entry 756,620,568
    SHA-256 52e6cb22575b1cf89f10958ac7dd1db42f5fc4b69a50d9a5067a02b7d7d27230
    Public key SHA-256 b533167ff40d93f05272a31ff7a3f0dbd10c899529ebf6867ae6931cf3a7cf3a
    Addresses
    104.21.33.187 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.191.66 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.33.187, 172.67.191.66): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    tereqozmrc.ink
    Registered
    2026-05-01 · Chengdu West Dimension Digital Technology Co., Ltd.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-12 14:34 UTC

    Suggest a correction

  88. traizor-suite-apps-cdn.pages.dev US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMask
    DetailsHide
    Hostname
    traizor-suite-apps-cdn.pages.dev
    First seen
    2026-11-12 13:51 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 12:11 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-12 12:49 UTC to 2027-02-10 13:48 UTC
    Logged 2026-11-12 13:49 UTC in DigiCert Wyvern2027h1, entry 513,569,027
    SHA-256 d1d866aecb232fd0a3c8acaef539a8a62015fe5cbce3f8727fa23e014fe0bef9
    Public key SHA-256 33380f7d87d82369a2dfb9d6783139675f198c56bc0a99ae00400d2201d2679c
    Addresses
    172.66.45.22 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.66.46.234 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (172.66.45.22, 172.66.46.234): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.

    Suggest a correction

  89. waverlyshopping.online US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by NPA 165 (e-commerce)MX absentSPF missingDMARC quarantineRegistered 7 mo ago
    DetailsHide
    Hostname
    waverlyshopping.online
    First seen
    2026-11-12 13:51 UTC
    Listing
    NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 13:39 UTC
    Listed
    NPA 165
    1. Observed in the NPA 165 feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by Cloudflare TLS Issuing ECC CA 4 · precertificate
    Valid 2026-11-12 13:39 UTC to 2027-02-10 13:48 UTC
    Logged 2026-11-12 13:49 UTC in DigiCert Wyvern2027h1, entry 513,565,327
    SHA-256 3914d27292a731323665f9ba7c5b2cfe9bae6709057a54fbfa46d99deaa8e2e3
    Public key SHA-256 3bf872963824e7d226b91a2c204667cb9dfd173f4923ddb234993c3f0e6661f3
    Addresses
    104.21.19.157 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.186.241 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.19.157, 172.67.186.241): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    waverlyshopping.online
    Registered
    2026-04-28 · GoDaddy.com, LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    DMARC policy p=quarantine
    Checked
    2026-11-12 14:34 UTC

    Suggest a correction

  90. anymeai.com US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX presentSPF ~allDMARC missing
    DetailsHide
    Hostname
    anymeai.com
    First seen
    2026-11-12 13:46 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-12 12:07 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by Cloudflare TLS Issuing ECC CA 4 · precertificate
    Valid 2026-11-12 13:35 UTC to 2027-02-10 13:42 UTC
    Logged 2026-11-12 13:45 UTC in Google ParcelYard2027h1, entry 756,572,656
    SHA-256 a32bc9ef1fa1203cb0f73308db968802a841be36e802ae52cefa84dcf8998f21
    Public key SHA-256 892d858f13b99bb40fe60667a9eb5acb0b1295bbca8014d21a3b21adb1521713
    PhishDestroy
    Addresses
    104.21.35.5 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.210.114 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.35.5, 172.67.210.114): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    anymeai.com
    MX
    Receives mail at route3.mx.cloudflare.net, route1.mx.cloudflare.net, route2.mx.cloudflare.net
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-12 13:48 UTC

    Suggest a correction

  91. app-iopn.xyz US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 9 mo ago
    DetailsHide
    Hostname
    app-iopn.xyz
    First seen
    2026-11-12 13:46 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-12 12:07 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by Cloudflare TLS Issuing ECC CA 4 · precertificate
    Valid 2026-11-12 13:34 UTC to 2027-02-10 13:43 UTC
    Logged 2026-11-12 13:44 UTC in DigiCert Wyvern2027h1, entry 513,510,520
    SHA-256 24863ab272c94d0b2b223fd75dc72ba1dc98265a8406cef2359dd10dc7fc702d
    Public key SHA-256 833897311430e661473c91434b02c7ac849a2ddf0a1f460356c15e60ebfd5232
    PhishDestroy
    Addresses
    104.21.60.126 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.196.158 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.60.126, 172.67.196.158): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    app-iopn.xyz
    Registered
    2026-03-02 · Dynadot Inc
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-12 14:34 UTC

    Suggest a correction

  92. awssjkokf.shop US · AS13335 · Cloudflare, Inc.
    ListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 59 d ago
    DetailsHide
    Hostname
    awssjkokf.shop
    First seen
    2026-11-12 13:46 UTC
    Listing
    CERT Polska listed it 2026-09-15 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 12:52 UTC
    Listed
    CERT Polska
    1. Listed by CERT Polska
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WR1 · precertificate
    Valid 2026-11-12 12:42 UTC to 2027-02-10 13:40 UTC
    Logged 2026-11-12 13:42 UTC in IPng Networks Halloumi2027h1, entry 470,928,127
    SHA-256 8d58011f1839f8a88e6a7f3c3d73f8c7f942ce1475024024a7928be69d53df53
    Public key SHA-256 e11c1f54fc298b9d9ef6f72a87cfa93bcf530ca3e7dde82441684b2bd4d588d6
    Addresses
    104.17.177.238 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.17.177.238): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    awssjkokf.shop
    Registered
    2026-09-14 · ALIBABA.COM SINGAPORE E-COMMERCE PRIVATE LIMITED
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-12 10:32 UTC

    Suggest a correction

  93. bmdie.shop US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by NPA 165 (finance and insurance)MX absentSPF missingDMARC missingRegistered 59 d ago
    DetailsHide
    Hostname
    bmdie.shop
    First seen
    2026-11-12 13:46 UTC
    Listing
    NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 13:39 UTC
    Listed
    NPA 165
    1. Observed in the NPA 165 feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-11-12 12:44 UTC to 2027-02-10 12:44 UTC
    Logged 2026-11-12 13:42 UTC in Geomys Tuscolo2027h1, entry 591,031,085
    SHA-256 3e30874891a134fdeb951a7eb1c7dacbb735125ad1a4ee7faf67414ecb38f3dc
    Public key SHA-256 b2e9f1d159cc2cbdff7cadbb2391c00f5a1697537237f6558248a81a6b9d4378
    Addresses
    104.21.70.90 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.222.44 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.70.90, 172.67.222.44): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    bmdie.shop
    Registered
    2026-09-14 · NameSilo
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-12 14:34 UTC

    Suggest a correction

  94. nbaggni.shop US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by NPA 165 (information services)MX absentSPF missingDMARC missingRegistered 59 d ago
    DetailsHide
    Hostname
    nbaggni.shop
    First seen
    2026-11-12 13:46 UTC
    Listing
    NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 13:39 UTC
    Listed
    NPA 165
    1. Observed in the NPA 165 feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-11-12 12:45 UTC to 2027-02-10 12:45 UTC
    Logged 2026-11-12 13:44 UTC in Let's Encrypt Sycamore2027h1, entry 1,165,424,386
    SHA-256 92128f0e79a233f2e11e1ca9b0b9b31ecccbf0a7e868363defc03e33536cdd7a
    Public key SHA-256 946f1f658a006386b1f95483a2e9cf737d49be959413955e7581e1c5f7769396
    Addresses
    104.21.95.63 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.143.91 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.95.63, 172.67.143.91): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    nbaggni.shop
    Registered
    2026-09-14 · NameSilo
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-12 14:34 UTC

    Suggest a correction

  95. nriaglul.shop US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by NPA 165 (information services)MX absentSPF missingDMARC missingRegistered 59 d ago
    DetailsHide
    Hostname
    nriaglul.shop
    First seen
    2026-11-12 13:46 UTC
    Listing
    NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 13:39 UTC
    Listed
    NPA 165
    1. Observed in the NPA 165 feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-11-12 12:42 UTC to 2027-02-10 12:42 UTC
    Logged 2026-11-12 13:41 UTC in Let's Encrypt Willow2027h1, entry 1,119,062,247
    SHA-256 b0b8af5b5b9e120d616d8e85f0677bf8d9f602aaf6e1a619a94b9ba391bbbfb1
    Public key SHA-256 7bef7a44622068dd2e996905eaa0b0dc2f2a33b75ae93b05b878782f5652de18
    Addresses
    104.21.46.138 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.139.47 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.46.138, 172.67.139.47): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    nriaglul.shop
    Registered
    2026-09-14 · NameSilo
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-12 14:34 UTC

    Suggest a correction

  96. ofjewjf.monster US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by NPA 165 (information services)MX absentSPF missingDMARC missingRegistered 59 d ago
    DetailsHide
    Hostname
    ofjewjf.monster
    First seen
    2026-11-12 13:46 UTC
    Listing
    NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 13:39 UTC
    Listed
    NPA 165
    1. Observed in the NPA 165 feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-12 12:40 UTC to 2027-02-10 13:39 UTC
    Logged 2026-11-12 13:40 UTC in Google PlumbersArms2027h1, entry 756,665,731
    SHA-256 2d2d50a30b265041f3b80cec654d7d477e28a81d5bf9f9e18039def334f0bd36
    Public key SHA-256 f8e637d3a514205bac3e5d8a54a2d3576d20b81ddba2d3140eb352c8dd61b426
    Addresses
    104.21.14.9 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.133.172 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.14.9, 172.67.133.172): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    ofjewjf.monster
    Registered
    2026-09-14 · GoDaddy.com, LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-12 14:34 UTC

    Suggest a correction

  97. pegas.live US · AS13335 · Cloudflare, Inc.2 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    pegas.live
    First seen
    2026-11-12 13:46 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-12 12:07 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-12 12:44 UTC to 2027-02-10 13:43 UTC
    Logged 2026-11-12 13:45 UTC in Let's Encrypt Willow2027h1, entry 1,119,120,228
    SHA-256 fe18646ffb672cea48454362780015c2f29213c461315caee37a87b59297102b
    Public key SHA-256 cf56a6aa3dc89cc4f0cfe64b326d95542b9c867404146907716849db6b728166
    PhishDestroy
    Addresses
    104.21.90.68 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.196.16 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.90.68, 172.67.196.16): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    pegas.live
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-12 13:48 UTC

    Suggest a correction

  98. rmyship7-1-1-twkrbmd.shop US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by NPA 165 (transport and delivery)MX absentSPF missingDMARC missingRegistered 7 mo ago
    DetailsHide
    Hostname
    rmyship7-1-1-twkrbmd.shop
    First seen
    2026-11-12 13:46 UTC
    Listing
    NPA 165: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 13:39 UTC
    Listed
    NPA 165
    1. Observed in the NPA 165 feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by Cloudflare TLS Issuing ECC CA 4 · precertificate
    Valid 2026-11-12 13:32 UTC to 2027-02-10 13:41 UTC
    Logged 2026-11-12 13:42 UTC in DigiCert Wyvern2027h1, entry 513,482,529
    SHA-256 4c4ae108a60d85d37400f9ba56ca121ab0935f1446c3b47507d7bc8768f32e3d
    Public key SHA-256 27e82bcd9fff4614738a5d6678f0802e8f8680fcc42b93ab55248bf182bcc21e
    Addresses
    104.21.82.210 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.206.110 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.82.210, 172.67.206.110): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    rmyship7-1-1-twkrbmd.shop
    Registered
    2026-04-24 · GNAME.COM PTE. LTD.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-12 14:35 UTC

    Suggest a correction

  99. usb-ledgery.pages.dev US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMask
    DetailsHide
    Hostname
    usb-ledgery.pages.dev
    First seen
    2026-11-12 13:46 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 12:11 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-12 12:44 UTC to 2027-02-10 13:42 UTC
    Logged 2026-11-12 13:44 UTC in IPng Networks Halloumi2027h1, entry 470,953,154
    SHA-256 f2bc352007f7be05d83e61caa1b8ed36dcf88c01dee25ef7a7f1a5438168b7ea
    Public key SHA-256 d62a9c73abf02cd423efed40a7bbb12a6a52c575fc4941657758bcacbad6c623
    Addresses
    172.66.44.90 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.66.47.166 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (172.66.44.90, 172.66.47.166): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.

    Suggest a correction

  100. wlltttt----ledgrrr----liive.pages.dev US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMask
    DetailsHide
    Hostname
    wlltttt----ledgrrr----liive.pages.dev
    First seen
    2026-11-12 13:46 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-12 12:11 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-12 12:43 UTC to 2027-02-10 13:41 UTC
    Logged 2026-11-12 13:43 UTC in Geomys Tuscolo2027h1, entry 591,035,455
    SHA-256 1fc08c3b33c053acfa12d4fa36e42f2aee166e75a303e88dc02c5bca01524af6
    Public key SHA-256 eb4965e98d9ab488a603f31c27ad95107553529dbe1730d86c5382ea688237de
    Addresses
    172.66.44.168 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.66.47.88 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (172.66.44.168, 172.66.47.88): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.

    Suggest a correction

Showing 1–100 of 3,003 hostnames.
How these findings are made

Brand spoofs: findings that impersonate one of the 1,000 most-impersonated brands. The list opens on them; All shows every finding.

Reported: a hostname in a new certificate that PhishTank or PhishDestroy reports, or that CERT Polska, MetaMask, USOM, MODA, NPA 165, JPCERT/CC, the AMF, the FSMA or BaFin lists. When a listing source names the brand imitated or a category, the finding shows it. Phishing host: a brand lookalike that resolves to an address which hosted confirmed phishing in the last 48 hours. Spamhaus DROP: a brand lookalike that resolves to an address on the Spamhaus DROP list. Same certificate: another name on a finding's certificate that resolves to an address on Spamhaus DROP. Suspicious: other names on a finding's certificate, rated high for a hosting-alias name or a lookalike on a phishing host, medium for a lookalike; they join the findings once they have listing evidence of their own. Also under Suspicious: registered domains using a brand’s name that PhishDestroy’s community list includes, rated high when they resolve to an address with no parking or holding signal, medium otherwise.

Brand labels cover the 1,000 most-impersonated brands. A name gets a brand when the brand's token starts a label or follows a hyphen, with a lure word such as "login" or "verify" for common words. Hostnames appear as plain text. How it works · Sources