{"meta":{"generator":"domainspoof.org","feed":"listed-names","documentation":"https://domainspoof.org/feeds","explanation":"Hostnames whose resolved address was on an IP list approved for display, with the first and latest time the address was found there. Each row is a dated fact about an address, not a verdict about the name: listed addresses are mostly shared or compromised hosting, and a name on one may be unrelated, legitimate or registered defensively.","units":"One row is one hostname x address x list. Rows are ordered by their latest change (expiry, else last match), newest first; `since` selects rows changed at or after that time. Dates are ISO 8601 UTC.","kinds":{"generated_spelling":"Generated spelling","certificate_name":"Certificate name","feed_host":"Feed host"},"dateBasis":{"firstMatchedAt":"first collector run that found the address on the list","lastMatchedAt":"latest collector run that found it there (re-stamped on every run while it stays listed)","expiredAt":"run that found the address gone from the list, or the DNS observation older than 48 hours","dnsObservedAt":"DNS observation (our own resolver) that carried the address when the row was last matched"},"publication":"Only lists approved for public display and, for feed hosts, only hosts with a published finding backed by an approved source. Lists are shown as membership facts with attribution and never redistributed.","caveats":["A row means: this name resolved to this address, and the address was on the named list at the stated times. Nothing more.","An IP listing alone cannot establish who controls the hostname or whether it hosts phishing; many listed addresses carry dozens of unrelated names.","Generated spellings are names DomainSpoof looks for, not reports: a spelling that exists may be unrelated, legitimate or a defensive registration by the brand.","Certificate names are registrable domains whose certificate in a public certificate-transparency log carries a brand token; a certificate is not a report, and the name may be unrelated or legitimate. Addresses shared by more than 25 such domains (parking, shared hosting) are left out.","Feed hosts carry the attribution of the approved source that reported them; the report is the source's claim, dated separately.","An expired row is history: the address left the list, or the DNS observation aged out of the 48-hour window. Expiry is not resolution.","Lists are shown as membership facts with attribution; the lists themselves are never redistributed."],"parameters":{"list":"list id (default domainspoof_phish_hosts; \"all\" for every list approved for display)","since":"ISO 8601 time: rows changed (matched or expired) at or after it","kind":"generated_spelling | certificate_name | feed_host | all (default all)","state":"active | expired | all (default all)","limit":"rows per page (default 100, max 500)","cursor":"opaque, from the previous page's nextCursor","format":"json (default) | ndjson (one row per line; the next cursor comes in the X-Next-Cursor and Link headers)"}},"query":{"list":"domainspoof_phish_hosts","since":null,"limit":100,"kind":"all","state":"all"},"omittedUnlisted":0,"rows":[{"kind":"generated_spelling","kindLabel":"Generated spelling","statement":"abmamro.nl (a generated spelling) resolved to 54.38.220.85, an address that was on \"Confirmed phishing host address (DomainSpoof, 48 hours)\" from 2026-10-19T16:18:18.404Z to 2026-10-20T00:25:51.901Z and was still on it at the latest check. This is a fact about the address, not a verdict about the name.","hostname":"abmamro.nl","hostnameUnicode":"abmamro.nl","registrableDomain":"abmamro.nl","organization":{"id":"org_abnamro","slug":"abn-amro","displayName":"ABN AMRO","url":"https://domainspoof.org/companies/abn-amro"},"otherOrganizations":[],"address":"54.38.220.85","list":{"id":"domainspoof_phish_hosts","name":"Confirmed phishing host address (DomainSpoof, 48 hours)","category":"phishing_hosting"},"firstMatchedAt":"2026-10-19T16:18:18.404Z","lastMatchedAt":"2026-10-20T00:25:51.901Z","expiredAt":null,"expired":false,"updatedAt":"2026-10-20T00:25:51.901Z","dnsObservedAt":"2026-10-19T10:46:18.979Z","dns":{"status":"ok","checkedAt":"2026-10-19T10:46:18.979Z"},"mail":{"checkedAt":"2026-10-19T05:52:57.450Z","hasMx":false,"spf":false,"dmarc":false,"mx":[],"provider":null,"providerClass":null,"providerHost":null,"sendsVia":[],"spfAll":null,"dmarcPolicy":null,"lookupStatus":"ok","listed":null},"spelling":{"kind":"adjacent_key","generatedFrom":"abnamro.nl"},"certificate":null,"feedHost":null},{"kind":"generated_spelling","kindLabel":"Generated spelling","statement":"abnaamro.com (a generated spelling) resolved to 185.244.151.84, an address that was on \"Confirmed phishing host address (DomainSpoof, 48 hours)\" from 2026-10-19T15:34:32.792Z to 2026-10-20T00:25:51.901Z and was still on it at the latest check. This is a fact about the address, not a verdict about the name.","hostname":"abnaamro.com","hostnameUnicode":"abnaamro.com","registrableDomain":"abnaamro.com","organization":{"id":"org_abnamro","slug":"abn-amro","displayName":"ABN AMRO","url":"https://domainspoof.org/companies/abn-amro"},"otherOrganizations":[],"address":"185.244.151.84","list":{"id":"domainspoof_phish_hosts","name":"Confirmed phishing host address (DomainSpoof, 48 hours)","category":"phishing_hosting"},"firstMatchedAt":"2026-10-19T15:34:32.792Z","lastMatchedAt":"2026-10-20T00:25:51.901Z","expiredAt":null,"expired":false,"updatedAt":"2026-10-20T00:25:51.901Z","dnsObservedAt":"2026-10-19T10:46:18.877Z","dns":{"status":"ok","checkedAt":"2026-10-19T10:46:18.877Z"},"mail":{"checkedAt":"2026-10-19T10:42:54.693Z","hasMx":true,"spf":true,"dmarc":true,"mx":["abnaamro.com"],"provider":"abnaamro.com","providerClass":null,"providerHost":"abnaamro.com","sendsVia":[],"spfAll":"~","dmarcPolicy":"none","lookupStatus":"ok","listed":{"checkedAt":"2026-10-19T10:42:54.693Z","lists":[],"mx":[],"spf":[]}},"spelling":{"kind":"repetition","generatedFrom":"abnamro.com"},"certificate":null,"feedHost":null},{"kind":"generated_spelling","kindLabel":"Generated spelling","statement":"abnamrosecure.com (a generated spelling) resolved to 102.203.116.14, an address that was on \"Confirmed phishing host address (DomainSpoof, 48 hours)\" from 2026-10-19T15:34:32.792Z to 2026-10-20T00:25:51.901Z and was still on it at the latest check. This is a fact about the address, not a verdict about the name.","hostname":"abnamrosecure.com","hostnameUnicode":"abnamrosecure.com","registrableDomain":"abnamrosecure.com","organization":{"id":"org_abnamro","slug":"abn-amro","displayName":"ABN AMRO","url":"https://domainspoof.org/companies/abn-amro"},"otherOrganizations":[],"address":"102.203.116.14","list":{"id":"domainspoof_phish_hosts","name":"Confirmed phishing host address (DomainSpoof, 48 hours)","category":"phishing_hosting"},"firstMatchedAt":"2026-10-19T15:34:32.792Z","lastMatchedAt":"2026-10-20T00:25:51.901Z","expiredAt":null,"expired":false,"updatedAt":"2026-10-20T00:25:51.901Z","dnsObservedAt":"2026-10-19T10:46:18.932Z","dns":{"status":"ok","checkedAt":"2026-10-19T10:46:18.932Z"},"mail":{"checkedAt":"2026-10-19T10:42:54.693Z","hasMx":true,"spf":true,"dmarc":true,"mx":["abnamrosecure.com"],"provider":"abnamrosecure.com","providerClass":null,"providerHost":"abnamrosecure.com","sendsVia":[{"host":"_spf.truehostcloud.com","name":"_spf.truehostcloud.com","cls":null,"via":"include"}],"spfAll":"~","dmarcPolicy":"quarantine","lookupStatus":"ok","listed":{"checkedAt":"2026-10-19T10:42:54.693Z","lists":[],"mx":[],"spf":[]}},"spelling":{"kind":"insertion","generatedFrom":"abnamro.com"},"certificate":null,"feedHost":null},{"kind":"generated_spelling","kindLabel":"Generated spelling","statement":"ansa.africa (a generated spelling) resolved to 69.46.46.64, an address that was on \"Confirmed phishing host address (DomainSpoof, 48 hours)\" from 2026-10-19T15:34:32.792Z to 2026-10-20T00:25:51.901Z and was still on it at the latest check. This is a fact about the address, not a verdict about the name.","hostname":"ansa.africa","hostnameUnicode":"ansa.africa","registrableDomain":"ansa.africa","organization":{"id":"org_absa","slug":"absa","displayName":"Absa","url":"https://domainspoof.org/companies/absa"},"otherOrganizations":[],"address":"69.46.46.64","list":{"id":"domainspoof_phish_hosts","name":"Confirmed phishing host address (DomainSpoof, 48 hours)","category":"phishing_hosting"},"firstMatchedAt":"2026-10-19T15:34:32.792Z","lastMatchedAt":"2026-10-20T00:25:51.901Z","expiredAt":null,"expired":false,"updatedAt":"2026-10-20T00:25:51.901Z","dnsObservedAt":"2026-10-19T10:47:01.141Z","dns":{"status":"ok","checkedAt":"2026-10-19T10:47:01.141Z"},"mail":{"checkedAt":"2026-10-19T10:42:54.693Z","hasMx":true,"spf":false,"dmarc":true,"mx":["smtp.google.com"],"provider":"Google","providerClass":"consumer","providerHost":"smtp.google.com","sendsVia":[],"spfAll":null,"dmarcPolicy":"none","lookupStatus":"ok","listed":{"checkedAt":"2026-10-19T10:42:54.693Z","lists":[],"mx":[],"spf":[]}},"spelling":{"kind":"adjacent_key","generatedFrom":"absa.africa"},"certificate":null,"feedHost":null},{"kind":"generated_spelling","kindLabel":"Generated spelling","statement":"biannce.com (a generated spelling) resolved to 132.226.59.218, an address that was on \"Confirmed phishing host address (DomainSpoof, 48 hours)\" from 2026-10-19T15:34:32.792Z to 2026-10-20T00:25:51.901Z and was still on it at the latest check. This is a fact about the address, not a verdict about the name.","hostname":"biannce.com","hostnameUnicode":"biannce.com","registrableDomain":"biannce.com","organization":{"id":"org_binance","slug":"binance","displayName":"Binance","url":"https://domainspoof.org/companies/binance"},"otherOrganizations":[],"address":"132.226.59.218","list":{"id":"domainspoof_phish_hosts","name":"Confirmed phishing host address (DomainSpoof, 48 hours)","category":"phishing_hosting"},"firstMatchedAt":"2026-10-19T15:34:32.792Z","lastMatchedAt":"2026-10-20T00:25:51.901Z","expiredAt":null,"expired":false,"updatedAt":"2026-10-20T00:25:51.901Z","dnsObservedAt":"2026-10-19T10:48:09.842Z","dns":{"status":"ok","checkedAt":"2026-10-19T10:48:09.842Z"},"mail":{"checkedAt":"2026-10-19T05:52:57.418Z","hasMx":false,"spf":false,"dmarc":false,"mx":[],"provider":null,"providerClass":null,"providerHost":null,"sendsVia":[],"spfAll":null,"dmarcPolicy":null,"lookupStatus":"ok","listed":null},"spelling":{"kind":"transposition","generatedFrom":"binance.com"},"certificate":null,"feedHost":null},{"kind":"generated_spelling","kindLabel":"Generated spelling","statement":"biinance.com (a generated spelling) resolved to 137.131.40.164, an address that was on \"Confirmed phishing host address (DomainSpoof, 48 hours)\" from 2026-10-19T15:34:32.792Z to 2026-10-20T00:25:51.901Z and was still on it at the latest check. This is a fact about the address, not a verdict about the name.","hostname":"biinance.com","hostnameUnicode":"biinance.com","registrableDomain":"biinance.com","organization":{"id":"org_binance","slug":"binance","displayName":"Binance","url":"https://domainspoof.org/companies/binance"},"otherOrganizations":[],"address":"137.131.40.164","list":{"id":"domainspoof_phish_hosts","name":"Confirmed phishing host address (DomainSpoof, 48 hours)","category":"phishing_hosting"},"firstMatchedAt":"2026-10-19T15:34:32.792Z","lastMatchedAt":"2026-10-20T00:25:51.901Z","expiredAt":null,"expired":false,"updatedAt":"2026-10-20T00:25:51.901Z","dnsObservedAt":"2026-10-19T10:48:11.432Z","dns":{"status":"ok","checkedAt":"2026-10-19T10:48:11.432Z"},"mail":{"checkedAt":"2026-10-19T05:52:57.418Z","hasMx":false,"spf":false,"dmarc":false,"mx":[],"provider":null,"providerClass":null,"providerHost":null,"sendsVia":[],"spfAll":null,"dmarcPolicy":null,"lookupStatus":"ok","listed":null},"spelling":{"kind":"repetition","generatedFrom":"binance.com"},"certificate":null,"feedHost":null},{"kind":"generated_spelling","kindLabel":"Generated spelling","statement":"bimance.com (a generated spelling) resolved to 132.226.59.218, an address that was on \"Confirmed phishing host address (DomainSpoof, 48 hours)\" from 2026-10-19T15:34:32.792Z to 2026-10-20T00:25:51.901Z and was still on it at the latest check. This is a fact about the address, not a verdict about the name.","hostname":"bimance.com","hostnameUnicode":"bimance.com","registrableDomain":"bimance.com","organization":{"id":"org_binance","slug":"binance","displayName":"Binance","url":"https://domainspoof.org/companies/binance"},"otherOrganizations":[],"address":"132.226.59.218","list":{"id":"domainspoof_phish_hosts","name":"Confirmed phishing host address (DomainSpoof, 48 hours)","category":"phishing_hosting"},"firstMatchedAt":"2026-10-19T15:34:32.792Z","lastMatchedAt":"2026-10-20T00:25:51.901Z","expiredAt":null,"expired":false,"updatedAt":"2026-10-20T00:25:51.901Z","dnsObservedAt":"2026-10-19T10:48:11.151Z","dns":{"status":"ok","checkedAt":"2026-10-19T10:48:11.151Z"},"mail":{"checkedAt":"2026-10-19T05:52:57.418Z","hasMx":false,"spf":false,"dmarc":false,"mx":[],"provider":null,"providerClass":null,"providerHost":null,"sendsVia":[],"spfAll":null,"dmarcPolicy":null,"lookupStatus":"ok","listed":null},"spelling":{"kind":"adjacent_key","generatedFrom":"binance.com"},"certificate":null,"feedHost":null},{"kind":"generated_spelling","kindLabel":"Generated spelling","statement":"binaance.com (a generated spelling) resolved to 137.131.40.164, an address that was on \"Confirmed phishing host address (DomainSpoof, 48 hours)\" from 2026-10-19T15:34:32.792Z to 2026-10-20T00:25:51.901Z and was still on it at the latest check. This is a fact about the address, not a verdict about the name.","hostname":"binaance.com","hostnameUnicode":"binaance.com","registrableDomain":"binaance.com","organization":{"id":"org_binance","slug":"binance","displayName":"Binance","url":"https://domainspoof.org/companies/binance"},"otherOrganizations":[],"address":"137.131.40.164","list":{"id":"domainspoof_phish_hosts","name":"Confirmed phishing host address (DomainSpoof, 48 hours)","category":"phishing_hosting"},"firstMatchedAt":"2026-10-19T15:34:32.792Z","lastMatchedAt":"2026-10-20T00:25:51.901Z","expiredAt":null,"expired":false,"updatedAt":"2026-10-20T00:25:51.901Z","dnsObservedAt":"2026-10-19T10:48:11.191Z","dns":{"status":"ok","checkedAt":"2026-10-19T10:48:11.191Z"},"mail":{"checkedAt":"2026-10-19T05:52:57.418Z","hasMx":false,"spf":false,"dmarc":false,"mx":[],"provider":null,"providerClass":null,"providerHost":null,"sendsVia":[],"spfAll":null,"dmarcPolicy":null,"lookupStatus":"ok","listed":null},"spelling":{"kind":"repetition","generatedFrom":"binance.com"},"certificate":null,"feedHost":null},{"kind":"generated_spelling","kindLabel":"Generated spelling","statement":"binacne.com (a generated spelling) resolved to 132.226.59.218, an address that was on \"Confirmed phishing host address (DomainSpoof, 48 hours)\" from 2026-10-19T15:34:32.792Z to 2026-10-20T00:25:51.901Z and was still on it at the latest check. This is a fact about the address, not a verdict about the name.","hostname":"binacne.com","hostnameUnicode":"binacne.com","registrableDomain":"binacne.com","organization":{"id":"org_binance","slug":"binance","displayName":"Binance","url":"https://domainspoof.org/companies/binance"},"otherOrganizations":[],"address":"132.226.59.218","list":{"id":"domainspoof_phish_hosts","name":"Confirmed phishing host address (DomainSpoof, 48 hours)","category":"phishing_hosting"},"firstMatchedAt":"2026-10-19T15:34:32.792Z","lastMatchedAt":"2026-10-20T00:25:51.901Z","expiredAt":null,"expired":false,"updatedAt":"2026-10-20T00:25:51.901Z","dnsObservedAt":"2026-10-19T10:48:11.241Z","dns":{"status":"ok","checkedAt":"2026-10-19T10:48:11.241Z"},"mail":{"checkedAt":"2026-10-19T05:52:57.419Z","hasMx":false,"spf":false,"dmarc":false,"mx":[],"provider":null,"providerClass":null,"providerHost":null,"sendsVia":[],"spfAll":null,"dmarcPolicy":null,"lookupStatus":"ok","listed":null},"spelling":{"kind":"transposition","generatedFrom":"binance.com"},"certificate":null,"feedHost":null},{"kind":"generated_spelling","kindLabel":"Generated spelling","statement":"binahce.com (a generated spelling) resolved to 209.196.146.115, an address that was on \"Confirmed phishing host address (DomainSpoof, 48 hours)\" from 2026-10-19T16:18:18.404Z to 2026-10-20T00:25:51.901Z and was still on it at the latest check. This is a fact about the address, not a verdict about the name.","hostname":"binahce.com","hostnameUnicode":"binahce.com","registrableDomain":"binahce.com","organization":{"id":"org_binance","slug":"binance","displayName":"Binance","url":"https://domainspoof.org/companies/binance"},"otherOrganizations":[],"address":"209.196.146.115","list":{"id":"domainspoof_phish_hosts","name":"Confirmed phishing host address (DomainSpoof, 48 hours)","category":"phishing_hosting"},"firstMatchedAt":"2026-10-19T16:18:18.404Z","lastMatchedAt":"2026-10-20T00:25:51.901Z","expiredAt":null,"expired":false,"updatedAt":"2026-10-20T00:25:51.901Z","dnsObservedAt":"2026-10-19T10:48:11.497Z","dns":{"status":"ok","checkedAt":"2026-10-19T10:48:11.497Z"},"mail":{"checkedAt":"2026-10-19T05:52:57.419Z","hasMx":false,"spf":false,"dmarc":false,"mx":[],"provider":null,"providerClass":null,"providerHost":null,"sendsVia":[],"spfAll":null,"dmarcPolicy":null,"lookupStatus":"ok","listed":null},"spelling":{"kind":"adjacent_key","generatedFrom":"binance.com"},"certificate":null,"feedHost":null},{"kind":"generated_spelling","kindLabel":"Generated spelling","statement":"binanc.com (a generated spelling) resolved to 132.226.59.218, an address that was on \"Confirmed phishing host address (DomainSpoof, 48 hours)\" from 2026-10-19T15:34:32.792Z to 2026-10-20T00:25:51.901Z and was still on it at the latest check. This is a fact about the address, not a verdict about the name.","hostname":"binanc.com","hostnameUnicode":"binanc.com","registrableDomain":"binanc.com","organization":{"id":"org_binance","slug":"binance","displayName":"Binance","url":"https://domainspoof.org/companies/binance"},"otherOrganizations":[],"address":"132.226.59.218","list":{"id":"domainspoof_phish_hosts","name":"Confirmed phishing host address (DomainSpoof, 48 hours)","category":"phishing_hosting"},"firstMatchedAt":"2026-10-19T15:34:32.792Z","lastMatchedAt":"2026-10-20T00:25:51.901Z","expiredAt":null,"expired":false,"updatedAt":"2026-10-20T00:25:51.901Z","dnsObservedAt":"2026-10-19T10:48:11.386Z","dns":{"status":"ok","checkedAt":"2026-10-19T10:48:11.386Z"},"mail":{"checkedAt":"2026-10-19T05:52:57.419Z","hasMx":false,"spf":false,"dmarc":false,"mx":[],"provider":null,"providerClass":null,"providerHost":null,"sendsVia":[],"spfAll":null,"dmarcPolicy":null,"lookupStatus":"ok","listed":null},"spelling":{"kind":"omission","generatedFrom":"binance.com"},"certificate":null,"feedHost":null},{"kind":"generated_spelling","kindLabel":"Generated spelling","statement":"binanca.com (a generated spelling) resolved to 137.131.40.164, an address that was on \"Confirmed phishing host address (DomainSpoof, 48 hours)\" from 2026-10-19T15:34:32.792Z to 2026-10-20T00:25:51.901Z and was still on it at the latest check. This is a fact about the address, not a verdict about the name.","hostname":"binanca.com","hostnameUnicode":"binanca.com","registrableDomain":"binanca.com","organization":{"id":"org_binance","slug":"binance","displayName":"Binance","url":"https://domainspoof.org/companies/binance"},"otherOrganizations":[],"address":"137.131.40.164","list":{"id":"domainspoof_phish_hosts","name":"Confirmed phishing host address (DomainSpoof, 48 hours)","category":"phishing_hosting"},"firstMatchedAt":"2026-10-19T15:34:32.792Z","lastMatchedAt":"2026-10-20T00:25:51.901Z","expiredAt":null,"expired":false,"updatedAt":"2026-10-20T00:25:51.901Z","dnsObservedAt":"2026-10-19T10:48:12.122Z","dns":{"status":"ok","checkedAt":"2026-10-19T10:48:12.122Z"},"mail":{"checkedAt":"2026-10-19T05:52:57.419Z","hasMx":false,"spf":false,"dmarc":false,"mx":[],"provider":null,"providerClass":null,"providerHost":null,"sendsVia":[],"spfAll":null,"dmarcPolicy":null,"lookupStatus":"ok","listed":null},"spelling":{"kind":"vowel_swap","generatedFrom":"binance.com"},"certificate":null,"feedHost":null},{"kind":"generated_spelling","kindLabel":"Generated spelling","statement":"binancce.com (a generated spelling) resolved to 137.131.40.164, an address that was on \"Confirmed phishing host address (DomainSpoof, 48 hours)\" from 2026-10-19T15:34:32.792Z to 2026-10-20T00:25:51.901Z and was still on it at the latest check. This is a fact about the address, not a verdict about the name.","hostname":"binancce.com","hostnameUnicode":"binancce.com","registrableDomain":"binancce.com","organization":{"id":"org_binance","slug":"binance","displayName":"Binance","url":"https://domainspoof.org/companies/binance"},"otherOrganizations":[],"address":"137.131.40.164","list":{"id":"domainspoof_phish_hosts","name":"Confirmed phishing host address (DomainSpoof, 48 hours)","category":"phishing_hosting"},"firstMatchedAt":"2026-10-19T15:34:32.792Z","lastMatchedAt":"2026-10-20T00:25:51.901Z","expiredAt":null,"expired":false,"updatedAt":"2026-10-20T00:25:51.901Z","dnsObservedAt":"2026-10-19T10:48:11.355Z","dns":{"status":"ok","checkedAt":"2026-10-19T10:48:11.355Z"},"mail":{"checkedAt":"2026-10-19T05:52:57.419Z","hasMx":false,"spf":false,"dmarc":false,"mx":[],"provider":null,"providerClass":null,"providerHost":null,"sendsVia":[],"spfAll":null,"dmarcPolicy":null,"lookupStatus":"ok","listed":null},"spelling":{"kind":"repetition","generatedFrom":"binance.com"},"certificate":null,"feedHost":null},{"kind":"generated_spelling","kindLabel":"Generated spelling","statement":"binancee.com (a generated spelling) resolved to 137.131.40.164, an address that was on \"Confirmed phishing host address (DomainSpoof, 48 hours)\" from 2026-10-19T15:34:32.792Z to 2026-10-20T00:25:51.901Z and was still on it at the latest check. This is a fact about the address, not a verdict about the name.","hostname":"binancee.com","hostnameUnicode":"binancee.com","registrableDomain":"binancee.com","organization":{"id":"org_binance","slug":"binance","displayName":"Binance","url":"https://domainspoof.org/companies/binance"},"otherOrganizations":[],"address":"137.131.40.164","list":{"id":"domainspoof_phish_hosts","name":"Confirmed phishing host address (DomainSpoof, 48 hours)","category":"phishing_hosting"},"firstMatchedAt":"2026-10-19T15:34:32.792Z","lastMatchedAt":"2026-10-20T00:25:51.901Z","expiredAt":null,"expired":false,"updatedAt":"2026-10-20T00:25:51.901Z","dnsObservedAt":"2026-10-19T10:48:11.369Z","dns":{"status":"ok","checkedAt":"2026-10-19T10:48:11.369Z"},"mail":{"checkedAt":"2026-10-19T05:52:57.419Z","hasMx":false,"spf":false,"dmarc":false,"mx":[],"provider":null,"providerClass":null,"providerHost":null,"sendsVia":[],"spfAll":null,"dmarcPolicy":null,"lookupStatus":"ok","listed":null},"spelling":{"kind":"repetition","generatedFrom":"binance.com"},"certificate":null,"feedHost":null},{"kind":"generated_spelling","kindLabel":"Generated spelling","statement":"binancr.com (a generated spelling) resolved to 132.226.59.218, an address that was on \"Confirmed phishing host address (DomainSpoof, 48 hours)\" from 2026-10-19T15:34:32.792Z to 2026-10-20T00:25:51.901Z and was still on it at the latest check. This is a fact about the address, not a verdict about the name.","hostname":"binancr.com","hostnameUnicode":"binancr.com","registrableDomain":"binancr.com","organization":{"id":"org_binance","slug":"binance","displayName":"Binance","url":"https://domainspoof.org/companies/binance"},"otherOrganizations":[],"address":"132.226.59.218","list":{"id":"domainspoof_phish_hosts","name":"Confirmed phishing host address (DomainSpoof, 48 hours)","category":"phishing_hosting"},"firstMatchedAt":"2026-10-19T15:34:32.792Z","lastMatchedAt":"2026-10-20T00:25:51.901Z","expiredAt":null,"expired":false,"updatedAt":"2026-10-20T00:25:51.901Z","dnsObservedAt":"2026-10-19T05:36:44.043Z","dns":{"status":"error","checkedAt":"2026-10-19T10:48:13.086Z"},"mail":{"checkedAt":"2026-10-19T05:52:57.416Z","hasMx":false,"spf":false,"dmarc":false,"mx":[],"provider":null,"providerClass":null,"providerHost":null,"sendsVia":[],"spfAll":null,"dmarcPolicy":null,"lookupStatus":"ok","listed":null},"spelling":{"kind":"adjacent_key","generatedFrom":"binance.com"},"certificate":null,"feedHost":null},{"kind":"generated_spelling","kindLabel":"Generated spelling","statement":"binancw.com (a generated spelling) resolved to 137.131.40.164, an address that was on \"Confirmed phishing host address (DomainSpoof, 48 hours)\" from 2026-10-19T15:34:32.792Z to 2026-10-20T00:25:51.901Z and was still on it at the latest check. This is a fact about the address, not a verdict about the name.","hostname":"binancw.com","hostnameUnicode":"binancw.com","registrableDomain":"binancw.com","organization":{"id":"org_binance","slug":"binance","displayName":"Binance","url":"https://domainspoof.org/companies/binance"},"otherOrganizations":[],"address":"137.131.40.164","list":{"id":"domainspoof_phish_hosts","name":"Confirmed phishing host address (DomainSpoof, 48 hours)","category":"phishing_hosting"},"firstMatchedAt":"2026-10-19T15:34:32.792Z","lastMatchedAt":"2026-10-20T00:25:51.901Z","expiredAt":null,"expired":false,"updatedAt":"2026-10-20T00:25:51.901Z","dnsObservedAt":"2026-10-19T10:48:11.362Z","dns":{"status":"ok","checkedAt":"2026-10-19T10:48:11.362Z"},"mail":{"checkedAt":"2026-10-19T05:52:57.416Z","hasMx":false,"spf":false,"dmarc":false,"mx":[],"provider":null,"providerClass":null,"providerHost":null,"sendsVia":[],"spfAll":null,"dmarcPolicy":null,"lookupStatus":"ok","listed":null},"spelling":{"kind":"adjacent_key","generatedFrom":"binance.com"},"certificate":null,"feedHost":null},{"kind":"generated_spelling","kindLabel":"Generated spelling","statement":"binane.com (a generated spelling) resolved to 132.226.59.218, an address that was on \"Confirmed phishing host address (DomainSpoof, 48 hours)\" from 2026-10-19T15:34:32.792Z to 2026-10-20T00:25:51.901Z and was still on it at the latest check. This is a fact about the address, not a verdict about the name.","hostname":"binane.com","hostnameUnicode":"binane.com","registrableDomain":"binane.com","organization":{"id":"org_binance","slug":"binance","displayName":"Binance","url":"https://domainspoof.org/companies/binance"},"otherOrganizations":[],"address":"132.226.59.218","list":{"id":"domainspoof_phish_hosts","name":"Confirmed phishing host address (DomainSpoof, 48 hours)","category":"phishing_hosting"},"firstMatchedAt":"2026-10-19T15:34:32.792Z","lastMatchedAt":"2026-10-20T00:25:51.901Z","expiredAt":null,"expired":false,"updatedAt":"2026-10-20T00:25:51.901Z","dnsObservedAt":"2026-10-19T10:48:11.333Z","dns":{"status":"ok","checkedAt":"2026-10-19T10:48:11.333Z"},"mail":{"checkedAt":"2026-10-19T05:52:57.416Z","hasMx":false,"spf":false,"dmarc":false,"mx":[],"provider":null,"providerClass":null,"providerHost":null,"sendsVia":[],"spfAll":null,"dmarcPolicy":null,"lookupStatus":"ok","listed":null},"spelling":{"kind":"omission","generatedFrom":"binance.com"},"certificate":null,"feedHost":null},{"kind":"generated_spelling","kindLabel":"Generated spelling","statement":"binanec.com (a generated spelling) resolved to 132.226.59.218, an address that was on \"Confirmed phishing host address (DomainSpoof, 48 hours)\" from 2026-10-19T15:34:32.792Z to 2026-10-20T00:25:51.901Z and was still on it at the latest check. This is a fact about the address, not a verdict about the name.","hostname":"binanec.com","hostnameUnicode":"binanec.com","registrableDomain":"binanec.com","organization":{"id":"org_binance","slug":"binance","displayName":"Binance","url":"https://domainspoof.org/companies/binance"},"otherOrganizations":[],"address":"132.226.59.218","list":{"id":"domainspoof_phish_hosts","name":"Confirmed phishing host address (DomainSpoof, 48 hours)","category":"phishing_hosting"},"firstMatchedAt":"2026-10-19T15:34:32.792Z","lastMatchedAt":"2026-10-20T00:25:51.901Z","expiredAt":null,"expired":false,"updatedAt":"2026-10-20T00:25:51.901Z","dnsObservedAt":"2026-10-19T10:48:12.106Z","dns":{"status":"ok","checkedAt":"2026-10-19T10:48:12.106Z"},"mail":{"checkedAt":"2026-10-19T05:52:57.416Z","hasMx":false,"spf":false,"dmarc":false,"mx":[],"provider":null,"providerClass":null,"providerHost":null,"sendsVia":[],"spfAll":null,"dmarcPolicy":null,"lookupStatus":"ok","listed":null},"spelling":{"kind":"transposition","generatedFrom":"binance.com"},"certificate":null,"feedHost":null},{"kind":"generated_spelling","kindLabel":"Generated spelling","statement":"binannce.com (a generated spelling) resolved to 132.226.59.218, an address that was on \"Confirmed phishing host address (DomainSpoof, 48 hours)\" from 2026-10-19T15:34:32.792Z to 2026-10-20T00:25:51.901Z and was still on it at the latest check. This is a fact about the address, not a verdict about the name.","hostname":"binannce.com","hostnameUnicode":"binannce.com","registrableDomain":"binannce.com","organization":{"id":"org_binance","slug":"binance","displayName":"Binance","url":"https://domainspoof.org/companies/binance"},"otherOrganizations":[],"address":"132.226.59.218","list":{"id":"domainspoof_phish_hosts","name":"Confirmed phishing host address (DomainSpoof, 48 hours)","category":"phishing_hosting"},"firstMatchedAt":"2026-10-19T15:34:32.792Z","lastMatchedAt":"2026-10-20T00:25:51.901Z","expiredAt":null,"expired":false,"updatedAt":"2026-10-20T00:25:51.901Z","dnsObservedAt":"2026-10-19T10:48:11.343Z","dns":{"status":"ok","checkedAt":"2026-10-19T10:48:11.343Z"},"mail":{"checkedAt":"2026-10-19T05:52:57.416Z","hasMx":false,"spf":false,"dmarc":false,"mx":[],"provider":null,"providerClass":null,"providerHost":null,"sendsVia":[],"spfAll":null,"dmarcPolicy":null,"lookupStatus":"ok","listed":null},"spelling":{"kind":"repetition","generatedFrom":"binance.com"},"certificate":null,"feedHost":null},{"kind":"generated_spelling","kindLabel":"Generated spelling","statement":"binanve.com (a generated spelling) resolved to 137.131.40.164, an address that was on \"Confirmed phishing host address (DomainSpoof, 48 hours)\" from 2026-10-19T15:34:32.792Z to 2026-10-20T00:25:51.901Z and was still on it at the latest check. This is a fact about the address, not a verdict about the name.","hostname":"binanve.com","hostnameUnicode":"binanve.com","registrableDomain":"binanve.com","organization":{"id":"org_binance","slug":"binance","displayName":"Binance","url":"https://domainspoof.org/companies/binance"},"otherOrganizations":[],"address":"137.131.40.164","list":{"id":"domainspoof_phish_hosts","name":"Confirmed phishing host address (DomainSpoof, 48 hours)","category":"phishing_hosting"},"firstMatchedAt":"2026-10-19T15:34:32.792Z","lastMatchedAt":"2026-10-20T00:25:51.901Z","expiredAt":null,"expired":false,"updatedAt":"2026-10-20T00:25:51.901Z","dnsObservedAt":"2026-10-19T10:48:11.375Z","dns":{"status":"ok","checkedAt":"2026-10-19T10:48:11.375Z"},"mail":{"checkedAt":"2026-10-19T05:52:57.416Z","hasMx":false,"spf":false,"dmarc":false,"mx":[],"provider":null,"providerClass":null,"providerHost":null,"sendsVia":[],"spfAll":null,"dmarcPolicy":null,"lookupStatus":"ok","listed":null},"spelling":{"kind":"adjacent_key","generatedFrom":"binance.com"},"certificate":null,"feedHost":null},{"kind":"generated_spelling","kindLabel":"Generated spelling","statement":"binanxe.com (a generated spelling) resolved to 137.131.40.164, an address that was on \"Confirmed phishing host address (DomainSpoof, 48 hours)\" from 2026-10-19T15:34:32.792Z to 2026-10-20T00:25:51.901Z and was still on it at the latest check. This is a fact about the address, not a verdict about the name.","hostname":"binanxe.com","hostnameUnicode":"binanxe.com","registrableDomain":"binanxe.com","organization":{"id":"org_binance","slug":"binance","displayName":"Binance","url":"https://domainspoof.org/companies/binance"},"otherOrganizations":[],"address":"137.131.40.164","list":{"id":"domainspoof_phish_hosts","name":"Confirmed phishing host address (DomainSpoof, 48 hours)","category":"phishing_hosting"},"firstMatchedAt":"2026-10-19T15:34:32.792Z","lastMatchedAt":"2026-10-20T00:25:51.901Z","expiredAt":null,"expired":false,"updatedAt":"2026-10-20T00:25:51.901Z","dnsObservedAt":"2026-10-19T10:48:11.349Z","dns":{"status":"ok","checkedAt":"2026-10-19T10:48:11.349Z"},"mail":{"checkedAt":"2026-10-19T05:52:57.416Z","hasMx":false,"spf":false,"dmarc":false,"mx":[],"provider":null,"providerClass":null,"providerHost":null,"sendsVia":[],"spfAll":null,"dmarcPolicy":null,"lookupStatus":"ok","listed":null},"spelling":{"kind":"adjacent_key","generatedFrom":"binance.com"},"certificate":null,"feedHost":null},{"kind":"generated_spelling","kindLabel":"Generated spelling","statement":"binnance.com (a generated spelling) resolved to 132.226.59.218, an address that was on \"Confirmed phishing host address (DomainSpoof, 48 hours)\" from 2026-10-19T15:34:32.792Z to 2026-10-20T00:25:51.901Z and was still on it at the latest check. This is a fact about the address, not a verdict about the name.","hostname":"binnance.com","hostnameUnicode":"binnance.com","registrableDomain":"binnance.com","organization":{"id":"org_binance","slug":"binance","displayName":"Binance","url":"https://domainspoof.org/companies/binance"},"otherOrganizations":[],"address":"132.226.59.218","list":{"id":"domainspoof_phish_hosts","name":"Confirmed phishing host address (DomainSpoof, 48 hours)","category":"phishing_hosting"},"firstMatchedAt":"2026-10-19T15:34:32.792Z","lastMatchedAt":"2026-10-20T00:25:51.901Z","expiredAt":null,"expired":false,"updatedAt":"2026-10-20T00:25:51.901Z","dnsObservedAt":"2026-10-19T10:48:11.524Z","dns":{"status":"ok","checkedAt":"2026-10-19T10:48:11.524Z"},"mail":{"checkedAt":"2026-10-19T05:52:57.416Z","hasMx":false,"spf":false,"dmarc":false,"mx":[],"provider":null,"providerClass":null,"providerHost":null,"sendsVia":[],"spfAll":null,"dmarcPolicy":null,"lookupStatus":"ok","listed":null},"spelling":{"kind":"repetition","generatedFrom":"binance.com"},"certificate":null,"feedHost":null},{"kind":"generated_spelling","kindLabel":"Generated spelling","statement":"binsnce.com (a generated spelling) resolved to 137.131.40.164, an address that was on \"Confirmed phishing host address (DomainSpoof, 48 hours)\" from 2026-10-19T15:34:32.792Z to 2026-10-20T00:25:51.901Z and was still on it at the latest check. This is a fact about the address, not a verdict about the name.","hostname":"binsnce.com","hostnameUnicode":"binsnce.com","registrableDomain":"binsnce.com","organization":{"id":"org_binance","slug":"binance","displayName":"Binance","url":"https://domainspoof.org/companies/binance"},"otherOrganizations":[],"address":"137.131.40.164","list":{"id":"domainspoof_phish_hosts","name":"Confirmed phishing host address (DomainSpoof, 48 hours)","category":"phishing_hosting"},"firstMatchedAt":"2026-10-19T15:34:32.792Z","lastMatchedAt":"2026-10-20T00:25:51.901Z","expiredAt":null,"expired":false,"updatedAt":"2026-10-20T00:25:51.901Z","dnsObservedAt":"2026-10-19T10:48:11.528Z","dns":{"status":"ok","checkedAt":"2026-10-19T10:48:11.528Z"},"mail":{"checkedAt":"2026-10-19T05:52:57.416Z","hasMx":false,"spf":false,"dmarc":false,"mx":[],"provider":null,"providerClass":null,"providerHost":null,"sendsVia":[],"spfAll":null,"dmarcPolicy":null,"lookupStatus":"ok","listed":null},"spelling":{"kind":"adjacent_key","generatedFrom":"binance.com"},"certificate":null,"feedHost":null},{"kind":"generated_spelling","kindLabel":"Generated spelling","statement":"bunance.com (a generated spelling) resolved to 137.131.40.164, an address that was on \"Confirmed phishing host address (DomainSpoof, 48 hours)\" from 2026-10-19T15:34:32.792Z to 2026-10-20T00:25:51.901Z and was still on it at the latest check. This is a fact about the address, not a verdict about the name.","hostname":"bunance.com","hostnameUnicode":"bunance.com","registrableDomain":"bunance.com","organization":{"id":"org_binance","slug":"binance","displayName":"Binance","url":"https://domainspoof.org/companies/binance"},"otherOrganizations":[],"address":"137.131.40.164","list":{"id":"domainspoof_phish_hosts","name":"Confirmed phishing host address (DomainSpoof, 48 hours)","category":"phishing_hosting"},"firstMatchedAt":"2026-10-19T15:34:32.792Z","lastMatchedAt":"2026-10-20T00:25:51.901Z","expiredAt":null,"expired":false,"updatedAt":"2026-10-20T00:25:51.901Z","dnsObservedAt":"2026-10-19T05:36:44.043Z","dns":{"status":"timeout","checkedAt":"2026-10-19T10:49:37.109Z"},"mail":{"checkedAt":"2026-10-19T05:52:57.418Z","hasMx":false,"spf":false,"dmarc":false,"mx":[],"provider":null,"providerClass":null,"providerHost":null,"sendsVia":[],"spfAll":null,"dmarcPolicy":null,"lookupStatus":"ok","listed":null},"spelling":{"kind":"vowel_swap","generatedFrom":"binance.com"},"certificate":null,"feedHost":null},{"kind":"generated_spelling","kindLabel":"Generated spelling","statement":"loginbinance.com (a generated spelling) resolved to 118.139.164.57, an address that was on \"Confirmed phishing host address (DomainSpoof, 48 hours)\" from 2026-10-19T15:34:32.792Z to 2026-10-20T00:25:51.901Z and was still on it at the latest check. This is a fact about the address, not a verdict about the name.","hostname":"loginbinance.com","hostnameUnicode":"loginbinance.com","registrableDomain":"loginbinance.com","organization":{"id":"org_binance","slug":"binance","displayName":"Binance","url":"https://domainspoof.org/companies/binance"},"otherOrganizations":[],"address":"118.139.164.57","list":{"id":"domainspoof_phish_hosts","name":"Confirmed phishing host address (DomainSpoof, 48 hours)","category":"phishing_hosting"},"firstMatchedAt":"2026-10-19T15:34:32.792Z","lastMatchedAt":"2026-10-20T00:25:51.901Z","expiredAt":null,"expired":false,"updatedAt":"2026-10-20T00:25:51.901Z","dnsObservedAt":"2026-10-19T10:55:59.203Z","dns":{"status":"ok","checkedAt":"2026-10-19T10:55:59.203Z"},"mail":{"checkedAt":"2026-10-19T05:52:57.420Z","hasMx":false,"spf":false,"dmarc":true,"mx":[],"provider":null,"providerClass":null,"providerHost":null,"sendsVia":[],"spfAll":null,"dmarcPolicy":"quarantine","lookupStatus":"ok","listed":null},"spelling":{"kind":"insertion","generatedFrom":"binance.com"},"certificate":null,"feedHost":null},{"kind":"generated_spelling","kindLabel":"Generated spelling","statement":"bradesco.online (a generated spelling) resolved to 128.14.74.107, an address that was on \"Confirmed phishing host address (DomainSpoof, 48 hours)\" from 2026-10-19T15:34:32.792Z to 2026-10-20T00:25:51.901Z and was still on it at the latest check. This is a fact about the address, not a verdict about the name.","hostname":"bradesco.online","hostnameUnicode":"bradesco.online","registrableDomain":"bradesco.online","organization":{"id":"org_bradesco","slug":"bradesco","displayName":"Bradesco","url":"https://domainspoof.org/companies/bradesco"},"otherOrganizations":[],"address":"128.14.74.107","list":{"id":"domainspoof_phish_hosts","name":"Confirmed phishing host address (DomainSpoof, 48 hours)","category":"phishing_hosting"},"firstMatchedAt":"2026-10-19T15:34:32.792Z","lastMatchedAt":"2026-10-20T00:25:51.901Z","expiredAt":null,"expired":false,"updatedAt":"2026-10-20T00:25:51.901Z","dnsObservedAt":"2026-10-19T10:48:22.444Z","dns":{"status":"ok","checkedAt":"2026-10-19T10:48:22.444Z"},"mail":{"checkedAt":"2026-10-19T05:52:57.417Z","hasMx":false,"spf":false,"dmarc":false,"mx":[],"provider":null,"providerClass":null,"providerHost":null,"sendsVia":[],"spfAll":null,"dmarcPolicy":null,"lookupStatus":"ok","listed":null},"spelling":{"kind":"tld","generatedFrom":"bradesco.com.br"},"certificate":null,"feedHost":null},{"kind":"generated_spelling","kindLabel":"Generated spelling","statement":"bradesco.online (a generated spelling) resolved to 128.14.74.124, an address that was on \"Confirmed phishing host address (DomainSpoof, 48 hours)\" from 2026-10-19T15:34:32.792Z to 2026-10-20T00:25:51.901Z and was still on it at the latest check. This is a fact about the address, not a verdict about the name.","hostname":"bradesco.online","hostnameUnicode":"bradesco.online","registrableDomain":"bradesco.online","organization":{"id":"org_bradesco","slug":"bradesco","displayName":"Bradesco","url":"https://domainspoof.org/companies/bradesco"},"otherOrganizations":[],"address":"128.14.74.124","list":{"id":"domainspoof_phish_hosts","name":"Confirmed phishing host address (DomainSpoof, 48 hours)","category":"phishing_hosting"},"firstMatchedAt":"2026-10-19T15:34:32.792Z","lastMatchedAt":"2026-10-20T00:25:51.901Z","expiredAt":null,"expired":false,"updatedAt":"2026-10-20T00:25:51.901Z","dnsObservedAt":"2026-10-19T10:48:22.444Z","dns":{"status":"ok","checkedAt":"2026-10-19T10:48:22.444Z"},"mail":{"checkedAt":"2026-10-19T05:52:57.417Z","hasMx":false,"spf":false,"dmarc":false,"mx":[],"provider":null,"providerClass":null,"providerHost":null,"sendsVia":[],"spfAll":null,"dmarcPolicy":null,"lookupStatus":"ok","listed":null},"spelling":{"kind":"tld","generatedFrom":"bradesco.com.br"},"certificate":null,"feedHost":null},{"kind":"generated_spelling","kindLabel":"Generated spelling","statement":"bradesco.site (a generated spelling) resolved to 172.232.24.161, an address that was on \"Confirmed phishing host address (DomainSpoof, 48 hours)\" from 2026-10-19T15:34:32.792Z to 2026-10-20T00:25:51.901Z and was still on it at the latest check. This is a fact about the address, not a verdict about the name.","hostname":"bradesco.site","hostnameUnicode":"bradesco.site","registrableDomain":"bradesco.site","organization":{"id":"org_bradesco","slug":"bradesco","displayName":"Bradesco","url":"https://domainspoof.org/companies/bradesco"},"otherOrganizations":[],"address":"172.232.24.161","list":{"id":"domainspoof_phish_hosts","name":"Confirmed phishing host address (DomainSpoof, 48 hours)","category":"phishing_hosting"},"firstMatchedAt":"2026-10-19T15:34:32.792Z","lastMatchedAt":"2026-10-20T00:25:51.901Z","expiredAt":null,"expired":false,"updatedAt":"2026-10-20T00:25:51.901Z","dnsObservedAt":"2026-10-19T10:48:22.283Z","dns":{"status":"ok","checkedAt":"2026-10-19T10:48:22.283Z"},"mail":{"checkedAt":"2026-10-19T05:52:57.417Z","hasMx":false,"spf":false,"dmarc":false,"mx":[],"provider":null,"providerClass":null,"providerHost":null,"sendsVia":[],"spfAll":null,"dmarcPolicy":null,"lookupStatus":"ok","listed":null},"spelling":{"kind":"tld","generatedFrom":"bradesco.com.br"},"certificate":null,"feedHost":null},{"kind":"generated_spelling","kindLabel":"Generated spelling","statement":"bradesco.site (a generated spelling) resolved to 172.232.24.235, an address that was on \"Confirmed phishing host address (DomainSpoof, 48 hours)\" from 2026-10-19T15:34:32.792Z to 2026-10-20T00:25:51.901Z and was still on it at the latest check. This is a fact about the address, not a verdict about the name.","hostname":"bradesco.site","hostnameUnicode":"bradesco.site","registrableDomain":"bradesco.site","organization":{"id":"org_bradesco","slug":"bradesco","displayName":"Bradesco","url":"https://domainspoof.org/companies/bradesco"},"otherOrganizations":[],"address":"172.232.24.235","list":{"id":"domainspoof_phish_hosts","name":"Confirmed phishing host address (DomainSpoof, 48 hours)","category":"phishing_hosting"},"firstMatchedAt":"2026-10-19T15:34:32.792Z","lastMatchedAt":"2026-10-20T00:25:51.901Z","expiredAt":null,"expired":false,"updatedAt":"2026-10-20T00:25:51.901Z","dnsObservedAt":"2026-10-19T10:48:22.283Z","dns":{"status":"ok","checkedAt":"2026-10-19T10:48:22.283Z"},"mail":{"checkedAt":"2026-10-19T05:52:57.417Z","hasMx":false,"spf":false,"dmarc":false,"mx":[],"provider":null,"providerClass":null,"providerHost":null,"sendsVia":[],"spfAll":null,"dmarcPolicy":null,"lookupStatus":"ok","listed":null},"spelling":{"kind":"tld","generatedFrom":"bradesco.com.br"},"certificate":null,"feedHost":null},{"kind":"generated_spelling","kindLabel":"Generated spelling","statement":"bradesco.site (a generated spelling) resolved to 172.234.25.42, an address that was on \"Confirmed phishing host address (DomainSpoof, 48 hours)\" from 2026-10-19T15:34:32.792Z to 2026-10-20T00:25:51.901Z and was still on it at the latest check. This is a fact about the address, not a verdict about the name.","hostname":"bradesco.site","hostnameUnicode":"bradesco.site","registrableDomain":"bradesco.site","organization":{"id":"org_bradesco","slug":"bradesco","displayName":"Bradesco","url":"https://domainspoof.org/companies/bradesco"},"otherOrganizations":[],"address":"172.234.25.42","list":{"id":"domainspoof_phish_hosts","name":"Confirmed phishing host address (DomainSpoof, 48 hours)","category":"phishing_hosting"},"firstMatchedAt":"2026-10-19T15:34:32.792Z","lastMatchedAt":"2026-10-20T00:25:51.901Z","expiredAt":null,"expired":false,"updatedAt":"2026-10-20T00:25:51.901Z","dnsObservedAt":"2026-10-19T10:48:22.283Z","dns":{"status":"ok","checkedAt":"2026-10-19T10:48:22.283Z"},"mail":{"checkedAt":"2026-10-19T05:52:57.417Z","hasMx":false,"spf":false,"dmarc":false,"mx":[],"provider":null,"providerClass":null,"providerHost":null,"sendsVia":[],"spfAll":null,"dmarcPolicy":null,"lookupStatus":"ok","listed":null},"spelling":{"kind":"tld","generatedFrom":"bradesco.com.br"},"certificate":null,"feedHost":null},{"kind":"generated_spelling","kindLabel":"Generated spelling","statement":"btinteret.com (a generated spelling) resolved to 69.162.80.60, an address that was on \"Confirmed phishing host address (DomainSpoof, 48 hours)\" from 2026-10-19T15:34:32.792Z to 2026-10-20T00:25:51.901Z and was still on it at the latest check. This is a fact about the address, not a verdict about the name.","hostname":"btinteret.com","hostnameUnicode":"btinteret.com","registrableDomain":"btinteret.com","organization":{"id":"org_bt","slug":"bt","displayName":"BT","url":"https://domainspoof.org/companies/bt"},"otherOrganizations":[],"address":"69.162.80.60","list":{"id":"domainspoof_phish_hosts","name":"Confirmed phishing host address (DomainSpoof, 48 hours)","category":"phishing_hosting"},"firstMatchedAt":"2026-10-19T15:34:32.792Z","lastMatchedAt":"2026-10-20T00:25:51.901Z","expiredAt":null,"expired":false,"updatedAt":"2026-10-20T00:25:51.901Z","dnsObservedAt":"2026-10-19T10:49:34.577Z","dns":{"status":"ok","checkedAt":"2026-10-19T10:49:34.577Z"},"mail":{"checkedAt":"2026-10-19T10:42:54.692Z","hasMx":true,"spf":true,"dmarc":false,"mx":["mail.h-email.net"],"provider":"h-email.net","providerClass":"parking","providerHost":"mail.h-email.net","sendsVia":[],"spfAll":"-","dmarcPolicy":null,"lookupStatus":"ok","listed":{"checkedAt":"2026-10-19T10:42:54.692Z","lists":[],"mx":[],"spf":[]}},"spelling":{"kind":"omission","generatedFrom":"btinternet.com"},"certificate":null,"feedHost":null},{"kind":"generated_spelling","kindLabel":"Generated spelling","statement":"btinternot.com (a generated spelling) resolved to 217.160.0.112, an address that was on \"Confirmed phishing host address (DomainSpoof, 48 hours)\" from 2026-10-19T15:34:32.792Z to 2026-10-20T00:25:51.901Z and was still on it at the latest check. This is a fact about the address, not a verdict about the name.","hostname":"btinternot.com","hostnameUnicode":"btinternot.com","registrableDomain":"btinternot.com","organization":{"id":"org_bt","slug":"bt","displayName":"BT","url":"https://domainspoof.org/companies/bt"},"otherOrganizations":[],"address":"217.160.0.112","list":{"id":"domainspoof_phish_hosts","name":"Confirmed phishing host address (DomainSpoof, 48 hours)","category":"phishing_hosting"},"firstMatchedAt":"2026-10-19T15:34:32.792Z","lastMatchedAt":"2026-10-20T00:25:51.901Z","expiredAt":null,"expired":false,"updatedAt":"2026-10-20T00:25:51.901Z","dnsObservedAt":"2026-10-19T10:49:34.572Z","dns":{"status":"ok","checkedAt":"2026-10-19T10:49:34.572Z"},"mail":{"checkedAt":"2026-10-19T10:42:54.691Z","hasMx":true,"spf":true,"dmarc":true,"mx":["mx00.ionos.co.uk","mx01.ionos.co.uk"],"provider":"IONOS","providerClass":"hosting","providerHost":"mx00.ionos.co.uk","sendsVia":[{"host":"_spf.perfora.net","name":"_spf.perfora.net","cls":null,"via":"include"},{"host":"_spf-eu.ionos.com","name":"IONOS","cls":"hosting","via":"include"},{"host":"_spf.kundenserver.de","name":"_spf.kundenserver.de","cls":null,"via":"include"}],"spfAll":"~","dmarcPolicy":"none","lookupStatus":"ok","listed":{"checkedAt":"2026-10-19T10:42:54.691Z","lists":[],"mx":[],"spf":[]}},"spelling":{"kind":"vowel_swap","generatedFrom":"btinternet.com"},"certificate":null,"feedHost":null},{"kind":"generated_spelling","kindLabel":"Generated spelling","statement":"btintetnet.com (a generated spelling) resolved to 69.162.80.60, an address that was on \"Confirmed phishing host address (DomainSpoof, 48 hours)\" from 2026-10-19T15:34:32.792Z to 2026-10-20T00:25:51.901Z and was still on it at the latest check. This is a fact about the address, not a verdict about the name.","hostname":"btintetnet.com","hostnameUnicode":"btintetnet.com","registrableDomain":"btintetnet.com","organization":{"id":"org_bt","slug":"bt","displayName":"BT","url":"https://domainspoof.org/companies/bt"},"otherOrganizations":[],"address":"69.162.80.60","list":{"id":"domainspoof_phish_hosts","name":"Confirmed phishing host address (DomainSpoof, 48 hours)","category":"phishing_hosting"},"firstMatchedAt":"2026-10-19T15:34:32.792Z","lastMatchedAt":"2026-10-20T00:25:51.901Z","expiredAt":null,"expired":false,"updatedAt":"2026-10-20T00:25:51.901Z","dnsObservedAt":"2026-10-19T10:49:34.597Z","dns":{"status":"ok","checkedAt":"2026-10-19T10:49:34.597Z"},"mail":{"checkedAt":"2026-10-19T10:42:54.691Z","hasMx":true,"spf":true,"dmarc":false,"mx":["mail.h-email.net"],"provider":"h-email.net","providerClass":"parking","providerHost":"mail.h-email.net","sendsVia":[],"spfAll":"-","dmarcPolicy":null,"lookupStatus":"ok","listed":{"checkedAt":"2026-10-19T10:42:54.691Z","lists":[],"mx":[],"spf":[]}},"spelling":{"kind":"adjacent_key","generatedFrom":"btinternet.com"},"certificate":null,"feedHost":null},{"kind":"generated_spelling","kindLabel":"Generated spelling","statement":"btniternet.com (a generated spelling) resolved to 172.232.24.161, an address that was on \"Confirmed phishing host address (DomainSpoof, 48 hours)\" from 2026-10-19T15:34:32.792Z to 2026-10-20T00:25:51.901Z and was still on it at the latest check. This is a fact about the address, not a verdict about the name.","hostname":"btniternet.com","hostnameUnicode":"btniternet.com","registrableDomain":"btniternet.com","organization":{"id":"org_bt","slug":"bt","displayName":"BT","url":"https://domainspoof.org/companies/bt"},"otherOrganizations":[],"address":"172.232.24.161","list":{"id":"domainspoof_phish_hosts","name":"Confirmed phishing host address (DomainSpoof, 48 hours)","category":"phishing_hosting"},"firstMatchedAt":"2026-10-19T15:34:32.792Z","lastMatchedAt":"2026-10-20T00:25:51.901Z","expiredAt":null,"expired":false,"updatedAt":"2026-10-20T00:25:51.901Z","dnsObservedAt":"2026-10-19T10:49:34.584Z","dns":{"status":"ok","checkedAt":"2026-10-19T10:49:34.584Z"},"mail":{"checkedAt":"2026-10-19T10:42:54.691Z","hasMx":true,"spf":true,"dmarc":false,"mx":["mx2.titan.email","mx1.titan.email"],"provider":"Titan","providerClass":"hosting","providerHost":"mx2.titan.email","sendsVia":[{"host":"spf.titan.email","name":"Titan","cls":"hosting","via":"include"}],"spfAll":"~","dmarcPolicy":null,"lookupStatus":"ok","listed":{"checkedAt":"2026-10-19T10:42:54.691Z","lists":[],"mx":[],"spf":[]}},"spelling":{"kind":"transposition","generatedFrom":"btinternet.com"},"certificate":null,"feedHost":null},{"kind":"generated_spelling","kindLabel":"Generated spelling","statement":"btniternet.com (a generated spelling) resolved to 172.232.24.235, an address that was on \"Confirmed phishing host address (DomainSpoof, 48 hours)\" from 2026-10-19T15:34:32.792Z to 2026-10-20T00:25:51.901Z and was still on it at the latest check. This is a fact about the address, not a verdict about the name.","hostname":"btniternet.com","hostnameUnicode":"btniternet.com","registrableDomain":"btniternet.com","organization":{"id":"org_bt","slug":"bt","displayName":"BT","url":"https://domainspoof.org/companies/bt"},"otherOrganizations":[],"address":"172.232.24.235","list":{"id":"domainspoof_phish_hosts","name":"Confirmed phishing host address (DomainSpoof, 48 hours)","category":"phishing_hosting"},"firstMatchedAt":"2026-10-19T15:34:32.792Z","lastMatchedAt":"2026-10-20T00:25:51.901Z","expiredAt":null,"expired":false,"updatedAt":"2026-10-20T00:25:51.901Z","dnsObservedAt":"2026-10-19T10:49:34.584Z","dns":{"status":"ok","checkedAt":"2026-10-19T10:49:34.584Z"},"mail":{"checkedAt":"2026-10-19T10:42:54.691Z","hasMx":true,"spf":true,"dmarc":false,"mx":["mx2.titan.email","mx1.titan.email"],"provider":"Titan","providerClass":"hosting","providerHost":"mx2.titan.email","sendsVia":[{"host":"spf.titan.email","name":"Titan","cls":"hosting","via":"include"}],"spfAll":"~","dmarcPolicy":null,"lookupStatus":"ok","listed":{"checkedAt":"2026-10-19T10:42:54.691Z","lists":[],"mx":[],"spf":[]}},"spelling":{"kind":"transposition","generatedFrom":"btinternet.com"},"certificate":null,"feedHost":null},{"kind":"generated_spelling","kindLabel":"Generated spelling","statement":"btniternet.com (a generated spelling) resolved to 172.234.25.42, an address that was on \"Confirmed phishing host address (DomainSpoof, 48 hours)\" from 2026-10-19T15:34:32.792Z to 2026-10-20T00:25:51.901Z and was still on it at the latest check. This is a fact about the address, not a verdict about the name.","hostname":"btniternet.com","hostnameUnicode":"btniternet.com","registrableDomain":"btniternet.com","organization":{"id":"org_bt","slug":"bt","displayName":"BT","url":"https://domainspoof.org/companies/bt"},"otherOrganizations":[],"address":"172.234.25.42","list":{"id":"domainspoof_phish_hosts","name":"Confirmed phishing host address (DomainSpoof, 48 hours)","category":"phishing_hosting"},"firstMatchedAt":"2026-10-19T15:34:32.792Z","lastMatchedAt":"2026-10-20T00:25:51.901Z","expiredAt":null,"expired":false,"updatedAt":"2026-10-20T00:25:51.901Z","dnsObservedAt":"2026-10-19T10:49:34.584Z","dns":{"status":"ok","checkedAt":"2026-10-19T10:49:34.584Z"},"mail":{"checkedAt":"2026-10-19T10:42:54.691Z","hasMx":true,"spf":true,"dmarc":false,"mx":["mx2.titan.email","mx1.titan.email"],"provider":"Titan","providerClass":"hosting","providerHost":"mx2.titan.email","sendsVia":[{"host":"spf.titan.email","name":"Titan","cls":"hosting","via":"include"}],"spfAll":"~","dmarcPolicy":null,"lookupStatus":"ok","listed":{"checkedAt":"2026-10-19T10:42:54.691Z","lists":[],"mx":[],"spf":[]}},"spelling":{"kind":"transposition","generatedFrom":"btinternet.com"},"certificate":null,"feedHost":null},{"kind":"generated_spelling","kindLabel":"Generated spelling","statement":"btplc.co (a generated spelling) resolved to 217.70.184.38, an address that was on \"Confirmed phishing host address (DomainSpoof, 48 hours)\" from 2026-10-19T15:34:32.792Z to 2026-10-20T00:25:51.901Z and was still on it at the latest check. This is a fact about the address, not a verdict about the name.","hostname":"btplc.co","hostnameUnicode":"btplc.co","registrableDomain":"btplc.co","organization":{"id":"org_bt","slug":"bt","displayName":"BT","url":"https://domainspoof.org/companies/bt"},"otherOrganizations":[],"address":"217.70.184.38","list":{"id":"domainspoof_phish_hosts","name":"Confirmed phishing host address (DomainSpoof, 48 hours)","category":"phishing_hosting"},"firstMatchedAt":"2026-10-19T15:34:32.792Z","lastMatchedAt":"2026-10-20T00:25:51.901Z","expiredAt":null,"expired":false,"updatedAt":"2026-10-20T00:25:51.901Z","dnsObservedAt":"2026-10-19T10:49:34.623Z","dns":{"status":"ok","checkedAt":"2026-10-19T10:49:34.623Z"},"mail":{"checkedAt":"2026-10-19T10:42:54.692Z","hasMx":true,"spf":true,"dmarc":false,"mx":["spool.mail.gandi.net","fb.mail.gandi.net"],"provider":"Gandi","providerClass":"hosting","providerHost":"spool.mail.gandi.net","sendsVia":[{"host":"_mailcust.gandi.net","name":"Gandi","cls":"hosting","via":"include"}],"spfAll":"?","dmarcPolicy":null,"lookupStatus":"ok","listed":{"checkedAt":"2026-10-19T10:42:54.692Z","lists":[],"mx":[],"spf":[]}},"spelling":{"kind":"tld","generatedFrom":"btplc.com"},"certificate":null,"feedHost":null},{"kind":"generated_spelling","kindLabel":"Generated spelling","statement":"dbsbank.co (a generated spelling) resolved to 191.101.104.163, an address that was on \"Confirmed phishing host address (DomainSpoof, 48 hours)\" from 2026-10-19T16:01:01.231Z to 2026-10-20T00:25:51.901Z and was still on it at the latest check. This is a fact about the address, not a verdict about the name.","hostname":"dbsbank.co","hostnameUnicode":"dbsbank.co","registrableDomain":"dbsbank.co","organization":{"id":"org_dbs","slug":"dbs-bank","displayName":"DBS Bank","url":"https://domainspoof.org/companies/dbs-bank"},"otherOrganizations":[],"address":"191.101.104.163","list":{"id":"domainspoof_phish_hosts","name":"Confirmed phishing host address (DomainSpoof, 48 hours)","category":"phishing_hosting"},"firstMatchedAt":"2026-10-19T16:01:01.231Z","lastMatchedAt":"2026-10-20T00:25:51.901Z","expiredAt":null,"expired":false,"updatedAt":"2026-10-20T00:25:51.901Z","dnsObservedAt":"2026-10-19T10:51:12.484Z","dns":{"status":"ok","checkedAt":"2026-10-19T10:51:12.484Z"},"mail":{"checkedAt":"2026-10-19T10:42:54.691Z","hasMx":true,"spf":true,"dmarc":true,"mx":["mx2.hostinger.com","mx1.hostinger.com"],"provider":"Hostinger","providerClass":"hosting","providerHost":"mx2.hostinger.com","sendsVia":[{"host":"_spf.mail.hostinger.com","name":"Hostinger","cls":"hosting","via":"include"}],"spfAll":"~","dmarcPolicy":"none","lookupStatus":"ok","listed":{"checkedAt":"2026-10-19T10:42:54.691Z","lists":[],"mx":[],"spf":[]}},"spelling":{"kind":"tld","generatedFrom":"dbsbank"},"certificate":null,"feedHost":null},{"kind":"generated_spelling","kindLabel":"Generated spelling","statement":"dbsbank.co (a generated spelling) resolved to 191.96.144.1, an address that was on \"Confirmed phishing host address (DomainSpoof, 48 hours)\" from 2026-10-19T15:34:32.792Z to 2026-10-20T00:25:51.901Z and was still on it at the latest check. This is a fact about the address, not a verdict about the name.","hostname":"dbsbank.co","hostnameUnicode":"dbsbank.co","registrableDomain":"dbsbank.co","organization":{"id":"org_dbs","slug":"dbs-bank","displayName":"DBS Bank","url":"https://domainspoof.org/companies/dbs-bank"},"otherOrganizations":[],"address":"191.96.144.1","list":{"id":"domainspoof_phish_hosts","name":"Confirmed phishing host address (DomainSpoof, 48 hours)","category":"phishing_hosting"},"firstMatchedAt":"2026-10-19T15:34:32.792Z","lastMatchedAt":"2026-10-20T00:25:51.901Z","expiredAt":null,"expired":false,"updatedAt":"2026-10-20T00:25:51.901Z","dnsObservedAt":"2026-10-19T10:51:12.484Z","dns":{"status":"ok","checkedAt":"2026-10-19T10:51:12.484Z"},"mail":{"checkedAt":"2026-10-19T10:42:54.691Z","hasMx":true,"spf":true,"dmarc":true,"mx":["mx2.hostinger.com","mx1.hostinger.com"],"provider":"Hostinger","providerClass":"hosting","providerHost":"mx2.hostinger.com","sendsVia":[{"host":"_spf.mail.hostinger.com","name":"Hostinger","cls":"hosting","via":"include"}],"spfAll":"~","dmarcPolicy":"none","lookupStatus":"ok","listed":{"checkedAt":"2026-10-19T10:42:54.691Z","lists":[],"mx":[],"spf":[]}},"spelling":{"kind":"tld","generatedFrom":"dbsbank"},"certificate":null,"feedHost":null},{"kind":"generated_spelling","kindLabel":"Generated spelling","statement":"dhl-support.de (a generated spelling) resolved to 46.38.243.234, an address that was on \"Confirmed phishing host address (DomainSpoof, 48 hours)\" from 2026-10-19T15:34:32.792Z to 2026-10-20T00:25:51.901Z and was still on it at the latest check. This is a fact about the address, not a verdict about the name.","hostname":"dhl-support.de","hostnameUnicode":"dhl-support.de","registrableDomain":"dhl-support.de","organization":{"id":"org_dhl","slug":"dhl","displayName":"DHL","url":"https://domainspoof.org/companies/dhl"},"otherOrganizations":[],"address":"46.38.243.234","list":{"id":"domainspoof_phish_hosts","name":"Confirmed phishing host address (DomainSpoof, 48 hours)","category":"phishing_hosting"},"firstMatchedAt":"2026-10-19T15:34:32.792Z","lastMatchedAt":"2026-10-20T00:25:51.901Z","expiredAt":null,"expired":false,"updatedAt":"2026-10-20T00:25:51.901Z","dnsObservedAt":"2026-10-19T10:51:17.319Z","dns":{"status":"ok","checkedAt":"2026-10-19T10:51:17.319Z"},"mail":{"checkedAt":"2026-10-19T05:52:57.410Z","hasMx":false,"spf":false,"dmarc":true,"mx":[],"provider":null,"providerClass":null,"providerHost":null,"sendsVia":[],"spfAll":null,"dmarcPolicy":"none","lookupStatus":"ok","listed":null},"spelling":{"kind":"insertion","generatedFrom":"dhl.de"},"certificate":null,"feedHost":null},{"kind":"generated_spelling","kindLabel":"Generated spelling","statement":"dhl.cc (a generated spelling) resolved to 208.98.40.229, an address that was on \"Confirmed phishing host address (DomainSpoof, 48 hours)\" from 2026-10-19T16:01:01.231Z to 2026-10-20T00:25:51.901Z and was still on it at the latest check. This is a fact about the address, not a verdict about the name.","hostname":"dhl.cc","hostnameUnicode":"dhl.cc","registrableDomain":"dhl.cc","organization":{"id":"org_dhl","slug":"dhl","displayName":"DHL","url":"https://domainspoof.org/companies/dhl"},"otherOrganizations":[],"address":"208.98.40.229","list":{"id":"domainspoof_phish_hosts","name":"Confirmed phishing host address (DomainSpoof, 48 hours)","category":"phishing_hosting"},"firstMatchedAt":"2026-10-19T16:01:01.231Z","lastMatchedAt":"2026-10-20T00:25:51.901Z","expiredAt":null,"expired":false,"updatedAt":"2026-10-20T00:25:51.901Z","dnsObservedAt":"2026-10-19T10:51:17.462Z","dns":{"status":"ok","checkedAt":"2026-10-19T10:51:17.462Z"},"mail":{"checkedAt":"2026-10-19T05:52:57.411Z","hasMx":false,"spf":false,"dmarc":false,"mx":[],"provider":null,"providerClass":null,"providerHost":null,"sendsVia":[],"spfAll":null,"dmarcPolicy":null,"lookupStatus":"ok","listed":null},"spelling":{"kind":"tld","generatedFrom":"dhl.com"},"certificate":null,"feedHost":null},{"kind":"generated_spelling","kindLabel":"Generated spelling","statement":"dkbsupport.de (a generated spelling) resolved to 191.101.104.118, an address that was on \"Confirmed phishing host address (DomainSpoof, 48 hours)\" from 2026-10-19T15:34:32.792Z to 2026-10-20T00:25:51.901Z and was still on it at the latest check. This is a fact about the address, not a verdict about the name.","hostname":"dkbsupport.de","hostnameUnicode":"dkbsupport.de","registrableDomain":"dkbsupport.de","organization":{"id":"org_dkb","slug":"dkb","displayName":"DKB","url":"https://domainspoof.org/companies/dkb"},"otherOrganizations":[],"address":"191.101.104.118","list":{"id":"domainspoof_phish_hosts","name":"Confirmed phishing host address (DomainSpoof, 48 hours)","category":"phishing_hosting"},"firstMatchedAt":"2026-10-19T15:34:32.792Z","lastMatchedAt":"2026-10-20T00:25:51.901Z","expiredAt":null,"expired":false,"updatedAt":"2026-10-20T00:25:51.901Z","dnsObservedAt":"2026-10-19T10:51:19.495Z","dns":{"status":"ok","checkedAt":"2026-10-19T10:51:19.495Z"},"mail":{"checkedAt":"2026-10-19T10:42:54.691Z","hasMx":true,"spf":true,"dmarc":true,"mx":["mx1.hostinger.com","mx2.hostinger.com"],"provider":"Hostinger","providerClass":"hosting","providerHost":"mx1.hostinger.com","sendsVia":[{"host":"_spf.mail.hostinger.com","name":"Hostinger","cls":"hosting","via":"include"}],"spfAll":"~","dmarcPolicy":"none","lookupStatus":"ok","listed":{"checkedAt":"2026-10-19T10:42:54.691Z","lists":[],"mx":[],"spf":[]}},"spelling":{"kind":"insertion","generatedFrom":"dkb.de"},"certificate":null,"feedHost":null},{"kind":"generated_spelling","kindLabel":"Generated spelling","statement":"dkbsupport.de (a generated spelling) resolved to 195.35.60.242, an address that was on \"Confirmed phishing host address (DomainSpoof, 48 hours)\" from 2026-10-19T15:34:32.792Z to 2026-10-20T00:25:51.901Z and was still on it at the latest check. This is a fact about the address, not a verdict about the name.","hostname":"dkbsupport.de","hostnameUnicode":"dkbsupport.de","registrableDomain":"dkbsupport.de","organization":{"id":"org_dkb","slug":"dkb","displayName":"DKB","url":"https://domainspoof.org/companies/dkb"},"otherOrganizations":[],"address":"195.35.60.242","list":{"id":"domainspoof_phish_hosts","name":"Confirmed phishing host address (DomainSpoof, 48 hours)","category":"phishing_hosting"},"firstMatchedAt":"2026-10-19T15:34:32.792Z","lastMatchedAt":"2026-10-20T00:25:51.901Z","expiredAt":null,"expired":false,"updatedAt":"2026-10-20T00:25:51.901Z","dnsObservedAt":"2026-10-19T10:51:19.495Z","dns":{"status":"ok","checkedAt":"2026-10-19T10:51:19.495Z"},"mail":{"checkedAt":"2026-10-19T10:42:54.691Z","hasMx":true,"spf":true,"dmarc":true,"mx":["mx1.hostinger.com","mx2.hostinger.com"],"provider":"Hostinger","providerClass":"hosting","providerHost":"mx1.hostinger.com","sendsVia":[{"host":"_spf.mail.hostinger.com","name":"Hostinger","cls":"hosting","via":"include"}],"spfAll":"~","dmarcPolicy":"none","lookupStatus":"ok","listed":{"checkedAt":"2026-10-19T10:42:54.691Z","lists":[],"mx":[],"spf":[]}},"spelling":{"kind":"insertion","generatedFrom":"dkb.de"},"certificate":null,"feedHost":null},{"kind":"generated_spelling","kindLabel":"Generated spelling","statement":"eliad.fr (a generated spelling) resolved to 213.186.33.19, an address that was on \"Confirmed phishing host address (DomainSpoof, 48 hours)\" from 2026-10-19T15:34:32.792Z to 2026-10-20T00:25:51.901Z and was still on it at the latest check. This is a fact about the address, not a verdict about the name.","hostname":"eliad.fr","hostnameUnicode":"eliad.fr","registrableDomain":"eliad.fr","organization":{"id":"org_free","slug":"free-iliad","displayName":"Free (Iliad)","url":"https://domainspoof.org/companies/free-iliad"},"otherOrganizations":[],"address":"213.186.33.19","list":{"id":"domainspoof_phish_hosts","name":"Confirmed phishing host address (DomainSpoof, 48 hours)","category":"phishing_hosting"},"firstMatchedAt":"2026-10-19T15:34:32.792Z","lastMatchedAt":"2026-10-20T00:25:51.901Z","expiredAt":null,"expired":false,"updatedAt":"2026-10-20T00:25:51.901Z","dnsObservedAt":"2026-10-19T10:51:34.935Z","dns":{"status":"ok","checkedAt":"2026-10-19T10:51:34.935Z"},"mail":{"checkedAt":"2026-10-19T10:42:54.691Z","hasMx":true,"spf":true,"dmarc":false,"mx":["mx0.ovh.net","mxb.ovh.net"],"provider":"OVH","providerClass":"hosting","providerHost":"mx0.ovh.net","sendsVia":[{"host":"mx.ovh.com","name":"OVH","cls":"hosting","via":"include"}],"spfAll":"~","dmarcPolicy":null,"lookupStatus":"ok","listed":{"checkedAt":"2026-10-19T10:42:54.691Z","lists":[],"mx":[],"spf":[]}},"spelling":{"kind":"vowel_swap","generatedFrom":"iliad.fr"},"certificate":null,"feedHost":null},{"kind":"generated_spelling","kindLabel":"Generated spelling","statement":"ffee.fr (a generated spelling) resolved to 191.96.144.48, an address that was on \"Confirmed phishing host address (DomainSpoof, 48 hours)\" from 2026-10-19T15:34:32.792Z to 2026-10-20T00:25:51.901Z and was still on it at the latest check. This is a fact about the address, not a verdict about the name.","hostname":"ffee.fr","hostnameUnicode":"ffee.fr","registrableDomain":"ffee.fr","organization":{"id":"org_free","slug":"free-iliad","displayName":"Free (Iliad)","url":"https://domainspoof.org/companies/free-iliad"},"otherOrganizations":[],"address":"191.96.144.48","list":{"id":"domainspoof_phish_hosts","name":"Confirmed phishing host address (DomainSpoof, 48 hours)","category":"phishing_hosting"},"firstMatchedAt":"2026-10-19T15:34:32.792Z","lastMatchedAt":"2026-10-20T00:25:51.901Z","expiredAt":null,"expired":false,"updatedAt":"2026-10-20T00:25:51.901Z","dnsObservedAt":"2026-10-19T10:52:36.637Z","dns":{"status":"ok","checkedAt":"2026-10-19T10:52:36.637Z"},"mail":{"checkedAt":"2026-10-19T10:42:54.691Z","hasMx":true,"spf":true,"dmarc":true,"mx":["mx2.hostinger.com","mx1.hostinger.com"],"provider":"Hostinger","providerClass":"hosting","providerHost":"mx2.hostinger.com","sendsVia":[{"host":"_spf.mail.hostinger.com","name":"Hostinger","cls":"hosting","via":"include"}],"spfAll":"~","dmarcPolicy":"none","lookupStatus":"ok","listed":{"checkedAt":"2026-10-19T10:42:54.691Z","lists":[],"mx":[],"spf":[]}},"spelling":{"kind":"adjacent_key","generatedFrom":"free.fr"},"certificate":null,"feedHost":null},{"kind":"generated_spelling","kindLabel":"Generated spelling","statement":"ffee.fr (a generated spelling) resolved to 212.1.212.182, an address that was on \"Confirmed phishing host address (DomainSpoof, 48 hours)\" from 2026-10-19T15:34:32.792Z to 2026-10-20T00:25:51.901Z and was still on it at the latest check. This is a fact about the address, not a verdict about the name.","hostname":"ffee.fr","hostnameUnicode":"ffee.fr","registrableDomain":"ffee.fr","organization":{"id":"org_free","slug":"free-iliad","displayName":"Free (Iliad)","url":"https://domainspoof.org/companies/free-iliad"},"otherOrganizations":[],"address":"212.1.212.182","list":{"id":"domainspoof_phish_hosts","name":"Confirmed phishing host address (DomainSpoof, 48 hours)","category":"phishing_hosting"},"firstMatchedAt":"2026-10-19T15:34:32.792Z","lastMatchedAt":"2026-10-20T00:25:51.901Z","expiredAt":null,"expired":false,"updatedAt":"2026-10-20T00:25:51.901Z","dnsObservedAt":"2026-10-19T10:52:36.637Z","dns":{"status":"ok","checkedAt":"2026-10-19T10:52:36.637Z"},"mail":{"checkedAt":"2026-10-19T10:42:54.691Z","hasMx":true,"spf":true,"dmarc":true,"mx":["mx2.hostinger.com","mx1.hostinger.com"],"provider":"Hostinger","providerClass":"hosting","providerHost":"mx2.hostinger.com","sendsVia":[{"host":"_spf.mail.hostinger.com","name":"Hostinger","cls":"hosting","via":"include"}],"spfAll":"~","dmarcPolicy":"none","lookupStatus":"ok","listed":{"checkedAt":"2026-10-19T10:42:54.691Z","lists":[],"mx":[],"spf":[]}},"spelling":{"kind":"adjacent_key","generatedFrom":"free.fr"},"certificate":null,"feedHost":null},{"kind":"generated_spelling","kindLabel":"Generated spelling","statement":"free.live (a generated spelling) resolved to 64.70.19.34, an address that was on \"Confirmed phishing host address (DomainSpoof, 48 hours)\" from 2026-10-19T15:34:32.792Z to 2026-10-20T00:25:51.901Z and was still on it at the latest check. This is a fact about the address, not a verdict about the name.","hostname":"free.live","hostnameUnicode":"free.live","registrableDomain":"free.live","organization":{"id":"org_free","slug":"free-iliad","displayName":"Free (Iliad)","url":"https://domainspoof.org/companies/free-iliad"},"otherOrganizations":[],"address":"64.70.19.34","list":{"id":"domainspoof_phish_hosts","name":"Confirmed phishing host address (DomainSpoof, 48 hours)","category":"phishing_hosting"},"firstMatchedAt":"2026-10-19T15:34:32.792Z","lastMatchedAt":"2026-10-20T00:25:51.901Z","expiredAt":null,"expired":false,"updatedAt":"2026-10-20T00:25:51.901Z","dnsObservedAt":"2026-10-19T10:52:46.411Z","dns":{"status":"ok","checkedAt":"2026-10-19T10:52:46.411Z"},"mail":{"checkedAt":"2026-10-19T10:42:54.691Z","hasMx":true,"spf":true,"dmarc":true,"mx":["relay.ws.ws"],"provider":"relay.ws.ws","providerClass":null,"providerHost":"relay.ws.ws","sendsVia":[{"host":"website.ws","name":"website.ws","cls":null,"via":"redirect"}],"spfAll":null,"dmarcPolicy":"none","lookupStatus":"ok","listed":{"checkedAt":"2026-10-19T10:42:54.691Z","lists":[],"mx":[],"spf":[]}},"spelling":{"kind":"tld","generatedFrom":"free.fr"},"certificate":null,"feedHost":null},{"kind":"generated_spelling","kindLabel":"Generated spelling","statement":"intesasanpaolo.app (a generated spelling) resolved to 193.227.214.38, an address that was on \"Confirmed phishing host address (DomainSpoof, 48 hours)\" from 2026-10-19T15:34:32.792Z to 2026-10-20T00:25:51.901Z and was still on it at the latest check. This is a fact about the address, not a verdict about the name.","hostname":"intesasanpaolo.app","hostnameUnicode":"intesasanpaolo.app","registrableDomain":"intesasanpaolo.app","organization":{"id":"org_intesasanpaolo","slug":"intesa-sanpaolo","displayName":"Intesa Sanpaolo","url":"https://domainspoof.org/companies/intesa-sanpaolo"},"otherOrganizations":[],"address":"193.227.214.38","list":{"id":"domainspoof_phish_hosts","name":"Confirmed phishing host address (DomainSpoof, 48 hours)","category":"phishing_hosting"},"firstMatchedAt":"2026-10-19T15:34:32.792Z","lastMatchedAt":"2026-10-20T00:25:51.901Z","expiredAt":null,"expired":false,"updatedAt":"2026-10-20T00:25:51.901Z","dnsObservedAt":"2026-10-19T10:54:25.624Z","dns":{"status":"ok","checkedAt":"2026-10-19T10:54:25.624Z"},"mail":{"checkedAt":"2026-10-19T10:42:54.690Z","hasMx":false,"spf":true,"dmarc":true,"mx":[],"provider":null,"providerClass":null,"providerHost":null,"sendsVia":[{"host":"spf.intesasanpaolo.com","name":"spf.intesasanpaolo.com","cls":null,"via":"include"}],"spfAll":"-","dmarcPolicy":"reject","lookupStatus":"ok","listed":{"checkedAt":"2026-10-19T10:42:54.690Z","lists":[],"mx":[],"spf":[]}},"spelling":{"kind":"tld","generatedFrom":"intesasanpaolo.com"},"certificate":null,"feedHost":null},{"kind":"generated_spelling","kindLabel":"Generated spelling","statement":"intesasanpaolo.biz (a generated spelling) resolved to 193.227.214.38, an address that was on \"Confirmed phishing host address (DomainSpoof, 48 hours)\" from 2026-10-19T15:34:32.792Z to 2026-10-20T00:25:51.901Z and was still on it at the latest check. This is a fact about the address, not a verdict about the name.","hostname":"intesasanpaolo.biz","hostnameUnicode":"intesasanpaolo.biz","registrableDomain":"intesasanpaolo.biz","organization":{"id":"org_intesasanpaolo","slug":"intesa-sanpaolo","displayName":"Intesa Sanpaolo","url":"https://domainspoof.org/companies/intesa-sanpaolo"},"otherOrganizations":[],"address":"193.227.214.38","list":{"id":"domainspoof_phish_hosts","name":"Confirmed phishing host address (DomainSpoof, 48 hours)","category":"phishing_hosting"},"firstMatchedAt":"2026-10-19T15:34:32.792Z","lastMatchedAt":"2026-10-20T00:25:51.901Z","expiredAt":null,"expired":false,"updatedAt":"2026-10-20T00:25:51.901Z","dnsObservedAt":"2026-10-19T10:54:25.626Z","dns":{"status":"ok","checkedAt":"2026-10-19T10:54:25.626Z"},"mail":{"checkedAt":"2026-10-19T10:42:54.690Z","hasMx":false,"spf":true,"dmarc":true,"mx":[],"provider":null,"providerClass":null,"providerHost":null,"sendsVia":[{"host":"spf.intesasanpaolo.com","name":"spf.intesasanpaolo.com","cls":null,"via":"include"}],"spfAll":"-","dmarcPolicy":"reject","lookupStatus":"ok","listed":{"checkedAt":"2026-10-19T10:42:54.690Z","lists":[],"mx":[],"spf":[]}},"spelling":{"kind":"tld","generatedFrom":"intesasanpaolo.com"},"certificate":null,"feedHost":null},{"kind":"generated_spelling","kindLabel":"Generated spelling","statement":"intesasanpaolo.cc (a generated spelling) resolved to 193.227.214.38, an address that was on \"Confirmed phishing host address (DomainSpoof, 48 hours)\" from 2026-10-19T15:34:32.792Z to 2026-10-20T00:25:51.901Z and was still on it at the latest check. This is a fact about the address, not a verdict about the name.","hostname":"intesasanpaolo.cc","hostnameUnicode":"intesasanpaolo.cc","registrableDomain":"intesasanpaolo.cc","organization":{"id":"org_intesasanpaolo","slug":"intesa-sanpaolo","displayName":"Intesa Sanpaolo","url":"https://domainspoof.org/companies/intesa-sanpaolo"},"otherOrganizations":[],"address":"193.227.214.38","list":{"id":"domainspoof_phish_hosts","name":"Confirmed phishing host address (DomainSpoof, 48 hours)","category":"phishing_hosting"},"firstMatchedAt":"2026-10-19T15:34:32.792Z","lastMatchedAt":"2026-10-20T00:25:51.901Z","expiredAt":null,"expired":false,"updatedAt":"2026-10-20T00:25:51.901Z","dnsObservedAt":"2026-10-19T10:54:25.626Z","dns":{"status":"ok","checkedAt":"2026-10-19T10:54:25.626Z"},"mail":{"checkedAt":"2026-10-19T10:42:54.690Z","hasMx":false,"spf":true,"dmarc":true,"mx":[],"provider":null,"providerClass":null,"providerHost":null,"sendsVia":[{"host":"spf.intesasanpaolo.com","name":"spf.intesasanpaolo.com","cls":null,"via":"include"}],"spfAll":"-","dmarcPolicy":"reject","lookupStatus":"ok","listed":{"checkedAt":"2026-10-19T10:42:54.690Z","lists":[],"mx":[],"spf":[]}},"spelling":{"kind":"tld","generatedFrom":"intesasanpaolo.com"},"certificate":null,"feedHost":null},{"kind":"generated_spelling","kindLabel":"Generated spelling","statement":"intesasanpaolo.club (a generated spelling) resolved to 193.227.214.38, an address that was on \"Confirmed phishing host address (DomainSpoof, 48 hours)\" from 2026-10-19T15:34:32.792Z to 2026-10-20T00:25:51.901Z and was still on it at the latest check. This is a fact about the address, not a verdict about the name.","hostname":"intesasanpaolo.club","hostnameUnicode":"intesasanpaolo.club","registrableDomain":"intesasanpaolo.club","organization":{"id":"org_intesasanpaolo","slug":"intesa-sanpaolo","displayName":"Intesa Sanpaolo","url":"https://domainspoof.org/companies/intesa-sanpaolo"},"otherOrganizations":[],"address":"193.227.214.38","list":{"id":"domainspoof_phish_hosts","name":"Confirmed phishing host address (DomainSpoof, 48 hours)","category":"phishing_hosting"},"firstMatchedAt":"2026-10-19T15:34:32.792Z","lastMatchedAt":"2026-10-20T00:25:51.901Z","expiredAt":null,"expired":false,"updatedAt":"2026-10-20T00:25:51.901Z","dnsObservedAt":"2026-10-19T10:54:25.637Z","dns":{"status":"ok","checkedAt":"2026-10-19T10:54:25.637Z"},"mail":{"checkedAt":"2026-10-19T10:42:54.690Z","hasMx":false,"spf":true,"dmarc":true,"mx":[],"provider":null,"providerClass":null,"providerHost":null,"sendsVia":[{"host":"spf.intesasanpaolo.com","name":"spf.intesasanpaolo.com","cls":null,"via":"include"}],"spfAll":"-","dmarcPolicy":"reject","lookupStatus":"ok","listed":{"checkedAt":"2026-10-19T10:42:54.690Z","lists":[],"mx":[],"spf":[]}},"spelling":{"kind":"tld","generatedFrom":"intesasanpaolo.com"},"certificate":null,"feedHost":null},{"kind":"generated_spelling","kindLabel":"Generated spelling","statement":"intesasanpaolo.co (a generated spelling) resolved to 193.227.214.38, an address that was on \"Confirmed phishing host address (DomainSpoof, 48 hours)\" from 2026-10-19T15:34:32.792Z to 2026-10-20T00:25:51.901Z and was still on it at the latest check. This is a fact about the address, not a verdict about the name.","hostname":"intesasanpaolo.co","hostnameUnicode":"intesasanpaolo.co","registrableDomain":"intesasanpaolo.co","organization":{"id":"org_intesasanpaolo","slug":"intesa-sanpaolo","displayName":"Intesa Sanpaolo","url":"https://domainspoof.org/companies/intesa-sanpaolo"},"otherOrganizations":[],"address":"193.227.214.38","list":{"id":"domainspoof_phish_hosts","name":"Confirmed phishing host address (DomainSpoof, 48 hours)","category":"phishing_hosting"},"firstMatchedAt":"2026-10-19T15:34:32.792Z","lastMatchedAt":"2026-10-20T00:25:51.901Z","expiredAt":null,"expired":false,"updatedAt":"2026-10-20T00:25:51.901Z","dnsObservedAt":"2026-10-19T10:54:26.062Z","dns":{"status":"ok","checkedAt":"2026-10-19T10:54:26.062Z"},"mail":{"checkedAt":"2026-10-19T10:42:54.690Z","hasMx":false,"spf":true,"dmarc":true,"mx":[],"provider":null,"providerClass":null,"providerHost":null,"sendsVia":[{"host":"spf.intesasanpaolo.com","name":"spf.intesasanpaolo.com","cls":null,"via":"include"}],"spfAll":"-","dmarcPolicy":"reject","lookupStatus":"ok","listed":{"checkedAt":"2026-10-19T10:42:54.690Z","lists":[],"mx":[],"spf":[]}},"spelling":{"kind":"tld","generatedFrom":"intesasanpaolo.com"},"certificate":null,"feedHost":null},{"kind":"generated_spelling","kindLabel":"Generated spelling","statement":"intesasanpaolo.help (a generated spelling) resolved to 193.227.214.38, an address that was on \"Confirmed phishing host address (DomainSpoof, 48 hours)\" from 2026-10-19T15:34:32.792Z to 2026-10-20T00:25:51.901Z and was still on it at the latest check. This is a fact about the address, not a verdict about the name.","hostname":"intesasanpaolo.help","hostnameUnicode":"intesasanpaolo.help","registrableDomain":"intesasanpaolo.help","organization":{"id":"org_intesasanpaolo","slug":"intesa-sanpaolo","displayName":"Intesa Sanpaolo","url":"https://domainspoof.org/companies/intesa-sanpaolo"},"otherOrganizations":[],"address":"193.227.214.38","list":{"id":"domainspoof_phish_hosts","name":"Confirmed phishing host address (DomainSpoof, 48 hours)","category":"phishing_hosting"},"firstMatchedAt":"2026-10-19T15:34:32.792Z","lastMatchedAt":"2026-10-20T00:25:51.901Z","expiredAt":null,"expired":false,"updatedAt":"2026-10-20T00:25:51.901Z","dnsObservedAt":"2026-10-19T10:54:26.049Z","dns":{"status":"ok","checkedAt":"2026-10-19T10:54:26.049Z"},"mail":{"checkedAt":"2026-10-19T10:42:54.690Z","hasMx":false,"spf":true,"dmarc":true,"mx":[],"provider":null,"providerClass":null,"providerHost":null,"sendsVia":[{"host":"spf.intesasanpaolo.com","name":"spf.intesasanpaolo.com","cls":null,"via":"include"}],"spfAll":"-","dmarcPolicy":"reject","lookupStatus":"ok","listed":{"checkedAt":"2026-10-19T10:42:54.690Z","lists":[],"mx":[],"spf":[]}},"spelling":{"kind":"tld","generatedFrom":"intesasanpaolo.com"},"certificate":null,"feedHost":null},{"kind":"generated_spelling","kindLabel":"Generated spelling","statement":"intesasanpaolo.info (a generated spelling) resolved to 193.227.214.38, an address that was on \"Confirmed phishing host address (DomainSpoof, 48 hours)\" from 2026-10-19T15:34:32.792Z to 2026-10-20T00:25:51.901Z and was still on it at the latest check. This is a fact about the address, not a verdict about the name.","hostname":"intesasanpaolo.info","hostnameUnicode":"intesasanpaolo.info","registrableDomain":"intesasanpaolo.info","organization":{"id":"org_intesasanpaolo","slug":"intesa-sanpaolo","displayName":"Intesa Sanpaolo","url":"https://domainspoof.org/companies/intesa-sanpaolo"},"otherOrganizations":[],"address":"193.227.214.38","list":{"id":"domainspoof_phish_hosts","name":"Confirmed phishing host address (DomainSpoof, 48 hours)","category":"phishing_hosting"},"firstMatchedAt":"2026-10-19T15:34:32.792Z","lastMatchedAt":"2026-10-20T00:25:51.901Z","expiredAt":null,"expired":false,"updatedAt":"2026-10-20T00:25:51.901Z","dnsObservedAt":"2026-10-19T10:54:25.629Z","dns":{"status":"ok","checkedAt":"2026-10-19T10:54:25.629Z"},"mail":{"checkedAt":"2026-10-19T10:42:54.690Z","hasMx":false,"spf":true,"dmarc":true,"mx":[],"provider":null,"providerClass":null,"providerHost":null,"sendsVia":[{"host":"spf.intesasanpaolo.com","name":"spf.intesasanpaolo.com","cls":null,"via":"include"}],"spfAll":"-","dmarcPolicy":"reject","lookupStatus":"ok","listed":{"checkedAt":"2026-10-19T10:42:54.690Z","lists":[],"mx":[],"spf":[]}},"spelling":{"kind":"tld","generatedFrom":"intesasanpaolo.com"},"certificate":null,"feedHost":null},{"kind":"generated_spelling","kindLabel":"Generated spelling","statement":"intesasanpaolo.live (a generated spelling) resolved to 193.227.214.38, an address that was on \"Confirmed phishing host address (DomainSpoof, 48 hours)\" from 2026-10-19T15:34:32.792Z to 2026-10-20T00:25:51.901Z and was still on it at the latest check. This is a fact about the address, not a verdict about the name.","hostname":"intesasanpaolo.live","hostnameUnicode":"intesasanpaolo.live","registrableDomain":"intesasanpaolo.live","organization":{"id":"org_intesasanpaolo","slug":"intesa-sanpaolo","displayName":"Intesa Sanpaolo","url":"https://domainspoof.org/companies/intesa-sanpaolo"},"otherOrganizations":[],"address":"193.227.214.38","list":{"id":"domainspoof_phish_hosts","name":"Confirmed phishing host address (DomainSpoof, 48 hours)","category":"phishing_hosting"},"firstMatchedAt":"2026-10-19T15:34:32.792Z","lastMatchedAt":"2026-10-20T00:25:51.901Z","expiredAt":null,"expired":false,"updatedAt":"2026-10-20T00:25:51.901Z","dnsObservedAt":"2026-10-19T10:54:25.644Z","dns":{"status":"ok","checkedAt":"2026-10-19T10:54:25.644Z"},"mail":{"checkedAt":"2026-10-19T10:42:54.690Z","hasMx":false,"spf":true,"dmarc":true,"mx":[],"provider":null,"providerClass":null,"providerHost":null,"sendsVia":[{"host":"spf.intesasanpaolo.com","name":"spf.intesasanpaolo.com","cls":null,"via":"include"}],"spfAll":"-","dmarcPolicy":"reject","lookupStatus":"ok","listed":{"checkedAt":"2026-10-19T10:42:54.690Z","lists":[],"mx":[],"spf":[]}},"spelling":{"kind":"tld","generatedFrom":"intesasanpaolo.com"},"certificate":null,"feedHost":null},{"kind":"generated_spelling","kindLabel":"Generated spelling","statement":"intesasanpaolo.me (a generated spelling) resolved to 193.227.214.38, an address that was on \"Confirmed phishing host address (DomainSpoof, 48 hours)\" from 2026-10-19T15:34:32.792Z to 2026-10-20T00:25:51.901Z and was still on it at the latest check. This is a fact about the address, not a verdict about the name.","hostname":"intesasanpaolo.me","hostnameUnicode":"intesasanpaolo.me","registrableDomain":"intesasanpaolo.me","organization":{"id":"org_intesasanpaolo","slug":"intesa-sanpaolo","displayName":"Intesa Sanpaolo","url":"https://domainspoof.org/companies/intesa-sanpaolo"},"otherOrganizations":[],"address":"193.227.214.38","list":{"id":"domainspoof_phish_hosts","name":"Confirmed phishing host address (DomainSpoof, 48 hours)","category":"phishing_hosting"},"firstMatchedAt":"2026-10-19T15:34:32.792Z","lastMatchedAt":"2026-10-20T00:25:51.901Z","expiredAt":null,"expired":false,"updatedAt":"2026-10-20T00:25:51.901Z","dnsObservedAt":"2026-10-19T10:54:25.631Z","dns":{"status":"ok","checkedAt":"2026-10-19T10:54:25.631Z"},"mail":{"checkedAt":"2026-10-19T10:42:54.690Z","hasMx":true,"spf":true,"dmarc":true,"mx":["protetto.intesasanpaolo.com"],"provider":"protetto.intesasanpaolo.com","providerClass":null,"providerHost":"protetto.intesasanpaolo.com","sendsVia":[{"host":"spf.intesasanpaolo.com","name":"spf.intesasanpaolo.com","cls":null,"via":"include"}],"spfAll":"-","dmarcPolicy":"reject","lookupStatus":"ok","listed":{"checkedAt":"2026-10-19T10:42:54.690Z","lists":[],"mx":[],"spf":[]}},"spelling":{"kind":"tld","generatedFrom":"intesasanpaolo.com"},"certificate":null,"feedHost":null},{"kind":"generated_spelling","kindLabel":"Generated spelling","statement":"intesasanpaolo.net (a generated spelling) resolved to 193.227.214.38, an address that was on \"Confirmed phishing host address (DomainSpoof, 48 hours)\" from 2026-10-19T15:34:32.792Z to 2026-10-20T00:25:51.901Z and was still on it at the latest check. This is a fact about the address, not a verdict about the name.","hostname":"intesasanpaolo.net","hostnameUnicode":"intesasanpaolo.net","registrableDomain":"intesasanpaolo.net","organization":{"id":"org_intesasanpaolo","slug":"intesa-sanpaolo","displayName":"Intesa Sanpaolo","url":"https://domainspoof.org/companies/intesa-sanpaolo"},"otherOrganizations":[],"address":"193.227.214.38","list":{"id":"domainspoof_phish_hosts","name":"Confirmed phishing host address (DomainSpoof, 48 hours)","category":"phishing_hosting"},"firstMatchedAt":"2026-10-19T15:34:32.792Z","lastMatchedAt":"2026-10-20T00:25:51.901Z","expiredAt":null,"expired":false,"updatedAt":"2026-10-20T00:25:51.901Z","dnsObservedAt":"2026-10-19T10:54:25.631Z","dns":{"status":"ok","checkedAt":"2026-10-19T10:54:25.631Z"},"mail":{"checkedAt":"2026-10-19T10:42:54.690Z","hasMx":false,"spf":true,"dmarc":true,"mx":[],"provider":null,"providerClass":null,"providerHost":null,"sendsVia":[{"host":"spf.intesasanpaolo.com","name":"spf.intesasanpaolo.com","cls":null,"via":"include"}],"spfAll":"-","dmarcPolicy":"reject","lookupStatus":"ok","listed":{"checkedAt":"2026-10-19T10:42:54.690Z","lists":[],"mx":[],"spf":[]}},"spelling":{"kind":"tld","generatedFrom":"intesasanpaolo.com"},"certificate":null,"feedHost":null},{"kind":"generated_spelling","kindLabel":"Generated spelling","statement":"intesasanpaolo.online (a generated spelling) resolved to 193.227.214.38, an address that was on \"Confirmed phishing host address (DomainSpoof, 48 hours)\" from 2026-10-19T15:34:32.792Z to 2026-10-20T00:25:51.901Z and was still on it at the latest check. This is a fact about the address, not a verdict about the name.","hostname":"intesasanpaolo.online","hostnameUnicode":"intesasanpaolo.online","registrableDomain":"intesasanpaolo.online","organization":{"id":"org_intesasanpaolo","slug":"intesa-sanpaolo","displayName":"Intesa Sanpaolo","url":"https://domainspoof.org/companies/intesa-sanpaolo"},"otherOrganizations":[],"address":"193.227.214.38","list":{"id":"domainspoof_phish_hosts","name":"Confirmed phishing host address (DomainSpoof, 48 hours)","category":"phishing_hosting"},"firstMatchedAt":"2026-10-19T15:34:32.792Z","lastMatchedAt":"2026-10-20T00:25:51.901Z","expiredAt":null,"expired":false,"updatedAt":"2026-10-20T00:25:51.901Z","dnsObservedAt":"2026-10-19T10:54:25.870Z","dns":{"status":"ok","checkedAt":"2026-10-19T10:54:25.870Z"},"mail":{"checkedAt":"2026-10-19T10:42:54.690Z","hasMx":false,"spf":true,"dmarc":true,"mx":[],"provider":null,"providerClass":null,"providerHost":null,"sendsVia":[{"host":"spf.intesasanpaolo.com","name":"spf.intesasanpaolo.com","cls":null,"via":"include"}],"spfAll":"-","dmarcPolicy":"reject","lookupStatus":"ok","listed":{"checkedAt":"2026-10-19T10:42:54.690Z","lists":[],"mx":[],"spf":[]}},"spelling":{"kind":"tld","generatedFrom":"intesasanpaolo.com"},"certificate":null,"feedHost":null},{"kind":"generated_spelling","kindLabel":"Generated spelling","statement":"intesasanpaolo.org (a generated spelling) resolved to 193.227.214.38, an address that was on \"Confirmed phishing host address (DomainSpoof, 48 hours)\" from 2026-10-19T15:34:32.792Z to 2026-10-20T00:25:51.901Z and was still on it at the latest check. This is a fact about the address, not a verdict about the name.","hostname":"intesasanpaolo.org","hostnameUnicode":"intesasanpaolo.org","registrableDomain":"intesasanpaolo.org","organization":{"id":"org_intesasanpaolo","slug":"intesa-sanpaolo","displayName":"Intesa Sanpaolo","url":"https://domainspoof.org/companies/intesa-sanpaolo"},"otherOrganizations":[],"address":"193.227.214.38","list":{"id":"domainspoof_phish_hosts","name":"Confirmed phishing host address (DomainSpoof, 48 hours)","category":"phishing_hosting"},"firstMatchedAt":"2026-10-19T15:34:32.792Z","lastMatchedAt":"2026-10-20T00:25:51.901Z","expiredAt":null,"expired":false,"updatedAt":"2026-10-20T00:25:51.901Z","dnsObservedAt":"2026-10-19T10:54:25.632Z","dns":{"status":"ok","checkedAt":"2026-10-19T10:54:25.632Z"},"mail":{"checkedAt":"2026-10-19T10:42:54.690Z","hasMx":false,"spf":true,"dmarc":true,"mx":[],"provider":null,"providerClass":null,"providerHost":null,"sendsVia":[{"host":"spf.intesasanpaolo.com","name":"spf.intesasanpaolo.com","cls":null,"via":"include"}],"spfAll":"-","dmarcPolicy":"reject","lookupStatus":"ok","listed":{"checkedAt":"2026-10-19T10:42:54.690Z","lists":[],"mx":[],"spf":[]}},"spelling":{"kind":"tld","generatedFrom":"intesasanpaolo.com"},"certificate":null,"feedHost":null},{"kind":"generated_spelling","kindLabel":"Generated spelling","statement":"intesasanpaolo.shop (a generated spelling) resolved to 193.227.214.38, an address that was on \"Confirmed phishing host address (DomainSpoof, 48 hours)\" from 2026-10-19T15:34:32.792Z to 2026-10-20T00:25:51.901Z and was still on it at the latest check. This is a fact about the address, not a verdict about the name.","hostname":"intesasanpaolo.shop","hostnameUnicode":"intesasanpaolo.shop","registrableDomain":"intesasanpaolo.shop","organization":{"id":"org_intesasanpaolo","slug":"intesa-sanpaolo","displayName":"Intesa Sanpaolo","url":"https://domainspoof.org/companies/intesa-sanpaolo"},"otherOrganizations":[],"address":"193.227.214.38","list":{"id":"domainspoof_phish_hosts","name":"Confirmed phishing host address (DomainSpoof, 48 hours)","category":"phishing_hosting"},"firstMatchedAt":"2026-10-19T15:34:32.792Z","lastMatchedAt":"2026-10-20T00:25:51.901Z","expiredAt":null,"expired":false,"updatedAt":"2026-10-20T00:25:51.901Z","dnsObservedAt":"2026-10-19T10:54:25.633Z","dns":{"status":"ok","checkedAt":"2026-10-19T10:54:25.633Z"},"mail":{"checkedAt":"2026-10-19T10:42:54.690Z","hasMx":false,"spf":true,"dmarc":true,"mx":[],"provider":null,"providerClass":null,"providerHost":null,"sendsVia":[{"host":"spf.intesasanpaolo.com","name":"spf.intesasanpaolo.com","cls":null,"via":"include"}],"spfAll":"-","dmarcPolicy":"reject","lookupStatus":"ok","listed":{"checkedAt":"2026-10-19T10:42:54.690Z","lists":[],"mx":[],"spf":[]}},"spelling":{"kind":"tld","generatedFrom":"intesasanpaolo.com"},"certificate":null,"feedHost":null},{"kind":"generated_spelling","kindLabel":"Generated spelling","statement":"intesasanpaolo.site (a generated spelling) resolved to 193.227.214.38, an address that was on \"Confirmed phishing host address (DomainSpoof, 48 hours)\" from 2026-10-19T15:34:32.792Z to 2026-10-20T00:25:51.901Z and was still on it at the latest check. This is a fact about the address, not a verdict about the name.","hostname":"intesasanpaolo.site","hostnameUnicode":"intesasanpaolo.site","registrableDomain":"intesasanpaolo.site","organization":{"id":"org_intesasanpaolo","slug":"intesa-sanpaolo","displayName":"Intesa Sanpaolo","url":"https://domainspoof.org/companies/intesa-sanpaolo"},"otherOrganizations":[],"address":"193.227.214.38","list":{"id":"domainspoof_phish_hosts","name":"Confirmed phishing host address (DomainSpoof, 48 hours)","category":"phishing_hosting"},"firstMatchedAt":"2026-10-19T15:34:32.792Z","lastMatchedAt":"2026-10-20T00:25:51.901Z","expiredAt":null,"expired":false,"updatedAt":"2026-10-20T00:25:51.901Z","dnsObservedAt":"2026-10-19T10:54:25.645Z","dns":{"status":"ok","checkedAt":"2026-10-19T10:54:25.645Z"},"mail":{"checkedAt":"2026-10-19T10:42:54.690Z","hasMx":false,"spf":true,"dmarc":true,"mx":[],"provider":null,"providerClass":null,"providerHost":null,"sendsVia":[{"host":"spf.intesasanpaolo.com","name":"spf.intesasanpaolo.com","cls":null,"via":"include"}],"spfAll":"-","dmarcPolicy":"reject","lookupStatus":"ok","listed":{"checkedAt":"2026-10-19T10:42:54.690Z","lists":[],"mx":[],"spf":[]}},"spelling":{"kind":"tld","generatedFrom":"intesasanpaolo.com"},"certificate":null,"feedHost":null},{"kind":"generated_spelling","kindLabel":"Generated spelling","statement":"intesasanpaolo.store (a generated spelling) resolved to 193.227.214.38, an address that was on \"Confirmed phishing host address (DomainSpoof, 48 hours)\" from 2026-10-19T15:34:32.792Z to 2026-10-20T00:25:51.901Z and was still on it at the latest check. This is a fact about the address, not a verdict about the name.","hostname":"intesasanpaolo.store","hostnameUnicode":"intesasanpaolo.store","registrableDomain":"intesasanpaolo.store","organization":{"id":"org_intesasanpaolo","slug":"intesa-sanpaolo","displayName":"Intesa Sanpaolo","url":"https://domainspoof.org/companies/intesa-sanpaolo"},"otherOrganizations":[],"address":"193.227.214.38","list":{"id":"domainspoof_phish_hosts","name":"Confirmed phishing host address (DomainSpoof, 48 hours)","category":"phishing_hosting"},"firstMatchedAt":"2026-10-19T15:34:32.792Z","lastMatchedAt":"2026-10-20T00:25:51.901Z","expiredAt":null,"expired":false,"updatedAt":"2026-10-20T00:25:51.901Z","dnsObservedAt":"2026-10-19T10:54:25.634Z","dns":{"status":"ok","checkedAt":"2026-10-19T10:54:25.634Z"},"mail":{"checkedAt":"2026-10-19T10:42:54.690Z","hasMx":true,"spf":true,"dmarc":true,"mx":["protetto.intesasanpaolo.com"],"provider":"protetto.intesasanpaolo.com","providerClass":null,"providerHost":"protetto.intesasanpaolo.com","sendsVia":[{"host":"spf.intesasanpaolo.com","name":"spf.intesasanpaolo.com","cls":null,"via":"include"}],"spfAll":"-","dmarcPolicy":"reject","lookupStatus":"ok","listed":{"checkedAt":"2026-10-19T10:42:54.690Z","lists":[],"mx":[],"spf":[]}},"spelling":{"kind":"tld","generatedFrom":"intesasanpaolo.com"},"certificate":null,"feedHost":null},{"kind":"generated_spelling","kindLabel":"Generated spelling","statement":"intesasanpaolo.top (a generated spelling) resolved to 193.227.214.38, an address that was on \"Confirmed phishing host address (DomainSpoof, 48 hours)\" from 2026-10-19T15:34:32.792Z to 2026-10-20T00:25:51.901Z and was still on it at the latest check. This is a fact about the address, not a verdict about the name.","hostname":"intesasanpaolo.top","hostnameUnicode":"intesasanpaolo.top","registrableDomain":"intesasanpaolo.top","organization":{"id":"org_intesasanpaolo","slug":"intesa-sanpaolo","displayName":"Intesa Sanpaolo","url":"https://domainspoof.org/companies/intesa-sanpaolo"},"otherOrganizations":[],"address":"193.227.214.38","list":{"id":"domainspoof_phish_hosts","name":"Confirmed phishing host address (DomainSpoof, 48 hours)","category":"phishing_hosting"},"firstMatchedAt":"2026-10-19T15:34:32.792Z","lastMatchedAt":"2026-10-20T00:25:51.901Z","expiredAt":null,"expired":false,"updatedAt":"2026-10-20T00:25:51.901Z","dnsObservedAt":"2026-10-19T10:54:25.657Z","dns":{"status":"ok","checkedAt":"2026-10-19T10:54:25.657Z"},"mail":{"checkedAt":"2026-10-19T10:42:54.690Z","hasMx":false,"spf":true,"dmarc":true,"mx":[],"provider":null,"providerClass":null,"providerHost":null,"sendsVia":[{"host":"spf.intesasanpaolo.com","name":"spf.intesasanpaolo.com","cls":null,"via":"include"}],"spfAll":"-","dmarcPolicy":"reject","lookupStatus":"ok","listed":{"checkedAt":"2026-10-19T10:42:54.690Z","lists":[],"mx":[],"spf":[]}},"spelling":{"kind":"tld","generatedFrom":"intesasanpaolo.com"},"certificate":null,"feedHost":null},{"kind":"generated_spelling","kindLabel":"Generated spelling","statement":"intesasanpaolo.vip (a generated spelling) resolved to 193.227.214.38, an address that was on \"Confirmed phishing host address (DomainSpoof, 48 hours)\" from 2026-10-19T15:34:32.792Z to 2026-10-20T00:25:51.901Z and was still on it at the latest check. This is a fact about the address, not a verdict about the name.","hostname":"intesasanpaolo.vip","hostnameUnicode":"intesasanpaolo.vip","registrableDomain":"intesasanpaolo.vip","organization":{"id":"org_intesasanpaolo","slug":"intesa-sanpaolo","displayName":"Intesa Sanpaolo","url":"https://domainspoof.org/companies/intesa-sanpaolo"},"otherOrganizations":[],"address":"193.227.214.38","list":{"id":"domainspoof_phish_hosts","name":"Confirmed phishing host address (DomainSpoof, 48 hours)","category":"phishing_hosting"},"firstMatchedAt":"2026-10-19T15:34:32.792Z","lastMatchedAt":"2026-10-20T00:25:51.901Z","expiredAt":null,"expired":false,"updatedAt":"2026-10-20T00:25:51.901Z","dnsObservedAt":"2026-10-19T10:54:25.682Z","dns":{"status":"ok","checkedAt":"2026-10-19T10:54:25.682Z"},"mail":{"checkedAt":"2026-10-19T10:42:54.690Z","hasMx":false,"spf":true,"dmarc":true,"mx":[],"provider":null,"providerClass":null,"providerHost":null,"sendsVia":[{"host":"spf.intesasanpaolo.com","name":"spf.intesasanpaolo.com","cls":null,"via":"include"}],"spfAll":"-","dmarcPolicy":"reject","lookupStatus":"ok","listed":{"checkedAt":"2026-10-19T10:42:54.690Z","lists":[],"mx":[],"spf":[]}},"spelling":{"kind":"tld","generatedFrom":"intesasanpaolo.com"},"certificate":null,"feedHost":null},{"kind":"generated_spelling","kindLabel":"Generated spelling","statement":"intesasanpaolo.xyz (a generated spelling) resolved to 193.227.214.38, an address that was on \"Confirmed phishing host address (DomainSpoof, 48 hours)\" from 2026-10-19T15:34:32.792Z to 2026-10-20T00:25:51.901Z and was still on it at the latest check. This is a fact about the address, not a verdict about the name.","hostname":"intesasanpaolo.xyz","hostnameUnicode":"intesasanpaolo.xyz","registrableDomain":"intesasanpaolo.xyz","organization":{"id":"org_intesasanpaolo","slug":"intesa-sanpaolo","displayName":"Intesa Sanpaolo","url":"https://domainspoof.org/companies/intesa-sanpaolo"},"otherOrganizations":[],"address":"193.227.214.38","list":{"id":"domainspoof_phish_hosts","name":"Confirmed phishing host address (DomainSpoof, 48 hours)","category":"phishing_hosting"},"firstMatchedAt":"2026-10-19T15:34:32.792Z","lastMatchedAt":"2026-10-20T00:25:51.901Z","expiredAt":null,"expired":false,"updatedAt":"2026-10-20T00:25:51.901Z","dnsObservedAt":"2026-10-19T10:54:25.869Z","dns":{"status":"ok","checkedAt":"2026-10-19T10:54:25.869Z"},"mail":{"checkedAt":"2026-10-19T10:42:54.690Z","hasMx":false,"spf":true,"dmarc":true,"mx":[],"provider":null,"providerClass":null,"providerHost":null,"sendsVia":[{"host":"spf.intesasanpaolo.com","name":"spf.intesasanpaolo.com","cls":null,"via":"include"}],"spfAll":"-","dmarcPolicy":"reject","lookupStatus":"ok","listed":{"checkedAt":"2026-10-19T10:42:54.690Z","lists":[],"mx":[],"spf":[]}},"spelling":{"kind":"tld","generatedFrom":"intesasanpaolo.com"},"certificate":null,"feedHost":null},{"kind":"generated_spelling","kindLabel":"Generated spelling","statement":"inyesasanpaolo.com (a generated spelling) resolved to 193.227.214.38, an address that was on \"Confirmed phishing host address (DomainSpoof, 48 hours)\" from 2026-10-19T15:34:32.792Z to 2026-10-20T00:25:51.901Z and was still on it at the latest check. This is a fact about the address, not a verdict about the name.","hostname":"inyesasanpaolo.com","hostnameUnicode":"inyesasanpaolo.com","registrableDomain":"inyesasanpaolo.com","organization":{"id":"org_intesasanpaolo","slug":"intesa-sanpaolo","displayName":"Intesa Sanpaolo","url":"https://domainspoof.org/companies/intesa-sanpaolo"},"otherOrganizations":[],"address":"193.227.214.38","list":{"id":"domainspoof_phish_hosts","name":"Confirmed phishing host address (DomainSpoof, 48 hours)","category":"phishing_hosting"},"firstMatchedAt":"2026-10-19T15:34:32.792Z","lastMatchedAt":"2026-10-20T00:25:51.901Z","expiredAt":null,"expired":false,"updatedAt":"2026-10-20T00:25:51.901Z","dnsObservedAt":"2026-10-19T10:54:28.519Z","dns":{"status":"ok","checkedAt":"2026-10-19T10:54:28.519Z"},"mail":{"checkedAt":"2026-10-19T10:42:54.690Z","hasMx":false,"spf":true,"dmarc":true,"mx":[],"provider":null,"providerClass":null,"providerHost":null,"sendsVia":[{"host":"spf.intesasanpaolo.com","name":"spf.intesasanpaolo.com","cls":null,"via":"include"}],"spfAll":"-","dmarcPolicy":"reject","lookupStatus":"ok","listed":{"checkedAt":"2026-10-19T10:42:54.690Z","lists":[],"mx":[],"spf":[]}},"spelling":{"kind":"adjacent_key","generatedFrom":"intesasanpaolo.com"},"certificate":null,"feedHost":null},{"kind":"generated_spelling","kindLabel":"Generated spelling","statement":"supportintesasanpaolo.com (a generated spelling) resolved to 193.227.214.38, an address that was on \"Confirmed phishing host address (DomainSpoof, 48 hours)\" from 2026-10-19T15:34:32.792Z to 2026-10-20T00:25:51.901Z and was still on it at the latest check. This is a fact about the address, not a verdict about the name.","hostname":"supportintesasanpaolo.com","hostnameUnicode":"supportintesasanpaolo.com","registrableDomain":"supportintesasanpaolo.com","organization":{"id":"org_intesasanpaolo","slug":"intesa-sanpaolo","displayName":"Intesa Sanpaolo","url":"https://domainspoof.org/companies/intesa-sanpaolo"},"otherOrganizations":[],"address":"193.227.214.38","list":{"id":"domainspoof_phish_hosts","name":"Confirmed phishing host address (DomainSpoof, 48 hours)","category":"phishing_hosting"},"firstMatchedAt":"2026-10-19T15:34:32.792Z","lastMatchedAt":"2026-10-20T00:25:51.901Z","expiredAt":null,"expired":false,"updatedAt":"2026-10-20T00:25:51.901Z","dnsObservedAt":"2026-10-19T11:05:49.177Z","dns":{"status":"ok","checkedAt":"2026-10-19T11:05:49.177Z"},"mail":{"checkedAt":"2026-10-19T10:42:54.690Z","hasMx":true,"spf":true,"dmarc":true,"mx":["protetto.intesasanpaolo.com"],"provider":"protetto.intesasanpaolo.com","providerClass":null,"providerHost":"protetto.intesasanpaolo.com","sendsVia":[{"host":"spf.intesasanpaolo.com","name":"spf.intesasanpaolo.com","cls":null,"via":"include"}],"spfAll":"-","dmarcPolicy":"reject","lookupStatus":"ok","listed":{"checkedAt":"2026-10-19T10:42:54.690Z","lists":[],"mx":[],"spf":[]}},"spelling":{"kind":"insertion","generatedFrom":"intesasanpaolo.com"},"certificate":null,"feedHost":null},{"kind":"generated_spelling","kindLabel":"Generated spelling","statement":"abanquepostale.fr (a generated spelling) resolved to 157.90.33.73, an address that was on \"Confirmed phishing host address (DomainSpoof, 48 hours)\" from 2026-10-19T15:34:32.792Z to 2026-10-20T00:25:51.901Z and was still on it at the latest check. This is a fact about the address, not a verdict about the name.","hostname":"abanquepostale.fr","hostnameUnicode":"abanquepostale.fr","registrableDomain":"abanquepostale.fr","organization":{"id":"org_labanquepostale","slug":"la-banque-postale","displayName":"La Banque Postale","url":"https://domainspoof.org/companies/la-banque-postale"},"otherOrganizations":[],"address":"157.90.33.73","list":{"id":"domainspoof_phish_hosts","name":"Confirmed phishing host address (DomainSpoof, 48 hours)","category":"phishing_hosting"},"firstMatchedAt":"2026-10-19T15:34:32.792Z","lastMatchedAt":"2026-10-20T00:25:51.901Z","expiredAt":null,"expired":false,"updatedAt":"2026-10-20T00:25:51.901Z","dnsObservedAt":"2026-10-19T10:46:17.470Z","dns":{"status":"ok","checkedAt":"2026-10-19T10:46:17.470Z"},"mail":{"checkedAt":"2026-10-19T05:52:57.386Z","hasMx":false,"spf":false,"dmarc":false,"mx":[],"provider":null,"providerClass":null,"providerHost":null,"sendsVia":[],"spfAll":null,"dmarcPolicy":null,"lookupStatus":"ok","listed":null},"spelling":{"kind":"omission","generatedFrom":"labanquepostale.fr"},"certificate":null,"feedHost":null},{"kind":"generated_spelling","kindLabel":"Generated spelling","statement":"abanquepostale.fr (a generated spelling) resolved to 157.90.33.74, an address that was on \"Confirmed phishing host address (DomainSpoof, 48 hours)\" from 2026-10-19T15:34:32.792Z to 2026-10-20T00:25:51.901Z and was still on it at the latest check. This is a fact about the address, not a verdict about the name.","hostname":"abanquepostale.fr","hostnameUnicode":"abanquepostale.fr","registrableDomain":"abanquepostale.fr","organization":{"id":"org_labanquepostale","slug":"la-banque-postale","displayName":"La Banque Postale","url":"https://domainspoof.org/companies/la-banque-postale"},"otherOrganizations":[],"address":"157.90.33.74","list":{"id":"domainspoof_phish_hosts","name":"Confirmed phishing host address (DomainSpoof, 48 hours)","category":"phishing_hosting"},"firstMatchedAt":"2026-10-19T15:34:32.792Z","lastMatchedAt":"2026-10-20T00:25:51.901Z","expiredAt":null,"expired":false,"updatedAt":"2026-10-20T00:25:51.901Z","dnsObservedAt":"2026-10-19T10:46:17.470Z","dns":{"status":"ok","checkedAt":"2026-10-19T10:46:17.470Z"},"mail":{"checkedAt":"2026-10-19T05:52:57.386Z","hasMx":false,"spf":false,"dmarc":false,"mx":[],"provider":null,"providerClass":null,"providerHost":null,"sendsVia":[],"spfAll":null,"dmarcPolicy":null,"lookupStatus":"ok","listed":null},"spelling":{"kind":"omission","generatedFrom":"labanquepostale.fr"},"certificate":null,"feedHost":null},{"kind":"generated_spelling","kindLabel":"Generated spelling","statement":"banquepostale.site (a generated spelling) resolved to 185.176.225.21, an address that was on \"Confirmed phishing host address (DomainSpoof, 48 hours)\" from 2026-10-19T15:34:32.792Z to 2026-10-20T00:25:51.901Z and was still on it at the latest check. This is a fact about the address, not a verdict about the name.","hostname":"banquepostale.site","hostnameUnicode":"banquepostale.site","registrableDomain":"banquepostale.site","organization":{"id":"org_labanquepostale","slug":"la-banque-postale","displayName":"La Banque Postale","url":"https://domainspoof.org/companies/la-banque-postale"},"otherOrganizations":[],"address":"185.176.225.21","list":{"id":"domainspoof_phish_hosts","name":"Confirmed phishing host address (DomainSpoof, 48 hours)","category":"phishing_hosting"},"firstMatchedAt":"2026-10-19T15:34:32.792Z","lastMatchedAt":"2026-10-20T00:25:51.901Z","expiredAt":null,"expired":false,"updatedAt":"2026-10-20T00:25:51.901Z","dnsObservedAt":"2026-10-19T10:48:01.879Z","dns":{"status":"ok","checkedAt":"2026-10-19T10:48:01.879Z"},"mail":{"checkedAt":"2026-10-19T10:42:54.690Z","hasMx":true,"spf":true,"dmarc":true,"mx":["mta-gw.infomaniak.ch"],"provider":"Infomaniak","providerClass":"hosting","providerHost":"mta-gw.infomaniak.ch","sendsVia":[{"host":"spf.infomaniak.ch","name":"Infomaniak","cls":"hosting","via":"include"}],"spfAll":"-","dmarcPolicy":"reject","lookupStatus":"ok","listed":{"checkedAt":"2026-10-19T10:42:54.690Z","lists":[],"mx":[],"spf":[]}},"spelling":{"kind":"tld","generatedFrom":"banquepostale"},"certificate":null,"feedHost":null},{"kind":"generated_spelling","kindLabel":"Generated spelling","statement":"laanquepostale.fr (a generated spelling) resolved to 157.90.33.73, an address that was on \"Confirmed phishing host address (DomainSpoof, 48 hours)\" from 2026-10-19T15:34:32.792Z to 2026-10-20T00:25:51.901Z and was still on it at the latest check. This is a fact about the address, not a verdict about the name.","hostname":"laanquepostale.fr","hostnameUnicode":"laanquepostale.fr","registrableDomain":"laanquepostale.fr","organization":{"id":"org_labanquepostale","slug":"la-banque-postale","displayName":"La Banque Postale","url":"https://domainspoof.org/companies/la-banque-postale"},"otherOrganizations":[],"address":"157.90.33.73","list":{"id":"domainspoof_phish_hosts","name":"Confirmed phishing host address (DomainSpoof, 48 hours)","category":"phishing_hosting"},"firstMatchedAt":"2026-10-19T15:34:32.792Z","lastMatchedAt":"2026-10-20T00:25:51.901Z","expiredAt":null,"expired":false,"updatedAt":"2026-10-20T00:25:51.901Z","dnsObservedAt":"2026-10-19T10:55:39.093Z","dns":{"status":"ok","checkedAt":"2026-10-19T10:55:39.093Z"},"mail":{"checkedAt":"2026-10-19T05:52:57.386Z","hasMx":false,"spf":false,"dmarc":false,"mx":[],"provider":null,"providerClass":null,"providerHost":null,"sendsVia":[],"spfAll":null,"dmarcPolicy":null,"lookupStatus":"ok","listed":null},"spelling":{"kind":"omission","generatedFrom":"labanquepostale.fr"},"certificate":null,"feedHost":null},{"kind":"generated_spelling","kindLabel":"Generated spelling","statement":"laanquepostale.fr (a generated spelling) resolved to 157.90.33.74, an address that was on \"Confirmed phishing host address (DomainSpoof, 48 hours)\" from 2026-10-19T15:34:32.792Z to 2026-10-20T00:25:51.901Z and was still on it at the latest check. This is a fact about the address, not a verdict about the name.","hostname":"laanquepostale.fr","hostnameUnicode":"laanquepostale.fr","registrableDomain":"laanquepostale.fr","organization":{"id":"org_labanquepostale","slug":"la-banque-postale","displayName":"La Banque Postale","url":"https://domainspoof.org/companies/la-banque-postale"},"otherOrganizations":[],"address":"157.90.33.74","list":{"id":"domainspoof_phish_hosts","name":"Confirmed phishing host address (DomainSpoof, 48 hours)","category":"phishing_hosting"},"firstMatchedAt":"2026-10-19T15:34:32.792Z","lastMatchedAt":"2026-10-20T00:25:51.901Z","expiredAt":null,"expired":false,"updatedAt":"2026-10-20T00:25:51.901Z","dnsObservedAt":"2026-10-19T10:55:39.093Z","dns":{"status":"ok","checkedAt":"2026-10-19T10:55:39.093Z"},"mail":{"checkedAt":"2026-10-19T05:52:57.386Z","hasMx":false,"spf":false,"dmarc":false,"mx":[],"provider":null,"providerClass":null,"providerHost":null,"sendsVia":[],"spfAll":null,"dmarcPolicy":null,"lookupStatus":"ok","listed":null},"spelling":{"kind":"omission","generatedFrom":"labanquepostale.fr"},"certificate":null,"feedHost":null},{"kind":"generated_spelling","kindLabel":"Generated spelling","statement":"labanqepostale.fr (a generated spelling) resolved to 212.1.212.137, an address that was on \"Confirmed phishing host address (DomainSpoof, 48 hours)\" from 2026-10-19T15:34:32.792Z to 2026-10-20T00:25:51.901Z and was still on it at the latest check. This is a fact about the address, not a verdict about the name.","hostname":"labanqepostale.fr","hostnameUnicode":"labanqepostale.fr","registrableDomain":"labanqepostale.fr","organization":{"id":"org_labanquepostale","slug":"la-banque-postale","displayName":"La Banque Postale","url":"https://domainspoof.org/companies/la-banque-postale"},"otherOrganizations":[],"address":"212.1.212.137","list":{"id":"domainspoof_phish_hosts","name":"Confirmed phishing host address (DomainSpoof, 48 hours)","category":"phishing_hosting"},"firstMatchedAt":"2026-10-19T15:34:32.792Z","lastMatchedAt":"2026-10-20T00:25:51.901Z","expiredAt":null,"expired":false,"updatedAt":"2026-10-20T00:25:51.901Z","dnsObservedAt":"2026-10-19T10:55:39.064Z","dns":{"status":"ok","checkedAt":"2026-10-19T10:55:39.064Z"},"mail":{"checkedAt":"2026-10-19T10:42:54.690Z","hasMx":true,"spf":true,"dmarc":true,"mx":["mx1.hostinger.com","mx2.hostinger.com"],"provider":"Hostinger","providerClass":"hosting","providerHost":"mx1.hostinger.com","sendsVia":[{"host":"_spf.mail.hostinger.com","name":"Hostinger","cls":"hosting","via":"include"}],"spfAll":"~","dmarcPolicy":"none","lookupStatus":"ok","listed":{"checkedAt":"2026-10-19T10:42:54.690Z","lists":[],"mx":[],"spf":[]}},"spelling":{"kind":"omission","generatedFrom":"labanquepostale.fr"},"certificate":null,"feedHost":null},{"kind":"generated_spelling","kindLabel":"Generated spelling","statement":"labanqquepostale.fr (a generated spelling) resolved to 157.90.33.73, an address that was on \"Confirmed phishing host address (DomainSpoof, 48 hours)\" from 2026-10-19T15:34:32.792Z to 2026-10-20T00:25:51.901Z and was still on it at the latest check. This is a fact about the address, not a verdict about the name.","hostname":"labanqquepostale.fr","hostnameUnicode":"labanqquepostale.fr","registrableDomain":"labanqquepostale.fr","organization":{"id":"org_labanquepostale","slug":"la-banque-postale","displayName":"La Banque Postale","url":"https://domainspoof.org/companies/la-banque-postale"},"otherOrganizations":[],"address":"157.90.33.73","list":{"id":"domainspoof_phish_hosts","name":"Confirmed phishing host address (DomainSpoof, 48 hours)","category":"phishing_hosting"},"firstMatchedAt":"2026-10-19T15:34:32.792Z","lastMatchedAt":"2026-10-20T00:25:51.901Z","expiredAt":null,"expired":false,"updatedAt":"2026-10-20T00:25:51.901Z","dnsObservedAt":"2026-10-19T10:55:39.133Z","dns":{"status":"ok","checkedAt":"2026-10-19T10:55:39.133Z"},"mail":{"checkedAt":"2026-10-19T05:52:57.386Z","hasMx":false,"spf":false,"dmarc":false,"mx":[],"provider":null,"providerClass":null,"providerHost":null,"sendsVia":[],"spfAll":null,"dmarcPolicy":null,"lookupStatus":"ok","listed":null},"spelling":{"kind":"repetition","generatedFrom":"labanquepostale.fr"},"certificate":null,"feedHost":null},{"kind":"generated_spelling","kindLabel":"Generated spelling","statement":"labanqquepostale.fr (a generated spelling) resolved to 157.90.33.74, an address that was on \"Confirmed phishing host address (DomainSpoof, 48 hours)\" from 2026-10-19T15:34:32.792Z to 2026-10-20T00:25:51.901Z and was still on it at the latest check. This is a fact about the address, not a verdict about the name.","hostname":"labanqquepostale.fr","hostnameUnicode":"labanqquepostale.fr","registrableDomain":"labanqquepostale.fr","organization":{"id":"org_labanquepostale","slug":"la-banque-postale","displayName":"La Banque Postale","url":"https://domainspoof.org/companies/la-banque-postale"},"otherOrganizations":[],"address":"157.90.33.74","list":{"id":"domainspoof_phish_hosts","name":"Confirmed phishing host address (DomainSpoof, 48 hours)","category":"phishing_hosting"},"firstMatchedAt":"2026-10-19T15:34:32.792Z","lastMatchedAt":"2026-10-20T00:25:51.901Z","expiredAt":null,"expired":false,"updatedAt":"2026-10-20T00:25:51.901Z","dnsObservedAt":"2026-10-19T10:55:39.133Z","dns":{"status":"ok","checkedAt":"2026-10-19T10:55:39.133Z"},"mail":{"checkedAt":"2026-10-19T05:52:57.386Z","hasMx":false,"spf":false,"dmarc":false,"mx":[],"provider":null,"providerClass":null,"providerHost":null,"sendsVia":[],"spfAll":null,"dmarcPolicy":null,"lookupStatus":"ok","listed":null},"spelling":{"kind":"repetition","generatedFrom":"labanquepostale.fr"},"certificate":null,"feedHost":null},{"kind":"generated_spelling","kindLabel":"Generated spelling","statement":"labanqueoostale.fr (a generated spelling) resolved to 157.90.33.73, an address that was on \"Confirmed phishing host address (DomainSpoof, 48 hours)\" from 2026-10-19T15:34:32.792Z to 2026-10-20T00:25:51.901Z and was still on it at the latest check. This is a fact about the address, not a verdict about the name.","hostname":"labanqueoostale.fr","hostnameUnicode":"labanqueoostale.fr","registrableDomain":"labanqueoostale.fr","organization":{"id":"org_labanquepostale","slug":"la-banque-postale","displayName":"La Banque Postale","url":"https://domainspoof.org/companies/la-banque-postale"},"otherOrganizations":[],"address":"157.90.33.73","list":{"id":"domainspoof_phish_hosts","name":"Confirmed phishing host address (DomainSpoof, 48 hours)","category":"phishing_hosting"},"firstMatchedAt":"2026-10-19T15:34:32.792Z","lastMatchedAt":"2026-10-20T00:25:51.901Z","expiredAt":null,"expired":false,"updatedAt":"2026-10-20T00:25:51.901Z","dnsObservedAt":"2026-10-19T10:55:39.148Z","dns":{"status":"ok","checkedAt":"2026-10-19T10:55:39.148Z"},"mail":{"checkedAt":"2026-10-19T05:52:57.386Z","hasMx":false,"spf":false,"dmarc":false,"mx":[],"provider":null,"providerClass":null,"providerHost":null,"sendsVia":[],"spfAll":null,"dmarcPolicy":null,"lookupStatus":"ok","listed":null},"spelling":{"kind":"adjacent_key","generatedFrom":"labanquepostale.fr"},"certificate":null,"feedHost":null},{"kind":"generated_spelling","kindLabel":"Generated spelling","statement":"labanqueoostale.fr (a generated spelling) resolved to 157.90.33.74, an address that was on \"Confirmed phishing host address (DomainSpoof, 48 hours)\" from 2026-10-19T15:34:32.792Z to 2026-10-20T00:25:51.901Z and was still on it at the latest check. This is a fact about the address, not a verdict about the name.","hostname":"labanqueoostale.fr","hostnameUnicode":"labanqueoostale.fr","registrableDomain":"labanqueoostale.fr","organization":{"id":"org_labanquepostale","slug":"la-banque-postale","displayName":"La Banque Postale","url":"https://domainspoof.org/companies/la-banque-postale"},"otherOrganizations":[],"address":"157.90.33.74","list":{"id":"domainspoof_phish_hosts","name":"Confirmed phishing host address (DomainSpoof, 48 hours)","category":"phishing_hosting"},"firstMatchedAt":"2026-10-19T15:34:32.792Z","lastMatchedAt":"2026-10-20T00:25:51.901Z","expiredAt":null,"expired":false,"updatedAt":"2026-10-20T00:25:51.901Z","dnsObservedAt":"2026-10-19T10:55:39.148Z","dns":{"status":"ok","checkedAt":"2026-10-19T10:55:39.148Z"},"mail":{"checkedAt":"2026-10-19T05:52:57.386Z","hasMx":false,"spf":false,"dmarc":false,"mx":[],"provider":null,"providerClass":null,"providerHost":null,"sendsVia":[],"spfAll":null,"dmarcPolicy":null,"lookupStatus":"ok","listed":null},"spelling":{"kind":"adjacent_key","generatedFrom":"labanquepostale.fr"},"certificate":null,"feedHost":null},{"kind":"generated_spelling","kindLabel":"Generated spelling","statement":"labanqueostale.fr (a generated spelling) resolved to 157.90.33.73, an address that was on \"Confirmed phishing host address (DomainSpoof, 48 hours)\" from 2026-10-19T15:34:32.792Z to 2026-10-20T00:25:51.901Z and was still on it at the latest check. This is a fact about the address, not a verdict about the name.","hostname":"labanqueostale.fr","hostnameUnicode":"labanqueostale.fr","registrableDomain":"labanqueostale.fr","organization":{"id":"org_labanquepostale","slug":"la-banque-postale","displayName":"La Banque Postale","url":"https://domainspoof.org/companies/la-banque-postale"},"otherOrganizations":[],"address":"157.90.33.73","list":{"id":"domainspoof_phish_hosts","name":"Confirmed phishing host address (DomainSpoof, 48 hours)","category":"phishing_hosting"},"firstMatchedAt":"2026-10-19T15:34:32.792Z","lastMatchedAt":"2026-10-20T00:25:51.901Z","expiredAt":null,"expired":false,"updatedAt":"2026-10-20T00:25:51.901Z","dnsObservedAt":"2026-10-19T10:55:39.140Z","dns":{"status":"ok","checkedAt":"2026-10-19T10:55:39.140Z"},"mail":{"checkedAt":"2026-10-19T05:52:57.386Z","hasMx":false,"spf":false,"dmarc":false,"mx":[],"provider":null,"providerClass":null,"providerHost":null,"sendsVia":[],"spfAll":null,"dmarcPolicy":null,"lookupStatus":"ok","listed":null},"spelling":{"kind":"omission","generatedFrom":"labanquepostale.fr"},"certificate":null,"feedHost":null},{"kind":"generated_spelling","kindLabel":"Generated spelling","statement":"labanqueostale.fr (a generated spelling) resolved to 157.90.33.74, an address that was on \"Confirmed phishing host address (DomainSpoof, 48 hours)\" from 2026-10-19T15:34:32.792Z to 2026-10-20T00:25:51.901Z and was still on it at the latest check. This is a fact about the address, not a verdict about the name.","hostname":"labanqueostale.fr","hostnameUnicode":"labanqueostale.fr","registrableDomain":"labanqueostale.fr","organization":{"id":"org_labanquepostale","slug":"la-banque-postale","displayName":"La Banque Postale","url":"https://domainspoof.org/companies/la-banque-postale"},"otherOrganizations":[],"address":"157.90.33.74","list":{"id":"domainspoof_phish_hosts","name":"Confirmed phishing host address (DomainSpoof, 48 hours)","category":"phishing_hosting"},"firstMatchedAt":"2026-10-19T15:34:32.792Z","lastMatchedAt":"2026-10-20T00:25:51.901Z","expiredAt":null,"expired":false,"updatedAt":"2026-10-20T00:25:51.901Z","dnsObservedAt":"2026-10-19T10:55:39.140Z","dns":{"status":"ok","checkedAt":"2026-10-19T10:55:39.140Z"},"mail":{"checkedAt":"2026-10-19T05:52:57.386Z","hasMx":false,"spf":false,"dmarc":false,"mx":[],"provider":null,"providerClass":null,"providerHost":null,"sendsVia":[],"spfAll":null,"dmarcPolicy":null,"lookupStatus":"ok","listed":null},"spelling":{"kind":"omission","generatedFrom":"labanquepostale.fr"},"certificate":null,"feedHost":null},{"kind":"generated_spelling","kindLabel":"Generated spelling","statement":"labanquepostale.io (a generated spelling) resolved to 51.91.236.255, an address that was on \"Confirmed phishing host address (DomainSpoof, 48 hours)\" from 2026-10-19T15:34:32.792Z to 2026-10-20T00:25:51.901Z and was still on it at the latest check. This is a fact about the address, not a verdict about the name.","hostname":"labanquepostale.io","hostnameUnicode":"labanquepostale.io","registrableDomain":"labanquepostale.io","organization":{"id":"org_labanquepostale","slug":"la-banque-postale","displayName":"La Banque Postale","url":"https://domainspoof.org/companies/la-banque-postale"},"otherOrganizations":[],"address":"51.91.236.255","list":{"id":"domainspoof_phish_hosts","name":"Confirmed phishing host address (DomainSpoof, 48 hours)","category":"phishing_hosting"},"firstMatchedAt":"2026-10-19T15:34:32.792Z","lastMatchedAt":"2026-10-20T00:25:51.901Z","expiredAt":null,"expired":false,"updatedAt":"2026-10-20T00:25:51.901Z","dnsObservedAt":"2026-10-19T10:55:39.073Z","dns":{"status":"ok","checkedAt":"2026-10-19T10:55:39.073Z"},"mail":{"checkedAt":"2026-10-19T10:42:54.690Z","hasMx":true,"spf":true,"dmarc":false,"mx":["mx3.mail.ovh.net","mx2.mail.ovh.net","mx1.mail.ovh.net"],"provider":"OVH","providerClass":"hosting","providerHost":"mx3.mail.ovh.net","sendsVia":[{"host":"mx.ovh.com","name":"OVH","cls":"hosting","via":"include"}],"spfAll":"-","dmarcPolicy":null,"lookupStatus":"ok","listed":{"checkedAt":"2026-10-19T10:42:54.690Z","lists":[],"mx":[],"spf":[]}},"spelling":{"kind":"tld","generatedFrom":"labanquepostale.fr"},"certificate":null,"feedHost":null},{"kind":"generated_spelling","kindLabel":"Generated spelling","statement":"labanuepostale.fr (a generated spelling) resolved to 157.90.33.73, an address that was on \"Confirmed phishing host address (DomainSpoof, 48 hours)\" from 2026-10-19T15:34:32.792Z to 2026-10-20T00:25:51.901Z and was still on it at the latest check. This is a fact about the address, not a verdict about the name.","hostname":"labanuepostale.fr","hostnameUnicode":"labanuepostale.fr","registrableDomain":"labanuepostale.fr","organization":{"id":"org_labanquepostale","slug":"la-banque-postale","displayName":"La Banque Postale","url":"https://domainspoof.org/companies/la-banque-postale"},"otherOrganizations":[],"address":"157.90.33.73","list":{"id":"domainspoof_phish_hosts","name":"Confirmed phishing host address (DomainSpoof, 48 hours)","category":"phishing_hosting"},"firstMatchedAt":"2026-10-19T15:34:32.792Z","lastMatchedAt":"2026-10-20T00:25:51.901Z","expiredAt":null,"expired":false,"updatedAt":"2026-10-20T00:25:51.901Z","dnsObservedAt":"2026-10-19T10:55:39.279Z","dns":{"status":"ok","checkedAt":"2026-10-19T10:55:39.279Z"},"mail":{"checkedAt":"2026-10-19T05:52:57.386Z","hasMx":false,"spf":false,"dmarc":false,"mx":[],"provider":null,"providerClass":null,"providerHost":null,"sendsVia":[],"spfAll":null,"dmarcPolicy":null,"lookupStatus":"ok","listed":null},"spelling":{"kind":"omission","generatedFrom":"labanquepostale.fr"},"certificate":null,"feedHost":null},{"kind":"generated_spelling","kindLabel":"Generated spelling","statement":"labanuepostale.fr (a generated spelling) resolved to 157.90.33.74, an address that was on \"Confirmed phishing host address (DomainSpoof, 48 hours)\" from 2026-10-19T15:34:32.792Z to 2026-10-20T00:25:51.901Z and was still on it at the latest check. This is a fact about the address, not a verdict about the name.","hostname":"labanuepostale.fr","hostnameUnicode":"labanuepostale.fr","registrableDomain":"labanuepostale.fr","organization":{"id":"org_labanquepostale","slug":"la-banque-postale","displayName":"La Banque Postale","url":"https://domainspoof.org/companies/la-banque-postale"},"otherOrganizations":[],"address":"157.90.33.74","list":{"id":"domainspoof_phish_hosts","name":"Confirmed phishing host address (DomainSpoof, 48 hours)","category":"phishing_hosting"},"firstMatchedAt":"2026-10-19T15:34:32.792Z","lastMatchedAt":"2026-10-20T00:25:51.901Z","expiredAt":null,"expired":false,"updatedAt":"2026-10-20T00:25:51.901Z","dnsObservedAt":"2026-10-19T10:55:39.279Z","dns":{"status":"ok","checkedAt":"2026-10-19T10:55:39.279Z"},"mail":{"checkedAt":"2026-10-19T05:52:57.386Z","hasMx":false,"spf":false,"dmarc":false,"mx":[],"provider":null,"providerClass":null,"providerHost":null,"sendsVia":[],"spfAll":null,"dmarcPolicy":null,"lookupStatus":"ok","listed":null},"spelling":{"kind":"omission","generatedFrom":"labanquepostale.fr"},"certificate":null,"feedHost":null},{"kind":"generated_spelling","kindLabel":"Generated spelling","statement":"labaquepostale.fr (a generated spelling) resolved to 157.90.33.73, an address that was on \"Confirmed phishing host address (DomainSpoof, 48 hours)\" from 2026-10-19T15:34:32.792Z to 2026-10-20T00:25:51.901Z and was still on it at the latest check. This is a fact about the address, not a verdict about the name.","hostname":"labaquepostale.fr","hostnameUnicode":"labaquepostale.fr","registrableDomain":"labaquepostale.fr","organization":{"id":"org_labanquepostale","slug":"la-banque-postale","displayName":"La Banque Postale","url":"https://domainspoof.org/companies/la-banque-postale"},"otherOrganizations":[],"address":"157.90.33.73","list":{"id":"domainspoof_phish_hosts","name":"Confirmed phishing host address (DomainSpoof, 48 hours)","category":"phishing_hosting"},"firstMatchedAt":"2026-10-19T15:34:32.792Z","lastMatchedAt":"2026-10-20T00:25:51.901Z","expiredAt":null,"expired":false,"updatedAt":"2026-10-20T00:25:51.901Z","dnsObservedAt":"2026-10-19T10:55:39.287Z","dns":{"status":"ok","checkedAt":"2026-10-19T10:55:39.287Z"},"mail":{"checkedAt":"2026-10-19T05:52:57.386Z","hasMx":false,"spf":false,"dmarc":false,"mx":[],"provider":null,"providerClass":null,"providerHost":null,"sendsVia":[],"spfAll":null,"dmarcPolicy":null,"lookupStatus":"ok","listed":null},"spelling":{"kind":"omission","generatedFrom":"labanquepostale.fr"},"certificate":null,"feedHost":null},{"kind":"generated_spelling","kindLabel":"Generated spelling","statement":"labaquepostale.fr (a generated spelling) resolved to 157.90.33.74, an address that was on \"Confirmed phishing host address (DomainSpoof, 48 hours)\" from 2026-10-19T15:34:32.792Z to 2026-10-20T00:25:51.901Z and was still on it at the latest check. This is a fact about the address, not a verdict about the name.","hostname":"labaquepostale.fr","hostnameUnicode":"labaquepostale.fr","registrableDomain":"labaquepostale.fr","organization":{"id":"org_labanquepostale","slug":"la-banque-postale","displayName":"La Banque Postale","url":"https://domainspoof.org/companies/la-banque-postale"},"otherOrganizations":[],"address":"157.90.33.74","list":{"id":"domainspoof_phish_hosts","name":"Confirmed phishing host address (DomainSpoof, 48 hours)","category":"phishing_hosting"},"firstMatchedAt":"2026-10-19T15:34:32.792Z","lastMatchedAt":"2026-10-20T00:25:51.901Z","expiredAt":null,"expired":false,"updatedAt":"2026-10-20T00:25:51.901Z","dnsObservedAt":"2026-10-19T10:55:39.287Z","dns":{"status":"ok","checkedAt":"2026-10-19T10:55:39.287Z"},"mail":{"checkedAt":"2026-10-19T05:52:57.386Z","hasMx":false,"spf":false,"dmarc":false,"mx":[],"provider":null,"providerClass":null,"providerHost":null,"sendsVia":[],"spfAll":null,"dmarcPolicy":null,"lookupStatus":"ok","listed":null},"spelling":{"kind":"omission","generatedFrom":"labanquepostale.fr"},"certificate":null,"feedHost":null},{"kind":"generated_spelling","kindLabel":"Generated spelling","statement":"navyfaderal.org (a generated spelling) resolved to 212.92.104.120, an address that was on \"Confirmed phishing host address (DomainSpoof, 48 hours)\" from 2026-10-19T16:01:01.231Z to 2026-10-20T00:25:51.901Z and was still on it at the latest check. This is a fact about the address, not a verdict about the name.","hostname":"navyfaderal.org","hostnameUnicode":"navyfaderal.org","registrableDomain":"navyfaderal.org","organization":{"id":"org_navyfederal","slug":"navy-federal-credit-union","displayName":"Navy Federal Credit Union","url":"https://domainspoof.org/companies/navy-federal-credit-union"},"otherOrganizations":[],"address":"212.92.104.120","list":{"id":"domainspoof_phish_hosts","name":"Confirmed phishing host address (DomainSpoof, 48 hours)","category":"phishing_hosting"},"firstMatchedAt":"2026-10-19T16:01:01.231Z","lastMatchedAt":"2026-10-20T00:25:51.901Z","expiredAt":null,"expired":false,"updatedAt":"2026-10-20T00:25:51.901Z","dnsObservedAt":"2026-10-19T10:57:32.723Z","dns":{"status":"ok","checkedAt":"2026-10-19T10:57:32.723Z"},"mail":{"checkedAt":"2026-10-19T10:42:54.689Z","hasMx":true,"spf":true,"dmarc":false,"mx":["mail.h-email.net"],"provider":"h-email.net","providerClass":"parking","providerHost":"mail.h-email.net","sendsVia":[],"spfAll":"-","dmarcPolicy":null,"lookupStatus":"ok","listed":{"checkedAt":"2026-10-19T10:42:54.689Z","lists":[],"mx":[],"spf":[]}},"spelling":{"kind":"vowel_swap","generatedFrom":"navyfederal.org"},"certificate":null,"feedHost":null},{"kind":"generated_spelling","kindLabel":"Generated spelling","statement":"navyfederal.co (a generated spelling) resolved to 65.21.178.24, an address that was on \"Confirmed phishing host address (DomainSpoof, 48 hours)\" from 2026-10-19T15:34:32.792Z to 2026-10-20T00:25:51.901Z and was still on it at the latest check. This is a fact about the address, not a verdict about the name.","hostname":"navyfederal.co","hostnameUnicode":"navyfederal.co","registrableDomain":"navyfederal.co","organization":{"id":"org_navyfederal","slug":"navy-federal-credit-union","displayName":"Navy Federal Credit Union","url":"https://domainspoof.org/companies/navy-federal-credit-union"},"otherOrganizations":[],"address":"65.21.178.24","list":{"id":"domainspoof_phish_hosts","name":"Confirmed phishing host address (DomainSpoof, 48 hours)","category":"phishing_hosting"},"firstMatchedAt":"2026-10-19T15:34:32.792Z","lastMatchedAt":"2026-10-20T00:25:51.901Z","expiredAt":null,"expired":false,"updatedAt":"2026-10-20T00:25:51.901Z","dnsObservedAt":"2026-10-19T10:57:32.778Z","dns":{"status":"ok","checkedAt":"2026-10-19T10:57:32.778Z"},"mail":{"checkedAt":"2026-10-19T10:42:54.689Z","hasMx":false,"spf":true,"dmarc":false,"mx":[],"provider":null,"providerClass":null,"providerHost":null,"sendsVia":[],"spfAll":"~","dmarcPolicy":null,"lookupStatus":"ok","listed":{"checkedAt":"2026-10-19T10:42:54.689Z","lists":[],"mx":[],"spf":[]}},"spelling":{"kind":"tld","generatedFrom":"navyfederal.org"},"certificate":null,"feedHost":null},{"kind":"generated_spelling","kindLabel":"Generated spelling","statement":"nsvyfederal.org (a generated spelling) resolved to 216.245.213.77, an address that was on \"Confirmed phishing host address (DomainSpoof, 48 hours)\" from 2026-10-19T15:34:32.792Z to 2026-10-20T00:25:51.901Z and was still on it at the latest check. This is a fact about the address, not a verdict about the name.","hostname":"nsvyfederal.org","hostnameUnicode":"nsvyfederal.org","registrableDomain":"nsvyfederal.org","organization":{"id":"org_navyfederal","slug":"navy-federal-credit-union","displayName":"Navy Federal Credit Union","url":"https://domainspoof.org/companies/navy-federal-credit-union"},"otherOrganizations":[],"address":"216.245.213.77","list":{"id":"domainspoof_phish_hosts","name":"Confirmed phishing host address (DomainSpoof, 48 hours)","category":"phishing_hosting"},"firstMatchedAt":"2026-10-19T15:34:32.792Z","lastMatchedAt":"2026-10-20T00:25:51.901Z","expiredAt":null,"expired":false,"updatedAt":"2026-10-20T00:25:51.901Z","dnsObservedAt":"2026-10-19T10:58:25.744Z","dns":{"status":"ok","checkedAt":"2026-10-19T10:58:25.744Z"},"mail":{"checkedAt":"2026-10-19T05:52:57.385Z","hasMx":false,"spf":false,"dmarc":false,"mx":[],"provider":null,"providerClass":null,"providerHost":null,"sendsVia":[],"spfAll":null,"dmarcPolicy":null,"lookupStatus":"ok","listed":null},"spelling":{"kind":"adjacent_key","generatedFrom":"navyfederal.org"},"certificate":null,"feedHost":null},{"kind":"generated_spelling","kindLabel":"Generated spelling","statement":"raifeisen.ro (a generated spelling) resolved to 172.236.104.157, an address that was on \"Confirmed phishing host address (DomainSpoof, 48 hours)\" from 2026-10-19T16:18:18.404Z to 2026-10-20T00:25:51.901Z and was still on it at the latest check. This is a fact about the address, not a verdict about the name.","hostname":"raifeisen.ro","hostnameUnicode":"raifeisen.ro","registrableDomain":"raifeisen.ro","organization":{"id":"org_raiffeisen","slug":"raiffeisen-bank-international","displayName":"Raiffeisen Bank International","url":"https://domainspoof.org/companies/raiffeisen-bank-international"},"otherOrganizations":[],"address":"172.236.104.157","list":{"id":"domainspoof_phish_hosts","name":"Confirmed phishing host address (DomainSpoof, 48 hours)","category":"phishing_hosting"},"firstMatchedAt":"2026-10-19T16:18:18.404Z","lastMatchedAt":"2026-10-20T00:25:51.901Z","expiredAt":null,"expired":false,"updatedAt":"2026-10-20T00:25:51.901Z","dnsObservedAt":"2026-10-19T11:00:01.783Z","dns":{"status":"ok","checkedAt":"2026-10-19T11:00:01.783Z"},"mail":{"checkedAt":"2026-10-19T05:52:57.384Z","hasMx":false,"spf":false,"dmarc":false,"mx":[],"provider":null,"providerClass":null,"providerHost":null,"sendsVia":[],"spfAll":null,"dmarcPolicy":null,"lookupStatus":"ok","listed":null},"spelling":{"kind":"omission","generatedFrom":"raiffeisen.ro"},"certificate":null,"feedHost":null},{"kind":"generated_spelling","kindLabel":"Generated spelling","statement":"raifeisen.ro (a generated spelling) resolved to 172.236.104.43, an address that was on \"Confirmed phishing host address (DomainSpoof, 48 hours)\" from 2026-10-19T16:18:18.404Z to 2026-10-20T00:25:51.901Z and was still on it at the latest check. This is a fact about the address, not a verdict about the name.","hostname":"raifeisen.ro","hostnameUnicode":"raifeisen.ro","registrableDomain":"raifeisen.ro","organization":{"id":"org_raiffeisen","slug":"raiffeisen-bank-international","displayName":"Raiffeisen Bank International","url":"https://domainspoof.org/companies/raiffeisen-bank-international"},"otherOrganizations":[],"address":"172.236.104.43","list":{"id":"domainspoof_phish_hosts","name":"Confirmed phishing host address (DomainSpoof, 48 hours)","category":"phishing_hosting"},"firstMatchedAt":"2026-10-19T16:18:18.404Z","lastMatchedAt":"2026-10-20T00:25:51.901Z","expiredAt":null,"expired":false,"updatedAt":"2026-10-20T00:25:51.901Z","dnsObservedAt":"2026-10-19T11:00:01.783Z","dns":{"status":"ok","checkedAt":"2026-10-19T11:00:01.783Z"},"mail":{"checkedAt":"2026-10-19T05:52:57.384Z","hasMx":false,"spf":false,"dmarc":false,"mx":[],"provider":null,"providerClass":null,"providerHost":null,"sendsVia":[],"spfAll":null,"dmarcPolicy":null,"lookupStatus":"ok","listed":null},"spelling":{"kind":"omission","generatedFrom":"raiffeisen.ro"},"certificate":null,"feedHost":null},{"kind":"generated_spelling","kindLabel":"Generated spelling","statement":"raifeisen.ro (a generated spelling) resolved to 172.238.172.122, an address that was on \"Confirmed phishing host address (DomainSpoof, 48 hours)\" from 2026-10-19T16:18:18.404Z to 2026-10-20T00:25:51.901Z and was still on it at the latest check. This is a fact about the address, not a verdict about the name.","hostname":"raifeisen.ro","hostnameUnicode":"raifeisen.ro","registrableDomain":"raifeisen.ro","organization":{"id":"org_raiffeisen","slug":"raiffeisen-bank-international","displayName":"Raiffeisen Bank International","url":"https://domainspoof.org/companies/raiffeisen-bank-international"},"otherOrganizations":[],"address":"172.238.172.122","list":{"id":"domainspoof_phish_hosts","name":"Confirmed phishing host address (DomainSpoof, 48 hours)","category":"phishing_hosting"},"firstMatchedAt":"2026-10-19T16:18:18.404Z","lastMatchedAt":"2026-10-20T00:25:51.901Z","expiredAt":null,"expired":false,"updatedAt":"2026-10-20T00:25:51.901Z","dnsObservedAt":"2026-10-19T11:00:01.783Z","dns":{"status":"ok","checkedAt":"2026-10-19T11:00:01.783Z"},"mail":{"checkedAt":"2026-10-19T05:52:57.384Z","hasMx":false,"spf":false,"dmarc":false,"mx":[],"provider":null,"providerClass":null,"providerHost":null,"sendsVia":[],"spfAll":null,"dmarcPolicy":null,"lookupStatus":"ok","listed":null},"spelling":{"kind":"omission","generatedFrom":"raiffeisen.ro"},"certificate":null,"feedHost":null},{"kind":"generated_spelling","kindLabel":"Generated spelling","statement":"rauten.com (a generated spelling) resolved to 81.169.145.94, an address that was on \"Confirmed phishing host address (DomainSpoof, 48 hours)\" from 2026-10-19T15:34:32.792Z to 2026-10-20T00:25:51.901Z and was still on it at the latest check. This is a fact about the address, not a verdict about the name.","hostname":"rauten.com","hostnameUnicode":"rauten.com","registrableDomain":"rauten.com","organization":{"id":"org_rakuten","slug":"rakuten","displayName":"Rakuten","url":"https://domainspoof.org/companies/rakuten"},"otherOrganizations":[],"address":"81.169.145.94","list":{"id":"domainspoof_phish_hosts","name":"Confirmed phishing host address (DomainSpoof, 48 hours)","category":"phishing_hosting"},"firstMatchedAt":"2026-10-19T15:34:32.792Z","lastMatchedAt":"2026-10-20T00:25:51.901Z","expiredAt":null,"expired":false,"updatedAt":"2026-10-20T00:25:51.901Z","dnsObservedAt":"2026-10-19T11:00:03.478Z","dns":{"status":"ok","checkedAt":"2026-10-19T11:00:03.478Z"},"mail":{"checkedAt":"2026-10-19T10:42:54.689Z","hasMx":true,"spf":false,"dmarc":true,"mx":["smtpin.rzone.de"],"provider":"STRATO","providerClass":"hosting","providerHost":"smtpin.rzone.de","sendsVia":[],"spfAll":null,"dmarcPolicy":"reject","lookupStatus":"ok","listed":{"checkedAt":"2026-10-19T10:42:54.689Z","lists":[],"mx":[],"spf":[]}},"spelling":{"kind":"omission","generatedFrom":"rakuten.com"},"certificate":null,"feedHost":null},{"kind":"generated_spelling","kindLabel":"Generated spelling","statement":"ravolut.com (a generated spelling) resolved to 191.101.104.165, an address that was on \"Confirmed phishing host address (DomainSpoof, 48 hours)\" from 2026-10-19T15:34:32.792Z to 2026-10-20T00:25:51.901Z and was still on it at the latest check. This is a fact about the address, not a verdict about the name.","hostname":"ravolut.com","hostnameUnicode":"ravolut.com","registrableDomain":"ravolut.com","organization":{"id":"org_revolut","slug":"revolut","displayName":"Revolut","url":"https://domainspoof.org/companies/revolut"},"otherOrganizations":[],"address":"191.101.104.165","list":{"id":"domainspoof_phish_hosts","name":"Confirmed phishing host address (DomainSpoof, 48 hours)","category":"phishing_hosting"},"firstMatchedAt":"2026-10-19T15:34:32.792Z","lastMatchedAt":"2026-10-20T00:25:51.901Z","expiredAt":null,"expired":false,"updatedAt":"2026-10-20T00:25:51.901Z","dnsObservedAt":"2026-10-19T11:00:03.659Z","dns":{"status":"ok","checkedAt":"2026-10-19T11:00:03.659Z"},"mail":{"checkedAt":"2026-10-19T10:42:54.689Z","hasMx":true,"spf":true,"dmarc":true,"mx":["mx1.hostinger.com","mx2.hostinger.com"],"provider":"Hostinger","providerClass":"hosting","providerHost":"mx1.hostinger.com","sendsVia":[{"host":"_spf.mail.hostinger.com","name":"Hostinger","cls":"hosting","via":"include"}],"spfAll":"~","dmarcPolicy":"none","lookupStatus":"ok","listed":{"checkedAt":"2026-10-19T10:42:54.689Z","lists":[],"mx":[],"spf":[]}},"spelling":{"kind":"vowel_swap","generatedFrom":"revolut.com"},"certificate":null,"feedHost":null},{"kind":"generated_spelling","kindLabel":"Generated spelling","statement":"ravolut.com (a generated spelling) resolved to 191.96.144.247, an address that was on \"Confirmed phishing host address (DomainSpoof, 48 hours)\" from 2026-10-19T16:01:01.231Z to 2026-10-20T00:25:51.901Z and was still on it at the latest check. This is a fact about the address, not a verdict about the name.","hostname":"ravolut.com","hostnameUnicode":"ravolut.com","registrableDomain":"ravolut.com","organization":{"id":"org_revolut","slug":"revolut","displayName":"Revolut","url":"https://domainspoof.org/companies/revolut"},"otherOrganizations":[],"address":"191.96.144.247","list":{"id":"domainspoof_phish_hosts","name":"Confirmed phishing host address (DomainSpoof, 48 hours)","category":"phishing_hosting"},"firstMatchedAt":"2026-10-19T16:01:01.231Z","lastMatchedAt":"2026-10-20T00:25:51.901Z","expiredAt":null,"expired":false,"updatedAt":"2026-10-20T00:25:51.901Z","dnsObservedAt":"2026-10-19T11:00:03.659Z","dns":{"status":"ok","checkedAt":"2026-10-19T11:00:03.659Z"},"mail":{"checkedAt":"2026-10-19T10:42:54.689Z","hasMx":true,"spf":true,"dmarc":true,"mx":["mx1.hostinger.com","mx2.hostinger.com"],"provider":"Hostinger","providerClass":"hosting","providerHost":"mx1.hostinger.com","sendsVia":[{"host":"_spf.mail.hostinger.com","name":"Hostinger","cls":"hosting","via":"include"}],"spfAll":"~","dmarcPolicy":"none","lookupStatus":"ok","listed":{"checkedAt":"2026-10-19T10:42:54.689Z","lists":[],"mx":[],"spf":[]}},"spelling":{"kind":"vowel_swap","generatedFrom":"revolut.com"},"certificate":null,"feedHost":null},{"kind":"generated_spelling","kindLabel":"Generated spelling","statement":"revelut.com (a generated spelling) resolved to 77.247.182.242, an address that was on \"Confirmed phishing host address (DomainSpoof, 48 hours)\" from 2026-10-19T15:34:32.792Z to 2026-10-20T00:25:51.901Z and was still on it at the latest check. This is a fact about the address, not a verdict about the name.","hostname":"revelut.com","hostnameUnicode":"revelut.com","registrableDomain":"revelut.com","organization":{"id":"org_revolut","slug":"revolut","displayName":"Revolut","url":"https://domainspoof.org/companies/revolut"},"otherOrganizations":[],"address":"77.247.182.242","list":{"id":"domainspoof_phish_hosts","name":"Confirmed phishing host address (DomainSpoof, 48 hours)","category":"phishing_hosting"},"firstMatchedAt":"2026-10-19T15:34:32.792Z","lastMatchedAt":"2026-10-20T00:25:51.901Z","expiredAt":null,"expired":false,"updatedAt":"2026-10-20T00:25:51.901Z","dnsObservedAt":"2026-10-19T11:00:10.479Z","dns":{"status":"ok","checkedAt":"2026-10-19T11:00:10.479Z"},"mail":{"checkedAt":"2026-10-19T05:52:57.382Z","hasMx":false,"spf":false,"dmarc":false,"mx":[],"provider":null,"providerClass":null,"providerHost":null,"sendsVia":[],"spfAll":null,"dmarcPolicy":null,"lookupStatus":"ok","listed":null},"spelling":{"kind":"vowel_swap","generatedFrom":"revolut.com"},"certificate":null,"feedHost":null},{"kind":"generated_spelling","kindLabel":"Generated spelling","statement":"revolug.com (a generated spelling) resolved to 157.90.33.73, an address that was on \"Confirmed phishing host address (DomainSpoof, 48 hours)\" from 2026-10-19T15:34:32.792Z to 2026-10-20T00:25:51.901Z and was still on it at the latest check. This is a fact about the address, not a verdict about the name.","hostname":"revolug.com","hostnameUnicode":"revolug.com","registrableDomain":"revolug.com","organization":{"id":"org_revolut","slug":"revolut","displayName":"Revolut","url":"https://domainspoof.org/companies/revolut"},"otherOrganizations":[],"address":"157.90.33.73","list":{"id":"domainspoof_phish_hosts","name":"Confirmed phishing host address (DomainSpoof, 48 hours)","category":"phishing_hosting"},"firstMatchedAt":"2026-10-19T15:34:32.792Z","lastMatchedAt":"2026-10-20T00:25:51.901Z","expiredAt":null,"expired":false,"updatedAt":"2026-10-20T00:25:51.901Z","dnsObservedAt":"2026-10-19T11:00:10.537Z","dns":{"status":"ok","checkedAt":"2026-10-19T11:00:10.537Z"},"mail":{"checkedAt":"2026-10-19T05:52:57.383Z","hasMx":false,"spf":false,"dmarc":false,"mx":[],"provider":null,"providerClass":null,"providerHost":null,"sendsVia":[],"spfAll":null,"dmarcPolicy":null,"lookupStatus":"ok","listed":null},"spelling":{"kind":"adjacent_key","generatedFrom":"revolut.com"},"certificate":null,"feedHost":null},{"kind":"generated_spelling","kindLabel":"Generated spelling","statement":"revolug.com (a generated spelling) resolved to 157.90.33.74, an address that was on \"Confirmed phishing host address (DomainSpoof, 48 hours)\" from 2026-10-19T15:34:32.792Z to 2026-10-20T00:25:51.901Z and was still on it at the latest check. This is a fact about the address, not a verdict about the name.","hostname":"revolug.com","hostnameUnicode":"revolug.com","registrableDomain":"revolug.com","organization":{"id":"org_revolut","slug":"revolut","displayName":"Revolut","url":"https://domainspoof.org/companies/revolut"},"otherOrganizations":[],"address":"157.90.33.74","list":{"id":"domainspoof_phish_hosts","name":"Confirmed phishing host address (DomainSpoof, 48 hours)","category":"phishing_hosting"},"firstMatchedAt":"2026-10-19T15:34:32.792Z","lastMatchedAt":"2026-10-20T00:25:51.901Z","expiredAt":null,"expired":false,"updatedAt":"2026-10-20T00:25:51.901Z","dnsObservedAt":"2026-10-19T11:00:10.537Z","dns":{"status":"ok","checkedAt":"2026-10-19T11:00:10.537Z"},"mail":{"checkedAt":"2026-10-19T05:52:57.383Z","hasMx":false,"spf":false,"dmarc":false,"mx":[],"provider":null,"providerClass":null,"providerHost":null,"sendsVia":[],"spfAll":null,"dmarcPolicy":null,"lookupStatus":"ok","listed":null},"spelling":{"kind":"adjacent_key","generatedFrom":"revolut.com"},"certificate":null,"feedHost":null},{"kind":"generated_spelling","kindLabel":"Generated spelling","statement":"revolut.xyz (a generated spelling) resolved to 185.181.104.242, an address that was on \"Confirmed phishing host address (DomainSpoof, 48 hours)\" from 2026-10-19T15:34:32.792Z to 2026-10-20T00:25:51.901Z and was still on it at the latest check. This is a fact about the address, not a verdict about the name.","hostname":"revolut.xyz","hostnameUnicode":"revolut.xyz","registrableDomain":"revolut.xyz","organization":{"id":"org_revolut","slug":"revolut","displayName":"Revolut","url":"https://domainspoof.org/companies/revolut"},"otherOrganizations":[],"address":"185.181.104.242","list":{"id":"domainspoof_phish_hosts","name":"Confirmed phishing host address (DomainSpoof, 48 hours)","category":"phishing_hosting"},"firstMatchedAt":"2026-10-19T15:34:32.792Z","lastMatchedAt":"2026-10-20T00:25:51.901Z","expiredAt":null,"expired":false,"updatedAt":"2026-10-20T00:25:51.901Z","dnsObservedAt":"2026-10-19T11:00:10.544Z","dns":{"status":"ok","checkedAt":"2026-10-19T11:00:10.544Z"},"mail":{"checkedAt":"2026-10-19T05:52:57.383Z","hasMx":false,"spf":false,"dmarc":false,"mx":[],"provider":null,"providerClass":null,"providerHost":null,"sendsVia":[],"spfAll":null,"dmarcPolicy":null,"lookupStatus":"ok","listed":null},"spelling":{"kind":"tld","generatedFrom":"revolut.com"},"certificate":null,"feedHost":null},{"kind":"generated_spelling","kindLabel":"Generated spelling","statement":"supportrevolut.com (a generated spelling) resolved to 172.232.24.161, an address that was on \"Confirmed phishing host address (DomainSpoof, 48 hours)\" from 2026-10-19T15:34:32.792Z to 2026-10-20T00:25:51.901Z and was still on it at the latest check. This is a fact about the address, not a verdict about the name.","hostname":"supportrevolut.com","hostnameUnicode":"supportrevolut.com","registrableDomain":"supportrevolut.com","organization":{"id":"org_revolut","slug":"revolut","displayName":"Revolut","url":"https://domainspoof.org/companies/revolut"},"otherOrganizations":[],"address":"172.232.24.161","list":{"id":"domainspoof_phish_hosts","name":"Confirmed phishing host address (DomainSpoof, 48 hours)","category":"phishing_hosting"},"firstMatchedAt":"2026-10-19T15:34:32.792Z","lastMatchedAt":"2026-10-20T00:25:51.901Z","expiredAt":null,"expired":false,"updatedAt":"2026-10-20T00:25:51.901Z","dnsObservedAt":"2026-10-19T11:05:50.748Z","dns":{"status":"ok","checkedAt":"2026-10-19T11:05:50.748Z"},"mail":{"checkedAt":"2026-10-19T10:42:54.689Z","hasMx":true,"spf":true,"dmarc":false,"mx":["mx2.titan.email","mx1.titan.email"],"provider":"Titan","providerClass":"hosting","providerHost":"mx2.titan.email","sendsVia":[{"host":"spf.titan.email","name":"Titan","cls":"hosting","via":"include"}],"spfAll":"~","dmarcPolicy":null,"lookupStatus":"ok","listed":{"checkedAt":"2026-10-19T10:42:54.689Z","lists":[],"mx":[],"spf":[]}},"spelling":{"kind":"insertion","generatedFrom":"revolut.com"},"certificate":null,"feedHost":null},{"kind":"generated_spelling","kindLabel":"Generated spelling","statement":"supportrevolut.com (a generated spelling) resolved to 172.232.24.235, an address that was on \"Confirmed phishing host address (DomainSpoof, 48 hours)\" from 2026-10-19T15:34:32.792Z to 2026-10-20T00:25:51.901Z and was still on it at the latest check. This is a fact about the address, not a verdict about the name.","hostname":"supportrevolut.com","hostnameUnicode":"supportrevolut.com","registrableDomain":"supportrevolut.com","organization":{"id":"org_revolut","slug":"revolut","displayName":"Revolut","url":"https://domainspoof.org/companies/revolut"},"otherOrganizations":[],"address":"172.232.24.235","list":{"id":"domainspoof_phish_hosts","name":"Confirmed phishing host address (DomainSpoof, 48 hours)","category":"phishing_hosting"},"firstMatchedAt":"2026-10-19T15:34:32.792Z","lastMatchedAt":"2026-10-20T00:25:51.901Z","expiredAt":null,"expired":false,"updatedAt":"2026-10-20T00:25:51.901Z","dnsObservedAt":"2026-10-19T11:05:50.748Z","dns":{"status":"ok","checkedAt":"2026-10-19T11:05:50.748Z"},"mail":{"checkedAt":"2026-10-19T10:42:54.689Z","hasMx":true,"spf":true,"dmarc":false,"mx":["mx2.titan.email","mx1.titan.email"],"provider":"Titan","providerClass":"hosting","providerHost":"mx2.titan.email","sendsVia":[{"host":"spf.titan.email","name":"Titan","cls":"hosting","via":"include"}],"spfAll":"~","dmarcPolicy":null,"lookupStatus":"ok","listed":{"checkedAt":"2026-10-19T10:42:54.689Z","lists":[],"mx":[],"spf":[]}},"spelling":{"kind":"insertion","generatedFrom":"revolut.com"},"certificate":null,"feedHost":null},{"kind":"generated_spelling","kindLabel":"Generated spelling","statement":"supportrevolut.com (a generated spelling) resolved to 172.234.25.42, an address that was on \"Confirmed phishing host address (DomainSpoof, 48 hours)\" from 2026-10-19T15:34:32.792Z to 2026-10-20T00:25:51.901Z and was still on it at the latest check. This is a fact about the address, not a verdict about the name.","hostname":"supportrevolut.com","hostnameUnicode":"supportrevolut.com","registrableDomain":"supportrevolut.com","organization":{"id":"org_revolut","slug":"revolut","displayName":"Revolut","url":"https://domainspoof.org/companies/revolut"},"otherOrganizations":[],"address":"172.234.25.42","list":{"id":"domainspoof_phish_hosts","name":"Confirmed phishing host address (DomainSpoof, 48 hours)","category":"phishing_hosting"},"firstMatchedAt":"2026-10-19T15:34:32.792Z","lastMatchedAt":"2026-10-20T00:25:51.901Z","expiredAt":null,"expired":false,"updatedAt":"2026-10-20T00:25:51.901Z","dnsObservedAt":"2026-10-19T11:05:50.748Z","dns":{"status":"ok","checkedAt":"2026-10-19T11:05:50.748Z"},"mail":{"checkedAt":"2026-10-19T10:42:54.689Z","hasMx":true,"spf":true,"dmarc":false,"mx":["mx2.titan.email","mx1.titan.email"],"provider":"Titan","providerClass":"hosting","providerHost":"mx2.titan.email","sendsVia":[{"host":"spf.titan.email","name":"Titan","cls":"hosting","via":"include"}],"spfAll":"~","dmarcPolicy":null,"lookupStatus":"ok","listed":{"checkedAt":"2026-10-19T10:42:54.689Z","lists":[],"mx":[],"spf":[]}},"spelling":{"kind":"insertion","generatedFrom":"revolut.com"},"certificate":null,"feedHost":null}],"nextCursor":"WyIyMDI2LTEwLTIwVDAwOjI1OjUxLjkwMVoiLCJzIixbIm9yZ19yZXZvbHV0Iiwic3VwcG9ydHJldm9sdXQuY29tIiwiMTcyLjIzNC4yNS40MiIsImRvbWFpbnNwb29mX3BoaXNoX2hvc3RzIl1d","next":"https://domainspoof.org/api/v1/feeds/listed-names?cursor=WyIyMDI2LTEwLTIwVDAwOjI1OjUxLjkwMVoiLCJzIixbIm9yZ19yZXZvbHV0Iiwic3VwcG9ydHJldm9sdXQuY29tIiwiMTcyLjIzNC4yNS40MiIsImRvbWFpbnNwb29mX3BoaXNoX2hvc3RzIl1d"}