{"meta":{"generator":"domainspoof.org","feed":"phishing","description":"Two kinds of domain, each confirmed by an independent second source: phishing domains from new TLS certificates in the certificate-transparency logs, and registered lookalikes of the brands we track. Each finding names its source and joins the feed 12 hours or more after we publish or flag it.","documentation":"https://domainspoof.org/formats#phishing-feed","rss":"https://domainspoof.org/feed.xml","delay_hours":12,"window_hours":24,"source":"records","snapshot_at":"2026-11-06T16:46:23Z","generated_at":"2026-11-06T17:00:21.360Z","window":{"from":"2026-11-05T05:17:22.576Z","to":"2026-11-06T04:46:23.000Z"},"count":6918,"license":"https://domainspoof.org/terms","credit":"Data: BreachScout DomainSpoof (domainspoof.org)","credits":{"cert_polska":"CERT Polska warning list (cert.pl); DomainSpoof's brand attribution is its own","metamask":"MetaMask eth-phishing-detect (github.com/MetaMask/eth-phishing-detect), DBAD licence","phishdestroy":"PhishDestroy (phishdestroy.io), MIT licence: https://github.com/phishdestroy/destroylist","domainspoof_phish_hosts":"DomainSpoof's phishing-infrastructure list, derived from the reporting sources above (per-address provenance)","spamhaus_drop":"Spamhaus DROP list (spamhaus.org)","npa":"Taiwan National Police Agency 165 anti-fraud list, Open Government Data License","usom":"USOM, the National Computer Emergency Response Team of Türkiye (usom.gov.tr)","jpcert":"JPCERT/CC phishurl-list (github.com/JPCERTCC/phishurl-list)","fsma":"Financial Services and Markets Authority (FSMA), \"Companies operating unlawfully in Belgium\", fsma.be, CC BY 4.0. The FSMA publishes these warnings free of charge on its website.","phishtank":"PhishTank (phishtank.org), Cisco Talos","moda":"Taiwan Ministry of Digital Affairs, Open Government Data License","bafin":"© Bundesanstalt für Finanzdienstleistungsaufsicht / www.bafin.de"},"conditions":{"zone_file":"https://domainspoof.org/terms#zone-data"},"real_time":"https://domainspoof.com/live"},"items":[{"hostname":"1inch.blog","first_observed":"2026-11-06T04:15:28.000Z","first_published":"2026-11-06T04:15:28.000Z","brands":[{"id":"1inch","name":"1inch","url":"https://domainspoof.com/brands/1inch"}],"dns":"resolved","resolved":["2.57.91.91","2a02:4780:84::32"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of 1inch.com (same name, other ending), resolved to 2.57.91.91, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T04:15:28.000Z","first_published":"2026-11-06T04:15:28.000Z","of":"1inch.com","spelling":"tld","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"2.57.91.91","flagged_at":"2026-11-06T04:15:28Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/1inch"},{"hostname":"aave.mobi","first_observed":"2026-11-06T04:15:28.000Z","first_published":"2026-11-06T04:15:28.000Z","brands":[{"id":"aave","name":"Aave","url":"https://domainspoof.com/brands/aave"}],"dns":"resolved","resolved":["212.92.105.19"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of aave.com (same name, other ending), resolved to 212.92.105.19, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T04:15:28.000Z","first_published":"2026-11-06T04:15:28.000Z","of":"aave.com","spelling":"tld","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"212.92.105.19","flagged_at":"2026-11-06T04:15:28Z"}]}],"url":"https://domainspoof.com/brands/aave"},{"hostname":"aliexpress.com.ph","first_observed":"2026-11-06T04:15:28.000Z","first_published":"2026-11-06T04:15:28.000Z","brands":[{"id":"aliexpress","name":"AliExpress","url":"https://domainspoof.com/brands/aliexpress"}],"dns":"resolved","resolved":["212.92.105.202"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of aliexpress.com (same name, other ending), resolved to 212.92.105.202, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T04:15:28.000Z","first_published":"2026-11-06T04:15:28.000Z","of":"aliexpress.com","spelling":"tld","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"212.92.105.202","flagged_at":"2026-11-06T04:15:28Z"}]}],"url":"https://domainspoof.com/brands/aliexpress"},{"hostname":"allegro.com.ph","first_observed":"2026-11-06T04:15:28.000Z","first_published":"2026-11-06T04:15:28.000Z","brands":[{"id":"allegro","name":"Allegro","url":"https://domainspoof.com/brands/allegro"}],"dns":"resolved","resolved":["212.92.105.196"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of allegro.pl (same name, other ending), resolved to 212.92.105.196, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T04:15:28.000Z","first_published":"2026-11-06T04:15:28.000Z","of":"allegro.pl","spelling":"tld","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"212.92.105.196","flagged_at":"2026-11-06T04:15:28Z"}]}],"url":"https://domainspoof.com/brands/allegro"},{"hostname":"appstore.com.ph","first_observed":"2026-11-06T04:15:28.000Z","first_published":"2026-11-06T04:15:28.000Z","brands":[{"id":"apple","name":"Apple","url":"https://domainspoof.com/brands/apple"}],"dns":"resolved","resolved":["212.92.105.199"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of appstore.com (same name, other ending), resolved to 212.92.105.199, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T04:15:28.000Z","first_published":"2026-11-06T04:15:28.000Z","of":"appstore.com","spelling":"tld","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"212.92.105.199","flagged_at":"2026-11-06T04:15:28Z"}]}],"url":"https://domainspoof.com/brands/apple"},{"hostname":"axis.com.ph","first_observed":"2026-11-06T04:15:28.000Z","first_published":"2026-11-06T04:15:28.000Z","brands":[{"id":"axis-bank","name":"Axis Bank","url":"https://domainspoof.com/brands/axis-bank"}],"dns":"resolved","resolved":["212.92.105.198"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of axis.bank.in (same name, other ending), resolved to 212.92.105.198, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T04:15:28.000Z","first_published":"2026-11-06T04:15:28.000Z","of":"axis.bank.in","spelling":"tld","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"212.92.105.198","flagged_at":"2026-11-06T04:15:28Z"}]}],"url":"https://domainspoof.com/brands/axis-bank"},{"hostname":"axis.fan","first_observed":"2026-11-06T04:15:28.000Z","first_published":"2026-11-06T04:15:28.000Z","brands":[{"id":"axis-bank","name":"Axis Bank","url":"https://domainspoof.com/brands/axis-bank"}],"dns":"resolved","resolved":["51.81.244.164"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of axis.bank.in (same name, other ending), resolved to 51.81.244.164, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T04:15:28.000Z","first_published":"2026-11-06T04:15:28.000Z","of":"axis.bank.in","spelling":"tld","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"51.81.244.164","flagged_at":"2026-11-06T04:15:28Z"}]}],"url":"https://domainspoof.com/brands/axis-bank"},{"hostname":"bdo.org.ph","first_observed":"2026-11-06T04:15:28.000Z","first_published":"2026-11-06T04:15:28.000Z","brands":[{"id":"bdo-unibank","name":"BDO Unibank","url":"https://domainspoof.com/brands/bdo-unibank"}],"dns":"resolved","resolved":["212.92.105.199"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of bdo.com.ph (same name, other ending), resolved to 212.92.105.199, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T04:15:28.000Z","first_published":"2026-11-06T04:15:28.000Z","of":"bdo.com.ph","spelling":"tld","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"212.92.105.199","flagged_at":"2026-11-06T04:15:28Z"}]}],"url":"https://domainspoof.com/brands/bdo-unibank"},{"hostname":"binance.com.so","first_observed":"2026-11-06T04:15:28.000Z","first_published":"2026-11-06T04:15:28.000Z","brands":[{"id":"binance","name":"Binance","url":"https://domainspoof.com/brands/binance"}],"dns":"resolved","resolved":["158.220.91.247"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of binance.com (same name, other ending), resolved to 158.220.91.247, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T04:15:28.000Z","first_published":"2026-11-06T04:15:28.000Z","of":"binance.com","spelling":"tld","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"158.220.91.247","flagged_at":"2026-11-06T04:15:28Z"}]}],"url":"https://domainspoof.com/brands/binance"},{"hostname":"binance.spot","first_observed":"2026-11-06T04:15:28.000Z","first_published":"2026-11-06T04:15:28.000Z","brands":[{"id":"binance","name":"Binance","url":"https://domainspoof.com/brands/binance"}],"dns":"resolved","resolved":["185.146.167.204","2a07:7800:1::204"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of binance.com (same name, other ending), resolved to 185.146.167.204, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T04:15:28.000Z","first_published":"2026-11-06T04:15:28.000Z","of":"binance.com","spelling":"tld","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"185.146.167.204","flagged_at":"2026-11-06T04:15:28Z"}]}],"url":"https://domainspoof.com/brands/binance"},{"hostname":"bitfinex.cm","first_observed":"2026-11-06T04:15:28.000Z","first_published":"2026-11-06T04:15:28.000Z","brands":[{"id":"bitfinex","name":"Bitfinex","url":"https://domainspoof.com/brands/bitfinex"}],"dns":"resolved","resolved":["212.7.194.53"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of bitfinex.com (same name, other ending), resolved to 212.7.194.53, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T04:15:28.000Z","first_published":"2026-11-06T04:15:28.000Z","of":"bitfinex.com","spelling":"tld","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"212.7.194.53","flagged_at":"2026-11-06T04:15:28Z"}]}],"url":"https://domainspoof.com/brands/bitfinex"},{"hostname":"changenow.us","first_observed":"2026-11-06T04:15:28.000Z","first_published":"2026-11-06T04:15:28.000Z","brands":[{"id":"changenow","name":"ChangeNOW","url":"https://domainspoof.com/brands/changenow"}],"dns":"resolved","resolved":["78.157.209.173"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of changenow.io (same name, other ending), resolved to 78.157.209.173, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T04:15:28.000Z","first_published":"2026-11-06T04:15:28.000Z","of":"changenow.io","spelling":"tld","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"78.157.209.173","flagged_at":"2026-11-06T04:15:28Z"}]}],"url":"https://domainspoof.com/brands/changenow"},{"hostname":"chatgpt.com.ph","first_observed":"2026-11-06T04:15:28.000Z","first_published":"2026-11-06T04:15:28.000Z","brands":[{"id":"openai","name":"OpenAI","url":"https://domainspoof.com/brands/openai"}],"dns":"resolved","resolved":["172.93.103.102"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of chatgpt.com (same name, other ending), resolved to 172.93.103.102, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T04:15:28.000Z","first_published":"2026-11-06T04:15:28.000Z","of":"chatgpt.com","spelling":"tld","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"172.93.103.102","flagged_at":"2026-11-06T04:15:28Z"}]}],"url":"https://domainspoof.com/brands/openai"},{"hostname":"chatgpt.ph","first_observed":"2026-11-06T04:15:28.000Z","first_published":"2026-11-06T04:15:28.000Z","brands":[{"id":"openai","name":"OpenAI","url":"https://domainspoof.com/brands/openai"}],"dns":"resolved","resolved":["172.93.103.100"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of chatgpt.com (same name, other ending), resolved to 172.93.103.100, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T04:15:28.000Z","first_published":"2026-11-06T04:15:28.000Z","of":"chatgpt.com","spelling":"tld","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"172.93.103.100","flagged_at":"2026-11-06T04:15:28Z"}]}],"url":"https://domainspoof.com/brands/openai"},{"hostname":"coinmarketcap.ph","first_observed":"2026-11-06T04:15:28.000Z","first_published":"2026-11-06T04:15:28.000Z","brands":[{"id":"coinmarketcap","name":"CoinMarketCap","url":"https://domainspoof.com/brands/coinmarketcap"}],"dns":"resolved","resolved":["172.93.103.101"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of coinmarketcap.com (same name, other ending), resolved to 172.93.103.101, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T04:15:28.000Z","first_published":"2026-11-06T04:15:28.000Z","of":"coinmarketcap.com","spelling":"tld","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"172.93.103.101","flagged_at":"2026-11-06T04:15:28Z"}]}],"url":"https://domainspoof.com/brands/coinmarketcap"},{"hostname":"21bitcasino.icu","first_observed":"2026-11-06T03:05:43.075Z","first_published":"2026-11-06T04:14:26.424Z","brands":[],"dns":"resolved","resolved":["104.21.91.218","172.67.180.197"],"resolved_at":"2026-11-06T03:05:49Z","dns_checked_at":"2026-11-06T04:24:03.000Z","dns_since":"2026-11-06T04:24:03.000Z","findings":[{"id":"fz7vjioc67b5zvuzzyfj6","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-06T03:05:43.075Z","first_published":"2026-11-06T04:14:26.424Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/21bitcasino.icu/"}],"url":"https://domainspoof.com/live?show=all&q=21bitcasino.icu"},{"hostname":"277618-crypto.com","first_observed":"2026-11-06T03:26:14.665Z","first_published":"2026-11-06T04:14:26.424Z","brands":[{"id":"crypto-com","name":"Crypto.com","url":"https://domainspoof.com/brands/crypto-com"}],"dns":"resolved","resolved":["104.21.28.78","172.67.144.227","2606:4700:3033::ac43:90e3","2606:4700:3035::6815:1c4e"],"resolved_at":"2026-11-06T03:26:20Z","dns_checked_at":"2026-11-06T04:24:03.000Z","dns_since":"2026-11-06T04:24:03.000Z","findings":[{"id":"fujypa3pcfiyq4bio4qic","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-06T03:26:14.665Z","first_published":"2026-11-06T04:14:26.424Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/brands/crypto-com"},{"hostname":"332489-crypto.com","first_observed":"2026-11-06T03:05:43.075Z","first_published":"2026-11-06T04:14:26.424Z","brands":[{"id":"crypto-com","name":"Crypto.com","url":"https://domainspoof.com/brands/crypto-com"}],"dns":"resolved","resolved":["104.21.18.208","172.67.183.90","2606:4700:3032::6815:12d0","2606:4700:3036::ac43:b75a"],"resolved_at":"2026-11-06T03:05:49Z","dns_checked_at":"2026-11-06T04:24:03.000Z","dns_since":"2026-11-06T04:24:03.000Z","findings":[{"id":"ftdl2db56fafi37odw2pa","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-06T03:05:43.075Z","first_published":"2026-11-06T04:14:26.424Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/brands/crypto-com"},{"hostname":"4321zz3277w0cc6205f4a10b1add7371411f.polar-tensor.com","first_observed":"2026-11-06T03:41:07.331Z","first_published":"2026-11-06T04:14:26.424Z","brands":[],"dns":"resolved","resolved":["5.189.134.86","57.128.187.75","57.129.49.179","193.242.211.59"],"resolved_at":"2026-11-06T03:41:14Z","dns_checked_at":"2026-11-06T04:24:03.000Z","dns_since":"2026-11-06T04:24:03.000Z","findings":[{"id":"fhort5uf46c7rra3cnkfw","kind":"reported_domain","summary":"Under polar-tensor.com, listed by MetaMask","first_observed":"2026-11-06T03:41:07.331Z","first_published":"2026-11-06T04:14:26.424Z","source":"metamask","source_name":"MetaMask","under":"polar-tensor.com"}],"url":"https://domainspoof.com/live?show=all&q=4321zz3277w0cc6205f4a10b1add7371411f.polar-tensor.com"},{"hostname":"932386-crypto.com","first_observed":"2026-11-06T03:51:51.289Z","first_published":"2026-11-06T04:14:26.424Z","brands":[{"id":"crypto-com","name":"Crypto.com","url":"https://domainspoof.com/brands/crypto-com"}],"dns":"resolved","resolved":["104.21.85.18","172.67.201.5","2606:4700:3030::6815:5512","2606:4700:3037::ac43:c905"],"resolved_at":"2026-11-06T03:51:56Z","dns_checked_at":"2026-11-06T04:24:03.000Z","dns_since":"2026-11-06T04:24:03.000Z","findings":[{"id":"flrodqxyrlk3b6cq2syw7","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-06T03:51:51.289Z","first_published":"2026-11-06T04:14:26.424Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/brands/crypto-com"},{"hostname":"975949-crypto.com","first_observed":"2026-11-06T03:41:07.331Z","first_published":"2026-11-06T04:14:26.424Z","brands":[{"id":"crypto-com","name":"Crypto.com","url":"https://domainspoof.com/brands/crypto-com"}],"dns":"resolved","resolved":["104.21.47.111","172.67.147.54","2606:4700:3032::6815:2f6f","2606:4700:3034::ac43:9336"],"resolved_at":"2026-11-06T03:41:14Z","dns_checked_at":"2026-11-06T04:24:03.000Z","dns_since":"2026-11-06T04:24:03.000Z","findings":[{"id":"f4ai6br5no6ovvcpjzycm","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-06T03:41:07.331Z","first_published":"2026-11-06T04:14:26.424Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/brands/crypto-com"},{"hostname":"a1cloudforent38.sbs","first_observed":"2026-11-06T03:36:00.235Z","first_published":"2026-11-06T04:14:26.424Z","brands":[],"dns":"resolved","resolved":["103.224.182.250"],"resolved_at":"2026-11-06T03:36:05Z","dns_checked_at":"2026-11-06T04:24:03.000Z","dns_since":"2026-11-06T04:24:03.000Z","findings":[{"id":"fmoitrxtdtqladf3dyzs2","kind":"reported_domain","summary":"Listed by NPA 165 (finance and insurance)","first_observed":"2026-11-06T03:36:00.235Z","first_published":"2026-11-06T04:14:26.424Z","source":"npa","source_name":"NPA 165","claim":{"category":"finance and insurance"}}],"url":"https://domainspoof.com/live?show=all&q=a1cloudforent38.sbs"},{"hostname":"admin.polar-tensor.com","first_observed":"2026-11-06T03:36:00.235Z","first_published":"2026-11-06T04:14:26.424Z","brands":[],"dns":"resolved","resolved":["5.189.134.86","57.128.187.75","57.129.49.179","193.242.211.59"],"resolved_at":"2026-11-06T03:36:01Z","dns_checked_at":"2026-11-06T04:24:03.000Z","dns_since":"2026-11-06T04:24:03.000Z","findings":[{"id":"fv5haadr6k3ylnzapgwk2","kind":"reported_domain","summary":"Under polar-tensor.com, listed by MetaMask","first_observed":"2026-11-06T03:36:00.235Z","first_published":"2026-11-06T04:14:26.424Z","source":"metamask","source_name":"MetaMask","under":"polar-tensor.com"}],"url":"https://domainspoof.com/live?show=all&q=admin.polar-tensor.com"},{"hostname":"allocation-trololol.fun","first_observed":"2026-11-06T03:36:00.235Z","first_published":"2026-11-06T04:14:26.424Z","brands":[],"dns":"resolved","resolved":["104.21.43.235","172.67.188.125"],"resolved_at":"2026-11-06T03:36:01Z","dns_checked_at":"2026-11-06T04:24:03.000Z","dns_since":"2026-11-06T04:24:03.000Z","findings":[{"id":"f2kadtojst2dnsbrdn7lu","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-06T03:36:00.235Z","first_published":"2026-11-06T04:14:26.424Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=allocation-trololol.fun"},{"hostname":"alo-182.xyz","first_observed":"2026-11-06T03:36:00.235Z","first_published":"2026-11-06T04:14:26.424Z","brands":[],"dns":"resolved","resolved":["83.142.209.40"],"resolved_at":"2026-11-06T03:36:01Z","dns_checked_at":"2026-11-06T04:24:03.000Z","dns_since":"2026-11-06T04:24:03.000Z","findings":[{"id":"f7mth3nxuv6izmqgoriwq","kind":"reported_domain","summary":"Listed by USOM","first_observed":"2026-11-06T03:36:00.235Z","first_published":"2026-11-06T04:14:26.424Z","source":"usom","source_name":"USOM"}],"url":"https://domainspoof.com/live?show=all&q=alo-182.xyz"},{"hostname":"api.islamalimleri.com","first_observed":"2026-11-06T03:26:14.665Z","first_published":"2026-11-06T04:14:26.424Z","brands":[],"dns":"resolved","resolved":["89.233.108.5"],"resolved_at":"2026-11-06T03:26:25Z","dns_checked_at":"2026-11-06T04:24:03.000Z","dns_since":"2026-11-06T04:24:03.000Z","findings":[{"id":"fjpaea5mzs3yz2ff5crrw","kind":"reported_domain","summary":"Under islamalimleri.com, reported by PhishDestroy","first_observed":"2026-11-06T03:26:14.665Z","first_published":"2026-11-06T04:14:26.424Z","source":"phishdestroy","source_name":"PhishDestroy","under":"islamalimleri.com","source_url":"https://phishdestroy.io/domain/islamalimleri.com/"}],"url":"https://domainspoof.com/live?show=all&q=api.islamalimleri.com"},{"hostname":"api.shorturl.pt","first_observed":"2026-11-06T03:36:00.235Z","first_published":"2026-11-06T04:14:26.424Z","brands":[],"dns":"resolved","resolved":["94.46.183.47"],"resolved_at":"2026-11-06T03:36:01Z","dns_checked_at":"2026-11-06T04:24:03.000Z","dns_since":"2026-11-06T04:24:03.000Z","findings":[{"id":"ffzvrfukdxhxbgvlbhftc","kind":"reported_domain","summary":"Under shorturl.pt, reported by PhishDestroy","first_observed":"2026-11-06T03:36:00.235Z","first_published":"2026-11-06T04:14:26.424Z","source":"phishdestroy","source_name":"PhishDestroy","under":"shorturl.pt","source_url":"https://phishdestroy.io/domain/shorturl.pt/"}],"url":"https://domainspoof.com/live?show=all&q=api.shorturl.pt"},{"hostname":"apmexsn.top","first_observed":"2026-11-06T03:05:43.075Z","first_published":"2026-11-06T04:14:26.424Z","brands":[],"dns":"resolved","resolved":["104.21.88.108","172.67.176.230"],"resolved_at":"2026-11-06T03:11:52Z","dns_checked_at":"2026-11-06T04:24:03.000Z","dns_since":"2026-11-06T04:24:03.000Z","findings":[{"id":"fy53gdsdhzjvttmcti3pw","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-06T03:05:43.075Z","first_published":"2026-11-06T04:14:26.424Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=apmexsn.top"},{"hostname":"app-claudersfun.xyz","first_observed":"2026-11-06T04:00:33.888Z","first_published":"2026-11-06T04:14:26.424Z","brands":[],"dns":"resolved","resolved":["104.21.86.45","172.67.215.16"],"resolved_at":"2026-11-06T04:00:41Z","dns_checked_at":"2026-11-06T04:24:03.000Z","dns_since":"2026-11-06T04:24:03.000Z","findings":[{"id":"fyyl4neq2qwgpwpaviuzq","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-06T04:00:33.888Z","first_published":"2026-11-06T04:14:26.424Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=app-claudersfun.xyz"},{"hostname":"aura-fuse.com","first_observed":"2026-11-06T03:51:51.289Z","first_published":"2026-11-06T04:14:26.424Z","brands":[],"dns":"resolved","resolved":["104.21.35.104","172.67.217.76"],"resolved_at":"2026-11-06T04:03:02Z","dns_checked_at":"2026-11-06T04:24:03.000Z","dns_since":"2026-11-06T04:24:03.000Z","findings":[{"id":"fwyk2tmiyl6o4tfaw6ujt","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-06T03:51:51.289Z","first_published":"2026-11-06T04:14:26.424Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=aura-fuse.com"},{"hostname":"auth-strt-ledgercom.pages.dev","first_observed":"2026-11-06T03:36:00.235Z","first_published":"2026-11-06T04:14:26.424Z","brands":[],"dns":"resolved","resolved":["172.66.45.43","172.66.46.213"],"resolved_at":"2026-11-06T03:36:01Z","dns_checked_at":"2026-11-06T04:24:03.000Z","dns_since":"2026-11-06T04:24:03.000Z","findings":[{"id":"fo7v2ecv5oqx7ugu2at2p","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-06T03:36:00.235Z","first_published":"2026-11-06T04:14:26.424Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=auth-strt-ledgercom.pages.dev"},{"hostname":"babyswapua.com","first_observed":"2026-11-06T03:36:00.235Z","first_published":"2026-11-06T04:14:26.424Z","brands":[],"dns":"resolved","resolved":["162.4.84.247"],"resolved_at":"2026-11-06T03:36:05Z","dns_checked_at":"2026-11-06T04:24:03.000Z","dns_since":"2026-11-06T04:24:03.000Z","findings":[{"id":"ffomj74mswttzklxua3lr","kind":"reported_domain","summary":"Listed by NPA 165 (finance and insurance)","first_observed":"2026-11-06T03:36:00.235Z","first_published":"2026-11-06T04:14:26.424Z","source":"npa","source_name":"NPA 165","claim":{"category":"finance and insurance"}}],"url":"https://domainspoof.com/live?show=all&q=babyswapua.com"},{"hostname":"bendera62.alottapolish.com","first_observed":"2026-11-06T03:36:00.235Z","first_published":"2026-11-06T04:14:26.424Z","brands":[],"dns":"resolved","resolved":["148.113.237.140"],"resolved_at":"2026-11-06T03:36:05Z","dns_checked_at":"2026-11-06T04:24:03.000Z","dns_since":"2026-11-06T04:24:03.000Z","findings":[{"id":"fggrlzolnvlzmeamockwg","kind":"reported_domain","summary":"Under alottapolish.com, listed by CERT Polska","first_observed":"2026-11-06T03:36:00.235Z","first_published":"2026-11-06T04:14:26.424Z","source":"cert_polska","source_name":"CERT Polska","under":"alottapolish.com"}],"url":"https://domainspoof.com/live?show=all&q=bendera62.alottapolish.com"},{"hostname":"bitstakingtrades.com","first_observed":"2026-11-06T04:00:33.888Z","first_published":"2026-11-06T04:14:26.424Z","brands":[],"dns":"resolved","resolved":["51.89.0.70"],"resolved_at":"2026-11-06T04:00:49Z","dns_checked_at":"2026-11-06T04:24:03.000Z","dns_since":"2026-11-06T04:24:03.000Z","findings":[{"id":"fy6ipn7ze3yxurb6buvig","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-06T04:00:33.888Z","first_published":"2026-11-06T04:14:26.424Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/bitstakingtrades.com/"}],"url":"https://domainspoof.com/live?show=all&q=bitstakingtrades.com"},{"hostname":"blog.polar-tensor.com","first_observed":"2026-11-06T03:46:45.328Z","first_published":"2026-11-06T04:14:26.424Z","brands":[],"dns":"resolved","resolved":["5.189.134.86","57.128.187.75","57.129.49.179","193.242.211.59"],"resolved_at":"2026-11-06T03:52:52Z","dns_checked_at":"2026-11-06T04:24:03.000Z","dns_since":"2026-11-06T04:24:03.000Z","findings":[{"id":"fbpth7dntckf3bul67r4z","kind":"reported_domain","summary":"Under polar-tensor.com, listed by MetaMask","first_observed":"2026-11-06T03:46:45.328Z","first_published":"2026-11-06T04:14:26.424Z","source":"metamask","source_name":"MetaMask","under":"polar-tensor.com"}],"url":"https://domainspoof.com/live?show=all&q=blog.polar-tensor.com"},{"hostname":"bow.fun","first_observed":"2026-11-06T03:56:57.480Z","first_published":"2026-11-06T04:14:26.424Z","brands":[],"dns":"resolved","resolved":["189.1.171.15"],"resolved_at":"2026-11-06T03:57:17Z","dns_checked_at":"2026-11-06T04:24:03.000Z","dns_since":"2026-11-06T04:24:03.000Z","findings":[{"id":"frg4eoymrrnykviefvjcf","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-06T03:56:57.480Z","first_published":"2026-11-06T04:14:26.424Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/bow.fun/"}],"url":"https://domainspoof.com/live?show=all&q=bow.fun"},{"hostname":"btcdrevola72-it.live","first_observed":"2026-11-06T03:41:07.331Z","first_published":"2026-11-06T04:14:26.424Z","brands":[],"dns":"resolved","resolved":["104.21.51.57","172.67.221.169"],"resolved_at":"2026-11-06T03:41:15Z","dns_checked_at":"2026-11-06T04:24:03.000Z","dns_since":"2026-11-06T04:24:03.000Z","findings":[{"id":"fuwbyaj7mmtlwcdjmavyj","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-06T03:41:07.331Z","first_published":"2026-11-06T04:14:26.424Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=btcdrevola72-it.live"},{"hostname":"btcmixerslist.com","first_observed":"2026-11-06T03:16:29.378Z","first_published":"2026-11-06T04:14:26.424Z","brands":[],"dns":"resolved","resolved":["104.21.59.51","172.67.214.142"],"resolved_at":"2026-11-06T03:17:16Z","dns_checked_at":"2026-11-06T04:24:03.000Z","dns_since":"2026-11-06T04:24:03.000Z","findings":[{"id":"fmigtemh3hnb6qo47lrqk","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-06T03:16:29.378Z","first_published":"2026-11-06T04:14:26.424Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/btcmixerslist.com/"}],"url":"https://domainspoof.com/live?show=all&q=btcmixerslist.com"},{"hostname":"bxeqj.hair","first_observed":"2026-11-06T04:00:33.888Z","first_published":"2026-11-06T04:14:26.424Z","brands":[],"dns":"resolved","resolved":["104.21.56.63","172.67.178.201"],"resolved_at":"2026-11-06T04:00:52Z","dns_checked_at":"2026-11-06T04:24:03.000Z","dns_since":"2026-11-06T04:24:03.000Z","findings":[{"id":"fuzogqeilfoefwl2msulf","kind":"reported_domain","summary":"Listed by NPA 165 (information services)","first_observed":"2026-11-06T04:00:33.888Z","first_published":"2026-11-06T04:14:26.424Z","source":"npa","source_name":"NPA 165","claim":{"category":"information services"}}],"url":"https://domainspoof.com/live?show=all&q=bxeqj.hair"},{"hostname":"campanhas.ecomex.com.br","first_observed":"2026-11-06T03:10:51.082Z","first_published":"2026-11-06T04:14:26.424Z","brands":[],"dns":"resolved","resolved":["167.234.235.22"],"resolved_at":"2026-11-06T03:14:18Z","dns_checked_at":"2026-11-06T04:24:03.000Z","dns_since":"2026-11-06T04:24:03.000Z","findings":[{"id":"fmtx5siohcp5zvf6cauix","kind":"reported_domain","summary":"Under ecomex.com.br, reported by PhishDestroy","first_observed":"2026-11-06T03:10:51.082Z","first_published":"2026-11-06T04:14:26.424Z","source":"phishdestroy","source_name":"PhishDestroy","under":"ecomex.com.br","source_url":"https://phishdestroy.io/domain/ecomex.com.br/"}],"url":"https://domainspoof.com/live?show=all&q=campanhas.ecomex.com.br"},{"hostname":"centerieengmiserableness.info","first_observed":"2026-11-06T03:21:06.153Z","first_published":"2026-11-06T04:14:26.424Z","brands":[],"dns":"resolved","resolved":["104.21.18.76","172.67.180.240"],"resolved_at":"2026-11-06T03:21:22Z","dns_checked_at":"2026-11-06T04:24:03.000Z","dns_since":"2026-11-06T04:24:03.000Z","findings":[{"id":"figboukrs3ie3cbc5oiny","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-06T03:21:06.153Z","first_published":"2026-11-06T04:14:26.424Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=centerieengmiserableness.info"},{"hostname":"changelly-swap.gr.com","first_observed":"2026-11-06T04:00:52.919Z","first_published":"2026-11-06T04:14:26.424Z","brands":[{"id":"changelly","name":"Changelly","url":"https://domainspoof.com/brands/changelly"}],"dns":"resolved","resolved":["163.245.41.169"],"resolved_at":"2026-11-06T04:24:03Z","dns_checked_at":"2026-11-06T04:24:03.000Z","dns_since":"2026-11-06T04:24:03.000Z","findings":[{"id":"fsleorjzo6rnzj4jsdrqe","kind":"phishing_infrastructure","summary":"Resolved to 163.245.41.169, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T04:00:52.919Z","first_published":"2026-11-06T04:14:26.424Z","address":"163.245.41.169","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/changelly"},{"hostname":"cn.web-binance.sh.cn","first_observed":"2026-11-06T03:36:00.235Z","first_published":"2026-11-06T04:14:26.424Z","brands":[{"id":"binance","name":"Binance","url":"https://domainspoof.com/brands/binance"}],"dns":"resolved","resolved":["179.61.182.70"],"resolved_at":"2026-11-06T04:24:03Z","dns_checked_at":"2026-11-06T04:24:03.000Z","dns_since":"2026-11-06T04:24:03.000Z","findings":[{"id":"fjcesjfhkypnz5k5qiqjg","kind":"reported_domain","summary":"Under web-binance.sh.cn, listed by MetaMask","first_observed":"2026-11-06T03:36:00.235Z","first_published":"2026-11-06T04:14:26.424Z","source":"metamask","source_name":"MetaMask","under":"web-binance.sh.cn"},{"id":"f457pts4ksuprq7umy3zi","kind":"phishing_infrastructure","summary":"Resolved to 179.61.182.70, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T03:36:08.120Z","first_published":"2026-11-06T04:14:26.424Z","address":"179.61.182.70","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/binance"},{"hostname":"cugmy.hair","first_observed":"2026-11-06T03:10:51.082Z","first_published":"2026-11-06T04:14:26.424Z","brands":[],"dns":"resolved","resolved":["104.21.61.178","172.67.212.154"],"resolved_at":"2026-11-06T03:14:24Z","dns_checked_at":"2026-11-06T04:24:03.000Z","dns_since":"2026-11-06T04:24:03.000Z","findings":[{"id":"fnc2n77bqzkvhxw74wxsf","kind":"reported_domain","summary":"Listed by NPA 165 (information services)","first_observed":"2026-11-06T03:10:51.082Z","first_published":"2026-11-06T04:14:26.424Z","source":"npa","source_name":"NPA 165","claim":{"category":"information services"}}],"url":"https://domainspoof.com/live?show=all&q=cugmy.hair"},{"hostname":"d7mvd6.info","first_observed":"2026-11-06T03:31:21.959Z","first_published":"2026-11-06T04:14:26.424Z","brands":[{"id":"jcb","name":"JCB","url":"https://domainspoof.com/brands/jcb"}],"dns":"resolved","resolved":["43.129.175.77"],"resolved_at":"2026-11-06T03:31:38Z","dns_checked_at":"2026-11-06T04:24:03.000Z","dns_since":"2026-11-06T04:24:03.000Z","findings":[{"id":"fot5jbizfaqdfb3xtrhpd","kind":"reported_domain","summary":"Listed by JPCERT/CC as imitating JCB","first_observed":"2026-11-06T03:31:21.959Z","first_published":"2026-11-06T04:14:26.424Z","source":"jpcert","source_name":"JPCERT/CC","claim":{"brand":"JCB"}}],"url":"https://domainspoof.com/brands/jcb"},{"hostname":"dev-trading.aurum.foundation","first_observed":"2026-11-06T03:10:51.082Z","first_published":"2026-11-06T04:14:26.424Z","brands":[],"dns":"resolved","resolved":["104.21.38.184","172.67.137.91"],"resolved_at":"2026-11-06T03:14:24Z","dns_checked_at":"2026-11-06T04:24:03.000Z","dns_since":"2026-11-06T04:24:03.000Z","findings":[{"id":"fv3t4al3gquzzyxqtjw6i","kind":"reported_domain","summary":"Under aurum.foundation, listed by FSMA (cryptocurrency fraud)","first_observed":"2026-11-06T03:10:51.082Z","first_published":"2026-11-06T04:14:26.424Z","source":"fsma","source_name":"FSMA","under":"aurum.foundation","claim":{"category":"cryptocurrency fraud"}}],"url":"https://domainspoof.com/live?show=all&q=dev-trading.aurum.foundation"},{"hostname":"dev.firdavs.professorflapjacks.com","first_observed":"2026-11-06T03:36:00.235Z","first_published":"2026-11-06T04:14:26.424Z","brands":[],"dns":"resolved","resolved":["185.149.120.183"],"resolved_at":"2026-11-06T03:36:10Z","dns_checked_at":"2026-11-06T04:24:03.000Z","dns_since":"2026-11-06T04:24:03.000Z","findings":[{"id":"fl5pwqsksohskwumcquqm","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-06T03:36:00.235Z","first_published":"2026-11-06T04:14:26.424Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/dev.firdavs.professorflapjacks.com/"}],"url":"https://domainspoof.com/live?show=all&q=dev.firdavs.professorflapjacks.com"},{"hostname":"dexscreeners.at","first_observed":"2026-11-06T04:00:33.888Z","first_published":"2026-11-06T04:14:26.424Z","brands":[],"dns":"resolved","resolved":["163.245.41.169"],"resolved_at":"2026-11-06T04:00:55Z","dns_checked_at":"2026-11-06T04:24:03.000Z","dns_since":"2026-11-06T04:24:03.000Z","findings":[{"id":"f47piso5tumgsjk6tzkxz","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-06T04:00:33.888Z","first_published":"2026-11-06T04:14:26.424Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=dexscreeners.at"},{"hostname":"discountoutlet-pl.shop","first_observed":"2026-11-06T03:10:51.082Z","first_published":"2026-11-06T04:14:26.424Z","brands":[],"dns":"resolved","resolved":["104.18.22.122"],"resolved_at":"2026-11-06T03:14:24Z","dns_checked_at":"2026-11-06T04:24:03.000Z","dns_since":"2026-11-06T04:24:03.000Z","findings":[{"id":"ftvbqy2gkgmef6uw7vdke","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-06T03:10:51.082Z","first_published":"2026-11-06T04:14:26.424Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=discountoutlet-pl.shop"},{"hostname":"dsjjk.com","first_observed":"2026-11-06T03:36:00.235Z","first_published":"2026-11-06T04:14:26.424Z","brands":[],"dns":"resolved","resolved":["104.21.61.141","172.67.210.250"],"resolved_at":"2026-11-06T03:36:10Z","dns_checked_at":"2026-11-06T04:24:03.000Z","dns_since":"2026-11-06T04:24:03.000Z","findings":[{"id":"f3jausybgywaqlwccnhip","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-06T03:36:00.235Z","first_published":"2026-11-06T04:14:26.424Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=dsjjk.com"},{"hostname":"dydx-swap.gr.com","first_observed":"2026-11-06T04:00:33.888Z","first_published":"2026-11-06T04:14:26.424Z","brands":[],"dns":"resolved","resolved":["163.245.41.169"],"resolved_at":"2026-11-06T04:00:55Z","dns_checked_at":"2026-11-06T04:24:03.000Z","dns_since":"2026-11-06T04:24:03.000Z","findings":[{"id":"fsyvqalkc3n3xxga32shx","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-06T04:00:33.888Z","first_published":"2026-11-06T04:14:26.424Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=dydx-swap.gr.com"},{"hostname":"en.granvestor.com","first_observed":"2026-11-06T03:10:51.082Z","first_published":"2026-11-06T04:14:26.424Z","brands":[],"dns":"resolved","resolved":["163.61.188.5"],"resolved_at":"2026-11-06T03:14:25Z","dns_checked_at":"2026-11-06T04:24:03.000Z","dns_since":"2026-11-06T04:24:03.000Z","findings":[{"id":"fwwsgt4sbk2htz6zsssfa","kind":"reported_domain","summary":"Under granvestor.com, reported by PhishDestroy","first_observed":"2026-11-06T03:10:51.082Z","first_published":"2026-11-06T04:14:26.424Z","source":"phishdestroy","source_name":"PhishDestroy","under":"granvestor.com","source_url":"https://phishdestroy.io/domain/granvestor.com/"}],"url":"https://domainspoof.com/live?show=all&q=en.granvestor.com"},{"hostname":"equityautomatedbot.com","first_observed":"2026-11-06T03:51:51.289Z","first_published":"2026-11-06T04:14:26.424Z","brands":[],"dns":"resolved","resolved":["185.158.133.1"],"resolved_at":"2026-11-06T04:03:27Z","dns_checked_at":"2026-11-06T04:24:03.000Z","dns_since":"2026-11-06T04:24:03.000Z","findings":[{"id":"f2w5djjcljo3rp3gz2ok6","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-06T03:51:51.289Z","first_published":"2026-11-06T04:14:26.424Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/equityautomatedbot.com/"}],"url":"https://domainspoof.com/live?show=all&q=equityautomatedbot.com"},{"hostname":"erebor.casa","first_observed":"2026-11-06T03:56:57.480Z","first_published":"2026-11-06T04:14:26.424Z","brands":[],"dns":"resolved","resolved":["104.21.6.72","172.67.134.151"],"resolved_at":"2026-11-06T03:57:25Z","dns_checked_at":"2026-11-06T04:24:03.000Z","dns_since":"2026-11-06T04:24:03.000Z","findings":[{"id":"fjwj7iq7kw4lir73zzzmf","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-06T03:56:57.480Z","first_published":"2026-11-06T04:14:26.424Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=erebor.casa"},{"hostname":"ethfi-s5-rewards.xyz","first_observed":"2026-11-06T03:16:29.378Z","first_published":"2026-11-06T04:14:26.424Z","brands":[{"id":"ether-fi","name":"ether.fi","url":"https://domainspoof.com/brands/ether-fi"}],"dns":"resolved","resolved":["104.21.20.43","172.67.191.84","2606:4700:3033::ac43:bf54","2606:4700:3035::6815:142b"],"resolved_at":"2026-11-06T03:17:29Z","dns_checked_at":"2026-11-06T04:24:03.000Z","dns_since":"2026-11-06T04:24:03.000Z","findings":[{"id":"fk7gzuhfbyrer2bqdhntp","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-06T03:16:29.378Z","first_published":"2026-11-06T04:14:26.424Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/brands/ether-fi"},{"hostname":"ewzn.asia","first_observed":"2026-11-06T03:10:51.082Z","first_published":"2026-11-06T04:14:26.424Z","brands":[],"dns":"resolved","resolved":["104.21.35.211","172.67.179.225"],"resolved_at":"2026-11-06T03:14:25Z","dns_checked_at":"2026-11-06T04:24:03.000Z","dns_since":"2026-11-06T04:24:03.000Z","findings":[{"id":"fmgw34pzxg4nsdlxnnjpu","kind":"reported_domain","summary":"Listed by NPA 165 (e-commerce)","first_observed":"2026-11-06T03:10:51.082Z","first_published":"2026-11-06T04:14:26.424Z","source":"npa","source_name":"NPA 165","claim":{"category":"e-commerce"}}],"url":"https://domainspoof.com/live?show=all&q=ewzn.asia"},{"hostname":"exmanycoins.com","first_observed":"2026-11-06T03:26:14.665Z","first_published":"2026-11-06T04:14:26.424Z","brands":[],"dns":"resolved","resolved":["74.63.219.253"],"resolved_at":"2026-11-06T03:26:30Z","dns_checked_at":"2026-11-06T04:24:03.000Z","dns_since":"2026-11-06T04:24:03.000Z","findings":[{"id":"fzv4zpzbqyu7z54o644rn","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-06T03:26:14.665Z","first_published":"2026-11-06T04:14:26.424Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/exmanycoins.com/"}],"url":"https://domainspoof.com/live?show=all&q=exmanycoins.com"},{"hostname":"fadz.cryptopayment.xyz","first_observed":"2026-11-06T04:05:40.280Z","first_published":"2026-11-06T04:14:26.424Z","brands":[],"dns":"resolved","resolved":["143.244.211.82"],"resolved_at":"2026-11-06T04:07:22Z","dns_checked_at":"2026-11-06T04:24:03.000Z","dns_since":"2026-11-06T04:24:03.000Z","findings":[{"id":"fwshrxooo6glpbkpjbbns","kind":"reported_domain","summary":"Under cryptopayment.xyz, listed by MetaMask","first_observed":"2026-11-06T04:05:40.280Z","first_published":"2026-11-06T04:14:26.424Z","source":"metamask","source_name":"MetaMask","under":"cryptopayment.xyz"}],"url":"https://domainspoof.com/live?show=all&q=fadz.cryptopayment.xyz"},{"hostname":"feeds.fastncup.com","first_observed":"2026-11-06T03:26:14.665Z","first_published":"2026-11-06T04:14:26.424Z","brands":[],"dns":"resolved","resolved":["104.21.82.232","172.67.208.172"],"resolved_at":"2026-11-06T03:26:30Z","dns_checked_at":"2026-11-06T04:24:03.000Z","dns_since":"2026-11-06T04:24:03.000Z","findings":[{"id":"fmgjfknypmgro22ithube","kind":"reported_domain","summary":"Under fastncup.com, reported by PhishDestroy","first_observed":"2026-11-06T03:26:14.665Z","first_published":"2026-11-06T04:14:26.424Z","source":"phishdestroy","source_name":"PhishDestroy","under":"fastncup.com","source_url":"https://phishdestroy.io/domain/fastncup.com/"}],"url":"https://domainspoof.com/live?show=all&q=feeds.fastncup.com"},{"hostname":"files.ni-electrical.com","first_observed":"2026-11-06T03:16:29.378Z","first_published":"2026-11-06T04:14:26.424Z","brands":[],"dns":"resolved","resolved":["109.238.86.5"],"resolved_at":"2026-11-06T03:17:29Z","dns_checked_at":"2026-11-06T04:24:03.000Z","dns_since":"2026-11-06T04:24:03.000Z","findings":[{"id":"f4aywykzwpsnaed46here","kind":"reported_domain","summary":"Under ni-electrical.com, listed by CERT Polska","first_observed":"2026-11-06T03:16:29.378Z","first_published":"2026-11-06T04:14:26.424Z","source":"cert_polska","source_name":"CERT Polska","under":"ni-electrical.com"}],"url":"https://domainspoof.com/live?show=all&q=files.ni-electrical.com"},{"hostname":"financebot-app.pro","first_observed":"2026-11-06T03:46:45.328Z","first_published":"2026-11-06T04:14:26.424Z","brands":[],"dns":"resolved","resolved":["185.62.57.10"],"resolved_at":"2026-11-06T03:54:33Z","dns_checked_at":"2026-11-06T04:24:03.000Z","dns_since":"2026-11-06T04:24:03.000Z","findings":[{"id":"foc2ta7hwz7f2dhnl7c7v","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-06T03:46:45.328Z","first_published":"2026-11-06T04:14:26.424Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=financebot-app.pro"},{"hostname":"finxx.hair","first_observed":"2026-11-06T03:56:57.480Z","first_published":"2026-11-06T04:14:26.424Z","brands":[],"dns":"resolved","resolved":["104.21.70.89","172.67.222.43"],"resolved_at":"2026-11-06T03:57:25Z","dns_checked_at":"2026-11-06T04:24:03.000Z","dns_since":"2026-11-06T04:24:03.000Z","findings":[{"id":"f7adrjvb3zh62i4al4rei","kind":"reported_domain","summary":"Listed by NPA 165 (information services)","first_observed":"2026-11-06T03:56:57.480Z","first_published":"2026-11-06T04:14:26.424Z","source":"npa","source_name":"NPA 165","claim":{"category":"information services"}}],"url":"https://domainspoof.com/live?show=all&q=finxx.hair"},{"hostname":"flagringhi.store","first_observed":"2026-11-06T03:20:34.212Z","first_published":"2026-11-06T04:14:26.424Z","brands":[],"dns":"resolved","resolved":["104.21.1.193","172.67.129.221","2606:4700:3031::ac43:81dd","2606:4700:3037::6815:1c1"],"resolved_at":"2026-11-06T03:24:51Z","dns_checked_at":"2026-11-06T04:24:03.000Z","dns_since":"2026-11-06T04:24:03.000Z","findings":[{"id":"fpqzwthkhnf6fal6wbt3x","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-06T03:20:34.212Z","first_published":"2026-11-06T04:14:26.424Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=flagringhi.store"},{"hostname":"frasegerma.store","first_observed":"2026-11-06T03:20:34.212Z","first_published":"2026-11-06T04:14:26.424Z","brands":[],"dns":"resolved","resolved":["104.21.86.194","172.67.136.30","2606:4700:3032::ac43:881e","2606:4700:3036::6815:56c2"],"resolved_at":"2026-11-06T03:24:51Z","dns_checked_at":"2026-11-06T04:24:03.000Z","dns_since":"2026-11-06T04:24:03.000Z","findings":[{"id":"fpn7om5qujfe25w5gifbe","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-06T03:20:34.212Z","first_published":"2026-11-06T04:14:26.424Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=frasegerma.store"},{"hostname":"gentle-paths.com","first_observed":"2026-11-06T03:21:06.153Z","first_published":"2026-11-06T04:14:26.424Z","brands":[],"dns":"resolved","resolved":["104.21.7.54","172.67.135.199"],"resolved_at":"2026-11-06T03:21:31Z","dns_checked_at":"2026-11-06T04:24:03.000Z","dns_since":"2026-11-06T04:24:03.000Z","findings":[{"id":"fzialdskqkmddsrimdoy3","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-06T03:21:06.153Z","first_published":"2026-11-06T04:14:26.424Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=gentle-paths.com"},{"hostname":"globalprotect.polar-tensor.com","first_observed":"2026-11-06T03:16:29.378Z","first_published":"2026-11-06T04:14:26.424Z","brands":[],"dns":"resolved","resolved":["5.189.134.86","57.128.187.75","57.129.49.179","193.242.211.59"],"resolved_at":"2026-11-06T03:17:29Z","dns_checked_at":"2026-11-06T04:24:03.000Z","dns_since":"2026-11-06T04:24:03.000Z","findings":[{"id":"fhx5koo3w74zvsxc7dmtq","kind":"reported_domain","summary":"Under polar-tensor.com, listed by MetaMask","first_observed":"2026-11-06T03:16:29.378Z","first_published":"2026-11-06T04:14:26.424Z","source":"metamask","source_name":"MetaMask","under":"polar-tensor.com"}],"url":"https://domainspoof.com/live?show=all&q=globalprotect.polar-tensor.com"},{"hostname":"granvestor.com","first_observed":"2026-11-06T03:10:51.082Z","first_published":"2026-11-06T04:14:26.424Z","brands":[],"dns":"resolved","resolved":["163.61.188.5"],"resolved_at":"2026-11-06T03:14:26Z","dns_checked_at":"2026-11-06T04:24:03.000Z","dns_since":"2026-11-06T04:24:03.000Z","findings":[{"id":"fgicyvsfdujp7srgmoxjd","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-06T03:10:51.082Z","first_published":"2026-11-06T04:14:26.424Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/granvestor.com/"}],"url":"https://domainspoof.com/live?show=all&q=granvestor.com"},{"hostname":"guaner01.skin","first_observed":"2026-11-06T03:56:57.480Z","first_published":"2026-11-06T04:14:26.424Z","brands":[],"dns":"resolved","resolved":["104.21.55.162","172.67.149.50"],"resolved_at":"2026-11-06T03:57:25Z","dns_checked_at":"2026-11-06T04:24:03.000Z","dns_since":"2026-11-06T04:24:03.000Z","findings":[{"id":"frwrqqyau3y57ywe2udns","kind":"reported_domain","summary":"Listed by NPA 165 (information services)","first_observed":"2026-11-06T03:56:57.480Z","first_published":"2026-11-06T04:14:26.424Z","source":"npa","source_name":"NPA 165","claim":{"category":"information services"}}],"url":"https://domainspoof.com/live?show=all&q=guaner01.skin"},{"hostname":"guiacarroseservicos.com","first_observed":"2026-11-06T04:00:33.888Z","first_published":"2026-11-06T04:14:26.424Z","brands":[],"dns":"resolved","resolved":["104.21.67.202","172.67.180.147"],"resolved_at":"2026-11-06T04:00:58Z","dns_checked_at":"2026-11-06T04:24:03.000Z","dns_since":"2026-11-06T04:24:03.000Z","findings":[{"id":"flcpg4yg77av6icvzdhen","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-06T04:00:33.888Z","first_published":"2026-11-06T04:14:26.424Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/guiacarroseservicos.com/"}],"url":"https://domainspoof.com/live?show=all&q=guiacarroseservicos.com"},{"hostname":"harmon1x.yoga","first_observed":"2026-11-06T03:21:06.153Z","first_published":"2026-11-06T04:14:26.424Z","brands":[],"dns":"no_address","resolved":[],"resolved_at":"2026-11-06T03:21:32Z","dns_checked_at":"2026-11-06T12:34:49.000Z","findings":[{"id":"fcbc2w37gnd5sde553hic","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-06T03:21:06.153Z","first_published":"2026-11-06T04:14:26.424Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=harmon1x.yoga"},{"hostname":"hodpay.com.br","first_observed":"2026-11-06T03:46:45.328Z","first_published":"2026-11-06T04:14:26.424Z","brands":[],"dns":"resolved","resolved":["76.76.21.21"],"resolved_at":"2026-11-06T03:54:37Z","dns_checked_at":"2026-11-06T04:24:03.000Z","dns_since":"2026-11-06T04:24:03.000Z","findings":[{"id":"fk5puzf2g2ud3v7guzy2y","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-06T03:46:45.328Z","first_published":"2026-11-06T04:14:26.424Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=hodpay.com.br"},{"hostname":"hub-0glabs.cfd","first_observed":"2026-11-06T03:41:07.331Z","first_published":"2026-11-06T04:14:26.424Z","brands":[],"dns":"resolved","resolved":["103.224.182.250"],"resolved_at":"2026-11-06T03:41:21Z","dns_checked_at":"2026-11-06T04:24:03.000Z","dns_since":"2026-11-06T04:24:03.000Z","findings":[{"id":"fs6wysltnpqou5aqurgae","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-06T03:41:07.331Z","first_published":"2026-11-06T04:14:26.424Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/hub-0glabs.cfd/"}],"url":"https://domainspoof.com/live?show=all&q=hub-0glabs.cfd"},{"hostname":"hyperliquid-app.gr.com","first_observed":"2026-11-06T04:00:33.888Z","first_published":"2026-11-06T04:14:26.424Z","brands":[{"id":"hyperliquid","name":"Hyperliquid","url":"https://domainspoof.com/brands/hyperliquid"}],"dns":"resolved","resolved":["163.245.41.169"],"resolved_at":"2026-11-06T04:24:03Z","dns_checked_at":"2026-11-06T04:24:03.000Z","dns_since":"2026-11-06T04:24:03.000Z","findings":[{"id":"fstxjr34zzmypzgo4ngfe","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-06T04:00:33.888Z","first_published":"2026-11-06T04:14:26.424Z","source":"metamask","source_name":"MetaMask"},{"id":"fnusjj2llzxvuwiwbqva2","kind":"phishing_infrastructure","summary":"Resolved to 163.245.41.169, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T04:00:58.151Z","first_published":"2026-11-06T04:14:26.424Z","address":"163.245.41.169","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/hyperliquid"},{"hostname":"hyperliquid-dex.gr.com","first_observed":"2026-11-06T04:00:33.888Z","first_published":"2026-11-06T04:14:26.424Z","brands":[{"id":"hyperliquid","name":"Hyperliquid","url":"https://domainspoof.com/brands/hyperliquid"}],"dns":"resolved","resolved":["163.245.41.169"],"resolved_at":"2026-11-06T04:24:03Z","dns_checked_at":"2026-11-06T04:24:03.000Z","dns_since":"2026-11-06T04:24:03.000Z","findings":[{"id":"fic2xkzvjizw5g7kr2ipo","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-06T04:00:33.888Z","first_published":"2026-11-06T04:14:26.424Z","source":"metamask","source_name":"MetaMask"},{"id":"flytdm5fsecygzbcnqb5c","kind":"phishing_infrastructure","summary":"Resolved to 163.245.41.169, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T04:00:58.151Z","first_published":"2026-11-06T04:14:26.424Z","address":"163.245.41.169","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/hyperliquid"},{"hostname":"iercker.store","first_observed":"2026-11-06T03:36:00.235Z","first_published":"2026-11-06T04:14:26.424Z","brands":[],"dns":"resolved","resolved":["104.21.37.79","172.67.205.230"],"resolved_at":"2026-11-06T03:36:11Z","dns_checked_at":"2026-11-06T04:24:03.000Z","dns_since":"2026-11-06T04:24:03.000Z","findings":[{"id":"fqdjoxncdnoz5n3ryygfg","kind":"reported_domain","summary":"Listed by NPA 165 (information services)","first_observed":"2026-11-06T03:36:00.235Z","first_published":"2026-11-06T04:14:26.424Z","source":"npa","source_name":"NPA 165","claim":{"category":"information services"}}],"url":"https://domainspoof.com/live?show=all&q=iercker.store"},{"hostname":"insatswap.com","first_observed":"2026-11-06T03:00:33.284Z","first_published":"2026-11-06T04:14:26.424Z","brands":[],"dns":"resolved","resolved":["104.21.10.114","172.67.131.119"],"resolved_at":"2026-11-06T03:00:47Z","dns_checked_at":"2026-11-06T04:24:03.000Z","dns_since":"2026-11-06T04:24:03.000Z","findings":[{"id":"f4dalbokh7iu22yebyl4u","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-06T03:00:33.284Z","first_published":"2026-11-06T04:14:26.424Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=insatswap.com"},{"hostname":"instant-ledger.xyz","first_observed":"2026-11-06T03:31:21.959Z","first_published":"2026-11-06T04:14:26.424Z","brands":[],"dns":"resolved","resolved":["104.21.28.36","172.67.144.13"],"resolved_at":"2026-11-06T03:31:40Z","dns_checked_at":"2026-11-06T04:24:03.000Z","dns_since":"2026-11-06T04:24:03.000Z","findings":[{"id":"fmvctduiurfranyc6cfyc","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-06T03:31:21.959Z","first_published":"2026-11-06T04:14:26.424Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=instant-ledger.xyz"},{"hostname":"inv.dev.usemason.com","first_observed":"2026-11-06T03:56:57.480Z","first_published":"2026-11-06T04:14:26.424Z","brands":[],"dns":"resolved","resolved":["151.101.1.195","151.101.65.195"],"resolved_at":"2026-11-06T03:57:26Z","dns_checked_at":"2026-11-06T04:24:03.000Z","dns_since":"2026-11-06T04:24:03.000Z","findings":[{"id":"fi46pywyvmcgwmu5k5wqb","kind":"reported_domain","summary":"Under dev.usemason.com, reported by PhishDestroy","first_observed":"2026-11-06T03:56:57.480Z","first_published":"2026-11-06T04:14:26.424Z","source":"phishdestroy","source_name":"PhishDestroy","under":"dev.usemason.com","source_url":"https://phishdestroy.io/domain/dev.usemason.com/"}],"url":"https://domainspoof.com/live?show=all&q=inv.dev.usemason.com"},{"hostname":"ioxcdke.cc","first_observed":"2026-11-06T03:00:33.284Z","first_published":"2026-11-06T04:14:26.424Z","brands":[],"dns":"resolved","resolved":["117.72.200.45"],"resolved_at":"2026-11-06T03:00:47Z","dns_checked_at":"2026-11-06T04:24:03.000Z","dns_since":"2026-11-06T04:24:03.000Z","findings":[{"id":"fnhki36abnlnzwms5pafj","kind":"reported_domain","summary":"Listed by NPA 165 (information services)","first_observed":"2026-11-06T03:00:33.284Z","first_published":"2026-11-06T04:14:26.424Z","source":"npa","source_name":"NPA 165","claim":{"category":"information services"}}],"url":"https://domainspoof.com/live?show=all&q=ioxcdke.cc"},{"hostname":"kbb2cxbjzyf4sqcs.crushxp.com","first_observed":"2026-11-06T03:21:06.153Z","first_published":"2026-11-06T04:14:26.424Z","brands":[],"dns":"resolved","resolved":["109.238.86.5"],"resolved_at":"2026-11-06T03:21:33Z","dns_checked_at":"2026-11-06T04:24:03.000Z","dns_since":"2026-11-06T04:24:03.000Z","findings":[{"id":"f3ni5gdwkklx3q2dajv63","kind":"reported_domain","summary":"Under crushxp.com, listed by CERT Polska","first_observed":"2026-11-06T03:21:06.153Z","first_published":"2026-11-06T04:14:26.424Z","source":"cert_polska","source_name":"CERT Polska","under":"crushxp.com"}],"url":"https://domainspoof.com/live?show=all&q=kbb2cxbjzyf4sqcs.crushxp.com"},{"hostname":"keplrwallet.app","first_observed":"2026-11-06T03:51:51.289Z","first_published":"2026-11-06T04:14:26.424Z","brands":[],"dns":"resolved","resolved":["104.21.25.62","172.67.223.53"],"resolved_at":"2026-11-06T03:51:55Z","dns_checked_at":"2026-11-06T04:24:03.000Z","dns_since":"2026-11-06T04:24:03.000Z","findings":[{"id":"fljquryxmhueuakjjcp7j","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-06T03:51:51.289Z","first_published":"2026-11-06T04:14:26.424Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=keplrwallet.app"},{"hostname":"klyrix-ledger.com","first_observed":"2026-11-06T03:16:29.378Z","first_published":"2026-11-06T04:14:26.424Z","brands":[],"dns":"resolved","resolved":["104.21.40.104","172.67.150.184"],"resolved_at":"2026-11-06T03:17:31Z","dns_checked_at":"2026-11-06T04:24:03.000Z","dns_since":"2026-11-06T04:24:03.000Z","findings":[{"id":"ff2dtgrsmpjzqb3kv5eag","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-06T03:16:29.378Z","first_published":"2026-11-06T04:14:26.424Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=klyrix-ledger.com"},{"hostname":"konraven-eichenfeld.com","first_observed":"2026-11-06T03:20:34.212Z","first_published":"2026-11-06T04:14:26.424Z","brands":[],"dns":"resolved","resolved":["104.21.73.127","172.67.190.10","2606:4700:3030::6815:497f","2606:4700:3031::ac43:be0a"],"resolved_at":"2026-11-06T03:24:51Z","dns_checked_at":"2026-11-06T04:24:03.000Z","dns_since":"2026-11-06T04:24:03.000Z","findings":[{"id":"fadp6qtv54p3twpzh7irh","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-06T03:20:34.212Z","first_published":"2026-11-06T04:14:26.424Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=konraven-eichenfeld.com"},{"hostname":"kzamg.icu","first_observed":"2026-11-06T03:41:07.331Z","first_published":"2026-11-06T04:14:26.424Z","brands":[],"dns":"resolved","resolved":["104.21.48.191","172.67.156.14"],"resolved_at":"2026-11-06T03:41:23Z","dns_checked_at":"2026-11-06T04:24:03.000Z","dns_since":"2026-11-06T04:24:03.000Z","findings":[{"id":"fmhv6gqtzid3js5gj3fp4","kind":"reported_domain","summary":"Listed by NPA 165 (e-commerce)","first_observed":"2026-11-06T03:41:07.331Z","first_published":"2026-11-06T04:14:26.424Z","source":"npa","source_name":"NPA 165","claim":{"category":"e-commerce"}}],"url":"https://domainspoof.com/live?show=all&q=kzamg.icu"},{"hostname":"lagonrendoire.com","first_observed":"2026-11-06T03:51:51.289Z","first_published":"2026-11-06T04:14:26.424Z","brands":[],"dns":"resolved","resolved":["104.21.76.110","172.67.193.95"],"resolved_at":"2026-11-06T04:03:01Z","dns_checked_at":"2026-11-06T04:24:03.000Z","dns_since":"2026-11-06T04:24:03.000Z","findings":[{"id":"fc6d3syho4a2vexouf2py","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-06T03:51:51.289Z","first_published":"2026-11-06T04:14:26.424Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=lagonrendoire.com"},{"hostname":"ledger-9tt.pages.dev","first_observed":"2026-11-06T03:56:57.480Z","first_published":"2026-11-06T04:14:26.424Z","brands":[],"dns":"resolved","resolved":["172.66.44.184","172.66.47.72"],"resolved_at":"2026-11-06T03:57:27Z","dns_checked_at":"2026-11-06T04:24:03.000Z","dns_since":"2026-11-06T04:24:03.000Z","findings":[{"id":"fc445vtfugz4hko37fhqi","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-06T03:56:57.480Z","first_published":"2026-11-06T04:14:26.424Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=ledger-9tt.pages.dev"},{"hostname":"ledgerlive-notice-fr.wasmer.app","first_observed":"2026-11-06T03:00:47.694Z","first_published":"2026-11-06T04:14:26.424Z","brands":[{"id":"ledger","name":"Ledger","url":"https://domainspoof.com/brands/ledger"}],"dns":"resolved","resolved":["5.161.23.223"],"resolved_at":"2026-11-06T04:24:03Z","dns_checked_at":"2026-11-06T04:24:03.000Z","dns_since":"2026-11-06T04:24:03.000Z","findings":[{"id":"fcyksvztl36bjurslef4k","kind":"phishing_infrastructure","summary":"Resolved to 5.161.23.223, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T03:00:47.694Z","first_published":"2026-11-06T04:14:26.424Z","address":"5.161.23.223","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/ledger"},{"hostname":"lkdo.fi","first_observed":"2026-11-06T04:05:40.280Z","first_published":"2026-11-06T04:14:26.424Z","brands":[],"dns":"resolved","resolved":["104.21.64.148","172.67.152.30"],"resolved_at":"2026-11-06T04:07:28Z","dns_checked_at":"2026-11-06T04:24:03.000Z","dns_since":"2026-11-06T04:24:03.000Z","findings":[{"id":"fc33eqfr66ygw2qwhpqjs","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-06T04:05:40.280Z","first_published":"2026-11-06T04:14:26.424Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=lkdo.fi"},{"hostname":"login.onlinemicrosoftwebsitesecurepdf.sbs","first_observed":"2026-11-06T03:41:07.331Z","first_published":"2026-11-06T04:14:26.424Z","brands":[],"dns":"resolved","resolved":["104.21.52.235","172.67.205.115","2606:4700:3035::6815:34eb","2606:4700:3035::ac43:cd73"],"resolved_at":"2026-11-06T03:41:23Z","dns_checked_at":"2026-11-06T04:24:03.000Z","dns_since":"2026-11-06T04:24:03.000Z","findings":[{"id":"fwsly277wkknd2muqnq2q","kind":"reported_domain","summary":"Under onlinemicrosoftwebsitesecurepdf.sbs, listed by MetaMask","first_observed":"2026-11-06T03:41:07.331Z","first_published":"2026-11-06T04:14:26.424Z","source":"metamask","source_name":"MetaMask","under":"onlinemicrosoftwebsitesecurepdf.sbs"}],"url":"https://domainspoof.com/live?show=all&q=login.onlinemicrosoftwebsitesecurepdf.sbs"},{"hostname":"lottadrabb.store","first_observed":"2026-11-06T03:20:34.212Z","first_published":"2026-11-06T04:14:26.424Z","brands":[],"dns":"resolved","resolved":["104.21.71.75","172.67.143.230","2606:4700:3035::6815:474b","2606:4700:3035::ac43:8fe6"],"resolved_at":"2026-11-06T03:24:51Z","dns_checked_at":"2026-11-06T04:24:03.000Z","dns_since":"2026-11-06T04:24:03.000Z","findings":[{"id":"fvihvwgt4ag2bs7sujpc2","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-06T03:20:34.212Z","first_published":"2026-11-06T04:14:26.424Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=lottadrabb.store"},{"hostname":"lumacoregaming.com","first_observed":"2026-11-06T03:51:51.289Z","first_published":"2026-11-06T04:14:26.424Z","brands":[],"dns":"resolved","resolved":["144.31.166.224"],"resolved_at":"2026-11-06T04:03:28Z","dns_checked_at":"2026-11-06T04:24:03.000Z","dns_since":"2026-11-06T04:24:03.000Z","findings":[{"id":"fa7z6kriwvsxp6qftsxq3","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-06T03:51:51.289Z","first_published":"2026-11-06T04:14:26.424Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/lumacoregaming.com/"}],"url":"https://domainspoof.com/live?show=all&q=lumacoregaming.com"},{"hostname":"luminous-finance.com","first_observed":"2026-11-06T04:05:40.280Z","first_published":"2026-11-06T04:14:26.424Z","brands":[],"dns":"resolved","resolved":["104.21.52.5","172.67.192.195"],"resolved_at":"2026-11-06T04:07:28Z","dns_checked_at":"2026-11-06T04:24:03.000Z","dns_since":"2026-11-06T04:24:03.000Z","findings":[{"id":"fyvcweo6anlcjgpflqu3u","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-06T04:05:40.280Z","first_published":"2026-11-06T04:14:26.424Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=luminous-finance.com"},{"hostname":"mail.crew-vip.com","first_observed":"2026-11-06T03:05:43.075Z","first_published":"2026-11-06T04:14:26.424Z","brands":[],"dns":"resolved","resolved":["77.42.125.46"],"resolved_at":"2026-11-06T03:12:29Z","dns_checked_at":"2026-11-06T04:24:03.000Z","dns_since":"2026-11-06T04:24:03.000Z","findings":[{"id":"f6c5kvxi2pwmgjx3ujx4r","kind":"reported_domain","summary":"Under crew-vip.com, reported by PhishDestroy","first_observed":"2026-11-06T03:05:43.075Z","first_published":"2026-11-06T04:14:26.424Z","source":"phishdestroy","source_name":"PhishDestroy","under":"crew-vip.com","source_url":"https://phishdestroy.io/domain/crew-vip.com/"}],"url":"https://domainspoof.com/live?show=all&q=mail.crew-vip.com"},{"hostname":"mail.goodcrypto.app","first_observed":"2026-11-06T04:00:33.888Z","first_published":"2026-11-06T04:14:26.424Z","brands":[],"dns":"resolved","resolved":["34.91.249.129"],"resolved_at":"2026-11-06T04:00:58Z","dns_checked_at":"2026-11-06T04:24:03.000Z","dns_since":"2026-11-06T04:24:03.000Z","findings":[{"id":"fucy26ttnkukoowmhtkoh","kind":"reported_domain","summary":"Under goodcrypto.app, reported by PhishDestroy","first_observed":"2026-11-06T04:00:33.888Z","first_published":"2026-11-06T04:14:26.424Z","source":"phishdestroy","source_name":"PhishDestroy","under":"goodcrypto.app","source_url":"https://phishdestroy.io/domain/goodcrypto.app/"}],"url":"https://domainspoof.com/live?show=all&q=mail.goodcrypto.app"},{"hostname":"mail.granvestor.com","first_observed":"2026-11-06T03:10:51.082Z","first_published":"2026-11-06T04:14:26.424Z","brands":[],"dns":"resolved","resolved":["163.61.188.5"],"resolved_at":"2026-11-06T03:14:29Z","dns_checked_at":"2026-11-06T04:24:03.000Z","dns_since":"2026-11-06T04:24:03.000Z","findings":[{"id":"fxmnchuslilpi2jx2ifkz","kind":"reported_domain","summary":"Under granvestor.com, reported by PhishDestroy","first_observed":"2026-11-06T03:10:51.082Z","first_published":"2026-11-06T04:14:26.424Z","source":"phishdestroy","source_name":"PhishDestroy","under":"granvestor.com","source_url":"https://phishdestroy.io/domain/granvestor.com/"}],"url":"https://domainspoof.com/live?show=all&q=mail.granvestor.com"},{"hostname":"mail.pharmacomlabs.com","first_observed":"2026-11-06T03:10:51.082Z","first_published":"2026-11-06T04:14:26.424Z","brands":[],"dns":"resolved","resolved":["135.125.200.217"],"resolved_at":"2026-11-06T03:14:29Z","dns_checked_at":"2026-11-06T04:24:03.000Z","dns_since":"2026-11-06T04:24:03.000Z","findings":[{"id":"fmedk4gebbwvg3stzyc2f","kind":"reported_domain","summary":"Under pharmacomlabs.com, reported by PhishDestroy","first_observed":"2026-11-06T03:10:51.082Z","first_published":"2026-11-06T04:14:26.424Z","source":"phishdestroy","source_name":"PhishDestroy","under":"pharmacomlabs.com","source_url":"https://phishdestroy.io/domain/pharmacomlabs.com/"}],"url":"https://domainspoof.com/live?show=all&q=mail.pharmacomlabs.com"},{"hostname":"mailbox.crew-vip.com","first_observed":"2026-11-06T03:05:43.075Z","first_published":"2026-11-06T04:14:26.424Z","brands":[],"dns":"resolved","resolved":["77.42.125.46"],"resolved_at":"2026-11-06T03:12:29Z","dns_checked_at":"2026-11-06T04:24:03.000Z","dns_since":"2026-11-06T04:24:03.000Z","findings":[{"id":"fjpndo3jf6nywqdgk4vms","kind":"reported_domain","summary":"Under crew-vip.com, reported by PhishDestroy","first_observed":"2026-11-06T03:05:43.075Z","first_published":"2026-11-06T04:14:26.424Z","source":"phishdestroy","source_name":"PhishDestroy","under":"crew-vip.com","source_url":"https://phishdestroy.io/domain/crew-vip.com/"}],"url":"https://domainspoof.com/live?show=all&q=mailbox.crew-vip.com"},{"hostname":"mailru.one","first_observed":"2026-11-06T03:31:40.943Z","first_published":"2026-11-06T04:14:26.424Z","brands":[{"id":"mail-ru","name":"Mail.ru","url":"https://domainspoof.com/brands/mail-ru"}],"dns":"resolved","resolved":["172.232.24.161","172.232.24.235","172.234.25.42"],"resolved_at":"2026-11-06T04:24:03Z","dns_checked_at":"2026-11-06T04:24:03.000Z","dns_since":"2026-11-06T04:24:03.000Z","findings":[{"id":"fowzt6n6c3inpmvt7672j","kind":"phishing_infrastructure","summary":"Resolved to 172.232.24.161, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T03:31:40.943Z","first_published":"2026-11-06T04:14:26.424Z","address":"172.232.24.161","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"},{"kind":"lookalike","summary":"Registered domain containing “mailru”, a name we match for Mail.ru, resolved to 172.232.24.161, where reported phishing was found in the 48 hours before, and resolved to 172.232.24.235, where reported phishing was found in the 48 hours before, and resolved to 172.234.25.42, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T04:15:28.000Z","first_published":"2026-11-06T04:15:28.000Z","of":"imgsmail.ru","spelling":"combo","match":"name","token":"mailru","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"172.232.24.161","flagged_at":"2026-11-06T04:15:28Z"},{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"172.232.24.235","flagged_at":"2026-11-06T04:15:28Z"},{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"172.234.25.42","flagged_at":"2026-11-06T04:15:28Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/mail-ru"},{"hostname":"mattoratte.store","first_observed":"2026-11-06T03:10:51.082Z","first_published":"2026-11-06T04:14:26.424Z","brands":[],"dns":"no_address","resolved":[],"resolved_at":"2026-11-06T03:14:30Z","dns_checked_at":"2026-11-06T12:34:49.000Z","findings":[{"id":"fa4kniisnodlx47be5ouz","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-06T03:10:51.082Z","first_published":"2026-11-06T04:14:26.424Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=mattoratte.store"},{"hostname":"max-jackphantomx.click","first_observed":"2026-11-06T03:56:57.480Z","first_published":"2026-11-06T04:14:26.424Z","brands":[],"dns":"resolved","resolved":["104.21.48.59","172.67.179.18"],"resolved_at":"2026-11-06T03:57:27Z","dns_checked_at":"2026-11-06T04:24:04.000Z","dns_since":"2026-11-06T04:24:04.000Z","findings":[{"id":"fto2vhxdoo677z7zc4ww2","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-06T03:56:57.480Z","first_published":"2026-11-06T04:14:26.424Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/max-jackphantomx.click/"}],"url":"https://domainspoof.com/live?show=all&q=max-jackphantomx.click"},{"hostname":"metabase.crypto-polis.org","first_observed":"2026-11-06T03:46:45.328Z","first_published":"2026-11-06T04:14:26.424Z","brands":[],"dns":"resolved","resolved":["185.178.208.132","185.178.208.182"],"resolved_at":"2026-11-06T03:54:46Z","dns_checked_at":"2026-11-06T04:24:04.000Z","dns_since":"2026-11-06T04:24:04.000Z","findings":[{"id":"fezgr56ult3fvgfwkjyvl","kind":"reported_domain","summary":"Under crypto-polis.org, reported by PhishDestroy","first_observed":"2026-11-06T03:46:45.328Z","first_published":"2026-11-06T04:14:26.424Z","source":"phishdestroy","source_name":"PhishDestroy","under":"crypto-polis.org","source_url":"https://phishdestroy.io/domain/crypto-polis.org/"}],"url":"https://domainspoof.com/live?show=all&q=metabase.crypto-polis.org"},{"hostname":"mixfura.money","first_observed":"2026-11-06T03:16:29.378Z","first_published":"2026-11-06T04:14:26.424Z","brands":[],"dns":"resolved","resolved":["104.21.5.176","172.67.133.174"],"resolved_at":"2026-11-06T03:17:31Z","dns_checked_at":"2026-11-06T04:24:04.000Z","dns_since":"2026-11-06T04:24:04.000Z","findings":[{"id":"fmhslqilp2gv3e27l54jr","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-06T03:16:29.378Z","first_published":"2026-11-06T04:14:26.424Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/mixfura.money/"}],"url":"https://domainspoof.com/live?show=all&q=mixfura.money"},{"hostname":"mixtum.io","first_observed":"2026-11-06T03:05:43.075Z","first_published":"2026-11-06T04:14:26.424Z","brands":[],"dns":"resolved","resolved":["104.21.71.236","172.67.172.23"],"resolved_at":"2026-11-06T03:12:29Z","dns_checked_at":"2026-11-06T04:24:04.000Z","dns_since":"2026-11-06T04:24:04.000Z","findings":[{"id":"faviqy7rs6j5b2klpwdkh","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-06T03:05:43.075Z","first_published":"2026-11-06T04:14:26.424Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=mixtum.io"},{"hostname":"miztura.money","first_observed":"2026-11-06T03:56:57.480Z","first_published":"2026-11-06T04:14:26.424Z","brands":[],"dns":"resolved","resolved":["104.21.34.26","172.67.196.189"],"resolved_at":"2026-11-06T03:57:27Z","dns_checked_at":"2026-11-06T04:24:04.000Z","dns_since":"2026-11-06T04:24:04.000Z","findings":[{"id":"fh5mj3telyddfhsbqns37","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-06T03:56:57.480Z","first_published":"2026-11-06T04:14:26.424Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/miztura.money/"}],"url":"https://domainspoof.com/live?show=all&q=miztura.money"},{"hostname":"monitoring.ptkgi.com","first_observed":"2026-11-06T03:41:07.331Z","first_published":"2026-11-06T04:14:26.424Z","brands":[],"dns":"resolved","resolved":["103.123.18.42"],"resolved_at":"2026-11-06T03:41:24Z","dns_checked_at":"2026-11-06T04:24:04.000Z","dns_since":"2026-11-06T04:24:04.000Z","findings":[{"id":"fqoivfxt2jirps7bbt6iw","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-06T03:41:07.331Z","first_published":"2026-11-06T04:14:26.424Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/monitoring.ptkgi.com/"}],"url":"https://domainspoof.com/live?show=all&q=monitoring.ptkgi.com"},{"hostname":"mostbet26549.help","first_observed":"2026-11-06T03:51:51.289Z","first_published":"2026-11-06T04:14:26.424Z","brands":[],"dns":"resolved","resolved":["38.244.195.34"],"resolved_at":"2026-11-06T04:03:28Z","dns_checked_at":"2026-11-06T04:24:04.000Z","dns_since":"2026-11-06T04:24:04.000Z","findings":[{"id":"fju3noqg6ww36yydokki5","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-06T03:51:51.289Z","first_published":"2026-11-06T04:14:26.424Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/mostbet26549.help/"}],"url":"https://domainspoof.com/live?show=all&q=mostbet26549.help"},{"hostname":"mostbet51338.help","first_observed":"2026-11-06T03:41:07.331Z","first_published":"2026-11-06T04:14:26.424Z","brands":[],"dns":"resolved","resolved":["38.244.195.34"],"resolved_at":"2026-11-06T03:48:17Z","dns_checked_at":"2026-11-06T04:24:04.000Z","dns_since":"2026-11-06T04:24:04.000Z","findings":[{"id":"fjcmgveohh6aj6fkbgkw6","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-06T03:41:07.331Z","first_published":"2026-11-06T04:14:26.424Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/mostbet51338.help/"}],"url":"https://domainspoof.com/live?show=all&q=mostbet51338.help"},{"hostname":"mostbet78658.help","first_observed":"2026-11-06T03:36:00.235Z","first_published":"2026-11-06T04:14:26.424Z","brands":[],"dns":"resolved","resolved":["38.244.195.34"],"resolved_at":"2026-11-06T03:36:12Z","dns_checked_at":"2026-11-06T04:24:04.000Z","dns_since":"2026-11-06T04:24:04.000Z","findings":[{"id":"flxksxjc25d6gj6gn5zxv","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-06T03:36:00.235Z","first_published":"2026-11-06T04:14:26.424Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/mostbet78658.help/"}],"url":"https://domainspoof.com/live?show=all&q=mostbet78658.help"},{"hostname":"mvularomeo.icuprojects.online","first_observed":"2026-11-06T03:51:51.289Z","first_published":"2026-11-06T04:14:26.424Z","brands":[],"dns":"resolved","resolved":["198.251.84.236"],"resolved_at":"2026-11-06T04:03:28Z","dns_checked_at":"2026-11-06T04:24:04.000Z","dns_since":"2026-11-06T04:24:04.000Z","findings":[{"id":"fgpcfx5brqtl2jioneqqt","kind":"reported_domain","summary":"Under icuprojects.online, reported by PhishDestroy","first_observed":"2026-11-06T03:51:51.289Z","first_published":"2026-11-06T04:14:26.424Z","source":"phishdestroy","source_name":"PhishDestroy","under":"icuprojects.online","source_url":"https://phishdestroy.io/domain/icuprojects.online/"}],"url":"https://domainspoof.com/live?show=all&q=mvularomeo.icuprojects.online"},{"hostname":"mx1.polar-tensor.com","first_observed":"2026-11-06T03:51:51.289Z","first_published":"2026-11-06T04:14:26.424Z","brands":[],"dns":"resolved","resolved":["5.189.134.86","57.128.187.75","57.129.49.179","193.242.211.59"],"resolved_at":"2026-11-06T04:03:28Z","dns_checked_at":"2026-11-06T04:24:04.000Z","dns_since":"2026-11-06T04:24:04.000Z","findings":[{"id":"fsf52yk7bckjn3bxogtbr","kind":"reported_domain","summary":"Under polar-tensor.com, listed by MetaMask","first_observed":"2026-11-06T03:51:51.289Z","first_published":"2026-11-06T04:14:26.424Z","source":"metamask","source_name":"MetaMask","under":"polar-tensor.com"}],"url":"https://domainspoof.com/live?show=all&q=mx1.polar-tensor.com"},{"hostname":"narco24.city","first_observed":"2026-11-06T03:21:06.153Z","first_published":"2026-11-06T04:14:26.424Z","brands":[],"dns":"resolved","resolved":["192.142.53.37"],"resolved_at":"2026-11-06T03:21:34Z","dns_checked_at":"2026-11-06T04:24:04.000Z","dns_since":"2026-11-06T04:24:04.000Z","findings":[{"id":"fvnclo6ydcuny4z4yvrw4","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-06T03:21:06.153Z","first_published":"2026-11-06T04:14:26.424Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/narco24.city/"}],"url":"https://domainspoof.com/live?show=all&q=narco24.city"},{"hostname":"negociante.live","first_observed":"2026-11-06T03:10:51.082Z","first_published":"2026-11-06T04:14:26.424Z","brands":[],"dns":"resolved","resolved":["104.21.4.65","172.67.154.15"],"resolved_at":"2026-11-06T03:14:30Z","dns_checked_at":"2026-11-06T04:24:04.000Z","dns_since":"2026-11-06T04:24:04.000Z","findings":[{"id":"fyg5nxmmmfvzhfwci4clb","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-06T03:10:51.082Z","first_published":"2026-11-06T04:14:26.424Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=negociante.live"},{"hostname":"nessatags.icuprojects.online","first_observed":"2026-11-06T04:00:33.888Z","first_published":"2026-11-06T04:14:26.424Z","brands":[],"dns":"resolved","resolved":["198.251.84.236"],"resolved_at":"2026-11-06T04:00:58Z","dns_checked_at":"2026-11-06T04:24:04.000Z","dns_since":"2026-11-06T04:24:04.000Z","findings":[{"id":"fd6krgk6jl66exmnqvciq","kind":"reported_domain","summary":"Under icuprojects.online, reported by PhishDestroy","first_observed":"2026-11-06T04:00:33.888Z","first_published":"2026-11-06T04:14:26.424Z","source":"phishdestroy","source_name":"PhishDestroy","under":"icuprojects.online","source_url":"https://phishdestroy.io/domain/icuprojects.online/"}],"url":"https://domainspoof.com/live?show=all&q=nessatags.icuprojects.online"},{"hostname":"netflix-authenticate.com","first_observed":"2026-11-06T04:03:28.466Z","first_published":"2026-11-06T04:14:26.424Z","brands":[{"id":"netflix","name":"Netflix","url":"https://domainspoof.com/brands/netflix"}],"dns":"resolved","resolved":["104.250.165.184"],"resolved_at":"2026-11-06T04:24:04Z","dns_checked_at":"2026-11-06T04:24:04.000Z","dns_since":"2026-11-06T04:24:04.000Z","findings":[{"id":"f7miyp6sypdje3vorovy5","kind":"phishing_infrastructure","summary":"Resolved to 104.250.165.184, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T04:03:28.466Z","first_published":"2026-11-06T04:14:26.424Z","address":"104.250.165.184","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"},{"id":"f4hjvtu72pkeiqdudojjt","kind":"spamhaus_drop","summary":"Resolved to 104.250.165.184 on Spamhaus DROP","first_observed":"2026-11-06T04:03:28.466Z","first_published":"2026-11-06T04:14:26.424Z","address":"104.250.165.184","list":"spamhaus_drop","list_name":"Spamhaus DROP"}],"url":"https://domainspoof.com/brands/netflix"},{"hostname":"nosqlk.digital","first_observed":"2026-11-06T03:21:06.153Z","first_published":"2026-11-06T04:14:26.424Z","brands":[],"dns":"resolved","resolved":["104.21.73.67","172.67.188.232"],"resolved_at":"2026-11-06T03:21:34Z","dns_checked_at":"2026-11-06T04:24:04.000Z","dns_since":"2026-11-06T04:24:04.000Z","findings":[{"id":"fce4l6fcyfxaqf4bbxtzi","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-06T03:21:06.153Z","first_published":"2026-11-06T04:14:26.424Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=nosqlk.digital"},{"hostname":"nvjub.hair","first_observed":"2026-11-06T03:51:51.289Z","first_published":"2026-11-06T04:14:26.424Z","brands":[],"dns":"resolved","resolved":["104.21.32.235","172.67.188.73"],"resolved_at":"2026-11-06T04:03:29Z","dns_checked_at":"2026-11-06T04:24:04.000Z","dns_since":"2026-11-06T04:24:04.000Z","findings":[{"id":"fhw3nczb46gtkjagwtukt","kind":"reported_domain","summary":"Listed by NPA 165 (information services)","first_observed":"2026-11-06T03:51:51.289Z","first_published":"2026-11-06T04:14:26.424Z","source":"npa","source_name":"NPA 165","claim":{"category":"information services"}}],"url":"https://domainspoof.com/live?show=all&q=nvjub.hair"},{"hostname":"paperstrade.app","first_observed":"2026-11-06T03:41:07.331Z","first_published":"2026-11-06T04:14:26.424Z","brands":[],"dns":"resolved","resolved":["104.21.70.106","172.67.222.220"],"resolved_at":"2026-11-06T03:41:26Z","dns_checked_at":"2026-11-06T04:24:04.000Z","dns_since":"2026-11-06T04:24:04.000Z","findings":[{"id":"fpbrlshul3wnzeps62th5","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-06T03:41:07.331Z","first_published":"2026-11-06T04:14:26.424Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=paperstrade.app"},{"hostname":"partner.tanx-fi.com","first_observed":"2026-11-06T03:36:00.235Z","first_published":"2026-11-06T04:14:26.424Z","brands":[],"dns":"resolved","resolved":["186.2.175.109"],"resolved_at":"2026-11-06T03:36:13Z","dns_checked_at":"2026-11-06T04:24:04.000Z","dns_since":"2026-11-06T04:24:04.000Z","findings":[{"id":"fmf3wrxtth2ftvzar7i4k","kind":"reported_domain","summary":"Under tanx-fi.com, listed by MetaMask","first_observed":"2026-11-06T03:36:00.235Z","first_published":"2026-11-06T04:14:26.424Z","source":"metamask","source_name":"MetaMask","under":"tanx-fi.com"}],"url":"https://domainspoof.com/live?show=all&q=partner.tanx-fi.com"},{"hostname":"pay.youla.www.www.sber.www.sber.prod2.hawkinswoodshop.com","first_observed":"2026-11-06T04:05:47.935Z","first_published":"2026-11-06T04:14:26.424Z","brands":[{"id":"youla","name":"Youla","url":"https://domainspoof.com/brands/youla"}],"dns":"resolved","resolved":["45.77.75.133","45.77.92.157","207.246.78.75"],"resolved_at":"2026-11-06T04:24:04Z","dns_checked_at":"2026-11-06T04:24:04.000Z","dns_since":"2026-11-06T04:24:04.000Z","findings":[{"id":"fa5ddo4p7wkvu3gd3x7rl","kind":"phishing_infrastructure","summary":"Resolved to 45.77.75.133, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T04:05:47.935Z","first_published":"2026-11-06T04:14:26.424Z","address":"45.77.75.133","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/youla"},{"hostname":"photondao.ws","first_observed":"2026-11-06T03:00:33.284Z","first_published":"2026-11-06T04:14:26.424Z","brands":[],"dns":"resolved","resolved":["91.195.240.123"],"resolved_at":"2026-11-06T03:00:47Z","dns_checked_at":"2026-11-06T04:24:04.000Z","dns_since":"2026-11-06T04:24:04.000Z","findings":[{"id":"fk3r37iedkoiazlzqqjgj","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-06T03:00:33.284Z","first_published":"2026-11-06T04:14:26.424Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=photondao.ws"},{"hostname":"pi-oferta87815.lat","first_observed":"2026-11-06T03:20:34.212Z","first_published":"2026-11-06T04:14:26.424Z","brands":[],"dns":"not_found","resolved":[],"resolved_at":"2026-11-06T03:24:51Z","dns_checked_at":"2026-11-06T12:34:49.000Z","findings":[{"id":"f33c22tv2diwlbjtappfo","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-06T03:20:34.212Z","first_published":"2026-11-06T04:14:26.424Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=pi-oferta87815.lat"},{"hostname":"picashow.org.pk","first_observed":"2026-11-06T03:36:00.235Z","first_published":"2026-11-06T04:14:26.424Z","brands":[],"dns":"resolved","resolved":["217.156.8.54"],"resolved_at":"2026-11-06T03:36:13Z","dns_checked_at":"2026-11-06T04:24:04.000Z","dns_since":"2026-11-06T04:24:04.000Z","findings":[{"id":"fabqvq2zsazidiforgpo3","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-06T03:36:00.235Z","first_published":"2026-11-06T04:14:26.424Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=picashow.org.pk"},{"hostname":"pl-0282773u7362oferta919722917282.sbs","first_observed":"2026-11-06T03:20:34.212Z","first_published":"2026-11-06T04:14:26.424Z","brands":[],"dns":"resolved","resolved":["104.21.80.156","172.67.151.88","2606:4700:3034::6815:509c","2606:4700:3035::ac43:9758"],"resolved_at":"2026-11-06T03:24:51Z","dns_checked_at":"2026-11-06T04:24:04.000Z","dns_since":"2026-11-06T04:24:04.000Z","findings":[{"id":"f2ggvuoxejj3be2yzmvuk","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-06T03:20:34.212Z","first_published":"2026-11-06T04:14:26.424Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=pl-0282773u7362oferta919722917282.sbs"},{"hostname":"proposal-fx.xyz","first_observed":"2026-11-06T03:10:51.082Z","first_published":"2026-11-06T04:14:26.424Z","brands":[],"dns":"resolved","resolved":["104.21.23.199","172.67.213.57"],"resolved_at":"2026-11-06T03:14:34Z","dns_checked_at":"2026-11-06T04:24:04.000Z","dns_since":"2026-11-06T04:24:04.000Z","findings":[{"id":"fl26wmsmoox2nigiw2ews","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-06T03:10:51.082Z","first_published":"2026-11-06T04:14:26.424Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=proposal-fx.xyz"},{"hostname":"qpyss.hair","first_observed":"2026-11-06T04:05:40.280Z","first_published":"2026-11-06T04:14:26.424Z","brands":[],"dns":"resolved","resolved":["104.21.5.41","172.67.132.241"],"resolved_at":"2026-11-06T04:05:47Z","dns_checked_at":"2026-11-06T04:24:04.000Z","dns_since":"2026-11-06T04:24:04.000Z","findings":[{"id":"ftyqkxgtwqvicn4bjksgc","kind":"reported_domain","summary":"Listed by NPA 165 (information services)","first_observed":"2026-11-06T04:05:40.280Z","first_published":"2026-11-06T04:14:26.424Z","source":"npa","source_name":"NPA 165","claim":{"category":"information services"}}],"url":"https://domainspoof.com/live?show=all&q=qpyss.hair"},{"hostname":"radiant-haze.com","first_observed":"2026-11-06T03:56:57.480Z","first_published":"2026-11-06T04:14:26.424Z","brands":[],"dns":"resolved","resolved":["104.21.95.161","172.67.145.237"],"resolved_at":"2026-11-06T03:57:28Z","dns_checked_at":"2026-11-06T04:24:04.000Z","dns_since":"2026-11-06T04:24:04.000Z","findings":[{"id":"fp2um4l62jydwfewvlvcb","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-06T03:56:57.480Z","first_published":"2026-11-06T04:14:26.424Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=radiant-haze.com"},{"hostname":"raydium-swap.gr.com","first_observed":"2026-11-06T04:00:33.888Z","first_published":"2026-11-06T04:14:26.424Z","brands":[{"id":"raydium","name":"Raydium","url":"https://domainspoof.com/brands/raydium"}],"dns":"resolved","resolved":["163.245.41.169"],"resolved_at":"2026-11-06T04:24:04Z","dns_checked_at":"2026-11-06T04:24:04.000Z","dns_since":"2026-11-06T04:24:04.000Z","findings":[{"id":"f4nqufang2scqlsuxfmwf","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-06T04:00:33.888Z","first_published":"2026-11-06T04:14:26.424Z","source":"metamask","source_name":"MetaMask"},{"id":"fcctapv5hz2dipob6u53x","kind":"phishing_infrastructure","summary":"Resolved to 163.245.41.169, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T04:00:58.612Z","first_published":"2026-11-06T04:14:26.424Z","address":"163.245.41.169","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/raydium"},{"hostname":"scassingem.store","first_observed":"2026-11-06T03:20:34.212Z","first_published":"2026-11-06T04:14:26.424Z","brands":[],"dns":"resolved","resolved":["104.21.13.4","172.67.154.5","2606:4700:3035::6815:d04","2606:4700:3035::ac43:9a05"],"resolved_at":"2026-11-06T03:24:51Z","dns_checked_at":"2026-11-06T04:24:04.000Z","dns_since":"2026-11-06T04:24:04.000Z","findings":[{"id":"foxg3qvcchuglbv7cj7pb","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-06T03:20:34.212Z","first_published":"2026-11-06T04:14:26.424Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=scassingem.store"},{"hostname":"secure-ssa.help","first_observed":"2026-11-06T03:17:35.342Z","first_published":"2026-11-06T04:14:26.424Z","brands":[{"id":"social-security-administration","name":"Social Security Administration","url":"https://domainspoof.com/brands/social-security-administration"}],"dns":"resolved","resolved":["172.232.24.161","172.232.24.235","172.234.25.42"],"resolved_at":"2026-11-06T04:24:04Z","dns_checked_at":"2026-11-06T04:24:04.000Z","dns_since":"2026-11-06T04:24:04.000Z","findings":[{"id":"fypc36tx2p5sorsso4fcv","kind":"phishing_infrastructure","summary":"Resolved to 172.232.24.161, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T03:17:35.342Z","first_published":"2026-11-06T04:14:26.424Z","address":"172.232.24.161","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/social-security-administration"},{"hostname":"sf.klicn.com","first_observed":"2026-11-06T03:36:00.235Z","first_published":"2026-11-06T04:14:26.424Z","brands":[],"dns":"resolved","resolved":["36.148.9.44"],"resolved_at":"2026-11-06T03:36:13Z","dns_checked_at":"2026-11-06T04:24:04.000Z","dns_since":"2026-11-06T04:24:04.000Z","findings":[{"id":"fh7je2yzobdcmcxj2wrxr","kind":"reported_domain","summary":"Under klicn.com, reported by PhishDestroy","first_observed":"2026-11-06T03:36:00.235Z","first_published":"2026-11-06T04:14:26.424Z","source":"phishdestroy","source_name":"PhishDestroy","under":"klicn.com","source_url":"https://phishdestroy.io/domain/klicn.com/"}],"url":"https://domainspoof.com/live?show=all&q=sf.klicn.com"},{"hostname":"srebrokapitark.live","first_observed":"2026-11-06T03:31:21.959Z","first_published":"2026-11-06T04:14:26.424Z","brands":[],"dns":"resolved","resolved":["104.21.46.175","172.67.168.206"],"resolved_at":"2026-11-06T03:31:42Z","dns_checked_at":"2026-11-06T04:24:04.000Z","dns_since":"2026-11-06T04:24:04.000Z","findings":[{"id":"ffn67ic4hrwabh5movq4z","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-06T03:31:21.959Z","first_published":"2026-11-06T04:14:26.424Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=srebrokapitark.live"},{"hostname":"state.polar-tensor.com","first_observed":"2026-11-06T03:51:51.289Z","first_published":"2026-11-06T04:14:26.424Z","brands":[],"dns":"resolved","resolved":["5.189.134.86","57.128.187.75","57.129.49.179","193.242.211.59"],"resolved_at":"2026-11-06T04:03:31Z","dns_checked_at":"2026-11-06T04:24:04.000Z","dns_since":"2026-11-06T04:24:04.000Z","findings":[{"id":"fuvzl5674tpr7j6betllv","kind":"reported_domain","summary":"Under polar-tensor.com, listed by MetaMask","first_observed":"2026-11-06T03:51:51.289Z","first_published":"2026-11-06T04:14:26.424Z","source":"metamask","source_name":"MetaMask","under":"polar-tensor.com"}],"url":"https://domainspoof.com/live?show=all&q=state.polar-tensor.com"},{"hostname":"stats.polar-tensor.com","first_observed":"2026-11-06T03:41:07.331Z","first_published":"2026-11-06T04:14:26.424Z","brands":[],"dns":"resolved","resolved":["5.189.134.86","57.128.187.75","57.129.49.179","193.242.211.59"],"resolved_at":"2026-11-06T03:41:28Z","dns_checked_at":"2026-11-06T04:24:04.000Z","dns_since":"2026-11-06T04:24:04.000Z","findings":[{"id":"fbvvwxvjjd7hy5ovgnrop","kind":"reported_domain","summary":"Under polar-tensor.com, listed by MetaMask","first_observed":"2026-11-06T03:41:07.331Z","first_published":"2026-11-06T04:14:26.424Z","source":"metamask","source_name":"MetaMask","under":"polar-tensor.com"}],"url":"https://domainspoof.com/live?show=all&q=stats.polar-tensor.com"},{"hostname":"swagger.crypto-polis.org","first_observed":"2026-11-06T03:10:51.082Z","first_published":"2026-11-06T04:14:26.424Z","brands":[],"dns":"resolved","resolved":["185.178.208.132","185.178.208.182"],"resolved_at":"2026-11-06T03:11:02Z","dns_checked_at":"2026-11-06T04:24:04.000Z","dns_since":"2026-11-06T04:24:04.000Z","findings":[{"id":"fdpjmjpjrfbgzkoet7epy","kind":"reported_domain","summary":"Under crypto-polis.org, reported by PhishDestroy","first_observed":"2026-11-06T03:10:51.082Z","first_published":"2026-11-06T04:14:26.424Z","source":"phishdestroy","source_name":"PhishDestroy","under":"crypto-polis.org","source_url":"https://phishdestroy.io/domain/crypto-polis.org/"}],"url":"https://domainspoof.com/live?show=all&q=swagger.crypto-polis.org"},{"hostname":"telernxove.click","first_observed":"2026-11-06T03:20:34.212Z","first_published":"2026-11-06T04:14:26.424Z","brands":[],"dns":"resolved","resolved":["104.21.45.134","172.67.214.166","2606:4700:3031::ac43:d6a6","2606:4700:3037::6815:2d86"],"resolved_at":"2026-11-06T03:24:51Z","dns_checked_at":"2026-11-06T04:24:04.000Z","dns_since":"2026-11-06T04:24:04.000Z","findings":[{"id":"fzvrq4wnnymubk6yd4xcb","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-06T03:20:34.212Z","first_published":"2026-11-06T04:14:26.424Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=telernxove.click"},{"hostname":"treffers-groep.paddap.dev","first_observed":"2026-11-06T03:36:00.235Z","first_published":"2026-11-06T04:14:26.424Z","brands":[],"dns":"resolved","resolved":["206.189.7.251"],"resolved_at":"2026-11-06T03:36:13Z","dns_checked_at":"2026-11-06T04:24:04.000Z","dns_since":"2026-11-06T04:24:04.000Z","findings":[{"id":"fgiko2x23v2lygc3xhakw","kind":"reported_domain","summary":"Under paddap.dev, listed by CERT Polska","first_observed":"2026-11-06T03:36:00.235Z","first_published":"2026-11-06T04:14:26.424Z","source":"cert_polska","source_name":"CERT Polska","under":"paddap.dev"}],"url":"https://domainspoof.com/live?show=all&q=treffers-groep.paddap.dev"},{"hostname":"trezor.deno.net","first_observed":"2026-11-06T03:57:29.896Z","first_published":"2026-11-06T04:14:26.424Z","brands":[{"id":"trezor","name":"Trezor","url":"https://domainspoof.com/brands/trezor"}],"dns":"resolved","resolved":["69.67.170.170"],"resolved_at":"2026-11-06T04:24:04Z","dns_checked_at":"2026-11-06T04:24:04.000Z","dns_since":"2026-11-06T04:24:04.000Z","findings":[{"id":"fgdtjptlzikkbzarqng6o","kind":"phishing_infrastructure","summary":"Resolved to 69.67.170.170, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T03:57:29.896Z","first_published":"2026-11-06T04:14:26.424Z","address":"69.67.170.170","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/trezor"},{"hostname":"trhuh.hair","first_observed":"2026-11-06T04:05:40.280Z","first_published":"2026-11-06T04:14:26.424Z","brands":[],"dns":"resolved","resolved":["104.21.31.117","172.67.176.124"],"resolved_at":"2026-11-06T04:05:50Z","dns_checked_at":"2026-11-06T04:24:04.000Z","dns_since":"2026-11-06T04:24:04.000Z","findings":[{"id":"fzicb2un34ivbtwotxorf","kind":"reported_domain","summary":"Listed by NPA 165 (information services)","first_observed":"2026-11-06T04:05:40.280Z","first_published":"2026-11-06T04:14:26.424Z","source":"npa","source_name":"NPA 165","claim":{"category":"information services"}}],"url":"https://domainspoof.com/live?show=all&q=trhuh.hair"},{"hostname":"truly6-nisi76.cfd","first_observed":"2026-11-06T03:20:34.212Z","first_published":"2026-11-06T04:14:26.424Z","brands":[],"dns":"no_address","resolved":[],"resolved_at":"2026-11-06T03:24:51Z","dns_checked_at":"2026-11-06T12:34:49.000Z","findings":[{"id":"fv3kt3kt6nxawzyg6qzho","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-06T03:20:34.212Z","first_published":"2026-11-06T04:14:26.424Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=truly6-nisi76.cfd"},{"hostname":"truly8-sint67.cfd","first_observed":"2026-11-06T03:20:34.212Z","first_published":"2026-11-06T04:14:26.424Z","brands":[],"dns":"no_address","resolved":[],"resolved_at":"2026-11-06T03:24:51Z","dns_checked_at":"2026-11-06T12:34:49.000Z","findings":[{"id":"f7xpa7jcxz4bcjqx2m2tb","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-06T03:20:34.212Z","first_published":"2026-11-06T04:14:26.424Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=truly8-sint67.cfd"},{"hostname":"uinfin.site","first_observed":"2026-11-06T03:20:34.212Z","first_published":"2026-11-06T04:14:26.424Z","brands":[],"dns":"resolved","resolved":["104.21.77.236","172.67.212.150","2606:4700:3034::6815:4dec","2606:4700:3034::ac43:d496"],"resolved_at":"2026-11-06T03:24:51Z","dns_checked_at":"2026-11-06T04:24:04.000Z","dns_since":"2026-11-06T04:24:04.000Z","findings":[{"id":"fqg6o4zy2c5ruqeo3k22k","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-06T03:20:34.212Z","first_published":"2026-11-06T04:14:26.424Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=uinfin.site"},{"hostname":"uj5y8ocjyb.polar-tensor.com","first_observed":"2026-11-06T03:51:51.289Z","first_published":"2026-11-06T04:14:26.424Z","brands":[],"dns":"resolved","resolved":["5.189.134.86","57.128.187.75","57.129.49.179","193.242.211.59"],"resolved_at":"2026-11-06T04:03:31Z","dns_checked_at":"2026-11-06T04:24:04.000Z","dns_since":"2026-11-06T04:24:04.000Z","findings":[{"id":"fxgcy5y34ga7asvghys47","kind":"reported_domain","summary":"Under polar-tensor.com, listed by MetaMask","first_observed":"2026-11-06T03:51:51.289Z","first_published":"2026-11-06T04:14:26.424Z","source":"metamask","source_name":"MetaMask","under":"polar-tensor.com"}],"url":"https://domainspoof.com/live?show=all&q=uj5y8ocjyb.polar-tensor.com"},{"hostname":"uspsupdate-deliveryrecordsuser.hpmanguerasyconexiones.com","first_observed":"2026-11-06T03:17:36.784Z","first_published":"2026-11-06T04:14:26.424Z","brands":[{"id":"usps","name":"USPS","url":"https://domainspoof.com/brands/usps"}],"dns":"resolved","resolved":["65.181.111.157"],"resolved_at":"2026-11-06T04:24:04Z","dns_checked_at":"2026-11-06T04:24:04.000Z","dns_since":"2026-11-06T04:24:04.000Z","findings":[{"id":"fohztvnqaubrelhi24tbw","kind":"phishing_infrastructure","summary":"Resolved to 65.181.111.157, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T03:17:36.784Z","first_published":"2026-11-06T04:14:26.424Z","address":"65.181.111.157","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/usps"},{"hostname":"v2.1doc-shop.com","first_observed":"2026-11-06T03:31:21.959Z","first_published":"2026-11-06T04:14:26.424Z","brands":[],"dns":"resolved","resolved":["186.2.163.162"],"resolved_at":"2026-11-06T03:31:43Z","dns_checked_at":"2026-11-06T04:24:04.000Z","dns_since":"2026-11-06T04:24:04.000Z","findings":[{"id":"fj3gzcabsumdcg7ovbyko","kind":"reported_domain","summary":"Under 1doc-shop.com, reported by PhishDestroy","first_observed":"2026-11-06T03:31:21.959Z","first_published":"2026-11-06T04:14:26.424Z","source":"phishdestroy","source_name":"PhishDestroy","under":"1doc-shop.com","source_url":"https://phishdestroy.io/domain/1doc-shop.com/"}],"url":"https://domainspoof.com/live?show=all&q=v2.1doc-shop.com"},{"hostname":"vault.custodia-secured.com","first_observed":"2026-11-06T03:00:33.284Z","first_published":"2026-11-06T04:14:26.424Z","brands":[],"dns":"resolved","resolved":["198.251.74.175"],"resolved_at":"2026-11-06T03:00:49Z","dns_checked_at":"2026-11-06T04:24:04.000Z","dns_since":"2026-11-06T04:24:04.000Z","findings":[{"id":"fskkd24csxxgostthrn6t","kind":"reported_domain","summary":"Under custodia-secured.com, listed by MetaMask","first_observed":"2026-11-06T03:00:33.284Z","first_published":"2026-11-06T04:14:26.424Z","source":"metamask","source_name":"MetaMask","under":"custodia-secured.com"}],"url":"https://domainspoof.com/live?show=all&q=vault.custodia-secured.com"},{"hostname":"vbity.com","first_observed":"2026-11-06T03:00:33.284Z","first_published":"2026-11-06T04:14:26.424Z","brands":[],"dns":"resolved","resolved":["104.21.2.37","172.67.128.173"],"resolved_at":"2026-11-06T03:00:49Z","dns_checked_at":"2026-11-06T04:24:04.000Z","dns_since":"2026-11-06T04:24:04.000Z","findings":[{"id":"ff4533yx6gbresw5dfzxv","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-06T03:00:33.284Z","first_published":"2026-11-06T04:14:26.424Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=vbity.com"},{"hostname":"velodrome-allocations.xyz","first_observed":"2026-11-06T03:10:51.082Z","first_published":"2026-11-06T04:14:26.424Z","brands":[],"dns":"resolved","resolved":["104.21.50.39","172.67.200.185"],"resolved_at":"2026-11-06T03:11:02Z","dns_checked_at":"2026-11-06T04:24:04.000Z","dns_since":"2026-11-06T04:24:04.000Z","findings":[{"id":"fyy67iuiongy2il6i3b4k","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-06T03:10:51.082Z","first_published":"2026-11-06T04:14:26.424Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=velodrome-allocations.xyz"},{"hostname":"vote-kaitoai.com","first_observed":"2026-11-06T03:05:43.075Z","first_published":"2026-11-06T04:14:26.424Z","brands":[],"dns":"resolved","resolved":["104.21.56.151","172.67.152.191"],"resolved_at":"2026-11-06T03:05:57Z","dns_checked_at":"2026-11-06T04:24:04.000Z","dns_since":"2026-11-06T04:24:04.000Z","findings":[{"id":"fo6o4rkcqwhpjvvckzfw6","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-06T03:05:43.075Z","first_published":"2026-11-06T04:14:26.424Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=vote-kaitoai.com"},{"hostname":"warren-ai-pro-engine.com","first_observed":"2026-11-06T03:36:00.235Z","first_published":"2026-11-06T04:14:26.424Z","brands":[],"dns":"resolved","resolved":["104.21.54.232","172.67.143.33"],"resolved_at":"2026-11-06T03:36:13Z","dns_checked_at":"2026-11-06T04:24:04.000Z","dns_since":"2026-11-06T04:24:04.000Z","findings":[{"id":"fniuchbyoexcdcmeuuw7u","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-06T03:36:00.235Z","first_published":"2026-11-06T04:14:26.424Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=warren-ai-pro-engine.com"},{"hostname":"wealthcresttraders.net","first_observed":"2026-11-06T03:46:45.328Z","first_published":"2026-11-06T04:14:26.424Z","brands":[],"dns":"resolved","resolved":["208.98.35.118"],"resolved_at":"2026-11-06T03:55:10Z","dns_checked_at":"2026-11-06T04:24:04.000Z","dns_since":"2026-11-06T04:24:04.000Z","findings":[{"id":"fbuklslukomzkfqfmnhle","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-06T03:46:45.328Z","first_published":"2026-11-06T04:14:26.424Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/wealthcresttraders.net/"}],"url":"https://domainspoof.com/live?show=all&q=wealthcresttraders.net"},{"hostname":"web-ledgercom-strt.pages.dev","first_observed":"2026-11-06T03:16:29.378Z","first_published":"2026-11-06T04:14:26.424Z","brands":[],"dns":"resolved","resolved":["172.66.44.56","172.66.47.200"],"resolved_at":"2026-11-06T03:17:37Z","dns_checked_at":"2026-11-06T04:24:04.000Z","dns_since":"2026-11-06T04:24:04.000Z","findings":[{"id":"flmgninz6elvypkj5nzuc","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-06T03:16:29.378Z","first_published":"2026-11-06T04:14:26.424Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=web-ledgercom-strt.pages.dev"},{"hostname":"woofi-fi.pages.dev","first_observed":"2026-11-06T03:56:57.480Z","first_published":"2026-11-06T04:14:26.424Z","brands":[],"dns":"resolved","resolved":["172.66.44.127","172.66.47.129"],"resolved_at":"2026-11-06T03:57:30Z","dns_checked_at":"2026-11-06T04:24:04.000Z","dns_since":"2026-11-06T04:24:04.000Z","findings":[{"id":"fxx7oyrdq2svhkyhcwd5z","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-06T03:56:57.480Z","first_published":"2026-11-06T04:14:26.424Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=woofi-fi.pages.dev"},{"hostname":"www.albarakamenkulkiymetler.com","first_observed":"2026-11-06T03:05:43.075Z","first_published":"2026-11-06T04:14:26.424Z","brands":[],"dns":"resolved","resolved":["107.189.23.54"],"resolved_at":"2026-11-06T03:05:58Z","dns_checked_at":"2026-11-06T04:24:04.000Z","dns_since":"2026-11-06T04:24:04.000Z","findings":[{"id":"fkvscrcrxdgpeot5mgpee","kind":"reported_domain","summary":"Under albarakamenkulkiymetler.com, listed by USOM","first_observed":"2026-11-06T03:05:43.075Z","first_published":"2026-11-06T04:14:26.424Z","source":"usom","source_name":"USOM","under":"albarakamenkulkiymetler.com"}],"url":"https://domainspoof.com/live?show=all&q=www.albarakamenkulkiymetler.com"},{"hostname":"www.albarakamenkulyatirim.com","first_observed":"2026-11-06T03:16:29.378Z","first_published":"2026-11-06T04:14:26.424Z","brands":[],"dns":"resolved","resolved":["107.189.23.54"],"resolved_at":"2026-11-06T03:17:37Z","dns_checked_at":"2026-11-06T04:24:04.000Z","dns_since":"2026-11-06T04:24:04.000Z","findings":[{"id":"fsmd63sonlw4yvgo4aoq2","kind":"reported_domain","summary":"Under albarakamenkulyatirim.com, listed by USOM","first_observed":"2026-11-06T03:16:29.378Z","first_published":"2026-11-06T04:14:26.424Z","source":"usom","source_name":"USOM","under":"albarakamenkulyatirim.com"}],"url":"https://domainspoof.com/live?show=all&q=www.albarakamenkulyatirim.com"},{"hostname":"www.api.shorturl.pt","first_observed":"2026-11-06T03:36:00.235Z","first_published":"2026-11-06T04:14:26.424Z","brands":[],"dns":"resolved","resolved":["94.46.183.47"],"resolved_at":"2026-11-06T03:36:13Z","dns_checked_at":"2026-11-06T04:24:04.000Z","dns_since":"2026-11-06T04:24:04.000Z","findings":[{"id":"filgalog7mo64jw52cd73","kind":"reported_domain","summary":"Under shorturl.pt, reported by PhishDestroy","first_observed":"2026-11-06T03:36:00.235Z","first_published":"2026-11-06T04:14:26.424Z","source":"phishdestroy","source_name":"PhishDestroy","under":"shorturl.pt","source_url":"https://phishdestroy.io/domain/shorturl.pt/"}],"url":"https://domainspoof.com/live?show=all&q=www.api.shorturl.pt"},{"hostname":"www.cgg-allocation.com","first_observed":"2026-11-06T03:36:00.235Z","first_published":"2026-11-06T04:14:26.424Z","brands":[],"dns":"resolved","resolved":["198.49.23.144","198.49.23.145","198.185.159.144","198.185.159.145"],"resolved_at":"2026-11-06T03:36:13Z","dns_checked_at":"2026-11-06T04:24:04.000Z","dns_since":"2026-11-06T04:24:04.000Z","findings":[{"id":"fn5io3ynzeuk5fz4ohb3f","kind":"reported_domain","summary":"Under cgg-allocation.com, listed by MetaMask","first_observed":"2026-11-06T03:36:00.235Z","first_published":"2026-11-06T04:14:26.424Z","source":"metamask","source_name":"MetaMask","under":"cgg-allocation.com"}],"url":"https://domainspoof.com/live?show=all&q=www.cgg-allocation.com"},{"hostname":"www.changelly-ex-change.gr.com","first_observed":"2026-11-06T04:05:40.280Z","first_published":"2026-11-06T04:14:26.424Z","brands":[{"id":"changelly","name":"Changelly","url":"https://domainspoof.com/brands/changelly"}],"dns":"resolved","resolved":["104.21.22.216","172.67.207.32","2606:4700:3032::ac43:cf20","2606:4700:3035::6815:16d8"],"resolved_at":"2026-11-06T04:05:50Z","dns_checked_at":"2026-11-06T04:24:04.000Z","dns_since":"2026-11-06T04:24:04.000Z","findings":[{"id":"f7vtpe7qv6fgh3fkyuoxj","kind":"reported_domain","summary":"Under changelly-ex-change.gr.com, listed by MetaMask","first_observed":"2026-11-06T04:05:40.280Z","first_published":"2026-11-06T04:14:26.424Z","source":"metamask","source_name":"MetaMask","under":"changelly-ex-change.gr.com"}],"url":"https://domainspoof.com/brands/changelly"},{"hostname":"www.changelly-swap.gr.com","first_observed":"2026-11-06T04:01:00.797Z","first_published":"2026-11-06T04:14:26.424Z","brands":[{"id":"changelly","name":"Changelly","url":"https://domainspoof.com/brands/changelly"}],"dns":"resolved","resolved":["163.245.41.169"],"resolved_at":"2026-11-06T04:24:04Z","dns_checked_at":"2026-11-06T04:24:04.000Z","dns_since":"2026-11-06T04:24:04.000Z","findings":[{"id":"feoafme2wugj75rmes5nr","kind":"phishing_infrastructure","summary":"Resolved to 163.245.41.169, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T04:01:00.797Z","first_published":"2026-11-06T04:14:26.424Z","address":"163.245.41.169","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/changelly"},{"hostname":"www.daomaker-app.gr.com","first_observed":"2026-11-06T04:05:40.280Z","first_published":"2026-11-06T04:14:26.424Z","brands":[],"dns":"resolved","resolved":["104.21.12.41","172.67.193.166"],"resolved_at":"2026-11-06T04:05:50Z","dns_checked_at":"2026-11-06T04:24:04.000Z","dns_since":"2026-11-06T04:24:04.000Z","findings":[{"id":"fjhk56jfiltpibxy5dbag","kind":"reported_domain","summary":"Under daomaker-app.gr.com, listed by MetaMask","first_observed":"2026-11-06T04:05:40.280Z","first_published":"2026-11-06T04:14:26.424Z","source":"metamask","source_name":"MetaMask","under":"daomaker-app.gr.com"}],"url":"https://domainspoof.com/live?show=all&q=www.daomaker-app.gr.com"},{"hostname":"www.dexscreeners.at","first_observed":"2026-11-06T04:00:33.888Z","first_published":"2026-11-06T04:14:26.424Z","brands":[],"dns":"resolved","resolved":["163.245.41.169"],"resolved_at":"2026-11-06T04:01:00Z","dns_checked_at":"2026-11-06T04:24:04.000Z","dns_since":"2026-11-06T04:24:04.000Z","findings":[{"id":"f7akxtqa2awv44bzwohcn","kind":"reported_domain","summary":"Under dexscreeners.at, listed by MetaMask","first_observed":"2026-11-06T04:00:33.888Z","first_published":"2026-11-06T04:14:26.424Z","source":"metamask","source_name":"MetaMask","under":"dexscreeners.at"}],"url":"https://domainspoof.com/live?show=all&q=www.dexscreeners.at"},{"hostname":"www.dydx-swap.gr.com","first_observed":"2026-11-06T04:00:33.888Z","first_published":"2026-11-06T04:14:26.424Z","brands":[],"dns":"resolved","resolved":["163.245.41.169"],"resolved_at":"2026-11-06T04:01:00Z","dns_checked_at":"2026-11-06T04:24:04.000Z","dns_since":"2026-11-06T04:24:04.000Z","findings":[{"id":"fwxy7jabgqcn6nz3mb322","kind":"reported_domain","summary":"Under dydx-swap.gr.com, listed by MetaMask","first_observed":"2026-11-06T04:00:33.888Z","first_published":"2026-11-06T04:14:26.424Z","source":"metamask","source_name":"MetaMask","under":"dydx-swap.gr.com"}],"url":"https://domainspoof.com/live?show=all&q=www.dydx-swap.gr.com"},{"hostname":"www.en.granvestor.com","first_observed":"2026-11-06T03:10:51.082Z","first_published":"2026-11-06T04:14:26.424Z","brands":[],"dns":"resolved","resolved":["163.61.188.5"],"resolved_at":"2026-11-06T03:11:02Z","dns_checked_at":"2026-11-06T04:24:04.000Z","dns_since":"2026-11-06T04:24:04.000Z","findings":[{"id":"fmlv2jsk4ip7jj3mb6uid","kind":"reported_domain","summary":"Under granvestor.com, reported by PhishDestroy","first_observed":"2026-11-06T03:10:51.082Z","first_published":"2026-11-06T04:14:26.424Z","source":"phishdestroy","source_name":"PhishDestroy","under":"granvestor.com","source_url":"https://phishdestroy.io/domain/granvestor.com/"}],"url":"https://domainspoof.com/live?show=all&q=www.en.granvestor.com"},{"hostname":"www.granvestor.com","first_observed":"2026-11-06T03:10:51.082Z","first_published":"2026-11-06T04:14:26.424Z","brands":[],"dns":"resolved","resolved":["163.61.188.5"],"resolved_at":"2026-11-06T03:11:02Z","dns_checked_at":"2026-11-06T04:24:04.000Z","dns_since":"2026-11-06T04:24:04.000Z","findings":[{"id":"ffinz4erggqssydbmnuxo","kind":"reported_domain","summary":"Under granvestor.com, reported by PhishDestroy","first_observed":"2026-11-06T03:10:51.082Z","first_published":"2026-11-06T04:14:26.424Z","source":"phishdestroy","source_name":"PhishDestroy","under":"granvestor.com","source_url":"https://phishdestroy.io/domain/granvestor.com/"}],"url":"https://domainspoof.com/live?show=all&q=www.granvestor.com"},{"hostname":"www.hyperliquid-app.gr.com","first_observed":"2026-11-06T04:00:33.888Z","first_published":"2026-11-06T04:14:26.424Z","brands":[{"id":"hyperliquid","name":"Hyperliquid","url":"https://domainspoof.com/brands/hyperliquid"}],"dns":"resolved","resolved":["163.245.41.169"],"resolved_at":"2026-11-06T04:24:04Z","dns_checked_at":"2026-11-06T04:24:04.000Z","dns_since":"2026-11-06T04:24:04.000Z","findings":[{"id":"fugm7kltdld5db4gfkwqk","kind":"reported_domain","summary":"Under hyperliquid-app.gr.com, listed by MetaMask","first_observed":"2026-11-06T04:00:33.888Z","first_published":"2026-11-06T04:14:26.424Z","source":"metamask","source_name":"MetaMask","under":"hyperliquid-app.gr.com"},{"id":"fpruh255u2xbnhnbj4cef","kind":"phishing_infrastructure","summary":"Resolved to 163.245.41.169, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T04:01:00.826Z","first_published":"2026-11-06T04:14:26.424Z","address":"163.245.41.169","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/hyperliquid"},{"hostname":"www.hyperliquid-dex.gr.com","first_observed":"2026-11-06T04:00:33.888Z","first_published":"2026-11-06T04:14:26.424Z","brands":[{"id":"hyperliquid","name":"Hyperliquid","url":"https://domainspoof.com/brands/hyperliquid"}],"dns":"resolved","resolved":["163.245.41.169"],"resolved_at":"2026-11-06T04:24:04Z","dns_checked_at":"2026-11-06T04:24:04.000Z","dns_since":"2026-11-06T04:24:04.000Z","findings":[{"id":"f6t4zxtbsj5aweadfdqcd","kind":"reported_domain","summary":"Under hyperliquid-dex.gr.com, listed by MetaMask","first_observed":"2026-11-06T04:00:33.888Z","first_published":"2026-11-06T04:14:26.424Z","source":"metamask","source_name":"MetaMask","under":"hyperliquid-dex.gr.com"},{"id":"fpvbwe3gzj7qv6scuxnwb","kind":"phishing_infrastructure","summary":"Resolved to 163.245.41.169, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T04:01:00.830Z","first_published":"2026-11-06T04:14:26.424Z","address":"163.245.41.169","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/hyperliquid"},{"hostname":"www.konraven-eichenfeld.com","first_observed":"2026-11-06T03:21:06.153Z","first_published":"2026-11-06T04:14:26.424Z","brands":[],"dns":"resolved","resolved":["104.21.73.127","172.67.190.10"],"resolved_at":"2026-11-06T03:21:20Z","dns_checked_at":"2026-11-06T04:24:04.000Z","dns_since":"2026-11-06T04:24:04.000Z","findings":[{"id":"fhbizfutx7tfmt7dgnno7","kind":"reported_domain","summary":"Under konraven-eichenfeld.com, listed by CERT Polska","first_observed":"2026-11-06T03:21:06.153Z","first_published":"2026-11-06T04:14:26.424Z","source":"cert_polska","source_name":"CERT Polska","under":"konraven-eichenfeld.com"}],"url":"https://domainspoof.com/live?show=all&q=www.konraven-eichenfeld.com"},{"hostname":"www.ledger-cn.gr.com","first_observed":"2026-11-06T04:05:40.280Z","first_published":"2026-11-06T04:14:26.424Z","brands":[],"dns":"resolved","resolved":["104.21.87.47","172.67.141.128"],"resolved_at":"2026-11-06T04:05:50Z","dns_checked_at":"2026-11-06T04:24:04.000Z","dns_since":"2026-11-06T04:24:04.000Z","findings":[{"id":"fu2ckyhtil7gwudyy4rcs","kind":"reported_domain","summary":"Under ledger-cn.gr.com, listed by MetaMask","first_observed":"2026-11-06T04:05:40.280Z","first_published":"2026-11-06T04:14:26.424Z","source":"metamask","source_name":"MetaMask","under":"ledger-cn.gr.com"}],"url":"https://domainspoof.com/live?show=all&q=www.ledger-cn.gr.com"},{"hostname":"www.lido-fi.co.com","first_observed":"2026-11-06T04:05:40.280Z","first_published":"2026-11-06T04:14:26.424Z","brands":[],"dns":"resolved","resolved":["104.21.90.206","172.67.161.43"],"resolved_at":"2026-11-06T04:05:50Z","dns_checked_at":"2026-11-06T04:24:04.000Z","dns_since":"2026-11-06T04:24:04.000Z","findings":[{"id":"fusk7fm4biswvt7x62xqu","kind":"reported_domain","summary":"Under lido-fi.co.com, listed by MetaMask","first_observed":"2026-11-06T04:05:40.280Z","first_published":"2026-11-06T04:14:26.424Z","source":"metamask","source_name":"MetaMask","under":"lido-fi.co.com"}],"url":"https://domainspoof.com/live?show=all&q=www.lido-fi.co.com"},{"hostname":"www.mantanetwork.co.com","first_observed":"2026-11-06T04:05:40.280Z","first_published":"2026-11-06T04:14:26.424Z","brands":[],"dns":"resolved","resolved":["104.21.37.133","172.67.208.64"],"resolved_at":"2026-11-06T04:05:50Z","dns_checked_at":"2026-11-06T04:24:04.000Z","dns_since":"2026-11-06T04:24:04.000Z","findings":[{"id":"fi3gulrwf2cytpmyw4s5g","kind":"reported_domain","summary":"Under mantanetwork.co.com, listed by MetaMask","first_observed":"2026-11-06T04:05:40.280Z","first_published":"2026-11-06T04:14:26.424Z","source":"metamask","source_name":"MetaMask","under":"mantanetwork.co.com"}],"url":"https://domainspoof.com/live?show=all&q=www.mantanetwork.co.com"},{"hostname":"www.monitoring.ptkgi.com","first_observed":"2026-11-06T03:41:07.331Z","first_published":"2026-11-06T04:14:26.424Z","brands":[],"dns":"resolved","resolved":["103.123.18.42"],"resolved_at":"2026-11-06T03:41:32Z","dns_checked_at":"2026-11-06T04:24:04.000Z","dns_since":"2026-11-06T04:24:04.000Z","findings":[{"id":"f3h5vnv374dantffwcitz","kind":"reported_domain","summary":"Under monitoring.ptkgi.com, reported by PhishDestroy","first_observed":"2026-11-06T03:41:07.331Z","first_published":"2026-11-06T04:14:26.424Z","source":"phishdestroy","source_name":"PhishDestroy","under":"monitoring.ptkgi.com","source_url":"https://phishdestroy.io/domain/monitoring.ptkgi.com/"}],"url":"https://domainspoof.com/live?show=all&q=www.monitoring.ptkgi.com"},{"hostname":"www.mrking11098.com","first_observed":"2026-11-06T03:51:51.289Z","first_published":"2026-11-06T04:14:26.424Z","brands":[],"dns":"resolved","resolved":["185.53.179.136"],"resolved_at":"2026-11-06T04:03:33Z","dns_checked_at":"2026-11-06T04:24:04.000Z","dns_since":"2026-11-06T04:24:04.000Z","findings":[{"id":"fd2c2yllarbyeghqmxjlo","kind":"reported_domain","summary":"Under mrking11098.com, reported by PhishDestroy","first_observed":"2026-11-06T03:51:51.289Z","first_published":"2026-11-06T04:14:26.424Z","source":"phishdestroy","source_name":"PhishDestroy","under":"mrking11098.com","source_url":"https://phishdestroy.io/domain/mrking11098.com/"}],"url":"https://domainspoof.com/live?show=all&q=www.mrking11098.com"},{"hostname":"www.narco24.city","first_observed":"2026-11-06T03:21:06.153Z","first_published":"2026-11-06T04:14:26.424Z","brands":[],"dns":"resolved","resolved":["192.142.53.37"],"resolved_at":"2026-11-06T03:21:20Z","dns_checked_at":"2026-11-06T04:24:04.000Z","dns_since":"2026-11-06T04:24:04.000Z","findings":[{"id":"fqf3gyjkamvo5tjn6iuzz","kind":"reported_domain","summary":"Under narco24.city, reported by PhishDestroy","first_observed":"2026-11-06T03:21:06.153Z","first_published":"2026-11-06T04:14:26.424Z","source":"phishdestroy","source_name":"PhishDestroy","under":"narco24.city","source_url":"https://phishdestroy.io/domain/narco24.city/"}],"url":"https://domainspoof.com/live?show=all&q=www.narco24.city"},{"hostname":"www.qulckswap.gr.com","first_observed":"2026-11-06T04:05:40.280Z","first_published":"2026-11-06T04:14:26.424Z","brands":[],"dns":"resolved","resolved":["104.21.46.237","172.67.143.41"],"resolved_at":"2026-11-06T04:05:50Z","dns_checked_at":"2026-11-06T04:24:04.000Z","dns_since":"2026-11-06T04:24:04.000Z","findings":[{"id":"fu5k5rvgnbb3uvm4l6j3a","kind":"reported_domain","summary":"Under qulckswap.gr.com, listed by MetaMask","first_observed":"2026-11-06T04:05:40.280Z","first_published":"2026-11-06T04:14:26.424Z","source":"metamask","source_name":"MetaMask","under":"qulckswap.gr.com"}],"url":"https://domainspoof.com/live?show=all&q=www.qulckswap.gr.com"},{"hostname":"www.rainbet-aus.org","first_observed":"2026-11-06T03:51:51.289Z","first_published":"2026-11-06T04:14:26.424Z","brands":[],"dns":"resolved","resolved":["104.21.36.160","172.67.196.192"],"resolved_at":"2026-11-06T04:03:33Z","dns_checked_at":"2026-11-06T04:24:04.000Z","dns_since":"2026-11-06T04:24:04.000Z","findings":[{"id":"fi7rgwj2dwduhh5ylmnls","kind":"reported_domain","summary":"Under rainbet-aus.org, listed by MetaMask","first_observed":"2026-11-06T03:51:51.289Z","first_published":"2026-11-06T04:14:26.424Z","source":"metamask","source_name":"MetaMask","under":"rainbet-aus.org"}],"url":"https://domainspoof.com/live?show=all&q=www.rainbet-aus.org"},{"hostname":"www.raydium-swap.gr.com","first_observed":"2026-11-06T04:00:33.888Z","first_published":"2026-11-06T04:14:26.424Z","brands":[{"id":"raydium","name":"Raydium","url":"https://domainspoof.com/brands/raydium"}],"dns":"resolved","resolved":["163.245.41.169"],"resolved_at":"2026-11-06T04:24:04Z","dns_checked_at":"2026-11-06T04:24:04.000Z","dns_since":"2026-11-06T04:24:04.000Z","findings":[{"id":"filf77afqz7gwq27faneh","kind":"reported_domain","summary":"Under raydium-swap.gr.com, listed by MetaMask","first_observed":"2026-11-06T04:00:33.888Z","first_published":"2026-11-06T04:14:26.424Z","source":"metamask","source_name":"MetaMask","under":"raydium-swap.gr.com"},{"id":"ffaveq73yci3kiyq6dghz","kind":"phishing_infrastructure","summary":"Resolved to 163.245.41.169, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T04:01:00.865Z","first_published":"2026-11-06T04:14:26.424Z","address":"163.245.41.169","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/raydium"},{"hostname":"www.safepal-cn.gr.com","first_observed":"2026-11-06T04:05:40.280Z","first_published":"2026-11-06T04:14:26.424Z","brands":[{"id":"safepal","name":"SafePal","url":"https://domainspoof.com/brands/safepal"}],"dns":"resolved","resolved":["104.21.93.83","172.67.207.157","2606:4700:3032::ac43:cf9d","2606:4700:3033::6815:5d53"],"resolved_at":"2026-11-06T04:05:50Z","dns_checked_at":"2026-11-06T04:24:04.000Z","dns_since":"2026-11-06T04:24:04.000Z","findings":[{"id":"feqkc6az2nsumzdfsl2r2","kind":"reported_domain","summary":"Under safepal-cn.gr.com, listed by MetaMask","first_observed":"2026-11-06T04:05:40.280Z","first_published":"2026-11-06T04:14:26.424Z","source":"metamask","source_name":"MetaMask","under":"safepal-cn.gr.com"}],"url":"https://domainspoof.com/brands/safepal"},{"hostname":"www.sas-allianz-rivoli.com","first_observed":"2026-11-06T03:26:36.210Z","first_published":"2026-11-06T04:14:26.424Z","brands":[{"id":"allianz","name":"Allianz","url":"https://domainspoof.com/brands/allianz"}],"dns":"resolved","resolved":["188.165.53.185"],"resolved_at":"2026-11-06T04:24:04Z","dns_checked_at":"2026-11-06T04:24:04.000Z","dns_since":"2026-11-06T04:24:04.000Z","findings":[{"id":"fiemt67rfdcypwer4i2ae","kind":"phishing_infrastructure","summary":"Resolved to 188.165.53.185, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T03:26:36.210Z","first_published":"2026-11-06T04:14:26.424Z","address":"188.165.53.185","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/allianz"},{"hostname":"www.sushiswap.gr.com","first_observed":"2026-11-06T04:05:40.280Z","first_published":"2026-11-06T04:14:26.424Z","brands":[],"dns":"resolved","resolved":["104.21.1.231","172.67.152.143"],"resolved_at":"2026-11-06T04:05:50Z","dns_checked_at":"2026-11-06T04:24:04.000Z","dns_since":"2026-11-06T04:24:04.000Z","findings":[{"id":"fc2grnirxx57gmhxkop2m","kind":"reported_domain","summary":"Under sushiswap.gr.com, listed by MetaMask","first_observed":"2026-11-06T04:05:40.280Z","first_published":"2026-11-06T04:14:26.424Z","source":"metamask","source_name":"MetaMask","under":"sushiswap.gr.com"}],"url":"https://domainspoof.com/live?show=all&q=www.sushiswap.gr.com"},{"hostname":"www.thelastsjob.com","first_observed":"2026-11-06T04:05:40.280Z","first_published":"2026-11-06T04:14:26.424Z","brands":[],"dns":"resolved","resolved":["52.223.13.41"],"resolved_at":"2026-11-06T04:05:50Z","dns_checked_at":"2026-11-06T04:24:04.000Z","dns_since":"2026-11-06T04:24:04.000Z","findings":[{"id":"fms43sslfzdropkgxktzl","kind":"reported_domain","summary":"Under thelastsjob.com, reported by PhishDestroy","first_observed":"2026-11-06T04:05:40.280Z","first_published":"2026-11-06T04:14:26.424Z","source":"phishdestroy","source_name":"PhishDestroy","under":"thelastsjob.com","source_url":"https://phishdestroy.io/domain/thelastsjob.com/"}],"url":"https://domainspoof.com/live?show=all&q=www.thelastsjob.com"},{"hostname":"www.unclebobsbarandgrill.com","first_observed":"2026-11-06T03:26:14.665Z","first_published":"2026-11-06T04:14:26.424Z","brands":[],"dns":"resolved","resolved":["13.248.213.45","76.223.67.189"],"resolved_at":"2026-11-06T03:26:36Z","dns_checked_at":"2026-11-06T04:24:04.000Z","dns_since":"2026-11-06T04:24:04.000Z","findings":[{"id":"ftr5azhjworjikc46o7qq","kind":"reported_domain","summary":"Under unclebobsbarandgrill.com, listed by CERT Polska","first_observed":"2026-11-06T03:26:14.665Z","first_published":"2026-11-06T04:14:26.424Z","source":"cert_polska","source_name":"CERT Polska","under":"unclebobsbarandgrill.com"}],"url":"https://domainspoof.com/live?show=all&q=www.unclebobsbarandgrill.com"},{"hostname":"www.uspsupdate-deliveryrecordsuser.hpmanguerasyconexiones.com","first_observed":"2026-11-06T03:17:38.456Z","first_published":"2026-11-06T04:14:26.424Z","brands":[{"id":"usps","name":"USPS","url":"https://domainspoof.com/brands/usps"}],"dns":"resolved","resolved":["65.181.111.157"],"resolved_at":"2026-11-06T04:24:04Z","dns_checked_at":"2026-11-06T04:24:04.000Z","dns_since":"2026-11-06T04:24:04.000Z","findings":[{"id":"fgdradtfosjdd7axxyd5u","kind":"phishing_infrastructure","summary":"Resolved to 65.181.111.157, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T03:17:38.456Z","first_published":"2026-11-06T04:14:26.424Z","address":"65.181.111.157","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/usps"},{"hostname":"www.wealthcresttraders.net","first_observed":"2026-11-06T03:46:45.328Z","first_published":"2026-11-06T04:14:26.424Z","brands":[],"dns":"resolved","resolved":["208.98.35.118"],"resolved_at":"2026-11-06T03:55:17Z","dns_checked_at":"2026-11-06T04:24:04.000Z","dns_since":"2026-11-06T04:24:04.000Z","findings":[{"id":"fausqsfgdpeplj4izcfx6","kind":"reported_domain","summary":"Under wealthcresttraders.net, reported by PhishDestroy","first_observed":"2026-11-06T03:46:45.328Z","first_published":"2026-11-06T04:14:26.424Z","source":"phishdestroy","source_name":"PhishDestroy","under":"wealthcresttraders.net","source_url":"https://phishdestroy.io/domain/wealthcresttraders.net/"}],"url":"https://domainspoof.com/live?show=all&q=www.wealthcresttraders.net"},{"hostname":"www.wqjoc.ezgateway.net","first_observed":"2026-11-06T03:26:14.665Z","first_published":"2026-11-06T04:14:26.424Z","brands":[],"dns":"resolved","resolved":[],"resolved_at":"2026-11-06T03:26:36Z","dns_checked_at":"2026-11-06T04:24:04.000Z","dns_since":"2026-11-06T04:24:04.000Z","findings":[{"id":"f7rxysry7damyikwmcado","kind":"reported_domain","summary":"Under ezgateway.net, listed by USOM","first_observed":"2026-11-06T03:26:14.665Z","first_published":"2026-11-06T04:14:26.424Z","source":"usom","source_name":"USOM","under":"ezgateway.net"}],"url":"https://domainspoof.com/live?show=all&q=www.wqjoc.ezgateway.net"},{"hostname":"xixochaine-fr.live","first_observed":"2026-11-06T04:05:40.280Z","first_published":"2026-11-06T04:14:26.424Z","brands":[],"dns":"resolved","resolved":["104.21.36.218","172.67.199.197"],"resolved_at":"2026-11-06T04:05:50Z","dns_checked_at":"2026-11-06T04:24:04.000Z","dns_since":"2026-11-06T04:24:04.000Z","findings":[{"id":"fvfmponmldmadmibc2g53","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-06T04:05:40.280Z","first_published":"2026-11-06T04:14:26.424Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=xixochaine-fr.live"},{"hostname":"zajindan336.top","first_observed":"2026-11-06T03:36:00.235Z","first_published":"2026-11-06T04:14:26.424Z","brands":[],"dns":"resolved","resolved":["103.224.182.250"],"resolved_at":"2026-11-06T03:36:14Z","dns_checked_at":"2026-11-06T04:24:04.000Z","dns_since":"2026-11-06T04:24:04.000Z","findings":[{"id":"f7b3o7gee4kwunvj4wogx","kind":"reported_domain","summary":"Listed by NPA 165 (information services)","first_observed":"2026-11-06T03:36:00.235Z","first_published":"2026-11-06T04:14:26.424Z","source":"npa","source_name":"NPA 165","claim":{"category":"information services"}}],"url":"https://domainspoof.com/live?show=all&q=zajindan336.top"},{"hostname":"zenitorix.com","first_observed":"2026-11-06T03:05:43.075Z","first_published":"2026-11-06T04:14:26.424Z","brands":[],"dns":"resolved","resolved":["104.21.3.143","172.67.130.208"],"resolved_at":"2026-11-06T03:06:09Z","dns_checked_at":"2026-11-06T04:24:04.000Z","dns_since":"2026-11-06T04:24:04.000Z","findings":[{"id":"fwxmoaygvhfqzcshrpzyl","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-06T03:05:43.075Z","first_published":"2026-11-06T04:14:26.424Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=zenitorix.com"},{"hostname":"0q.hk","first_observed":"2026-11-06T02:26:20.460Z","first_published":"2026-11-06T03:05:02.297Z","brands":[],"dns":"resolved","resolved":["104.21.80.132","172.67.182.106"],"resolved_at":"2026-11-06T02:26:24Z","dns_checked_at":"2026-11-06T03:13:24.000Z","dns_since":"2026-11-06T03:13:24.000Z","findings":[{"id":"fn544mtqbf2h525zyghvk","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-06T02:26:20.460Z","first_published":"2026-11-06T03:05:02.297Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=0q.hk"},{"hostname":"1earthliving.org","first_observed":"2026-11-06T02:00:35.712Z","first_published":"2026-11-06T03:05:02.297Z","brands":[],"dns":"resolved","resolved":["212.90.120.121"],"resolved_at":"2026-11-06T02:00:39Z","dns_checked_at":"2026-11-06T03:13:24.000Z","dns_since":"2026-11-06T03:13:24.000Z","findings":[{"id":"f2vkvja7hvi3r4gnd5zhr","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-06T02:00:35.712Z","first_published":"2026-11-06T03:05:02.297Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=1earthliving.org"},{"hostname":"2026110600.cloudf1are.net","first_observed":"2026-11-06T01:56:59.755Z","first_published":"2026-11-06T03:05:02.297Z","brands":[],"dns":"resolved","resolved":["45.10.243.43"],"resolved_at":"2026-11-06T01:57:03Z","dns_checked_at":"2026-11-06T03:13:24.000Z","dns_since":"2026-11-06T03:13:24.000Z","findings":[{"id":"f7x6e5lxtf7nopvakkzvy","kind":"reported_domain","summary":"Under cloudf1are.net, listed by MetaMask","first_observed":"2026-11-06T01:56:59.755Z","first_published":"2026-11-06T03:05:02.297Z","source":"metamask","source_name":"MetaMask","under":"cloudf1are.net"}],"url":"https://domainspoof.com/live?show=all&q=2026110600.cloudf1are.net"},{"hostname":"23434-google.com","first_observed":"2026-11-06T02:51:54.758Z","first_published":"2026-11-06T03:05:02.297Z","brands":[{"id":"google","name":"Google","url":"https://domainspoof.com/brands/google"}],"dns":"resolved","resolved":["45.153.34.201"],"resolved_at":"2026-11-06T03:13:24Z","dns_checked_at":"2026-11-06T03:13:24.000Z","dns_since":"2026-11-06T03:13:24.000Z","findings":[{"id":"fbudva7pcijqkdrmlizf7","kind":"spamhaus_drop","summary":"Resolved to 45.153.34.201 on Spamhaus DROP","first_observed":"2026-11-06T02:51:54.758Z","first_published":"2026-11-06T03:05:02.297Z","address":"45.153.34.201","list":"spamhaus_drop","list_name":"Spamhaus DROP"}],"url":"https://domainspoof.com/brands/google"},{"hostname":"499623-crypto.com","first_observed":"2026-11-06T02:11:00.434Z","first_published":"2026-11-06T03:05:02.297Z","brands":[{"id":"crypto-com","name":"Crypto.com","url":"https://domainspoof.com/brands/crypto-com"}],"dns":"resolved","resolved":["104.21.75.127","172.67.175.218","2606:4700:3030::ac43:afda","2606:4700:3037::6815:4b7f"],"resolved_at":"2026-11-06T02:11:03Z","dns_checked_at":"2026-11-06T03:13:24.000Z","dns_since":"2026-11-06T03:13:24.000Z","findings":[{"id":"frvg7d2em7o5cg52xy5ni","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-06T02:11:00.434Z","first_published":"2026-11-06T03:05:02.297Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/brands/crypto-com"},{"hostname":"563535crypto.com","first_observed":"2026-11-06T02:56:56.961Z","first_published":"2026-11-06T03:05:02.297Z","brands":[],"dns":"resolved","resolved":["104.21.24.235","172.67.221.6"],"resolved_at":"2026-11-06T02:57:02Z","dns_checked_at":"2026-11-06T03:13:24.000Z","dns_since":"2026-11-06T03:13:24.000Z","findings":[{"id":"fmfb3ntddygoiul6i2plv","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-06T02:56:56.961Z","first_published":"2026-11-06T03:05:02.297Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=563535crypto.com"},{"hostname":"755205-crypto.com","first_observed":"2026-11-06T02:11:00.434Z","first_published":"2026-11-06T03:05:02.297Z","brands":[{"id":"crypto-com","name":"Crypto.com","url":"https://domainspoof.com/brands/crypto-com"}],"dns":"resolved","resolved":["104.21.35.134","172.67.222.246","2606:4700:3033::6815:2386","2606:4700:3034::ac43:def6"],"resolved_at":"2026-11-06T02:11:04Z","dns_checked_at":"2026-11-06T03:13:24.000Z","dns_since":"2026-11-06T03:13:24.000Z","findings":[{"id":"fsivpvedqnch7jdwyr5z2","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-06T02:11:00.434Z","first_published":"2026-11-06T03:05:02.297Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/brands/crypto-com"},{"hostname":"admin-staging.fleet-ledger.com","first_observed":"2026-11-06T02:46:46.295Z","first_published":"2026-11-06T03:05:02.297Z","brands":[],"dns":"resolved","resolved":["104.21.0.130","172.67.150.249"],"resolved_at":"2026-11-06T02:54:51Z","dns_checked_at":"2026-11-06T03:13:24.000Z","dns_since":"2026-11-06T03:13:24.000Z","findings":[{"id":"fqsqqoyo24uxnii7nzsxy","kind":"reported_domain","summary":"Under fleet-ledger.com, listed by MetaMask","first_observed":"2026-11-06T02:46:46.295Z","first_published":"2026-11-06T03:05:02.297Z","source":"metamask","source_name":"MetaMask","under":"fleet-ledger.com"}],"url":"https://domainspoof.com/live?show=all&q=admin-staging.fleet-ledger.com"},{"hostname":"aiglerendoire-fr.live","first_observed":"2026-11-06T01:51:52.918Z","first_published":"2026-11-06T03:05:02.297Z","brands":[],"dns":"resolved","resolved":["104.21.67.91","172.67.219.37"],"resolved_at":"2026-11-06T01:52:02Z","dns_checked_at":"2026-11-06T03:13:24.000Z","dns_since":"2026-11-06T03:13:24.000Z","findings":[{"id":"fu5jpufm3uaaj4v7hw47x","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-06T01:51:52.918Z","first_published":"2026-11-06T03:05:02.297Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=aiglerendoire-fr.live"},{"hostname":"amicz.hair","first_observed":"2026-11-06T02:41:40.421Z","first_published":"2026-11-06T03:05:02.297Z","brands":[],"dns":"resolved","resolved":["104.21.92.240","172.67.200.32"],"resolved_at":"2026-11-06T02:51:37Z","dns_checked_at":"2026-11-06T03:13:24.000Z","dns_since":"2026-11-06T03:13:24.000Z","findings":[{"id":"fl7dguk4hc2xxn5sejkad","kind":"reported_domain","summary":"Listed by NPA 165 (information services)","first_observed":"2026-11-06T02:41:40.421Z","first_published":"2026-11-06T03:05:02.297Z","source":"npa","source_name":"NPA 165","claim":{"category":"information services"}}],"url":"https://domainspoof.com/live?show=all&q=amicz.hair"},{"hostname":"apexworkflowgroup.com","first_observed":"2026-11-06T02:11:00.434Z","first_published":"2026-11-06T03:05:02.297Z","brands":[],"dns":"no_address","resolved":[],"resolved_at":"2026-11-06T02:11:08Z","dns_checked_at":"2026-11-06T11:19:31.000Z","findings":[{"id":"fc22tlav3zxynbnjj4aer","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-06T02:11:00.434Z","first_published":"2026-11-06T03:05:02.297Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=apexworkflowgroup.com"},{"hostname":"api.gpt-permax-7-com.financecryptoworld.com","first_observed":"2026-11-06T02:51:51.677Z","first_published":"2026-11-06T03:05:02.297Z","brands":[],"dns":"resolved","resolved":["104.21.10.130","172.67.131.121"],"resolved_at":"2026-11-06T03:00:16Z","dns_checked_at":"2026-11-06T03:13:24.000Z","dns_since":"2026-11-06T03:13:24.000Z","findings":[{"id":"fpp2fd3ykvfnx4dztqv36","kind":"reported_domain","summary":"Under financecryptoworld.com, listed by CERT Polska","first_observed":"2026-11-06T02:51:51.677Z","first_published":"2026-11-06T03:05:02.297Z","source":"cert_polska","source_name":"CERT Polska","under":"financecryptoworld.com"}],"url":"https://domainspoof.com/live?show=all&q=api.gpt-permax-7-com.financecryptoworld.com"},{"hostname":"api.zheard.net","first_observed":"2026-11-06T01:46:45.159Z","first_published":"2026-11-06T03:05:02.297Z","brands":[],"dns":"resolved","resolved":["147.79.84.174"],"resolved_at":"2026-11-06T01:46:56Z","dns_checked_at":"2026-11-06T03:13:24.000Z","dns_since":"2026-11-06T03:13:24.000Z","findings":[{"id":"fbjvvbuonl5xsjcstzwzx","kind":"reported_domain","summary":"Under zheard.net, reported by PhishDestroy","first_observed":"2026-11-06T01:46:45.159Z","first_published":"2026-11-06T03:05:02.297Z","source":"phishdestroy","source_name":"PhishDestroy","under":"zheard.net","source_url":"https://phishdestroy.io/domain/zheard.net/"}],"url":"https://domainspoof.com/live?show=all&q=api.zheard.net"},{"hostname":"app-mobiili.com","first_observed":"2026-11-06T02:00:35.712Z","first_published":"2026-11-06T03:05:02.297Z","brands":[],"dns":"resolved","resolved":["158.94.208.88"],"resolved_at":"2026-11-06T02:00:41Z","dns_checked_at":"2026-11-06T03:13:24.000Z","dns_since":"2026-11-06T03:13:24.000Z","findings":[{"id":"f2243elvj6qf6y3qkxhq5","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-06T02:00:35.712Z","first_published":"2026-11-06T03:05:02.297Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=app-mobiili.com"},{"hostname":"app.eoptiontrade.com","first_observed":"2026-11-06T02:56:56.961Z","first_published":"2026-11-06T03:05:02.297Z","brands":[],"dns":"resolved","resolved":["198.251.89.82"],"resolved_at":"2026-11-06T03:03:49Z","dns_checked_at":"2026-11-06T03:13:24.000Z","dns_since":"2026-11-06T03:13:24.000Z","findings":[{"id":"ftdlm2udgbk4676uwatgf","kind":"reported_domain","summary":"Under eoptiontrade.com, reported by PhishDestroy","first_observed":"2026-11-06T02:56:56.961Z","first_published":"2026-11-06T03:05:02.297Z","source":"phishdestroy","source_name":"PhishDestroy","under":"eoptiontrade.com","source_url":"https://phishdestroy.io/domain/eoptiontrade.com/"}],"url":"https://domainspoof.com/live?show=all&q=app.eoptiontrade.com"},{"hostname":"autoconfig.perfectfacilities.co.uk","first_observed":"2026-11-06T02:16:06.818Z","first_published":"2026-11-06T03:05:02.297Z","brands":[],"dns":"resolved","resolved":["50.87.180.48"],"resolved_at":"2026-11-06T02:25:33Z","dns_checked_at":"2026-11-06T03:13:24.000Z","dns_since":"2026-11-06T03:13:24.000Z","findings":[{"id":"fijkwgwhb2jfxp7seaza5","kind":"reported_domain","summary":"Under perfectfacilities.co.uk, reported by PhishDestroy","first_observed":"2026-11-06T02:16:06.818Z","first_published":"2026-11-06T03:05:02.297Z","source":"phishdestroy","source_name":"PhishDestroy","under":"perfectfacilities.co.uk","source_url":"https://phishdestroy.io/domain/perfectfacilities.co.uk/"}],"url":"https://domainspoof.com/live?show=all&q=autoconfig.perfectfacilities.co.uk"},{"hostname":"autoconfig.ubicar.club","first_observed":"2026-11-06T02:11:00.434Z","first_published":"2026-11-06T03:05:02.297Z","brands":[],"dns":"resolved","resolved":["65.181.116.252"],"resolved_at":"2026-11-06T02:11:08Z","dns_checked_at":"2026-11-06T03:13:24.000Z","dns_since":"2026-11-06T03:13:24.000Z","findings":[{"id":"fopyxt3xjasffdd67h5cf","kind":"reported_domain","summary":"Under ubicar.club, reported by PhishDestroy","first_observed":"2026-11-06T02:11:00.434Z","first_published":"2026-11-06T03:05:02.297Z","source":"phishdestroy","source_name":"PhishDestroy","under":"ubicar.club","source_url":"https://phishdestroy.io/domain/ubicar.club/"}],"url":"https://domainspoof.com/live?show=all&q=autoconfig.ubicar.club"},{"hostname":"autodiscover.ubicar.club","first_observed":"2026-11-06T02:11:00.434Z","first_published":"2026-11-06T03:05:02.297Z","brands":[],"dns":"resolved","resolved":["65.181.116.252"],"resolved_at":"2026-11-06T02:11:08Z","dns_checked_at":"2026-11-06T03:13:24.000Z","dns_since":"2026-11-06T03:13:24.000Z","findings":[{"id":"fc3mzfzhheco4gtojg2lf","kind":"reported_domain","summary":"Under ubicar.club, reported by PhishDestroy","first_observed":"2026-11-06T02:11:00.434Z","first_published":"2026-11-06T03:05:02.297Z","source":"phishdestroy","source_name":"PhishDestroy","under":"ubicar.club","source_url":"https://phishdestroy.io/domain/ubicar.club/"}],"url":"https://domainspoof.com/live?show=all&q=autodiscover.ubicar.club"},{"hostname":"basedonex-allocations.xyz","first_observed":"2026-11-06T02:05:41.321Z","first_published":"2026-11-06T03:05:02.297Z","brands":[],"dns":"resolved","resolved":["104.21.49.67","172.67.159.158"],"resolved_at":"2026-11-06T02:06:43Z","dns_checked_at":"2026-11-06T03:13:24.000Z","dns_since":"2026-11-06T03:13:24.000Z","findings":[{"id":"fepnfd2o5ehoocyvqzy76","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-06T02:05:41.321Z","first_published":"2026-11-06T03:05:02.297Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=basedonex-allocations.xyz"},{"hostname":"bep-check.info","first_observed":"2026-11-06T02:51:51.677Z","first_published":"2026-11-06T03:05:02.297Z","brands":[],"dns":"resolved","resolved":["13.248.213.45","76.223.67.189"],"resolved_at":"2026-11-06T03:00:37Z","dns_checked_at":"2026-11-06T03:13:24.000Z","dns_since":"2026-11-06T03:13:24.000Z","findings":[{"id":"fkm5f4iex4zexylqfogei","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-06T02:51:51.677Z","first_published":"2026-11-06T03:05:02.297Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/bep-check.info/"}],"url":"https://domainspoof.com/live?show=all&q=bep-check.info"},{"hostname":"binancegg.com","first_observed":"2026-11-06T02:11:00.434Z","first_published":"2026-11-06T03:05:02.297Z","brands":[],"dns":"resolved","resolved":["104.21.20.210","172.67.194.107","2606:4700:3036::ac43:c26b","2606:4700:3037::6815:14d2"],"resolved_at":"2026-11-06T02:13:01Z","dns_checked_at":"2026-11-06T03:13:24.000Z","dns_since":"2026-11-06T03:13:24.000Z","findings":[{"id":"fkk2s7cyr5uryymliss76","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-06T02:11:00.434Z","first_published":"2026-11-06T03:05:02.297Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=binancegg.com"},{"hostname":"bitcoinwn.io","first_observed":"2026-11-06T02:16:06.818Z","first_published":"2026-11-06T03:05:02.297Z","brands":[],"dns":"resolved","resolved":["104.21.18.85","172.67.181.128"],"resolved_at":"2026-11-06T02:25:55Z","dns_checked_at":"2026-11-06T03:13:24.000Z","dns_since":"2026-11-06T03:13:24.000Z","findings":[{"id":"f7vuzg4ziobq6lcqgcakk","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-06T02:16:06.818Z","first_published":"2026-11-06T03:05:02.297Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/bitcoinwn.io/"}],"url":"https://domainspoof.com/live?show=all&q=bitcoinwn.io"},{"hostname":"bitpiehub.com","first_observed":"2026-11-06T02:46:26.179Z","first_published":"2026-11-06T03:05:02.297Z","brands":[{"id":"bitpie","name":"Bitpie","url":"https://domainspoof.com/brands/bitpie"}],"dns":"resolved","resolved":["137.220.157.34"],"resolved_at":"2026-11-06T03:13:24Z","dns_checked_at":"2026-11-06T03:13:24.000Z","dns_since":"2026-11-06T03:13:24.000Z","findings":[{"id":"fffd7ojlolwbnc6nkejcw","kind":"spamhaus_drop","summary":"Resolved to 137.220.157.34 on Spamhaus DROP","first_observed":"2026-11-06T02:46:26.179Z","first_published":"2026-11-06T03:05:02.297Z","address":"137.220.157.34","list":"spamhaus_drop","list_name":"Spamhaus DROP"}],"url":"https://domainspoof.com/brands/bitpie"},{"hostname":"bitpietrade.com","first_observed":"2026-11-06T02:46:26.187Z","first_published":"2026-11-06T03:05:02.297Z","brands":[{"id":"bitpie","name":"Bitpie","url":"https://domainspoof.com/brands/bitpie"}],"dns":"resolved","resolved":["137.220.157.52"],"resolved_at":"2026-11-06T03:13:24Z","dns_checked_at":"2026-11-06T03:13:24.000Z","dns_since":"2026-11-06T03:13:24.000Z","findings":[{"id":"fmx7qfxfulpzwm64wm7d5","kind":"spamhaus_drop","summary":"Resolved to 137.220.157.52 on Spamhaus DROP","first_observed":"2026-11-06T02:46:26.187Z","first_published":"2026-11-06T03:05:02.297Z","address":"137.220.157.52","list":"spamhaus_drop","list_name":"Spamhaus DROP"}],"url":"https://domainspoof.com/brands/bitpie"},{"hostname":"blockchainsdappnode.org","first_observed":"2026-11-06T02:00:35.712Z","first_published":"2026-11-06T03:05:02.297Z","brands":[],"dns":"resolved","resolved":["104.21.36.214","172.67.199.193"],"resolved_at":"2026-11-06T02:00:46Z","dns_checked_at":"2026-11-06T03:13:24.000Z","dns_since":"2026-11-06T03:13:24.000Z","findings":[{"id":"fblxvf3ezlrfh3arqqfn3","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-06T02:00:35.712Z","first_published":"2026-11-06T03:05:02.297Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/blockchainsdappnode.org/"}],"url":"https://domainspoof.com/live?show=all&q=blockchainsdappnode.org"},{"hostname":"blog.cocsantacatarina.com.br","first_observed":"2026-11-06T02:36:34.488Z","first_published":"2026-11-06T03:05:02.297Z","brands":[],"dns":"resolved","resolved":["186.226.56.9"],"resolved_at":"2026-11-06T02:46:25Z","dns_checked_at":"2026-11-06T03:13:24.000Z","dns_since":"2026-11-06T03:13:24.000Z","findings":[{"id":"fyrdm625kzs2y2v4yi6m3","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-06T02:36:34.488Z","first_published":"2026-11-06T03:05:02.297Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/blog.cocsantacatarina.com.br/"}],"url":"https://domainspoof.com/live?show=all&q=blog.cocsantacatarina.com.br"},{"hostname":"blog.limewire.com","first_observed":"2026-11-06T01:51:52.918Z","first_published":"2026-11-06T03:05:02.297Z","brands":[],"dns":"resolved","resolved":["140.248.139.7"],"resolved_at":"2026-11-06T01:55:37Z","dns_checked_at":"2026-11-06T03:13:24.000Z","dns_since":"2026-11-06T03:13:24.000Z","findings":[{"id":"fmyb6somsn3cg5cyoxn5b","kind":"reported_domain","summary":"Under limewire.com, reported by PhishDestroy","first_observed":"2026-11-06T01:51:52.918Z","first_published":"2026-11-06T03:05:02.297Z","source":"phishdestroy","source_name":"PhishDestroy","under":"limewire.com","source_url":"https://phishdestroy.io/domain/limewire.com/"}],"url":"https://domainspoof.com/live?show=all&q=blog.limewire.com"},{"hostname":"bookinggreenwoodkemerresort.sherwoodhotels.com.tr","first_observed":"2026-11-06T02:36:34.488Z","first_published":"2026-11-06T03:05:02.297Z","brands":[],"dns":"resolved","resolved":["216.150.1.193","216.150.16.193"],"resolved_at":"2026-11-06T02:46:25Z","dns_checked_at":"2026-11-06T03:13:24.000Z","dns_since":"2026-11-06T03:13:24.000Z","findings":[{"id":"ftakgry7lnteuxumtremn","kind":"reported_domain","summary":"Under sherwoodhotels.com.tr, reported by PhishDestroy","first_observed":"2026-11-06T02:36:34.488Z","first_published":"2026-11-06T03:05:02.297Z","source":"phishdestroy","source_name":"PhishDestroy","under":"sherwoodhotels.com.tr","source_url":"https://phishdestroy.io/domain/sherwoodhotels.com.tr/"}],"url":"https://domainspoof.com/live?show=all&q=bookinggreenwoodkemerresort.sherwoodhotels.com.tr"},{"hostname":"bsc-collab.land","first_observed":"2026-11-06T02:26:20.460Z","first_published":"2026-11-06T03:05:02.297Z","brands":[],"dns":"resolved","resolved":["104.21.79.248","172.67.150.84"],"resolved_at":"2026-11-06T02:26:26Z","dns_checked_at":"2026-11-06T03:13:24.000Z","dns_since":"2026-11-06T03:13:24.000Z","findings":[{"id":"fddttgcvydmpnc3df3nam","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-06T02:26:20.460Z","first_published":"2026-11-06T03:05:02.297Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/bsc-collab.land/"}],"url":"https://domainspoof.com/live?show=all&q=bsc-collab.land"},{"hostname":"btzyw.cc","first_observed":"2026-11-06T02:16:06.818Z","first_published":"2026-11-06T03:05:02.297Z","brands":[],"dns":"no_address","resolved":[],"resolved_at":"2026-11-06T02:25:55Z","dns_checked_at":"2026-11-06T11:19:31.000Z","findings":[{"id":"fpivkeb57wwckpwk75uq7","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-06T02:16:06.818Z","first_published":"2026-11-06T03:05:02.297Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=btzyw.cc"},{"hostname":"callninja.co","first_observed":"2026-11-06T02:26:20.460Z","first_published":"2026-11-06T03:05:02.297Z","brands":[],"dns":"resolved","resolved":["199.16.172.121","199.16.173.9"],"resolved_at":"2026-11-06T02:26:31Z","dns_checked_at":"2026-11-06T03:13:24.000Z","dns_since":"2026-11-06T03:13:24.000Z","findings":[{"id":"fnmjj4esc4sggrhv7uapq","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-06T02:26:20.460Z","first_published":"2026-11-06T03:05:02.297Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/callninja.co/"}],"url":"https://domainspoof.com/live?show=all&q=callninja.co"},{"hostname":"chainlink.pro","first_observed":"2026-11-06T02:31:27.551Z","first_published":"2026-11-06T03:05:02.297Z","brands":[],"dns":"resolved","resolved":["104.21.23.192","172.67.212.237"],"resolved_at":"2026-11-06T02:31:54Z","dns_checked_at":"2026-11-06T03:13:24.000Z","dns_since":"2026-11-06T03:13:24.000Z","findings":[{"id":"fxu4pzj7i337dlufegvqp","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-06T02:31:27.551Z","first_published":"2026-11-06T03:05:02.297Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=chainlink.pro"},{"hostname":"claimvaluechorewardsai.sbs","first_observed":"2026-11-06T02:51:51.677Z","first_published":"2026-11-06T03:05:02.297Z","brands":[],"dns":"resolved","resolved":["104.21.51.58","172.67.221.170"],"resolved_at":"2026-11-06T02:51:58Z","dns_checked_at":"2026-11-06T03:13:24.000Z","dns_since":"2026-11-06T03:13:24.000Z","findings":[{"id":"fx5qdyvjfapjia434yfok","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-06T02:51:51.677Z","first_published":"2026-11-06T03:05:02.297Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/claimvaluechorewardsai.sbs/"}],"url":"https://domainspoof.com/live?show=all&q=claimvaluechorewardsai.sbs"},{"hostname":"cleanmy-mac.torrentmac.net","first_observed":"2026-11-06T02:05:41.321Z","first_published":"2026-11-06T03:05:02.297Z","brands":[],"dns":"resolved","resolved":["104.21.57.62","172.67.189.93"],"resolved_at":"2026-11-06T02:06:54Z","dns_checked_at":"2026-11-06T03:13:24.000Z","dns_since":"2026-11-06T03:13:24.000Z","findings":[{"id":"f65zpgv7tb6jko3rbutbo","kind":"reported_domain","summary":"Under torrentmac.net, reported by PhishDestroy","first_observed":"2026-11-06T02:05:41.321Z","first_published":"2026-11-06T03:05:02.297Z","source":"phishdestroy","source_name":"PhishDestroy","under":"torrentmac.net","source_url":"https://phishdestroy.io/domain/torrentmac.net/"}],"url":"https://domainspoof.com/live?show=all&q=cleanmy-mac.torrentmac.net"},{"hostname":"cloud.ni-electrical.com","first_observed":"2026-11-06T02:05:41.321Z","first_published":"2026-11-06T03:05:02.297Z","brands":[],"dns":"resolved","resolved":["109.238.86.5"],"resolved_at":"2026-11-06T02:06:54Z","dns_checked_at":"2026-11-06T03:13:24.000Z","dns_since":"2026-11-06T03:13:24.000Z","findings":[{"id":"fbmadggv2l23rixdvdtvk","kind":"reported_domain","summary":"Under ni-electrical.com, listed by CERT Polska","first_observed":"2026-11-06T02:05:41.321Z","first_published":"2026-11-06T03:05:02.297Z","source":"cert_polska","source_name":"CERT Polska","under":"ni-electrical.com"}],"url":"https://domainspoof.com/live?show=all&q=cloud.ni-electrical.com"},{"hostname":"cobaipay.com","first_observed":"2026-11-06T02:26:20.460Z","first_published":"2026-11-06T03:05:02.297Z","brands":[],"dns":"resolved","resolved":["65.98.127.26"],"resolved_at":"2026-11-06T02:26:31Z","dns_checked_at":"2026-11-06T03:13:24.000Z","dns_since":"2026-11-06T03:13:24.000Z","findings":[{"id":"fnq7kxnqojilhbfuq66qg","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-06T02:26:20.460Z","first_published":"2026-11-06T03:05:02.297Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/cobaipay.com/"}],"url":"https://domainspoof.com/live?show=all&q=cobaipay.com"},{"hostname":"conta.cc","first_observed":"2026-11-06T02:16:06.818Z","first_published":"2026-11-06T03:05:02.297Z","brands":[{"id":"hsbc","name":"HSBC","url":"https://domainspoof.com/brands/hsbc"}],"dns":"resolved","resolved":["67.199.248.12","67.199.248.13"],"resolved_at":"2026-11-06T02:26:10Z","dns_checked_at":"2026-11-06T03:13:24.000Z","dns_since":"2026-11-06T03:13:24.000Z","findings":[{"id":"f52fqglc3azxweymuiigz","kind":"reported_domain","summary":"Reported by PhishTank as imitating HSBC Group","first_observed":"2026-11-06T02:16:06.818Z","first_published":"2026-11-06T03:05:02.297Z","source":"phishtank","source_name":"PhishTank","claim":{"brand":"HSBC Group"},"source_url":"https://phishtank.org/phish_detail.php?phish_id=8943021"}],"url":"https://domainspoof.com/brands/hsbc"},{"hostname":"cpanel.speedwaycourierservice.com","first_observed":"2026-11-06T02:46:46.295Z","first_published":"2026-11-06T03:05:02.297Z","brands":[],"dns":"resolved","resolved":["104.21.66.145","172.67.205.48"],"resolved_at":"2026-11-06T02:55:43Z","dns_checked_at":"2026-11-06T03:13:24.000Z","dns_since":"2026-11-06T03:13:24.000Z","findings":[{"id":"fsmea7vgs75peiyjwizyy","kind":"reported_domain","summary":"Under speedwaycourierservice.com, reported by PhishDestroy","first_observed":"2026-11-06T02:46:46.295Z","first_published":"2026-11-06T03:05:02.297Z","source":"phishdestroy","source_name":"PhishDestroy","under":"speedwaycourierservice.com","source_url":"https://phishdestroy.io/domain/speedwaycourierservice.com/"}],"url":"https://domainspoof.com/live?show=all&q=cpanel.speedwaycourierservice.com"},{"hostname":"cpanel.ubicar.club","first_observed":"2026-11-06T02:11:00.434Z","first_published":"2026-11-06T03:05:02.297Z","brands":[],"dns":"resolved","resolved":["65.181.116.252"],"resolved_at":"2026-11-06T02:13:37Z","dns_checked_at":"2026-11-06T03:13:24.000Z","dns_since":"2026-11-06T03:13:24.000Z","findings":[{"id":"fwusnyyekcsyncp3lh6zx","kind":"reported_domain","summary":"Under ubicar.club, reported by PhishDestroy","first_observed":"2026-11-06T02:11:00.434Z","first_published":"2026-11-06T03:05:02.297Z","source":"phishdestroy","source_name":"PhishDestroy","under":"ubicar.club","source_url":"https://phishdestroy.io/domain/ubicar.club/"}],"url":"https://domainspoof.com/live?show=all&q=cpanel.ubicar.club"},{"hostname":"cpcalendars.speedwaycourierservice.com","first_observed":"2026-11-06T02:46:46.295Z","first_published":"2026-11-06T03:05:02.297Z","brands":[],"dns":"resolved","resolved":["104.21.66.145","172.67.205.48"],"resolved_at":"2026-11-06T02:55:43Z","dns_checked_at":"2026-11-06T03:13:24.000Z","dns_since":"2026-11-06T03:13:24.000Z","findings":[{"id":"ftgfyj6qkot4tgkedgj7q","kind":"reported_domain","summary":"Under speedwaycourierservice.com, reported by PhishDestroy","first_observed":"2026-11-06T02:46:46.295Z","first_published":"2026-11-06T03:05:02.297Z","source":"phishdestroy","source_name":"PhishDestroy","under":"speedwaycourierservice.com","source_url":"https://phishdestroy.io/domain/speedwaycourierservice.com/"}],"url":"https://domainspoof.com/live?show=all&q=cpcalendars.speedwaycourierservice.com"},{"hostname":"cpcalendars.ubicar.club","first_observed":"2026-11-06T02:11:00.434Z","first_published":"2026-11-06T03:05:02.297Z","brands":[],"dns":"resolved","resolved":["65.181.116.252"],"resolved_at":"2026-11-06T02:13:37Z","dns_checked_at":"2026-11-06T03:13:24.000Z","dns_since":"2026-11-06T03:13:24.000Z","findings":[{"id":"fn7cfwis6g3ow4ccszcuz","kind":"reported_domain","summary":"Under ubicar.club, reported by PhishDestroy","first_observed":"2026-11-06T02:11:00.434Z","first_published":"2026-11-06T03:05:02.297Z","source":"phishdestroy","source_name":"PhishDestroy","under":"ubicar.club","source_url":"https://phishdestroy.io/domain/ubicar.club/"}],"url":"https://domainspoof.com/live?show=all&q=cpcalendars.ubicar.club"},{"hostname":"cpcontacts.speedwaycourierservice.com","first_observed":"2026-11-06T02:46:46.295Z","first_published":"2026-11-06T03:05:02.297Z","brands":[],"dns":"resolved","resolved":["104.21.66.145","172.67.205.48"],"resolved_at":"2026-11-06T02:55:43Z","dns_checked_at":"2026-11-06T03:13:24.000Z","dns_since":"2026-11-06T03:13:24.000Z","findings":[{"id":"fb4otx3cx3lag65rjhgpw","kind":"reported_domain","summary":"Under speedwaycourierservice.com, reported by PhishDestroy","first_observed":"2026-11-06T02:46:46.295Z","first_published":"2026-11-06T03:05:02.297Z","source":"phishdestroy","source_name":"PhishDestroy","under":"speedwaycourierservice.com","source_url":"https://phishdestroy.io/domain/speedwaycourierservice.com/"}],"url":"https://domainspoof.com/live?show=all&q=cpcontacts.speedwaycourierservice.com"},{"hostname":"cpcontacts.ubicar.club","first_observed":"2026-11-06T02:11:00.434Z","first_published":"2026-11-06T03:05:02.297Z","brands":[],"dns":"resolved","resolved":["65.181.116.252"],"resolved_at":"2026-11-06T02:13:37Z","dns_checked_at":"2026-11-06T03:13:24.000Z","dns_since":"2026-11-06T03:13:24.000Z","findings":[{"id":"fh75lqq5ajxtz2o4kgv65","kind":"reported_domain","summary":"Under ubicar.club, reported by PhishDestroy","first_observed":"2026-11-06T02:11:00.434Z","first_published":"2026-11-06T03:05:02.297Z","source":"phishdestroy","source_name":"PhishDestroy","under":"ubicar.club","source_url":"https://phishdestroy.io/domain/ubicar.club/"}],"url":"https://domainspoof.com/live?show=all&q=cpcontacts.ubicar.club"},{"hostname":"crypnovusai-de.live","first_observed":"2026-11-06T02:31:27.551Z","first_published":"2026-11-06T03:05:02.297Z","brands":[],"dns":"resolved","resolved":["104.21.13.209","172.67.133.28"],"resolved_at":"2026-11-06T02:31:57Z","dns_checked_at":"2026-11-06T03:13:24.000Z","dns_since":"2026-11-06T03:13:24.000Z","findings":[{"id":"fz6zdez4r4jx2ew4t7jb5","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-06T02:31:27.551Z","first_published":"2026-11-06T03:05:02.297Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=crypnovusai-de.live"},{"hostname":"datelovegerr.com","first_observed":"2026-11-06T02:16:06.818Z","first_published":"2026-11-06T03:05:02.297Z","brands":[],"dns":"resolved","resolved":["68.178.175.176"],"resolved_at":"2026-11-06T02:26:23Z","dns_checked_at":"2026-11-06T03:13:24.000Z","dns_since":"2026-11-06T03:13:24.000Z","findings":[{"id":"fgllrjv5yabwfcprsophy","kind":"reported_domain","summary":"Listed by NPA 165 (finance and insurance)","first_observed":"2026-11-06T02:16:06.818Z","first_published":"2026-11-06T03:05:02.297Z","source":"npa","source_name":"NPA 165","claim":{"category":"finance and insurance"}}],"url":"https://domainspoof.com/live?show=all&q=datelovegerr.com"},{"hostname":"dateloveggerr.com","first_observed":"2026-11-06T02:16:06.818Z","first_published":"2026-11-06T03:05:02.297Z","brands":[],"dns":"resolved","resolved":["68.178.175.176"],"resolved_at":"2026-11-06T02:26:23Z","dns_checked_at":"2026-11-06T03:13:24.000Z","dns_since":"2026-11-06T03:13:24.000Z","findings":[{"id":"f5qcjs6a3caocgecxaytk","kind":"reported_domain","summary":"Listed by NPA 165 (finance and insurance)","first_observed":"2026-11-06T02:16:06.818Z","first_published":"2026-11-06T03:05:02.297Z","source":"npa","source_name":"NPA 165","claim":{"category":"finance and insurance"}}],"url":"https://domainspoof.com/live?show=all&q=dateloveggerr.com"},{"hostname":"deeplink-ledger.com","first_observed":"2026-11-06T02:26:20.460Z","first_published":"2026-11-06T03:05:02.297Z","brands":[],"dns":"resolved","resolved":["104.21.62.38","172.67.219.241"],"resolved_at":"2026-11-06T02:37:01Z","dns_checked_at":"2026-11-06T03:13:24.000Z","dns_since":"2026-11-06T03:13:24.000Z","findings":[{"id":"f3riwbbxrjbneng7wg5wd","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-06T02:26:20.460Z","first_published":"2026-11-06T03:05:02.297Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=deeplink-ledger.com"},{"hostname":"dev.gate.patiobydesign.com","first_observed":"2026-11-06T02:31:27.551Z","first_published":"2026-11-06T03:05:02.297Z","brands":[],"dns":"resolved","resolved":["185.149.120.183"],"resolved_at":"2026-11-06T02:31:57Z","dns_checked_at":"2026-11-06T03:13:24.000Z","dns_since":"2026-11-06T03:13:24.000Z","findings":[{"id":"fclpt6ejpkiv3346qu4es","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-06T02:31:27.551Z","first_published":"2026-11-06T03:05:02.297Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/dev.gate.patiobydesign.com/"}],"url":"https://domainspoof.com/live?show=all&q=dev.gate.patiobydesign.com"},{"hostname":"device-auth.com","first_observed":"2026-11-06T02:11:00.434Z","first_published":"2026-11-06T03:05:02.297Z","brands":[],"dns":"no_address","resolved":[],"resolved_at":"2026-11-06T02:13:40Z","dns_checked_at":"2026-11-06T11:19:31.000Z","findings":[{"id":"flgq3ocxc5iyq35shxf3g","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-06T02:11:00.434Z","first_published":"2026-11-06T03:05:02.297Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=device-auth.com"},{"hostname":"directus.zenavlico.cyou","first_observed":"2026-11-06T02:41:40.421Z","first_published":"2026-11-06T03:05:02.297Z","brands":[],"dns":"resolved","resolved":["95.85.244.13"],"resolved_at":"2026-11-06T02:41:54Z","dns_checked_at":"2026-11-06T03:13:24.000Z","dns_since":"2026-11-06T03:13:24.000Z","findings":[{"id":"f62ahhpdbx2foclwfks6y","kind":"reported_domain","summary":"Under zenavlico.cyou, listed by CERT Polska","first_observed":"2026-11-06T02:41:40.421Z","first_published":"2026-11-06T03:05:02.297Z","source":"cert_polska","source_name":"CERT Polska","under":"zenavlico.cyou"}],"url":"https://domainspoof.com/live?show=all&q=directus.zenavlico.cyou"},{"hostname":"distributions-ethfi.xyz","first_observed":"2026-11-06T02:11:00.434Z","first_published":"2026-11-06T03:05:02.297Z","brands":[{"id":"ether-fi","name":"ether.fi","url":"https://domainspoof.com/brands/ether-fi"}],"dns":"resolved","resolved":["104.21.15.247","172.67.165.87","2606:4700:3031::ac43:a557","2606:4700:3032::6815:ff7"],"resolved_at":"2026-11-06T02:13:40Z","dns_checked_at":"2026-11-06T03:13:24.000Z","dns_since":"2026-11-06T03:13:24.000Z","findings":[{"id":"fe57zmmu4es6bwqyl2ht7","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-06T02:11:00.434Z","first_published":"2026-11-06T03:05:02.297Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/brands/ether-fi"},{"hostname":"dnksioex.cc","first_observed":"2026-11-06T02:56:56.961Z","first_published":"2026-11-06T03:05:02.297Z","brands":[],"dns":"resolved","resolved":["117.72.200.45"],"resolved_at":"2026-11-06T03:05:45Z","dns_checked_at":"2026-11-06T03:13:24.000Z","dns_since":"2026-11-06T03:13:24.000Z","findings":[{"id":"fguiozcgfc5czqav25ggu","kind":"reported_domain","summary":"Listed by NPA 165 (finance and insurance)","first_observed":"2026-11-06T02:56:56.961Z","first_published":"2026-11-06T03:05:02.297Z","source":"npa","source_name":"NPA 165","claim":{"category":"finance and insurance"}}],"url":"https://domainspoof.com/live?show=all&q=dnksioex.cc"},{"hostname":"docs.socialvisor.ru","first_observed":"2026-11-06T02:21:13.588Z","first_published":"2026-11-06T03:05:02.297Z","brands":[],"dns":"resolved","resolved":["91.215.41.91"],"resolved_at":"2026-11-06T02:34:04Z","dns_checked_at":"2026-11-06T03:13:24.000Z","dns_since":"2026-11-06T03:13:24.000Z","findings":[{"id":"ft4exqa5y57isighizyoh","kind":"reported_domain","summary":"Under socialvisor.ru, reported by PhishDestroy","first_observed":"2026-11-06T02:21:13.588Z","first_published":"2026-11-06T03:05:02.297Z","source":"phishdestroy","source_name":"PhishDestroy","under":"socialvisor.ru","source_url":"https://phishdestroy.io/domain/socialvisor.ru/"}],"url":"https://domainspoof.com/live?show=all&q=docs.socialvisor.ru"},{"hostname":"downedby.io","first_observed":"2026-11-06T02:36:34.488Z","first_published":"2026-11-06T03:05:02.297Z","brands":[],"dns":"resolved","resolved":["104.21.38.13","172.67.216.205"],"resolved_at":"2026-11-06T02:46:55Z","dns_checked_at":"2026-11-06T03:13:24.000Z","dns_since":"2026-11-06T03:13:24.000Z","findings":[{"id":"fnort3wewucv6gz36orh6","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-06T02:36:34.488Z","first_published":"2026-11-06T03:05:02.297Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/downedby.io/"}],"url":"https://domainspoof.com/live?show=all&q=downedby.io"},{"hostname":"download-huobi.com.cn","first_observed":"2026-11-06T02:21:13.588Z","first_published":"2026-11-06T03:05:02.297Z","brands":[],"dns":"resolved","resolved":["104.21.44.173","172.67.201.155"],"resolved_at":"2026-11-06T02:34:04Z","dns_checked_at":"2026-11-06T03:13:24.000Z","dns_since":"2026-11-06T03:13:24.000Z","findings":[{"id":"fcdchkh26xkw2pbwvww4x","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-06T02:21:13.588Z","first_published":"2026-11-06T03:05:02.297Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=download-huobi.com.cn"},{"hostname":"dupape.com","first_observed":"2026-11-06T02:11:00.434Z","first_published":"2026-11-06T03:05:02.297Z","brands":[],"dns":"resolved","resolved":["13.223.25.84","54.243.117.197"],"resolved_at":"2026-11-06T02:13:40Z","dns_checked_at":"2026-11-06T03:13:24.000Z","dns_since":"2026-11-06T03:13:24.000Z","findings":[{"id":"fyxy3jlprggsfhxqtzds7","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-06T02:11:00.434Z","first_published":"2026-11-06T03:05:02.297Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/dupape.com/"}],"url":"https://domainspoof.com/live?show=all&q=dupape.com"},{"hostname":"eligibility-virtuals.info","first_observed":"2026-11-06T02:31:27.551Z","first_published":"2026-11-06T03:05:02.297Z","brands":[{"id":"virtuals-protocol","name":"Virtuals Protocol","url":"https://domainspoof.com/brands/virtuals-protocol"}],"dns":"resolved","resolved":["104.21.44.114","172.67.199.69"],"resolved_at":"2026-11-06T02:31:57Z","dns_checked_at":"2026-11-06T03:13:24.000Z","dns_since":"2026-11-06T03:13:24.000Z","findings":[{"id":"fo3pxkwuc5uezdzd2ank6","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-06T02:31:27.551Z","first_published":"2026-11-06T03:05:02.297Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/brands/virtuals-protocol"},{"hostname":"eoptiontrade.com","first_observed":"2026-11-06T02:56:56.961Z","first_published":"2026-11-06T03:05:02.297Z","brands":[],"dns":"resolved","resolved":["198.251.89.82"],"resolved_at":"2026-11-06T03:05:47Z","dns_checked_at":"2026-11-06T03:13:24.000Z","dns_since":"2026-11-06T03:13:24.000Z","findings":[{"id":"f576f2mjgpeufbmwq3ou5","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-06T02:56:56.961Z","first_published":"2026-11-06T03:05:02.297Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/eoptiontrade.com/"}],"url":"https://domainspoof.com/live?show=all&q=eoptiontrade.com"},{"hostname":"eu-hltv.com","first_observed":"2026-11-06T01:46:45.159Z","first_published":"2026-11-06T03:05:02.297Z","brands":[],"dns":"resolved","resolved":["163.245.41.169"],"resolved_at":"2026-11-06T01:50:22Z","dns_checked_at":"2026-11-06T03:13:24.000Z","dns_since":"2026-11-06T03:13:24.000Z","findings":[{"id":"ft7ngrc2kptfdegqkleb6","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-06T01:46:45.159Z","first_published":"2026-11-06T03:05:02.297Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/eu-hltv.com/"}],"url":"https://domainspoof.com/live?show=all&q=eu-hltv.com"},{"hostname":"exchange.zenavlico.cyou","first_observed":"2026-11-06T02:00:35.712Z","first_published":"2026-11-06T03:05:02.297Z","brands":[],"dns":"resolved","resolved":["95.85.244.13"],"resolved_at":"2026-11-06T02:03:47Z","dns_checked_at":"2026-11-06T03:13:24.000Z","dns_since":"2026-11-06T03:13:24.000Z","findings":[{"id":"fbjwa4sch6qp42omnwxyf","kind":"reported_domain","summary":"Under zenavlico.cyou, listed by CERT Polska","first_observed":"2026-11-06T02:00:35.712Z","first_published":"2026-11-06T03:05:02.297Z","source":"cert_polska","source_name":"CERT Polska","under":"zenavlico.cyou"}],"url":"https://domainspoof.com/live?show=all&q=exchange.zenavlico.cyou"},{"hostname":"extensipn-trust-wallet-com.pages.dev","first_observed":"2026-11-06T02:00:35.712Z","first_published":"2026-11-06T03:05:02.297Z","brands":[{"id":"trust-wallet","name":"Trust Wallet","url":"https://domainspoof.com/brands/trust-wallet"}],"dns":"resolved","resolved":["172.66.44.229","172.66.47.27","2606:4700:310c::ac42:2ce5","2606:4700:310c::ac42:2f1b"],"resolved_at":"2026-11-06T02:03:47Z","dns_checked_at":"2026-11-06T03:13:24.000Z","dns_since":"2026-11-06T03:13:24.000Z","findings":[{"id":"foctz2jzudqidcn3h6tzt","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-06T02:00:35.712Z","first_published":"2026-11-06T03:05:02.297Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/brands/trust-wallet"},{"hostname":"forthstack.com","first_observed":"2026-11-06T02:00:35.712Z","first_published":"2026-11-06T03:05:02.297Z","brands":[],"dns":"resolved","resolved":["216.198.79.1"],"resolved_at":"2026-11-06T02:03:48Z","dns_checked_at":"2026-11-06T03:13:24.000Z","dns_since":"2026-11-06T03:13:24.000Z","findings":[{"id":"fktgcou6s4dhdwel7xwpb","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-06T02:00:35.712Z","first_published":"2026-11-06T03:05:02.297Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/forthstack.com/"}],"url":"https://domainspoof.com/live?show=all&q=forthstack.com"},{"hostname":"ftp.eoptiontrade.com","first_observed":"2026-11-06T02:56:56.961Z","first_published":"2026-11-06T03:05:02.297Z","brands":[],"dns":"resolved","resolved":["198.251.89.82"],"resolved_at":"2026-11-06T03:05:51Z","dns_checked_at":"2026-11-06T03:13:24.000Z","dns_since":"2026-11-06T03:13:24.000Z","findings":[{"id":"fybwi7445aqy47tflof5k","kind":"reported_domain","summary":"Under eoptiontrade.com, reported by PhishDestroy","first_observed":"2026-11-06T02:56:56.961Z","first_published":"2026-11-06T03:05:02.297Z","source":"phishdestroy","source_name":"PhishDestroy","under":"eoptiontrade.com","source_url":"https://phishdestroy.io/domain/eoptiontrade.com/"}],"url":"https://domainspoof.com/live?show=all&q=ftp.eoptiontrade.com"},{"hostname":"ftp.merritoncapital.com","first_observed":"2026-11-06T02:56:56.961Z","first_published":"2026-11-06T03:05:02.297Z","brands":[],"dns":"resolved","resolved":["198.251.81.14"],"resolved_at":"2026-11-06T03:05:51Z","dns_checked_at":"2026-11-06T03:13:24.000Z","dns_since":"2026-11-06T03:13:24.000Z","findings":[{"id":"fkctybvspnz75zyf6kyrc","kind":"reported_domain","summary":"Under merritoncapital.com, reported by PhishDestroy","first_observed":"2026-11-06T02:56:56.961Z","first_published":"2026-11-06T03:05:02.297Z","source":"phishdestroy","source_name":"PhishDestroy","under":"merritoncapital.com","source_url":"https://phishdestroy.io/domain/merritoncapital.com/"}],"url":"https://domainspoof.com/live?show=all&q=ftp.merritoncapital.com"},{"hostname":"gain-xrpl.live","first_observed":"2026-11-06T02:46:46.295Z","first_published":"2026-11-06T03:05:02.297Z","brands":[{"id":"ripple","name":"Ripple (XRP)","url":"https://domainspoof.com/brands/ripple"}],"dns":"resolved","resolved":["104.21.2.226","172.67.129.195"],"resolved_at":"2026-11-06T02:55:50Z","dns_checked_at":"2026-11-06T03:13:24.000Z","dns_since":"2026-11-06T03:13:24.000Z","findings":[{"id":"flipvjvrsvnxv5kta2cof","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-06T02:46:46.295Z","first_published":"2026-11-06T03:05:02.297Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/brands/ripple"},{"hostname":"gift-boosteth.com","first_observed":"2026-11-06T02:11:00.434Z","first_published":"2026-11-06T03:05:02.297Z","brands":[],"dns":"resolved","resolved":["104.21.81.122","172.67.161.26"],"resolved_at":"2026-11-06T02:13:43Z","dns_checked_at":"2026-11-06T03:13:24.000Z","dns_since":"2026-11-06T03:13:24.000Z","findings":[{"id":"fr7v5avdnbpy2h7rsbaud","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-06T02:11:00.434Z","first_published":"2026-11-06T03:05:02.297Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/gift-boosteth.com/"}],"url":"https://domainspoof.com/live?show=all&q=gift-boosteth.com"},{"hostname":"graylog.socialvisor.ru","first_observed":"2026-11-06T02:21:13.588Z","first_published":"2026-11-06T03:05:02.297Z","brands":[],"dns":"resolved","resolved":["91.215.41.91"],"resolved_at":"2026-11-06T02:34:07Z","dns_checked_at":"2026-11-06T03:13:24.000Z","dns_since":"2026-11-06T03:13:24.000Z","findings":[{"id":"fkyukamlcaxdlbhlfclcg","kind":"reported_domain","summary":"Under socialvisor.ru, reported by PhishDestroy","first_observed":"2026-11-06T02:21:13.588Z","first_published":"2026-11-06T03:05:02.297Z","source":"phishdestroy","source_name":"PhishDestroy","under":"socialvisor.ru","source_url":"https://phishdestroy.io/domain/socialvisor.ru/"}],"url":"https://domainspoof.com/live?show=all&q=graylog.socialvisor.ru"},{"hostname":"greattabsonline.com","first_observed":"2026-11-06T02:05:41.321Z","first_published":"2026-11-06T03:05:02.297Z","brands":[],"dns":"resolved","resolved":["85.121.149.76"],"resolved_at":"2026-11-06T02:07:06Z","dns_checked_at":"2026-11-06T03:13:24.000Z","dns_since":"2026-11-06T03:13:24.000Z","findings":[{"id":"fef6jfkfqx2b7gplfpg2k","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-06T02:05:41.321Z","first_published":"2026-11-06T03:05:02.297Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/greattabsonline.com/"}],"url":"https://domainspoof.com/live?show=all&q=greattabsonline.com"},{"hostname":"gsffm.asia","first_observed":"2026-11-06T02:00:35.712Z","first_published":"2026-11-06T03:05:02.297Z","brands":[],"dns":"resolved","resolved":["104.21.5.167","172.67.133.164"],"resolved_at":"2026-11-06T02:03:48Z","dns_checked_at":"2026-11-06T03:13:24.000Z","dns_since":"2026-11-06T03:13:24.000Z","findings":[{"id":"fob6ylyqglxxr5e4hf22u","kind":"reported_domain","summary":"Listed by NPA 165 (information services)","first_observed":"2026-11-06T02:00:35.712Z","first_published":"2026-11-06T03:05:02.297Z","source":"npa","source_name":"NPA 165","claim":{"category":"information services"}}],"url":"https://domainspoof.com/live?show=all&q=gsffm.asia"},{"hostname":"gsifv.asia","first_observed":"2026-11-06T02:41:40.421Z","first_published":"2026-11-06T03:05:02.297Z","brands":[],"dns":"resolved","resolved":["104.21.88.188","172.67.152.45"],"resolved_at":"2026-11-06T02:41:54Z","dns_checked_at":"2026-11-06T03:13:24.000Z","dns_since":"2026-11-06T03:13:24.000Z","findings":[{"id":"fk5yth4safysredkpleut","kind":"reported_domain","summary":"Listed by NPA 165 (e-commerce)","first_observed":"2026-11-06T02:41:40.421Z","first_published":"2026-11-06T03:05:02.297Z","source":"npa","source_name":"NPA 165","claim":{"category":"e-commerce"}}],"url":"https://domainspoof.com/live?show=all&q=gsifv.asia"},{"hostname":"h5-binance.com.cn","first_observed":"2026-11-06T02:11:00.434Z","first_published":"2026-11-06T03:05:02.297Z","brands":[{"id":"binance","name":"Binance","url":"https://domainspoof.com/brands/binance"}],"dns":"resolved","resolved":["104.21.70.20","172.67.217.239","2606:4700:3030::ac43:d9ef","2606:4700:3036::6815:4614"],"resolved_at":"2026-11-06T02:13:44Z","dns_checked_at":"2026-11-06T03:13:24.000Z","dns_since":"2026-11-06T03:13:24.000Z","findings":[{"id":"fhzu353tweovbjp5pepbk","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-06T02:11:00.434Z","first_published":"2026-11-06T03:05:02.297Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/brands/binance"},{"hostname":"helpdesk.itsc-tx.com","first_observed":"2026-11-06T01:46:45.159Z","first_published":"2026-11-06T03:05:02.297Z","brands":[],"dns":"resolved","resolved":["18.154.84.23","18.154.84.37","18.154.84.44","18.154.84.89"],"resolved_at":"2026-11-06T01:50:23Z","dns_checked_at":"2026-11-06T03:13:24.000Z","dns_since":"2026-11-06T03:13:24.000Z","findings":[{"id":"f3aebfuwk2lfjeigir2to","kind":"reported_domain","summary":"Under itsc-tx.com, reported by PhishDestroy","first_observed":"2026-11-06T01:46:45.159Z","first_published":"2026-11-06T03:05:02.297Z","source":"phishdestroy","source_name":"PhishDestroy","under":"itsc-tx.com","source_url":"https://phishdestroy.io/domain/itsc-tx.com/"}],"url":"https://domainspoof.com/live?show=all&q=helpdesk.itsc-tx.com"},{"hostname":"hokkori-hyoutanjima.com","first_observed":"2026-11-06T02:05:41.321Z","first_published":"2026-11-06T03:05:02.297Z","brands":[],"dns":"resolved","resolved":["162.43.94.73"],"resolved_at":"2026-11-06T02:07:07Z","dns_checked_at":"2026-11-06T03:13:24.000Z","dns_since":"2026-11-06T03:13:24.000Z","findings":[{"id":"fllzxcg6gjx4gkfjtojte","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-06T02:05:41.321Z","first_published":"2026-11-06T03:05:02.297Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/hokkori-hyoutanjima.com/"}],"url":"https://domainspoof.com/live?show=all&q=hokkori-hyoutanjima.com"},{"hostname":"holiganbet8786.icu","first_observed":"2026-11-06T02:36:34.488Z","first_published":"2026-11-06T03:05:02.297Z","brands":[],"dns":"resolved","resolved":["104.21.67.233","172.67.182.125"],"resolved_at":"2026-11-06T02:46:58Z","dns_checked_at":"2026-11-06T03:13:24.000Z","dns_since":"2026-11-06T03:13:24.000Z","findings":[{"id":"ftr3lqn4bkjyiunchegi7","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-06T02:36:34.488Z","first_published":"2026-11-06T03:05:02.297Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/holiganbet8786.icu/"}],"url":"https://domainspoof.com/live?show=all&q=holiganbet8786.icu"},{"hostname":"horizontacapital.net","first_observed":"2026-11-06T02:05:41.321Z","first_published":"2026-11-06T03:05:02.297Z","brands":[],"dns":"resolved","resolved":["104.21.33.154","172.67.146.138"],"resolved_at":"2026-11-06T02:07:07Z","dns_checked_at":"2026-11-06T03:13:24.000Z","dns_since":"2026-11-06T03:13:24.000Z","findings":[{"id":"ffdkds2njnrdxedfyw57y","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-06T02:05:41.321Z","first_published":"2026-11-06T03:05:02.297Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=horizontacapital.net"},{"hostname":"icloudpro.de","first_observed":"2026-11-06T02:41:28.071Z","first_published":"2026-11-06T03:05:02.297Z","brands":[{"id":"apple","name":"Apple","url":"https://domainspoof.com/brands/apple"}],"dns":"resolved","resolved":["46.38.243.234"],"resolved_at":"2026-11-06T03:13:24Z","dns_checked_at":"2026-11-06T03:13:24.000Z","dns_since":"2026-11-06T03:13:24.000Z","findings":[{"id":"f3snkkvjbq2zmzskdgvfw","kind":"phishing_infrastructure","summary":"Resolved to 46.38.243.234, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T02:41:28.071Z","first_published":"2026-11-06T03:05:02.297Z","address":"46.38.243.234","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/apple"},{"hostname":"ikejadynamiclionsclub.org.ng","first_observed":"2026-11-06T02:11:00.434Z","first_published":"2026-11-06T03:05:02.297Z","brands":[],"dns":"resolved","resolved":["163.61.188.5"],"resolved_at":"2026-11-06T02:13:49Z","dns_checked_at":"2026-11-06T03:13:24.000Z","dns_since":"2026-11-06T03:13:24.000Z","findings":[{"id":"furklxb2cyvev6xcq4uko","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-06T02:11:00.434Z","first_published":"2026-11-06T03:05:02.297Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/ikejadynamiclionsclub.org.ng/"}],"url":"https://domainspoof.com/live?show=all&q=ikejadynamiclionsclub.org.ng"},{"hostname":"internal-api.socialvisor.ru","first_observed":"2026-11-06T02:21:13.588Z","first_published":"2026-11-06T03:05:02.297Z","brands":[],"dns":"resolved","resolved":["91.215.41.91"],"resolved_at":"2026-11-06T02:34:11Z","dns_checked_at":"2026-11-06T03:13:24.000Z","dns_since":"2026-11-06T03:13:24.000Z","findings":[{"id":"fqjcsaccaf3v5zvatl6wg","kind":"reported_domain","summary":"Under socialvisor.ru, reported by PhishDestroy","first_observed":"2026-11-06T02:21:13.588Z","first_published":"2026-11-06T03:05:02.297Z","source":"phishdestroy","source_name":"PhishDestroy","under":"socialvisor.ru","source_url":"https://phishdestroy.io/domain/socialvisor.ru/"}],"url":"https://domainspoof.com/live?show=all&q=internal-api.socialvisor.ru"},{"hostname":"io-crypto.net","first_observed":"2026-11-06T01:56:59.755Z","first_published":"2026-11-06T03:05:02.297Z","brands":[],"dns":"resolved","resolved":["104.21.60.115","172.67.196.33"],"resolved_at":"2026-11-06T02:00:54Z","dns_checked_at":"2026-11-06T03:13:24.000Z","dns_since":"2026-11-06T03:13:24.000Z","findings":[{"id":"fsakxnx25lyttmwqzw3bi","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-06T01:56:59.755Z","first_published":"2026-11-06T03:05:02.297Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=io-crypto.net"},{"hostname":"io-crypto.vip","first_observed":"2026-11-06T01:46:45.159Z","first_published":"2026-11-06T03:05:02.297Z","brands":[],"dns":"resolved","resolved":["104.21.58.198","172.67.207.58"],"resolved_at":"2026-11-06T01:50:25Z","dns_checked_at":"2026-11-06T03:13:24.000Z","dns_since":"2026-11-06T03:13:24.000Z","findings":[{"id":"fq57vevlkekaost6lht4i","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-06T01:46:45.159Z","first_published":"2026-11-06T03:05:02.297Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=io-crypto.vip"},{"hostname":"itaunasijqyk.biz","first_observed":"2026-11-06T02:51:51.677Z","first_published":"2026-11-06T03:05:02.297Z","brands":[],"dns":"resolved","resolved":["54.215.31.113"],"resolved_at":"2026-11-06T02:52:03Z","dns_checked_at":"2026-11-06T03:13:24.000Z","dns_since":"2026-11-06T03:13:24.000Z","findings":[{"id":"fbv2abmopjh6sg2vulf2c","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-06T02:51:51.677Z","first_published":"2026-11-06T03:05:02.297Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/itaunasijqyk.biz/"}],"url":"https://domainspoof.com/live?show=all&q=itaunasijqyk.biz"},{"hostname":"itaunenfe.info","first_observed":"2026-11-06T02:46:46.295Z","first_published":"2026-11-06T03:05:02.297Z","brands":[],"dns":"resolved","resolved":["54.215.31.113"],"resolved_at":"2026-11-06T02:55:56Z","dns_checked_at":"2026-11-06T03:13:24.000Z","dns_since":"2026-11-06T03:13:24.000Z","findings":[{"id":"ftxno7jsto5mqebgrsfo4","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-06T02:46:46.295Z","first_published":"2026-11-06T03:05:02.297Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/itaunenfe.info/"}],"url":"https://domainspoof.com/live?show=all&q=itaunenfe.info"},{"hostname":"jbwnt.asia","first_observed":"2026-11-06T02:36:34.488Z","first_published":"2026-11-06T03:05:02.297Z","brands":[],"dns":"resolved","resolved":["104.21.1.250","172.67.128.108"],"resolved_at":"2026-11-06T02:47:01Z","dns_checked_at":"2026-11-06T03:13:24.000Z","dns_since":"2026-11-06T03:13:24.000Z","findings":[{"id":"fum4dgkj5jka6fhbt73sv","kind":"reported_domain","summary":"Listed by NPA 165 (information services)","first_observed":"2026-11-06T02:36:34.488Z","first_published":"2026-11-06T03:05:02.297Z","source":"npa","source_name":"NPA 165","claim":{"category":"information services"}}],"url":"https://domainspoof.com/live?show=all&q=jbwnt.asia"},{"hostname":"kbvjscsivwkcd.com","first_observed":"2026-11-06T02:16:06.818Z","first_published":"2026-11-06T03:05:02.297Z","brands":[],"dns":"resolved","resolved":["68.178.175.176"],"resolved_at":"2026-11-06T02:26:31Z","dns_checked_at":"2026-11-06T03:13:24.000Z","dns_since":"2026-11-06T03:13:24.000Z","findings":[{"id":"f5tlo5o7foae4pect2ua7","kind":"reported_domain","summary":"Listed by NPA 165 (finance and insurance)","first_observed":"2026-11-06T02:16:06.818Z","first_published":"2026-11-06T03:05:02.297Z","source":"npa","source_name":"NPA 165","claim":{"category":"finance and insurance"}}],"url":"https://domainspoof.com/live?show=all&q=kbvjscsivwkcd.com"},{"hostname":"kxt.fund.llc","first_observed":"2026-11-06T02:31:27.551Z","first_published":"2026-11-06T03:05:02.297Z","brands":[],"dns":"resolved","resolved":["104.21.15.162","172.67.163.30"],"resolved_at":"2026-11-06T02:41:30Z","dns_checked_at":"2026-11-06T03:13:24.000Z","dns_since":"2026-11-06T03:13:24.000Z","findings":[{"id":"fdsbs4slvbbeqbim63p2d","kind":"reported_domain","summary":"Under fund.llc, listed by MetaMask","first_observed":"2026-11-06T02:31:27.551Z","first_published":"2026-11-06T03:05:02.297Z","source":"metamask","source_name":"MetaMask","under":"fund.llc"}],"url":"https://domainspoof.com/live?show=all&q=kxt.fund.llc"},{"hostname":"lanxbit.com","first_observed":"2026-11-06T02:21:13.588Z","first_published":"2026-11-06T03:05:02.297Z","brands":[],"dns":"resolved","resolved":["104.21.48.68","172.67.180.82"],"resolved_at":"2026-11-06T02:34:11Z","dns_checked_at":"2026-11-06T03:13:24.000Z","dns_since":"2026-11-06T03:13:24.000Z","findings":[{"id":"ftzoj3xvby5dl5so74w33","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-06T02:21:13.588Z","first_published":"2026-11-06T03:05:02.297Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/lanxbit.com/"}],"url":"https://domainspoof.com/live?show=all&q=lanxbit.com"},{"hostname":"ledger-web-live.pages.dev","first_observed":"2026-11-06T02:51:51.677Z","first_published":"2026-11-06T03:05:02.297Z","brands":[],"dns":"resolved","resolved":["172.66.44.91","172.66.47.165"],"resolved_at":"2026-11-06T02:52:04Z","dns_checked_at":"2026-11-06T03:13:24.000Z","dns_since":"2026-11-06T03:13:24.000Z","findings":[{"id":"fkt7kvbeiqvl67obzk3vy","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-06T02:51:51.677Z","first_published":"2026-11-06T03:05:02.297Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=ledger-web-live.pages.dev"},{"hostname":"ledgerlight.fromfabian.com","first_observed":"2026-11-06T02:31:27.551Z","first_published":"2026-11-06T03:05:02.297Z","brands":[],"dns":"resolved","resolved":["64.29.17.65","216.198.79.65"],"resolved_at":"2026-11-06T02:41:31Z","dns_checked_at":"2026-11-06T03:13:24.000Z","dns_since":"2026-11-06T03:13:24.000Z","findings":[{"id":"fteqyrvsik2rfvauiolrs","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-06T02:31:27.551Z","first_published":"2026-11-06T03:05:02.297Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/ledgerlight.fromfabian.com/"}],"url":"https://domainspoof.com/live?show=all&q=ledgerlight.fromfabian.com"},{"hostname":"legacy.socialvisor.ru","first_observed":"2026-11-06T02:21:13.588Z","first_published":"2026-11-06T03:05:02.297Z","brands":[],"dns":"resolved","resolved":["91.215.41.91"],"resolved_at":"2026-11-06T02:34:12Z","dns_checked_at":"2026-11-06T03:13:24.000Z","dns_since":"2026-11-06T03:13:24.000Z","findings":[{"id":"ffismdzlrclwky4dnjand","kind":"reported_domain","summary":"Under socialvisor.ru, reported by PhishDestroy","first_observed":"2026-11-06T02:21:13.588Z","first_published":"2026-11-06T03:05:02.297Z","source":"phishdestroy","source_name":"PhishDestroy","under":"socialvisor.ru","source_url":"https://phishdestroy.io/domain/socialvisor.ru/"}],"url":"https://domainspoof.com/live?show=all&q=legacy.socialvisor.ru"},{"hostname":"location.bluecollarservs.com","first_observed":"2026-11-06T02:05:41.321Z","first_published":"2026-11-06T03:05:02.297Z","brands":[],"dns":"resolved","resolved":["104.21.34.39","172.67.196.247"],"resolved_at":"2026-11-06T02:07:09Z","dns_checked_at":"2026-11-06T03:13:24.000Z","dns_since":"2026-11-06T03:13:24.000Z","findings":[{"id":"fov4a5fgrx3pnetewii33","kind":"reported_domain","summary":"Under bluecollarservs.com, reported by PhishDestroy","first_observed":"2026-11-06T02:05:41.321Z","first_published":"2026-11-06T03:05:02.297Z","source":"phishdestroy","source_name":"PhishDestroy","under":"bluecollarservs.com","source_url":"https://phishdestroy.io/domain/bluecollarservs.com/"}],"url":"https://domainspoof.com/live?show=all&q=location.bluecollarservs.com"},{"hostname":"lovedatinger.com","first_observed":"2026-11-06T02:16:06.818Z","first_published":"2026-11-06T03:05:02.297Z","brands":[],"dns":"resolved","resolved":["68.178.175.176"],"resolved_at":"2026-11-06T02:26:32Z","dns_checked_at":"2026-11-06T03:13:24.000Z","dns_since":"2026-11-06T03:13:24.000Z","findings":[{"id":"f7adaj6v4jzm5547kqjr2","kind":"reported_domain","summary":"Listed by NPA 165 (finance and insurance)","first_observed":"2026-11-06T02:16:06.818Z","first_published":"2026-11-06T03:05:02.297Z","source":"npa","source_name":"NPA 165","claim":{"category":"finance and insurance"}}],"url":"https://domainspoof.com/live?show=all&q=lovedatinger.com"},{"hostname":"lovedatnnger.com","first_observed":"2026-11-06T02:16:06.818Z","first_published":"2026-11-06T03:05:02.297Z","brands":[],"dns":"resolved","resolved":["68.178.175.176"],"resolved_at":"2026-11-06T02:26:32Z","dns_checked_at":"2026-11-06T03:13:24.000Z","dns_since":"2026-11-06T03:13:24.000Z","findings":[{"id":"f3pkc7kelw7bky4hfve3w","kind":"reported_domain","summary":"Listed by NPA 165 (finance and insurance)","first_observed":"2026-11-06T02:16:06.818Z","first_published":"2026-11-06T03:05:02.297Z","source":"npa","source_name":"NPA 165","claim":{"category":"finance and insurance"}}],"url":"https://domainspoof.com/live?show=all&q=lovedatnnger.com"},{"hostname":"m.bitpiehub.com","first_observed":"2026-11-06T02:47:03.202Z","first_published":"2026-11-06T03:05:02.297Z","brands":[{"id":"bitpie","name":"Bitpie","url":"https://domainspoof.com/brands/bitpie"}],"dns":"resolved","resolved":["137.220.157.34"],"resolved_at":"2026-11-06T03:13:24Z","dns_checked_at":"2026-11-06T03:13:24.000Z","dns_since":"2026-11-06T03:13:24.000Z","findings":[{"id":"fgjzxr3gquotec7wgfegm","kind":"spamhaus_drop","summary":"Resolved to 137.220.157.34 on Spamhaus DROP","first_observed":"2026-11-06T02:47:03.202Z","first_published":"2026-11-06T03:05:02.297Z","address":"137.220.157.34","list":"spamhaus_drop","list_name":"Spamhaus DROP"}],"url":"https://domainspoof.com/brands/bitpie"},{"hostname":"m.bitpietrade.com","first_observed":"2026-11-06T02:47:03.223Z","first_published":"2026-11-06T03:05:02.297Z","brands":[{"id":"bitpie","name":"Bitpie","url":"https://domainspoof.com/brands/bitpie"}],"dns":"resolved","resolved":["137.220.157.52"],"resolved_at":"2026-11-06T03:13:24Z","dns_checked_at":"2026-11-06T03:13:24.000Z","dns_since":"2026-11-06T03:13:24.000Z","findings":[{"id":"fgaaa55eqdirxpsmvvtxv","kind":"spamhaus_drop","summary":"Resolved to 137.220.157.52 on Spamhaus DROP","first_observed":"2026-11-06T02:47:03.223Z","first_published":"2026-11-06T03:05:02.297Z","address":"137.220.157.52","list":"spamhaus_drop","list_name":"Spamhaus DROP"}],"url":"https://domainspoof.com/brands/bitpie"},{"hostname":"m.myimtoken.com.cn","first_observed":"2026-11-06T02:41:31.442Z","first_published":"2026-11-06T03:05:02.297Z","brands":[{"id":"imtoken","name":"imToken","url":"https://domainspoof.com/brands/imtoken"}],"dns":"resolved","resolved":["137.220.157.15"],"resolved_at":"2026-11-06T03:13:24Z","dns_checked_at":"2026-11-06T03:13:24.000Z","dns_since":"2026-11-06T03:13:24.000Z","findings":[{"id":"fgzhtup6wleikjayjsdwo","kind":"spamhaus_drop","summary":"Resolved to 137.220.157.15 on Spamhaus DROP","first_observed":"2026-11-06T02:41:31.442Z","first_published":"2026-11-06T03:05:02.297Z","address":"137.220.157.15","list":"spamhaus_drop","list_name":"Spamhaus DROP"}],"url":"https://domainspoof.com/brands/imtoken"},{"hostname":"mail.eoptiontrade.com","first_observed":"2026-11-06T02:56:56.961Z","first_published":"2026-11-06T03:05:02.297Z","brands":[],"dns":"resolved","resolved":["198.251.89.82"],"resolved_at":"2026-11-06T03:06:05Z","dns_checked_at":"2026-11-06T03:13:24.000Z","dns_since":"2026-11-06T03:13:24.000Z","findings":[{"id":"finmaewddxl6ei4475g65","kind":"reported_domain","summary":"Under eoptiontrade.com, reported by PhishDestroy","first_observed":"2026-11-06T02:56:56.961Z","first_published":"2026-11-06T03:05:02.297Z","source":"phishdestroy","source_name":"PhishDestroy","under":"eoptiontrade.com","source_url":"https://phishdestroy.io/domain/eoptiontrade.com/"}],"url":"https://domainspoof.com/live?show=all&q=mail.eoptiontrade.com"},{"hostname":"mail.ikejadynamiclionsclub.org.ng","first_observed":"2026-11-06T02:11:00.434Z","first_published":"2026-11-06T03:05:02.297Z","brands":[],"dns":"resolved","resolved":["163.61.188.5"],"resolved_at":"2026-11-06T02:13:53Z","dns_checked_at":"2026-11-06T03:13:24.000Z","dns_since":"2026-11-06T03:13:24.000Z","findings":[{"id":"fpj3dhooudfeh4x2m5xm3","kind":"reported_domain","summary":"Under ikejadynamiclionsclub.org.ng, reported by PhishDestroy","first_observed":"2026-11-06T02:11:00.434Z","first_published":"2026-11-06T03:05:02.297Z","source":"phishdestroy","source_name":"PhishDestroy","under":"ikejadynamiclionsclub.org.ng","source_url":"https://phishdestroy.io/domain/ikejadynamiclionsclub.org.ng/"}],"url":"https://domainspoof.com/live?show=all&q=mail.ikejadynamiclionsclub.org.ng"},{"hostname":"mail.merritoncapital.com","first_observed":"2026-11-06T02:56:56.961Z","first_published":"2026-11-06T03:05:02.297Z","brands":[],"dns":"resolved","resolved":["198.251.81.14"],"resolved_at":"2026-11-06T03:06:05Z","dns_checked_at":"2026-11-06T03:13:24.000Z","dns_since":"2026-11-06T03:13:24.000Z","findings":[{"id":"fh42gfmsj3za6coc6kigo","kind":"reported_domain","summary":"Under merritoncapital.com, reported by PhishDestroy","first_observed":"2026-11-06T02:56:56.961Z","first_published":"2026-11-06T03:05:02.297Z","source":"phishdestroy","source_name":"PhishDestroy","under":"merritoncapital.com","source_url":"https://phishdestroy.io/domain/merritoncapital.com/"}],"url":"https://domainspoof.com/live?show=all&q=mail.merritoncapital.com"},{"hostname":"mail.speedwaycourierservice.com","first_observed":"2026-11-06T02:46:46.295Z","first_published":"2026-11-06T03:05:02.297Z","brands":[],"dns":"resolved","resolved":["104.21.66.145","172.67.205.48"],"resolved_at":"2026-11-06T02:55:57Z","dns_checked_at":"2026-11-06T03:13:24.000Z","dns_since":"2026-11-06T03:13:24.000Z","findings":[{"id":"fml6jkkwwzch4jda5t3rx","kind":"reported_domain","summary":"Under speedwaycourierservice.com, reported by PhishDestroy","first_observed":"2026-11-06T02:46:46.295Z","first_published":"2026-11-06T03:05:02.297Z","source":"phishdestroy","source_name":"PhishDestroy","under":"speedwaycourierservice.com","source_url":"https://phishdestroy.io/domain/speedwaycourierservice.com/"}],"url":"https://domainspoof.com/live?show=all&q=mail.speedwaycourierservice.com"},{"hostname":"mail.ubicar.club","first_observed":"2026-11-06T02:11:00.434Z","first_published":"2026-11-06T03:05:02.297Z","brands":[],"dns":"resolved","resolved":["65.181.116.252"],"resolved_at":"2026-11-06T02:13:53Z","dns_checked_at":"2026-11-06T03:13:24.000Z","dns_since":"2026-11-06T03:13:24.000Z","findings":[{"id":"fmtfkhzyxrzgyjicxjpwa","kind":"reported_domain","summary":"Under ubicar.club, reported by PhishDestroy","first_observed":"2026-11-06T02:11:00.434Z","first_published":"2026-11-06T03:05:02.297Z","source":"phishdestroy","source_name":"PhishDestroy","under":"ubicar.club","source_url":"https://phishdestroy.io/domain/ubicar.club/"}],"url":"https://domainspoof.com/live?show=all&q=mail.ubicar.club"},{"hostname":"maps--findmy.com","first_observed":"2026-11-06T02:34:12.582Z","first_published":"2026-11-06T03:05:02.297Z","brands":[{"id":"apple","name":"Apple","url":"https://domainspoof.com/brands/apple"}],"dns":"resolved","resolved":["172.232.24.161","172.232.24.235","172.234.25.42"],"resolved_at":"2026-11-06T03:13:24Z","dns_checked_at":"2026-11-06T03:13:24.000Z","dns_since":"2026-11-06T03:13:24.000Z","findings":[{"id":"fjggyhbqhkey2lkqzzbcy","kind":"phishing_infrastructure","summary":"Resolved to 172.232.24.161, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T02:34:12.582Z","first_published":"2026-11-06T03:05:02.297Z","address":"172.232.24.161","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/apple"},{"hostname":"mcc-safety.com","first_observed":"2026-11-06T02:31:27.551Z","first_published":"2026-11-06T03:05:02.297Z","brands":[],"dns":"resolved","resolved":["216.150.1.1"],"resolved_at":"2026-11-06T02:41:32Z","dns_checked_at":"2026-11-06T03:13:24.000Z","dns_since":"2026-11-06T03:13:24.000Z","findings":[{"id":"ftncou2374qfbznwmpqw2","kind":"reported_domain","summary":"Listed by USOM","first_observed":"2026-11-06T02:31:27.551Z","first_published":"2026-11-06T03:05:02.297Z","source":"usom","source_name":"USOM"}],"url":"https://domainspoof.com/live?show=all&q=mcc-safety.com"},{"hostname":"mdnr3zk07r5-v733.top","first_observed":"2026-11-06T01:56:59.755Z","first_published":"2026-11-06T03:05:02.297Z","brands":[],"dns":"no_address","resolved":[],"resolved_at":"2026-11-06T02:00:55Z","dns_checked_at":"2026-11-06T11:19:31.000Z","findings":[{"id":"fa5ktch2rgefldv2klf5d","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-06T01:56:59.755Z","first_published":"2026-11-06T03:05:02.297Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=mdnr3zk07r5-v733.top"},{"hostname":"merritoncapital.com","first_observed":"2026-11-06T02:56:56.961Z","first_published":"2026-11-06T03:05:02.297Z","brands":[],"dns":"resolved","resolved":["198.251.81.14"],"resolved_at":"2026-11-06T03:06:05Z","dns_checked_at":"2026-11-06T03:13:24.000Z","dns_since":"2026-11-06T03:13:24.000Z","findings":[{"id":"fd7kxd3js6tzzkr7k3zfx","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-06T02:56:56.961Z","first_published":"2026-11-06T03:05:02.297Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/merritoncapital.com/"}],"url":"https://domainspoof.com/live?show=all&q=merritoncapital.com"},{"hostname":"metamask-verify.org","first_observed":"2026-11-06T02:26:20.460Z","first_published":"2026-11-06T03:05:02.297Z","brands":[{"id":"metamask","name":"MetaMask","url":"https://domainspoof.com/brands/metamask"}],"dns":"resolved","resolved":["137.220.60.224"],"resolved_at":"2026-11-06T02:37:14Z","dns_checked_at":"2026-11-06T03:13:24.000Z","dns_since":"2026-11-06T03:13:24.000Z","findings":[{"id":"f5n433te7ciehybdo4nww","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-06T02:26:20.460Z","first_published":"2026-11-06T03:05:02.297Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/brands/metamask"},{"hostname":"mgmarket5.at","first_observed":"2026-11-06T02:51:51.677Z","first_published":"2026-11-06T03:05:02.297Z","brands":[],"dns":"resolved","resolved":["57.129.85.65"],"resolved_at":"2026-11-06T02:52:04Z","dns_checked_at":"2026-11-06T03:13:24.000Z","dns_since":"2026-11-06T03:13:24.000Z","findings":[{"id":"flcawvgrv23g4jhq6bkxy","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-06T02:51:51.677Z","first_published":"2026-11-06T03:05:02.297Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/mgmarket5.at/"}],"url":"https://domainspoof.com/live?show=all&q=mgmarket5.at"},{"hostname":"mintstudio.to","first_observed":"2026-11-06T02:46:46.295Z","first_published":"2026-11-06T03:05:02.297Z","brands":[],"dns":"resolved","resolved":["104.193.111.9"],"resolved_at":"2026-11-06T02:55:58Z","dns_checked_at":"2026-11-06T03:13:24.000Z","dns_since":"2026-11-06T03:13:24.000Z","findings":[{"id":"fm4zmszdbwbyijjedf65q","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-06T02:46:46.295Z","first_published":"2026-11-06T03:05:02.297Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/mintstudio.to/"}],"url":"https://domainspoof.com/live?show=all&q=mintstudio.to"},{"hostname":"mixrura.money","first_observed":"2026-11-06T02:41:40.421Z","first_published":"2026-11-06T03:05:02.297Z","brands":[],"dns":"resolved","resolved":["104.21.27.104","172.67.142.66"],"resolved_at":"2026-11-06T02:41:57Z","dns_checked_at":"2026-11-06T03:13:24.000Z","dns_since":"2026-11-06T03:13:24.000Z","findings":[{"id":"f6orlihsgs4k5l4qdjwvh","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-06T02:41:40.421Z","first_published":"2026-11-06T03:05:02.297Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/mixrura.money/"}],"url":"https://domainspoof.com/live?show=all&q=mixrura.money"},{"hostname":"mjxtura.money","first_observed":"2026-11-06T02:41:40.421Z","first_published":"2026-11-06T03:05:02.297Z","brands":[],"dns":"resolved","resolved":["104.21.1.212","172.67.152.87"],"resolved_at":"2026-11-06T02:41:57Z","dns_checked_at":"2026-11-06T03:13:24.000Z","dns_since":"2026-11-06T03:13:24.000Z","findings":[{"id":"fomfqmmhdzat6a2tyy2lp","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-06T02:41:40.421Z","first_published":"2026-11-06T03:05:02.297Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/mjxtura.money/"}],"url":"https://domainspoof.com/live?show=all&q=mjxtura.money"},{"hostname":"moneropaperwallet.com","first_observed":"2026-11-06T02:00:35.712Z","first_published":"2026-11-06T03:05:02.297Z","brands":[],"dns":"resolved","resolved":["104.21.90.35","172.67.194.38"],"resolved_at":"2026-11-06T02:03:49Z","dns_checked_at":"2026-11-06T03:13:24.000Z","dns_since":"2026-11-06T03:13:24.000Z","findings":[{"id":"fqw6bnhl25qogzaz4e3yf","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-06T02:00:35.712Z","first_published":"2026-11-06T03:05:02.297Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/moneropaperwallet.com/"}],"url":"https://domainspoof.com/live?show=all&q=moneropaperwallet.com"},{"hostname":"my.lovethyneighbor.ezgateway.net","first_observed":"2026-11-06T02:56:56.961Z","first_published":"2026-11-06T03:05:02.297Z","brands":[],"dns":"resolved","resolved":["64.29.17.1","216.198.79.1"],"resolved_at":"2026-11-06T03:06:06Z","dns_checked_at":"2026-11-06T03:13:24.000Z","dns_since":"2026-11-06T03:13:24.000Z","findings":[{"id":"f64hftywxrkgwumxntqms","kind":"reported_domain","summary":"Under ezgateway.net, listed by USOM","first_observed":"2026-11-06T02:56:56.961Z","first_published":"2026-11-06T03:05:02.297Z","source":"usom","source_name":"USOM","under":"ezgateway.net"}],"url":"https://domainspoof.com/live?show=all&q=my.lovethyneighbor.ezgateway.net"},{"hostname":"myimtoken.com.cn","first_observed":"2026-11-06T02:41:33.837Z","first_published":"2026-11-06T03:05:02.297Z","brands":[{"id":"imtoken","name":"imToken","url":"https://domainspoof.com/brands/imtoken"}],"dns":"resolved","resolved":["137.220.157.15"],"resolved_at":"2026-11-06T03:13:24Z","dns_checked_at":"2026-11-06T03:13:24.000Z","dns_since":"2026-11-06T03:13:24.000Z","findings":[{"id":"fhcjn4zihl7s66oxazyf6","kind":"spamhaus_drop","summary":"Resolved to 137.220.157.15 on Spamhaus DROP","first_observed":"2026-11-06T02:41:33.837Z","first_published":"2026-11-06T03:05:02.297Z","address":"137.220.157.15","list":"spamhaus_drop","list_name":"Spamhaus DROP"}],"url":"https://domainspoof.com/brands/imtoken"},{"hostname":"news.polar-tensor.com","first_observed":"2026-11-06T02:00:35.712Z","first_published":"2026-11-06T03:05:02.297Z","brands":[],"dns":"resolved","resolved":["5.189.134.86","57.128.187.75","57.129.49.179","193.242.211.59"],"resolved_at":"2026-11-06T02:03:49Z","dns_checked_at":"2026-11-06T03:13:24.000Z","dns_since":"2026-11-06T03:13:24.000Z","findings":[{"id":"f4vvhj3y5lfx3vdlh7zlt","kind":"reported_domain","summary":"Under polar-tensor.com, listed by MetaMask","first_observed":"2026-11-06T02:00:35.712Z","first_published":"2026-11-06T03:05:02.297Z","source":"metamask","source_name":"MetaMask","under":"polar-tensor.com"}],"url":"https://domainspoof.com/live?show=all&q=news.polar-tensor.com"},{"hostname":"notexist.pay.login-blablacar.cdek.rhxyvcq9vvts2ld9.r.mail.leankoala.com","first_observed":"2026-11-06T01:46:17.359Z","first_published":"2026-11-06T03:05:02.297Z","brands":[{"id":"blablacar","name":"BlaBlaCar","url":"https://domainspoof.com/brands/blablacar"}],"dns":"resolved","resolved":["172.246.243.65"],"resolved_at":"2026-11-06T03:13:24Z","dns_checked_at":"2026-11-06T03:13:24.000Z","dns_since":"2026-11-06T03:13:24.000Z","findings":[{"id":"fczkcf53qfhe5d44hkfd3","kind":"phishing_infrastructure","summary":"Resolved to 172.246.243.65, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T01:46:17.359Z","first_published":"2026-11-06T03:05:02.297Z","address":"172.246.243.65","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/blablacar"},{"hostname":"nowpayments.ru","first_observed":"2026-11-06T02:47:04.622Z","first_published":"2026-11-06T03:05:02.297Z","brands":[{"id":"changenow","name":"ChangeNOW","url":"https://domainspoof.com/brands/changenow"}],"dns":"resolved","resolved":["188.246.224.242"],"resolved_at":"2026-11-06T03:13:24Z","dns_checked_at":"2026-11-06T03:13:24.000Z","dns_since":"2026-11-06T03:13:24.000Z","findings":[{"id":"fdulwvz5kvpmidchdxgpg","kind":"phishing_infrastructure","summary":"Resolved to 188.246.224.242, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T02:47:04.622Z","first_published":"2026-11-06T03:05:02.297Z","address":"188.246.224.242","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/changenow"},{"hostname":"pale-explorations.com","first_observed":"2026-11-06T02:21:13.588Z","first_published":"2026-11-06T03:05:02.297Z","brands":[],"dns":"resolved","resolved":["104.21.81.84","172.67.140.232"],"resolved_at":"2026-11-06T02:34:15Z","dns_checked_at":"2026-11-06T03:13:24.000Z","dns_since":"2026-11-06T03:13:24.000Z","findings":[{"id":"fhiz7pinl6e53gqfqgv6f","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-06T02:21:13.588Z","first_published":"2026-11-06T03:05:02.297Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=pale-explorations.com"},{"hostname":"paperstrategy.org","first_observed":"2026-11-06T02:41:40.421Z","first_published":"2026-11-06T03:05:02.297Z","brands":[],"dns":"resolved","resolved":["104.21.39.246","172.67.172.45"],"resolved_at":"2026-11-06T02:41:57Z","dns_checked_at":"2026-11-06T03:13:24.000Z","dns_since":"2026-11-06T03:13:24.000Z","findings":[{"id":"fokumqdolh2sltmirkxbu","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-06T02:41:40.421Z","first_published":"2026-11-06T03:05:02.297Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=paperstrategy.org"},{"hostname":"pay.shdw.family","first_observed":"2026-11-06T01:51:52.918Z","first_published":"2026-11-06T03:05:02.297Z","brands":[],"dns":"not_found","resolved":[],"resolved_at":"2026-11-06T01:56:10Z","dns_checked_at":"2026-11-06T11:19:31.000Z","findings":[{"id":"fty5fcpkjygozwzmdbq4z","kind":"reported_domain","summary":"Under shdw.family, listed by MetaMask","first_observed":"2026-11-06T01:51:52.918Z","first_published":"2026-11-06T03:05:02.297Z","source":"metamask","source_name":"MetaMask","under":"shdw.family"}],"url":"https://domainspoof.com/live?show=all&q=pay.shdw.family"},{"hostname":"pay.youla.yandex.12a64.cdek.rhxyvcq9vvts2ld9.r.mail.leankoala.com","first_observed":"2026-11-06T01:50:30.408Z","first_published":"2026-11-06T03:05:02.297Z","brands":[{"id":"yandex","name":"Yandex","url":"https://domainspoof.com/brands/yandex"},{"id":"youla","name":"Youla","url":"https://domainspoof.com/brands/youla"}],"dns":"resolved","resolved":["172.246.243.65"],"resolved_at":"2026-11-06T03:13:24Z","dns_checked_at":"2026-11-06T03:13:24.000Z","dns_since":"2026-11-06T03:13:24.000Z","findings":[{"id":"fat5py7hs7kml2ybdh7mi","kind":"phishing_infrastructure","summary":"Resolved to 172.246.243.65, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T01:50:30.408Z","first_published":"2026-11-06T03:05:02.297Z","address":"172.246.243.65","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/yandex"},{"hostname":"perle.community","first_observed":"2026-11-06T02:46:46.295Z","first_published":"2026-11-06T03:05:02.297Z","brands":[],"dns":"resolved","resolved":["104.21.68.227","172.67.199.53"],"resolved_at":"2026-11-06T02:55:59Z","dns_checked_at":"2026-11-06T03:13:24.000Z","dns_since":"2026-11-06T03:13:24.000Z","findings":[{"id":"ffnrn6q4uuhpaou5pl7ci","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-06T02:46:46.295Z","first_published":"2026-11-06T03:05:02.297Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=perle.community"},{"hostname":"pheira.live","first_observed":"2026-11-06T01:51:52.918Z","first_published":"2026-11-06T03:05:02.297Z","brands":[],"dns":"resolved","resolved":["104.21.44.111","172.67.199.10"],"resolved_at":"2026-11-06T01:56:10Z","dns_checked_at":"2026-11-06T03:13:24.000Z","dns_since":"2026-11-06T03:13:24.000Z","findings":[{"id":"fk4uakoaftybie4qslkuq","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-06T01:51:52.918Z","first_published":"2026-11-06T03:05:02.297Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=pheira.live"},{"hostname":"pop.eoptiontrade.com","first_observed":"2026-11-06T02:56:56.961Z","first_published":"2026-11-06T03:05:02.297Z","brands":[],"dns":"resolved","resolved":["198.251.89.82"],"resolved_at":"2026-11-06T03:06:10Z","dns_checked_at":"2026-11-06T03:13:24.000Z","dns_since":"2026-11-06T03:13:24.000Z","findings":[{"id":"fnhw4djxcvdnec4nztggq","kind":"reported_domain","summary":"Under eoptiontrade.com, reported by PhishDestroy","first_observed":"2026-11-06T02:56:56.961Z","first_published":"2026-11-06T03:05:02.297Z","source":"phishdestroy","source_name":"PhishDestroy","under":"eoptiontrade.com","source_url":"https://phishdestroy.io/domain/eoptiontrade.com/"}],"url":"https://domainspoof.com/live?show=all&q=pop.eoptiontrade.com"},{"hostname":"pop.merritoncapital.com","first_observed":"2026-11-06T02:56:56.961Z","first_published":"2026-11-06T03:05:02.297Z","brands":[],"dns":"resolved","resolved":["198.251.81.14"],"resolved_at":"2026-11-06T03:06:11Z","dns_checked_at":"2026-11-06T03:13:24.000Z","dns_since":"2026-11-06T03:13:24.000Z","findings":[{"id":"fiszlzahmfpkq5si4542k","kind":"reported_domain","summary":"Under merritoncapital.com, reported by PhishDestroy","first_observed":"2026-11-06T02:56:56.961Z","first_published":"2026-11-06T03:05:02.297Z","source":"phishdestroy","source_name":"PhishDestroy","under":"merritoncapital.com","source_url":"https://phishdestroy.io/domain/merritoncapital.com/"}],"url":"https://domainspoof.com/live?show=all&q=pop.merritoncapital.com"},{"hostname":"pqkby.hair","first_observed":"2026-11-06T02:41:40.421Z","first_published":"2026-11-06T03:05:02.297Z","brands":[],"dns":"resolved","resolved":["104.21.46.38","172.67.223.38"],"resolved_at":"2026-11-06T02:41:57Z","dns_checked_at":"2026-11-06T03:13:24.000Z","dns_since":"2026-11-06T03:13:24.000Z","findings":[{"id":"f7i4m4p3ipdcikvjfsf57","kind":"reported_domain","summary":"Listed by NPA 165 (information services)","first_observed":"2026-11-06T02:41:40.421Z","first_published":"2026-11-06T03:05:02.297Z","source":"npa","source_name":"NPA 165","claim":{"category":"information services"}}],"url":"https://domainspoof.com/live?show=all&q=pqkby.hair"},{"hostname":"preview.kpi-dash.ghostwareos.com","first_observed":"2026-11-06T02:05:41.321Z","first_published":"2026-11-06T03:05:02.297Z","brands":[],"dns":"resolved","resolved":["216.150.16.65","216.150.16.129"],"resolved_at":"2026-11-06T02:07:14Z","dns_checked_at":"2026-11-06T03:13:24.000Z","dns_since":"2026-11-06T03:13:24.000Z","findings":[{"id":"fsosfxrcrzcsmavs5762f","kind":"reported_domain","summary":"Under ghostwareos.com, reported by PhishDestroy","first_observed":"2026-11-06T02:05:41.321Z","first_published":"2026-11-06T03:05:02.297Z","source":"phishdestroy","source_name":"PhishDestroy","under":"ghostwareos.com","source_url":"https://phishdestroy.io/domain/ghostwareos.com/"}],"url":"https://domainspoof.com/live?show=all&q=preview.kpi-dash.ghostwareos.com"},{"hostname":"primalang.com","first_observed":"2026-11-06T02:16:06.818Z","first_published":"2026-11-06T03:05:02.297Z","brands":[],"dns":"resolved","resolved":["68.178.175.176"],"resolved_at":"2026-11-06T02:16:11Z","dns_checked_at":"2026-11-06T03:13:24.000Z","dns_since":"2026-11-06T03:13:24.000Z","findings":[{"id":"futghq4xikppltd73s4az","kind":"reported_domain","summary":"Listed by NPA 165 (finance and insurance)","first_observed":"2026-11-06T02:16:06.818Z","first_published":"2026-11-06T03:05:02.297Z","source":"npa","source_name":"NPA 165","claim":{"category":"finance and insurance"}}],"url":"https://domainspoof.com/live?show=all&q=primalang.com"},{"hostname":"primetieruk.com","first_observed":"2026-11-06T02:36:34.488Z","first_published":"2026-11-06T03:05:02.297Z","brands":[],"dns":"resolved","resolved":["104.21.30.68","172.67.172.56"],"resolved_at":"2026-11-06T02:36:49Z","dns_checked_at":"2026-11-06T03:13:24.000Z","dns_since":"2026-11-06T03:13:24.000Z","findings":[{"id":"ffeep5oqrtmniq3zaffle","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-06T02:36:34.488Z","first_published":"2026-11-06T03:05:02.297Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=primetieruk.com"},{"hostname":"privatelabel.es","first_observed":"2026-11-06T02:56:56.961Z","first_published":"2026-11-06T03:05:02.297Z","brands":[],"dns":"resolved","resolved":["178.211.133.59"],"resolved_at":"2026-11-06T03:06:10Z","dns_checked_at":"2026-11-06T03:13:24.000Z","dns_since":"2026-11-06T03:13:24.000Z","findings":[{"id":"fimccaszhe66os54mpr7d","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-06T02:56:56.961Z","first_published":"2026-11-06T03:05:02.297Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/privatelabel.es/"}],"url":"https://domainspoof.com/live?show=all&q=privatelabel.es"},{"hostname":"proposal-xrpl.live","first_observed":"2026-11-06T02:51:51.677Z","first_published":"2026-11-06T03:05:02.297Z","brands":[{"id":"ripple","name":"Ripple (XRP)","url":"https://domainspoof.com/brands/ripple"}],"dns":"resolved","resolved":["104.21.53.152","172.67.214.155"],"resolved_at":"2026-11-06T02:52:04Z","dns_checked_at":"2026-11-06T03:13:24.000Z","dns_since":"2026-11-06T03:13:24.000Z","findings":[{"id":"flq5c7s2jln7xbii3u3mw","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-06T02:51:51.677Z","first_published":"2026-11-06T03:05:02.297Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/brands/ripple"},{"hostname":"proverseaxai-nl.live","first_observed":"2026-11-06T02:00:35.712Z","first_published":"2026-11-06T03:05:02.297Z","brands":[],"dns":"resolved","resolved":["104.21.12.253","172.67.154.1"],"resolved_at":"2026-11-06T02:03:50Z","dns_checked_at":"2026-11-06T03:13:24.000Z","dns_since":"2026-11-06T03:13:24.000Z","findings":[{"id":"fgh77pdjvet3aqgrcu64l","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-06T02:00:35.712Z","first_published":"2026-11-06T03:05:02.297Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=proverseaxai-nl.live"},{"hostname":"q02.google-sketchup.ru","first_observed":"2026-11-06T01:46:19.223Z","first_published":"2026-11-06T03:05:02.297Z","brands":[{"id":"google","name":"Google","url":"https://domainspoof.com/brands/google"}],"dns":"resolved","resolved":["111.90.143.122"],"resolved_at":"2026-11-06T03:13:24Z","dns_checked_at":"2026-11-06T03:13:24.000Z","dns_since":"2026-11-06T03:13:24.000Z","findings":[{"id":"frriysndhxhb7mdamzvjq","kind":"spamhaus_drop","summary":"Resolved to 111.90.143.122 on Spamhaus DROP","first_observed":"2026-11-06T01:46:19.223Z","first_published":"2026-11-06T03:05:02.297Z","address":"111.90.143.122","list":"spamhaus_drop","list_name":"Spamhaus DROP"}],"url":"https://domainspoof.com/brands/google"},{"hostname":"qql-curate.com","first_observed":"2026-11-06T01:46:45.159Z","first_published":"2026-11-06T03:05:02.297Z","brands":[],"dns":"resolved","resolved":["104.21.63.210","172.67.172.9"],"resolved_at":"2026-11-06T01:50:31Z","dns_checked_at":"2026-11-06T03:13:24.000Z","dns_since":"2026-11-06T03:13:24.000Z","findings":[{"id":"fjdq2reb7tryldsostjq4","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-06T01:46:45.159Z","first_published":"2026-11-06T03:05:02.297Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=qql-curate.com"},{"hostname":"qylithcore.live","first_observed":"2026-11-06T02:36:34.488Z","first_published":"2026-11-06T03:05:02.297Z","brands":[],"dns":"resolved","resolved":["104.21.41.122","172.67.164.195"],"resolved_at":"2026-11-06T02:36:49Z","dns_checked_at":"2026-11-06T03:13:24.000Z","dns_since":"2026-11-06T03:13:24.000Z","findings":[{"id":"ff5wuqn6cysxh5fnsr5io","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-06T02:36:34.488Z","first_published":"2026-11-06T03:05:02.297Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=qylithcore.live"},{"hostname":"rabby-new.at","first_observed":"2026-11-06T02:21:13.588Z","first_published":"2026-11-06T03:05:02.297Z","brands":[{"id":"rabby-wallet","name":"Rabby Wallet","url":"https://domainspoof.com/brands/rabby-wallet"}],"dns":"resolved","resolved":["185.53.179.136"],"resolved_at":"2026-11-06T02:34:16Z","dns_checked_at":"2026-11-06T03:13:24.000Z","dns_since":"2026-11-06T03:13:24.000Z","findings":[{"id":"fslnyq32ok5ouw6dliubt","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-06T02:21:13.588Z","first_published":"2026-11-06T03:05:02.297Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/brands/rabby-wallet"},{"hostname":"rdp.socialvisor.ru","first_observed":"2026-11-06T02:21:13.588Z","first_published":"2026-11-06T03:05:02.297Z","brands":[],"dns":"resolved","resolved":["91.215.41.91"],"resolved_at":"2026-11-06T02:34:16Z","dns_checked_at":"2026-11-06T03:13:24.000Z","dns_since":"2026-11-06T03:13:24.000Z","findings":[{"id":"fqa6ttjtm3magf6byct4x","kind":"reported_domain","summary":"Under socialvisor.ru, reported by PhishDestroy","first_observed":"2026-11-06T02:21:13.588Z","first_published":"2026-11-06T03:05:02.297Z","source":"phishdestroy","source_name":"PhishDestroy","under":"socialvisor.ru","source_url":"https://phishdestroy.io/domain/socialvisor.ru/"}],"url":"https://domainspoof.com/live?show=all&q=rdp.socialvisor.ru"},{"hostname":"realtimescalp.site","first_observed":"2026-11-06T01:51:52.918Z","first_published":"2026-11-06T03:05:02.297Z","brands":[],"dns":"resolved","resolved":["5.78.156.59","5.161.47.86","5.161.230.87","46.62.237.138","76.223.91.20","195.201.128.179","2406:da1e:214:c901:3a5:448f:b7b7:82e7","2600:1f1c:6db:8801:268f:6a6d:cd28:6208","2a05:d014:179b:c400:5131:66d1:dcfb:6ae9","2a05:d014:179b:c400:a327:40ee:24cc:6180","2a05:d014:179b:c402:d60:9c3e:1ada:e2e5","2a05:d014:179b:c402:796a:5979:8cae:ea4","2a05:d014:179b:c403:577e:c54a:24fd:1c39","2a05:d014:179b:c403:7ca2:c788:41b0:7d26"],"resolved_at":"2026-11-06T01:56:11Z","dns_checked_at":"2026-11-06T03:13:24.000Z","dns_since":"2026-11-06T03:13:24.000Z","findings":[{"id":"fq6vtcjfeu2qtmnta2ilr","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-06T01:51:52.918Z","first_published":"2026-11-06T03:05:02.297Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=realtimescalp.site"},{"hostname":"reclaim-discord.com","first_observed":"2026-11-06T02:05:41.321Z","first_published":"2026-11-06T03:05:02.297Z","brands":[],"dns":"no_address","resolved":[],"resolved_at":"2026-11-06T02:07:16Z","dns_checked_at":"2026-11-06T11:19:31.000Z","findings":[{"id":"fdyi4gjtbmaxud5qdjasr","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-06T02:05:41.321Z","first_published":"2026-11-06T03:05:02.297Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=reclaim-discord.com"},{"hostname":"reklamy-google-ads.pl","first_observed":"2026-11-06T02:16:11.619Z","first_published":"2026-11-06T03:05:02.297Z","brands":[{"id":"google","name":"Google","url":"https://domainspoof.com/brands/google"}],"dns":"resolved","resolved":["185.253.212.22"],"resolved_at":"2026-11-06T03:13:24Z","dns_checked_at":"2026-11-06T03:13:24.000Z","dns_since":"2026-11-06T03:13:24.000Z","findings":[{"id":"fhlx73ux747pfrfqvhs2a","kind":"phishing_infrastructure","summary":"Resolved to 185.253.212.22, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T02:16:11.619Z","first_published":"2026-11-06T03:05:02.297Z","address":"185.253.212.22","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/google"},{"hostname":"remesh.quicktent.org","first_observed":"2026-11-06T01:56:59.755Z","first_published":"2026-11-06T03:05:02.297Z","brands":[],"dns":"resolved","resolved":["91.229.239.28"],"resolved_at":"2026-11-06T02:00:57Z","dns_checked_at":"2026-11-06T03:13:24.000Z","dns_since":"2026-11-06T03:13:24.000Z","findings":[{"id":"fok6466dobkcexgddq4hn","kind":"reported_domain","summary":"Under quicktent.org, reported by PhishDestroy","first_observed":"2026-11-06T01:56:59.755Z","first_published":"2026-11-06T03:05:02.297Z","source":"phishdestroy","source_name":"PhishDestroy","under":"quicktent.org","source_url":"https://phishdestroy.io/domain/quicktent.org/"}],"url":"https://domainspoof.com/live?show=all&q=remesh.quicktent.org"},{"hostname":"sbermegamarket.login-yandex.qiwbpchh9caly81t.rhxyvcq9vvts2ld9.r.mail.leankoala.com","first_observed":"2026-11-06T02:00:57.268Z","first_published":"2026-11-06T03:05:02.297Z","brands":[{"id":"yandex","name":"Yandex","url":"https://domainspoof.com/brands/yandex"}],"dns":"resolved","resolved":["172.246.243.65"],"resolved_at":"2026-11-06T03:13:24Z","dns_checked_at":"2026-11-06T03:13:24.000Z","dns_since":"2026-11-06T03:13:24.000Z","findings":[{"id":"fxe62ggcrp2uvpo3dlwox","kind":"phishing_infrastructure","summary":"Resolved to 172.246.243.65, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T02:00:57.268Z","first_published":"2026-11-06T03:05:02.297Z","address":"172.246.243.65","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/yandex"},{"hostname":"seafile.socialvisor.ru","first_observed":"2026-11-06T02:21:13.588Z","first_published":"2026-11-06T03:05:02.297Z","brands":[],"dns":"resolved","resolved":["91.215.41.91"],"resolved_at":"2026-11-06T02:34:19Z","dns_checked_at":"2026-11-06T03:13:24.000Z","dns_since":"2026-11-06T03:13:24.000Z","findings":[{"id":"f7gi5mpc6aeyiheqsn2z2","kind":"reported_domain","summary":"Under socialvisor.ru, reported by PhishDestroy","first_observed":"2026-11-06T02:21:13.588Z","first_published":"2026-11-06T03:05:02.297Z","source":"phishdestroy","source_name":"PhishDestroy","under":"socialvisor.ru","source_url":"https://phishdestroy.io/domain/socialvisor.ru/"}],"url":"https://domainspoof.com/live?show=all&q=seafile.socialvisor.ru"},{"hostname":"seefgsg.com","first_observed":"2026-11-06T01:56:59.755Z","first_published":"2026-11-06T03:05:02.297Z","brands":[],"dns":"no_address","resolved":[],"resolved_at":"2026-11-06T02:00:57Z","dns_checked_at":"2026-11-06T11:19:31.000Z","findings":[{"id":"frf3askwih3adsp4ht4e5","kind":"reported_domain","summary":"Listed by NPA 165 (finance and insurance)","first_observed":"2026-11-06T01:56:59.755Z","first_published":"2026-11-06T03:05:02.297Z","source":"npa","source_name":"NPA 165","claim":{"category":"finance and insurance"}}],"url":"https://domainspoof.com/live?show=all&q=seefgsg.com"},{"hostname":"sf.tumee.com","first_observed":"2026-11-06T02:51:51.677Z","first_published":"2026-11-06T03:05:02.297Z","brands":[],"dns":"resolved","resolved":["104.18.8.67","104.18.9.67"],"resolved_at":"2026-11-06T02:52:07Z","dns_checked_at":"2026-11-06T03:13:24.000Z","dns_since":"2026-11-06T03:13:24.000Z","findings":[{"id":"fncuj5vzbdl44b36m35kz","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-06T02:51:51.677Z","first_published":"2026-11-06T03:05:02.297Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/sf.tumee.com/"}],"url":"https://domainspoof.com/live?show=all&q=sf.tumee.com"},{"hostname":"signin-collab.land","first_observed":"2026-11-06T02:26:20.460Z","first_published":"2026-11-06T03:05:02.297Z","brands":[],"dns":"resolved","resolved":["104.21.62.45","172.67.219.248"],"resolved_at":"2026-11-06T02:26:40Z","dns_checked_at":"2026-11-06T03:13:24.000Z","dns_since":"2026-11-06T03:13:24.000Z","findings":[{"id":"frduyz2hxya4wxvf5yich","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-06T02:26:20.460Z","first_published":"2026-11-06T03:05:02.297Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/signin-collab.land/"}],"url":"https://domainspoof.com/live?show=all&q=signin-collab.land"},{"hostname":"slon911.cc","first_observed":"2026-11-06T02:41:40.421Z","first_published":"2026-11-06T03:05:02.297Z","brands":[],"dns":"resolved","resolved":["104.194.144.142"],"resolved_at":"2026-11-06T02:41:58Z","dns_checked_at":"2026-11-06T03:13:24.000Z","dns_since":"2026-11-06T03:13:24.000Z","findings":[{"id":"fst745osoynxn5rlycdsn","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-06T02:41:40.421Z","first_published":"2026-11-06T03:05:02.297Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/slon911.cc/"}],"url":"https://domainspoof.com/live?show=all&q=slon911.cc"},{"hostname":"smszaim.kz","first_observed":"2026-11-06T02:46:46.295Z","first_published":"2026-11-06T03:05:02.297Z","brands":[],"dns":"resolved","resolved":["78.40.108.47"],"resolved_at":"2026-11-06T02:56:03Z","dns_checked_at":"2026-11-06T03:13:24.000Z","dns_since":"2026-11-06T03:13:24.000Z","findings":[{"id":"fw5kfb2ojj2wn7njlzqry","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-06T02:46:46.295Z","first_published":"2026-11-06T03:05:02.297Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/smszaim.kz/"}],"url":"https://domainspoof.com/live?show=all&q=smszaim.kz"},{"hostname":"smtp.eoptiontrade.com","first_observed":"2026-11-06T02:56:56.961Z","first_published":"2026-11-06T03:05:02.297Z","brands":[],"dns":"resolved","resolved":["198.251.89.82"],"resolved_at":"2026-11-06T03:06:22Z","dns_checked_at":"2026-11-06T03:13:24.000Z","dns_since":"2026-11-06T03:13:24.000Z","findings":[{"id":"fhddp55opqegdqmb4xyrq","kind":"reported_domain","summary":"Under eoptiontrade.com, reported by PhishDestroy","first_observed":"2026-11-06T02:56:56.961Z","first_published":"2026-11-06T03:05:02.297Z","source":"phishdestroy","source_name":"PhishDestroy","under":"eoptiontrade.com","source_url":"https://phishdestroy.io/domain/eoptiontrade.com/"}],"url":"https://domainspoof.com/live?show=all&q=smtp.eoptiontrade.com"},{"hostname":"smtp.merritoncapital.com","first_observed":"2026-11-06T02:56:56.961Z","first_published":"2026-11-06T03:05:02.297Z","brands":[],"dns":"resolved","resolved":["198.251.81.14"],"resolved_at":"2026-11-06T03:06:22Z","dns_checked_at":"2026-11-06T03:13:24.000Z","dns_since":"2026-11-06T03:13:24.000Z","findings":[{"id":"f7yehcjjoxvrtgbyn4rnr","kind":"reported_domain","summary":"Under merritoncapital.com, reported by PhishDestroy","first_observed":"2026-11-06T02:56:56.961Z","first_published":"2026-11-06T03:05:02.297Z","source":"phishdestroy","source_name":"PhishDestroy","under":"merritoncapital.com","source_url":"https://phishdestroy.io/domain/merritoncapital.com/"}],"url":"https://domainspoof.com/live?show=all&q=smtp.merritoncapital.com"},{"hostname":"smtracking.ttrx.org","first_observed":"2026-11-06T02:36:34.488Z","first_published":"2026-11-06T03:05:02.297Z","brands":[],"dns":"resolved","resolved":["74.118.170.3"],"resolved_at":"2026-11-06T02:36:50Z","dns_checked_at":"2026-11-06T03:13:24.000Z","dns_since":"2026-11-06T03:13:24.000Z","findings":[{"id":"fsrf6koez3y2nas6brybb","kind":"reported_domain","summary":"Under ttrx.org, listed by MetaMask","first_observed":"2026-11-06T02:36:34.488Z","first_published":"2026-11-06T03:05:02.297Z","source":"metamask","source_name":"MetaMask","under":"ttrx.org"}],"url":"https://domainspoof.com/live?show=all&q=smtracking.ttrx.org"},{"hostname":"solfast.cc","first_observed":"2026-11-06T02:41:40.421Z","first_published":"2026-11-06T03:05:02.297Z","brands":[],"dns":"resolved","resolved":["104.21.51.223","172.67.189.1"],"resolved_at":"2026-11-06T02:41:58Z","dns_checked_at":"2026-11-06T03:13:24.000Z","dns_since":"2026-11-06T03:13:24.000Z","findings":[{"id":"fxn5p6fjuydtch3lov77l","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-06T02:41:40.421Z","first_published":"2026-11-06T03:05:02.297Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=solfast.cc"},{"hostname":"staging.selfapis.in","first_observed":"2026-11-06T02:56:56.961Z","first_published":"2026-11-06T03:05:02.297Z","brands":[],"dns":"resolved","resolved":["192.185.129.44"],"resolved_at":"2026-11-06T03:06:22Z","dns_checked_at":"2026-11-06T03:13:24.000Z","dns_since":"2026-11-06T03:13:24.000Z","findings":[{"id":"faw4gnrytk7b2xv3fohee","kind":"reported_domain","summary":"Under selfapis.in, reported by PhishDestroy","first_observed":"2026-11-06T02:56:56.961Z","first_published":"2026-11-06T03:05:02.297Z","source":"phishdestroy","source_name":"PhishDestroy","under":"selfapis.in","source_url":"https://phishdestroy.io/domain/selfapis.in/"}],"url":"https://domainspoof.com/live?show=all&q=staging.selfapis.in"},{"hostname":"sub2api.478691.xyz","first_observed":"2026-11-06T02:36:34.488Z","first_published":"2026-11-06T03:05:02.297Z","brands":[],"dns":"resolved","resolved":["104.21.37.52","172.67.204.39"],"resolved_at":"2026-11-06T02:36:50Z","dns_checked_at":"2026-11-06T03:13:24.000Z","dns_since":"2026-11-06T03:13:24.000Z","findings":[{"id":"fsfqyffbimaa3mi6ijnwd","kind":"reported_domain","summary":"Under 478691.xyz, listed by MetaMask","first_observed":"2026-11-06T02:36:34.488Z","first_published":"2026-11-06T03:05:02.297Z","source":"metamask","source_name":"MetaMask","under":"478691.xyz"}],"url":"https://domainspoof.com/live?show=all&q=sub2api.478691.xyz"},{"hostname":"sustiny.online","first_observed":"2026-11-06T02:51:51.677Z","first_published":"2026-11-06T03:05:02.297Z","brands":[],"dns":"resolved","resolved":["104.21.22.113","172.67.204.142"],"resolved_at":"2026-11-06T02:52:07Z","dns_checked_at":"2026-11-06T03:13:24.000Z","dns_since":"2026-11-06T03:13:24.000Z","findings":[{"id":"f7gbfhyiekbpmlyjdl6sv","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-06T02:51:51.677Z","first_published":"2026-11-06T03:05:02.297Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/sustiny.online/"}],"url":"https://domainspoof.com/live?show=all&q=sustiny.online"},{"hostname":"swiss-post-ch.eu","first_observed":"2026-11-06T02:41:47.518Z","first_published":"2026-11-06T03:05:02.297Z","brands":[{"id":"swiss-post","name":"Swiss Post","url":"https://domainspoof.com/brands/swiss-post"}],"dns":"resolved","resolved":["81.169.145.66"],"resolved_at":"2026-11-06T03:13:24Z","dns_checked_at":"2026-11-06T03:13:24.000Z","dns_since":"2026-11-06T03:13:24.000Z","findings":[{"id":"f4gklvtzfs7ib7n3gkvcw","kind":"phishing_infrastructure","summary":"Resolved to 81.169.145.66, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T02:41:47.518Z","first_published":"2026-11-06T03:05:02.297Z","address":"81.169.145.66","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/swiss-post"},{"hostname":"sysadmin.socialvisor.ru","first_observed":"2026-11-06T02:21:13.588Z","first_published":"2026-11-06T03:05:02.297Z","brands":[],"dns":"resolved","resolved":["91.215.41.91"],"resolved_at":"2026-11-06T02:34:19Z","dns_checked_at":"2026-11-06T03:13:24.000Z","dns_since":"2026-11-06T03:13:24.000Z","findings":[{"id":"f75l3t5krehh7dccqpv4s","kind":"reported_domain","summary":"Under socialvisor.ru, reported by PhishDestroy","first_observed":"2026-11-06T02:21:13.588Z","first_published":"2026-11-06T03:05:02.297Z","source":"phishdestroy","source_name":"PhishDestroy","under":"socialvisor.ru","source_url":"https://phishdestroy.io/domain/socialvisor.ru/"}],"url":"https://domainspoof.com/live?show=all&q=sysadmin.socialvisor.ru"},{"hostname":"ticket.socialvisor.ru","first_observed":"2026-11-06T02:21:13.588Z","first_published":"2026-11-06T03:05:02.297Z","brands":[],"dns":"resolved","resolved":["91.215.41.91"],"resolved_at":"2026-11-06T02:34:20Z","dns_checked_at":"2026-11-06T03:13:24.000Z","dns_since":"2026-11-06T03:13:24.000Z","findings":[{"id":"fz6hkwrcuaxqjowqnza4u","kind":"reported_domain","summary":"Under socialvisor.ru, reported by PhishDestroy","first_observed":"2026-11-06T02:21:13.588Z","first_published":"2026-11-06T03:05:02.297Z","source":"phishdestroy","source_name":"PhishDestroy","under":"socialvisor.ru","source_url":"https://phishdestroy.io/domain/socialvisor.ru/"}],"url":"https://domainspoof.com/live?show=all&q=ticket.socialvisor.ru"},{"hostname":"tofkedw.store","first_observed":"2026-11-06T01:56:59.755Z","first_published":"2026-11-06T03:05:02.297Z","brands":[],"dns":"resolved","resolved":["104.21.85.24","172.67.201.54"],"resolved_at":"2026-11-06T02:00:58Z","dns_checked_at":"2026-11-06T03:13:24.000Z","dns_since":"2026-11-06T03:13:24.000Z","findings":[{"id":"fcdtuwoyf3z7f6ngzve4x","kind":"reported_domain","summary":"Listed by NPA 165 (information services)","first_observed":"2026-11-06T01:56:59.755Z","first_published":"2026-11-06T03:05:02.297Z","source":"npa","source_name":"NPA 165","claim":{"category":"information services"}}],"url":"https://domainspoof.com/live?show=all&q=tofkedw.store"},{"hostname":"tr-betsat.icu","first_observed":"2026-11-06T02:26:20.460Z","first_published":"2026-11-06T03:05:02.297Z","brands":[],"dns":"resolved","resolved":["104.21.82.166","172.67.159.210"],"resolved_at":"2026-11-06T02:26:40Z","dns_checked_at":"2026-11-06T03:13:24.000Z","dns_since":"2026-11-06T03:13:24.000Z","findings":[{"id":"fdm3a5ztuo6dhi43xs7nc","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-06T02:26:20.460Z","first_published":"2026-11-06T03:05:02.297Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/tr-betsat.icu/"}],"url":"https://domainspoof.com/live?show=all&q=tr-betsat.icu"},{"hostname":"ubicar.club","first_observed":"2026-11-06T02:11:00.434Z","first_published":"2026-11-06T03:05:02.297Z","brands":[],"dns":"resolved","resolved":["65.181.116.252"],"resolved_at":"2026-11-06T02:14:15Z","dns_checked_at":"2026-11-06T03:13:24.000Z","dns_since":"2026-11-06T03:13:24.000Z","findings":[{"id":"f6c6vnzkcn6o7ldg6tke4","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-06T02:11:00.434Z","first_published":"2026-11-06T03:05:02.297Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/ubicar.club/"}],"url":"https://domainspoof.com/live?show=all&q=ubicar.club"},{"hostname":"union-bank-ofindia.org","first_observed":"2026-11-06T02:00:59.443Z","first_published":"2026-11-06T03:05:02.297Z","brands":[{"id":"union-bank-of-india","name":"Union Bank of India","url":"https://domainspoof.com/brands/union-bank-of-india"}],"dns":"resolved","resolved":["163.245.41.169"],"resolved_at":"2026-11-06T03:13:24Z","dns_checked_at":"2026-11-06T03:13:24.000Z","dns_since":"2026-11-06T03:13:24.000Z","findings":[{"id":"fklhznssdntflvtorkxlr","kind":"phishing_infrastructure","summary":"Resolved to 163.245.41.169, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T02:00:59.443Z","first_published":"2026-11-06T03:05:02.297Z","address":"163.245.41.169","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/union-bank-of-india"},{"hostname":"unlife.nyx.land","first_observed":"2026-11-06T02:05:41.321Z","first_published":"2026-11-06T03:05:02.297Z","brands":[],"dns":"resolved","resolved":["46.23.81.157","2a03:6000:1813:1337::157"],"resolved_at":"2026-11-06T02:07:20Z","dns_checked_at":"2026-11-06T03:13:24.000Z","dns_since":"2026-11-06T03:13:24.000Z","findings":[{"id":"f5anujmyokjp43wu2nsg4","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-06T02:05:41.321Z","first_published":"2026-11-06T03:05:02.297Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/unlife.nyx.land/"}],"url":"https://domainspoof.com/live?show=all&q=unlife.nyx.land"},{"hostname":"uso4web-zoom-conferencies.com","first_observed":"2026-11-06T02:11:00.434Z","first_published":"2026-11-06T03:05:02.297Z","brands":[],"dns":"resolved","resolved":["104.21.30.107","172.67.172.194"],"resolved_at":"2026-11-06T02:14:16Z","dns_checked_at":"2026-11-06T03:13:24.000Z","dns_since":"2026-11-06T03:13:24.000Z","findings":[{"id":"fvtuury46anr74mcthdc4","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-06T02:11:00.434Z","first_published":"2026-11-06T03:05:02.297Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=uso4web-zoom-conferencies.com"},{"hostname":"uvikelront-es.live","first_observed":"2026-11-06T02:11:00.434Z","first_published":"2026-11-06T03:05:02.297Z","brands":[],"dns":"resolved","resolved":["104.21.16.144","172.67.213.51"],"resolved_at":"2026-11-06T02:14:16Z","dns_checked_at":"2026-11-06T03:13:24.000Z","dns_since":"2026-11-06T03:13:24.000Z","findings":[{"id":"futvmpodexklydevs7nig","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-06T02:11:00.434Z","first_published":"2026-11-06T03:05:02.297Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=uvikelront-es.live"},{"hostname":"vcenter.zenavlico.cyou","first_observed":"2026-11-06T02:41:40.421Z","first_published":"2026-11-06T03:05:02.297Z","brands":[],"dns":"resolved","resolved":["95.85.244.13"],"resolved_at":"2026-11-06T02:41:59Z","dns_checked_at":"2026-11-06T03:13:24.000Z","dns_since":"2026-11-06T03:13:24.000Z","findings":[{"id":"flvr2ybxda76hxz2tqgai","kind":"reported_domain","summary":"Under zenavlico.cyou, listed by CERT Polska","first_observed":"2026-11-06T02:41:40.421Z","first_published":"2026-11-06T03:05:02.297Z","source":"cert_polska","source_name":"CERT Polska","under":"zenavlico.cyou"}],"url":"https://domainspoof.com/live?show=all&q=vcenter.zenavlico.cyou"},{"hostname":"vextriqalod.com","first_observed":"2026-11-06T01:51:52.918Z","first_published":"2026-11-06T03:05:02.297Z","brands":[],"dns":"resolved","resolved":["104.21.25.209","172.67.134.173"],"resolved_at":"2026-11-06T01:56:14Z","dns_checked_at":"2026-11-06T03:13:24.000Z","dns_since":"2026-11-06T03:13:24.000Z","findings":[{"id":"fvlyfvkxnyafm653ya7dg","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-06T01:51:52.918Z","first_published":"2026-11-06T03:05:02.297Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=vextriqalod.com"},{"hostname":"voting-theo.xyz","first_observed":"2026-11-06T02:41:40.421Z","first_published":"2026-11-06T03:05:02.297Z","brands":[],"dns":"resolved","resolved":["104.21.24.13","172.67.216.71"],"resolved_at":"2026-11-06T02:41:59Z","dns_checked_at":"2026-11-06T03:13:24.000Z","dns_since":"2026-11-06T03:13:24.000Z","findings":[{"id":"fopa4y46okzw67ujl55i3","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-06T02:41:40.421Z","first_published":"2026-11-06T03:05:02.297Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=voting-theo.xyz"},{"hostname":"vwwv-roblox.co","first_observed":"2026-11-06T02:21:13.588Z","first_published":"2026-11-06T03:05:02.297Z","brands":[{"id":"roblox","name":"Roblox","url":"https://domainspoof.com/brands/roblox"}],"dns":"resolved","resolved":["104.21.61.29","172.67.205.105","2606:4700:3030::6815:3d1d","2606:4700:3034::ac43:cd69"],"resolved_at":"2026-11-06T02:34:27Z","dns_checked_at":"2026-11-06T03:13:24.000Z","dns_since":"2026-11-06T03:13:24.000Z","findings":[{"id":"fcsth3gksrrixl7j7scyc","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-06T02:21:13.588Z","first_published":"2026-11-06T03:05:02.297Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/vwwv-roblox.co/"}],"url":"https://domainspoof.com/brands/roblox"},{"hostname":"webdisk.speedwaycourierservice.com","first_observed":"2026-11-06T02:46:46.295Z","first_published":"2026-11-06T03:05:02.297Z","brands":[],"dns":"resolved","resolved":["104.21.66.145","172.67.205.48"],"resolved_at":"2026-11-06T02:56:06Z","dns_checked_at":"2026-11-06T03:13:24.000Z","dns_since":"2026-11-06T03:13:24.000Z","findings":[{"id":"fag5465iv5ra5nnqonomy","kind":"reported_domain","summary":"Under speedwaycourierservice.com, reported by PhishDestroy","first_observed":"2026-11-06T02:46:46.295Z","first_published":"2026-11-06T03:05:02.297Z","source":"phishdestroy","source_name":"PhishDestroy","under":"speedwaycourierservice.com","source_url":"https://phishdestroy.io/domain/speedwaycourierservice.com/"}],"url":"https://domainspoof.com/live?show=all&q=webdisk.speedwaycourierservice.com"},{"hostname":"webdisk.ubicar.club","first_observed":"2026-11-06T02:11:00.434Z","first_published":"2026-11-06T03:05:02.297Z","brands":[],"dns":"resolved","resolved":["65.181.116.252"],"resolved_at":"2026-11-06T02:14:17Z","dns_checked_at":"2026-11-06T03:13:24.000Z","dns_since":"2026-11-06T03:13:24.000Z","findings":[{"id":"fw5uahyyro3puahedt6pz","kind":"reported_domain","summary":"Under ubicar.club, reported by PhishDestroy","first_observed":"2026-11-06T02:11:00.434Z","first_published":"2026-11-06T03:05:02.297Z","source":"phishdestroy","source_name":"PhishDestroy","under":"ubicar.club","source_url":"https://phishdestroy.io/domain/ubicar.club/"}],"url":"https://domainspoof.com/live?show=all&q=webdisk.ubicar.club"},{"hostname":"webmail-oauth.lygrunfeng.com","first_observed":"2026-11-06T01:51:52.918Z","first_published":"2026-11-06T03:05:02.297Z","brands":[],"dns":"resolved","resolved":["192.255.130.215"],"resolved_at":"2026-11-06T01:56:14Z","dns_checked_at":"2026-11-06T03:13:24.000Z","dns_since":"2026-11-06T03:13:24.000Z","findings":[{"id":"flxdlqei65lpw5vqmwjho","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-06T01:51:52.918Z","first_published":"2026-11-06T03:05:02.297Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/webmail-oauth.lygrunfeng.com/"}],"url":"https://domainspoof.com/live?show=all&q=webmail-oauth.lygrunfeng.com"},{"hostname":"webmail.ni-electrical.com","first_observed":"2026-11-06T02:16:06.818Z","first_published":"2026-11-06T03:05:02.297Z","brands":[],"dns":"resolved","resolved":["109.238.86.5"],"resolved_at":"2026-11-06T02:16:13Z","dns_checked_at":"2026-11-06T03:13:24.000Z","dns_since":"2026-11-06T03:13:24.000Z","findings":[{"id":"fluv65hu2p36xfvc2f6ye","kind":"reported_domain","summary":"Under ni-electrical.com, listed by CERT Polska","first_observed":"2026-11-06T02:16:06.818Z","first_published":"2026-11-06T03:05:02.297Z","source":"cert_polska","source_name":"CERT Polska","under":"ni-electrical.com"}],"url":"https://domainspoof.com/live?show=all&q=webmail.ni-electrical.com"},{"hostname":"webmail.speedwaycourierservice.com","first_observed":"2026-11-06T02:46:46.295Z","first_published":"2026-11-06T03:05:02.297Z","brands":[],"dns":"resolved","resolved":["104.21.66.145","172.67.205.48"],"resolved_at":"2026-11-06T02:56:06Z","dns_checked_at":"2026-11-06T03:13:24.000Z","dns_since":"2026-11-06T03:13:24.000Z","findings":[{"id":"fysvfifknzdjtrinlqxdu","kind":"reported_domain","summary":"Under speedwaycourierservice.com, reported by PhishDestroy","first_observed":"2026-11-06T02:46:46.295Z","first_published":"2026-11-06T03:05:02.297Z","source":"phishdestroy","source_name":"PhishDestroy","under":"speedwaycourierservice.com","source_url":"https://phishdestroy.io/domain/speedwaycourierservice.com/"}],"url":"https://domainspoof.com/live?show=all&q=webmail.speedwaycourierservice.com"},{"hostname":"webmail.ubicar.club","first_observed":"2026-11-06T02:11:00.434Z","first_published":"2026-11-06T03:05:02.297Z","brands":[],"dns":"resolved","resolved":["65.181.116.252"],"resolved_at":"2026-11-06T02:14:17Z","dns_checked_at":"2026-11-06T03:13:24.000Z","dns_since":"2026-11-06T03:13:24.000Z","findings":[{"id":"fdoffmzihg4ca2fyr2rmk","kind":"reported_domain","summary":"Under ubicar.club, reported by PhishDestroy","first_observed":"2026-11-06T02:11:00.434Z","first_published":"2026-11-06T03:05:02.297Z","source":"phishdestroy","source_name":"PhishDestroy","under":"ubicar.club","source_url":"https://phishdestroy.io/domain/ubicar.club/"}],"url":"https://domainspoof.com/live?show=all&q=webmail.ubicar.club"},{"hostname":"wfli.app","first_observed":"2026-11-06T02:41:40.421Z","first_published":"2026-11-06T03:05:02.297Z","brands":[],"dns":"resolved","resolved":["104.21.80.90","172.67.176.162"],"resolved_at":"2026-11-06T02:41:59Z","dns_checked_at":"2026-11-06T03:13:24.000Z","dns_since":"2026-11-06T03:13:24.000Z","findings":[{"id":"f7wpgtwwdjbkvojax7ux3","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-06T02:41:40.421Z","first_published":"2026-11-06T03:05:02.297Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=wfli.app"},{"hostname":"winearndrops.xyz","first_observed":"2026-11-06T02:11:00.434Z","first_published":"2026-11-06T03:05:02.297Z","brands":[],"dns":"resolved","resolved":["104.21.71.10","172.67.168.248"],"resolved_at":"2026-11-06T02:14:17Z","dns_checked_at":"2026-11-06T03:13:24.000Z","dns_since":"2026-11-06T03:13:24.000Z","findings":[{"id":"fo42mu57dqcyysizuh63g","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-06T02:11:00.434Z","first_published":"2026-11-06T03:05:02.297Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=winearndrops.xyz"},{"hostname":"wvq9sp.asia","first_observed":"2026-11-06T01:56:59.755Z","first_published":"2026-11-06T03:05:02.297Z","brands":[],"dns":"resolved","resolved":["104.21.41.109","172.67.164.111"],"resolved_at":"2026-11-06T02:00:59Z","dns_checked_at":"2026-11-06T03:13:24.000Z","dns_since":"2026-11-06T03:13:24.000Z","findings":[{"id":"fmaaej6y6t4jo5wapvhc7","kind":"reported_domain","summary":"Listed by NPA 165 (e-commerce)","first_observed":"2026-11-06T01:56:59.755Z","first_published":"2026-11-06T03:05:02.297Z","source":"npa","source_name":"NPA 165","claim":{"category":"e-commerce"}}],"url":"https://domainspoof.com/live?show=all&q=wvq9sp.asia"},{"hostname":"ww1.official-kmspico.com","first_observed":"2026-11-06T02:36:34.488Z","first_published":"2026-11-06T03:05:02.297Z","brands":[],"dns":"resolved","resolved":["162.4.84.215"],"resolved_at":"2026-11-06T02:36:55Z","dns_checked_at":"2026-11-06T03:13:24.000Z","dns_since":"2026-11-06T03:13:24.000Z","findings":[{"id":"f2c6xped6rgpaaru6msbj","kind":"reported_domain","summary":"Under official-kmspico.com, listed by MetaMask","first_observed":"2026-11-06T02:36:34.488Z","first_published":"2026-11-06T03:05:02.297Z","source":"metamask","source_name":"MetaMask","under":"official-kmspico.com"}],"url":"https://domainspoof.com/live?show=all&q=ww1.official-kmspico.com"},{"hostname":"www.api.staging.selfapis.in","first_observed":"2026-11-06T02:56:56.961Z","first_published":"2026-11-06T03:05:02.297Z","brands":[],"dns":"resolved","resolved":["192.185.129.44"],"resolved_at":"2026-11-06T03:06:30Z","dns_checked_at":"2026-11-06T03:13:24.000Z","dns_since":"2026-11-06T03:13:24.000Z","findings":[{"id":"fgcy4z5irmg7srnaoqfiy","kind":"reported_domain","summary":"Under selfapis.in, reported by PhishDestroy","first_observed":"2026-11-06T02:56:56.961Z","first_published":"2026-11-06T03:05:02.297Z","source":"phishdestroy","source_name":"PhishDestroy","under":"selfapis.in","source_url":"https://phishdestroy.io/domain/selfapis.in/"}],"url":"https://domainspoof.com/live?show=all&q=www.api.staging.selfapis.in"},{"hostname":"www.app.eoptiontrade.com","first_observed":"2026-11-06T02:56:56.961Z","first_published":"2026-11-06T03:05:02.297Z","brands":[],"dns":"resolved","resolved":["198.251.89.82"],"resolved_at":"2026-11-06T03:06:31Z","dns_checked_at":"2026-11-06T03:13:24.000Z","dns_since":"2026-11-06T03:13:24.000Z","findings":[{"id":"fokdui6vvhhoru5qolg67","kind":"reported_domain","summary":"Under eoptiontrade.com, reported by PhishDestroy","first_observed":"2026-11-06T02:56:56.961Z","first_published":"2026-11-06T03:05:02.297Z","source":"phishdestroy","source_name":"PhishDestroy","under":"eoptiontrade.com","source_url":"https://phishdestroy.io/domain/eoptiontrade.com/"}],"url":"https://domainspoof.com/live?show=all&q=www.app.eoptiontrade.com"},{"hostname":"www.bitpiehub.com","first_observed":"2026-11-06T02:36:55.332Z","first_published":"2026-11-06T03:05:02.297Z","brands":[{"id":"bitpie","name":"Bitpie","url":"https://domainspoof.com/brands/bitpie"}],"dns":"resolved","resolved":["137.220.157.34"],"resolved_at":"2026-11-06T03:13:24Z","dns_checked_at":"2026-11-06T03:13:24.000Z","dns_since":"2026-11-06T03:13:24.000Z","findings":[{"id":"fkx23z3fuo2kiltxjdjgl","kind":"spamhaus_drop","summary":"Resolved to 137.220.157.34 on Spamhaus DROP","first_observed":"2026-11-06T02:36:55.332Z","first_published":"2026-11-06T03:05:02.297Z","address":"137.220.157.34","list":"spamhaus_drop","list_name":"Spamhaus DROP"}],"url":"https://domainspoof.com/brands/bitpie"},{"hostname":"www.bitpietrade.com","first_observed":"2026-11-06T02:36:55.332Z","first_published":"2026-11-06T03:05:02.297Z","brands":[{"id":"bitpie","name":"Bitpie","url":"https://domainspoof.com/brands/bitpie"}],"dns":"resolved","resolved":["137.220.157.52"],"resolved_at":"2026-11-06T03:13:24Z","dns_checked_at":"2026-11-06T03:13:24.000Z","dns_since":"2026-11-06T03:13:24.000Z","findings":[{"id":"fhhvropit2gvpne4enqgv","kind":"spamhaus_drop","summary":"Resolved to 137.220.157.52 on Spamhaus DROP","first_observed":"2026-11-06T02:36:55.332Z","first_published":"2026-11-06T03:05:02.297Z","address":"137.220.157.52","list":"spamhaus_drop","list_name":"Spamhaus DROP"}],"url":"https://domainspoof.com/brands/bitpie"},{"hostname":"www.blog.cocsantacatarina.com.br","first_observed":"2026-11-06T02:36:34.488Z","first_published":"2026-11-06T03:05:02.297Z","brands":[],"dns":"resolved","resolved":["186.226.56.9"],"resolved_at":"2026-11-06T02:36:55Z","dns_checked_at":"2026-11-06T03:13:24.000Z","dns_since":"2026-11-06T03:13:24.000Z","findings":[{"id":"fazdty6xxx2auhnyhsj6g","kind":"reported_domain","summary":"Under blog.cocsantacatarina.com.br, reported by PhishDestroy","first_observed":"2026-11-06T02:36:34.488Z","first_published":"2026-11-06T03:05:02.297Z","source":"phishdestroy","source_name":"PhishDestroy","under":"blog.cocsantacatarina.com.br","source_url":"https://phishdestroy.io/domain/blog.cocsantacatarina.com.br/"}],"url":"https://domainspoof.com/live?show=all&q=www.blog.cocsantacatarina.com.br"},{"hostname":"www.bluecollarservs.com","first_observed":"2026-11-06T02:05:41.321Z","first_published":"2026-11-06T03:05:02.297Z","brands":[],"dns":"resolved","resolved":["104.21.34.39","172.67.196.247"],"resolved_at":"2026-11-06T02:07:22Z","dns_checked_at":"2026-11-06T03:13:24.000Z","dns_since":"2026-11-06T03:13:24.000Z","findings":[{"id":"fqisiyiofig4ncdqy32o2","kind":"reported_domain","summary":"Under bluecollarservs.com, reported by PhishDestroy","first_observed":"2026-11-06T02:05:41.321Z","first_published":"2026-11-06T03:05:02.297Z","source":"phishdestroy","source_name":"PhishDestroy","under":"bluecollarservs.com","source_url":"https://phishdestroy.io/domain/bluecollarservs.com/"}],"url":"https://domainspoof.com/live?show=all&q=www.bluecollarservs.com"},{"hostname":"www.callninja.co","first_observed":"2026-11-06T02:26:20.460Z","first_published":"2026-11-06T03:05:02.297Z","brands":[],"dns":"resolved","resolved":["199.16.172.121","199.16.173.9"],"resolved_at":"2026-11-06T02:26:41Z","dns_checked_at":"2026-11-06T03:13:24.000Z","dns_since":"2026-11-06T03:13:24.000Z","findings":[{"id":"f7ez4cmk74ofw4bj2tw3v","kind":"reported_domain","summary":"Under callninja.co, reported by PhishDestroy","first_observed":"2026-11-06T02:26:20.460Z","first_published":"2026-11-06T03:05:02.297Z","source":"phishdestroy","source_name":"PhishDestroy","under":"callninja.co","source_url":"https://phishdestroy.io/domain/callninja.co/"}],"url":"https://domainspoof.com/live?show=all&q=www.callninja.co"},{"hostname":"www.directus.zenavlico.cyou","first_observed":"2026-11-06T02:41:40.421Z","first_published":"2026-11-06T03:05:02.297Z","brands":[],"dns":"resolved","resolved":["95.85.244.13"],"resolved_at":"2026-11-06T02:41:59Z","dns_checked_at":"2026-11-06T03:13:24.000Z","dns_since":"2026-11-06T03:13:24.000Z","findings":[{"id":"fp2oq2yw3cygncemtsf6a","kind":"reported_domain","summary":"Under zenavlico.cyou, listed by CERT Polska","first_observed":"2026-11-06T02:41:40.421Z","first_published":"2026-11-06T03:05:02.297Z","source":"cert_polska","source_name":"CERT Polska","under":"zenavlico.cyou"}],"url":"https://domainspoof.com/live?show=all&q=www.directus.zenavlico.cyou"},{"hostname":"www.drnsnewzealand.org.drnsglobal.org","first_observed":"2026-11-06T02:26:20.460Z","first_published":"2026-11-06T03:05:02.297Z","brands":[],"dns":"resolved","resolved":["206.168.149.10"],"resolved_at":"2026-11-06T02:26:43Z","dns_checked_at":"2026-11-06T03:13:24.000Z","dns_since":"2026-11-06T03:13:24.000Z","findings":[{"id":"fam6oof5xgkgn7co2h3tn","kind":"reported_domain","summary":"Under drnsglobal.org, reported by PhishDestroy","first_observed":"2026-11-06T02:26:20.460Z","first_published":"2026-11-06T03:05:02.297Z","source":"phishdestroy","source_name":"PhishDestroy","under":"drnsglobal.org","source_url":"https://phishdestroy.io/domain/drnsglobal.org/"}],"url":"https://domainspoof.com/live?show=all&q=www.drnsnewzealand.org.drnsglobal.org"},{"hostname":"www.eoptiontrade.com","first_observed":"2026-11-06T02:56:56.961Z","first_published":"2026-11-06T03:05:02.297Z","brands":[],"dns":"resolved","resolved":["198.251.89.82"],"resolved_at":"2026-11-06T03:06:31Z","dns_checked_at":"2026-11-06T03:13:24.000Z","dns_since":"2026-11-06T03:13:24.000Z","findings":[{"id":"fxzlxuhz3ocdsxqcgl72x","kind":"reported_domain","summary":"Under eoptiontrade.com, reported by PhishDestroy","first_observed":"2026-11-06T02:56:56.961Z","first_published":"2026-11-06T03:05:02.297Z","source":"phishdestroy","source_name":"PhishDestroy","under":"eoptiontrade.com","source_url":"https://phishdestroy.io/domain/eoptiontrade.com/"}],"url":"https://domainspoof.com/live?show=all&q=www.eoptiontrade.com"},{"hostname":"www.equityautomatedbot.com","first_observed":"2026-11-06T01:56:59.755Z","first_published":"2026-11-06T03:05:02.297Z","brands":[],"dns":"resolved","resolved":["185.158.133.1"],"resolved_at":"2026-11-06T02:00:59Z","dns_checked_at":"2026-11-06T03:13:24.000Z","dns_since":"2026-11-06T03:13:24.000Z","findings":[{"id":"fijeept6swa34ko2jhpah","kind":"reported_domain","summary":"Under equityautomatedbot.com, reported by PhishDestroy","first_observed":"2026-11-06T01:56:59.755Z","first_published":"2026-11-06T03:05:02.297Z","source":"phishdestroy","source_name":"PhishDestroy","under":"equityautomatedbot.com","source_url":"https://phishdestroy.io/domain/equityautomatedbot.com/"}],"url":"https://domainspoof.com/live?show=all&q=www.equityautomatedbot.com"},{"hostname":"www.eu-hltv.com","first_observed":"2026-11-06T01:46:45.159Z","first_published":"2026-11-06T03:05:02.297Z","brands":[],"dns":"resolved","resolved":["163.245.41.169"],"resolved_at":"2026-11-06T01:50:36Z","dns_checked_at":"2026-11-06T03:13:24.000Z","dns_since":"2026-11-06T03:13:24.000Z","findings":[{"id":"fw6bjf2owxa4sjsvb56ue","kind":"reported_domain","summary":"Under eu-hltv.com, reported by PhishDestroy","first_observed":"2026-11-06T01:46:45.159Z","first_published":"2026-11-06T03:05:02.297Z","source":"phishdestroy","source_name":"PhishDestroy","under":"eu-hltv.com","source_url":"https://phishdestroy.io/domain/eu-hltv.com/"}],"url":"https://domainspoof.com/live?show=all&q=www.eu-hltv.com"},{"hostname":"www.grafana.zenavlico.cyou","first_observed":"2026-11-06T01:46:45.159Z","first_published":"2026-11-06T03:05:02.297Z","brands":[],"dns":"resolved","resolved":["95.85.244.13"],"resolved_at":"2026-11-06T01:50:36Z","dns_checked_at":"2026-11-06T03:13:24.000Z","dns_since":"2026-11-06T03:13:24.000Z","findings":[{"id":"f6rh36ppamkkr2bqk33bm","kind":"reported_domain","summary":"Under zenavlico.cyou, listed by CERT Polska","first_observed":"2026-11-06T01:46:45.159Z","first_published":"2026-11-06T03:05:02.297Z","source":"cert_polska","source_name":"CERT Polska","under":"zenavlico.cyou"}],"url":"https://domainspoof.com/live?show=all&q=www.grafana.zenavlico.cyou"},{"hostname":"www.greattabsonline.com","first_observed":"2026-11-06T02:05:41.321Z","first_published":"2026-11-06T03:05:02.297Z","brands":[],"dns":"resolved","resolved":["85.121.149.76"],"resolved_at":"2026-11-06T02:07:22Z","dns_checked_at":"2026-11-06T03:13:24.000Z","dns_since":"2026-11-06T03:13:24.000Z","findings":[{"id":"fe5f3y2giadxbslcbpmld","kind":"reported_domain","summary":"Under greattabsonline.com, reported by PhishDestroy","first_observed":"2026-11-06T02:05:41.321Z","first_published":"2026-11-06T03:05:02.297Z","source":"phishdestroy","source_name":"PhishDestroy","under":"greattabsonline.com","source_url":"https://phishdestroy.io/domain/greattabsonline.com/"}],"url":"https://domainspoof.com/live?show=all&q=www.greattabsonline.com"},{"hostname":"www.hokkori-hyoutanjima.com","first_observed":"2026-11-06T02:05:41.321Z","first_published":"2026-11-06T03:05:02.297Z","brands":[],"dns":"resolved","resolved":["162.43.94.73"],"resolved_at":"2026-11-06T02:07:22Z","dns_checked_at":"2026-11-06T03:13:24.000Z","dns_since":"2026-11-06T03:13:24.000Z","findings":[{"id":"flrm6unf64z3l5mzyrecg","kind":"reported_domain","summary":"Under hokkori-hyoutanjima.com, reported by PhishDestroy","first_observed":"2026-11-06T02:05:41.321Z","first_published":"2026-11-06T03:05:02.297Z","source":"phishdestroy","source_name":"PhishDestroy","under":"hokkori-hyoutanjima.com","source_url":"https://phishdestroy.io/domain/hokkori-hyoutanjima.com/"}],"url":"https://domainspoof.com/live?show=all&q=www.hokkori-hyoutanjima.com"},{"hostname":"www.ikejadynamiclionsclub.org.ng","first_observed":"2026-11-06T02:11:00.434Z","first_published":"2026-11-06T03:05:02.297Z","brands":[],"dns":"resolved","resolved":["163.61.188.5"],"resolved_at":"2026-11-06T02:14:19Z","dns_checked_at":"2026-11-06T03:13:24.000Z","dns_since":"2026-11-06T03:13:24.000Z","findings":[{"id":"fyxfhd474ofot4fy5yoho","kind":"reported_domain","summary":"Under ikejadynamiclionsclub.org.ng, reported by PhishDestroy","first_observed":"2026-11-06T02:11:00.434Z","first_published":"2026-11-06T03:05:02.297Z","source":"phishdestroy","source_name":"PhishDestroy","under":"ikejadynamiclionsclub.org.ng","source_url":"https://phishdestroy.io/domain/ikejadynamiclionsclub.org.ng/"}],"url":"https://domainspoof.com/live?show=all&q=www.ikejadynamiclionsclub.org.ng"},{"hostname":"www.kalinkally.com","first_observed":"2026-11-06T02:00:35.712Z","first_published":"2026-11-06T03:05:02.297Z","brands":[],"dns":"resolved","resolved":["77.37.53.77","77.37.83.8"],"resolved_at":"2026-11-06T02:03:52Z","dns_checked_at":"2026-11-06T03:13:24.000Z","dns_since":"2026-11-06T03:13:24.000Z","findings":[{"id":"fslc33mief52xynnfg5ga","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-06T02:00:35.712Z","first_published":"2026-11-06T03:05:02.297Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=www.kalinkally.com"},{"hostname":"www.merritoncapital.com","first_observed":"2026-11-06T02:56:56.961Z","first_published":"2026-11-06T03:05:02.297Z","brands":[],"dns":"resolved","resolved":["198.251.81.14"],"resolved_at":"2026-11-06T03:06:32Z","dns_checked_at":"2026-11-06T03:13:25.000Z","dns_since":"2026-11-06T03:13:25.000Z","findings":[{"id":"fhnah6hcy7v2dp4u2qbja","kind":"reported_domain","summary":"Under merritoncapital.com, reported by PhishDestroy","first_observed":"2026-11-06T02:56:56.961Z","first_published":"2026-11-06T03:05:02.297Z","source":"phishdestroy","source_name":"PhishDestroy","under":"merritoncapital.com","source_url":"https://phishdestroy.io/domain/merritoncapital.com/"}],"url":"https://domainspoof.com/live?show=all&q=www.merritoncapital.com"},{"hostname":"www.mintstudio.to","first_observed":"2026-11-06T02:46:46.295Z","first_published":"2026-11-06T03:05:02.297Z","brands":[],"dns":"resolved","resolved":["104.193.111.9"],"resolved_at":"2026-11-06T02:56:09Z","dns_checked_at":"2026-11-06T03:13:25.000Z","dns_since":"2026-11-06T03:13:25.000Z","findings":[{"id":"frhnrhpi2jusbgerg7db6","kind":"reported_domain","summary":"Under mintstudio.to, reported by PhishDestroy","first_observed":"2026-11-06T02:46:46.295Z","first_published":"2026-11-06T03:05:02.297Z","source":"phishdestroy","source_name":"PhishDestroy","under":"mintstudio.to","source_url":"https://phishdestroy.io/domain/mintstudio.to/"}],"url":"https://domainspoof.com/live?show=all&q=www.mintstudio.to"},{"hostname":"www.myimtoken.com.cn","first_observed":"2026-11-06T02:32:01.657Z","first_published":"2026-11-06T03:05:02.297Z","brands":[{"id":"imtoken","name":"imToken","url":"https://domainspoof.com/brands/imtoken"}],"dns":"resolved","resolved":["137.220.157.15"],"resolved_at":"2026-11-06T03:13:25Z","dns_checked_at":"2026-11-06T03:13:25.000Z","dns_since":"2026-11-06T03:13:25.000Z","findings":[{"id":"f3vzcvgfqq6smjeu2xhzs","kind":"spamhaus_drop","summary":"Resolved to 137.220.157.15 on Spamhaus DROP","first_observed":"2026-11-06T02:32:01.657Z","first_published":"2026-11-06T03:05:02.297Z","address":"137.220.157.15","list":"spamhaus_drop","list_name":"Spamhaus DROP"}],"url":"https://domainspoof.com/brands/imtoken"},{"hostname":"www.nowpayments.ru","first_observed":"2026-11-06T02:36:55.333Z","first_published":"2026-11-06T03:05:02.297Z","brands":[{"id":"changenow","name":"ChangeNOW","url":"https://domainspoof.com/brands/changenow"}],"dns":"resolved","resolved":["188.246.224.242"],"resolved_at":"2026-11-06T03:13:25Z","dns_checked_at":"2026-11-06T03:13:25.000Z","dns_since":"2026-11-06T03:13:25.000Z","findings":[{"id":"fxbvhmwwuurtcdz2ux32y","kind":"phishing_infrastructure","summary":"Resolved to 188.246.224.242, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T02:36:55.333Z","first_published":"2026-11-06T03:05:02.297Z","address":"188.246.224.242","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/changenow"},{"hostname":"www.pay.shdw.family","first_observed":"2026-11-06T01:51:52.918Z","first_published":"2026-11-06T03:05:02.297Z","brands":[],"dns":"not_found","resolved":[],"resolved_at":"2026-11-06T01:56:15Z","dns_checked_at":"2026-11-06T11:19:31.000Z","findings":[{"id":"f3w3au5mlglf737s5v4kr","kind":"reported_domain","summary":"Under shdw.family, listed by MetaMask","first_observed":"2026-11-06T01:51:52.918Z","first_published":"2026-11-06T03:05:02.297Z","source":"metamask","source_name":"MetaMask","under":"shdw.family"}],"url":"https://domainspoof.com/live?show=all&q=www.pay.shdw.family"},{"hostname":"www.pitycalculator.com","first_observed":"2026-11-06T02:21:13.588Z","first_published":"2026-11-06T03:05:02.297Z","brands":[],"dns":"resolved","resolved":["216.150.1.1"],"resolved_at":"2026-11-06T02:34:30Z","dns_checked_at":"2026-11-06T03:13:25.000Z","dns_since":"2026-11-06T03:13:25.000Z","findings":[{"id":"f6pxazmbh2j5ssgahz2jp","kind":"reported_domain","summary":"Under pitycalculator.com, reported by PhishDestroy","first_observed":"2026-11-06T02:21:13.588Z","first_published":"2026-11-06T03:05:02.297Z","source":"phishdestroy","source_name":"PhishDestroy","under":"pitycalculator.com","source_url":"https://phishdestroy.io/domain/pitycalculator.com/"}],"url":"https://domainspoof.com/live?show=all&q=www.pitycalculator.com"},{"hostname":"www.reklamy-google-ads.pl","first_observed":"2026-11-06T02:16:15.429Z","first_published":"2026-11-06T03:05:02.297Z","brands":[{"id":"google","name":"Google","url":"https://domainspoof.com/brands/google"}],"dns":"resolved","resolved":["185.253.212.22"],"resolved_at":"2026-11-06T03:13:25Z","dns_checked_at":"2026-11-06T03:13:25.000Z","dns_since":"2026-11-06T03:13:25.000Z","findings":[{"id":"fx2lf54oo3d5ptwed3dp5","kind":"phishing_infrastructure","summary":"Resolved to 185.253.212.22, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T02:16:15.429Z","first_published":"2026-11-06T03:05:02.297Z","address":"185.253.212.22","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/google"},{"hostname":"www.smszaim.kz","first_observed":"2026-11-06T02:46:46.295Z","first_published":"2026-11-06T03:05:02.297Z","brands":[],"dns":"resolved","resolved":["78.40.108.47"],"resolved_at":"2026-11-06T02:56:10Z","dns_checked_at":"2026-11-06T03:13:25.000Z","dns_since":"2026-11-06T03:13:25.000Z","findings":[{"id":"fgnw4sgnxxms3yqskwuuz","kind":"reported_domain","summary":"Under smszaim.kz, reported by PhishDestroy","first_observed":"2026-11-06T02:46:46.295Z","first_published":"2026-11-06T03:05:02.297Z","source":"phishdestroy","source_name":"PhishDestroy","under":"smszaim.kz","source_url":"https://phishdestroy.io/domain/smszaim.kz/"}],"url":"https://domainspoof.com/live?show=all&q=www.smszaim.kz"},{"hostname":"www.speedwaycourierservice.com","first_observed":"2026-11-06T02:46:46.295Z","first_published":"2026-11-06T03:05:02.297Z","brands":[],"dns":"resolved","resolved":["104.21.66.145","172.67.205.48"],"resolved_at":"2026-11-06T02:56:10Z","dns_checked_at":"2026-11-06T03:13:25.000Z","dns_since":"2026-11-06T03:13:25.000Z","findings":[{"id":"f6y5mdapr3thouxbwx3j6","kind":"reported_domain","summary":"Under speedwaycourierservice.com, reported by PhishDestroy","first_observed":"2026-11-06T02:46:46.295Z","first_published":"2026-11-06T03:05:02.297Z","source":"phishdestroy","source_name":"PhishDestroy","under":"speedwaycourierservice.com","source_url":"https://phishdestroy.io/domain/speedwaycourierservice.com/"}],"url":"https://domainspoof.com/live?show=all&q=www.speedwaycourierservice.com"},{"hostname":"www.suresh.sensiopesent.org","first_observed":"2026-11-06T02:11:00.434Z","first_published":"2026-11-06T03:05:02.297Z","brands":[],"dns":"resolved","resolved":["91.229.239.28"],"resolved_at":"2026-11-06T02:14:19Z","dns_checked_at":"2026-11-06T03:13:25.000Z","dns_since":"2026-11-06T03:13:25.000Z","findings":[{"id":"foqjbtybu76ocqqpf224r","kind":"reported_domain","summary":"Under sensiopesent.org, reported by PhishDestroy","first_observed":"2026-11-06T02:11:00.434Z","first_published":"2026-11-06T03:05:02.297Z","source":"phishdestroy","source_name":"PhishDestroy","under":"sensiopesent.org","source_url":"https://phishdestroy.io/domain/sensiopesent.org/"}],"url":"https://domainspoof.com/live?show=all&q=www.suresh.sensiopesent.org"},{"hostname":"www.swiss-post-ch.eu","first_observed":"2026-11-06T02:32:01.663Z","first_published":"2026-11-06T03:05:02.297Z","brands":[{"id":"swiss-post","name":"Swiss Post","url":"https://domainspoof.com/brands/swiss-post"}],"dns":"resolved","resolved":["81.169.145.66"],"resolved_at":"2026-11-06T03:13:25Z","dns_checked_at":"2026-11-06T03:13:25.000Z","dns_since":"2026-11-06T03:13:25.000Z","findings":[{"id":"fuo3kijcu7q37qz7nq2bt","kind":"phishing_infrastructure","summary":"Resolved to 81.169.145.66, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T02:32:01.663Z","first_published":"2026-11-06T03:05:02.297Z","address":"81.169.145.66","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/swiss-post"},{"hostname":"www.ubicar.club","first_observed":"2026-11-06T02:11:00.434Z","first_published":"2026-11-06T03:05:02.297Z","brands":[],"dns":"resolved","resolved":["65.181.116.252"],"resolved_at":"2026-11-06T02:14:19Z","dns_checked_at":"2026-11-06T03:13:25.000Z","dns_since":"2026-11-06T03:13:25.000Z","findings":[{"id":"ffqx7mtwiml4fgf4ejdkw","kind":"reported_domain","summary":"Under ubicar.club, reported by PhishDestroy","first_observed":"2026-11-06T02:11:00.434Z","first_published":"2026-11-06T03:05:02.297Z","source":"phishdestroy","source_name":"PhishDestroy","under":"ubicar.club","source_url":"https://phishdestroy.io/domain/ubicar.club/"}],"url":"https://domainspoof.com/live?show=all&q=www.ubicar.club"},{"hostname":"www.union-bank-ofindia.org","first_observed":"2026-11-06T02:01:00.868Z","first_published":"2026-11-06T03:05:02.297Z","brands":[{"id":"union-bank-of-india","name":"Union Bank of India","url":"https://domainspoof.com/brands/union-bank-of-india"}],"dns":"resolved","resolved":["163.245.41.169"],"resolved_at":"2026-11-06T03:13:25Z","dns_checked_at":"2026-11-06T03:13:25.000Z","dns_since":"2026-11-06T03:13:25.000Z","findings":[{"id":"fd3manw5fvyty6mpner7b","kind":"phishing_infrastructure","summary":"Resolved to 163.245.41.169, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T02:01:00.868Z","first_published":"2026-11-06T03:05:02.297Z","address":"163.245.41.169","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/union-bank-of-india"},{"hostname":"www.update.citrix.pufferfishstudios.com","first_observed":"2026-11-06T01:56:15.702Z","first_published":"2026-11-06T03:05:02.297Z","brands":[{"id":"citrix","name":"Citrix","url":"https://domainspoof.com/brands/citrix"}],"dns":"resolved","resolved":["45.77.75.133","45.77.92.157","207.246.78.75"],"resolved_at":"2026-11-06T03:13:25Z","dns_checked_at":"2026-11-06T03:13:25.000Z","dns_since":"2026-11-06T03:13:25.000Z","findings":[{"id":"f3adwzv7lfttklpfszq7x","kind":"phishing_infrastructure","summary":"Resolved to 45.77.75.133, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T01:56:15.702Z","first_published":"2026-11-06T03:05:02.297Z","address":"45.77.75.133","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/citrix"},{"hostname":"www.yccedss.ezgateway.net","first_observed":"2026-11-06T01:56:59.755Z","first_published":"2026-11-06T03:05:02.297Z","brands":[],"dns":"resolved","resolved":["167.172.120.156"],"resolved_at":"2026-11-06T02:01:00Z","dns_checked_at":"2026-11-06T03:13:25.000Z","dns_since":"2026-11-06T03:13:25.000Z","findings":[{"id":"fp7c4e77kqk24tkbw5ehm","kind":"reported_domain","summary":"Under ezgateway.net, listed by USOM","first_observed":"2026-11-06T01:56:59.755Z","first_published":"2026-11-06T03:05:02.297Z","source":"usom","source_name":"USOM","under":"ezgateway.net"}],"url":"https://domainspoof.com/live?show=all&q=www.yccedss.ezgateway.net"},{"hostname":"xepoma.shop","first_observed":"2026-11-06T02:21:13.588Z","first_published":"2026-11-06T03:05:02.297Z","brands":[],"dns":"resolved","resolved":["104.21.66.149","172.67.205.52"],"resolved_at":"2026-11-06T02:34:31Z","dns_checked_at":"2026-11-06T03:13:25.000Z","dns_since":"2026-11-06T03:13:25.000Z","findings":[{"id":"fwlwp7z2xkywfulov6wym","kind":"reported_domain","summary":"Listed by NPA 165 (e-commerce)","first_observed":"2026-11-06T02:21:13.588Z","first_published":"2026-11-06T03:05:02.297Z","source":"npa","source_name":"NPA 165","claim":{"category":"e-commerce"}}],"url":"https://domainspoof.com/live?show=all&q=xepoma.shop"},{"hostname":"xjieoscx.com","first_observed":"2026-11-06T02:11:00.434Z","first_published":"2026-11-06T03:05:02.297Z","brands":[],"dns":"no_address","resolved":[],"resolved_at":"2026-11-06T02:14:20Z","dns_checked_at":"2026-11-06T11:19:31.000Z","findings":[{"id":"f73oiyx7mbpuy6mh65ds2","kind":"reported_domain","summary":"Listed by NPA 165 (information services)","first_observed":"2026-11-06T02:11:00.434Z","first_published":"2026-11-06T03:05:02.297Z","source":"npa","source_name":"NPA 165","claim":{"category":"information services"}}],"url":"https://domainspoof.com/live?show=all&q=xjieoscx.com"},{"hostname":"xn--wechat-u47r.com","first_observed":"2026-11-06T02:00:35.712Z","first_published":"2026-11-06T03:05:02.297Z","brands":[{"id":"wechat","name":"WeChat","url":"https://domainspoof.com/brands/wechat"}],"dns":"resolved","resolved":["104.21.29.80","172.67.171.108","2606:4700:3032::ac43:ab6c","2606:4700:3033::6815:1d50"],"resolved_at":"2026-11-06T02:03:52Z","dns_checked_at":"2026-11-06T03:13:25.000Z","dns_since":"2026-11-06T03:13:25.000Z","findings":[{"id":"fkwvxzcpvvsx35uzx4hi3","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-06T02:00:35.712Z","first_published":"2026-11-06T03:05:02.297Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/brands/wechat"},{"hostname":"xrillaz.com","first_observed":"2026-11-06T01:56:59.755Z","first_published":"2026-11-06T03:05:02.297Z","brands":[],"dns":"resolved","resolved":["104.21.38.246","172.67.141.38"],"resolved_at":"2026-11-06T02:01:00Z","dns_checked_at":"2026-11-06T03:13:25.000Z","dns_since":"2026-11-06T03:13:25.000Z","findings":[{"id":"fvnazffbtktpfrwqj6ngh","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-06T01:56:59.755Z","first_published":"2026-11-06T03:05:02.297Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/xrillaz.com/"}],"url":"https://domainspoof.com/live?show=all&q=xrillaz.com"},{"hostname":"xrpresso.info","first_observed":"2026-11-06T01:56:59.755Z","first_published":"2026-11-06T03:05:02.297Z","brands":[],"dns":"resolved","resolved":["104.21.86.253","172.67.138.222"],"resolved_at":"2026-11-06T02:01:00Z","dns_checked_at":"2026-11-06T03:13:25.000Z","dns_since":"2026-11-06T03:13:25.000Z","findings":[{"id":"fyvc4rpam7tnecogexs3v","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-06T01:56:59.755Z","first_published":"2026-11-06T03:05:02.297Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/xrpresso.info/"}],"url":"https://domainspoof.com/live?show=all&q=xrpresso.info"},{"hostname":"xwmqk.shop","first_observed":"2026-11-06T02:36:34.488Z","first_published":"2026-11-06T03:05:02.297Z","brands":[],"dns":"resolved","resolved":["104.21.36.34","172.67.184.89"],"resolved_at":"2026-11-06T02:36:55Z","dns_checked_at":"2026-11-06T03:13:25.000Z","dns_since":"2026-11-06T03:13:25.000Z","findings":[{"id":"fxelmpafgesqtu556xpxd","kind":"reported_domain","summary":"Listed by NPA 165 (information services)","first_observed":"2026-11-06T02:36:34.488Z","first_published":"2026-11-06T03:05:02.297Z","source":"npa","source_name":"NPA 165","claim":{"category":"information services"}}],"url":"https://domainspoof.com/live?show=all&q=xwmqk.shop"},{"hostname":"yandex.pay.internalcdek.rhxyvcq9vvts2ld9.r.mail.leankoala.com","first_observed":"2026-11-06T02:14:21.069Z","first_published":"2026-11-06T03:05:02.297Z","brands":[{"id":"yandex","name":"Yandex","url":"https://domainspoof.com/brands/yandex"}],"dns":"resolved","resolved":["172.246.243.65"],"resolved_at":"2026-11-06T03:13:25Z","dns_checked_at":"2026-11-06T03:13:25.000Z","dns_since":"2026-11-06T03:13:25.000Z","findings":[{"id":"fgfpqeoit2clbbzel3mpo","kind":"phishing_infrastructure","summary":"Resolved to 172.246.243.65, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T02:14:21.069Z","first_published":"2026-11-06T03:05:02.297Z","address":"172.246.243.65","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/yandex"},{"hostname":"yocasino-es.com.es","first_observed":"2026-11-06T01:56:59.755Z","first_published":"2026-11-06T03:05:02.297Z","brands":[],"dns":"resolved","resolved":["104.21.20.194","172.67.194.25"],"resolved_at":"2026-11-06T02:01:00Z","dns_checked_at":"2026-11-06T03:13:25.000Z","dns_since":"2026-11-06T03:13:25.000Z","findings":[{"id":"fflimcyhuuhm73hblc4rk","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-06T01:56:59.755Z","first_published":"2026-11-06T03:05:02.297Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=yocasino-es.com.es"},{"hostname":"yy.oiuyghgfbvg.ezgateway.net","first_observed":"2026-11-06T01:51:52.918Z","first_published":"2026-11-06T03:05:02.297Z","brands":[],"dns":"resolved","resolved":["172.66.44.231","172.66.47.25"],"resolved_at":"2026-11-06T01:56:16Z","dns_checked_at":"2026-11-06T03:13:25.000Z","dns_since":"2026-11-06T03:13:25.000Z","findings":[{"id":"fatdvfap7qghf6mnmbsps","kind":"reported_domain","summary":"Under ezgateway.net, listed by USOM","first_observed":"2026-11-06T01:51:52.918Z","first_published":"2026-11-06T03:05:02.297Z","source":"usom","source_name":"USOM","under":"ezgateway.net"}],"url":"https://domainspoof.com/live?show=all&q=yy.oiuyghgfbvg.ezgateway.net"},{"hostname":"zest-participation.xyz","first_observed":"2026-11-06T02:05:41.321Z","first_published":"2026-11-06T03:05:02.297Z","brands":[],"dns":"resolved","resolved":["104.21.60.11","172.67.186.215"],"resolved_at":"2026-11-06T02:07:24Z","dns_checked_at":"2026-11-06T03:13:25.000Z","dns_since":"2026-11-06T03:13:25.000Z","findings":[{"id":"fvsscmqtpjfo3exvxctw7","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-06T02:05:41.321Z","first_published":"2026-11-06T03:05:02.297Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=zest-participation.xyz"},{"hostname":"zoom-tech.us","first_observed":"2026-11-06T01:51:52.918Z","first_published":"2026-11-06T03:05:02.297Z","brands":[],"dns":"resolved","resolved":["34.41.139.193"],"resolved_at":"2026-11-06T01:56:16Z","dns_checked_at":"2026-11-06T03:13:25.000Z","dns_since":"2026-11-06T03:13:25.000Z","findings":[{"id":"fo73hurqudcgucb7kzsqk","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-06T01:51:52.918Z","first_published":"2026-11-06T03:05:02.297Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=zoom-tech.us"},{"hostname":"ada-reddit.xyz","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","brands":[{"id":"reddit","name":"Reddit","url":"https://domainspoof.com/brands/reddit"}],"dns":"resolved","resolved":["150.95.255.38"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “reddit”, a name we match for Reddit, resolved to 150.95.255.38, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","of":"reddit.com","spelling":"combo","match":"name","token":"reddit","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"150.95.255.38","flagged_at":"2026-11-06T01:53:03Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/reddit"},{"hostname":"admin-youtube.xyz","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","brands":[{"id":"youtube","name":"YouTube","url":"https://domainspoof.com/brands/youtube"}],"dns":"resolved","resolved":["150.95.255.38"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “youtube”, a name we match for YouTube, resolved to 150.95.255.38, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","of":"youtube.com","spelling":"combo","match":"name","token":"youtube","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"150.95.255.38","flagged_at":"2026-11-06T01:53:03Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/youtube"},{"hostname":"aeon.ryukyu","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","brands":[{"id":"aeon","name":"AEON","url":"https://domainspoof.com/brands/aeon"}],"dns":"resolved","resolved":["150.95.255.38"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of aeon.co.jp (same name, other ending), resolved to 150.95.255.38, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","of":"aeon.co.jp","spelling":"tld","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"150.95.255.38","flagged_at":"2026-11-06T01:53:03Z"}]}],"url":"https://domainspoof.com/brands/aeon"},{"hostname":"airtable-reddit-infinity.xyz","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","brands":[{"id":"reddit","name":"Reddit","url":"https://domainspoof.com/brands/reddit"}],"dns":"resolved","resolved":["150.95.255.38"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “reddit”, a name we match for Reddit, resolved to 150.95.255.38, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","of":"reddit.com","spelling":"combo","match":"name","token":"reddit","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"150.95.255.38","flagged_at":"2026-11-06T01:53:03Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/reddit"},{"hostname":"allegro.net.ua","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","brands":[{"id":"allegro","name":"Allegro","url":"https://domainspoof.com/brands/allegro"}],"dns":"resolved","resolved":["185.68.16.29","2a00:7a60:0:101d::1"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of allegro.pl (same name, other ending), resolved to 185.68.16.29, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","of":"allegro.pl","spelling":"tld","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"185.68.16.29","flagged_at":"2026-11-06T01:53:03Z"}]}],"url":"https://domainspoof.com/brands/allegro"},{"hostname":"altium-youtube.xyz","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","brands":[{"id":"youtube","name":"YouTube","url":"https://domainspoof.com/brands/youtube"}],"dns":"resolved","resolved":["150.95.255.38"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “youtube”, a name we match for YouTube, resolved to 150.95.255.38, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","of":"youtube.com","spelling":"combo","match":"name","token":"youtube","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"150.95.255.38","flagged_at":"2026-11-06T01:53:03Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/youtube"},{"hostname":"analytics-galaxy-reddit.xyz","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","brands":[{"id":"reddit","name":"Reddit","url":"https://domainspoof.com/brands/reddit"}],"dns":"resolved","resolved":["150.95.255.38"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “reddit”, a name we match for Reddit, resolved to 150.95.255.38, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","of":"reddit.com","spelling":"combo","match":"name","token":"reddit","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"150.95.255.38","flagged_at":"2026-11-06T01:53:03Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/reddit"},{"hostname":"ansible-reddit-autocad.xyz","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","brands":[{"id":"reddit","name":"Reddit","url":"https://domainspoof.com/brands/reddit"}],"dns":"resolved","resolved":["150.95.255.38"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “reddit”, a name we match for Reddit, resolved to 150.95.255.38, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","of":"reddit.com","spelling":"combo","match":"name","token":"reddit","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"150.95.255.38","flagged_at":"2026-11-06T01:53:03Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/reddit"},{"hostname":"api-wasm-reddit.xyz","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","brands":[{"id":"reddit","name":"Reddit","url":"https://domainspoof.com/brands/reddit"}],"dns":"resolved","resolved":["150.95.255.38"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “reddit”, a name we match for Reddit, resolved to 150.95.255.38, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","of":"reddit.com","spelling":"combo","match":"name","token":"reddit","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"150.95.255.38","flagged_at":"2026-11-06T01:53:03Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/reddit"},{"hostname":"appdynamics-youtube-void.xyz","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","brands":[{"id":"cisco","name":"Cisco","url":"https://domainspoof.com/brands/cisco"},{"id":"youtube","name":"YouTube","url":"https://domainspoof.com/brands/youtube"}],"dns":"resolved","resolved":["150.95.255.38"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “appdynamics”, a name we match for Cisco, resolved to 150.95.255.38, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","of":"youtube.com","spelling":"combo","match":"name","token":"appdynamics","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"150.95.255.38","flagged_at":"2026-11-06T01:53:03Z"}],"conditions":"https://domainspoof.org/terms#zone-data"},{"kind":"lookalike","summary":"Registered domain containing “youtube”, a name we match for YouTube, resolved to 150.95.255.38, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","of":"youtube.com","spelling":"combo","match":"name","token":"youtube","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"150.95.255.38","flagged_at":"2026-11-06T01:53:03Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/cisco"},{"hostname":"apply-reddit-kube-router.xyz","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","brands":[{"id":"reddit","name":"Reddit","url":"https://domainspoof.com/brands/reddit"}],"dns":"resolved","resolved":["150.95.255.38"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “reddit”, a name we match for Reddit, resolved to 150.95.255.38, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","of":"reddit.com","spelling":"combo","match":"name","token":"reddit","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"150.95.255.38","flagged_at":"2026-11-06T01:53:03Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/reddit"},{"hostname":"arm-reddit-import.xyz","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","brands":[{"id":"reddit","name":"Reddit","url":"https://domainspoof.com/brands/reddit"}],"dns":"resolved","resolved":["150.95.255.38"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “reddit”, a name we match for Reddit, resolved to 150.95.255.38, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","of":"reddit.com","spelling":"combo","match":"name","token":"reddit","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"150.95.255.38","flagged_at":"2026-11-06T01:53:03Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/reddit"},{"hostname":"arm-youtube.xyz","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","brands":[{"id":"youtube","name":"YouTube","url":"https://domainspoof.com/brands/youtube"}],"dns":"resolved","resolved":["150.95.255.38"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “youtube”, a name we match for YouTube, resolved to 150.95.255.38, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","of":"youtube.com","spelling":"combo","match":"name","token":"youtube","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"150.95.255.38","flagged_at":"2026-11-06T01:53:03Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/youtube"},{"hostname":"artifact-offer-reddit.xyz","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","brands":[{"id":"reddit","name":"Reddit","url":"https://domainspoof.com/brands/reddit"}],"dns":"resolved","resolved":["150.95.255.38"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “reddit”, a name we match for Reddit, resolved to 150.95.255.38, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","of":"reddit.com","spelling":"combo","match":"name","token":"reddit","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"150.95.255.38","flagged_at":"2026-11-06T01:53:03Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/reddit"},{"hostname":"asteroid-webex-mount.xyz","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","brands":[{"id":"webex","name":"Webex","url":"https://domainspoof.com/brands/webex"}],"dns":"resolved","resolved":["150.95.255.38"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “webex”, a name we match for Webex, resolved to 150.95.255.38, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","of":"webex.com","spelling":"combo","match":"name","token":"webex","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"150.95.255.38","flagged_at":"2026-11-06T01:53:03Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/webex"},{"hostname":"axis.net.au","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","brands":[{"id":"axis-bank","name":"Axis Bank","url":"https://domainspoof.com/brands/axis-bank"}],"dns":"resolved","resolved":["134.199.165.199"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of axis.bank.in (same name, other ending), resolved to 134.199.165.199, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","of":"axis.bank.in","spelling":"tld","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"134.199.165.199","flagged_at":"2026-11-06T01:53:03Z"}]}],"url":"https://domainspoof.com/brands/axis-bank"},{"hostname":"backend-follower-wechat.xyz","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","brands":[{"id":"wechat","name":"WeChat","url":"https://domainspoof.com/brands/wechat"}],"dns":"resolved","resolved":["150.95.255.38"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “wechat”, a name we match for WeChat, resolved to 150.95.255.38, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","of":"wechat.com","spelling":"combo","match":"name","token":"wechat","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"150.95.255.38","flagged_at":"2026-11-06T01:53:03Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/wechat"},{"hostname":"bigint-analytics-wechat.xyz","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","brands":[{"id":"wechat","name":"WeChat","url":"https://domainspoof.com/brands/wechat"}],"dns":"resolved","resolved":["150.95.255.38"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “wechat”, a name we match for WeChat, resolved to 150.95.255.38, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","of":"wechat.com","spelling":"combo","match":"name","token":"wechat","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"150.95.255.38","flagged_at":"2026-11-06T01:53:03Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/wechat"},{"hostname":"bitbox.com.au","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","brands":[{"id":"bitbox","name":"BitBox","url":"https://domainspoof.com/brands/bitbox"}],"dns":"resolved","resolved":["103.67.235.120"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of bitbox.swiss (same name, other ending), resolved to 103.67.235.120, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","of":"bitbox.swiss","spelling":"tld","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"103.67.235.120","flagged_at":"2026-11-06T01:53:03Z"}]}],"url":"https://domainspoof.com/brands/bitbox"},{"hostname":"cache-youtube.xyz","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","brands":[{"id":"youtube","name":"YouTube","url":"https://domainspoof.com/brands/youtube"}],"dns":"resolved","resolved":["150.95.255.38"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “youtube”, a name we match for YouTube, resolved to 150.95.255.38, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","of":"youtube.com","spelling":"combo","match":"name","token":"youtube","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"150.95.255.38","flagged_at":"2026-11-06T01:53:03Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/youtube"},{"hostname":"cap-xen-youtube.xyz","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","brands":[{"id":"youtube","name":"YouTube","url":"https://domainspoof.com/brands/youtube"}],"dns":"resolved","resolved":["150.95.255.38"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “youtube”, a name we match for YouTube, resolved to 150.95.255.38, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","of":"youtube.com","spelling":"combo","match":"name","token":"youtube","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"150.95.255.38","flagged_at":"2026-11-06T01:53:03Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/youtube"},{"hostname":"cell-exchange-youtube.xyz","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","brands":[{"id":"youtube","name":"YouTube","url":"https://domainspoof.com/brands/youtube"}],"dns":"resolved","resolved":["150.95.255.38"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “youtube”, a name we match for YouTube, resolved to 150.95.255.38, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","of":"youtube.com","spelling":"combo","match":"name","token":"youtube","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"150.95.255.38","flagged_at":"2026-11-06T01:53:03Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/youtube"},{"hostname":"claim-rlusd.ink","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","brands":[{"id":"ripple","name":"Ripple (XRP)","url":"https://domainspoof.com/brands/ripple"}],"dns":"resolved","resolved":["104.21.27.28","172.67.140.242","2606:4700:3031::ac43:8cf2","2606:4700:3032::6815:1b1c"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of ripple.com (the name with an added word), listed by MetaMask","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","of":"ripple.com","spelling":"combo","found_by":"zone_file","listings":[{"kind":"reported","source":"metamask","source_name":"MetaMask","host":"claim-rlusd.ink","flagged_at":"2026-11-06T01:53:03Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/ripple"},{"hostname":"claimshein.fit","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","brands":[{"id":"shein","name":"Shein","url":"https://domainspoof.com/brands/shein"}],"dns":"resolved","resolved":["2.59.170.20","104.219.250.37"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of shein.com (the name with an added word), resolved to 2.59.170.20, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","of":"shein.com","spelling":"combo","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"2.59.170.20","flagged_at":"2026-11-06T01:53:03Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/shein"},{"hostname":"cold-youtube.xyz","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","brands":[{"id":"youtube","name":"YouTube","url":"https://domainspoof.com/brands/youtube"}],"dns":"resolved","resolved":["150.95.255.38"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “youtube”, a name we match for YouTube, resolved to 150.95.255.38, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","of":"youtube.com","spelling":"combo","match":"name","token":"youtube","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"150.95.255.38","flagged_at":"2026-11-06T01:53:03Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/youtube"},{"hostname":"comcats.club","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","brands":[{"id":"comcast","name":"Comcast (Xfinity)","url":"https://domainspoof.com/brands/comcast"}],"dns":"resolved","resolved":["2.57.91.91"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of xfinity.com (two letters swapped), resolved to 2.57.91.91, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","of":"xfinity.com","spelling":"transposition","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"2.57.91.91","flagged_at":"2026-11-06T01:53:03Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/comcast"},{"hostname":"consul-react-tiktok.xyz","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","brands":[{"id":"tiktok","name":"TikTok","url":"https://domainspoof.com/brands/tiktok"}],"dns":"resolved","resolved":["150.95.255.38"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “tiktok”, a name we match for TikTok, resolved to 150.95.255.38, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","of":"tiktok.com","spelling":"combo","match":"name","token":"tiktok","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"150.95.255.38","flagged_at":"2026-11-06T01:53:03Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/tiktok"},{"hostname":"coupon-telcel.info","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","brands":[{"id":"telcel","name":"Telcel","url":"https://domainspoof.com/brands/telcel"}],"dns":"resolved","resolved":["78.157.209.173"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “telcel”, a name we match for Telcel, resolved to 78.157.209.173, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","of":"telcel.com","spelling":"combo","match":"name","token":"telcel","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"78.157.209.173","flagged_at":"2026-11-06T01:53:03Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/telcel"},{"hostname":"domain-tiktok-typescript.xyz","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","brands":[{"id":"tiktok","name":"TikTok","url":"https://domainspoof.com/brands/tiktok"}],"dns":"resolved","resolved":["150.95.255.38"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “tiktok”, a name we match for TikTok, resolved to 150.95.255.38, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","of":"tiktok.com","spelling":"combo","match":"name","token":"tiktok","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"150.95.255.38","flagged_at":"2026-11-06T01:53:03Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/tiktok"},{"hostname":"eagle-wechat.xyz","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","brands":[{"id":"wechat","name":"WeChat","url":"https://domainspoof.com/brands/wechat"}],"dns":"resolved","resolved":["150.95.255.38"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “wechat”, a name we match for WeChat, resolved to 150.95.255.38, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","of":"wechat.com","spelling":"combo","match":"name","token":"wechat","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"150.95.255.38","flagged_at":"2026-11-06T01:53:03Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/wechat"},{"hostname":"easy-wordpress.work","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","brands":[{"id":"wordpress","name":"WordPress","url":"https://domainspoof.com/brands/wordpress"}],"dns":"resolved","resolved":["157.7.107.119"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “wordpress”, a name we match for WordPress, resolved to 157.7.107.119, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","of":"wordpress.com","spelling":"combo","match":"name","token":"wordpress","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"157.7.107.119","flagged_at":"2026-11-06T01:53:03Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/wordpress"},{"hostname":"encode-youtube.xyz","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","brands":[{"id":"youtube","name":"YouTube","url":"https://domainspoof.com/brands/youtube"}],"dns":"resolved","resolved":["150.95.255.38"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “youtube”, a name we match for YouTube, resolved to 150.95.255.38, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","of":"youtube.com","spelling":"combo","match":"name","token":"youtube","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"150.95.255.38","flagged_at":"2026-11-06T01:53:03Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/youtube"},{"hostname":"fragment-reddit.xyz","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","brands":[{"id":"reddit","name":"Reddit","url":"https://domainspoof.com/brands/reddit"}],"dns":"resolved","resolved":["150.95.255.38"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “reddit”, a name we match for Reddit, resolved to 150.95.255.38, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","of":"reddit.com","spelling":"combo","match":"name","token":"reddit","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"150.95.255.38","flagged_at":"2026-11-06T01:53:03Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/reddit"},{"hostname":"getsofi.app","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","brands":[{"id":"sofi","name":"SoFi","url":"https://domainspoof.com/brands/sofi"}],"dns":"resolved","resolved":["153.52.255.18"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “sofi”, a name we match for SoFi, resolved to 153.52.255.18, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","of":"sofi.com","spelling":"combo","match":"name","token":"sofi","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"153.52.255.18","flagged_at":"2026-11-06T01:53:03Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/sofi"},{"hostname":"govpl.one","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","brands":[{"id":"gov-pl","name":"gov.pl","url":"https://domainspoof.com/brands/gov-pl"}],"dns":"resolved","resolved":["104.21.81.90","172.67.141.82","2606:4700:3031::6815:515a","2606:4700:3031::ac43:8d52"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “govpl”, a name we match for gov.pl, listed by CERT Polska","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","of":"www.gov.pl","spelling":"combo","match":"name","token":"govpl","found_by":"zone_file","listings":[{"kind":"reported","source":"cert_polska","source_name":"CERT Polska","host":"govpl.one","flagged_at":"2026-11-06T01:53:03Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/gov-pl"},{"hostname":"govuk.work","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","brands":[{"id":"gov-uk","name":"GOV.UK","url":"https://domainspoof.com/brands/gov-uk"}],"dns":"resolved","resolved":["104.21.86.254","172.67.138.223","2606:4700:3030::6815:56fe","2606:4700:3033::ac43:8adf"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “govuk”, a name we match for GOV.UK, listed by MetaMask","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","of":"www.gov.uk","spelling":"combo","match":"name","token":"govuk","found_by":"zone_file","listings":[{"kind":"reported","source":"metamask","source_name":"MetaMask","host":"govuk.work","flagged_at":"2026-11-06T01:53:03Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/gov-uk"},{"hostname":"health-whatsapp-repository.xyz","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","brands":[{"id":"whatsapp","name":"WhatsApp","url":"https://domainspoof.com/brands/whatsapp"}],"dns":"resolved","resolved":["150.95.255.38"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “whatsapp”, a name we match for WhatsApp, resolved to 150.95.255.38, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","of":"whatsapp.com","spelling":"combo","match":"name","token":"whatsapp","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"150.95.255.38","flagged_at":"2026-11-06T01:53:03Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/whatsapp"},{"hostname":"helm-faith-webex.xyz","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","brands":[{"id":"webex","name":"Webex","url":"https://domainspoof.com/brands/webex"}],"dns":"resolved","resolved":["150.95.255.38"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “webex”, a name we match for Webex, resolved to 150.95.255.38, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","of":"webex.com","spelling":"combo","match":"name","token":"webex","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"150.95.255.38","flagged_at":"2026-11-06T01:53:03Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/webex"},{"hostname":"imt0ken.vip","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","brands":[{"id":"imtoken","name":"imToken","url":"https://domainspoof.com/brands/imtoken"}],"dns":"resolved","resolved":["8.217.154.81"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of token.im (similar-looking characters), resolved to 8.217.154.81, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","of":"token.im","spelling":"homoglyph","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"8.217.154.81","flagged_at":"2026-11-06T01:53:03Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/imtoken"},{"hostname":"imtoken-cdn-bon.lol","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","brands":[{"id":"imtoken","name":"imToken","url":"https://domainspoof.com/brands/imtoken"}],"dns":"resolved","resolved":["156.225.24.233"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “imtoken”, a name we match for imToken, resolved to 156.225.24.233, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","of":"token.im","spelling":"combo","match":"name","token":"imtoken","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"156.225.24.233","flagged_at":"2026-11-06T01:53:03Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/imtoken"},{"hostname":"imtoken-cdn-sf.lol","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","brands":[{"id":"imtoken","name":"imToken","url":"https://domainspoof.com/brands/imtoken"}],"dns":"resolved","resolved":["103.38.82.152"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “imtoken”, a name we match for imToken, resolved to 103.38.82.152, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","of":"token.im","spelling":"combo","match":"name","token":"imtoken","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"103.38.82.152","flagged_at":"2026-11-06T01:53:03Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/imtoken"},{"hostname":"imtoken-wallet.club","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","brands":[{"id":"imtoken","name":"imToken","url":"https://domainspoof.com/brands/imtoken"}],"dns":"resolved","resolved":["198.46.189.10"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “imtoken”, a name we match for imToken, listed by MetaMask, and reported by PhishDestroy, and resolved to 198.46.189.10, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","of":"token.im","spelling":"combo","match":"name","token":"imtoken","found_by":"zone_file","listings":[{"kind":"reported","source":"metamask","source_name":"MetaMask","host":"imtoken-wallet.club","flagged_at":"2026-11-06T01:53:03Z"},{"kind":"reported","source":"phishdestroy","source_name":"PhishDestroy","host":"imtoken-wallet.club","flagged_at":"2026-11-06T01:53:03Z"},{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"198.46.189.10","flagged_at":"2026-11-06T01:53:03Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/imtoken"},{"hostname":"interface-youtube-javascript.xyz","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","brands":[{"id":"youtube","name":"YouTube","url":"https://domainspoof.com/brands/youtube"}],"dns":"resolved","resolved":["150.95.255.38"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “youtube”, a name we match for YouTube, resolved to 150.95.255.38, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","of":"youtube.com","spelling":"combo","match":"name","token":"youtube","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"150.95.255.38","flagged_at":"2026-11-06T01:53:03Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/youtube"},{"hostname":"iws-whatsapp.shop","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","brands":[{"id":"whatsapp","name":"WhatsApp","url":"https://domainspoof.com/brands/whatsapp"}],"dns":"resolved","resolved":["37.221.67.157"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “whatsapp”, a name we match for WhatsApp, resolved to 37.221.67.157, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","of":"whatsapp.com","spelling":"combo","match":"name","token":"whatsapp","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"37.221.67.157","flagged_at":"2026-11-06T01:53:03Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/whatsapp"},{"hostname":"mobywatelgov.work","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","brands":[{"id":"gov-pl","name":"gov.pl","url":"https://domainspoof.com/brands/gov-pl"}],"dns":"resolved","resolved":["43.134.142.179"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “mobywatel”, a name we match for gov.pl, listed by CERT Polska","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","of":"www.gov.pl","spelling":"combo","match":"name","token":"mobywatel","found_by":"zone_file","listings":[{"kind":"reported","source":"cert_polska","source_name":"CERT Polska","host":"mobywatelgov.work","flagged_at":"2026-11-06T01:53:03Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/gov-pl"},{"hostname":"moriarty-youtube.vip","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","brands":[{"id":"youtube","name":"YouTube","url":"https://domainspoof.com/brands/youtube"}],"dns":"unknown","resolved":[],"findings":[{"kind":"lookalike","summary":"Registered domain containing “youtube”, a name we match for YouTube, reported by PhishDestroy","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","of":"youtube.com","spelling":"combo","match":"name","token":"youtube","found_by":"zone_file","listings":[{"kind":"reported","source":"phishdestroy","source_name":"PhishDestroy","host":"moriarty-youtube.vip","flagged_at":"2026-11-06T01:53:03Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/youtube"},{"hostname":"mywhatsapp.work","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","brands":[{"id":"whatsapp","name":"WhatsApp","url":"https://domainspoof.com/brands/whatsapp"}],"dns":"resolved","resolved":["92.53.96.169"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “whatsapp”, a name we match for WhatsApp, resolved to 92.53.96.169, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","of":"whatsapp.com","spelling":"combo","match":"name","token":"whatsapp","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"92.53.96.169","flagged_at":"2026-11-06T01:53:03Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/whatsapp"},{"hostname":"obywatel.space","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","brands":[{"id":"gov-pl","name":"gov.pl","url":"https://domainspoof.com/brands/gov-pl"}],"dns":"resolved","resolved":["51.195.17.68"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of www.gov.pl (a dropped letter), resolved to 51.195.17.68, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","of":"www.gov.pl","spelling":"omission","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"51.195.17.68","flagged_at":"2026-11-06T01:53:03Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/gov-pl"},{"hostname":"openseaforanimals-roblox.wiki","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","brands":[{"id":"roblox","name":"Roblox","url":"https://domainspoof.com/brands/roblox"}],"dns":"resolved","resolved":["104.21.1.92","172.67.128.246","2606:4700:3033::6815:15c","2606:4700:3037::ac43:80f6"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “roblox”, a name we match for Roblox, listed by MetaMask, and reported by PhishDestroy","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","of":"roblox.com","spelling":"combo","match":"name","token":"roblox","found_by":"zone_file","listings":[{"kind":"reported","source":"metamask","source_name":"MetaMask","host":"openseaforanimals-roblox.wiki","flagged_at":"2026-11-06T01:53:03Z"},{"kind":"reported","source":"phishdestroy","source_name":"PhishDestroy","host":"openseaforanimals-roblox.wiki","flagged_at":"2026-11-06T01:53:03Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/roblox"},{"hostname":"pazaraba.xyz","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","brands":[{"id":"pazarama","name":"Pazarama","url":"https://domainspoof.com/brands/pazarama"}],"dns":"resolved","resolved":["93.89.226.17"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of pazarama.com (a changed character), resolved to 93.89.226.17, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","of":"pazarama.com","spelling":"replacement","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"93.89.226.17","flagged_at":"2026-11-06T01:53:03Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/pazarama"},{"hostname":"rakuten66.vip","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","brands":[{"id":"rakuten","name":"Rakuten","url":"https://domainspoof.com/brands/rakuten"}],"dns":"resolved","resolved":["23.82.16.54"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “rakuten”, a name we match for Rakuten, resolved to 23.82.16.54, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","of":"rakuten.co.jp","spelling":"combo","match":"name","token":"rakuten","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"23.82.16.54","flagged_at":"2026-11-06T01:53:03Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/rakuten"},{"hostname":"raydium-pro.vip","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","brands":[{"id":"raydium","name":"Raydium","url":"https://domainspoof.com/brands/raydium"}],"dns":"resolved","resolved":["172.65.211.209"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “raydium”, a name we match for Raydium, reported by PhishDestroy","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","of":"raydium.io","spelling":"combo","match":"name","token":"raydium","found_by":"zone_file","listings":[{"kind":"reported","source":"phishdestroy","source_name":"PhishDestroy","host":"raydium-pro.vip","flagged_at":"2026-11-06T01:53:03Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/raydium"},{"hostname":"raydium-web3.vip","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","brands":[{"id":"raydium","name":"Raydium","url":"https://domainspoof.com/brands/raydium"}],"dns":"resolved","resolved":["104.21.82.181","172.67.161.112","2606:4700:3031::6815:52b5","2606:4700:3031::ac43:a170"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “raydium”, a name we match for Raydium, listed by MetaMask","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","of":"raydium.io","spelling":"combo","match":"name","token":"raydium","found_by":"zone_file","listings":[{"kind":"reported","source":"metamask","source_name":"MetaMask","host":"raydium-web3.vip","flagged_at":"2026-11-06T01:53:03Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/raydium"},{"hostname":"rayidum.ink","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","brands":[{"id":"raydium","name":"Raydium","url":"https://domainspoof.com/brands/raydium"}],"dns":"resolved","resolved":["104.21.38.53","172.67.219.60","2606:4700:3030::6815:2635","2606:4700:3034::ac43:db3c"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of raydium.io (two letters swapped), listed by MetaMask","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","of":"raydium.io","spelling":"transposition","found_by":"zone_file","listings":[{"kind":"reported","source":"metamask","source_name":"MetaMask","host":"rayidum.ink","flagged_at":"2026-11-06T01:53:03Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/raydium"},{"hostname":"reddit-doesnt-like-this.site","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","brands":[{"id":"reddit","name":"Reddit","url":"https://domainspoof.com/brands/reddit"}],"dns":"resolved","resolved":["208.115.249.235"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “reddit”, a name we match for Reddit, resolved to 208.115.249.235, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","of":"reddit.com","spelling":"combo","match":"name","token":"reddit","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"208.115.249.235","flagged_at":"2026-11-06T01:53:03Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/reddit"},{"hostname":"reddit1.shop","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","brands":[{"id":"reddit","name":"Reddit","url":"https://domainspoof.com/brands/reddit"}],"dns":"resolved","resolved":["2.59.170.20","104.219.250.37"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “reddit”, a name we match for Reddit, resolved to 2.59.170.20, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","of":"reddit.com","spelling":"combo","match":"name","token":"reddit","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"2.59.170.20","flagged_at":"2026-11-06T01:53:03Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/reddit"},{"hostname":"redditt.top","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","brands":[{"id":"reddit","name":"Reddit","url":"https://domainspoof.com/brands/reddit"}],"dns":"resolved","resolved":["5.79.75.200"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of reddit.com (a doubled letter), resolved to 5.79.75.200, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","of":"reddit.com","spelling":"repetition","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"5.79.75.200","flagged_at":"2026-11-06T01:53:03Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/reddit"},{"hostname":"rewards-xaman.biz","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","brands":[{"id":"xaman","name":"Xaman","url":"https://domainspoof.com/brands/xaman"}],"dns":"resolved","resolved":["104.21.33.157","172.67.146.201","2606:4700:3035::ac43:92c9","2606:4700:3036::6815:219d"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of xaman.app (the name with an added word), listed by MetaMask","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","of":"xaman.app","spelling":"combo","found_by":"zone_file","listings":[{"kind":"reported","source":"metamask","source_name":"MetaMask","host":"rewards-xaman.biz","flagged_at":"2026-11-06T01:53:03Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/xaman"},{"hostname":"rewards-xaman.one","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","brands":[{"id":"xaman","name":"Xaman","url":"https://domainspoof.com/brands/xaman"}],"dns":"resolved","resolved":["104.21.49.146","172.67.163.171","2606:4700:3035::ac43:a3ab","2606:4700:3037::6815:3192"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of xaman.app (the name with an added word), listed by MetaMask","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","of":"xaman.app","spelling":"combo","found_by":"zone_file","listings":[{"kind":"reported","source":"metamask","source_name":"MetaMask","host":"rewards-xaman.one","flagged_at":"2026-11-06T01:53:03Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/xaman"},{"hostname":"rheingauer-volksbank.club","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","brands":[{"id":"volksbank","name":"Volksbank (Austria)","url":"https://domainspoof.com/brands/volksbank"},{"id":"volksbanken-raiffeisenbanken","name":"Volksbanken Raiffeisenbanken","url":"https://domainspoof.com/brands/volksbanken-raiffeisenbanken"}],"dns":"resolved","resolved":["217.160.0.191","2001:8d8:100f:f000::200"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “volksbank”, a name we match for Volksbank (Austria), resolved to 217.160.0.191, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","of":"vr.de","spelling":"combo","match":"name","token":"volksbank","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"217.160.0.191","flagged_at":"2026-11-06T01:53:03Z"}],"conditions":"https://domainspoof.org/terms#zone-data"},{"kind":"lookalike","summary":"Registered domain containing “volksbank”, a name we match for Volksbanken Raiffeisenbanken, resolved to 217.160.0.191, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","of":"vr.de","spelling":"combo","match":"name","token":"volksbank","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"217.160.0.191","flagged_at":"2026-11-06T01:53:03Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/volksbank"},{"hostname":"robinhoodx.mom","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","brands":[{"id":"robinhood","name":"Robinhood","url":"https://domainspoof.com/brands/robinhood"}],"dns":"resolved","resolved":["153.52.255.103"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of robinhood.com (an added character), resolved to 153.52.255.103, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","of":"robinhood.com","spelling":"insertion","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"153.52.255.103","flagged_at":"2026-11-06T01:53:03Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/robinhood"},{"hostname":"roblox55.org","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","brands":[{"id":"roblox","name":"Roblox","url":"https://domainspoof.com/brands/roblox"}],"dns":"resolved","resolved":["51.161.21.1"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “roblox”, a name we match for Roblox, resolved to 51.161.21.1, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","of":"roblox.com","spelling":"combo","match":"name","token":"roblox","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"51.161.21.1","flagged_at":"2026-11-06T01:53:03Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/roblox"},{"hostname":"robloxapi.org","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","brands":[{"id":"roblox","name":"Roblox","url":"https://domainspoof.com/brands/roblox"}],"dns":"resolved","resolved":["212.92.104.116"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “roblox”, a name we match for Roblox, resolved to 212.92.104.116, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","of":"roblox.com","spelling":"combo","match":"name","token":"roblox","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"212.92.104.116","flagged_at":"2026-11-06T01:53:03Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/roblox"},{"hostname":"rtpdubai.club","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","brands":[{"id":"rta-dubai","name":"RTA Dubai","url":"https://domainspoof.com/brands/rta-dubai"}],"dns":"resolved","resolved":["2.59.170.20","104.219.250.37"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of rta.ae (a changed character), resolved to 2.59.170.20, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","of":"rta.ae","spelling":"replacement","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"2.59.170.20","flagged_at":"2026-11-06T01:53:03Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/rta-dubai"},{"hostname":"rtpdubai.fit","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","brands":[{"id":"rta-dubai","name":"RTA Dubai","url":"https://domainspoof.com/brands/rta-dubai"}],"dns":"resolved","resolved":["2.59.170.20","104.219.250.37"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of rta.ae (a changed character), resolved to 2.59.170.20, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","of":"rta.ae","spelling":"replacement","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"2.59.170.20","flagged_at":"2026-11-06T01:53:03Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/rta-dubai"},{"hostname":"rtpdubai.ink","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","brands":[{"id":"rta-dubai","name":"RTA Dubai","url":"https://domainspoof.com/brands/rta-dubai"}],"dns":"resolved","resolved":["2.59.170.20","104.219.250.37"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of rta.ae (a changed character), resolved to 2.59.170.20, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","of":"rta.ae","spelling":"replacement","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"2.59.170.20","flagged_at":"2026-11-06T01:53:03Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/rta-dubai"},{"hostname":"samsung-tv.vip","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","brands":[{"id":"samsung","name":"Samsung","url":"https://domainspoof.com/brands/samsung"}],"dns":"resolved","resolved":["23.82.16.55"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “samsung”, a name we match for Samsung, resolved to 23.82.16.55, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","of":"samsung.com","spelling":"combo","match":"name","token":"samsung","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"23.82.16.55","flagged_at":"2026-11-06T01:53:03Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/samsung"},{"hostname":"samsunginsurance.org","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","brands":[{"id":"samsung","name":"Samsung","url":"https://domainspoof.com/brands/samsung"}],"dns":"resolved","resolved":["208.115.249.237"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “samsung”, a name we match for Samsung, resolved to 208.115.249.237, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","of":"samsung.com","spelling":"combo","match":"name","token":"samsung","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"208.115.249.237","flagged_at":"2026-11-06T01:53:03Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/samsung"},{"hostname":"samsungonline.store","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","brands":[{"id":"samsung","name":"Samsung","url":"https://domainspoof.com/brands/samsung"}],"dns":"resolved","resolved":["216.245.197.41"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “samsung”, a name we match for Samsung, resolved to 216.245.197.41, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","of":"samsung.com","spelling":"combo","match":"name","token":"samsung","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"216.245.197.41","flagged_at":"2026-11-06T01:53:03Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/samsung"},{"hostname":"samsungunlockcode.info","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","brands":[{"id":"samsung","name":"Samsung","url":"https://domainspoof.com/brands/samsung"}],"dns":"resolved","resolved":["78.157.209.171"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of samsung.com (the name with an added word), resolved to 78.157.209.171, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","of":"samsung.com","spelling":"combo","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"78.157.209.171","flagged_at":"2026-11-06T01:53:03Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/samsung"},{"hostname":"scipy-youtube.xyz","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","brands":[{"id":"youtube","name":"YouTube","url":"https://domainspoof.com/brands/youtube"}],"dns":"resolved","resolved":["150.95.255.38"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “youtube”, a name we match for YouTube, resolved to 150.95.255.38, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","of":"youtube.com","spelling":"combo","match":"name","token":"youtube","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"150.95.255.38","flagged_at":"2026-11-06T01:53:03Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/youtube"},{"hostname":"scope-wechat.xyz","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","brands":[{"id":"wechat","name":"WeChat","url":"https://domainspoof.com/brands/wechat"}],"dns":"resolved","resolved":["150.95.255.38"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “wechat”, a name we match for WeChat, resolved to 150.95.255.38, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","of":"wechat.com","spelling":"combo","match":"name","token":"wechat","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"150.95.255.38","flagged_at":"2026-11-06T01:53:03Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/wechat"},{"hostname":"serasabr.org","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","brands":[{"id":"serasa","name":"Serasa","url":"https://domainspoof.com/brands/serasa"}],"dns":"resolved","resolved":["173.234.157.138"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “serasa”, a name we match for Serasa, resolved to 173.234.157.138, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","of":"serasa.com.br","spelling":"combo","match":"name","token":"serasa","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"173.234.157.138","flagged_at":"2026-11-06T01:53:03Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/serasa"},{"hostname":"sharingfiles-wechat.ink","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","brands":[{"id":"wechat","name":"WeChat","url":"https://domainspoof.com/brands/wechat"}],"dns":"resolved","resolved":["78.40.209.0"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “wechat”, a name we match for WeChat, resolved to 78.40.209.0, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","of":"wechat.com","spelling":"combo","match":"name","token":"wechat","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"78.40.209.0","flagged_at":"2026-11-06T01:53:03Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/wechat"},{"hostname":"shein888.vip","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","brands":[{"id":"shein","name":"Shein","url":"https://domainspoof.com/brands/shein"}],"dns":"resolved","resolved":["2.57.91.91","2a02:4780:84::32"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “shein”, a name we match for Shein, resolved to 2.57.91.91, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","of":"shein.com","spelling":"combo","match":"name","token":"shein","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"2.57.91.91","flagged_at":"2026-11-06T01:53:03Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/shein"},{"hostname":"shopee-tw.vip","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","brands":[{"id":"shopee","name":"Shopee","url":"https://domainspoof.com/brands/shopee"}],"dns":"resolved","resolved":["104.21.84.58","172.67.187.28","2606:4700:3030::ac43:bb1c","2606:4700:3034::6815:543a"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “shopee”, a name we match for Shopee, listed by NPA 165 (finance and insurance)","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","of":"shopee.com.br","spelling":"combo","match":"name","token":"shopee","found_by":"zone_file","listings":[{"kind":"reported","source":"npa","source_name":"NPA 165","host":"shopee-tw.vip","claim":{"category":"finance and insurance"},"flagged_at":"2026-11-06T01:53:03Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/shopee"},{"hostname":"shopee3.shop","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","brands":[{"id":"shopee","name":"Shopee","url":"https://domainspoof.com/brands/shopee"}],"dns":"resolved","resolved":["212.92.104.10"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “shopee”, a name we match for Shopee, resolved to 212.92.104.10, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","of":"shopee.com.br","spelling":"combo","match":"name","token":"shopee","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"212.92.104.10","flagged_at":"2026-11-06T01:53:03Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/shopee"},{"hostname":"sll-whatsapp.icu","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","brands":[{"id":"whatsapp","name":"WhatsApp","url":"https://domainspoof.com/brands/whatsapp"}],"dns":"resolved","resolved":["91.199.133.247"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “whatsapp”, a name we match for WhatsApp, resolved to 91.199.133.247, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","of":"whatsapp.com","spelling":"combo","match":"name","token":"whatsapp","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"91.199.133.247","flagged_at":"2026-11-06T01:53:03Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/whatsapp"},{"hostname":"smarthings.pro","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","brands":[{"id":"samsung","name":"Samsung","url":"https://domainspoof.com/brands/samsung"}],"dns":"resolved","resolved":["65.75.210.174"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of samsung.com (a dropped letter), resolved to 65.75.210.174, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","of":"samsung.com","spelling":"omission","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"65.75.210.174","flagged_at":"2026-11-06T01:53:03Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/samsung"},{"hostname":"snapchatplus.vip","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","brands":[{"id":"snapchat","name":"Snapchat","url":"https://domainspoof.com/brands/snapchat"}],"dns":"resolved","resolved":["213.111.148.232"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “snapchat”, a name we match for Snapchat, resolved to 213.111.148.232, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","of":"snapchat.com","spelling":"combo","match":"name","token":"snapchat","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"213.111.148.232","flagged_at":"2026-11-06T01:53:03Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/snapchat"},{"hostname":"sonet.live","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","brands":[{"id":"so-net","name":"So-net","url":"https://domainspoof.com/brands/so-net"}],"dns":"resolved","resolved":["173.234.157.130"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “sonet”, a name we match for So-net, resolved to 173.234.157.130, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","of":"so-net.ne.jp","spelling":"combo","match":"name","token":"sonet","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"173.234.157.130","flagged_at":"2026-11-06T01:53:03Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/so-net"},{"hostname":"sparkasse-bad-salzungen.biz","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","brands":[{"id":"sparkasse","name":"Sparkasse","url":"https://domainspoof.com/brands/sparkasse"}],"dns":"resolved","resolved":["81.169.145.165","2a01:238:20a:202:1165::"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “sparkasse”, a name we match for Sparkasse, resolved to 81.169.145.165, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","of":"sparkasse.de","spelling":"combo","match":"name","token":"sparkasse","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"81.169.145.165","flagged_at":"2026-11-06T01:53:03Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/sparkasse"},{"hostname":"sparkasse-badneustadt.biz","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","brands":[{"id":"sparkasse","name":"Sparkasse","url":"https://domainspoof.com/brands/sparkasse"}],"dns":"resolved","resolved":["217.160.0.72","2001:8d8:100f:f000::21b"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “sparkasse”, a name we match for Sparkasse, resolved to 217.160.0.72, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","of":"sparkasse.de","spelling":"combo","match":"name","token":"sparkasse","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"217.160.0.72","flagged_at":"2026-11-06T01:53:03Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/sparkasse"},{"hostname":"sparkasse-bayreuth.biz","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","brands":[{"id":"sparkasse","name":"Sparkasse","url":"https://domainspoof.com/brands/sparkasse"}],"dns":"resolved","resolved":["80.150.6.143","2003:2:2:15:80:150:6:143"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “sparkasse”, a name we match for Sparkasse, resolved to 80.150.6.143, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","of":"sparkasse.de","spelling":"combo","match":"name","token":"sparkasse","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"80.150.6.143","flagged_at":"2026-11-06T01:53:03Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/sparkasse"},{"hostname":"sparkasse-bielefeld.biz","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","brands":[{"id":"sparkasse","name":"Sparkasse","url":"https://domainspoof.com/brands/sparkasse"}],"dns":"resolved","resolved":["81.169.145.90","2a01:238:20a:202:1090::"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “sparkasse”, a name we match for Sparkasse, resolved to 81.169.145.90, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","of":"sparkasse.de","spelling":"combo","match":"name","token":"sparkasse","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"81.169.145.90","flagged_at":"2026-11-06T01:53:03Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/sparkasse"},{"hostname":"sparkasse-eisenach.biz","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","brands":[{"id":"sparkasse","name":"Sparkasse","url":"https://domainspoof.com/brands/sparkasse"}],"dns":"resolved","resolved":["81.169.145.152","2a01:238:20a:202:1152::"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “sparkasse”, a name we match for Sparkasse, resolved to 81.169.145.152, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","of":"sparkasse.de","spelling":"combo","match":"name","token":"sparkasse","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"81.169.145.152","flagged_at":"2026-11-06T01:53:03Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/sparkasse"},{"hostname":"sparkasse-hrv.biz","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","brands":[{"id":"sparkasse","name":"Sparkasse","url":"https://domainspoof.com/brands/sparkasse"}],"dns":"resolved","resolved":["217.160.0.52","2001:8d8:100f:f000::2d7"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “sparkasse”, a name we match for Sparkasse, resolved to 217.160.0.52, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","of":"sparkasse.de","spelling":"combo","match":"name","token":"sparkasse","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"217.160.0.52","flagged_at":"2026-11-06T01:53:03Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/sparkasse"},{"hostname":"sparkasse-im-landkreis-cham.biz","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","brands":[{"id":"sparkasse","name":"Sparkasse","url":"https://domainspoof.com/brands/sparkasse"}],"dns":"resolved","resolved":["217.160.0.211","2001:8d8:100f:f000::200"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “sparkasse”, a name we match for Sparkasse, resolved to 217.160.0.211, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","of":"sparkasse.de","spelling":"combo","match":"name","token":"sparkasse","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"217.160.0.211","flagged_at":"2026-11-06T01:53:03Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/sparkasse"},{"hostname":"sparkasse-maerkisches-sauerland-hemer-menden.biz","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","brands":[{"id":"sparkasse","name":"Sparkasse","url":"https://domainspoof.com/brands/sparkasse"}],"dns":"resolved","resolved":["88.99.101.251","2a01:4f8:221:11cd:9734:4c26:6044:5f33"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “sparkasse”, a name we match for Sparkasse, resolved to 88.99.101.251, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","of":"sparkasse.de","spelling":"combo","match":"name","token":"sparkasse","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"88.99.101.251","flagged_at":"2026-11-06T01:53:03Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/sparkasse"},{"hostname":"sparkasse-maerkisches-sauerland.biz","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","brands":[{"id":"sparkasse","name":"Sparkasse","url":"https://domainspoof.com/brands/sparkasse"}],"dns":"resolved","resolved":["88.99.101.251","2a01:4f8:221:11cd:9734:4c26:6044:5f33"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “sparkasse”, a name we match for Sparkasse, resolved to 88.99.101.251, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","of":"sparkasse.de","spelling":"combo","match":"name","token":"sparkasse","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"88.99.101.251","flagged_at":"2026-11-06T01:53:03Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/sparkasse"},{"hostname":"sparkasse-mecklenburg-schwerin.biz","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","brands":[{"id":"sparkasse","name":"Sparkasse","url":"https://domainspoof.com/brands/sparkasse"}],"dns":"resolved","resolved":["217.160.0.124","2001:8d8:100f:f000::200"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “sparkasse”, a name we match for Sparkasse, resolved to 217.160.0.124, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","of":"sparkasse.de","spelling":"combo","match":"name","token":"sparkasse","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"217.160.0.124","flagged_at":"2026-11-06T01:53:03Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/sparkasse"},{"hostname":"sparkasse-wartburg.biz","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","brands":[{"id":"sparkasse","name":"Sparkasse","url":"https://domainspoof.com/brands/sparkasse"}],"dns":"resolved","resolved":["81.169.145.152","2a01:238:20a:202:1152::"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “sparkasse”, a name we match for Sparkasse, resolved to 81.169.145.152, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","of":"sparkasse.de","spelling":"combo","match":"name","token":"sparkasse","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"81.169.145.152","flagged_at":"2026-11-06T01:53:03Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/sparkasse"},{"hostname":"sparkasse-wartburgkreis.biz","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","brands":[{"id":"sparkasse","name":"Sparkasse","url":"https://domainspoof.com/brands/sparkasse"}],"dns":"resolved","resolved":["81.169.145.165","2a01:238:20a:202:1165::"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “sparkasse”, a name we match for Sparkasse, resolved to 81.169.145.165, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","of":"sparkasse.de","spelling":"combo","match":"name","token":"sparkasse","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"81.169.145.165","flagged_at":"2026-11-06T01:53:03Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/sparkasse"},{"hostname":"stargates.dev","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","brands":[{"id":"stargate-finance","name":"Stargate Finance","url":"https://domainspoof.com/brands/stargate-finance"}],"dns":"resolved","resolved":["153.52.255.34"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of stargate.finance (an added character), resolved to 153.52.255.34, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","of":"stargate.finance","spelling":"insertion","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"153.52.255.34","flagged_at":"2026-11-06T01:53:03Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/stargate-finance"},{"hostname":"supercellshop.xyz","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","brands":[{"id":"supercell","name":"Supercell","url":"https://domainspoof.com/brands/supercell"}],"dns":"resolved","resolved":["153.52.255.103"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “supercell”, a name we match for Supercell, resolved to 153.52.255.103, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","of":"supercell.com","spelling":"combo","match":"name","token":"supercell","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"153.52.255.103","flagged_at":"2026-11-06T01:53:03Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/supercell"},{"hostname":"target-locations.org","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","brands":[{"id":"target","name":"Target","url":"https://domainspoof.com/brands/target"}],"dns":"resolved","resolved":["64.31.3.237"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “target”, a name we match for Target, resolved to 64.31.3.237, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","of":"target.com","spelling":"combo","match":"name","token":"target","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"64.31.3.237","flagged_at":"2026-11-06T01:53:03Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/target"},{"hostname":"telegram-account-auth.one","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","brands":[{"id":"telegram","name":"Telegram","url":"https://domainspoof.com/brands/telegram"}],"dns":"resolved","resolved":["87.120.107.209"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of telegram.org (the name with an added word), reported by PhishDestroy, and resolved to 87.120.107.209, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","of":"telegram.org","spelling":"combo","found_by":"zone_file","listings":[{"kind":"reported","source":"phishdestroy","source_name":"PhishDestroy","host":"telegram-account-auth.one","flagged_at":"2026-11-06T01:53:03Z"},{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"87.120.107.209","flagged_at":"2026-11-06T01:53:03Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/telegram"},{"hostname":"telegrampremium.vip","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","brands":[{"id":"telegram","name":"Telegram","url":"https://domainspoof.com/brands/telegram"}],"dns":"resolved","resolved":["212.92.105.27"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “telegrampremium”, a name we match for Telegram, resolved to 212.92.105.27, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","of":"telegram.org","spelling":"combo","match":"name","token":"telegrampremium","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"212.92.105.27","flagged_at":"2026-11-06T01:53:03Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/telegram"},{"hostname":"telepass-pay.biz","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","brands":[{"id":"telepass","name":"Telepass","url":"https://domainspoof.com/brands/telepass"}],"dns":"resolved","resolved":["195.110.124.133"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of telepass.com (the name with an added word), resolved to 195.110.124.133, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","of":"telepass.com","spelling":"combo","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"195.110.124.133","flagged_at":"2026-11-06T01:53:03Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/telepass"},{"hostname":"telepasspay.biz","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","brands":[{"id":"telepass","name":"Telepass","url":"https://domainspoof.com/brands/telepass"}],"dns":"resolved","resolved":["195.110.124.133"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of telepass.com (the name with an added word), resolved to 195.110.124.133, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","of":"telepass.com","spelling":"combo","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"195.110.124.133","flagged_at":"2026-11-06T01:53:03Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/telepass"},{"hostname":"temushop.info","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","brands":[{"id":"temu","name":"Temu","url":"https://domainspoof.com/brands/temu"}],"dns":"resolved","resolved":["78.157.209.171"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “temu”, a name we match for Temu, resolved to 78.157.209.171, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","of":"temu.com","spelling":"combo","match":"name","token":"temu","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"78.157.209.171","flagged_at":"2026-11-06T01:53:03Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/temu"},{"hostname":"tepco-papillon.biz","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","brands":[{"id":"tepco","name":"TEPCO","url":"https://domainspoof.com/brands/tepco"}],"dns":"resolved","resolved":["150.95.255.38"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “tepco”, a name we match for TEPCO, resolved to 150.95.255.38, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","of":"tepco.co.jp","spelling":"combo","match":"name","token":"tepco","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"150.95.255.38","flagged_at":"2026-11-06T01:53:03Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/tepco"},{"hostname":"tepco-papillon.luxe","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","brands":[{"id":"tepco","name":"TEPCO","url":"https://domainspoof.com/brands/tepco"}],"dns":"resolved","resolved":["150.95.255.38"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “tepco”, a name we match for TEPCO, resolved to 150.95.255.38, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","of":"tepco.co.jp","spelling":"combo","match":"name","token":"tepco","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"150.95.255.38","flagged_at":"2026-11-06T01:53:03Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/tepco"},{"hostname":"tiktok18.ink","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","brands":[{"id":"tiktok","name":"TikTok","url":"https://domainspoof.com/brands/tiktok"}],"dns":"resolved","resolved":["2.59.170.20","104.219.250.37"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “tiktok”, a name we match for TikTok, resolved to 2.59.170.20, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","of":"tiktok.com","spelling":"combo","match":"name","token":"tiktok","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"2.59.170.20","flagged_at":"2026-11-06T01:53:03Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/tiktok"},{"hostname":"tiktok6shop.vip","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","brands":[{"id":"tiktok","name":"TikTok","url":"https://domainspoof.com/brands/tiktok"}],"dns":"no_address","resolved":[],"findings":[{"kind":"lookalike","summary":"Registered domain containing “tiktok”, a name we match for TikTok, reported by PhishDestroy","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","of":"tiktok.com","spelling":"combo","match":"name","token":"tiktok","found_by":"zone_file","listings":[{"kind":"reported","source":"phishdestroy","source_name":"PhishDestroy","host":"tiktok6shop.vip","flagged_at":"2026-11-06T01:53:03Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/tiktok"},{"hostname":"tiktokjp.vip","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","brands":[{"id":"tiktok","name":"TikTok","url":"https://domainspoof.com/brands/tiktok"}],"dns":"resolved","resolved":["134.122.188.79"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “tiktok”, a name we match for TikTok, resolved to 134.122.188.79, where reported phishing was found in the 48 hours before, and resolved to 134.122.188.79 on Spamhaus DROP","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","of":"tiktok.com","spelling":"combo","match":"name","token":"tiktok","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"134.122.188.79","flagged_at":"2026-11-06T01:53:03Z"},{"kind":"address","source":"spamhaus_drop","list_name":"Spamhaus DROP","address":"134.122.188.79","flagged_at":"2026-11-06T01:53:03Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/tiktok"},{"hostname":"tiktokusername.xyz","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","brands":[{"id":"tiktok","name":"TikTok","url":"https://domainspoof.com/brands/tiktok"}],"dns":"resolved","resolved":["23.82.16.53"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “tiktok”, a name we match for TikTok, resolved to 23.82.16.53, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","of":"tiktok.com","spelling":"combo","match":"name","token":"tiktok","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"23.82.16.53","flagged_at":"2026-11-06T01:53:03Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/tiktok"},{"hostname":"tiktokvn.store","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","brands":[{"id":"tiktok","name":"TikTok","url":"https://domainspoof.com/brands/tiktok"}],"dns":"resolved","resolved":["77.247.179.90"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “tiktokv”, a name we match for TikTok, resolved to 77.247.179.90, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","of":"tiktok.com","spelling":"combo","match":"name","token":"tiktokv","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"77.247.179.90","flagged_at":"2026-11-06T01:53:03Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/tiktok"},{"hostname":"tim-professional.store","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","brands":[{"id":"tim","name":"TIM","url":"https://domainspoof.com/brands/tim"}],"dns":"resolved","resolved":["91.106.202.20"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “tim”, a name we match for TIM, resolved to 91.106.202.20, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","of":"tim.it","spelling":"combo","match":"name","token":"tim","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"91.106.202.20","flagged_at":"2026-11-06T01:53:03Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/tim"},{"hostname":"tokenpocket-verge.courses","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","brands":[{"id":"tokenpocket","name":"TokenPocket","url":"https://domainspoof.com/brands/tokenpocket"}],"dns":"resolved","resolved":["172.232.24.161","172.232.24.235","172.234.25.42"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “tokenpocket”, a name we match for TokenPocket, resolved to 172.232.24.161, where reported phishing was found in the 48 hours before, and resolved to 172.232.24.235, where reported phishing was found in the 48 hours before, and resolved to 172.234.25.42, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","of":"tokenpocket.pro","spelling":"combo","match":"name","token":"tokenpocket","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"172.232.24.161","flagged_at":"2026-11-06T01:53:03Z"},{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"172.232.24.235","flagged_at":"2026-11-06T01:53:03Z"},{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"172.234.25.42","flagged_at":"2026-11-06T01:53:03Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/tokenpocket"},{"hostname":"tokenpockets.vip","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","brands":[{"id":"tokenpocket","name":"TokenPocket","url":"https://domainspoof.com/brands/tokenpocket"}],"dns":"resolved","resolved":["104.21.29.135","172.67.149.55","2606:4700:3030::6815:1d87","2606:4700:3034::ac43:9537"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of tokenpocket.pro (an added character), reported by PhishDestroy","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","of":"tokenpocket.pro","spelling":"insertion","found_by":"zone_file","listings":[{"kind":"reported","source":"phishdestroy","source_name":"PhishDestroy","host":"tokenpockets.vip","flagged_at":"2026-11-06T01:53:03Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/tokenpocket"},{"hostname":"tokenpoket.one","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","brands":[{"id":"tokenpocket","name":"TokenPocket","url":"https://domainspoof.com/brands/tokenpocket"}],"dns":"resolved","resolved":["156.225.24.233"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of tokenpocket.pro (a dropped letter), resolved to 156.225.24.233, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","of":"tokenpocket.pro","spelling":"omission","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"156.225.24.233","flagged_at":"2026-11-06T01:53:03Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/tokenpocket"},{"hostname":"toyota-life.biz","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","brands":[{"id":"toyota","name":"Toyota","url":"https://domainspoof.com/brands/toyota"}],"dns":"resolved","resolved":["163.44.176.18","2400:8500:1301:162::18:1"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “toyota”, a name we match for Toyota, resolved to 163.44.176.18, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","of":"toyota.com.au","spelling":"combo","match":"name","token":"toyota","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"163.44.176.18","flagged_at":"2026-11-06T01:53:03Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/toyota"},{"hostname":"toyota-point.biz","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","brands":[{"id":"toyota","name":"Toyota","url":"https://domainspoof.com/brands/toyota"}],"dns":"resolved","resolved":["150.95.255.38"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “toyota”, a name we match for Toyota, resolved to 150.95.255.38, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","of":"toyota.com.au","spelling":"combo","match":"name","token":"toyota","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"150.95.255.38","flagged_at":"2026-11-06T01:53:03Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/toyota"},{"hostname":"toyota-shishimai.club","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","brands":[{"id":"toyota","name":"Toyota","url":"https://domainspoof.com/brands/toyota"}],"dns":"resolved","resolved":["118.27.125.216"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “toyota”, a name we match for Toyota, resolved to 118.27.125.216, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","of":"toyota.com.au","spelling":"combo","match":"name","token":"toyota","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"118.27.125.216","flagged_at":"2026-11-06T01:53:03Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/toyota"},{"hostname":"trastwallet.club","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","brands":[{"id":"trust-wallet","name":"Trust Wallet","url":"https://domainspoof.com/brands/trust-wallet"}],"dns":"resolved","resolved":["192.142.10.5"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of trustwallet.com (a changed character), resolved to 192.142.10.5, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","of":"trustwallet.com","spelling":"replacement","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"192.142.10.5","flagged_at":"2026-11-06T01:53:03Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/trust-wallet"},{"hostname":"trendyoll.vip","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","brands":[{"id":"trendyol","name":"Trendyol","url":"https://domainspoof.com/brands/trendyol"}],"dns":"resolved","resolved":["104.21.57.251","172.67.195.194","2606:4700:3033::ac43:c3c2","2606:4700:3034::6815:39fb"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of trendyol.com (a doubled letter), listed by USOM","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","of":"trendyol.com","spelling":"repetition","found_by":"zone_file","listings":[{"kind":"reported","source":"usom","source_name":"USOM","host":"trendyoll.vip","flagged_at":"2026-11-06T01:53:03Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/trendyol"},{"hostname":"trendyolshop.one","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","brands":[{"id":"trendyol","name":"Trendyol","url":"https://domainspoof.com/brands/trendyol"}],"dns":"resolved","resolved":["8.218.85.248"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “trendyol”, a name we match for Trendyol, listed by USOM","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","of":"trendyol.com","spelling":"combo","match":"name","token":"trendyol","found_by":"zone_file","listings":[{"kind":"reported","source":"usom","source_name":"USOM","host":"trendyolshop.one","flagged_at":"2026-11-06T01:53:03Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/trendyol"},{"hostname":"trenitaliaonline.top","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","brands":[{"id":"trenitalia","name":"Trenitalia","url":"https://domainspoof.com/brands/trenitalia"}],"dns":"resolved","resolved":["43.156.77.249","172.232.24.161","172.234.25.42"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “trenitalia”, a name we match for Trenitalia, resolved to 172.232.24.161, where reported phishing was found in the 48 hours before, and resolved to 172.234.25.42, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","of":"trenitalia.com","spelling":"combo","match":"name","token":"trenitalia","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"172.232.24.161","flagged_at":"2026-11-06T01:53:03Z"},{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"172.234.25.42","flagged_at":"2026-11-06T01:53:03Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/trenitalia"},{"hostname":"trezor-suites.biz","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","brands":[{"id":"trezor","name":"Trezor","url":"https://domainspoof.com/brands/trezor"}],"dns":"resolved","resolved":["104.21.68.66","172.67.191.39","2606:4700:3035::ac43:bf27","2606:4700:3036::6815:4442"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “trezor”, a name we match for Trezor, reported by PhishDestroy","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","of":"trezor.io","spelling":"combo","match":"name","token":"trezor","found_by":"zone_file","listings":[{"kind":"reported","source":"phishdestroy","source_name":"PhishDestroy","host":"trezor-suites.biz","flagged_at":"2026-11-06T01:53:03Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/trezor"},{"hostname":"truist-access.info","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","brands":[{"id":"truist","name":"Truist","url":"https://domainspoof.com/brands/truist"}],"dns":"resolved","resolved":["216.245.197.42"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “truist”, a name we match for Truist, resolved to 216.245.197.42, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","of":"truist.com","spelling":"combo","match":"name","token":"truist","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"216.245.197.42","flagged_at":"2026-11-06T01:53:03Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/truist"},{"hostname":"trust-wallet.work","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","brands":[{"id":"trust-wallet","name":"Trust Wallet","url":"https://domainspoof.com/brands/trust-wallet"}],"dns":"no_address","resolved":[],"findings":[{"kind":"lookalike","summary":"Registered domain containing “trust-wallet”, a name we match for Trust Wallet, listed by MetaMask","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","of":"trustwallet.com","spelling":"combo","match":"name","token":"trust-wallet","found_by":"zone_file","listings":[{"kind":"reported","source":"metamask","source_name":"MetaMask","host":"trust-wallet.work","flagged_at":"2026-11-06T01:53:03Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/trust-wallet"},{"hostname":"trustwallet-sec.org","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","brands":[{"id":"trust-wallet","name":"Trust Wallet","url":"https://domainspoof.com/brands/trust-wallet"}],"dns":"resolved","resolved":["51.161.21.1"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “trustwallet”, a name we match for Trust Wallet, resolved to 51.161.21.1, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","of":"trustwallet.com","spelling":"combo","match":"name","token":"trustwallet","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"51.161.21.1","flagged_at":"2026-11-06T01:53:03Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/trust-wallet"},{"hostname":"trustwallet0.club","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","brands":[{"id":"trust-wallet","name":"Trust Wallet","url":"https://domainspoof.com/brands/trust-wallet"}],"dns":"resolved","resolved":["104.21.12.252","172.67.153.254","2606:4700:3032::ac43:99fe","2606:4700:3033::6815:cfc"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “trustwallet”, a name we match for Trust Wallet, listed by MetaMask, and reported by PhishDestroy","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","of":"trustwallet.com","spelling":"combo","match":"name","token":"trustwallet","found_by":"zone_file","listings":[{"kind":"reported","source":"metamask","source_name":"MetaMask","host":"admin.trustwallet0.club","flagged_at":"2026-11-06T01:53:03Z"},{"kind":"reported","source":"phishdestroy","source_name":"PhishDestroy","host":"admin.trustwallet0.club","flagged_at":"2026-11-06T01:53:03Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/trust-wallet"},{"hostname":"trustwalletcard.club","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","brands":[{"id":"trust-wallet","name":"Trust Wallet","url":"https://domainspoof.com/brands/trust-wallet"}],"dns":"resolved","resolved":["104.21.56.41","172.67.176.240","2606:4700:3033::ac43:b0f0","2606:4700:3034::6815:3829"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of trustwallet.com (the name with an added word), listed by MetaMask","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","of":"trustwallet.com","spelling":"combo","found_by":"zone_file","listings":[{"kind":"reported","source":"metamask","source_name":"MetaMask","host":"trustwalletcard.club","flagged_at":"2026-11-06T01:53:03Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/trust-wallet"},{"hostname":"trustwalletcard.one","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","brands":[{"id":"trust-wallet","name":"Trust Wallet","url":"https://domainspoof.com/brands/trust-wallet"}],"dns":"resolved","resolved":["104.21.75.30","172.67.167.3","2606:4700:3034::ac43:a703","2606:4700:3036::6815:4b1e"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of trustwallet.com (the name with an added word), listed by MetaMask","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","of":"trustwallet.com","spelling":"combo","found_by":"zone_file","listings":[{"kind":"reported","source":"metamask","source_name":"MetaMask","host":"trustwalletcard.one","flagged_at":"2026-11-06T01:53:03Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/trust-wallet"},{"hostname":"trustwalletcard.wiki","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","brands":[{"id":"trust-wallet","name":"Trust Wallet","url":"https://domainspoof.com/brands/trust-wallet"}],"dns":"no_address","resolved":[],"findings":[{"kind":"lookalike","summary":"Registered lookalike of trustwallet.com (the name with an added word), listed by MetaMask","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","of":"trustwallet.com","spelling":"combo","found_by":"zone_file","listings":[{"kind":"reported","source":"metamask","source_name":"MetaMask","host":"trustwalletcard.wiki","flagged_at":"2026-11-06T01:53:03Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/trust-wallet"},{"hostname":"tsl-spacex.icu","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","brands":[{"id":"spacex","name":"SpaceX","url":"https://domainspoof.com/brands/spacex"}],"dns":"resolved","resolved":["23.153.104.5"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “spacex”, a name we match for SpaceX, resolved to 23.153.104.5, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","of":"spacex.com","spelling":"combo","match":"name","token":"spacex","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"23.153.104.5","flagged_at":"2026-11-06T01:53:03Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/spacex"},{"hostname":"twitch-tv.live","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","brands":[{"id":"twitch","name":"Twitch","url":"https://domainspoof.com/brands/twitch"}],"dns":"resolved","resolved":["216.245.197.45"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “twitch”, a name we match for Twitch, resolved to 216.245.197.45, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","of":"twitch.tv","spelling":"combo","match":"name","token":"twitch","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"216.245.197.45","flagged_at":"2026-11-06T01:53:03Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/twitch"},{"hostname":"uefawinner2026.online","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","brands":[{"id":"uefa","name":"UEFA","url":"https://domainspoof.com/brands/uefa"}],"dns":"resolved","resolved":["2.57.91.91"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “uefa”, a name we match for UEFA, resolved to 2.57.91.91, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","of":"uefa.com","spelling":"combo","match":"name","token":"uefa","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"2.57.91.91","flagged_at":"2026-11-06T01:53:03Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/uefa"},{"hostname":"un1swap.ink","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","brands":[{"id":"uniswap","name":"Uniswap","url":"https://domainspoof.com/brands/uniswap"}],"dns":"resolved","resolved":["104.21.68.79","172.67.191.244","2606:4700:3030::ac43:bff4","2606:4700:3035::6815:444f"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of uniswap.org (similar-looking characters), listed by MetaMask, and reported by PhishDestroy","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","of":"uniswap.org","spelling":"homoglyph","found_by":"zone_file","listings":[{"kind":"reported","source":"metamask","source_name":"MetaMask","host":"un1swap.ink","flagged_at":"2026-11-06T01:53:03Z"},{"kind":"reported","source":"phishdestroy","source_name":"PhishDestroy","host":"un1swap.ink","flagged_at":"2026-11-06T01:53:03Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/uniswap"},{"hostname":"unfall-whatsapp.bayern","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","brands":[{"id":"whatsapp","name":"WhatsApp","url":"https://domainspoof.com/brands/whatsapp"}],"dns":"resolved","resolved":["217.160.0.41","2001:8d8:100f:f000::200"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “whatsapp”, a name we match for WhatsApp, resolved to 217.160.0.41, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","of":"whatsapp.com","spelling":"combo","match":"name","token":"whatsapp","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"217.160.0.41","flagged_at":"2026-11-06T01:53:03Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/whatsapp"},{"hostname":"uniswap-exchanges.biz","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","brands":[{"id":"uniswap","name":"Uniswap","url":"https://domainspoof.com/brands/uniswap"}],"dns":"resolved","resolved":["104.21.48.38","172.67.176.175","2606:4700:3031::6815:3026","2606:4700:3031::ac43:b0af"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “uniswap”, a name we match for Uniswap, listed by MetaMask","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","of":"uniswap.org","spelling":"combo","match":"name","token":"uniswap","found_by":"zone_file","listings":[{"kind":"reported","source":"metamask","source_name":"MetaMask","host":"uniswap-exchanges.biz","flagged_at":"2026-11-06T01:53:03Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/uniswap"},{"hostname":"uniswap-web3.vip","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","brands":[{"id":"uniswap","name":"Uniswap","url":"https://domainspoof.com/brands/uniswap"}],"dns":"resolved","resolved":["104.21.16.132","172.67.212.185","2606:4700:3031::6815:1084","2606:4700:3032::ac43:d4b9"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “uniswap”, a name we match for Uniswap, listed by MetaMask","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","of":"uniswap.org","spelling":"combo","match":"name","token":"uniswap","found_by":"zone_file","listings":[{"kind":"reported","source":"metamask","source_name":"MetaMask","host":"uniswap-web3.vip","flagged_at":"2026-11-06T01:53:03Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/uniswap"},{"hostname":"uspostalservice.org","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","brands":[{"id":"usps","name":"USPS","url":"https://domainspoof.com/brands/usps"}],"dns":"resolved","resolved":["212.7.194.67"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “uspostalservice”, a name we match for USPS, resolved to 212.7.194.67, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","of":"usps.com","spelling":"combo","match":"name","token":"uspostalservice","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"212.7.194.67","flagged_at":"2026-11-06T01:53:03Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/usps"},{"hostname":"venmogift.shop","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","brands":[{"id":"venmo","name":"Venmo","url":"https://domainspoof.com/brands/venmo"}],"dns":"resolved","resolved":["2.59.170.20","104.219.250.37"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of venmo.com (the name with an added word), resolved to 2.59.170.20, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","of":"venmo.com","spelling":"combo","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"2.59.170.20","flagged_at":"2026-11-06T01:53:03Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/venmo"},{"hostname":"vipsmobilepay.work","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","brands":[{"id":"vipps-mobilepay","name":"Vipps MobilePay","url":"https://domainspoof.com/brands/vipps-mobilepay"}],"dns":"resolved","resolved":["2.59.170.20","104.219.250.37"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of vipps.no (a dropped letter), resolved to 2.59.170.20, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","of":"vipps.no","spelling":"omission","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"2.59.170.20","flagged_at":"2026-11-06T01:53:03Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/vipps-mobilepay"},{"hostname":"virtualsprotocol.events","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","brands":[{"id":"virtuals-protocol","name":"Virtuals Protocol","url":"https://domainspoof.com/brands/virtuals-protocol"}],"dns":"resolved","resolved":["104.21.57.40","172.67.189.29","2606:4700:3030::ac43:bd1d","2606:4700:3033::6815:3928"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “virtualsprotocol”, a name we match for Virtuals Protocol, listed by MetaMask","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","of":"virtuals.io","spelling":"combo","match":"name","token":"virtualsprotocol","found_by":"zone_file","listings":[{"kind":"reported","source":"metamask","source_name":"MetaMask","host":"virtualsprotocol.events","flagged_at":"2026-11-06T01:53:03Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/virtuals-protocol"},{"hostname":"wasm-boot-youtube.xyz","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","brands":[{"id":"youtube","name":"YouTube","url":"https://domainspoof.com/brands/youtube"}],"dns":"resolved","resolved":["150.95.255.38"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “youtube”, a name we match for YouTube, resolved to 150.95.255.38, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","of":"youtube.com","spelling":"combo","match":"name","token":"youtube","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"150.95.255.38","flagged_at":"2026-11-06T01:53:03Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/youtube"},{"hostname":"web-whatsapp.vip","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","brands":[{"id":"whatsapp","name":"WhatsApp","url":"https://domainspoof.com/brands/whatsapp"}],"dns":"resolved","resolved":["143.92.63.181"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “whatsapp”, a name we match for WhatsApp, resolved to 143.92.63.181 on Spamhaus DROP","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","of":"whatsapp.com","spelling":"combo","match":"name","token":"whatsapp","found_by":"zone_file","listings":[{"kind":"address","source":"spamhaus_drop","list_name":"Spamhaus DROP","address":"143.92.63.181","flagged_at":"2026-11-06T01:53:03Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/whatsapp"},{"hostname":"webex24.pro","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","brands":[{"id":"webex","name":"Webex","url":"https://domainspoof.com/brands/webex"}],"dns":"resolved","resolved":["65.75.210.172"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “webex”, a name we match for Webex, resolved to 65.75.210.172, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","of":"webex.com","spelling":"combo","match":"name","token":"webex","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"65.75.210.172","flagged_at":"2026-11-06T01:53:03Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/webex"},{"hostname":"wechat-wasi.xyz","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","brands":[{"id":"wechat","name":"WeChat","url":"https://domainspoof.com/brands/wechat"}],"dns":"resolved","resolved":["150.95.255.38"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “wechat”, a name we match for WeChat, resolved to 150.95.255.38, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","of":"wechat.com","spelling":"combo","match":"name","token":"wechat","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"150.95.255.38","flagged_at":"2026-11-06T01:53:03Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/wechat"},{"hostname":"wechatpay.vip","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","brands":[{"id":"wechat","name":"WeChat","url":"https://domainspoof.com/brands/wechat"}],"dns":"resolved","resolved":["172.232.24.161","172.232.24.235","172.234.25.42"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of wechat.com (the name with an added word), resolved to 172.232.24.161, where reported phishing was found in the 48 hours before, and resolved to 172.232.24.235, where reported phishing was found in the 48 hours before, and resolved to 172.234.25.42, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","of":"wechat.com","spelling":"combo","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"172.232.24.161","flagged_at":"2026-11-06T01:53:03Z"},{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"172.232.24.235","flagged_at":"2026-11-06T01:53:03Z"},{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"172.234.25.42","flagged_at":"2026-11-06T01:53:03Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/wechat"},{"hostname":"whatqapp.vip","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","brands":[{"id":"whatsapp","name":"WhatsApp","url":"https://domainspoof.com/brands/whatsapp"}],"dns":"resolved","resolved":["202.95.12.140"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of whatsapp.com (a changed character), resolved to 202.95.12.140 on Spamhaus DROP","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","of":"whatsapp.com","spelling":"replacement","found_by":"zone_file","listings":[{"kind":"address","source":"spamhaus_drop","list_name":"Spamhaus DROP","address":"202.95.12.140","flagged_at":"2026-11-06T01:53:03Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/whatsapp"},{"hostname":"whatsapp-upro.vip","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","brands":[{"id":"whatsapp","name":"WhatsApp","url":"https://domainspoof.com/brands/whatsapp"}],"dns":"no_address","resolved":[],"findings":[{"kind":"lookalike","summary":"Registered domain containing “whatsapp”, a name we match for WhatsApp, listed by MetaMask","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","of":"whatsapp.com","spelling":"combo","match":"name","token":"whatsapp","found_by":"zone_file","listings":[{"kind":"reported","source":"metamask","source_name":"MetaMask","host":"whatsapp-upro.vip","flagged_at":"2026-11-06T01:53:03Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/whatsapp"},{"hostname":"whatsapp1.icu","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","brands":[{"id":"whatsapp","name":"WhatsApp","url":"https://domainspoof.com/brands/whatsapp"}],"dns":"resolved","resolved":["137.220.155.110"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “whatsapp”, a name we match for WhatsApp, resolved to 137.220.155.110 on Spamhaus DROP","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","of":"whatsapp.com","spelling":"combo","match":"name","token":"whatsapp","found_by":"zone_file","listings":[{"kind":"address","source":"spamhaus_drop","list_name":"Spamhaus DROP","address":"137.220.155.110","flagged_at":"2026-11-06T01:53:03Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/whatsapp"},{"hostname":"whatssapp.ink","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","brands":[{"id":"whatsapp","name":"WhatsApp","url":"https://domainspoof.com/brands/whatsapp"}],"dns":"resolved","resolved":["203.189.234.120"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of whatsapp.com (a doubled letter), resolved to 203.189.234.120 on Spamhaus DROP","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","of":"whatsapp.com","spelling":"repetition","found_by":"zone_file","listings":[{"kind":"address","source":"spamhaus_drop","list_name":"Spamhaus DROP","address":"203.189.234.120","flagged_at":"2026-11-06T01:53:03Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/whatsapp"},{"hostname":"whattsapp.fit","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","brands":[{"id":"whatsapp","name":"WhatsApp","url":"https://domainspoof.com/brands/whatsapp"}],"dns":"resolved","resolved":["185.146.167.204","2a07:7800:1::204"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of whatsapp.com (a doubled letter), resolved to 185.146.167.204, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","of":"whatsapp.com","spelling":"repetition","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"185.146.167.204","flagged_at":"2026-11-06T01:53:03Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/whatsapp"},{"hostname":"wixsite.org","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","brands":[{"id":"wix","name":"Wix","url":"https://domainspoof.com/brands/wix"}],"dns":"resolved","resolved":["172.241.213.99"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “wixsite”, a name we match for Wix, resolved to 172.241.213.99, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","of":"wix.com","spelling":"combo","match":"name","token":"wixsite","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"172.241.213.99","flagged_at":"2026-11-06T01:53:03Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/wix"},{"hostname":"woolworthsgroup.biz","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","brands":[{"id":"woolworths","name":"Woolworths","url":"https://domainspoof.com/brands/woolworths"}],"dns":"resolved","resolved":["89.31.143.90"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “woolworths”, a name we match for Woolworths, resolved to 89.31.143.90, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","of":"woolworths.com.au","spelling":"combo","match":"name","token":"woolworths","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"89.31.143.90","flagged_at":"2026-11-06T01:53:03Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/woolworths"},{"hostname":"wordpress-canary-reach-contacts-import.online","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","brands":[{"id":"wordpress","name":"WordPress","url":"https://domainspoof.com/brands/wordpress"}],"dns":"resolved","resolved":["2.57.91.91"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “wordpress”, a name we match for WordPress, resolved to 2.57.91.91, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","of":"wordpress.com","spelling":"combo","match":"name","token":"wordpress","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"2.57.91.91","flagged_at":"2026-11-06T01:53:03Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/wordpress"},{"hostname":"wordpress1.work","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","brands":[{"id":"wordpress","name":"WordPress","url":"https://domainspoof.com/brands/wordpress"}],"dns":"resolved","resolved":["2.59.170.20","104.219.250.37"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “wordpress”, a name we match for WordPress, resolved to 2.59.170.20, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","of":"wordpress.com","spelling":"combo","match":"name","token":"wordpress","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"2.59.170.20","flagged_at":"2026-11-06T01:53:03Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/wordpress"},{"hostname":"worldpress.one","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","brands":[{"id":"wordpress","name":"WordPress","url":"https://domainspoof.com/brands/wordpress"}],"dns":"resolved","resolved":["185.181.104.242"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of wordpress.com (an added character), resolved to 185.181.104.242, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","of":"wordpress.com","spelling":"insertion","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"185.181.104.242","flagged_at":"2026-11-06T01:53:03Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/wordpress"},{"hostname":"xfinityconnect.email","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","brands":[{"id":"comcast","name":"Comcast (Xfinity)","url":"https://domainspoof.com/brands/comcast"}],"dns":"resolved","resolved":["213.227.156.75"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “xfinity”, a name we match for Comcast (Xfinity), resolved to 213.227.156.75, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","of":"xfinity.com","spelling":"combo","match":"name","token":"xfinity","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"213.227.156.75","flagged_at":"2026-11-06T01:53:03Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/comcast"},{"hostname":"xn--sparkasse-mrkisches-sauerland-bqc.biz","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","brands":[{"id":"sparkasse","name":"Sparkasse","url":"https://domainspoof.com/brands/sparkasse"}],"dns":"resolved","resolved":["88.99.101.251","2a01:4f8:221:11cd:9734:4c26:6044:5f33"],"findings":[{"kind":"lookalike","summary":"Registered domain matched to Sparkasse by name, resolved to 88.99.101.251, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","of":"sparkasse.de","spelling":"combo","match":"name","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"88.99.101.251","flagged_at":"2026-11-06T01:53:03Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/sparkasse"},{"hostname":"yandex-taxi.pro","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","brands":[{"id":"yandex","name":"Yandex","url":"https://domainspoof.com/brands/yandex"}],"dns":"resolved","resolved":["65.75.210.174"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “yandex”, a name we match for Yandex, resolved to 65.75.210.174, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","of":"yandex.ru","spelling":"combo","match":"name","token":"yandex","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"65.75.210.174","flagged_at":"2026-11-06T01:53:03Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/yandex"},{"hostname":"youtube-artifact.xyz","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","brands":[{"id":"youtube","name":"YouTube","url":"https://domainspoof.com/brands/youtube"}],"dns":"resolved","resolved":["150.95.255.38"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “youtube”, a name we match for YouTube, resolved to 150.95.255.38, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","of":"youtube.com","spelling":"combo","match":"name","token":"youtube","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"150.95.255.38","flagged_at":"2026-11-06T01:53:03Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/youtube"},{"hostname":"youtube-converter.online","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","brands":[{"id":"youtube","name":"YouTube","url":"https://domainspoof.com/brands/youtube"}],"dns":"resolved","resolved":["208.115.249.234"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “youtube”, a name we match for YouTube, resolved to 208.115.249.234, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","of":"youtube.com","spelling":"combo","match":"name","token":"youtube","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"208.115.249.234","flagged_at":"2026-11-06T01:53:03Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/youtube"},{"hostname":"youtube-decimal-catalog.xyz","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","brands":[{"id":"youtube","name":"YouTube","url":"https://domainspoof.com/brands/youtube"}],"dns":"resolved","resolved":["150.95.255.38"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “youtube”, a name we match for YouTube, resolved to 150.95.255.38, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","of":"youtube.com","spelling":"combo","match":"name","token":"youtube","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"150.95.255.38","flagged_at":"2026-11-06T01:53:03Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/youtube"},{"hostname":"youtube-jp.biz","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","brands":[{"id":"youtube","name":"YouTube","url":"https://domainspoof.com/brands/youtube"}],"dns":"resolved","resolved":["212.92.105.212"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “youtube”, a name we match for YouTube, resolved to 212.92.105.212, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","of":"youtube.com","spelling":"combo","match":"name","token":"youtube","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"212.92.105.212","flagged_at":"2026-11-06T01:53:03Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/youtube"},{"hostname":"youtube-limit-sparc.xyz","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","brands":[{"id":"youtube","name":"YouTube","url":"https://domainspoof.com/brands/youtube"}],"dns":"resolved","resolved":["150.95.255.38"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “youtube”, a name we match for YouTube, resolved to 150.95.255.38, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","of":"youtube.com","spelling":"combo","match":"name","token":"youtube","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"150.95.255.38","flagged_at":"2026-11-06T01:53:03Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/youtube"},{"hostname":"youtube-salt-metallb.xyz","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","brands":[{"id":"youtube","name":"YouTube","url":"https://domainspoof.com/brands/youtube"}],"dns":"resolved","resolved":["150.95.255.38"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “youtube”, a name we match for YouTube, resolved to 150.95.255.38, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","of":"youtube.com","spelling":"combo","match":"name","token":"youtube","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"150.95.255.38","flagged_at":"2026-11-06T01:53:03Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/youtube"},{"hostname":"youtube-to-wav.org","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","brands":[{"id":"youtube","name":"YouTube","url":"https://domainspoof.com/brands/youtube"}],"dns":"resolved","resolved":["212.92.104.118"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “youtube”, a name we match for YouTube, resolved to 212.92.104.118, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","of":"youtube.com","spelling":"combo","match":"name","token":"youtube","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"212.92.104.118","flagged_at":"2026-11-06T01:53:03Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/youtube"},{"hostname":"youtube-under-uranus.xyz","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","brands":[{"id":"youtube","name":"YouTube","url":"https://domainspoof.com/brands/youtube"}],"dns":"resolved","resolved":["150.95.255.38"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “youtube”, a name we match for YouTube, resolved to 150.95.255.38, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","of":"youtube.com","spelling":"combo","match":"name","token":"youtube","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"150.95.255.38","flagged_at":"2026-11-06T01:53:03Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/youtube"},{"hostname":"youtube-video.xyz","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","brands":[{"id":"youtube","name":"YouTube","url":"https://domainspoof.com/brands/youtube"}],"dns":"resolved","resolved":["212.92.104.120"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “youtube”, a name we match for YouTube, resolved to 212.92.104.120, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","of":"youtube.com","spelling":"combo","match":"name","token":"youtube","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"212.92.104.120","flagged_at":"2026-11-06T01:53:03Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/youtube"},{"hostname":"youtube-wechat.xyz","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","brands":[{"id":"wechat","name":"WeChat","url":"https://domainspoof.com/brands/wechat"},{"id":"youtube","name":"YouTube","url":"https://domainspoof.com/brands/youtube"}],"dns":"resolved","resolved":["150.95.255.38"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “wechat”, a name we match for WeChat, resolved to 150.95.255.38, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","of":"youtube.com","spelling":"combo","match":"name","token":"wechat","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"150.95.255.38","flagged_at":"2026-11-06T01:53:03Z"}],"conditions":"https://domainspoof.org/terms#zone-data"},{"kind":"lookalike","summary":"Registered domain containing “youtube”, a name we match for YouTube, resolved to 150.95.255.38, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","of":"youtube.com","spelling":"combo","match":"name","token":"youtube","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"150.95.255.38","flagged_at":"2026-11-06T01:53:03Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/wechat"},{"hostname":"youtubemail.club","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","brands":[{"id":"youtube","name":"YouTube","url":"https://domainspoof.com/brands/youtube"}],"dns":"resolved","resolved":["160.16.200.77"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “youtube”, a name we match for YouTube, resolved to 160.16.200.77, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","of":"youtube.com","spelling":"combo","match":"name","token":"youtube","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"160.16.200.77","flagged_at":"2026-11-06T01:53:03Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/youtube"},{"hostname":"2897.prohoster.biz","first_observed":"2026-11-06T00:41:48.264Z","first_published":"2026-11-06T01:50:52.626Z","brands":[],"dns":"resolved","resolved":["185.212.130.204"],"resolved_at":"2026-11-06T00:41:52Z","dns_checked_at":"2026-11-06T02:02:30.000Z","dns_since":"2026-11-06T02:02:30.000Z","findings":[{"id":"f2zmumktaltvdojgk37tv","kind":"reported_domain","summary":"Under prohoster.biz, reported by PhishDestroy","first_observed":"2026-11-06T00:41:48.264Z","first_published":"2026-11-06T01:50:52.626Z","source":"phishdestroy","source_name":"PhishDestroy","under":"prohoster.biz","source_url":"https://phishdestroy.io/domain/prohoster.biz/"}],"url":"https://domainspoof.com/live?show=all&q=2897.prohoster.biz"},{"hostname":"592163-crypto.com","first_observed":"2026-11-06T00:36:06.728Z","first_published":"2026-11-06T01:50:52.626Z","brands":[{"id":"crypto-com","name":"Crypto.com","url":"https://domainspoof.com/brands/crypto-com"}],"dns":"resolved","resolved":["104.21.18.30","172.67.179.232","2606:4700:3032::ac43:b3e8","2606:4700:3033::6815:121e"],"resolved_at":"2026-11-06T00:36:14Z","dns_checked_at":"2026-11-06T02:02:30.000Z","dns_since":"2026-11-06T02:02:30.000Z","findings":[{"id":"f2cpzvy3s4khyp7dbhkra","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-06T00:36:06.728Z","first_published":"2026-11-06T01:50:52.626Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/brands/crypto-com"},{"hostname":"654321zz3277w0cc6205f4a10b1add7371411f.polar-tensor.com","first_observed":"2026-11-06T00:56:36.846Z","first_published":"2026-11-06T01:50:52.626Z","brands":[],"dns":"resolved","resolved":["5.189.134.86","57.128.187.75","57.129.49.179","193.242.211.59"],"resolved_at":"2026-11-06T00:56:43Z","dns_checked_at":"2026-11-06T02:02:30.000Z","dns_since":"2026-11-06T02:02:30.000Z","findings":[{"id":"ft2pnww7mnrca6z5bcel2","kind":"reported_domain","summary":"Under polar-tensor.com, listed by MetaMask","first_observed":"2026-11-06T00:56:36.846Z","first_published":"2026-11-06T01:50:52.626Z","source":"metamask","source_name":"MetaMask","under":"polar-tensor.com"}],"url":"https://domainspoof.com/live?show=all&q=654321zz3277w0cc6205f4a10b1add7371411f.polar-tensor.com"},{"hostname":"abahshah.com","first_observed":"2026-11-06T01:21:11.336Z","first_published":"2026-11-06T01:50:52.626Z","brands":[],"dns":"resolved","resolved":["103.6.198.93"],"resolved_at":"2026-11-06T01:21:18Z","dns_checked_at":"2026-11-06T02:02:30.000Z","dns_since":"2026-11-06T02:02:30.000Z","findings":[{"id":"fkikx3wpc3flt34xtcohl","kind":"reported_domain","summary":"Reported by PhishTank","first_observed":"2026-11-06T01:21:11.336Z","first_published":"2026-11-06T01:50:52.626Z","source":"phishtank","source_name":"PhishTank","source_url":"https://phishtank.org/phish_detail.php?phish_id=9031032"}],"url":"https://domainspoof.com/live?show=all&q=abahshah.com"},{"hostname":"acerwansa.live","first_observed":"2026-11-06T00:46:55.421Z","first_published":"2026-11-06T01:50:52.626Z","brands":[],"dns":"resolved","resolved":["104.21.73.157","172.67.163.215"],"resolved_at":"2026-11-06T00:56:11Z","dns_checked_at":"2026-11-06T02:02:30.000Z","dns_since":"2026-11-06T02:02:30.000Z","findings":[{"id":"fwdronuhauza2hsqbsbrj","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-06T00:46:55.421Z","first_published":"2026-11-06T01:50:52.626Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=acerwansa.live"},{"hostname":"addons-extension-trust-wallet-com.pages.dev","first_observed":"2026-11-06T01:00:44.336Z","first_published":"2026-11-06T01:50:52.626Z","brands":[{"id":"trust-wallet","name":"Trust Wallet","url":"https://domainspoof.com/brands/trust-wallet"}],"dns":"resolved","resolved":["172.66.44.127","172.66.47.129","2606:4700:310c::ac42:2c7f","2606:4700:310c::ac42:2f81"],"resolved_at":"2026-11-06T01:00:53Z","dns_checked_at":"2026-11-06T02:02:30.000Z","dns_since":"2026-11-06T02:02:30.000Z","findings":[{"id":"fyzlzvtho6uuqu5hein2q","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-06T01:00:44.336Z","first_published":"2026-11-06T01:50:52.626Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/brands/trust-wallet"},{"hostname":"ae-zoom.us","first_observed":"2026-11-06T00:56:36.846Z","first_published":"2026-11-06T01:50:52.626Z","brands":[],"dns":"resolved","resolved":["34.41.139.193"],"resolved_at":"2026-11-06T00:56:47Z","dns_checked_at":"2026-11-06T02:02:30.000Z","dns_since":"2026-11-06T02:02:30.000Z","findings":[{"id":"fx4nkj5drsvntws7h377y","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-06T00:56:36.846Z","first_published":"2026-11-06T01:50:52.626Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=ae-zoom.us"},{"hostname":"aiglerendanca-nl.live","first_observed":"2026-11-06T01:26:18.218Z","first_published":"2026-11-06T01:50:52.626Z","brands":[],"dns":"resolved","resolved":["104.21.38.163","172.67.136.117"],"resolved_at":"2026-11-06T01:36:27Z","dns_checked_at":"2026-11-06T02:02:30.000Z","dns_since":"2026-11-06T02:02:30.000Z","findings":[{"id":"f6qphpu55fiudckexbqou","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-06T01:26:18.218Z","first_published":"2026-11-06T01:50:52.626Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=aiglerendanca-nl.live"},{"hostname":"allegro05.vip","first_observed":"2026-11-06T00:56:36.846Z","first_published":"2026-11-06T01:50:52.626Z","brands":[],"dns":"resolved","resolved":["104.21.47.99","172.67.146.126","2606:4700:3033::ac43:927e","2606:4700:3034::6815:2f63"],"resolved_at":"2026-11-06T00:56:47Z","dns_checked_at":"2026-11-06T02:02:30.000Z","dns_since":"2026-11-06T02:02:30.000Z","findings":[{"id":"frt6nxisafzvsmh5f5efh","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-06T00:56:36.846Z","first_published":"2026-11-06T01:50:52.626Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=allegro05.vip"},{"hostname":"allianz.co.pl","first_observed":"2026-11-06T00:56:47.287Z","first_published":"2026-11-06T01:50:52.626Z","brands":[{"id":"allianz","name":"Allianz","url":"https://domainspoof.com/brands/allianz"}],"dns":"resolved","resolved":["185.253.212.22"],"resolved_at":"2026-11-06T02:02:30Z","dns_checked_at":"2026-11-06T02:02:30.000Z","dns_since":"2026-11-06T02:02:30.000Z","findings":[{"id":"fky3bk36rbfnhgccny53m","kind":"phishing_infrastructure","summary":"Resolved to 185.253.212.22, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:56:47.287Z","first_published":"2026-11-06T01:50:52.626Z","address":"185.253.212.22","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/allianz"},{"hostname":"allocation-flare.xyz","first_observed":"2026-11-06T01:05:49.887Z","first_published":"2026-11-06T01:50:52.626Z","brands":[{"id":"flare-network","name":"Flare Network","url":"https://domainspoof.com/brands/flare-network"}],"dns":"resolved","resolved":["104.21.6.140","172.67.155.13"],"resolved_at":"2026-11-06T01:12:23Z","dns_checked_at":"2026-11-06T02:02:30.000Z","dns_since":"2026-11-06T02:02:30.000Z","findings":[{"id":"fzdckpj6mequwwic4qbxk","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-06T01:05:49.887Z","first_published":"2026-11-06T01:50:52.626Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/brands/flare-network"},{"hostname":"allocation-long.xyz","first_observed":"2026-11-06T01:26:18.218Z","first_published":"2026-11-06T01:50:52.626Z","brands":[],"dns":"resolved","resolved":["104.21.91.38","172.67.209.132"],"resolved_at":"2026-11-06T01:36:27Z","dns_checked_at":"2026-11-06T02:02:30.000Z","dns_since":"2026-11-06T02:02:30.000Z","findings":[{"id":"fx2l2ufxfdq5rvdnlsvql","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-06T01:26:18.218Z","first_published":"2026-11-06T01:50:52.626Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=allocation-long.xyz"},{"hostname":"api.checkout.testourspaces.com","first_observed":"2026-11-06T01:41:37.434Z","first_published":"2026-11-06T01:50:52.626Z","brands":[],"dns":"resolved","resolved":["188.126.85.9"],"resolved_at":"2026-11-06T01:41:45Z","dns_checked_at":"2026-11-06T02:02:30.000Z","dns_since":"2026-11-06T02:02:30.000Z","findings":[{"id":"fprdzt25shiuxntpuhhxi","kind":"reported_domain","summary":"Under testourspaces.com, listed by MetaMask","first_observed":"2026-11-06T01:41:37.434Z","first_published":"2026-11-06T01:50:52.626Z","source":"metamask","source_name":"MetaMask","under":"testourspaces.com"}],"url":"https://domainspoof.com/live?show=all&q=api.checkout.testourspaces.com"},{"hostname":"aurvixo.com","first_observed":"2026-11-06T00:36:06.728Z","first_published":"2026-11-06T01:50:52.626Z","brands":[],"dns":"resolved","resolved":["144.124.242.8"],"resolved_at":"2026-11-06T00:36:38Z","dns_checked_at":"2026-11-06T02:02:30.000Z","dns_since":"2026-11-06T02:02:30.000Z","findings":[{"id":"fimyteh42woxmjeezpq6b","kind":"reported_domain","summary":"Listed by FSMA (fraudulent online trading platform)","first_observed":"2026-11-06T00:36:06.728Z","first_published":"2026-11-06T01:50:52.626Z","source":"fsma","source_name":"FSMA","claim":{"category":"fraudulent online trading platform"}}],"url":"https://domainspoof.com/live?show=all&q=aurvixo.com"},{"hostname":"autoconfig.web3assetsecurity.com","first_observed":"2026-11-06T01:26:18.218Z","first_published":"2026-11-06T01:50:52.626Z","brands":[],"dns":"resolved","resolved":["104.21.18.217","172.67.183.100"],"resolved_at":"2026-11-06T01:36:43Z","dns_checked_at":"2026-11-06T02:02:30.000Z","dns_since":"2026-11-06T02:02:30.000Z","findings":[{"id":"fiqhax6wtiovt3qizrl6n","kind":"reported_domain","summary":"Under web3assetsecurity.com, reported by PhishDestroy","first_observed":"2026-11-06T01:26:18.218Z","first_published":"2026-11-06T01:50:52.626Z","source":"phishdestroy","source_name":"PhishDestroy","under":"web3assetsecurity.com","source_url":"https://phishdestroy.io/domain/web3assetsecurity.com/"}],"url":"https://domainspoof.com/live?show=all&q=autoconfig.web3assetsecurity.com"},{"hostname":"autodiscover.web3assetsecurity.com","first_observed":"2026-11-06T01:26:18.218Z","first_published":"2026-11-06T01:50:52.626Z","brands":[],"dns":"resolved","resolved":["104.21.18.217","172.67.183.100"],"resolved_at":"2026-11-06T01:36:43Z","dns_checked_at":"2026-11-06T02:02:30.000Z","dns_since":"2026-11-06T02:02:30.000Z","findings":[{"id":"fphzar7ouesqegmrbuotm","kind":"reported_domain","summary":"Under web3assetsecurity.com, reported by PhishDestroy","first_observed":"2026-11-06T01:26:18.218Z","first_published":"2026-11-06T01:50:52.626Z","source":"phishdestroy","source_name":"PhishDestroy","under":"web3assetsecurity.com","source_url":"https://phishdestroy.io/domain/web3assetsecurity.com/"}],"url":"https://domainspoof.com/live?show=all&q=autodiscover.web3assetsecurity.com"},{"hostname":"balticstewardship-api.stage.io-ext.se","first_observed":"2026-11-06T00:51:30.810Z","first_published":"2026-11-06T01:50:52.626Z","brands":[],"dns":"resolved","resolved":["188.208.37.128"],"resolved_at":"2026-11-06T01:03:23Z","dns_checked_at":"2026-11-06T02:02:30.000Z","dns_since":"2026-11-06T02:02:30.000Z","findings":[{"id":"frzpobfowmj6r5ikhmm7t","kind":"reported_domain","summary":"Under io-ext.se, listed by MetaMask","first_observed":"2026-11-06T00:51:30.810Z","first_published":"2026-11-06T01:50:52.626Z","source":"metamask","source_name":"MetaMask","under":"io-ext.se"}],"url":"https://domainspoof.com/live?show=all&q=balticstewardship-api.stage.io-ext.se"},{"hostname":"barnrattsdagarna.stage.io-ext.se","first_observed":"2026-11-06T00:46:55.421Z","first_published":"2026-11-06T01:50:52.626Z","brands":[],"dns":"resolved","resolved":["188.208.37.128"],"resolved_at":"2026-11-06T00:56:48Z","dns_checked_at":"2026-11-06T02:02:30.000Z","dns_since":"2026-11-06T02:02:30.000Z","findings":[{"id":"fwl2vv5u5cdpfqwreimch","kind":"reported_domain","summary":"Under io-ext.se, listed by MetaMask","first_observed":"2026-11-06T00:46:55.421Z","first_published":"2026-11-06T01:50:52.626Z","source":"metamask","source_name":"MetaMask","under":"io-ext.se"}],"url":"https://domainspoof.com/live?show=all&q=barnrattsdagarna.stage.io-ext.se"},{"hostname":"bastion.crypto-polis.org","first_observed":"2026-11-06T01:15:35.334Z","first_published":"2026-11-06T01:50:52.626Z","brands":[],"dns":"resolved","resolved":["185.178.208.132","185.178.208.182"],"resolved_at":"2026-11-06T01:20:46Z","dns_checked_at":"2026-11-06T02:02:30.000Z","dns_since":"2026-11-06T02:02:30.000Z","findings":[{"id":"fg7funfjdc5muzzaabnui","kind":"reported_domain","summary":"Under crypto-polis.org, reported by PhishDestroy","first_observed":"2026-11-06T01:15:35.334Z","first_published":"2026-11-06T01:50:52.626Z","source":"phishdestroy","source_name":"PhishDestroy","under":"crypto-polis.org","source_url":"https://phishdestroy.io/domain/crypto-polis.org/"}],"url":"https://domainspoof.com/live?show=all&q=bastion.crypto-polis.org"},{"hostname":"bchh.games","first_observed":"2026-11-06T00:46:55.421Z","first_published":"2026-11-06T01:50:52.626Z","brands":[],"dns":"resolved","resolved":["104.21.65.126","172.67.145.107"],"resolved_at":"2026-11-06T00:56:48Z","dns_checked_at":"2026-11-06T02:02:30.000Z","dns_since":"2026-11-06T02:02:30.000Z","findings":[{"id":"f5ticnccallschtwreao6","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-06T00:46:55.421Z","first_published":"2026-11-06T01:50:52.626Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/bchh.games/"}],"url":"https://domainspoof.com/live?show=all&q=bchh.games"},{"hostname":"bitgets.asia","first_observed":"2026-11-06T01:31:25.087Z","first_published":"2026-11-06T01:50:52.626Z","brands":[],"dns":"resolved","resolved":["104.21.32.224","172.67.136.216"],"resolved_at":"2026-11-06T01:41:39Z","dns_checked_at":"2026-11-06T02:02:30.000Z","dns_since":"2026-11-06T02:02:30.000Z","findings":[{"id":"fqaxkjo4xxdc6kmt63hvl","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-06T01:31:25.087Z","first_published":"2026-11-06T01:50:52.626Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/bitgets.asia/"}],"url":"https://domainspoof.com/live?show=all&q=bitgets.asia"},{"hostname":"bitrefill.com-cv01-esim-gift.com","first_observed":"2026-11-06T01:07:16.174Z","first_published":"2026-11-06T01:50:52.626Z","brands":[{"id":"bitrefill","name":"Bitrefill","url":"https://domainspoof.com/brands/bitrefill"}],"dns":"resolved","resolved":["62.60.226.39"],"resolved_at":"2026-11-06T02:02:30Z","dns_checked_at":"2026-11-06T02:02:30.000Z","dns_since":"2026-11-06T02:02:30.000Z","findings":[{"id":"fz55xvrtc4ubxiamdohmm","kind":"spamhaus_drop","summary":"Resolved to 62.60.226.39 on Spamhaus DROP","first_observed":"2026-11-06T01:07:16.174Z","first_published":"2026-11-06T01:50:52.626Z","address":"62.60.226.39","list":"spamhaus_drop","list_name":"Spamhaus DROP"}],"url":"https://domainspoof.com/brands/bitrefill"},{"hostname":"blogs.airdropalert.com","first_observed":"2026-11-06T00:51:30.810Z","first_published":"2026-11-06T01:50:52.626Z","brands":[],"dns":"not_found","resolved":[],"resolved_at":"2026-11-06T01:03:24Z","dns_checked_at":"2026-11-06T10:09:00.000Z","findings":[{"id":"f6e267aeqqny75or353xn","kind":"reported_domain","summary":"Under airdropalert.com, reported by PhishDestroy","first_observed":"2026-11-06T00:51:30.810Z","first_published":"2026-11-06T01:50:52.626Z","source":"phishdestroy","source_name":"PhishDestroy","under":"airdropalert.com","source_url":"https://phishdestroy.io/domain/airdropalert.com/"}],"url":"https://domainspoof.com/live?show=all&q=blogs.airdropalert.com"},{"hostname":"bu.sberbankmobile.ru","first_observed":"2026-11-06T01:41:39.868Z","first_published":"2026-11-06T01:50:52.626Z","brands":[{"id":"sberbank","name":"Sberbank","url":"https://domainspoof.com/brands/sberbank"}],"dns":"resolved","resolved":["87.242.79.60"],"resolved_at":"2026-11-06T02:02:30Z","dns_checked_at":"2026-11-06T02:02:30.000Z","dns_since":"2026-11-06T02:02:30.000Z","findings":[{"id":"faz5zbuvswwoyeipht7mu","kind":"phishing_infrastructure","summary":"Resolved to 87.242.79.60, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T01:41:39.868Z","first_published":"2026-11-06T01:50:52.626Z","address":"87.242.79.60","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/sberbank"},{"hostname":"calm-dough.com","first_observed":"2026-11-06T01:00:44.336Z","first_published":"2026-11-06T01:50:52.626Z","brands":[],"dns":"resolved","resolved":["104.21.89.217","172.67.165.51"],"resolved_at":"2026-11-06T01:08:26Z","dns_checked_at":"2026-11-06T02:02:30.000Z","dns_since":"2026-11-06T02:02:30.000Z","findings":[{"id":"fu644txvvcetqpg5qocyh","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-06T01:00:44.336Z","first_published":"2026-11-06T01:50:52.626Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=calm-dough.com"},{"hostname":"cbdcintl.com","first_observed":"2026-11-06T00:46:55.421Z","first_published":"2026-11-06T01:50:52.626Z","brands":[],"dns":"resolved","resolved":["177.3.41.46"],"resolved_at":"2026-11-06T00:57:20Z","dns_checked_at":"2026-11-06T02:02:30.000Z","dns_since":"2026-11-06T02:02:30.000Z","findings":[{"id":"fumuogdhd7mrto3e7rlv6","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-06T00:46:55.421Z","first_published":"2026-11-06T01:50:52.626Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/cbdcintl.com/"}],"url":"https://domainspoof.com/live?show=all&q=cbdcintl.com"},{"hostname":"checkin.checkout.testourspaces.com","first_observed":"2026-11-06T01:41:37.434Z","first_published":"2026-11-06T01:50:52.626Z","brands":[],"dns":"resolved","resolved":["188.126.85.9"],"resolved_at":"2026-11-06T01:46:02Z","dns_checked_at":"2026-11-06T02:02:30.000Z","dns_since":"2026-11-06T02:02:30.000Z","findings":[{"id":"fcxgugthudocnbgobwbup","kind":"reported_domain","summary":"Under testourspaces.com, listed by MetaMask","first_observed":"2026-11-06T01:41:37.434Z","first_published":"2026-11-06T01:50:52.626Z","source":"metamask","source_name":"MetaMask","under":"testourspaces.com"}],"url":"https://domainspoof.com/live?show=all&q=checkin.checkout.testourspaces.com"},{"hostname":"claim-flrelight.com","first_observed":"2026-11-06T01:05:49.887Z","first_published":"2026-11-06T01:50:52.626Z","brands":[],"dns":"resolved","resolved":["104.21.57.177","172.67.165.67"],"resolved_at":"2026-11-06T01:12:31Z","dns_checked_at":"2026-11-06T02:02:30.000Z","dns_since":"2026-11-06T02:02:30.000Z","findings":[{"id":"fjkfacu6fxmedpmnf2cmo","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-06T01:05:49.887Z","first_published":"2026-11-06T01:50:52.626Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=claim-flrelight.com"},{"hostname":"claim-manlets.site","first_observed":"2026-11-06T00:51:30.810Z","first_published":"2026-11-06T01:50:52.626Z","brands":[],"dns":"resolved","resolved":["104.21.23.191","172.67.212.235"],"resolved_at":"2026-11-06T01:03:34Z","dns_checked_at":"2026-11-06T02:02:30.000Z","dns_since":"2026-11-06T02:02:30.000Z","findings":[{"id":"fryu5bdm5n7zissi5rvml","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-06T00:51:30.810Z","first_published":"2026-11-06T01:50:52.626Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=claim-manlets.site"},{"hostname":"collab.polar-tensor.com","first_observed":"2026-11-06T00:56:36.846Z","first_published":"2026-11-06T01:50:52.626Z","brands":[],"dns":"resolved","resolved":["5.189.134.86","57.128.187.75","57.129.49.179","193.242.211.59"],"resolved_at":"2026-11-06T01:07:22Z","dns_checked_at":"2026-11-06T02:02:30.000Z","dns_since":"2026-11-06T02:02:30.000Z","findings":[{"id":"fzrhzj2zxafbapzzdqsqk","kind":"reported_domain","summary":"Under polar-tensor.com, listed by MetaMask","first_observed":"2026-11-06T00:56:36.846Z","first_published":"2026-11-06T01:50:52.626Z","source":"metamask","source_name":"MetaMask","under":"polar-tensor.com"}],"url":"https://domainspoof.com/live?show=all&q=collab.polar-tensor.com"},{"hostname":"confiattra.store","first_observed":"2026-11-06T01:15:35.334Z","first_published":"2026-11-06T01:50:52.626Z","brands":[],"dns":"no_address","resolved":[],"resolved_at":"2026-11-06T01:20:54Z","dns_checked_at":"2026-11-06T10:09:00.000Z","findings":[{"id":"fhnxxtghdxfpkxypke2t7","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-06T01:15:35.334Z","first_published":"2026-11-06T01:50:52.626Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=confiattra.store"},{"hostname":"cpanel.partyhiredestination.com.au","first_observed":"2026-11-06T01:31:25.087Z","first_published":"2026-11-06T01:50:52.626Z","brands":[],"dns":"resolved","resolved":["104.21.30.22","172.67.150.107"],"resolved_at":"2026-11-06T01:41:28Z","dns_checked_at":"2026-11-06T02:02:30.000Z","dns_since":"2026-11-06T02:02:30.000Z","findings":[{"id":"f3kfwgsuwezmfezoglhjt","kind":"reported_domain","summary":"Under partyhiredestination.com.au, reported by PhishDestroy","first_observed":"2026-11-06T01:31:25.087Z","first_published":"2026-11-06T01:50:52.626Z","source":"phishdestroy","source_name":"PhishDestroy","under":"partyhiredestination.com.au","source_url":"https://phishdestroy.io/domain/partyhiredestination.com.au/"}],"url":"https://domainspoof.com/live?show=all&q=cpanel.partyhiredestination.com.au"},{"hostname":"cpanel.web3assetsecurity.com","first_observed":"2026-11-06T01:26:18.218Z","first_published":"2026-11-06T01:50:52.626Z","brands":[],"dns":"resolved","resolved":["104.21.18.217","172.67.183.100"],"resolved_at":"2026-11-06T01:38:25Z","dns_checked_at":"2026-11-06T02:02:30.000Z","dns_since":"2026-11-06T02:02:30.000Z","findings":[{"id":"f7akymz4wlzkbfgxqg7rg","kind":"reported_domain","summary":"Under web3assetsecurity.com, reported by PhishDestroy","first_observed":"2026-11-06T01:26:18.218Z","first_published":"2026-11-06T01:50:52.626Z","source":"phishdestroy","source_name":"PhishDestroy","under":"web3assetsecurity.com","source_url":"https://phishdestroy.io/domain/web3assetsecurity.com/"}],"url":"https://domainspoof.com/live?show=all&q=cpanel.web3assetsecurity.com"},{"hostname":"cpcalendars.partyhiredestination.com.au","first_observed":"2026-11-06T01:31:25.087Z","first_published":"2026-11-06T01:50:52.626Z","brands":[],"dns":"resolved","resolved":["104.21.30.22","172.67.150.107"],"resolved_at":"2026-11-06T01:41:28Z","dns_checked_at":"2026-11-06T02:02:30.000Z","dns_since":"2026-11-06T02:02:30.000Z","findings":[{"id":"freks554vpvzu3fcxwuzy","kind":"reported_domain","summary":"Under partyhiredestination.com.au, reported by PhishDestroy","first_observed":"2026-11-06T01:31:25.087Z","first_published":"2026-11-06T01:50:52.626Z","source":"phishdestroy","source_name":"PhishDestroy","under":"partyhiredestination.com.au","source_url":"https://phishdestroy.io/domain/partyhiredestination.com.au/"}],"url":"https://domainspoof.com/live?show=all&q=cpcalendars.partyhiredestination.com.au"},{"hostname":"cpcalendars.web3assetsecurity.com","first_observed":"2026-11-06T01:26:18.218Z","first_published":"2026-11-06T01:50:52.626Z","brands":[],"dns":"resolved","resolved":["104.21.18.217","172.67.183.100"],"resolved_at":"2026-11-06T01:38:25Z","dns_checked_at":"2026-11-06T02:02:30.000Z","dns_since":"2026-11-06T02:02:30.000Z","findings":[{"id":"fzmcex2vloosi6njq4eac","kind":"reported_domain","summary":"Under web3assetsecurity.com, reported by PhishDestroy","first_observed":"2026-11-06T01:26:18.218Z","first_published":"2026-11-06T01:50:52.626Z","source":"phishdestroy","source_name":"PhishDestroy","under":"web3assetsecurity.com","source_url":"https://phishdestroy.io/domain/web3assetsecurity.com/"}],"url":"https://domainspoof.com/live?show=all&q=cpcalendars.web3assetsecurity.com"},{"hostname":"cpcontacts.partyhiredestination.com.au","first_observed":"2026-11-06T01:31:25.087Z","first_published":"2026-11-06T01:50:52.626Z","brands":[],"dns":"resolved","resolved":["104.21.30.22","172.67.150.107"],"resolved_at":"2026-11-06T01:41:28Z","dns_checked_at":"2026-11-06T02:02:30.000Z","dns_since":"2026-11-06T02:02:30.000Z","findings":[{"id":"fljl6ynsinol4m2tkwca6","kind":"reported_domain","summary":"Under partyhiredestination.com.au, reported by PhishDestroy","first_observed":"2026-11-06T01:31:25.087Z","first_published":"2026-11-06T01:50:52.626Z","source":"phishdestroy","source_name":"PhishDestroy","under":"partyhiredestination.com.au","source_url":"https://phishdestroy.io/domain/partyhiredestination.com.au/"}],"url":"https://domainspoof.com/live?show=all&q=cpcontacts.partyhiredestination.com.au"},{"hostname":"cpcontacts.web3assetsecurity.com","first_observed":"2026-11-06T01:26:18.218Z","first_published":"2026-11-06T01:50:52.626Z","brands":[],"dns":"resolved","resolved":["104.21.18.217","172.67.183.100"],"resolved_at":"2026-11-06T01:38:25Z","dns_checked_at":"2026-11-06T02:02:30.000Z","dns_since":"2026-11-06T02:02:30.000Z","findings":[{"id":"fuvb5pqiaetkcodpxitaf","kind":"reported_domain","summary":"Under web3assetsecurity.com, reported by PhishDestroy","first_observed":"2026-11-06T01:26:18.218Z","first_published":"2026-11-06T01:50:52.626Z","source":"phishdestroy","source_name":"PhishDestroy","under":"web3assetsecurity.com","source_url":"https://phishdestroy.io/domain/web3assetsecurity.com/"}],"url":"https://domainspoof.com/live?show=all&q=cpcontacts.web3assetsecurity.com"},{"hostname":"credittengine.com","first_observed":"2026-11-06T01:31:25.087Z","first_published":"2026-11-06T01:50:52.626Z","brands":[],"dns":"resolved","resolved":["104.21.72.21","172.67.173.196"],"resolved_at":"2026-11-06T01:41:28Z","dns_checked_at":"2026-11-06T02:02:30.000Z","dns_since":"2026-11-06T02:02:30.000Z","findings":[{"id":"fi5tpywvc5q6yafuhr7sv","kind":"reported_domain","summary":"Listed by USOM","first_observed":"2026-11-06T01:31:25.087Z","first_published":"2026-11-06T01:50:52.626Z","source":"usom","source_name":"USOM"}],"url":"https://domainspoof.com/live?show=all&q=credittengine.com"},{"hostname":"current-oak.com","first_observed":"2026-11-06T01:00:44.336Z","first_published":"2026-11-06T01:50:52.626Z","brands":[],"dns":"resolved","resolved":["104.21.79.30","172.67.168.237"],"resolved_at":"2026-11-06T01:08:39Z","dns_checked_at":"2026-11-06T02:02:30.000Z","dns_since":"2026-11-06T02:02:30.000Z","findings":[{"id":"f63ae4eeyp6agz45ymcat","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-06T01:00:44.336Z","first_published":"2026-11-06T01:50:52.626Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=current-oak.com"},{"hostname":"doc-reader.fileharbor.net","first_observed":"2026-11-06T01:05:49.887Z","first_published":"2026-11-06T01:50:52.626Z","brands":[],"dns":"resolved","resolved":["162.35.38.15"],"resolved_at":"2026-11-06T01:12:40Z","dns_checked_at":"2026-11-06T02:02:30.000Z","dns_since":"2026-11-06T02:02:30.000Z","findings":[{"id":"fiaqw7rlyqx5eowr3r6uh","kind":"reported_domain","summary":"Under fileharbor.net, listed by MetaMask","first_observed":"2026-11-06T01:05:49.887Z","first_published":"2026-11-06T01:50:52.626Z","source":"metamask","source_name":"MetaMask","under":"fileharbor.net"}],"url":"https://domainspoof.com/live?show=all&q=doc-reader.fileharbor.net"},{"hostname":"docs-viewer.fileharbor.net","first_observed":"2026-11-06T01:05:49.887Z","first_published":"2026-11-06T01:50:52.626Z","brands":[],"dns":"resolved","resolved":["162.35.38.15"],"resolved_at":"2026-11-06T01:12:40Z","dns_checked_at":"2026-11-06T02:02:30.000Z","dns_since":"2026-11-06T02:02:30.000Z","findings":[{"id":"fw66bbqf77pj4xt6q5crt","kind":"reported_domain","summary":"Under fileharbor.net, listed by MetaMask","first_observed":"2026-11-06T01:05:49.887Z","first_published":"2026-11-06T01:50:52.626Z","source":"metamask","source_name":"MetaMask","under":"fileharbor.net"}],"url":"https://domainspoof.com/live?show=all&q=docs-viewer.fileharbor.net"},{"hostname":"emaarpass.us","first_observed":"2026-11-06T00:56:36.846Z","first_published":"2026-11-06T01:50:52.626Z","brands":[],"dns":"resolved","resolved":["104.21.84.16","172.67.184.194"],"resolved_at":"2026-11-06T01:07:27Z","dns_checked_at":"2026-11-06T02:02:30.000Z","dns_since":"2026-11-06T02:02:30.000Z","findings":[{"id":"ffqqnzpa3kqxzng7z2o7z","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-06T00:56:36.846Z","first_published":"2026-11-06T01:50:52.626Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=emaarpass.us"},{"hostname":"expertsoptionstrading.com","first_observed":"2026-11-06T00:56:36.846Z","first_published":"2026-11-06T01:50:52.626Z","brands":[],"dns":"resolved","resolved":["23.153.104.17"],"resolved_at":"2026-11-06T01:07:28Z","dns_checked_at":"2026-11-06T02:02:30.000Z","dns_since":"2026-11-06T02:02:30.000Z","findings":[{"id":"fqz4p7dxehnqoaykenzgs","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-06T00:56:36.846Z","first_published":"2026-11-06T01:50:52.626Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/expertsoptionstrading.com/"}],"url":"https://domainspoof.com/live?show=all&q=expertsoptionstrading.com"},{"hostname":"faktory.zenledger.dev","first_observed":"2026-11-06T01:10:57.695Z","first_published":"2026-11-06T01:50:52.626Z","brands":[],"dns":"no_address","resolved":[],"resolved_at":"2026-11-06T01:16:23Z","dns_checked_at":"2026-11-06T10:09:00.000Z","findings":[{"id":"fusvc7u2t5hzakqvf52pn","kind":"reported_domain","summary":"Under zenledger.dev, reported by PhishDestroy","first_observed":"2026-11-06T01:10:57.695Z","first_published":"2026-11-06T01:50:52.626Z","source":"phishdestroy","source_name":"PhishDestroy","under":"zenledger.dev","source_url":"https://phishdestroy.io/domain/zenledger.dev/"}],"url":"https://domainspoof.com/live?show=all&q=faktory.zenledger.dev"},{"hostname":"fangkuai.wxyz.cc","first_observed":"2026-11-06T00:36:06.728Z","first_published":"2026-11-06T01:50:52.626Z","brands":[],"dns":"resolved","resolved":["104.21.21.77","172.67.197.9"],"resolved_at":"2026-11-06T00:37:11Z","dns_checked_at":"2026-11-06T02:02:30.000Z","dns_since":"2026-11-06T02:02:30.000Z","findings":[{"id":"f3c4r2izveca3ah35scrp","kind":"reported_domain","summary":"Under wxyz.cc, listed by MetaMask","first_observed":"2026-11-06T00:36:06.728Z","first_published":"2026-11-06T01:50:52.626Z","source":"metamask","source_name":"MetaMask","under":"wxyz.cc"}],"url":"https://domainspoof.com/live?show=all&q=fangkuai.wxyz.cc"},{"hostname":"fluttering-horizons.com","first_observed":"2026-11-06T01:26:18.218Z","first_published":"2026-11-06T01:50:52.626Z","brands":[],"dns":"resolved","resolved":["104.21.53.89","172.67.211.11"],"resolved_at":"2026-11-06T01:38:30Z","dns_checked_at":"2026-11-06T02:02:30.000Z","dns_since":"2026-11-06T02:02:30.000Z","findings":[{"id":"ftahstfyhaetpaxt6ggml","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-06T01:26:18.218Z","first_published":"2026-11-06T01:50:52.626Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=fluttering-horizons.com"},{"hostname":"force-arc.com","first_observed":"2026-11-06T00:41:48.264Z","first_published":"2026-11-06T01:50:52.626Z","brands":[],"dns":"resolved","resolved":["104.21.57.40","172.67.189.29"],"resolved_at":"2026-11-06T00:47:12Z","dns_checked_at":"2026-11-06T02:02:30.000Z","dns_since":"2026-11-06T02:02:30.000Z","findings":[{"id":"f447n3d3gt5wmvdoaaqts","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-06T00:41:48.264Z","first_published":"2026-11-06T01:50:52.626Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=force-arc.com"},{"hostname":"frosty-destinations.com","first_observed":"2026-11-06T00:36:06.728Z","first_published":"2026-11-06T01:50:52.626Z","brands":[],"dns":"resolved","resolved":["104.21.54.128","172.67.138.180"],"resolved_at":"2026-11-06T00:37:12Z","dns_checked_at":"2026-11-06T02:02:30.000Z","dns_since":"2026-11-06T02:02:30.000Z","findings":[{"id":"fy7i42tk3fs3ynni6uzwi","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-06T00:36:06.728Z","first_published":"2026-11-06T01:50:52.626Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=frosty-destinations.com"},{"hostname":"fusion-keep.com","first_observed":"2026-11-06T00:56:36.846Z","first_published":"2026-11-06T01:50:52.626Z","brands":[],"dns":"resolved","resolved":["104.21.75.203","172.67.181.86"],"resolved_at":"2026-11-06T01:07:28Z","dns_checked_at":"2026-11-06T02:02:30.000Z","dns_since":"2026-11-06T02:02:30.000Z","findings":[{"id":"ficdk5iypyvw4khtvsm2a","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-06T00:56:36.846Z","first_published":"2026-11-06T01:50:52.626Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=fusion-keep.com"},{"hostname":"getstarted-extension-welcome.pages.dev","first_observed":"2026-11-06T01:21:11.336Z","first_published":"2026-11-06T01:50:52.626Z","brands":[],"dns":"resolved","resolved":["172.66.44.190","172.66.47.66"],"resolved_at":"2026-11-06T01:30:01Z","dns_checked_at":"2026-11-06T02:02:30.000Z","dns_since":"2026-11-06T02:02:30.000Z","findings":[{"id":"fyygwnge3or5rkdu6kntq","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-06T01:21:11.336Z","first_published":"2026-11-06T01:50:52.626Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=getstarted-extension-welcome.pages.dev"},{"hostname":"grafana.zenavlico.cyou","first_observed":"2026-11-06T01:41:37.434Z","first_published":"2026-11-06T01:50:52.626Z","brands":[],"dns":"resolved","resolved":["95.85.244.13"],"resolved_at":"2026-11-06T01:46:11Z","dns_checked_at":"2026-11-06T02:02:30.000Z","dns_since":"2026-11-06T02:02:30.000Z","findings":[{"id":"fifffeprza6btrnu2cgaw","kind":"reported_domain","summary":"Under zenavlico.cyou, listed by CERT Polska","first_observed":"2026-11-06T01:41:37.434Z","first_published":"2026-11-06T01:50:52.626Z","source":"cert_polska","source_name":"CERT Polska","under":"zenavlico.cyou"}],"url":"https://domainspoof.com/live?show=all&q=grafana.zenavlico.cyou"},{"hostname":"grandpashabet-kazanc-guncel.cfd","first_observed":"2026-11-06T01:36:30.815Z","first_published":"2026-11-06T01:50:52.626Z","brands":[],"dns":"resolved","resolved":["104.21.11.15","172.67.147.140"],"resolved_at":"2026-11-06T01:36:44Z","dns_checked_at":"2026-11-06T02:02:30.000Z","dns_since":"2026-11-06T02:02:30.000Z","findings":[{"id":"f5o4meh4viak5mqb2zfut","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-06T01:36:30.815Z","first_published":"2026-11-06T01:50:52.626Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/grandpashabet-kazanc-guncel.cfd/"}],"url":"https://domainspoof.com/live?show=all&q=grandpashabet-kazanc-guncel.cfd"},{"hostname":"grituals.shop","first_observed":"2026-11-06T01:26:18.218Z","first_published":"2026-11-06T01:50:52.626Z","brands":[],"dns":"resolved","resolved":["155.102.167.193","155.102.167.194","155.102.167.195","155.102.167.196","155.102.167.197","155.102.167.198","155.102.167.199","155.102.167.200"],"resolved_at":"2026-11-06T01:38:31Z","dns_checked_at":"2026-11-06T02:02:30.000Z","dns_since":"2026-11-06T02:02:30.000Z","findings":[{"id":"fp7zum44uh6fhcb7m3ydw","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-06T01:26:18.218Z","first_published":"2026-11-06T01:50:52.626Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=grituals.shop"},{"hostname":"grpc-node1.nowa.finance","first_observed":"2026-11-06T01:31:25.087Z","first_published":"2026-11-06T01:50:52.626Z","brands":[],"dns":"resolved","resolved":["104.21.46.136","172.67.139.45"],"resolved_at":"2026-11-06T01:41:32Z","dns_checked_at":"2026-11-06T02:02:30.000Z","dns_since":"2026-11-06T02:02:30.000Z","findings":[{"id":"fwcc65wqahjqmsbqnyqb2","kind":"reported_domain","summary":"Under nowa.finance, reported by PhishDestroy","first_observed":"2026-11-06T01:31:25.087Z","first_published":"2026-11-06T01:50:52.626Z","source":"phishdestroy","source_name":"PhishDestroy","under":"nowa.finance","source_url":"https://phishdestroy.io/domain/nowa.finance/"}],"url":"https://domainspoof.com/live?show=all&q=grpc-node1.nowa.finance"},{"hostname":"guceqiy.com","first_observed":"2026-11-06T01:36:30.815Z","first_published":"2026-11-06T01:50:52.626Z","brands":[],"dns":"resolved","resolved":["104.21.5.143","172.67.154.167"],"resolved_at":"2026-11-06T01:36:44Z","dns_checked_at":"2026-11-06T02:02:30.000Z","dns_since":"2026-11-06T02:02:30.000Z","findings":[{"id":"fmlkp7sbjmm3vr523q5gf","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-06T01:36:30.815Z","first_published":"2026-11-06T01:50:52.626Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=guceqiy.com"},{"hostname":"halfminute.formula-x.app","first_observed":"2026-11-06T00:41:48.264Z","first_published":"2026-11-06T01:50:52.626Z","brands":[],"dns":"resolved","resolved":[],"resolved_at":"2026-11-06T00:47:14Z","dns_checked_at":"2026-11-06T02:02:30.000Z","dns_since":"2026-11-06T02:02:30.000Z","findings":[{"id":"fj4hq2zamosuxqmdyngs3","kind":"reported_domain","summary":"Under formula-x.app, listed by MetaMask","first_observed":"2026-11-06T00:41:48.264Z","first_published":"2026-11-06T01:50:52.626Z","source":"metamask","source_name":"MetaMask","under":"formula-x.app"}],"url":"https://domainspoof.com/live?show=all&q=halfminute.formula-x.app"},{"hostname":"hansbergstrom.stage.io-ext.se","first_observed":"2026-11-06T01:05:49.887Z","first_published":"2026-11-06T01:50:52.626Z","brands":[],"dns":"resolved","resolved":["188.208.37.128"],"resolved_at":"2026-11-06T01:12:43Z","dns_checked_at":"2026-11-06T02:02:30.000Z","dns_since":"2026-11-06T02:02:30.000Z","findings":[{"id":"fvl6zkqn5orc2baynp2ka","kind":"reported_domain","summary":"Under io-ext.se, listed by MetaMask","first_observed":"2026-11-06T01:05:49.887Z","first_published":"2026-11-06T01:50:52.626Z","source":"metamask","source_name":"MetaMask","under":"io-ext.se"}],"url":"https://domainspoof.com/live?show=all&q=hansbergstrom.stage.io-ext.se"},{"hostname":"hostinger.nu","first_observed":"2026-11-06T00:51:39.826Z","first_published":"2026-11-06T01:50:52.626Z","brands":[{"id":"hostinger","name":"Hostinger","url":"https://domainspoof.com/brands/hostinger"}],"dns":"resolved","resolved":["193.108.130.22"],"resolved_at":"2026-11-06T02:02:30Z","dns_checked_at":"2026-11-06T02:02:30.000Z","dns_since":"2026-11-06T02:02:30.000Z","findings":[{"id":"f6yqojvtzwwzaftxbe3qx","kind":"phishing_infrastructure","summary":"Resolved to 193.108.130.22, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:51:39.826Z","first_published":"2026-11-06T01:50:52.626Z","address":"193.108.130.22","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/hostinger"},{"hostname":"hyper-voltage.com","first_observed":"2026-11-06T01:26:18.218Z","first_published":"2026-11-06T01:50:52.626Z","brands":[],"dns":"resolved","resolved":["104.21.87.65","172.67.142.2"],"resolved_at":"2026-11-06T01:38:32Z","dns_checked_at":"2026-11-06T02:02:30.000Z","dns_since":"2026-11-06T02:02:30.000Z","findings":[{"id":"f57nfjwrxohs4mve5a3fr","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-06T01:26:18.218Z","first_published":"2026-11-06T01:50:52.626Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=hyper-voltage.com"},{"hostname":"iam.cookie-stock.com","first_observed":"2026-11-06T00:56:36.846Z","first_published":"2026-11-06T01:50:52.626Z","brands":[],"dns":"resolved","resolved":["185.178.208.177"],"resolved_at":"2026-11-06T01:07:29Z","dns_checked_at":"2026-11-06T02:02:30.000Z","dns_since":"2026-11-06T02:02:30.000Z","findings":[{"id":"flmyqcymcoieqx7nnnl57","kind":"reported_domain","summary":"Under cookie-stock.com, reported by PhishDestroy","first_observed":"2026-11-06T00:56:36.846Z","first_published":"2026-11-06T01:50:52.626Z","source":"phishdestroy","source_name":"PhishDestroy","under":"cookie-stock.com","source_url":"https://phishdestroy.io/domain/cookie-stock.com/"}],"url":"https://domainspoof.com/live?show=all&q=iam.cookie-stock.com"},{"hostname":"id-my-advanziakonto-germany.91-218-65-223.plesk.page","first_observed":"2026-11-06T01:30:07.411Z","first_published":"2026-11-06T01:50:52.626Z","brands":[{"id":"advanzia-bank","name":"Advanzia Bank","url":"https://domainspoof.com/brands/advanzia-bank"}],"dns":"resolved","resolved":["91.218.65.223"],"resolved_at":"2026-11-06T02:02:30Z","dns_checked_at":"2026-11-06T02:02:30.000Z","dns_since":"2026-11-06T02:02:30.000Z","findings":[{"id":"ffil2ouwgfkmgthf7krxz","kind":"phishing_infrastructure","summary":"Resolved to 91.218.65.223, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T01:30:07.411Z","first_published":"2026-11-06T01:50:52.626Z","address":"91.218.65.223","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/advanzia-bank"},{"hostname":"inbank.finance","first_observed":"2026-11-06T00:58:18.978Z","first_published":"2026-11-06T01:50:52.626Z","brands":[{"id":"inbank","name":"Inbank","url":"https://domainspoof.com/brands/inbank"}],"dns":"resolved","resolved":["185.31.240.240"],"resolved_at":"2026-11-06T02:02:30Z","dns_checked_at":"2026-11-06T02:02:30.000Z","dns_since":"2026-11-06T02:02:30.000Z","findings":[{"id":"fo3nfntriotxulegmvst7","kind":"phishing_infrastructure","summary":"Resolved to 185.31.240.240, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:58:18.978Z","first_published":"2026-11-06T01:50:52.626Z","address":"185.31.240.240","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/inbank"},{"hostname":"interbahisresmigirisleri.icu","first_observed":"2026-11-06T01:21:11.336Z","first_published":"2026-11-06T01:50:52.626Z","brands":[],"dns":"resolved","resolved":["104.21.49.10","172.67.140.46"],"resolved_at":"2026-11-06T01:30:07Z","dns_checked_at":"2026-11-06T02:02:30.000Z","dns_since":"2026-11-06T02:02:30.000Z","findings":[{"id":"flxef2wokjjlziy5aplvr","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-06T01:21:11.336Z","first_published":"2026-11-06T01:50:52.626Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/interbahisresmigirisleri.icu/"}],"url":"https://domainspoof.com/live?show=all&q=interbahisresmigirisleri.icu"},{"hostname":"kb.albarakaaiprojects.com","first_observed":"2026-11-06T01:26:18.218Z","first_published":"2026-11-06T01:50:52.626Z","brands":[],"dns":"resolved","resolved":["141.94.121.232"],"resolved_at":"2026-11-06T01:26:26Z","dns_checked_at":"2026-11-06T02:02:30.000Z","dns_since":"2026-11-06T02:02:30.000Z","findings":[{"id":"fhii5f2s3lumh26yzphd7","kind":"reported_domain","summary":"Under albarakaaiprojects.com, listed by USOM","first_observed":"2026-11-06T01:26:18.218Z","first_published":"2026-11-06T01:50:52.626Z","source":"usom","source_name":"USOM","under":"albarakaaiprojects.com"}],"url":"https://domainspoof.com/live?show=all&q=kb.albarakaaiprojects.com"},{"hostname":"kings-track.live","first_observed":"2026-11-06T00:41:48.264Z","first_published":"2026-11-06T01:50:52.626Z","brands":[],"dns":"resolved","resolved":["104.21.12.129","172.67.152.79"],"resolved_at":"2026-11-06T00:47:22Z","dns_checked_at":"2026-11-06T02:02:30.000Z","dns_since":"2026-11-06T02:02:30.000Z","findings":[{"id":"fba4bvc3ovlsxbo3upx3h","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-06T00:41:48.264Z","first_published":"2026-11-06T01:50:52.626Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/kings-track.live/"}],"url":"https://domainspoof.com/live?show=all&q=kings-track.live"},{"hostname":"krakensv.com","first_observed":"2026-11-06T01:21:11.336Z","first_published":"2026-11-06T01:50:52.626Z","brands":[],"dns":"resolved","resolved":["104.21.41.92","172.67.190.164"],"resolved_at":"2026-11-06T01:30:08Z","dns_checked_at":"2026-11-06T02:02:30.000Z","dns_since":"2026-11-06T02:02:30.000Z","findings":[{"id":"f7namyeirlkilktbboura","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-06T01:21:11.336Z","first_published":"2026-11-06T01:50:52.626Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=krakensv.com"},{"hostname":"lanangpremieredoctors.com.ph","first_observed":"2026-11-06T00:56:36.846Z","first_published":"2026-11-06T01:50:52.626Z","brands":[],"dns":"resolved","resolved":["104.21.91.171","172.67.175.208"],"resolved_at":"2026-11-06T01:07:29Z","dns_checked_at":"2026-11-06T02:02:30.000Z","dns_since":"2026-11-06T02:02:30.000Z","findings":[{"id":"fonrv5kr3b2mx7hz7naqx","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-06T00:56:36.846Z","first_published":"2026-11-06T01:50:52.626Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=lanangpremieredoctors.com.ph"},{"hostname":"lemiwaloris.com","first_observed":"2026-11-06T01:36:30.815Z","first_published":"2026-11-06T01:50:52.626Z","brands":[],"dns":"resolved","resolved":["104.21.6.241","172.67.135.122"],"resolved_at":"2026-11-06T01:36:45Z","dns_checked_at":"2026-11-06T02:02:30.000Z","dns_since":"2026-11-06T02:02:30.000Z","findings":[{"id":"fxmgcjxqezadf7isofgqb","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-06T01:36:30.815Z","first_published":"2026-11-06T01:50:52.626Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=lemiwaloris.com"},{"hostname":"login.onlinemicrosoftpdreview.sbs","first_observed":"2026-11-06T01:36:30.815Z","first_published":"2026-11-06T01:50:52.626Z","brands":[],"dns":"resolved","resolved":["104.21.58.227","172.67.209.248","2606:4700:3031::ac43:d1f8","2606:4700:3037::6815:3ae3"],"resolved_at":"2026-11-06T01:36:45Z","dns_checked_at":"2026-11-06T02:02:30.000Z","dns_since":"2026-11-06T02:02:30.000Z","findings":[{"id":"fhu5jchrb254vo26xipd3","kind":"reported_domain","summary":"Under onlinemicrosoftpdreview.sbs, listed by MetaMask","first_observed":"2026-11-06T01:36:30.815Z","first_published":"2026-11-06T01:50:52.626Z","source":"metamask","source_name":"MetaMask","under":"onlinemicrosoftpdreview.sbs"}],"url":"https://domainspoof.com/live?show=all&q=login.onlinemicrosoftpdreview.sbs"},{"hostname":"mail.fileharbor.net","first_observed":"2026-11-06T01:05:49.887Z","first_published":"2026-11-06T01:50:52.626Z","brands":[],"dns":"resolved","resolved":["162.35.38.15"],"resolved_at":"2026-11-06T01:12:46Z","dns_checked_at":"2026-11-06T02:02:30.000Z","dns_since":"2026-11-06T02:02:30.000Z","findings":[{"id":"fbrtfnx2g4ve4ogv2oqya","kind":"reported_domain","summary":"Under fileharbor.net, listed by MetaMask","first_observed":"2026-11-06T01:05:49.887Z","first_published":"2026-11-06T01:50:52.626Z","source":"metamask","source_name":"MetaMask","under":"fileharbor.net"}],"url":"https://domainspoof.com/live?show=all&q=mail.fileharbor.net"},{"hostname":"mail.partyhiredestination.com.au","first_observed":"2026-11-06T01:31:25.087Z","first_published":"2026-11-06T01:50:52.626Z","brands":[],"dns":"resolved","resolved":["104.21.30.22","172.67.150.107"],"resolved_at":"2026-11-06T01:31:47Z","dns_checked_at":"2026-11-06T02:02:30.000Z","dns_since":"2026-11-06T02:02:30.000Z","findings":[{"id":"fx2qsbmcupsjd2bd64kpl","kind":"reported_domain","summary":"Under partyhiredestination.com.au, reported by PhishDestroy","first_observed":"2026-11-06T01:31:25.087Z","first_published":"2026-11-06T01:50:52.626Z","source":"phishdestroy","source_name":"PhishDestroy","under":"partyhiredestination.com.au","source_url":"https://phishdestroy.io/domain/partyhiredestination.com.au/"}],"url":"https://domainspoof.com/live?show=all&q=mail.partyhiredestination.com.au"},{"hostname":"mail.web3assetsecurity.com","first_observed":"2026-11-06T01:26:18.218Z","first_published":"2026-11-06T01:50:52.626Z","brands":[],"dns":"resolved","resolved":["157.250.205.214"],"resolved_at":"2026-11-06T01:26:26Z","dns_checked_at":"2026-11-06T02:02:30.000Z","dns_since":"2026-11-06T02:02:30.000Z","findings":[{"id":"f75ftjv3qeibic4xtdb6d","kind":"reported_domain","summary":"Under web3assetsecurity.com, reported by PhishDestroy","first_observed":"2026-11-06T01:26:18.218Z","first_published":"2026-11-06T01:50:52.626Z","source":"phishdestroy","source_name":"PhishDestroy","under":"web3assetsecurity.com","source_url":"https://phishdestroy.io/domain/web3assetsecurity.com/"}],"url":"https://domainspoof.com/live?show=all&q=mail.web3assetsecurity.com"},{"hostname":"manager.ni-electrical.com","first_observed":"2026-11-06T01:10:57.695Z","first_published":"2026-11-06T01:50:52.626Z","brands":[],"dns":"resolved","resolved":["109.238.86.5"],"resolved_at":"2026-11-06T01:16:27Z","dns_checked_at":"2026-11-06T02:02:30.000Z","dns_since":"2026-11-06T02:02:30.000Z","findings":[{"id":"f3v35woljmn4l6zqg76sz","kind":"reported_domain","summary":"Under ni-electrical.com, listed by CERT Polska","first_observed":"2026-11-06T01:10:57.695Z","first_published":"2026-11-06T01:50:52.626Z","source":"cert_polska","source_name":"CERT Polska","under":"ni-electrical.com"}],"url":"https://domainspoof.com/live?show=all&q=manager.ni-electrical.com"},{"hostname":"manstormwallet.online","first_observed":"2026-11-06T01:26:18.218Z","first_published":"2026-11-06T01:50:52.626Z","brands":[],"dns":"resolved","resolved":["104.21.81.143","172.67.161.118"],"resolved_at":"2026-11-06T01:26:26Z","dns_checked_at":"2026-11-06T02:02:30.000Z","dns_since":"2026-11-06T02:02:30.000Z","findings":[{"id":"f4aogcqyc2vzqcnxbi3m6","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-06T01:26:18.218Z","first_published":"2026-11-06T01:50:52.626Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/manstormwallet.online/"}],"url":"https://domainspoof.com/live?show=all&q=manstormwallet.online"},{"hostname":"matbet9760.icu","first_observed":"2026-11-06T00:51:30.810Z","first_published":"2026-11-06T01:50:52.626Z","brands":[],"dns":"resolved","resolved":["104.21.17.14","172.67.218.242"],"resolved_at":"2026-11-06T00:51:43Z","dns_checked_at":"2026-11-06T02:02:30.000Z","dns_since":"2026-11-06T02:02:30.000Z","findings":[{"id":"f3xqihuzk67xb3ea6t3r7","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-06T00:51:30.810Z","first_published":"2026-11-06T01:50:52.626Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/matbet9760.icu/"}],"url":"https://domainspoof.com/live?show=all&q=matbet9760.icu"},{"hostname":"medlaexpert.pl","first_observed":"2026-11-06T00:37:17.553Z","first_published":"2026-11-06T01:50:52.626Z","brands":[{"id":"media-expert","name":"Media Expert","url":"https://domainspoof.com/brands/media-expert"}],"dns":"resolved","resolved":["185.253.212.22"],"resolved_at":"2026-11-06T02:02:30Z","dns_checked_at":"2026-11-06T02:02:30.000Z","dns_since":"2026-11-06T02:02:30.000Z","findings":[{"id":"fegfdt5vx6jipkyhdwypw","kind":"phishing_infrastructure","summary":"Resolved to 185.253.212.22, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:37:17.553Z","first_published":"2026-11-06T01:50:52.626Z","address":"185.253.212.22","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/media-expert"},{"hostname":"meetgooglejqu-fgig-nkh.com","first_observed":"2026-11-06T01:00:44.336Z","first_published":"2026-11-06T01:50:52.626Z","brands":[],"dns":"resolved","resolved":["104.21.80.160","172.67.151.118","2606:4700:3035::ac43:9776","2606:4700:3037::6815:50a0"],"resolved_at":"2026-11-06T01:08:44Z","dns_checked_at":"2026-11-06T02:02:30.000Z","dns_since":"2026-11-06T02:02:30.000Z","findings":[{"id":"fid53qv6tz2omfa7zjkt5","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-06T01:00:44.336Z","first_published":"2026-11-06T01:50:52.626Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=meetgooglejqu-fgig-nkh.com"},{"hostname":"mellow-fields.com","first_observed":"2026-11-06T01:05:49.887Z","first_published":"2026-11-06T01:50:52.626Z","brands":[],"dns":"resolved","resolved":["104.21.64.208","172.67.155.214"],"resolved_at":"2026-11-06T01:12:46Z","dns_checked_at":"2026-11-06T02:02:30.000Z","dns_since":"2026-11-06T02:02:30.000Z","findings":[{"id":"fwriwcr2ltuvogng6m7zw","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-06T01:05:49.887Z","first_published":"2026-11-06T01:50:52.626Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=mellow-fields.com"},{"hostname":"metasupport-centers.pages.dev","first_observed":"2026-11-06T00:51:30.810Z","first_published":"2026-11-06T01:50:52.626Z","brands":[],"dns":"resolved","resolved":["172.66.44.201","172.66.47.55"],"resolved_at":"2026-11-06T00:51:43Z","dns_checked_at":"2026-11-06T02:02:30.000Z","dns_since":"2026-11-06T02:02:30.000Z","findings":[{"id":"fh4isds2jt3now7joyibs","kind":"reported_domain","summary":"Reported by PhishTank","first_observed":"2026-11-06T00:51:30.810Z","first_published":"2026-11-06T01:50:52.626Z","source":"phishtank","source_name":"PhishTank","source_url":"https://phishtank.org/phish_detail.php?phish_id=8950255"}],"url":"https://domainspoof.com/live?show=all&q=metasupport-centers.pages.dev"},{"hostname":"mexc.monster","first_observed":"2026-11-06T00:51:30.810Z","first_published":"2026-11-06T01:50:52.626Z","brands":[],"dns":"resolved","resolved":["104.21.70.251","172.67.141.22"],"resolved_at":"2026-11-06T00:51:43Z","dns_checked_at":"2026-11-06T02:02:30.000Z","dns_since":"2026-11-06T02:02:30.000Z","findings":[{"id":"fbspgs6tj7hz3uchyvhnj","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-06T00:51:30.810Z","first_published":"2026-11-06T01:50:52.626Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/mexc.monster/"}],"url":"https://domainspoof.com/live?show=all&q=mexc.monster"},{"hostname":"micros0ft.sbs","first_observed":"2026-11-06T01:05:49.887Z","first_published":"2026-11-06T01:50:52.626Z","brands":[{"id":"microsoft","name":"Microsoft","url":"https://domainspoof.com/brands/microsoft"}],"dns":"resolved","resolved":["91.195.240.123"],"resolved_at":"2026-11-06T01:12:46Z","dns_checked_at":"2026-11-06T02:02:30.000Z","dns_since":"2026-11-06T02:02:30.000Z","findings":[{"id":"f44kq3ezhvlcqjbavbbnz","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-06T01:05:49.887Z","first_published":"2026-11-06T01:50:52.626Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/brands/microsoft"},{"hostname":"monetpevnov-cs.live","first_observed":"2026-11-06T01:26:18.218Z","first_published":"2026-11-06T01:50:52.626Z","brands":[],"dns":"resolved","resolved":["104.21.70.129","172.67.223.141"],"resolved_at":"2026-11-06T01:26:26Z","dns_checked_at":"2026-11-06T02:02:30.000Z","dns_since":"2026-11-06T02:02:30.000Z","findings":[{"id":"fpikmrch3qpbf4vyiui5p","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-06T01:26:18.218Z","first_published":"2026-11-06T01:50:52.626Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=monetpevnov-cs.live"},{"hostname":"mysocialstmm.com","first_observed":"2026-11-06T01:26:18.218Z","first_published":"2026-11-06T01:50:52.626Z","brands":[],"dns":"resolved","resolved":["104.21.26.173","172.67.138.35"],"resolved_at":"2026-11-06T01:26:26Z","dns_checked_at":"2026-11-06T02:02:30.000Z","dns_since":"2026-11-06T02:02:30.000Z","findings":[{"id":"fxhrylwfezw4zfzo2qob4","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-06T01:26:18.218Z","first_published":"2026-11-06T01:50:52.626Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/mysocialstmm.com/"}],"url":"https://domainspoof.com/live?show=all&q=mysocialstmm.com"},{"hostname":"nazvelgorn-pt.live","first_observed":"2026-11-06T01:15:35.334Z","first_published":"2026-11-06T01:50:52.626Z","brands":[],"dns":"resolved","resolved":["104.21.50.198","172.67.210.11"],"resolved_at":"2026-11-06T01:21:12Z","dns_checked_at":"2026-11-06T02:02:30.000Z","dns_since":"2026-11-06T02:02:30.000Z","findings":[{"id":"fge22ickpypkgmrtejvsh","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-06T01:15:35.334Z","first_published":"2026-11-06T01:50:52.626Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=nazvelgorn-pt.live"},{"hostname":"nexora-goldenreward.click","first_observed":"2026-11-06T01:21:11.336Z","first_published":"2026-11-06T01:50:52.626Z","brands":[],"dns":"resolved","resolved":["104.21.48.35","172.67.176.112"],"resolved_at":"2026-11-06T01:30:10Z","dns_checked_at":"2026-11-06T02:02:30.000Z","dns_since":"2026-11-06T02:02:30.000Z","findings":[{"id":"f7rvi7dso3cwvpyimcmtf","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-06T01:21:11.336Z","first_published":"2026-11-06T01:50:52.626Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=nexora-goldenreward.click"},{"hostname":"nisantasidonercisi.com","first_observed":"2026-11-06T01:36:30.815Z","first_published":"2026-11-06T01:50:52.626Z","brands":[],"dns":"resolved","resolved":["77.245.159.230"],"resolved_at":"2026-11-06T01:36:45Z","dns_checked_at":"2026-11-06T02:02:30.000Z","dns_since":"2026-11-06T02:02:30.000Z","findings":[{"id":"fhn2pzp5e4fjcd7recuuu","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-06T01:36:30.815Z","first_published":"2026-11-06T01:50:52.626Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=nisantasidonercisi.com"},{"hostname":"nitcoinvn.io","first_observed":"2026-11-06T01:41:37.434Z","first_published":"2026-11-06T01:50:52.626Z","brands":[],"dns":"resolved","resolved":["104.21.21.188","172.67.199.207"],"resolved_at":"2026-11-06T01:46:17Z","dns_checked_at":"2026-11-06T02:02:30.000Z","dns_since":"2026-11-06T02:02:30.000Z","findings":[{"id":"frewich4c67hvgwmlfsvb","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-06T01:41:37.434Z","first_published":"2026-11-06T01:50:52.626Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/nitcoinvn.io/"}],"url":"https://domainspoof.com/live?show=all&q=nitcoinvn.io"},{"hostname":"nix1.sberbankmobile.ru","first_observed":"2026-11-06T01:31:47.627Z","first_published":"2026-11-06T01:50:52.626Z","brands":[{"id":"sberbank","name":"Sberbank","url":"https://domainspoof.com/brands/sberbank"}],"dns":"resolved","resolved":["87.242.79.60"],"resolved_at":"2026-11-06T02:02:30Z","dns_checked_at":"2026-11-06T02:02:30.000Z","dns_since":"2026-11-06T02:02:30.000Z","findings":[{"id":"fk7vm45qvr7tyoio4slor","kind":"phishing_infrastructure","summary":"Resolved to 87.242.79.60, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T01:31:47.627Z","first_published":"2026-11-06T01:50:52.626Z","address":"87.242.79.60","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/sberbank"},{"hostname":"nlfcwdkp.qdpsmolz.uilykpvm.wqxpitde.kvjsbyeg.emnbzdvj.uatmfwcq.gatewaylearning.ezgateway.net","first_observed":"2026-11-06T01:21:11.336Z","first_published":"2026-11-06T01:50:52.626Z","brands":[],"dns":"resolved","resolved":["15.204.116.29"],"resolved_at":"2026-11-06T01:30:10Z","dns_checked_at":"2026-11-06T02:02:30.000Z","dns_since":"2026-11-06T02:02:30.000Z","findings":[{"id":"fiqzpgnsu6vfy54e6b7xt","kind":"reported_domain","summary":"Under ezgateway.net, listed by USOM","first_observed":"2026-11-06T01:21:11.336Z","first_published":"2026-11-06T01:50:52.626Z","source":"usom","source_name":"USOM","under":"ezgateway.net"}],"url":"https://domainspoof.com/live?show=all&q=nlfcwdkp.qdpsmolz.uilykpvm.wqxpitde.kvjsbyeg.emnbzdvj.uatmfwcq.gatewaylearning.ezgateway.net"},{"hostname":"oentayuf.cbxwvkoh.jzkgxrysd.pirtoalj.ixyhmceu.tomjzfci.tczglrpw.gatewaylearning.ezgateway.net","first_observed":"2026-11-06T01:21:11.336Z","first_published":"2026-11-06T01:50:52.626Z","brands":[],"dns":"resolved","resolved":["15.204.116.29"],"resolved_at":"2026-11-06T01:30:11Z","dns_checked_at":"2026-11-06T02:02:30.000Z","dns_since":"2026-11-06T02:02:30.000Z","findings":[{"id":"foyfhonsjffb5bqzex7fc","kind":"reported_domain","summary":"Under ezgateway.net, listed by USOM","first_observed":"2026-11-06T01:21:11.336Z","first_published":"2026-11-06T01:50:52.626Z","source":"usom","source_name":"USOM","under":"ezgateway.net"}],"url":"https://domainspoof.com/live?show=all&q=oentayuf.cbxwvkoh.jzkgxrysd.pirtoalj.ixyhmceu.tomjzfci.tczglrpw.gatewaylearning.ezgateway.net"},{"hostname":"officialxtremcoin.com","first_observed":"2026-11-06T01:05:49.887Z","first_published":"2026-11-06T01:50:52.626Z","brands":[],"dns":"resolved","resolved":["64.29.17.1","216.198.79.1"],"resolved_at":"2026-11-06T01:12:51Z","dns_checked_at":"2026-11-06T02:02:30.000Z","dns_since":"2026-11-06T02:02:30.000Z","findings":[{"id":"ffcovafpwuna7xh4exwxh","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-06T01:05:49.887Z","first_published":"2026-11-06T01:50:52.626Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/officialxtremcoin.com/"}],"url":"https://domainspoof.com/live?show=all&q=officialxtremcoin.com"},{"hostname":"okxpolls.net","first_observed":"2026-11-06T01:10:57.695Z","first_published":"2026-11-06T01:50:52.626Z","brands":[],"dns":"resolved","resolved":["104.21.16.122","172.67.212.122"],"resolved_at":"2026-11-06T01:16:30Z","dns_checked_at":"2026-11-06T02:02:30.000Z","dns_since":"2026-11-06T02:02:30.000Z","findings":[{"id":"fhoypettrh7kkvekscjjo","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-06T01:10:57.695Z","first_published":"2026-11-06T01:50:52.626Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=okxpolls.net"},{"hostname":"olive-sash.shop","first_observed":"2026-11-06T00:51:30.810Z","first_published":"2026-11-06T01:50:52.626Z","brands":[],"dns":"resolved","resolved":["34.8.77.192"],"resolved_at":"2026-11-06T00:51:43Z","dns_checked_at":"2026-11-06T02:02:30.000Z","dns_since":"2026-11-06T02:02:30.000Z","findings":[{"id":"fuirg2bheyrmxu33243ny","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-06T00:51:30.810Z","first_published":"2026-11-06T01:50:52.626Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=olive-sash.shop"},{"hostname":"opulencemiragesystem-com.financecryptoworld.com","first_observed":"2026-11-06T01:26:18.218Z","first_published":"2026-11-06T01:50:52.626Z","brands":[],"dns":"resolved","resolved":["104.21.10.130","172.67.131.121"],"resolved_at":"2026-11-06T01:26:26Z","dns_checked_at":"2026-11-06T02:02:30.000Z","dns_since":"2026-11-06T02:02:30.000Z","findings":[{"id":"fdgvl6b6in7v2ob5lyopj","kind":"reported_domain","summary":"Under financecryptoworld.com, listed by CERT Polska","first_observed":"2026-11-06T01:26:18.218Z","first_published":"2026-11-06T01:50:52.626Z","source":"cert_polska","source_name":"CERT Polska","under":"financecryptoworld.com"}],"url":"https://domainspoof.com/live?show=all&q=opulencemiragesystem-com.financecryptoworld.com"},{"hostname":"originpoint.info","first_observed":"2026-11-06T00:46:55.421Z","first_published":"2026-11-06T01:50:52.626Z","brands":[],"dns":"resolved","resolved":["104.21.21.171","172.67.199.165"],"resolved_at":"2026-11-06T00:58:26Z","dns_checked_at":"2026-11-06T02:02:30.000Z","dns_since":"2026-11-06T02:02:30.000Z","findings":[{"id":"f5cnup3g55vcrri2t7cpv","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-06T00:46:55.421Z","first_published":"2026-11-06T01:50:52.626Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/originpoint.info/"}],"url":"https://domainspoof.com/live?show=all&q=originpoint.info"},{"hostname":"outlookra.info","first_observed":"2026-11-06T01:41:37.434Z","first_published":"2026-11-06T01:50:52.626Z","brands":[],"dns":"resolved","resolved":["104.21.23.161","172.67.212.81","2606:4700:3033::ac43:d451","2606:4700:3036::6815:17a1"],"resolved_at":"2026-11-06T01:46:18Z","dns_checked_at":"2026-11-06T02:02:30.000Z","dns_since":"2026-11-06T02:02:30.000Z","findings":[{"id":"fyepj46wkptqjm5tged2o","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-06T01:41:37.434Z","first_published":"2026-11-06T01:50:52.626Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/outlookra.info/"}],"url":"https://domainspoof.com/live?show=all&q=outlookra.info"},{"hostname":"pay-bitrefill.com-cv01-esim-gift.com","first_observed":"2026-11-06T01:07:31.181Z","first_published":"2026-11-06T01:50:52.626Z","brands":[{"id":"bitrefill","name":"Bitrefill","url":"https://domainspoof.com/brands/bitrefill"}],"dns":"resolved","resolved":["62.60.226.39"],"resolved_at":"2026-11-06T02:02:30Z","dns_checked_at":"2026-11-06T02:02:30.000Z","dns_since":"2026-11-06T02:02:30.000Z","findings":[{"id":"fdxwbzjigeiojsmcsbwan","kind":"spamhaus_drop","summary":"Resolved to 62.60.226.39 on Spamhaus DROP","first_observed":"2026-11-06T01:07:31.181Z","first_published":"2026-11-06T01:50:52.626Z","address":"62.60.226.39","list":"spamhaus_drop","list_name":"Spamhaus DROP"}],"url":"https://domainspoof.com/brands/bitrefill"},{"hostname":"pay.avito.www.sbermarket.youla.sberbank.sber.prod2.hawkinswoodshop.com","first_observed":"2026-11-06T01:30:12.633Z","first_published":"2026-11-06T01:50:52.626Z","brands":[{"id":"avito","name":"Avito","url":"https://domainspoof.com/brands/avito"},{"id":"sberbank","name":"Sberbank","url":"https://domainspoof.com/brands/sberbank"},{"id":"youla","name":"Youla","url":"https://domainspoof.com/brands/youla"}],"dns":"resolved","resolved":["45.77.75.133","45.77.92.157","207.246.78.75"],"resolved_at":"2026-11-06T02:02:30Z","dns_checked_at":"2026-11-06T02:02:30.000Z","dns_since":"2026-11-06T02:02:30.000Z","findings":[{"id":"f3oqkzhn5mitn2cu5z6j7","kind":"phishing_infrastructure","summary":"Resolved to 45.77.75.133, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T01:30:12.633Z","first_published":"2026-11-06T01:50:52.626Z","address":"45.77.75.133","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/avito"},{"hostname":"petrelwinstmere.live","first_observed":"2026-11-06T01:41:37.434Z","first_published":"2026-11-06T01:50:52.626Z","brands":[],"dns":"resolved","resolved":["104.21.2.24","172.67.128.155"],"resolved_at":"2026-11-06T01:46:18Z","dns_checked_at":"2026-11-06T02:02:30.000Z","dns_since":"2026-11-06T02:02:30.000Z","findings":[{"id":"f2vsowyigbgvl2fjxcjck","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-06T01:41:37.434Z","first_published":"2026-11-06T01:50:52.626Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=petrelwinstmere.live"},{"hostname":"plnmobile.org","first_observed":"2026-11-06T01:12:51.919Z","first_published":"2026-11-06T01:50:52.626Z","brands":[{"id":"pln","name":"PLN","url":"https://domainspoof.com/brands/pln"}],"dns":"resolved","resolved":["2.57.91.91"],"resolved_at":"2026-11-06T02:02:30Z","dns_checked_at":"2026-11-06T02:02:30.000Z","dns_since":"2026-11-06T02:02:30.000Z","findings":[{"id":"fsfv6z235ho76g3wb5ngy","kind":"phishing_infrastructure","summary":"Resolved to 2.57.91.91, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T01:12:51.919Z","first_published":"2026-11-06T01:50:52.626Z","address":"2.57.91.91","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/pln"},{"hostname":"portal-firelight.xyz","first_observed":"2026-11-06T01:21:11.336Z","first_published":"2026-11-06T01:50:52.626Z","brands":[],"dns":"resolved","resolved":["104.21.91.44","172.67.210.50"],"resolved_at":"2026-11-06T01:30:13Z","dns_checked_at":"2026-11-06T02:02:30.000Z","dns_since":"2026-11-06T02:02:30.000Z","findings":[{"id":"fzazij3cwzxpbtkka52yb","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-06T01:21:11.336Z","first_published":"2026-11-06T01:50:52.626Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=portal-firelight.xyz"},{"hostname":"prepgeneric.com","first_observed":"2026-11-06T00:51:30.810Z","first_published":"2026-11-06T01:50:52.626Z","brands":[],"dns":"resolved","resolved":["31.31.198.8"],"resolved_at":"2026-11-06T00:51:43Z","dns_checked_at":"2026-11-06T02:02:30.000Z","dns_since":"2026-11-06T02:02:30.000Z","findings":[{"id":"foawixom7ibfxpyxhz6yb","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-06T00:51:30.810Z","first_published":"2026-11-06T01:50:52.626Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/prepgeneric.com/"}],"url":"https://domainspoof.com/live?show=all&q=prepgeneric.com"},{"hostname":"quellevermonthal.live","first_observed":"2026-11-06T01:05:49.887Z","first_published":"2026-11-06T01:50:52.626Z","brands":[],"dns":"resolved","resolved":["104.21.69.228","172.67.214.153"],"resolved_at":"2026-11-06T01:05:58Z","dns_checked_at":"2026-11-06T02:02:30.000Z","dns_since":"2026-11-06T02:02:30.000Z","findings":[{"id":"fbvdc5zw6bx5gsxx57lkd","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-06T01:05:49.887Z","first_published":"2026-11-06T01:50:52.626Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=quellevermonthal.live"},{"hostname":"realansemonsol.com","first_observed":"2026-11-06T01:05:49.887Z","first_published":"2026-11-06T01:50:52.626Z","brands":[],"dns":"resolved","resolved":["104.21.14.225","172.67.204.137"],"resolved_at":"2026-11-06T01:05:58Z","dns_checked_at":"2026-11-06T02:02:30.000Z","dns_since":"2026-11-06T02:02:30.000Z","findings":[{"id":"frizkhplwcvfk2e6bqqxl","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-06T01:05:49.887Z","first_published":"2026-11-06T01:50:52.626Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=realansemonsol.com"},{"hostname":"registry.zenavlico.cyou","first_observed":"2026-11-06T00:46:55.421Z","first_published":"2026-11-06T01:50:52.626Z","brands":[],"dns":"resolved","resolved":["95.85.244.13"],"resolved_at":"2026-11-06T00:58:29Z","dns_checked_at":"2026-11-06T02:02:30.000Z","dns_since":"2026-11-06T02:02:30.000Z","findings":[{"id":"f4s6ahwbnj5w64srutgmc","kind":"reported_domain","summary":"Under zenavlico.cyou, listed by CERT Polska","first_observed":"2026-11-06T00:46:55.421Z","first_published":"2026-11-06T01:50:52.626Z","source":"cert_polska","source_name":"CERT Polska","under":"zenavlico.cyou"}],"url":"https://domainspoof.com/live?show=all&q=registry.zenavlico.cyou"},{"hostname":"rewards-xrpl.live","first_observed":"2026-11-06T00:51:30.810Z","first_published":"2026-11-06T01:50:52.626Z","brands":[{"id":"ripple","name":"Ripple (XRP)","url":"https://domainspoof.com/brands/ripple"}],"dns":"resolved","resolved":["104.21.80.167","172.67.151.199","2606:4700:3033::6815:50a7","2606:4700:3037::ac43:97c7"],"resolved_at":"2026-11-06T00:51:43Z","dns_checked_at":"2026-11-06T02:02:30.000Z","dns_since":"2026-11-06T02:02:30.000Z","findings":[{"id":"fu456shapnnpfueypbjwo","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-06T00:51:30.810Z","first_published":"2026-11-06T01:50:52.626Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/brands/ripple"},{"hostname":"rexasfinance.com","first_observed":"2026-11-06T00:41:48.264Z","first_published":"2026-11-06T01:50:52.626Z","brands":[],"dns":"resolved","resolved":["3.33.251.168","15.197.225.128"],"resolved_at":"2026-11-06T00:41:57Z","dns_checked_at":"2026-11-06T02:02:30.000Z","dns_since":"2026-11-06T02:02:30.000Z","findings":[{"id":"f5jnrac3bcuxadr4toena","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-06T00:41:48.264Z","first_published":"2026-11-06T01:50:52.626Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/rexasfinance.com/"}],"url":"https://domainspoof.com/live?show=all&q=rexasfinance.com"},{"hostname":"rutngmjzd.hygunesc.fulobtcx.yclnwqvi.ptgsxzo0wi87qbv2.gatewaylearning.ezgateway.net","first_observed":"2026-11-06T01:21:11.336Z","first_published":"2026-11-06T01:50:52.626Z","brands":[],"dns":"resolved","resolved":["15.204.116.29"],"resolved_at":"2026-11-06T01:30:15Z","dns_checked_at":"2026-11-06T02:02:30.000Z","dns_since":"2026-11-06T02:02:30.000Z","findings":[{"id":"fvyv27wsyuz7pzocjfpwh","kind":"reported_domain","summary":"Under ezgateway.net, listed by USOM","first_observed":"2026-11-06T01:21:11.336Z","first_published":"2026-11-06T01:50:52.626Z","source":"usom","source_name":"USOM","under":"ezgateway.net"}],"url":"https://domainspoof.com/live?show=all&q=rutngmjzd.hygunesc.fulobtcx.yclnwqvi.ptgsxzo0wi87qbv2.gatewaylearning.ezgateway.net"},{"hostname":"scallopjei.com","first_observed":"2026-11-06T01:26:18.218Z","first_published":"2026-11-06T01:50:52.626Z","brands":[],"dns":"no_address","resolved":[],"resolved_at":"2026-11-06T01:26:27Z","dns_checked_at":"2026-11-06T10:09:00.000Z","findings":[{"id":"fkue54zxilalorhl3oj5k","kind":"reported_domain","summary":"Listed by NPA 165 (finance and insurance)","first_observed":"2026-11-06T01:26:18.218Z","first_published":"2026-11-06T01:50:52.626Z","source":"npa","source_name":"NPA 165","claim":{"category":"finance and insurance"}}],"url":"https://domainspoof.com/live?show=all&q=scallopjei.com"},{"hostname":"server.dayhub.io","first_observed":"2026-11-06T00:46:55.421Z","first_published":"2026-11-06T01:50:52.626Z","brands":[],"dns":"resolved","resolved":["3.33.249.164","15.197.253.240","52.223.53.203","99.83.185.157"],"resolved_at":"2026-11-06T00:58:35Z","dns_checked_at":"2026-11-06T02:02:30.000Z","dns_since":"2026-11-06T02:02:30.000Z","findings":[{"id":"fg7ff7fp5et625lcrcwxe","kind":"reported_domain","summary":"Under dayhub.io, reported by PhishDestroy","first_observed":"2026-11-06T00:46:55.421Z","first_published":"2026-11-06T01:50:52.626Z","source":"phishdestroy","source_name":"PhishDestroy","under":"dayhub.io","source_url":"https://phishdestroy.io/domain/dayhub.io/"}],"url":"https://domainspoof.com/live?show=all&q=server.dayhub.io"},{"hostname":"serwery.j13.pl","first_observed":"2026-11-06T00:41:48.264Z","first_published":"2026-11-06T01:50:52.626Z","brands":[],"dns":"resolved","resolved":["185.188.119.112"],"resolved_at":"2026-11-06T00:41:59Z","dns_checked_at":"2026-11-06T02:02:30.000Z","dns_since":"2026-11-06T02:02:30.000Z","findings":[{"id":"fjtaisbg36surz2wozfg7","kind":"reported_domain","summary":"Under j13.pl, reported by PhishDestroy","first_observed":"2026-11-06T00:41:48.264Z","first_published":"2026-11-06T01:50:52.626Z","source":"phishdestroy","source_name":"PhishDestroy","under":"j13.pl","source_url":"https://phishdestroy.io/domain/j13.pl/"}],"url":"https://domainspoof.com/live?show=all&q=serwery.j13.pl"},{"hostname":"shib-bounty.net","first_observed":"2026-11-06T01:15:35.334Z","first_published":"2026-11-06T01:50:52.626Z","brands":[],"dns":"resolved","resolved":["104.21.72.169","172.67.187.34"],"resolved_at":"2026-11-06T01:21:18Z","dns_checked_at":"2026-11-06T02:02:30.000Z","dns_since":"2026-11-06T02:02:30.000Z","findings":[{"id":"f6cjegqgp4w77xgj73qb5","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-06T01:15:35.334Z","first_published":"2026-11-06T01:50:52.626Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/shib-bounty.net/"}],"url":"https://domainspoof.com/live?show=all&q=shib-bounty.net"},{"hostname":"skrovendiq.live","first_observed":"2026-11-06T01:36:30.815Z","first_published":"2026-11-06T01:50:52.626Z","brands":[],"dns":"resolved","resolved":["104.21.63.235","172.67.173.24"],"resolved_at":"2026-11-06T01:36:51Z","dns_checked_at":"2026-11-06T02:02:30.000Z","dns_since":"2026-11-06T02:02:30.000Z","findings":[{"id":"fc6jsda54v3h7wuuh5nw7","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-06T01:36:30.815Z","first_published":"2026-11-06T01:50:52.626Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=skrovendiq.live"},{"hostname":"socket.checkout.testourspaces.com","first_observed":"2026-11-06T01:41:37.434Z","first_published":"2026-11-06T01:50:52.626Z","brands":[],"dns":"resolved","resolved":["188.126.85.9"],"resolved_at":"2026-11-06T01:46:22Z","dns_checked_at":"2026-11-06T02:02:30.000Z","dns_since":"2026-11-06T02:02:30.000Z","findings":[{"id":"f357dkertgomwz6suuz42","kind":"reported_domain","summary":"Under testourspaces.com, listed by MetaMask","first_observed":"2026-11-06T01:41:37.434Z","first_published":"2026-11-06T01:50:52.626Z","source":"metamask","source_name":"MetaMask","under":"testourspaces.com"}],"url":"https://domainspoof.com/live?show=all&q=socket.checkout.testourspaces.com"},{"hostname":"starkertragstein.live","first_observed":"2026-11-06T01:36:30.815Z","first_published":"2026-11-06T01:50:52.626Z","brands":[],"dns":"resolved","resolved":["104.21.40.134","172.67.151.245"],"resolved_at":"2026-11-06T01:36:52Z","dns_checked_at":"2026-11-06T02:02:30.000Z","dns_since":"2026-11-06T02:02:30.000Z","findings":[{"id":"f7grdpvrwv7v332plhvmf","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-06T01:36:30.815Z","first_published":"2026-11-06T01:50:52.626Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=starkertragstein.live"},{"hostname":"start-connect-ledgr.pages.dev","first_observed":"2026-11-06T01:00:44.336Z","first_published":"2026-11-06T01:50:52.626Z","brands":[],"dns":"resolved","resolved":["172.66.45.21","172.66.46.235"],"resolved_at":"2026-11-06T01:01:08Z","dns_checked_at":"2026-11-06T02:02:30.000Z","dns_since":"2026-11-06T02:02:30.000Z","findings":[{"id":"fv7a74qy66ejxu233iqe5","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-06T01:00:44.336Z","first_published":"2026-11-06T01:50:52.626Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=start-connect-ledgr.pages.dev"},{"hostname":"sunxpl.com","first_observed":"2026-11-06T01:26:18.218Z","first_published":"2026-11-06T01:50:52.626Z","brands":[],"dns":"resolved","resolved":["103.224.212.141"],"resolved_at":"2026-11-06T01:26:35Z","dns_checked_at":"2026-11-06T02:02:30.000Z","dns_since":"2026-11-06T02:02:30.000Z","findings":[{"id":"f4lusqjlmt5pml3b4coes","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-06T01:26:18.218Z","first_published":"2026-11-06T01:50:52.626Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=sunxpl.com"},{"hostname":"superset.crypto-polis.org","first_observed":"2026-11-06T00:46:55.421Z","first_published":"2026-11-06T01:50:52.626Z","brands":[],"dns":"resolved","resolved":["185.178.208.132","185.178.208.182"],"resolved_at":"2026-11-06T00:58:36Z","dns_checked_at":"2026-11-06T02:02:30.000Z","dns_since":"2026-11-06T02:02:30.000Z","findings":[{"id":"fvn4qk2hwm7go33fsiy6i","kind":"reported_domain","summary":"Under crypto-polis.org, reported by PhishDestroy","first_observed":"2026-11-06T00:46:55.421Z","first_published":"2026-11-06T01:50:52.626Z","source":"phishdestroy","source_name":"PhishDestroy","under":"crypto-polis.org","source_url":"https://phishdestroy.io/domain/crypto-polis.org/"}],"url":"https://domainspoof.com/live?show=all&q=superset.crypto-polis.org"},{"hostname":"teams.meet.live.fileharbor.net","first_observed":"2026-11-06T01:05:49.887Z","first_published":"2026-11-06T01:50:52.626Z","brands":[],"dns":"resolved","resolved":["162.35.38.15"],"resolved_at":"2026-11-06T01:05:58Z","dns_checked_at":"2026-11-06T02:02:30.000Z","dns_since":"2026-11-06T02:02:30.000Z","findings":[{"id":"f3en43zpwqmsozv7gsoow","kind":"reported_domain","summary":"Under fileharbor.net, listed by MetaMask","first_observed":"2026-11-06T01:05:49.887Z","first_published":"2026-11-06T01:50:52.626Z","source":"metamask","source_name":"MetaMask","under":"fileharbor.net"}],"url":"https://domainspoof.com/live?show=all&q=teams.meet.live.fileharbor.net"},{"hostname":"test.homebase.sg-center.net","first_observed":"2026-11-06T01:26:18.218Z","first_published":"2026-11-06T01:50:52.626Z","brands":[],"dns":"resolved","resolved":["148.251.15.135","2a01:4f8:201:7486::aa"],"resolved_at":"2026-11-06T01:26:35Z","dns_checked_at":"2026-11-06T02:02:30.000Z","dns_since":"2026-11-06T02:02:30.000Z","findings":[{"id":"fvlgsfmgpyna5hzlfrik3","kind":"reported_domain","summary":"Under homebase.sg-center.net, reported by PhishDestroy","first_observed":"2026-11-06T01:26:18.218Z","first_published":"2026-11-06T01:50:52.626Z","source":"phishdestroy","source_name":"PhishDestroy","under":"homebase.sg-center.net","source_url":"https://phishdestroy.io/domain/homebase.sg-center.net/"}],"url":"https://domainspoof.com/live?show=all&q=test.homebase.sg-center.net"},{"hostname":"trade-xyz.us","first_observed":"2026-11-06T01:41:37.434Z","first_published":"2026-11-06T01:50:52.626Z","brands":[],"dns":"no_address","resolved":[],"resolved_at":"2026-11-06T01:46:24Z","dns_checked_at":"2026-11-06T10:09:00.000Z","findings":[{"id":"fo5ejwbgn6bvqjkx6ddib","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-06T01:41:37.434Z","first_published":"2026-11-06T01:50:52.626Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=trade-xyz.us"},{"hostname":"trezor-iostare.wasmer.app","first_observed":"2026-11-06T01:05:59.227Z","first_published":"2026-11-06T01:50:52.626Z","brands":[{"id":"trezor","name":"Trezor","url":"https://domainspoof.com/brands/trezor"}],"dns":"resolved","resolved":["5.161.23.223"],"resolved_at":"2026-11-06T02:02:30Z","dns_checked_at":"2026-11-06T02:02:30.000Z","dns_since":"2026-11-06T02:02:30.000Z","findings":[{"id":"fzhvjvp7ev7rrimzb2zh2","kind":"phishing_infrastructure","summary":"Resolved to 5.161.23.223, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T01:05:59.227Z","first_published":"2026-11-06T01:50:52.626Z","address":"5.161.23.223","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/trezor"},{"hostname":"tronscan-cashback.click","first_observed":"2026-11-06T01:31:25.087Z","first_published":"2026-11-06T01:50:52.626Z","brands":[],"dns":"resolved","resolved":["104.21.58.153","172.67.161.58"],"resolved_at":"2026-11-06T01:31:52Z","dns_checked_at":"2026-11-06T02:02:30.000Z","dns_since":"2026-11-06T02:02:30.000Z","findings":[{"id":"f5ewe74tgmprs43t5a3at","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-06T01:31:25.087Z","first_published":"2026-11-06T01:50:52.626Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=tronscan-cashback.click"},{"hostname":"trxpay.biz","first_observed":"2026-11-06T00:36:06.728Z","first_published":"2026-11-06T01:50:52.626Z","brands":[],"dns":"resolved","resolved":["104.21.26.88","172.67.135.203"],"resolved_at":"2026-11-06T00:36:27Z","dns_checked_at":"2026-11-06T02:02:30.000Z","dns_since":"2026-11-06T02:02:30.000Z","findings":[{"id":"f7gl5aicgyprscmor46ur","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-06T00:36:06.728Z","first_published":"2026-11-06T01:50:52.626Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/trxpay.biz/"}],"url":"https://domainspoof.com/live?show=all&q=trxpay.biz"},{"hostname":"turnerventuregroup.com","first_observed":"2026-11-06T00:36:06.728Z","first_published":"2026-11-06T01:50:52.626Z","brands":[],"dns":"resolved","resolved":["194.58.106.194"],"resolved_at":"2026-11-06T00:36:27Z","dns_checked_at":"2026-11-06T02:02:30.000Z","dns_since":"2026-11-06T02:02:30.000Z","findings":[{"id":"f7noq6nr4cbc5msmycolf","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-06T00:36:06.728Z","first_published":"2026-11-06T01:50:52.626Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/turnerventuregroup.com/"}],"url":"https://domainspoof.com/live?show=all&q=turnerventuregroup.com"},{"hostname":"unipeg.foundation","first_observed":"2026-11-06T00:51:30.810Z","first_published":"2026-11-06T01:50:52.626Z","brands":[],"dns":"resolved","resolved":["104.21.67.233","172.67.182.125"],"resolved_at":"2026-11-06T00:51:46Z","dns_checked_at":"2026-11-06T02:02:30.000Z","dns_since":"2026-11-06T02:02:30.000Z","findings":[{"id":"fh4jnjgyql4qywlnwzoqx","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-06T00:51:30.810Z","first_published":"2026-11-06T01:50:52.626Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=unipeg.foundation"},{"hostname":"usdcluxury.org","first_observed":"2026-11-06T01:00:44.336Z","first_published":"2026-11-06T01:50:52.626Z","brands":[],"dns":"resolved","resolved":["104.21.77.240","172.67.213.6"],"resolved_at":"2026-11-06T01:01:08Z","dns_checked_at":"2026-11-06T02:02:30.000Z","dns_since":"2026-11-06T02:02:30.000Z","findings":[{"id":"f5vaj4qyfrp7xyvmnk3j7","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-06T01:00:44.336Z","first_published":"2026-11-06T01:50:52.626Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/usdcluxury.org/"}],"url":"https://domainspoof.com/live?show=all&q=usdcluxury.org"},{"hostname":"v1.cookie-stock.com","first_observed":"2026-11-06T00:56:36.846Z","first_published":"2026-11-06T01:50:52.626Z","brands":[],"dns":"resolved","resolved":["185.178.208.177"],"resolved_at":"2026-11-06T01:07:36Z","dns_checked_at":"2026-11-06T02:02:30.000Z","dns_since":"2026-11-06T02:02:30.000Z","findings":[{"id":"feuydukq3uaarmkbussl5","kind":"reported_domain","summary":"Under cookie-stock.com, reported by PhishDestroy","first_observed":"2026-11-06T00:56:36.846Z","first_published":"2026-11-06T01:50:52.626Z","source":"phishdestroy","source_name":"PhishDestroy","under":"cookie-stock.com","source_url":"https://phishdestroy.io/domain/cookie-stock.com/"}],"url":"https://domainspoof.com/live?show=all&q=v1.cookie-stock.com"},{"hostname":"velorafundsaiv2-pro.pages.dev","first_observed":"2026-11-06T01:26:18.218Z","first_published":"2026-11-06T01:50:52.626Z","brands":[],"dns":"resolved","resolved":["172.66.44.91","172.66.47.165"],"resolved_at":"2026-11-06T01:26:35Z","dns_checked_at":"2026-11-06T02:02:30.000Z","dns_since":"2026-11-06T02:02:30.000Z","findings":[{"id":"fisn33dnhxjao2cdnhhtb","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-06T01:26:18.218Z","first_published":"2026-11-06T01:50:52.626Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=velorafundsaiv2-pro.pages.dev"},{"hostname":"villar.live","first_observed":"2026-11-06T00:41:48.264Z","first_published":"2026-11-06T01:50:52.626Z","brands":[],"dns":"resolved","resolved":["104.21.65.42","172.67.140.125"],"resolved_at":"2026-11-06T00:41:59Z","dns_checked_at":"2026-11-06T02:02:30.000Z","dns_since":"2026-11-06T02:02:30.000Z","findings":[{"id":"fbgkdc6ik3kxro3by4v34","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-06T00:41:48.264Z","first_published":"2026-11-06T01:50:52.626Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=villar.live"},{"hostname":"vinovativa.stage.io-ext.se","first_observed":"2026-11-06T00:46:55.421Z","first_published":"2026-11-06T01:50:52.626Z","brands":[],"dns":"resolved","resolved":["188.208.37.128"],"resolved_at":"2026-11-06T00:47:05Z","dns_checked_at":"2026-11-06T02:02:30.000Z","dns_since":"2026-11-06T02:02:30.000Z","findings":[{"id":"fs4lwn2wdbprtv3uu6jqk","kind":"reported_domain","summary":"Under io-ext.se, listed by MetaMask","first_observed":"2026-11-06T00:46:55.421Z","first_published":"2026-11-06T01:50:52.626Z","source":"metamask","source_name":"MetaMask","under":"io-ext.se"}],"url":"https://domainspoof.com/live?show=all&q=vinovativa.stage.io-ext.se"},{"hostname":"volt-mirror.com","first_observed":"2026-11-06T00:56:36.846Z","first_published":"2026-11-06T01:50:52.626Z","brands":[],"dns":"resolved","resolved":["104.21.28.10","172.67.170.35"],"resolved_at":"2026-11-06T01:07:37Z","dns_checked_at":"2026-11-06T02:02:30.000Z","dns_since":"2026-11-06T02:02:30.000Z","findings":[{"id":"fkh7r6eprmsksovjcq5bl","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-06T00:56:36.846Z","first_published":"2026-11-06T01:50:52.626Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=volt-mirror.com"},{"hostname":"voltaris-shore.com","first_observed":"2026-11-06T01:00:44.336Z","first_published":"2026-11-06T01:50:52.626Z","brands":[],"dns":"resolved","resolved":["104.21.69.138","172.67.208.249"],"resolved_at":"2026-11-06T01:01:09Z","dns_checked_at":"2026-11-06T02:02:30.000Z","dns_since":"2026-11-06T02:02:30.000Z","findings":[{"id":"fxvbdkgcwusp3mbdpqxsk","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-06T01:00:44.336Z","first_published":"2026-11-06T01:50:52.626Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=voltaris-shore.com"},{"hostname":"vote-trolololo.xyz","first_observed":"2026-11-06T01:15:35.334Z","first_published":"2026-11-06T01:50:52.626Z","brands":[],"dns":"resolved","resolved":["104.21.27.29","172.67.140.243"],"resolved_at":"2026-11-06T01:21:21Z","dns_checked_at":"2026-11-06T02:02:30.000Z","dns_since":"2026-11-06T02:02:30.000Z","findings":[{"id":"frz2qnv54lyegn753hasm","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-06T01:15:35.334Z","first_published":"2026-11-06T01:50:52.626Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=vote-trolololo.xyz"},{"hostname":"wandiesshop-deals.store","first_observed":"2026-11-06T01:21:11.336Z","first_published":"2026-11-06T01:50:52.626Z","brands":[],"dns":"no_address","resolved":[],"resolved_at":"2026-11-06T01:21:24Z","dns_checked_at":"2026-11-06T10:09:01.000Z","findings":[{"id":"fglhblw2fvmvh5sf7gndo","kind":"reported_domain","summary":"Listed by NPA 165 (e-commerce)","first_observed":"2026-11-06T01:21:11.336Z","first_published":"2026-11-06T01:50:52.626Z","source":"npa","source_name":"NPA 165","claim":{"category":"e-commerce"}}],"url":"https://domainspoof.com/live?show=all&q=wandiesshop-deals.store"},{"hostname":"webdisk.partyhiredestination.com.au","first_observed":"2026-11-06T01:31:25.087Z","first_published":"2026-11-06T01:50:52.626Z","brands":[],"dns":"resolved","resolved":["104.21.30.22","172.67.150.107"],"resolved_at":"2026-11-06T01:31:53Z","dns_checked_at":"2026-11-06T02:02:30.000Z","dns_since":"2026-11-06T02:02:30.000Z","findings":[{"id":"fmk4h25g6ylicmxmlqfif","kind":"reported_domain","summary":"Under partyhiredestination.com.au, reported by PhishDestroy","first_observed":"2026-11-06T01:31:25.087Z","first_published":"2026-11-06T01:50:52.626Z","source":"phishdestroy","source_name":"PhishDestroy","under":"partyhiredestination.com.au","source_url":"https://phishdestroy.io/domain/partyhiredestination.com.au/"}],"url":"https://domainspoof.com/live?show=all&q=webdisk.partyhiredestination.com.au"},{"hostname":"webdisk.web3assetsecurity.com","first_observed":"2026-11-06T01:26:18.218Z","first_published":"2026-11-06T01:50:52.626Z","brands":[],"dns":"resolved","resolved":["104.21.18.217","172.67.183.100"],"resolved_at":"2026-11-06T01:36:10Z","dns_checked_at":"2026-11-06T02:02:30.000Z","dns_since":"2026-11-06T02:02:30.000Z","findings":[{"id":"fsio4vzmx6nqnyf3xgrgg","kind":"reported_domain","summary":"Under web3assetsecurity.com, reported by PhishDestroy","first_observed":"2026-11-06T01:26:18.218Z","first_published":"2026-11-06T01:50:52.626Z","source":"phishdestroy","source_name":"PhishDestroy","under":"web3assetsecurity.com","source_url":"https://phishdestroy.io/domain/web3assetsecurity.com/"}],"url":"https://domainspoof.com/live?show=all&q=webdisk.web3assetsecurity.com"},{"hostname":"webmail.partyhiredestination.com.au","first_observed":"2026-11-06T01:31:25.087Z","first_published":"2026-11-06T01:50:52.626Z","brands":[],"dns":"resolved","resolved":["104.21.30.22","172.67.150.107"],"resolved_at":"2026-11-06T01:31:53Z","dns_checked_at":"2026-11-06T02:02:30.000Z","dns_since":"2026-11-06T02:02:30.000Z","findings":[{"id":"fqqg2fwrx4f4ahh62betd","kind":"reported_domain","summary":"Under partyhiredestination.com.au, reported by PhishDestroy","first_observed":"2026-11-06T01:31:25.087Z","first_published":"2026-11-06T01:50:52.626Z","source":"phishdestroy","source_name":"PhishDestroy","under":"partyhiredestination.com.au","source_url":"https://phishdestroy.io/domain/partyhiredestination.com.au/"}],"url":"https://domainspoof.com/live?show=all&q=webmail.partyhiredestination.com.au"},{"hostname":"webmail.web3assetsecurity.com","first_observed":"2026-11-06T01:26:18.218Z","first_published":"2026-11-06T01:50:52.626Z","brands":[],"dns":"resolved","resolved":["157.250.205.214"],"resolved_at":"2026-11-06T01:36:11Z","dns_checked_at":"2026-11-06T02:02:30.000Z","dns_since":"2026-11-06T02:02:30.000Z","findings":[{"id":"fo5ut2xpybzemsftij2eb","kind":"reported_domain","summary":"Under web3assetsecurity.com, reported by PhishDestroy","first_observed":"2026-11-06T01:26:18.218Z","first_published":"2026-11-06T01:50:52.626Z","source":"phishdestroy","source_name":"PhishDestroy","under":"web3assetsecurity.com","source_url":"https://phishdestroy.io/domain/web3assetsecurity.com/"}],"url":"https://domainspoof.com/live?show=all&q=webmail.web3assetsecurity.com"},{"hostname":"webullrobinempresa.com","first_observed":"2026-11-06T01:41:37.434Z","first_published":"2026-11-06T01:50:52.626Z","brands":[],"dns":"resolved","resolved":["104.21.54.136","172.67.138.242"],"resolved_at":"2026-11-06T01:46:26Z","dns_checked_at":"2026-11-06T02:02:30.000Z","dns_since":"2026-11-06T02:02:30.000Z","findings":[{"id":"fadbmemnpkfj4x5lrtqb2","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-06T01:41:37.434Z","first_published":"2026-11-06T01:50:52.626Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/webullrobinempresa.com/"}],"url":"https://domainspoof.com/live?show=all&q=webullrobinempresa.com"},{"hostname":"welcome-ledger-a-en.pages.dev","first_observed":"2026-11-06T01:41:37.434Z","first_published":"2026-11-06T01:50:52.626Z","brands":[],"dns":"resolved","resolved":["172.66.44.136","172.66.47.120"],"resolved_at":"2026-11-06T01:46:26Z","dns_checked_at":"2026-11-06T02:02:30.000Z","dns_since":"2026-11-06T02:02:30.000Z","findings":[{"id":"f6h2d5irtszuvvjetr4q6","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-06T01:41:37.434Z","first_published":"2026-11-06T01:50:52.626Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=welcome-ledger-a-en.pages.dev"},{"hostname":"wiselegallimited.com","first_observed":"2026-11-06T01:05:49.887Z","first_published":"2026-11-06T01:50:52.626Z","brands":[],"dns":"resolved","resolved":["103.224.182.250"],"resolved_at":"2026-11-06T01:06:02Z","dns_checked_at":"2026-11-06T02:02:30.000Z","dns_since":"2026-11-06T02:02:30.000Z","findings":[{"id":"fqnkulprdz7jdb43n4lv2","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-06T01:05:49.887Z","first_published":"2026-11-06T01:50:52.626Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/wiselegallimited.com/"}],"url":"https://domainspoof.com/live?show=all&q=wiselegallimited.com"},{"hostname":"wnuzw.asia","first_observed":"2026-11-06T01:15:35.334Z","first_published":"2026-11-06T01:50:52.626Z","brands":[],"dns":"resolved","resolved":["104.21.41.132","172.67.147.95"],"resolved_at":"2026-11-06T01:21:22Z","dns_checked_at":"2026-11-06T02:02:30.000Z","dns_since":"2026-11-06T02:02:30.000Z","findings":[{"id":"fsdlbs4lbmynw23ptdz2j","kind":"reported_domain","summary":"Listed by NPA 165 (information services)","first_observed":"2026-11-06T01:15:35.334Z","first_published":"2026-11-06T01:50:52.626Z","source":"npa","source_name":"NPA 165","claim":{"category":"information services"}}],"url":"https://domainspoof.com/live?show=all&q=wnuzw.asia"},{"hostname":"worldskills.stage.io-ext.se","first_observed":"2026-11-06T00:46:55.421Z","first_published":"2026-11-06T01:50:52.626Z","brands":[],"dns":"resolved","resolved":["188.208.37.128"],"resolved_at":"2026-11-06T00:47:05Z","dns_checked_at":"2026-11-06T02:02:30.000Z","dns_since":"2026-11-06T02:02:30.000Z","findings":[{"id":"fbn22giikww2caqh5m5av","kind":"reported_domain","summary":"Under io-ext.se, listed by MetaMask","first_observed":"2026-11-06T00:46:55.421Z","first_published":"2026-11-06T01:50:52.626Z","source":"metamask","source_name":"MetaMask","under":"io-ext.se"}],"url":"https://domainspoof.com/live?show=all&q=worldskills.stage.io-ext.se"},{"hostname":"www.1nstagram.co.in","first_observed":"2026-11-06T00:51:30.810Z","first_published":"2026-11-06T01:50:52.626Z","brands":[{"id":"instagram","name":"Instagram","url":"https://domainspoof.com/brands/instagram"}],"dns":"resolved","resolved":["64.29.17.1","216.198.79.1"],"resolved_at":"2026-11-06T01:03:02Z","dns_checked_at":"2026-11-06T02:02:30.000Z","dns_since":"2026-11-06T02:02:30.000Z","findings":[{"id":"fgjlk4cpdbzpsqfgk2zp4","kind":"reported_domain","summary":"Under 1nstagram.co.in, reported by PhishDestroy","first_observed":"2026-11-06T00:51:30.810Z","first_published":"2026-11-06T01:50:52.626Z","source":"phishdestroy","source_name":"PhishDestroy","under":"1nstagram.co.in","source_url":"https://phishdestroy.io/domain/1nstagram.co.in/"}],"url":"https://domainspoof.com/brands/instagram"},{"hostname":"www.2897.prohoster.biz","first_observed":"2026-11-06T00:41:48.264Z","first_published":"2026-11-06T01:50:52.626Z","brands":[],"dns":"resolved","resolved":["185.212.130.204"],"resolved_at":"2026-11-06T00:42:07Z","dns_checked_at":"2026-11-06T02:02:30.000Z","dns_since":"2026-11-06T02:02:30.000Z","findings":[{"id":"fst3evdvftqkrrw7bkxgg","kind":"reported_domain","summary":"Under prohoster.biz, reported by PhishDestroy","first_observed":"2026-11-06T00:41:48.264Z","first_published":"2026-11-06T01:50:52.626Z","source":"phishdestroy","source_name":"PhishDestroy","under":"prohoster.biz","source_url":"https://phishdestroy.io/domain/prohoster.biz/"}],"url":"https://domainspoof.com/live?show=all&q=www.2897.prohoster.biz"},{"hostname":"www.allianz.co.pl","first_observed":"2026-11-06T01:07:38.123Z","first_published":"2026-11-06T01:50:52.626Z","brands":[{"id":"allianz","name":"Allianz","url":"https://domainspoof.com/brands/allianz"}],"dns":"resolved","resolved":["185.253.212.22"],"resolved_at":"2026-11-06T02:02:30Z","dns_checked_at":"2026-11-06T02:02:30.000Z","dns_since":"2026-11-06T02:02:30.000Z","findings":[{"id":"fhl45srvckzkiduwgbgk4","kind":"phishing_infrastructure","summary":"Resolved to 185.253.212.22, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T01:07:38.123Z","first_published":"2026-11-06T01:50:52.626Z","address":"185.253.212.22","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/allianz"},{"hostname":"www.aracim360-portal.online","first_observed":"2026-11-06T01:15:35.334Z","first_published":"2026-11-06T01:50:52.626Z","brands":[],"dns":"resolved","resolved":["2.28.45.63"],"resolved_at":"2026-11-06T01:21:22Z","dns_checked_at":"2026-11-06T02:02:30.000Z","dns_since":"2026-11-06T02:02:30.000Z","findings":[{"id":"ftcwkmsf3wc62nlnj4dlq","kind":"reported_domain","summary":"Under aracim360-portal.online, listed by USOM","first_observed":"2026-11-06T01:15:35.334Z","first_published":"2026-11-06T01:50:52.626Z","source":"usom","source_name":"USOM","under":"aracim360-portal.online"}],"url":"https://domainspoof.com/live?show=all&q=www.aracim360-portal.online"},{"hostname":"www.bitrefill.com-cv01-esim-gift.com","first_observed":"2026-11-06T01:07:38.141Z","first_published":"2026-11-06T01:50:52.626Z","brands":[{"id":"bitrefill","name":"Bitrefill","url":"https://domainspoof.com/brands/bitrefill"}],"dns":"resolved","resolved":["62.60.226.39"],"resolved_at":"2026-11-06T02:02:30Z","dns_checked_at":"2026-11-06T02:02:30.000Z","dns_since":"2026-11-06T02:02:30.000Z","findings":[{"id":"favoqzl35ilenafkpdzjj","kind":"spamhaus_drop","summary":"Resolved to 62.60.226.39 on Spamhaus DROP","first_observed":"2026-11-06T01:07:38.141Z","first_published":"2026-11-06T01:50:52.626Z","address":"62.60.226.39","list":"spamhaus_drop","list_name":"Spamhaus DROP"}],"url":"https://domainspoof.com/brands/bitrefill"},{"hostname":"www.bitrgift.com","first_observed":"2026-11-06T00:51:30.810Z","first_published":"2026-11-06T01:50:52.626Z","brands":[],"dns":"resolved","resolved":["62.60.226.163"],"resolved_at":"2026-11-06T00:51:35Z","dns_checked_at":"2026-11-06T02:02:30.000Z","dns_since":"2026-11-06T02:02:30.000Z","findings":[{"id":"frymwye5veu52wfr6oo6c","kind":"reported_domain","summary":"Under bitrgift.com, listed by MetaMask","first_observed":"2026-11-06T00:51:30.810Z","first_published":"2026-11-06T01:50:52.626Z","source":"metamask","source_name":"MetaMask","under":"bitrgift.com"}],"url":"https://domainspoof.com/live?show=all&q=www.bitrgift.com"},{"hostname":"www.bravesto.shop","first_observed":"2026-11-06T00:51:30.810Z","first_published":"2026-11-06T01:50:52.626Z","brands":[],"dns":"resolved","resolved":["104.18.20.248"],"resolved_at":"2026-11-06T01:03:02Z","dns_checked_at":"2026-11-06T02:02:30.000Z","dns_since":"2026-11-06T02:02:30.000Z","findings":[{"id":"f6lnlhtdsp7yd5drmti6c","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-06T00:51:30.810Z","first_published":"2026-11-06T01:50:52.626Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=www.bravesto.shop"},{"hostname":"www.carrefour.secure-sso.eu","first_observed":"2026-11-06T01:36:11.386Z","first_published":"2026-11-06T01:50:52.626Z","brands":[{"id":"carrefour","name":"Carrefour","url":"https://domainspoof.com/brands/carrefour"}],"dns":"resolved","resolved":["188.165.53.185"],"resolved_at":"2026-11-06T02:02:30Z","dns_checked_at":"2026-11-06T02:02:30.000Z","dns_since":"2026-11-06T02:02:30.000Z","findings":[{"id":"f2r5gr7xjokretnyowqt4","kind":"phishing_infrastructure","summary":"Resolved to 188.165.53.185, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T01:36:11.386Z","first_published":"2026-11-06T01:50:52.626Z","address":"188.165.53.185","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/carrefour"},{"hostname":"www.cbdcintl.com","first_observed":"2026-11-06T00:46:55.421Z","first_published":"2026-11-06T01:50:52.626Z","brands":[],"dns":"resolved","resolved":["177.3.41.46"],"resolved_at":"2026-11-06T00:47:05Z","dns_checked_at":"2026-11-06T02:02:30.000Z","dns_since":"2026-11-06T02:02:30.000Z","findings":[{"id":"ff2nlu5hbfxe5qww4j2om","kind":"reported_domain","summary":"Under cbdcintl.com, reported by PhishDestroy","first_observed":"2026-11-06T00:46:55.421Z","first_published":"2026-11-06T01:50:52.626Z","source":"phishdestroy","source_name":"PhishDestroy","under":"cbdcintl.com","source_url":"https://phishdestroy.io/domain/cbdcintl.com/"}],"url":"https://domainspoof.com/live?show=all&q=www.cbdcintl.com"},{"hostname":"www.financial.cresterbridge.com","first_observed":"2026-11-06T01:00:44.336Z","first_published":"2026-11-06T01:50:52.626Z","brands":[],"dns":"resolved","resolved":["23.153.104.17"],"resolved_at":"2026-11-06T01:01:09Z","dns_checked_at":"2026-11-06T02:02:30.000Z","dns_since":"2026-11-06T02:02:30.000Z","findings":[{"id":"fdz2awbbeeqhypcf4fvko","kind":"reported_domain","summary":"Under cresterbridge.com, reported by PhishDestroy","first_observed":"2026-11-06T01:00:44.336Z","first_published":"2026-11-06T01:50:52.626Z","source":"phishdestroy","source_name":"PhishDestroy","under":"cresterbridge.com","source_url":"https://phishdestroy.io/domain/cresterbridge.com/"}],"url":"https://domainspoof.com/live?show=all&q=www.financial.cresterbridge.com"},{"hostname":"www.funblue.xyz","first_observed":"2026-11-06T01:05:49.887Z","first_published":"2026-11-06T01:50:52.626Z","brands":[],"dns":"resolved","resolved":["104.21.10.204","172.67.131.185"],"resolved_at":"2026-11-06T01:06:02Z","dns_checked_at":"2026-11-06T02:02:30.000Z","dns_since":"2026-11-06T02:02:30.000Z","findings":[{"id":"fbclud6d6avqhgkg2i6my","kind":"reported_domain","summary":"Under funblue.xyz, reported by PhishDestroy","first_observed":"2026-11-06T01:05:49.887Z","first_published":"2026-11-06T01:50:52.626Z","source":"phishdestroy","source_name":"PhishDestroy","under":"funblue.xyz","source_url":"https://phishdestroy.io/domain/funblue.xyz/"}],"url":"https://domainspoof.com/live?show=all&q=www.funblue.xyz"},{"hostname":"www.grituals.shop","first_observed":"2026-11-06T01:26:18.218Z","first_published":"2026-11-06T01:50:52.626Z","brands":[],"dns":"resolved","resolved":["155.102.167.193","155.102.167.194","155.102.167.195","155.102.167.196","155.102.167.197","155.102.167.198","155.102.167.199","155.102.167.200"],"resolved_at":"2026-11-06T01:36:11Z","dns_checked_at":"2026-11-06T02:02:30.000Z","dns_since":"2026-11-06T02:02:30.000Z","findings":[{"id":"fwaq7nxjb7r36t6575m7j","kind":"reported_domain","summary":"Under grituals.shop, listed by CERT Polska","first_observed":"2026-11-06T01:26:18.218Z","first_published":"2026-11-06T01:50:52.626Z","source":"cert_polska","source_name":"CERT Polska","under":"grituals.shop"}],"url":"https://domainspoof.com/live?show=all&q=www.grituals.shop"},{"hostname":"www.mcc-safety.com","first_observed":"2026-11-06T01:41:37.434Z","first_published":"2026-11-06T01:50:52.626Z","brands":[],"dns":"resolved","resolved":["216.150.1.193","216.150.16.193"],"resolved_at":"2026-11-06T01:46:27Z","dns_checked_at":"2026-11-06T02:02:30.000Z","dns_since":"2026-11-06T02:02:30.000Z","findings":[{"id":"fite5rbgx23pr2bm7ji3x","kind":"reported_domain","summary":"Under mcc-safety.com, listed by USOM","first_observed":"2026-11-06T01:41:37.434Z","first_published":"2026-11-06T01:50:52.626Z","source":"usom","source_name":"USOM","under":"mcc-safety.com"}],"url":"https://domainspoof.com/live?show=all&q=www.mcc-safety.com"},{"hostname":"www.medlaexpert.pl","first_observed":"2026-11-06T00:36:27.989Z","first_published":"2026-11-06T01:50:52.626Z","brands":[{"id":"media-expert","name":"Media Expert","url":"https://domainspoof.com/brands/media-expert"}],"dns":"resolved","resolved":["185.253.212.22"],"resolved_at":"2026-11-06T02:02:30Z","dns_checked_at":"2026-11-06T02:02:30.000Z","dns_since":"2026-11-06T02:02:30.000Z","findings":[{"id":"fu3ksn7zuxn3hkyq2s6fq","kind":"phishing_infrastructure","summary":"Resolved to 185.253.212.22, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:36:27.989Z","first_published":"2026-11-06T01:50:52.626Z","address":"185.253.212.22","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/media-expert"},{"hostname":"www.nuevaetapafinanciera.com","first_observed":"2026-11-06T00:46:55.421Z","first_published":"2026-11-06T01:50:52.626Z","brands":[],"dns":"resolved","resolved":["185.7.214.147"],"resolved_at":"2026-11-06T00:47:05Z","dns_checked_at":"2026-11-06T02:02:30.000Z","dns_since":"2026-11-06T02:02:30.000Z","findings":[{"id":"folejj74azahklstq57cd","kind":"reported_domain","summary":"Under nuevaetapafinanciera.com, listed by CERT Polska","first_observed":"2026-11-06T00:46:55.421Z","first_published":"2026-11-06T01:50:52.626Z","source":"cert_polska","source_name":"CERT Polska","under":"nuevaetapafinanciera.com"}],"url":"https://domainspoof.com/live?show=all&q=www.nuevaetapafinanciera.com"},{"hostname":"www.osmiraventurance.net","first_observed":"2026-11-06T00:46:55.421Z","first_published":"2026-11-06T01:50:52.626Z","brands":[],"dns":"resolved","resolved":["185.7.214.147"],"resolved_at":"2026-11-06T00:47:05Z","dns_checked_at":"2026-11-06T02:02:30.000Z","dns_since":"2026-11-06T02:02:30.000Z","findings":[{"id":"ffmvomztfvgkzxnwcr4ud","kind":"reported_domain","summary":"Under osmiraventurance.net, listed by CERT Polska","first_observed":"2026-11-06T00:46:55.421Z","first_published":"2026-11-06T01:50:52.626Z","source":"cert_polska","source_name":"CERT Polska","under":"osmiraventurance.net"}],"url":"https://domainspoof.com/live?show=all&q=www.osmiraventurance.net"},{"hostname":"www.partyhiredestination.com.au","first_observed":"2026-11-06T01:31:25.087Z","first_published":"2026-11-06T01:50:52.626Z","brands":[],"dns":"resolved","resolved":["104.21.30.22","172.67.150.107"],"resolved_at":"2026-11-06T01:31:53Z","dns_checked_at":"2026-11-06T02:02:30.000Z","dns_since":"2026-11-06T02:02:30.000Z","findings":[{"id":"f4zhy5hebujcel4xduvhm","kind":"reported_domain","summary":"Under partyhiredestination.com.au, reported by PhishDestroy","first_observed":"2026-11-06T01:31:25.087Z","first_published":"2026-11-06T01:50:52.626Z","source":"phishdestroy","source_name":"PhishDestroy","under":"partyhiredestination.com.au","source_url":"https://phishdestroy.io/domain/partyhiredestination.com.au/"}],"url":"https://domainspoof.com/live?show=all&q=www.partyhiredestination.com.au"},{"hostname":"www.patrimoniodiario.com","first_observed":"2026-11-06T00:46:55.421Z","first_published":"2026-11-06T01:50:52.626Z","brands":[],"dns":"resolved","resolved":["185.7.214.147"],"resolved_at":"2026-11-06T00:47:05Z","dns_checked_at":"2026-11-06T02:02:30.000Z","dns_since":"2026-11-06T02:02:30.000Z","findings":[{"id":"fieoojpblgjolwt6xkkwi","kind":"reported_domain","summary":"Under patrimoniodiario.com, listed by CERT Polska","first_observed":"2026-11-06T00:46:55.421Z","first_published":"2026-11-06T01:50:52.626Z","source":"cert_polska","source_name":"CERT Polska","under":"patrimoniodiario.com"}],"url":"https://domainspoof.com/live?show=all&q=www.patrimoniodiario.com"},{"hostname":"www.patrivelle.net","first_observed":"2026-11-06T00:46:55.421Z","first_published":"2026-11-06T01:50:52.626Z","brands":[],"dns":"resolved","resolved":["185.7.214.147"],"resolved_at":"2026-11-06T00:47:05Z","dns_checked_at":"2026-11-06T02:02:30.000Z","dns_since":"2026-11-06T02:02:30.000Z","findings":[{"id":"fplbv6tp6d7ror5knzaha","kind":"reported_domain","summary":"Under patrivelle.net, listed by CERT Polska","first_observed":"2026-11-06T00:46:55.421Z","first_published":"2026-11-06T01:50:52.626Z","source":"cert_polska","source_name":"CERT Polska","under":"patrivelle.net"}],"url":"https://domainspoof.com/live?show=all&q=www.patrivelle.net"},{"hostname":"www.pay-bitrefill.com-cv01-esim-gift.com","first_observed":"2026-11-06T01:07:38.311Z","first_published":"2026-11-06T01:50:52.626Z","brands":[{"id":"bitrefill","name":"Bitrefill","url":"https://domainspoof.com/brands/bitrefill"}],"dns":"resolved","resolved":["62.60.226.39"],"resolved_at":"2026-11-06T02:02:30Z","dns_checked_at":"2026-11-06T02:02:30.000Z","dns_since":"2026-11-06T02:02:30.000Z","findings":[{"id":"frsayu2upzsd5pwl6dl7x","kind":"spamhaus_drop","summary":"Resolved to 62.60.226.39 on Spamhaus DROP","first_observed":"2026-11-06T01:07:38.311Z","first_published":"2026-11-06T01:50:52.626Z","address":"62.60.226.39","list":"spamhaus_drop","list_name":"Spamhaus DROP"}],"url":"https://domainspoof.com/brands/bitrefill"},{"hostname":"www.pjlskabitradex.net","first_observed":"2026-11-06T00:46:55.421Z","first_published":"2026-11-06T01:50:52.626Z","brands":[],"dns":"resolved","resolved":["185.7.214.147"],"resolved_at":"2026-11-06T00:47:05Z","dns_checked_at":"2026-11-06T02:02:30.000Z","dns_since":"2026-11-06T02:02:30.000Z","findings":[{"id":"f5hoykvqy7cswsbbjl3il","kind":"reported_domain","summary":"Under pjlskabitradex.net, listed by CERT Polska","first_observed":"2026-11-06T00:46:55.421Z","first_published":"2026-11-06T01:50:52.626Z","source":"cert_polska","source_name":"CERT Polska","under":"pjlskabitradex.net"}],"url":"https://domainspoof.com/live?show=all&q=www.pjlskabitradex.net"},{"hostname":"www.polanverix.net","first_observed":"2026-11-06T00:46:55.421Z","first_published":"2026-11-06T01:50:52.626Z","brands":[],"dns":"resolved","resolved":["185.7.214.147"],"resolved_at":"2026-11-06T00:47:05Z","dns_checked_at":"2026-11-06T02:02:30.000Z","dns_since":"2026-11-06T02:02:30.000Z","findings":[{"id":"fb56yhvobofc7gxjlox75","kind":"reported_domain","summary":"Under polanverix.net, listed by CERT Polska","first_observed":"2026-11-06T00:46:55.421Z","first_published":"2026-11-06T01:50:52.626Z","source":"cert_polska","source_name":"CERT Polska","under":"polanverix.net"}],"url":"https://domainspoof.com/live?show=all&q=www.polanverix.net"},{"hostname":"www.poundledgerix.net","first_observed":"2026-11-06T00:46:55.421Z","first_published":"2026-11-06T01:50:52.626Z","brands":[],"dns":"resolved","resolved":["185.7.214.147"],"resolved_at":"2026-11-06T00:47:05Z","dns_checked_at":"2026-11-06T02:02:30.000Z","dns_since":"2026-11-06T02:02:30.000Z","findings":[{"id":"ffmih4xphwqwp23oocind","kind":"reported_domain","summary":"Under poundledgerix.net, listed by CERT Polska","first_observed":"2026-11-06T00:46:55.421Z","first_published":"2026-11-06T01:50:52.626Z","source":"cert_polska","source_name":"CERT Polska","under":"poundledgerix.net"}],"url":"https://domainspoof.com/live?show=all&q=www.poundledgerix.net"},{"hostname":"www.prexido.net","first_observed":"2026-11-06T00:51:30.810Z","first_published":"2026-11-06T01:50:52.626Z","brands":[],"dns":"resolved","resolved":["185.7.214.147"],"resolved_at":"2026-11-06T01:03:03Z","dns_checked_at":"2026-11-06T02:02:30.000Z","dns_since":"2026-11-06T02:02:30.000Z","findings":[{"id":"fhwefol5ycvsr2nouddgz","kind":"reported_domain","summary":"Under prexido.net, listed by CERT Polska","first_observed":"2026-11-06T00:51:30.810Z","first_published":"2026-11-06T01:50:52.626Z","source":"cert_polska","source_name":"CERT Polska","under":"prexido.net"}],"url":"https://domainspoof.com/live?show=all&q=www.prexido.net"},{"hostname":"www.prinosalor.net","first_observed":"2026-11-06T00:51:30.810Z","first_published":"2026-11-06T01:50:52.626Z","brands":[],"dns":"resolved","resolved":["185.7.214.147"],"resolved_at":"2026-11-06T01:03:03Z","dns_checked_at":"2026-11-06T02:02:30.000Z","dns_since":"2026-11-06T02:02:30.000Z","findings":[{"id":"feyzy6fpjlw5ioecxjlwb","kind":"reported_domain","summary":"Under prinosalor.net, listed by CERT Polska","first_observed":"2026-11-06T00:51:30.810Z","first_published":"2026-11-06T01:50:52.626Z","source":"cert_polska","source_name":"CERT Polska","under":"prinosalor.net"}],"url":"https://domainspoof.com/live?show=all&q=www.prinosalor.net"},{"hostname":"www.profitivafundrespro.net","first_observed":"2026-11-06T00:51:30.810Z","first_published":"2026-11-06T01:50:52.626Z","brands":[],"dns":"resolved","resolved":["185.7.214.147"],"resolved_at":"2026-11-06T01:03:03Z","dns_checked_at":"2026-11-06T02:02:30.000Z","dns_since":"2026-11-06T02:02:30.000Z","findings":[{"id":"fv5qltrokfjk6y4bln42n","kind":"reported_domain","summary":"Under profitivafundrespro.net, listed by CERT Polska","first_observed":"2026-11-06T00:51:30.810Z","first_published":"2026-11-06T01:50:52.626Z","source":"cert_polska","source_name":"CERT Polska","under":"profitivafundrespro.net"}],"url":"https://domainspoof.com/live?show=all&q=www.profitivafundrespro.net"},{"hostname":"www.pulsafinex.org","first_observed":"2026-11-06T00:51:30.810Z","first_published":"2026-11-06T01:50:52.626Z","brands":[],"dns":"resolved","resolved":["185.7.214.147"],"resolved_at":"2026-11-06T01:03:03Z","dns_checked_at":"2026-11-06T02:02:30.000Z","dns_since":"2026-11-06T02:02:30.000Z","findings":[{"id":"f24p7frhkxs4pdiqgjfra","kind":"reported_domain","summary":"Under pulsafinex.org, listed by CERT Polska","first_observed":"2026-11-06T00:51:30.810Z","first_published":"2026-11-06T01:50:52.626Z","source":"cert_polska","source_name":"CERT Polska","under":"pulsafinex.org"}],"url":"https://domainspoof.com/live?show=all&q=www.pulsafinex.org"},{"hostname":"www.quanaliz.net","first_observed":"2026-11-06T00:51:30.810Z","first_published":"2026-11-06T01:50:52.626Z","brands":[],"dns":"resolved","resolved":["185.7.214.147"],"resolved_at":"2026-11-06T01:03:03Z","dns_checked_at":"2026-11-06T02:02:30.000Z","dns_since":"2026-11-06T02:02:30.000Z","findings":[{"id":"fyotyt5xycdns3ogk5on5","kind":"reported_domain","summary":"Under quanaliz.net, listed by CERT Polska","first_observed":"2026-11-06T00:51:30.810Z","first_published":"2026-11-06T01:50:52.626Z","source":"cert_polska","source_name":"CERT Polska","under":"quanaliz.net"}],"url":"https://domainspoof.com/live?show=all&q=www.quanaliz.net"},{"hostname":"www.quetzalprime.com","first_observed":"2026-11-06T00:51:30.810Z","first_published":"2026-11-06T01:50:52.626Z","brands":[],"dns":"resolved","resolved":["185.7.214.147"],"resolved_at":"2026-11-06T01:03:03Z","dns_checked_at":"2026-11-06T02:02:30.000Z","dns_since":"2026-11-06T02:02:30.000Z","findings":[{"id":"fn7vm3ngjpzoi2iuf24t6","kind":"reported_domain","summary":"Under quetzalprime.com, listed by CERT Polska","first_observed":"2026-11-06T00:51:30.810Z","first_published":"2026-11-06T01:50:52.626Z","source":"cert_polska","source_name":"CERT Polska","under":"quetzalprime.com"}],"url":"https://domainspoof.com/live?show=all&q=www.quetzalprime.com"},{"hostname":"www.ritraazerb.net","first_observed":"2026-11-06T00:51:30.810Z","first_published":"2026-11-06T01:50:52.626Z","brands":[],"dns":"resolved","resolved":["185.7.214.147"],"resolved_at":"2026-11-06T01:03:03Z","dns_checked_at":"2026-11-06T02:02:30.000Z","dns_since":"2026-11-06T02:02:30.000Z","findings":[{"id":"f5zq6gu5ds5djosuc642k","kind":"reported_domain","summary":"Under ritraazerb.net, listed by CERT Polska","first_observed":"2026-11-06T00:51:30.810Z","first_published":"2026-11-06T01:50:52.626Z","source":"cert_polska","source_name":"CERT Polska","under":"ritraazerb.net"}],"url":"https://domainspoof.com/live?show=all&q=www.ritraazerb.net"},{"hostname":"www.sendainverectopro.net","first_observed":"2026-11-06T00:51:30.810Z","first_published":"2026-11-06T01:50:52.626Z","brands":[],"dns":"resolved","resolved":["185.7.214.147"],"resolved_at":"2026-11-06T01:03:03Z","dns_checked_at":"2026-11-06T02:02:30.000Z","dns_since":"2026-11-06T02:02:30.000Z","findings":[{"id":"f7kdi42ys2tnemloxl7qm","kind":"reported_domain","summary":"Under sendainverectopro.net, listed by CERT Polska","first_observed":"2026-11-06T00:51:30.810Z","first_published":"2026-11-06T01:50:52.626Z","source":"cert_polska","source_name":"CERT Polska","under":"sendainverectopro.net"}],"url":"https://domainspoof.com/live?show=all&q=www.sendainverectopro.net"},{"hostname":"www.serwery.j13.pl","first_observed":"2026-11-06T00:41:48.264Z","first_published":"2026-11-06T01:50:52.626Z","brands":[],"dns":"resolved","resolved":["185.188.119.112"],"resolved_at":"2026-11-06T00:42:07Z","dns_checked_at":"2026-11-06T02:02:30.000Z","dns_since":"2026-11-06T02:02:30.000Z","findings":[{"id":"fgpjltavs3nfr7qb66jjc","kind":"reported_domain","summary":"Under j13.pl, reported by PhishDestroy","first_observed":"2026-11-06T00:41:48.264Z","first_published":"2026-11-06T01:50:52.626Z","source":"phishdestroy","source_name":"PhishDestroy","under":"j13.pl","source_url":"https://phishdestroy.io/domain/j13.pl/"}],"url":"https://domainspoof.com/live?show=all&q=www.serwery.j13.pl"},{"hostname":"www.shoplazzaai.net","first_observed":"2026-11-06T00:51:30.810Z","first_published":"2026-11-06T01:50:52.626Z","brands":[],"dns":"resolved","resolved":["185.7.214.147"],"resolved_at":"2026-11-06T01:03:03Z","dns_checked_at":"2026-11-06T02:02:30.000Z","dns_since":"2026-11-06T02:02:30.000Z","findings":[{"id":"fn5z4m3wmk2flcygcttdd","kind":"reported_domain","summary":"Under shoplazzaai.net, listed by CERT Polska","first_observed":"2026-11-06T00:51:30.810Z","first_published":"2026-11-06T01:50:52.626Z","source":"cert_polska","source_name":"CERT Polska","under":"shoplazzaai.net"}],"url":"https://domainspoof.com/live?show=all&q=www.shoplazzaai.net"},{"hostname":"www.sovereign-ai-es.com","first_observed":"2026-11-06T00:51:30.810Z","first_published":"2026-11-06T01:50:52.626Z","brands":[],"dns":"resolved","resolved":["185.7.214.147"],"resolved_at":"2026-11-06T01:03:03Z","dns_checked_at":"2026-11-06T02:02:30.000Z","dns_since":"2026-11-06T02:02:30.000Z","findings":[{"id":"fqoknnlhl2qt56jkfqwrp","kind":"reported_domain","summary":"Under sovereign-ai-es.com, listed by CERT Polska","first_observed":"2026-11-06T00:51:30.810Z","first_published":"2026-11-06T01:50:52.626Z","source":"cert_polska","source_name":"CERT Polska","under":"sovereign-ai-es.com"}],"url":"https://domainspoof.com/live?show=all&q=www.sovereign-ai-es.com"},{"hostname":"www.syntragpt.org","first_observed":"2026-11-06T00:51:30.810Z","first_published":"2026-11-06T01:50:52.626Z","brands":[],"dns":"resolved","resolved":["185.7.214.147"],"resolved_at":"2026-11-06T01:03:03Z","dns_checked_at":"2026-11-06T02:02:30.000Z","dns_since":"2026-11-06T02:02:30.000Z","findings":[{"id":"fdmj2uaz3xbgododajcru","kind":"reported_domain","summary":"Under syntragpt.org, listed by CERT Polska","first_observed":"2026-11-06T00:51:30.810Z","first_published":"2026-11-06T01:50:52.626Z","source":"cert_polska","source_name":"CERT Polska","under":"syntragpt.org"}],"url":"https://domainspoof.com/live?show=all&q=www.syntragpt.org"},{"hostname":"www.tangem-login.com","first_observed":"2026-11-06T01:10:57.695Z","first_published":"2026-11-06T01:50:52.626Z","brands":[],"dns":"resolved","resolved":["104.21.39.154","172.67.146.110"],"resolved_at":"2026-11-06T01:16:38Z","dns_checked_at":"2026-11-06T02:02:30.000Z","dns_since":"2026-11-06T02:02:30.000Z","findings":[{"id":"f5cuuen7zvwgcjomzyzgg","kind":"reported_domain","summary":"Under tangem-login.com, listed by MetaMask","first_observed":"2026-11-06T01:10:57.695Z","first_published":"2026-11-06T01:50:52.626Z","source":"metamask","source_name":"MetaMask","under":"tangem-login.com"}],"url":"https://domainspoof.com/live?show=all&q=www.tangem-login.com"},{"hostname":"www.telnetx-ai.com","first_observed":"2026-11-06T00:51:30.810Z","first_published":"2026-11-06T01:50:52.626Z","brands":[],"dns":"resolved","resolved":["185.7.214.147"],"resolved_at":"2026-11-06T01:03:03Z","dns_checked_at":"2026-11-06T02:02:30.000Z","dns_since":"2026-11-06T02:02:30.000Z","findings":[{"id":"fc75d4rkrzhfemx25q5he","kind":"reported_domain","summary":"Under telnetx-ai.com, listed by CERT Polska","first_observed":"2026-11-06T00:51:30.810Z","first_published":"2026-11-06T01:50:52.626Z","source":"cert_polska","source_name":"CERT Polska","under":"telnetx-ai.com"}],"url":"https://domainspoof.com/live?show=all&q=www.telnetx-ai.com"},{"hostname":"www.tinta-digital.com","first_observed":"2026-11-06T00:51:30.810Z","first_published":"2026-11-06T01:50:52.626Z","brands":[],"dns":"resolved","resolved":["185.7.214.147"],"resolved_at":"2026-11-06T01:03:03Z","dns_checked_at":"2026-11-06T02:02:30.000Z","dns_since":"2026-11-06T02:02:30.000Z","findings":[{"id":"fbwmz6izmqvgonkzz7jxi","kind":"reported_domain","summary":"Under tinta-digital.com, listed by CERT Polska","first_observed":"2026-11-06T00:51:30.810Z","first_published":"2026-11-06T01:50:52.626Z","source":"cert_polska","source_name":"CERT Polska","under":"tinta-digital.com"}],"url":"https://domainspoof.com/live?show=all&q=www.tinta-digital.com"},{"hostname":"www.tokenuit.net","first_observed":"2026-11-06T00:51:30.810Z","first_published":"2026-11-06T01:50:52.626Z","brands":[],"dns":"resolved","resolved":["185.7.214.147"],"resolved_at":"2026-11-06T01:03:03Z","dns_checked_at":"2026-11-06T02:02:30.000Z","dns_since":"2026-11-06T02:02:30.000Z","findings":[{"id":"fcvztla3447u45xvi56yx","kind":"reported_domain","summary":"Under tokenuit.net, listed by CERT Polska","first_observed":"2026-11-06T00:51:30.810Z","first_published":"2026-11-06T01:50:52.626Z","source":"cert_polska","source_name":"CERT Polska","under":"tokenuit.net"}],"url":"https://domainspoof.com/live?show=all&q=www.tokenuit.net"},{"hostname":"www.tororossocapital.com","first_observed":"2026-11-06T00:51:30.810Z","first_published":"2026-11-06T01:50:52.626Z","brands":[],"dns":"resolved","resolved":["185.7.214.147"],"resolved_at":"2026-11-06T01:03:03Z","dns_checked_at":"2026-11-06T02:02:30.000Z","dns_since":"2026-11-06T02:02:30.000Z","findings":[{"id":"f3bxugpeeld5if5db43hb","kind":"reported_domain","summary":"Under tororossocapital.com, listed by CERT Polska","first_observed":"2026-11-06T00:51:30.810Z","first_published":"2026-11-06T01:50:52.626Z","source":"cert_polska","source_name":"CERT Polska","under":"tororossocapital.com"}],"url":"https://domainspoof.com/live?show=all&q=www.tororossocapital.com"},{"hostname":"www.tradinggruppe.com","first_observed":"2026-11-06T00:51:30.810Z","first_published":"2026-11-06T01:50:52.626Z","brands":[],"dns":"resolved","resolved":["185.7.214.147"],"resolved_at":"2026-11-06T01:03:03Z","dns_checked_at":"2026-11-06T02:02:30.000Z","dns_since":"2026-11-06T02:02:30.000Z","findings":[{"id":"fkfbeb5ukt4ousarobl7b","kind":"reported_domain","summary":"Under tradinggruppe.com, listed by CERT Polska","first_observed":"2026-11-06T00:51:30.810Z","first_published":"2026-11-06T01:50:52.626Z","source":"cert_polska","source_name":"CERT Polska","under":"tradinggruppe.com"}],"url":"https://domainspoof.com/live?show=all&q=www.tradinggruppe.com"},{"hostname":"www.tsystems-ai.com","first_observed":"2026-11-06T00:51:30.810Z","first_published":"2026-11-06T01:50:52.626Z","brands":[],"dns":"resolved","resolved":["185.7.214.147"],"resolved_at":"2026-11-06T01:03:03Z","dns_checked_at":"2026-11-06T02:02:30.000Z","dns_since":"2026-11-06T02:02:30.000Z","findings":[{"id":"f4jfmiqpwejutbcairbrv","kind":"reported_domain","summary":"Under tsystems-ai.com, listed by CERT Polska","first_observed":"2026-11-06T00:51:30.810Z","first_published":"2026-11-06T01:50:52.626Z","source":"cert_polska","source_name":"CERT Polska","under":"tsystems-ai.com"}],"url":"https://domainspoof.com/live?show=all&q=www.tsystems-ai.com"},{"hostname":"www.turnerventuregroup.com","first_observed":"2026-11-06T00:36:06.728Z","first_published":"2026-11-06T01:50:52.626Z","brands":[],"dns":"resolved","resolved":["194.58.106.194"],"resolved_at":"2026-11-06T00:36:28Z","dns_checked_at":"2026-11-06T02:02:30.000Z","dns_since":"2026-11-06T02:02:30.000Z","findings":[{"id":"f6zkoj336z5rrox2qxd32","kind":"reported_domain","summary":"Under turnerventuregroup.com, reported by PhishDestroy","first_observed":"2026-11-06T00:36:06.728Z","first_published":"2026-11-06T01:50:52.626Z","source":"phishdestroy","source_name":"PhishDestroy","under":"turnerventuregroup.com","source_url":"https://phishdestroy.io/domain/turnerventuregroup.com/"}],"url":"https://domainspoof.com/live?show=all&q=www.turnerventuregroup.com"},{"hostname":"www.uldevrask-ai.com","first_observed":"2026-11-06T00:51:30.810Z","first_published":"2026-11-06T01:50:52.626Z","brands":[],"dns":"resolved","resolved":["185.7.214.147"],"resolved_at":"2026-11-06T01:03:03Z","dns_checked_at":"2026-11-06T02:02:30.000Z","dns_since":"2026-11-06T02:02:30.000Z","findings":[{"id":"fukkz4fpycrv3pgcqvhd5","kind":"reported_domain","summary":"Under uldevrask-ai.com, listed by CERT Polska","first_observed":"2026-11-06T00:51:30.810Z","first_published":"2026-11-06T01:50:52.626Z","source":"cert_polska","source_name":"CERT Polska","under":"uldevrask-ai.com"}],"url":"https://domainspoof.com/live?show=all&q=www.uldevrask-ai.com"},{"hostname":"www.veltrixnexaropro.com","first_observed":"2026-11-06T00:51:30.810Z","first_published":"2026-11-06T01:50:52.626Z","brands":[],"dns":"resolved","resolved":["185.7.214.147"],"resolved_at":"2026-11-06T01:03:03Z","dns_checked_at":"2026-11-06T02:02:30.000Z","dns_since":"2026-11-06T02:02:30.000Z","findings":[{"id":"fzolvyr63dl5mkn3nsi24","kind":"reported_domain","summary":"Under veltrixnexaropro.com, listed by CERT Polska","first_observed":"2026-11-06T00:51:30.810Z","first_published":"2026-11-06T01:50:52.626Z","source":"cert_polska","source_name":"CERT Polska","under":"veltrixnexaropro.com"}],"url":"https://domainspoof.com/live?show=all&q=www.veltrixnexaropro.com"},{"hostname":"www.vysokkapitov.org","first_observed":"2026-11-06T00:51:30.810Z","first_published":"2026-11-06T01:50:52.626Z","brands":[],"dns":"resolved","resolved":["185.7.214.147"],"resolved_at":"2026-11-06T01:03:03Z","dns_checked_at":"2026-11-06T02:02:30.000Z","dns_since":"2026-11-06T02:02:30.000Z","findings":[{"id":"f35ssl3ul2kaju2pmqnmc","kind":"reported_domain","summary":"Under vysokkapitov.org, listed by CERT Polska","first_observed":"2026-11-06T00:51:30.810Z","first_published":"2026-11-06T01:50:52.626Z","source":"cert_polska","source_name":"CERT Polska","under":"vysokkapitov.org"}],"url":"https://domainspoof.com/live?show=all&q=www.vysokkapitov.org"},{"hostname":"www.web3assetsecurity.com","first_observed":"2026-11-06T01:26:18.218Z","first_published":"2026-11-06T01:50:52.626Z","brands":[],"dns":"resolved","resolved":["104.21.18.217","172.67.183.100"],"resolved_at":"2026-11-06T01:36:11Z","dns_checked_at":"2026-11-06T02:02:30.000Z","dns_since":"2026-11-06T02:02:30.000Z","findings":[{"id":"fgigcoxw52jvupb2trnvi","kind":"reported_domain","summary":"Under web3assetsecurity.com, reported by PhishDestroy","first_observed":"2026-11-06T01:26:18.218Z","first_published":"2026-11-06T01:50:52.626Z","source":"phishdestroy","source_name":"PhishDestroy","under":"web3assetsecurity.com","source_url":"https://phishdestroy.io/domain/web3assetsecurity.com/"}],"url":"https://domainspoof.com/live?show=all&q=www.web3assetsecurity.com"},{"hostname":"www.welkzorki.net","first_observed":"2026-11-06T00:56:36.846Z","first_published":"2026-11-06T01:50:52.626Z","brands":[],"dns":"resolved","resolved":["185.7.214.147"],"resolved_at":"2026-11-06T01:07:38Z","dns_checked_at":"2026-11-06T02:02:30.000Z","dns_since":"2026-11-06T02:02:30.000Z","findings":[{"id":"f3eydkjsanqeggqnxcuxv","kind":"reported_domain","summary":"Under welkzorki.net, listed by CERT Polska","first_observed":"2026-11-06T00:56:36.846Z","first_published":"2026-11-06T01:50:52.626Z","source":"cert_polska","source_name":"CERT Polska","under":"welkzorki.net"}],"url":"https://domainspoof.com/live?show=all&q=www.welkzorki.net"},{"hostname":"www.zelqoriumrecensione.com","first_observed":"2026-11-06T00:56:36.846Z","first_published":"2026-11-06T01:50:52.626Z","brands":[],"dns":"resolved","resolved":["185.7.214.147"],"resolved_at":"2026-11-06T01:07:38Z","dns_checked_at":"2026-11-06T02:02:30.000Z","dns_since":"2026-11-06T02:02:30.000Z","findings":[{"id":"fli6hxzxg2va5web6ws4b","kind":"reported_domain","summary":"Under zelqoriumrecensione.com, listed by CERT Polska","first_observed":"2026-11-06T00:56:36.846Z","first_published":"2026-11-06T01:50:52.626Z","source":"cert_polska","source_name":"CERT Polska","under":"zelqoriumrecensione.com"}],"url":"https://domainspoof.com/live?show=all&q=www.zelqoriumrecensione.com"},{"hostname":"www.zervanero.net","first_observed":"2026-11-06T00:56:36.846Z","first_published":"2026-11-06T01:50:52.626Z","brands":[],"dns":"resolved","resolved":["185.7.214.147"],"resolved_at":"2026-11-06T01:07:38Z","dns_checked_at":"2026-11-06T02:02:30.000Z","dns_since":"2026-11-06T02:02:30.000Z","findings":[{"id":"fkyedqdc6cmzqmmtckyum","kind":"reported_domain","summary":"Under zervanero.net, listed by CERT Polska","first_observed":"2026-11-06T00:56:36.846Z","first_published":"2026-11-06T01:50:52.626Z","source":"cert_polska","source_name":"CERT Polska","under":"zervanero.net"}],"url":"https://domainspoof.com/live?show=all&q=www.zervanero.net"},{"hostname":"www.zlaturnaaktivnik.org","first_observed":"2026-11-06T00:56:36.846Z","first_published":"2026-11-06T01:50:52.626Z","brands":[],"dns":"resolved","resolved":["185.7.214.147"],"resolved_at":"2026-11-06T01:07:38Z","dns_checked_at":"2026-11-06T02:02:30.000Z","dns_since":"2026-11-06T02:02:30.000Z","findings":[{"id":"fu553xoc222gb4dbkl3hz","kind":"reported_domain","summary":"Under zlaturnaaktivnik.org, listed by CERT Polska","first_observed":"2026-11-06T00:56:36.846Z","first_published":"2026-11-06T01:50:52.626Z","source":"cert_polska","source_name":"CERT Polska","under":"zlaturnaaktivnik.org"}],"url":"https://domainspoof.com/live?show=all&q=www.zlaturnaaktivnik.org"},{"hostname":"xmartlabs.info","first_observed":"2026-11-06T01:05:49.887Z","first_published":"2026-11-06T01:50:52.626Z","brands":[],"dns":"resolved","resolved":["104.21.10.232","172.67.164.203"],"resolved_at":"2026-11-06T01:06:02Z","dns_checked_at":"2026-11-06T02:02:30.000Z","dns_since":"2026-11-06T02:02:30.000Z","findings":[{"id":"fueu56yyb4bajq3bfvxmo","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-06T01:05:49.887Z","first_published":"2026-11-06T01:50:52.626Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/xmartlabs.info/"}],"url":"https://domainspoof.com/live?show=all&q=xmartlabs.info"},{"hostname":"xrpl-gain.live","first_observed":"2026-11-06T01:36:30.815Z","first_published":"2026-11-06T01:50:52.626Z","brands":[{"id":"ripple","name":"Ripple (XRP)","url":"https://domainspoof.com/brands/ripple"}],"dns":"resolved","resolved":["104.21.2.182","172.67.129.137"],"resolved_at":"2026-11-06T01:36:57Z","dns_checked_at":"2026-11-06T02:02:30.000Z","dns_since":"2026-11-06T02:02:30.000Z","findings":[{"id":"fqy6ew3bm7e3rx6j2trd2","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-06T01:36:30.815Z","first_published":"2026-11-06T01:50:52.626Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/brands/ripple"},{"hostname":"yduqkcwj.lnepitxc.wgbqozif.ilshbakxo.lndrfzst.tubegfdi.am7g89sg4k8mdsgc.gatewaylearning.ezgateway.net","first_observed":"2026-11-06T01:21:11.336Z","first_published":"2026-11-06T01:50:52.626Z","brands":[],"dns":"resolved","resolved":["15.204.116.29"],"resolved_at":"2026-11-06T01:21:24Z","dns_checked_at":"2026-11-06T02:02:30.000Z","dns_since":"2026-11-06T02:02:30.000Z","findings":[{"id":"fdz67glbxho7mmgmaxpa4","kind":"reported_domain","summary":"Under ezgateway.net, listed by USOM","first_observed":"2026-11-06T01:21:11.336Z","first_published":"2026-11-06T01:50:52.626Z","source":"usom","source_name":"USOM","under":"ezgateway.net"}],"url":"https://domainspoof.com/live?show=all&q=yduqkcwj.lnepitxc.wgbqozif.ilshbakxo.lndrfzst.tubegfdi.am7g89sg4k8mdsgc.gatewaylearning.ezgateway.net"},{"hostname":"yieldsearcher.xyz","first_observed":"2026-11-06T00:56:36.846Z","first_published":"2026-11-06T01:50:52.626Z","brands":[],"dns":"resolved","resolved":["104.21.58.57","172.67.168.6"],"resolved_at":"2026-11-06T01:07:38Z","dns_checked_at":"2026-11-06T02:02:30.000Z","dns_since":"2026-11-06T02:02:30.000Z","findings":[{"id":"fjke7ntxd2zucwjetfrou","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-06T00:56:36.846Z","first_published":"2026-11-06T01:50:52.626Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/yieldsearcher.xyz/"}],"url":"https://domainspoof.com/live?show=all&q=yieldsearcher.xyz"},{"hostname":"ymdforgq.aemdlpns.ifumnhar.doglwiyh.glohjtre.yclnwqvi.ptgsxzo0wi87qbv2.gatewaylearning.ezgateway.net","first_observed":"2026-11-06T01:21:11.336Z","first_published":"2026-11-06T01:50:52.626Z","brands":[],"dns":"resolved","resolved":["15.204.116.29"],"resolved_at":"2026-11-06T01:21:24Z","dns_checked_at":"2026-11-06T02:02:30.000Z","dns_since":"2026-11-06T02:02:30.000Z","findings":[{"id":"fskob5uvkofkqvnp555c7","kind":"reported_domain","summary":"Under ezgateway.net, listed by USOM","first_observed":"2026-11-06T01:21:11.336Z","first_published":"2026-11-06T01:50:52.626Z","source":"usom","source_name":"USOM","under":"ezgateway.net"}],"url":"https://domainspoof.com/live?show=all&q=ymdforgq.aemdlpns.ifumnhar.doglwiyh.glohjtre.yclnwqvi.ptgsxzo0wi87qbv2.gatewaylearning.ezgateway.net"},{"hostname":"zamrudhartanika.live","first_observed":"2026-11-06T01:15:35.334Z","first_published":"2026-11-06T01:50:52.626Z","brands":[],"dns":"resolved","resolved":["104.21.23.47","172.67.209.47"],"resolved_at":"2026-11-06T01:21:23Z","dns_checked_at":"2026-11-06T02:02:30.000Z","dns_since":"2026-11-06T02:02:30.000Z","findings":[{"id":"fezc75rdf3hmymrbicv5r","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-06T01:15:35.334Z","first_published":"2026-11-06T01:50:52.626Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=zamrudhartanika.live"},{"hostname":"zncqfvmt.smpbcuyx.fuyndtoc.nirfhjym.uatmfwcq.gatewaylearning.ezgateway.net","first_observed":"2026-11-06T01:21:11.336Z","first_published":"2026-11-06T01:50:52.626Z","brands":[],"dns":"resolved","resolved":["15.204.116.29"],"resolved_at":"2026-11-06T01:21:24Z","dns_checked_at":"2026-11-06T02:02:30.000Z","dns_since":"2026-11-06T02:02:30.000Z","findings":[{"id":"fdqb7zplto3sjj7oyv6bo","kind":"reported_domain","summary":"Under ezgateway.net, listed by USOM","first_observed":"2026-11-06T01:21:11.336Z","first_published":"2026-11-06T01:50:52.626Z","source":"usom","source_name":"USOM","under":"ezgateway.net"}],"url":"https://domainspoof.com/live?show=all&q=zncqfvmt.smpbcuyx.fuyndtoc.nirfhjym.uatmfwcq.gatewaylearning.ezgateway.net"},{"hostname":"zyncore.live","first_observed":"2026-11-06T00:36:06.728Z","first_published":"2026-11-06T01:50:52.626Z","brands":[],"dns":"resolved","resolved":["104.21.66.140","172.67.204.133"],"resolved_at":"2026-11-06T00:36:28Z","dns_checked_at":"2026-11-06T02:02:30.000Z","dns_since":"2026-11-06T02:02:30.000Z","findings":[{"id":"fal4tacvdmrqkpf6a7f42","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-06T00:36:06.728Z","first_published":"2026-11-06T01:50:52.626Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=zyncore.live"},{"hostname":"acrobat.tokyo","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"adobe","name":"Adobe","url":"https://domainspoof.com/brands/adobe"}],"dns":"resolved","resolved":["150.95.255.38"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of acrobat.com (same name, other ending), resolved to 150.95.255.38, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"acrobat.com","spelling":"tld","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"150.95.255.38","flagged_at":"2026-11-06T00:41:47Z"}]}],"url":"https://domainspoof.com/brands/adobe"},{"hostname":"actions-github-vault.xyz","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"github","name":"GitHub","url":"https://domainspoof.com/brands/github"}],"dns":"resolved","resolved":["150.95.255.38"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “github”, a name we match for GitHub, resolved to 150.95.255.38, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"github.com","spelling":"combo","match":"name","token":"github","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"150.95.255.38","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/github"},{"hostname":"actions-memory-gitlab.xyz","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"gitlab","name":"GitLab","url":"https://domainspoof.com/brands/gitlab"}],"dns":"resolved","resolved":["150.95.255.38"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “gitlab”, a name we match for GitLab, resolved to 150.95.255.38, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"gitlab.com","spelling":"combo","match":"name","token":"gitlab","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"150.95.255.38","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/gitlab"},{"hostname":"actions-socket-github.xyz","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"github","name":"GitHub","url":"https://domainspoof.com/brands/github"}],"dns":"resolved","resolved":["150.95.255.38"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “github”, a name we match for GitHub, resolved to 150.95.255.38, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"github.com","spelling":"combo","match":"name","token":"github","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"150.95.255.38","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/github"},{"hostname":"amongus.online","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"among-us","name":"Among Us","url":"https://domainspoof.com/brands/among-us"}],"dns":"resolved","resolved":["208.115.249.236"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “amongus”, a name we match for Among Us, resolved to 208.115.249.236, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"innersloth.com","spelling":"combo","match":"name","token":"amongus","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"208.115.249.236","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/among-us"},{"hostname":"api-github-history.xyz","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"github","name":"GitHub","url":"https://domainspoof.com/brands/github"}],"dns":"resolved","resolved":["150.95.255.38"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “github”, a name we match for GitHub, resolved to 150.95.255.38, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"github.com","spelling":"combo","match":"name","token":"github","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"150.95.255.38","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/github"},{"hostname":"api-github-virtual.xyz","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"github","name":"GitHub","url":"https://domainspoof.com/brands/github"}],"dns":"resolved","resolved":["150.95.255.38"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “github”, a name we match for GitHub, resolved to 150.95.255.38, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"github.com","spelling":"combo","match":"name","token":"github","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"150.95.255.38","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/github"},{"hostname":"app-promote-viber-gitlab.xyz","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"gitlab","name":"GitLab","url":"https://domainspoof.com/brands/gitlab"}],"dns":"resolved","resolved":["150.95.255.38"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “gitlab”, a name we match for GitLab, resolved to 150.95.255.38, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"gitlab.com","spelling":"combo","match":"name","token":"gitlab","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"150.95.255.38","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/gitlab"},{"hostname":"appdynamics-base.xyz","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"cisco","name":"Cisco","url":"https://domainspoof.com/brands/cisco"}],"dns":"resolved","resolved":["150.95.255.38"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “appdynamics”, a name we match for Cisco, resolved to 150.95.255.38, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"cisco.com","spelling":"combo","match":"name","token":"appdynamics","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"150.95.255.38","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/cisco"},{"hostname":"appdynamics-cli-wave.xyz","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"cisco","name":"Cisco","url":"https://domainspoof.com/brands/cisco"}],"dns":"resolved","resolved":["150.95.255.38"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “appdynamics”, a name we match for Cisco, resolved to 150.95.255.38, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"cisco.com","spelling":"combo","match":"name","token":"appdynamics","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"150.95.255.38","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/cisco"},{"hostname":"appdynamics-import-earth.xyz","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"cisco","name":"Cisco","url":"https://domainspoof.com/brands/cisco"}],"dns":"resolved","resolved":["150.95.255.38"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “appdynamics”, a name we match for Cisco, resolved to 150.95.255.38, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"cisco.com","spelling":"combo","match":"name","token":"appdynamics","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"150.95.255.38","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/cisco"},{"hostname":"appdynamics-laravel.xyz","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"cisco","name":"Cisco","url":"https://domainspoof.com/brands/cisco"}],"dns":"resolved","resolved":["150.95.255.38"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “appdynamics”, a name we match for Cisco, resolved to 150.95.255.38, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"cisco.com","spelling":"combo","match":"name","token":"appdynamics","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"150.95.255.38","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/cisco"},{"hostname":"appdynamics-library-growth.xyz","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"cisco","name":"Cisco","url":"https://domainspoof.com/brands/cisco"}],"dns":"resolved","resolved":["150.95.255.38"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “appdynamics”, a name we match for Cisco, resolved to 150.95.255.38, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"cisco.com","spelling":"combo","match":"name","token":"appdynamics","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"150.95.255.38","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/cisco"},{"hostname":"appdynamics-nvidia-database.xyz","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"cisco","name":"Cisco","url":"https://domainspoof.com/brands/cisco"}],"dns":"resolved","resolved":["150.95.255.38"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “appdynamics”, a name we match for Cisco, resolved to 150.95.255.38, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"cisco.com","spelling":"combo","match":"name","token":"appdynamics","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"150.95.255.38","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/cisco"},{"hostname":"appdynamics-premiere.xyz","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"cisco","name":"Cisco","url":"https://domainspoof.com/brands/cisco"}],"dns":"resolved","resolved":["150.95.255.38"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “appdynamics”, a name we match for Cisco, resolved to 150.95.255.38, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"cisco.com","spelling":"combo","match":"name","token":"appdynamics","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"150.95.255.38","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/cisco"},{"hostname":"appdynamics-stake.xyz","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"cisco","name":"Cisco","url":"https://domainspoof.com/brands/cisco"}],"dns":"resolved","resolved":["150.95.255.38"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “appdynamics”, a name we match for Cisco, resolved to 150.95.255.38, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"cisco.com","spelling":"combo","match":"name","token":"appdynamics","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"150.95.255.38","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/cisco"},{"hostname":"atmel-openai-shard.xyz","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"openai","name":"OpenAI","url":"https://domainspoof.com/brands/openai"}],"dns":"resolved","resolved":["150.95.255.38"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “openai”, a name we match for OpenAI, resolved to 150.95.255.38, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"openai.com","spelling":"combo","match":"name","token":"openai","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"150.95.255.38","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/openai"},{"hostname":"atmel-splunk-break.xyz","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"cisco","name":"Cisco","url":"https://domainspoof.com/brands/cisco"}],"dns":"resolved","resolved":["150.95.255.38"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “splunk”, a name we match for Cisco, resolved to 150.95.255.38, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"cisco.com","spelling":"combo","match":"name","token":"splunk","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"150.95.255.38","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/cisco"},{"hostname":"atomicity-webex-splunk.xyz","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"cisco","name":"Cisco","url":"https://domainspoof.com/brands/cisco"},{"id":"webex","name":"Webex","url":"https://domainspoof.com/brands/webex"}],"dns":"resolved","resolved":["150.95.255.38"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “splunk”, a name we match for Cisco, resolved to 150.95.255.38, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"cisco.com","spelling":"combo","match":"name","token":"splunk","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"150.95.255.38","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"},{"kind":"lookalike","summary":"Registered domain containing “webex”, a name we match for Webex, resolved to 150.95.255.38, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"cisco.com","spelling":"combo","match":"name","token":"webex","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"150.95.255.38","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/cisco"},{"hostname":"audi.yokohama","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"audi","name":"Audi","url":"https://domainspoof.com/brands/audi"}],"dns":"resolved","resolved":["150.95.255.38"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of audi.com.au (same name, other ending), resolved to 150.95.255.38, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"audi.com.au","spelling":"tld","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"150.95.255.38","flagged_at":"2026-11-06T00:41:47Z"}]}],"url":"https://domainspoof.com/brands/audi"},{"hostname":"auth-microsoft.sbs","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"microsoft","name":"Microsoft","url":"https://domainspoof.com/brands/microsoft"}],"dns":"resolved","resolved":["172.232.24.161","172.232.24.235","172.234.25.42"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of microsoft.com (the name with an added word), resolved to 172.232.24.161, where reported phishing was found in the 48 hours before, and resolved to 172.232.24.235, where reported phishing was found in the 48 hours before, and resolved to 172.234.25.42, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"microsoft.com","spelling":"combo","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"172.232.24.161","flagged_at":"2026-11-06T00:41:47Z"},{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"172.232.24.235","flagged_at":"2026-11-06T00:41:47Z"},{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"172.234.25.42","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/microsoft"},{"hostname":"balancer-microsoft-laravel.xyz","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"microsoft","name":"Microsoft","url":"https://domainspoof.com/brands/microsoft"}],"dns":"resolved","resolved":["150.95.255.38"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “microsoft”, a name we match for Microsoft, resolved to 150.95.255.38, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"microsoft.com","spelling":"combo","match":"name","token":"microsoft","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"150.95.255.38","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/microsoft"},{"hostname":"bancoposta.click","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"poste-italiane","name":"Poste Italiane","url":"https://domainspoof.com/brands/poste-italiane"}],"dns":"resolved","resolved":["212.92.105.21"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “bancoposta”, a name we match for Poste Italiane, resolved to 212.92.105.21, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"posteitaliane.it","spelling":"combo","match":"name","token":"bancoposta","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"212.92.105.21","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/poste-italiane"},{"hostname":"base-tiktok-microsoft.xyz","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"microsoft","name":"Microsoft","url":"https://domainspoof.com/brands/microsoft"},{"id":"tiktok","name":"TikTok","url":"https://domainspoof.com/brands/tiktok"}],"dns":"resolved","resolved":["150.95.255.38"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “microsoft”, a name we match for Microsoft, resolved to 150.95.255.38, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"microsoft.com","spelling":"combo","match":"name","token":"microsoft","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"150.95.255.38","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"},{"kind":"lookalike","summary":"Registered domain containing “tiktok”, a name we match for TikTok, resolved to 150.95.255.38, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"microsoft.com","spelling":"combo","match":"name","token":"tiktok","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"150.95.255.38","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/microsoft"},{"hostname":"bcoinbase.pro","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"coinbase","name":"Coinbase","url":"https://domainspoof.com/brands/coinbase"}],"dns":"resolved","resolved":["77.247.179.91"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of coinbase.com (an added character), resolved to 77.247.179.91, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"coinbase.com","spelling":"insertion","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"77.247.179.91","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/coinbase"},{"hostname":"bigint-xen-appdynamics.xyz","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"cisco","name":"Cisco","url":"https://domainspoof.com/brands/cisco"}],"dns":"resolved","resolved":["150.95.255.38"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “appdynamics”, a name we match for Cisco, resolved to 150.95.255.38, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"cisco.com","spelling":"combo","match":"name","token":"appdynamics","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"150.95.255.38","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/cisco"},{"hostname":"bio-garena.site","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"garena","name":"Garena","url":"https://domainspoof.com/brands/garena"}],"dns":"resolved","resolved":["77.247.179.87"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “garena”, a name we match for Garena, resolved to 77.247.179.87, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"garena.com","spelling":"combo","match":"name","token":"garena","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"77.247.179.87","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/garena"},{"hostname":"birth-quota-openai.xyz","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"openai","name":"OpenAI","url":"https://domainspoof.com/brands/openai"}],"dns":"resolved","resolved":["150.95.255.38"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “openai”, a name we match for OpenAI, resolved to 150.95.255.38, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"openai.com","spelling":"combo","match":"name","token":"openai","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"150.95.255.38","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/openai"},{"hostname":"bitflyer.com.au","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"bitflyer","name":"bitFlyer","url":"https://domainspoof.com/brands/bitflyer"}],"dns":"resolved","resolved":["27.124.125.171","103.67.235.120"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of bitflyer.com (same name, other ending), resolved to 103.67.235.120, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"bitflyer.com","spelling":"tld","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"103.67.235.120","flagged_at":"2026-11-06T00:41:47Z"}]}],"url":"https://domainspoof.com/brands/bitflyer"},{"hostname":"bitpie.com.co","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"bitpie","name":"Bitpie","url":"https://domainspoof.com/brands/bitpie"}],"dns":"resolved","resolved":["149.88.65.197","154.12.31.47","154.12.31.56"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of bitpie.com (same name, other ending), resolved to 149.88.65.197, where reported phishing was found in the 48 hours before, and resolved to 154.12.31.47, where reported phishing was found in the 48 hours before, and resolved to 154.12.31.56, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"bitpie.com","spelling":"tld","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"149.88.65.197","flagged_at":"2026-11-06T00:41:47Z"},{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"154.12.31.47","flagged_at":"2026-11-06T00:41:47Z"},{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"154.12.31.56","flagged_at":"2026-11-06T00:41:47Z"}]}],"url":"https://domainspoof.com/brands/bitpie"},{"hostname":"blockchain.ryukyu","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"blockchain-com","name":"Blockchain.com","url":"https://domainspoof.com/brands/blockchain-com"}],"dns":"resolved","resolved":["2.59.170.20","104.219.250.37"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of blockchain.com (same name, other ending), resolved to 2.59.170.20, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"blockchain.com","spelling":"tld","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"2.59.170.20","flagged_at":"2026-11-06T00:41:47Z"}]}],"url":"https://domainspoof.com/brands/blockchain-com"},{"hostname":"br-louisvuitton.bet","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"louis-vuitton","name":"Louis Vuitton","url":"https://domainspoof.com/brands/louis-vuitton"}],"dns":"resolved","resolved":["78.157.209.173"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “louisvuitton”, a name we match for Louis Vuitton, resolved to 78.157.209.173, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"louisvuitton.com","spelling":"combo","match":"name","token":"louisvuitton","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"78.157.209.173","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/louis-vuitton"},{"hostname":"broker-openai-finally.xyz","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"openai","name":"OpenAI","url":"https://domainspoof.com/brands/openai"}],"dns":"resolved","resolved":["150.95.255.38"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “openai”, a name we match for OpenAI, resolved to 150.95.255.38, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"openai.com","spelling":"combo","match":"name","token":"openai","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"150.95.255.38","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/openai"},{"hostname":"buffer-spinnaker-appdynamics.xyz","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"cisco","name":"Cisco","url":"https://domainspoof.com/brands/cisco"}],"dns":"resolved","resolved":["150.95.255.38"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “appdynamics”, a name we match for Cisco, resolved to 150.95.255.38, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"cisco.com","spelling":"combo","match":"name","token":"appdynamics","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"150.95.255.38","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/cisco"},{"hostname":"calico-openai.xyz","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"openai","name":"OpenAI","url":"https://domainspoof.com/brands/openai"}],"dns":"resolved","resolved":["150.95.255.38"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “openai”, a name we match for OpenAI, resolved to 150.95.255.38, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"openai.com","spelling":"combo","match":"name","token":"openai","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"150.95.255.38","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/openai"},{"hostname":"candidate-appdynamics.xyz","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"cisco","name":"Cisco","url":"https://domainspoof.com/brands/cisco"}],"dns":"resolved","resolved":["150.95.255.38"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “appdynamics”, a name we match for Cisco, resolved to 150.95.255.38, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"cisco.com","spelling":"combo","match":"name","token":"appdynamics","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"150.95.255.38","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/cisco"},{"hostname":"car-express-openai.xyz","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"openai","name":"OpenAI","url":"https://domainspoof.com/brands/openai"}],"dns":"resolved","resolved":["150.95.255.38"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “openai”, a name we match for OpenAI, resolved to 150.95.255.38, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"openai.com","spelling":"combo","match":"name","token":"openai","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"150.95.255.38","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/openai"},{"hostname":"chatgpt-navi.biz","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"openai","name":"OpenAI","url":"https://domainspoof.com/brands/openai"}],"dns":"resolved","resolved":["150.95.255.38"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “chatgpt”, a name we match for OpenAI, resolved to 150.95.255.38, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"openai.com","spelling":"combo","match":"name","token":"chatgpt","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"150.95.255.38","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/openai"},{"hostname":"chatgpt-navi.club","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"openai","name":"OpenAI","url":"https://domainspoof.com/brands/openai"}],"dns":"resolved","resolved":["150.95.255.38"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “chatgpt”, a name we match for OpenAI, resolved to 150.95.255.38, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"openai.com","spelling":"combo","match":"name","token":"chatgpt","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"150.95.255.38","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/openai"},{"hostname":"chatgpt-navi.work","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"openai","name":"OpenAI","url":"https://domainspoof.com/brands/openai"}],"dns":"resolved","resolved":["150.95.255.38"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “chatgpt”, a name we match for OpenAI, resolved to 150.95.255.38, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"openai.com","spelling":"combo","match":"name","token":"chatgpt","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"150.95.255.38","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/openai"},{"hostname":"chicagocraigslist.org","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"craigslist","name":"Craigslist","url":"https://domainspoof.com/brands/craigslist"}],"dns":"resolved","resolved":["78.157.209.171"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “craigslist”, a name we match for Craigslist, resolved to 78.157.209.171, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"craigslist.org","spelling":"combo","match":"name","token":"craigslist","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"78.157.209.171","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/craigslist"},{"hostname":"cinbase.pro","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"coinbase","name":"Coinbase","url":"https://domainspoof.com/brands/coinbase"}],"dns":"resolved","resolved":["77.247.179.88"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of coinbase.com (a dropped letter), resolved to 77.247.179.88, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"coinbase.com","spelling":"omission","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"77.247.179.88","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/coinbase"},{"hostname":"circleci-appdynamics.xyz","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"cisco","name":"Cisco","url":"https://domainspoof.com/brands/cisco"}],"dns":"resolved","resolved":["150.95.255.38"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “appdynamics”, a name we match for Cisco, resolved to 150.95.255.38, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"cisco.com","spelling":"combo","match":"name","token":"appdynamics","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"150.95.255.38","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/cisco"},{"hostname":"cloud-github.xyz","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"github","name":"GitHub","url":"https://domainspoof.com/brands/github"}],"dns":"resolved","resolved":["150.95.255.38"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “github”, a name we match for GitHub, resolved to 150.95.255.38, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"github.com","spelling":"combo","match":"name","token":"github","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"150.95.255.38","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/github"},{"hostname":"coiinbase.pro","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"coinbase","name":"Coinbase","url":"https://domainspoof.com/brands/coinbase"}],"dns":"resolved","resolved":["216.245.197.43"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of coinbase.com (a doubled letter), resolved to 216.245.197.43, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"coinbase.com","spelling":"repetition","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"216.245.197.43","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/coinbase"},{"hostname":"coin-base.biz","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"coinbase","name":"Coinbase","url":"https://domainspoof.com/brands/coinbase"}],"dns":"resolved","resolved":["64.20.38.219"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “coin-base”, a name we match for Coinbase, resolved to 64.20.38.219, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"coinbase.com","spelling":"combo","match":"name","token":"coin-base","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"64.20.38.219","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/coinbase"},{"hostname":"coinbaase.pro","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"coinbase","name":"Coinbase","url":"https://domainspoof.com/brands/coinbase"}],"dns":"resolved","resolved":["77.247.179.83"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of coinbase.com (a doubled letter), resolved to 77.247.179.83, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"coinbase.com","spelling":"repetition","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"77.247.179.83","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/coinbase"},{"hostname":"coinbase-app.pro","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"coinbase","name":"Coinbase","url":"https://domainspoof.com/brands/coinbase"}],"dns":"resolved","resolved":["216.245.197.44"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “coinbase”, a name we match for Coinbase, resolved to 216.245.197.44, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"coinbase.com","spelling":"combo","match":"name","token":"coinbase","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"216.245.197.44","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/coinbase"},{"hostname":"coinbase-card.vip","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"coinbase","name":"Coinbase","url":"https://domainspoof.com/brands/coinbase"}],"dns":"resolved","resolved":["186.2.175.35"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of coinbase.com (the name with an added word), listed by MetaMask, and reported by PhishDestroy, and resolved to 186.2.175.35, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"coinbase.com","spelling":"combo","found_by":"zone_file","listings":[{"kind":"reported","source":"metamask","source_name":"MetaMask","host":"coinbase-card.vip","flagged_at":"2026-11-06T00:41:47Z"},{"kind":"reported","source":"phishdestroy","source_name":"PhishDestroy","host":"coinbase-card.vip","flagged_at":"2026-11-06T00:41:47Z"},{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"186.2.175.35","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/coinbase"},{"hostname":"coinbase-commerce.club","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"coinbase","name":"Coinbase","url":"https://domainspoof.com/brands/coinbase"}],"dns":"resolved","resolved":["104.21.64.252","172.67.138.127","2606:4700:3034::ac43:8a7f","2606:4700:3036::6815:40fc"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “coinbase”, a name we match for Coinbase, reported by PhishDestroy","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"coinbase.com","spelling":"combo","match":"name","token":"coinbase","found_by":"zone_file","listings":[{"kind":"reported","source":"phishdestroy","source_name":"PhishDestroy","host":"coinbase-commerce.club","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/coinbase"},{"hostname":"coinbase-finance.one","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"coinbase","name":"Coinbase","url":"https://domainspoof.com/brands/coinbase"}],"dns":"unknown","resolved":[],"findings":[{"kind":"lookalike","summary":"Registered domain containing “coinbase”, a name we match for Coinbase, listed by MetaMask","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"coinbase.com","spelling":"combo","match":"name","token":"coinbase","found_by":"zone_file","listings":[{"kind":"reported","source":"metamask","source_name":"MetaMask","host":"coinbase-finance.one","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/coinbase"},{"hostname":"coinbase-pt.vip","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"coinbase","name":"Coinbase","url":"https://domainspoof.com/brands/coinbase"}],"dns":"no_address","resolved":[],"findings":[{"kind":"lookalike","summary":"Registered domain containing “coinbase”, a name we match for Coinbase, reported by PhishDestroy","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"coinbase.com","spelling":"combo","match":"name","token":"coinbase","found_by":"zone_file","listings":[{"kind":"reported","source":"phishdestroy","source_name":"PhishDestroy","host":"coinbase-pt.vip","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/coinbase"},{"hostname":"coinbase-uma.vip","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"coinbase","name":"Coinbase","url":"https://domainspoof.com/brands/coinbase"}],"dns":"resolved","resolved":["15.197.172.60"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “coinbase”, a name we match for Coinbase, listed by MetaMask","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"coinbase.com","spelling":"combo","match":"name","token":"coinbase","found_by":"zone_file","listings":[{"kind":"reported","source":"metamask","source_name":"MetaMask","host":"coinbase-uma.vip","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/coinbase"},{"hostname":"coinbase-wallet.work","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"coinbase","name":"Coinbase","url":"https://domainspoof.com/brands/coinbase"}],"dns":"resolved","resolved":["172.232.24.161","172.232.24.235","172.234.25.42"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “coinbase-wallet”, a name we match for Coinbase, resolved to 172.232.24.161, where reported phishing was found in the 48 hours before, and resolved to 172.232.24.235, where reported phishing was found in the 48 hours before, and resolved to 172.234.25.42, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"coinbase.com","spelling":"combo","match":"name","token":"coinbase-wallet","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"172.232.24.161","flagged_at":"2026-11-06T00:41:47Z"},{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"172.232.24.235","flagged_at":"2026-11-06T00:41:47Z"},{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"172.234.25.42","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/coinbase"},{"hostname":"coinbase.auction","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"coinbase","name":"Coinbase","url":"https://domainspoof.com/brands/coinbase"}],"dns":"resolved","resolved":["64.190.63.222"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of coinbase.com (same name, other ending), listed by MetaMask","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"coinbase.com","spelling":"tld","found_by":"dns_sweep","listings":[{"kind":"reported","source":"metamask","source_name":"MetaMask","host":"coinbase.auction","flagged_at":"2026-11-06T00:41:47Z"}]}],"url":"https://domainspoof.com/brands/coinbase"},{"hostname":"coinbase.net.co","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"coinbase","name":"Coinbase","url":"https://domainspoof.com/brands/coinbase"}],"dns":"unknown","resolved":[],"findings":[{"kind":"lookalike","summary":"Registered lookalike of coinbase.com (same name, other ending), listed by MetaMask","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"coinbase.com","spelling":"tld","found_by":"dns_sweep","listings":[{"kind":"reported","source":"metamask","source_name":"MetaMask","host":"coinbase.net.co","flagged_at":"2026-11-06T00:41:47Z"}]}],"url":"https://domainspoof.com/brands/coinbase"},{"hostname":"coinbasen.vip","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"coinbase","name":"Coinbase","url":"https://domainspoof.com/brands/coinbase"}],"dns":"no_address","resolved":[],"findings":[{"kind":"lookalike","summary":"Registered lookalike of coinbase.com (an added character), listed by MetaMask","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"coinbase.com","spelling":"insertion","found_by":"zone_file","listings":[{"kind":"reported","source":"metamask","source_name":"MetaMask","host":"coinbasen.vip","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/coinbase"},{"hostname":"coinbasse.pro","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"coinbase","name":"Coinbase","url":"https://domainspoof.com/brands/coinbase"}],"dns":"resolved","resolved":["77.247.179.90"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of coinbase.com (a doubled letter), resolved to 77.247.179.90, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"coinbase.com","spelling":"repetition","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"77.247.179.90","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/coinbase"},{"hostname":"coinmakretcap.ink","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"coinmarketcap","name":"CoinMarketCap","url":"https://domainspoof.com/brands/coinmarketcap"}],"dns":"resolved","resolved":["104.21.27.36","172.67.141.51","2606:4700:3034::6815:1b24","2606:4700:3037::ac43:8d33"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of coinmarketcap.com (two letters swapped), listed by MetaMask","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"coinmarketcap.com","spelling":"transposition","found_by":"zone_file","listings":[{"kind":"reported","source":"metamask","source_name":"MetaMask","host":"coinmakretcap.ink","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/coinmarketcap"},{"hostname":"community-appdynamics-soul.xyz","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"cisco","name":"Cisco","url":"https://domainspoof.com/brands/cisco"}],"dns":"resolved","resolved":["150.95.255.38"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “appdynamics”, a name we match for Cisco, resolved to 150.95.255.38, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"cisco.com","spelling":"combo","match":"name","token":"appdynamics","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"150.95.255.38","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/cisco"},{"hostname":"company-mining-github.xyz","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"github","name":"GitHub","url":"https://domainspoof.com/brands/github"}],"dns":"resolved","resolved":["150.95.255.38"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “github”, a name we match for GitHub, resolved to 150.95.255.38, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"github.com","spelling":"combo","match":"name","token":"github","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"150.95.255.38","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/github"},{"hostname":"computer-microsoft-replica.xyz","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"microsoft","name":"Microsoft","url":"https://domainspoof.com/brands/microsoft"}],"dns":"resolved","resolved":["150.95.255.38"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “microsoft”, a name we match for Microsoft, resolved to 150.95.255.38, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"microsoft.com","spelling":"combo","match":"name","token":"microsoft","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"150.95.255.38","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/microsoft"},{"hostname":"conimarketcap.ink","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"coinmarketcap","name":"CoinMarketCap","url":"https://domainspoof.com/brands/coinmarketcap"}],"dns":"resolved","resolved":["104.21.50.41","172.67.200.187","2606:4700:3032::6815:3229","2606:4700:3035::ac43:c8bb"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of coinmarketcap.com (two letters swapped), listed by MetaMask","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"coinmarketcap.com","spelling":"transposition","found_by":"zone_file","listings":[{"kind":"reported","source":"metamask","source_name":"MetaMask","host":"conimarketcap.ink","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/coinmarketcap"},{"hostname":"connect-flarenetworks.one","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"flare-network","name":"Flare Network","url":"https://domainspoof.com/brands/flare-network"}],"dns":"resolved","resolved":["104.21.46.232","172.67.143.36","2606:4700:3033::6815:2ee8","2606:4700:3034::ac43:8f24"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “flarenetworks”, a name we match for Flare Network, listed by MetaMask","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"flare.network","spelling":"combo","match":"name","token":"flarenetworks","found_by":"zone_file","listings":[{"kind":"reported","source":"metamask","source_name":"MetaMask","host":"connect-flarenetworks.one","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/flare-network"},{"hostname":"console-interface-gitlab.xyz","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"gitlab","name":"GitLab","url":"https://domainspoof.com/brands/gitlab"}],"dns":"resolved","resolved":["150.95.255.38"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “gitlab”, a name we match for GitLab, resolved to 150.95.255.38, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"gitlab.com","spelling":"combo","match":"name","token":"gitlab","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"150.95.255.38","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/gitlab"},{"hostname":"consumer-github.xyz","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"github","name":"GitHub","url":"https://domainspoof.com/brands/github"}],"dns":"resolved","resolved":["150.95.255.38"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “github”, a name we match for GitHub, resolved to 150.95.255.38, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"github.com","spelling":"combo","match":"name","token":"github","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"150.95.255.38","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/github"},{"hostname":"cooinbase.pro","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"coinbase","name":"Coinbase","url":"https://domainspoof.com/brands/coinbase"}],"dns":"resolved","resolved":["77.247.179.86"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of coinbase.com (a doubled letter), resolved to 77.247.179.86, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"coinbase.com","spelling":"repetition","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"77.247.179.86","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/coinbase"},{"hostname":"correos-app.biz","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"correos","name":"Correos","url":"https://domainspoof.com/brands/correos"}],"dns":"resolved","resolved":["204.194.51.33"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “correos”, a name we match for Correos, resolved to 204.194.51.33 on Spamhaus DROP","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"correos.es","spelling":"combo","match":"name","token":"correos","found_by":"zone_file","listings":[{"kind":"address","source":"spamhaus_drop","list_name":"Spamhaus DROP","address":"204.194.51.33","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/correos"},{"hostname":"correosapp.work","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"correos","name":"Correos","url":"https://domainspoof.com/brands/correos"}],"dns":"resolved","resolved":["172.232.24.161","172.232.24.235","172.234.25.42"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “correos”, a name we match for Correos, resolved to 172.232.24.161, where reported phishing was found in the 48 hours before, and resolved to 172.232.24.235, where reported phishing was found in the 48 hours before, and resolved to 172.234.25.42, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"correos.es","spelling":"combo","match":"name","token":"correos","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"172.232.24.161","flagged_at":"2026-11-06T00:41:47Z"},{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"172.232.24.235","flagged_at":"2026-11-06T00:41:47Z"},{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"172.234.25.42","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/correos"},{"hostname":"craiagslist.org","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"craigslist","name":"Craigslist","url":"https://domainspoof.com/brands/craigslist"}],"dns":"resolved","resolved":["69.162.80.60"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of craigslist.org (an added character), resolved to 69.162.80.60, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"craigslist.org","spelling":"insertion","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"69.162.80.60","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/craigslist"},{"hostname":"craighlist.org","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"craigslist","name":"Craigslist","url":"https://domainspoof.com/brands/craigslist"}],"dns":"resolved","resolved":["77.247.179.91"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of craigslist.org (a changed character), resolved to 77.247.179.91, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"craigslist.org","spelling":"replacement","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"77.247.179.91","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/craigslist"},{"hostname":"craigs-list.pro","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"craigslist","name":"Craigslist","url":"https://domainspoof.com/brands/craigslist"}],"dns":"resolved","resolved":["65.75.210.7"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of craigslist.org (an added hyphen), resolved to 65.75.210.7, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"craigslist.org","spelling":"hyphen","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"65.75.210.7","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/craigslist"},{"hostname":"craigsliost.org","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"craigslist","name":"Craigslist","url":"https://domainspoof.com/brands/craigslist"}],"dns":"resolved","resolved":["216.245.197.45"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of craigslist.org (an added character), resolved to 216.245.197.45, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"craigslist.org","spelling":"insertion","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"216.245.197.45","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/craigslist"},{"hostname":"craigslistorg.pro","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"craigslist","name":"Craigslist","url":"https://domainspoof.com/brands/craigslist"}],"dns":"resolved","resolved":["65.75.210.7"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “craigslist”, a name we match for Craigslist, resolved to 65.75.210.7, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"craigslist.org","spelling":"combo","match":"name","token":"craigslist","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"65.75.210.7","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/craigslist"},{"hostname":"craigslistsf.org","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"craigslist","name":"Craigslist","url":"https://domainspoof.com/brands/craigslist"}],"dns":"resolved","resolved":["77.247.179.82"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “craigslist”, a name we match for Craigslist, resolved to 77.247.179.82, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"craigslist.org","spelling":"combo","match":"name","token":"craigslist","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"77.247.179.82","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/craigslist"},{"hostname":"craigstlist.org","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"craigslist","name":"Craigslist","url":"https://domainspoof.com/brands/craigslist"}],"dns":"resolved","resolved":["74.63.219.252"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of craigslist.org (an added character), resolved to 74.63.219.252, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"craigslist.org","spelling":"insertion","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"74.63.219.252","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/craigslist"},{"hostname":"craqigslist.org","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"craigslist","name":"Craigslist","url":"https://domainspoof.com/brands/craigslist"}],"dns":"resolved","resolved":["77.247.179.89"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of craigslist.org (an added character), resolved to 77.247.179.89, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"craigslist.org","spelling":"insertion","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"77.247.179.89","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/craigslist"},{"hostname":"crsaigslist.org","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"craigslist","name":"Craigslist","url":"https://domainspoof.com/brands/craigslist"}],"dns":"resolved","resolved":["77.247.179.83"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of craigslist.org (an added character), resolved to 77.247.179.83, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"craigslist.org","spelling":"insertion","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"77.247.179.83","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/craigslist"},{"hostname":"crypto-com.biz","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"crypto-com","name":"Crypto.com","url":"https://domainspoof.com/brands/crypto-com"}],"dns":"resolved","resolved":["198.251.89.229"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “crypto-com”, a name we match for Crypto.com, resolved to 198.251.89.229, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"crypto.com","spelling":"combo","match":"name","token":"crypto-com","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"198.251.89.229","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/crypto-com"},{"hostname":"crypto-com.pro","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"crypto-com","name":"Crypto.com","url":"https://domainspoof.com/brands/crypto-com"}],"dns":"resolved","resolved":["216.245.197.43"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “crypto-com”, a name we match for Crypto.com, resolved to 216.245.197.43, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"crypto.com","spelling":"combo","match":"name","token":"crypto-com","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"216.245.197.43","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/crypto-com"},{"hostname":"ctraigslist.org","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"craigslist","name":"Craigslist","url":"https://domainspoof.com/brands/craigslist"}],"dns":"resolved","resolved":["77.247.179.85"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of craigslist.org (an added character), resolved to 77.247.179.85, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"craigslist.org","spelling":"insertion","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"77.247.179.85","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/craigslist"},{"hostname":"cuvrefi.ink","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"curve-finance","name":"Curve Finance","url":"https://domainspoof.com/brands/curve-finance"}],"dns":"resolved","resolved":["104.21.46.218","172.67.142.223","2606:4700:3034::6815:2eda","2606:4700:3036::ac43:8edf"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of curve.finance (two letters swapped), listed by MetaMask","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"curve.finance","spelling":"transposition","found_by":"zone_file","listings":[{"kind":"reported","source":"metamask","source_name":"MetaMask","host":"cuvrefi.ink","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/curve-finance"},{"hostname":"daiwa-cormoran.org","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"daiwa-securities","name":"Daiwa Securities","url":"https://domainspoof.com/brands/daiwa-securities"}],"dns":"resolved","resolved":["89.31.143.90"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “daiwa”, a name we match for Daiwa Securities, resolved to 89.31.143.90, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"daiwa.co.jp","spelling":"combo","match":"name","token":"daiwa","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"89.31.143.90","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/daiwa-securities"},{"hostname":"daiwa-inds.online","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"daiwa-securities","name":"Daiwa Securities","url":"https://domainspoof.com/brands/daiwa-securities"}],"dns":"resolved","resolved":["150.95.255.38"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “daiwa”, a name we match for Daiwa Securities, resolved to 150.95.255.38, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"daiwa.co.jp","spelling":"combo","match":"name","token":"daiwa","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"150.95.255.38","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/daiwa-securities"},{"hostname":"daiwa-logitech.biz","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"daiwa-securities","name":"Daiwa Securities","url":"https://domainspoof.com/brands/daiwa-securities"}],"dns":"resolved","resolved":["150.95.255.38"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “daiwa”, a name we match for Daiwa Securities, resolved to 150.95.255.38, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"daiwa.co.jp","spelling":"combo","match":"name","token":"daiwa","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"150.95.255.38","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/daiwa-securities"},{"hostname":"daiwa-shop.info","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"daiwa-securities","name":"Daiwa Securities","url":"https://domainspoof.com/brands/daiwa-securities"}],"dns":"resolved","resolved":["89.31.143.90"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “daiwa”, a name we match for Daiwa Securities, resolved to 89.31.143.90, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"daiwa.co.jp","spelling":"combo","match":"name","token":"daiwa","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"89.31.143.90","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/daiwa-securities"},{"hostname":"daiwashop.info","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"daiwa-securities","name":"Daiwa Securities","url":"https://domainspoof.com/brands/daiwa-securities"}],"dns":"resolved","resolved":["89.31.143.90"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “daiwa”, a name we match for Daiwa Securities, resolved to 89.31.143.90, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"daiwa.co.jp","spelling":"combo","match":"name","token":"daiwa","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"89.31.143.90","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/daiwa-securities"},{"hostname":"dash-appdynamics.xyz","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"cisco","name":"Cisco","url":"https://domainspoof.com/brands/cisco"}],"dns":"resolved","resolved":["150.95.255.38"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “appdynamics”, a name we match for Cisco, resolved to 150.95.255.38, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"cisco.com","spelling":"combo","match":"name","token":"appdynamics","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"150.95.255.38","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/cisco"},{"hostname":"dashboards-flarenetworks.xyz","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"flare-network","name":"Flare Network","url":"https://domainspoof.com/brands/flare-network"}],"dns":"resolved","resolved":["104.21.41.24","172.67.159.16","2606:4700:3031::6815:2918","2606:4700:3031::ac43:9f10"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “flarenetworks”, a name we match for Flare Network, listed by MetaMask","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"flare.network","spelling":"combo","match":"name","token":"flarenetworks","found_by":"zone_file","listings":[{"kind":"reported","source":"metamask","source_name":"MetaMask","host":"dashboards-flarenetworks.xyz","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/flare-network"},{"hostname":"deepmind-netty-microsoft.xyz","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"microsoft","name":"Microsoft","url":"https://domainspoof.com/brands/microsoft"}],"dns":"resolved","resolved":["150.95.255.38"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “microsoft”, a name we match for Microsoft, resolved to 150.95.255.38, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"microsoft.com","spelling":"combo","match":"name","token":"microsoft","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"150.95.255.38","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/microsoft"},{"hostname":"defeat-splunk-calico.xyz","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"cisco","name":"Cisco","url":"https://domainspoof.com/brands/cisco"}],"dns":"resolved","resolved":["150.95.255.38"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “splunk”, a name we match for Cisco, resolved to 150.95.255.38, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"cisco.com","spelling":"combo","match":"name","token":"splunk","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"150.95.255.38","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/cisco"},{"hostname":"dex-screener.biz","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"dex-screener","name":"DEX Screener","url":"https://domainspoof.com/brands/dex-screener"}],"dns":"resolved","resolved":["185.53.179.136"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “dex-screener”, a name we match for DEX Screener, listed by MetaMask","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"dexscreener.com","spelling":"combo","match":"name","token":"dex-screener","found_by":"zone_file","listings":[{"kind":"reported","source":"metamask","source_name":"MetaMask","host":"dex-screener.biz","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/dex-screener"},{"hostname":"diamond-voter-splunk.xyz","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"cisco","name":"Cisco","url":"https://domainspoof.com/brands/cisco"}],"dns":"resolved","resolved":["150.95.255.38"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “splunk”, a name we match for Cisco, resolved to 150.95.255.38, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"cisco.com","spelling":"combo","match":"name","token":"splunk","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"150.95.255.38","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/cisco"},{"hostname":"dinseyplus.club","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"disney-plus","name":"Disney+","url":"https://domainspoof.com/brands/disney-plus"}],"dns":"resolved","resolved":["141.11.243.3"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of disneyplus.com (two letters swapped), resolved to 141.11.243.3, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"disneyplus.com","spelling":"transposition","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"141.11.243.3","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/disney-plus"},{"hostname":"disney-cruise.today","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"disney-plus","name":"Disney+","url":"https://domainspoof.com/brands/disney-plus"}],"dns":"resolved","resolved":["23.82.16.55"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “disney”, a name we match for Disney+, resolved to 23.82.16.55, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"disneyplus.com","spelling":"combo","match":"name","token":"disney","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"23.82.16.55","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/disney-plus"},{"hostname":"disney-fan.info","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"disney-plus","name":"Disney+","url":"https://domainspoof.com/brands/disney-plus"}],"dns":"resolved","resolved":["89.31.143.90"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “disney”, a name we match for Disney+, resolved to 89.31.143.90, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"disneyplus.com","spelling":"combo","match":"name","token":"disney","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"89.31.143.90","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/disney-plus"},{"hostname":"dmartin.biz","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"dmart","name":"DMart","url":"https://domainspoof.com/brands/dmart"}],"dns":"resolved","resolved":["217.160.0.191","2001:8d8:100f:f000::214"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “dmart”, a name we match for DMart, resolved to 217.160.0.191, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"dmartindia.com","spelling":"combo","match":"name","token":"dmart","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"217.160.0.191","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/dmart"},{"hostname":"docs-google.one","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"google","name":"Google","url":"https://domainspoof.com/brands/google"}],"dns":"resolved","resolved":["162.159.143.30","172.66.3.26"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “google”, a name we match for Google, listed by MetaMask, and reported by PhishDestroy","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"google.com","spelling":"combo","match":"name","token":"google","found_by":"zone_file","listings":[{"kind":"reported","source":"metamask","source_name":"MetaMask","host":"docs-google.one","flagged_at":"2026-11-06T00:41:47Z"},{"kind":"reported","source":"phishdestroy","source_name":"PhishDestroy","host":"docs-google.one","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/google"},{"hostname":"durability-splunk-accessibility.xyz","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"cisco","name":"Cisco","url":"https://domainspoof.com/brands/cisco"}],"dns":"resolved","resolved":["150.95.255.38"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “splunk”, a name we match for Cisco, resolved to 150.95.255.38, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"cisco.com","spelling":"combo","match":"name","token":"splunk","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"150.95.255.38","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/cisco"},{"hostname":"e-devlet-platform.vip","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"e-devlet","name":"e-Devlet","url":"https://domainspoof.com/brands/e-devlet"}],"dns":"resolved","resolved":["104.21.69.29","172.67.203.49","2606:4700:3033::ac43:cb31","2606:4700:3034::6815:451d"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “e-devlet”, a name we match for e-Devlet, listed by USOM","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"e-devlet.gov.tr","spelling":"combo","match":"name","token":"e-devlet","found_by":"zone_file","listings":[{"kind":"reported","source":"usom","source_name":"USOM","host":"e-devlet-platform.vip","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/e-devlet"},{"hostname":"e-devlet-tr.vip","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"e-devlet","name":"e-Devlet","url":"https://domainspoof.com/brands/e-devlet"}],"dns":"resolved","resolved":["104.21.56.224","172.67.156.35","2606:4700:3031::6815:38e0","2606:4700:3035::ac43:9c23"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “e-devlet”, a name we match for e-Devlet, listed by USOM","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"e-devlet.gov.tr","spelling":"combo","match":"name","token":"e-devlet","found_by":"zone_file","listings":[{"kind":"reported","source":"usom","source_name":"USOM","host":"e-devlet-tr.vip","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/e-devlet"},{"hostname":"ehterscan.casa","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"etherscan","name":"Etherscan","url":"https://domainspoof.com/brands/etherscan"}],"dns":"no_address","resolved":[],"findings":[{"kind":"lookalike","summary":"Registered lookalike of etherscan.io (two letters swapped), listed by MetaMask","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"etherscan.io","spelling":"transposition","found_by":"zone_file","listings":[{"kind":"reported","source":"metamask","source_name":"MetaMask","host":"ehterscan.casa","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/etherscan"},{"hostname":"ember-linkedin-backend.xyz","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"linkedin","name":"LinkedIn","url":"https://domainspoof.com/brands/linkedin"}],"dns":"resolved","resolved":["150.95.255.38"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “linkedin”, a name we match for LinkedIn, resolved to 150.95.255.38, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"linkedin.com","spelling":"combo","match":"name","token":"linkedin","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"150.95.255.38","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/linkedin"},{"hostname":"enroll-kinetiq.xyz","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"kinetiq","name":"Kinetiq","url":"https://domainspoof.com/brands/kinetiq"}],"dns":"resolved","resolved":["104.21.57.204","172.67.192.50","2606:4700:3031::ac43:c032","2606:4700:3034::6815:39cc"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of kinetiq.xyz (the name with an added word), listed by MetaMask","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"kinetiq.xyz","spelling":"combo","found_by":"zone_file","listings":[{"kind":"reported","source":"metamask","source_name":"MetaMask","host":"enroll-kinetiq.xyz","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/kinetiq"},{"hostname":"enter-flarenetworks.one","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"flare-network","name":"Flare Network","url":"https://domainspoof.com/brands/flare-network"}],"dns":"resolved","resolved":["104.21.46.43","172.67.223.157","2606:4700:3030::ac43:df9d","2606:4700:3035::6815:2e2b"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “flarenetworks”, a name we match for Flare Network, listed by MetaMask","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"flare.network","spelling":"combo","match":"name","token":"flarenetworks","found_by":"zone_file","listings":[{"kind":"reported","source":"metamask","source_name":"MetaMask","host":"enter-flarenetworks.one","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/flare-network"},{"hostname":"entraid.online","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"microsoft","name":"Microsoft","url":"https://domainspoof.com/brands/microsoft"}],"dns":"resolved","resolved":["2.59.170.20","104.219.250.37"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “entraid”, a name we match for Microsoft, resolved to 2.59.170.20, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"microsoft.com","spelling":"combo","match":"name","token":"entraid","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"2.59.170.20","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/microsoft"},{"hostname":"esxi-appdynamics.xyz","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"cisco","name":"Cisco","url":"https://domainspoof.com/brands/cisco"}],"dns":"resolved","resolved":["150.95.255.38"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “appdynamics”, a name we match for Cisco, resolved to 150.95.255.38, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"cisco.com","spelling":"combo","match":"name","token":"appdynamics","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"150.95.255.38","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/cisco"},{"hostname":"ethcnafnd.shop","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"ethena","name":"Ethena","url":"https://domainspoof.com/brands/ethena"}],"dns":"resolved","resolved":["104.21.93.247","172.67.216.229","2606:4700:3033::ac43:d8e5","2606:4700:3037::6815:5df7"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of ethena.fi (a changed character), listed by MetaMask","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"ethena.fi","spelling":"replacement","found_by":"zone_file","listings":[{"kind":"reported","source":"metamask","source_name":"MetaMask","host":"ethcnafnd.shop","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/ethena"},{"hostname":"ethenafi.pro","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"ethena","name":"Ethena","url":"https://domainspoof.com/brands/ethena"}],"dns":"resolved","resolved":["104.21.31.239","172.67.180.204","2606:4700:3031::6815:1fef","2606:4700:3032::ac43:b4cc"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “ethenafi”, a name we match for Ethena, listed by MetaMask","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"ethena.fi","spelling":"combo","match":"name","token":"ethenafi","found_by":"zone_file","listings":[{"kind":"reported","source":"metamask","source_name":"MetaMask","host":"ethenafi.pro","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/ethena"},{"hostname":"ethereum-global-happiness.xyz","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"ethereum","name":"Ethereum","url":"https://domainspoof.com/brands/ethereum"}],"dns":"resolved","resolved":["150.95.255.38"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “ethereum”, a name we match for Ethereum, resolved to 150.95.255.38, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"ethereum.org","spelling":"combo","match":"name","token":"ethereum","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"150.95.255.38","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/ethereum"},{"hostname":"ethereum-portal.xyz","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"ethereum","name":"Ethereum","url":"https://domainspoof.com/brands/ethereum"}],"dns":"resolved","resolved":["150.95.255.38"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “ethereum”, a name we match for Ethereum, resolved to 150.95.255.38, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"ethereum.org","spelling":"combo","match":"name","token":"ethereum","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"150.95.255.38","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/ethereum"},{"hostname":"ethereum-unity.xyz","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"ethereum","name":"Ethereum","url":"https://domainspoof.com/brands/ethereum"}],"dns":"resolved","resolved":["150.95.255.38"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “ethereum”, a name we match for Ethereum, resolved to 150.95.255.38, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"ethereum.org","spelling":"combo","match":"name","token":"ethereum","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"150.95.255.38","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/ethereum"},{"hostname":"ethereumwallet.one","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"ethereum","name":"Ethereum","url":"https://domainspoof.com/brands/ethereum"}],"dns":"resolved","resolved":["91.195.240.94"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “ethereum”, a name we match for Ethereum, listed by MetaMask","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"ethereum.org","spelling":"combo","match":"name","token":"ethereum","found_by":"zone_file","listings":[{"kind":"reported","source":"metamask","source_name":"MetaMask","host":"ethereumwallet.one","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/ethereum"},{"hostname":"etherfi.biz","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"ether-fi","name":"ether.fi","url":"https://domainspoof.com/brands/ether-fi"}],"dns":"resolved","resolved":["104.21.13.243","172.67.133.132","2606:4700:3030::6815:df3","2606:4700:3037::ac43:8584"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “etherfi”, a name we match for ether.fi, listed by MetaMask","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"ether.fi","spelling":"combo","match":"name","token":"etherfi","found_by":"zone_file","listings":[{"kind":"reported","source":"metamask","source_name":"MetaMask","host":"etherfi.biz","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/ether-fi"},{"hostname":"etherfi.ink","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"ether-fi","name":"ether.fi","url":"https://domainspoof.com/brands/ether-fi"}],"dns":"no_address","resolved":[],"findings":[{"kind":"lookalike","summary":"Registered domain containing “etherfi”, a name we match for ether.fi, listed by MetaMask, and reported by PhishDestroy","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"ether.fi","spelling":"combo","match":"name","token":"etherfi","found_by":"zone_file","listings":[{"kind":"reported","source":"metamask","source_name":"MetaMask","host":"etherfi.ink","flagged_at":"2026-11-06T00:41:47Z"},{"kind":"reported","source":"phishdestroy","source_name":"PhishDestroy","host":"app.etherfi.ink","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/ether-fi"},{"hostname":"etherfi.one","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"ether-fi","name":"ether.fi","url":"https://domainspoof.com/brands/ether-fi"}],"dns":"resolved","resolved":["104.21.58.52","172.67.201.18","2606:4700:3030::6815:3a34","2606:4700:3036::ac43:c912"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “etherfi”, a name we match for ether.fi, listed by MetaMask","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"ether.fi","spelling":"combo","match":"name","token":"etherfi","found_by":"zone_file","listings":[{"kind":"reported","source":"metamask","source_name":"MetaMask","host":"etherfi.one","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/ether-fi"},{"hostname":"etherfi.online","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"ether-fi","name":"ether.fi","url":"https://domainspoof.com/brands/ether-fi"}],"dns":"resolved","resolved":["104.21.45.41","172.67.209.105","2606:4700:3031::ac43:d169","2606:4700:3036::6815:2d29"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “etherfi”, a name we match for ether.fi, listed by MetaMask","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"ether.fi","spelling":"combo","match":"name","token":"etherfi","found_by":"zone_file","listings":[{"kind":"reported","source":"metamask","source_name":"MetaMask","host":"etherfi.online","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/ether-fi"},{"hostname":"facebook-jetty-graphic.xyz","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"facebook","name":"Facebook","url":"https://domainspoof.com/brands/facebook"}],"dns":"resolved","resolved":["150.95.255.38"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “facebook”, a name we match for Facebook, resolved to 150.95.255.38, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"facebook.com","spelling":"combo","match":"name","token":"facebook","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"150.95.255.38","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/facebook"},{"hostname":"facebookmails.casa","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"facebook","name":"Facebook","url":"https://domainspoof.com/brands/facebook"}],"dns":"resolved","resolved":["172.232.24.161","172.232.24.235","172.234.25.42"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of facebook.com (an added character), resolved to 172.232.24.161, where reported phishing was found in the 48 hours before, and resolved to 172.232.24.235, where reported phishing was found in the 48 hours before, and resolved to 172.234.25.42, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"facebook.com","spelling":"insertion","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"172.232.24.161","flagged_at":"2026-11-06T00:41:47Z"},{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"172.232.24.235","flagged_at":"2026-11-06T00:41:47Z"},{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"172.234.25.42","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/facebook"},{"hostname":"faceit-stats.men","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"faceit","name":"FACEIT","url":"https://domainspoof.com/brands/faceit"}],"dns":"resolved","resolved":["212.92.104.9"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “faceit”, a name we match for FACEIT, resolved to 212.92.104.9, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"faceit.com","spelling":"combo","match":"name","token":"faceit","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"212.92.104.9","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/faceit"},{"hostname":"faceit-verif.one","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"faceit","name":"FACEIT","url":"https://domainspoof.com/brands/faceit"}],"dns":"resolved","resolved":["62.60.226.75"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “faceit”, a name we match for FACEIT, resolved to 62.60.226.75, where reported phishing was found in the 48 hours before, and resolved to 62.60.226.75 on Spamhaus DROP","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"faceit.com","spelling":"combo","match":"name","token":"faceit","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"62.60.226.75","flagged_at":"2026-11-06T00:41:47Z"},{"kind":"address","source":"spamhaus_drop","list_name":"Spamhaus DROP","address":"62.60.226.75","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/faceit"},{"hostname":"fassets.biz","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"flare-network","name":"Flare Network","url":"https://domainspoof.com/brands/flare-network"}],"dns":"resolved","resolved":["104.21.88.17","172.67.150.34","2606:4700:3031::6815:5811","2606:4700:3032::ac43:9622"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “fassets”, a name we match for Flare Network, listed by MetaMask, and reported by PhishDestroy","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"flare.network","spelling":"combo","match":"name","token":"fassets","found_by":"zone_file","listings":[{"kind":"reported","source":"metamask","source_name":"MetaMask","host":"fassets.biz","flagged_at":"2026-11-06T00:41:47Z"},{"kind":"reported","source":"phishdestroy","source_name":"PhishDestroy","host":"fassets.biz","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/flare-network"},{"hostname":"filter-microsoft-css.xyz","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"microsoft","name":"Microsoft","url":"https://domainspoof.com/brands/microsoft"}],"dns":"resolved","resolved":["150.95.255.38"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “microsoft”, a name we match for Microsoft, resolved to 150.95.255.38, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"microsoft.com","spelling":"combo","match":"name","token":"microsoft","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"150.95.255.38","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/microsoft"},{"hostname":"financial-services-nexi.biz","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"nexi","name":"Nexi","url":"https://domainspoof.com/brands/nexi"}],"dns":"resolved","resolved":["195.110.124.133"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of nexi.it (the name with an added word), resolved to 195.110.124.133, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"nexi.it","spelling":"combo","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"195.110.124.133","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/nexi"},{"hostname":"flarefoundation.ink","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"flare-network","name":"Flare Network","url":"https://domainspoof.com/brands/flare-network"}],"dns":"resolved","resolved":["104.21.71.63","172.67.170.1","2606:4700:3034::6815:473f","2606:4700:3034::ac43:aa01"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “flarefoundation”, a name we match for Flare Network, listed by MetaMask","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"flare.network","spelling":"combo","match":"name","token":"flarefoundation","found_by":"zone_file","listings":[{"kind":"reported","source":"metamask","source_name":"MetaMask","host":"flarefoundation.ink","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/flare-network"},{"hostname":"flarenetwork.events","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"flare-network","name":"Flare Network","url":"https://domainspoof.com/brands/flare-network"}],"dns":"resolved","resolved":["104.21.42.5","172.67.197.224","2606:4700:3035::ac43:c5e0","2606:4700:3037::6815:2a05"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “flarenetwork”, a name we match for Flare Network, listed by MetaMask","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"flare.network","spelling":"combo","match":"name","token":"flarenetwork","found_by":"zone_file","listings":[{"kind":"reported","source":"metamask","source_name":"MetaMask","host":"flarenetwork.events","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/flare-network"},{"hostname":"flarenetwork.one","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"flare-network","name":"Flare Network","url":"https://domainspoof.com/brands/flare-network"}],"dns":"resolved","resolved":["104.21.16.122","172.67.212.122","2606:4700:3030::ac43:d47a","2606:4700:3031::6815:107a"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “flarenetwork”, a name we match for Flare Network, listed by MetaMask","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"flare.network","spelling":"combo","match":"name","token":"flarenetwork","found_by":"zone_file","listings":[{"kind":"reported","source":"metamask","source_name":"MetaMask","host":"flarenetwork.one","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/flare-network"},{"hostname":"flarenetwork.vip","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"flare-network","name":"Flare Network","url":"https://domainspoof.com/brands/flare-network"}],"dns":"resolved","resolved":["104.21.47.42","172.67.144.113","2606:4700:3031::6815:2f2a","2606:4700:3036::ac43:9071"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “flarenetwork”, a name we match for Flare Network, listed by MetaMask","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"flare.network","spelling":"combo","match":"name","token":"flarenetwork","found_by":"zone_file","listings":[{"kind":"reported","source":"metamask","source_name":"MetaMask","host":"flarenetwork.vip","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/flare-network"},{"hostname":"flarenetworks.ink","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"flare-network","name":"Flare Network","url":"https://domainspoof.com/brands/flare-network"}],"dns":"resolved","resolved":["104.21.73.154","172.67.190.152","2606:4700:3032::ac43:be98","2606:4700:3036::6815:499a"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “flarenetworks”, a name we match for Flare Network, listed by MetaMask","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"flare.network","spelling":"combo","match":"name","token":"flarenetworks","found_by":"zone_file","listings":[{"kind":"reported","source":"metamask","source_name":"MetaMask","host":"flarenetworks.ink","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/flare-network"},{"hostname":"flarenetworks.one","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"flare-network","name":"Flare Network","url":"https://domainspoof.com/brands/flare-network"}],"dns":"resolved","resolved":["104.21.82.112","172.67.200.174","2606:4700:3031::6815:5270","2606:4700:3034::ac43:c8ae"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “flarenetworks”, a name we match for Flare Network, listed by MetaMask, and reported by PhishDestroy","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"flare.network","spelling":"combo","match":"name","token":"flarenetworks","found_by":"zone_file","listings":[{"kind":"reported","source":"metamask","source_name":"MetaMask","host":"flarenetworks.one","flagged_at":"2026-11-06T00:41:47Z"},{"kind":"reported","source":"phishdestroy","source_name":"PhishDestroy","host":"flarenetworks.one","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/flare-network"},{"hostname":"fortnite-checker.biz","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"epic-games","name":"Epic Games","url":"https://domainspoof.com/brands/epic-games"}],"dns":"resolved","resolved":["193.187.110.10"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “fortnite”, a name we match for Epic Games, reported by PhishDestroy, and resolved to 193.187.110.10, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"epicgames.com","spelling":"combo","match":"name","token":"fortnite","found_by":"zone_file","listings":[{"kind":"reported","source":"phishdestroy","source_name":"PhishDestroy","host":"fortnite-checker.biz","flagged_at":"2026-11-06T00:41:47Z"},{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"193.187.110.10","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/epic-games"},{"hostname":"fortnite.cat","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"epic-games","name":"Epic Games","url":"https://domainspoof.com/brands/epic-games"}],"dns":"resolved","resolved":["81.88.48.71"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of fortnite.com (same name, other ending), resolved to 81.88.48.71, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"fortnite.com","spelling":"tld","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"81.88.48.71","flagged_at":"2026-11-06T00:41:47Z"}]}],"url":"https://domainspoof.com/brands/epic-games"},{"hostname":"foundation-ethena.finance","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"ethena","name":"Ethena","url":"https://domainspoof.com/brands/ethena"}],"dns":"resolved","resolved":["104.21.56.116","172.67.184.226","2606:4700:3033::6815:3874","2606:4700:3037::ac43:b8e2"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “ethena”, a name we match for Ethena, listed by MetaMask","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"ethena.fi","spelling":"combo","match":"name","token":"ethena","found_by":"zone_file","listings":[{"kind":"reported","source":"metamask","source_name":"MetaMask","host":"foundation-ethena.finance","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/ethena"},{"hostname":"frontier-megaeth.xyz","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"megaeth","name":"MegaETH","url":"https://domainspoof.com/brands/megaeth"}],"dns":"resolved","resolved":["104.21.89.247","172.67.166.46","2606:4700:3033::6815:59f7","2606:4700:3036::ac43:a62e"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “megaeth”, a name we match for MegaETH, reported by PhishDestroy","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"megaeth.com","spelling":"combo","match":"name","token":"megaeth","found_by":"zone_file","listings":[{"kind":"reported","source":"phishdestroy","source_name":"PhishDestroy","host":"frontier-megaeth.xyz","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/megaeth"},{"hostname":"generalmotors.now","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"general-motors","name":"General Motors","url":"https://domainspoof.com/brands/general-motors"}],"dns":"resolved","resolved":["2.59.170.20","104.219.250.37"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “generalmotors”, a name we match for General Motors, resolved to 2.59.170.20, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"holden.co.nz","spelling":"combo","match":"name","token":"generalmotors","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"2.59.170.20","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/general-motors"},{"hostname":"github-cloud.xyz","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"github","name":"GitHub","url":"https://domainspoof.com/brands/github"}],"dns":"resolved","resolved":["150.95.255.38"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “github”, a name we match for GitHub, resolved to 150.95.255.38, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"github.com","spelling":"combo","match":"name","token":"github","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"150.95.255.38","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/github"},{"hostname":"github-graphql.xyz","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"github","name":"GitHub","url":"https://domainspoof.com/brands/github"}],"dns":"resolved","resolved":["150.95.255.38"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “github”, a name we match for GitHub, resolved to 150.95.255.38, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"github.com","spelling":"combo","match":"name","token":"github","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"150.95.255.38","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/github"},{"hostname":"github-secret.xyz","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"github","name":"GitHub","url":"https://domainspoof.com/brands/github"}],"dns":"resolved","resolved":["150.95.255.38"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “github”, a name we match for GitHub, resolved to 150.95.255.38, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"github.com","spelling":"combo","match":"name","token":"github","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"150.95.255.38","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/github"},{"hostname":"github-session-hard.xyz","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"github","name":"GitHub","url":"https://domainspoof.com/brands/github"}],"dns":"resolved","resolved":["150.95.255.38"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “github”, a name we match for GitHub, resolved to 150.95.255.38, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"github.com","spelling":"combo","match":"name","token":"github","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"150.95.255.38","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/github"},{"hostname":"github-session-stake.xyz","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"github","name":"GitHub","url":"https://domainspoof.com/brands/github"}],"dns":"resolved","resolved":["150.95.255.38"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “github”, a name we match for GitHub, resolved to 150.95.255.38, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"github.com","spelling":"combo","match":"name","token":"github","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"150.95.255.38","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/github"},{"hostname":"github-subscription-firewall.xyz","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"github","name":"GitHub","url":"https://domainspoof.com/brands/github"}],"dns":"resolved","resolved":["150.95.255.38"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “github”, a name we match for GitHub, resolved to 150.95.255.38, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"github.com","spelling":"combo","match":"name","token":"github","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"150.95.255.38","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/github"},{"hostname":"gitlab-app-subscribe.xyz","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"gitlab","name":"GitLab","url":"https://domainspoof.com/brands/gitlab"}],"dns":"resolved","resolved":["150.95.255.38"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “gitlab”, a name we match for GitLab, resolved to 150.95.255.38, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"gitlab.com","spelling":"combo","match":"name","token":"gitlab","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"150.95.255.38","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/gitlab"},{"hostname":"gitlab-artifact.xyz","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"gitlab","name":"GitLab","url":"https://domainspoof.com/brands/gitlab"}],"dns":"resolved","resolved":["150.95.255.38"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “gitlab”, a name we match for GitLab, resolved to 150.95.255.38, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"gitlab.com","spelling":"combo","match":"name","token":"gitlab","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"150.95.255.38","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/gitlab"},{"hostname":"gitlab-audit-dashboard.xyz","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"gitlab","name":"GitLab","url":"https://domainspoof.com/brands/gitlab"}],"dns":"resolved","resolved":["150.95.255.38"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “gitlab”, a name we match for GitLab, resolved to 150.95.255.38, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"gitlab.com","spelling":"combo","match":"name","token":"gitlab","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"150.95.255.38","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/gitlab"},{"hostname":"gitlab-github.xyz","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"github","name":"GitHub","url":"https://domainspoof.com/brands/github"},{"id":"gitlab","name":"GitLab","url":"https://domainspoof.com/brands/gitlab"}],"dns":"resolved","resolved":["150.95.255.38"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “github”, a name we match for GitHub, resolved to 150.95.255.38, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"github.com","spelling":"combo","match":"name","token":"github","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"150.95.255.38","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"},{"kind":"lookalike","summary":"Registered domain containing “gitlab”, a name we match for GitLab, resolved to 150.95.255.38, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"github.com","spelling":"combo","match":"name","token":"gitlab","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"150.95.255.38","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/github"},{"hostname":"gitlab-park-project.xyz","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"gitlab","name":"GitLab","url":"https://domainspoof.com/brands/gitlab"}],"dns":"resolved","resolved":["150.95.255.38"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “gitlab”, a name we match for GitLab, resolved to 150.95.255.38, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"gitlab.com","spelling":"combo","match":"name","token":"gitlab","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"150.95.255.38","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/gitlab"},{"hostname":"gitlab-park-snippet.xyz","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"gitlab","name":"GitLab","url":"https://domainspoof.com/brands/gitlab"}],"dns":"resolved","resolved":["150.95.255.38"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “gitlab”, a name we match for GitLab, resolved to 150.95.255.38, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"gitlab.com","spelling":"combo","match":"name","token":"gitlab","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"150.95.255.38","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/gitlab"},{"hostname":"gitlab-particle-portal.xyz","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"gitlab","name":"GitLab","url":"https://domainspoof.com/brands/gitlab"}],"dns":"resolved","resolved":["150.95.255.38"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “gitlab”, a name we match for GitLab, resolved to 150.95.255.38, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"gitlab.com","spelling":"combo","match":"name","token":"gitlab","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"150.95.255.38","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/gitlab"},{"hostname":"gitlab-pascal-people.xyz","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"gitlab","name":"GitLab","url":"https://domainspoof.com/brands/gitlab"}],"dns":"resolved","resolved":["150.95.255.38"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “gitlab”, a name we match for GitLab, resolved to 150.95.255.38, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"gitlab.com","spelling":"combo","match":"name","token":"gitlab","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"150.95.255.38","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/gitlab"},{"hostname":"gitlab-policy-portal.xyz","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"gitlab","name":"GitLab","url":"https://domainspoof.com/brands/gitlab"}],"dns":"resolved","resolved":["150.95.255.38"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “gitlab”, a name we match for GitLab, resolved to 150.95.255.38, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"gitlab.com","spelling":"combo","match":"name","token":"gitlab","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"150.95.255.38","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/gitlab"},{"hostname":"gitlab-portability-portal.xyz","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"gitlab","name":"GitLab","url":"https://domainspoof.com/brands/gitlab"}],"dns":"resolved","resolved":["150.95.255.38"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “gitlab”, a name we match for GitLab, resolved to 150.95.255.38, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"gitlab.com","spelling":"combo","match":"name","token":"gitlab","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"150.95.255.38","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/gitlab"},{"hostname":"gitlab-portal-promote.xyz","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"gitlab","name":"GitLab","url":"https://domainspoof.com/brands/gitlab"}],"dns":"resolved","resolved":["150.95.255.38"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “gitlab”, a name we match for GitLab, resolved to 150.95.255.38, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"gitlab.com","spelling":"combo","match":"name","token":"gitlab","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"150.95.255.38","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/gitlab"},{"hostname":"gitlab-portal-roi.xyz","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"gitlab","name":"GitLab","url":"https://domainspoof.com/brands/gitlab"}],"dns":"resolved","resolved":["150.95.255.38"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “gitlab”, a name we match for GitLab, resolved to 150.95.255.38, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"gitlab.com","spelling":"combo","match":"name","token":"gitlab","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"150.95.255.38","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/gitlab"},{"hostname":"gitlab-portal-story.xyz","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"gitlab","name":"GitLab","url":"https://domainspoof.com/brands/gitlab"}],"dns":"resolved","resolved":["150.95.255.38"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “gitlab”, a name we match for GitLab, resolved to 150.95.255.38, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"gitlab.com","spelling":"combo","match":"name","token":"gitlab","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"150.95.255.38","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/gitlab"},{"hostname":"gitlab-profit-project.xyz","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"gitlab","name":"GitLab","url":"https://domainspoof.com/brands/gitlab"}],"dns":"resolved","resolved":["150.95.255.38"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “gitlab”, a name we match for GitLab, resolved to 150.95.255.38, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"gitlab.com","spelling":"combo","match":"name","token":"gitlab","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"150.95.255.38","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/gitlab"},{"hostname":"gitlab-project-bulma.xyz","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"gitlab","name":"GitLab","url":"https://domainspoof.com/brands/gitlab"}],"dns":"resolved","resolved":["150.95.255.38"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “gitlab”, a name we match for GitLab, resolved to 150.95.255.38, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"gitlab.com","spelling":"combo","match":"name","token":"gitlab","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"150.95.255.38","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/gitlab"},{"hostname":"gitlab-project-envoy.xyz","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"gitlab","name":"GitLab","url":"https://domainspoof.com/brands/gitlab"}],"dns":"resolved","resolved":["150.95.255.38"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “gitlab”, a name we match for GitLab, resolved to 150.95.255.38, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"gitlab.com","spelling":"combo","match":"name","token":"gitlab","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"150.95.255.38","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/gitlab"},{"hostname":"gitlab-project-pascal.xyz","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"gitlab","name":"GitLab","url":"https://domainspoof.com/brands/gitlab"}],"dns":"resolved","resolved":["150.95.255.38"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “gitlab”, a name we match for GitLab, resolved to 150.95.255.38, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"gitlab.com","spelling":"combo","match":"name","token":"gitlab","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"150.95.255.38","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/gitlab"},{"hostname":"gitlab-project-quality.xyz","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"gitlab","name":"GitLab","url":"https://domainspoof.com/brands/gitlab"}],"dns":"resolved","resolved":["150.95.255.38"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “gitlab”, a name we match for GitLab, resolved to 150.95.255.38, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"gitlab.com","spelling":"combo","match":"name","token":"gitlab","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"150.95.255.38","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/gitlab"},{"hostname":"gitlab-project-remarketing.xyz","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"gitlab","name":"GitLab","url":"https://domainspoof.com/brands/gitlab"}],"dns":"resolved","resolved":["150.95.255.38"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “gitlab”, a name we match for GitLab, resolved to 150.95.255.38, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"gitlab.com","spelling":"combo","match":"name","token":"gitlab","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"150.95.255.38","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/gitlab"},{"hostname":"gitlab-project-strategy.xyz","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"gitlab","name":"GitLab","url":"https://domainspoof.com/brands/gitlab"}],"dns":"resolved","resolved":["150.95.255.38"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “gitlab”, a name we match for GitLab, resolved to 150.95.255.38, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"gitlab.com","spelling":"combo","match":"name","token":"gitlab","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"150.95.255.38","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/gitlab"},{"hostname":"gitlab-prometheus-project.xyz","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"gitlab","name":"GitLab","url":"https://domainspoof.com/brands/gitlab"}],"dns":"resolved","resolved":["150.95.255.38"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “gitlab”, a name we match for GitLab, resolved to 150.95.255.38, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"gitlab.com","spelling":"combo","match":"name","token":"gitlab","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"150.95.255.38","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/gitlab"},{"hostname":"gitlab-prometheus-snippet.xyz","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"gitlab","name":"GitLab","url":"https://domainspoof.com/brands/gitlab"}],"dns":"resolved","resolved":["150.95.255.38"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “gitlab”, a name we match for GitLab, resolved to 150.95.255.38, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"gitlab.com","spelling":"combo","match":"name","token":"gitlab","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"150.95.255.38","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/gitlab"},{"hostname":"gitlab-pulumi-project.xyz","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"gitlab","name":"GitLab","url":"https://domainspoof.com/brands/gitlab"}],"dns":"resolved","resolved":["150.95.255.38"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “gitlab”, a name we match for GitLab, resolved to 150.95.255.38, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"gitlab.com","spelling":"combo","match":"name","token":"gitlab","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"150.95.255.38","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/gitlab"},{"hostname":"gitlab-quality-portal.xyz","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"gitlab","name":"GitLab","url":"https://domainspoof.com/brands/gitlab"}],"dns":"resolved","resolved":["150.95.255.38"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “gitlab”, a name we match for GitLab, resolved to 150.95.255.38, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"gitlab.com","spelling":"combo","match":"name","token":"gitlab","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"150.95.255.38","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/gitlab"},{"hostname":"gitlab-quality-project.xyz","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"gitlab","name":"GitLab","url":"https://domainspoof.com/brands/gitlab"}],"dns":"resolved","resolved":["150.95.255.38"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “gitlab”, a name we match for GitLab, resolved to 150.95.255.38, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"gitlab.com","spelling":"combo","match":"name","token":"gitlab","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"150.95.255.38","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/gitlab"},{"hostname":"gitlab-roi-project.xyz","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"gitlab","name":"GitLab","url":"https://domainspoof.com/brands/gitlab"}],"dns":"resolved","resolved":["150.95.255.38"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “gitlab”, a name we match for GitLab, resolved to 150.95.255.38, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"gitlab.com","spelling":"combo","match":"name","token":"gitlab","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"150.95.255.38","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/gitlab"},{"hostname":"gitlab-role-private.xyz","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"gitlab","name":"GitLab","url":"https://domainspoof.com/brands/gitlab"}],"dns":"resolved","resolved":["150.95.255.38"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “gitlab”, a name we match for GitLab, resolved to 150.95.255.38, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"gitlab.com","spelling":"combo","match":"name","token":"gitlab","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"150.95.255.38","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/gitlab"},{"hostname":"gitlab-score-portal.xyz","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"gitlab","name":"GitLab","url":"https://domainspoof.com/brands/gitlab"}],"dns":"resolved","resolved":["150.95.255.38"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “gitlab”, a name we match for GitLab, resolved to 150.95.255.38, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"gitlab.com","spelling":"combo","match":"name","token":"gitlab","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"150.95.255.38","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/gitlab"},{"hostname":"gitlab-sem-pascal.xyz","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"gitlab","name":"GitLab","url":"https://domainspoof.com/brands/gitlab"}],"dns":"resolved","resolved":["150.95.255.38"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “gitlab”, a name we match for GitLab, resolved to 150.95.255.38, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"gitlab.com","spelling":"combo","match":"name","token":"gitlab","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"150.95.255.38","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/gitlab"},{"hostname":"gitlab-sem-proxy-project.xyz","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"gitlab","name":"GitLab","url":"https://domainspoof.com/brands/gitlab"}],"dns":"resolved","resolved":["150.95.255.38"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “gitlab”, a name we match for GitLab, resolved to 150.95.255.38, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"gitlab.com","spelling":"combo","match":"name","token":"gitlab","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"150.95.255.38","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/gitlab"},{"hostname":"gitlab-shard-portal-pascal.xyz","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"gitlab","name":"GitLab","url":"https://domainspoof.com/brands/gitlab"}],"dns":"resolved","resolved":["150.95.255.38"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “gitlab”, a name we match for GitLab, resolved to 150.95.255.38, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"gitlab.com","spelling":"combo","match":"name","token":"gitlab","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"150.95.255.38","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/gitlab"},{"hostname":"gitlab-shard-super-project.xyz","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"gitlab","name":"GitLab","url":"https://domainspoof.com/brands/gitlab"}],"dns":"resolved","resolved":["150.95.255.38"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “gitlab”, a name we match for GitLab, resolved to 150.95.255.38, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"gitlab.com","spelling":"combo","match":"name","token":"gitlab","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"150.95.255.38","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/gitlab"},{"hostname":"gitlab-shell-robot.xyz","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"gitlab","name":"GitLab","url":"https://domainspoof.com/brands/gitlab"}],"dns":"resolved","resolved":["150.95.255.38"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “gitlab”, a name we match for GitLab, resolved to 150.95.255.38, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"gitlab.com","spelling":"combo","match":"name","token":"gitlab","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"150.95.255.38","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/gitlab"},{"hostname":"gitlab-snippet-virtualbox.xyz","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"gitlab","name":"GitLab","url":"https://domainspoof.com/brands/gitlab"}],"dns":"resolved","resolved":["150.95.255.38"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “gitlab”, a name we match for GitLab, resolved to 150.95.255.38, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"gitlab.com","spelling":"combo","match":"name","token":"gitlab","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"150.95.255.38","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/gitlab"},{"hostname":"gitlab-storage-invision.xyz","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"gitlab","name":"GitLab","url":"https://domainspoof.com/brands/gitlab"}],"dns":"resolved","resolved":["150.95.255.38"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “gitlab”, a name we match for GitLab, resolved to 150.95.255.38, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"gitlab.com","spelling":"combo","match":"name","token":"gitlab","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"150.95.255.38","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/gitlab"},{"hostname":"gitlab-victory.xyz","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"gitlab","name":"GitLab","url":"https://domainspoof.com/brands/gitlab"}],"dns":"resolved","resolved":["150.95.255.38"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “gitlab”, a name we match for GitLab, resolved to 150.95.255.38, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"gitlab.com","spelling":"combo","match":"name","token":"gitlab","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"150.95.255.38","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/gitlab"},{"hostname":"gitlabpro.work","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"gitlab","name":"GitLab","url":"https://domainspoof.com/brands/gitlab"}],"dns":"resolved","resolved":["2.59.170.20","104.219.250.37"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “gitlab”, a name we match for GitLab, resolved to 2.59.170.20, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"gitlab.com","spelling":"combo","match":"name","token":"gitlab","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"2.59.170.20","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/gitlab"},{"hostname":"global-openai.xyz","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"openai","name":"OpenAI","url":"https://domainspoof.com/brands/openai"}],"dns":"resolved","resolved":["150.95.255.38"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “openai”, a name we match for OpenAI, resolved to 150.95.255.38, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"openai.com","spelling":"combo","match":"name","token":"openai","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"150.95.255.38","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/openai"},{"hostname":"gmoaozora.biz","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"gmo-aozora-net-bank","name":"GMO Aozora Net Bank","url":"https://domainspoof.com/brands/gmo-aozora-net-bank"}],"dns":"resolved","resolved":["150.95.255.38"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “gmoaozora”, a name we match for GMO Aozora Net Bank, resolved to 150.95.255.38, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"gmo-aozora.com","spelling":"combo","match":"name","token":"gmoaozora","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"150.95.255.38","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/gmo-aozora-net-bank"},{"hostname":"goodtogo.now","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"good-to-go","name":"Good To Go","url":"https://domainspoof.com/brands/good-to-go"}],"dns":"resolved","resolved":["2.59.170.20","104.219.250.37"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “goodtogo”, a name we match for Good To Go, resolved to 2.59.170.20, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"mygoodtogo.com","spelling":"combo","match":"name","token":"goodtogo","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"2.59.170.20","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/good-to-go"},{"hostname":"google-accessibility.xyz","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"google","name":"Google","url":"https://domainspoof.com/brands/google"}],"dns":"resolved","resolved":["150.95.255.38"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “google”, a name we match for Google, resolved to 150.95.255.38, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"google.com","spelling":"combo","match":"name","token":"google","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"150.95.255.38","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/google"},{"hostname":"google-status.xyz","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"google","name":"Google","url":"https://domainspoof.com/brands/google"}],"dns":"resolved","resolved":["150.95.255.38"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “google”, a name we match for Google, resolved to 150.95.255.38, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"google.com","spelling":"combo","match":"name","token":"google","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"150.95.255.38","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/google"},{"hostname":"googlemath.org","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"google","name":"Google","url":"https://domainspoof.com/brands/google"}],"dns":"resolved","resolved":["172.241.213.98"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “google”, a name we match for Google, resolved to 172.241.213.98, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"google.com","spelling":"combo","match":"name","token":"google","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"172.241.213.98","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/google"},{"hostname":"googlemeetings2day.live","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"google","name":"Google","url":"https://domainspoof.com/brands/google"}],"dns":"resolved","resolved":["104.225.130.131"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “google”, a name we match for Google, reported by PhishDestroy, and resolved to 104.225.130.131, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"google.com","spelling":"combo","match":"name","token":"google","found_by":"zone_file","listings":[{"kind":"reported","source":"phishdestroy","source_name":"PhishDestroy","host":"googlemeetings2day.live","flagged_at":"2026-11-06T00:41:47Z"},{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"104.225.130.131","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/google"},{"hostname":"googletranslate.org","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"google","name":"Google","url":"https://domainspoof.com/brands/google"}],"dns":"resolved","resolved":["64.31.3.237"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “google”, a name we match for Google, resolved to 64.31.3.237, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"google.com","spelling":"combo","match":"name","token":"google","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"64.31.3.237","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/google"},{"hostname":"gover-ethena.app","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"ethena","name":"Ethena","url":"https://domainspoof.com/brands/ethena"}],"dns":"resolved","resolved":["104.21.91.174","172.67.176.223","2606:4700:3033::6815:5bae","2606:4700:3033::ac43:b0df"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “ethena”, a name we match for Ethena, listed by MetaMask","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"ethena.fi","spelling":"combo","match":"name","token":"ethena","found_by":"zone_file","listings":[{"kind":"reported","source":"metamask","source_name":"MetaMask","host":"gover-ethena.app","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/ethena"},{"hostname":"govern-ethena.app","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"ethena","name":"Ethena","url":"https://domainspoof.com/brands/ethena"}],"dns":"resolved","resolved":["104.21.38.215","172.67.139.80","2606:4700:3030::ac43:8b50","2606:4700:3032::6815:26d7"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “ethena”, a name we match for Ethena, listed by MetaMask","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"ethena.fi","spelling":"combo","match":"name","token":"ethena","found_by":"zone_file","listings":[{"kind":"reported","source":"metamask","source_name":"MetaMask","host":"govern-ethena.app","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/ethena"},{"hostname":"govern-ethena.finance","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"ethena","name":"Ethena","url":"https://domainspoof.com/brands/ethena"}],"dns":"resolved","resolved":["104.21.68.89","172.67.192.128","2606:4700:3031::6815:4459","2606:4700:3031::ac43:c080"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “ethena”, a name we match for Ethena, listed by MetaMask","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"ethena.fi","spelling":"combo","match":"name","token":"ethena","found_by":"zone_file","listings":[{"kind":"reported","source":"metamask","source_name":"MetaMask","host":"govern-ethena.finance","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/ethena"},{"hostname":"grafana-github.xyz","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"github","name":"GitHub","url":"https://domainspoof.com/brands/github"}],"dns":"resolved","resolved":["150.95.255.38"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “github”, a name we match for GitHub, resolved to 150.95.255.38, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"github.com","spelling":"combo","match":"name","token":"github","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"150.95.255.38","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/github"},{"hostname":"grokopedia.wiki","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"grok","name":"Grok","url":"https://domainspoof.com/brands/grok"}],"dns":"resolved","resolved":["2.59.170.20","104.219.250.37"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of grok.com (a changed character), resolved to 2.59.170.20, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"grok.com","spelling":"replacement","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"2.59.170.20","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/grok"},{"hostname":"grokpedia.club","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"grok","name":"Grok","url":"https://domainspoof.com/brands/grok"}],"dns":"resolved","resolved":["2.59.170.20","104.219.250.37"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of grok.com (a dropped letter), resolved to 2.59.170.20, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"grok.com","spelling":"omission","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"2.59.170.20","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/grok"},{"hostname":"grokpedia.design","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"grok","name":"Grok","url":"https://domainspoof.com/brands/grok"}],"dns":"resolved","resolved":["2.59.170.20","104.219.250.37"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of grok.com (a dropped letter), resolved to 2.59.170.20, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"grok.com","spelling":"omission","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"2.59.170.20","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/grok"},{"hostname":"grokpedia.fit","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"grok","name":"Grok","url":"https://domainspoof.com/brands/grok"}],"dns":"resolved","resolved":["2.59.170.20","104.219.250.37"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of grok.com (a dropped letter), resolved to 2.59.170.20, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"grok.com","spelling":"omission","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"2.59.170.20","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/grok"},{"hostname":"grokpedia.ink","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"grok","name":"Grok","url":"https://domainspoof.com/brands/grok"}],"dns":"resolved","resolved":["2.59.170.20","104.219.250.37"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of grok.com (a dropped letter), resolved to 2.59.170.20, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"grok.com","spelling":"omission","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"2.59.170.20","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/grok"},{"hostname":"grokpedia.work","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"grok","name":"Grok","url":"https://domainspoof.com/brands/grok"}],"dns":"resolved","resolved":["2.59.170.20","104.219.250.37"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of grok.com (a dropped letter), resolved to 2.59.170.20, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"grok.com","spelling":"omission","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"2.59.170.20","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/grok"},{"hostname":"group-splunk-scope.xyz","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"cisco","name":"Cisco","url":"https://domainspoof.com/brands/cisco"}],"dns":"resolved","resolved":["150.95.255.38"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “splunk”, a name we match for Cisco, resolved to 150.95.255.38, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"cisco.com","spelling":"combo","match":"name","token":"splunk","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"150.95.255.38","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/cisco"},{"hostname":"growth-objective-appdynamics.xyz","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"cisco","name":"Cisco","url":"https://domainspoof.com/brands/cisco"}],"dns":"resolved","resolved":["150.95.255.38"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “appdynamics”, a name we match for Cisco, resolved to 150.95.255.38, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"cisco.com","spelling":"combo","match":"name","token":"appdynamics","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"150.95.255.38","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/cisco"},{"hostname":"halloween-etherfi.app","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"ether-fi","name":"ether.fi","url":"https://domainspoof.com/brands/ether-fi"}],"dns":"resolved","resolved":["104.21.55.166","172.67.149.85","2606:4700:3030::ac43:9555","2606:4700:3034::6815:37a6"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “etherfi”, a name we match for ether.fi, listed by MetaMask","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"ether.fi","spelling":"combo","match":"name","token":"etherfi","found_by":"zone_file","listings":[{"kind":"reported","source":"metamask","source_name":"MetaMask","host":"halloween-etherfi.app","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/ether-fi"},{"hostname":"heavy-github-session.xyz","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"github","name":"GitHub","url":"https://domainspoof.com/brands/github"}],"dns":"resolved","resolved":["150.95.255.38"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “github”, a name we match for GitHub, resolved to 150.95.255.38, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"github.com","spelling":"combo","match":"name","token":"github","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"150.95.255.38","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/github"},{"hostname":"helidon-linkedin-angular.xyz","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"linkedin","name":"LinkedIn","url":"https://domainspoof.com/brands/linkedin"}],"dns":"resolved","resolved":["150.95.255.38"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “linkedin”, a name we match for LinkedIn, resolved to 150.95.255.38, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"linkedin.com","spelling":"combo","match":"name","token":"linkedin","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"150.95.255.38","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/linkedin"},{"hostname":"home-depot.life","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"home-depot","name":"Home Depot","url":"https://domainspoof.com/brands/home-depot"}],"dns":"resolved","resolved":["23.82.16.53"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “home-depot”, a name we match for Home Depot, resolved to 23.82.16.53, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"homedepot.com","spelling":"combo","match":"name","token":"home-depot","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"23.82.16.53","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/home-depot"},{"hostname":"hsbc-support.work","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"hsbc","name":"HSBC","url":"https://domainspoof.com/brands/hsbc"}],"dns":"resolved","resolved":["172.232.24.161","172.232.24.235","172.234.25.42"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of hsbc.com (the name with an added word), resolved to 172.232.24.161, where reported phishing was found in the 48 hours before, and resolved to 172.232.24.235, where reported phishing was found in the 48 hours before, and resolved to 172.234.25.42, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"hsbc.com","spelling":"combo","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"172.232.24.161","flagged_at":"2026-11-06T00:41:47Z"},{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"172.232.24.235","flagged_at":"2026-11-06T00:41:47Z"},{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"172.234.25.42","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/hsbc"},{"hostname":"hub-flarenetworks.xyz","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"flare-network","name":"Flare Network","url":"https://domainspoof.com/brands/flare-network"}],"dns":"resolved","resolved":["104.21.67.64","172.67.215.114","2606:4700:3031::ac43:d772","2606:4700:3033::6815:4340"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “flarenetworks”, a name we match for Flare Network, listed by MetaMask","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"flare.network","spelling":"combo","match":"name","token":"flarenetworks","found_by":"zone_file","listings":[{"kind":"reported","source":"metamask","source_name":"MetaMask","host":"hub-flarenetworks.xyz","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/flare-network"},{"hostname":"hyper-liquid.wiki","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"hyperliquid","name":"Hyperliquid","url":"https://domainspoof.com/brands/hyperliquid"}],"dns":"resolved","resolved":["153.52.255.111"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of hyperliquid.xyz (an added hyphen), resolved to 153.52.255.111, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"hyperliquid.xyz","spelling":"hyphen","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"153.52.255.111","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/hyperliquid"},{"hostname":"hyper1iquid.ink","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"hyperliquid","name":"Hyperliquid","url":"https://domainspoof.com/brands/hyperliquid"}],"dns":"resolved","resolved":["104.21.9.215","172.67.161.87","2606:4700:3031::6815:9d7","2606:4700:3037::ac43:a157"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of hyperliquid.xyz (similar-looking characters), listed by MetaMask","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"hyperliquid.xyz","spelling":"homoglyph","found_by":"zone_file","listings":[{"kind":"reported","source":"metamask","source_name":"MetaMask","host":"hyper1iquid.ink","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/hyperliquid"},{"hostname":"hyperilquid.ink","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"hyperliquid","name":"Hyperliquid","url":"https://domainspoof.com/brands/hyperliquid"}],"dns":"resolved","resolved":["104.21.23.57","172.67.209.59","2606:4700:3037::6815:1739","2606:4700:3037::ac43:d13b"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of hyperliquid.xyz (similar-looking characters), reported by PhishDestroy","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"hyperliquid.xyz","spelling":"homoglyph","found_by":"zone_file","listings":[{"kind":"reported","source":"phishdestroy","source_name":"PhishDestroy","host":"hyperilquid.ink","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/hyperliquid"},{"hostname":"hyperliquid-foundation.one","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"hyperliquid","name":"Hyperliquid","url":"https://domainspoof.com/brands/hyperliquid"}],"dns":"resolved","resolved":["104.21.29.118","172.67.148.248","2606:4700:3030::ac43:94f8","2606:4700:3032::6815:1d76"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “hyperliquid”, a name we match for Hyperliquid, reported by PhishDestroy","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"hyperliquid.xyz","spelling":"combo","match":"name","token":"hyperliquid","found_by":"zone_file","listings":[{"kind":"reported","source":"phishdestroy","source_name":"PhishDestroy","host":"claim.hyperliquid-foundation.one","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/hyperliquid"},{"hostname":"hyperliquid.com.co","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"hyperliquid","name":"Hyperliquid","url":"https://domainspoof.com/brands/hyperliquid"}],"dns":"resolved","resolved":["2.59.170.20","104.219.250.37"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of hyperliquid.xyz (same name, other ending), resolved to 2.59.170.20, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"hyperliquid.xyz","spelling":"tld","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"2.59.170.20","flagged_at":"2026-11-06T00:41:47Z"}]}],"url":"https://domainspoof.com/brands/hyperliquid"},{"hostname":"hyperliquid.gifts","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"hyperliquid","name":"Hyperliquid","url":"https://domainspoof.com/brands/hyperliquid"}],"dns":"no_address","resolved":[],"findings":[{"kind":"lookalike","summary":"Registered lookalike of hyperliquid.xyz (same name, other ending), reported by PhishDestroy","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"hyperliquid.xyz","spelling":"tld","found_by":"dns_sweep","listings":[{"kind":"reported","source":"phishdestroy","source_name":"PhishDestroy","host":"hyperliquid.gifts","flagged_at":"2026-11-06T00:41:47Z"}]}],"url":"https://domainspoof.com/brands/hyperliquid"},{"hostname":"hypreliquid.casa","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"hyperliquid","name":"Hyperliquid","url":"https://domainspoof.com/brands/hyperliquid"}],"dns":"no_address","resolved":[],"findings":[{"kind":"lookalike","summary":"Registered lookalike of hyperliquid.xyz (two letters swapped), listed by MetaMask","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"hyperliquid.xyz","spelling":"transposition","found_by":"zone_file","listings":[{"kind":"reported","source":"metamask","source_name":"MetaMask","host":"hypreliquid.casa","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/hyperliquid"},{"hostname":"icann-okta.org","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"okta","name":"Okta","url":"https://domainspoof.com/brands/okta"}],"dns":"resolved","resolved":["64.181.217.59"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “okta”, a name we match for Okta, resolved to 64.181.217.59, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"okta.com","spelling":"combo","match":"name","token":"okta","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"64.181.217.59","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/okta"},{"hostname":"icloud.net.co","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"apple","name":"Apple","url":"https://domainspoof.com/brands/apple"}],"dns":"resolved","resolved":["217.160.0.234","2001:8d8:100f:f000::2dd"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of icloud.com (same name, other ending), resolved to 217.160.0.234, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"icloud.com","spelling":"tld","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"217.160.0.234","flagged_at":"2026-11-06T00:41:47Z"}]}],"url":"https://domainspoof.com/brands/apple"},{"hostname":"ikea-family.info","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"ikea","name":"IKEA","url":"https://domainspoof.com/brands/ikea"}],"dns":"resolved","resolved":["23.82.16.54"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “ikea”, a name we match for IKEA, resolved to 23.82.16.54, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"ikea.com","spelling":"combo","match":"name","token":"ikea","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"23.82.16.54","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/ikea"},{"hostname":"image-microsoft.xyz","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"microsoft","name":"Microsoft","url":"https://domainspoof.com/brands/microsoft"}],"dns":"resolved","resolved":["150.95.255.38"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “microsoft”, a name we match for Microsoft, resolved to 150.95.255.38, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"microsoft.com","spelling":"combo","match":"name","token":"microsoft","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"150.95.255.38","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/microsoft"},{"hostname":"importacao-correios.online","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"correios","name":"Correios","url":"https://domainspoof.com/brands/correios"}],"dns":"resolved","resolved":["77.247.179.84"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “correios”, a name we match for Correios, resolved to 77.247.179.84, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"correios.com.br","spelling":"combo","match":"name","token":"correios","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"77.247.179.84","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/correios"},{"hostname":"indesign-splunk.xyz","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"cisco","name":"Cisco","url":"https://domainspoof.com/brands/cisco"}],"dns":"resolved","resolved":["150.95.255.38"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “splunk”, a name we match for Cisco, resolved to 150.95.255.38, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"cisco.com","spelling":"combo","match":"name","token":"splunk","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"150.95.255.38","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/cisco"},{"hostname":"indian-post.biz","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"india-post","name":"India Post","url":"https://domainspoof.com/brands/india-post"}],"dns":"resolved","resolved":["204.194.51.147"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of indiapost.gov.in (an added character), resolved to 204.194.51.147 on Spamhaus DROP","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"indiapost.gov.in","spelling":"insertion","found_by":"zone_file","listings":[{"kind":"address","source":"spamhaus_drop","list_name":"Spamhaus DROP","address":"204.194.51.147","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/india-post"},{"hostname":"ingdirect.one","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"ing","name":"ING","url":"https://domainspoof.com/brands/ing"}],"dns":"resolved","resolved":["217.160.0.112","2001:8d8:100f:f000::200"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “ingdirect”, a name we match for ING, resolved to 217.160.0.112, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"ing.com","spelling":"combo","match":"name","token":"ingdirect","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"217.160.0.112","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/ing"},{"hostname":"ingdirect.shop","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"ing","name":"ING","url":"https://domainspoof.com/brands/ing"}],"dns":"resolved","resolved":["23.82.16.53"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “ingdirect”, a name we match for ING, resolved to 23.82.16.53, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"ing.com","spelling":"combo","match":"name","token":"ingdirect","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"23.82.16.53","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/ing"},{"hostname":"instagram-delete.xyz","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"instagram","name":"Instagram","url":"https://domainspoof.com/brands/instagram"}],"dns":"resolved","resolved":["150.95.255.38"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “instagram”, a name we match for Instagram, resolved to 150.95.255.38, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"instagram.com","spelling":"combo","match":"name","token":"instagram","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"150.95.255.38","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/instagram"},{"hostname":"instagram-google-heavy.xyz","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"google","name":"Google","url":"https://domainspoof.com/brands/google"},{"id":"instagram","name":"Instagram","url":"https://domainspoof.com/brands/instagram"}],"dns":"resolved","resolved":["150.95.255.38"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “google”, a name we match for Google, resolved to 150.95.255.38, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"google.com","spelling":"combo","match":"name","token":"google","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"150.95.255.38","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"},{"kind":"lookalike","summary":"Registered domain containing “instagram”, a name we match for Instagram, resolved to 150.95.255.38, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"google.com","spelling":"combo","match":"name","token":"instagram","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"150.95.255.38","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/google"},{"hostname":"instagram-small-tauri.xyz","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"instagram","name":"Instagram","url":"https://domainspoof.com/brands/instagram"}],"dns":"resolved","resolved":["150.95.255.38"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “instagram”, a name we match for Instagram, resolved to 150.95.255.38, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"instagram.com","spelling":"combo","match":"name","token":"instagram","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"150.95.255.38","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/instagram"},{"hostname":"instagrid.one","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"instagram","name":"Instagram","url":"https://domainspoof.com/brands/instagram"}],"dns":"resolved","resolved":["89.31.143.90"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of instagram.com (the name with an added word), resolved to 89.31.143.90, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"instagram.com","spelling":"combo","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"89.31.143.90","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/instagram"},{"hostname":"intuit-research.biz","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"intuit","name":"Intuit","url":"https://domainspoof.com/brands/intuit"}],"dns":"resolved","resolved":["148.66.136.190"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “intuit”, a name we match for Intuit, resolved to 148.66.136.190, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"intuit.com","spelling":"combo","match":"name","token":"intuit","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"148.66.136.190","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/intuit"},{"hostname":"irsrefund.org","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"irs","name":"IRS","url":"https://domainspoof.com/brands/irs"}],"dns":"resolved","resolved":["216.245.197.44"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of irs.gov (the name with an added word), resolved to 216.245.197.44, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"irs.gov","spelling":"combo","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"216.245.197.44","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/irs"},{"hostname":"isetanmitsukoshi.holdings","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"isetan-mitsukoshi","name":"Isetan Mitsukoshi","url":"https://domainspoof.com/brands/isetan-mitsukoshi"}],"dns":"resolved","resolved":["51.195.17.68"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “isetanmitsukoshi”, a name we match for Isetan Mitsukoshi, resolved to 51.195.17.68, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"imhds.co.jp","spelling":"combo","match":"name","token":"isetanmitsukoshi","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"51.195.17.68","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/isetan-mitsukoshi"},{"hostname":"ja-bank.xxx","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"ja-bank","name":"JA Bank","url":"https://domainspoof.com/brands/ja-bank"}],"dns":"resolved","resolved":["150.95.255.38"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “ja-bank”, a name we match for JA Bank, resolved to 150.95.255.38, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"jabank.org","spelling":"combo","match":"name","token":"ja-bank","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"150.95.255.38","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/ja-bank"},{"hostname":"jalan138.club","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"jalan","name":"Jalan","url":"https://domainspoof.com/brands/jalan"}],"dns":"resolved","resolved":["2.59.170.20","104.219.250.37"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “jalan”, a name we match for Jalan, resolved to 2.59.170.20, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"jalan.net","spelling":"combo","match":"name","token":"jalan","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"2.59.170.20","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/jalan"},{"hostname":"jiostar.live","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"jio","name":"Jio","url":"https://domainspoof.com/brands/jio"}],"dns":"resolved","resolved":["212.92.105.19"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “jio”, a name we match for Jio, resolved to 212.92.105.19, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"jio.com","spelling":"combo","match":"name","token":"jio","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"212.92.105.19","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/jio"},{"hostname":"jitter-gitlab.xyz","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"gitlab","name":"GitLab","url":"https://domainspoof.com/brands/gitlab"}],"dns":"resolved","resolved":["150.95.255.38"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “gitlab”, a name we match for GitLab, resolved to 150.95.255.38, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"gitlab.com","spelling":"combo","match":"name","token":"gitlab","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"150.95.255.38","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/gitlab"},{"hostname":"join-flarenetworks.one","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"flare-network","name":"Flare Network","url":"https://domainspoof.com/brands/flare-network"}],"dns":"resolved","resolved":["104.21.80.186","172.67.153.31","2606:4700:3033::6815:50ba","2606:4700:3036::ac43:991f"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “flarenetworks”, a name we match for Flare Network, listed by MetaMask","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"flare.network","spelling":"combo","match":"name","token":"flarenetworks","found_by":"zone_file","listings":[{"kind":"reported","source":"metamask","source_name":"MetaMask","host":"join-flarenetworks.one","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/flare-network"},{"hostname":"join-flarenetworks.xyz","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"flare-network","name":"Flare Network","url":"https://domainspoof.com/brands/flare-network"}],"dns":"resolved","resolved":["104.21.78.28","172.67.215.92","2606:4700:3031::ac43:d75c","2606:4700:3037::6815:4e1c"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “flarenetworks”, a name we match for Flare Network, listed by MetaMask","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"flare.network","spelling":"combo","match":"name","token":"flarenetworks","found_by":"zone_file","listings":[{"kind":"reported","source":"metamask","source_name":"MetaMask","host":"join-flarenetworks.xyz","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/flare-network"},{"hostname":"joins-flarenetworks.xyz","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"flare-network","name":"Flare Network","url":"https://domainspoof.com/brands/flare-network"}],"dns":"resolved","resolved":["104.21.15.249","172.67.165.89","2606:4700:3031::6815:ff9","2606:4700:3037::ac43:a559"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “flarenetworks”, a name we match for Flare Network, listed by MetaMask","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"flare.network","spelling":"combo","match":"name","token":"flarenetworks","found_by":"zone_file","listings":[{"kind":"reported","source":"metamask","source_name":"MetaMask","host":"joins-flarenetworks.xyz","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/flare-network"},{"hostname":"journal-intuit.online","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"intuit","name":"Intuit","url":"https://domainspoof.com/brands/intuit"}],"dns":"resolved","resolved":["2.59.170.20","104.219.250.37"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “intuit”, a name we match for Intuit, resolved to 2.59.170.20, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"intuit.com","spelling":"combo","match":"name","token":"intuit","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"2.59.170.20","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/intuit"},{"hostname":"jp-google.club","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"google","name":"Google","url":"https://domainspoof.com/brands/google"}],"dns":"resolved","resolved":["152.32.139.249"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “google”, a name we match for Google, listed by MetaMask","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"google.com","spelling":"combo","match":"name","token":"google","found_by":"zone_file","listings":[{"kind":"reported","source":"metamask","source_name":"MetaMask","host":"jp-google.club","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/google"},{"hostname":"jp-google.fit","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"google","name":"Google","url":"https://domainspoof.com/brands/google"}],"dns":"resolved","resolved":["152.32.139.249"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “google”, a name we match for Google, listed by MetaMask","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"google.com","spelling":"combo","match":"name","token":"google","found_by":"zone_file","listings":[{"kind":"reported","source":"metamask","source_name":"MetaMask","host":"jp-google.fit","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/google"},{"hostname":"k7-disney777.bet","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"disney-plus","name":"Disney+","url":"https://domainspoof.com/brands/disney-plus"}],"dns":"resolved","resolved":["212.92.105.20"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “disney”, a name we match for Disney+, resolved to 212.92.105.20, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"disneyplus.com","spelling":"combo","match":"name","token":"disney","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"212.92.105.20","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/disney-plus"},{"hostname":"kansascitycraigslist.org","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"craigslist","name":"Craigslist","url":"https://domainspoof.com/brands/craigslist"}],"dns":"resolved","resolved":["23.82.16.57"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “craigslist”, a name we match for Craigslist, resolved to 23.82.16.57, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"craigslist.org","spelling":"combo","match":"name","token":"craigslist","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"23.82.16.57","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/craigslist"},{"hostname":"kepco-enc.info","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"kansai-electric-power","name":"Kansai Electric Power","url":"https://domainspoof.com/brands/kansai-electric-power"}],"dns":"resolved","resolved":["153.52.255.89"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “kepco”, a name we match for Kansai Electric Power, resolved to 153.52.255.89, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"kepco.co.jp","spelling":"combo","match":"name","token":"kepco","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"153.52.255.89","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/kansai-electric-power"},{"hostname":"kinetiqfnd.click","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"kinetiq","name":"Kinetiq","url":"https://domainspoof.com/brands/kinetiq"}],"dns":"resolved","resolved":["104.21.95.223","172.67.171.125","2606:4700:3032::ac43:ab7d","2606:4700:3034::6815:5fdf"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “kinetiqfnd”, a name we match for Kinetiq, listed by MetaMask","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"kinetiq.xyz","spelling":"combo","match":"name","token":"kinetiqfnd","found_by":"zone_file","listings":[{"kind":"reported","source":"metamask","source_name":"MetaMask","host":"kinetiqfnd.click","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/kinetiq"},{"hostname":"kinetiqfnd.digital","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"kinetiq","name":"Kinetiq","url":"https://domainspoof.com/brands/kinetiq"}],"dns":"resolved","resolved":["104.21.62.195","172.67.138.191","2606:4700:3034::6815:3ec3","2606:4700:3036::ac43:8abf"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “kinetiqfnd”, a name we match for Kinetiq, listed by MetaMask","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"kinetiq.xyz","spelling":"combo","match":"name","token":"kinetiqfnd","found_by":"zone_file","listings":[{"kind":"reported","source":"metamask","source_name":"MetaMask","host":"kinetiqfnd.digital","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/kinetiq"},{"hostname":"kinetiqfnd.info","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"kinetiq","name":"Kinetiq","url":"https://domainspoof.com/brands/kinetiq"}],"dns":"resolved","resolved":["104.21.20.80","172.67.191.251","2606:4700:3037::6815:1450","2606:4700:3037::ac43:bffb"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “kinetiqfnd”, a name we match for Kinetiq, listed by MetaMask","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"kinetiq.xyz","spelling":"combo","match":"name","token":"kinetiqfnd","found_by":"zone_file","listings":[{"kind":"reported","source":"metamask","source_name":"MetaMask","host":"kinetiqfnd.info","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/kinetiq"},{"hostname":"kinetiqfnd.store","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"kinetiq","name":"Kinetiq","url":"https://domainspoof.com/brands/kinetiq"}],"dns":"resolved","resolved":["104.21.8.176","172.67.130.144","2606:4700:3032::6815:8b0","2606:4700:3035::ac43:8290"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “kinetiqfnd”, a name we match for Kinetiq, listed by MetaMask","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"kinetiq.xyz","spelling":"combo","match":"name","token":"kinetiqfnd","found_by":"zone_file","listings":[{"kind":"reported","source":"metamask","source_name":"MetaMask","host":"kinetiqfnd.store","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/kinetiq"},{"hostname":"kleinanzeige.one","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"kleinanzeigen","name":"Kleinanzeigen","url":"https://domainspoof.com/brands/kleinanzeigen"}],"dns":"resolved","resolved":["217.160.0.36","2001:8d8:100f:f000::200"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of kleinanzeigen.de (a dropped letter), resolved to 217.160.0.36, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"kleinanzeigen.de","spelling":"omission","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"217.160.0.36","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/kleinanzeigen"},{"hostname":"kr-google.work","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"google","name":"Google","url":"https://domainspoof.com/brands/google"}],"dns":"resolved","resolved":["152.32.139.249"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “google”, a name we match for Google, listed by MetaMask","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"google.com","spelling":"combo","match":"name","token":"google","found_by":"zone_file","listings":[{"kind":"reported","source":"metamask","source_name":"MetaMask","host":"kr-google.work","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/google"},{"hostname":"kraken-web.org","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"kraken","name":"Kraken","url":"https://domainspoof.com/brands/kraken"}],"dns":"resolved","resolved":["101.99.75.246"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “kraken”, a name we match for Kraken, resolved to 101.99.75.246 on Spamhaus DROP","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"kraken.com","spelling":"combo","match":"name","token":"kraken","found_by":"zone_file","listings":[{"kind":"address","source":"spamhaus_drop","list_name":"Spamhaus DROP","address":"101.99.75.246","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/kraken"},{"hostname":"kraken.net.ua","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"kraken","name":"Kraken","url":"https://domainspoof.com/brands/kraken"}],"dns":"resolved","resolved":["195.20.18.201"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of kraken.com (same name, other ending), resolved to 195.20.18.201, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"kraken.com","spelling":"tld","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"195.20.18.201","flagged_at":"2026-11-06T00:41:47Z"}]}],"url":"https://domainspoof.com/brands/kraken"},{"hostname":"kucoin528.vip","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"kucoin","name":"KuCoin","url":"https://domainspoof.com/brands/kucoin"}],"dns":"resolved","resolved":["212.92.105.19"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “kucoin”, a name we match for KuCoin, resolved to 212.92.105.19, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"kucoin.com","spelling":"combo","match":"name","token":"kucoin","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"212.92.105.19","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/kucoin"},{"hostname":"lazada-promo.email","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"lazada","name":"Lazada","url":"https://domainspoof.com/brands/lazada"}],"dns":"resolved","resolved":["208.115.249.237"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “lazada”, a name we match for Lazada, resolved to 208.115.249.237, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"lazada.vn","spelling":"combo","match":"name","token":"lazada","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"208.115.249.237","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/lazada"},{"hostname":"ledger-wallet.biz","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"ledger","name":"Ledger","url":"https://domainspoof.com/brands/ledger"}],"dns":"resolved","resolved":["185.53.179.136"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “ledger-wallet”, a name we match for Ledger, listed by MetaMask, and reported by PhishDestroy","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"ledger.com","spelling":"combo","match":"name","token":"ledger-wallet","found_by":"zone_file","listings":[{"kind":"reported","source":"metamask","source_name":"MetaMask","host":"ledger-wallet.biz","flagged_at":"2026-11-06T00:41:47Z"},{"kind":"reported","source":"phishdestroy","source_name":"PhishDestroy","host":"ledger-wallet.biz","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/ledger"},{"hostname":"light-appdynamics.xyz","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"cisco","name":"Cisco","url":"https://domainspoof.com/brands/cisco"}],"dns":"resolved","resolved":["150.95.255.38"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “appdynamics”, a name we match for Cisco, resolved to 150.95.255.38, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"cisco.com","spelling":"combo","match":"name","token":"appdynamics","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"150.95.255.38","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/cisco"},{"hostname":"linkedin-love.xyz","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"linkedin","name":"LinkedIn","url":"https://domainspoof.com/brands/linkedin"}],"dns":"resolved","resolved":["150.95.255.38"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “linkedin”, a name we match for LinkedIn, resolved to 150.95.255.38, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"linkedin.com","spelling":"combo","match":"name","token":"linkedin","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"150.95.255.38","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/linkedin"},{"hostname":"linktau.click","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"linkt","name":"Linkt","url":"https://domainspoof.com/brands/linkt"}],"dns":"resolved","resolved":["102.134.35.171"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “linkt”, a name we match for Linkt, resolved to 102.134.35.171 on Spamhaus DROP","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"linkt.com.au","spelling":"combo","match":"name","token":"linkt","found_by":"zone_file","listings":[{"kind":"address","source":"spamhaus_drop","list_name":"Spamhaus DROP","address":"102.134.35.171","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/linkt"},{"hostname":"linktau.help","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"linkt","name":"Linkt","url":"https://domainspoof.com/brands/linkt"}],"dns":"resolved","resolved":["102.134.35.171"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “linkt”, a name we match for Linkt, resolved to 102.134.35.171 on Spamhaus DROP","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"linkt.com.au","spelling":"combo","match":"name","token":"linkt","found_by":"zone_file","listings":[{"kind":"address","source":"spamhaus_drop","list_name":"Spamhaus DROP","address":"102.134.35.171","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/linkt"},{"hostname":"linktau.surf","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"linkt","name":"Linkt","url":"https://domainspoof.com/brands/linkt"}],"dns":"resolved","resolved":["102.134.35.171"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “linkt”, a name we match for Linkt, resolved to 102.134.35.171 on Spamhaus DROP","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"linkt.com.au","spelling":"combo","match":"name","token":"linkt","found_by":"zone_file","listings":[{"kind":"address","source":"spamhaus_drop","list_name":"Spamhaus DROP","address":"102.134.35.171","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/linkt"},{"hostname":"losangelescraigslist.org","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"craigslist","name":"Craigslist","url":"https://domainspoof.com/brands/craigslist"}],"dns":"resolved","resolved":["37.48.77.83"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “craigslist”, a name we match for Craigslist, resolved to 37.48.77.83, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"craigslist.org","spelling":"combo","match":"name","token":"craigslist","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"37.48.77.83","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/craigslist"},{"hostname":"magazineluiza-grupopromo.vip","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"magalu","name":"Magalu","url":"https://domainspoof.com/brands/magalu"}],"dns":"resolved","resolved":["216.198.79.1"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “magazineluiza”, a name we match for Magalu, reported by PhishDestroy","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"magazineluiza.com.br","spelling":"combo","match":"name","token":"magazineluiza","found_by":"zone_file","listings":[{"kind":"reported","source":"phishdestroy","source_name":"PhishDestroy","host":"magazineluiza-grupopromo.vip","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/magalu"},{"hostname":"media-fire.org","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"mediafire","name":"MediaFire","url":"https://domainspoof.com/brands/mediafire"}],"dns":"resolved","resolved":["185.150.189.123"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of mediafire.com (an added hyphen), resolved to 185.150.189.123, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"mediafire.com","spelling":"hyphen","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"185.150.189.123","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/mediafire"},{"hostname":"mediaexpert24.biz","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"media-expert","name":"Media Expert","url":"https://domainspoof.com/brands/media-expert"}],"dns":"resolved","resolved":["85.128.128.104"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “mediaexpert”, a name we match for Media Expert, resolved to 85.128.128.104, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"mediaexpert.pl","spelling":"combo","match":"name","token":"mediaexpert","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"85.128.128.104","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/media-expert"},{"hostname":"mediaexpert24.info","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"media-expert","name":"Media Expert","url":"https://domainspoof.com/brands/media-expert"}],"dns":"resolved","resolved":["85.128.128.104"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “mediaexpert”, a name we match for Media Expert, resolved to 85.128.128.104, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"mediaexpert.pl","spelling":"combo","match":"name","token":"mediaexpert","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"85.128.128.104","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/media-expert"},{"hostname":"mediaexpert24.org","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"media-expert","name":"Media Expert","url":"https://domainspoof.com/brands/media-expert"}],"dns":"resolved","resolved":["85.128.128.104"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “mediaexpert”, a name we match for Media Expert, resolved to 85.128.128.104, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"mediaexpert.pl","spelling":"combo","match":"name","token":"mediaexpert","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"85.128.128.104","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/media-expert"},{"hostname":"mediamarkt-energie.club","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"mediamarkt","name":"MediaMarkt","url":"https://domainspoof.com/brands/mediamarkt"}],"dns":"resolved","resolved":["89.31.143.90"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “mediamarkt”, a name we match for MediaMarkt, resolved to 89.31.143.90, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"mediamarkt.de","spelling":"combo","match":"name","token":"mediamarkt","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"89.31.143.90","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/mediamarkt"},{"hostname":"meet-google.work","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"google","name":"Google","url":"https://domainspoof.com/brands/google"}],"dns":"no_address","resolved":[],"findings":[{"kind":"lookalike","summary":"Registered domain containing “google”, a name we match for Google, listed by MetaMask, and reported by PhishDestroy","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"google.com","spelling":"combo","match":"name","token":"google","found_by":"zone_file","listings":[{"kind":"reported","source":"metamask","source_name":"MetaMask","host":"meet-google.work","flagged_at":"2026-11-06T00:41:47Z"},{"kind":"reported","source":"phishdestroy","source_name":"PhishDestroy","host":"meet-google.work","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/google"},{"hostname":"meraki-homes.world","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"cisco","name":"Cisco","url":"https://domainspoof.com/brands/cisco"}],"dns":"resolved","resolved":["89.31.143.90"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “meraki”, a name we match for Cisco, resolved to 89.31.143.90, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"cisco.com","spelling":"combo","match":"name","token":"meraki","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"89.31.143.90","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/cisco"},{"hostname":"mercadopago24.one","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"mercado-pago","name":"Mercado Pago","url":"https://domainspoof.com/brands/mercado-pago"}],"dns":"resolved","resolved":["104.21.70.236","172.67.140.121","2606:4700:3031::6815:46ec","2606:4700:3037::ac43:8c79"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “mercadopago”, a name we match for Mercado Pago, reported by PhishDestroy","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"mercadopago.com","spelling":"combo","match":"name","token":"mercadopago","found_by":"zone_file","listings":[{"kind":"reported","source":"phishdestroy","source_name":"PhishDestroy","host":"mercadopago24.one","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/mercado-pago"},{"hostname":"messenger-verification-notification-ads.one","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"facebook","name":"Facebook","url":"https://domainspoof.com/brands/facebook"}],"dns":"resolved","resolved":["134.122.11.15"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of facebook.com (the name with an added word), resolved to 134.122.11.15, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"facebook.com","spelling":"combo","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"134.122.11.15","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/facebook"},{"hostname":"meta-mask-jp.vip","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"metamask","name":"MetaMask","url":"https://domainspoof.com/brands/metamask"}],"dns":"no_address","resolved":[],"findings":[{"kind":"lookalike","summary":"Registered domain containing “meta-mask”, a name we match for MetaMask, listed by MetaMask","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"metamask.io","spelling":"combo","match":"name","token":"meta-mask","found_by":"zone_file","listings":[{"kind":"reported","source":"metamask","source_name":"MetaMask","host":"meta-mask-jp.vip","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/metamask"},{"hostname":"meta-mask.vip","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"metamask","name":"MetaMask","url":"https://domainspoof.com/brands/metamask"}],"dns":"resolved","resolved":["103.224.212.142"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “meta-mask”, a name we match for MetaMask, reported by PhishDestroy","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"metamask.io","spelling":"combo","match":"name","token":"meta-mask","found_by":"zone_file","listings":[{"kind":"reported","source":"phishdestroy","source_name":"PhishDestroy","host":"meta-mask.vip","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/metamask"},{"hostname":"metamask-transit.biz","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"metamask","name":"MetaMask","url":"https://domainspoof.com/brands/metamask"}],"dns":"unknown","resolved":[],"findings":[{"kind":"lookalike","summary":"Registered domain containing “metamask”, a name we match for MetaMask, listed by MetaMask","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"metamask.io","spelling":"combo","match":"name","token":"metamask","found_by":"zone_file","listings":[{"kind":"reported","source":"metamask","source_name":"MetaMask","host":"metamask-transit.biz","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/metamask"},{"hostname":"metamaskhelpdesk.vip","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"metamask","name":"MetaMask","url":"https://domainspoof.com/brands/metamask"}],"dns":"unknown","resolved":[],"findings":[{"kind":"lookalike","summary":"Registered lookalike of metamask.io (the name with an added word), listed by MetaMask","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"metamask.io","spelling":"combo","found_by":"zone_file","listings":[{"kind":"reported","source":"metamask","source_name":"MetaMask","host":"metamaskhelpdesk.vip","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/metamask"},{"hostname":"metamaskpro.vip","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"metamask","name":"MetaMask","url":"https://domainspoof.com/brands/metamask"}],"dns":"resolved","resolved":["104.21.89.9","172.67.155.126","2606:4700:3031::ac43:9b7e","2606:4700:3035::6815:5909"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “metamask”, a name we match for MetaMask, listed by MetaMask","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"metamask.io","spelling":"combo","match":"name","token":"metamask","found_by":"zone_file","listings":[{"kind":"reported","source":"metamask","source_name":"MetaMask","host":"metamaskpro.vip","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/metamask"},{"hostname":"metamaskrewards.biz","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"metamask","name":"MetaMask","url":"https://domainspoof.com/brands/metamask"}],"dns":"resolved","resolved":["185.53.179.136"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of metamask.io (the name with an added word), listed by MetaMask, and reported by PhishDestroy","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"metamask.io","spelling":"combo","found_by":"zone_file","listings":[{"kind":"reported","source":"metamask","source_name":"MetaMask","host":"metamaskrewards.biz","flagged_at":"2026-11-06T00:41:47Z"},{"kind":"reported","source":"phishdestroy","source_name":"PhishDestroy","host":"app.metamaskrewards.biz","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/metamask"},{"hostname":"microsofionline.work","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"microsoft","name":"Microsoft","url":"https://domainspoof.com/brands/microsoft"}],"dns":"resolved","resolved":["172.232.24.161","172.232.24.235","172.234.25.42"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of microsoft.com (a changed character), listed by MetaMask, and resolved to 172.232.24.161, where reported phishing was found in the 48 hours before, and resolved to 172.232.24.235, where reported phishing was found in the 48 hours before, and resolved to 172.234.25.42, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"microsoft.com","spelling":"replacement","found_by":"zone_file","listings":[{"kind":"reported","source":"metamask","source_name":"MetaMask","host":"microsofionline.work","flagged_at":"2026-11-06T00:41:47Z"},{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"172.232.24.161","flagged_at":"2026-11-06T00:41:47Z"},{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"172.232.24.235","flagged_at":"2026-11-06T00:41:47Z"},{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"172.234.25.42","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/microsoft"},{"hostname":"microsoft-eagle.xyz","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"microsoft","name":"Microsoft","url":"https://domainspoof.com/brands/microsoft"}],"dns":"resolved","resolved":["150.95.255.38"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “microsoft”, a name we match for Microsoft, resolved to 150.95.255.38, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"microsoft.com","spelling":"combo","match":"name","token":"microsoft","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"150.95.255.38","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/microsoft"},{"hostname":"microsoft-flannel.xyz","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"microsoft","name":"Microsoft","url":"https://domainspoof.com/brands/microsoft"}],"dns":"resolved","resolved":["150.95.255.38"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “microsoft”, a name we match for Microsoft, resolved to 150.95.255.38, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"microsoft.com","spelling":"combo","match":"name","token":"microsoft","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"150.95.255.38","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/microsoft"},{"hostname":"microsoft-instance.xyz","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"microsoft","name":"Microsoft","url":"https://domainspoof.com/brands/microsoft"}],"dns":"resolved","resolved":["150.95.255.38"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “microsoft”, a name we match for Microsoft, resolved to 150.95.255.38, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"microsoft.com","spelling":"combo","match":"name","token":"microsoft","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"150.95.255.38","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/microsoft"},{"hostname":"microsoft-update.one","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"microsoft","name":"Microsoft","url":"https://domainspoof.com/brands/microsoft"}],"dns":"resolved","resolved":["160.16.200.77"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of microsoft.com (the name with an added word), resolved to 160.16.200.77, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"microsoft.com","spelling":"combo","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"160.16.200.77","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/microsoft"},{"hostname":"microsofts.work","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"microsoft","name":"Microsoft","url":"https://domainspoof.com/brands/microsoft"}],"dns":"unknown","resolved":[],"findings":[{"kind":"lookalike","summary":"Registered lookalike of microsoft.com (an added character), listed by MetaMask","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"microsoft.com","spelling":"insertion","found_by":"zone_file","listings":[{"kind":"reported","source":"metamask","source_name":"MetaMask","host":"microsofts.work","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/microsoft"},{"hostname":"microsoftt.work","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"microsoft","name":"Microsoft","url":"https://domainspoof.com/brands/microsoft"}],"dns":"resolved","resolved":["165.22.170.210"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of microsoft.com (a doubled letter), listed by MetaMask","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"microsoft.com","spelling":"repetition","found_by":"zone_file","listings":[{"kind":"reported","source":"metamask","source_name":"MetaMask","host":"microsoftt.work","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/microsoft"},{"hostname":"miencraft.wiki","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"minecraft","name":"Minecraft","url":"https://domainspoof.com/brands/minecraft"}],"dns":"resolved","resolved":["194.63.248.52","2a01:5b40:0:248::52"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of minecraft.net (two letters swapped), resolved to 194.63.248.52, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"minecraft.net","spelling":"transposition","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"194.63.248.52","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/minecraft"},{"hostname":"mining-repair-facebook.xyz","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"facebook","name":"Facebook","url":"https://domainspoof.com/brands/facebook"}],"dns":"resolved","resolved":["150.95.255.38"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “facebook”, a name we match for Facebook, resolved to 150.95.255.38, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"facebook.com","spelling":"combo","match":"name","token":"facebook","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"150.95.255.38","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/facebook"},{"hostname":"monexapp.work","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"monex-securities","name":"Monex Securities","url":"https://domainspoof.com/brands/monex-securities"}],"dns":"resolved","resolved":["2.59.170.20","104.219.250.37"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “monex”, a name we match for Monex Securities, resolved to 2.59.170.20, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"monex.co.jp","spelling":"combo","match":"name","token":"monex","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"2.59.170.20","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/monex-securities"},{"hostname":"mount-appdynamics-analytics.xyz","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"cisco","name":"Cisco","url":"https://domainspoof.com/brands/cisco"}],"dns":"resolved","resolved":["150.95.255.38"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “appdynamics”, a name we match for Cisco, resolved to 150.95.255.38, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"cisco.com","spelling":"combo","match":"name","token":"appdynamics","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"150.95.255.38","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/cisco"},{"hostname":"mountain-facebook-sickness.xyz","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"facebook","name":"Facebook","url":"https://domainspoof.com/brands/facebook"}],"dns":"resolved","resolved":["150.95.255.38"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “facebook”, a name we match for Facebook, resolved to 150.95.255.38, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"facebook.com","spelling":"combo","match":"name","token":"facebook","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"150.95.255.38","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/facebook"},{"hostname":"multisim-facebook.xyz","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"facebook","name":"Facebook","url":"https://domainspoof.com/brands/facebook"}],"dns":"resolved","resolved":["150.95.255.38"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “facebook”, a name we match for Facebook, resolved to 150.95.255.38, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"facebook.com","spelling":"combo","match":"name","token":"facebook","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"150.95.255.38","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/facebook"},{"hostname":"mvdis-twd.vip","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"motor-vehicles-office","name":"Motor Vehicles Office (MVDIS)","url":"https://domainspoof.com/brands/motor-vehicles-office"}],"dns":"no_address","resolved":[],"findings":[{"kind":"lookalike","summary":"Registered domain containing “mvdis”, a name we match for Motor Vehicles Office (MVDIS), listed by NPA 165 (government and state-owned enterprises)","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"mvdis.gov.tw","spelling":"combo","match":"name","token":"mvdis","found_by":"zone_file","listings":[{"kind":"reported","source":"npa","source_name":"NPA 165","host":"mvdis-twd.vip","claim":{"category":"government and state-owned enterprises"},"flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/motor-vehicles-office"},{"hostname":"mvdis-twv.vip","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"motor-vehicles-office","name":"Motor Vehicles Office (MVDIS)","url":"https://domainspoof.com/brands/motor-vehicles-office"}],"dns":"no_address","resolved":[],"findings":[{"kind":"lookalike","summary":"Registered domain containing “mvdis”, a name we match for Motor Vehicles Office (MVDIS), listed by NPA 165 (government and state-owned enterprises)","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"mvdis.gov.tw","spelling":"combo","match":"name","token":"mvdis","found_by":"zone_file","listings":[{"kind":"reported","source":"npa","source_name":"NPA 165","host":"mvdis-twv.vip","claim":{"category":"government and state-owned enterprises"},"flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/motor-vehicles-office"},{"hostname":"myciti.org","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"citi","name":"Citi","url":"https://domainspoof.com/brands/citi"}],"dns":"resolved","resolved":["77.247.179.86"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “citi”, a name we match for Citi, resolved to 77.247.179.86, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"citi.com","spelling":"combo","match":"name","token":"citi","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"77.247.179.86","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/citi"},{"hostname":"myship-7-11-com-tw.club","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"7-eleven-taiwan","name":"7-ELEVEN Taiwan","url":"https://domainspoof.com/brands/7-eleven-taiwan"}],"dns":"resolved","resolved":["172.247.189.243"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “myship-7-11”, a name we match for 7-ELEVEN Taiwan, listed by NPA 165 (transport and delivery)","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"iopenmall.tw","spelling":"combo","match":"name","token":"myship-7-11","found_by":"zone_file","listings":[{"kind":"reported","source":"npa","source_name":"NPA 165","host":"myship-7-11-com-tw.club","claim":{"category":"transport and delivery"},"flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/7-eleven-taiwan"},{"hostname":"myship-711-tw-com.club","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"7-eleven-taiwan","name":"7-ELEVEN Taiwan","url":"https://domainspoof.com/brands/7-eleven-taiwan"}],"dns":"resolved","resolved":["154.222.18.160"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “myship-711”, a name we match for 7-ELEVEN Taiwan, listed by NPA 165 (transport and delivery)","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"iopenmall.tw","spelling":"combo","match":"name","token":"myship-711","found_by":"zone_file","listings":[{"kind":"reported","source":"npa","source_name":"NPA 165","host":"myship-711-tw-com.club","claim":{"category":"transport and delivery"},"flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/7-eleven-taiwan"},{"hostname":"nature-facebook-catia.xyz","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"facebook","name":"Facebook","url":"https://domainspoof.com/brands/facebook"}],"dns":"resolved","resolved":["150.95.255.38"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “facebook”, a name we match for Facebook, resolved to 150.95.255.38, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"facebook.com","spelling":"combo","match":"name","token":"facebook","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"150.95.255.38","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/facebook"},{"hostname":"nature-facebook-reality.xyz","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"facebook","name":"Facebook","url":"https://domainspoof.com/brands/facebook"}],"dns":"resolved","resolved":["150.95.255.38"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “facebook”, a name we match for Facebook, resolved to 150.95.255.38, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"facebook.com","spelling":"combo","match":"name","token":"facebook","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"150.95.255.38","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/facebook"},{"hostname":"netflix-score.vip","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"netflix","name":"Netflix","url":"https://domainspoof.com/brands/netflix"}],"dns":"no_address","resolved":[],"findings":[{"kind":"lookalike","summary":"Registered domain containing “netflix”, a name we match for Netflix, reported by PhishDestroy","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"netflix.com","spelling":"combo","match":"name","token":"netflix","found_by":"zone_file","listings":[{"kind":"reported","source":"phishdestroy","source_name":"PhishDestroy","host":"netflix-score.vip","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/netflix"},{"hostname":"netty-bicep-appdynamics.xyz","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"cisco","name":"Cisco","url":"https://domainspoof.com/brands/cisco"}],"dns":"resolved","resolved":["150.95.255.38"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “appdynamics”, a name we match for Cisco, resolved to 150.95.255.38, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"cisco.com","spelling":"combo","match":"name","token":"appdynamics","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"150.95.255.38","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/cisco"},{"hostname":"network-appdynamics.xyz","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"cisco","name":"Cisco","url":"https://domainspoof.com/brands/cisco"}],"dns":"resolved","resolved":["150.95.255.38"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “appdynamics”, a name we match for Cisco, resolved to 150.95.255.38, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"cisco.com","spelling":"combo","match":"name","token":"appdynamics","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"150.95.255.38","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/cisco"},{"hostname":"nevyfederal.org","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"navy-federal-credit-union","name":"Navy Federal Credit Union","url":"https://domainspoof.com/brands/navy-federal-credit-union"}],"dns":"resolved","resolved":["64.31.3.237"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of navyfederal.org (a changed character), resolved to 64.31.3.237, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"navyfederal.org","spelling":"replacement","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"64.31.3.237","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/navy-federal-credit-union"},{"hostname":"newebpay1.biz","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"newebpay","name":"NewebPay","url":"https://domainspoof.com/brands/newebpay"}],"dns":"resolved","resolved":["156.245.238.56"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “newebpay”, a name we match for NewebPay, listed by MODA (one-page scam site), and listed by NPA 165 (finance and insurance)","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"newebpay.com","spelling":"combo","match":"name","token":"newebpay","found_by":"zone_file","listings":[{"kind":"reported","source":"moda","source_name":"MODA","host":"newebpay1.biz","claim":{"category":"one-page scam site"},"flagged_at":"2026-11-06T00:41:47Z"},{"kind":"reported","source":"npa","source_name":"NPA 165","host":"newebpay1.biz","claim":{"category":"finance and insurance"},"flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/newebpay"},{"hostname":"newebpay1.club","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"newebpay","name":"NewebPay","url":"https://domainspoof.com/brands/newebpay"}],"dns":"resolved","resolved":["156.245.238.56"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “newebpay”, a name we match for NewebPay, listed by MODA (one-page scam site), and listed by NPA 165 (finance and insurance)","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"newebpay.com","spelling":"combo","match":"name","token":"newebpay","found_by":"zone_file","listings":[{"kind":"reported","source":"moda","source_name":"MODA","host":"newebpay1.club","claim":{"category":"one-page scam site"},"flagged_at":"2026-11-06T00:41:47Z"},{"kind":"reported","source":"npa","source_name":"NPA 165","host":"newebpay1.club","claim":{"category":"finance and insurance"},"flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/newebpay"},{"hostname":"newebpay11.vip","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"newebpay","name":"NewebPay","url":"https://domainspoof.com/brands/newebpay"}],"dns":"resolved","resolved":["45.192.98.72"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “newebpay”, a name we match for NewebPay, listed by MODA (one-page scam site), and listed by NPA 165 (finance and insurance)","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"newebpay.com","spelling":"combo","match":"name","token":"newebpay","found_by":"zone_file","listings":[{"kind":"reported","source":"moda","source_name":"MODA","host":"newebpay11.vip","claim":{"category":"one-page scam site"},"flagged_at":"2026-11-06T00:41:47Z"},{"kind":"reported","source":"npa","source_name":"NPA 165","host":"newebpay11.vip","claim":{"category":"finance and insurance"},"flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/newebpay"},{"hostname":"newlife-nipponlife.work","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"nippon-life","name":"Nippon Life","url":"https://domainspoof.com/brands/nippon-life"}],"dns":"resolved","resolved":["150.95.255.38"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “nipponlife”, a name we match for Nippon Life, resolved to 150.95.255.38, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"nissay.co.jp","spelling":"combo","match":"name","token":"nipponlife","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"150.95.255.38","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/nippon-life"},{"hostname":"nexi-bank.biz","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"nexi","name":"Nexi","url":"https://domainspoof.com/brands/nexi"}],"dns":"resolved","resolved":["195.110.124.133"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of nexi.it (the name with an added word), resolved to 195.110.124.133, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"nexi.it","spelling":"combo","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"195.110.124.133","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/nexi"},{"hostname":"nexi-financial-services.biz","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"nexi","name":"Nexi","url":"https://domainspoof.com/brands/nexi"}],"dns":"resolved","resolved":["195.110.124.133"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of nexi.it (the name with an added word), resolved to 195.110.124.133, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"nexi.it","spelling":"combo","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"195.110.124.133","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/nexi"},{"hostname":"nexi-pay.biz","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"nexi","name":"Nexi","url":"https://domainspoof.com/brands/nexi"}],"dns":"resolved","resolved":["195.110.124.133"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of nexi.it (the name with an added word), resolved to 195.110.124.133, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"nexi.it","spelling":"combo","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"195.110.124.133","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/nexi"},{"hostname":"nexi-payment-gateway.biz","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"nexi","name":"Nexi","url":"https://domainspoof.com/brands/nexi"}],"dns":"resolved","resolved":["195.110.124.133"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of nexi.it (the name with an added word), resolved to 195.110.124.133, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"nexi.it","spelling":"combo","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"195.110.124.133","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/nexi"},{"hostname":"nexi-payment.biz","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"nexi","name":"Nexi","url":"https://domainspoof.com/brands/nexi"}],"dns":"resolved","resolved":["195.110.124.133"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of nexi.it (the name with an added word), resolved to 195.110.124.133, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"nexi.it","spelling":"combo","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"195.110.124.133","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/nexi"},{"hostname":"nexi-payments.biz","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"nexi","name":"Nexi","url":"https://domainspoof.com/brands/nexi"}],"dns":"resolved","resolved":["195.110.124.133"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of nexi.it (the name with an added word), resolved to 195.110.124.133, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"nexi.it","spelling":"combo","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"195.110.124.133","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/nexi"},{"hostname":"nexi-service.biz","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"nexi","name":"Nexi","url":"https://domainspoof.com/brands/nexi"}],"dns":"resolved","resolved":["195.110.124.133"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of nexi.it (the name with an added word), resolved to 195.110.124.133, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"nexi.it","spelling":"combo","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"195.110.124.133","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/nexi"},{"hostname":"nexi-services.biz","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"nexi","name":"Nexi","url":"https://domainspoof.com/brands/nexi"}],"dns":"resolved","resolved":["195.110.124.133"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of nexi.it (the name with an added word), resolved to 195.110.124.133, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"nexi.it","spelling":"combo","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"195.110.124.133","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/nexi"},{"hostname":"nexigroups.biz","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"nexi","name":"Nexi","url":"https://domainspoof.com/brands/nexi"}],"dns":"resolved","resolved":["195.110.124.133"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of nexi.it (an added character), resolved to 195.110.124.133, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"nexi.it","spelling":"insertion","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"195.110.124.133","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/nexi"},{"hostname":"nintendo-switch-sports-resort.wiki","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"nintendo","name":"Nintendo","url":"https://domainspoof.com/brands/nintendo"}],"dns":"resolved","resolved":["104.21.85.206","172.67.210.58","2606:4700:3031::ac43:d23a","2606:4700:3032::6815:55ce"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “nintendo”, a name we match for Nintendo, listed by MetaMask","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"nintendo.com","spelling":"combo","match":"name","token":"nintendo","found_by":"zone_file","listings":[{"kind":"reported","source":"metamask","source_name":"MetaMask","host":"nintendo-switch-sports-resort.wiki","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/nintendo"},{"hostname":"nk-pagamentos.bet","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"nubank","name":"Nubank","url":"https://domainspoof.com/brands/nubank"}],"dns":"resolved","resolved":["78.157.209.174"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of nubank.com.br (a changed character), resolved to 78.157.209.174, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"nubank.com.br","spelling":"replacement","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"78.157.209.174","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/nubank"},{"hostname":"offers-opensea.club","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"opensea","name":"OpenSea","url":"https://domainspoof.com/brands/opensea"}],"dns":"resolved","resolved":["5.78.156.59","5.161.47.86","46.62.237.138","76.223.91.20","195.201.128.179","2406:da1e:214:c901:3a5:448f:b7b7:82e7","2600:1f1c:6db:8801:268f:6a6d:cd28:6208","2a05:d014:179b:c400:5131:66d1:dcfb:6ae9","2a05:d014:179b:c400:a327:40ee:24cc:6180","2a05:d014:179b:c402:796a:5979:8cae:ea4","2a05:d014:179b:c403:577e:c54a:24fd:1c39","2a05:d014:179b:c403:7ca2:c788:41b0:7d26","2a05:d018:1d22:801:a216:a799:8c87:df21"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “opensea”, a name we match for OpenSea, resolved to 195.201.128.179, where reported phishing was found in the 48 hours before, and resolved to 46.62.237.138, where reported phishing was found in the 48 hours before, and resolved to 5.161.47.86, where reported phishing was found in the 48 hours before, and resolved to 5.78.156.59, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"opensea.io","spelling":"combo","match":"name","token":"opensea","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"195.201.128.179","flagged_at":"2026-11-06T00:41:47Z"},{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"46.62.237.138","flagged_at":"2026-11-06T00:41:47Z"},{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"5.161.47.86","flagged_at":"2026-11-06T00:41:47Z"},{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"5.78.156.59","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/opensea"},{"hostname":"oinbase.pro","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"coinbase","name":"Coinbase","url":"https://domainspoof.com/brands/coinbase"}],"dns":"resolved","resolved":["77.247.179.90"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of coinbase.com (a dropped letter), resolved to 77.247.179.90, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"coinbase.com","spelling":"omission","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"77.247.179.90","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/coinbase"},{"hostname":"ondofinance.claims","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"ondo-finance","name":"Ondo Finance","url":"https://domainspoof.com/brands/ondo-finance"}],"dns":"resolved","resolved":["104.21.5.161","172.67.133.157","2606:4700:3035::6815:5a1","2606:4700:3037::ac43:859d"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “ondofinance”, a name we match for Ondo Finance, listed by MetaMask","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"ondo.finance","spelling":"combo","match":"name","token":"ondofinance","found_by":"zone_file","listings":[{"kind":"reported","source":"metamask","source_name":"MetaMask","host":"ondofinance.claims","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/ondo-finance"},{"hostname":"ondofinance.click","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"ondo-finance","name":"Ondo Finance","url":"https://domainspoof.com/brands/ondo-finance"}],"dns":"resolved","resolved":["104.21.58.26","172.67.155.8","2606:4700:3032::ac43:9b08","2606:4700:3034::6815:3a1a"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “ondofinance”, a name we match for Ondo Finance, listed by MetaMask","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"ondo.finance","spelling":"combo","match":"name","token":"ondofinance","found_by":"zone_file","listings":[{"kind":"reported","source":"metamask","source_name":"MetaMask","host":"ondofinance.click","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/ondo-finance"},{"hostname":"ondofinance.cloud","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"ondo-finance","name":"Ondo Finance","url":"https://domainspoof.com/brands/ondo-finance"}],"dns":"resolved","resolved":["104.21.66.135","172.67.160.101","2606:4700:3030::6815:4287","2606:4700:3030::ac43:a065"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “ondofinance”, a name we match for Ondo Finance, listed by MetaMask","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"ondo.finance","spelling":"combo","match":"name","token":"ondofinance","found_by":"zone_file","listings":[{"kind":"reported","source":"metamask","source_name":"MetaMask","host":"ondofinance.cloud","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/ondo-finance"},{"hostname":"ondofinance.community","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"ondo-finance","name":"Ondo Finance","url":"https://domainspoof.com/brands/ondo-finance"}],"dns":"resolved","resolved":["104.21.50.29","172.67.155.220","2606:4700:3031::6815:321d","2606:4700:3033::ac43:9bdc"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “ondofinance”, a name we match for Ondo Finance, listed by MetaMask","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"ondo.finance","spelling":"combo","match":"name","token":"ondofinance","found_by":"zone_file","listings":[{"kind":"reported","source":"metamask","source_name":"MetaMask","host":"ondofinance.community","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/ondo-finance"},{"hostname":"one-ether-fi.ink","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"ether-fi","name":"ether.fi","url":"https://domainspoof.com/brands/ether-fi"}],"dns":"resolved","resolved":["104.21.14.116","172.67.202.235","2606:4700:3034::6815:e74","2606:4700:3037::ac43:caeb"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “ether-fi”, a name we match for ether.fi, listed by MetaMask","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"ether.fi","spelling":"combo","match":"name","token":"ether-fi","found_by":"zone_file","listings":[{"kind":"reported","source":"metamask","source_name":"MetaMask","host":"one-ether-fi.ink","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/ether-fi"},{"hostname":"one-etherfi.ink","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"ether-fi","name":"ether.fi","url":"https://domainspoof.com/brands/ether-fi"}],"dns":"resolved","resolved":["104.21.47.242","172.67.174.141","2606:4700:3031::6815:2ff2","2606:4700:3037::ac43:ae8d"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “etherfi”, a name we match for ether.fi, reported by PhishDestroy","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"ether.fi","spelling":"combo","match":"name","token":"etherfi","found_by":"zone_file","listings":[{"kind":"reported","source":"phishdestroy","source_name":"PhishDestroy","host":"one-etherfi.ink","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/ether-fi"},{"hostname":"openai1.life","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"openai","name":"OpenAI","url":"https://domainspoof.com/brands/openai"}],"dns":"resolved","resolved":["78.157.209.172"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “openai”, a name we match for OpenAI, resolved to 78.157.209.172, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"openai.com","spelling":"combo","match":"name","token":"openai","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"78.157.209.172","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/openai"},{"hostname":"opensea-for-animals.wiki","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"opensea","name":"OpenSea","url":"https://domainspoof.com/brands/opensea"}],"dns":"resolved","resolved":["104.21.2.146","172.67.129.80","2606:4700:3031::ac43:8150","2606:4700:3032::6815:292"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “opensea”, a name we match for OpenSea, listed by MetaMask","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"opensea.io","spelling":"combo","match":"name","token":"opensea","found_by":"zone_file","listings":[{"kind":"reported","source":"metamask","source_name":"MetaMask","host":"opensea-for-animals.wiki","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/opensea"},{"hostname":"ozonpurchase.site","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"ozon","name":"Ozon","url":"https://domainspoof.com/brands/ozon"}],"dns":"resolved","resolved":["31.31.196.17","2a00:f940:2:2:1:1:0:256"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “ozon”, a name we match for Ozon, resolved to 31.31.196.17, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"ozon.ru","spelling":"combo","match":"name","token":"ozon","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"31.31.196.17","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/ozon"},{"hostname":"panarama.pro","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"pazarama","name":"Pazarama","url":"https://domainspoof.com/brands/pazarama"}],"dns":"resolved","resolved":["65.75.210.169"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of pazarama.com (a changed character), resolved to 65.75.210.169, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"pazarama.com","spelling":"replacement","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"65.75.210.169","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/pazarama"},{"hostname":"pay-nexi.biz","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"nexi","name":"Nexi","url":"https://domainspoof.com/brands/nexi"}],"dns":"resolved","resolved":["195.110.124.133"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of nexi.it (the name with an added word), resolved to 195.110.124.133, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"nexi.it","spelling":"combo","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"195.110.124.133","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/nexi"},{"hostname":"payment-gateway-nexi.biz","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"nexi","name":"Nexi","url":"https://domainspoof.com/brands/nexi"}],"dns":"resolved","resolved":["195.110.124.133"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of nexi.it (the name with an added word), resolved to 195.110.124.133, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"nexi.it","spelling":"combo","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"195.110.124.133","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/nexi"},{"hostname":"payment-nexi.biz","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"nexi","name":"Nexi","url":"https://domainspoof.com/brands/nexi"}],"dns":"resolved","resolved":["195.110.124.133"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of nexi.it (the name with an added word), resolved to 195.110.124.133, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"nexi.it","spelling":"combo","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"195.110.124.133","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/nexi"},{"hostname":"payments-nexi.biz","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"nexi","name":"Nexi","url":"https://domainspoof.com/brands/nexi"}],"dns":"resolved","resolved":["195.110.124.133"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of nexi.it (the name with an added word), resolved to 195.110.124.133, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"nexi.it","spelling":"combo","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"195.110.124.133","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/nexi"},{"hostname":"pendlefi.community","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"pendle","name":"Pendle","url":"https://domainspoof.com/brands/pendle"}],"dns":"resolved","resolved":["104.21.15.134","172.67.162.167","2606:4700:3032::6815:f86","2606:4700:3033::ac43:a2a7"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “pendlefi”, a name we match for Pendle, listed by MetaMask","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"pendle.finance","spelling":"combo","match":"name","token":"pendlefi","found_by":"zone_file","listings":[{"kind":"reported","source":"metamask","source_name":"MetaMask","host":"pendlefi.community","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/pendle"},{"hostname":"pendlefi.one","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"pendle","name":"Pendle","url":"https://domainspoof.com/brands/pendle"}],"dns":"resolved","resolved":["104.21.4.71","172.67.131.193","2606:4700:3033::6815:447","2606:4700:3033::ac43:83c1"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “pendlefi”, a name we match for Pendle, listed by MetaMask","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"pendle.finance","spelling":"combo","match":"name","token":"pendlefi","found_by":"zone_file","listings":[{"kind":"reported","source":"metamask","source_name":"MetaMask","host":"pendlefi.one","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/pendle"},{"hostname":"pendlefi.support","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"pendle","name":"Pendle","url":"https://domainspoof.com/brands/pendle"}],"dns":"resolved","resolved":["104.21.2.192","172.67.129.148","2606:4700:3034::ac43:8194","2606:4700:3035::6815:2c0"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “pendlefi”, a name we match for Pendle, listed by MetaMask","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"pendle.finance","spelling":"combo","match":"name","token":"pendlefi","found_by":"zone_file","listings":[{"kind":"reported","source":"metamask","source_name":"MetaMask","host":"pendlefi.support","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/pendle"},{"hostname":"pendlefinance.click","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"pendle","name":"Pendle","url":"https://domainspoof.com/brands/pendle"}],"dns":"resolved","resolved":["104.21.23.145","172.67.211.167","2606:4700:3034::ac43:d3a7","2606:4700:3037::6815:1791"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “pendlefinance”, a name we match for Pendle, listed by MetaMask","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"pendle.finance","spelling":"combo","match":"name","token":"pendlefinance","found_by":"zone_file","listings":[{"kind":"reported","source":"metamask","source_name":"MetaMask","host":"pendlefinance.click","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/pendle"},{"hostname":"platform-gitlab-quality.xyz","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"gitlab","name":"GitLab","url":"https://domainspoof.com/brands/gitlab"}],"dns":"resolved","resolved":["150.95.255.38"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “gitlab”, a name we match for GitLab, resolved to 150.95.255.38, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"gitlab.com","spelling":"combo","match":"name","token":"gitlab","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"150.95.255.38","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/gitlab"},{"hostname":"pmkisanyojana.live","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"pm-kisan","name":"PM-KISAN","url":"https://domainspoof.com/brands/pm-kisan"}],"dns":"resolved","resolved":["212.92.105.24"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “pmkisan”, a name we match for PM-KISAN, resolved to 212.92.105.24, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"pmkisan.gov.in","spelling":"combo","match":"name","token":"pmkisan","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"212.92.105.24","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/pm-kisan"},{"hostname":"pncbank.org","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"pnc","name":"PNC","url":"https://domainspoof.com/brands/pnc"}],"dns":"resolved","resolved":["216.245.213.75"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “pnc”, a name we match for PNC, resolved to 216.245.213.75, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"pnc.com","spelling":"combo","match":"name","token":"pnc","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"216.245.213.75","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/pnc"},{"hostname":"polymarkethub.vip","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"polymarket","name":"Polymarket","url":"https://domainspoof.com/brands/polymarket"}],"dns":"resolved","resolved":["104.21.29.220","172.67.149.214","2606:4700:3033::6815:1ddc","2606:4700:3035::ac43:95d6"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “polymarket”, a name we match for Polymarket, listed by MetaMask, and reported by PhishDestroy","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"polymarket.com","spelling":"combo","match":"name","token":"polymarket","found_by":"zone_file","listings":[{"kind":"reported","source":"metamask","source_name":"MetaMask","host":"polymarkethub.vip","flagged_at":"2026-11-06T00:41:47Z"},{"kind":"reported","source":"phishdestroy","source_name":"PhishDestroy","host":"polymarkethub.vip","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/polymarket"},{"hostname":"polymarkets.one","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"polymarket","name":"Polymarket","url":"https://domainspoof.com/brands/polymarket"}],"dns":"resolved","resolved":["104.21.41.248","172.67.167.212","2606:4700:3032::6815:29f8","2606:4700:3032::ac43:a7d4"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of polymarket.com (an added character), listed by MetaMask","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"polymarket.com","spelling":"insertion","found_by":"zone_file","listings":[{"kind":"reported","source":"metamask","source_name":"MetaMask","host":"polymarkets.one","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/polymarket"},{"hostname":"pool-flarenetworks.xyz","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"flare-network","name":"Flare Network","url":"https://domainspoof.com/brands/flare-network"}],"dns":"resolved","resolved":["104.21.95.75","172.67.169.219","2606:4700:3031::ac43:a9db","2606:4700:3034::6815:5f4b"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “flarenetworks”, a name we match for Flare Network, listed by MetaMask","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"flare.network","spelling":"combo","match":"name","token":"flarenetworks","found_by":"zone_file","listings":[{"kind":"reported","source":"metamask","source_name":"MetaMask","host":"pool-flarenetworks.xyz","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/flare-network"},{"hostname":"pools-flarenetworks.xyz","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"flare-network","name":"Flare Network","url":"https://domainspoof.com/brands/flare-network"}],"dns":"resolved","resolved":["104.21.20.128","172.67.192.230","2606:4700:3035::ac43:c0e6","2606:4700:3037::6815:1480"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “flarenetworks”, a name we match for Flare Network, listed by MetaMask","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"flare.network","spelling":"combo","match":"name","token":"flarenetworks","found_by":"zone_file","listings":[{"kind":"reported","source":"metamask","source_name":"MetaMask","host":"pools-flarenetworks.xyz","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/flare-network"},{"hostname":"portal-ethena.finance","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"ethena","name":"Ethena","url":"https://domainspoof.com/brands/ethena"}],"dns":"resolved","resolved":["104.21.74.143","172.67.203.142","2606:4700:3030::ac43:cb8e","2606:4700:3032::6815:4a8f"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “ethena”, a name we match for Ethena, listed by MetaMask","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"ethena.fi","spelling":"combo","match":"name","token":"ethena","found_by":"zone_file","listings":[{"kind":"reported","source":"metamask","source_name":"MetaMask","host":"portal-ethena.finance","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/ethena"},{"hostname":"portal-flarenetworks.xyz","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"flare-network","name":"Flare Network","url":"https://domainspoof.com/brands/flare-network"}],"dns":"resolved","resolved":["104.21.13.125","172.67.132.209","2606:4700:3035::ac43:84d1","2606:4700:3036::6815:d7d"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “flarenetworks”, a name we match for Flare Network, listed by MetaMask","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"flare.network","spelling":"combo","match":"name","token":"flarenetworks","found_by":"zone_file","listings":[{"kind":"reported","source":"metamask","source_name":"MetaMask","host":"portal-flarenetworks.xyz","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/flare-network"},{"hostname":"portalolx777.org","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"olx","name":"OLX","url":"https://domainspoof.com/brands/olx"}],"dns":"resolved","resolved":["2.59.170.20","104.219.250.37"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “olx”, a name we match for OLX, resolved to 2.59.170.20, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"olx.com","spelling":"combo","match":"name","token":"olx","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"2.59.170.20","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/olx"},{"hostname":"portals-flarenetworks.xyz","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"flare-network","name":"Flare Network","url":"https://domainspoof.com/brands/flare-network"}],"dns":"resolved","resolved":["104.21.13.51","172.67.132.155","2606:4700:3032::6815:d33","2606:4700:3035::ac43:849b"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “flarenetworks”, a name we match for Flare Network, listed by MetaMask","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"flare.network","spelling":"combo","match":"name","token":"flarenetworks","found_by":"zone_file","listings":[{"kind":"reported","source":"metamask","source_name":"MetaMask","host":"portals-flarenetworks.xyz","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/flare-network"},{"hostname":"portaromana.design","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"posta-romana","name":"Posta Romana","url":"https://domainspoof.com/brands/posta-romana"}],"dns":"resolved","resolved":["195.110.124.133"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of posta-romana.ro (a changed character), resolved to 195.110.124.133, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"posta-romana.ro","spelling":"replacement","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"195.110.124.133","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/posta-romana"},{"hostname":"portlandcraigslist.org","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"craigslist","name":"Craigslist","url":"https://domainspoof.com/brands/craigslist"}],"dns":"resolved","resolved":["64.31.3.235"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “craigslist”, a name we match for Craigslist, resolved to 64.31.3.235, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"craigslist.org","spelling":"combo","match":"name","token":"craigslist","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"64.31.3.235","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/craigslist"},{"hostname":"prada-slot.bet","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"prada","name":"Prada","url":"https://domainspoof.com/brands/prada"}],"dns":"resolved","resolved":["23.82.16.56"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “prada”, a name we match for Prada, resolved to 23.82.16.56, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"prada.com","spelling":"combo","match":"name","token":"prada","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"23.82.16.56","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/prada"},{"hostname":"prada555.vip","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"prada","name":"Prada","url":"https://domainspoof.com/brands/prada"}],"dns":"resolved","resolved":["51.195.17.68"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “prada”, a name we match for Prada, resolved to 51.195.17.68, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"prada.com","spelling":"combo","match":"name","token":"prada","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"51.195.17.68","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/prada"},{"hostname":"profile-megaeth.xyz","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"megaeth","name":"MegaETH","url":"https://domainspoof.com/brands/megaeth"}],"dns":"resolved","resolved":["104.21.69.99","172.67.206.252","2606:4700:3036::6815:4563","2606:4700:3037::ac43:cefc"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “megaeth”, a name we match for MegaETH, listed by MetaMask","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"megaeth.com","spelling":"combo","match":"name","token":"megaeth","found_by":"zone_file","listings":[{"kind":"reported","source":"metamask","source_name":"MetaMask","host":"profile-megaeth.xyz","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/megaeth"},{"hostname":"protocol-flarenetworks.xyz","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"flare-network","name":"Flare Network","url":"https://domainspoof.com/brands/flare-network"}],"dns":"resolved","resolved":["104.21.19.102","172.67.185.192","2606:4700:3030::6815:1366","2606:4700:3033::ac43:b9c0"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “flarenetworks”, a name we match for Flare Network, listed by MetaMask","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"flare.network","spelling":"combo","match":"name","token":"flarenetworks","found_by":"zone_file","listings":[{"kind":"reported","source":"metamask","source_name":"MetaMask","host":"protocol-flarenetworks.xyz","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/flare-network"},{"hostname":"protocols-flarenetworks.xyz","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"flare-network","name":"Flare Network","url":"https://domainspoof.com/brands/flare-network"}],"dns":"resolved","resolved":["104.21.48.107","172.67.184.43","2606:4700:3032::6815:306b","2606:4700:3033::ac43:b82b"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “flarenetworks”, a name we match for Flare Network, listed by MetaMask","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"flare.network","spelling":"combo","match":"name","token":"flarenetworks","found_by":"zone_file","listings":[{"kind":"reported","source":"metamask","source_name":"MetaMask","host":"protocols-flarenetworks.xyz","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/flare-network"},{"hostname":"proton-pass.org","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"proton","name":"Proton","url":"https://domainspoof.com/brands/proton"}],"dns":"resolved","resolved":["109.238.86.133"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of proton.me (an added hyphen), resolved to 109.238.86.133, where reported phishing was found in the 48 hours before, and resolved to 109.238.86.133 on Spamhaus DROP","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"proton.me","spelling":"hyphen","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"109.238.86.133","flagged_at":"2026-11-06T00:41:47Z"},{"kind":"address","source":"spamhaus_drop","list_name":"Spamhaus DROP","address":"109.238.86.133","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/proton"},{"hostname":"prototype-gitlab-puppet.xyz","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"gitlab","name":"GitLab","url":"https://domainspoof.com/brands/gitlab"}],"dns":"resolved","resolved":["150.95.255.38"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “gitlab”, a name we match for GitLab, resolved to 150.95.255.38, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"gitlab.com","spelling":"combo","match":"name","token":"gitlab","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"150.95.255.38","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/gitlab"},{"hostname":"qantaspoint1.click","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"qantas","name":"Qantas","url":"https://domainspoof.com/brands/qantas"}],"dns":"resolved","resolved":["102.134.35.171"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “qantas”, a name we match for Qantas, resolved to 102.134.35.171 on Spamhaus DROP","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"qantas.com","spelling":"combo","match":"name","token":"qantas","found_by":"zone_file","listings":[{"kind":"address","source":"spamhaus_drop","list_name":"Spamhaus DROP","address":"102.134.35.171","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/qantas"},{"hostname":"qantaspoint1.shop","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"qantas","name":"Qantas","url":"https://domainspoof.com/brands/qantas"}],"dns":"resolved","resolved":["102.134.35.171"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “qantas”, a name we match for Qantas, resolved to 102.134.35.171 on Spamhaus DROP","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"qantas.com","spelling":"combo","match":"name","token":"qantas","found_by":"zone_file","listings":[{"kind":"address","source":"spamhaus_drop","list_name":"Spamhaus DROP","address":"102.134.35.171","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/qantas"},{"hostname":"referral-prometheus-gitlab.xyz","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"gitlab","name":"GitLab","url":"https://domainspoof.com/brands/gitlab"}],"dns":"resolved","resolved":["150.95.255.38"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “gitlab”, a name we match for GitLab, resolved to 150.95.255.38, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"gitlab.com","spelling":"combo","match":"name","token":"gitlab","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"150.95.255.38","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/gitlab"},{"hostname":"sandiegocraigslist.org","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"craigslist","name":"Craigslist","url":"https://domainspoof.com/brands/craigslist"}],"dns":"resolved","resolved":["64.31.3.234"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “craigslist”, a name we match for Craigslist, resolved to 64.31.3.234, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"craigslist.org","spelling":"combo","match":"name","token":"craigslist","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"64.31.3.234","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/craigslist"},{"hostname":"sem-sponsored-gitlab.xyz","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"gitlab","name":"GitLab","url":"https://domainspoof.com/brands/gitlab"}],"dns":"resolved","resolved":["150.95.255.38"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “gitlab”, a name we match for GitLab, resolved to 150.95.255.38, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"gitlab.com","spelling":"combo","match":"name","token":"gitlab","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"150.95.255.38","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/gitlab"},{"hostname":"service-nexi.biz","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"nexi","name":"Nexi","url":"https://domainspoof.com/brands/nexi"}],"dns":"resolved","resolved":["195.110.124.133"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of nexi.it (the name with an added word), resolved to 195.110.124.133, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"nexi.it","spelling":"combo","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"195.110.124.133","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/nexi"},{"hostname":"services-nexi.biz","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"nexi","name":"Nexi","url":"https://domainspoof.com/brands/nexi"}],"dns":"resolved","resolved":["195.110.124.133"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of nexi.it (the name with an added word), resolved to 195.110.124.133, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"nexi.it","spelling":"combo","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"195.110.124.133","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/nexi"},{"hostname":"signal-ethereum.xyz","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"ethereum","name":"Ethereum","url":"https://domainspoof.com/brands/ethereum"}],"dns":"resolved","resolved":["150.95.255.38"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “ethereum”, a name we match for Ethereum, resolved to 150.95.255.38, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"ethereum.org","spelling":"combo","match":"name","token":"ethereum","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"150.95.255.38","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/ethereum"},{"hostname":"soap-glass-appdynamics.xyz","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"cisco","name":"Cisco","url":"https://domainspoof.com/brands/cisco"}],"dns":"resolved","resolved":["150.95.255.38"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “appdynamics”, a name we match for Cisco, resolved to 150.95.255.38, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"cisco.com","spelling":"combo","match":"name","token":"appdynamics","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"150.95.255.38","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/cisco"},{"hostname":"sonder-posten.biz","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"posten-norway","name":"Posten Norway","url":"https://domainspoof.com/brands/posten-norway"}],"dns":"resolved","resolved":["80.150.6.143","2003:2:2:15:80:150:6:143"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “posten”, a name we match for Posten Norway, resolved to 80.150.6.143, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"posten.no","spelling":"combo","match":"name","token":"posten","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"80.150.6.143","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/posten-norway"},{"hostname":"state-xaman.app","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"xaman","name":"Xaman","url":"https://domainspoof.com/brands/xaman"}],"dns":"resolved","resolved":["185.53.179.149"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “xaman”, a name we match for Xaman, listed by MetaMask","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"xaman.app","spelling":"combo","match":"name","token":"xaman","found_by":"zone_file","listings":[{"kind":"reported","source":"metamask","source_name":"MetaMask","host":"state-xaman.app","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/xaman"},{"hostname":"subscribe-quality-gitlab.xyz","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"gitlab","name":"GitLab","url":"https://domainspoof.com/brands/gitlab"}],"dns":"resolved","resolved":["150.95.255.38"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “gitlab”, a name we match for GitLab, resolved to 150.95.255.38, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"gitlab.com","spelling":"combo","match":"name","token":"gitlab","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"150.95.255.38","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/gitlab"},{"hostname":"subscribe-retention-gitlab.xyz","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"gitlab","name":"GitLab","url":"https://domainspoof.com/brands/gitlab"}],"dns":"resolved","resolved":["150.95.255.38"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “gitlab”, a name we match for GitLab, resolved to 150.95.255.38, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"gitlab.com","spelling":"combo","match":"name","token":"gitlab","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"150.95.255.38","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/gitlab"},{"hostname":"subscribe-zone-gitlab.xyz","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"gitlab","name":"GitLab","url":"https://domainspoof.com/brands/gitlab"}],"dns":"resolved","resolved":["150.95.255.38"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “gitlab”, a name we match for GitLab, resolved to 150.95.255.38, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"gitlab.com","spelling":"combo","match":"name","token":"gitlab","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"150.95.255.38","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/gitlab"},{"hostname":"suica.biz","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"jr-east","name":"JR East","url":"https://domainspoof.com/brands/jr-east"}],"dns":"resolved","resolved":["150.95.255.38"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “suica”, a name we match for JR East, resolved to 150.95.255.38, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"jreast.co.jp","spelling":"combo","match":"name","token":"suica","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"150.95.255.38","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/jr-east"},{"hostname":"system-app-gitlab.xyz","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"gitlab","name":"GitLab","url":"https://domainspoof.com/brands/gitlab"}],"dns":"resolved","resolved":["150.95.255.38"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “gitlab”, a name we match for GitLab, resolved to 150.95.255.38, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"gitlab.com","spelling":"combo","match":"name","token":"gitlab","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"150.95.255.38","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/gitlab"},{"hostname":"szaritsaniko-097-hotmail.casa","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"microsoft","name":"Microsoft","url":"https://domainspoof.com/brands/microsoft"}],"dns":"resolved","resolved":["37.9.175.133","2a00:4b40:aaaa:2001::6"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “hotmail”, a name we match for Microsoft, resolved to 37.9.175.133, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"microsoft.com","spelling":"combo","match":"name","token":"hotmail","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"37.9.175.133","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/microsoft"},{"hostname":"tag-gitlab-target-system.xyz","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"gitlab","name":"GitLab","url":"https://domainspoof.com/brands/gitlab"}],"dns":"resolved","resolved":["150.95.255.38"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “gitlab”, a name we match for GitLab, resolved to 150.95.255.38, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"gitlab.com","spelling":"combo","match":"name","token":"gitlab","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"150.95.255.38","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/gitlab"},{"hostname":"tensorflow-cta-pads-gitlab.xyz","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"gitlab","name":"GitLab","url":"https://domainspoof.com/brands/gitlab"}],"dns":"resolved","resolved":["150.95.255.38"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “gitlab”, a name we match for GitLab, resolved to 150.95.255.38, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"gitlab.com","spelling":"combo","match":"name","token":"gitlab","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"150.95.255.38","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/gitlab"},{"hostname":"testpypi.org","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"pypi","name":"PyPI","url":"https://domainspoof.com/brands/pypi"}],"dns":"resolved","resolved":["78.157.209.172"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “pypi”, a name we match for PyPI, resolved to 78.157.209.172, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"pypi.org","spelling":"combo","match":"name","token":"pypi","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"78.157.209.172","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/pypi"},{"hostname":"tim.vision","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"tim","name":"TIM","url":"https://domainspoof.com/brands/tim"}],"dns":"resolved","resolved":["195.110.124.188"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of tim.it (same name, other ending), resolved to 195.110.124.188, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"tim.it","spelling":"tld","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"195.110.124.188","flagged_at":"2026-11-06T00:41:47Z"}]}],"url":"https://domainspoof.com/brands/tim"},{"hostname":"today-portal-profit-gitlab.xyz","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"gitlab","name":"GitLab","url":"https://domainspoof.com/brands/gitlab"}],"dns":"resolved","resolved":["150.95.255.38"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “gitlab”, a name we match for GitLab, resolved to 150.95.255.38, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"gitlab.com","spelling":"combo","match":"name","token":"gitlab","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"150.95.255.38","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/gitlab"},{"hostname":"today-subscribe-gitlab.xyz","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"gitlab","name":"GitLab","url":"https://domainspoof.com/brands/gitlab"}],"dns":"resolved","resolved":["150.95.255.38"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “gitlab”, a name we match for GitLab, resolved to 150.95.255.38, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"gitlab.com","spelling":"combo","match":"name","token":"gitlab","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"150.95.255.38","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/gitlab"},{"hostname":"tokenpoket.art","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"tokenpocket","name":"TokenPocket","url":"https://domainspoof.com/brands/tokenpocket"}],"dns":"resolved","resolved":["103.38.82.202"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of tokenpocket.pro (a dropped letter), resolved to 103.38.82.202, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"tokenpocket.pro","spelling":"omission","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"103.38.82.202","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/tokenpocket"},{"hostname":"tool-gitlab-engine.xyz","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"gitlab","name":"GitLab","url":"https://domainspoof.com/brands/gitlab"}],"dns":"resolved","resolved":["150.95.255.38"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “gitlab”, a name we match for GitLab, resolved to 150.95.255.38, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"gitlab.com","spelling":"combo","match":"name","token":"gitlab","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"150.95.255.38","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/gitlab"},{"hostname":"tool-gitlab-parallels.xyz","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"gitlab","name":"GitLab","url":"https://domainspoof.com/brands/gitlab"}],"dns":"resolved","resolved":["150.95.255.38"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “gitlab”, a name we match for GitLab, resolved to 150.95.255.38, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"gitlab.com","spelling":"combo","match":"name","token":"gitlab","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"150.95.255.38","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/gitlab"},{"hostname":"top-instagram.info","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"instagram","name":"Instagram","url":"https://domainspoof.com/brands/instagram"}],"dns":"resolved","resolved":["31.31.198.117","2a00:f940:2:2:1:3:0:118"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “instagram”, a name we match for Instagram, resolved to 31.31.198.117, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"instagram.com","spelling":"combo","match":"name","token":"instagram","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"31.31.198.117","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/instagram"},{"hostname":"tr-ptt-gov.casa","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"ptt","name":"PTT (Türkiye)","url":"https://domainspoof.com/brands/ptt"}],"dns":"resolved","resolved":["162.62.233.44"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “ptt-gov”, a name we match for PTT (Türkiye), listed by USOM","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"pttavm.com","spelling":"combo","match":"name","token":"ptt-gov","found_by":"zone_file","listings":[{"kind":"reported","source":"usom","source_name":"USOM","host":"tr-ptt-gov.casa","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/ptt"},{"hostname":"tucsoncraigslist.org","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"craigslist","name":"Craigslist","url":"https://domainspoof.com/brands/craigslist"}],"dns":"resolved","resolved":["64.120.31.120"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “craigslist”, a name we match for Craigslist, resolved to 64.120.31.120, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"craigslist.org","spelling":"combo","match":"name","token":"craigslist","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"64.120.31.120","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/craigslist"},{"hostname":"turkiye-gov.biz","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"e-devlet","name":"e-Devlet","url":"https://domainspoof.com/brands/e-devlet"}],"dns":"resolved","resolved":["47.253.254.10"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “turkiye-gov”, a name we match for e-Devlet, listed by USOM","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"e-devlet.gov.tr","spelling":"combo","match":"name","token":"turkiye-gov","found_by":"zone_file","listings":[{"kind":"reported","source":"usom","source_name":"USOM","host":"turkiye-gov.biz","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/e-devlet"},{"hostname":"turkiye-gov.click","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"e-devlet","name":"e-Devlet","url":"https://domainspoof.com/brands/e-devlet"}],"dns":"resolved","resolved":["47.253.254.10"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “turkiye-gov”, a name we match for e-Devlet, listed by USOM","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"e-devlet.gov.tr","spelling":"combo","match":"name","token":"turkiye-gov","found_by":"zone_file","listings":[{"kind":"reported","source":"usom","source_name":"USOM","host":"turkiye-gov.click","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/e-devlet"},{"hostname":"vancouvercraigslist.org","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"craigslist","name":"Craigslist","url":"https://domainspoof.com/brands/craigslist"}],"dns":"resolved","resolved":["172.241.213.96"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “craigslist”, a name we match for Craigslist, resolved to 172.241.213.96, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"craigslist.org","spelling":"combo","match":"name","token":"craigslist","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"172.241.213.96","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/craigslist"},{"hostname":"viber-ethereum.xyz","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"ethereum","name":"Ethereum","url":"https://domainspoof.com/brands/ethereum"}],"dns":"resolved","resolved":["150.95.255.38"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “ethereum”, a name we match for Ethereum, resolved to 150.95.255.38, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"ethereum.org","spelling":"combo","match":"name","token":"ethereum","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"150.95.255.38","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/ethereum"},{"hostname":"viber-gitlab-refresh.xyz","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"gitlab","name":"GitLab","url":"https://domainspoof.com/brands/gitlab"}],"dns":"resolved","resolved":["150.95.255.38"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “gitlab”, a name we match for GitLab, resolved to 150.95.255.38, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"gitlab.com","spelling":"combo","match":"name","token":"gitlab","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"150.95.255.38","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/gitlab"},{"hostname":"vnavyfederal.org","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"navy-federal-credit-union","name":"Navy Federal Credit Union","url":"https://domainspoof.com/brands/navy-federal-credit-union"}],"dns":"resolved","resolved":["199.193.114.44"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of navyfederal.org (an added character), resolved to 199.193.114.44, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"navyfederal.org","spelling":"insertion","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"199.193.114.44","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/navy-federal-credit-union"},{"hostname":"vote-ethena.app","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"ethena","name":"Ethena","url":"https://domainspoof.com/brands/ethena"}],"dns":"resolved","resolved":["104.21.5.17","172.67.132.189","2606:4700:3030::6815:511","2606:4700:3035::ac43:84bd"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “ethena”, a name we match for Ethena, listed by MetaMask","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"ethena.fi","spelling":"combo","match":"name","token":"ethena","found_by":"zone_file","listings":[{"kind":"reported","source":"metamask","source_name":"MetaMask","host":"vote-ethena.app","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/ethena"},{"hostname":"voting-pendle.finance","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"pendle","name":"Pendle","url":"https://domainspoof.com/brands/pendle"}],"dns":"resolved","resolved":["104.21.87.3","172.67.139.25","2606:4700:3032::6815:5703","2606:4700:3034::ac43:8b19"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of pendle.finance (the name with an added word), listed by MetaMask","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"pendle.finance","spelling":"combo","found_by":"zone_file","listings":[{"kind":"reported","source":"metamask","source_name":"MetaMask","host":"voting-pendle.finance","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/pendle"},{"hostname":"wander-liverpool.site","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"liverpool","name":"Liverpool","url":"https://domainspoof.com/brands/liverpool"}],"dns":"resolved","resolved":["2.59.170.20","104.219.250.37"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “liverpool”, a name we match for Liverpool, resolved to 2.59.170.20, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"liverpool.com.mx","spelling":"combo","match":"name","token":"liverpool","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"2.59.170.20","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/liverpool"},{"hostname":"waypoint-ethereum.xyz","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"ethereum","name":"Ethereum","url":"https://domainspoof.com/brands/ethereum"}],"dns":"resolved","resolved":["150.95.255.38"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “ethereum”, a name we match for Ethereum, resolved to 150.95.255.38, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"ethereum.org","spelling":"combo","match":"name","token":"ethereum","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"150.95.255.38","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/ethereum"},{"hostname":"wealth-splunk-widget.xyz","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"cisco","name":"Cisco","url":"https://domainspoof.com/brands/cisco"}],"dns":"resolved","resolved":["150.95.255.38"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “splunk”, a name we match for Cisco, resolved to 150.95.255.38, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"cisco.com","spelling":"combo","match":"name","token":"splunk","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"150.95.255.38","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/cisco"},{"hostname":"who-facebook.xyz","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"facebook","name":"Facebook","url":"https://domainspoof.com/brands/facebook"}],"dns":"resolved","resolved":["150.95.255.38"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “facebook”, a name we match for Facebook, resolved to 150.95.255.38, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"facebook.com","spelling":"combo","match":"name","token":"facebook","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"150.95.255.38","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/facebook"},{"hostname":"whom-facebook.xyz","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"facebook","name":"Facebook","url":"https://domainspoof.com/brands/facebook"}],"dns":"resolved","resolved":["150.95.255.38"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “facebook”, a name we match for Facebook, resolved to 150.95.255.38, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"facebook.com","spelling":"combo","match":"name","token":"facebook","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"150.95.255.38","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/facebook"},{"hostname":"wisdom-project-gitlab.xyz","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"gitlab","name":"GitLab","url":"https://domainspoof.com/brands/gitlab"}],"dns":"resolved","resolved":["150.95.255.38"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “gitlab”, a name we match for GitLab, resolved to 150.95.255.38, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"gitlab.com","spelling":"combo","match":"name","token":"gitlab","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"150.95.255.38","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/gitlab"},{"hostname":"xilinx-facebook-off.xyz","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"facebook","name":"Facebook","url":"https://domainspoof.com/brands/facebook"}],"dns":"resolved","resolved":["150.95.255.38"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “facebook”, a name we match for Facebook, resolved to 150.95.255.38, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"facebook.com","spelling":"combo","match":"name","token":"facebook","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"150.95.255.38","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/facebook"},{"hostname":"yes-puppet-gitlab-portal.xyz","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"gitlab","name":"GitLab","url":"https://domainspoof.com/brands/gitlab"}],"dns":"resolved","resolved":["150.95.255.38"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “gitlab”, a name we match for GitLab, resolved to 150.95.255.38, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"gitlab.com","spelling":"combo","match":"name","token":"gitlab","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"150.95.255.38","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/gitlab"},{"hostname":"zoinbase.vip","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"coinbase","name":"Coinbase","url":"https://domainspoof.com/brands/coinbase"}],"dns":"resolved","resolved":["2.59.170.20","104.219.250.37"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of coinbase.com (a changed character), resolved to 2.59.170.20, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"coinbase.com","spelling":"replacement","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"2.59.170.20","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/coinbase"},{"hostname":"zone-gitlab-snippet-policy.xyz","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"gitlab","name":"GitLab","url":"https://domainspoof.com/brands/gitlab"}],"dns":"resolved","resolved":["150.95.255.38"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “gitlab”, a name we match for GitLab, resolved to 150.95.255.38, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"gitlab.com","spelling":"combo","match":"name","token":"gitlab","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"150.95.255.38","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/gitlab"},{"hostname":"zone-subscribe-gitlab.xyz","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","brands":[{"id":"gitlab","name":"GitLab","url":"https://domainspoof.com/brands/gitlab"}],"dns":"resolved","resolved":["150.95.255.38"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “gitlab”, a name we match for GitLab, resolved to 150.95.255.38, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:41:47.000Z","first_published":"2026-11-06T00:41:47.000Z","of":"gitlab.com","spelling":"combo","match":"name","token":"gitlab","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"150.95.255.38","flagged_at":"2026-11-06T00:41:47Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/gitlab"},{"hostname":"00163714.zeina-tech.com","first_observed":"2026-11-05T23:36:22.680Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"resolved","resolved":["194.38.22.73"],"resolved_at":"2026-11-05T23:36:51Z","dns_checked_at":"2026-11-06T00:51:07.000Z","dns_since":"2026-11-06T00:51:07.000Z","findings":[{"id":"fxqgynktpymvy3pfpgyjy","kind":"reported_domain","summary":"Under zeina-tech.com, reported by PhishDestroy","first_observed":"2026-11-05T23:36:22.680Z","first_published":"2026-11-06T00:39:38.884Z","source":"phishdestroy","source_name":"PhishDestroy","under":"zeina-tech.com","source_url":"https://phishdestroy.io/domain/zeina-tech.com/"}],"url":"https://domainspoof.com/live?show=all&q=00163714.zeina-tech.com"},{"hostname":"1-hub-torchpad.pages.dev","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"resolved","resolved":["172.66.44.244","172.66.47.12","2606:4700:310c::ac42:2cf4","2606:4700:310c::ac42:2f0c"],"resolved_at":"2026-11-05T23:55:25Z","dns_checked_at":"2026-11-06T00:51:07.000Z","dns_since":"2026-11-06T00:51:07.000Z","findings":[{"id":"f5s7ygowmzr7242vzb2wi","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=1-hub-torchpad.pages.dev"},{"hostname":"1-hub-zamaeco.pages.dev","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"resolved","resolved":["172.66.44.166","172.66.47.90","2606:4700:310c::ac42:2ca6","2606:4700:310c::ac42:2f5a"],"resolved_at":"2026-11-05T23:55:25Z","dns_checked_at":"2026-11-06T00:51:07.000Z","dns_since":"2026-11-06T00:51:07.000Z","findings":[{"id":"f4cukn7fwmpb3iyhll2db","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=1-hub-zamaeco.pages.dev"},{"hostname":"1-ramseseco.pages.dev","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"resolved","resolved":["172.66.44.53","172.66.47.203","2606:4700:310c::ac42:2c35","2606:4700:310c::ac42:2fcb"],"resolved_at":"2026-11-05T23:55:25Z","dns_checked_at":"2026-11-06T00:51:07.000Z","dns_since":"2026-11-06T00:51:07.000Z","findings":[{"id":"f7hlovs3y6dqoaqkwposn","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=1-ramseseco.pages.dev"},{"hostname":"10-hookrfun.pages.dev","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"not_found","resolved":["172.66.44.98","172.66.47.158"],"resolved_at":"2026-11-06T15:21:12Z","dns_checked_at":"2026-11-06T08:56:07.000Z","findings":[{"id":"fja24v6qi2aozytg6qlfw","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=10-hookrfun.pages.dev"},{"hostname":"109-governance-deltaliquidity.pages.dev","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"not_found","resolved":[],"resolved_at":"2026-11-05T23:55:25Z","dns_checked_at":"2026-11-06T08:56:07.000Z","findings":[{"id":"f36qzvri54fz4tggggty4","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=109-governance-deltaliquidity.pages.dev"},{"hostname":"11-hookrfun.pages.dev","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"resolved","resolved":["172.66.44.103","172.66.47.153"],"resolved_at":"2026-11-06T15:26:27Z","dns_checked_at":"2026-11-06T00:51:07.000Z","dns_since":"2026-11-06T00:51:07.000Z","findings":[{"id":"fds47rwbpvqvmmjm5nciu","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=11-hookrfun.pages.dev"},{"hostname":"110-governance-deltaliquidity.pages.dev","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"not_found","resolved":[],"resolved_at":"2026-11-05T23:55:25Z","dns_checked_at":"2026-11-06T08:56:07.000Z","findings":[{"id":"fk6v2ii4swmlxfdjjfghm","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=110-governance-deltaliquidity.pages.dev"},{"hostname":"111-governance-deltaliquidity.pages.dev","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"not_found","resolved":[],"resolved_at":"2026-11-05T23:55:25Z","dns_checked_at":"2026-11-06T08:56:07.000Z","findings":[{"id":"fokexonsdlo677hqh3kgu","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=111-governance-deltaliquidity.pages.dev"},{"hostname":"112-governance-deltaliquidity.pages.dev","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"not_found","resolved":[],"resolved_at":"2026-11-05T23:55:25Z","dns_checked_at":"2026-11-06T08:56:07.000Z","findings":[{"id":"fvqgsvvfhk4t7oprurozc","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=112-governance-deltaliquidity.pages.dev"},{"hostname":"113-governance-deltaliquidity.pages.dev","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"not_found","resolved":[],"resolved_at":"2026-11-05T23:55:25Z","dns_checked_at":"2026-11-06T08:56:07.000Z","findings":[{"id":"fdzvkb5k4fbtlkckegc3y","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=113-governance-deltaliquidity.pages.dev"},{"hostname":"114-governance-deltaliquidity.pages.dev","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"not_found","resolved":[],"resolved_at":"2026-11-05T23:55:25Z","dns_checked_at":"2026-11-06T08:56:07.000Z","findings":[{"id":"fam6fespwjhwy2aisem25","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=114-governance-deltaliquidity.pages.dev"},{"hostname":"115-governance-deltaliquidity.pages.dev","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"not_found","resolved":[],"resolved_at":"2026-11-05T23:55:25Z","dns_checked_at":"2026-11-06T08:56:07.000Z","findings":[{"id":"f2k2gdpyn5cc45oaqf5do","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=115-governance-deltaliquidity.pages.dev"},{"hostname":"116-governance-deltaliquidity.pages.dev","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"not_found","resolved":[],"resolved_at":"2026-11-05T23:55:25Z","dns_checked_at":"2026-11-06T08:56:07.000Z","findings":[{"id":"fqxc6yzqhrysd6smyfg4g","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=116-governance-deltaliquidity.pages.dev"},{"hostname":"117-governance-deltaliquidity.pages.dev","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"not_found","resolved":[],"resolved_at":"2026-11-05T23:55:25Z","dns_checked_at":"2026-11-06T08:56:07.000Z","findings":[{"id":"fk4jvozvbm7k3nn727kyf","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=117-governance-deltaliquidity.pages.dev"},{"hostname":"118-governance-deltaliquidity.pages.dev","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"not_found","resolved":[],"resolved_at":"2026-11-05T23:55:25Z","dns_checked_at":"2026-11-06T08:56:07.000Z","findings":[{"id":"fntg4ollywusgrl6sqlxy","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=118-governance-deltaliquidity.pages.dev"},{"hostname":"119-governance-deltaliquidity.pages.dev","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"not_found","resolved":[],"resolved_at":"2026-11-05T23:55:25Z","dns_checked_at":"2026-11-06T08:56:07.000Z","findings":[{"id":"f3ifaud7qm4ilktlhgfes","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=119-governance-deltaliquidity.pages.dev"},{"hostname":"120-governance-deltaliquidity.pages.dev","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"not_found","resolved":[],"resolved_at":"2026-11-05T23:55:25Z","dns_checked_at":"2026-11-06T08:56:07.000Z","findings":[{"id":"fsjum5ti7jyolfjvrn4zh","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=120-governance-deltaliquidity.pages.dev"},{"hostname":"121-governance-deltaliquidity.pages.dev","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"not_found","resolved":[],"resolved_at":"2026-11-05T23:55:25Z","dns_checked_at":"2026-11-06T08:56:07.000Z","findings":[{"id":"fxxfrd5kbhgiddo6gwoex","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=121-governance-deltaliquidity.pages.dev"},{"hostname":"122-governance-deltaliquidity.pages.dev","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"not_found","resolved":[],"resolved_at":"2026-11-05T23:55:25Z","dns_checked_at":"2026-11-06T08:56:07.000Z","findings":[{"id":"fhpdotop47ogkmypnffqr","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=122-governance-deltaliquidity.pages.dev"},{"hostname":"123-governance-deltaliquidity.pages.dev","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"not_found","resolved":[],"resolved_at":"2026-11-05T23:55:25Z","dns_checked_at":"2026-11-06T08:56:07.000Z","findings":[{"id":"f537uyko3ygs2ygqjhtmb","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=123-governance-deltaliquidity.pages.dev"},{"hostname":"124-governance-deltaliquidity.pages.dev","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"not_found","resolved":[],"resolved_at":"2026-11-05T23:55:25Z","dns_checked_at":"2026-11-06T08:56:07.000Z","findings":[{"id":"fvhg7kgihfgwojxyeq4kf","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=124-governance-deltaliquidity.pages.dev"},{"hostname":"124-votes-hookrfun.pages.dev","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"not_found","resolved":[],"resolved_at":"2026-11-05T23:55:25Z","dns_checked_at":"2026-11-06T08:56:07.000Z","findings":[{"id":"fsgsil34ypz5t2kwjfwqc","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=124-votes-hookrfun.pages.dev"},{"hostname":"125-governance-deltaliquidity.pages.dev","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"not_found","resolved":[],"resolved_at":"2026-11-05T23:55:25Z","dns_checked_at":"2026-11-06T08:56:07.000Z","findings":[{"id":"fmnret2pcy4n77owsexlo","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=125-governance-deltaliquidity.pages.dev"},{"hostname":"126-governance-deltaliquidity.pages.dev","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"not_found","resolved":[],"resolved_at":"2026-11-05T23:55:24Z","dns_checked_at":"2026-11-06T08:56:07.000Z","findings":[{"id":"ft34e3ptzaqt7craknpue","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=126-governance-deltaliquidity.pages.dev"},{"hostname":"127-governance-deltaliquidity.pages.dev","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"resolved","resolved":["172.66.44.63","172.66.47.193","2606:4700:310c::ac42:2c3f","2606:4700:310c::ac42:2fc1"],"resolved_at":"2026-11-05T23:55:25Z","dns_checked_at":"2026-11-06T00:51:07.000Z","dns_since":"2026-11-06T00:51:07.000Z","findings":[{"id":"fki25t4zk42e7mdl3ndux","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=127-governance-deltaliquidity.pages.dev"},{"hostname":"132832coinbase.com","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"resolved","resolved":["104.21.94.123","172.67.223.111","2606:4700:3032::6815:5e7b","2606:4700:3033::ac43:df6f"],"resolved_at":"2026-11-05T23:55:25Z","dns_checked_at":"2026-11-06T00:51:07.000Z","dns_since":"2026-11-06T00:51:07.000Z","findings":[{"id":"fbksnun2xmyfufbmladcz","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=132832coinbase.com"},{"hostname":"17-vote-netnetcapital.pages.dev","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"not_found","resolved":[],"resolved_at":"2026-11-06T10:13:31Z","dns_checked_at":"2026-11-06T08:56:07.000Z","findings":[{"id":"famont3hhpzmb47vfw7va","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=17-vote-netnetcapital.pages.dev"},{"hostname":"20-vote-netnetcapital.pages.dev","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"resolved","resolved":["172.66.44.73","172.66.47.183"],"resolved_at":"2026-11-06T08:56:40Z","dns_checked_at":"2026-11-06T00:51:07.000Z","dns_since":"2026-11-06T00:51:07.000Z","findings":[{"id":"fkioall5w6bff7l4dex54","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=20-vote-netnetcapital.pages.dev"},{"hostname":"292528-binance.xyz","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","brands":[{"id":"binance","name":"Binance","url":"https://domainspoof.com/brands/binance"}],"dns":"not_found","resolved":[],"resolved_at":"2026-11-05T23:55:24Z","dns_checked_at":"2026-11-06T08:56:07.000Z","findings":[{"id":"fvgxwhpfuvbfxtlovnsfi","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/brands/binance"},{"hostname":"384734-apple.com","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"not_found","resolved":[],"resolved_at":"2026-11-05T23:55:24Z","dns_checked_at":"2026-11-06T08:56:07.000Z","findings":[{"id":"fjw4vo6yldnso6va2k74g","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=384734-apple.com"},{"hostname":"394834binance.com","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"resolved","resolved":["104.21.18.21","172.67.179.162","2606:4700:3033::6815:1215","2606:4700:3034::ac43:b3a2"],"resolved_at":"2026-11-05T23:55:24Z","dns_checked_at":"2026-11-06T00:51:07.000Z","dns_since":"2026-11-06T00:51:07.000Z","findings":[{"id":"fb5kiuejg734rkyixnle4","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=394834binance.com"},{"hostname":"3a9b03a7.zeina-tech.com","first_observed":"2026-11-05T23:36:22.680Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"resolved","resolved":["194.38.22.76"],"resolved_at":"2026-11-05T23:36:51Z","dns_checked_at":"2026-11-06T00:51:07.000Z","dns_since":"2026-11-06T00:51:07.000Z","findings":[{"id":"ficpwhmc4sfsrdsulixg2","kind":"reported_domain","summary":"Under zeina-tech.com, reported by PhishDestroy","first_observed":"2026-11-05T23:36:22.680Z","first_published":"2026-11-06T00:39:38.884Z","source":"phishdestroy","source_name":"PhishDestroy","under":"zeina-tech.com","source_url":"https://phishdestroy.io/domain/zeina-tech.com/"}],"url":"https://domainspoof.com/live?show=all&q=3a9b03a7.zeina-tech.com"},{"hostname":"4-derivegovernance.pages.dev","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"resolved","resolved":["172.66.44.207","172.66.47.49","2606:4700:310c::ac42:2ccf","2606:4700:310c::ac42:2f31"],"resolved_at":"2026-11-05T23:55:24Z","dns_checked_at":"2026-11-06T00:51:07.000Z","dns_since":"2026-11-06T00:51:07.000Z","findings":[{"id":"ft3dakhxj22whmr6i5ajh","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=4-derivegovernance.pages.dev"},{"hostname":"4-katananetwork.pages.dev","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"not_found","resolved":[],"resolved_at":"2026-11-05T23:55:24Z","dns_checked_at":"2026-11-06T08:56:07.000Z","findings":[{"id":"fh4jtfahk4tyd6kc7j44i","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=4-katananetwork.pages.dev"},{"hostname":"4-policy-hyperliquidgov.pages.dev","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","brands":[{"id":"hyperliquid","name":"Hyperliquid","url":"https://domainspoof.com/brands/hyperliquid"}],"dns":"resolved","resolved":["172.66.44.79","172.66.47.177","2606:4700:310c::ac42:2c4f","2606:4700:310c::ac42:2fb1"],"resolved_at":"2026-11-05T23:55:24Z","dns_checked_at":"2026-11-06T00:51:07.000Z","dns_since":"2026-11-06T00:51:07.000Z","findings":[{"id":"f4fluezvaywyvliimtq5o","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/brands/hyperliquid"},{"hostname":"4909143c.zeina-tech.com","first_observed":"2026-11-05T23:36:22.680Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"resolved","resolved":["194.38.20.81"],"resolved_at":"2026-11-05T23:36:51Z","dns_checked_at":"2026-11-06T00:51:07.000Z","dns_since":"2026-11-06T00:51:07.000Z","findings":[{"id":"fl5irk6qzeccyczsa6qdw","kind":"reported_domain","summary":"Under zeina-tech.com, reported by PhishDestroy","first_observed":"2026-11-05T23:36:22.680Z","first_published":"2026-11-06T00:39:38.884Z","source":"phishdestroy","source_name":"PhishDestroy","under":"zeina-tech.com","source_url":"https://phishdestroy.io/domain/zeina-tech.com/"}],"url":"https://domainspoof.com/live?show=all&q=4909143c.zeina-tech.com"},{"hostname":"493a1017.zeina-tech.com","first_observed":"2026-11-05T23:36:22.680Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"resolved","resolved":["194.38.22.77"],"resolved_at":"2026-11-05T23:36:51Z","dns_checked_at":"2026-11-06T00:51:07.000Z","dns_since":"2026-11-06T00:51:07.000Z","findings":[{"id":"fhx2vtsgblc4baszstuh4","kind":"reported_domain","summary":"Under zeina-tech.com, reported by PhishDestroy","first_observed":"2026-11-05T23:36:22.680Z","first_published":"2026-11-06T00:39:38.884Z","source":"phishdestroy","source_name":"PhishDestroy","under":"zeina-tech.com","source_url":"https://phishdestroy.io/domain/zeina-tech.com/"}],"url":"https://domainspoof.com/live?show=all&q=493a1017.zeina-tech.com"},{"hostname":"5-fraxfinance.pages.dev","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"resolved","resolved":["172.66.44.242","172.66.47.14","2606:4700:310c::ac42:2cf2","2606:4700:310c::ac42:2f0e"],"resolved_at":"2026-11-05T23:55:24Z","dns_checked_at":"2026-11-06T00:51:07.000Z","dns_since":"2026-11-06T00:51:07.000Z","findings":[{"id":"fnztxxnqwrxsqyu566iih","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=5-fraxfinance.pages.dev"},{"hostname":"5-governance-fungolabs.pages.dev","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"not_found","resolved":[],"resolved_at":"2026-11-05T23:55:24Z","dns_checked_at":"2026-11-06T08:56:07.000Z","findings":[{"id":"fd7vhp73xzrislzql5br6","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=5-governance-fungolabs.pages.dev"},{"hostname":"5-katananetwork.pages.dev","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"resolved","resolved":["172.66.45.11","172.66.46.245","2606:4700:310c::ac42:2d0b","2606:4700:310c::ac42:2ef5"],"resolved_at":"2026-11-05T23:55:24Z","dns_checked_at":"2026-11-06T00:51:07.000Z","dns_since":"2026-11-06T00:51:07.000Z","findings":[{"id":"f6nzk3wflzec2wv4fi32v","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=5-katananetwork.pages.dev"},{"hostname":"6-governance-fungolabs.pages.dev","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"resolved","resolved":["172.66.45.12","172.66.46.244","2606:4700:310c::ac42:2d0c","2606:4700:310c::ac42:2ef4"],"resolved_at":"2026-11-05T23:55:24Z","dns_checked_at":"2026-11-06T00:51:07.000Z","dns_since":"2026-11-06T00:51:07.000Z","findings":[{"id":"frcwtzawcgaezopt3wpxf","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=6-governance-fungolabs.pages.dev"},{"hostname":"6-orbioeco.pages.dev","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"not_found","resolved":[],"resolved_at":"2026-11-05T23:55:24Z","dns_checked_at":"2026-11-06T08:56:07.000Z","findings":[{"id":"fwz4e2k5b4yto34tiasbx","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=6-orbioeco.pages.dev"},{"hostname":"6-torchpadgov.pages.dev","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"resolved","resolved":["172.66.44.54","172.66.47.202","2606:4700:310c::ac42:2c36","2606:4700:310c::ac42:2fca"],"resolved_at":"2026-11-05T23:55:24Z","dns_checked_at":"2026-11-06T00:51:07.000Z","dns_since":"2026-11-06T00:51:07.000Z","findings":[{"id":"ffzhyvm3pf3mgrixtvexz","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=6-torchpadgov.pages.dev"},{"hostname":"7-orbioeco.pages.dev","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"resolved","resolved":["172.66.44.173","172.66.47.83","2606:4700:310c::ac42:2cad","2606:4700:310c::ac42:2f53"],"resolved_at":"2026-11-05T23:55:24Z","dns_checked_at":"2026-11-06T00:51:07.000Z","dns_since":"2026-11-06T00:51:07.000Z","findings":[{"id":"fo7uouuzczaqiw6fxzq6q","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=7-orbioeco.pages.dev"},{"hostname":"709207ledger.com","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"resolved","resolved":["104.21.80.190","172.67.153.74","2606:4700:3031::ac43:994a","2606:4700:3037::6815:50be"],"resolved_at":"2026-11-05T23:55:24Z","dns_checked_at":"2026-11-06T00:51:07.000Z","dns_since":"2026-11-06T00:51:07.000Z","findings":[{"id":"fkbkbtovleoahlawsjqdj","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=709207ledger.com"},{"hostname":"713942google.com","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"resolved","resolved":["104.21.27.157","172.67.143.58","2606:4700:3030::ac43:8f3a","2606:4700:3036::6815:1b9d"],"resolved_at":"2026-11-05T23:55:24Z","dns_checked_at":"2026-11-06T00:51:07.000Z","dns_since":"2026-11-06T00:51:07.000Z","findings":[{"id":"f42xyebygqoqimerbu2gw","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=713942google.com"},{"hostname":"73265428375733.sbs","first_observed":"2026-11-06T00:20:04.684Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"resolved","resolved":["104.21.21.27","172.67.196.4","2606:4700:3034::ac43:c404","2606:4700:3037::6815:151b"],"resolved_at":"2026-11-06T00:20:56Z","dns_checked_at":"2026-11-06T00:51:07.000Z","dns_since":"2026-11-06T00:51:07.000Z","findings":[{"id":"fgno7o3cdzqjkgzl7irdh","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-06T00:20:04.684Z","first_published":"2026-11-06T00:39:38.884Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=73265428375733.sbs"},{"hostname":"798437-google.com","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","brands":[{"id":"google","name":"Google","url":"https://domainspoof.com/brands/google"}],"dns":"resolved","resolved":["104.21.29.114","172.67.148.200","2606:4700:3034::ac43:94c8","2606:4700:3036::6815:1d72"],"resolved_at":"2026-11-05T23:55:24Z","dns_checked_at":"2026-11-06T00:51:07.000Z","dns_since":"2026-11-06T00:51:07.000Z","findings":[{"id":"fyxsqqdjp6czprrbc7ktr","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/brands/google"},{"hostname":"8-hyperlendeco.pages.dev","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"not_found","resolved":[],"resolved_at":"2026-11-05T23:55:24Z","dns_checked_at":"2026-11-06T08:56:07.000Z","findings":[{"id":"f5wf5pzpoymrm3lfuucon","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=8-hyperlendeco.pages.dev"},{"hostname":"8130b394.zeina-tech.com","first_observed":"2026-11-05T23:36:22.680Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"resolved","resolved":["194.38.20.53"],"resolved_at":"2026-11-05T23:36:52Z","dns_checked_at":"2026-11-06T00:51:07.000Z","dns_since":"2026-11-06T00:51:07.000Z","findings":[{"id":"fc4dm5uj7cur2ywv2mnji","kind":"reported_domain","summary":"Under zeina-tech.com, reported by PhishDestroy","first_observed":"2026-11-05T23:36:22.680Z","first_published":"2026-11-06T00:39:38.884Z","source":"phishdestroy","source_name":"PhishDestroy","under":"zeina-tech.com","source_url":"https://phishdestroy.io/domain/zeina-tech.com/"}],"url":"https://domainspoof.com/live?show=all&q=8130b394.zeina-tech.com"},{"hostname":"82ea7902.zeina-tech.com","first_observed":"2026-11-05T23:36:22.680Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"resolved","resolved":["194.38.20.68"],"resolved_at":"2026-11-05T23:36:52Z","dns_checked_at":"2026-11-06T00:51:07.000Z","dns_since":"2026-11-06T00:51:07.000Z","findings":[{"id":"fxq675wp5vdesjfw7epsd","kind":"reported_domain","summary":"Under zeina-tech.com, reported by PhishDestroy","first_observed":"2026-11-05T23:36:22.680Z","first_published":"2026-11-06T00:39:38.884Z","source":"phishdestroy","source_name":"PhishDestroy","under":"zeina-tech.com","source_url":"https://phishdestroy.io/domain/zeina-tech.com/"}],"url":"https://domainspoof.com/live?show=all&q=82ea7902.zeina-tech.com"},{"hostname":"8573757983.cfd","first_observed":"2026-11-06T00:20:04.684Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"resolved","resolved":["104.21.94.119","172.67.223.68","2606:4700:3031::ac43:df44","2606:4700:3035::6815:5e77"],"resolved_at":"2026-11-06T00:20:56Z","dns_checked_at":"2026-11-06T00:51:07.000Z","dns_since":"2026-11-06T00:51:07.000Z","findings":[{"id":"fomekpneg2bmqiokq34qv","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-06T00:20:04.684Z","first_published":"2026-11-06T00:39:38.884Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=8573757983.cfd"},{"hostname":"9-hyperlendeco.pages.dev","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"resolved","resolved":["172.66.45.6","172.66.46.250","2606:4700:310c::ac42:2d06","2606:4700:310c::ac42:2efa"],"resolved_at":"2026-11-05T23:55:24Z","dns_checked_at":"2026-11-06T00:51:07.000Z","dns_since":"2026-11-06T00:51:07.000Z","findings":[{"id":"fnfvrr4yshg5zbvuztndg","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=9-hyperlendeco.pages.dev"},{"hostname":"910248-coinbase.com","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","brands":[{"id":"coinbase","name":"Coinbase","url":"https://domainspoof.com/brands/coinbase"}],"dns":"no_address","resolved":[],"resolved_at":"2026-11-05T23:55:25Z","dns_checked_at":"2026-11-06T08:56:07.000Z","findings":[{"id":"fy3qdpabsqf6q5vc3lusu","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/brands/coinbase"},{"hostname":"abs-binance.com.cn","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","brands":[{"id":"binance","name":"Binance","url":"https://domainspoof.com/brands/binance"}],"dns":"resolved","resolved":["104.21.46.15","172.67.222.63","2606:4700:3030::6815:2e0f","2606:4700:3033::ac43:de3f"],"resolved_at":"2026-11-05T23:55:24Z","dns_checked_at":"2026-11-06T00:51:07.000Z","dns_since":"2026-11-06T00:51:07.000Z","findings":[{"id":"fn5bl4t75pmv2joxeksdw","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/brands/binance"},{"hostname":"accountupdate.click","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"resolved","resolved":["104.21.75.116","172.67.222.206","2606:4700:3033::6815:4b74","2606:4700:3036::ac43:dece"],"resolved_at":"2026-11-05T23:55:24Z","dns_checked_at":"2026-11-06T00:51:07.000Z","dns_since":"2026-11-06T00:51:07.000Z","findings":[{"id":"fnzohx76iubfza4z2orzk","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=accountupdate.click"},{"hostname":"aero-votes.pages.dev","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"resolved","resolved":["172.66.44.196","172.66.47.60","2606:4700:310c::ac42:2cc4","2606:4700:310c::ac42:2f3c"],"resolved_at":"2026-11-05T23:55:24Z","dns_checked_at":"2026-11-06T00:51:07.000Z","dns_since":"2026-11-06T00:51:07.000Z","findings":[{"id":"fixklb5bkm7i3vd5f4zug","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=aero-votes.pages.dev"},{"hostname":"allocate-plasma.com","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"resolved","resolved":["104.21.25.76","172.67.223.247","2606:4700:3035::6815:194c","2606:4700:3037::ac43:dff7"],"resolved_at":"2026-11-05T23:55:24Z","dns_checked_at":"2026-11-06T00:51:07.000Z","dns_since":"2026-11-06T00:51:07.000Z","findings":[{"id":"faqvfnhohopdoskog3xhn","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=allocate-plasma.com"},{"hostname":"allocation-artificialinu.pics","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"resolved","resolved":["104.21.87.139","172.67.143.132","2606:4700:3036::6815:578b","2606:4700:3037::ac43:8f84"],"resolved_at":"2026-11-05T23:55:24Z","dns_checked_at":"2026-11-06T00:51:07.000Z","dns_since":"2026-11-06T00:51:07.000Z","findings":[{"id":"fkjgq2onb7hdwktotul7u","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=allocation-artificialinu.pics"},{"hostname":"alpenews.com","first_observed":"2026-11-05T23:31:15.422Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"resolved","resolved":["104.21.95.117","172.67.144.189"],"resolved_at":"2026-11-05T23:40:34Z","dns_checked_at":"2026-11-06T00:51:07.000Z","dns_since":"2026-11-06T00:51:07.000Z","findings":[{"id":"foko4nehasaop4nekxpfo","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T23:31:15.422Z","first_published":"2026-11-06T00:39:38.884Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/alpenews.com/"}],"url":"https://domainspoof.com/live?show=all&q=alpenews.com"},{"hostname":"aml2-binance.com","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","brands":[{"id":"binance","name":"Binance","url":"https://domainspoof.com/brands/binance"}],"dns":"resolved","resolved":["104.21.86.146","172.67.220.150","2606:4700:3032::ac43:dc96","2606:4700:3037::6815:5692"],"resolved_at":"2026-11-05T23:55:24Z","dns_checked_at":"2026-11-06T00:51:07.000Z","dns_since":"2026-11-06T00:51:07.000Z","findings":[{"id":"fuupdm52i3bfx7hxxdi5r","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/brands/binance"},{"hostname":"amlbot.live","first_observed":"2026-11-05T23:31:15.422Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"resolved","resolved":[],"resolved_at":"2026-11-05T23:40:34Z","dns_checked_at":"2026-11-06T00:51:07.000Z","dns_since":"2026-11-06T00:51:07.000Z","findings":[{"id":"fkcqah47pv4w3nql7qnnz","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T23:31:15.422Z","first_published":"2026-11-06T00:39:38.884Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/amlbot.live/"}],"url":"https://domainspoof.com/live?show=all&q=amlbot.live"},{"hostname":"amltrc20.com","first_observed":"2026-11-05T23:26:04.147Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"resolved","resolved":["13.248.169.48","76.223.54.146"],"resolved_at":"2026-11-05T23:34:45Z","dns_checked_at":"2026-11-06T00:51:07.000Z","dns_since":"2026-11-06T00:51:07.000Z","findings":[{"id":"fhqjaqzajny3jve22gpha","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T23:26:04.147Z","first_published":"2026-11-06T00:39:38.884Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/amltrc20.com/"}],"url":"https://domainspoof.com/live?show=all&q=amltrc20.com"},{"hostname":"ankaraduguncekimi.com","first_observed":"2026-11-05T23:26:04.147Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"resolved","resolved":["89.252.187.207"],"resolved_at":"2026-11-05T23:34:46Z","dns_checked_at":"2026-11-06T00:51:07.000Z","dns_since":"2026-11-06T00:51:07.000Z","findings":[{"id":"fywppewegz2val5hqkm2i","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T23:26:04.147Z","first_published":"2026-11-06T00:39:38.884Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=ankaraduguncekimi.com"},{"hostname":"anonymix.me","first_observed":"2026-11-05T23:41:23.990Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"resolved","resolved":["104.21.23.63","172.67.209.117"],"resolved_at":"2026-11-06T03:03:49Z","dns_checked_at":"2026-11-06T00:51:07.000Z","dns_since":"2026-11-06T00:51:07.000Z","findings":[{"id":"fn45hrcy2zwcjhrahjugk","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T23:41:23.990Z","first_published":"2026-11-06T00:39:38.884Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/anonymix.me/"}],"url":"https://domainspoof.com/live?show=all&q=anonymix.me"},{"hostname":"api.trader-pro-ai-platform-com.financecryptoworld.com","first_observed":"2026-11-06T00:26:21.784Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"resolved","resolved":["104.21.10.130","172.67.131.121"],"resolved_at":"2026-11-06T00:26:21Z","dns_checked_at":"2026-11-06T00:51:07.000Z","dns_since":"2026-11-06T00:51:07.000Z","findings":[{"id":"fmkkda2foh4ahxluvzw3y","kind":"reported_domain","summary":"Under financecryptoworld.com, listed by CERT Polska","first_observed":"2026-11-06T00:26:21.784Z","first_published":"2026-11-06T00:39:38.884Z","source":"cert_polska","source_name":"CERT Polska","under":"financecryptoworld.com"}],"url":"https://domainspoof.com/live?show=all&q=api.trader-pro-ai-platform-com.financecryptoworld.com"},{"hostname":"app-s-rslv.help","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"not_found","resolved":[],"resolved_at":"2026-11-05T23:55:24Z","dns_checked_at":"2026-11-06T08:56:07.000Z","findings":[{"id":"fbjyd3ybvg27qj24mwdtb","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=app-s-rslv.help"},{"hostname":"arbitrum-bridge.com","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","brands":[{"id":"arbitrum","name":"Arbitrum","url":"https://domainspoof.com/brands/arbitrum"}],"dns":"resolved","resolved":["104.21.68.181","172.67.197.141","2606:4700:3032::ac43:c58d","2606:4700:3035::6815:44b5"],"resolved_at":"2026-11-05T23:55:24Z","dns_checked_at":"2026-11-06T00:51:07.000Z","dns_since":"2026-11-06T00:51:07.000Z","findings":[{"id":"fzv5ygoq7ihvha62vzthb","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/brands/arbitrum"},{"hostname":"argentiscapora.pro","first_observed":"2026-11-06T00:21:13.428Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"resolved","resolved":["104.21.51.210","172.67.186.88"],"resolved_at":"2026-11-06T00:21:22Z","dns_checked_at":"2026-11-06T00:51:07.000Z","dns_since":"2026-11-06T00:51:07.000Z","findings":[{"id":"feqh2gl7w7exqbkvwk23n","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-06T00:21:13.428Z","first_published":"2026-11-06T00:39:38.884Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=argentiscapora.pro"},{"hostname":"aurisos-assetn154.live","first_observed":"2026-11-05T23:26:04.147Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"resolved","resolved":["104.21.46.138","172.67.139.47"],"resolved_at":"2026-11-06T01:02:57Z","dns_checked_at":"2026-11-06T00:51:07.000Z","dns_since":"2026-11-06T00:51:07.000Z","findings":[{"id":"fko4i3lwxqzpd34jcbta4","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T23:26:04.147Z","first_published":"2026-11-06T00:39:38.884Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=aurisos-assetn154.live"},{"hostname":"auth-portal-onlinegov.com","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"resolved","resolved":["104.21.60.137","172.67.197.57","2606:4700:3035::6815:3c89","2606:4700:3036::ac43:c539"],"resolved_at":"2026-11-05T23:55:24Z","dns_checked_at":"2026-11-06T00:51:07.000Z","dns_since":"2026-11-06T00:51:07.000Z","findings":[{"id":"f4ghs6j4lylz2crvygjhw","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=auth-portal-onlinegov.com"},{"hostname":"azlek-network.org","first_observed":"2026-11-05T23:41:23.990Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"resolved","resolved":["104.21.2.21","172.67.128.152"],"resolved_at":"2026-11-06T01:00:59Z","dns_checked_at":"2026-11-06T00:51:07.000Z","dns_since":"2026-11-06T00:51:07.000Z","findings":[{"id":"fyfxasxv2vbdnxmb3su2d","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T23:41:23.990Z","first_published":"2026-11-06T00:39:38.884Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=azlek-network.org"},{"hostname":"bb-binance.ac.cn","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","brands":[{"id":"binance","name":"Binance","url":"https://domainspoof.com/brands/binance"}],"dns":"resolved","resolved":["43.239.166.26"],"resolved_at":"2026-11-05T23:55:25Z","dns_checked_at":"2026-11-06T00:51:07.000Z","dns_since":"2026-11-06T00:51:07.000Z","findings":[{"id":"ftociaiu7tva45zgq3nty","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/brands/binance"},{"hostname":"bb-binance.cn","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","brands":[{"id":"binance","name":"Binance","url":"https://domainspoof.com/brands/binance"}],"dns":"resolved","resolved":["43.239.165.11"],"resolved_at":"2026-11-05T23:55:24Z","dns_checked_at":"2026-11-06T00:51:07.000Z","dns_since":"2026-11-06T00:51:07.000Z","findings":[{"id":"fkoscpyqljsx5cs37farz","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/brands/binance"},{"hostname":"bb-binance.net.cn","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","brands":[{"id":"binance","name":"Binance","url":"https://domainspoof.com/brands/binance"}],"dns":"resolved","resolved":["45.122.133.231"],"resolved_at":"2026-11-05T23:55:25Z","dns_checked_at":"2026-11-06T00:51:07.000Z","dns_since":"2026-11-06T00:51:07.000Z","findings":[{"id":"flxr53m7ableprzxqiqqb","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/brands/binance"},{"hostname":"bb-binance.org.cn","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","brands":[{"id":"binance","name":"Binance","url":"https://domainspoof.com/brands/binance"}],"dns":"resolved","resolved":["45.122.133.215"],"resolved_at":"2026-11-05T23:55:25Z","dns_checked_at":"2026-11-06T00:51:07.000Z","dns_since":"2026-11-06T00:51:07.000Z","findings":[{"id":"fc5ux52dewsqznfhgbnzj","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/brands/binance"},{"hostname":"bc42378f.zeina-tech.com","first_observed":"2026-11-05T23:36:22.680Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"resolved","resolved":["194.38.22.72"],"resolved_at":"2026-11-05T23:44:52Z","dns_checked_at":"2026-11-06T00:51:07.000Z","dns_since":"2026-11-06T00:51:07.000Z","findings":[{"id":"fly64o7z2e5q4qfld6z6y","kind":"reported_domain","summary":"Under zeina-tech.com, reported by PhishDestroy","first_observed":"2026-11-05T23:36:22.680Z","first_published":"2026-11-06T00:39:38.884Z","source":"phishdestroy","source_name":"PhishDestroy","under":"zeina-tech.com","source_url":"https://phishdestroy.io/domain/zeina-tech.com/"}],"url":"https://domainspoof.com/live?show=all&q=bc42378f.zeina-tech.com"},{"hostname":"beam-okx.com.cn","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"resolved","resolved":["104.21.78.217","172.67.137.164","2606:4700:3035::6815:4ed9","2606:4700:3035::ac43:89a4"],"resolved_at":"2026-11-05T23:55:24Z","dns_checked_at":"2026-11-06T00:51:07.000Z","dns_since":"2026-11-06T00:51:07.000Z","findings":[{"id":"f2qkdchx5664uci5vy4ia","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=beam-okx.com.cn"},{"hostname":"bh-binance.cn","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","brands":[{"id":"binance","name":"Binance","url":"https://domainspoof.com/brands/binance"}],"dns":"resolved","resolved":["104.21.65.236","172.67.152.197","2606:4700:3036::ac43:98c5","2606:4700:3037::6815:41ec"],"resolved_at":"2026-11-05T23:55:24Z","dns_checked_at":"2026-11-06T00:51:07.000Z","dns_since":"2026-11-06T00:51:07.000Z","findings":[{"id":"f3sb54c36dzr24ltaooj4","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/brands/binance"},{"hostname":"binance-bk.com.cn","first_observed":"2026-11-05T23:40:56.221Z","first_published":"2026-11-06T00:39:38.884Z","brands":[{"id":"binance","name":"Binance","url":"https://domainspoof.com/brands/binance"}],"dns":"resolved","resolved":["154.31.148.87"],"resolved_at":"2026-11-06T00:51:07Z","dns_checked_at":"2026-11-06T00:51:07.000Z","dns_since":"2026-11-06T00:51:07.000Z","findings":[{"id":"f2d44mopygjnyifos4eqj","kind":"phishing_infrastructure","summary":"Resolved to 154.31.148.87, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T23:40:56.221Z","first_published":"2026-11-06T00:39:38.884Z","address":"154.31.148.87","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/binance"},{"hostname":"bitigift.com","first_observed":"2026-11-06T00:00:47.488Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"resolved","resolved":["62.60.226.163"],"resolved_at":"2026-11-06T10:40:39Z","dns_checked_at":"2026-11-06T00:51:07.000Z","dns_since":"2026-11-06T00:51:07.000Z","findings":[{"id":"fwjijoijnvkpr2jhq3vnn","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-06T00:00:47.488Z","first_published":"2026-11-06T00:39:38.884Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=bitigift.com"},{"hostname":"bitradexpolska.pro","first_observed":"2026-11-06T00:10:55.664Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"resolved","resolved":["104.21.77.204","172.67.211.128"],"resolved_at":"2026-11-06T00:12:49Z","dns_checked_at":"2026-11-06T00:51:07.000Z","dns_since":"2026-11-06T00:51:07.000Z","findings":[{"id":"fv7zxna2xhnjyhhgkvuz5","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-06T00:10:55.664Z","first_published":"2026-11-06T00:39:38.884Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=bitradexpolska.pro"},{"hostname":"bravemukuwahanyumbu.icuprojects.online","first_observed":"2026-11-05T23:56:49.054Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"unknown","resolved":["198.251.84.236"],"resolved_at":"2026-11-06T00:07:07Z","dns_checked_at":"2026-11-06T00:51:07.000Z","findings":[{"id":"fnyxk3izxqcwlfnwqst6u","kind":"reported_domain","summary":"Under icuprojects.online, reported by PhishDestroy","first_observed":"2026-11-05T23:56:49.054Z","first_published":"2026-11-06T00:39:38.884Z","source":"phishdestroy","source_name":"PhishDestroy","under":"icuprojects.online","source_url":"https://phishdestroy.io/domain/icuprojects.online/"}],"url":"https://domainspoof.com/live?show=all&q=bravemukuwahanyumbu.icuprojects.online"},{"hostname":"brief.neocode.nl","first_observed":"2026-11-05T23:56:49.054Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"resolved","resolved":["194.31.150.169"],"resolved_at":"2026-11-06T00:07:07Z","dns_checked_at":"2026-11-06T00:51:07.000Z","dns_since":"2026-11-06T00:51:07.000Z","findings":[{"id":"fusky6kvlvi7kmpkieisk","kind":"reported_domain","summary":"Under neocode.nl, listed by MetaMask","first_observed":"2026-11-05T23:56:49.054Z","first_published":"2026-11-06T00:39:38.884Z","source":"metamask","source_name":"MetaMask","under":"neocode.nl"}],"url":"https://domainspoof.com/live?show=all&q=brief.neocode.nl"},{"hostname":"btc-phlorisn84.live","first_observed":"2026-11-05T23:36:22.680Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"resolved","resolved":["104.21.60.71","172.67.193.100"],"resolved_at":"2026-11-05T23:44:52Z","dns_checked_at":"2026-11-06T00:51:07.000Z","dns_since":"2026-11-06T00:51:07.000Z","findings":[{"id":"fefqt56abjbmzepcblyrc","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T23:36:22.680Z","first_published":"2026-11-06T00:39:38.884Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=btc-phlorisn84.live"},{"hostname":"bvauth.com","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"resolved","resolved":["104.21.9.120","172.67.189.63","2606:4700:3034::ac43:bd3f","2606:4700:3037::6815:978"],"resolved_at":"2026-11-05T23:55:24Z","dns_checked_at":"2026-11-06T00:51:07.000Z","dns_since":"2026-11-06T00:51:07.000Z","findings":[{"id":"fc7znkirmqgsmwcmx4vns","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=bvauth.com"},{"hostname":"bzan.agndatacom.com","first_observed":"2026-11-06T00:21:13.428Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"resolved","resolved":["185.53.179.136"],"resolved_at":"2026-11-06T00:21:26Z","dns_checked_at":"2026-11-06T00:51:07.000Z","dns_since":"2026-11-06T00:51:07.000Z","findings":[{"id":"f43d2eddswf5xa7eifvpv","kind":"reported_domain","summary":"Under agndatacom.com, listed by MetaMask","first_observed":"2026-11-06T00:21:13.428Z","first_published":"2026-11-06T00:39:38.884Z","source":"metamask","source_name":"MetaMask","under":"agndatacom.com"}],"url":"https://domainspoof.com/live?show=all&q=bzan.agndatacom.com"},{"hostname":"cahebopu.digital","first_observed":"2026-11-06T00:20:04.684Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"resolved","resolved":["104.21.24.28","172.67.216.126","2606:4700:3036::6815:181c","2606:4700:3037::ac43:d87e"],"resolved_at":"2026-11-06T00:20:56Z","dns_checked_at":"2026-11-06T00:51:07.000Z","dns_since":"2026-11-06T00:51:07.000Z","findings":[{"id":"frnwnd52artsc5lmabzr4","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-06T00:20:04.684Z","first_published":"2026-11-06T00:39:38.884Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=cahebopu.digital"},{"hostname":"capital-zevionis-soft-com.financecryptoworld.com","first_observed":"2026-11-06T00:31:29.331Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"resolved","resolved":["104.21.10.130","172.67.131.121"],"resolved_at":"2026-11-06T00:31:49Z","dns_checked_at":"2026-11-06T00:51:07.000Z","dns_since":"2026-11-06T00:51:07.000Z","findings":[{"id":"fyfoat5wfzes5uc4ntuzs","kind":"reported_domain","summary":"Under financecryptoworld.com, listed by CERT Polska","first_observed":"2026-11-06T00:31:29.331Z","first_published":"2026-11-06T00:39:38.884Z","source":"cert_polska","source_name":"CERT Polska","under":"financecryptoworld.com"}],"url":"https://domainspoof.com/live?show=all&q=capital-zevionis-soft-com.financecryptoworld.com"},{"hostname":"captcha.slons21.cc","first_observed":"2026-11-05T23:31:15.422Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"resolved","resolved":["217.217.97.167"],"resolved_at":"2026-11-05T23:41:19Z","dns_checked_at":"2026-11-06T00:51:07.000Z","dns_since":"2026-11-06T00:51:07.000Z","findings":[{"id":"fdo2w6vsi3737okwluezg","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T23:31:15.422Z","first_published":"2026-11-06T00:39:38.884Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/captcha.slons21.cc/"}],"url":"https://domainspoof.com/live?show=all&q=captcha.slons21.cc"},{"hostname":"cardboardtrad.xyz","first_observed":"2026-11-06T00:15:33.870Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"resolved","resolved":["104.21.21.49","172.67.196.106"],"resolved_at":"2026-11-06T00:15:46Z","dns_checked_at":"2026-11-06T00:51:07.000Z","dns_since":"2026-11-06T00:51:07.000Z","findings":[{"id":"fbz5kksvfbxq4cxq5fvjq","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-06T00:15:33.870Z","first_published":"2026-11-06T00:39:38.884Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=cardboardtrad.xyz"},{"hostname":"caseteam.online","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"no_address","resolved":[],"resolved_at":"2026-11-05T23:55:24Z","dns_checked_at":"2026-11-06T08:56:07.000Z","findings":[{"id":"fjyjis3gyydyvs47i6yiq","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=caseteam.online"},{"hostname":"cast-jeffcoin.com","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"no_address","resolved":[],"resolved_at":"2026-11-05T23:55:24Z","dns_checked_at":"2026-11-06T08:56:07.000Z","findings":[{"id":"f64ex2fzb4plvpsevfo2z","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=cast-jeffcoin.com"},{"hostname":"casts-jeffcoin.com","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"no_address","resolved":[],"resolved_at":"2026-11-05T23:55:24Z","dns_checked_at":"2026-11-06T08:56:07.000Z","findings":[{"id":"fnpqbgqna3bqamfznlq2w","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=casts-jeffcoin.com"},{"hostname":"cc-binance.nm.cn","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","brands":[{"id":"binance","name":"Binance","url":"https://domainspoof.com/brands/binance"}],"dns":"resolved","resolved":["104.21.19.7","172.67.184.95","2606:4700:3030::6815:1307","2606:4700:3030::ac43:b85f"],"resolved_at":"2026-11-05T23:55:24Z","dns_checked_at":"2026-11-06T00:51:07.000Z","dns_since":"2026-11-06T00:51:07.000Z","findings":[{"id":"fgfmx4zn4td4li2fcesmb","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/brands/binance"},{"hostname":"centro-microsoft.com","first_observed":"2026-11-05T23:36:01.598Z","first_published":"2026-11-06T00:39:38.884Z","brands":[{"id":"microsoft","name":"Microsoft","url":"https://domainspoof.com/brands/microsoft"}],"dns":"resolved","resolved":["2.57.91.91"],"resolved_at":"2026-11-06T00:51:07Z","dns_checked_at":"2026-11-06T00:51:07.000Z","dns_since":"2026-11-06T00:51:07.000Z","findings":[{"id":"fz4p2ijtumh5hkjjnbgaw","kind":"phishing_infrastructure","summary":"Resolved to 2.57.91.91, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T23:36:01.598Z","first_published":"2026-11-06T00:39:38.884Z","address":"2.57.91.91","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/microsoft"},{"hostname":"chainfnd.com","first_observed":"2026-11-05T23:31:15.422Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"resolved","resolved":["104.21.70.35","172.67.219.30"],"resolved_at":"2026-11-05T23:41:19Z","dns_checked_at":"2026-11-06T00:51:07.000Z","dns_since":"2026-11-06T00:51:07.000Z","findings":[{"id":"frqvemzki4r2a6eefd6ul","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T23:31:15.422Z","first_published":"2026-11-06T00:39:38.884Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=chainfnd.com"},{"hostname":"checkcase-x.com","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"resolved","resolved":["104.21.9.200","172.67.189.141","2606:4700:3035::6815:9c8","2606:4700:3036::ac43:bd8d"],"resolved_at":"2026-11-05T23:55:24Z","dns_checked_at":"2026-11-06T00:51:07.000Z","dns_since":"2026-11-06T00:51:07.000Z","findings":[{"id":"f7d2uvdeesr6cbh64ylif","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=checkcase-x.com"},{"hostname":"claimcross3.pages.dev","first_observed":"2026-11-05T23:46:48.052Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"resolved","resolved":["172.66.44.169","172.66.47.87"],"resolved_at":"2026-11-05T23:50:38Z","dns_checked_at":"2026-11-06T00:51:07.000Z","dns_since":"2026-11-06T00:51:07.000Z","findings":[{"id":"fznncof6qdftvv4emmn6a","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T23:46:48.052Z","first_published":"2026-11-06T00:39:38.884Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=claimcross3.pages.dev"},{"hostname":"claimlawofattraction.live","first_observed":"2026-11-05T23:31:15.422Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"resolved","resolved":["104.21.11.216","172.67.167.72"],"resolved_at":"2026-11-05T23:41:19Z","dns_checked_at":"2026-11-06T00:51:07.000Z","dns_since":"2026-11-06T00:51:07.000Z","findings":[{"id":"fmbrmetxlimlkxdwwsfdi","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T23:31:15.422Z","first_published":"2026-11-06T00:39:38.884Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/claimlawofattraction.live/"}],"url":"https://domainspoof.com/live?show=all&q=claimlawofattraction.live"},{"hostname":"cn-binance.sx.cn","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","brands":[{"id":"binance","name":"Binance","url":"https://domainspoof.com/brands/binance"}],"dns":"resolved","resolved":["104.21.89.43","172.67.156.89","2606:4700:3030::6815:592b","2606:4700:3035::ac43:9c59"],"resolved_at":"2026-11-05T23:55:24Z","dns_checked_at":"2026-11-06T00:51:07.000Z","dns_since":"2026-11-06T00:51:07.000Z","findings":[{"id":"frjyomuku4nekhjdfpckj","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/brands/binance"},{"hostname":"coinbeshh-login.pages.dev","first_observed":"2026-11-06T00:00:47.488Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"resolved","resolved":["172.66.44.155","172.66.47.101"],"resolved_at":"2026-11-06T01:46:03Z","dns_checked_at":"2026-11-06T00:51:07.000Z","dns_since":"2026-11-06T00:51:07.000Z","findings":[{"id":"fqfbcso2mdx6t5dcssoq2","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-06T00:00:47.488Z","first_published":"2026-11-06T00:39:38.884Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=coinbeshh-login.pages.dev"},{"hostname":"community-listing.com","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"resolved","resolved":["104.21.60.179","172.67.198.241","2606:4700:3031::6815:3cb3","2606:4700:3031::ac43:c6f1"],"resolved_at":"2026-11-05T23:55:24Z","dns_checked_at":"2026-11-06T00:51:07.000Z","dns_since":"2026-11-06T00:51:07.000Z","findings":[{"id":"fripainzu7kkjenjgt72p","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=community-listing.com"},{"hostname":"concretexyz.cloud","first_observed":"2026-11-05T23:56:49.054Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"resolved","resolved":["104.21.74.243","172.67.207.176"],"resolved_at":"2026-11-06T00:46:48Z","dns_checked_at":"2026-11-06T00:51:07.000Z","dns_since":"2026-11-06T00:51:07.000Z","findings":[{"id":"fb4umkq3fetebiba3opwm","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T23:56:49.054Z","first_published":"2026-11-06T00:39:38.884Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=concretexyz.cloud"},{"hostname":"contentcenter-x.com","first_observed":"2026-11-05T23:31:15.422Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"no_address","resolved":[],"resolved_at":"2026-11-05T23:31:56Z","dns_checked_at":"2026-11-06T08:56:07.000Z","findings":[{"id":"fq7nfbyftaublxf63rg3d","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T23:31:15.422Z","first_published":"2026-11-06T00:39:38.884Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=contentcenter-x.com"},{"hostname":"coravelis-ai.com","first_observed":"2026-11-06T00:21:13.428Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"resolved","resolved":["104.21.88.27","172.67.171.252"],"resolved_at":"2026-11-06T00:21:29Z","dns_checked_at":"2026-11-06T00:51:07.000Z","dns_since":"2026-11-06T00:51:07.000Z","findings":[{"id":"ftonlvpytlellam7ckfvx","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-06T00:21:13.428Z","first_published":"2026-11-06T00:39:38.884Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=coravelis-ai.com"},{"hostname":"cosmaskusangwa.icuprojects.online","first_observed":"2026-11-06T00:21:13.428Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"unknown","resolved":["198.251.84.236"],"resolved_at":"2026-11-06T00:21:29Z","dns_checked_at":"2026-11-06T00:51:07.000Z","findings":[{"id":"f3yvppadbwef624ojhdrc","kind":"reported_domain","summary":"Under icuprojects.online, reported by PhishDestroy","first_observed":"2026-11-06T00:21:13.428Z","first_published":"2026-11-06T00:39:38.884Z","source":"phishdestroy","source_name":"PhishDestroy","under":"icuprojects.online","source_url":"https://phishdestroy.io/domain/icuprojects.online/"}],"url":"https://domainspoof.com/live?show=all&q=cosmaskusangwa.icuprojects.online"},{"hostname":"cricfysapk.com","first_observed":"2026-11-05T23:56:49.054Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"resolved","resolved":["104.21.13.99","172.67.199.208"],"resolved_at":"2026-11-06T00:21:29Z","dns_checked_at":"2026-11-06T00:51:07.000Z","dns_since":"2026-11-06T00:51:07.000Z","findings":[{"id":"f52hcwv736o2icqa4zmon","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T23:56:49.054Z","first_published":"2026-11-06T00:39:38.884Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=cricfysapk.com"},{"hostname":"crisabeyli.store","first_observed":"2026-11-06T00:20:04.684Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"resolved","resolved":["104.21.59.231","172.67.184.214","2606:4700:3030::6815:3be7","2606:4700:3036::ac43:b8d6"],"resolved_at":"2026-11-06T00:20:56Z","dns_checked_at":"2026-11-06T00:51:07.000Z","dns_since":"2026-11-06T00:51:07.000Z","findings":[{"id":"fku7vyzc4u7lxbhra4htn","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-06T00:20:04.684Z","first_published":"2026-11-06T00:39:38.884Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=crisabeyli.store"},{"hostname":"crypto-webinar-course.ostkap.school","first_observed":"2026-11-06T00:21:13.428Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"resolved","resolved":["198.202.211.1"],"resolved_at":"2026-11-06T00:21:30Z","dns_checked_at":"2026-11-06T00:51:07.000Z","dns_since":"2026-11-06T00:51:07.000Z","findings":[{"id":"fe4md3l7oqdolf7jqbcw5","kind":"reported_domain","summary":"Under ostkap.school, reported by PhishDestroy","first_observed":"2026-11-06T00:21:13.428Z","first_published":"2026-11-06T00:39:38.884Z","source":"phishdestroy","source_name":"PhishDestroy","under":"ostkap.school","source_url":"https://phishdestroy.io/domain/ostkap.school/"}],"url":"https://domainspoof.com/live?show=all&q=crypto-webinar-course.ostkap.school"},{"hostname":"darkstardiagnostics.com","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"resolved","resolved":["104.21.74.133","172.67.203.37","2606:4700:3033::6815:4a85","2606:4700:3033::ac43:cb25"],"resolved_at":"2026-11-05T23:55:24Z","dns_checked_at":"2026-11-06T00:51:07.000Z","dns_since":"2026-11-06T00:51:07.000Z","findings":[{"id":"f7f676ut6vm7zj23d73ms","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=darkstardiagnostics.com"},{"hostname":"dawncapitium.com","first_observed":"2026-11-05T23:26:04.147Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"resolved","resolved":["104.21.17.132","172.67.176.201"],"resolved_at":"2026-11-05T23:36:35Z","dns_checked_at":"2026-11-06T00:51:07.000Z","dns_since":"2026-11-06T00:51:07.000Z","findings":[{"id":"fsm6jatmzkybkvff2opvl","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T23:26:04.147Z","first_published":"2026-11-06T00:39:38.884Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=dawncapitium.com"},{"hostname":"desktopapp-trezor.com","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","brands":[{"id":"trezor","name":"Trezor","url":"https://domainspoof.com/brands/trezor"}],"dns":"resolved","resolved":["104.21.11.78","172.67.165.167","2606:4700:3033::6815:b4e","2606:4700:3036::ac43:a5a7"],"resolved_at":"2026-11-05T23:55:24Z","dns_checked_at":"2026-11-06T00:51:07.000Z","dns_since":"2026-11-06T00:51:07.000Z","findings":[{"id":"faruejmfvufrgsy3n6idb","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/brands/trezor"},{"hostname":"dev.finabank.ru","first_observed":"2026-11-06T00:26:21.784Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"resolved","resolved":["31.31.198.195"],"resolved_at":"2026-11-06T00:26:28Z","dns_checked_at":"2026-11-06T00:51:07.000Z","dns_since":"2026-11-06T00:51:07.000Z","findings":[{"id":"faw24jnkucvtvxecudz7d","kind":"reported_domain","summary":"Under finabank.ru, reported by PhishDestroy","first_observed":"2026-11-06T00:26:21.784Z","first_published":"2026-11-06T00:39:38.884Z","source":"phishdestroy","source_name":"PhishDestroy","under":"finabank.ru","source_url":"https://phishdestroy.io/domain/finabank.ru/"}],"url":"https://domainspoof.com/live?show=all&q=dev.finabank.ru"},{"hostname":"dexcsreener-portfolio.casa","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"no_address","resolved":[],"resolved_at":"2026-11-05T23:55:24Z","dns_checked_at":"2026-11-06T08:56:07.000Z","findings":[{"id":"f3j3e7w6mgdvrbhgogbvp","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=dexcsreener-portfolio.casa"},{"hostname":"distribution-ore.xyz","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"no_address","resolved":[],"resolved_at":"2026-11-05T23:55:24Z","dns_checked_at":"2026-11-06T08:56:07.000Z","findings":[{"id":"f2o7mqmttjjgq3tyjfgfx","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=distribution-ore.xyz"},{"hostname":"distribution-xrpl.live","first_observed":"2026-11-06T00:05:46.893Z","first_published":"2026-11-06T00:39:38.884Z","brands":[{"id":"ripple","name":"Ripple (XRP)","url":"https://domainspoof.com/brands/ripple"}],"dns":"resolved","resolved":["104.21.12.5","172.67.131.215"],"resolved_at":"2026-11-06T00:10:21Z","dns_checked_at":"2026-11-06T00:51:07.000Z","dns_since":"2026-11-06T00:51:07.000Z","findings":[{"id":"fa2522ztbno6ydmnmil5h","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-06T00:05:46.893Z","first_published":"2026-11-06T00:39:38.884Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/brands/ripple"},{"hostname":"distributions-xrpl.live","first_observed":"2026-11-06T00:05:46.893Z","first_published":"2026-11-06T00:39:38.884Z","brands":[{"id":"ripple","name":"Ripple (XRP)","url":"https://domainspoof.com/brands/ripple"}],"dns":"resolved","resolved":["104.21.83.90","172.67.220.238"],"resolved_at":"2026-11-06T00:10:21Z","dns_checked_at":"2026-11-06T00:51:07.000Z","dns_since":"2026-11-06T00:51:07.000Z","findings":[{"id":"fd36jl3j2lpztxhroxlug","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-06T00:05:46.893Z","first_published":"2026-11-06T00:39:38.884Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/brands/ripple"},{"hostname":"docs-exdua-web.pages.dev","first_observed":"2026-11-05T23:51:49.585Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"resolved","resolved":["172.66.44.213","172.66.47.43"],"resolved_at":"2026-11-06T02:34:04Z","dns_checked_at":"2026-11-06T00:51:07.000Z","dns_since":"2026-11-06T00:51:07.000Z","findings":[{"id":"fuv625e25zinlhmgo2f3e","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T23:51:49.585Z","first_published":"2026-11-06T00:39:38.884Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=docs-exdua-web.pages.dev"},{"hostname":"doublexrp.io","first_observed":"2026-11-06T00:31:29.331Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"resolved","resolved":["104.21.54.49","172.67.223.214"],"resolved_at":"2026-11-06T00:32:04Z","dns_checked_at":"2026-11-06T00:51:07.000Z","dns_since":"2026-11-06T00:51:07.000Z","findings":[{"id":"fcowqv7kt7hey4ibuwc7k","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-06T00:31:29.331Z","first_published":"2026-11-06T00:39:38.884Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=doublexrp.io"},{"hostname":"drammexecr.store","first_observed":"2026-11-06T00:20:04.684Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"resolved","resolved":["104.21.0.246","172.67.151.126","2606:4700:3036::6815:f6","2606:4700:3036::ac43:977e"],"resolved_at":"2026-11-06T00:20:56Z","dns_checked_at":"2026-11-06T00:51:07.000Z","dns_since":"2026-11-06T00:51:07.000Z","findings":[{"id":"fcbk4h3tbym6deionkvny","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-06T00:20:04.684Z","first_published":"2026-11-06T00:39:38.884Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=drammexecr.store"},{"hostname":"early-jeffcoin.com","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"no_address","resolved":[],"resolved_at":"2026-11-05T23:55:24Z","dns_checked_at":"2026-11-06T08:56:07.000Z","findings":[{"id":"fouvswkkusba7oswermth","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=early-jeffcoin.com"},{"hostname":"earn-jeffcoin.com","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"no_address","resolved":[],"resolved_at":"2026-11-05T23:55:24Z","dns_checked_at":"2026-11-06T08:56:07.000Z","findings":[{"id":"fbiocsupkqlatb7q56sdy","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=earn-jeffcoin.com"},{"hostname":"eco-zama.org","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"no_address","resolved":[],"resolved_at":"2026-11-05T23:55:24Z","dns_checked_at":"2026-11-06T08:56:07.000Z","findings":[{"id":"fqo7p26vyq4chskjibxr5","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=eco-zama.org"},{"hostname":"edgecloud.casa","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"no_address","resolved":[],"resolved_at":"2026-11-05T23:55:24Z","dns_checked_at":"2026-11-06T08:56:07.000Z","findings":[{"id":"fmwgzwkkfgeu3hmg5piig","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=edgecloud.casa"},{"hostname":"edgo.cc","first_observed":"2026-11-06T00:31:29.331Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"resolved","resolved":["104.21.37.76","172.67.205.227"],"resolved_at":"2026-11-06T00:32:05Z","dns_checked_at":"2026-11-06T00:51:07.000Z","dns_since":"2026-11-06T00:51:07.000Z","findings":[{"id":"f5lfutpjiz7d3wyir2uqv","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-06T00:31:29.331Z","first_published":"2026-11-06T00:39:38.884Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=edgo.cc"},{"hostname":"ee186da0.zeina-tech.com","first_observed":"2026-11-05T23:36:22.680Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"resolved","resolved":["194.38.22.74"],"resolved_at":"2026-11-05T23:37:01Z","dns_checked_at":"2026-11-06T00:51:07.000Z","dns_since":"2026-11-06T00:51:07.000Z","findings":[{"id":"f22fwe3omccnpvg3l3m56","kind":"reported_domain","summary":"Under zeina-tech.com, reported by PhishDestroy","first_observed":"2026-11-05T23:36:22.680Z","first_published":"2026-11-06T00:39:38.884Z","source":"phishdestroy","source_name":"PhishDestroy","under":"zeina-tech.com","source_url":"https://phishdestroy.io/domain/zeina-tech.com/"}],"url":"https://domainspoof.com/live?show=all&q=ee186da0.zeina-tech.com"},{"hostname":"en-ledger-live-downloadd.pages.dev","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","brands":[{"id":"ledger","name":"Ledger","url":"https://domainspoof.com/brands/ledger"}],"dns":"resolved","resolved":["172.66.44.52","172.66.47.204","2606:4700:310c::ac42:2c34","2606:4700:310c::ac42:2fcc"],"resolved_at":"2026-11-05T23:55:24Z","dns_checked_at":"2026-11-06T00:51:07.000Z","dns_since":"2026-11-06T00:51:07.000Z","findings":[{"id":"fhfqe4k3hql5ua6pj7omo","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/brands/ledger"},{"hostname":"eplay.at","first_observed":"2026-11-05T23:26:04.147Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"resolved","resolved":["157.90.126.141","2a01:4f8:1c1c:344c::1"],"resolved_at":"2026-11-05T23:36:37Z","dns_checked_at":"2026-11-06T00:51:07.000Z","dns_since":"2026-11-06T00:51:07.000Z","findings":[{"id":"fo33wvlbntp34fybkr6cv","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T23:26:04.147Z","first_published":"2026-11-06T00:39:38.884Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/eplay.at/"}],"url":"https://domainspoof.com/live?show=all&q=eplay.at"},{"hostname":"epuraimbra.store","first_observed":"2026-11-06T00:20:04.684Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"resolved","resolved":["104.21.41.87","172.67.163.69","2606:4700:3030::6815:2957","2606:4700:3031::ac43:a345"],"resolved_at":"2026-11-06T00:20:56Z","dns_checked_at":"2026-11-06T00:51:07.000Z","dns_since":"2026-11-06T00:51:07.000Z","findings":[{"id":"f7prjhboakyqtuso47pjh","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-06T00:20:04.684Z","first_published":"2026-11-06T00:39:38.884Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=epuraimbra.store"},{"hostname":"evoxbit.com","first_observed":"2026-11-06T00:31:29.331Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"resolved","resolved":["13.248.169.48","76.223.54.146"],"resolved_at":"2026-11-06T00:32:05Z","dns_checked_at":"2026-11-06T00:51:07.000Z","dns_since":"2026-11-06T00:51:07.000Z","findings":[{"id":"femmh5a3q5cfo3ewajctb","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-06T00:31:29.331Z","first_published":"2026-11-06T00:39:38.884Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/evoxbit.com/"}],"url":"https://domainspoof.com/live?show=all&q=evoxbit.com"},{"hostname":"examic.digital","first_observed":"2026-11-06T00:31:29.331Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"resolved","resolved":["104.21.47.186","172.67.171.208"],"resolved_at":"2026-11-06T00:32:05Z","dns_checked_at":"2026-11-06T00:51:07.000Z","dns_since":"2026-11-06T00:51:07.000Z","findings":[{"id":"fxgg2bvlroz3trwczzvb4","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-06T00:31:29.331Z","first_published":"2026-11-06T00:39:38.884Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=examic.digital"},{"hostname":"exchange-papertrade.xyz","first_observed":"2026-11-05T23:31:15.422Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"resolved","resolved":["104.21.31.53","172.67.174.254"],"resolved_at":"2026-11-06T00:32:05Z","dns_checked_at":"2026-11-06T00:51:07.000Z","dns_since":"2026-11-06T00:51:07.000Z","findings":[{"id":"fdtgburej54lalglw4vo7","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T23:31:15.422Z","first_published":"2026-11-06T00:39:38.884Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/exchange-papertrade.xyz/"}],"url":"https://domainspoof.com/live?show=all&q=exchange-papertrade.xyz"},{"hostname":"exmany.today","first_observed":"2026-11-06T00:15:33.870Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"resolved","resolved":["104.21.53.168","172.67.215.171"],"resolved_at":"2026-11-06T00:15:51Z","dns_checked_at":"2026-11-06T00:51:07.000Z","dns_since":"2026-11-06T00:51:07.000Z","findings":[{"id":"f6peyacg62wph6o2lqwvf","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-06T00:15:33.870Z","first_published":"2026-11-06T00:39:38.884Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=exmany.today"},{"hostname":"exodus-plus.com","first_observed":"2026-11-05T23:31:15.422Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"resolved","resolved":["198.251.84.200"],"resolved_at":"2026-11-05T23:32:00Z","dns_checked_at":"2026-11-06T00:51:07.000Z","dns_since":"2026-11-06T00:51:07.000Z","findings":[{"id":"fq53tlkay3pjjrewneuwy","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T23:31:15.422Z","first_published":"2026-11-06T00:39:38.884Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=exodus-plus.com"},{"hostname":"extendedl.exchange","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"no_address","resolved":[],"resolved_at":"2026-11-05T23:55:24Z","dns_checked_at":"2026-11-06T08:56:07.000Z","findings":[{"id":"fvcu5gu7hit4fubkbkb7y","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=extendedl.exchange"},{"hostname":"f2953926.zeina-tech.com","first_observed":"2026-11-05T23:36:22.680Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"resolved","resolved":["194.38.20.39"],"resolved_at":"2026-11-05T23:37:03Z","dns_checked_at":"2026-11-06T00:51:07.000Z","dns_since":"2026-11-06T00:51:07.000Z","findings":[{"id":"fycr6awd2wnc2czmbczjr","kind":"reported_domain","summary":"Under zeina-tech.com, reported by PhishDestroy","first_observed":"2026-11-05T23:36:22.680Z","first_published":"2026-11-06T00:39:38.884Z","source":"phishdestroy","source_name":"PhishDestroy","under":"zeina-tech.com","source_url":"https://phishdestroy.io/domain/zeina-tech.com/"}],"url":"https://domainspoof.com/live?show=all&q=f2953926.zeina-tech.com"},{"hostname":"f8ee48e9.zeina-tech.com","first_observed":"2026-11-05T23:36:22.680Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"resolved","resolved":["194.38.20.51"],"resolved_at":"2026-11-05T23:37:03Z","dns_checked_at":"2026-11-06T00:51:07.000Z","dns_since":"2026-11-06T00:51:07.000Z","findings":[{"id":"fvnuh2lywmgjaiiulazmu","kind":"reported_domain","summary":"Under zeina-tech.com, reported by PhishDestroy","first_observed":"2026-11-05T23:36:22.680Z","first_published":"2026-11-06T00:39:38.884Z","source":"phishdestroy","source_name":"PhishDestroy","under":"zeina-tech.com","source_url":"https://phishdestroy.io/domain/zeina-tech.com/"}],"url":"https://domainspoof.com/live?show=all&q=f8ee48e9.zeina-tech.com"},{"hostname":"fdic-kraken.com","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"resolved","resolved":["45.156.87.43"],"resolved_at":"2026-11-05T23:55:24Z","dns_checked_at":"2026-11-06T00:51:07.000Z","dns_since":"2026-11-06T00:51:07.000Z","findings":[{"id":"fuqhikcx62cz72b7ommqd","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=fdic-kraken.com"},{"hostname":"fdicsecure-coinbase.com","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","brands":[{"id":"coinbase","name":"Coinbase","url":"https://domainspoof.com/brands/coinbase"}],"dns":"resolved","resolved":["45.156.87.43"],"resolved_at":"2026-11-05T23:55:24Z","dns_checked_at":"2026-11-06T00:51:07.000Z","dns_since":"2026-11-06T00:51:07.000Z","findings":[{"id":"fze22bh4xh3p3aejt5mcz","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/brands/coinbase"},{"hostname":"ff.com-verify.biz","first_observed":"2026-11-05T23:46:48.052Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"resolved","resolved":["196.251.107.55"],"resolved_at":"2026-11-05T23:50:58Z","dns_checked_at":"2026-11-06T00:51:07.000Z","dns_since":"2026-11-06T00:51:07.000Z","findings":[{"id":"fvh2imyyqycpa7up4z2tf","kind":"reported_domain","summary":"Under com-verify.biz, listed by MetaMask","first_observed":"2026-11-05T23:46:48.052Z","first_published":"2026-11-06T00:39:38.884Z","source":"metamask","source_name":"MetaMask","under":"com-verify.biz"}],"url":"https://domainspoof.com/live?show=all&q=ff.com-verify.biz"},{"hostname":"fileharbor.net","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"resolved","resolved":["104.21.17.45","172.67.222.6","2606:4700:3037::6815:112d","2606:4700:3037::ac43:de06"],"resolved_at":"2026-11-05T23:55:24Z","dns_checked_at":"2026-11-06T00:51:07.000Z","dns_since":"2026-11-06T00:51:07.000Z","findings":[{"id":"fgitiittjqoqaybua4qgv","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=fileharbor.net"},{"hostname":"finance-r.eu.cc","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"resolved","resolved":["104.21.22.150","172.67.205.88","2606:4700:3032::ac43:cd58","2606:4700:3035::6815:1696"],"resolved_at":"2026-11-05T23:55:24Z","dns_checked_at":"2026-11-06T00:51:07.000Z","dns_since":"2026-11-06T00:51:07.000Z","findings":[{"id":"f72fqddeszlq4jxruzh6c","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=finance-r.eu.cc"},{"hostname":"firelight-finance.pages.dev","first_observed":"2026-11-05T23:26:04.147Z","first_published":"2026-11-06T00:39:38.884Z","brands":[{"id":"firelight","name":"Firelight","url":"https://domainspoof.com/brands/firelight"}],"dns":"resolved","resolved":["172.66.44.229","172.66.47.27","2606:4700:310c::ac42:2ce5","2606:4700:310c::ac42:2f1b"],"resolved_at":"2026-11-06T00:58:11Z","dns_checked_at":"2026-11-06T00:51:07.000Z","dns_since":"2026-11-06T00:51:07.000Z","findings":[{"id":"fcx4aye7pl5hmso3gmgdm","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T23:26:04.147Z","first_published":"2026-11-06T00:39:38.884Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/brands/firelight"},{"hostname":"flandenzo-it.live","first_observed":"2026-11-05T23:56:49.054Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"resolved","resolved":["104.21.93.44","172.67.204.105"],"resolved_at":"2026-11-06T04:36:51Z","dns_checked_at":"2026-11-06T00:51:07.000Z","dns_since":"2026-11-06T00:51:07.000Z","findings":[{"id":"f3e3fyoi2difwhgxxaieu","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T23:56:49.054Z","first_published":"2026-11-06T00:39:38.884Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=flandenzo-it.live"},{"hostname":"flare-okx.com.cn","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"resolved","resolved":["104.21.39.112","172.67.144.222","2606:4700:3032::6815:2770","2606:4700:3037::ac43:90de"],"resolved_at":"2026-11-05T23:55:24Z","dns_checked_at":"2026-11-06T00:51:07.000Z","dns_since":"2026-11-06T00:51:07.000Z","findings":[{"id":"f7ds4bdxe7yeekztnsl32","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=flare-okx.com.cn"},{"hostname":"flux-peak.com","first_observed":"2026-11-05T23:51:49.585Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"resolved","resolved":["104.21.28.145","172.67.170.223"],"resolved_at":"2026-11-06T00:11:18Z","dns_checked_at":"2026-11-06T00:51:07.000Z","dns_since":"2026-11-06T00:51:07.000Z","findings":[{"id":"fkpul7frjnxo3yhshrgo2","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T23:51:49.585Z","first_published":"2026-11-06T00:39:38.884Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=flux-peak.com"},{"hostname":"fomo-claim.com","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"resolved","resolved":["104.21.28.185","172.67.147.23","2606:4700:3034::6815:1cb9","2606:4700:3036::ac43:9317"],"resolved_at":"2026-11-05T23:55:24Z","dns_checked_at":"2026-11-06T00:51:07.000Z","dns_since":"2026-11-06T00:51:07.000Z","findings":[{"id":"fdnistm4rrhk43b6szgqz","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=fomo-claim.com"},{"hostname":"formapinen.store","first_observed":"2026-11-06T00:20:04.684Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"resolved","resolved":["104.21.47.76","172.67.170.195","2606:4700:3033::ac43:aac3","2606:4700:3035::6815:2f4c"],"resolved_at":"2026-11-06T00:20:56Z","dns_checked_at":"2026-11-06T00:51:07.000Z","dns_since":"2026-11-06T00:51:07.000Z","findings":[{"id":"f3o7iiygdpdbhcabqannc","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-06T00:20:04.684Z","first_published":"2026-11-06T00:39:38.884Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=formapinen.store"},{"hostname":"fortuneprimeglobaluorde.com","first_observed":"2026-11-06T00:15:33.870Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"resolved","resolved":["104.21.68.217","172.67.198.246"],"resolved_at":"2026-11-06T00:15:51Z","dns_checked_at":"2026-11-06T00:51:07.000Z","dns_since":"2026-11-06T00:51:07.000Z","findings":[{"id":"fz5n4ripethtpyhhpvanf","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-06T00:15:33.870Z","first_published":"2026-11-06T00:39:38.884Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=fortuneprimeglobaluorde.com"},{"hostname":"fraggeritsupport.com","first_observed":"2026-11-05T23:36:22.680Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"resolved","resolved":["38.97.40.99"],"resolved_at":"2026-11-05T23:37:03Z","dns_checked_at":"2026-11-06T00:51:07.000Z","dns_since":"2026-11-06T00:51:07.000Z","findings":[{"id":"fkl7bxwv5s7fbxpblr66t","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T23:36:22.680Z","first_published":"2026-11-06T00:39:38.884Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/fraggeritsupport.com/"}],"url":"https://domainspoof.com/live?show=all&q=fraggeritsupport.com"},{"hostname":"frost-yields.com","first_observed":"2026-11-05T23:41:23.990Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"resolved","resolved":["104.21.16.121","172.67.212.86"],"resolved_at":"2026-11-06T00:11:18Z","dns_checked_at":"2026-11-06T00:51:07.000Z","dns_since":"2026-11-06T00:51:07.000Z","findings":[{"id":"fuev35j6bjzegtrke76ob","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T23:41:23.990Z","first_published":"2026-11-06T00:39:38.884Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=frost-yields.com"},{"hostname":"fund-my-wallet.cc","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"no_address","resolved":[],"resolved_at":"2026-11-05T23:55:24Z","dns_checked_at":"2026-11-06T08:56:07.000Z","findings":[{"id":"fsc5pgnvw2jvq7mwvb5vd","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=fund-my-wallet.cc"},{"hostname":"g5214-google.top","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","brands":[{"id":"google","name":"Google","url":"https://domainspoof.com/brands/google"}],"dns":"not_found","resolved":[],"resolved_at":"2026-11-05T23:55:24Z","dns_checked_at":"2026-11-06T08:56:07.000Z","findings":[{"id":"fn35w35vvgcmjkd3ikcib","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/brands/google"},{"hostname":"getwings24.shop","first_observed":"2026-11-06T00:15:33.870Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"resolved","resolved":["46.245.239.151"],"resolved_at":"2026-11-06T00:15:51Z","dns_checked_at":"2026-11-06T00:51:07.000Z","dns_since":"2026-11-06T00:51:07.000Z","findings":[{"id":"fsxff6vrygt5fbl6ku4or","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-06T00:15:33.870Z","first_published":"2026-11-06T00:39:38.884Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=getwings24.shop"},{"hostname":"glibbdissi.store","first_observed":"2026-11-06T00:20:04.684Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"resolved","resolved":["104.21.51.152","172.67.182.21","2606:4700:3034::6815:3398","2606:4700:3034::ac43:b615"],"resolved_at":"2026-11-06T00:20:56Z","dns_checked_at":"2026-11-06T00:51:07.000Z","dns_since":"2026-11-06T00:51:07.000Z","findings":[{"id":"ftf46ds7avaw5cv3x4ggp","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-06T00:20:04.684Z","first_published":"2026-11-06T00:39:38.884Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=glibbdissi.store"},{"hostname":"governance-higher.fun","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"not_found","resolved":[],"resolved_at":"2026-11-05T23:55:24Z","dns_checked_at":"2026-11-06T08:56:07.000Z","findings":[{"id":"fiaxy4rweotdm6qshce3d","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=governance-higher.fun"},{"hostname":"groknam-portal.net","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"resolved","resolved":["104.21.51.115","172.67.179.132","2606:4700:3037::6815:3373","2606:4700:3037::ac43:b384"],"resolved_at":"2026-11-05T23:55:24Z","dns_checked_at":"2026-11-06T00:51:07.000Z","dns_since":"2026-11-06T00:51:07.000Z","findings":[{"id":"ffnwnadit4zvae4nll2yl","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=groknam-portal.net"},{"hostname":"guest-reserv-594827.com","first_observed":"2026-11-06T00:20:04.684Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"resolved","resolved":["104.21.73.51","172.67.140.155","2606:4700:3031::ac43:8c9b","2606:4700:3035::6815:4933"],"resolved_at":"2026-11-06T00:20:56Z","dns_checked_at":"2026-11-06T00:51:07.000Z","dns_since":"2026-11-06T00:51:07.000Z","findings":[{"id":"f6i62pef4rt3aapznb2my","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-06T00:20:04.684Z","first_published":"2026-11-06T00:39:38.884Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=guest-reserv-594827.com"},{"hostname":"guest-reserv-836105.com","first_observed":"2026-11-06T00:20:04.684Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"resolved","resolved":["104.21.32.96","172.67.150.173","2606:4700:3031::ac43:96ad","2606:4700:3035::6815:2060"],"resolved_at":"2026-11-06T00:20:56Z","dns_checked_at":"2026-11-06T00:51:07.000Z","dns_since":"2026-11-06T00:51:07.000Z","findings":[{"id":"fallxp3ywzoqrbzjqezd2","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-06T00:20:04.684Z","first_published":"2026-11-06T00:39:38.884Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=guest-reserv-836105.com"},{"hostname":"guest-reserv-908352.com","first_observed":"2026-11-06T00:20:04.684Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"resolved","resolved":["104.21.16.179","172.67.215.61","2606:4700:3031::ac43:d73d","2606:4700:3036::6815:10b3"],"resolved_at":"2026-11-06T00:20:56Z","dns_checked_at":"2026-11-06T00:51:07.000Z","dns_since":"2026-11-06T00:51:07.000Z","findings":[{"id":"fxgtbmyw556ucmpb4wpkg","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-06T00:20:04.684Z","first_published":"2026-11-06T00:39:38.884Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=guest-reserv-908352.com"},{"hostname":"guncelapp.vip","first_observed":"2026-11-06T00:31:29.331Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"resolved","resolved":["104.21.95.10","172.67.142.125"],"resolved_at":"2026-11-06T00:32:06Z","dns_checked_at":"2026-11-06T00:51:07.000Z","dns_since":"2026-11-06T00:51:07.000Z","findings":[{"id":"fpebmascatomwo5gm6zkf","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-06T00:31:29.331Z","first_published":"2026-11-06T00:39:38.884Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/guncelapp.vip/"}],"url":"https://domainspoof.com/live?show=all&q=guncelapp.vip"},{"hostname":"guweu.com","first_observed":"2026-11-06T00:21:13.428Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"resolved","resolved":["104.21.12.151","172.67.132.42"],"resolved_at":"2026-11-06T00:21:30Z","dns_checked_at":"2026-11-06T00:51:07.000Z","dns_since":"2026-11-06T00:51:07.000Z","findings":[{"id":"fa4mxcp4wpbaqykbqft6e","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-06T00:21:13.428Z","first_published":"2026-11-06T00:39:38.884Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=guweu.com"},{"hostname":"hebeiguancheng.com","first_observed":"2026-11-05T23:31:15.422Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"resolved","resolved":["104.21.42.115","172.67.161.168"],"resolved_at":"2026-11-05T23:32:00Z","dns_checked_at":"2026-11-06T00:51:07.000Z","dns_since":"2026-11-06T00:51:07.000Z","findings":[{"id":"fglklvu5mulkfrezyuakx","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T23:31:15.422Z","first_published":"2026-11-06T00:39:38.884Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=hebeiguancheng.com"},{"hostname":"herd-ledger.com","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"resolved","resolved":["216.24.57.1"],"resolved_at":"2026-11-05T23:55:24Z","dns_checked_at":"2026-11-06T00:51:07.000Z","dns_since":"2026-11-06T00:51:07.000Z","findings":[{"id":"fadd5sfelabgn23uvy7v5","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=herd-ledger.com"},{"hostname":"holiganbet8796.icu","first_observed":"2026-11-05T23:41:23.990Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"resolved","resolved":["104.21.23.122","172.67.211.19"],"resolved_at":"2026-11-06T00:10:26Z","dns_checked_at":"2026-11-06T00:51:07.000Z","dns_since":"2026-11-06T00:51:07.000Z","findings":[{"id":"ftzaqmevbcpzruk3m5kca","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T23:41:23.990Z","first_published":"2026-11-06T00:39:38.884Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/holiganbet8796.icu/"}],"url":"https://domainspoof.com/live?show=all&q=holiganbet8796.icu"},{"hostname":"hosting-minecraft.sk","first_observed":"2026-11-06T00:11:18.408Z","first_published":"2026-11-06T00:39:38.884Z","brands":[{"id":"minecraft","name":"Minecraft","url":"https://domainspoof.com/brands/minecraft"}],"dns":"resolved","resolved":["185.253.212.22"],"resolved_at":"2026-11-06T00:51:07Z","dns_checked_at":"2026-11-06T00:51:07.000Z","dns_since":"2026-11-06T00:51:07.000Z","findings":[{"id":"fzvjvach4vzkxdds6twez","kind":"phishing_infrastructure","summary":"Resolved to 185.253.212.22, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:11:18.408Z","first_published":"2026-11-06T00:39:38.884Z","address":"185.253.212.22","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/minecraft"},{"hostname":"hub-netnetcapital.xyz","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"resolved","resolved":["104.21.5.39","172.67.132.239","2606:4700:3032::ac43:84ef","2606:4700:3035::6815:527"],"resolved_at":"2026-11-05T23:55:24Z","dns_checked_at":"2026-11-06T00:51:07.000Z","dns_since":"2026-11-06T00:51:07.000Z","findings":[{"id":"forw5n2l4dups6masbczm","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=hub-netnetcapital.xyz"},{"hostname":"hub-torchpad.pages.dev","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"not_found","resolved":[],"resolved_at":"2026-11-05T23:55:24Z","dns_checked_at":"2026-11-06T08:56:07.000Z","findings":[{"id":"fnpjvuu6c4ujlumsnsl7q","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=hub-torchpad.pages.dev"},{"hostname":"hub-zamaeco.pages.dev","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"not_found","resolved":[],"resolved_at":"2026-11-05T23:55:24Z","dns_checked_at":"2026-11-06T08:56:07.000Z","findings":[{"id":"f3o2k6ohskzuwurpnb5l4","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=hub-zamaeco.pages.dev"},{"hostname":"hyperliquid.mn","first_observed":"2026-11-06T00:26:21.784Z","first_published":"2026-11-06T00:39:38.884Z","brands":[{"id":"hyperliquid","name":"Hyperliquid","url":"https://domainspoof.com/brands/hyperliquid"}],"dns":"resolved","resolved":["54.215.31.113"],"resolved_at":"2026-11-06T00:26:28Z","dns_checked_at":"2026-11-06T00:51:07.000Z","dns_since":"2026-11-06T00:51:07.000Z","findings":[{"id":"fi7cbrbfgqzkyvq6y7bki","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-06T00:26:21.784Z","first_published":"2026-11-06T00:39:38.884Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/brands/hyperliquid"},{"hostname":"iafqx.com","first_observed":"2026-11-06T00:26:21.784Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"resolved","resolved":["104.21.1.207","172.67.129.235"],"resolved_at":"2026-11-06T00:26:29Z","dns_checked_at":"2026-11-06T00:51:07.000Z","dns_since":"2026-11-06T00:51:07.000Z","findings":[{"id":"f2ih2r6yaexrgfriuvwh2","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-06T00:26:21.784Z","first_published":"2026-11-06T00:39:38.884Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=iafqx.com"},{"hostname":"icloud-find-2026.com","first_observed":"2026-11-05T23:48:30.369Z","first_published":"2026-11-06T00:39:38.884Z","brands":[{"id":"apple","name":"Apple","url":"https://domainspoof.com/brands/apple"}],"dns":"resolved","resolved":["192.3.106.229"],"resolved_at":"2026-11-06T00:51:07Z","dns_checked_at":"2026-11-06T00:51:07.000Z","dns_since":"2026-11-06T00:51:07.000Z","findings":[{"id":"fidjpjpq3qhuv32ezf6r6","kind":"phishing_infrastructure","summary":"Resolved to 192.3.106.229, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T23:48:30.369Z","first_published":"2026-11-06T00:39:38.884Z","address":"192.3.106.229","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/apple"},{"hostname":"ilzesubsy.store","first_observed":"2026-11-06T00:20:04.684Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"resolved","resolved":["104.21.68.145","172.67.196.44","2606:4700:3031::6815:4491","2606:4700:3032::ac43:c42c"],"resolved_at":"2026-11-06T00:20:56Z","dns_checked_at":"2026-11-06T00:51:07.000Z","dns_since":"2026-11-06T00:51:07.000Z","findings":[{"id":"f6whxxj72tt5tnxi7zla2","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-06T00:20:04.684Z","first_published":"2026-11-06T00:39:38.884Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=ilzesubsy.store"},{"hostname":"impulseledgiumuk.live","first_observed":"2026-11-06T00:00:47.488Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"resolved","resolved":["104.21.51.10","172.67.216.96"],"resolved_at":"2026-11-06T01:21:11Z","dns_checked_at":"2026-11-06T00:51:07.000Z","dns_since":"2026-11-06T00:51:07.000Z","findings":[{"id":"fnm3ihe74wy7366ui327n","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-06T00:00:47.488Z","first_published":"2026-11-06T00:39:38.884Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=impulseledgiumuk.live"},{"hostname":"imtoken-aicu.com","first_observed":"2026-11-06T00:06:18.739Z","first_published":"2026-11-06T00:39:38.884Z","brands":[{"id":"imtoken","name":"imToken","url":"https://domainspoof.com/brands/imtoken"}],"dns":"resolved","resolved":["206.161.218.138"],"resolved_at":"2026-11-06T00:51:07Z","dns_checked_at":"2026-11-06T00:51:07.000Z","dns_since":"2026-11-06T00:51:07.000Z","findings":[{"id":"ftpjbz2ccl2qsaox65xax","kind":"phishing_infrastructure","summary":"Resolved to 206.161.218.138, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:06:18.739Z","first_published":"2026-11-06T00:39:38.884Z","address":"206.161.218.138","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/imtoken"},{"hostname":"inc-graphs-list-headers.cloudflear.com","first_observed":"2026-11-05T23:31:15.422Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"resolved","resolved":["45.10.243.43"],"resolved_at":"2026-11-05T23:32:01Z","dns_checked_at":"2026-11-06T00:51:07.000Z","dns_since":"2026-11-06T00:51:07.000Z","findings":[{"id":"ffiidlsgpq77blqfnwa4f","kind":"reported_domain","summary":"Under cloudflear.com, listed by MetaMask","first_observed":"2026-11-05T23:31:15.422Z","first_published":"2026-11-06T00:39:38.884Z","source":"metamask","source_name":"MetaMask","under":"cloudflear.com"}],"url":"https://domainspoof.com/live?show=all&q=inc-graphs-list-headers.cloudflear.com"},{"hostname":"indexflarexhub.live","first_observed":"2026-11-05T23:36:22.680Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"resolved","resolved":["104.21.12.243","172.67.153.242"],"resolved_at":"2026-11-06T00:51:43Z","dns_checked_at":"2026-11-06T00:51:07.000Z","dns_since":"2026-11-06T00:51:07.000Z","findings":[{"id":"fxmg6ny74hgw2ffx6vfb2","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T23:36:22.680Z","first_published":"2026-11-06T00:39:38.884Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=indexflarexhub.live"},{"hostname":"inflows-binance.com","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","brands":[{"id":"binance","name":"Binance","url":"https://domainspoof.com/brands/binance"}],"dns":"resolved","resolved":["104.21.15.231","172.67.208.112","2606:4700:3032::6815:fe7","2606:4700:3037::ac43:d070"],"resolved_at":"2026-11-05T23:55:24Z","dns_checked_at":"2026-11-06T00:51:07.000Z","dns_since":"2026-11-06T00:51:07.000Z","findings":[{"id":"fz2hrz6scenzrb74nafi5","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/brands/binance"},{"hostname":"inflows-trustwallet.com","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","brands":[{"id":"trust-wallet","name":"Trust Wallet","url":"https://domainspoof.com/brands/trust-wallet"}],"dns":"resolved","resolved":["104.21.94.185","172.67.139.124","2606:4700:3032::ac43:8b7c","2606:4700:3037::6815:5eb9"],"resolved_at":"2026-11-05T23:55:23Z","dns_checked_at":"2026-11-06T00:51:07.000Z","dns_since":"2026-11-06T00:51:07.000Z","findings":[{"id":"ff566p3vq2i4ek77xkspg","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/brands/trust-wallet"},{"hostname":"info-google.net","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","brands":[{"id":"google","name":"Google","url":"https://domainspoof.com/brands/google"}],"dns":"resolved","resolved":["104.21.64.31","172.67.175.16","2606:4700:3030::6815:401f","2606:4700:3036::ac43:af10"],"resolved_at":"2026-11-05T23:55:24Z","dns_checked_at":"2026-11-06T00:51:07.000Z","dns_since":"2026-11-06T00:51:07.000Z","findings":[{"id":"fofxpmygl2xz766sjoxuy","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/brands/google"},{"hostname":"inosslegge.store","first_observed":"2026-11-06T00:20:04.684Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"resolved","resolved":["104.21.69.107","172.67.207.110","2606:4700:3030::6815:456b","2606:4700:3033::ac43:cf6e"],"resolved_at":"2026-11-06T00:20:56Z","dns_checked_at":"2026-11-06T00:51:07.000Z","dns_since":"2026-11-06T00:51:07.000Z","findings":[{"id":"fabeh4lfpinkjwpwi2avs","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-06T00:20:04.684Z","first_published":"2026-11-06T00:39:38.884Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=inosslegge.store"},{"hostname":"intc-binance.com.cn","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","brands":[{"id":"binance","name":"Binance","url":"https://domainspoof.com/brands/binance"}],"dns":"resolved","resolved":["85.189.41.70"],"resolved_at":"2026-11-05T23:55:24Z","dns_checked_at":"2026-11-06T00:51:07.000Z","dns_since":"2026-11-06T00:51:07.000Z","findings":[{"id":"fpzdoz6fzjt2camhnoshz","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/brands/binance"},{"hostname":"inter-binance.com.cn","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","brands":[{"id":"binance","name":"Binance","url":"https://domainspoof.com/brands/binance"}],"dns":"resolved","resolved":["104.21.33.235","172.67.193.161","2606:4700:3031::6815:21eb","2606:4700:3036::ac43:c1a1"],"resolved_at":"2026-11-05T23:55:24Z","dns_checked_at":"2026-11-06T00:51:07.000Z","dns_since":"2026-11-06T00:51:07.000Z","findings":[{"id":"fhzmvyauoulus422nmus4","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/brands/binance"},{"hostname":"internal-api.ni-electrical.com","first_observed":"2026-11-06T00:10:55.664Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"resolved","resolved":["109.238.86.5"],"resolved_at":"2026-11-06T00:11:19Z","dns_checked_at":"2026-11-06T00:51:07.000Z","dns_since":"2026-11-06T00:51:07.000Z","findings":[{"id":"fq5wvotfj3otjrncqishl","kind":"reported_domain","summary":"Under ni-electrical.com, listed by CERT Polska","first_observed":"2026-11-06T00:10:55.664Z","first_published":"2026-11-06T00:39:38.884Z","source":"cert_polska","source_name":"CERT Polska","under":"ni-electrical.com"}],"url":"https://domainspoof.com/live?show=all&q=internal-api.ni-electrical.com"},{"hostname":"invite-jeffcoin.com","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"no_address","resolved":[],"resolved_at":"2026-11-05T23:55:23Z","dns_checked_at":"2026-11-06T08:56:07.000Z","findings":[{"id":"f6bncpwpdng3j42emjfr6","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=invite-jeffcoin.com"},{"hostname":"jeff-presale.com","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"no_address","resolved":[],"resolved_at":"2026-11-05T23:55:23Z","dns_checked_at":"2026-11-06T08:56:07.000Z","findings":[{"id":"fz7tdwqunafr27vqdvoo2","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=jeff-presale.com"},{"hostname":"jeffcoin-cast.com","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"no_address","resolved":[],"resolved_at":"2026-11-05T23:55:23Z","dns_checked_at":"2026-11-06T08:56:07.000Z","findings":[{"id":"fnchji6uwmngibbsseugg","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=jeffcoin-cast.com"},{"hostname":"jeffcoin-casts.com","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"no_address","resolved":[],"resolved_at":"2026-11-05T23:55:23Z","dns_checked_at":"2026-11-06T08:56:07.000Z","findings":[{"id":"fon2l2cej7driv3zigfja","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=jeffcoin-casts.com"},{"hostname":"jeffcoin-early.com","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"no_address","resolved":[],"resolved_at":"2026-11-05T23:55:23Z","dns_checked_at":"2026-11-06T08:56:07.000Z","findings":[{"id":"f5a77qmysxbhd5yp6pe2y","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=jeffcoin-early.com"},{"hostname":"jupdex.pages.dev","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"not_found","resolved":[],"resolved_at":"2026-11-05T23:55:23Z","dns_checked_at":"2026-11-06T08:56:07.000Z","findings":[{"id":"f3zrd42etyi5zgq7manef","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=jupdex.pages.dev"},{"hostname":"jupiter-foundatio.pages.dev","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"not_found","resolved":[],"resolved_at":"2026-11-05T23:55:23Z","dns_checked_at":"2026-11-06T08:56:07.000Z","findings":[{"id":"fpgg7swnclixrtbzufzx5","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=jupiter-foundatio.pages.dev"},{"hostname":"kaching.luxe","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"no_address","resolved":[],"resolved_at":"2026-11-05T23:55:23Z","dns_checked_at":"2026-11-06T08:56:07.000Z","findings":[{"id":"fagnollgvudzr2mb2ynvh","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=kaching.luxe"},{"hostname":"kemetyl.stage.io-ext.se","first_observed":"2026-11-05T23:46:48.052Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"resolved","resolved":["188.208.37.128"],"resolved_at":"2026-11-05T23:51:02Z","dns_checked_at":"2026-11-06T00:51:07.000Z","dns_since":"2026-11-06T00:51:07.000Z","findings":[{"id":"fd7d7wsmpvuyn5apcsgyz","kind":"reported_domain","summary":"Under io-ext.se, listed by MetaMask","first_observed":"2026-11-05T23:46:48.052Z","first_published":"2026-11-06T00:39:38.884Z","source":"metamask","source_name":"MetaMask","under":"io-ext.se"}],"url":"https://domainspoof.com/live?show=all&q=kemetyl.stage.io-ext.se"},{"hostname":"klnteiqselysiums.com","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"resolved","resolved":["104.21.76.19","172.67.185.105","2606:4700:3030::ac43:b969","2606:4700:3037::6815:4c13"],"resolved_at":"2026-11-05T23:55:23Z","dns_checked_at":"2026-11-06T00:51:07.000Z","dns_since":"2026-11-06T00:51:07.000Z","findings":[{"id":"f2xpu4gouny7xhidw4rd3","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=klnteiqselysiums.com"},{"hostname":"krakenmq.top","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"resolved","resolved":["206.187.194.152"],"resolved_at":"2026-11-05T23:55:23Z","dns_checked_at":"2026-11-06T00:51:07.000Z","dns_since":"2026-11-06T00:51:07.000Z","findings":[{"id":"fp7ao43wvzchotj32vdov","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=krakenmq.top"},{"hostname":"labstide.vu","first_observed":"2026-11-06T00:15:33.870Z","first_published":"2026-11-06T00:39:38.884Z","brands":[{"id":"irs","name":"IRS","url":"https://domainspoof.com/brands/irs"}],"dns":"resolved","resolved":["104.21.79.168","172.67.146.156"],"resolved_at":"2026-11-06T00:15:56Z","dns_checked_at":"2026-11-06T00:51:07.000Z","dns_since":"2026-11-06T00:51:07.000Z","findings":[{"id":"filg3cfcjseflw7mpu73u","kind":"reported_domain","summary":"Reported by PhishTank as imitating Internal Revenue Service","first_observed":"2026-11-06T00:15:33.870Z","first_published":"2026-11-06T00:39:38.884Z","source":"phishtank","source_name":"PhishTank","claim":{"brand":"Internal Revenue Service"},"source_url":"https://phishtank.org/phish_detail.php?phish_id=9548548"}],"url":"https://domainspoof.com/brands/irs"},{"hostname":"lane-binance.com.cn","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","brands":[{"id":"binance","name":"Binance","url":"https://domainspoof.com/brands/binance"}],"dns":"resolved","resolved":["104.21.65.69","172.67.189.35","2606:4700:3033::ac43:bd23","2606:4700:3034::6815:4145"],"resolved_at":"2026-11-05T23:55:24Z","dns_checked_at":"2026-11-06T00:51:07.000Z","dns_since":"2026-11-06T00:51:07.000Z","findings":[{"id":"fhqvnvoslpj4w5fe6wrud","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/brands/binance"},{"hostname":"ledgr-app-epx.pages.dev","first_observed":"2026-11-05T23:46:48.052Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"resolved","resolved":["172.66.45.29","172.66.46.227"],"resolved_at":"2026-11-05T23:51:03Z","dns_checked_at":"2026-11-06T00:51:07.000Z","dns_since":"2026-11-06T00:51:07.000Z","findings":[{"id":"fyszrbebnqc7w27w52za3","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T23:46:48.052Z","first_published":"2026-11-06T00:39:38.884Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=ledgr-app-epx.pages.dev"},{"hostname":"legitdmca-x.com","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"resolved","resolved":["104.21.68.70","172.67.191.168","2606:4700:3033::ac43:bfa8","2606:4700:3036::6815:4446"],"resolved_at":"2026-11-05T23:55:23Z","dns_checked_at":"2026-11-06T00:51:07.000Z","dns_since":"2026-11-06T00:51:07.000Z","findings":[{"id":"fx3xsgsftc7u7lulxgrxp","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=legitdmca-x.com"},{"hostname":"levantefondorio-it.live","first_observed":"2026-11-05T23:56:49.054Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"resolved","resolved":["104.21.9.195","172.67.189.138"],"resolved_at":"2026-11-06T00:21:26Z","dns_checked_at":"2026-11-06T00:51:07.000Z","dns_since":"2026-11-06T00:51:07.000Z","findings":[{"id":"fdutfbtzqil25fo2gmkxe","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T23:56:49.054Z","first_published":"2026-11-06T00:39:38.884Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=levantefondorio-it.live"},{"hostname":"lieo.fi","first_observed":"2026-11-05T23:46:48.052Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"resolved","resolved":["104.21.9.204","172.67.189.145"],"resolved_at":"2026-11-06T00:11:21Z","dns_checked_at":"2026-11-06T00:51:07.000Z","dns_since":"2026-11-06T00:51:07.000Z","findings":[{"id":"fx2vlj24kbyoxdgxpsotd","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T23:46:48.052Z","first_published":"2026-11-06T00:39:38.884Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=lieo.fi"},{"hostname":"liido.finance","first_observed":"2026-11-06T00:21:13.428Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"resolved","resolved":["104.21.43.248","172.67.190.169"],"resolved_at":"2026-11-06T00:21:26Z","dns_checked_at":"2026-11-06T00:51:07.000Z","dns_since":"2026-11-06T00:51:07.000Z","findings":[{"id":"fs4wpyjhap6brcygw7q2d","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-06T00:21:13.428Z","first_published":"2026-11-06T00:39:38.884Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=liido.finance"},{"hostname":"lilshiba.com","first_observed":"2026-11-06T00:21:13.428Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"resolved","resolved":["104.21.14.246","172.67.160.208"],"resolved_at":"2026-11-06T00:21:26Z","dns_checked_at":"2026-11-06T00:51:07.000Z","dns_since":"2026-11-06T00:51:07.000Z","findings":[{"id":"fmn3c4l7lugxagee5wslv","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-06T00:21:13.428Z","first_published":"2026-11-06T00:39:38.884Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/lilshiba.com/"}],"url":"https://domainspoof.com/live?show=all&q=lilshiba.com"},{"hostname":"lineabridge.net","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"resolved","resolved":["104.21.66.129","172.67.204.17","2606:4700:3032::ac43:cc11","2606:4700:3035::6815:4281"],"resolved_at":"2026-11-05T23:55:23Z","dns_checked_at":"2026-11-06T00:51:07.000Z","dns_since":"2026-11-06T00:51:07.000Z","findings":[{"id":"fdy33lpajpjug54aqoof3","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=lineabridge.net"},{"hostname":"live-ledgrus-io.pages.dev","first_observed":"2026-11-06T00:00:47.488Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"resolved","resolved":["172.66.44.146","172.66.47.110"],"resolved_at":"2026-11-06T00:01:22Z","dns_checked_at":"2026-11-06T00:51:07.000Z","dns_since":"2026-11-06T00:51:07.000Z","findings":[{"id":"fjnxlkst4aucei6n4g2lu","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-06T00:00:47.488Z","first_published":"2026-11-06T00:39:38.884Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=live-ledgrus-io.pages.dev"},{"hostname":"liwo.fi","first_observed":"2026-11-06T00:05:46.893Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"resolved","resolved":["104.21.92.116","172.67.192.250"],"resolved_at":"2026-11-06T00:06:22Z","dns_checked_at":"2026-11-06T00:51:07.000Z","dns_since":"2026-11-06T00:51:07.000Z","findings":[{"id":"fnadmji2wrcgl6dcjdntx","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-06T00:05:46.893Z","first_published":"2026-11-06T00:39:38.884Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=liwo.fi"},{"hostname":"lixo.fi","first_observed":"2026-11-06T00:15:33.870Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"resolved","resolved":["104.21.87.111","172.67.169.101"],"resolved_at":"2026-11-06T00:15:56Z","dns_checked_at":"2026-11-06T00:51:07.000Z","dns_since":"2026-11-06T00:51:07.000Z","findings":[{"id":"fafxos24dvlgyfrhjetms","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-06T00:15:33.870Z","first_published":"2026-11-06T00:39:38.884Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=lixo.fi"},{"hostname":"ljdo.fi","first_observed":"2026-11-05T23:41:23.990Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"resolved","resolved":["104.21.50.52","172.67.201.80"],"resolved_at":"2026-11-06T00:11:21Z","dns_checked_at":"2026-11-06T00:51:07.000Z","dns_since":"2026-11-06T00:51:07.000Z","findings":[{"id":"f2ueve4lkjku5hv2wgjcv","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T23:41:23.990Z","first_published":"2026-11-06T00:39:38.884Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=ljdo.fi"},{"hostname":"ll-ledger.es","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"resolved","resolved":["104.21.11.137","172.67.166.35","2606:4700:3032::6815:b89","2606:4700:3037::ac43:a623"],"resolved_at":"2026-11-05T23:55:23Z","dns_checked_at":"2026-11-06T00:51:07.000Z","dns_since":"2026-11-06T00:51:07.000Z","findings":[{"id":"femade3qhpbcpvk6tnfp3","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=ll-ledger.es"},{"hostname":"log-into-online-portal.com","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"resolved","resolved":["5.255.101.192"],"resolved_at":"2026-11-05T23:55:23Z","dns_checked_at":"2026-11-06T00:51:07.000Z","dns_since":"2026-11-06T00:51:07.000Z","findings":[{"id":"fk6cnmekabgkwfvikasfv","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=log-into-online-portal.com"},{"hostname":"login-google.online","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","brands":[{"id":"google","name":"Google","url":"https://domainspoof.com/brands/google"}],"dns":"not_found","resolved":[],"resolved_at":"2026-11-05T23:55:23Z","dns_checked_at":"2026-11-06T08:56:07.000Z","findings":[{"id":"fstrb2d3utmnlbxgiuo46","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/brands/google"},{"hostname":"login-in-myservice-portal.com","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"resolved","resolved":["104.21.84.24","172.67.185.8","2606:4700:3030::6815:5418","2606:4700:3034::ac43:b908"],"resolved_at":"2026-11-05T23:55:23Z","dns_checked_at":"2026-11-06T00:51:07.000Z","dns_since":"2026-11-06T00:51:07.000Z","findings":[{"id":"fqp2ubt5xrfz554wjtw32","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=login-in-myservice-portal.com"},{"hostname":"login-to-portal-advance-info-home.com","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"resolved","resolved":["104.21.10.174","172.67.146.37","2606:4700:3033::ac43:9225","2606:4700:3035::6815:aae"],"resolved_at":"2026-11-05T23:55:23Z","dns_checked_at":"2026-11-06T00:51:07.000Z","dns_since":"2026-11-06T00:51:07.000Z","findings":[{"id":"faj7iiojmzzzwsat6pyxa","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=login-to-portal-advance-info-home.com"},{"hostname":"logon-to-portal-home-info-advance-ports.com","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"resolved","resolved":["104.21.87.119","172.67.143.10","2606:4700:3032::6815:5777","2606:4700:3035::ac43:8f0a"],"resolved_at":"2026-11-05T23:55:23Z","dns_checked_at":"2026-11-06T00:51:07.000Z","dns_since":"2026-11-06T00:51:07.000Z","findings":[{"id":"fsha444hikiasxgrxifb3","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=logon-to-portal-home-info-advance-ports.com"},{"hostname":"lohmabok.shop","first_observed":"2026-11-06T00:26:21.784Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"no_address","resolved":[],"resolved_at":"2026-11-06T00:26:29Z","dns_checked_at":"2026-11-06T08:56:07.000Z","findings":[{"id":"fu35uvjzcrmiptymhtwsk","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-06T00:26:21.784Z","first_published":"2026-11-06T00:39:38.884Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=lohmabok.shop"},{"hostname":"m-nail.com","first_observed":"2026-11-05T23:41:23.990Z","first_published":"2026-11-06T00:39:38.884Z","brands":[{"id":"td-bank","name":"TD Bank","url":"https://domainspoof.com/brands/td-bank"}],"dns":"resolved","resolved":["118.27.125.210"],"resolved_at":"2026-11-05T23:48:32Z","dns_checked_at":"2026-11-06T00:51:07.000Z","dns_since":"2026-11-06T00:51:07.000Z","findings":[{"id":"filelzzmv6szm7hc2kcge","kind":"reported_domain","summary":"Listed by JPCERT/CC as imitating TD Bank","first_observed":"2026-11-05T23:41:23.990Z","first_published":"2026-11-06T00:39:38.884Z","source":"jpcert","source_name":"JPCERT/CC","claim":{"brand":"TD Bank"}}],"url":"https://domainspoof.com/brands/td-bank"},{"hostname":"m.binance-bk.com.cn","first_observed":"2026-11-05T23:32:02.109Z","first_published":"2026-11-06T00:39:38.884Z","brands":[{"id":"binance","name":"Binance","url":"https://domainspoof.com/brands/binance"}],"dns":"resolved","resolved":["154.31.148.87"],"resolved_at":"2026-11-06T00:51:07Z","dns_checked_at":"2026-11-06T00:51:07.000Z","dns_since":"2026-11-06T00:51:07.000Z","findings":[{"id":"fwsgl3ylnajmbxhivgoun","kind":"phishing_infrastructure","summary":"Resolved to 154.31.148.87, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T23:32:02.109Z","first_published":"2026-11-06T00:39:38.884Z","address":"154.31.148.87","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/binance"},{"hostname":"mail.ankaraduguncekimi.com","first_observed":"2026-11-05T23:26:04.147Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"resolved","resolved":["89.252.187.207"],"resolved_at":"2026-11-05T23:36:50Z","dns_checked_at":"2026-11-06T00:51:07.000Z","dns_since":"2026-11-06T00:51:07.000Z","findings":[{"id":"fw7i4mcrazr7kbfcxkcp5","kind":"reported_domain","summary":"Under ankaraduguncekimi.com, listed by CERT Polska","first_observed":"2026-11-05T23:26:04.147Z","first_published":"2026-11-06T00:39:38.884Z","source":"cert_polska","source_name":"CERT Polska","under":"ankaraduguncekimi.com"}],"url":"https://domainspoof.com/live?show=all&q=mail.ankaraduguncekimi.com"},{"hostname":"mantle-bridge.com","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"resolved","resolved":["104.21.77.207","172.67.211.132","2606:4700:3030::ac43:d384","2606:4700:3036::6815:4dcf"],"resolved_at":"2026-11-05T23:55:23Z","dns_checked_at":"2026-11-06T00:51:07.000Z","dns_since":"2026-11-06T00:51:07.000Z","findings":[{"id":"f5qquzebju75tklur3sng","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=mantle-bridge.com"},{"hostname":"maryberger-coinbase.com","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","brands":[{"id":"coinbase","name":"Coinbase","url":"https://domainspoof.com/brands/coinbase"}],"dns":"no_address","resolved":[],"resolved_at":"2026-11-05T23:55:23Z","dns_checked_at":"2026-11-06T08:56:07.000Z","findings":[{"id":"fxfwtjyhaq7kwzwnw2bys","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/brands/coinbase"},{"hostname":"mer-binance.com.cn","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","brands":[{"id":"binance","name":"Binance","url":"https://domainspoof.com/brands/binance"}],"dns":"resolved","resolved":["104.21.0.253","172.67.151.158","2606:4700:3033::ac43:979e","2606:4700:3036::6815:fd"],"resolved_at":"2026-11-05T23:55:23Z","dns_checked_at":"2026-11-06T00:51:07.000Z","dns_since":"2026-11-06T00:51:07.000Z","findings":[{"id":"fyir4mvrhmsjmbb7snv2i","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/brands/binance"},{"hostname":"merchant-binance.com.cn","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","brands":[{"id":"binance","name":"Binance","url":"https://domainspoof.com/brands/binance"}],"dns":"resolved","resolved":["104.21.41.99","172.67.164.44","2606:4700:3031::ac43:a42c","2606:4700:3035::6815:2963"],"resolved_at":"2026-11-05T23:55:23Z","dns_checked_at":"2026-11-06T00:51:07.000Z","dns_since":"2026-11-06T00:51:07.000Z","findings":[{"id":"fhhwug236bcd3j6dt6z6r","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/brands/binance"},{"hostname":"moneroswapper.io","first_observed":"2026-11-05T23:26:04.147Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"resolved","resolved":["161.35.77.135"],"resolved_at":"2026-11-05T23:36:50Z","dns_checked_at":"2026-11-06T00:51:07.000Z","dns_since":"2026-11-06T00:51:07.000Z","findings":[{"id":"fhcaduybvczcr6njhg3bl","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T23:26:04.147Z","first_published":"2026-11-06T00:39:38.884Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=moneroswapper.io"},{"hostname":"ms-accounts.online","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"resolved","resolved":["179.66.133.85"],"resolved_at":"2026-11-05T23:55:23Z","dns_checked_at":"2026-11-06T00:51:07.000Z","dns_since":"2026-11-06T00:51:07.000Z","findings":[{"id":"f4sdk2wnp3oxax6gicget","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=ms-accounts.online"},{"hostname":"mytoolwallet.com","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"resolved","resolved":["20.75.112.13"],"resolved_at":"2026-11-05T23:55:23Z","dns_checked_at":"2026-11-06T00:51:07.000Z","dns_since":"2026-11-06T00:51:07.000Z","findings":[{"id":"f7nmaapjv74anigvbvnyy","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=mytoolwallet.com"},{"hostname":"newsy1-unde46.cfd","first_observed":"2026-11-06T00:20:04.684Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"no_address","resolved":[],"resolved_at":"2026-11-06T00:20:56Z","dns_checked_at":"2026-11-06T08:56:07.000Z","findings":[{"id":"fkx22xfa7l3ezrajcirfc","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-06T00:20:04.684Z","first_published":"2026-11-06T00:39:38.884Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=newsy1-unde46.cfd"},{"hostname":"nkasnh.shop","first_observed":"2026-11-06T00:31:29.331Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"resolved","resolved":["13.248.213.45","76.223.67.189"],"resolved_at":"2026-11-06T00:32:13Z","dns_checked_at":"2026-11-06T00:51:07.000Z","dns_since":"2026-11-06T00:51:07.000Z","findings":[{"id":"ftc5fyien5tc4c5tsumtd","kind":"reported_domain","summary":"Listed by NPA 165 (e-commerce)","first_observed":"2026-11-06T00:31:29.331Z","first_published":"2026-11-06T00:39:38.884Z","source":"npa","source_name":"NPA 165","claim":{"category":"e-commerce"}}],"url":"https://domainspoof.com/live?show=all&q=nkasnh.shop"},{"hostname":"noble-fundmere.live","first_observed":"2026-11-06T00:00:47.488Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"resolved","resolved":["104.21.12.119","172.67.132.35"],"resolved_at":"2026-11-06T00:01:22Z","dns_checked_at":"2026-11-06T00:51:07.000Z","dns_since":"2026-11-06T00:51:07.000Z","findings":[{"id":"facf3cncy6gkd5riqpp7w","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-06T00:00:47.488Z","first_published":"2026-11-06T00:39:38.884Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=noble-fundmere.live"},{"hostname":"nodesphere-sol.xyz","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"resolved","resolved":["104.21.4.42","172.67.131.164","2606:4700:3032::6815:42a","2606:4700:3032::ac43:83a4"],"resolved_at":"2026-11-05T23:55:23Z","dns_checked_at":"2026-11-06T00:51:07.000Z","dns_since":"2026-11-06T00:51:07.000Z","findings":[{"id":"fjl567wsf5jdlz7pyyibi","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=nodesphere-sol.xyz"},{"hostname":"norrahammarsplat.stage.io-ext.se","first_observed":"2026-11-06T00:00:47.488Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"resolved","resolved":["188.208.37.116"],"resolved_at":"2026-11-06T00:01:22Z","dns_checked_at":"2026-11-06T00:51:07.000Z","dns_since":"2026-11-06T00:51:07.000Z","findings":[{"id":"fky3wdlx7wwvm7icwxuzv","kind":"reported_domain","summary":"Under io-ext.se, listed by MetaMask","first_observed":"2026-11-06T00:00:47.488Z","first_published":"2026-11-06T00:39:38.884Z","source":"metamask","source_name":"MetaMask","under":"io-ext.se"}],"url":"https://domainspoof.com/live?show=all&q=norrahammarsplat.stage.io-ext.se"},{"hostname":"obmenza.com","first_observed":"2026-11-06T00:05:46.893Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"resolved","resolved":["104.21.86.253","172.67.138.222"],"resolved_at":"2026-11-06T00:06:22Z","dns_checked_at":"2026-11-06T00:51:07.000Z","dns_since":"2026-11-06T00:51:07.000Z","findings":[{"id":"fpgpyifgnova2ps3slpyi","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-06T00:05:46.893Z","first_published":"2026-11-06T00:39:38.884Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/obmenza.com/"}],"url":"https://domainspoof.com/live?show=all&q=obmenza.com"},{"hostname":"oferta-7356421.cfd","first_observed":"2026-11-06T00:20:04.684Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"resolved","resolved":["104.21.3.93","172.67.153.67","2606:4700:3033::6815:35d","2606:4700:3037::ac43:9943"],"resolved_at":"2026-11-06T00:20:56Z","dns_checked_at":"2026-11-06T00:51:07.000Z","dns_since":"2026-11-06T00:51:07.000Z","findings":[{"id":"fgaixasixk5oknzjavtlg","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-06T00:20:04.684Z","first_published":"2026-11-06T00:39:38.884Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=oferta-7356421.cfd"},{"hostname":"oferta98340.sbs","first_observed":"2026-11-06T00:20:04.684Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"resolved","resolved":["104.21.13.82","172.67.198.212","2606:4700:3035::6815:d52","2606:4700:3037::ac43:c6d4"],"resolved_at":"2026-11-06T00:20:56Z","dns_checked_at":"2026-11-06T00:51:07.000Z","dns_since":"2026-11-06T00:51:07.000Z","findings":[{"id":"fdvwm5vh6dvl5ea36kc5i","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-06T00:20:04.684Z","first_published":"2026-11-06T00:39:38.884Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=oferta98340.sbs"},{"hostname":"ogloszenie832.cfd","first_observed":"2026-11-06T00:20:04.684Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"resolved","resolved":["104.21.50.124","172.67.163.45","2606:4700:3036::6815:327c","2606:4700:3037::ac43:a32d"],"resolved_at":"2026-11-06T00:20:56Z","dns_checked_at":"2026-11-06T00:51:07.000Z","dns_since":"2026-11-06T00:51:07.000Z","findings":[{"id":"frly2kgtq5n2fg6on323d","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-06T00:20:04.684Z","first_published":"2026-11-06T00:39:38.884Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=ogloszenie832.cfd"},{"hostname":"okningfundex-no.live","first_observed":"2026-11-05T23:36:22.680Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"resolved","resolved":["104.21.23.236","172.67.214.40"],"resolved_at":"2026-11-06T01:30:12Z","dns_checked_at":"2026-11-06T00:51:07.000Z","dns_since":"2026-11-06T00:51:07.000Z","findings":[{"id":"fcdr2vjsfxrmoxthpx4s6","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T23:36:22.680Z","first_published":"2026-11-06T00:39:38.884Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=okningfundex-no.live"},{"hostname":"onlinemicrosoftpdreview.sbs","first_observed":"2026-11-05T23:46:48.052Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"resolved","resolved":["104.21.58.227","172.67.209.248","2606:4700:3031::ac43:d1f8","2606:4700:3037::6815:3ae3"],"resolved_at":"2026-11-06T01:36:51Z","dns_checked_at":"2026-11-06T00:51:07.000Z","dns_since":"2026-11-06T00:51:07.000Z","findings":[{"id":"fgvgmokausx5rtuw43isp","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T23:46:48.052Z","first_published":"2026-11-06T00:39:38.884Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=onlinemicrosoftpdreview.sbs"},{"hostname":"onlinemicrosoftwebsitesecurepdf.sbs","first_observed":"2026-11-06T00:31:29.331Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"resolved","resolved":["104.21.52.235","172.67.205.115","2606:4700:3035::6815:34eb","2606:4700:3035::ac43:cd73"],"resolved_at":"2026-11-06T00:32:15Z","dns_checked_at":"2026-11-06T00:51:07.000Z","dns_since":"2026-11-06T00:51:07.000Z","findings":[{"id":"fxzluoid26xcnw3nuxiuc","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-06T00:31:29.331Z","first_published":"2026-11-06T00:39:38.884Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=onlinemicrosoftwebsitesecurepdf.sbs"},{"hostname":"org-walcrosnet.sbs","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"resolved","resolved":["31.59.120.58"],"resolved_at":"2026-11-05T23:55:24Z","dns_checked_at":"2026-11-06T00:51:07.000Z","dns_since":"2026-11-06T00:51:07.000Z","findings":[{"id":"f2mkx7d6h4rfa7o7xm7qi","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=org-walcrosnet.sbs"},{"hostname":"outlook.crypto-polis.org","first_observed":"2026-11-05T23:46:48.052Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"resolved","resolved":["185.178.208.132","185.178.208.182"],"resolved_at":"2026-11-05T23:51:06Z","dns_checked_at":"2026-11-06T00:51:07.000Z","dns_since":"2026-11-06T00:51:07.000Z","findings":[{"id":"f5mckzyghjlm2yta4qkrp","kind":"reported_domain","summary":"Under crypto-polis.org, reported by PhishDestroy","first_observed":"2026-11-05T23:46:48.052Z","first_published":"2026-11-06T00:39:38.884Z","source":"phishdestroy","source_name":"PhishDestroy","under":"crypto-polis.org","source_url":"https://phishdestroy.io/domain/crypto-polis.org/"}],"url":"https://domainspoof.com/live?show=all&q=outlook.crypto-polis.org"},{"hostname":"pay-binance.cn","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","brands":[{"id":"binance","name":"Binance","url":"https://domainspoof.com/brands/binance"}],"dns":"resolved","resolved":["104.21.43.223","172.67.186.183","2606:4700:3030::6815:2bdf","2606:4700:3035::ac43:bab7"],"resolved_at":"2026-11-05T23:55:23Z","dns_checked_at":"2026-11-06T00:51:07.000Z","dns_since":"2026-11-06T00:51:07.000Z","findings":[{"id":"flt6gonndbd4bxoobogv6","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/brands/binance"},{"hostname":"pay.blablacar.sber.20689.cdek.rhxyvcq9vvts2ld9.r.mail.leankoala.com","first_observed":"2026-11-05T23:30:42.877Z","first_published":"2026-11-06T00:39:38.884Z","brands":[{"id":"blablacar","name":"BlaBlaCar","url":"https://domainspoof.com/brands/blablacar"}],"dns":"resolved","resolved":["172.246.243.65"],"resolved_at":"2026-11-06T00:51:07Z","dns_checked_at":"2026-11-06T00:51:07.000Z","dns_since":"2026-11-06T00:51:07.000Z","findings":[{"id":"f6ynyxsutbrha3dhgunru","kind":"phishing_infrastructure","summary":"Resolved to 172.246.243.65, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T23:30:42.877Z","first_published":"2026-11-06T00:39:38.884Z","address":"172.246.243.65","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/blablacar"},{"hostname":"pay.notexist.pay.login-blablacar.cdek.rhxyvcq9vvts2ld9.r.mail.leankoala.com","first_observed":"2026-11-05T23:30:42.937Z","first_published":"2026-11-06T00:39:38.884Z","brands":[{"id":"blablacar","name":"BlaBlaCar","url":"https://domainspoof.com/brands/blablacar"}],"dns":"resolved","resolved":["172.246.243.65"],"resolved_at":"2026-11-06T00:51:07Z","dns_checked_at":"2026-11-06T00:51:07.000Z","dns_since":"2026-11-06T00:51:07.000Z","findings":[{"id":"f2qwmlu3sytgkzy4uhnqy","kind":"phishing_infrastructure","summary":"Resolved to 172.246.243.65, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T23:30:42.937Z","first_published":"2026-11-06T00:39:38.884Z","address":"172.246.243.65","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/blablacar"},{"hostname":"pay.pochta.avito.20subversion.cdek.rhxyvcq9vvts2ld9.r.mail.leankoala.com","first_observed":"2026-11-05T23:30:42.999Z","first_published":"2026-11-06T00:39:38.884Z","brands":[{"id":"avito","name":"Avito","url":"https://domainspoof.com/brands/avito"},{"id":"russian-post","name":"Russian Post","url":"https://domainspoof.com/brands/russian-post"}],"dns":"resolved","resolved":["172.246.243.65"],"resolved_at":"2026-11-06T00:51:07Z","dns_checked_at":"2026-11-06T00:51:07.000Z","dns_since":"2026-11-06T00:51:07.000Z","findings":[{"id":"fczlb33zetgdbf6wvqbvj","kind":"phishing_infrastructure","summary":"Resolved to 172.246.243.65, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T23:30:42.999Z","first_published":"2026-11-06T00:39:38.884Z","address":"172.246.243.65","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/avito"},{"hostname":"pay.yandex.0ff3fdazcoqd8fh1.cdek.rhxyvcq9vvts2ld9.r.mail.leankoala.com","first_observed":"2026-11-05T23:30:43.031Z","first_published":"2026-11-06T00:39:38.884Z","brands":[{"id":"yandex","name":"Yandex","url":"https://domainspoof.com/brands/yandex"}],"dns":"resolved","resolved":["172.246.243.65"],"resolved_at":"2026-11-06T00:51:07Z","dns_checked_at":"2026-11-06T00:51:07.000Z","dns_since":"2026-11-06T00:51:07.000Z","findings":[{"id":"fzp4lchqwy6jz5wgbqtli","kind":"phishing_infrastructure","summary":"Resolved to 172.246.243.65, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T23:30:43.031Z","first_published":"2026-11-06T00:39:38.884Z","address":"172.246.243.65","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/yandex"},{"hostname":"pay.yandex.13essentials.cdek.rhxyvcq9vvts2ld9.r.mail.leankoala.com","first_observed":"2026-11-05T23:30:43.077Z","first_published":"2026-11-06T00:39:38.884Z","brands":[{"id":"yandex","name":"Yandex","url":"https://domainspoof.com/brands/yandex"}],"dns":"resolved","resolved":["172.246.243.65"],"resolved_at":"2026-11-06T00:51:07Z","dns_checked_at":"2026-11-06T00:51:07.000Z","dns_since":"2026-11-06T00:51:07.000Z","findings":[{"id":"fcvc33y22zktyqogc7ei2","kind":"phishing_infrastructure","summary":"Resolved to 172.246.243.65, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T23:30:43.077Z","first_published":"2026-11-06T00:39:38.884Z","address":"172.246.243.65","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/yandex"},{"hostname":"peach-bamboo-handle.shop","first_observed":"2026-11-05T23:36:22.680Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"resolved","resolved":["34.8.77.192"],"resolved_at":"2026-11-06T01:01:07Z","dns_checked_at":"2026-11-06T00:51:07.000Z","dns_since":"2026-11-06T00:51:07.000Z","findings":[{"id":"fcf3nk35tocrzwrcitdvs","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T23:36:22.680Z","first_published":"2026-11-06T00:39:38.884Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=peach-bamboo-handle.shop"},{"hostname":"peakvestholt.live","first_observed":"2026-11-05T23:31:15.422Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"resolved","resolved":["104.21.53.69","172.67.209.173"],"resolved_at":"2026-11-05T23:32:02Z","dns_checked_at":"2026-11-06T00:51:07.000Z","dns_since":"2026-11-06T00:51:07.000Z","findings":[{"id":"fh6oarnpoikxnyjiqnu6t","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T23:31:15.422Z","first_published":"2026-11-06T00:39:38.884Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=peakvestholt.live"},{"hostname":"phase1-sports.com","first_observed":"2026-11-06T00:10:55.664Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"resolved","resolved":["216.150.1.1"],"resolved_at":"2026-11-06T00:12:53Z","dns_checked_at":"2026-11-06T00:51:07.000Z","dns_since":"2026-11-06T00:51:07.000Z","findings":[{"id":"fiaoemq3yqwwrq7pt5wey","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-06T00:10:55.664Z","first_published":"2026-11-06T00:39:38.884Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=phase1-sports.com"},{"hostname":"pi-oferta8518521.lat","first_observed":"2026-11-06T00:20:04.684Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"resolved","resolved":["fd10:aec2:5dae::"],"resolved_at":"2026-11-06T00:20:56Z","dns_checked_at":"2026-11-06T00:51:07.000Z","dns_since":"2026-11-06T00:51:07.000Z","findings":[{"id":"fhww46hkkm7vqpwhtxu4u","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-06T00:20:04.684Z","first_published":"2026-11-06T00:39:38.884Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=pi-oferta8518521.lat"},{"hostname":"pikashowsapks.in","first_observed":"2026-11-06T00:00:47.488Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"resolved","resolved":["104.21.75.65","172.67.215.184"],"resolved_at":"2026-11-06T00:10:24Z","dns_checked_at":"2026-11-06T00:51:07.000Z","dns_since":"2026-11-06T00:51:07.000Z","findings":[{"id":"fwr3sejb3652ab6osvbfo","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-06T00:00:47.488Z","first_published":"2026-11-06T00:39:38.884Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=pikashowsapks.in"},{"hostname":"plasma-checker.com","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"resolved","resolved":["104.21.38.62","172.67.219.180","2606:4700:3032::ac43:dbb4","2606:4700:3034::6815:263e"],"resolved_at":"2026-11-05T23:55:23Z","dns_checked_at":"2026-11-06T00:51:07.000Z","dns_since":"2026-11-06T00:51:07.000Z","findings":[{"id":"fnvaxmmajnlwfgatzf6j3","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=plasma-checker.com"},{"hostname":"plasma-xpll.com","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"resolved","resolved":["104.21.51.152","172.67.182.21","2606:4700:3034::6815:3398","2606:4700:3034::ac43:b615"],"resolved_at":"2026-11-05T23:55:23Z","dns_checked_at":"2026-11-06T00:51:07.000Z","dns_since":"2026-11-06T00:51:07.000Z","findings":[{"id":"ftf2sfp3hakydwt4wj55w","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=plasma-xpll.com"},{"hostname":"pliscor-tradeelite.live","first_observed":"2026-11-05T23:26:04.147Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"resolved","resolved":["104.21.15.222","172.67.208.32"],"resolved_at":"2026-11-05T23:36:56Z","dns_checked_at":"2026-11-06T00:51:07.000Z","dns_since":"2026-11-06T00:51:07.000Z","findings":[{"id":"fkz7dybjagqkore52bfsd","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T23:26:04.147Z","first_published":"2026-11-06T00:39:38.884Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=pliscor-tradeelite.live"},{"hostname":"poi-bnb.com.cn","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"resolved","resolved":["85.189.41.70"],"resolved_at":"2026-11-05T23:55:24Z","dns_checked_at":"2026-11-06T00:51:07.000Z","dns_since":"2026-11-06T00:51:07.000Z","findings":[{"id":"fb6s4ipdscficzn4nrn5k","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=poi-bnb.com.cn"},{"hostname":"polunexapro.live","first_observed":"2026-11-05T23:31:15.422Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"resolved","resolved":["104.21.87.96","172.67.169.84"],"resolved_at":"2026-11-05T23:32:02Z","dns_checked_at":"2026-11-06T00:51:07.000Z","dns_since":"2026-11-06T00:51:07.000Z","findings":[{"id":"ftx4ifuovynfldnkpvark","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T23:31:15.422Z","first_published":"2026-11-06T00:39:38.884Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=polunexapro.live"},{"hostname":"portal-papertrade.xyz","first_observed":"2026-11-06T00:00:47.488Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"resolved","resolved":["104.21.32.246","172.67.157.13"],"resolved_at":"2026-11-06T00:01:22Z","dns_checked_at":"2026-11-06T00:51:07.000Z","dns_since":"2026-11-06T00:51:07.000Z","findings":[{"id":"fwymqjrr24hh3kjosq6cc","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-06T00:00:47.488Z","first_published":"2026-11-06T00:39:38.884Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=portal-papertrade.xyz"},{"hostname":"posteflott.store","first_observed":"2026-11-06T00:20:04.684Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"resolved","resolved":["104.21.78.86","172.67.219.15","2606:4700:3033::6815:4e56","2606:4700:3036::ac43:db0f"],"resolved_at":"2026-11-06T00:20:56Z","dns_checked_at":"2026-11-06T00:51:07.000Z","dns_since":"2026-11-06T00:51:07.000Z","findings":[{"id":"fqn7h32dv6xgrdqbbwes7","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-06T00:20:04.684Z","first_published":"2026-11-06T00:39:38.884Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=posteflott.store"},{"hostname":"presale-jeff.com","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"no_address","resolved":[],"resolved_at":"2026-11-05T23:55:23Z","dns_checked_at":"2026-11-06T08:56:07.000Z","findings":[{"id":"fxiwf3ldevnkx5pk2rfro","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=presale-jeff.com"},{"hostname":"presale-jeffcoin.com","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"no_address","resolved":[],"resolved_at":"2026-11-05T23:55:23Z","dns_checked_at":"2026-11-06T08:56:07.000Z","findings":[{"id":"fn4memww3t2zakz56lm55","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=presale-jeffcoin.com"},{"hostname":"proposal-firelight.xyz","first_observed":"2026-11-05T23:36:22.680Z","first_published":"2026-11-06T00:39:38.884Z","brands":[{"id":"firelight","name":"Firelight","url":"https://domainspoof.com/brands/firelight"}],"dns":"resolved","resolved":["104.21.77.142","172.67.208.235"],"resolved_at":"2026-11-05T23:37:04Z","dns_checked_at":"2026-11-06T00:51:07.000Z","dns_since":"2026-11-06T00:51:07.000Z","findings":[{"id":"fdbdmrsff5jqj4yypoji7","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T23:36:22.680Z","first_published":"2026-11-06T00:39:38.884Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/brands/firelight"},{"hostname":"proposal-globaldollar.com","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"no_address","resolved":[],"resolved_at":"2026-11-05T23:55:23Z","dns_checked_at":"2026-11-06T08:56:07.000Z","findings":[{"id":"f5d3rms3c2hiz6rb634ea","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=proposal-globaldollar.com"},{"hostname":"proposal-otcdesks.icu","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"resolved","resolved":["104.21.47.117","172.67.147.126","2606:4700:3037::6815:2f75","2606:4700:3037::ac43:937e"],"resolved_at":"2026-11-05T23:55:23Z","dns_checked_at":"2026-11-06T00:51:07.000Z","dns_since":"2026-11-06T00:51:07.000Z","findings":[{"id":"fry27ebj6zwqbbiis5m6a","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=proposal-otcdesks.icu"},{"hostname":"proposal-usenest.com","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"no_address","resolved":[],"resolved_at":"2026-11-05T23:55:23Z","dns_checked_at":"2026-11-06T08:56:07.000Z","findings":[{"id":"f37hrowvbnpjnslzut7qq","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=proposal-usenest.com"},{"hostname":"proposals-aero.click","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"resolved","resolved":["104.21.48.150","172.67.153.89","2606:4700:3032::6815:3096","2606:4700:3033::ac43:9959"],"resolved_at":"2026-11-05T23:55:23Z","dns_checked_at":"2026-11-06T00:51:07.000Z","dns_since":"2026-11-06T00:51:07.000Z","findings":[{"id":"fydhu4bm3h7zkntnbuuye","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=proposals-aero.click"},{"hostname":"proposals-jito.com","first_observed":"2026-11-06T00:10:55.664Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"resolved","resolved":["104.21.42.57","172.67.201.88"],"resolved_at":"2026-11-06T00:12:53Z","dns_checked_at":"2026-11-06T00:51:07.000Z","dns_since":"2026-11-06T00:51:07.000Z","findings":[{"id":"fdivkatwgu6riuwkin7my","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-06T00:10:55.664Z","first_published":"2026-11-06T00:39:38.884Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=proposals-jito.com"},{"hostname":"protonya.com.cn","first_observed":"2026-11-06T00:05:46.893Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"resolved","resolved":["206.161.218.138"],"resolved_at":"2026-11-06T00:06:24Z","dns_checked_at":"2026-11-06T00:51:07.000Z","dns_since":"2026-11-06T00:51:07.000Z","findings":[{"id":"f6jrgajyz434n4wbskp5u","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-06T00:05:46.893Z","first_published":"2026-11-06T00:39:38.884Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=protonya.com.cn"},{"hostname":"pumpswapv2.fun","first_observed":"2026-11-06T00:31:29.331Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"resolved","resolved":["64.29.17.1","64.29.17.65"],"resolved_at":"2026-11-06T00:32:16Z","dns_checked_at":"2026-11-06T00:51:07.000Z","dns_since":"2026-11-06T00:51:07.000Z","findings":[{"id":"fm63i7d4t3enywssv2fmn","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-06T00:31:29.331Z","first_published":"2026-11-06T00:39:38.884Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=pumpswapv2.fun"},{"hostname":"qql-checker.app","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"resolved","resolved":["104.21.93.56","172.67.205.175","2606:4700:3031::6815:5d38","2606:4700:3037::ac43:cdaf"],"resolved_at":"2026-11-05T23:55:23Z","dns_checked_at":"2026-11-06T00:51:07.000Z","dns_since":"2026-11-06T00:51:07.000Z","findings":[{"id":"flz3zlwnnv7jc4l4dxi5y","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=qql-checker.app"},{"hostname":"qql-pass.app","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"resolved","resolved":["104.21.39.144","172.67.170.205","2606:4700:3030::6815:2790","2606:4700:3033::ac43:aacd"],"resolved_at":"2026-11-05T23:55:23Z","dns_checked_at":"2026-11-06T00:51:07.000Z","dns_since":"2026-11-06T00:51:07.000Z","findings":[{"id":"fwv3yo2mvmbhercawpxsh","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=qql-pass.app"},{"hostname":"rainbet-polska.com","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"resolved","resolved":["104.21.42.225","172.67.167.34","2606:4700:3035::6815:2ae1","2606:4700:3037::ac43:a722"],"resolved_at":"2026-11-05T23:55:23Z","dns_checked_at":"2026-11-06T00:51:07.000Z","dns_since":"2026-11-06T00:51:07.000Z","findings":[{"id":"fksrdnm43hsnetpe5yhie","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=rainbet-polska.com"},{"hostname":"realbeckersol.com","first_observed":"2026-11-05T23:36:22.680Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"resolved","resolved":["104.21.72.22","172.67.174.29"],"resolved_at":"2026-11-05T23:37:04Z","dns_checked_at":"2026-11-06T00:51:07.000Z","dns_since":"2026-11-06T00:51:07.000Z","findings":[{"id":"fyffsuarb7kau6qrbivg7","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T23:36:22.680Z","first_published":"2026-11-06T00:39:38.884Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=realbeckersol.com"},{"hostname":"registry.crypto-polis.org","first_observed":"2026-11-06T00:05:46.893Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"resolved","resolved":["185.178.208.132","185.178.208.182"],"resolved_at":"2026-11-06T00:06:24Z","dns_checked_at":"2026-11-06T00:51:07.000Z","dns_since":"2026-11-06T00:51:07.000Z","findings":[{"id":"fakn4y3ynaef65qp2my5s","kind":"reported_domain","summary":"Under crypto-polis.org, reported by PhishDestroy","first_observed":"2026-11-06T00:05:46.893Z","first_published":"2026-11-06T00:39:38.884Z","source":"phishdestroy","source_name":"PhishDestroy","under":"crypto-polis.org","source_url":"https://phishdestroy.io/domain/crypto-polis.org/"}],"url":"https://domainspoof.com/live?show=all&q=registry.crypto-polis.org"},{"hostname":"relay-binance.com.cn","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","brands":[{"id":"binance","name":"Binance","url":"https://domainspoof.com/brands/binance"}],"dns":"resolved","resolved":["104.21.82.247","172.67.166.54","2606:4700:3030::ac43:a636","2606:4700:3036::6815:52f7"],"resolved_at":"2026-11-05T23:55:23Z","dns_checked_at":"2026-11-06T00:51:07.000Z","dns_since":"2026-11-06T00:51:07.000Z","findings":[{"id":"fkjqjc6feu5wsefcznhwb","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/brands/binance"},{"hostname":"rendadopovo-ai.live","first_observed":"2026-11-05T23:56:49.054Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"resolved","resolved":["104.21.2.195","172.67.129.151"],"resolved_at":"2026-11-06T01:16:32Z","dns_checked_at":"2026-11-06T00:51:07.000Z","dns_since":"2026-11-06T00:51:07.000Z","findings":[{"id":"fdvo2fpdfb5cpulhp5dhc","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T23:56:49.054Z","first_published":"2026-11-06T00:39:38.884Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=rendadopovo-ai.live"},{"hostname":"reqcase-x.com","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"no_address","resolved":[],"resolved_at":"2026-11-05T23:55:23Z","dns_checked_at":"2026-11-06T08:56:07.000Z","findings":[{"id":"flnyv44moktmvuudzcnvm","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=reqcase-x.com"},{"hostname":"reviewed-coinbase.com","first_observed":"2026-11-05T23:41:23.990Z","first_published":"2026-11-06T00:39:38.884Z","brands":[{"id":"coinbase","name":"Coinbase","url":"https://domainspoof.com/brands/coinbase"}],"dns":"resolved","resolved":["104.21.1.203","172.67.129.231","2606:4700:3031::6815:1cb","2606:4700:3034::ac43:81e7"],"resolved_at":"2026-11-05T23:48:34Z","dns_checked_at":"2026-11-06T00:51:07.000Z","dns_since":"2026-11-06T00:51:07.000Z","findings":[{"id":"fcgissfgdlv73uamtywqs","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T23:41:23.990Z","first_published":"2026-11-06T00:39:38.884Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/brands/coinbase"},{"hostname":"rewards-meridian.icu","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"resolved","resolved":["104.21.77.35","172.67.204.3","2606:4700:3032::ac43:cc03","2606:4700:3034::6815:4d23"],"resolved_at":"2026-11-05T23:55:23Z","dns_checked_at":"2026-11-06T00:51:07.000Z","dns_since":"2026-11-06T00:51:07.000Z","findings":[{"id":"ff53yk3xgeidyiimwn2p3","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=rewards-meridian.icu"},{"hostname":"rorquriavv.store","first_observed":"2026-11-06T00:20:04.684Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"resolved","resolved":["104.21.31.187","172.67.179.45","2606:4700:3031::6815:1fbb","2606:4700:3035::ac43:b32d"],"resolved_at":"2026-11-06T00:20:56Z","dns_checked_at":"2026-11-06T00:51:07.000Z","dns_since":"2026-11-06T00:51:07.000Z","findings":[{"id":"fiql74k6gmmixj5ziwa6r","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-06T00:20:04.684Z","first_published":"2026-11-06T00:39:38.884Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=rorquriavv.store"},{"hostname":"rscheck.help","first_observed":"2026-11-06T00:00:47.488Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"resolved","resolved":["104.21.70.165","172.67.137.181"],"resolved_at":"2026-11-06T00:41:57Z","dns_checked_at":"2026-11-06T00:51:07.000Z","dns_since":"2026-11-06T00:51:07.000Z","findings":[{"id":"fs4byrus5wtrz7xenbxfj","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-06T00:00:47.488Z","first_published":"2026-11-06T00:39:38.884Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/rscheck.help/"}],"url":"https://domainspoof.com/live?show=all&q=rscheck.help"},{"hostname":"ryskfinanceapp.xyz","first_observed":"2026-11-06T00:26:21.784Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"resolved","resolved":["104.21.34.211","172.67.165.146"],"resolved_at":"2026-11-06T00:26:30Z","dns_checked_at":"2026-11-06T00:51:07.000Z","dns_since":"2026-11-06T00:51:07.000Z","findings":[{"id":"fvdaymv7he4ggytk3zdxx","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-06T00:26:21.784Z","first_published":"2026-11-06T00:39:38.884Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/ryskfinanceapp.xyz/"}],"url":"https://domainspoof.com/live?show=all&q=ryskfinanceapp.xyz"},{"hostname":"s4ofq0.hdiv8jy.com","first_observed":"2026-11-05T23:31:15.422Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"resolved","resolved":["185.53.179.136"],"resolved_at":"2026-11-05T23:32:02Z","dns_checked_at":"2026-11-06T00:51:07.000Z","dns_since":"2026-11-06T00:51:07.000Z","findings":[{"id":"fjnnoo4tv3dryptdt5qqo","kind":"reported_domain","summary":"Under hdiv8jy.com, listed by MetaMask","first_observed":"2026-11-05T23:31:15.422Z","first_published":"2026-11-06T00:39:38.884Z","source":"metamask","source_name":"MetaMask","under":"hdiv8jy.com"}],"url":"https://domainspoof.com/live?show=all&q=s4ofq0.hdiv8jy.com"},{"hostname":"sabera-lpg-ledger.pages.dev","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"resolved","resolved":["172.66.44.127","172.66.47.129","2606:4700:310c::ac42:2c7f","2606:4700:310c::ac42:2f81"],"resolved_at":"2026-11-05T23:55:23Z","dns_checked_at":"2026-11-06T00:51:07.000Z","dns_since":"2026-11-06T00:51:07.000Z","findings":[{"id":"fvxaeikcq3izvlgmlxta7","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=sabera-lpg-ledger.pages.dev"},{"hostname":"samsung-t.com","first_observed":"2026-11-06T00:00:50.579Z","first_published":"2026-11-06T00:39:38.884Z","brands":[{"id":"samsung","name":"Samsung","url":"https://domainspoof.com/brands/samsung"}],"dns":"resolved","resolved":["192.3.106.229"],"resolved_at":"2026-11-06T00:51:07Z","dns_checked_at":"2026-11-06T00:51:07.000Z","dns_since":"2026-11-06T00:51:07.000Z","findings":[{"id":"f5uwzsviosomhatw6t7uy","kind":"phishing_infrastructure","summary":"Resolved to 192.3.106.229, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:00:50.579Z","first_published":"2026-11-06T00:39:38.884Z","address":"192.3.106.229","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/samsung"},{"hostname":"secure-connection-tunnel731908.cfd","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"resolved","resolved":["104.21.89.108","172.67.140.136","2606:4700:3033::ac43:8c88","2606:4700:3034::6815:596c"],"resolved_at":"2026-11-05T23:55:23Z","dns_checked_at":"2026-11-06T00:51:07.000Z","dns_since":"2026-11-06T00:51:07.000Z","findings":[{"id":"fvt6mjp4dydtnutqmz2vs","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=secure-connection-tunnel731908.cfd"},{"hostname":"secure-connection-tunnel913698.cfd","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"resolved","resolved":["104.21.11.42","172.67.147.180","2606:4700:3032::ac43:93b4","2606:4700:3035::6815:b2a"],"resolved_at":"2026-11-05T23:55:23Z","dns_checked_at":"2026-11-06T00:51:07.000Z","dns_since":"2026-11-06T00:51:07.000Z","findings":[{"id":"fb6ajh6meqw5y464wbgij","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=secure-connection-tunnel913698.cfd"},{"hostname":"sereindexeris-digital.pages.dev","first_observed":"2026-11-06T00:21:13.428Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"resolved","resolved":["172.66.44.163","172.66.47.93"],"resolved_at":"2026-11-06T00:21:28Z","dns_checked_at":"2026-11-06T00:51:07.000Z","dns_since":"2026-11-06T00:51:07.000Z","findings":[{"id":"fgsyetdw6mdriiw2ihuoo","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-06T00:21:13.428Z","first_published":"2026-11-06T00:39:38.884Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=sereindexeris-digital.pages.dev"},{"hostname":"sicheres-banking.com","first_observed":"2026-11-05T23:56:49.054Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"no_address","resolved":[],"resolved_at":"2026-11-06T01:01:08Z","dns_checked_at":"2026-11-06T08:56:07.000Z","findings":[{"id":"fwpze5fx5j2m7gkq7c7w7","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T23:56:49.054Z","first_published":"2026-11-06T00:39:38.884Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=sicheres-banking.com"},{"hostname":"sitemw3x7to6t4e0.xyz","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"resolved","resolved":["104.21.60.187","172.67.200.55","2606:4700:3037::6815:3cbb","2606:4700:3037::ac43:c837"],"resolved_at":"2026-11-05T23:55:23Z","dns_checked_at":"2026-11-06T00:51:07.000Z","dns_since":"2026-11-06T00:51:07.000Z","findings":[{"id":"ffsxootak3emogvm5foy6","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=sitemw3x7to6t4e0.xyz"},{"hostname":"sitemw3y5a790th4.xyz","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"resolved","resolved":["104.21.29.34","172.67.171.74","2606:4700:3030::ac43:ab4a","2606:4700:3036::6815:1d22"],"resolved_at":"2026-11-05T23:55:23Z","dns_checked_at":"2026-11-06T00:51:07.000Z","dns_since":"2026-11-06T00:51:07.000Z","findings":[{"id":"fkpwu3m53q247xhgdpiok","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=sitemw3y5a790th4.xyz"},{"hostname":"slammmetab.store","first_observed":"2026-11-06T00:20:04.684Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"resolved","resolved":["104.21.4.171","172.67.132.74","2606:4700:3034::6815:4ab","2606:4700:3035::ac43:844a"],"resolved_at":"2026-11-06T00:20:56Z","dns_checked_at":"2026-11-06T00:51:07.000Z","dns_since":"2026-11-06T00:51:07.000Z","findings":[{"id":"ficxw4huexwhmapehbz7t","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-06T00:20:04.684Z","first_published":"2026-11-06T00:39:38.884Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=slammmetab.store"},{"hostname":"snogg.stage.io-ext.se","first_observed":"2026-11-05T23:31:15.422Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"resolved","resolved":["188.208.37.128"],"resolved_at":"2026-11-05T23:32:04Z","dns_checked_at":"2026-11-06T00:51:07.000Z","dns_since":"2026-11-06T00:51:07.000Z","findings":[{"id":"faefauom5a6mhsvginm2i","kind":"reported_domain","summary":"Under io-ext.se, listed by MetaMask","first_observed":"2026-11-05T23:31:15.422Z","first_published":"2026-11-06T00:39:38.884Z","source":"metamask","source_name":"MetaMask","under":"io-ext.se"}],"url":"https://domainspoof.com/live?show=all&q=snogg.stage.io-ext.se"},{"hostname":"solucoesveiculoagil.com","first_observed":"2026-11-05T23:26:04.147Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"resolved","resolved":["104.21.52.137","172.67.199.181"],"resolved_at":"2026-11-05T23:37:06Z","dns_checked_at":"2026-11-06T00:51:07.000Z","dns_since":"2026-11-06T00:51:07.000Z","findings":[{"id":"fycradju4ac4kbmidpvr2","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T23:26:04.147Z","first_published":"2026-11-06T00:39:38.884Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/solucoesveiculoagil.com/"}],"url":"https://domainspoof.com/live?show=all&q=solucoesveiculoagil.com"},{"hostname":"solvprotocol-allocations.xyz","first_observed":"2026-11-06T00:31:29.331Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"resolved","resolved":["104.21.38.200","172.67.138.78"],"resolved_at":"2026-11-06T00:32:21Z","dns_checked_at":"2026-11-06T00:51:07.000Z","dns_since":"2026-11-06T00:51:07.000Z","findings":[{"id":"fjaye5ubkltfju4kgvmfh","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-06T00:31:29.331Z","first_published":"2026-11-06T00:39:38.884Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=solvprotocol-allocations.xyz"},{"hostname":"ssvfv.com","first_observed":"2026-11-05T23:41:23.990Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"resolved","resolved":["104.21.65.214","172.67.167.21"],"resolved_at":"2026-11-05T23:48:36Z","dns_checked_at":"2026-11-06T00:51:07.000Z","dns_since":"2026-11-06T00:51:07.000Z","findings":[{"id":"f545qm2mtpkme3mlfw36z","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T23:41:23.990Z","first_published":"2026-11-06T00:39:38.884Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=ssvfv.com"},{"hostname":"statschecks-x.com","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"no_address","resolved":[],"resolved_at":"2026-11-05T23:55:23Z","dns_checked_at":"2026-11-06T08:56:07.000Z","findings":[{"id":"fbqur3tuqefxzplzmkk54","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=statschecks-x.com"},{"hostname":"stonksholders.com","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"no_address","resolved":[],"resolved_at":"2026-11-05T23:55:23Z","dns_checked_at":"2026-11-06T08:56:07.000Z","findings":[{"id":"foqcxg6l4ihnnyl3ipxup","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=stonksholders.com"},{"hostname":"store-binance.com.cn","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","brands":[{"id":"binance","name":"Binance","url":"https://domainspoof.com/brands/binance"}],"dns":"resolved","resolved":["104.21.57.86","172.67.144.53","2606:4700:3031::6815:3956","2606:4700:3033::ac43:9035"],"resolved_at":"2026-11-05T23:55:23Z","dns_checked_at":"2026-11-06T00:51:07.000Z","dns_since":"2026-11-06T00:51:07.000Z","findings":[{"id":"fwnq6hhse43n4isqe4eyc","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/brands/binance"},{"hostname":"streamoors.xyz","first_observed":"2026-11-06T00:15:33.870Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"resolved","resolved":["104.21.34.217","172.67.165.152"],"resolved_at":"2026-11-06T00:15:52Z","dns_checked_at":"2026-11-06T00:51:07.000Z","dns_since":"2026-11-06T00:51:07.000Z","findings":[{"id":"f5kng2meh7piyonpfklnc","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-06T00:15:33.870Z","first_published":"2026-11-06T00:39:38.884Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/streamoors.xyz/"}],"url":"https://domainspoof.com/live?show=all&q=streamoors.xyz"},{"hostname":"sumx.quicktent.org","first_observed":"2026-11-05T23:26:04.147Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"resolved","resolved":["91.229.239.28"],"resolved_at":"2026-11-05T23:37:06Z","dns_checked_at":"2026-11-06T00:51:07.000Z","dns_since":"2026-11-06T00:51:07.000Z","findings":[{"id":"fhyv6wnjmdiirxqiji4wf","kind":"reported_domain","summary":"Under quicktent.org, reported by PhishDestroy","first_observed":"2026-11-05T23:26:04.147Z","first_published":"2026-11-06T00:39:38.884Z","source":"phishdestroy","source_name":"PhishDestroy","under":"quicktent.org","source_url":"https://phishdestroy.io/domain/quicktent.org/"}],"url":"https://domainspoof.com/live?show=all&q=sumx.quicktent.org"},{"hostname":"suppor-binance.com","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","brands":[{"id":"binance","name":"Binance","url":"https://domainspoof.com/brands/binance"}],"dns":"resolved","resolved":["2.57.91.91"],"resolved_at":"2026-11-05T23:55:23Z","dns_checked_at":"2026-11-06T00:51:07.000Z","dns_since":"2026-11-06T00:51:07.000Z","findings":[{"id":"fketjlqfg4st2qbmra7e6","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/brands/binance"},{"hostname":"supportid-kraken.com","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"resolved","resolved":["104.21.53.158","172.67.215.37","2606:4700:3030::ac43:d725","2606:4700:3031::6815:359e"],"resolved_at":"2026-11-05T23:55:23Z","dns_checked_at":"2026-11-06T00:51:07.000Z","dns_since":"2026-11-06T00:51:07.000Z","findings":[{"id":"fwwki7c6gdusd3jky2j5u","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=supportid-kraken.com"},{"hostname":"sustarox-ai.com","first_observed":"2026-11-06T00:05:46.893Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"resolved","resolved":["104.21.79.202","172.67.147.212"],"resolved_at":"2026-11-06T00:06:27Z","dns_checked_at":"2026-11-06T00:51:07.000Z","dns_since":"2026-11-06T00:51:07.000Z","findings":[{"id":"fraq73ygjhrn3unrv4lsz","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-06T00:05:46.893Z","first_published":"2026-11-06T00:39:38.884Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=sustarox-ai.com"},{"hostname":"teams-meet.org","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"resolved","resolved":["104.21.43.224","172.67.186.184","2606:4700:3030::ac43:bab8","2606:4700:3033::6815:2be0"],"resolved_at":"2026-11-05T23:55:23Z","dns_checked_at":"2026-11-06T00:51:07.000Z","dns_since":"2026-11-06T00:51:07.000Z","findings":[{"id":"f2qtcj4wdzzuk44jn2qry","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=teams-meet.org"},{"hostname":"teennslieves.com","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"resolved","resolved":["67.223.118.125"],"resolved_at":"2026-11-05T23:55:23Z","dns_checked_at":"2026-11-06T00:51:07.000Z","dns_since":"2026-11-06T00:51:07.000Z","findings":[{"id":"f7oivkcmilgoqshrol27x","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=teennslieves.com"},{"hostname":"teleksking.click","first_observed":"2026-11-06T00:20:04.684Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"resolved","resolved":["104.21.78.250","172.67.138.228","2606:4700:3030::ac43:8ae4","2606:4700:3034::6815:4efa"],"resolved_at":"2026-11-06T00:20:56Z","dns_checked_at":"2026-11-06T00:51:07.000Z","dns_since":"2026-11-06T00:51:07.000Z","findings":[{"id":"fkyynzb2rhkfhgtv3hvu4","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-06T00:20:04.684Z","first_published":"2026-11-06T00:39:38.884Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=teleksking.click"},{"hostname":"teleonxkxs.shop","first_observed":"2026-11-06T00:20:04.684Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"resolved","resolved":["104.21.39.6","172.67.141.205","2606:4700:3030::6815:2706","2606:4700:3037::ac43:8dcd"],"resolved_at":"2026-11-06T00:20:56Z","dns_checked_at":"2026-11-06T00:51:07.000Z","dns_since":"2026-11-06T00:51:07.000Z","findings":[{"id":"fsycupsoyac5h2ss22hm2","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-06T00:20:04.684Z","first_published":"2026-11-06T00:39:38.884Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=teleonxkxs.shop"},{"hostname":"tesla.embassy44.com","first_observed":"2026-11-05T23:46:48.052Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"resolved","resolved":["91.230.49.19"],"resolved_at":"2026-11-05T23:51:11Z","dns_checked_at":"2026-11-06T00:51:07.000Z","dns_since":"2026-11-06T00:51:07.000Z","findings":[{"id":"fre6mpxwosbpzizcq4jei","kind":"reported_domain","summary":"Under embassy44.com, reported by PhishDestroy","first_observed":"2026-11-05T23:46:48.052Z","first_published":"2026-11-06T00:39:38.884Z","source":"phishdestroy","source_name":"PhishDestroy","under":"embassy44.com","source_url":"https://phishdestroy.io/domain/embassy44.com/"}],"url":"https://domainspoof.com/live?show=all&q=tesla.embassy44.com"},{"hostname":"tge-multipli.icu","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"resolved","resolved":["104.21.87.171","172.67.144.198","2606:4700:3032::ac43:90c6","2606:4700:3033::6815:57ab"],"resolved_at":"2026-11-05T23:55:23Z","dns_checked_at":"2026-11-06T00:51:07.000Z","dns_since":"2026-11-06T00:51:07.000Z","findings":[{"id":"f2no4vgk3a77e4saocz4l","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=tge-multipli.icu"},{"hostname":"thnkbrokerae.com","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"resolved","resolved":["104.21.65.41","172.67.158.2","2606:4700:3031::6815:4129","2606:4700:3035::ac43:9e02"],"resolved_at":"2026-11-05T23:55:23Z","dns_checked_at":"2026-11-06T00:51:07.000Z","dns_since":"2026-11-06T00:51:07.000Z","findings":[{"id":"fmhmioehlyqyqkonib2jg","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=thnkbrokerae.com"},{"hostname":"ticket-managements-apple.com","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"not_found","resolved":[],"resolved_at":"2026-11-05T23:55:23Z","dns_checked_at":"2026-11-06T08:56:07.000Z","findings":[{"id":"fqbmx4zbbshrhcluf3hig","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=ticket-managements-apple.com"},{"hostname":"trabarabel.store","first_observed":"2026-11-06T00:20:04.684Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"resolved","resolved":["104.21.23.86","172.67.209.220","2606:4700:3036::6815:1756","2606:4700:3036::ac43:d1dc"],"resolved_at":"2026-11-06T00:20:56Z","dns_checked_at":"2026-11-06T00:51:07.000Z","dns_since":"2026-11-06T00:51:07.000Z","findings":[{"id":"feqov3d7grx7bvrs6iayh","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-06T00:20:04.684Z","first_published":"2026-11-06T00:39:38.884Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=trabarabel.store"},{"hostname":"translation-service-houston.com","first_observed":"2026-11-06T00:21:13.428Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"resolved","resolved":["74.208.252.249"],"resolved_at":"2026-11-06T00:21:36Z","dns_checked_at":"2026-11-06T00:51:07.000Z","dns_since":"2026-11-06T00:51:07.000Z","findings":[{"id":"fsxezgm2lkejfnicu7wnx","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-06T00:21:13.428Z","first_published":"2026-11-06T00:39:38.884Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/translation-service-houston.com/"}],"url":"https://domainspoof.com/live?show=all&q=translation-service-houston.com"},{"hostname":"treasury-juplter.pages.dev","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"not_found","resolved":[],"resolved_at":"2026-11-05T23:55:23Z","dns_checked_at":"2026-11-06T08:56:07.000Z","findings":[{"id":"f3cpj7lw5kvztqa5ykr2j","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=treasury-juplter.pages.dev"},{"hostname":"truly2-ratione41.cfd","first_observed":"2026-11-06T00:20:04.684Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"no_address","resolved":["104.21.8.58","172.67.138.153","2606:4700:3031::ac43:8a99","2606:4700:3036::6815:83a"],"resolved_at":"2026-11-06T00:20:56Z","dns_checked_at":"2026-11-06T08:56:07.000Z","findings":[{"id":"fs3z2o2tej4fvrcmfbfud","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-06T00:20:04.684Z","first_published":"2026-11-06T00:39:38.884Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=truly2-ratione41.cfd"},{"hostname":"truly3-esse5.cfd","first_observed":"2026-11-06T00:20:04.684Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"no_address","resolved":[],"resolved_at":"2026-11-06T00:20:56Z","dns_checked_at":"2026-11-06T08:56:07.000Z","findings":[{"id":"fhiykbjetyackncrqfx3y","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-06T00:20:04.684Z","first_published":"2026-11-06T00:39:38.884Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=truly3-esse5.cfd"},{"hostname":"truly4-dolore23.cfd","first_observed":"2026-11-06T00:20:04.684Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"no_address","resolved":[],"resolved_at":"2026-11-06T00:20:56Z","dns_checked_at":"2026-11-06T08:56:07.000Z","findings":[{"id":"fsdmrfgijmxnzcn2idbok","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-06T00:20:04.684Z","first_published":"2026-11-06T00:39:38.884Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=truly4-dolore23.cfd"},{"hostname":"truly6-et42.cfd","first_observed":"2026-11-06T00:20:04.684Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"no_address","resolved":[],"resolved_at":"2026-11-06T00:20:56Z","dns_checked_at":"2026-11-06T08:56:07.000Z","findings":[{"id":"f4pjrfc2mjtbmc37d7bji","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-06T00:20:04.684Z","first_published":"2026-11-06T00:39:38.884Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=truly6-et42.cfd"},{"hostname":"txxls.com","first_observed":"2026-11-05T23:51:49.585Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"resolved","resolved":["104.21.85.243","172.67.212.140"],"resolved_at":"2026-11-06T00:00:58Z","dns_checked_at":"2026-11-06T00:51:07.000Z","dns_since":"2026-11-06T00:51:07.000Z","findings":[{"id":"fdwuooerhxlsk657xxqix","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T23:51:49.585Z","first_published":"2026-11-06T00:39:38.884Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=txxls.com"},{"hostname":"unipeg-v4.com","first_observed":"2026-11-06T00:26:21.784Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"resolved","resolved":["104.21.10.83","172.67.162.166"],"resolved_at":"2026-11-06T00:26:33Z","dns_checked_at":"2026-11-06T00:51:07.000Z","dns_since":"2026-11-06T00:51:07.000Z","findings":[{"id":"fiyzbq3n4clnuh2wozmv6","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-06T00:26:21.784Z","first_published":"2026-11-06T00:39:38.884Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=unipeg-v4.com"},{"hostname":"us-app--en--ledgr-live.pages.dev","first_observed":"2026-11-05T23:41:23.990Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"resolved","resolved":["172.66.45.48","172.66.46.208"],"resolved_at":"2026-11-06T01:21:22Z","dns_checked_at":"2026-11-06T00:51:07.000Z","dns_since":"2026-11-06T00:51:07.000Z","findings":[{"id":"fdmb4d6dtfrpknx2qn53p","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T23:41:23.990Z","first_published":"2026-11-06T00:39:38.884Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=us-app--en--ledgr-live.pages.dev"},{"hostname":"vandexio.live","first_observed":"2026-11-06T00:00:47.488Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"resolved","resolved":["104.21.34.8","172.67.194.173"],"resolved_at":"2026-11-06T01:16:37Z","dns_checked_at":"2026-11-06T00:51:07.000Z","dns_since":"2026-11-06T00:51:07.000Z","findings":[{"id":"fds6bw6nn3rcvtb7ez3v5","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-06T00:00:47.488Z","first_published":"2026-11-06T00:39:38.884Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=vandexio.live"},{"hostname":"veiculominasagil.com","first_observed":"2026-11-05T23:46:48.052Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"resolved","resolved":["104.21.38.90","172.67.220.213"],"resolved_at":"2026-11-05T23:51:15Z","dns_checked_at":"2026-11-06T00:51:07.000Z","dns_since":"2026-11-06T00:51:07.000Z","findings":[{"id":"fyh4tayepl37atyhwycnb","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T23:46:48.052Z","first_published":"2026-11-06T00:39:38.884Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/veiculominasagil.com/"}],"url":"https://domainspoof.com/live?show=all&q=veiculominasagil.com"},{"hostname":"venatrixtraderapp-com.financecryptoworld.com","first_observed":"2026-11-05T23:26:04.147Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"resolved","resolved":["104.21.10.130","172.67.131.121"],"resolved_at":"2026-11-06T01:26:35Z","dns_checked_at":"2026-11-06T00:51:07.000Z","dns_since":"2026-11-06T00:51:07.000Z","findings":[{"id":"fmvivwzv4k5lockvjstz4","kind":"reported_domain","summary":"Under financecryptoworld.com, listed by CERT Polska","first_observed":"2026-11-05T23:26:04.147Z","first_published":"2026-11-06T00:39:38.884Z","source":"cert_polska","source_name":"CERT Polska","under":"financecryptoworld.com"}],"url":"https://domainspoof.com/live?show=all&q=venatrixtraderapp-com.financecryptoworld.com"},{"hostname":"verify-auth30-cookies.pro","first_observed":"2026-11-05T23:31:15.422Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"resolved","resolved":["104.21.37.41","172.67.203.187"],"resolved_at":"2026-11-05T23:32:04Z","dns_checked_at":"2026-11-06T00:51:07.000Z","dns_since":"2026-11-06T00:51:07.000Z","findings":[{"id":"fyexv2gyszu4z5ehxqwoq","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T23:31:15.422Z","first_published":"2026-11-06T00:39:38.884Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=verify-auth30-cookies.pro"},{"hostname":"verifydoxc.icu","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"resolved","resolved":["104.21.45.129","172.67.214.79","2606:4700:3035::6815:2d81","2606:4700:3037::ac43:d64f"],"resolved_at":"2026-11-05T23:55:23Z","dns_checked_at":"2026-11-06T00:51:07.000Z","dns_since":"2026-11-06T00:51:07.000Z","findings":[{"id":"f3btnf7rmmhe4n33ebgfg","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=verifydoxc.icu"},{"hostname":"vertice-fundex.shop","first_observed":"2026-11-06T00:21:13.428Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"resolved","resolved":["104.21.46.176","172.67.168.207"],"resolved_at":"2026-11-06T00:21:31Z","dns_checked_at":"2026-11-06T00:51:07.000Z","dns_since":"2026-11-06T00:51:07.000Z","findings":[{"id":"fyndn5b42kkdvg46xknvo","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-06T00:21:13.428Z","first_published":"2026-11-06T00:39:38.884Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=vertice-fundex.shop"},{"hostname":"viewpackagetracking.com","first_observed":"2026-11-05T23:36:22.680Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"resolved","resolved":["104.20.24.209","172.66.164.220"],"resolved_at":"2026-11-06T01:01:09Z","dns_checked_at":"2026-11-06T00:51:07.000Z","dns_since":"2026-11-06T00:51:07.000Z","findings":[{"id":"fnguydgiq562cadr4brsa","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T23:36:22.680Z","first_published":"2026-11-06T00:39:38.884Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/viewpackagetracking.com/"}],"url":"https://domainspoof.com/live?show=all&q=viewpackagetracking.com"},{"hostname":"vifcapitoire.live","first_observed":"2026-11-05T23:36:22.680Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"resolved","resolved":["104.21.33.3","172.67.188.103"],"resolved_at":"2026-11-06T00:10:21Z","dns_checked_at":"2026-11-06T00:51:07.000Z","dns_since":"2026-11-06T00:51:07.000Z","findings":[{"id":"fb4elpdhi55bbrhp7yb7a","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T23:36:22.680Z","first_published":"2026-11-06T00:39:38.884Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=vifcapitoire.live"},{"hostname":"vote-apyxfi.icu","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"resolved","resolved":["104.21.94.89","172.67.221.149","2606:4700:3033::ac43:dd95","2606:4700:3037::6815:5e59"],"resolved_at":"2026-11-05T23:55:23Z","dns_checked_at":"2026-11-06T00:51:07.000Z","dns_since":"2026-11-06T00:51:07.000Z","findings":[{"id":"f6q6r2sb3tgjwztvt5qld","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=vote-apyxfi.icu"},{"hostname":"vote-globaldollar.com","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"no_address","resolved":[],"resolved_at":"2026-11-05T23:55:23Z","dns_checked_at":"2026-11-06T08:56:07.000Z","findings":[{"id":"for3b6fnc3ei5q4z4q3y2","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=vote-globaldollar.com"},{"hostname":"votes-globaldollar.com","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"no_address","resolved":[],"resolved_at":"2026-11-05T23:55:23Z","dns_checked_at":"2026-11-06T08:56:07.000Z","findings":[{"id":"fied6nb3lc3ioocsjdt5h","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=votes-globaldollar.com"},{"hostname":"votes-nillion.pages.dev","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"resolved","resolved":["172.66.44.80","172.66.47.176","2606:4700:310c::ac42:2c50","2606:4700:310c::ac42:2fb0"],"resolved_at":"2026-11-05T23:55:23Z","dns_checked_at":"2026-11-06T00:51:07.000Z","dns_since":"2026-11-06T00:51:07.000Z","findings":[{"id":"fwm5ihxssza6h7i5rfde5","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=votes-nillion.pages.dev"},{"hostname":"votes-usenest.xyz","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"no_address","resolved":[],"resolved_at":"2026-11-05T23:55:23Z","dns_checked_at":"2026-11-06T08:56:07.000Z","findings":[{"id":"fgmxwvthjeqs6h65oohzy","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=votes-usenest.xyz"},{"hostname":"voting-peaq.pages.dev","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"resolved","resolved":["172.66.44.83","172.66.47.173","2606:4700:310c::ac42:2c53","2606:4700:310c::ac42:2fad"],"resolved_at":"2026-11-05T23:55:23Z","dns_checked_at":"2026-11-06T00:51:07.000Z","dns_since":"2026-11-06T00:51:07.000Z","findings":[{"id":"fe24qbtoefu6oaw44zhdn","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=voting-peaq.pages.dev"},{"hostname":"vpopa.pw","first_observed":"2026-11-05T23:26:04.147Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"resolved","resolved":["104.21.41.87","172.67.163.69"],"resolved_at":"2026-11-05T23:37:14Z","dns_checked_at":"2026-11-06T00:51:07.000Z","dns_since":"2026-11-06T00:51:07.000Z","findings":[{"id":"fpthu7btiir55b4p6ljxo","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T23:26:04.147Z","first_published":"2026-11-06T00:39:38.884Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/vpopa.pw/"}],"url":"https://domainspoof.com/live?show=all&q=vpopa.pw"},{"hostname":"web-okx.xyz","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"resolved","resolved":["104.21.11.249","172.67.150.206","2606:4700:3031::ac43:96ce","2606:4700:3035::6815:bf9"],"resolved_at":"2026-11-05T23:55:23Z","dns_checked_at":"2026-11-06T00:51:08.000Z","dns_since":"2026-11-06T00:51:08.000Z","findings":[{"id":"fkt6hknztglnycx3jv3ig","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=web-okx.xyz"},{"hostname":"web.onlinemicrosoftwebsitesecurepdf.sbs","first_observed":"2026-11-06T00:31:29.331Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"resolved","resolved":["104.21.52.235","172.67.205.115","2606:4700:3035::6815:34eb","2606:4700:3035::ac43:cd73"],"resolved_at":"2026-11-06T00:31:41Z","dns_checked_at":"2026-11-06T00:51:08.000Z","dns_since":"2026-11-06T00:51:08.000Z","findings":[{"id":"fspywum45lxyzvzmar5dz","kind":"reported_domain","summary":"Under onlinemicrosoftwebsitesecurepdf.sbs, listed by MetaMask","first_observed":"2026-11-06T00:31:29.331Z","first_published":"2026-11-06T00:39:38.884Z","source":"metamask","source_name":"MetaMask","under":"onlinemicrosoftwebsitesecurepdf.sbs"}],"url":"https://domainspoof.com/live?show=all&q=web.onlinemicrosoftwebsitesecurepdf.sbs"},{"hostname":"webadmin.ni-electrical.com","first_observed":"2026-11-05T23:46:48.052Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"resolved","resolved":["109.238.86.5"],"resolved_at":"2026-11-05T23:51:15Z","dns_checked_at":"2026-11-06T00:51:08.000Z","dns_since":"2026-11-06T00:51:08.000Z","findings":[{"id":"f52nlcmsll2q56vreawus","kind":"reported_domain","summary":"Under ni-electrical.com, listed by CERT Polska","first_observed":"2026-11-05T23:46:48.052Z","first_published":"2026-11-06T00:39:38.884Z","source":"cert_polska","source_name":"CERT Polska","under":"ni-electrical.com"}],"url":"https://domainspoof.com/live?show=all&q=webadmin.ni-electrical.com"},{"hostname":"webnet-binance.com.cn","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","brands":[{"id":"binance","name":"Binance","url":"https://domainspoof.com/brands/binance"}],"dns":"resolved","resolved":["104.21.51.181","172.67.183.148","2606:4700:3034::6815:33b5","2606:4700:3036::ac43:b794"],"resolved_at":"2026-11-05T23:55:23Z","dns_checked_at":"2026-11-06T00:51:08.000Z","dns_since":"2026-11-06T00:51:08.000Z","findings":[{"id":"ftbh5wtuvdsjzds6jsht5","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/brands/binance"},{"hostname":"westyngainvale.live","first_observed":"2026-11-05T23:56:49.054Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"resolved","resolved":["104.21.58.22","172.67.198.112"],"resolved_at":"2026-11-06T01:16:37Z","dns_checked_at":"2026-11-06T00:51:08.000Z","dns_since":"2026-11-06T00:51:08.000Z","findings":[{"id":"fudt7huqzt7zag5zvyqk5","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T23:56:49.054Z","first_published":"2026-11-06T00:39:38.884Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=westyngainvale.live"},{"hostname":"wire-binance.com.cn","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","brands":[{"id":"binance","name":"Binance","url":"https://domainspoof.com/brands/binance"}],"dns":"resolved","resolved":["104.21.31.174","172.67.178.236","2606:4700:3036::6815:1fae","2606:4700:3037::ac43:b2ec"],"resolved_at":"2026-11-05T23:55:23Z","dns_checked_at":"2026-11-06T00:51:08.000Z","dns_since":"2026-11-06T00:51:08.000Z","findings":[{"id":"fw76k2fvwpo2l7gl4mbmp","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/brands/binance"},{"hostname":"www.account.samsung-t.com","first_observed":"2026-11-05T23:52:16.823Z","first_published":"2026-11-06T00:39:38.884Z","brands":[{"id":"samsung","name":"Samsung","url":"https://domainspoof.com/brands/samsung"}],"dns":"resolved","resolved":["192.3.106.229"],"resolved_at":"2026-11-06T00:51:08Z","dns_checked_at":"2026-11-06T00:51:08.000Z","dns_since":"2026-11-06T00:51:08.000Z","findings":[{"id":"f42frnrup7iueopmtl3ip","kind":"phishing_infrastructure","summary":"Resolved to 192.3.106.229, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T23:52:16.823Z","first_published":"2026-11-06T00:39:38.884Z","address":"192.3.106.229","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/samsung"},{"hostname":"www.account.xiaomi-j.com","first_observed":"2026-11-05T23:52:16.826Z","first_published":"2026-11-06T00:39:38.884Z","brands":[{"id":"xiaomi","name":"Xiaomi","url":"https://domainspoof.com/brands/xiaomi"}],"dns":"resolved","resolved":["192.3.106.229"],"resolved_at":"2026-11-06T00:51:08Z","dns_checked_at":"2026-11-06T00:51:08.000Z","dns_since":"2026-11-06T00:51:08.000Z","findings":[{"id":"fz2lvlvvotp6qnydphykc","kind":"phishing_infrastructure","summary":"Resolved to 192.3.106.229, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T23:52:16.826Z","first_published":"2026-11-06T00:39:38.884Z","address":"192.3.106.229","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/xiaomi"},{"hostname":"www.admin-v1.crypto-polis.org","first_observed":"2026-11-05T23:26:04.147Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"resolved","resolved":["185.178.208.132","185.178.208.182"],"resolved_at":"2026-11-05T23:37:15Z","dns_checked_at":"2026-11-06T00:51:08.000Z","dns_since":"2026-11-06T00:51:08.000Z","findings":[{"id":"fiaxdea6qntaxt7ff4fgv","kind":"reported_domain","summary":"Under crypto-polis.org, reported by PhishDestroy","first_observed":"2026-11-05T23:26:04.147Z","first_published":"2026-11-06T00:39:38.884Z","source":"phishdestroy","source_name":"PhishDestroy","under":"crypto-polis.org","source_url":"https://phishdestroy.io/domain/crypto-polis.org/"}],"url":"https://domainspoof.com/live?show=all&q=www.admin-v1.crypto-polis.org"},{"hostname":"www.ankaraduguncekimi.com","first_observed":"2026-11-05T23:26:04.147Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"resolved","resolved":["89.252.187.207"],"resolved_at":"2026-11-05T23:37:15Z","dns_checked_at":"2026-11-06T00:51:08.000Z","dns_since":"2026-11-06T00:51:08.000Z","findings":[{"id":"fx6x4gd3zodugj55lhzwd","kind":"reported_domain","summary":"Under ankaraduguncekimi.com, listed by CERT Polska","first_observed":"2026-11-05T23:26:04.147Z","first_published":"2026-11-06T00:39:38.884Z","source":"cert_polska","source_name":"CERT Polska","under":"ankaraduguncekimi.com"}],"url":"https://domainspoof.com/live?show=all&q=www.ankaraduguncekimi.com"},{"hostname":"www.binance-bk.com.cn","first_observed":"2026-11-05T23:32:04.688Z","first_published":"2026-11-06T00:39:38.884Z","brands":[{"id":"binance","name":"Binance","url":"https://domainspoof.com/brands/binance"}],"dns":"resolved","resolved":["154.31.148.87"],"resolved_at":"2026-11-06T00:51:08Z","dns_checked_at":"2026-11-06T00:51:08.000Z","dns_since":"2026-11-06T00:51:08.000Z","findings":[{"id":"fqkd6h4qq4fwlalc7wov4","kind":"phishing_infrastructure","summary":"Resolved to 154.31.148.87, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T23:32:04.688Z","first_published":"2026-11-06T00:39:38.884Z","address":"154.31.148.87","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/binance"},{"hostname":"www.centro-microsoft.com","first_observed":"2026-11-05T23:37:15.194Z","first_published":"2026-11-06T00:39:38.884Z","brands":[{"id":"microsoft","name":"Microsoft","url":"https://domainspoof.com/brands/microsoft"}],"dns":"resolved","resolved":["2.57.91.91"],"resolved_at":"2026-11-06T00:51:08Z","dns_checked_at":"2026-11-06T00:51:08.000Z","dns_since":"2026-11-06T00:51:08.000Z","findings":[{"id":"fbeofdnbop37agodfcodz","kind":"phishing_infrastructure","summary":"Resolved to 2.57.91.91, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T23:37:15.194Z","first_published":"2026-11-06T00:39:38.884Z","address":"2.57.91.91","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/microsoft"},{"hostname":"www.ci.zenavlico.cyou","first_observed":"2026-11-06T00:10:55.664Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"resolved","resolved":["95.85.244.13"],"resolved_at":"2026-11-06T00:11:31Z","dns_checked_at":"2026-11-06T00:51:08.000Z","dns_since":"2026-11-06T00:51:08.000Z","findings":[{"id":"f6vekhm72yz3zzco6dpo6","kind":"reported_domain","summary":"Under zenavlico.cyou, listed by CERT Polska","first_observed":"2026-11-06T00:10:55.664Z","first_published":"2026-11-06T00:39:38.884Z","source":"cert_polska","source_name":"CERT Polska","under":"zenavlico.cyou"}],"url":"https://domainspoof.com/live?show=all&q=www.ci.zenavlico.cyou"},{"hostname":"www.dev.finabank.ru","first_observed":"2026-11-06T00:26:21.784Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"resolved","resolved":["31.31.198.195"],"resolved_at":"2026-11-06T00:26:35Z","dns_checked_at":"2026-11-06T00:51:08.000Z","dns_since":"2026-11-06T00:51:08.000Z","findings":[{"id":"fm57v46zjlcy3m27f7l2v","kind":"reported_domain","summary":"Under finabank.ru, reported by PhishDestroy","first_observed":"2026-11-06T00:26:21.784Z","first_published":"2026-11-06T00:39:38.884Z","source":"phishdestroy","source_name":"PhishDestroy","under":"finabank.ru","source_url":"https://phishdestroy.io/domain/finabank.ru/"}],"url":"https://domainspoof.com/live?show=all&q=www.dev.finabank.ru"},{"hostname":"www.efilaunch.live","first_observed":"2026-11-05T23:56:49.054Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"resolved","resolved":["64.29.17.1","216.198.79.1"],"resolved_at":"2026-11-05T23:57:24Z","dns_checked_at":"2026-11-06T00:51:08.000Z","dns_since":"2026-11-06T00:51:08.000Z","findings":[{"id":"fldxygovng7odqcrosluc","kind":"reported_domain","summary":"Under efilaunch.live, listed by MetaMask","first_observed":"2026-11-05T23:56:49.054Z","first_published":"2026-11-06T00:39:38.884Z","source":"metamask","source_name":"MetaMask","under":"efilaunch.live"}],"url":"https://domainspoof.com/live?show=all&q=www.efilaunch.live"},{"hostname":"www.eldravon.com","first_observed":"2026-11-05T23:56:49.054Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"resolved","resolved":["104.18.15.59"],"resolved_at":"2026-11-05T23:57:24Z","dns_checked_at":"2026-11-06T00:51:08.000Z","dns_since":"2026-11-06T00:51:08.000Z","findings":[{"id":"fmkfvcon7c3atfkj6j7yf","kind":"reported_domain","summary":"Under eldravon.com, listed by CERT Polska","first_observed":"2026-11-05T23:56:49.054Z","first_published":"2026-11-06T00:39:38.884Z","source":"cert_polska","source_name":"CERT Polska","under":"eldravon.com"}],"url":"https://domainspoof.com/live?show=all&q=www.eldravon.com"},{"hostname":"www.encontrar.icloud-find-2026.com","first_observed":"2026-11-05T23:41:47.362Z","first_published":"2026-11-06T00:39:38.884Z","brands":[{"id":"apple","name":"Apple","url":"https://domainspoof.com/brands/apple"}],"dns":"resolved","resolved":["192.3.106.229"],"resolved_at":"2026-11-06T00:51:08Z","dns_checked_at":"2026-11-06T00:51:08.000Z","dns_since":"2026-11-06T00:51:08.000Z","findings":[{"id":"fngljgnqko2pdocakbylv","kind":"phishing_infrastructure","summary":"Resolved to 192.3.106.229, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T23:41:47.362Z","first_published":"2026-11-06T00:39:38.884Z","address":"192.3.106.229","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/apple"},{"hostname":"www.eplay.at","first_observed":"2026-11-05T23:26:04.147Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"resolved","resolved":["157.90.126.141","2a01:4f8:1c1c:344c::1"],"resolved_at":"2026-11-05T23:37:15Z","dns_checked_at":"2026-11-06T00:51:08.000Z","dns_since":"2026-11-06T00:51:08.000Z","findings":[{"id":"fanhn4vw7mra25bvm4nvp","kind":"reported_domain","summary":"Under eplay.at, reported by PhishDestroy","first_observed":"2026-11-05T23:26:04.147Z","first_published":"2026-11-06T00:39:38.884Z","source":"phishdestroy","source_name":"PhishDestroy","under":"eplay.at","source_url":"https://phishdestroy.io/domain/eplay.at/"}],"url":"https://domainspoof.com/live?show=all&q=www.eplay.at"},{"hostname":"www.hosting-minecraft.sk","first_observed":"2026-11-06T00:11:31.763Z","first_published":"2026-11-06T00:39:38.884Z","brands":[{"id":"minecraft","name":"Minecraft","url":"https://domainspoof.com/brands/minecraft"}],"dns":"resolved","resolved":["185.253.212.22"],"resolved_at":"2026-11-06T00:51:08Z","dns_checked_at":"2026-11-06T00:51:08.000Z","dns_since":"2026-11-06T00:51:08.000Z","findings":[{"id":"ftsakvv2svyqqvpabrisp","kind":"phishing_infrastructure","summary":"Resolved to 185.253.212.22, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:11:31.763Z","first_published":"2026-11-06T00:39:38.884Z","address":"185.253.212.22","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/minecraft"},{"hostname":"www.imtoken-aicu.com","first_observed":"2026-11-06T00:06:28.053Z","first_published":"2026-11-06T00:39:38.884Z","brands":[{"id":"imtoken","name":"imToken","url":"https://domainspoof.com/brands/imtoken"}],"dns":"resolved","resolved":["206.161.218.138"],"resolved_at":"2026-11-06T00:51:08Z","dns_checked_at":"2026-11-06T00:51:08.000Z","dns_since":"2026-11-06T00:51:08.000Z","findings":[{"id":"fqzetaoovim24rjjx6mlc","kind":"phishing_infrastructure","summary":"Resolved to 206.161.218.138, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:06:28.053Z","first_published":"2026-11-06T00:39:38.884Z","address":"206.161.218.138","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/imtoken"},{"hostname":"www.login.zenavlico.cyou","first_observed":"2026-11-05T23:31:15.422Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"resolved","resolved":["95.85.244.13"],"resolved_at":"2026-11-05T23:32:04Z","dns_checked_at":"2026-11-06T00:51:08.000Z","dns_since":"2026-11-06T00:51:08.000Z","findings":[{"id":"f6wvaa6xeetqy5rq3hn2o","kind":"reported_domain","summary":"Under zenavlico.cyou, listed by CERT Polska","first_observed":"2026-11-05T23:31:15.422Z","first_published":"2026-11-06T00:39:38.884Z","source":"cert_polska","source_name":"CERT Polska","under":"zenavlico.cyou"}],"url":"https://domainspoof.com/live?show=all&q=www.login.zenavlico.cyou"},{"hostname":"www.maliyecezasi.org","first_observed":"2026-11-06T00:00:47.488Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"resolved","resolved":["162.4.84.247"],"resolved_at":"2026-11-06T00:01:24Z","dns_checked_at":"2026-11-06T00:51:08.000Z","dns_since":"2026-11-06T00:51:08.000Z","findings":[{"id":"fhukuqytvlw2sbnzqx3oz","kind":"reported_domain","summary":"Under maliyecezasi.org, listed by USOM","first_observed":"2026-11-06T00:00:47.488Z","first_published":"2026-11-06T00:39:38.884Z","source":"usom","source_name":"USOM","under":"maliyecezasi.org"}],"url":"https://domainspoof.com/live?show=all&q=www.maliyecezasi.org"},{"hostname":"www.solicitacaocomresgate.com","first_observed":"2026-11-05T23:41:23.990Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"resolved","resolved":["52.223.13.41"],"resolved_at":"2026-11-06T01:01:09Z","dns_checked_at":"2026-11-06T00:51:08.000Z","dns_since":"2026-11-06T00:51:08.000Z","findings":[{"id":"fuywwuz4jluzadodj7shd","kind":"reported_domain","summary":"Under solicitacaocomresgate.com, reported by PhishDestroy","first_observed":"2026-11-05T23:41:23.990Z","first_published":"2026-11-06T00:39:38.884Z","source":"phishdestroy","source_name":"PhishDestroy","under":"solicitacaocomresgate.com","source_url":"https://phishdestroy.io/domain/solicitacaocomresgate.com/"}],"url":"https://domainspoof.com/live?show=all&q=www.solicitacaocomresgate.com"},{"hostname":"www.stats.crypto-polis.org","first_observed":"2026-11-05T23:26:04.147Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"resolved","resolved":["185.178.208.132","185.178.208.182"],"resolved_at":"2026-11-05T23:37:15Z","dns_checked_at":"2026-11-06T00:51:08.000Z","dns_since":"2026-11-06T00:51:08.000Z","findings":[{"id":"fw77mp6ojw6u3dhmswjve","kind":"reported_domain","summary":"Under crypto-polis.org, reported by PhishDestroy","first_observed":"2026-11-05T23:26:04.147Z","first_published":"2026-11-06T00:39:38.884Z","source":"phishdestroy","source_name":"PhishDestroy","under":"crypto-polis.org","source_url":"https://phishdestroy.io/domain/crypto-polis.org/"}],"url":"https://domainspoof.com/live?show=all&q=www.stats.crypto-polis.org"},{"hostname":"www.tesla.embassy44.com","first_observed":"2026-11-05T23:46:48.052Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"resolved","resolved":["91.230.49.19"],"resolved_at":"2026-11-05T23:51:17Z","dns_checked_at":"2026-11-06T00:51:08.000Z","dns_since":"2026-11-06T00:51:08.000Z","findings":[{"id":"finfkycx7nrhga535ubuq","kind":"reported_domain","summary":"Under embassy44.com, reported by PhishDestroy","first_observed":"2026-11-05T23:46:48.052Z","first_published":"2026-11-06T00:39:38.884Z","source":"phishdestroy","source_name":"PhishDestroy","under":"embassy44.com","source_url":"https://phishdestroy.io/domain/embassy44.com/"}],"url":"https://domainspoof.com/live?show=all&q=www.tesla.embassy44.com"},{"hostname":"www.translation-service-houston.com","first_observed":"2026-11-06T00:21:13.428Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"resolved","resolved":["74.208.252.249"],"resolved_at":"2026-11-06T00:21:32Z","dns_checked_at":"2026-11-06T00:51:08.000Z","dns_since":"2026-11-06T00:51:08.000Z","findings":[{"id":"fzntrgln3kipp2mbds7cw","kind":"reported_domain","summary":"Under translation-service-houston.com, reported by PhishDestroy","first_observed":"2026-11-06T00:21:13.428Z","first_published":"2026-11-06T00:39:38.884Z","source":"phishdestroy","source_name":"PhishDestroy","under":"translation-service-houston.com","source_url":"https://phishdestroy.io/domain/translation-service-houston.com/"}],"url":"https://domainspoof.com/live?show=all&q=www.translation-service-houston.com"},{"hostname":"www.wwwdev.www.support.discord.tattoo","first_observed":"2026-11-06T00:05:46.893Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"resolved","resolved":["34.41.139.193"],"resolved_at":"2026-11-06T00:06:33Z","dns_checked_at":"2026-11-06T00:51:08.000Z","dns_since":"2026-11-06T00:51:08.000Z","findings":[{"id":"fizgs5j7vbtniloqabm6z","kind":"reported_domain","summary":"Under discord.tattoo, listed by MetaMask","first_observed":"2026-11-06T00:05:46.893Z","first_published":"2026-11-06T00:39:38.884Z","source":"metamask","source_name":"MetaMask","under":"discord.tattoo"}],"url":"https://domainspoof.com/live?show=all&q=www.wwwdev.www.support.discord.tattoo"},{"hostname":"www.zoomroom.studio","first_observed":"2026-11-06T00:00:47.488Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"resolved","resolved":["3.33.130.190","15.197.148.33"],"resolved_at":"2026-11-06T03:05:58Z","dns_checked_at":"2026-11-06T00:51:08.000Z","dns_since":"2026-11-06T00:51:08.000Z","findings":[{"id":"f2of2ppw4engywt5ydzik","kind":"reported_domain","summary":"Under zoomroom.studio, listed by MetaMask","first_observed":"2026-11-06T00:00:47.488Z","first_published":"2026-11-06T00:39:38.884Z","source":"metamask","source_name":"MetaMask","under":"zoomroom.studio"}],"url":"https://domainspoof.com/live?show=all&q=www.zoomroom.studio"},{"hostname":"xiaomi-j.com","first_observed":"2026-11-05T23:52:16.980Z","first_published":"2026-11-06T00:39:38.884Z","brands":[{"id":"xiaomi","name":"Xiaomi","url":"https://domainspoof.com/brands/xiaomi"}],"dns":"resolved","resolved":["192.3.106.229"],"resolved_at":"2026-11-06T00:51:08Z","dns_checked_at":"2026-11-06T00:51:08.000Z","dns_since":"2026-11-06T00:51:08.000Z","findings":[{"id":"fmz4wgw5hyewnr6gwqzbl","kind":"phishing_infrastructure","summary":"Resolved to 192.3.106.229, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T23:52:16.980Z","first_published":"2026-11-06T00:39:38.884Z","address":"192.3.106.229","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/xiaomi"},{"hostname":"youtube-reviews.eu","first_observed":"2026-11-06T00:31:41.575Z","first_published":"2026-11-06T00:39:38.884Z","brands":[{"id":"youtube","name":"YouTube","url":"https://domainspoof.com/brands/youtube"}],"dns":"resolved","resolved":["185.31.240.240"],"resolved_at":"2026-11-06T00:51:08Z","dns_checked_at":"2026-11-06T00:51:08.000Z","dns_since":"2026-11-06T00:51:08.000Z","findings":[{"id":"fv62edxcpgkszuoveyuqh","kind":"phishing_infrastructure","summary":"Resolved to 185.31.240.240, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T00:31:41.575Z","first_published":"2026-11-06T00:39:38.884Z","address":"185.31.240.240","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/youtube"},{"hostname":"zama-voting.pages.dev","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"resolved","resolved":["172.66.44.205","172.66.47.51","2606:4700:310c::ac42:2ccd","2606:4700:310c::ac42:2f33"],"resolved_at":"2026-11-05T23:55:23Z","dns_checked_at":"2026-11-06T00:51:08.000Z","dns_since":"2026-11-06T00:51:08.000Z","findings":[{"id":"fyiuiiymaa5e3bmsojodx","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=zama-voting.pages.dev"},{"hostname":"zepion-news.top","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","brands":[],"dns":"resolved","resolved":["104.21.42.131","172.67.205.224","2606:4700:3031::6815:2a83","2606:4700:3031::ac43:cde0"],"resolved_at":"2026-11-05T23:55:23Z","dns_checked_at":"2026-11-06T00:51:08.000Z","dns_since":"2026-11-06T00:51:08.000Z","findings":[{"id":"fp4eept7jiyiok3ghx3kg","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=zepion-news.top"},{"hostname":"zh-binance-pc.com.cn","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","brands":[{"id":"binance","name":"Binance","url":"https://domainspoof.com/brands/binance"}],"dns":"resolved","resolved":["104.21.7.150","172.67.136.113","2606:4700:3031::ac43:8871","2606:4700:3035::6815:796"],"resolved_at":"2026-11-05T23:55:23Z","dns_checked_at":"2026-11-06T00:51:08.000Z","dns_since":"2026-11-06T00:51:08.000Z","findings":[{"id":"fbuinmirwmmiui7gif2jd","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/brands/binance"},{"hostname":"zh-binance.ah.cn","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","brands":[{"id":"binance","name":"Binance","url":"https://domainspoof.com/brands/binance"}],"dns":"resolved","resolved":["104.21.86.95","172.67.217.106","2606:4700:3033::ac43:d96a","2606:4700:3034::6815:565f"],"resolved_at":"2026-11-05T23:55:23Z","dns_checked_at":"2026-11-06T00:51:08.000Z","dns_since":"2026-11-06T00:51:08.000Z","findings":[{"id":"ffbvbj3yldboe3ooe7j6s","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/brands/binance"},{"hostname":"zh-binance.ha.cn","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","brands":[{"id":"binance","name":"Binance","url":"https://domainspoof.com/brands/binance"}],"dns":"resolved","resolved":["104.21.30.89","172.67.172.176","2606:4700:3032::6815:1e59","2606:4700:3037::ac43:acb0"],"resolved_at":"2026-11-05T23:55:23Z","dns_checked_at":"2026-11-06T00:51:08.000Z","dns_since":"2026-11-06T00:51:08.000Z","findings":[{"id":"fwepuf5dls7c4xjssj4zf","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/brands/binance"},{"hostname":"zh-binance.hb.cn","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","brands":[{"id":"binance","name":"Binance","url":"https://domainspoof.com/brands/binance"}],"dns":"resolved","resolved":["104.21.67.139","172.67.177.56","2606:4700:3036::6815:438b","2606:4700:3037::ac43:b138"],"resolved_at":"2026-11-05T23:55:23Z","dns_checked_at":"2026-11-06T00:51:08.000Z","dns_since":"2026-11-06T00:51:08.000Z","findings":[{"id":"finv3rl6a6gdpohth3gai","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/brands/binance"},{"hostname":"zh-binance.hi.cn","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","brands":[{"id":"binance","name":"Binance","url":"https://domainspoof.com/brands/binance"}],"dns":"resolved","resolved":["104.21.12.135","172.67.132.40","2606:4700:3033::ac43:8428","2606:4700:3035::6815:c87"],"resolved_at":"2026-11-05T23:55:23Z","dns_checked_at":"2026-11-06T00:51:08.000Z","dns_since":"2026-11-06T00:51:08.000Z","findings":[{"id":"frf5kc4yfas72u5bllg5g","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/brands/binance"},{"hostname":"zh-binance.hn.cn","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","brands":[{"id":"binance","name":"Binance","url":"https://domainspoof.com/brands/binance"}],"dns":"resolved","resolved":["104.21.55.81","172.67.145.247","2606:4700:3031::ac43:91f7","2606:4700:3035::6815:3751"],"resolved_at":"2026-11-05T23:55:23Z","dns_checked_at":"2026-11-06T00:51:08.000Z","dns_since":"2026-11-06T00:51:08.000Z","findings":[{"id":"fhcns324pu4hdayrygtq5","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/brands/binance"},{"hostname":"1inch-orguudes.wiki","first_observed":"2026-11-05T23:31:07.000Z","first_published":"2026-11-05T23:31:07.000Z","brands":[{"id":"1inch","name":"1inch","url":"https://domainspoof.com/brands/1inch"}],"dns":"resolved","resolved":["104.21.25.193","172.67.134.127","2606:4700:3032::ac43:867f","2606:4700:3036::6815:19c1"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “1inch”, a name we match for 1inch, listed by MetaMask","first_observed":"2026-11-05T23:31:07.000Z","first_published":"2026-11-05T23:31:07.000Z","of":"1inch.com","spelling":"combo","match":"name","token":"1inch","found_by":"zone_file","listings":[{"kind":"reported","source":"metamask","source_name":"MetaMask","host":"1inch-orguudes.wiki","flagged_at":"2026-11-05T23:31:07Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/1inch"},{"hostname":"7-eleven.nrw","first_observed":"2026-11-05T23:31:07.000Z","first_published":"2026-11-05T23:31:07.000Z","brands":[{"id":"7-eleven-thailand","name":"7-Eleven Thailand","url":"https://domainspoof.com/brands/7-eleven-thailand"}],"dns":"resolved","resolved":["217.160.0.250","2001:8d8:100f:f000::200"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “7-eleven”, a name we match for 7-Eleven Thailand, resolved to 217.160.0.250, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T23:31:07.000Z","first_published":"2026-11-05T23:31:07.000Z","of":"7eleven.co.th","spelling":"combo","match":"name","token":"7-eleven","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"217.160.0.250","flagged_at":"2026-11-05T23:31:07Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/7-eleven-thailand"},{"hostname":"addidas.shoes","first_observed":"2026-11-05T23:31:07.000Z","first_published":"2026-11-05T23:31:07.000Z","brands":[{"id":"adidas","name":"Adidas","url":"https://domainspoof.com/brands/adidas"}],"dns":"resolved","resolved":["199.193.114.43"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of adidas.com (a doubled letter), resolved to 199.193.114.43, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T23:31:07.000Z","first_published":"2026-11-05T23:31:07.000Z","of":"adidas.com","spelling":"repetition","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"199.193.114.43","flagged_at":"2026-11-05T23:31:07Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/adidas"},{"hostname":"adidas-free.club","first_observed":"2026-11-05T23:31:07.000Z","first_published":"2026-11-05T23:31:07.000Z","brands":[{"id":"adidas","name":"Adidas","url":"https://domainspoof.com/brands/adidas"}],"dns":"resolved","resolved":["77.247.179.83"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “adidas”, a name we match for Adidas, resolved to 77.247.179.83, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T23:31:07.000Z","first_published":"2026-11-05T23:31:07.000Z","of":"adidas.com","spelling":"combo","match":"name","token":"adidas","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"77.247.179.83","flagged_at":"2026-11-05T23:31:07Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/adidas"},{"hostname":"ai-bnbchain.beer","first_observed":"2026-11-05T23:31:07.000Z","first_published":"2026-11-05T23:31:07.000Z","brands":[{"id":"binance","name":"Binance","url":"https://domainspoof.com/brands/binance"}],"dns":"resolved","resolved":["2.59.170.20","104.219.250.37"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “bnbchain”, a name we match for Binance, resolved to 2.59.170.20, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T23:31:07.000Z","first_published":"2026-11-05T23:31:07.000Z","of":"binance.com","spelling":"combo","match":"name","token":"bnbchain","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"2.59.170.20","flagged_at":"2026-11-05T23:31:07Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/binance"},{"hostname":"alibaba96.vip","first_observed":"2026-11-05T23:31:07.000Z","first_published":"2026-11-05T23:31:07.000Z","brands":[{"id":"alibaba","name":"Alibaba","url":"https://domainspoof.com/brands/alibaba"}],"dns":"resolved","resolved":["2.59.170.20","104.219.250.37"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “alibaba”, a name we match for Alibaba, resolved to 2.59.170.20, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T23:31:07.000Z","first_published":"2026-11-05T23:31:07.000Z","of":"alibaba.com","spelling":"combo","match":"name","token":"alibaba","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"2.59.170.20","flagged_at":"2026-11-05T23:31:07Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/alibaba"},{"hostname":"alibabacloudcore.org","first_observed":"2026-11-05T23:31:07.000Z","first_published":"2026-11-05T23:31:07.000Z","brands":[{"id":"alibaba","name":"Alibaba","url":"https://domainspoof.com/brands/alibaba"}],"dns":"resolved","resolved":["2.59.170.20","104.219.250.37"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “alibaba”, a name we match for Alibaba, resolved to 2.59.170.20, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T23:31:07.000Z","first_published":"2026-11-05T23:31:07.000Z","of":"alibaba.com","spelling":"combo","match":"name","token":"alibaba","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"2.59.170.20","flagged_at":"2026-11-05T23:31:07Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/alibaba"},{"hostname":"allianz-klinikrente.info","first_observed":"2026-11-05T23:31:07.000Z","first_published":"2026-11-05T23:31:07.000Z","brands":[{"id":"allianz","name":"Allianz","url":"https://domainspoof.com/brands/allianz"}],"dns":"resolved","resolved":["89.31.143.90"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “allianz”, a name we match for Allianz, resolved to 89.31.143.90, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T23:31:07.000Z","first_published":"2026-11-05T23:31:07.000Z","of":"allianz.com","spelling":"combo","match":"name","token":"allianz","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"89.31.143.90","flagged_at":"2026-11-05T23:31:07Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/allianz"},{"hostname":"allianz-spitalrente.info","first_observed":"2026-11-05T23:31:07.000Z","first_published":"2026-11-05T23:31:07.000Z","brands":[{"id":"allianz","name":"Allianz","url":"https://domainspoof.com/brands/allianz"}],"dns":"resolved","resolved":["89.31.143.90"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “allianz”, a name we match for Allianz, resolved to 89.31.143.90, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T23:31:07.000Z","first_published":"2026-11-05T23:31:07.000Z","of":"allianz.com","spelling":"combo","match":"name","token":"allianz","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"89.31.143.90","flagged_at":"2026-11-05T23:31:07Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/allianz"},{"hostname":"amazonprime.sex","first_observed":"2026-11-05T23:31:07.000Z","first_published":"2026-11-05T23:31:07.000Z","brands":[{"id":"amazon","name":"Amazon","url":"https://domainspoof.com/brands/amazon"}],"dns":"resolved","resolved":["54.39.222.96","2607:5300:60:408a::96"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “amazonprime”, a name we match for Amazon, resolved to 54.39.222.96, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T23:31:07.000Z","first_published":"2026-11-05T23:31:07.000Z","of":"amazon.com","spelling":"combo","match":"name","token":"amazonprime","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"54.39.222.96","flagged_at":"2026-11-05T23:31:07Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/amazon"},{"hostname":"ameli-commande.info","first_observed":"2026-11-05T23:31:07.000Z","first_published":"2026-11-05T23:31:07.000Z","brands":[{"id":"ameli","name":"ameli","url":"https://domainspoof.com/brands/ameli"}],"dns":"resolved","resolved":["216.245.197.41"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “ameli”, a name we match for ameli, resolved to 216.245.197.41, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T23:31:07.000Z","first_published":"2026-11-05T23:31:07.000Z","of":"ameli.fr","spelling":"combo","match":"name","token":"ameli","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"216.245.197.41","flagged_at":"2026-11-05T23:31:07Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/ameli"},{"hostname":"ameli-maladie.info","first_observed":"2026-11-05T23:31:07.000Z","first_published":"2026-11-05T23:31:07.000Z","brands":[{"id":"ameli","name":"ameli","url":"https://domainspoof.com/brands/ameli"}],"dns":"resolved","resolved":["216.245.197.44"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “ameli”, a name we match for ameli, resolved to 216.245.197.44, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T23:31:07.000Z","first_published":"2026-11-05T23:31:07.000Z","of":"ameli.fr","spelling":"combo","match":"name","token":"ameli","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"216.245.197.44","flagged_at":"2026-11-05T23:31:07Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/ameli"},{"hostname":"ampere-allianz.online","first_observed":"2026-11-05T23:31:07.000Z","first_published":"2026-11-05T23:31:07.000Z","brands":[{"id":"allianz","name":"Allianz","url":"https://domainspoof.com/brands/allianz"}],"dns":"resolved","resolved":["89.31.143.90"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “allianz”, a name we match for Allianz, resolved to 89.31.143.90, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T23:31:07.000Z","first_published":"2026-11-05T23:31:07.000Z","of":"allianz.com","spelling":"combo","match":"name","token":"allianz","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"89.31.143.90","flagged_at":"2026-11-05T23:31:07Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/allianz"},{"hostname":"apple-iphone.live","first_observed":"2026-11-05T23:31:07.000Z","first_published":"2026-11-05T23:31:07.000Z","brands":[{"id":"apple","name":"Apple","url":"https://domainspoof.com/brands/apple"}],"dns":"resolved","resolved":["216.245.197.44"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “iphone”, a name we match for Apple, resolved to 216.245.197.44, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T23:31:07.000Z","first_published":"2026-11-05T23:31:07.000Z","of":"apple.com","spelling":"combo","match":"name","token":"iphone","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"216.245.197.44","flagged_at":"2026-11-05T23:31:07Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/apple"},{"hostname":"applepay.skin","first_observed":"2026-11-05T23:31:07.000Z","first_published":"2026-11-05T23:31:07.000Z","brands":[{"id":"apple","name":"Apple","url":"https://domainspoof.com/brands/apple"}],"dns":"resolved","resolved":["153.52.255.19"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “applepay”, a name we match for Apple, resolved to 153.52.255.19, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T23:31:07.000Z","first_published":"2026-11-05T23:31:07.000Z","of":"apple.com","spelling":"combo","match":"name","token":"applepay","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"153.52.255.19","flagged_at":"2026-11-05T23:31:07Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/apple"},{"hostname":"appstorebr.shop","first_observed":"2026-11-05T23:31:07.000Z","first_published":"2026-11-05T23:31:07.000Z","brands":[{"id":"apple","name":"Apple","url":"https://domainspoof.com/brands/apple"}],"dns":"resolved","resolved":["212.92.104.9"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “appstore”, a name we match for Apple, resolved to 212.92.104.9, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T23:31:07.000Z","first_published":"2026-11-05T23:31:07.000Z","of":"apple.com","spelling":"combo","match":"name","token":"appstore","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"212.92.104.9","flagged_at":"2026-11-05T23:31:07Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/apple"},{"hostname":"arbitrium.tech","first_observed":"2026-11-05T23:31:07.000Z","first_published":"2026-11-05T23:31:07.000Z","brands":[{"id":"arbitrum","name":"Arbitrum","url":"https://domainspoof.com/brands/arbitrum"}],"dns":"resolved","resolved":["153.52.255.103"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of arbitrum.io (an added character), resolved to 153.52.255.103, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T23:31:07.000Z","first_published":"2026-11-05T23:31:07.000Z","of":"arbitrum.io","spelling":"insertion","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"153.52.255.103","flagged_at":"2026-11-05T23:31:07Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/arbitrum"},{"hostname":"aruba-cloud.gratis","first_observed":"2026-11-05T23:31:07.000Z","first_published":"2026-11-05T23:31:07.000Z","brands":[{"id":"aruba","name":"Aruba","url":"https://domainspoof.com/brands/aruba"}],"dns":"resolved","resolved":["62.149.128.40"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “aruba”, a name we match for Aruba, resolved to 62.149.128.40, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T23:31:07.000Z","first_published":"2026-11-05T23:31:07.000Z","of":"aruba.it","spelling":"combo","match":"name","token":"aruba","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"62.149.128.40","flagged_at":"2026-11-05T23:31:07Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/aruba"},{"hostname":"aruba-cloud.partners","first_observed":"2026-11-05T23:31:07.000Z","first_published":"2026-11-05T23:31:07.000Z","brands":[{"id":"aruba","name":"Aruba","url":"https://domainspoof.com/brands/aruba"}],"dns":"resolved","resolved":["62.149.128.40"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “aruba”, a name we match for Aruba, resolved to 62.149.128.40, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T23:31:07.000Z","first_published":"2026-11-05T23:31:07.000Z","of":"aruba.it","spelling":"combo","match":"name","token":"aruba","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"62.149.128.40","flagged_at":"2026-11-05T23:31:07Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/aruba"},{"hostname":"aruba-fatture.click","first_observed":"2026-11-05T23:31:07.000Z","first_published":"2026-11-05T23:31:07.000Z","brands":[{"id":"aruba","name":"Aruba","url":"https://domainspoof.com/brands/aruba"}],"dns":"resolved","resolved":["185.95.156.162"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “aruba”, a name we match for Aruba, resolved to 185.95.156.162, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T23:31:07.000Z","first_published":"2026-11-05T23:31:07.000Z","of":"aruba.it","spelling":"combo","match":"name","token":"aruba","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"185.95.156.162","flagged_at":"2026-11-05T23:31:07Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/aruba"},{"hostname":"aruba-it.cloud","first_observed":"2026-11-05T23:31:07.000Z","first_published":"2026-11-05T23:31:07.000Z","brands":[{"id":"aruba","name":"Aruba","url":"https://domainspoof.com/brands/aruba"}],"dns":"resolved","resolved":["62.149.128.40"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “aruba”, a name we match for Aruba, resolved to 62.149.128.40, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T23:31:07.000Z","first_published":"2026-11-05T23:31:07.000Z","of":"aruba.it","spelling":"combo","match":"name","token":"aruba","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"62.149.128.40","flagged_at":"2026-11-05T23:31:07Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/aruba"},{"hostname":"aruba-pec.cloud","first_observed":"2026-11-05T23:31:07.000Z","first_published":"2026-11-05T23:31:07.000Z","brands":[{"id":"aruba","name":"Aruba","url":"https://domainspoof.com/brands/aruba"}],"dns":"resolved","resolved":["62.149.128.40"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “aruba-pec”, a name we match for Aruba, resolved to 62.149.128.40, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T23:31:07.000Z","first_published":"2026-11-05T23:31:07.000Z","of":"aruba.it","spelling":"combo","match":"name","token":"aruba-pec","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"62.149.128.40","flagged_at":"2026-11-05T23:31:07Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/aruba"},{"hostname":"arubacloud.cloud","first_observed":"2026-11-05T23:31:07.000Z","first_published":"2026-11-05T23:31:07.000Z","brands":[{"id":"aruba","name":"Aruba","url":"https://domainspoof.com/brands/aruba"}],"dns":"resolved","resolved":["62.149.128.40"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “aruba”, a name we match for Aruba, resolved to 62.149.128.40, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T23:31:07.000Z","first_published":"2026-11-05T23:31:07.000Z","of":"aruba.it","spelling":"combo","match":"name","token":"aruba","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"62.149.128.40","flagged_at":"2026-11-05T23:31:07Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/aruba"},{"hostname":"arubacloud.gratis","first_observed":"2026-11-05T23:31:07.000Z","first_published":"2026-11-05T23:31:07.000Z","brands":[{"id":"aruba","name":"Aruba","url":"https://domainspoof.com/brands/aruba"}],"dns":"resolved","resolved":["62.149.128.40"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “aruba”, a name we match for Aruba, resolved to 62.149.128.40, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T23:31:07.000Z","first_published":"2026-11-05T23:31:07.000Z","of":"aruba.it","spelling":"combo","match":"name","token":"aruba","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"62.149.128.40","flagged_at":"2026-11-05T23:31:07Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/aruba"},{"hostname":"arubacloud.host","first_observed":"2026-11-05T23:31:07.000Z","first_published":"2026-11-05T23:31:07.000Z","brands":[{"id":"aruba","name":"Aruba","url":"https://domainspoof.com/brands/aruba"}],"dns":"resolved","resolved":["62.149.128.40"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “aruba”, a name we match for Aruba, resolved to 62.149.128.40, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T23:31:07.000Z","first_published":"2026-11-05T23:31:07.000Z","of":"aruba.it","spelling":"combo","match":"name","token":"aruba","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"62.149.128.40","flagged_at":"2026-11-05T23:31:07Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/aruba"},{"hostname":"arubacloud.network","first_observed":"2026-11-05T23:31:07.000Z","first_published":"2026-11-05T23:31:07.000Z","brands":[{"id":"aruba","name":"Aruba","url":"https://domainspoof.com/brands/aruba"}],"dns":"resolved","resolved":["62.149.128.40"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “aruba”, a name we match for Aruba, resolved to 62.149.128.40, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T23:31:07.000Z","first_published":"2026-11-05T23:31:07.000Z","of":"aruba.it","spelling":"combo","match":"name","token":"aruba","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"62.149.128.40","flagged_at":"2026-11-05T23:31:07Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/aruba"},{"hostname":"arubacloud.services","first_observed":"2026-11-05T23:31:07.000Z","first_published":"2026-11-05T23:31:07.000Z","brands":[{"id":"aruba","name":"Aruba","url":"https://domainspoof.com/brands/aruba"}],"dns":"resolved","resolved":["62.149.128.40"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “aruba”, a name we match for Aruba, resolved to 62.149.128.40, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T23:31:07.000Z","first_published":"2026-11-05T23:31:07.000Z","of":"aruba.it","spelling":"combo","match":"name","token":"aruba","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"62.149.128.40","flagged_at":"2026-11-05T23:31:07Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/aruba"},{"hostname":"arubacloud.software","first_observed":"2026-11-05T23:31:07.000Z","first_published":"2026-11-05T23:31:07.000Z","brands":[{"id":"aruba","name":"Aruba","url":"https://domainspoof.com/brands/aruba"}],"dns":"resolved","resolved":["62.149.128.40"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “aruba”, a name we match for Aruba, resolved to 62.149.128.40, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T23:31:07.000Z","first_published":"2026-11-05T23:31:07.000Z","of":"aruba.it","spelling":"combo","match":"name","token":"aruba","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"62.149.128.40","flagged_at":"2026-11-05T23:31:07Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/aruba"},{"hostname":"arubacloud.website","first_observed":"2026-11-05T23:31:07.000Z","first_published":"2026-11-05T23:31:07.000Z","brands":[{"id":"aruba","name":"Aruba","url":"https://domainspoof.com/brands/aruba"}],"dns":"resolved","resolved":["62.149.128.40"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “aruba”, a name we match for Aruba, resolved to 62.149.128.40, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T23:31:07.000Z","first_published":"2026-11-05T23:31:07.000Z","of":"aruba.it","spelling":"combo","match":"name","token":"aruba","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"62.149.128.40","flagged_at":"2026-11-05T23:31:07Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/aruba"},{"hostname":"arubacloud.wiki","first_observed":"2026-11-05T23:31:07.000Z","first_published":"2026-11-05T23:31:07.000Z","brands":[{"id":"aruba","name":"Aruba","url":"https://domainspoof.com/brands/aruba"}],"dns":"resolved","resolved":["62.149.128.40"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “aruba”, a name we match for Aruba, resolved to 62.149.128.40, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T23:31:07.000Z","first_published":"2026-11-05T23:31:07.000Z","of":"aruba.it","spelling":"combo","match":"name","token":"aruba","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"62.149.128.40","flagged_at":"2026-11-05T23:31:07Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/aruba"},{"hostname":"arubagroup.partners","first_observed":"2026-11-05T23:31:07.000Z","first_published":"2026-11-05T23:31:07.000Z","brands":[{"id":"aruba","name":"Aruba","url":"https://domainspoof.com/brands/aruba"}],"dns":"resolved","resolved":["62.149.128.40"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “aruba”, a name we match for Aruba, resolved to 62.149.128.40, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T23:31:07.000Z","first_published":"2026-11-05T23:31:07.000Z","of":"aruba.it","spelling":"combo","match":"name","token":"aruba","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"62.149.128.40","flagged_at":"2026-11-05T23:31:07Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/aruba"},{"hostname":"arubait.cloud","first_observed":"2026-11-05T23:31:07.000Z","first_published":"2026-11-05T23:31:07.000Z","brands":[{"id":"aruba","name":"Aruba","url":"https://domainspoof.com/brands/aruba"}],"dns":"resolved","resolved":["62.149.128.40"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “aruba”, a name we match for Aruba, resolved to 62.149.128.40, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T23:31:07.000Z","first_published":"2026-11-05T23:31:07.000Z","of":"aruba.it","spelling":"combo","match":"name","token":"aruba","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"62.149.128.40","flagged_at":"2026-11-05T23:31:07Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/aruba"},{"hostname":"arubait.hosting","first_observed":"2026-11-05T23:31:07.000Z","first_published":"2026-11-05T23:31:07.000Z","brands":[{"id":"aruba","name":"Aruba","url":"https://domainspoof.com/brands/aruba"}],"dns":"resolved","resolved":["62.149.128.40"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “aruba”, a name we match for Aruba, resolved to 62.149.128.40, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T23:31:07.000Z","first_published":"2026-11-05T23:31:07.000Z","of":"aruba.it","spelling":"combo","match":"name","token":"aruba","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"62.149.128.40","flagged_at":"2026-11-05T23:31:07Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/aruba"},{"hostname":"auditor-bybit.one","first_observed":"2026-11-05T23:31:07.000Z","first_published":"2026-11-05T23:31:07.000Z","brands":[{"id":"bybit","name":"Bybit","url":"https://domainspoof.com/brands/bybit"}],"dns":"resolved","resolved":["172.86.94.61"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “bybit”, a name we match for Bybit, resolved to 172.86.94.61, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T23:31:07.000Z","first_published":"2026-11-05T23:31:07.000Z","of":"bybit.com","spelling":"combo","match":"name","token":"bybit","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"172.86.94.61","flagged_at":"2026-11-05T23:31:07Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/bybit"},{"hostname":"autoren-allianz.org","first_observed":"2026-11-05T23:31:07.000Z","first_published":"2026-11-05T23:31:07.000Z","brands":[{"id":"allianz","name":"Allianz","url":"https://domainspoof.com/brands/allianz"}],"dns":"resolved","resolved":["89.31.143.90"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “allianz”, a name we match for Allianz, resolved to 89.31.143.90, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T23:31:07.000Z","first_published":"2026-11-05T23:31:07.000Z","of":"allianz.com","spelling":"combo","match":"name","token":"allianz","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"89.31.143.90","flagged_at":"2026-11-05T23:31:07Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/allianz"},{"hostname":"autostradeit.vip","first_observed":"2026-11-05T23:31:07.000Z","first_published":"2026-11-05T23:31:07.000Z","brands":[{"id":"autostrade-per-l-italia","name":"Autostrade per l'Italia","url":"https://domainspoof.com/brands/autostrade-per-l-italia"}],"dns":"resolved","resolved":["43.165.5.244"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “autostrade”, a name we match for Autostrade per l'Italia, resolved to 43.165.5.244, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T23:31:07.000Z","first_published":"2026-11-05T23:31:07.000Z","of":"autostrade.it","spelling":"combo","match":"name","token":"autostrade","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"43.165.5.244","flagged_at":"2026-11-05T23:31:07Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/autostrade-per-l-italia"},{"hostname":"avitosale.online","first_observed":"2026-11-05T23:31:07.000Z","first_published":"2026-11-05T23:31:07.000Z","brands":[{"id":"avito","name":"Avito","url":"https://domainspoof.com/brands/avito"}],"dns":"resolved","resolved":["31.31.196.17","2a00:f940:2:2:1:1:0:256"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “avito”, a name we match for Avito, resolved to 31.31.196.17, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T23:31:07.000Z","first_published":"2026-11-05T23:31:07.000Z","of":"avito.ru","spelling":"combo","match":"name","token":"avito","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"31.31.196.17","flagged_at":"2026-11-05T23:31:07Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/avito"},{"hostname":"bank-bni.life","first_observed":"2026-11-05T23:31:07.000Z","first_published":"2026-11-05T23:31:07.000Z","brands":[{"id":"bni","name":"BNI","url":"https://domainspoof.com/brands/bni"}],"dns":"resolved","resolved":["77.247.179.90"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of bni.co.id (the name with an added word), resolved to 77.247.179.90, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T23:31:07.000Z","first_published":"2026-11-05T23:31:07.000Z","of":"bni.co.id","spelling":"combo","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"77.247.179.90","flagged_at":"2026-11-05T23:31:07Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/bni"},{"hostname":"baryareafastrak.org","first_observed":"2026-11-05T23:31:07.000Z","first_published":"2026-11-05T23:31:07.000Z","brands":[{"id":"fastrak","name":"FasTrak","url":"https://domainspoof.com/brands/fastrak"}],"dns":"resolved","resolved":["77.247.179.86"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of bayareafastrak.org (an added character), resolved to 77.247.179.86, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T23:31:07.000Z","first_published":"2026-11-05T23:31:07.000Z","of":"bayareafastrak.org","spelling":"insertion","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"77.247.179.86","flagged_at":"2026-11-05T23:31:07Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/fastrak"},{"hostname":"baykar-devlet-destekli-projesi.sbs","first_observed":"2026-11-05T23:31:07.000Z","first_published":"2026-11-05T23:31:07.000Z","brands":[{"id":"baykar","name":"Baykar","url":"https://domainspoof.com/brands/baykar"}],"dns":"resolved","resolved":["104.21.43.143","172.67.180.55","2606:4700:3033::6815:2b8f","2606:4700:3037::ac43:b437"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “baykar-devlet”, a name we match for Baykar, listed by USOM","first_observed":"2026-11-05T23:31:07.000Z","first_published":"2026-11-05T23:31:07.000Z","of":"baykartech.com","spelling":"combo","match":"name","token":"baykar-devlet","found_by":"zone_file","listings":[{"kind":"reported","source":"usom","source_name":"USOM","host":"baykar-devlet-destekli-projesi.sbs","flagged_at":"2026-11-05T23:31:07Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/baykar"},{"hostname":"bbvaonline.info","first_observed":"2026-11-05T23:31:07.000Z","first_published":"2026-11-05T23:31:07.000Z","brands":[{"id":"bbva","name":"BBVA","url":"https://domainspoof.com/brands/bbva"}],"dns":"resolved","resolved":["78.157.209.174"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “bbva”, a name we match for BBVA, resolved to 78.157.209.174, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T23:31:07.000Z","first_published":"2026-11-05T23:31:07.000Z","of":"bbva.com","spelling":"combo","match":"name","token":"bbva","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"78.157.209.174","flagged_at":"2026-11-05T23:31:07Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/bbva"},{"hostname":"bdeshop.xyz","first_observed":"2026-11-05T23:31:07.000Z","first_published":"2026-11-05T23:31:07.000Z","brands":[{"id":"banco-de-espana","name":"Banco de España","url":"https://domainspoof.com/brands/banco-de-espana"}],"dns":"resolved","resolved":["65.75.210.172"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “bde”, a name we match for Banco de España, resolved to 65.75.210.172, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T23:31:07.000Z","first_published":"2026-11-05T23:31:07.000Z","of":"bde.es","spelling":"combo","match":"name","token":"bde","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"65.75.210.172","flagged_at":"2026-11-05T23:31:07Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/banco-de-espana"},{"hostname":"best-buy.live","first_observed":"2026-11-05T23:31:07.000Z","first_published":"2026-11-05T23:31:07.000Z","brands":[{"id":"best-buy","name":"Best Buy","url":"https://domainspoof.com/brands/best-buy"}],"dns":"resolved","resolved":["216.245.197.45"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “best-buy”, a name we match for Best Buy, resolved to 216.245.197.45, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T23:31:07.000Z","first_published":"2026-11-05T23:31:07.000Z","of":"bestbuy.com","spelling":"combo","match":"name","token":"best-buy","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"216.245.197.45","flagged_at":"2026-11-05T23:31:07Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/best-buy"},{"hostname":"best-buy.site","first_observed":"2026-11-05T23:31:07.000Z","first_published":"2026-11-05T23:31:07.000Z","brands":[{"id":"best-buy","name":"Best Buy","url":"https://domainspoof.com/brands/best-buy"}],"dns":"resolved","resolved":["185.150.189.124"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “best-buy”, a name we match for Best Buy, resolved to 185.150.189.124, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T23:31:07.000Z","first_published":"2026-11-05T23:31:07.000Z","of":"bestbuy.com","spelling":"combo","match":"name","token":"best-buy","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"185.150.189.124","flagged_at":"2026-11-05T23:31:07Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/best-buy"},{"hostname":"biedronkaeu.shop","first_observed":"2026-11-05T23:31:07.000Z","first_published":"2026-11-05T23:31:07.000Z","brands":[{"id":"biedronka","name":"Biedronka","url":"https://domainspoof.com/brands/biedronka"}],"dns":"resolved","resolved":["104.16.211.68"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “biedronka”, a name we match for Biedronka, listed by CERT Polska","first_observed":"2026-11-05T23:31:07.000Z","first_published":"2026-11-05T23:31:07.000Z","of":"biedronka.pl","spelling":"combo","match":"name","token":"biedronka","found_by":"zone_file","listings":[{"kind":"reported","source":"cert_polska","source_name":"CERT Polska","host":"biedronkaeu.shop","flagged_at":"2026-11-05T23:31:07Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/biedronka"},{"hostname":"biinance.one","first_observed":"2026-11-05T23:31:07.000Z","first_published":"2026-11-05T23:31:07.000Z","brands":[{"id":"binance","name":"Binance","url":"https://domainspoof.com/brands/binance"}],"dns":"resolved","resolved":["172.232.24.161","172.232.24.235","172.234.25.42"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of binance.com (a doubled letter), resolved to 172.232.24.161, where reported phishing was found in the 48 hours before, and resolved to 172.232.24.235, where reported phishing was found in the 48 hours before, and resolved to 172.234.25.42, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T23:31:07.000Z","first_published":"2026-11-05T23:31:07.000Z","of":"binance.com","spelling":"repetition","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"172.232.24.161","flagged_at":"2026-11-05T23:31:07Z"},{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"172.232.24.235","flagged_at":"2026-11-05T23:31:07Z"},{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"172.234.25.42","flagged_at":"2026-11-05T23:31:07Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/binance"},{"hostname":"binance-tr.one","first_observed":"2026-11-05T23:31:07.000Z","first_published":"2026-11-05T23:31:07.000Z","brands":[{"id":"binance","name":"Binance","url":"https://domainspoof.com/brands/binance"}],"dns":"resolved","resolved":["31.56.209.3"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “binance”, a name we match for Binance, resolved to 31.56.209.3 on Spamhaus DROP","first_observed":"2026-11-05T23:31:07.000Z","first_published":"2026-11-05T23:31:07.000Z","of":"binance.com","spelling":"combo","match":"name","token":"binance","found_by":"zone_file","listings":[{"kind":"address","source":"spamhaus_drop","list_name":"Spamhaus DROP","address":"31.56.209.3","flagged_at":"2026-11-05T23:31:07Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/binance"},{"hostname":"binance-x.xyz","first_observed":"2026-11-05T23:31:07.000Z","first_published":"2026-11-05T23:31:07.000Z","brands":[{"id":"binance","name":"Binance","url":"https://domainspoof.com/brands/binance"}],"dns":"resolved","resolved":["159.203.143.218","2604:a880:800:14:0:1:225d:c000"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “binance”, a name we match for Binance, listed by MetaMask","first_observed":"2026-11-05T23:31:07.000Z","first_published":"2026-11-05T23:31:07.000Z","of":"binance.com","spelling":"combo","match":"name","token":"binance","found_by":"zone_file","listings":[{"kind":"reported","source":"metamask","source_name":"MetaMask","host":"binance-x.xyz","flagged_at":"2026-11-05T23:31:07Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/binance"},{"hostname":"binnace.ink","first_observed":"2026-11-05T23:31:07.000Z","first_published":"2026-11-05T23:31:07.000Z","brands":[{"id":"binance","name":"Binance","url":"https://domainspoof.com/brands/binance"}],"dns":"resolved","resolved":["104.21.93.36","172.67.204.54","2606:4700:3036::6815:5d24","2606:4700:3036::ac43:cc36"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of binance.com (two letters swapped), listed by MetaMask","first_observed":"2026-11-05T23:31:07.000Z","first_published":"2026-11-05T23:31:07.000Z","of":"binance.com","spelling":"transposition","found_by":"zone_file","listings":[{"kind":"reported","source":"metamask","source_name":"MetaMask","host":"binnace.ink","flagged_at":"2026-11-05T23:31:07Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/binance"},{"hostname":"bitbank-cc.one","first_observed":"2026-11-05T23:31:07.000Z","first_published":"2026-11-05T23:31:07.000Z","brands":[{"id":"bitbank","name":"bitbank","url":"https://domainspoof.com/brands/bitbank"}],"dns":"resolved","resolved":["172.232.24.161","172.232.24.235","172.234.25.42"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “bitbank”, a name we match for bitbank, resolved to 172.232.24.161, where reported phishing was found in the 48 hours before, and resolved to 172.232.24.235, where reported phishing was found in the 48 hours before, and resolved to 172.234.25.42, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T23:31:07.000Z","first_published":"2026-11-05T23:31:07.000Z","of":"bitbank.cc","spelling":"combo","match":"name","token":"bitbank","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"172.232.24.161","flagged_at":"2026-11-05T23:31:07Z"},{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"172.232.24.235","flagged_at":"2026-11-05T23:31:07Z"},{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"172.234.25.42","flagged_at":"2026-11-05T23:31:07Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/bitbank"},{"hostname":"bitbankpro.vip","first_observed":"2026-11-05T23:31:07.000Z","first_published":"2026-11-05T23:31:07.000Z","brands":[{"id":"bitbank","name":"bitbank","url":"https://domainspoof.com/brands/bitbank"}],"dns":"no_address","resolved":[],"findings":[{"kind":"lookalike","summary":"Registered domain containing “bitbank”, a name we match for bitbank, listed by NPA 165 (finance and insurance)","first_observed":"2026-11-05T23:31:07.000Z","first_published":"2026-11-05T23:31:07.000Z","of":"bitbank.cc","spelling":"combo","match":"name","token":"bitbank","found_by":"zone_file","listings":[{"kind":"reported","source":"npa","source_name":"NPA 165","host":"bitbankpro.vip","claim":{"category":"finance and insurance"},"flagged_at":"2026-11-05T23:31:07Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/bitbank"},{"hostname":"bitflyerjp.vip","first_observed":"2026-11-05T23:31:07.000Z","first_published":"2026-11-05T23:31:07.000Z","brands":[{"id":"bitflyer","name":"bitFlyer","url":"https://domainspoof.com/brands/bitflyer"}],"dns":"no_address","resolved":[],"findings":[{"kind":"lookalike","summary":"Registered domain containing “bitflyer”, a name we match for bitFlyer, listed by MetaMask","first_observed":"2026-11-05T23:31:07.000Z","first_published":"2026-11-05T23:31:07.000Z","of":"bitflyer.com","spelling":"combo","match":"name","token":"bitflyer","found_by":"zone_file","listings":[{"kind":"reported","source":"metamask","source_name":"MetaMask","host":"bitflyerjp.vip","flagged_at":"2026-11-05T23:31:07Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/bitflyer"},{"hostname":"bitgetglobal.top","first_observed":"2026-11-05T23:31:07.000Z","first_published":"2026-11-05T23:31:07.000Z","brands":[{"id":"bitget","name":"Bitget","url":"https://domainspoof.com/brands/bitget"}],"dns":"resolved","resolved":["104.21.69.231","172.67.215.110","2606:4700:3031::ac43:d76e","2606:4700:3037::6815:45e7"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “bitget”, a name we match for Bitget, listed by NPA 165 (finance and insurance)","first_observed":"2026-11-05T23:31:07.000Z","first_published":"2026-11-05T23:31:07.000Z","of":"bitget.com","spelling":"combo","match":"name","token":"bitget","found_by":"zone_file","listings":[{"kind":"reported","source":"npa","source_name":"NPA 165","host":"bitgetglobal.top","claim":{"category":"finance and insurance"},"flagged_at":"2026-11-05T23:31:07Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/bitget"},{"hostname":"bitipanda.biz","first_observed":"2026-11-05T23:31:07.000Z","first_published":"2026-11-05T23:31:07.000Z","brands":[{"id":"bitpanda","name":"Bitpanda","url":"https://domainspoof.com/brands/bitpanda"}],"dns":"resolved","resolved":["64.20.38.212"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of bitpanda.com (an added character), resolved to 64.20.38.212, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T23:31:07.000Z","first_published":"2026-11-05T23:31:07.000Z","of":"bitpanda.com","spelling":"insertion","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"64.20.38.212","flagged_at":"2026-11-05T23:31:07Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/bitpanda"},{"hostname":"bochkcom.vip","first_observed":"2026-11-05T23:31:07.000Z","first_published":"2026-11-05T23:31:07.000Z","brands":[{"id":"bank-of-china-hong-kong","name":"Bank of China (Hong Kong)","url":"https://domainspoof.com/brands/bank-of-china-hong-kong"}],"dns":"resolved","resolved":["104.21.19.248","172.67.190.135","2606:4700:3033::ac43:be87","2606:4700:3034::6815:13f8"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “bochk”, a name we match for Bank of China (Hong Kong), reported by PhishDestroy","first_observed":"2026-11-05T23:31:07.000Z","first_published":"2026-11-05T23:31:07.000Z","of":"bochk.com","spelling":"combo","match":"name","token":"bochk","found_by":"zone_file","listings":[{"kind":"reported","source":"phishdestroy","source_name":"PhishDestroy","host":"bochkcom.vip","flagged_at":"2026-11-05T23:31:07Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/bank-of-china-hong-kong"},{"hostname":"bok-financial.biz","first_observed":"2026-11-05T23:31:07.000Z","first_published":"2026-11-05T23:31:07.000Z","brands":[{"id":"bank-of-oklahoma","name":"Bank of Oklahoma","url":"https://domainspoof.com/brands/bank-of-oklahoma"}],"dns":"resolved","resolved":["66.96.149.32"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “bok-financial”, a name we match for Bank of Oklahoma, resolved to 66.96.149.32, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T23:31:07.000Z","first_published":"2026-11-05T23:31:07.000Z","of":"bankofoklahoma.com","spelling":"combo","match":"name","token":"bok-financial","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"66.96.149.32","flagged_at":"2026-11-05T23:31:07Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/bank-of-oklahoma"},{"hostname":"brimo-wolfsburg.online","first_observed":"2026-11-05T23:31:07.000Z","first_published":"2026-11-05T23:31:07.000Z","brands":[{"id":"bank-rakyat-indonesia","name":"Bank Rakyat Indonesia (BRI)","url":"https://domainspoof.com/brands/bank-rakyat-indonesia"}],"dns":"resolved","resolved":["89.31.143.90"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “brimo”, a name we match for Bank Rakyat Indonesia (BRI), resolved to 89.31.143.90, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T23:31:07.000Z","first_published":"2026-11-05T23:31:07.000Z","of":"bri.co.id","spelling":"combo","match":"name","token":"brimo","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"89.31.143.90","flagged_at":"2026-11-05T23:31:07Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/bank-rakyat-indonesia"},{"hostname":"bybit-auditor.one","first_observed":"2026-11-05T23:31:07.000Z","first_published":"2026-11-05T23:31:07.000Z","brands":[{"id":"bybit","name":"Bybit","url":"https://domainspoof.com/brands/bybit"}],"dns":"resolved","resolved":["172.86.94.61"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “bybit”, a name we match for Bybit, reported by PhishDestroy, and resolved to 172.86.94.61, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T23:31:07.000Z","first_published":"2026-11-05T23:31:07.000Z","of":"bybit.com","spelling":"combo","match":"name","token":"bybit","found_by":"zone_file","listings":[{"kind":"reported","source":"phishdestroy","source_name":"PhishDestroy","host":"bybit-auditor.one","flagged_at":"2026-11-05T23:31:07Z"},{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"172.86.94.61","flagged_at":"2026-11-05T23:31:07Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/bybit"},{"hostname":"bybit-clean.one","first_observed":"2026-11-05T23:31:07.000Z","first_published":"2026-11-05T23:31:07.000Z","brands":[{"id":"bybit","name":"Bybit","url":"https://domainspoof.com/brands/bybit"}],"dns":"resolved","resolved":["172.86.66.115"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “bybit”, a name we match for Bybit, resolved to 172.86.66.115, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T23:31:07.000Z","first_published":"2026-11-05T23:31:07.000Z","of":"bybit.com","spelling":"combo","match":"name","token":"bybit","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"172.86.66.115","flagged_at":"2026-11-05T23:31:07Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/bybit"},{"hostname":"bybit-pure.one","first_observed":"2026-11-05T23:31:07.000Z","first_published":"2026-11-05T23:31:07.000Z","brands":[{"id":"bybit","name":"Bybit","url":"https://domainspoof.com/brands/bybit"}],"dns":"resolved","resolved":["172.86.92.250"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “bybit”, a name we match for Bybit, reported by PhishDestroy, and resolved to 172.86.92.250, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T23:31:07.000Z","first_published":"2026-11-05T23:31:07.000Z","of":"bybit.com","spelling":"combo","match":"name","token":"bybit","found_by":"zone_file","listings":[{"kind":"reported","source":"phishdestroy","source_name":"PhishDestroy","host":"bybit-pure.one","flagged_at":"2026-11-05T23:31:07Z"},{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"172.86.92.250","flagged_at":"2026-11-05T23:31:07Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/bybit"},{"hostname":"bybit-scan.app","first_observed":"2026-11-05T23:31:07.000Z","first_published":"2026-11-05T23:31:07.000Z","brands":[{"id":"bybit","name":"Bybit","url":"https://domainspoof.com/brands/bybit"}],"dns":"resolved","resolved":["172.86.67.69"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “bybit”, a name we match for Bybit, resolved to 172.86.67.69, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T23:31:07.000Z","first_published":"2026-11-05T23:31:07.000Z","of":"bybit.com","spelling":"combo","match":"name","token":"bybit","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"172.86.67.69","flagged_at":"2026-11-05T23:31:07Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/bybit"},{"hostname":"bybit-x.one","first_observed":"2026-11-05T23:31:07.000Z","first_published":"2026-11-05T23:31:07.000Z","brands":[{"id":"bybit","name":"Bybit","url":"https://domainspoof.com/brands/bybit"}],"dns":"resolved","resolved":["172.86.66.115"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “bybit”, a name we match for Bybit, resolved to 172.86.66.115, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T23:31:07.000Z","first_published":"2026-11-05T23:31:07.000Z","of":"bybit.com","spelling":"combo","match":"name","token":"bybit","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"172.86.66.115","flagged_at":"2026-11-05T23:31:07Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/bybit"},{"hostname":"bybit.com.pl","first_observed":"2026-11-05T23:31:07.000Z","first_published":"2026-11-05T23:31:07.000Z","brands":[{"id":"bybit","name":"Bybit","url":"https://domainspoof.com/brands/bybit"}],"dns":"resolved","resolved":["185.253.212.22"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of bybit.com (same name, other ending), resolved to 185.253.212.22, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T23:31:07.000Z","first_published":"2026-11-05T23:31:07.000Z","of":"bybit.com","spelling":"tld","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"185.253.212.22","flagged_at":"2026-11-05T23:31:07Z"}]}],"url":"https://domainspoof.com/brands/bybit"},{"hostname":"bybit456.shop","first_observed":"2026-11-05T23:31:07.000Z","first_published":"2026-11-05T23:31:07.000Z","brands":[{"id":"bybit","name":"Bybit","url":"https://domainspoof.com/brands/bybit"}],"dns":"resolved","resolved":["43.168.34.115","43.168.34.203","43.174.171.101","43.175.182.74","101.33.21.122","101.33.21.144","101.33.21.239"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “bybit”, a name we match for Bybit, resolved to 101.33.21.122, where reported phishing was found in the 48 hours before, and resolved to 101.33.21.144, where reported phishing was found in the 48 hours before, and resolved to 101.33.21.239, where reported phishing was found in the 48 hours before, and resolved to 43.168.34.115, where reported phishing was found in the 48 hours before, and resolved to 43.168.34.203, where reported phishing was found in the 48 hours before, and resolved to 43.174.171.101, where reported phishing was found in the 48 hours before, and resolved to 43.175.182.74, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T23:31:07.000Z","first_published":"2026-11-05T23:31:07.000Z","of":"bybit.com","spelling":"combo","match":"name","token":"bybit","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"101.33.21.122","flagged_at":"2026-11-05T23:31:07Z"},{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"101.33.21.144","flagged_at":"2026-11-05T23:31:07Z"},{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"101.33.21.239","flagged_at":"2026-11-05T23:31:07Z"},{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"43.168.34.115","flagged_at":"2026-11-05T23:31:07Z"},{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"43.168.34.203","flagged_at":"2026-11-05T23:31:07Z"},{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"43.174.171.101","flagged_at":"2026-11-05T23:31:07Z"},{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"43.175.182.74","flagged_at":"2026-11-05T23:31:07Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/bybit"},{"hostname":"bybitglobal.club","first_observed":"2026-11-05T23:31:07.000Z","first_published":"2026-11-05T23:31:07.000Z","brands":[{"id":"bybit","name":"Bybit","url":"https://domainspoof.com/brands/bybit"}],"dns":"resolved","resolved":["180.76.76.76"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “bybit”, a name we match for Bybit, reported by PhishDestroy, and resolved to 180.76.76.76, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T23:31:07.000Z","first_published":"2026-11-05T23:31:07.000Z","of":"bybit.com","spelling":"combo","match":"name","token":"bybit","found_by":"zone_file","listings":[{"kind":"reported","source":"phishdestroy","source_name":"PhishDestroy","host":"bybitglobal.club","flagged_at":"2026-11-05T23:31:07Z"},{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"180.76.76.76","flagged_at":"2026-11-05T23:31:07Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/bybit"},{"hostname":"bybitpro.club","first_observed":"2026-11-05T23:31:07.000Z","first_published":"2026-11-05T23:31:07.000Z","brands":[{"id":"bybit","name":"Bybit","url":"https://domainspoof.com/brands/bybit"}],"dns":"resolved","resolved":["2.57.91.91"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “bybit”, a name we match for Bybit, resolved to 2.57.91.91, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T23:31:07.000Z","first_published":"2026-11-05T23:31:07.000Z","of":"bybit.com","spelling":"combo","match":"name","token":"bybit","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"2.57.91.91","flagged_at":"2026-11-05T23:31:07Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/bybit"},{"hostname":"bybitweb3.vip","first_observed":"2026-11-05T23:31:07.000Z","first_published":"2026-11-05T23:31:07.000Z","brands":[{"id":"bybit","name":"Bybit","url":"https://domainspoof.com/brands/bybit"}],"dns":"resolved","resolved":["104.21.82.37","172.67.152.168","2606:4700:3035::6815:5225","2606:4700:3037::ac43:98a8"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “bybit”, a name we match for Bybit, reported by PhishDestroy","first_observed":"2026-11-05T23:31:07.000Z","first_published":"2026-11-05T23:31:07.000Z","of":"bybit.com","spelling":"combo","match":"name","token":"bybit","found_by":"zone_file","listings":[{"kind":"reported","source":"phishdestroy","source_name":"PhishDestroy","host":"bybitweb3.vip","flagged_at":"2026-11-05T23:31:07Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/bybit"},{"hostname":"casterdex.online","first_observed":"2026-11-05T23:31:07.000Z","first_published":"2026-11-05T23:31:07.000Z","brands":[{"id":"aster-dex","name":"Aster DEX","url":"https://domainspoof.com/brands/aster-dex"}],"dns":"resolved","resolved":["2.59.170.20","104.219.250.37"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of asterdex.com (an added character), resolved to 2.59.170.20, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T23:31:07.000Z","first_published":"2026-11-05T23:31:07.000Z","of":"asterdex.com","spelling":"insertion","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"2.59.170.20","flagged_at":"2026-11-05T23:31:07Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/aster-dex"},{"hostname":"changelly-or.wiki","first_observed":"2026-11-05T23:31:07.000Z","first_published":"2026-11-05T23:31:07.000Z","brands":[{"id":"changelly","name":"Changelly","url":"https://domainspoof.com/brands/changelly"}],"dns":"resolved","resolved":["104.21.10.27","172.67.189.220","2606:4700:3030::6815:a1b","2606:4700:3031::ac43:bddc"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “changelly”, a name we match for Changelly, listed by MetaMask","first_observed":"2026-11-05T23:31:07.000Z","first_published":"2026-11-05T23:31:07.000Z","of":"changelly.com","spelling":"combo","match":"name","token":"changelly","found_by":"zone_file","listings":[{"kind":"reported","source":"metamask","source_name":"MetaMask","host":"changelly-or.wiki","flagged_at":"2026-11-05T23:31:07Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/changelly"},{"hostname":"changelly-orguude.courses","first_observed":"2026-11-05T23:31:07.000Z","first_published":"2026-11-05T23:31:07.000Z","brands":[{"id":"changelly","name":"Changelly","url":"https://domainspoof.com/brands/changelly"}],"dns":"resolved","resolved":["104.21.91.56","172.67.167.81","2606:4700:3035::6815:5b38","2606:4700:3037::ac43:a751"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “changelly”, a name we match for Changelly, listed by MetaMask","first_observed":"2026-11-05T23:31:07.000Z","first_published":"2026-11-05T23:31:07.000Z","of":"changelly.com","spelling":"combo","match":"name","token":"changelly","found_by":"zone_file","listings":[{"kind":"reported","source":"metamask","source_name":"MetaMask","host":"changelly-orguude.courses","flagged_at":"2026-11-05T23:31:07Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/changelly"},{"hostname":"changelly-orguudes.courses","first_observed":"2026-11-05T23:31:07.000Z","first_published":"2026-11-05T23:31:07.000Z","brands":[{"id":"changelly","name":"Changelly","url":"https://domainspoof.com/brands/changelly"}],"dns":"resolved","resolved":["104.21.43.38","172.67.218.222","2606:4700:3032::6815:2b26","2606:4700:3034::ac43:dade"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “changelly”, a name we match for Changelly, listed by MetaMask","first_observed":"2026-11-05T23:31:07.000Z","first_published":"2026-11-05T23:31:07.000Z","of":"changelly.com","spelling":"combo","match":"name","token":"changelly","found_by":"zone_file","listings":[{"kind":"reported","source":"metamask","source_name":"MetaMask","host":"changelly-orguudes.courses","flagged_at":"2026-11-05T23:31:07Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/changelly"},{"hostname":"colgate-alibaba.xyz","first_observed":"2026-11-05T23:31:07.000Z","first_published":"2026-11-05T23:31:07.000Z","brands":[{"id":"alibaba","name":"Alibaba","url":"https://domainspoof.com/brands/alibaba"}],"dns":"resolved","resolved":["135.181.41.169"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “alibaba”, a name we match for Alibaba, resolved to 135.181.41.169, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T23:31:07.000Z","first_published":"2026-11-05T23:31:07.000Z","of":"alibaba.com","spelling":"combo","match":"name","token":"alibaba","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"135.181.41.169","flagged_at":"2026-11-05T23:31:07Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/alibaba"},{"hostname":"dappbay-bnbchain.org","first_observed":"2026-11-05T23:31:07.000Z","first_published":"2026-11-05T23:31:07.000Z","brands":[{"id":"binance","name":"Binance","url":"https://domainspoof.com/brands/binance"}],"dns":"resolved","resolved":["77.247.179.83"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “bnbchain”, a name we match for Binance, resolved to 77.247.179.83, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T23:31:07.000Z","first_published":"2026-11-05T23:31:07.000Z","of":"binance.com","spelling":"combo","match":"name","token":"bnbchain","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"77.247.179.83","flagged_at":"2026-11-05T23:31:07Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/binance"},{"hostname":"dofusretro.org","first_observed":"2026-11-05T23:31:07.000Z","first_published":"2026-11-05T23:31:07.000Z","brands":[{"id":"ankama","name":"Ankama","url":"https://domainspoof.com/brands/ankama"}],"dns":"resolved","resolved":["208.115.249.236"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “dofusretro”, a name we match for Ankama, resolved to 208.115.249.236, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T23:31:07.000Z","first_published":"2026-11-05T23:31:07.000Z","of":"ankama.com","spelling":"combo","match":"name","token":"dofusretro","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"208.115.249.236","flagged_at":"2026-11-05T23:31:07Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/ankama"},{"hostname":"dossier-antai-gouv.info","first_observed":"2026-11-05T23:31:07.000Z","first_published":"2026-11-05T23:31:07.000Z","brands":[{"id":"antai","name":"ANTAI","url":"https://domainspoof.com/brands/antai"}],"dns":"resolved","resolved":["77.247.179.91"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “antai”, a name we match for ANTAI, resolved to 77.247.179.91, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T23:31:07.000Z","first_published":"2026-11-05T23:31:07.000Z","of":"antai.gouv.fr","spelling":"combo","match":"name","token":"antai","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"77.247.179.91","flagged_at":"2026-11-05T23:31:07Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/antai"},{"hostname":"e-binance.online","first_observed":"2026-11-05T23:31:07.000Z","first_published":"2026-11-05T23:31:07.000Z","brands":[{"id":"binance","name":"Binance","url":"https://domainspoof.com/brands/binance"}],"dns":"resolved","resolved":["2.57.91.91"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “binance”, a name we match for Binance, resolved to 2.57.91.91, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T23:31:07.000Z","first_published":"2026-11-05T23:31:07.000Z","of":"binance.com","spelling":"combo","match":"name","token":"binance","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"2.57.91.91","flagged_at":"2026-11-05T23:31:07Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/binance"},{"hostname":"europe-gambia-cashapp.store","first_observed":"2026-11-05T23:31:07.000Z","first_published":"2026-11-05T23:31:07.000Z","brands":[{"id":"cash-app","name":"Cash App","url":"https://domainspoof.com/brands/cash-app"}],"dns":"resolved","resolved":["89.31.143.90"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “cashapp”, a name we match for Cash App, resolved to 89.31.143.90, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T23:31:07.000Z","first_published":"2026-11-05T23:31:07.000Z","of":"cash.app","spelling":"combo","match":"name","token":"cashapp","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"89.31.143.90","flagged_at":"2026-11-05T23:31:07Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/cash-app"},{"hostname":"fastrakbayarea.org","first_observed":"2026-11-05T23:31:07.000Z","first_published":"2026-11-05T23:31:07.000Z","brands":[{"id":"fastrak","name":"FasTrak","url":"https://domainspoof.com/brands/fastrak"}],"dns":"resolved","resolved":["69.162.80.60"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “fastrak”, a name we match for FasTrak, resolved to 69.162.80.60, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T23:31:07.000Z","first_published":"2026-11-05T23:31:07.000Z","of":"bayareafastrak.org","spelling":"combo","match":"name","token":"fastrak","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"69.162.80.60","flagged_at":"2026-11-05T23:31:07Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/fastrak"},{"hostname":"find-my.pro","first_observed":"2026-11-05T23:31:07.000Z","first_published":"2026-11-05T23:31:07.000Z","brands":[{"id":"apple","name":"Apple","url":"https://domainspoof.com/brands/apple"}],"dns":"resolved","resolved":["65.75.210.169"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of apple.com (an added hyphen), resolved to 65.75.210.169, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T23:31:07.000Z","first_published":"2026-11-05T23:31:07.000Z","of":"apple.com","spelling":"hyphen","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"65.75.210.169","flagged_at":"2026-11-05T23:31:07Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/apple"},{"hostname":"freeiphone14.org","first_observed":"2026-11-05T23:31:07.000Z","first_published":"2026-11-05T23:31:07.000Z","brands":[{"id":"apple","name":"Apple","url":"https://domainspoof.com/brands/apple"}],"dns":"resolved","resolved":["5.79.75.212"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “iphone”, a name we match for Apple, resolved to 5.79.75.212, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T23:31:07.000Z","first_published":"2026-11-05T23:31:07.000Z","of":"apple.com","spelling":"combo","match":"name","token":"iphone","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"5.79.75.212","flagged_at":"2026-11-05T23:31:07Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/apple"},{"hostname":"iphone-15.pro","first_observed":"2026-11-05T23:31:07.000Z","first_published":"2026-11-05T23:31:07.000Z","brands":[{"id":"apple","name":"Apple","url":"https://domainspoof.com/brands/apple"}],"dns":"resolved","resolved":["212.92.105.22"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “iphone”, a name we match for Apple, resolved to 212.92.105.22, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T23:31:07.000Z","first_published":"2026-11-05T23:31:07.000Z","of":"apple.com","spelling":"combo","match":"name","token":"iphone","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"212.92.105.22","flagged_at":"2026-11-05T23:31:07Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/apple"},{"hostname":"iphone-elite.org","first_observed":"2026-11-05T23:31:07.000Z","first_published":"2026-11-05T23:31:07.000Z","brands":[{"id":"apple","name":"Apple","url":"https://domainspoof.com/brands/apple"}],"dns":"resolved","resolved":["216.245.197.45"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “iphone”, a name we match for Apple, resolved to 216.245.197.45, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T23:31:07.000Z","first_published":"2026-11-05T23:31:07.000Z","of":"apple.com","spelling":"combo","match":"name","token":"iphone","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"216.245.197.45","flagged_at":"2026-11-05T23:31:07Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/apple"},{"hostname":"iphone-emulator.org","first_observed":"2026-11-05T23:31:07.000Z","first_published":"2026-11-05T23:31:07.000Z","brands":[{"id":"apple","name":"Apple","url":"https://domainspoof.com/brands/apple"}],"dns":"resolved","resolved":["74.63.219.254"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “iphone”, a name we match for Apple, resolved to 74.63.219.254, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T23:31:07.000Z","first_published":"2026-11-05T23:31:07.000Z","of":"apple.com","spelling":"combo","match":"name","token":"iphone","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"74.63.219.254","flagged_at":"2026-11-05T23:31:07Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/apple"},{"hostname":"iphone-shinosaka.biz","first_observed":"2026-11-05T23:31:07.000Z","first_published":"2026-11-05T23:31:07.000Z","brands":[{"id":"apple","name":"Apple","url":"https://domainspoof.com/brands/apple"}],"dns":"resolved","resolved":["37.48.77.83"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “iphone”, a name we match for Apple, resolved to 37.48.77.83, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T23:31:07.000Z","first_published":"2026-11-05T23:31:07.000Z","of":"apple.com","spelling":"combo","match":"name","token":"iphone","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"37.48.77.83","flagged_at":"2026-11-05T23:31:07Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/apple"},{"hostname":"iphone18app.vip","first_observed":"2026-11-05T23:31:07.000Z","first_published":"2026-11-05T23:31:07.000Z","brands":[{"id":"apple","name":"Apple","url":"https://domainspoof.com/brands/apple"}],"dns":"resolved","resolved":["172.232.24.161","172.232.24.235","172.234.25.42"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “iphone”, a name we match for Apple, resolved to 172.232.24.161, where reported phishing was found in the 48 hours before, and resolved to 172.232.24.235, where reported phishing was found in the 48 hours before, and resolved to 172.234.25.42, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T23:31:07.000Z","first_published":"2026-11-05T23:31:07.000Z","of":"apple.com","spelling":"combo","match":"name","token":"iphone","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"172.232.24.161","flagged_at":"2026-11-05T23:31:07Z"},{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"172.232.24.235","flagged_at":"2026-11-05T23:31:07Z"},{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"172.234.25.42","flagged_at":"2026-11-05T23:31:07Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/apple"},{"hostname":"iphonehub.club","first_observed":"2026-11-05T23:31:07.000Z","first_published":"2026-11-05T23:31:07.000Z","brands":[{"id":"apple","name":"Apple","url":"https://domainspoof.com/brands/apple"}],"dns":"resolved","resolved":["2.59.170.20","104.219.250.37"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “iphone”, a name we match for Apple, resolved to 2.59.170.20, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T23:31:07.000Z","first_published":"2026-11-05T23:31:07.000Z","of":"apple.com","spelling":"combo","match":"name","token":"iphone","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"2.59.170.20","flagged_at":"2026-11-05T23:31:07Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/apple"},{"hostname":"itunes-apple-jp.xyz","first_observed":"2026-11-05T23:31:07.000Z","first_published":"2026-11-05T23:31:07.000Z","brands":[{"id":"apple","name":"Apple","url":"https://domainspoof.com/brands/apple"}],"dns":"resolved","resolved":["212.92.104.123"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “itunes”, a name we match for Apple, resolved to 212.92.104.123, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T23:31:07.000Z","first_published":"2026-11-05T23:31:07.000Z","of":"apple.com","spelling":"combo","match":"name","token":"itunes","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"212.92.104.123","flagged_at":"2026-11-05T23:31:07Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/apple"},{"hostname":"mart-amazon.shop","first_observed":"2026-11-05T23:31:07.000Z","first_published":"2026-11-05T23:31:07.000Z","brands":[{"id":"amazon","name":"Amazon","url":"https://domainspoof.com/brands/amazon"}],"dns":"resolved","resolved":["23.153.104.119"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “amazon”, a name we match for Amazon, resolved to 23.153.104.119, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T23:31:07.000Z","first_published":"2026-11-05T23:31:07.000Z","of":"amazon.com","spelling":"combo","match":"name","token":"amazon","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"23.153.104.119","flagged_at":"2026-11-05T23:31:07Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/amazon"},{"hostname":"mybestbuyshop.site","first_observed":"2026-11-05T23:31:07.000Z","first_published":"2026-11-05T23:31:07.000Z","brands":[{"id":"best-buy","name":"Best Buy","url":"https://domainspoof.com/brands/best-buy"}],"dns":"resolved","resolved":["2.57.91.91"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “bestbuy”, a name we match for Best Buy, resolved to 2.57.91.91, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T23:31:07.000Z","first_published":"2026-11-05T23:31:07.000Z","of":"bestbuy.com","spelling":"combo","match":"name","token":"bestbuy","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"2.57.91.91","flagged_at":"2026-11-05T23:31:07Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/best-buy"},{"hostname":"national-bank.ruhr","first_observed":"2026-11-05T23:31:07.000Z","first_published":"2026-11-05T23:31:07.000Z","brands":[{"id":"national-bank-of-canada","name":"National Bank of Canada","url":"https://domainspoof.com/brands/national-bank-of-canada"}],"dns":"resolved","resolved":["89.31.143.90"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “national-bank”, a name we match for National Bank of Canada, resolved to 89.31.143.90, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T23:31:07.000Z","first_published":"2026-11-05T23:31:07.000Z","of":"banquenationale.com","spelling":"combo","match":"name","token":"national-bank","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"89.31.143.90","flagged_at":"2026-11-05T23:31:07Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/national-bank-of-canada"},{"hostname":"renouvellement-client-ameli.life","first_observed":"2026-11-05T23:31:07.000Z","first_published":"2026-11-05T23:31:07.000Z","brands":[{"id":"ameli","name":"ameli","url":"https://domainspoof.com/brands/ameli"}],"dns":"resolved","resolved":["23.82.16.54"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “ameli”, a name we match for ameli, resolved to 23.82.16.54, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T23:31:07.000Z","first_published":"2026-11-05T23:31:07.000Z","of":"ameli.fr","spelling":"combo","match":"name","token":"ameli","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"23.82.16.54","flagged_at":"2026-11-05T23:31:07Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/ameli"},{"hostname":"tmall17856.vip","first_observed":"2026-11-05T23:31:07.000Z","first_published":"2026-11-05T23:31:07.000Z","brands":[{"id":"alibaba","name":"Alibaba","url":"https://domainspoof.com/brands/alibaba"}],"dns":"resolved","resolved":["104.21.62.254","172.67.168.241","2606:4700:3030::6815:3efe","2606:4700:3035::ac43:a8f1"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “tmall”, a name we match for Alibaba, listed by NPA 165 (e-commerce)","first_observed":"2026-11-05T23:31:07.000Z","first_published":"2026-11-05T23:31:07.000Z","of":"alibaba.com","spelling":"combo","match":"name","token":"tmall","found_by":"zone_file","listings":[{"kind":"reported","source":"npa","source_name":"NPA 165","host":"tmall17856.vip","claim":{"category":"e-commerce"},"flagged_at":"2026-11-05T23:31:07Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/alibaba"},{"hostname":"tmall20025.vip","first_observed":"2026-11-05T23:31:07.000Z","first_published":"2026-11-05T23:31:07.000Z","brands":[{"id":"alibaba","name":"Alibaba","url":"https://domainspoof.com/brands/alibaba"}],"dns":"no_address","resolved":[],"findings":[{"kind":"lookalike","summary":"Registered domain containing “tmall”, a name we match for Alibaba, listed by NPA 165 (e-commerce)","first_observed":"2026-11-05T23:31:07.000Z","first_published":"2026-11-05T23:31:07.000Z","of":"alibaba.com","spelling":"combo","match":"name","token":"tmall","found_by":"zone_file","listings":[{"kind":"reported","source":"npa","source_name":"NPA 165","host":"tmall20025.vip","claim":{"category":"e-commerce"},"flagged_at":"2026-11-05T23:31:07Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/alibaba"},{"hostname":"tmall26587.vip","first_observed":"2026-11-05T23:31:07.000Z","first_published":"2026-11-05T23:31:07.000Z","brands":[{"id":"alibaba","name":"Alibaba","url":"https://domainspoof.com/brands/alibaba"}],"dns":"resolved","resolved":["104.21.18.226","172.67.183.219","2606:4700:3034::6815:12e2","2606:4700:3037::ac43:b7db"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “tmall”, a name we match for Alibaba, listed by NPA 165 (e-commerce)","first_observed":"2026-11-05T23:31:07.000Z","first_published":"2026-11-05T23:31:07.000Z","of":"alibaba.com","spelling":"combo","match":"name","token":"tmall","found_by":"zone_file","listings":[{"kind":"reported","source":"npa","source_name":"NPA 165","host":"tmall26587.vip","claim":{"category":"e-commerce"},"flagged_at":"2026-11-05T23:31:07Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/alibaba"},{"hostname":"tmall46783.vip","first_observed":"2026-11-05T23:31:07.000Z","first_published":"2026-11-05T23:31:07.000Z","brands":[{"id":"alibaba","name":"Alibaba","url":"https://domainspoof.com/brands/alibaba"}],"dns":"no_address","resolved":[],"findings":[{"kind":"lookalike","summary":"Registered domain containing “tmall”, a name we match for Alibaba, listed by NPA 165 (finance and insurance)","first_observed":"2026-11-05T23:31:07.000Z","first_published":"2026-11-05T23:31:07.000Z","of":"alibaba.com","spelling":"combo","match":"name","token":"tmall","found_by":"zone_file","listings":[{"kind":"reported","source":"npa","source_name":"NPA 165","host":"tmall46783.vip","claim":{"category":"finance and insurance"},"flagged_at":"2026-11-05T23:31:07Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/alibaba"},{"hostname":"tmall96733.vip","first_observed":"2026-11-05T23:31:07.000Z","first_published":"2026-11-05T23:31:07.000Z","brands":[{"id":"alibaba","name":"Alibaba","url":"https://domainspoof.com/brands/alibaba"}],"dns":"resolved","resolved":["104.21.93.46","172.67.204.107","2606:4700:3033::6815:5d2e","2606:4700:3036::ac43:cc6b"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “tmall”, a name we match for Alibaba, listed by NPA 165 (e-commerce)","first_observed":"2026-11-05T23:31:07.000Z","first_published":"2026-11-05T23:31:07.000Z","of":"alibaba.com","spelling":"combo","match":"name","token":"tmall","found_by":"zone_file","listings":[{"kind":"reported","source":"npa","source_name":"NPA 165","host":"tmall96733.vip","claim":{"category":"e-commerce"},"flagged_at":"2026-11-05T23:31:07Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/alibaba"},{"hostname":"wallet-binance.fun","first_observed":"2026-11-05T23:31:07.000Z","first_published":"2026-11-05T23:31:07.000Z","brands":[{"id":"binance","name":"Binance","url":"https://domainspoof.com/brands/binance"}],"dns":"resolved","resolved":["159.203.143.218","2604:a880:800:14:0:1:225d:c000"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “binance”, a name we match for Binance, reported by PhishDestroy","first_observed":"2026-11-05T23:31:07.000Z","first_published":"2026-11-05T23:31:07.000Z","of":"binance.com","spelling":"combo","match":"name","token":"binance","found_by":"zone_file","listings":[{"kind":"reported","source":"phishdestroy","source_name":"PhishDestroy","host":"wallet-binance.fun","flagged_at":"2026-11-05T23:31:07Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/binance"},{"hostname":"web3-bitget.one","first_observed":"2026-11-05T23:31:07.000Z","first_published":"2026-11-05T23:31:07.000Z","brands":[{"id":"bitget","name":"Bitget","url":"https://domainspoof.com/brands/bitget"}],"dns":"unknown","resolved":[],"findings":[{"kind":"lookalike","summary":"Registered domain containing “bitget”, a name we match for Bitget, listed by MetaMask","first_observed":"2026-11-05T23:31:07.000Z","first_published":"2026-11-05T23:31:07.000Z","of":"bitget.com","spelling":"combo","match":"name","token":"bitget","found_by":"zone_file","listings":[{"kind":"reported","source":"metamask","source_name":"MetaMask","host":"web3-bitget.one","flagged_at":"2026-11-05T23:31:07Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/bitget"},{"hostname":"x8-binance.vip","first_observed":"2026-11-05T23:31:07.000Z","first_published":"2026-11-05T23:31:07.000Z","brands":[{"id":"binance","name":"Binance","url":"https://domainspoof.com/brands/binance"}],"dns":"resolved","resolved":["118.139.164.57"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “binance”, a name we match for Binance, reported by PhishDestroy, and reported by PhishTank, and resolved to 118.139.164.57, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T23:31:07.000Z","first_published":"2026-11-05T23:31:07.000Z","of":"binance.com","spelling":"combo","match":"name","token":"binance","found_by":"zone_file","listings":[{"kind":"reported","source":"phishdestroy","source_name":"PhishDestroy","host":"wap.x8-binance.vip","flagged_at":"2026-11-05T23:31:07Z"},{"kind":"reported","source":"phishtank","source_name":"PhishTank","host":"wap.x8-binance.vip","flagged_at":"2026-11-05T23:31:07Z"},{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"118.139.164.57","flagged_at":"2026-11-05T23:31:07Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/binance"},{"hostname":"z00m.us","first_observed":"2026-11-05T23:31:07.000Z","first_published":"2026-11-05T23:31:07.000Z","brands":[{"id":"zoom","name":"Zoom","url":"https://domainspoof.com/brands/zoom"}],"dns":"resolved","resolved":["212.92.105.23"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of zoom.us (similar-looking characters), resolved to 212.92.105.23, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T23:31:07.000Z","first_published":"2026-11-05T23:31:07.000Z","of":"zoom.us","spelling":"homoglyph","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"212.92.105.23","flagged_at":"2026-11-05T23:31:07Z"}]}],"url":"https://domainspoof.com/brands/zoom"},{"hostname":"zellepy.com","first_observed":"2026-11-05T23:31:07.000Z","first_published":"2026-11-05T23:31:07.000Z","brands":[{"id":"zelle","name":"Zelle","url":"https://domainspoof.com/brands/zelle"}],"dns":"resolved","resolved":["45.82.67.195"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of zellepay.com (a dropped letter), resolved to 45.82.67.195, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T23:31:07.000Z","first_published":"2026-11-05T23:31:07.000Z","of":"zellepay.com","spelling":"omission","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"45.82.67.195","flagged_at":"2026-11-05T23:31:07Z"}]}],"url":"https://domainspoof.com/brands/zelle"},{"hostname":"zohmail.com","first_observed":"2026-11-05T23:31:07.000Z","first_published":"2026-11-05T23:31:07.000Z","brands":[{"id":"zoho","name":"Zoho","url":"https://domainspoof.com/brands/zoho"}],"dns":"resolved","resolved":["77.247.182.243"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of zohomail.com (a dropped letter), resolved to 77.247.182.243, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T23:31:07.000Z","first_published":"2026-11-05T23:31:07.000Z","of":"zohomail.com","spelling":"omission","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"77.247.182.243","flagged_at":"2026-11-05T23:31:07Z"}]}],"url":"https://domainspoof.com/brands/zoho"},{"hostname":"zomgov.com","first_observed":"2026-11-05T23:31:07.000Z","first_published":"2026-11-05T23:31:07.000Z","brands":[{"id":"zoom","name":"Zoom","url":"https://domainspoof.com/brands/zoom"}],"dns":"resolved","resolved":["77.247.182.247"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of zoomgov.com (a dropped letter), resolved to 77.247.182.247, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T23:31:07.000Z","first_published":"2026-11-05T23:31:07.000Z","of":"zoomgov.com","spelling":"omission","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"77.247.182.247","flagged_at":"2026-11-05T23:31:07Z"}]}],"url":"https://domainspoof.com/brands/zoom"},{"hostname":"4ffcb6c7.cargo-system.hmcargollc.com","first_observed":"2026-11-05T23:21:02.044Z","first_published":"2026-11-05T23:28:50.005Z","brands":[],"dns":"resolved","resolved":["194.38.21.168"],"resolved_at":"2026-11-05T23:21:31Z","dns_checked_at":"2026-11-05T23:39:52.000Z","dns_since":"2026-11-05T23:39:52.000Z","findings":[{"id":"fi6263iw6kwxvty5awiwg","kind":"reported_domain","summary":"Under hmcargollc.com, reported by PhishDestroy","first_observed":"2026-11-05T23:21:02.044Z","first_published":"2026-11-05T23:28:50.005Z","source":"phishdestroy","source_name":"PhishDestroy","under":"hmcargollc.com","source_url":"https://phishdestroy.io/domain/hmcargollc.com/"}],"url":"https://domainspoof.com/live?show=all&q=4ffcb6c7.cargo-system.hmcargollc.com"},{"hostname":"5ow-ni51h-gjk8g9-b2hfv-qkusw6.pages.dev","first_observed":"2026-11-05T23:21:02.044Z","first_published":"2026-11-05T23:28:50.005Z","brands":[],"dns":"resolved","resolved":["172.66.44.165","172.66.47.91"],"resolved_at":"2026-11-06T03:26:20Z","dns_checked_at":"2026-11-05T23:39:52.000Z","dns_since":"2026-11-05T23:39:52.000Z","findings":[{"id":"fcoewa2cloew5p42zkwn5","kind":"reported_domain","summary":"Reported by PhishTank","first_observed":"2026-11-05T23:21:02.044Z","first_published":"2026-11-05T23:28:50.005Z","source":"phishtank","source_name":"PhishTank","source_url":"https://phishtank.org/phish_detail.php?phish_id=9479270"}],"url":"https://domainspoof.com/live?show=all&q=5ow-ni51h-gjk8g9-b2hfv-qkusw6.pages.dev"},{"hostname":"6cb8937f.cargo-system.hmcargollc.com","first_observed":"2026-11-05T23:21:02.044Z","first_published":"2026-11-05T23:28:50.005Z","brands":[],"dns":"resolved","resolved":["194.38.21.109"],"resolved_at":"2026-11-05T23:21:31Z","dns_checked_at":"2026-11-05T23:39:52.000Z","dns_since":"2026-11-05T23:39:52.000Z","findings":[{"id":"fmnm4jlavogn6fflthxlj","kind":"reported_domain","summary":"Under hmcargollc.com, reported by PhishDestroy","first_observed":"2026-11-05T23:21:02.044Z","first_published":"2026-11-05T23:28:50.005Z","source":"phishdestroy","source_name":"PhishDestroy","under":"hmcargollc.com","source_url":"https://phishdestroy.io/domain/hmcargollc.com/"}],"url":"https://domainspoof.com/live?show=all&q=6cb8937f.cargo-system.hmcargollc.com"},{"hostname":"8623c579.cargo-system.hmcargollc.com","first_observed":"2026-11-05T23:21:02.044Z","first_published":"2026-11-05T23:28:50.005Z","brands":[],"dns":"resolved","resolved":["194.38.21.106"],"resolved_at":"2026-11-05T23:21:31Z","dns_checked_at":"2026-11-05T23:39:52.000Z","dns_since":"2026-11-05T23:39:52.000Z","findings":[{"id":"foey53g6r6ssrvgdctxey","kind":"reported_domain","summary":"Under hmcargollc.com, reported by PhishDestroy","first_observed":"2026-11-05T23:21:02.044Z","first_published":"2026-11-05T23:28:50.005Z","source":"phishdestroy","source_name":"PhishDestroy","under":"hmcargollc.com","source_url":"https://phishdestroy.io/domain/hmcargollc.com/"}],"url":"https://domainspoof.com/live?show=all&q=8623c579.cargo-system.hmcargollc.com"},{"hostname":"906c2940.cargo-system.hmcargollc.com","first_observed":"2026-11-05T23:21:02.044Z","first_published":"2026-11-05T23:28:50.005Z","brands":[],"dns":"resolved","resolved":["194.38.21.171"],"resolved_at":"2026-11-05T23:21:31Z","dns_checked_at":"2026-11-05T23:39:52.000Z","dns_since":"2026-11-05T23:39:52.000Z","findings":[{"id":"fp4imj6diszzavcrriysr","kind":"reported_domain","summary":"Under hmcargollc.com, reported by PhishDestroy","first_observed":"2026-11-05T23:21:02.044Z","first_published":"2026-11-05T23:28:50.005Z","source":"phishdestroy","source_name":"PhishDestroy","under":"hmcargollc.com","source_url":"https://phishdestroy.io/domain/hmcargollc.com/"}],"url":"https://domainspoof.com/live?show=all&q=906c2940.cargo-system.hmcargollc.com"},{"hostname":"a906b5cb.cargo-system.hmcargollc.com","first_observed":"2026-11-05T23:21:02.044Z","first_published":"2026-11-05T23:28:50.005Z","brands":[],"dns":"resolved","resolved":["194.38.21.113"],"resolved_at":"2026-11-05T23:21:32Z","dns_checked_at":"2026-11-05T23:39:52.000Z","dns_since":"2026-11-05T23:39:52.000Z","findings":[{"id":"ffbogq2cnoy5cciqmpw4z","kind":"reported_domain","summary":"Under hmcargollc.com, reported by PhishDestroy","first_observed":"2026-11-05T23:21:02.044Z","first_published":"2026-11-05T23:28:50.005Z","source":"phishdestroy","source_name":"PhishDestroy","under":"hmcargollc.com","source_url":"https://phishdestroy.io/domain/hmcargollc.com/"}],"url":"https://domainspoof.com/live?show=all&q=a906b5cb.cargo-system.hmcargollc.com"},{"hostname":"ad8cc690.cargo-system.hmcargollc.com","first_observed":"2026-11-05T23:21:02.044Z","first_published":"2026-11-05T23:28:50.005Z","brands":[],"dns":"resolved","resolved":["194.38.21.169"],"resolved_at":"2026-11-05T23:27:57Z","dns_checked_at":"2026-11-05T23:39:52.000Z","dns_since":"2026-11-05T23:39:52.000Z","findings":[{"id":"fm5jw7uznmlxs3msyryau","kind":"reported_domain","summary":"Under hmcargollc.com, reported by PhishDestroy","first_observed":"2026-11-05T23:21:02.044Z","first_published":"2026-11-05T23:28:50.005Z","source":"phishdestroy","source_name":"PhishDestroy","under":"hmcargollc.com","source_url":"https://phishdestroy.io/domain/hmcargollc.com/"}],"url":"https://domainspoof.com/live?show=all&q=ad8cc690.cargo-system.hmcargollc.com"},{"hostname":"aeroxyz-upgrade.com","first_observed":"2026-11-05T22:31:01.947Z","first_published":"2026-11-05T23:28:50.005Z","brands":[],"dns":"resolved","resolved":["104.21.81.199","172.67.146.64"],"resolved_at":"2026-11-05T22:31:35Z","dns_checked_at":"2026-11-05T23:39:52.000Z","dns_since":"2026-11-05T23:39:52.000Z","findings":[{"id":"fx5s6sly4fdairc3vjvbb","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T22:31:01.947Z","first_published":"2026-11-05T23:28:50.005Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/aeroxyz-upgrade.com/"}],"url":"https://domainspoof.com/live?show=all&q=aeroxyz-upgrade.com"},{"hostname":"agric-growth.ltd","first_observed":"2026-11-05T22:26:11.932Z","first_published":"2026-11-05T23:28:50.005Z","brands":[],"dns":"resolved","resolved":["104.21.40.198","172.67.188.72"],"resolved_at":"2026-11-05T22:26:33Z","dns_checked_at":"2026-11-05T23:39:52.000Z","dns_since":"2026-11-05T23:39:52.000Z","findings":[{"id":"fznrixbbfihvgjm5pqj2d","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T22:26:11.932Z","first_published":"2026-11-05T23:28:50.005Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/agric-growth.ltd/"}],"url":"https://domainspoof.com/live?show=all&q=agric-growth.ltd"},{"hostname":"api.nwealth-app-solution-com.financecryptoworld.com","first_observed":"2026-11-05T22:31:01.947Z","first_published":"2026-11-05T23:28:50.005Z","brands":[],"dns":"resolved","resolved":["104.21.10.130","172.67.131.121"],"resolved_at":"2026-11-05T22:31:35Z","dns_checked_at":"2026-11-05T23:39:52.000Z","dns_since":"2026-11-05T23:39:52.000Z","findings":[{"id":"fsbh2krwamo3ghfpcbpfp","kind":"reported_domain","summary":"Under financecryptoworld.com, listed by CERT Polska","first_observed":"2026-11-05T22:31:01.947Z","first_published":"2026-11-05T23:28:50.005Z","source":"cert_polska","source_name":"CERT Polska","under":"financecryptoworld.com"}],"url":"https://domainspoof.com/live?show=all&q=api.nwealth-app-solution-com.financecryptoworld.com"},{"hostname":"api.switch-hiprex400soft-com.financecryptoworld.com","first_observed":"2026-11-05T22:26:11.932Z","first_published":"2026-11-05T23:28:50.005Z","brands":[],"dns":"resolved","resolved":["104.21.10.130","172.67.131.121"],"resolved_at":"2026-11-05T22:26:33Z","dns_checked_at":"2026-11-05T23:39:52.000Z","dns_since":"2026-11-05T23:39:52.000Z","findings":[{"id":"fyvpjme343spjwhpzmqpe","kind":"reported_domain","summary":"Under financecryptoworld.com, listed by CERT Polska","first_observed":"2026-11-05T22:26:11.932Z","first_published":"2026-11-05T23:28:50.005Z","source":"cert_polska","source_name":"CERT Polska","under":"financecryptoworld.com"}],"url":"https://domainspoof.com/live?show=all&q=api.switch-hiprex400soft-com.financecryptoworld.com"},{"hostname":"app-hash256.org","first_observed":"2026-11-05T23:16:08.129Z","first_published":"2026-11-05T23:28:50.005Z","brands":[],"dns":"resolved","resolved":["104.21.49.227","172.67.153.3"],"resolved_at":"2026-11-06T00:26:21Z","dns_checked_at":"2026-11-05T23:39:52.000Z","dns_since":"2026-11-05T23:39:52.000Z","findings":[{"id":"f5gaffcwm5p62xvtz7flr","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T23:16:08.129Z","first_published":"2026-11-05T23:28:50.005Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=app-hash256.org"},{"hostname":"appcleoajcoe.com","first_observed":"2026-11-05T22:36:06.370Z","first_published":"2026-11-05T23:28:50.005Z","brands":[],"dns":"resolved","resolved":["104.21.7.212","172.67.188.9"],"resolved_at":"2026-11-05T22:40:26Z","dns_checked_at":"2026-11-05T23:39:52.000Z","dns_since":"2026-11-05T23:39:52.000Z","findings":[{"id":"fh7bi6q3ob6v6znpi7v7u","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T22:36:06.370Z","first_published":"2026-11-05T23:28:50.005Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/appcleoajcoe.com/"}],"url":"https://domainspoof.com/live?show=all&q=appcleoajcoe.com"},{"hostname":"application-ledger.network","first_observed":"2026-11-05T22:36:06.370Z","first_published":"2026-11-05T23:28:50.005Z","brands":[],"dns":"resolved","resolved":["148.163.126.67"],"resolved_at":"2026-11-05T22:40:26Z","dns_checked_at":"2026-11-05T23:39:52.000Z","dns_since":"2026-11-05T23:39:52.000Z","findings":[{"id":"fz4bjrau3reza7jvvhevh","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T22:36:06.370Z","first_published":"2026-11-05T23:28:50.005Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=application-ledger.network"},{"hostname":"arcona.stage.io-ext.se","first_observed":"2026-11-05T22:46:33.970Z","first_published":"2026-11-05T23:28:50.005Z","brands":[],"dns":"resolved","resolved":["188.208.37.128"],"resolved_at":"2026-11-05T22:47:02Z","dns_checked_at":"2026-11-05T23:39:52.000Z","dns_since":"2026-11-05T23:39:52.000Z","findings":[{"id":"fpo6apy6laplgfqz3vqok","kind":"reported_domain","summary":"Under io-ext.se, listed by MetaMask","first_observed":"2026-11-05T22:46:33.970Z","first_published":"2026-11-05T23:28:50.005Z","source":"metamask","source_name":"MetaMask","under":"io-ext.se"}],"url":"https://domainspoof.com/live?show=all&q=arcona.stage.io-ext.se"},{"hostname":"assets.mantra.finance","first_observed":"2026-11-05T22:41:04.757Z","first_published":"2026-11-05T23:28:50.005Z","brands":[],"dns":"resolved","resolved":["104.18.6.193","104.18.7.193"],"resolved_at":"2026-11-06T00:10:36Z","dns_checked_at":"2026-11-05T23:39:52.000Z","dns_since":"2026-11-05T23:39:52.000Z","findings":[{"id":"fclvxhlw6f4twritc3psk","kind":"reported_domain","summary":"Under mantra.finance, reported by PhishDestroy","first_observed":"2026-11-05T22:41:04.757Z","first_published":"2026-11-05T23:28:50.005Z","source":"phishdestroy","source_name":"PhishDestroy","under":"mantra.finance","source_url":"https://phishdestroy.io/domain/mantra.finance/"}],"url":"https://domainspoof.com/live?show=all&q=assets.mantra.finance"},{"hostname":"atfounder.com","first_observed":"2026-11-05T22:36:06.370Z","first_published":"2026-11-05T23:28:50.005Z","brands":[],"dns":"resolved","resolved":["104.21.12.199","172.67.153.56"],"resolved_at":"2026-11-06T00:10:36Z","dns_checked_at":"2026-11-05T23:39:52.000Z","dns_since":"2026-11-05T23:39:52.000Z","findings":[{"id":"f33s3ymen2km2d7uuvpn2","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T22:36:06.370Z","first_published":"2026-11-05T23:28:50.005Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=atfounder.com"},{"hostname":"aurisos-asset.live","first_observed":"2026-11-05T23:00:48.504Z","first_published":"2026-11-05T23:28:50.005Z","brands":[],"dns":"resolved","resolved":["104.21.18.193","172.67.183.74"],"resolved_at":"2026-11-06T00:12:39Z","dns_checked_at":"2026-11-05T23:39:52.000Z","dns_since":"2026-11-05T23:39:52.000Z","findings":[{"id":"fabnfeannvqttym3enbto","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T23:00:48.504Z","first_published":"2026-11-05T23:28:50.005Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=aurisos-asset.live"},{"hostname":"autoconfig.globalstarks.com","first_observed":"2026-11-05T23:05:39.527Z","first_published":"2026-11-05T23:28:50.005Z","brands":[],"dns":"resolved","resolved":["104.21.61.191","172.67.213.16"],"resolved_at":"2026-11-05T23:06:09Z","dns_checked_at":"2026-11-05T23:39:52.000Z","dns_since":"2026-11-05T23:39:52.000Z","findings":[{"id":"fbhjjzc23jnzg23nit2xf","kind":"reported_domain","summary":"Under globalstarks.com, reported by PhishDestroy","first_observed":"2026-11-05T23:05:39.527Z","first_published":"2026-11-05T23:28:50.005Z","source":"phishdestroy","source_name":"PhishDestroy","under":"globalstarks.com","source_url":"https://phishdestroy.io/domain/globalstarks.com/"}],"url":"https://domainspoof.com/live?show=all&q=autoconfig.globalstarks.com"},{"hostname":"autoconfig.toyota12.digital","first_observed":"2026-11-05T22:38:18.648Z","first_published":"2026-11-05T23:28:50.005Z","brands":[{"id":"toyota","name":"Toyota","url":"https://domainspoof.com/brands/toyota"}],"dns":"resolved","resolved":["151.246.1.103"],"resolved_at":"2026-11-05T23:39:52Z","dns_checked_at":"2026-11-05T23:39:52.000Z","dns_since":"2026-11-05T23:39:52.000Z","findings":[{"id":"fdn3mx464cuxlerr3d6cl","kind":"phishing_infrastructure","summary":"Resolved to 151.246.1.103, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T22:38:18.648Z","first_published":"2026-11-05T23:28:50.005Z","address":"151.246.1.103","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/toyota"},{"hostname":"autoconfig.toyota33.digital","first_observed":"2026-11-05T22:38:18.659Z","first_published":"2026-11-05T23:28:50.005Z","brands":[{"id":"toyota","name":"Toyota","url":"https://domainspoof.com/brands/toyota"}],"dns":"resolved","resolved":["151.246.1.103"],"resolved_at":"2026-11-05T23:39:52Z","dns_checked_at":"2026-11-05T23:39:52.000Z","dns_since":"2026-11-05T23:39:52.000Z","findings":[{"id":"f3qslyeqpomlyfjgxqwmh","kind":"phishing_infrastructure","summary":"Resolved to 151.246.1.103, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T22:38:18.659Z","first_published":"2026-11-05T23:28:50.005Z","address":"151.246.1.103","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/toyota"},{"hostname":"autoconfig.toyota55.digital","first_observed":"2026-11-05T22:38:18.668Z","first_published":"2026-11-05T23:28:50.005Z","brands":[{"id":"toyota","name":"Toyota","url":"https://domainspoof.com/brands/toyota"}],"dns":"resolved","resolved":["151.246.1.103"],"resolved_at":"2026-11-05T23:39:52Z","dns_checked_at":"2026-11-05T23:39:52.000Z","dns_since":"2026-11-05T23:39:52.000Z","findings":[{"id":"f4qjqztmvenpydlrwz66p","kind":"phishing_infrastructure","summary":"Resolved to 151.246.1.103, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T22:38:18.668Z","first_published":"2026-11-05T23:28:50.005Z","address":"151.246.1.103","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/toyota"},{"hostname":"autoconfig.toyota89.digital","first_observed":"2026-11-05T22:38:18.678Z","first_published":"2026-11-05T23:28:50.005Z","brands":[{"id":"toyota","name":"Toyota","url":"https://domainspoof.com/brands/toyota"}],"dns":"resolved","resolved":["151.246.1.103"],"resolved_at":"2026-11-05T23:39:52Z","dns_checked_at":"2026-11-05T23:39:52.000Z","dns_since":"2026-11-05T23:39:52.000Z","findings":[{"id":"f2o6xsykkw4rbpmovew3n","kind":"phishing_infrastructure","summary":"Resolved to 151.246.1.103, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T22:38:18.678Z","first_published":"2026-11-05T23:28:50.005Z","address":"151.246.1.103","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/toyota"},{"hostname":"autodiscover.globalstarks.com","first_observed":"2026-11-05T23:05:39.527Z","first_published":"2026-11-05T23:28:50.005Z","brands":[],"dns":"resolved","resolved":["104.21.61.191","172.67.213.16"],"resolved_at":"2026-11-05T23:06:09Z","dns_checked_at":"2026-11-05T23:39:52.000Z","dns_since":"2026-11-05T23:39:52.000Z","findings":[{"id":"f4xvjk4tbtddcw7ncr2ck","kind":"reported_domain","summary":"Under globalstarks.com, reported by PhishDestroy","first_observed":"2026-11-05T23:05:39.527Z","first_published":"2026-11-05T23:28:50.005Z","source":"phishdestroy","source_name":"PhishDestroy","under":"globalstarks.com","source_url":"https://phishdestroy.io/domain/globalstarks.com/"}],"url":"https://domainspoof.com/live?show=all&q=autodiscover.globalstarks.com"},{"hostname":"autodiscover.toyota12.digital","first_observed":"2026-11-05T22:38:18.689Z","first_published":"2026-11-05T23:28:50.005Z","brands":[{"id":"toyota","name":"Toyota","url":"https://domainspoof.com/brands/toyota"}],"dns":"resolved","resolved":["151.246.1.103"],"resolved_at":"2026-11-05T23:39:52Z","dns_checked_at":"2026-11-05T23:39:52.000Z","dns_since":"2026-11-05T23:39:52.000Z","findings":[{"id":"fnzsavuso44jdrpdpak32","kind":"phishing_infrastructure","summary":"Resolved to 151.246.1.103, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T22:38:18.689Z","first_published":"2026-11-05T23:28:50.005Z","address":"151.246.1.103","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/toyota"},{"hostname":"autodiscover.toyota33.digital","first_observed":"2026-11-05T22:38:18.699Z","first_published":"2026-11-05T23:28:50.005Z","brands":[{"id":"toyota","name":"Toyota","url":"https://domainspoof.com/brands/toyota"}],"dns":"resolved","resolved":["151.246.1.103"],"resolved_at":"2026-11-05T23:39:52Z","dns_checked_at":"2026-11-05T23:39:52.000Z","dns_since":"2026-11-05T23:39:52.000Z","findings":[{"id":"fuqzxcevbmx3awzyr4gmi","kind":"phishing_infrastructure","summary":"Resolved to 151.246.1.103, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T22:38:18.699Z","first_published":"2026-11-05T23:28:50.005Z","address":"151.246.1.103","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/toyota"},{"hostname":"autodiscover.toyota55.digital","first_observed":"2026-11-05T22:38:18.710Z","first_published":"2026-11-05T23:28:50.005Z","brands":[{"id":"toyota","name":"Toyota","url":"https://domainspoof.com/brands/toyota"}],"dns":"resolved","resolved":["151.246.1.103"],"resolved_at":"2026-11-05T23:39:52Z","dns_checked_at":"2026-11-05T23:39:52.000Z","dns_since":"2026-11-05T23:39:52.000Z","findings":[{"id":"fixp4wsjvwnmqsoqpmrsu","kind":"phishing_infrastructure","summary":"Resolved to 151.246.1.103, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T22:38:18.710Z","first_published":"2026-11-05T23:28:50.005Z","address":"151.246.1.103","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/toyota"},{"hostname":"autodiscover.toyota89.digital","first_observed":"2026-11-05T22:38:18.720Z","first_published":"2026-11-05T23:28:50.005Z","brands":[{"id":"toyota","name":"Toyota","url":"https://domainspoof.com/brands/toyota"}],"dns":"resolved","resolved":["151.246.1.103"],"resolved_at":"2026-11-05T23:39:52Z","dns_checked_at":"2026-11-05T23:39:52.000Z","dns_since":"2026-11-05T23:39:52.000Z","findings":[{"id":"f2z4l7h4xot6miiskwr5n","kind":"phishing_infrastructure","summary":"Resolved to 151.246.1.103, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T22:38:18.720Z","first_published":"2026-11-05T23:28:50.005Z","address":"151.246.1.103","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/toyota"},{"hostname":"autolike.sberbankmobile.ru","first_observed":"2026-11-05T22:14:21.402Z","first_published":"2026-11-05T23:28:50.005Z","brands":[{"id":"sberbank","name":"Sberbank","url":"https://domainspoof.com/brands/sberbank"}],"dns":"resolved","resolved":["87.242.79.60"],"resolved_at":"2026-11-05T23:39:52Z","dns_checked_at":"2026-11-05T23:39:52.000Z","dns_since":"2026-11-05T23:39:52.000Z","findings":[{"id":"fszdpxf2k7ece62bdadkt","kind":"phishing_infrastructure","summary":"Resolved to 87.242.79.60, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T22:14:21.402Z","first_published":"2026-11-05T23:28:50.005Z","address":"87.242.79.60","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/sberbank"},{"hostname":"autorekrytering.stage.io-ext.se","first_observed":"2026-11-05T23:21:02.044Z","first_published":"2026-11-05T23:28:50.005Z","brands":[],"dns":"resolved","resolved":["188.208.37.128"],"resolved_at":"2026-11-05T23:28:01Z","dns_checked_at":"2026-11-05T23:39:52.000Z","dns_since":"2026-11-05T23:39:52.000Z","findings":[{"id":"f7l6t2smrnqali6ymwcgf","kind":"reported_domain","summary":"Under io-ext.se, listed by MetaMask","first_observed":"2026-11-05T23:21:02.044Z","first_published":"2026-11-05T23:28:50.005Z","source":"metamask","source_name":"MetaMask","under":"io-ext.se"}],"url":"https://domainspoof.com/live?show=all&q=autorekrytering.stage.io-ext.se"},{"hostname":"b2bhub.cayugacollection.com","first_observed":"2026-11-05T23:10:37.449Z","first_published":"2026-11-05T23:28:50.005Z","brands":[],"dns":"resolved","resolved":["104.16.218.83","104.16.219.83"],"resolved_at":"2026-11-05T23:17:34Z","dns_checked_at":"2026-11-05T23:39:52.000Z","dns_since":"2026-11-05T23:39:52.000Z","findings":[{"id":"fva2rfch6l3mana5ukggo","kind":"reported_domain","summary":"Under cayugacollection.com, reported by PhishDestroy","first_observed":"2026-11-05T23:10:37.449Z","first_published":"2026-11-05T23:28:50.005Z","source":"phishdestroy","source_name":"PhishDestroy","under":"cayugacollection.com","source_url":"https://phishdestroy.io/domain/cayugacollection.com/"}],"url":"https://domainspoof.com/live?show=all&q=b2bhub.cayugacollection.com"},{"hostname":"bastion.ni-electrical.com","first_observed":"2026-11-05T23:10:37.449Z","first_published":"2026-11-05T23:28:50.005Z","brands":[],"dns":"resolved","resolved":["109.238.86.5"],"resolved_at":"2026-11-05T23:17:36Z","dns_checked_at":"2026-11-05T23:39:52.000Z","dns_since":"2026-11-05T23:39:52.000Z","findings":[{"id":"feblracqd3ypsn7zubl2s","kind":"reported_domain","summary":"Under ni-electrical.com, listed by CERT Polska","first_observed":"2026-11-05T23:10:37.449Z","first_published":"2026-11-05T23:28:50.005Z","source":"cert_polska","source_name":"CERT Polska","under":"ni-electrical.com"}],"url":"https://domainspoof.com/live?show=all&q=bastion.ni-electrical.com"},{"hostname":"bazaar2.at","first_observed":"2026-11-05T22:52:00.970Z","first_published":"2026-11-05T23:28:50.005Z","brands":[],"dns":"resolved","resolved":["176.53.159.125"],"resolved_at":"2026-11-05T23:00:30Z","dns_checked_at":"2026-11-05T23:39:52.000Z","dns_since":"2026-11-05T23:39:52.000Z","findings":[{"id":"fv4fkwc6erfiucwosgesp","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T22:52:00.970Z","first_published":"2026-11-05T23:28:50.005Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/bazaar2.at/"}],"url":"https://domainspoof.com/live?show=all&q=bazaar2.at"},{"hostname":"bdagrelaunch.live","first_observed":"2026-11-05T23:10:37.449Z","first_published":"2026-11-05T23:28:50.005Z","brands":[],"dns":"resolved","resolved":["216.198.79.1"],"resolved_at":"2026-11-05T23:17:36Z","dns_checked_at":"2026-11-05T23:39:52.000Z","dns_since":"2026-11-05T23:39:52.000Z","findings":[{"id":"fsb5suf2g7nr6myo23ps3","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T23:10:37.449Z","first_published":"2026-11-05T23:28:50.005Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=bdagrelaunch.live"},{"hostname":"beforewemeetapp.com","first_observed":"2026-11-05T22:46:33.970Z","first_published":"2026-11-05T23:28:50.005Z","brands":[],"dns":"resolved","resolved":["185.158.133.1"],"resolved_at":"2026-11-05T22:50:13Z","dns_checked_at":"2026-11-05T23:39:52.000Z","dns_since":"2026-11-05T23:39:52.000Z","findings":[{"id":"f24jlwlitjgqvjkc5ljso","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T22:46:33.970Z","first_published":"2026-11-05T23:28:50.005Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=beforewemeetapp.com"},{"hostname":"blueberry.stage.io-ext.se","first_observed":"2026-11-05T22:56:59.834Z","first_published":"2026-11-05T23:28:50.005Z","brands":[],"dns":"resolved","resolved":["188.208.37.128"],"resolved_at":"2026-11-05T23:09:20Z","dns_checked_at":"2026-11-05T23:39:52.000Z","dns_since":"2026-11-05T23:39:52.000Z","findings":[{"id":"fh7sjmwkehtc75ge3vgea","kind":"reported_domain","summary":"Under io-ext.se, listed by MetaMask","first_observed":"2026-11-05T22:56:59.834Z","first_published":"2026-11-05T23:28:50.005Z","source":"metamask","source_name":"MetaMask","under":"io-ext.se"}],"url":"https://domainspoof.com/live?show=all&q=blueberry.stage.io-ext.se"},{"hostname":"bohem-ai.live","first_observed":"2026-11-05T23:00:48.504Z","first_published":"2026-11-05T23:28:50.005Z","brands":[],"dns":"resolved","resolved":["104.21.75.146","172.67.177.224"],"resolved_at":"2026-11-05T23:01:13Z","dns_checked_at":"2026-11-05T23:39:52.000Z","dns_since":"2026-11-05T23:39:52.000Z","findings":[{"id":"fz2vmgy5k4tnng6dxsn2x","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T23:00:48.504Z","first_published":"2026-11-05T23:28:50.005Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=bohem-ai.live"},{"hostname":"bpdae.org","first_observed":"2026-11-05T22:31:01.947Z","first_published":"2026-11-05T23:28:50.005Z","brands":[],"dns":"resolved","resolved":["104.21.95.96","172.67.144.23"],"resolved_at":"2026-11-05T22:38:34Z","dns_checked_at":"2026-11-05T23:39:52.000Z","dns_since":"2026-11-05T23:39:52.000Z","findings":[{"id":"fhqpck2vofxwqutxle6rv","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T22:31:01.947Z","first_published":"2026-11-05T23:28:50.005Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=bpdae.org"},{"hostname":"brunafondaria-es.live","first_observed":"2026-11-05T22:31:01.947Z","first_published":"2026-11-05T23:28:50.005Z","brands":[],"dns":"resolved","resolved":["104.21.59.220","172.67.184.149"],"resolved_at":"2026-11-05T22:38:34Z","dns_checked_at":"2026-11-05T23:39:52.000Z","dns_since":"2026-11-05T23:39:52.000Z","findings":[{"id":"fbhhqufmwanswibo6rf7m","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T22:31:01.947Z","first_published":"2026-11-05T23:28:50.005Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=brunafondaria-es.live"},{"hostname":"btc-celesto920-de.live","first_observed":"2026-11-05T23:16:08.129Z","first_published":"2026-11-05T23:28:50.005Z","brands":[],"dns":"resolved","resolved":["104.21.11.17","172.67.147.142"],"resolved_at":"2026-11-06T01:37:46Z","dns_checked_at":"2026-11-05T23:39:52.000Z","dns_since":"2026-11-05T23:39:52.000Z","findings":[{"id":"f72dzijcobd733mszp4el","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T23:16:08.129Z","first_published":"2026-11-05T23:28:50.005Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=btc-celesto920-de.live"},{"hostname":"bulletins-ledger.com","first_observed":"2026-11-05T22:26:11.932Z","first_published":"2026-11-05T23:28:50.005Z","brands":[],"dns":"no_address","resolved":[],"resolved_at":"2026-11-05T22:34:57Z","dns_checked_at":"2026-11-06T15:59:29.000Z","findings":[{"id":"f5ei433unytwp6te7krkn","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T22:26:11.932Z","first_published":"2026-11-05T23:28:50.005Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=bulletins-ledger.com"},{"hostname":"cajeto.info","first_observed":"2026-11-05T22:46:33.970Z","first_published":"2026-11-05T23:28:50.005Z","brands":[],"dns":"resolved","resolved":["104.21.70.30","172.67.218.207"],"resolved_at":"2026-11-05T22:50:29Z","dns_checked_at":"2026-11-05T23:39:52.000Z","dns_since":"2026-11-05T23:39:52.000Z","findings":[{"id":"fqzhxiuinq7ry2ojsyajk","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T22:46:33.970Z","first_published":"2026-11-05T23:28:50.005Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=cajeto.info"},{"hostname":"canary.ni-electrical.com","first_observed":"2026-11-05T23:21:02.044Z","first_published":"2026-11-05T23:28:50.005Z","brands":[],"dns":"resolved","resolved":["109.238.86.5"],"resolved_at":"2026-11-05T23:29:37Z","dns_checked_at":"2026-11-05T23:39:52.000Z","dns_since":"2026-11-05T23:39:52.000Z","findings":[{"id":"fte3f6ryyiqmesj6k6shc","kind":"reported_domain","summary":"Under ni-electrical.com, listed by CERT Polska","first_observed":"2026-11-05T23:21:02.044Z","first_published":"2026-11-05T23:28:50.005Z","source":"cert_polska","source_name":"CERT Polska","under":"ni-electrical.com"}],"url":"https://domainspoof.com/live?show=all&q=canary.ni-electrical.com"},{"hostname":"capcutapks.com.co","first_observed":"2026-11-05T22:56:59.834Z","first_published":"2026-11-05T23:28:50.005Z","brands":[],"dns":"resolved","resolved":["143.246.209.67"],"resolved_at":"2026-11-05T23:09:31Z","dns_checked_at":"2026-11-05T23:39:52.000Z","dns_since":"2026-11-05T23:39:52.000Z","findings":[{"id":"fhcdgxactbsjmlqxf4tgl","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T22:56:59.834Z","first_published":"2026-11-05T23:28:50.005Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/capcutapks.com.co/"}],"url":"https://domainspoof.com/live?show=all&q=capcutapks.com.co"},{"hostname":"casinorainbet-fr-com.pages.dev","first_observed":"2026-11-05T23:16:08.129Z","first_published":"2026-11-05T23:28:50.005Z","brands":[],"dns":"resolved","resolved":["172.66.44.252","172.66.47.4"],"resolved_at":"2026-11-05T23:24:47Z","dns_checked_at":"2026-11-05T23:39:52.000Z","dns_since":"2026-11-05T23:39:52.000Z","findings":[{"id":"fr5x4rjl3uhho3wibbbep","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T23:16:08.129Z","first_published":"2026-11-05T23:28:50.005Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=casinorainbet-fr-com.pages.dev"},{"hostname":"ccc-kicksworld.shop","first_observed":"2026-11-05T22:36:06.370Z","first_published":"2026-11-05T23:28:50.005Z","brands":[],"dns":"resolved","resolved":["104.16.211.68"],"resolved_at":"2026-11-05T22:41:09Z","dns_checked_at":"2026-11-05T23:39:52.000Z","dns_since":"2026-11-05T23:39:52.000Z","findings":[{"id":"fr6jqytuxjerf32yc46qb","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T22:36:06.370Z","first_published":"2026-11-05T23:28:50.005Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=ccc-kicksworld.shop"},{"hostname":"cdx.izom.net","first_observed":"2026-11-05T23:05:39.527Z","first_published":"2026-11-05T23:28:50.005Z","brands":[],"dns":"resolved","resolved":["207.180.234.23"],"resolved_at":"2026-11-05T23:06:22Z","dns_checked_at":"2026-11-05T23:39:52.000Z","dns_since":"2026-11-05T23:39:52.000Z","findings":[{"id":"fqmijkptug4vjl6rnqrob","kind":"reported_domain","summary":"Under izom.net, reported by PhishDestroy","first_observed":"2026-11-05T23:05:39.527Z","first_published":"2026-11-05T23:28:50.005Z","source":"phishdestroy","source_name":"PhishDestroy","under":"izom.net","source_url":"https://phishdestroy.io/domain/izom.net/"}],"url":"https://domainspoof.com/live?show=all&q=cdx.izom.net"},{"hostname":"cimapatrienza.live","first_observed":"2026-11-05T22:10:44.341Z","first_published":"2026-11-05T23:28:50.005Z","brands":[],"dns":"resolved","resolved":["104.21.66.200","172.67.207.59"],"resolved_at":"2026-11-05T22:15:14Z","dns_checked_at":"2026-11-05T23:39:52.000Z","dns_since":"2026-11-05T23:39:52.000Z","findings":[{"id":"fqsg524fvi47y2poxf4dl","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T22:10:44.341Z","first_published":"2026-11-05T23:28:50.005Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=cimapatrienza.live"},{"hostname":"civichat.fdomc.com","first_observed":"2026-11-05T22:52:00.970Z","first_published":"2026-11-05T23:28:50.005Z","brands":[],"dns":"resolved","resolved":["156.239.14.5"],"resolved_at":"2026-11-05T23:01:15Z","dns_checked_at":"2026-11-05T23:39:52.000Z","dns_since":"2026-11-05T23:39:52.000Z","findings":[{"id":"fhanijfqladfrvqyrrzcn","kind":"reported_domain","summary":"Under fdomc.com, listed by MetaMask","first_observed":"2026-11-05T22:52:00.970Z","first_published":"2026-11-05T23:28:50.005Z","source":"metamask","source_name":"MetaMask","under":"fdomc.com"}],"url":"https://domainspoof.com/live?show=all&q=civichat.fdomc.com"},{"hostname":"clarofinlore-it.live","first_observed":"2026-11-05T22:31:01.947Z","first_published":"2026-11-05T23:28:50.005Z","brands":[],"dns":"resolved","resolved":["104.21.51.24","172.67.219.38"],"resolved_at":"2026-11-05T22:38:48Z","dns_checked_at":"2026-11-05T23:39:52.000Z","dns_since":"2026-11-05T23:39:52.000Z","findings":[{"id":"fspsihvotmhdl3twwa6wh","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T22:31:01.947Z","first_published":"2026-11-05T23:28:50.005Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=clarofinlore-it.live"},{"hostname":"claudersfun.xyz","first_observed":"2026-11-05T22:21:30.901Z","first_published":"2026-11-05T23:28:50.005Z","brands":[],"dns":"resolved","resolved":["104.21.83.69","172.67.216.92"],"resolved_at":"2026-11-05T22:26:50Z","dns_checked_at":"2026-11-05T23:39:52.000Z","dns_since":"2026-11-05T23:39:52.000Z","findings":[{"id":"f3fdwo3rbgn3ocrgxxmu3","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T22:21:30.901Z","first_published":"2026-11-05T23:28:50.005Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=claudersfun.xyz"},{"hostname":"cockers-sports.co.uk","first_observed":"2026-11-05T22:56:59.834Z","first_published":"2026-11-05T23:28:50.005Z","brands":[],"dns":"resolved","resolved":["46.30.213.149","2a02:2350:5:10c:aa:3eba:87c4:d367"],"resolved_at":"2026-11-06T02:00:48Z","dns_checked_at":"2026-11-05T23:39:52.000Z","dns_since":"2026-11-05T23:39:52.000Z","findings":[{"id":"frkcrb6k43d6iidaeryba","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T22:56:59.834Z","first_published":"2026-11-05T23:28:50.005Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/cockers-sports.co.uk/"}],"url":"https://domainspoof.com/live?show=all&q=cockers-sports.co.uk"},{"hostname":"consul.crypto-polis.org","first_observed":"2026-11-05T22:52:00.970Z","first_published":"2026-11-05T23:28:50.005Z","brands":[],"dns":"resolved","resolved":["185.178.208.132","185.178.208.182"],"resolved_at":"2026-11-05T23:01:16Z","dns_checked_at":"2026-11-05T23:39:52.000Z","dns_since":"2026-11-05T23:39:52.000Z","findings":[{"id":"fp3yzombl5xylamdtl3f5","kind":"reported_domain","summary":"Under crypto-polis.org, reported by PhishDestroy","first_observed":"2026-11-05T22:52:00.970Z","first_published":"2026-11-05T23:28:50.005Z","source":"phishdestroy","source_name":"PhishDestroy","under":"crypto-polis.org","source_url":"https://phishdestroy.io/domain/crypto-polis.org/"}],"url":"https://domainspoof.com/live?show=all&q=consul.crypto-polis.org"},{"hostname":"cpanel.globalstarks.com","first_observed":"2026-11-05T23:05:39.527Z","first_published":"2026-11-05T23:28:50.005Z","brands":[],"dns":"resolved","resolved":["104.21.61.191","172.67.213.16"],"resolved_at":"2026-11-05T23:06:25Z","dns_checked_at":"2026-11-05T23:39:52.000Z","dns_since":"2026-11-05T23:39:52.000Z","findings":[{"id":"fa65j6ldimhvnooare5zr","kind":"reported_domain","summary":"Under globalstarks.com, reported by PhishDestroy","first_observed":"2026-11-05T23:05:39.527Z","first_published":"2026-11-05T23:28:50.005Z","source":"phishdestroy","source_name":"PhishDestroy","under":"globalstarks.com","source_url":"https://phishdestroy.io/domain/globalstarks.com/"}],"url":"https://domainspoof.com/live?show=all&q=cpanel.globalstarks.com"},{"hostname":"cpanel.toyota12.digital","first_observed":"2026-11-05T22:31:40.889Z","first_published":"2026-11-05T23:28:50.005Z","brands":[{"id":"toyota","name":"Toyota","url":"https://domainspoof.com/brands/toyota"}],"dns":"resolved","resolved":["151.246.1.103"],"resolved_at":"2026-11-05T23:39:52Z","dns_checked_at":"2026-11-05T23:39:52.000Z","dns_since":"2026-11-05T23:39:52.000Z","findings":[{"id":"fbdkko6ez2v3nd52ny377","kind":"phishing_infrastructure","summary":"Resolved to 151.246.1.103, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T22:31:40.889Z","first_published":"2026-11-05T23:28:50.005Z","address":"151.246.1.103","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/toyota"},{"hostname":"cpanel.toyota33.digital","first_observed":"2026-11-05T22:31:40.893Z","first_published":"2026-11-05T23:28:50.005Z","brands":[{"id":"toyota","name":"Toyota","url":"https://domainspoof.com/brands/toyota"}],"dns":"resolved","resolved":["151.246.1.103"],"resolved_at":"2026-11-05T23:39:52Z","dns_checked_at":"2026-11-05T23:39:52.000Z","dns_since":"2026-11-05T23:39:52.000Z","findings":[{"id":"f2yf5hfgozioz4vrgswkc","kind":"phishing_infrastructure","summary":"Resolved to 151.246.1.103, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T22:31:40.893Z","first_published":"2026-11-05T23:28:50.005Z","address":"151.246.1.103","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/toyota"},{"hostname":"cpanel.toyota55.digital","first_observed":"2026-11-05T22:31:40.895Z","first_published":"2026-11-05T23:28:50.005Z","brands":[{"id":"toyota","name":"Toyota","url":"https://domainspoof.com/brands/toyota"}],"dns":"resolved","resolved":["151.246.1.103"],"resolved_at":"2026-11-05T23:39:52Z","dns_checked_at":"2026-11-05T23:39:52.000Z","dns_since":"2026-11-05T23:39:52.000Z","findings":[{"id":"fmkyvvy5s3jusfkdpjcuq","kind":"phishing_infrastructure","summary":"Resolved to 151.246.1.103, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T22:31:40.895Z","first_published":"2026-11-05T23:28:50.005Z","address":"151.246.1.103","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/toyota"},{"hostname":"cpanel.toyota89.digital","first_observed":"2026-11-05T22:31:40.896Z","first_published":"2026-11-05T23:28:50.005Z","brands":[{"id":"toyota","name":"Toyota","url":"https://domainspoof.com/brands/toyota"}],"dns":"resolved","resolved":["151.246.1.103"],"resolved_at":"2026-11-05T23:39:52Z","dns_checked_at":"2026-11-05T23:39:52.000Z","dns_since":"2026-11-05T23:39:52.000Z","findings":[{"id":"fd4ozb7rgmmhn2gqzxhqa","kind":"phishing_infrastructure","summary":"Resolved to 151.246.1.103, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T22:31:40.896Z","first_published":"2026-11-05T23:28:50.005Z","address":"151.246.1.103","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/toyota"},{"hostname":"cpcalendars.globalstarks.com","first_observed":"2026-11-05T23:05:39.527Z","first_published":"2026-11-05T23:28:50.005Z","brands":[],"dns":"resolved","resolved":["104.21.61.191","172.67.213.16"],"resolved_at":"2026-11-05T23:06:25Z","dns_checked_at":"2026-11-05T23:39:52.000Z","dns_since":"2026-11-05T23:39:52.000Z","findings":[{"id":"flyrcrlw4p2ggtii6c2za","kind":"reported_domain","summary":"Under globalstarks.com, reported by PhishDestroy","first_observed":"2026-11-05T23:05:39.527Z","first_published":"2026-11-05T23:28:50.005Z","source":"phishdestroy","source_name":"PhishDestroy","under":"globalstarks.com","source_url":"https://phishdestroy.io/domain/globalstarks.com/"}],"url":"https://domainspoof.com/live?show=all&q=cpcalendars.globalstarks.com"},{"hostname":"cpcalendars.toyota12.digital","first_observed":"2026-11-05T22:31:40.901Z","first_published":"2026-11-05T23:28:50.005Z","brands":[{"id":"toyota","name":"Toyota","url":"https://domainspoof.com/brands/toyota"}],"dns":"resolved","resolved":["151.246.1.103"],"resolved_at":"2026-11-05T23:39:52Z","dns_checked_at":"2026-11-05T23:39:52.000Z","dns_since":"2026-11-05T23:39:52.000Z","findings":[{"id":"ff573j566wvx6m4ycmeu3","kind":"phishing_infrastructure","summary":"Resolved to 151.246.1.103, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T22:31:40.901Z","first_published":"2026-11-05T23:28:50.005Z","address":"151.246.1.103","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/toyota"},{"hostname":"cpcalendars.toyota33.digital","first_observed":"2026-11-05T22:31:40.902Z","first_published":"2026-11-05T23:28:50.005Z","brands":[{"id":"toyota","name":"Toyota","url":"https://domainspoof.com/brands/toyota"}],"dns":"resolved","resolved":["151.246.1.103"],"resolved_at":"2026-11-05T23:39:52Z","dns_checked_at":"2026-11-05T23:39:52.000Z","dns_since":"2026-11-05T23:39:52.000Z","findings":[{"id":"fejmkuhbdjej5fwgp7qhz","kind":"phishing_infrastructure","summary":"Resolved to 151.246.1.103, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T22:31:40.902Z","first_published":"2026-11-05T23:28:50.005Z","address":"151.246.1.103","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/toyota"},{"hostname":"cpcalendars.toyota55.digital","first_observed":"2026-11-05T22:31:40.902Z","first_published":"2026-11-05T23:28:50.005Z","brands":[{"id":"toyota","name":"Toyota","url":"https://domainspoof.com/brands/toyota"}],"dns":"resolved","resolved":["151.246.1.103"],"resolved_at":"2026-11-05T23:39:52Z","dns_checked_at":"2026-11-05T23:39:52.000Z","dns_since":"2026-11-05T23:39:52.000Z","findings":[{"id":"fxjv2aoirwerxhs4z6m63","kind":"phishing_infrastructure","summary":"Resolved to 151.246.1.103, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T22:31:40.902Z","first_published":"2026-11-05T23:28:50.005Z","address":"151.246.1.103","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/toyota"},{"hostname":"cpcalendars.toyota89.digital","first_observed":"2026-11-05T22:31:40.904Z","first_published":"2026-11-05T23:28:50.005Z","brands":[{"id":"toyota","name":"Toyota","url":"https://domainspoof.com/brands/toyota"}],"dns":"resolved","resolved":["151.246.1.103"],"resolved_at":"2026-11-05T23:39:52Z","dns_checked_at":"2026-11-05T23:39:52.000Z","dns_since":"2026-11-05T23:39:52.000Z","findings":[{"id":"fsmbc6gujl2dtqllw72vv","kind":"phishing_infrastructure","summary":"Resolved to 151.246.1.103, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T22:31:40.904Z","first_published":"2026-11-05T23:28:50.005Z","address":"151.246.1.103","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/toyota"},{"hostname":"cpcontacts.globalstarks.com","first_observed":"2026-11-05T23:05:39.527Z","first_published":"2026-11-05T23:28:50.005Z","brands":[],"dns":"resolved","resolved":["104.21.61.191","172.67.213.16"],"resolved_at":"2026-11-05T23:06:26Z","dns_checked_at":"2026-11-05T23:39:52.000Z","dns_since":"2026-11-05T23:39:52.000Z","findings":[{"id":"flq35ompgxarwt6sxfnlk","kind":"reported_domain","summary":"Under globalstarks.com, reported by PhishDestroy","first_observed":"2026-11-05T23:05:39.527Z","first_published":"2026-11-05T23:28:50.005Z","source":"phishdestroy","source_name":"PhishDestroy","under":"globalstarks.com","source_url":"https://phishdestroy.io/domain/globalstarks.com/"}],"url":"https://domainspoof.com/live?show=all&q=cpcontacts.globalstarks.com"},{"hostname":"cpcontacts.toyota12.digital","first_observed":"2026-11-05T22:31:40.907Z","first_published":"2026-11-05T23:28:50.005Z","brands":[{"id":"toyota","name":"Toyota","url":"https://domainspoof.com/brands/toyota"}],"dns":"resolved","resolved":["151.246.1.103"],"resolved_at":"2026-11-05T23:39:52Z","dns_checked_at":"2026-11-05T23:39:52.000Z","dns_since":"2026-11-05T23:39:52.000Z","findings":[{"id":"f47him6dlsabh6xqakkjo","kind":"phishing_infrastructure","summary":"Resolved to 151.246.1.103, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T22:31:40.907Z","first_published":"2026-11-05T23:28:50.005Z","address":"151.246.1.103","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/toyota"},{"hostname":"cpcontacts.toyota33.digital","first_observed":"2026-11-05T22:31:40.909Z","first_published":"2026-11-05T23:28:50.005Z","brands":[{"id":"toyota","name":"Toyota","url":"https://domainspoof.com/brands/toyota"}],"dns":"resolved","resolved":["151.246.1.103"],"resolved_at":"2026-11-05T23:39:52Z","dns_checked_at":"2026-11-05T23:39:52.000Z","dns_since":"2026-11-05T23:39:52.000Z","findings":[{"id":"fqtyr2nr4h4lk3arlu4p4","kind":"phishing_infrastructure","summary":"Resolved to 151.246.1.103, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T22:31:40.909Z","first_published":"2026-11-05T23:28:50.005Z","address":"151.246.1.103","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/toyota"},{"hostname":"cpcontacts.toyota55.digital","first_observed":"2026-11-05T22:31:40.914Z","first_published":"2026-11-05T23:28:50.005Z","brands":[{"id":"toyota","name":"Toyota","url":"https://domainspoof.com/brands/toyota"}],"dns":"resolved","resolved":["151.246.1.103"],"resolved_at":"2026-11-05T23:39:52Z","dns_checked_at":"2026-11-05T23:39:52.000Z","dns_since":"2026-11-05T23:39:52.000Z","findings":[{"id":"f4bv3jnfc5fym6x2pi5fa","kind":"phishing_infrastructure","summary":"Resolved to 151.246.1.103, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T22:31:40.914Z","first_published":"2026-11-05T23:28:50.005Z","address":"151.246.1.103","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/toyota"},{"hostname":"cpcontacts.toyota89.digital","first_observed":"2026-11-05T22:31:40.914Z","first_published":"2026-11-05T23:28:50.005Z","brands":[{"id":"toyota","name":"Toyota","url":"https://domainspoof.com/brands/toyota"}],"dns":"resolved","resolved":["151.246.1.103"],"resolved_at":"2026-11-05T23:39:52Z","dns_checked_at":"2026-11-05T23:39:52.000Z","dns_since":"2026-11-05T23:39:52.000Z","findings":[{"id":"fxgg6mgjavlnv6gkasxco","kind":"phishing_infrastructure","summary":"Resolved to 151.246.1.103, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T22:31:40.914Z","first_published":"2026-11-05T23:28:50.005Z","address":"151.246.1.103","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/toyota"},{"hostname":"crickfytv.org.in","first_observed":"2026-11-05T23:21:02.044Z","first_published":"2026-11-05T23:28:50.005Z","brands":[],"dns":"resolved","resolved":["104.21.11.14","172.67.147.139"],"resolved_at":"2026-11-06T00:32:03Z","dns_checked_at":"2026-11-05T23:39:52.000Z","dns_since":"2026-11-05T23:39:52.000Z","findings":[{"id":"fay6ssxt4lmorcanzqb3n","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T23:21:02.044Z","first_published":"2026-11-05T23:28:50.005Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=crickfytv.org.in"},{"hostname":"current-pad.com","first_observed":"2026-11-05T22:31:01.947Z","first_published":"2026-11-05T23:28:50.005Z","brands":[],"dns":"resolved","resolved":["104.21.50.168","172.67.164.102"],"resolved_at":"2026-11-05T22:31:40Z","dns_checked_at":"2026-11-05T23:39:52.000Z","dns_since":"2026-11-05T23:39:52.000Z","findings":[{"id":"f6qne7hdmjtk52wq35s4a","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T22:31:01.947Z","first_published":"2026-11-05T23:28:50.005Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=current-pad.com"},{"hostname":"d2448bea.cargo-system.hmcargollc.com","first_observed":"2026-11-05T23:21:02.044Z","first_published":"2026-11-05T23:28:50.005Z","brands":[],"dns":"resolved","resolved":["194.38.21.164"],"resolved_at":"2026-11-05T23:30:15Z","dns_checked_at":"2026-11-05T23:39:52.000Z","dns_since":"2026-11-05T23:39:52.000Z","findings":[{"id":"fl3rjksumwzjcvaamehsi","kind":"reported_domain","summary":"Under hmcargollc.com, reported by PhishDestroy","first_observed":"2026-11-05T23:21:02.044Z","first_published":"2026-11-05T23:28:50.005Z","source":"phishdestroy","source_name":"PhishDestroy","under":"hmcargollc.com","source_url":"https://phishdestroy.io/domain/hmcargollc.com/"}],"url":"https://domainspoof.com/live?show=all&q=d2448bea.cargo-system.hmcargollc.com"},{"hostname":"d817f228.cargo-system.hmcargollc.com","first_observed":"2026-11-05T23:21:02.044Z","first_published":"2026-11-05T23:28:50.005Z","brands":[],"dns":"resolved","resolved":["194.38.21.97"],"resolved_at":"2026-11-05T23:30:15Z","dns_checked_at":"2026-11-05T23:39:52.000Z","dns_since":"2026-11-05T23:39:52.000Z","findings":[{"id":"fswlfjalcqwt2w6gxyus2","kind":"reported_domain","summary":"Under hmcargollc.com, reported by PhishDestroy","first_observed":"2026-11-05T23:21:02.044Z","first_published":"2026-11-05T23:28:50.005Z","source":"phishdestroy","source_name":"PhishDestroy","under":"hmcargollc.com","source_url":"https://phishdestroy.io/domain/hmcargollc.com/"}],"url":"https://domainspoof.com/live?show=all&q=d817f228.cargo-system.hmcargollc.com"},{"hostname":"db6819b4.cargo-system.hmcargollc.com","first_observed":"2026-11-05T23:21:02.044Z","first_published":"2026-11-05T23:28:50.005Z","brands":[],"dns":"resolved","resolved":["194.38.21.112"],"resolved_at":"2026-11-05T23:30:17Z","dns_checked_at":"2026-11-05T23:39:52.000Z","dns_since":"2026-11-05T23:39:52.000Z","findings":[{"id":"fwlndtd5ti74xepf2onvr","kind":"reported_domain","summary":"Under hmcargollc.com, reported by PhishDestroy","first_observed":"2026-11-05T23:21:02.044Z","first_published":"2026-11-05T23:28:50.005Z","source":"phishdestroy","source_name":"PhishDestroy","under":"hmcargollc.com","source_url":"https://phishdestroy.io/domain/hmcargollc.com/"}],"url":"https://domainspoof.com/live?show=all&q=db6819b4.cargo-system.hmcargollc.com"},{"hostname":"derowallet.net","first_observed":"2026-11-05T22:56:59.834Z","first_published":"2026-11-05T23:28:50.005Z","brands":[],"dns":"resolved","resolved":["91.239.77.38"],"resolved_at":"2026-11-05T23:09:37Z","dns_checked_at":"2026-11-05T23:39:52.000Z","dns_since":"2026-11-05T23:39:52.000Z","findings":[{"id":"fu5ogrsbtg3ly22de36wf","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T22:56:59.834Z","first_published":"2026-11-05T23:28:50.005Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/derowallet.net/"}],"url":"https://domainspoof.com/live?show=all&q=derowallet.net"},{"hostname":"dev.img.ns2.stg.airflow.kingdom-dmc.com","first_observed":"2026-11-05T23:00:48.504Z","first_published":"2026-11-05T23:28:50.005Z","brands":[],"dns":"resolved","resolved":["185.215.4.42"],"resolved_at":"2026-11-05T23:10:38Z","dns_checked_at":"2026-11-05T23:39:52.000Z","dns_since":"2026-11-05T23:39:52.000Z","findings":[{"id":"fon6eheqtwngfc2ahb5kj","kind":"reported_domain","summary":"Under kingdom-dmc.com, listed by MetaMask","first_observed":"2026-11-05T23:00:48.504Z","first_published":"2026-11-05T23:28:50.005Z","source":"metamask","source_name":"MetaMask","under":"kingdom-dmc.com"}],"url":"https://domainspoof.com/live?show=all&q=dev.img.ns2.stg.airflow.kingdom-dmc.com"},{"hostname":"dezentracorb.com","first_observed":"2026-11-05T22:26:11.932Z","first_published":"2026-11-05T23:28:50.005Z","brands":[],"dns":"resolved","resolved":["104.21.57.213","172.67.167.8"],"resolved_at":"2026-11-05T22:35:19Z","dns_checked_at":"2026-11-05T23:39:52.000Z","dns_since":"2026-11-05T23:39:52.000Z","findings":[{"id":"ftuqk5bv2n47fjbq5nqb3","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T22:26:11.932Z","first_published":"2026-11-05T23:28:50.005Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=dezentracorb.com"},{"hostname":"directus.crypto-polis.org","first_observed":"2026-11-05T22:56:59.834Z","first_published":"2026-11-05T23:28:50.005Z","brands":[],"dns":"resolved","resolved":["185.178.208.132","185.178.208.182"],"resolved_at":"2026-11-05T23:09:37Z","dns_checked_at":"2026-11-05T23:39:52.000Z","dns_since":"2026-11-05T23:39:52.000Z","findings":[{"id":"f5i6rk7vmw6zfmfjeljb6","kind":"reported_domain","summary":"Under crypto-polis.org, reported by PhishDestroy","first_observed":"2026-11-05T22:56:59.834Z","first_published":"2026-11-05T23:28:50.005Z","source":"phishdestroy","source_name":"PhishDestroy","under":"crypto-polis.org","source_url":"https://phishdestroy.io/domain/crypto-polis.org/"}],"url":"https://domainspoof.com/live?show=all&q=directus.crypto-polis.org"},{"hostname":"dybvekselheim-da.live","first_observed":"2026-11-05T22:36:06.370Z","first_published":"2026-11-05T23:28:50.005Z","brands":[],"dns":"resolved","resolved":["104.21.61.68","172.67.207.51"],"resolved_at":"2026-11-05T22:41:20Z","dns_checked_at":"2026-11-05T23:39:52.000Z","dns_since":"2026-11-05T23:39:52.000Z","findings":[{"id":"frenmlkih53qtrqdmmhkd","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T22:36:06.370Z","first_published":"2026-11-05T23:28:50.005Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=dybvekselheim-da.live"},{"hostname":"e676bd05.cargo-system.hmcargollc.com","first_observed":"2026-11-05T23:21:02.044Z","first_published":"2026-11-05T23:28:50.005Z","brands":[],"dns":"resolved","resolved":["194.38.21.104"],"resolved_at":"2026-11-05T23:30:18Z","dns_checked_at":"2026-11-05T23:39:52.000Z","dns_since":"2026-11-05T23:39:52.000Z","findings":[{"id":"fdi57bwrdhlg65zr6gwu7","kind":"reported_domain","summary":"Under hmcargollc.com, reported by PhishDestroy","first_observed":"2026-11-05T23:21:02.044Z","first_published":"2026-11-05T23:28:50.005Z","source":"phishdestroy","source_name":"PhishDestroy","under":"hmcargollc.com","source_url":"https://phishdestroy.io/domain/hmcargollc.com/"}],"url":"https://domainspoof.com/live?show=all&q=e676bd05.cargo-system.hmcargollc.com"},{"hostname":"ecosystem-unipix.xyz","first_observed":"2026-11-05T23:00:48.504Z","first_published":"2026-11-05T23:28:50.005Z","brands":[],"dns":"resolved","resolved":["104.21.6.6","172.67.134.31"],"resolved_at":"2026-11-06T01:46:10Z","dns_checked_at":"2026-11-05T23:39:52.000Z","dns_since":"2026-11-05T23:39:52.000Z","findings":[{"id":"fi3qpp6dadoxwy2oaczq4","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T23:00:48.504Z","first_published":"2026-11-05T23:28:50.005Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=ecosystem-unipix.xyz"},{"hostname":"eduedu.app","first_observed":"2026-11-05T22:56:59.834Z","first_published":"2026-11-05T23:28:50.005Z","brands":[],"dns":"resolved","resolved":["151.101.1.195","151.101.65.195"],"resolved_at":"2026-11-05T23:09:37Z","dns_checked_at":"2026-11-05T23:39:52.000Z","dns_since":"2026-11-05T23:39:52.000Z","findings":[{"id":"fo4gyqr27oovyu2yy3n3m","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T22:56:59.834Z","first_published":"2026-11-05T23:28:50.005Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/eduedu.app/"}],"url":"https://domainspoof.com/live?show=all&q=eduedu.app"},{"hostname":"eduledger-acc.pages.dev","first_observed":"2026-11-05T22:21:30.901Z","first_published":"2026-11-05T23:28:50.005Z","brands":[],"dns":"resolved","resolved":["172.66.44.96","172.66.47.160"],"resolved_at":"2026-11-05T22:27:35Z","dns_checked_at":"2026-11-05T23:39:52.000Z","dns_since":"2026-11-05T23:39:52.000Z","findings":[{"id":"fptzcui5h22676feo4csa","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T22:21:30.901Z","first_published":"2026-11-05T23:28:50.005Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=eduledger-acc.pages.dev"},{"hostname":"electro-ridge.com","first_observed":"2026-11-05T22:41:04.757Z","first_published":"2026-11-05T23:28:50.005Z","brands":[],"dns":"resolved","resolved":["104.21.27.103","172.67.142.65"],"resolved_at":"2026-11-05T22:44:45Z","dns_checked_at":"2026-11-05T23:39:52.000Z","dns_since":"2026-11-05T23:39:52.000Z","findings":[{"id":"fxmwskhbpvc5mxh6fph22","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T22:41:04.757Z","first_published":"2026-11-05T23:28:50.005Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=electro-ridge.com"},{"hostname":"enkel-begravning.stage.io-ext.se","first_observed":"2026-11-05T22:56:59.834Z","first_published":"2026-11-05T23:28:50.005Z","brands":[],"dns":"resolved","resolved":["188.208.37.116"],"resolved_at":"2026-11-05T23:09:37Z","dns_checked_at":"2026-11-05T23:39:52.000Z","dns_since":"2026-11-05T23:39:52.000Z","findings":[{"id":"fxn7hd3brzmrz4d7vbsu2","kind":"reported_domain","summary":"Under io-ext.se, listed by MetaMask","first_observed":"2026-11-05T22:56:59.834Z","first_published":"2026-11-05T23:28:50.005Z","source":"metamask","source_name":"MetaMask","under":"io-ext.se"}],"url":"https://domainspoof.com/live?show=all&q=enkel-begravning.stage.io-ext.se"},{"hostname":"enzosolplay.com","first_observed":"2026-11-05T22:26:11.932Z","first_published":"2026-11-05T23:28:50.005Z","brands":[],"dns":"resolved","resolved":["104.21.49.239","172.67.195.213"],"resolved_at":"2026-11-05T22:35:20Z","dns_checked_at":"2026-11-05T23:39:52.000Z","dns_since":"2026-11-05T23:39:52.000Z","findings":[{"id":"f237cokdzcivod2j5v7nx","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T22:26:11.932Z","first_published":"2026-11-05T23:28:50.005Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/enzosolplay.com/"}],"url":"https://domainspoof.com/live?show=all&q=enzosolplay.com"},{"hostname":"es.usps.international","first_observed":"2026-11-05T22:41:04.757Z","first_published":"2026-11-05T23:28:50.005Z","brands":[],"dns":"resolved","resolved":["162.159.143.12","172.66.3.8"],"resolved_at":"2026-11-05T22:44:45Z","dns_checked_at":"2026-11-05T23:39:52.000Z","dns_since":"2026-11-05T23:39:52.000Z","findings":[{"id":"fv3jx6jsb6a45b6555vzl","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T22:41:04.757Z","first_published":"2026-11-05T23:28:50.005Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=es.usps.international"},{"hostname":"esasmenkuldegerler.com","first_observed":"2026-11-05T23:05:39.527Z","first_published":"2026-11-05T23:28:50.005Z","brands":[],"dns":"no_address","resolved":[],"resolved_at":"2026-11-06T04:49:50Z","dns_checked_at":"2026-11-06T15:59:29.000Z","findings":[{"id":"ftbuutoimxwt4zjol2ye4","kind":"reported_domain","summary":"Listed by USOM","first_observed":"2026-11-05T23:05:39.527Z","first_published":"2026-11-05T23:28:50.005Z","source":"usom","source_name":"USOM"}],"url":"https://domainspoof.com/live?show=all&q=esasmenkuldegerler.com"},{"hostname":"esxi.socialvisor.ru","first_observed":"2026-11-05T22:16:24.677Z","first_published":"2026-11-05T23:28:50.005Z","brands":[],"dns":"resolved","resolved":["91.215.41.91"],"resolved_at":"2026-11-05T22:21:43Z","dns_checked_at":"2026-11-05T23:39:52.000Z","dns_since":"2026-11-05T23:39:52.000Z","findings":[{"id":"f72abtbrrflsdftm7qno5","kind":"reported_domain","summary":"Under socialvisor.ru, reported by PhishDestroy","first_observed":"2026-11-05T22:16:24.677Z","first_published":"2026-11-05T23:28:50.005Z","source":"phishdestroy","source_name":"PhishDestroy","under":"socialvisor.ru","source_url":"https://phishdestroy.io/domain/socialvisor.ru/"}],"url":"https://domainspoof.com/live?show=all&q=esxi.socialvisor.ru"},{"hostname":"extranet.socialvisor.ru","first_observed":"2026-11-05T22:31:01.947Z","first_published":"2026-11-05T23:28:50.005Z","brands":[],"dns":"resolved","resolved":["91.215.41.91"],"resolved_at":"2026-11-05T22:31:41Z","dns_checked_at":"2026-11-05T23:39:52.000Z","dns_since":"2026-11-05T23:39:52.000Z","findings":[{"id":"fhtzcvtjnpwmajivlssvz","kind":"reported_domain","summary":"Under socialvisor.ru, reported by PhishDestroy","first_observed":"2026-11-05T22:31:01.947Z","first_published":"2026-11-05T23:28:50.005Z","source":"phishdestroy","source_name":"PhishDestroy","under":"socialvisor.ru","source_url":"https://phishdestroy.io/domain/socialvisor.ru/"}],"url":"https://domainspoof.com/live?show=all&q=extranet.socialvisor.ru"},{"hostname":"faint-earnings.com","first_observed":"2026-11-05T22:10:44.341Z","first_published":"2026-11-05T23:28:50.005Z","brands":[],"dns":"resolved","resolved":["104.21.92.214","172.67.198.217"],"resolved_at":"2026-11-05T22:15:46Z","dns_checked_at":"2026-11-05T23:39:52.000Z","dns_since":"2026-11-05T23:39:52.000Z","findings":[{"id":"fhojsxcy3wjmjy2wh7obb","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T22:10:44.341Z","first_published":"2026-11-05T23:28:50.005Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=faint-earnings.com"},{"hostname":"fanying01.shop","first_observed":"2026-11-05T22:31:01.947Z","first_published":"2026-11-05T23:28:50.005Z","brands":[],"dns":"resolved","resolved":["104.21.25.117","172.67.134.51"],"resolved_at":"2026-11-06T03:31:39Z","dns_checked_at":"2026-11-05T23:39:52.000Z","dns_since":"2026-11-05T23:39:52.000Z","findings":[{"id":"fnlbvpipltqmsxwf2n4xl","kind":"reported_domain","summary":"Listed by NPA 165 (e-commerce)","first_observed":"2026-11-05T22:31:01.947Z","first_published":"2026-11-05T23:28:50.005Z","source":"npa","source_name":"NPA 165","claim":{"category":"e-commerce"}}],"url":"https://domainspoof.com/live?show=all&q=fanying01.shop"},{"hostname":"fi-proposals.live","first_observed":"2026-11-05T22:10:44.341Z","first_published":"2026-11-05T23:28:50.005Z","brands":[],"dns":"resolved","resolved":["104.21.60.86","172.67.194.252"],"resolved_at":"2026-11-05T22:15:48Z","dns_checked_at":"2026-11-05T23:39:52.000Z","dns_since":"2026-11-05T23:39:52.000Z","findings":[{"id":"fk7wfugsxrb22ykgxrhcv","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T22:10:44.341Z","first_published":"2026-11-05T23:28:50.005Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=fi-proposals.live"},{"hostname":"finoro.is","first_observed":"2026-11-05T22:56:59.834Z","first_published":"2026-11-05T23:28:50.005Z","brands":[],"dns":"resolved","resolved":["104.21.0.119","172.67.150.239"],"resolved_at":"2026-11-06T01:21:07Z","dns_checked_at":"2026-11-05T23:39:52.000Z","dns_since":"2026-11-05T23:39:52.000Z","findings":[{"id":"fiigcajsghgjm4aax5zga","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T22:56:59.834Z","first_published":"2026-11-05T23:28:50.005Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=finoro.is"},{"hostname":"firm-purse.com","first_observed":"2026-11-05T22:36:06.370Z","first_published":"2026-11-05T23:28:50.005Z","brands":[],"dns":"resolved","resolved":["104.21.38.162","172.67.136.20"],"resolved_at":"2026-11-05T22:41:21Z","dns_checked_at":"2026-11-05T23:39:52.000Z","dns_since":"2026-11-05T23:39:52.000Z","findings":[{"id":"fuwgd6chbxrqjzzbvi3gm","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T22:36:06.370Z","first_published":"2026-11-05T23:28:50.005Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=firm-purse.com"},{"hostname":"force-burst.com","first_observed":"2026-11-05T22:16:24.677Z","first_published":"2026-11-05T23:28:50.005Z","brands":[],"dns":"resolved","resolved":["104.21.81.90","172.67.141.82"],"resolved_at":"2026-11-05T22:21:44Z","dns_checked_at":"2026-11-05T23:39:52.000Z","dns_since":"2026-11-05T23:39:52.000Z","findings":[{"id":"fcezxkjtvwhgckvmq7skq","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T22:16:24.677Z","first_published":"2026-11-05T23:28:50.005Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=force-burst.com"},{"hostname":"forgexonedgeai.digital","first_observed":"2026-11-05T23:16:08.129Z","first_published":"2026-11-05T23:28:50.005Z","brands":[],"dns":"resolved","resolved":["185.62.58.129"],"resolved_at":"2026-11-06T02:34:07Z","dns_checked_at":"2026-11-05T23:39:52.000Z","dns_since":"2026-11-05T23:39:52.000Z","findings":[{"id":"f5utpepgovtrfjp3oqiby","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T23:16:08.129Z","first_published":"2026-11-05T23:28:50.005Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=forgexonedgeai.digital"},{"hostname":"freight-ledger.com","first_observed":"2026-11-05T22:46:33.970Z","first_published":"2026-11-05T23:28:50.005Z","brands":[],"dns":"no_address","resolved":[],"resolved_at":"2026-11-05T22:50:49Z","dns_checked_at":"2026-11-06T15:59:29.000Z","findings":[{"id":"fabatebsukrcekda5pf3d","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T22:46:33.970Z","first_published":"2026-11-05T23:28:50.005Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=freight-ledger.com"},{"hostname":"gift-card.luzo.app","first_observed":"2026-11-05T22:56:59.834Z","first_published":"2026-11-05T23:28:50.005Z","brands":[],"dns":"resolved","resolved":["199.36.158.100"],"resolved_at":"2026-11-05T23:09:38Z","dns_checked_at":"2026-11-05T23:39:52.000Z","dns_since":"2026-11-05T23:39:52.000Z","findings":[{"id":"fbt5mwbocwogng3lesnsm","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T22:56:59.834Z","first_published":"2026-11-05T23:28:50.005Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/gift-card.luzo.app/"}],"url":"https://domainspoof.com/live?show=all&q=gift-card.luzo.app"},{"hostname":"giustowex.live","first_observed":"2026-11-05T23:10:37.449Z","first_published":"2026-11-05T23:28:50.005Z","brands":[],"dns":"resolved","resolved":["104.21.56.150","172.67.152.190"],"resolved_at":"2026-11-05T23:18:20Z","dns_checked_at":"2026-11-05T23:39:52.000Z","dns_since":"2026-11-05T23:39:52.000Z","findings":[{"id":"fixsfgqcndosasnugpnaf","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T23:10:37.449Z","first_published":"2026-11-05T23:28:50.005Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=giustowex.live"},{"hostname":"globalstarks.com","first_observed":"2026-11-05T23:05:39.527Z","first_published":"2026-11-05T23:28:50.005Z","brands":[],"dns":"resolved","resolved":["104.21.61.191","172.67.213.16"],"resolved_at":"2026-11-05T23:06:27Z","dns_checked_at":"2026-11-05T23:39:52.000Z","dns_since":"2026-11-05T23:39:52.000Z","findings":[{"id":"fvwmlcbid7git3tkparew","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T23:05:39.527Z","first_published":"2026-11-05T23:28:50.005Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/globalstarks.com/"}],"url":"https://domainspoof.com/live?show=all&q=globalstarks.com"},{"hostname":"grandbet.cc","first_observed":"2026-11-05T22:10:44.341Z","first_published":"2026-11-05T23:28:50.005Z","brands":[],"dns":"resolved","resolved":["104.21.83.177","172.67.180.25"],"resolved_at":"2026-11-05T22:15:50Z","dns_checked_at":"2026-11-05T23:39:52.000Z","dns_since":"2026-11-05T23:39:52.000Z","findings":[{"id":"fytzymyn6px57d4tztfws","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T22:10:44.341Z","first_published":"2026-11-05T23:28:50.005Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/grandbet.cc/"}],"url":"https://domainspoof.com/live?show=all&q=grandbet.cc"},{"hostname":"grandoperabetgirisadresi.vip","first_observed":"2026-11-05T22:16:24.677Z","first_published":"2026-11-05T23:28:50.005Z","brands":[],"dns":"resolved","resolved":["104.21.70.77","172.67.221.163"],"resolved_at":"2026-11-05T22:21:45Z","dns_checked_at":"2026-11-05T23:39:52.000Z","dns_since":"2026-11-05T23:39:52.000Z","findings":[{"id":"fnp2lnthxup7x3osycej6","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T22:16:24.677Z","first_published":"2026-11-05T23:28:50.005Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/grandoperabetgirisadresi.vip/"}],"url":"https://domainspoof.com/live?show=all&q=grandoperabetgirisadresi.vip"},{"hostname":"grymmoncoren93.live","first_observed":"2026-11-05T22:31:01.947Z","first_published":"2026-11-05T23:28:50.005Z","brands":[],"dns":"resolved","resolved":["104.21.28.173","172.67.146.237"],"resolved_at":"2026-11-05T22:31:42Z","dns_checked_at":"2026-11-05T23:39:52.000Z","dns_since":"2026-11-05T23:39:52.000Z","findings":[{"id":"f2vc4nzspzi3xhhxmaago","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T22:31:01.947Z","first_published":"2026-11-05T23:28:50.005Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=grymmoncoren93.live"},{"hostname":"helvetis-vector-es.live","first_observed":"2026-11-05T22:46:33.970Z","first_published":"2026-11-05T23:28:50.005Z","brands":[],"dns":"resolved","resolved":["104.21.36.45","172.67.185.50"],"resolved_at":"2026-11-05T22:50:50Z","dns_checked_at":"2026-11-05T23:39:52.000Z","dns_since":"2026-11-05T23:39:52.000Z","findings":[{"id":"fzncd3jkxzr7zmqcqpwz7","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T22:46:33.970Z","first_published":"2026-11-05T23:28:50.005Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=helvetis-vector-es.live"},{"hostname":"herocodes.net","first_observed":"2026-11-05T23:16:08.129Z","first_published":"2026-11-05T23:28:50.005Z","brands":[],"dns":"resolved","resolved":["104.21.87.34","172.67.140.114"],"resolved_at":"2026-11-05T23:25:09Z","dns_checked_at":"2026-11-05T23:39:52.000Z","dns_since":"2026-11-05T23:39:52.000Z","findings":[{"id":"fskd357gfv6dwwaajya3z","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T23:16:08.129Z","first_published":"2026-11-05T23:28:50.005Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/herocodes.net/"}],"url":"https://domainspoof.com/live?show=all&q=herocodes.net"},{"hostname":"hipnank.cn","first_observed":"2026-11-05T23:00:48.504Z","first_published":"2026-11-05T23:28:50.005Z","brands":[],"dns":"resolved","resolved":["104.21.53.165","172.67.215.168"],"resolved_at":"2026-11-06T03:14:26Z","dns_checked_at":"2026-11-05T23:39:52.000Z","dns_since":"2026-11-05T23:39:52.000Z","findings":[{"id":"fxvpuvplzi7bjlobyatj7","kind":"reported_domain","summary":"Listed by NPA 165 (e-commerce)","first_observed":"2026-11-05T23:00:48.504Z","first_published":"2026-11-05T23:28:50.005Z","source":"npa","source_name":"NPA 165","claim":{"category":"e-commerce"}}],"url":"https://domainspoof.com/live?show=all&q=hipnank.cn"},{"hostname":"identity.socialvisor.ru","first_observed":"2026-11-05T22:46:33.970Z","first_published":"2026-11-05T23:28:50.005Z","brands":[],"dns":"resolved","resolved":["91.215.41.91"],"resolved_at":"2026-11-05T22:50:51Z","dns_checked_at":"2026-11-05T23:39:52.000Z","dns_since":"2026-11-05T23:39:52.000Z","findings":[{"id":"fihourmbnb7vfgafpu7d2","kind":"reported_domain","summary":"Under socialvisor.ru, reported by PhishDestroy","first_observed":"2026-11-05T22:46:33.970Z","first_published":"2026-11-05T23:28:50.005Z","source":"phishdestroy","source_name":"PhishDestroy","under":"socialvisor.ru","source_url":"https://phishdestroy.io/domain/socialvisor.ru/"}],"url":"https://domainspoof.com/live?show=all&q=identity.socialvisor.ru"},{"hostname":"imap.aaa.kingdom-dmc.com","first_observed":"2026-11-05T23:00:48.504Z","first_published":"2026-11-05T23:28:50.005Z","brands":[],"dns":"resolved","resolved":["185.215.4.42"],"resolved_at":"2026-11-05T23:10:43Z","dns_checked_at":"2026-11-05T23:39:52.000Z","dns_since":"2026-11-05T23:39:52.000Z","findings":[{"id":"fswzn2w2crqskvmuftdba","kind":"reported_domain","summary":"Under kingdom-dmc.com, listed by MetaMask","first_observed":"2026-11-05T23:00:48.504Z","first_published":"2026-11-05T23:28:50.005Z","source":"metamask","source_name":"MetaMask","under":"kingdom-dmc.com"}],"url":"https://domainspoof.com/live?show=all&q=imap.aaa.kingdom-dmc.com"},{"hostname":"img.carotecan.shop","first_observed":"2026-11-05T22:52:00.970Z","first_published":"2026-11-05T23:28:50.005Z","brands":[],"dns":"resolved","resolved":["34.8.221.67"],"resolved_at":"2026-11-05T22:52:26Z","dns_checked_at":"2026-11-05T23:39:52.000Z","dns_since":"2026-11-05T23:39:52.000Z","findings":[{"id":"f47o4azovihry7q42xjyt","kind":"reported_domain","summary":"Under carotecan.shop, listed by CERT Polska","first_observed":"2026-11-05T22:52:00.970Z","first_published":"2026-11-05T23:28:50.005Z","source":"cert_polska","source_name":"CERT Polska","under":"carotecan.shop"}],"url":"https://domainspoof.com/live?show=all&q=img.carotecan.shop"},{"hostname":"immediatefusionapp-com.financecryptoworld.com","first_observed":"2026-11-05T22:46:33.970Z","first_published":"2026-11-05T23:28:50.005Z","brands":[],"dns":"resolved","resolved":["104.21.10.130","172.67.131.121"],"resolved_at":"2026-11-05T22:50:52Z","dns_checked_at":"2026-11-05T23:39:52.000Z","dns_since":"2026-11-05T23:39:52.000Z","findings":[{"id":"fbvzf4ockelizmliab5fw","kind":"reported_domain","summary":"Under financecryptoworld.com, listed by CERT Polska","first_observed":"2026-11-05T22:46:33.970Z","first_published":"2026-11-05T23:28:50.005Z","source":"cert_polska","source_name":"CERT Polska","under":"financecryptoworld.com"}],"url":"https://domainspoof.com/live?show=all&q=immediatefusionapp-com.financecryptoworld.com"},{"hostname":"intuitcode.com","first_observed":"2026-11-05T22:35:26.432Z","first_published":"2026-11-05T23:28:50.005Z","brands":[{"id":"intuit","name":"Intuit","url":"https://domainspoof.com/brands/intuit"}],"dns":"resolved","resolved":["2.57.91.91"],"resolved_at":"2026-11-05T23:39:52Z","dns_checked_at":"2026-11-05T23:39:52.000Z","dns_since":"2026-11-05T23:39:52.000Z","findings":[{"id":"frt7tverh7kbf5qtu3aza","kind":"phishing_infrastructure","summary":"Resolved to 2.57.91.91, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T22:35:26.432Z","first_published":"2026-11-05T23:28:50.005Z","address":"2.57.91.91","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/intuit"},{"hostname":"james-co-ledger-app.pages.dev","first_observed":"2026-11-05T23:05:39.527Z","first_published":"2026-11-05T23:28:50.005Z","brands":[],"dns":"resolved","resolved":["172.66.44.83","172.66.47.173"],"resolved_at":"2026-11-05T23:12:15Z","dns_checked_at":"2026-11-05T23:39:52.000Z","dns_since":"2026-11-05T23:39:52.000Z","findings":[{"id":"fdmb5kijs5zsmbq5r457w","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T23:05:39.527Z","first_published":"2026-11-05T23:28:50.005Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=james-co-ledger-app.pages.dev"},{"hostname":"jasonsdeli.today","first_observed":"2026-11-05T23:21:02.044Z","first_published":"2026-11-05T23:28:50.005Z","brands":[],"dns":"resolved","resolved":["104.21.86.151","172.67.221.76"],"resolved_at":"2026-11-06T01:38:37Z","dns_checked_at":"2026-11-05T23:39:52.000Z","dns_since":"2026-11-05T23:39:52.000Z","findings":[{"id":"fbwsrscxyzsfy7fi64l3h","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T23:21:02.044Z","first_published":"2026-11-05T23:28:50.005Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/jasonsdeli.today/"}],"url":"https://domainspoof.com/live?show=all&q=jasonsdeli.today"},{"hostname":"jzamiqcw.jdkqtaum.jqakeigr.npwbyidz.emnbzdvj.uatmfwcq.gatewaylearning.ezgateway.net","first_observed":"2026-11-05T23:21:02.044Z","first_published":"2026-11-05T23:28:50.005Z","brands":[],"dns":"resolved","resolved":["15.204.116.29"],"resolved_at":"2026-11-05T23:30:33Z","dns_checked_at":"2026-11-05T23:39:52.000Z","dns_since":"2026-11-05T23:39:52.000Z","findings":[{"id":"feuqz2rbqdcez4ptnwstp","kind":"reported_domain","summary":"Under ezgateway.net, listed by USOM","first_observed":"2026-11-05T23:21:02.044Z","first_published":"2026-11-05T23:28:50.005Z","source":"usom","source_name":"USOM","under":"ezgateway.net"}],"url":"https://domainspoof.com/live?show=all&q=jzamiqcw.jdkqtaum.jqakeigr.npwbyidz.emnbzdvj.uatmfwcq.gatewaylearning.ezgateway.net"},{"hostname":"keplrwallet-desktopapp.live","first_observed":"2026-11-05T22:10:44.341Z","first_published":"2026-11-05T23:28:50.005Z","brands":[],"dns":"resolved","resolved":["104.21.95.52","172.67.143.69"],"resolved_at":"2026-11-05T22:16:01Z","dns_checked_at":"2026-11-05T23:39:52.000Z","dns_since":"2026-11-05T23:39:52.000Z","findings":[{"id":"f3pg2hlogiumhnyhccvi5","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T22:10:44.341Z","first_published":"2026-11-05T23:28:50.005Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=keplrwallet-desktopapp.live"},{"hostname":"kraken3yvbvzmhytnrnuhsy772i6dfobofu652e27f5hx6y5cpj7rgyd.cc","first_observed":"2026-11-05T23:21:02.044Z","first_published":"2026-11-05T23:28:50.005Z","brands":[],"dns":"resolved","resolved":["104.21.52.184","172.67.202.216"],"resolved_at":"2026-11-05T23:30:34Z","dns_checked_at":"2026-11-05T23:39:52.000Z","dns_since":"2026-11-05T23:39:52.000Z","findings":[{"id":"fxrp4ews44d6t3ul567oq","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T23:21:02.044Z","first_published":"2026-11-05T23:28:50.005Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/kraken3yvbvzmhytnrnuhsy772i6dfobofu652e27f5hx6y5cpj7rgyd.cc/"}],"url":"https://domainspoof.com/live?show=all&q=kraken3yvbvzmhytnrnuhsy772i6dfobofu652e27f5hx6y5cpj7rgyd.cc"},{"hostname":"kydb8f.xyz","first_observed":"2026-11-05T22:46:33.970Z","first_published":"2026-11-05T23:28:50.005Z","brands":[],"dns":"resolved","resolved":["104.21.92.37","172.67.186.15"],"resolved_at":"2026-11-05T22:50:53Z","dns_checked_at":"2026-11-05T23:39:52.000Z","dns_since":"2026-11-05T23:39:52.000Z","findings":[{"id":"fplgit7upovgyx2zajd2e","kind":"reported_domain","summary":"Listed by NPA 165 (e-commerce)","first_observed":"2026-11-05T22:46:33.970Z","first_published":"2026-11-05T23:28:50.005Z","source":"npa","source_name":"NPA 165","claim":{"category":"e-commerce"}}],"url":"https://domainspoof.com/live?show=all&q=kydb8f.xyz"},{"hostname":"lebellearti.com","first_observed":"2026-11-05T23:00:48.504Z","first_published":"2026-11-05T23:28:50.005Z","brands":[],"dns":"resolved","resolved":["167.99.183.214"],"resolved_at":"2026-11-06T00:32:12Z","dns_checked_at":"2026-11-05T23:39:52.000Z","dns_since":"2026-11-05T23:39:52.000Z","findings":[{"id":"fgyddp7oo2rrtx3nrkebd","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T23:00:48.504Z","first_published":"2026-11-05T23:28:50.005Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=lebellearti.com"},{"hostname":"ledgr-es-ui.pages.dev","first_observed":"2026-11-05T22:10:44.341Z","first_published":"2026-11-05T23:28:50.005Z","brands":[],"dns":"resolved","resolved":["172.66.44.84","172.66.47.172"],"resolved_at":"2026-11-06T00:11:21Z","dns_checked_at":"2026-11-05T23:39:52.000Z","dns_since":"2026-11-05T23:39:52.000Z","findings":[{"id":"fqnjzxiegyd4zwy245ex7","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T22:10:44.341Z","first_published":"2026-11-05T23:28:50.005Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=ledgr-es-ui.pages.dev"},{"hostname":"link.telesense.app","first_observed":"2026-11-05T22:56:59.834Z","first_published":"2026-11-05T23:28:50.005Z","brands":[],"dns":"resolved","resolved":["151.101.1.195","151.101.65.195"],"resolved_at":"2026-11-05T22:57:27Z","dns_checked_at":"2026-11-05T23:39:52.000Z","dns_since":"2026-11-05T23:39:52.000Z","findings":[{"id":"fph42gkinccfudncykksi","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T22:56:59.834Z","first_published":"2026-11-05T23:28:50.005Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/link.telesense.app/"}],"url":"https://domainspoof.com/live?show=all&q=link.telesense.app"},{"hostname":"localino.app","first_observed":"2026-11-05T22:56:59.834Z","first_published":"2026-11-05T23:28:50.005Z","brands":[],"dns":"resolved","resolved":["151.101.1.195","151.101.65.195"],"resolved_at":"2026-11-05T22:57:27Z","dns_checked_at":"2026-11-05T23:39:52.000Z","dns_since":"2026-11-05T23:39:52.000Z","findings":[{"id":"fk6le3a26g3644whnkpul","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T22:56:59.834Z","first_published":"2026-11-05T23:28:50.005Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/localino.app/"}],"url":"https://domainspoof.com/live?show=all&q=localino.app"},{"hostname":"logos.go-fet.ch","first_observed":"2026-11-05T22:56:59.834Z","first_published":"2026-11-05T23:28:50.005Z","brands":[],"dns":"resolved","resolved":["151.101.1.195","151.101.65.195"],"resolved_at":"2026-11-05T22:57:27Z","dns_checked_at":"2026-11-05T23:39:52.000Z","dns_since":"2026-11-05T23:39:52.000Z","findings":[{"id":"f7xo32e4anzy7knlrgb5b","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T22:56:59.834Z","first_published":"2026-11-05T23:28:50.005Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/logos.go-fet.ch/"}],"url":"https://domainspoof.com/live?show=all&q=logos.go-fet.ch"},{"hostname":"lordi-film1.lol","first_observed":"2026-11-05T22:26:11.932Z","first_published":"2026-11-05T23:28:50.005Z","brands":[],"dns":"no_address","resolved":[],"resolved_at":"2026-11-05T22:35:27Z","dns_checked_at":"2026-11-06T15:59:29.000Z","findings":[{"id":"fznhojo2ps2vcgk5w5euw","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T22:26:11.932Z","first_published":"2026-11-05T23:28:50.005Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=lordi-film1.lol"},{"hostname":"lumic-glide.com","first_observed":"2026-11-05T22:36:06.370Z","first_published":"2026-11-05T23:28:50.005Z","brands":[],"dns":"resolved","resolved":["104.21.11.35","172.67.165.29"],"resolved_at":"2026-11-05T22:41:23Z","dns_checked_at":"2026-11-05T23:39:52.000Z","dns_since":"2026-11-05T23:39:52.000Z","findings":[{"id":"fbusio7k4kri3nvoh7dw2","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T22:36:06.370Z","first_published":"2026-11-05T23:28:50.005Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=lumic-glide.com"},{"hostname":"luminary-bend.com","first_observed":"2026-11-05T22:41:04.757Z","first_published":"2026-11-05T23:28:50.005Z","brands":[],"dns":"resolved","resolved":["104.21.64.17","172.67.174.28"],"resolved_at":"2026-11-05T22:44:50Z","dns_checked_at":"2026-11-05T23:39:52.000Z","dns_since":"2026-11-05T23:39:52.000Z","findings":[{"id":"fhqcnfuvcgvai2443hpie","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T22:41:04.757Z","first_published":"2026-11-05T23:28:50.005Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=luminary-bend.com"},{"hostname":"m-sglkrndrhber.cfd","first_observed":"2026-11-05T23:19:22.415Z","first_published":"2026-11-05T23:28:50.005Z","brands":[],"dns":"resolved","resolved":["104.21.38.59","172.67.219.140","2606:4700:3033::ac43:db8c","2606:4700:3035::6815:263b"],"resolved_at":"2026-11-05T23:19:34Z","dns_checked_at":"2026-11-05T23:39:52.000Z","dns_since":"2026-11-05T23:39:52.000Z","findings":[{"id":"fbo3gkikwphvh7jgny5te","kind":"reported_domain","summary":"Listed by USOM","first_observed":"2026-11-05T23:19:22.415Z","first_published":"2026-11-05T23:28:50.005Z","source":"usom","source_name":"USOM"}],"url":"https://domainspoof.com/live?show=all&q=m-sglkrndrhber.cfd"},{"hostname":"m.pe-binance.com.cn","first_observed":"2026-11-05T22:52:26.815Z","first_published":"2026-11-05T23:28:50.005Z","brands":[{"id":"binance","name":"Binance","url":"https://domainspoof.com/brands/binance"}],"dns":"resolved","resolved":["154.31.148.87"],"resolved_at":"2026-11-05T23:39:52Z","dns_checked_at":"2026-11-05T23:39:52.000Z","dns_since":"2026-11-05T23:39:52.000Z","findings":[{"id":"f6efqdier3xv3e62livim","kind":"phishing_infrastructure","summary":"Resolved to 154.31.148.87, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T22:52:26.815Z","first_published":"2026-11-05T23:28:50.005Z","address":"154.31.148.87","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/binance"},{"hostname":"m.um-binance.com.cn","first_observed":"2026-11-05T22:57:27.638Z","first_published":"2026-11-05T23:28:50.005Z","brands":[{"id":"binance","name":"Binance","url":"https://domainspoof.com/brands/binance"}],"dns":"resolved","resolved":["154.31.150.83"],"resolved_at":"2026-11-05T23:39:52Z","dns_checked_at":"2026-11-05T23:39:52.000Z","dns_since":"2026-11-05T23:39:52.000Z","findings":[{"id":"fsbmo7egeoviqbxxa4rox","kind":"phishing_infrastructure","summary":"Resolved to 154.31.150.83, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T22:57:27.638Z","first_published":"2026-11-05T23:28:50.005Z","address":"154.31.150.83","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/binance"},{"hostname":"mail.globalstarks.com","first_observed":"2026-11-05T23:05:39.527Z","first_published":"2026-11-05T23:28:50.005Z","brands":[],"dns":"resolved","resolved":["157.250.205.210"],"resolved_at":"2026-11-05T23:12:16Z","dns_checked_at":"2026-11-05T23:39:52.000Z","dns_since":"2026-11-05T23:39:52.000Z","findings":[{"id":"fxzfz22xkp7cxuo4nmza5","kind":"reported_domain","summary":"Under globalstarks.com, reported by PhishDestroy","first_observed":"2026-11-05T23:05:39.527Z","first_published":"2026-11-05T23:28:50.005Z","source":"phishdestroy","source_name":"PhishDestroy","under":"globalstarks.com","source_url":"https://phishdestroy.io/domain/globalstarks.com/"}],"url":"https://domainspoof.com/live?show=all&q=mail.globalstarks.com"},{"hostname":"mail.toyota12.digital","first_observed":"2026-11-05T22:31:42.885Z","first_published":"2026-11-05T23:28:50.005Z","brands":[{"id":"toyota","name":"Toyota","url":"https://domainspoof.com/brands/toyota"}],"dns":"resolved","resolved":["151.246.1.103"],"resolved_at":"2026-11-05T23:39:52Z","dns_checked_at":"2026-11-05T23:39:52.000Z","dns_since":"2026-11-05T23:39:52.000Z","findings":[{"id":"fui5ozc73sqkelnogy5r3","kind":"phishing_infrastructure","summary":"Resolved to 151.246.1.103, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T22:31:42.885Z","first_published":"2026-11-05T23:28:50.005Z","address":"151.246.1.103","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/toyota"},{"hostname":"mail.toyota33.digital","first_observed":"2026-11-05T22:31:42.886Z","first_published":"2026-11-05T23:28:50.005Z","brands":[{"id":"toyota","name":"Toyota","url":"https://domainspoof.com/brands/toyota"}],"dns":"resolved","resolved":["151.246.1.103"],"resolved_at":"2026-11-05T23:39:52Z","dns_checked_at":"2026-11-05T23:39:52.000Z","dns_since":"2026-11-05T23:39:52.000Z","findings":[{"id":"f3uwdxatkrm6mxyiuoo5s","kind":"phishing_infrastructure","summary":"Resolved to 151.246.1.103, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T22:31:42.886Z","first_published":"2026-11-05T23:28:50.005Z","address":"151.246.1.103","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/toyota"},{"hostname":"mail.toyota55.digital","first_observed":"2026-11-05T22:31:42.887Z","first_published":"2026-11-05T23:28:50.005Z","brands":[{"id":"toyota","name":"Toyota","url":"https://domainspoof.com/brands/toyota"}],"dns":"resolved","resolved":["151.246.1.103"],"resolved_at":"2026-11-05T23:39:52Z","dns_checked_at":"2026-11-05T23:39:52.000Z","dns_since":"2026-11-05T23:39:52.000Z","findings":[{"id":"fdmupqwzflt4d5lvqntls","kind":"phishing_infrastructure","summary":"Resolved to 151.246.1.103, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T22:31:42.887Z","first_published":"2026-11-05T23:28:50.005Z","address":"151.246.1.103","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/toyota"},{"hostname":"mail.toyota89.digital","first_observed":"2026-11-05T22:31:42.889Z","first_published":"2026-11-05T23:28:50.005Z","brands":[{"id":"toyota","name":"Toyota","url":"https://domainspoof.com/brands/toyota"}],"dns":"resolved","resolved":["151.246.1.103"],"resolved_at":"2026-11-05T23:39:52Z","dns_checked_at":"2026-11-05T23:39:52.000Z","dns_since":"2026-11-05T23:39:52.000Z","findings":[{"id":"f36kz4lhujcd62a7qvtue","kind":"phishing_infrastructure","summary":"Resolved to 151.246.1.103, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T22:31:42.889Z","first_published":"2026-11-05T23:28:50.005Z","address":"151.246.1.103","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/toyota"},{"hostname":"main-reward.com","first_observed":"2026-11-05T22:56:59.834Z","first_published":"2026-11-05T23:28:50.005Z","brands":[],"dns":"resolved","resolved":["104.21.79.180","172.67.146.217"],"resolved_at":"2026-11-05T22:57:27Z","dns_checked_at":"2026-11-05T23:39:52.000Z","dns_since":"2026-11-05T23:39:52.000Z","findings":[{"id":"fdvnxhqxwaicrr2ulnok7","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T22:56:59.834Z","first_published":"2026-11-05T23:28:50.005Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=main-reward.com"},{"hostname":"meet.ni-electrical.com","first_observed":"2026-11-05T22:10:44.341Z","first_published":"2026-11-05T23:28:50.005Z","brands":[],"dns":"resolved","resolved":["109.238.86.5"],"resolved_at":"2026-11-05T22:16:03Z","dns_checked_at":"2026-11-05T23:39:52.000Z","dns_since":"2026-11-05T23:39:52.000Z","findings":[{"id":"fjzqlmz3jdtfprenvzhyg","kind":"reported_domain","summary":"Under ni-electrical.com, listed by CERT Polska","first_observed":"2026-11-05T22:10:44.341Z","first_published":"2026-11-05T23:28:50.005Z","source":"cert_polska","source_name":"CERT Polska","under":"ni-electrical.com"}],"url":"https://domainspoof.com/live?show=all&q=meet.ni-electrical.com"},{"hostname":"meridianprive.shop","first_observed":"2026-11-05T23:05:39.527Z","first_published":"2026-11-05T23:28:50.005Z","brands":[],"dns":"no_address","resolved":[],"resolved_at":"2026-11-05T23:12:16Z","dns_checked_at":"2026-11-06T15:59:29.000Z","findings":[{"id":"fjxrw42aofqhyylv6szfy","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T23:05:39.527Z","first_published":"2026-11-05T23:28:50.005Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=meridianprive.shop"},{"hostname":"minocrernot.pages.dev","first_observed":"2026-11-05T22:31:01.947Z","first_published":"2026-11-05T23:28:50.005Z","brands":[],"dns":"resolved","resolved":["172.66.44.152","172.66.47.104"],"resolved_at":"2026-11-06T02:26:32Z","dns_checked_at":"2026-11-05T23:39:52.000Z","dns_since":"2026-11-05T23:39:52.000Z","findings":[{"id":"fyzxqxnihmicn6j65uct5","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T22:31:01.947Z","first_published":"2026-11-05T23:28:50.005Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=minocrernot.pages.dev"},{"hostname":"mirelqanthvorzelyx-fr.live","first_observed":"2026-11-05T22:36:06.370Z","first_published":"2026-11-05T23:28:50.005Z","brands":[],"dns":"resolved","resolved":["104.21.60.86","172.67.194.252"],"resolved_at":"2026-11-06T01:21:12Z","dns_checked_at":"2026-11-05T23:39:52.000Z","dns_since":"2026-11-05T23:39:52.000Z","findings":[{"id":"ffrwmssf6tzxdsahvpxee","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T22:36:06.370Z","first_published":"2026-11-05T23:28:50.005Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=mirelqanthvorzelyx-fr.live"},{"hostname":"modelmaxaltopt.live","first_observed":"2026-11-05T22:31:01.947Z","first_published":"2026-11-05T23:28:50.005Z","brands":[],"dns":"resolved","resolved":["104.21.43.66","172.67.221.117"],"resolved_at":"2026-11-05T22:31:42Z","dns_checked_at":"2026-11-05T23:39:52.000Z","dns_since":"2026-11-05T23:39:52.000Z","findings":[{"id":"fx5fjlb5czwxjgx2vu7wl","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T22:31:01.947Z","first_published":"2026-11-05T23:28:50.005Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=modelmaxaltopt.live"},{"hostname":"mytrixhalogptreview.com","first_observed":"2026-11-05T22:41:04.757Z","first_published":"2026-11-05T23:28:50.005Z","brands":[],"dns":"resolved","resolved":["104.21.20.152","172.67.193.40"],"resolved_at":"2026-11-06T02:00:55Z","dns_checked_at":"2026-11-05T23:39:52.000Z","dns_since":"2026-11-05T23:39:52.000Z","findings":[{"id":"fxwnr42oj3xsx522itovb","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T22:41:04.757Z","first_published":"2026-11-05T23:28:50.005Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=mytrixhalogptreview.com"},{"hostname":"mzeldravoqai-fr.live","first_observed":"2026-11-05T23:10:37.449Z","first_published":"2026-11-05T23:28:50.005Z","brands":[],"dns":"resolved","resolved":["104.21.71.24","172.67.142.74"],"resolved_at":"2026-11-05T23:18:26Z","dns_checked_at":"2026-11-05T23:39:52.000Z","dns_since":"2026-11-05T23:39:52.000Z","findings":[{"id":"fjoszxdwshke3q4zgalzk","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T23:10:37.449Z","first_published":"2026-11-05T23:28:50.005Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=mzeldravoqai-fr.live"},{"hostname":"net.exchange.taxi","first_observed":"2026-11-05T22:31:01.947Z","first_published":"2026-11-05T23:28:50.005Z","brands":[],"dns":"resolved","resolved":["186.2.175.41"],"resolved_at":"2026-11-05T22:31:42Z","dns_checked_at":"2026-11-05T23:39:52.000Z","dns_since":"2026-11-05T23:39:52.000Z","findings":[{"id":"fqn4bo5gmm22kphm7wbeh","kind":"reported_domain","summary":"Under exchange.taxi, listed by MetaMask","first_observed":"2026-11-05T22:31:01.947Z","first_published":"2026-11-05T23:28:50.005Z","source":"metamask","source_name":"MetaMask","under":"exchange.taxi"}],"url":"https://domainspoof.com/live?show=all&q=net.exchange.taxi"},{"hostname":"nodered.socialvisor.ru","first_observed":"2026-11-05T22:16:24.677Z","first_published":"2026-11-05T23:28:50.005Z","brands":[],"dns":"resolved","resolved":["91.215.41.91"],"resolved_at":"2026-11-05T22:22:09Z","dns_checked_at":"2026-11-05T23:39:52.000Z","dns_since":"2026-11-05T23:39:52.000Z","findings":[{"id":"fdz7srwrmosdzep24hlmv","kind":"reported_domain","summary":"Under socialvisor.ru, reported by PhishDestroy","first_observed":"2026-11-05T22:16:24.677Z","first_published":"2026-11-05T23:28:50.005Z","source":"phishdestroy","source_name":"PhishDestroy","under":"socialvisor.ru","source_url":"https://phishdestroy.io/domain/socialvisor.ru/"}],"url":"https://domainspoof.com/live?show=all&q=nodered.socialvisor.ru"},{"hostname":"outlook.ni-electrical.com","first_observed":"2026-11-05T22:10:44.341Z","first_published":"2026-11-05T23:28:50.005Z","brands":[],"dns":"resolved","resolved":["109.238.86.5"],"resolved_at":"2026-11-05T22:16:07Z","dns_checked_at":"2026-11-05T23:39:52.000Z","dns_since":"2026-11-05T23:39:52.000Z","findings":[{"id":"fmink7xr2ld5oijab765m","kind":"reported_domain","summary":"Under ni-electrical.com, listed by CERT Polska","first_observed":"2026-11-05T22:10:44.341Z","first_published":"2026-11-05T23:28:50.005Z","source":"cert_polska","source_name":"CERT Polska","under":"ni-electrical.com"}],"url":"https://domainspoof.com/live?show=all&q=outlook.ni-electrical.com"},{"hostname":"panpackwazmail24.com","first_observed":"2026-11-05T22:56:59.834Z","first_published":"2026-11-05T23:28:50.005Z","brands":[],"dns":"resolved","resolved":["104.21.4.106","172.67.131.253"],"resolved_at":"2026-11-05T22:57:27Z","dns_checked_at":"2026-11-05T23:39:52.000Z","dns_since":"2026-11-05T23:39:52.000Z","findings":[{"id":"fthoeoamfqeufjyv3qnus","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T22:56:59.834Z","first_published":"2026-11-05T23:28:50.005Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=panpackwazmail24.com"},{"hostname":"pay.pochta.2015-10-20-002949.cdek.rhxyvcq9vvts2ld9.r.mail.leankoala.com","first_observed":"2026-11-05T22:41:24.251Z","first_published":"2026-11-05T23:28:50.005Z","brands":[{"id":"russian-post","name":"Russian Post","url":"https://domainspoof.com/brands/russian-post"}],"dns":"resolved","resolved":["172.246.243.65"],"resolved_at":"2026-11-05T23:39:52Z","dns_checked_at":"2026-11-05T23:39:52.000Z","dns_since":"2026-11-05T23:39:52.000Z","findings":[{"id":"fuydoh4vehib2x5hrhqyi","kind":"phishing_infrastructure","summary":"Resolved to 172.246.243.65, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T22:41:24.251Z","first_published":"2026-11-05T23:28:50.005Z","address":"172.246.243.65","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/russian-post"},{"hostname":"pe-binance.com.cn","first_observed":"2026-11-05T22:52:26.997Z","first_published":"2026-11-05T23:28:50.005Z","brands":[{"id":"binance","name":"Binance","url":"https://domainspoof.com/brands/binance"}],"dns":"resolved","resolved":["154.31.148.87"],"resolved_at":"2026-11-05T23:39:52Z","dns_checked_at":"2026-11-05T23:39:52.000Z","dns_since":"2026-11-05T23:39:52.000Z","findings":[{"id":"fjwslxuwfd7vupw3bh72n","kind":"phishing_infrastructure","summary":"Resolved to 154.31.148.87, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T22:52:26.997Z","first_published":"2026-11-05T23:28:50.005Z","address":"154.31.148.87","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/binance"},{"hostname":"penguworld.us","first_observed":"2026-11-05T22:16:24.677Z","first_published":"2026-11-05T23:28:50.005Z","brands":[],"dns":"resolved","resolved":["104.21.69.228","172.67.214.153"],"resolved_at":"2026-11-06T02:07:14Z","dns_checked_at":"2026-11-05T23:39:52.000Z","dns_since":"2026-11-05T23:39:52.000Z","findings":[{"id":"fodaldkeu64omdz4mylwx","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T22:16:24.677Z","first_published":"2026-11-05T23:28:50.005Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=penguworld.us"},{"hostname":"pertaminainvest.live","first_observed":"2026-11-05T23:16:08.129Z","first_published":"2026-11-05T23:28:50.005Z","brands":[],"dns":"resolved","resolved":["104.21.46.79","172.67.136.107"],"resolved_at":"2026-11-05T23:25:12Z","dns_checked_at":"2026-11-05T23:39:52.000Z","dns_since":"2026-11-05T23:39:52.000Z","findings":[{"id":"fopy6hocoph26titaltqk","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T23:16:08.129Z","first_published":"2026-11-05T23:28:50.005Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=pertaminainvest.live"},{"hostname":"phantom-app.at","first_observed":"2026-11-05T22:21:30.901Z","first_published":"2026-11-05T23:28:50.005Z","brands":[],"dns":"resolved","resolved":["104.21.34.217","172.67.165.152"],"resolved_at":"2026-11-06T10:27:49Z","dns_checked_at":"2026-11-05T23:39:52.000Z","dns_since":"2026-11-05T23:39:52.000Z","findings":[{"id":"fvjspjdbiaojgel6e6qid","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T22:21:30.901Z","first_published":"2026-11-05T23:28:50.005Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=phantom-app.at"},{"hostname":"plasma-arrays.pages.dev","first_observed":"2026-11-05T22:21:30.901Z","first_published":"2026-11-05T23:28:50.005Z","brands":[],"dns":"resolved","resolved":["172.66.44.135","172.66.47.121"],"resolved_at":"2026-11-05T22:28:00Z","dns_checked_at":"2026-11-05T23:39:52.000Z","dns_since":"2026-11-05T23:39:52.000Z","findings":[{"id":"fjfpnq4zqgyyjka2y2a5j","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T22:21:30.901Z","first_published":"2026-11-05T23:28:50.005Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=plasma-arrays.pages.dev"},{"hostname":"plovydiv.com","first_observed":"2026-11-05T22:26:11.932Z","first_published":"2026-11-05T23:28:50.005Z","brands":[],"dns":"resolved","resolved":["179.43.170.153"],"resolved_at":"2026-11-05T22:35:29Z","dns_checked_at":"2026-11-05T23:39:52.000Z","dns_since":"2026-11-05T23:39:52.000Z","findings":[{"id":"fwqypuksa7dsgzpxelo73","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T22:26:11.932Z","first_published":"2026-11-05T23:28:50.005Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=plovydiv.com"},{"hostname":"plrl-claim.live","first_observed":"2026-11-05T22:10:44.341Z","first_published":"2026-11-05T23:28:50.005Z","brands":[],"dns":"resolved","resolved":["104.21.38.175","172.67.137.26"],"resolved_at":"2026-11-05T22:16:08Z","dns_checked_at":"2026-11-05T23:39:52.000Z","dns_since":"2026-11-05T23:39:52.000Z","findings":[{"id":"frjms3mcui7rkzvhquxbb","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T22:10:44.341Z","first_published":"2026-11-05T23:28:50.005Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/plrl-claim.live/"}],"url":"https://domainspoof.com/live?show=all&q=plrl-claim.live"},{"hostname":"pndlrstking.cfd","first_observed":"2026-11-05T23:16:08.129Z","first_published":"2026-11-05T23:28:50.005Z","brands":[],"dns":"resolved","resolved":["104.21.83.142","172.67.177.110"],"resolved_at":"2026-11-05T23:25:12Z","dns_checked_at":"2026-11-05T23:39:52.000Z","dns_since":"2026-11-05T23:39:52.000Z","findings":[{"id":"f4bi5bflfxxrm6lhz6hca","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T23:16:08.129Z","first_published":"2026-11-05T23:28:50.005Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=pndlrstking.cfd"},{"hostname":"polzentra-es.live","first_observed":"2026-11-05T22:31:01.947Z","first_published":"2026-11-05T23:28:50.005Z","brands":[],"dns":"resolved","resolved":["104.21.12.30","172.67.131.235"],"resolved_at":"2026-11-05T22:31:43Z","dns_checked_at":"2026-11-05T23:39:52.000Z","dns_since":"2026-11-05T23:39:52.000Z","findings":[{"id":"fthpu5hce5d2jutigpvgj","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T22:31:01.947Z","first_published":"2026-11-05T23:28:50.005Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=polzentra-es.live"},{"hostname":"proximusai-nl.live","first_observed":"2026-11-05T23:16:08.129Z","first_published":"2026-11-05T23:28:50.005Z","brands":[],"dns":"resolved","resolved":["104.21.49.212","172.67.193.142"],"resolved_at":"2026-11-06T02:56:00Z","dns_checked_at":"2026-11-05T23:39:52.000Z","dns_since":"2026-11-05T23:39:52.000Z","findings":[{"id":"fgkubc4yop3pydjfqpy2u","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T23:16:08.129Z","first_published":"2026-11-05T23:28:50.005Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=proximusai-nl.live"},{"hostname":"proxmox.socialvisor.ru","first_observed":"2026-11-05T23:05:39.527Z","first_published":"2026-11-05T23:28:50.005Z","brands":[],"dns":"resolved","resolved":["91.215.41.91"],"resolved_at":"2026-11-05T23:12:33Z","dns_checked_at":"2026-11-05T23:39:52.000Z","dns_since":"2026-11-05T23:39:52.000Z","findings":[{"id":"fraqlo7b4qr7udx64e7l6","kind":"reported_domain","summary":"Under socialvisor.ru, reported by PhishDestroy","first_observed":"2026-11-05T23:05:39.527Z","first_published":"2026-11-05T23:28:50.005Z","source":"phishdestroy","source_name":"PhishDestroy","under":"socialvisor.ru","source_url":"https://phishdestroy.io/domain/socialvisor.ru/"}],"url":"https://domainspoof.com/live?show=all&q=proxmox.socialvisor.ru"},{"hostname":"prymaxassets-ai.live","first_observed":"2026-11-05T22:21:30.901Z","first_published":"2026-11-05T23:28:50.005Z","brands":[],"dns":"resolved","resolved":["104.21.62.90","172.67.222.112"],"resolved_at":"2026-11-05T22:28:01Z","dns_checked_at":"2026-11-05T23:39:52.000Z","dns_since":"2026-11-05T23:39:52.000Z","findings":[{"id":"fn32aggdi3k3xfcdkvcrl","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T22:21:30.901Z","first_published":"2026-11-05T23:28:50.005Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=prymaxassets-ai.live"},{"hostname":"qdoba.today","first_observed":"2026-11-05T22:10:44.341Z","first_published":"2026-11-05T23:28:50.005Z","brands":[],"dns":"resolved","resolved":["104.21.16.177","172.67.214.231"],"resolved_at":"2026-11-05T22:16:10Z","dns_checked_at":"2026-11-05T23:39:52.000Z","dns_since":"2026-11-05T23:39:52.000Z","findings":[{"id":"fqjvuho7olfjligzci6yn","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T22:10:44.341Z","first_published":"2026-11-05T23:28:50.005Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/qdoba.today/"}],"url":"https://domainspoof.com/live?show=all&q=qdoba.today"},{"hostname":"quantumbeacongroup.com","first_observed":"2026-11-05T23:10:37.449Z","first_published":"2026-11-05T23:28:50.005Z","brands":[],"dns":"resolved","resolved":["104.21.88.219","172.67.153.193"],"resolved_at":"2026-11-06T00:26:30Z","dns_checked_at":"2026-11-05T23:39:52.000Z","dns_since":"2026-11-05T23:39:52.000Z","findings":[{"id":"f6hbpfbypgqhdbypy7wdz","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T23:10:37.449Z","first_published":"2026-11-05T23:28:50.005Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/quantumbeacongroup.com/"}],"url":"https://domainspoof.com/live?show=all&q=quantumbeacongroup.com"},{"hostname":"quellevermothalai-sv.live","first_observed":"2026-11-05T22:36:06.370Z","first_published":"2026-11-05T23:28:50.005Z","brands":[],"dns":"resolved","resolved":["104.21.76.252","172.67.202.133"],"resolved_at":"2026-11-06T00:06:24Z","dns_checked_at":"2026-11-05T23:39:52.000Z","dns_since":"2026-11-05T23:39:52.000Z","findings":[{"id":"f7w4znlkblxlsxff4fz2k","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T22:36:06.370Z","first_published":"2026-11-05T23:28:50.005Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=quellevermothalai-sv.live"},{"hostname":"qylith-corev274.live","first_observed":"2026-11-05T23:05:39.527Z","first_published":"2026-11-05T23:28:50.005Z","brands":[],"dns":"resolved","resolved":["104.21.83.103","172.67.222.96"],"resolved_at":"2026-11-05T23:12:34Z","dns_checked_at":"2026-11-05T23:39:52.000Z","dns_since":"2026-11-05T23:39:52.000Z","findings":[{"id":"fjudyvxb4jrdmkbalhn7f","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T23:05:39.527Z","first_published":"2026-11-05T23:28:50.005Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=qylith-corev274.live"},{"hostname":"raku-point-oltys.com","first_observed":"2026-11-05T22:10:44.341Z","first_published":"2026-11-05T23:28:50.005Z","brands":[],"dns":"resolved","resolved":["34.97.12.115"],"resolved_at":"2026-11-05T22:16:11Z","dns_checked_at":"2026-11-05T23:39:52.000Z","dns_since":"2026-11-05T23:39:52.000Z","findings":[{"id":"frnz47oilz4fnpbdvxlf3","kind":"reported_domain","summary":"Reported by PhishTank","first_observed":"2026-11-05T22:10:44.341Z","first_published":"2026-11-05T23:28:50.005Z","source":"phishtank","source_name":"PhishTank","source_url":"https://phishtank.org/phish_detail.php?phish_id=9521423"}],"url":"https://domainspoof.com/live?show=all&q=raku-point-oltys.com"},{"hostname":"rejestracja-weryfikacja.online","first_observed":"2026-11-05T22:41:04.757Z","first_published":"2026-11-05T23:28:50.005Z","brands":[],"dns":"resolved","resolved":["104.21.76.225","172.67.201.234"],"resolved_at":"2026-11-05T22:44:53Z","dns_checked_at":"2026-11-05T23:39:52.000Z","dns_since":"2026-11-05T23:39:52.000Z","findings":[{"id":"fzjgqsmibrtqhh7lg32bj","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T22:41:04.757Z","first_published":"2026-11-05T23:28:50.005Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=rejestracja-weryfikacja.online"},{"hostname":"rtjtrbhbxfgjklndkjxnlkzdkb.cryptopayment.xyz","first_observed":"2026-11-05T23:05:39.527Z","first_published":"2026-11-05T23:28:50.005Z","brands":[],"dns":"resolved","resolved":["143.244.211.82"],"resolved_at":"2026-11-05T23:12:37Z","dns_checked_at":"2026-11-05T23:39:52.000Z","dns_since":"2026-11-05T23:39:52.000Z","findings":[{"id":"fo4neimtcgbutglgwt5ne","kind":"reported_domain","summary":"Under cryptopayment.xyz, listed by MetaMask","first_observed":"2026-11-05T23:05:39.527Z","first_published":"2026-11-05T23:28:50.005Z","source":"metamask","source_name":"MetaMask","under":"cryptopayment.xyz"}],"url":"https://domainspoof.com/live?show=all&q=rtjtrbhbxfgjklndkjxnlkzdkb.cryptopayment.xyz"},{"hostname":"samsung-together.com","first_observed":"2026-11-05T23:18:31.685Z","first_published":"2026-11-05T23:28:50.005Z","brands":[{"id":"samsung","name":"Samsung","url":"https://domainspoof.com/brands/samsung"}],"dns":"resolved","resolved":["172.232.24.161","172.232.24.235","172.234.25.42"],"resolved_at":"2026-11-05T23:39:52Z","dns_checked_at":"2026-11-05T23:39:52.000Z","dns_since":"2026-11-05T23:39:52.000Z","findings":[{"id":"fng2vshqr245mpj74p2zk","kind":"phishing_infrastructure","summary":"Resolved to 172.232.24.161, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T23:18:31.685Z","first_published":"2026-11-05T23:28:50.005Z","address":"172.232.24.161","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/samsung"},{"hostname":"secure-documentfile.live","first_observed":"2026-11-05T23:05:39.527Z","first_published":"2026-11-05T23:28:50.005Z","brands":[],"dns":"resolved","resolved":["104.21.8.18","172.67.156.178"],"resolved_at":"2026-11-05T23:06:29Z","dns_checked_at":"2026-11-05T23:39:52.000Z","dns_since":"2026-11-05T23:39:52.000Z","findings":[{"id":"f7ii3ld6bun44ckpaszp7","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T23:05:39.527Z","first_published":"2026-11-05T23:28:50.005Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=secure-documentfile.live"},{"hostname":"secure-glint.com","first_observed":"2026-11-05T22:21:30.901Z","first_published":"2026-11-05T23:28:50.005Z","brands":[],"dns":"resolved","resolved":["104.21.76.128","172.67.195.121"],"resolved_at":"2026-11-05T22:28:11Z","dns_checked_at":"2026-11-05T23:39:52.000Z","dns_since":"2026-11-05T23:39:52.000Z","findings":[{"id":"fvu36n7xew7kekj2fc7fe","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T22:21:30.901Z","first_published":"2026-11-05T23:28:50.005Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=secure-glint.com"},{"hostname":"sedatasgo.com","first_observed":"2026-11-05T22:26:11.932Z","first_published":"2026-11-05T23:28:50.005Z","brands":[],"dns":"resolved","resolved":["179.43.170.153"],"resolved_at":"2026-11-05T22:35:34Z","dns_checked_at":"2026-11-05T23:39:52.000Z","dns_since":"2026-11-05T23:39:52.000Z","findings":[{"id":"fujdemscocsas2szej7ut","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T22:26:11.932Z","first_published":"2026-11-05T23:28:50.005Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=sedatasgo.com"},{"hostname":"sentora-distribution.xyz","first_observed":"2026-11-05T22:10:44.341Z","first_published":"2026-11-05T23:28:50.005Z","brands":[],"dns":"resolved","resolved":["104.21.71.53","172.67.143.111"],"resolved_at":"2026-11-06T00:26:30Z","dns_checked_at":"2026-11-05T23:39:52.000Z","dns_since":"2026-11-05T23:39:52.000Z","findings":[{"id":"fs7jlki34p7lcu64gzpeb","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T22:10:44.341Z","first_published":"2026-11-05T23:28:50.005Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=sentora-distribution.xyz"},{"hostname":"serv.izom.net","first_observed":"2026-11-05T23:05:39.527Z","first_published":"2026-11-05T23:28:50.005Z","brands":[],"dns":"resolved","resolved":["207.180.234.23"],"resolved_at":"2026-11-05T23:06:29Z","dns_checked_at":"2026-11-05T23:39:52.000Z","dns_since":"2026-11-05T23:39:52.000Z","findings":[{"id":"fidvxslip6rx4gcx2rsug","kind":"reported_domain","summary":"Under izom.net, reported by PhishDestroy","first_observed":"2026-11-05T23:05:39.527Z","first_published":"2026-11-05T23:28:50.005Z","source":"phishdestroy","source_name":"PhishDestroy","under":"izom.net","source_url":"https://phishdestroy.io/domain/izom.net/"}],"url":"https://domainspoof.com/live?show=all&q=serv.izom.net"},{"hostname":"shib-obtain.com","first_observed":"2026-11-05T22:36:06.370Z","first_published":"2026-11-05T23:28:50.005Z","brands":[],"dns":"resolved","resolved":["104.21.94.232","172.67.141.77"],"resolved_at":"2026-11-05T22:41:26Z","dns_checked_at":"2026-11-05T23:39:52.000Z","dns_since":"2026-11-05T23:39:52.000Z","findings":[{"id":"ffprmaamr43nxx4dx3tpj","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T22:36:06.370Z","first_published":"2026-11-05T23:28:50.005Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/shib-obtain.com/"}],"url":"https://domainspoof.com/live?show=all&q=shib-obtain.com"},{"hostname":"shop.cockers-sports.co.uk","first_observed":"2026-11-05T22:56:59.834Z","first_published":"2026-11-05T23:28:50.005Z","brands":[],"dns":"resolved","resolved":["46.30.213.149","2a02:2350:5:10c:aa:3eba:87c4:d367"],"resolved_at":"2026-11-05T22:57:28Z","dns_checked_at":"2026-11-05T23:39:52.000Z","dns_since":"2026-11-05T23:39:52.000Z","findings":[{"id":"fxhhp3zdp65kkvsqxr4hk","kind":"reported_domain","summary":"Under cockers-sports.co.uk, reported by PhishDestroy","first_observed":"2026-11-05T22:56:59.834Z","first_published":"2026-11-05T23:28:50.005Z","source":"phishdestroy","source_name":"PhishDestroy","under":"cockers-sports.co.uk","source_url":"https://phishdestroy.io/domain/cockers-sports.co.uk/"}],"url":"https://domainspoof.com/live?show=all&q=shop.cockers-sports.co.uk"},{"hostname":"skelvurizont-de.live","first_observed":"2026-11-05T22:52:00.970Z","first_published":"2026-11-05T23:28:50.005Z","brands":[],"dns":"resolved","resolved":["104.21.75.240","172.67.183.166"],"resolved_at":"2026-11-05T22:52:28Z","dns_checked_at":"2026-11-05T23:39:52.000Z","dns_since":"2026-11-05T23:39:52.000Z","findings":[{"id":"fidk2aqb4kolbaxhrak6g","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T22:52:00.970Z","first_published":"2026-11-05T23:28:50.005Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=skelvurizont-de.live"},{"hostname":"slon-vhod-na-kraken.ru","first_observed":"2026-11-05T22:41:04.757Z","first_published":"2026-11-05T23:28:50.005Z","brands":[],"dns":"resolved","resolved":["104.21.9.176","172.67.161.36"],"resolved_at":"2026-11-06T03:06:22Z","dns_checked_at":"2026-11-05T23:39:52.000Z","dns_since":"2026-11-05T23:39:52.000Z","findings":[{"id":"fteiuyn57y462cmqz6rgb","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T22:41:04.757Z","first_published":"2026-11-05T23:28:50.005Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/slon-vhod-na-kraken.ru/"}],"url":"https://domainspoof.com/live?show=all&q=slon-vhod-na-kraken.ru"},{"hostname":"sparkling-explore.com","first_observed":"2026-11-05T22:41:04.757Z","first_published":"2026-11-05T23:28:50.005Z","brands":[],"dns":"resolved","resolved":["104.21.40.235","172.67.140.1"],"resolved_at":"2026-11-06T00:51:46Z","dns_checked_at":"2026-11-05T23:39:52.000Z","dns_since":"2026-11-05T23:39:52.000Z","findings":[{"id":"fk5cc2petyxvecziklgit","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T22:41:04.757Z","first_published":"2026-11-05T23:28:50.005Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=sparkling-explore.com"},{"hostname":"spot-prolia-ai-tech-com.financecryptoworld.com","first_observed":"2026-11-05T22:10:44.341Z","first_published":"2026-11-05T23:28:50.005Z","brands":[],"dns":"resolved","resolved":["104.21.10.130","172.67.131.121"],"resolved_at":"2026-11-05T22:16:28Z","dns_checked_at":"2026-11-05T23:39:52.000Z","dns_since":"2026-11-05T23:39:52.000Z","findings":[{"id":"fqyragwkt4fuifvs263ls","kind":"reported_domain","summary":"Under financecryptoworld.com, listed by CERT Polska","first_observed":"2026-11-05T22:10:44.341Z","first_published":"2026-11-05T23:28:50.005Z","source":"cert_polska","source_name":"CERT Polska","under":"financecryptoworld.com"}],"url":"https://domainspoof.com/live?show=all&q=spot-prolia-ai-tech-com.financecryptoworld.com"},{"hostname":"ssd.univestplus.com","first_observed":"2026-11-05T22:56:59.834Z","first_published":"2026-11-05T23:28:50.005Z","brands":[],"dns":"resolved","resolved":["185.200.196.117"],"resolved_at":"2026-11-05T22:57:28Z","dns_checked_at":"2026-11-05T23:39:52.000Z","dns_since":"2026-11-05T23:39:52.000Z","findings":[{"id":"fzjpandv7kjqk7of2cxlo","kind":"reported_domain","summary":"Under univestplus.com, listed by MetaMask","first_observed":"2026-11-05T22:56:59.834Z","first_published":"2026-11-05T23:28:50.005Z","source":"metamask","source_name":"MetaMask","under":"univestplus.com"}],"url":"https://domainspoof.com/live?show=all&q=ssd.univestplus.com"},{"hostname":"staging-annarborymca.y.org","first_observed":"2026-11-05T22:31:01.947Z","first_published":"2026-11-05T23:28:50.005Z","brands":[],"dns":"resolved","resolved":["104.18.8.112","104.18.9.112"],"resolved_at":"2026-11-05T22:31:46Z","dns_checked_at":"2026-11-05T23:39:52.000Z","dns_since":"2026-11-05T23:39:52.000Z","findings":[{"id":"fyo4wwyeklnnsyvcppd3u","kind":"reported_domain","summary":"Under y.org, reported by PhishDestroy","first_observed":"2026-11-05T22:31:01.947Z","first_published":"2026-11-05T23:28:50.005Z","source":"phishdestroy","source_name":"PhishDestroy","under":"y.org","source_url":"https://phishdestroy.io/domain/y.org/"}],"url":"https://domainspoof.com/live?show=all&q=staging-annarborymca.y.org"},{"hostname":"staging-bismarckymca.y.org","first_observed":"2026-11-05T22:31:01.947Z","first_published":"2026-11-05T23:28:50.005Z","brands":[],"dns":"resolved","resolved":["104.18.8.112","104.18.9.112"],"resolved_at":"2026-11-05T22:31:46Z","dns_checked_at":"2026-11-05T23:39:52.000Z","dns_since":"2026-11-05T23:39:52.000Z","findings":[{"id":"f46ttsudoxztacfgrmrvy","kind":"reported_domain","summary":"Under y.org, reported by PhishDestroy","first_observed":"2026-11-05T22:31:01.947Z","first_published":"2026-11-05T23:28:50.005Z","source":"phishdestroy","source_name":"PhishDestroy","under":"y.org","source_url":"https://phishdestroy.io/domain/y.org/"}],"url":"https://domainspoof.com/live?show=all&q=staging-bismarckymca.y.org"},{"hostname":"staging-mdiymca.y.org","first_observed":"2026-11-05T22:31:01.947Z","first_published":"2026-11-05T23:28:50.005Z","brands":[],"dns":"resolved","resolved":["104.18.8.112","104.18.9.112"],"resolved_at":"2026-11-05T22:31:46Z","dns_checked_at":"2026-11-05T23:39:52.000Z","dns_since":"2026-11-05T23:39:52.000Z","findings":[{"id":"fmmhoj7wbe6czfikp3mc4","kind":"reported_domain","summary":"Under y.org, reported by PhishDestroy","first_observed":"2026-11-05T22:31:01.947Z","first_published":"2026-11-05T23:28:50.005Z","source":"phishdestroy","source_name":"PhishDestroy","under":"y.org","source_url":"https://phishdestroy.io/domain/y.org/"}],"url":"https://domainspoof.com/live?show=all&q=staging-mdiymca.y.org"},{"hostname":"staging-myunioncountyfamilyymca.y.org","first_observed":"2026-11-05T22:31:01.947Z","first_published":"2026-11-05T23:28:50.005Z","brands":[],"dns":"resolved","resolved":["104.18.8.112","104.18.9.112"],"resolved_at":"2026-11-05T22:31:46Z","dns_checked_at":"2026-11-05T23:39:52.000Z","dns_since":"2026-11-05T23:39:52.000Z","findings":[{"id":"fow4n36orejxgom7w5if4","kind":"reported_domain","summary":"Under y.org, reported by PhishDestroy","first_observed":"2026-11-05T22:31:01.947Z","first_published":"2026-11-05T23:28:50.005Z","source":"phishdestroy","source_name":"PhishDestroy","under":"y.org","source_url":"https://phishdestroy.io/domain/y.org/"}],"url":"https://domainspoof.com/live?show=all&q=staging-myunioncountyfamilyymca.y.org"},{"hostname":"staging-tuscymca.y.org","first_observed":"2026-11-05T22:31:01.947Z","first_published":"2026-11-05T23:28:50.005Z","brands":[],"dns":"resolved","resolved":["104.18.8.112","104.18.9.112"],"resolved_at":"2026-11-05T22:31:46Z","dns_checked_at":"2026-11-05T23:39:52.000Z","dns_since":"2026-11-05T23:39:52.000Z","findings":[{"id":"fgx4dvigntgepzm3fdtg2","kind":"reported_domain","summary":"Under y.org, reported by PhishDestroy","first_observed":"2026-11-05T22:31:01.947Z","first_published":"2026-11-05T23:28:50.005Z","source":"phishdestroy","source_name":"PhishDestroy","under":"y.org","source_url":"https://phishdestroy.io/domain/y.org/"}],"url":"https://domainspoof.com/live?show=all&q=staging-tuscymca.y.org"},{"hostname":"staging-virtualsoflo.y.org","first_observed":"2026-11-05T22:31:01.947Z","first_published":"2026-11-05T23:28:50.005Z","brands":[],"dns":"resolved","resolved":["104.18.8.112","104.18.9.112"],"resolved_at":"2026-11-05T22:31:46Z","dns_checked_at":"2026-11-05T23:39:52.000Z","dns_since":"2026-11-05T23:39:52.000Z","findings":[{"id":"fp266k4rvzqb7xh6hqgbj","kind":"reported_domain","summary":"Under y.org, reported by PhishDestroy","first_observed":"2026-11-05T22:31:01.947Z","first_published":"2026-11-05T23:28:50.005Z","source":"phishdestroy","source_name":"PhishDestroy","under":"y.org","source_url":"https://phishdestroy.io/domain/y.org/"}],"url":"https://domainspoof.com/live?show=all&q=staging-virtualsoflo.y.org"},{"hostname":"staging-ymcaeastvalley.y.org","first_observed":"2026-11-05T22:31:01.947Z","first_published":"2026-11-05T23:28:50.005Z","brands":[],"dns":"resolved","resolved":["104.18.8.112","104.18.9.112"],"resolved_at":"2026-11-05T22:31:46Z","dns_checked_at":"2026-11-05T23:39:52.000Z","dns_since":"2026-11-05T23:39:52.000Z","findings":[{"id":"fq5o4ni3drjs7ovtwjdgb","kind":"reported_domain","summary":"Under y.org, reported by PhishDestroy","first_observed":"2026-11-05T22:31:01.947Z","first_published":"2026-11-05T23:28:50.005Z","source":"phishdestroy","source_name":"PhishDestroy","under":"y.org","source_url":"https://phishdestroy.io/domain/y.org/"}],"url":"https://domainspoof.com/live?show=all&q=staging-ymcaeastvalley.y.org"},{"hostname":"staging-ymcagm.y.org","first_observed":"2026-11-05T22:36:06.370Z","first_published":"2026-11-05T23:28:50.005Z","brands":[],"dns":"resolved","resolved":["104.18.8.112","104.18.9.112"],"resolved_at":"2026-11-05T22:41:26Z","dns_checked_at":"2026-11-05T23:39:52.000Z","dns_since":"2026-11-05T23:39:52.000Z","findings":[{"id":"fv7b4ojo3xyzr3rh7ucvi","kind":"reported_domain","summary":"Under y.org, reported by PhishDestroy","first_observed":"2026-11-05T22:36:06.370Z","first_published":"2026-11-05T23:28:50.005Z","source":"phishdestroy","source_name":"PhishDestroy","under":"y.org","source_url":"https://phishdestroy.io/domain/y.org/"}],"url":"https://domainspoof.com/live?show=all&q=staging-ymcagm.y.org"},{"hostname":"staging.lndqsstaging.professorflapjacks.com","first_observed":"2026-11-05T23:00:48.504Z","first_published":"2026-11-05T23:28:50.005Z","brands":[],"dns":"resolved","resolved":["185.149.120.183"],"resolved_at":"2026-11-05T23:10:50Z","dns_checked_at":"2026-11-05T23:39:52.000Z","dns_since":"2026-11-05T23:39:52.000Z","findings":[{"id":"fg245tbhkyfsxa7xrixor","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T23:00:48.504Z","first_published":"2026-11-05T23:28:50.005Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/staging.lndqsstaging.professorflapjacks.com/"}],"url":"https://domainspoof.com/live?show=all&q=staging.lndqsstaging.professorflapjacks.com"},{"hostname":"status-aol.com","first_observed":"2026-11-05T22:26:11.932Z","first_published":"2026-11-05T23:28:50.005Z","brands":[],"dns":"resolved","resolved":["104.21.61.5","172.67.204.129"],"resolved_at":"2026-11-05T22:35:35Z","dns_checked_at":"2026-11-05T23:39:52.000Z","dns_since":"2026-11-05T23:39:52.000Z","findings":[{"id":"f6kz7wmqiqjyqltjxxj6d","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T22:26:11.932Z","first_published":"2026-11-05T23:28:50.005Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=status-aol.com"},{"hostname":"steakhouse-allocations.xyz","first_observed":"2026-11-05T22:36:06.370Z","first_published":"2026-11-05T23:28:50.005Z","brands":[],"dns":"resolved","resolved":["104.21.60.79","172.67.193.224"],"resolved_at":"2026-11-05T22:41:26Z","dns_checked_at":"2026-11-05T23:39:52.000Z","dns_since":"2026-11-05T23:39:52.000Z","findings":[{"id":"f4fo2brbmy2mztdvwnzau","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T22:36:06.370Z","first_published":"2026-11-05T23:28:50.005Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=steakhouse-allocations.xyz"},{"hostname":"stellar-roar-right.buzz","first_observed":"2026-11-05T22:36:06.370Z","first_published":"2026-11-05T23:28:50.005Z","brands":[],"dns":"resolved","resolved":["34.41.139.193"],"resolved_at":"2026-11-05T22:41:26Z","dns_checked_at":"2026-11-05T23:39:52.000Z","dns_since":"2026-11-05T23:39:52.000Z","findings":[{"id":"ffnrc6q7go73oq5lmuvfz","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T22:36:06.370Z","first_published":"2026-11-05T23:28:50.005Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/stellar-roar-right.buzz/"}],"url":"https://domainspoof.com/live?show=all&q=stellar-roar-right.buzz"},{"hostname":"stephanetaugourdeau.fr","first_observed":"2026-11-05T22:56:59.834Z","first_published":"2026-11-05T23:28:50.005Z","brands":[],"dns":"resolved","resolved":["104.21.47.169","172.67.149.88"],"resolved_at":"2026-11-05T22:57:28Z","dns_checked_at":"2026-11-05T23:39:52.000Z","dns_since":"2026-11-05T23:39:52.000Z","findings":[{"id":"fz35uf6icffpmsqdc2jfs","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T22:56:59.834Z","first_published":"2026-11-05T23:28:50.005Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/stephanetaugourdeau.fr/"}],"url":"https://domainspoof.com/live?show=all&q=stephanetaugourdeau.fr"},{"hostname":"suitettrezr-web.pages.dev","first_observed":"2026-11-05T23:05:39.527Z","first_published":"2026-11-05T23:28:50.005Z","brands":[],"dns":"resolved","resolved":["172.66.45.44","172.66.46.212"],"resolved_at":"2026-11-06T00:51:46Z","dns_checked_at":"2026-11-05T23:39:52.000Z","dns_since":"2026-11-05T23:39:52.000Z","findings":[{"id":"fyzxmscf5lel7e6rvszqq","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T23:05:39.527Z","first_published":"2026-11-05T23:28:50.005Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=suitettrezr-web.pages.dev"},{"hostname":"sxtez.com","first_observed":"2026-11-05T22:16:24.677Z","first_published":"2026-11-05T23:28:50.005Z","brands":[],"dns":"resolved","resolved":["104.21.39.249","172.67.172.121"],"resolved_at":"2026-11-05T22:22:35Z","dns_checked_at":"2026-11-05T23:39:52.000Z","dns_since":"2026-11-05T23:39:52.000Z","findings":[{"id":"ffrpt3iszpu4bmsqbf67o","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T22:16:24.677Z","first_published":"2026-11-05T23:28:50.005Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=sxtez.com"},{"hostname":"the-rainbet-com.pages.dev","first_observed":"2026-11-05T22:10:44.341Z","first_published":"2026-11-05T23:28:50.005Z","brands":[],"dns":"resolved","resolved":["172.66.45.21","172.66.46.235"],"resolved_at":"2026-11-05T22:16:29Z","dns_checked_at":"2026-11-05T23:39:52.000Z","dns_since":"2026-11-05T23:39:52.000Z","findings":[{"id":"fqrwylmk76zberbrzxd7c","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T22:10:44.341Z","first_published":"2026-11-05T23:28:50.005Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=the-rainbet-com.pages.dev"},{"hostname":"toyota12.digital","first_observed":"2026-11-05T22:31:46.536Z","first_published":"2026-11-05T23:28:50.005Z","brands":[{"id":"toyota","name":"Toyota","url":"https://domainspoof.com/brands/toyota"}],"dns":"resolved","resolved":["151.246.1.103"],"resolved_at":"2026-11-05T23:39:52Z","dns_checked_at":"2026-11-05T23:39:52.000Z","dns_since":"2026-11-05T23:39:52.000Z","findings":[{"id":"frw6mu3kmb3fb2ijchfq5","kind":"phishing_infrastructure","summary":"Resolved to 151.246.1.103, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T22:31:46.536Z","first_published":"2026-11-05T23:28:50.005Z","address":"151.246.1.103","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/toyota"},{"hostname":"toyota33.digital","first_observed":"2026-11-05T22:31:46.537Z","first_published":"2026-11-05T23:28:50.005Z","brands":[{"id":"toyota","name":"Toyota","url":"https://domainspoof.com/brands/toyota"}],"dns":"resolved","resolved":["151.246.1.103"],"resolved_at":"2026-11-05T23:39:52Z","dns_checked_at":"2026-11-05T23:39:52.000Z","dns_since":"2026-11-05T23:39:52.000Z","findings":[{"id":"fe26ay4ujfifb2vhbdl5i","kind":"phishing_infrastructure","summary":"Resolved to 151.246.1.103, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T22:31:46.537Z","first_published":"2026-11-05T23:28:50.005Z","address":"151.246.1.103","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/toyota"},{"hostname":"toyota55.digital","first_observed":"2026-11-05T22:31:46.537Z","first_published":"2026-11-05T23:28:50.005Z","brands":[{"id":"toyota","name":"Toyota","url":"https://domainspoof.com/brands/toyota"}],"dns":"resolved","resolved":["151.246.1.103"],"resolved_at":"2026-11-05T23:39:52Z","dns_checked_at":"2026-11-05T23:39:52.000Z","dns_since":"2026-11-05T23:39:52.000Z","findings":[{"id":"ffpvkzv2vmftijz57ukf2","kind":"phishing_infrastructure","summary":"Resolved to 151.246.1.103, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T22:31:46.537Z","first_published":"2026-11-05T23:28:50.005Z","address":"151.246.1.103","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/toyota"},{"hostname":"toyota89.digital","first_observed":"2026-11-05T22:31:46.542Z","first_published":"2026-11-05T23:28:50.005Z","brands":[{"id":"toyota","name":"Toyota","url":"https://domainspoof.com/brands/toyota"}],"dns":"resolved","resolved":["151.246.1.103"],"resolved_at":"2026-11-05T23:39:52Z","dns_checked_at":"2026-11-05T23:39:52.000Z","dns_since":"2026-11-05T23:39:52.000Z","findings":[{"id":"fqbqeac4xgk4ub34ba6q2","kind":"phishing_infrastructure","summary":"Resolved to 151.246.1.103, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T22:31:46.542Z","first_published":"2026-11-05T23:28:50.005Z","address":"151.246.1.103","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/toyota"},{"hostname":"track100akpro.shop","first_observed":"2026-11-05T23:00:48.504Z","first_published":"2026-11-05T23:28:50.005Z","brands":[],"dns":"resolved","resolved":["185.62.56.121"],"resolved_at":"2026-11-06T00:58:40Z","dns_checked_at":"2026-11-05T23:39:52.000Z","dns_since":"2026-11-05T23:39:52.000Z","findings":[{"id":"fiq4zto6qadcb5kvugdlv","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T23:00:48.504Z","first_published":"2026-11-05T23:28:50.005Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=track100akpro.shop"},{"hostname":"trandixai.shop","first_observed":"2026-11-05T22:10:44.341Z","first_published":"2026-11-05T23:28:50.005Z","brands":[],"dns":"resolved","resolved":["104.21.33.126","172.67.145.45"],"resolved_at":"2026-11-06T00:36:27Z","dns_checked_at":"2026-11-05T23:39:52.000Z","dns_since":"2026-11-05T23:39:52.000Z","findings":[{"id":"f5bo2ypeukbg5hi6wus4r","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T22:10:44.341Z","first_published":"2026-11-05T23:28:50.005Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=trandixai.shop"},{"hostname":"trustrolls.bet","first_observed":"2026-11-05T22:36:06.370Z","first_published":"2026-11-05T23:28:50.005Z","brands":[],"dns":"resolved","resolved":["103.224.182.253"],"resolved_at":"2026-11-05T22:41:28Z","dns_checked_at":"2026-11-05T23:39:52.000Z","dns_since":"2026-11-05T23:39:52.000Z","findings":[{"id":"f72giosjnyaghlefrcx64","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T22:36:06.370Z","first_published":"2026-11-05T23:28:50.005Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/trustrolls.bet/"}],"url":"https://domainspoof.com/live?show=all&q=trustrolls.bet"},{"hostname":"tsxcfr.vtcgh.com","first_observed":"2026-11-05T23:21:02.044Z","first_published":"2026-11-05T23:28:50.005Z","brands":[{"id":"apple","name":"Apple","url":"https://domainspoof.com/brands/apple"}],"dns":"resolved","resolved":["198.144.149.135"],"resolved_at":"2026-11-05T23:31:01Z","dns_checked_at":"2026-11-05T23:39:52.000Z","dns_since":"2026-11-05T23:39:52.000Z","findings":[{"id":"f2eitkxkgrmlh76mnyxxv","kind":"reported_domain","summary":"Listed by JPCERT/CC as imitating Apple Account","first_observed":"2026-11-05T23:21:02.044Z","first_published":"2026-11-05T23:28:50.005Z","source":"jpcert","source_name":"JPCERT/CC","claim":{"brand":"Apple Account"}}],"url":"https://domainspoof.com/brands/apple"},{"hostname":"twzfw.vip","first_observed":"2026-11-05T22:31:01.947Z","first_published":"2026-11-05T23:28:50.005Z","brands":[],"dns":"resolved","resolved":["34.41.139.193"],"resolved_at":"2026-11-05T22:31:46Z","dns_checked_at":"2026-11-05T23:39:52.000Z","dns_since":"2026-11-05T23:39:52.000Z","findings":[{"id":"flhf6hvpuzs2kjluyiltj","kind":"reported_domain","summary":"Listed by MODA (one-page scam site)","first_observed":"2026-11-05T22:31:01.947Z","first_published":"2026-11-05T23:28:50.005Z","source":"moda","source_name":"MODA","claim":{"category":"one-page scam site"}}],"url":"https://domainspoof.com/live?show=all&q=twzfw.vip"},{"hostname":"um-binance.com.cn","first_observed":"2026-11-05T22:57:28.912Z","first_published":"2026-11-05T23:28:50.005Z","brands":[{"id":"binance","name":"Binance","url":"https://domainspoof.com/brands/binance"}],"dns":"resolved","resolved":["154.31.150.83"],"resolved_at":"2026-11-05T23:39:52Z","dns_checked_at":"2026-11-05T23:39:52.000Z","dns_since":"2026-11-05T23:39:52.000Z","findings":[{"id":"fujktbfgvqqarp636rqdd","kind":"phishing_infrastructure","summary":"Resolved to 154.31.150.83, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T22:57:28.912Z","first_published":"2026-11-05T23:28:50.005Z","address":"154.31.150.83","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/binance"},{"hostname":"usdt-mixer.me","first_observed":"2026-11-05T22:56:59.834Z","first_published":"2026-11-05T23:28:50.005Z","brands":[],"dns":"resolved","resolved":["104.21.30.71","172.67.172.59"],"resolved_at":"2026-11-05T22:57:28Z","dns_checked_at":"2026-11-05T23:39:52.000Z","dns_since":"2026-11-05T23:39:52.000Z","findings":[{"id":"fzm2pgkhhq2zo3hga47ea","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T22:56:59.834Z","first_published":"2026-11-05T23:28:50.005Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/usdt-mixer.me/"}],"url":"https://domainspoof.com/live?show=all&q=usdt-mixer.me"},{"hostname":"uswebzoom.com","first_observed":"2026-11-05T23:05:39.527Z","first_published":"2026-11-05T23:28:50.005Z","brands":[],"dns":"resolved","resolved":["13.140.42.210"],"resolved_at":"2026-11-05T23:06:29Z","dns_checked_at":"2026-11-05T23:39:52.000Z","dns_since":"2026-11-05T23:39:52.000Z","findings":[{"id":"fbykbcub5m4xflhlhfb6u","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T23:05:39.527Z","first_published":"2026-11-05T23:28:50.005Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=uswebzoom.com"},{"hostname":"uuexn.asia","first_observed":"2026-11-05T23:10:37.449Z","first_published":"2026-11-05T23:28:50.005Z","brands":[],"dns":"resolved","resolved":["104.21.88.194","172.67.152.111"],"resolved_at":"2026-11-05T23:18:36Z","dns_checked_at":"2026-11-05T23:39:52.000Z","dns_since":"2026-11-05T23:39:52.000Z","findings":[{"id":"fxkhdmx5fg5oabortaw67","kind":"reported_domain","summary":"Listed by NPA 165 (information services)","first_observed":"2026-11-05T23:10:37.449Z","first_published":"2026-11-05T23:28:50.005Z","source":"npa","source_name":"NPA 165","claim":{"category":"information services"}}],"url":"https://domainspoof.com/live?show=all&q=uuexn.asia"},{"hostname":"veililt.xyz","first_observed":"2026-11-05T23:00:48.504Z","first_published":"2026-11-05T23:28:50.005Z","brands":[],"dns":"resolved","resolved":["104.21.92.141","172.67.194.140"],"resolved_at":"2026-11-05T23:10:52Z","dns_checked_at":"2026-11-05T23:39:52.000Z","dns_since":"2026-11-05T23:39:52.000Z","findings":[{"id":"fxwh2iopeomu3b3xdwfvp","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T23:00:48.504Z","first_published":"2026-11-05T23:28:50.005Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/veililt.xyz/"}],"url":"https://domainspoof.com/live?show=all&q=veililt.xyz"},{"hostname":"venwggeful.top","first_observed":"2026-11-05T23:05:39.527Z","first_published":"2026-11-05T23:28:50.005Z","brands":[],"dns":"resolved","resolved":["104.21.19.212","172.67.190.55"],"resolved_at":"2026-11-05T23:06:29Z","dns_checked_at":"2026-11-05T23:39:52.000Z","dns_since":"2026-11-05T23:39:52.000Z","findings":[{"id":"fcvq4i6qvxxp3hr5vdmqx","kind":"reported_domain","summary":"Listed by NPA 165 (information services)","first_observed":"2026-11-05T23:05:39.527Z","first_published":"2026-11-05T23:28:50.005Z","source":"npa","source_name":"NPA 165","claim":{"category":"information services"}}],"url":"https://domainspoof.com/live?show=all&q=venwggeful.top"},{"hostname":"viptu.asia","first_observed":"2026-11-05T22:26:11.932Z","first_published":"2026-11-05T23:28:50.005Z","brands":[],"dns":"resolved","resolved":["104.21.25.98","172.67.133.251"],"resolved_at":"2026-11-05T22:35:39Z","dns_checked_at":"2026-11-05T23:39:52.000Z","dns_since":"2026-11-05T23:39:52.000Z","findings":[{"id":"fgfq6a7ai3q37mhkor336","kind":"reported_domain","summary":"Listed by NPA 165 (information services)","first_observed":"2026-11-05T22:26:11.932Z","first_published":"2026-11-05T23:28:50.005Z","source":"npa","source_name":"NPA 165","claim":{"category":"information services"}}],"url":"https://domainspoof.com/live?show=all&q=viptu.asia"},{"hostname":"voltarise-peak.com","first_observed":"2026-11-05T22:16:24.677Z","first_published":"2026-11-05T23:28:50.005Z","brands":[],"dns":"resolved","resolved":["104.21.20.73","172.67.191.224"],"resolved_at":"2026-11-05T22:22:52Z","dns_checked_at":"2026-11-05T23:39:52.000Z","dns_since":"2026-11-05T23:39:52.000Z","findings":[{"id":"ft4we5hyonppwnhoedmwr","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T22:16:24.677Z","first_published":"2026-11-05T23:28:50.005Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=voltarise-peak.com"},{"hostname":"vote-moonshots.app","first_observed":"2026-11-05T22:41:04.757Z","first_published":"2026-11-05T23:28:50.005Z","brands":[],"dns":"resolved","resolved":["104.21.22.80","172.67.203.119"],"resolved_at":"2026-11-06T00:15:55Z","dns_checked_at":"2026-11-05T23:39:52.000Z","dns_since":"2026-11-05T23:39:52.000Z","findings":[{"id":"f3ebbqbgjwxdozpqfkarn","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T22:41:04.757Z","first_published":"2026-11-05T23:28:50.005Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/vote-moonshots.app/"}],"url":"https://domainspoof.com/live?show=all&q=vote-moonshots.app"},{"hostname":"w711tw23.buzz","first_observed":"2026-11-05T22:46:33.970Z","first_published":"2026-11-05T23:28:50.005Z","brands":[],"dns":"resolved","resolved":["104.21.57.157","172.67.146.226"],"resolved_at":"2026-11-05T22:51:02Z","dns_checked_at":"2026-11-05T23:39:52.000Z","dns_since":"2026-11-05T23:39:52.000Z","findings":[{"id":"fkzcstepjgxiewiib2fzr","kind":"reported_domain","summary":"Listed by NPA 165 (e-commerce)","first_observed":"2026-11-05T22:46:33.970Z","first_published":"2026-11-05T23:28:50.005Z","source":"npa","source_name":"NPA 165","claim":{"category":"e-commerce"}}],"url":"https://domainspoof.com/live?show=all&q=w711tw23.buzz"},{"hostname":"walletconnect.pro","first_observed":"2026-11-05T22:21:30.901Z","first_published":"2026-11-05T23:28:50.005Z","brands":[{"id":"walletconnect","name":"WalletConnect","url":"https://domainspoof.com/brands/walletconnect"}],"dns":"resolved","resolved":["104.21.18.186","172.67.183.31","2606:4700:3032::ac43:b71f","2606:4700:3037::6815:12ba"],"resolved_at":"2026-11-06T00:11:31Z","dns_checked_at":"2026-11-05T23:39:52.000Z","dns_since":"2026-11-05T23:39:52.000Z","findings":[{"id":"fiue4knigku52awererrf","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T22:21:30.901Z","first_published":"2026-11-05T23:28:50.005Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/brands/walletconnect"},{"hostname":"warsawtb.eu.cc","first_observed":"2026-11-05T22:36:06.370Z","first_published":"2026-11-05T23:28:50.005Z","brands":[],"dns":"resolved","resolved":["104.21.51.83","172.67.177.148"],"resolved_at":"2026-11-05T22:41:30Z","dns_checked_at":"2026-11-05T23:39:52.000Z","dns_since":"2026-11-05T23:39:52.000Z","findings":[{"id":"fzdop7liix7axn4j4ossb","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T22:36:06.370Z","first_published":"2026-11-05T23:28:50.005Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=warsawtb.eu.cc"},{"hostname":"webadmin.crypto-polis.org","first_observed":"2026-11-05T23:10:37.449Z","first_published":"2026-11-05T23:28:50.005Z","brands":[],"dns":"resolved","resolved":["185.178.208.132","185.178.208.182"],"resolved_at":"2026-11-05T23:18:37Z","dns_checked_at":"2026-11-05T23:39:52.000Z","dns_since":"2026-11-05T23:39:52.000Z","findings":[{"id":"f5qd7tel7nsfgurj4e5ft","kind":"reported_domain","summary":"Under crypto-polis.org, reported by PhishDestroy","first_observed":"2026-11-05T23:10:37.449Z","first_published":"2026-11-05T23:28:50.005Z","source":"phishdestroy","source_name":"PhishDestroy","under":"crypto-polis.org","source_url":"https://phishdestroy.io/domain/crypto-polis.org/"}],"url":"https://domainspoof.com/live?show=all&q=webadmin.crypto-polis.org"},{"hostname":"webdisk.globalstarks.com","first_observed":"2026-11-05T23:05:39.527Z","first_published":"2026-11-05T23:28:50.005Z","brands":[],"dns":"resolved","resolved":["104.21.61.191","172.67.213.16"],"resolved_at":"2026-11-05T23:06:29Z","dns_checked_at":"2026-11-05T23:39:52.000Z","dns_since":"2026-11-05T23:39:52.000Z","findings":[{"id":"f4vc23xakbbgpggw5iq7o","kind":"reported_domain","summary":"Under globalstarks.com, reported by PhishDestroy","first_observed":"2026-11-05T23:05:39.527Z","first_published":"2026-11-05T23:28:50.005Z","source":"phishdestroy","source_name":"PhishDestroy","under":"globalstarks.com","source_url":"https://phishdestroy.io/domain/globalstarks.com/"}],"url":"https://domainspoof.com/live?show=all&q=webdisk.globalstarks.com"},{"hostname":"webdisk.toyota12.digital","first_observed":"2026-11-05T22:31:46.760Z","first_published":"2026-11-05T23:28:50.005Z","brands":[{"id":"toyota","name":"Toyota","url":"https://domainspoof.com/brands/toyota"}],"dns":"resolved","resolved":["151.246.1.103"],"resolved_at":"2026-11-05T23:39:52Z","dns_checked_at":"2026-11-05T23:39:52.000Z","dns_since":"2026-11-05T23:39:52.000Z","findings":[{"id":"fg5rl2abzx52idanlcwj3","kind":"phishing_infrastructure","summary":"Resolved to 151.246.1.103, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T22:31:46.760Z","first_published":"2026-11-05T23:28:50.005Z","address":"151.246.1.103","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/toyota"},{"hostname":"webdisk.toyota33.digital","first_observed":"2026-11-05T22:31:46.761Z","first_published":"2026-11-05T23:28:50.005Z","brands":[{"id":"toyota","name":"Toyota","url":"https://domainspoof.com/brands/toyota"}],"dns":"resolved","resolved":["151.246.1.103"],"resolved_at":"2026-11-05T23:39:52Z","dns_checked_at":"2026-11-05T23:39:52.000Z","dns_since":"2026-11-05T23:39:52.000Z","findings":[{"id":"fnjix3ddqxo7vjazmqd2d","kind":"phishing_infrastructure","summary":"Resolved to 151.246.1.103, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T22:31:46.761Z","first_published":"2026-11-05T23:28:50.005Z","address":"151.246.1.103","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/toyota"},{"hostname":"webdisk.toyota55.digital","first_observed":"2026-11-05T22:31:46.761Z","first_published":"2026-11-05T23:28:50.005Z","brands":[{"id":"toyota","name":"Toyota","url":"https://domainspoof.com/brands/toyota"}],"dns":"resolved","resolved":["151.246.1.103"],"resolved_at":"2026-11-05T23:39:52Z","dns_checked_at":"2026-11-05T23:39:52.000Z","dns_since":"2026-11-05T23:39:52.000Z","findings":[{"id":"fcay5fxiitpdqgnz4w743","kind":"phishing_infrastructure","summary":"Resolved to 151.246.1.103, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T22:31:46.761Z","first_published":"2026-11-05T23:28:50.005Z","address":"151.246.1.103","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/toyota"},{"hostname":"webdisk.toyota89.digital","first_observed":"2026-11-05T22:31:46.761Z","first_published":"2026-11-05T23:28:50.005Z","brands":[{"id":"toyota","name":"Toyota","url":"https://domainspoof.com/brands/toyota"}],"dns":"resolved","resolved":["151.246.1.103"],"resolved_at":"2026-11-05T23:39:52Z","dns_checked_at":"2026-11-05T23:39:52.000Z","dns_since":"2026-11-05T23:39:52.000Z","findings":[{"id":"ficzjl4aoubnv6bfr4ju3","kind":"phishing_infrastructure","summary":"Resolved to 151.246.1.103, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T22:31:46.761Z","first_published":"2026-11-05T23:28:50.005Z","address":"151.246.1.103","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/toyota"},{"hostname":"webhook.crypto-polis.org","first_observed":"2026-11-05T23:10:37.449Z","first_published":"2026-11-05T23:28:50.005Z","brands":[],"dns":"resolved","resolved":["185.178.208.132","185.178.208.182"],"resolved_at":"2026-11-05T23:18:37Z","dns_checked_at":"2026-11-05T23:39:52.000Z","dns_since":"2026-11-05T23:39:52.000Z","findings":[{"id":"fgh4ptth7maahzc7vfhdr","kind":"reported_domain","summary":"Under crypto-polis.org, reported by PhishDestroy","first_observed":"2026-11-05T23:10:37.449Z","first_published":"2026-11-05T23:28:50.005Z","source":"phishdestroy","source_name":"PhishDestroy","under":"crypto-polis.org","source_url":"https://phishdestroy.io/domain/crypto-polis.org/"}],"url":"https://domainspoof.com/live?show=all&q=webhook.crypto-polis.org"},{"hostname":"webmail.toyota12.digital","first_observed":"2026-11-05T22:31:46.767Z","first_published":"2026-11-05T23:28:50.005Z","brands":[{"id":"toyota","name":"Toyota","url":"https://domainspoof.com/brands/toyota"}],"dns":"resolved","resolved":["151.246.1.103"],"resolved_at":"2026-11-05T23:39:52Z","dns_checked_at":"2026-11-05T23:39:52.000Z","dns_since":"2026-11-05T23:39:52.000Z","findings":[{"id":"f7qsi63w5dqxdobijns72","kind":"phishing_infrastructure","summary":"Resolved to 151.246.1.103, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T22:31:46.767Z","first_published":"2026-11-05T23:28:50.005Z","address":"151.246.1.103","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/toyota"},{"hostname":"webmail.toyota33.digital","first_observed":"2026-11-05T22:31:46.770Z","first_published":"2026-11-05T23:28:50.005Z","brands":[{"id":"toyota","name":"Toyota","url":"https://domainspoof.com/brands/toyota"}],"dns":"resolved","resolved":["151.246.1.103"],"resolved_at":"2026-11-05T23:39:52Z","dns_checked_at":"2026-11-05T23:39:52.000Z","dns_since":"2026-11-05T23:39:52.000Z","findings":[{"id":"fptseu2aiywzxeebcqq76","kind":"phishing_infrastructure","summary":"Resolved to 151.246.1.103, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T22:31:46.770Z","first_published":"2026-11-05T23:28:50.005Z","address":"151.246.1.103","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/toyota"},{"hostname":"webmail.toyota55.digital","first_observed":"2026-11-05T22:31:46.776Z","first_published":"2026-11-05T23:28:50.005Z","brands":[{"id":"toyota","name":"Toyota","url":"https://domainspoof.com/brands/toyota"}],"dns":"resolved","resolved":["151.246.1.103"],"resolved_at":"2026-11-05T23:39:52Z","dns_checked_at":"2026-11-05T23:39:52.000Z","dns_since":"2026-11-05T23:39:52.000Z","findings":[{"id":"fjjgy4addoageiqz4ewh6","kind":"phishing_infrastructure","summary":"Resolved to 151.246.1.103, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T22:31:46.776Z","first_published":"2026-11-05T23:28:50.005Z","address":"151.246.1.103","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/toyota"},{"hostname":"webmail.toyota89.digital","first_observed":"2026-11-05T22:31:46.779Z","first_published":"2026-11-05T23:28:50.005Z","brands":[{"id":"toyota","name":"Toyota","url":"https://domainspoof.com/brands/toyota"}],"dns":"resolved","resolved":["151.246.1.103"],"resolved_at":"2026-11-05T23:39:52Z","dns_checked_at":"2026-11-05T23:39:52.000Z","dns_since":"2026-11-05T23:39:52.000Z","findings":[{"id":"fm5ucxwu633t7ivlia3ba","kind":"phishing_infrastructure","summary":"Resolved to 151.246.1.103, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T22:31:46.779Z","first_published":"2026-11-05T23:28:50.005Z","address":"151.246.1.103","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/toyota"},{"hostname":"webmeeting.com.br","first_observed":"2026-11-05T22:21:30.901Z","first_published":"2026-11-05T23:28:50.005Z","brands":[],"dns":"resolved","resolved":["177.104.186.226"],"resolved_at":"2026-11-05T22:28:18Z","dns_checked_at":"2026-11-05T23:39:52.000Z","dns_since":"2026-11-05T23:39:52.000Z","findings":[{"id":"f3mcvgfjzlq6w2fehp45p","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T22:21:30.901Z","first_published":"2026-11-05T23:28:50.005Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=webmeeting.com.br"},{"hostname":"wiki.webmail.aaa.kingdom-dmc.com","first_observed":"2026-11-05T23:00:48.504Z","first_published":"2026-11-05T23:28:50.005Z","brands":[],"dns":"resolved","resolved":["185.215.4.42"],"resolved_at":"2026-11-05T23:10:53Z","dns_checked_at":"2026-11-05T23:39:52.000Z","dns_since":"2026-11-05T23:39:52.000Z","findings":[{"id":"fq6x6aues3acypotm2ol7","kind":"reported_domain","summary":"Under kingdom-dmc.com, listed by MetaMask","first_observed":"2026-11-05T23:00:48.504Z","first_published":"2026-11-05T23:28:50.005Z","source":"metamask","source_name":"MetaMask","under":"kingdom-dmc.com"}],"url":"https://domainspoof.com/live?show=all&q=wiki.webmail.aaa.kingdom-dmc.com"},{"hostname":"wildcat.surf","first_observed":"2026-11-05T23:16:08.129Z","first_published":"2026-11-05T23:28:50.005Z","brands":[],"dns":"resolved","resolved":["104.21.19.142","172.67.186.123"],"resolved_at":"2026-11-06T00:26:35Z","dns_checked_at":"2026-11-05T23:39:52.000Z","dns_since":"2026-11-05T23:39:52.000Z","findings":[{"id":"fwwbiv4mghvfmkx4xlyyz","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T23:16:08.129Z","first_published":"2026-11-05T23:28:50.005Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=wildcat.surf"},{"hostname":"wwfbalticfarmer.stage.io-ext.se","first_observed":"2026-11-05T23:21:02.044Z","first_published":"2026-11-05T23:28:50.005Z","brands":[],"dns":"resolved","resolved":["188.208.37.128"],"resolved_at":"2026-11-05T23:31:04Z","dns_checked_at":"2026-11-05T23:39:52.000Z","dns_since":"2026-11-05T23:39:52.000Z","findings":[{"id":"fv3iebxjvh4pgjwmka4pd","kind":"reported_domain","summary":"Under io-ext.se, listed by MetaMask","first_observed":"2026-11-05T23:21:02.044Z","first_published":"2026-11-05T23:28:50.005Z","source":"metamask","source_name":"MetaMask","under":"io-ext.se"}],"url":"https://domainspoof.com/live?show=all&q=wwfbalticfarmer.stage.io-ext.se"},{"hostname":"www.acceptusdc.org","first_observed":"2026-11-05T23:00:48.504Z","first_published":"2026-11-05T23:28:50.005Z","brands":[],"dns":"resolved","resolved":["198.49.23.144","198.49.23.145","198.185.159.144","198.185.159.145"],"resolved_at":"2026-11-05T23:10:54Z","dns_checked_at":"2026-11-05T23:39:52.000Z","dns_since":"2026-11-05T23:39:52.000Z","findings":[{"id":"fuvyo5i6p5oaz5sqa3iru","kind":"reported_domain","summary":"Under acceptusdc.org, listed by MetaMask","first_observed":"2026-11-05T23:00:48.504Z","first_published":"2026-11-05T23:28:50.005Z","source":"metamask","source_name":"MetaMask","under":"acceptusdc.org"}],"url":"https://domainspoof.com/live?show=all&q=www.acceptusdc.org"},{"hostname":"www.account.zenavlico.cyou","first_observed":"2026-11-05T23:16:08.129Z","first_published":"2026-11-05T23:28:50.005Z","brands":[],"dns":"resolved","resolved":["95.85.244.13"],"resolved_at":"2026-11-05T23:25:20Z","dns_checked_at":"2026-11-05T23:39:52.000Z","dns_since":"2026-11-05T23:39:52.000Z","findings":[{"id":"fpmuzxi4zz7laug22c65v","kind":"reported_domain","summary":"Under zenavlico.cyou, listed by CERT Polska","first_observed":"2026-11-05T23:16:08.129Z","first_published":"2026-11-05T23:28:50.005Z","source":"cert_polska","source_name":"CERT Polska","under":"zenavlico.cyou"}],"url":"https://domainspoof.com/live?show=all&q=www.account.zenavlico.cyou"},{"hostname":"www.atout-precocite.fr","first_observed":"2026-11-05T22:36:06.370Z","first_published":"2026-11-05T23:28:50.005Z","brands":[],"dns":"resolved","resolved":["213.186.33.3"],"resolved_at":"2026-11-05T22:36:37Z","dns_checked_at":"2026-11-05T23:39:52.000Z","dns_since":"2026-11-05T23:39:52.000Z","findings":[{"id":"fthjxyzmtv3evzkkvpfxo","kind":"reported_domain","summary":"Under atout-precocite.fr, reported by PhishDestroy","first_observed":"2026-11-05T22:36:06.370Z","first_published":"2026-11-05T23:28:50.005Z","source":"phishdestroy","source_name":"PhishDestroy","under":"atout-precocite.fr","source_url":"https://phishdestroy.io/domain/atout-precocite.fr/"}],"url":"https://domainspoof.com/live?show=all&q=www.atout-precocite.fr"},{"hostname":"www.auth.zenavlico.cyou","first_observed":"2026-11-05T23:16:08.129Z","first_published":"2026-11-05T23:28:50.005Z","brands":[],"dns":"resolved","resolved":["95.85.244.13"],"resolved_at":"2026-11-05T23:25:20Z","dns_checked_at":"2026-11-05T23:39:52.000Z","dns_since":"2026-11-05T23:39:52.000Z","findings":[{"id":"fmhqhzzdofhvuy5h3slo5","kind":"reported_domain","summary":"Under zenavlico.cyou, listed by CERT Polska","first_observed":"2026-11-05T23:16:08.129Z","first_published":"2026-11-05T23:28:50.005Z","source":"cert_polska","source_name":"CERT Polska","under":"zenavlico.cyou"}],"url":"https://domainspoof.com/live?show=all&q=www.auth.zenavlico.cyou"},{"hostname":"www.canary.zenavlico.cyou","first_observed":"2026-11-05T23:16:08.129Z","first_published":"2026-11-05T23:28:50.005Z","brands":[],"dns":"resolved","resolved":["95.85.244.13"],"resolved_at":"2026-11-05T23:25:20Z","dns_checked_at":"2026-11-05T23:39:52.000Z","dns_since":"2026-11-05T23:39:52.000Z","findings":[{"id":"fah6m6bo53fsvy2d52m37","kind":"reported_domain","summary":"Under zenavlico.cyou, listed by CERT Polska","first_observed":"2026-11-05T23:16:08.129Z","first_published":"2026-11-05T23:28:50.005Z","source":"cert_polska","source_name":"CERT Polska","under":"zenavlico.cyou"}],"url":"https://domainspoof.com/live?show=all&q=www.canary.zenavlico.cyou"},{"hostname":"www.carotecan.shop","first_observed":"2026-11-05T22:46:33.970Z","first_published":"2026-11-05T23:28:50.005Z","brands":[],"dns":"resolved","resolved":["136.107.41.211"],"resolved_at":"2026-11-06T10:16:11Z","dns_checked_at":"2026-11-05T23:39:52.000Z","dns_since":"2026-11-05T23:39:52.000Z","findings":[{"id":"f5g6pev66uw6bnfiprhte","kind":"reported_domain","summary":"Under carotecan.shop, listed by CERT Polska","first_observed":"2026-11-05T22:46:33.970Z","first_published":"2026-11-05T23:28:50.005Z","source":"cert_polska","source_name":"CERT Polska","under":"carotecan.shop"}],"url":"https://domainspoof.com/live?show=all&q=www.carotecan.shop"},{"hostname":"www.cartzycrazy.com","first_observed":"2026-11-05T22:52:00.970Z","first_published":"2026-11-05T23:28:50.005Z","brands":[],"dns":"resolved","resolved":["15.197.172.60"],"resolved_at":"2026-11-05T22:52:28Z","dns_checked_at":"2026-11-05T23:39:52.000Z","dns_since":"2026-11-05T23:39:52.000Z","findings":[{"id":"fnq5e6oh6hks65qhutxao","kind":"reported_domain","summary":"Under cartzycrazy.com, listed by CERT Polska","first_observed":"2026-11-05T22:52:00.970Z","first_published":"2026-11-05T23:28:50.005Z","source":"cert_polska","source_name":"CERT Polska","under":"cartzycrazy.com"}],"url":"https://domainspoof.com/live?show=all&q=www.cartzycrazy.com"},{"hostname":"www.cockers-sports.co.uk","first_observed":"2026-11-05T22:56:59.834Z","first_published":"2026-11-05T23:28:50.005Z","brands":[],"dns":"resolved","resolved":["46.30.213.149","2a02:2350:5:10c:aa:3eba:87c4:d367"],"resolved_at":"2026-11-05T22:57:29Z","dns_checked_at":"2026-11-05T23:39:52.000Z","dns_since":"2026-11-05T23:39:52.000Z","findings":[{"id":"f4hedgmv3sqpgsd2bt6ux","kind":"reported_domain","summary":"Under cockers-sports.co.uk, reported by PhishDestroy","first_observed":"2026-11-05T22:56:59.834Z","first_published":"2026-11-05T23:28:50.005Z","source":"phishdestroy","source_name":"PhishDestroy","under":"cockers-sports.co.uk","source_url":"https://phishdestroy.io/domain/cockers-sports.co.uk/"}],"url":"https://domainspoof.com/live?show=all&q=www.cockers-sports.co.uk"},{"hostname":"www.console.zenavlico.cyou","first_observed":"2026-11-05T23:16:08.129Z","first_published":"2026-11-05T23:28:50.005Z","brands":[],"dns":"resolved","resolved":["95.85.244.13"],"resolved_at":"2026-11-05T23:25:20Z","dns_checked_at":"2026-11-05T23:39:52.000Z","dns_since":"2026-11-05T23:39:52.000Z","findings":[{"id":"f524xjnrm457qg6blxb2u","kind":"reported_domain","summary":"Under zenavlico.cyou, listed by CERT Polska","first_observed":"2026-11-05T23:16:08.129Z","first_published":"2026-11-05T23:28:50.005Z","source":"cert_polska","source_name":"CERT Polska","under":"zenavlico.cyou"}],"url":"https://domainspoof.com/live?show=all&q=www.console.zenavlico.cyou"},{"hostname":"www.demo.zenavlico.cyou","first_observed":"2026-11-05T23:16:08.129Z","first_published":"2026-11-05T23:28:50.005Z","brands":[],"dns":"resolved","resolved":["95.85.244.13"],"resolved_at":"2026-11-05T23:25:20Z","dns_checked_at":"2026-11-05T23:39:52.000Z","dns_since":"2026-11-05T23:39:52.000Z","findings":[{"id":"fcsi6a4tg64jr76b3aoac","kind":"reported_domain","summary":"Under zenavlico.cyou, listed by CERT Polska","first_observed":"2026-11-05T23:16:08.129Z","first_published":"2026-11-05T23:28:50.005Z","source":"cert_polska","source_name":"CERT Polska","under":"zenavlico.cyou"}],"url":"https://domainspoof.com/live?show=all&q=www.demo.zenavlico.cyou"},{"hostname":"www.erp.zenavlico.cyou","first_observed":"2026-11-05T22:16:24.677Z","first_published":"2026-11-05T23:28:50.005Z","brands":[],"dns":"resolved","resolved":["95.85.244.13"],"resolved_at":"2026-11-05T22:22:54Z","dns_checked_at":"2026-11-05T23:39:52.000Z","dns_since":"2026-11-05T23:39:52.000Z","findings":[{"id":"fmqo6rns5nritqzea3vgz","kind":"reported_domain","summary":"Under zenavlico.cyou, listed by CERT Polska","first_observed":"2026-11-05T22:16:24.677Z","first_published":"2026-11-05T23:28:50.005Z","source":"cert_polska","source_name":"CERT Polska","under":"zenavlico.cyou"}],"url":"https://domainspoof.com/live?show=all&q=www.erp.zenavlico.cyou"},{"hostname":"www.globalstarks.com","first_observed":"2026-11-05T23:05:39.527Z","first_published":"2026-11-05T23:28:50.005Z","brands":[],"dns":"resolved","resolved":["104.21.61.191","172.67.213.16"],"resolved_at":"2026-11-05T23:06:29Z","dns_checked_at":"2026-11-05T23:39:52.000Z","dns_since":"2026-11-05T23:39:52.000Z","findings":[{"id":"f5ivjasjphjpwc6ge37ab","kind":"reported_domain","summary":"Under globalstarks.com, reported by PhishDestroy","first_observed":"2026-11-05T23:05:39.527Z","first_published":"2026-11-05T23:28:50.005Z","source":"phishdestroy","source_name":"PhishDestroy","under":"globalstarks.com","source_url":"https://phishdestroy.io/domain/globalstarks.com/"}],"url":"https://domainspoof.com/live?show=all&q=www.globalstarks.com"},{"hostname":"www.hyvast.net","first_observed":"2026-11-05T22:21:30.901Z","first_published":"2026-11-05T23:28:50.005Z","brands":[],"dns":"resolved","resolved":["172.66.44.90","172.66.47.166"],"resolved_at":"2026-11-06T01:21:23Z","dns_checked_at":"2026-11-05T23:39:52.000Z","dns_since":"2026-11-05T23:39:52.000Z","findings":[{"id":"f36jn6gj2zxrdrxzuixk3","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T22:21:30.901Z","first_published":"2026-11-05T23:28:50.005Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/www.hyvast.net/"}],"url":"https://domainspoof.com/live?show=all&q=www.hyvast.net"},{"hostname":"www.icloud-slawikowski.fr","first_observed":"2026-11-05T22:22:54.117Z","first_published":"2026-11-05T23:28:50.005Z","brands":[{"id":"apple","name":"Apple","url":"https://domainspoof.com/brands/apple"}],"dns":"resolved","resolved":["51.91.236.255"],"resolved_at":"2026-11-05T23:39:52Z","dns_checked_at":"2026-11-05T23:39:52.000Z","dns_since":"2026-11-05T23:39:52.000Z","findings":[{"id":"fepgzs6m6nlyipxq3ncsc","kind":"phishing_infrastructure","summary":"Resolved to 51.91.236.255, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T22:22:54.117Z","first_published":"2026-11-05T23:28:50.005Z","address":"51.91.236.255","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/apple"},{"hostname":"www.intuitcode.com","first_observed":"2026-11-05T22:35:40.193Z","first_published":"2026-11-05T23:28:50.005Z","brands":[{"id":"intuit","name":"Intuit","url":"https://domainspoof.com/brands/intuit"}],"dns":"resolved","resolved":["2.57.91.91"],"resolved_at":"2026-11-05T23:39:52Z","dns_checked_at":"2026-11-05T23:39:52.000Z","dns_since":"2026-11-05T23:39:52.000Z","findings":[{"id":"f65nu2t6fpbka3i7hkfl5","kind":"phishing_infrastructure","summary":"Resolved to 2.57.91.91, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T22:35:40.193Z","first_published":"2026-11-05T23:28:50.005Z","address":"2.57.91.91","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/intuit"},{"hostname":"www.kraken3yvbvzmhytnrnuhsy772i6dfobofu652e27f5hx6y5cpj7rgyd.cc","first_observed":"2026-11-05T23:21:02.044Z","first_published":"2026-11-05T23:28:50.005Z","brands":[],"dns":"resolved","resolved":["104.21.52.184","172.67.202.216"],"resolved_at":"2026-11-05T23:21:38Z","dns_checked_at":"2026-11-05T23:39:52.000Z","dns_since":"2026-11-05T23:39:52.000Z","findings":[{"id":"fjp4zo2zqlbpfo3yn2b2r","kind":"reported_domain","summary":"Under kraken3yvbvzmhytnrnuhsy772i6dfobofu652e27f5hx6y5cpj7rgyd.cc, reported by PhishDestroy","first_observed":"2026-11-05T23:21:02.044Z","first_published":"2026-11-05T23:28:50.005Z","source":"phishdestroy","source_name":"PhishDestroy","under":"kraken3yvbvzmhytnrnuhsy772i6dfobofu652e27f5hx6y5cpj7rgyd.cc","source_url":"https://phishdestroy.io/domain/kraken3yvbvzmhytnrnuhsy772i6dfobofu652e27f5hx6y5cpj7rgyd.cc/"}],"url":"https://domainspoof.com/live?show=all&q=www.kraken3yvbvzmhytnrnuhsy772i6dfobofu652e27f5hx6y5cpj7rgyd.cc"},{"hostname":"www.kron-peakai.com","first_observed":"2026-11-05T22:26:11.932Z","first_published":"2026-11-05T23:28:50.005Z","brands":[],"dns":"resolved","resolved":["104.21.79.73","172.67.169.57"],"resolved_at":"2026-11-05T22:35:40Z","dns_checked_at":"2026-11-05T23:39:52.000Z","dns_since":"2026-11-05T23:39:52.000Z","findings":[{"id":"fqw3vqgzdypcnc7yowwav","kind":"reported_domain","summary":"Under kron-peakai.com, listed by CERT Polska","first_observed":"2026-11-05T22:26:11.932Z","first_published":"2026-11-05T23:28:50.005Z","source":"cert_polska","source_name":"CERT Polska","under":"kron-peakai.com"}],"url":"https://domainspoof.com/live?show=all&q=www.kron-peakai.com"},{"hostname":"www.kron-peakai.org","first_observed":"2026-11-05T22:31:01.947Z","first_published":"2026-11-05T23:28:50.005Z","brands":[],"dns":"resolved","resolved":["104.21.58.119","172.67.159.107"],"resolved_at":"2026-11-05T22:31:46Z","dns_checked_at":"2026-11-05T23:39:52.000Z","dns_since":"2026-11-05T23:39:52.000Z","findings":[{"id":"fnevixvmfb2azfjgboo2a","kind":"reported_domain","summary":"Under kron-peakai.org, listed by CERT Polska","first_observed":"2026-11-05T22:31:01.947Z","first_published":"2026-11-05T23:28:50.005Z","source":"cert_polska","source_name":"CERT Polska","under":"kron-peakai.org"}],"url":"https://domainspoof.com/live?show=all&q=www.kron-peakai.org"},{"hostname":"www.kronpeakai.com","first_observed":"2026-11-05T22:31:01.947Z","first_published":"2026-11-05T23:28:50.005Z","brands":[],"dns":"resolved","resolved":["104.21.39.36","172.67.142.232"],"resolved_at":"2026-11-05T22:31:46Z","dns_checked_at":"2026-11-05T23:39:52.000Z","dns_since":"2026-11-05T23:39:52.000Z","findings":[{"id":"fl5psadjt47ujuhc7vesb","kind":"reported_domain","summary":"Under kronpeakai.com, listed by CERT Polska","first_observed":"2026-11-05T22:31:01.947Z","first_published":"2026-11-05T23:28:50.005Z","source":"cert_polska","source_name":"CERT Polska","under":"kronpeakai.com"}],"url":"https://domainspoof.com/live?show=all&q=www.kronpeakai.com"},{"hostname":"www.lebellearti.com","first_observed":"2026-11-05T23:00:48.504Z","first_published":"2026-11-05T23:28:50.005Z","brands":[],"dns":"resolved","resolved":["167.99.183.214"],"resolved_at":"2026-11-06T00:32:17Z","dns_checked_at":"2026-11-05T23:39:52.000Z","dns_since":"2026-11-05T23:39:52.000Z","findings":[{"id":"fzmhpxztbv7a3zhq3t7q3","kind":"reported_domain","summary":"Under lebellearti.com, listed by MetaMask","first_observed":"2026-11-05T23:00:48.504Z","first_published":"2026-11-05T23:28:50.005Z","source":"metamask","source_name":"MetaMask","under":"lebellearti.com"}],"url":"https://domainspoof.com/live?show=all&q=www.lebellearti.com"},{"hostname":"www.legacy.zenavlico.cyou","first_observed":"2026-11-05T23:16:08.129Z","first_published":"2026-11-05T23:28:50.005Z","brands":[],"dns":"resolved","resolved":["95.85.244.13"],"resolved_at":"2026-11-05T23:25:21Z","dns_checked_at":"2026-11-05T23:39:52.000Z","dns_since":"2026-11-05T23:39:52.000Z","findings":[{"id":"fs4ho3g6bbx6hn2egko6c","kind":"reported_domain","summary":"Under zenavlico.cyou, listed by CERT Polska","first_observed":"2026-11-05T23:16:08.129Z","first_published":"2026-11-05T23:28:50.005Z","source":"cert_polska","source_name":"CERT Polska","under":"zenavlico.cyou"}],"url":"https://domainspoof.com/live?show=all&q=www.legacy.zenavlico.cyou"},{"hostname":"www.matomo.zenavlico.cyou","first_observed":"2026-11-05T22:21:30.901Z","first_published":"2026-11-05T23:28:50.005Z","brands":[],"dns":"resolved","resolved":["95.85.244.13"],"resolved_at":"2026-11-05T22:28:19Z","dns_checked_at":"2026-11-05T23:39:52.000Z","dns_since":"2026-11-05T23:39:52.000Z","findings":[{"id":"ftbd43mviqpn6ed3amtta","kind":"reported_domain","summary":"Under zenavlico.cyou, listed by CERT Polska","first_observed":"2026-11-05T22:21:30.901Z","first_published":"2026-11-05T23:28:50.005Z","source":"cert_polska","source_name":"CERT Polska","under":"zenavlico.cyou"}],"url":"https://domainspoof.com/live?show=all&q=www.matomo.zenavlico.cyou"},{"hostname":"www.notebookoff.uz","first_observed":"2026-11-05T22:21:30.901Z","first_published":"2026-11-05T23:28:50.005Z","brands":[],"dns":"resolved","resolved":["167.235.222.200"],"resolved_at":"2026-11-05T22:28:19Z","dns_checked_at":"2026-11-05T23:39:52.000Z","dns_since":"2026-11-05T23:39:52.000Z","findings":[{"id":"f3vgjsxlu52bq7sm7v2it","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T22:21:30.901Z","first_published":"2026-11-05T23:28:50.005Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/www.notebookoff.uz/"}],"url":"https://domainspoof.com/live?show=all&q=www.notebookoff.uz"},{"hostname":"www.nufiwallet.app","first_observed":"2026-11-05T23:10:37.449Z","first_published":"2026-11-05T23:28:50.005Z","brands":[],"dns":"resolved","resolved":["64.29.17.1","216.198.79.1"],"resolved_at":"2026-11-05T23:18:38Z","dns_checked_at":"2026-11-05T23:39:52.000Z","dns_since":"2026-11-05T23:39:52.000Z","findings":[{"id":"fffsxykzdt2erxyesz4jc","kind":"reported_domain","summary":"Under nufiwallet.app, reported by PhishDestroy","first_observed":"2026-11-05T23:10:37.449Z","first_published":"2026-11-05T23:28:50.005Z","source":"phishdestroy","source_name":"PhishDestroy","under":"nufiwallet.app","source_url":"https://phishdestroy.io/domain/nufiwallet.app/"}],"url":"https://domainspoof.com/live?show=all&q=www.nufiwallet.app"},{"hostname":"www.pe-binance.com.cn","first_observed":"2026-11-05T22:52:28.843Z","first_published":"2026-11-05T23:28:50.005Z","brands":[{"id":"binance","name":"Binance","url":"https://domainspoof.com/brands/binance"}],"dns":"resolved","resolved":["154.31.148.87"],"resolved_at":"2026-11-05T23:39:52Z","dns_checked_at":"2026-11-05T23:39:52.000Z","dns_since":"2026-11-05T23:39:52.000Z","findings":[{"id":"fq7eqlye6i6o2sk4zh4dc","kind":"phishing_infrastructure","summary":"Resolved to 154.31.148.87, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T22:52:28.843Z","first_published":"2026-11-05T23:28:50.005Z","address":"154.31.148.87","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/binance"},{"hostname":"www.plovydiv.com","first_observed":"2026-11-05T22:26:11.932Z","first_published":"2026-11-05T23:28:50.005Z","brands":[],"dns":"resolved","resolved":["179.43.170.153"],"resolved_at":"2026-11-05T22:35:40Z","dns_checked_at":"2026-11-05T23:39:52.000Z","dns_since":"2026-11-05T23:39:52.000Z","findings":[{"id":"fmwoy2y4nmfo4ioenjh5m","kind":"reported_domain","summary":"Under plovydiv.com, listed by CERT Polska","first_observed":"2026-11-05T22:26:11.932Z","first_published":"2026-11-05T23:28:50.005Z","source":"cert_polska","source_name":"CERT Polska","under":"plovydiv.com"}],"url":"https://domainspoof.com/live?show=all&q=www.plovydiv.com"},{"hostname":"www.rexasfinance.com","first_observed":"2026-11-05T22:56:59.834Z","first_published":"2026-11-05T23:28:50.005Z","brands":[],"dns":"resolved","resolved":["3.33.251.168","15.197.225.128"],"resolved_at":"2026-11-05T22:57:29Z","dns_checked_at":"2026-11-05T23:39:53.000Z","dns_since":"2026-11-05T23:39:53.000Z","findings":[{"id":"fg7lidy7pmqr6jjecamfs","kind":"reported_domain","summary":"Under rexasfinance.com, reported by PhishDestroy","first_observed":"2026-11-05T22:56:59.834Z","first_published":"2026-11-05T23:28:50.005Z","source":"phishdestroy","source_name":"PhishDestroy","under":"rexasfinance.com","source_url":"https://phishdestroy.io/domain/rexasfinance.com/"}],"url":"https://domainspoof.com/live?show=all&q=www.rexasfinance.com"},{"hostname":"www.roospincasino-au.net","first_observed":"2026-11-05T22:41:04.757Z","first_published":"2026-11-05T23:28:50.005Z","brands":[],"dns":"resolved","resolved":["104.21.33.152","172.67.146.136"],"resolved_at":"2026-11-05T22:45:02Z","dns_checked_at":"2026-11-05T23:39:53.000Z","dns_since":"2026-11-05T23:39:53.000Z","findings":[{"id":"fo7jq4yt5myp3fjwxybu7","kind":"reported_domain","summary":"Under roospincasino-au.net, reported by PhishDestroy","first_observed":"2026-11-05T22:41:04.757Z","first_published":"2026-11-05T23:28:50.005Z","source":"phishdestroy","source_name":"PhishDestroy","under":"roospincasino-au.net","source_url":"https://phishdestroy.io/domain/roospincasino-au.net/"}],"url":"https://domainspoof.com/live?show=all&q=www.roospincasino-au.net"},{"hostname":"www.sedatasgo.com","first_observed":"2026-11-05T22:26:11.932Z","first_published":"2026-11-05T23:28:50.005Z","brands":[],"dns":"resolved","resolved":["179.43.170.153"],"resolved_at":"2026-11-05T22:35:40Z","dns_checked_at":"2026-11-05T23:39:53.000Z","dns_since":"2026-11-05T23:39:53.000Z","findings":[{"id":"fl53wc47624ikwq3paan3","kind":"reported_domain","summary":"Under sedatasgo.com, listed by CERT Polska","first_observed":"2026-11-05T22:26:11.932Z","first_published":"2026-11-05T23:28:50.005Z","source":"cert_polska","source_name":"CERT Polska","under":"sedatasgo.com"}],"url":"https://domainspoof.com/live?show=all&q=www.sedatasgo.com"},{"hostname":"www.share.zenavlico.cyou","first_observed":"2026-11-05T23:00:48.504Z","first_published":"2026-11-05T23:28:50.005Z","brands":[],"dns":"resolved","resolved":["95.85.244.13"],"resolved_at":"2026-11-05T23:10:54Z","dns_checked_at":"2026-11-05T23:39:53.000Z","dns_since":"2026-11-05T23:39:53.000Z","findings":[{"id":"f3vpcvmkbu6mblpzbinoc","kind":"reported_domain","summary":"Under zenavlico.cyou, listed by CERT Polska","first_observed":"2026-11-05T23:00:48.504Z","first_published":"2026-11-05T23:28:50.005Z","source":"cert_polska","source_name":"CERT Polska","under":"zenavlico.cyou"}],"url":"https://domainspoof.com/live?show=all&q=www.share.zenavlico.cyou"},{"hostname":"www.solaxymigrate.live","first_observed":"2026-11-05T22:16:24.677Z","first_published":"2026-11-05T23:28:50.005Z","brands":[],"dns":"resolved","resolved":["64.29.17.1","216.198.79.1"],"resolved_at":"2026-11-05T22:22:54Z","dns_checked_at":"2026-11-05T23:39:53.000Z","dns_since":"2026-11-05T23:39:53.000Z","findings":[{"id":"f4uet76mtfegonggtx6og","kind":"reported_domain","summary":"Under solaxymigrate.live, reported by PhishDestroy","first_observed":"2026-11-05T22:16:24.677Z","first_published":"2026-11-05T23:28:50.005Z","source":"phishdestroy","source_name":"PhishDestroy","under":"solaxymigrate.live","source_url":"https://phishdestroy.io/domain/solaxymigrate.live/"}],"url":"https://domainspoof.com/live?show=all&q=www.solaxymigrate.live"},{"hostname":"www.strapi.crypto-polis.org","first_observed":"2026-11-05T22:10:44.341Z","first_published":"2026-11-05T23:28:50.005Z","brands":[],"dns":"resolved","resolved":["185.178.208.132","185.178.208.182"],"resolved_at":"2026-11-05T22:16:44Z","dns_checked_at":"2026-11-05T23:39:53.000Z","dns_since":"2026-11-05T23:39:53.000Z","findings":[{"id":"fujw2vb2qrqne63vdoq3i","kind":"reported_domain","summary":"Under crypto-polis.org, reported by PhishDestroy","first_observed":"2026-11-05T22:10:44.341Z","first_published":"2026-11-05T23:28:50.005Z","source":"phishdestroy","source_name":"PhishDestroy","under":"crypto-polis.org","source_url":"https://phishdestroy.io/domain/crypto-polis.org/"}],"url":"https://domainspoof.com/live?show=all&q=www.strapi.crypto-polis.org"},{"hostname":"www.test.zenavlico.cyou","first_observed":"2026-11-05T23:16:08.129Z","first_published":"2026-11-05T23:28:50.005Z","brands":[],"dns":"resolved","resolved":["95.85.244.13"],"resolved_at":"2026-11-05T23:25:21Z","dns_checked_at":"2026-11-05T23:39:53.000Z","dns_since":"2026-11-05T23:39:53.000Z","findings":[{"id":"fd4jf2ua6nhibdqdfcx5c","kind":"reported_domain","summary":"Under zenavlico.cyou, listed by CERT Polska","first_observed":"2026-11-05T23:16:08.129Z","first_published":"2026-11-05T23:28:50.005Z","source":"cert_polska","source_name":"CERT Polska","under":"zenavlico.cyou"}],"url":"https://domainspoof.com/live?show=all&q=www.test.zenavlico.cyou"},{"hostname":"www.the-rheinnexusgpt.org","first_observed":"2026-11-05T23:21:02.044Z","first_published":"2026-11-05T23:28:50.005Z","brands":[],"dns":"resolved","resolved":["104.21.81.37","172.67.188.40"],"resolved_at":"2026-11-05T23:21:38Z","dns_checked_at":"2026-11-05T23:39:53.000Z","dns_since":"2026-11-05T23:39:53.000Z","findings":[{"id":"fzfses45v5cmzzqy64dmg","kind":"reported_domain","summary":"Under the-rheinnexusgpt.org, listed by CERT Polska","first_observed":"2026-11-05T23:21:02.044Z","first_published":"2026-11-05T23:28:50.005Z","source":"cert_polska","source_name":"CERT Polska","under":"the-rheinnexusgpt.org"}],"url":"https://domainspoof.com/live?show=all&q=www.the-rheinnexusgpt.org"},{"hostname":"www.toyota12.digital","first_observed":"2026-11-05T22:31:46.853Z","first_published":"2026-11-05T23:28:50.005Z","brands":[{"id":"toyota","name":"Toyota","url":"https://domainspoof.com/brands/toyota"}],"dns":"resolved","resolved":["151.246.1.103"],"resolved_at":"2026-11-05T23:39:53Z","dns_checked_at":"2026-11-05T23:39:53.000Z","dns_since":"2026-11-05T23:39:53.000Z","findings":[{"id":"fuvqxifnswgdjlhtvokrp","kind":"phishing_infrastructure","summary":"Resolved to 151.246.1.103, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T22:31:46.853Z","first_published":"2026-11-05T23:28:50.005Z","address":"151.246.1.103","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/toyota"},{"hostname":"www.toyota33.digital","first_observed":"2026-11-05T22:31:46.854Z","first_published":"2026-11-05T23:28:50.005Z","brands":[{"id":"toyota","name":"Toyota","url":"https://domainspoof.com/brands/toyota"}],"dns":"resolved","resolved":["151.246.1.103"],"resolved_at":"2026-11-05T23:39:53Z","dns_checked_at":"2026-11-05T23:39:53.000Z","dns_since":"2026-11-05T23:39:53.000Z","findings":[{"id":"flyzex267kufnzspikkve","kind":"phishing_infrastructure","summary":"Resolved to 151.246.1.103, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T22:31:46.854Z","first_published":"2026-11-05T23:28:50.005Z","address":"151.246.1.103","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/toyota"},{"hostname":"www.toyota55.digital","first_observed":"2026-11-05T22:31:46.855Z","first_published":"2026-11-05T23:28:50.005Z","brands":[{"id":"toyota","name":"Toyota","url":"https://domainspoof.com/brands/toyota"}],"dns":"resolved","resolved":["151.246.1.103"],"resolved_at":"2026-11-05T23:39:53Z","dns_checked_at":"2026-11-05T23:39:53.000Z","dns_since":"2026-11-05T23:39:53.000Z","findings":[{"id":"fsewwuu2c4vcnhwaqi4ta","kind":"phishing_infrastructure","summary":"Resolved to 151.246.1.103, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T22:31:46.855Z","first_published":"2026-11-05T23:28:50.005Z","address":"151.246.1.103","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/toyota"},{"hostname":"www.toyota89.digital","first_observed":"2026-11-05T22:31:46.856Z","first_published":"2026-11-05T23:28:50.005Z","brands":[{"id":"toyota","name":"Toyota","url":"https://domainspoof.com/brands/toyota"}],"dns":"resolved","resolved":["151.246.1.103"],"resolved_at":"2026-11-05T23:39:53Z","dns_checked_at":"2026-11-05T23:39:53.000Z","dns_since":"2026-11-05T23:39:53.000Z","findings":[{"id":"fhrykabhkg5odkm5nr7vn","kind":"phishing_infrastructure","summary":"Resolved to 151.246.1.103, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T22:31:46.856Z","first_published":"2026-11-05T23:28:50.005Z","address":"151.246.1.103","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/toyota"},{"hostname":"www.um-binance.com.cn","first_observed":"2026-11-05T22:56:59.834Z","first_published":"2026-11-05T23:28:50.005Z","brands":[{"id":"binance","name":"Binance","url":"https://domainspoof.com/brands/binance"}],"dns":"resolved","resolved":["154.31.150.83"],"resolved_at":"2026-11-05T23:39:53Z","dns_checked_at":"2026-11-05T23:39:53.000Z","dns_since":"2026-11-05T23:39:53.000Z","findings":[{"id":"fiekrnvgz47b6xwyiravv","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T22:56:59.834Z","first_published":"2026-11-05T23:28:50.005Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/www.um-binance.com.cn/"},{"id":"fxjb7ix4pzu6zkjx55ofx","kind":"phishing_infrastructure","summary":"Resolved to 154.31.150.83, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T22:57:29.627Z","first_published":"2026-11-05T23:28:50.005Z","address":"154.31.150.83","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/binance"},{"hostname":"www.usa250.help","first_observed":"2026-11-05T23:10:37.449Z","first_published":"2026-11-05T23:28:50.005Z","brands":[],"dns":"resolved","resolved":["216.198.79.1","216.198.79.65"],"resolved_at":"2026-11-05T23:18:39Z","dns_checked_at":"2026-11-05T23:39:53.000Z","dns_since":"2026-11-05T23:39:53.000Z","findings":[{"id":"fpjom2ifqqr2toqgpegtt","kind":"reported_domain","summary":"Under usa250.help, listed by MetaMask","first_observed":"2026-11-05T23:10:37.449Z","first_published":"2026-11-05T23:28:50.005Z","source":"metamask","source_name":"MetaMask","under":"usa250.help"}],"url":"https://domainspoof.com/live?show=all&q=www.usa250.help"},{"hostname":"www.v2.zenavlico.cyou","first_observed":"2026-11-05T23:16:08.129Z","first_published":"2026-11-05T23:28:50.005Z","brands":[],"dns":"resolved","resolved":["95.85.244.13"],"resolved_at":"2026-11-05T23:25:21Z","dns_checked_at":"2026-11-05T23:39:53.000Z","dns_since":"2026-11-05T23:39:53.000Z","findings":[{"id":"fzhvdzgmaibwqrgmrscbz","kind":"reported_domain","summary":"Under zenavlico.cyou, listed by CERT Polska","first_observed":"2026-11-05T23:16:08.129Z","first_published":"2026-11-05T23:28:50.005Z","source":"cert_polska","source_name":"CERT Polska","under":"zenavlico.cyou"}],"url":"https://domainspoof.com/live?show=all&q=www.v2.zenavlico.cyou"},{"hostname":"www.yq9zk2m8vp.zenavlico.cyou","first_observed":"2026-11-05T23:16:08.129Z","first_published":"2026-11-05T23:28:50.005Z","brands":[],"dns":"resolved","resolved":["95.85.244.13"],"resolved_at":"2026-11-05T23:25:21Z","dns_checked_at":"2026-11-05T23:39:53.000Z","dns_since":"2026-11-05T23:39:53.000Z","findings":[{"id":"fyfseb7bz2p5myjhok47n","kind":"reported_domain","summary":"Under zenavlico.cyou, listed by CERT Polska","first_observed":"2026-11-05T23:16:08.129Z","first_published":"2026-11-05T23:28:50.005Z","source":"cert_polska","source_name":"CERT Polska","under":"zenavlico.cyou"}],"url":"https://domainspoof.com/live?show=all&q=www.yq9zk2m8vp.zenavlico.cyou"},{"hostname":"xomras.in","first_observed":"2026-11-05T23:00:48.504Z","first_published":"2026-11-05T23:28:50.005Z","brands":[],"dns":"resolved","resolved":["104.21.90.15","172.67.193.80"],"resolved_at":"2026-11-05T23:10:54Z","dns_checked_at":"2026-11-05T23:39:53.000Z","dns_since":"2026-11-05T23:39:53.000Z","findings":[{"id":"fow4qmrwx5pxmgdy55dwx","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T23:00:48.504Z","first_published":"2026-11-05T23:28:50.005Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/xomras.in/"}],"url":"https://domainspoof.com/live?show=all&q=xomras.in"},{"hostname":"xrpl-rewards.live","first_observed":"2026-11-05T22:56:59.834Z","first_published":"2026-11-05T23:28:50.005Z","brands":[{"id":"ripple","name":"Ripple (XRP)","url":"https://domainspoof.com/brands/ripple"}],"dns":"resolved","resolved":["104.21.92.26","172.67.185.86","2606:4700:3031::ac43:b956","2606:4700:3036::6815:5c1a"],"resolved_at":"2026-11-05T22:57:29Z","dns_checked_at":"2026-11-05T23:39:53.000Z","dns_since":"2026-11-05T23:39:53.000Z","findings":[{"id":"fexlplf7w4szrcu3w64gd","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T22:56:59.834Z","first_published":"2026-11-05T23:28:50.005Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/brands/ripple"},{"hostname":"yocasino-es.org.es","first_observed":"2026-11-05T23:00:48.504Z","first_published":"2026-11-05T23:28:50.005Z","brands":[],"dns":"resolved","resolved":["104.21.33.36","172.67.158.130"],"resolved_at":"2026-11-06T01:21:23Z","dns_checked_at":"2026-11-05T23:39:53.000Z","dns_since":"2026-11-05T23:39:53.000Z","findings":[{"id":"ffngvhmrtup3qgwwl47nn","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T23:00:48.504Z","first_published":"2026-11-05T23:28:50.005Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=yocasino-es.org.es"},{"hostname":"youla.login.sber.sber.qiwbpchh9caly81t.rhxyvcq9vvts2ld9.r.mail.leankoala.com","first_observed":"2026-11-05T23:21:38.406Z","first_published":"2026-11-05T23:28:50.005Z","brands":[{"id":"youla","name":"Youla","url":"https://domainspoof.com/brands/youla"}],"dns":"resolved","resolved":["172.246.243.65"],"resolved_at":"2026-11-05T23:39:53Z","dns_checked_at":"2026-11-05T23:39:53.000Z","dns_since":"2026-11-05T23:39:53.000Z","findings":[{"id":"f2ot73yl6f5ixu3wgzp7w","kind":"phishing_infrastructure","summary":"Resolved to 172.246.243.65, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T23:21:38.406Z","first_published":"2026-11-05T23:28:50.005Z","address":"172.246.243.65","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/youla"},{"hostname":"ywfud.asia","first_observed":"2026-11-05T22:36:06.370Z","first_published":"2026-11-05T23:28:50.005Z","brands":[],"dns":"resolved","resolved":["104.21.7.120","172.67.130.75"],"resolved_at":"2026-11-06T01:03:06Z","dns_checked_at":"2026-11-05T23:39:53.000Z","dns_since":"2026-11-05T23:39:53.000Z","findings":[{"id":"fvpxvvzszdscasua5ftud","kind":"reported_domain","summary":"Listed by NPA 165 (information services)","first_observed":"2026-11-05T22:36:06.370Z","first_published":"2026-11-05T23:28:50.005Z","source":"npa","source_name":"NPA 165","claim":{"category":"information services"}}],"url":"https://domainspoof.com/live?show=all&q=ywfud.asia"},{"hostname":"zhondamuloai.nl","first_observed":"2026-11-05T23:05:39.527Z","first_published":"2026-11-05T23:28:50.005Z","brands":[],"dns":"resolved","resolved":["104.21.75.55","172.67.214.211"],"resolved_at":"2026-11-06T00:36:28Z","dns_checked_at":"2026-11-05T23:39:53.000Z","dns_since":"2026-11-05T23:39:53.000Z","findings":[{"id":"f5v4wovwqs6u4ntq55zu5","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T23:05:39.527Z","first_published":"2026-11-05T23:28:50.005Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=zhondamuloai.nl"},{"hostname":"zinkensdamm.stage.io-ext.se","first_observed":"2026-11-05T22:52:00.970Z","first_published":"2026-11-05T23:28:50.005Z","brands":[],"dns":"resolved","resolved":["188.208.37.128"],"resolved_at":"2026-11-05T22:52:28Z","dns_checked_at":"2026-11-05T23:39:53.000Z","dns_since":"2026-11-05T23:39:53.000Z","findings":[{"id":"fiq2bho4xaafla4y257pt","kind":"reported_domain","summary":"Under io-ext.se, listed by MetaMask","first_observed":"2026-11-05T22:52:00.970Z","first_published":"2026-11-05T23:28:50.005Z","source":"metamask","source_name":"MetaMask","under":"io-ext.se"}],"url":"https://domainspoof.com/live?show=all&q=zinkensdamm.stage.io-ext.se"},{"hostname":"zoomschedule.top","first_observed":"2026-11-05T23:00:48.504Z","first_published":"2026-11-05T23:28:50.005Z","brands":[],"dns":"resolved","resolved":["104.21.4.106","172.67.131.253"],"resolved_at":"2026-11-05T23:10:55Z","dns_checked_at":"2026-11-05T23:39:53.000Z","dns_since":"2026-11-05T23:39:53.000Z","findings":[{"id":"f4vqlqzvyz6dlnsdlu72t","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T23:00:48.504Z","first_published":"2026-11-05T23:28:50.005Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=zoomschedule.top"},{"hostname":"zrjyh.com","first_observed":"2026-11-05T22:56:59.834Z","first_published":"2026-11-05T23:28:50.005Z","brands":[],"dns":"resolved","resolved":["104.21.76.177","172.67.198.99"],"resolved_at":"2026-11-05T22:57:30Z","dns_checked_at":"2026-11-05T23:39:53.000Z","dns_since":"2026-11-05T23:39:53.000Z","findings":[{"id":"ft2jgrguzpfaqvphts3av","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T22:56:59.834Z","first_published":"2026-11-05T23:28:50.005Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=zrjyh.com"},{"hostname":"att.tokyo","first_observed":"2026-11-05T22:18:30.000Z","first_published":"2026-11-05T22:18:30.000Z","brands":[{"id":"at-and-t","name":"AT&T","url":"https://domainspoof.com/brands/at-and-t"}],"dns":"resolved","resolved":["150.95.255.38"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of att.com (same name, other ending), resolved to 150.95.255.38, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T22:18:30.000Z","first_published":"2026-11-05T22:18:30.000Z","of":"att.com","spelling":"tld","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"150.95.255.38","flagged_at":"2026-11-05T22:18:30Z"}]}],"url":"https://domainspoof.com/brands/at-and-t"},{"hostname":"codafone.co.uk","first_observed":"2026-11-05T22:18:30.000Z","first_published":"2026-11-05T22:18:30.000Z","brands":[{"id":"vodafone","name":"Vodafone","url":"https://domainspoof.com/brands/vodafone"}],"dns":"resolved","resolved":["69.162.80.59"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of vodafone.com (a letter from a neighbouring key), resolved to 69.162.80.59, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T22:18:30.000Z","first_published":"2026-11-05T22:18:30.000Z","of":"vodafone.com","spelling":"adjacent_key","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"69.162.80.59","flagged_at":"2026-11-05T22:18:30Z"}]}],"url":"https://domainspoof.com/brands/vodafone"},{"hostname":"dexscreener.fyi","first_observed":"2026-11-05T22:18:30.000Z","first_published":"2026-11-05T22:18:30.000Z","brands":[{"id":"dex-screener","name":"DEX Screener","url":"https://domainspoof.com/brands/dex-screener"}],"dns":"resolved","resolved":["18.208.88.157","98.84.224.111"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of dexscreener.com (same name, other ending), listed by MetaMask, and reported by PhishDestroy","first_observed":"2026-11-05T22:18:30.000Z","first_published":"2026-11-05T22:18:30.000Z","of":"dexscreener.com","spelling":"tld","found_by":"dns_sweep","listings":[{"kind":"reported","source":"metamask","source_name":"MetaMask","host":"dexscreener.fyi","flagged_at":"2026-11-05T22:18:30Z"},{"kind":"reported","source":"phishdestroy","source_name":"PhishDestroy","host":"dexscreener.fyi","flagged_at":"2026-11-05T22:18:30Z"}]}],"url":"https://domainspoof.com/brands/dex-screener"},{"hostname":"ewllsfargo.com","first_observed":"2026-11-05T22:18:30.000Z","first_published":"2026-11-05T22:18:30.000Z","brands":[{"id":"wells-fargo","name":"Wells Fargo","url":"https://domainspoof.com/brands/wells-fargo"}],"dns":"resolved","resolved":["172.241.213.96"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of wellsfargo.com (two letters swapped), resolved to 172.241.213.96, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T22:18:30.000Z","first_published":"2026-11-05T22:18:30.000Z","of":"wellsfargo.com","spelling":"transposition","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"172.241.213.96","flagged_at":"2026-11-05T22:18:30Z"}]}],"url":"https://domainspoof.com/brands/wells-fargo"},{"hostname":"ferizon.com","first_observed":"2026-11-05T22:18:30.000Z","first_published":"2026-11-05T22:18:30.000Z","brands":[{"id":"verizon","name":"Verizon","url":"https://domainspoof.com/brands/verizon"}],"dns":"resolved","resolved":["37.48.77.81"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of verizon.com (a letter from a neighbouring key), resolved to 37.48.77.81, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T22:18:30.000Z","first_published":"2026-11-05T22:18:30.000Z","of":"verizon.com","spelling":"adjacent_key","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"37.48.77.81","flagged_at":"2026-11-05T22:18:30Z"}]}],"url":"https://domainspoof.com/brands/verizon"},{"hostname":"fesco.pl","first_observed":"2026-11-05T22:18:30.000Z","first_published":"2026-11-05T22:18:30.000Z","brands":[{"id":"tesco","name":"Tesco","url":"https://domainspoof.com/brands/tesco"}],"dns":"resolved","resolved":["185.253.212.22"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of tesco.com (a letter from a neighbouring key), resolved to 185.253.212.22, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T22:18:30.000Z","first_published":"2026-11-05T22:18:30.000Z","of":"tesco.com","spelling":"adjacent_key","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"185.253.212.22","flagged_at":"2026-11-05T22:18:30Z"}]}],"url":"https://domainspoof.com/brands/tesco"},{"hostname":"ibereats.com","first_observed":"2026-11-05T22:18:30.000Z","first_published":"2026-11-05T22:18:30.000Z","brands":[{"id":"uber-eats","name":"Uber Eats","url":"https://domainspoof.com/brands/uber-eats"}],"dns":"resolved","resolved":["77.247.182.251"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of ubereats.com (a letter from a neighbouring key), resolved to 77.247.182.251, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T22:18:30.000Z","first_published":"2026-11-05T22:18:30.000Z","of":"ubereats.com","spelling":"adjacent_key","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"77.247.182.251","flagged_at":"2026-11-05T22:18:30Z"}]}],"url":"https://domainspoof.com/brands/uber-eats"},{"hostname":"nexi.financial","first_observed":"2026-11-05T22:18:30.000Z","first_published":"2026-11-05T22:18:30.000Z","brands":[{"id":"nexi","name":"Nexi","url":"https://domainspoof.com/brands/nexi"}],"dns":"resolved","resolved":["195.110.124.133"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of nexi.it (same name, other ending), resolved to 195.110.124.133, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T22:18:30.000Z","first_published":"2026-11-05T22:18:30.000Z","of":"nexi.it","spelling":"tld","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"195.110.124.133","flagged_at":"2026-11-05T22:18:30Z"}]}],"url":"https://domainspoof.com/brands/nexi"},{"hostname":"ordpress.com","first_observed":"2026-11-05T22:18:30.000Z","first_published":"2026-11-05T22:18:30.000Z","brands":[{"id":"wordpress","name":"WordPress","url":"https://domainspoof.com/brands/wordpress"}],"dns":"resolved","resolved":["208.115.249.234"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of wordpress.com (a dropped letter), resolved to 208.115.249.234, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T22:18:30.000Z","first_published":"2026-11-05T22:18:30.000Z","of":"wordpress.com","spelling":"omission","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"208.115.249.234","flagged_at":"2026-11-05T22:18:30Z"}]}],"url":"https://domainspoof.com/brands/wordpress"},{"hostname":"oula.ru","first_observed":"2026-11-05T22:18:30.000Z","first_published":"2026-11-05T22:18:30.000Z","brands":[{"id":"youla","name":"Youla","url":"https://domainspoof.com/brands/youla"}],"dns":"resolved","resolved":["188.246.224.242"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of youla.ru (a dropped letter), resolved to 188.246.224.242, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T22:18:30.000Z","first_published":"2026-11-05T22:18:30.000Z","of":"youla.ru","spelling":"omission","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"188.246.224.242","flagged_at":"2026-11-05T22:18:30Z"}]}],"url":"https://domainspoof.com/brands/youla"},{"hostname":"outubekids.com","first_observed":"2026-11-05T22:18:30.000Z","first_published":"2026-11-05T22:18:30.000Z","brands":[{"id":"youtube","name":"YouTube","url":"https://domainspoof.com/brands/youtube"}],"dns":"resolved","resolved":["216.245.213.75"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of youtubekids.com (a dropped letter), resolved to 216.245.213.75, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T22:18:30.000Z","first_published":"2026-11-05T22:18:30.000Z","of":"youtubekids.com","spelling":"omission","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"216.245.213.75","flagged_at":"2026-11-05T22:18:30Z"}]}],"url":"https://domainspoof.com/brands/youtube"},{"hostname":"ricketmaster.com","first_observed":"2026-11-05T22:18:30.000Z","first_published":"2026-11-05T22:18:30.000Z","brands":[{"id":"ticketmaster","name":"Ticketmaster","url":"https://domainspoof.com/brands/ticketmaster"}],"dns":"resolved","resolved":["69.162.80.54"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of ticketmaster.com (a letter from a neighbouring key), resolved to 69.162.80.54, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T22:18:30.000Z","first_published":"2026-11-05T22:18:30.000Z","of":"ticketmaster.com","spelling":"adjacent_key","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"69.162.80.54","flagged_at":"2026-11-05T22:18:30Z"}]}],"url":"https://domainspoof.com/brands/ticketmaster"},{"hostname":"smup.at","first_observed":"2026-11-05T22:18:30.000Z","first_published":"2026-11-05T22:18:30.000Z","brands":[{"id":"sumup","name":"SumUp","url":"https://domainspoof.com/brands/sumup"}],"dns":"resolved","resolved":["85.158.181.31"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of sumup.com (a dropped letter), resolved to 85.158.181.31, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T22:18:30.000Z","first_published":"2026-11-05T22:18:30.000Z","of":"sumup.com","spelling":"omission","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"85.158.181.31","flagged_at":"2026-11-05T22:18:30Z"}]}],"url":"https://domainspoof.com/brands/sumup"},{"hostname":"teso.pl","first_observed":"2026-11-05T22:18:30.000Z","first_published":"2026-11-05T22:18:30.000Z","brands":[{"id":"tesco","name":"Tesco","url":"https://domainspoof.com/brands/tesco"}],"dns":"resolved","resolved":["188.210.222.98"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of tesco.com (a dropped letter), resolved to 188.210.222.98, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T22:18:30.000Z","first_published":"2026-11-05T22:18:30.000Z","of":"tesco.com","spelling":"omission","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"188.210.222.98","flagged_at":"2026-11-05T22:18:30Z"}]}],"url":"https://domainspoof.com/brands/tesco"},{"hostname":"tesoc.com","first_observed":"2026-11-05T22:18:30.000Z","first_published":"2026-11-05T22:18:30.000Z","brands":[{"id":"tesco","name":"Tesco","url":"https://domainspoof.com/brands/tesco"}],"dns":"resolved","resolved":["45.82.67.97"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of tesco.com (two letters swapped), resolved to 45.82.67.97, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T22:18:30.000Z","first_published":"2026-11-05T22:18:30.000Z","of":"tesco.com","spelling":"transposition","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"45.82.67.97","flagged_at":"2026-11-05T22:18:30Z"}]}],"url":"https://domainspoof.com/brands/tesco"},{"hostname":"thenodyshop.com","first_observed":"2026-11-05T22:18:30.000Z","first_published":"2026-11-05T22:18:30.000Z","brands":[{"id":"the-body-shop","name":"The Body Shop","url":"https://domainspoof.com/brands/the-body-shop"}],"dns":"resolved","resolved":["216.245.213.78"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of thebodyshop.com (a letter from a neighbouring key), resolved to 216.245.213.78, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T22:18:30.000Z","first_published":"2026-11-05T22:18:30.000Z","of":"thebodyshop.com","spelling":"adjacent_key","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"216.245.213.78","flagged_at":"2026-11-05T22:18:30Z"}]}],"url":"https://domainspoof.com/brands/the-body-shop"},{"hostname":"thtollroads.com","first_observed":"2026-11-05T22:18:30.000Z","first_published":"2026-11-05T22:18:30.000Z","brands":[{"id":"the-toll-roads","name":"The Toll Roads","url":"https://domainspoof.com/brands/the-toll-roads"}],"dns":"resolved","resolved":["69.162.80.62"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of thetollroads.com (a dropped letter), resolved to 69.162.80.62, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T22:18:30.000Z","first_published":"2026-11-05T22:18:30.000Z","of":"thetollroads.com","spelling":"omission","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"69.162.80.62","flagged_at":"2026-11-05T22:18:30Z"}]}],"url":"https://domainspoof.com/brands/the-toll-roads"},{"hostname":"ticketmadter.co.uk","first_observed":"2026-11-05T22:18:30.000Z","first_published":"2026-11-05T22:18:30.000Z","brands":[{"id":"ticketmaster","name":"Ticketmaster","url":"https://domainspoof.com/brands/ticketmaster"}],"dns":"resolved","resolved":["216.245.213.77"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of ticketmaster.com (a letter from a neighbouring key), resolved to 216.245.213.77, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T22:18:30.000Z","first_published":"2026-11-05T22:18:30.000Z","of":"ticketmaster.com","spelling":"adjacent_key","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"216.245.213.77","flagged_at":"2026-11-05T22:18:30Z"}]}],"url":"https://domainspoof.com/brands/ticketmaster"},{"hostname":"ticketmasfer.com","first_observed":"2026-11-05T22:18:30.000Z","first_published":"2026-11-05T22:18:30.000Z","brands":[{"id":"ticketmaster","name":"Ticketmaster","url":"https://domainspoof.com/brands/ticketmaster"}],"dns":"resolved","resolved":["23.105.175.17"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of ticketmaster.com (a letter from a neighbouring key), resolved to 23.105.175.17, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T22:18:30.000Z","first_published":"2026-11-05T22:18:30.000Z","of":"ticketmaster.com","spelling":"adjacent_key","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"23.105.175.17","flagged_at":"2026-11-05T22:18:30Z"}]}],"url":"https://domainspoof.com/brands/ticketmaster"},{"hostname":"ticketmasger.com","first_observed":"2026-11-05T22:18:30.000Z","first_published":"2026-11-05T22:18:30.000Z","brands":[{"id":"ticketmaster","name":"Ticketmaster","url":"https://domainspoof.com/brands/ticketmaster"}],"dns":"resolved","resolved":["199.193.114.103"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of ticketmaster.com (a letter from a neighbouring key), resolved to 199.193.114.103, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T22:18:30.000Z","first_published":"2026-11-05T22:18:30.000Z","of":"ticketmaster.com","spelling":"adjacent_key","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"199.193.114.103","flagged_at":"2026-11-05T22:18:30Z"}]}],"url":"https://domainspoof.com/brands/ticketmaster"},{"hostname":"ticketmastef.com","first_observed":"2026-11-05T22:18:30.000Z","first_published":"2026-11-05T22:18:30.000Z","brands":[{"id":"ticketmaster","name":"Ticketmaster","url":"https://domainspoof.com/brands/ticketmaster"}],"dns":"resolved","resolved":["45.82.67.143"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of ticketmaster.com (a letter from a neighbouring key), resolved to 45.82.67.143, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T22:18:30.000Z","first_published":"2026-11-05T22:18:30.000Z","of":"ticketmaster.com","spelling":"adjacent_key","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"45.82.67.143","flagged_at":"2026-11-05T22:18:30Z"}]}],"url":"https://domainspoof.com/brands/ticketmaster"},{"hostname":"ticketmastet.com","first_observed":"2026-11-05T22:18:30.000Z","first_published":"2026-11-05T22:18:30.000Z","brands":[{"id":"ticketmaster","name":"Ticketmaster","url":"https://domainspoof.com/brands/ticketmaster"}],"dns":"resolved","resolved":["212.7.194.53"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of ticketmaster.com (a letter from a neighbouring key), resolved to 212.7.194.53, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T22:18:30.000Z","first_published":"2026-11-05T22:18:30.000Z","of":"ticketmaster.com","spelling":"adjacent_key","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"212.7.194.53","flagged_at":"2026-11-05T22:18:30Z"}]}],"url":"https://domainspoof.com/brands/ticketmaster"},{"hostname":"ticketmastsr.com","first_observed":"2026-11-05T22:18:30.000Z","first_published":"2026-11-05T22:18:30.000Z","brands":[{"id":"ticketmaster","name":"Ticketmaster","url":"https://domainspoof.com/brands/ticketmaster"}],"dns":"resolved","resolved":["216.245.213.74"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of ticketmaster.com (a letter from a neighbouring key), resolved to 216.245.213.74, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T22:18:30.000Z","first_published":"2026-11-05T22:18:30.000Z","of":"ticketmaster.com","spelling":"adjacent_key","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"216.245.213.74","flagged_at":"2026-11-05T22:18:30Z"}]}],"url":"https://domainspoof.com/brands/ticketmaster"},{"hostname":"ticketmasyer.com","first_observed":"2026-11-05T22:18:30.000Z","first_published":"2026-11-05T22:18:30.000Z","brands":[{"id":"ticketmaster","name":"Ticketmaster","url":"https://domainspoof.com/brands/ticketmaster"}],"dns":"resolved","resolved":["45.82.67.195"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of ticketmaster.com (a letter from a neighbouring key), resolved to 45.82.67.195, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T22:18:30.000Z","first_published":"2026-11-05T22:18:30.000Z","of":"ticketmaster.com","spelling":"adjacent_key","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"45.82.67.195","flagged_at":"2026-11-05T22:18:30Z"}]}],"url":"https://domainspoof.com/brands/ticketmaster"},{"hostname":"ticketmazter.com","first_observed":"2026-11-05T22:18:30.000Z","first_published":"2026-11-05T22:18:30.000Z","brands":[{"id":"ticketmaster","name":"Ticketmaster","url":"https://domainspoof.com/brands/ticketmaster"}],"dns":"resolved","resolved":["199.193.114.101"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of ticketmaster.com (a letter from a neighbouring key), resolved to 199.193.114.101, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T22:18:30.000Z","first_published":"2026-11-05T22:18:30.000Z","of":"ticketmaster.com","spelling":"adjacent_key","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"199.193.114.101","flagged_at":"2026-11-05T22:18:30Z"}]}],"url":"https://domainspoof.com/brands/ticketmaster"},{"hostname":"ticketmqster.com","first_observed":"2026-11-05T22:18:30.000Z","first_published":"2026-11-05T22:18:30.000Z","brands":[{"id":"ticketmaster","name":"Ticketmaster","url":"https://domainspoof.com/brands/ticketmaster"}],"dns":"resolved","resolved":["212.92.104.122"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of ticketmaster.com (a letter from a neighbouring key), resolved to 212.92.104.122, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T22:18:30.000Z","first_published":"2026-11-05T22:18:30.000Z","of":"ticketmaster.com","spelling":"adjacent_key","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"212.92.104.122","flagged_at":"2026-11-05T22:18:30Z"}]}],"url":"https://domainspoof.com/brands/ticketmaster"},{"hostname":"ticketrnaster.shop","first_observed":"2026-11-05T22:18:30.000Z","first_published":"2026-11-05T22:18:30.000Z","brands":[{"id":"ticketmaster","name":"Ticketmaster","url":"https://domainspoof.com/brands/ticketmaster"}],"dns":"resolved","resolved":["153.52.255.25"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of ticketmaster.com (similar-looking characters), resolved to 153.52.255.25, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T22:18:30.000Z","first_published":"2026-11-05T22:18:30.000Z","of":"ticketmaster.com","spelling":"homoglyph","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"153.52.255.25","flagged_at":"2026-11-05T22:18:30Z"}]}],"url":"https://domainspoof.com/brands/ticketmaster"},{"hostname":"ticmetmaster.com","first_observed":"2026-11-05T22:18:30.000Z","first_published":"2026-11-05T22:18:30.000Z","brands":[{"id":"ticketmaster","name":"Ticketmaster","url":"https://domainspoof.com/brands/ticketmaster"}],"dns":"resolved","resolved":["5.79.75.212"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of ticketmaster.com (a letter from a neighbouring key), resolved to 5.79.75.212, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T22:18:30.000Z","first_published":"2026-11-05T22:18:30.000Z","of":"ticketmaster.com","spelling":"adjacent_key","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"5.79.75.212","flagged_at":"2026-11-05T22:18:30Z"}]}],"url":"https://domainspoof.com/brands/ticketmaster"},{"hostname":"tiktokb.top","first_observed":"2026-11-05T22:18:30.000Z","first_published":"2026-11-05T22:18:30.000Z","brands":[{"id":"tiktok","name":"TikTok","url":"https://domainspoof.com/brands/tiktok"}],"dns":"resolved","resolved":["172.232.24.161","172.232.24.235","172.234.25.42"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of tiktokv.com (a letter from a neighbouring key), resolved to 172.232.24.161, where reported phishing was found in the 48 hours before, and resolved to 172.232.24.235, where reported phishing was found in the 48 hours before, and resolved to 172.234.25.42, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T22:18:30.000Z","first_published":"2026-11-05T22:18:30.000Z","of":"tiktokv.com","spelling":"adjacent_key","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"172.232.24.161","flagged_at":"2026-11-05T22:18:30Z"},{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"172.232.24.235","flagged_at":"2026-11-05T22:18:30Z"},{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"172.234.25.42","flagged_at":"2026-11-05T22:18:30Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/tiktok"},{"hostname":"tiktokc.com","first_observed":"2026-11-05T22:18:30.000Z","first_published":"2026-11-05T22:18:30.000Z","brands":[{"id":"tiktok","name":"TikTok","url":"https://domainspoof.com/brands/tiktok"}],"dns":"resolved","resolved":["216.245.197.45"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of tiktokv.com (a letter from a neighbouring key), resolved to 216.245.197.45, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T22:18:30.000Z","first_published":"2026-11-05T22:18:30.000Z","of":"tiktokv.com","spelling":"adjacent_key","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"216.245.197.45","flagged_at":"2026-11-05T22:18:30Z"}]}],"url":"https://domainspoof.com/brands/tiktok"},{"hostname":"tirbotax.com","first_observed":"2026-11-05T22:18:30.000Z","first_published":"2026-11-05T22:18:30.000Z","brands":[{"id":"intuit","name":"Intuit","url":"https://domainspoof.com/brands/intuit"}],"dns":"resolved","resolved":["212.7.194.67"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of turbotax.com (a letter from a neighbouring key), resolved to 212.7.194.67, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T22:18:30.000Z","first_published":"2026-11-05T22:18:30.000Z","of":"turbotax.com","spelling":"adjacent_key","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"212.7.194.67","flagged_at":"2026-11-05T22:18:30Z"}]}],"url":"https://domainspoof.com/brands/intuit"},{"hostname":"titkok.com","first_observed":"2026-11-05T22:18:30.000Z","first_published":"2026-11-05T22:18:30.000Z","brands":[{"id":"tiktok","name":"TikTok","url":"https://domainspoof.com/brands/tiktok"}],"dns":"resolved","resolved":["212.92.104.6"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of tiktok.com (two letters swapped), resolved to 212.92.104.6, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T22:18:30.000Z","first_published":"2026-11-05T22:18:30.000Z","of":"tiktok.com","spelling":"transposition","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"212.92.104.6","flagged_at":"2026-11-05T22:18:30Z"}]}],"url":"https://domainspoof.com/brands/tiktok"},{"hostname":"titkok.shop","first_observed":"2026-11-05T22:18:30.000Z","first_published":"2026-11-05T22:18:30.000Z","brands":[{"id":"tiktok","name":"TikTok","url":"https://domainspoof.com/brands/tiktok"}],"dns":"resolved","resolved":["172.232.24.161","172.232.24.235","172.234.25.42"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of tiktok.com (two letters swapped), resolved to 172.232.24.161, where reported phishing was found in the 48 hours before, and resolved to 172.232.24.235, where reported phishing was found in the 48 hours before, and resolved to 172.234.25.42, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T22:18:30.000Z","first_published":"2026-11-05T22:18:30.000Z","of":"tiktok.com","spelling":"transposition","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"172.232.24.161","flagged_at":"2026-11-05T22:18:30Z"},{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"172.232.24.235","flagged_at":"2026-11-05T22:18:30Z"},{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"172.234.25.42","flagged_at":"2026-11-05T22:18:30Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/tiktok"},{"hostname":"tmobipe.com","first_observed":"2026-11-05T22:18:30.000Z","first_published":"2026-11-05T22:18:30.000Z","brands":[{"id":"t-mobile","name":"T-Mobile","url":"https://domainspoof.com/brands/t-mobile"}],"dns":"resolved","resolved":["199.193.114.42"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of tmobile.com (a letter from a neighbouring key), resolved to 199.193.114.42, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T22:18:30.000Z","first_published":"2026-11-05T22:18:30.000Z","of":"tmobile.com","spelling":"adjacent_key","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"199.193.114.42","flagged_at":"2026-11-05T22:18:30Z"}]}],"url":"https://domainspoof.com/brands/t-mobile"},{"hostname":"tmobole.com","first_observed":"2026-11-05T22:18:30.000Z","first_published":"2026-11-05T22:18:30.000Z","brands":[{"id":"t-mobile","name":"T-Mobile","url":"https://domainspoof.com/brands/t-mobile"}],"dns":"resolved","resolved":["199.193.114.101"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of tmobile.com (a letter from a neighbouring key), resolved to 199.193.114.101, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T22:18:30.000Z","first_published":"2026-11-05T22:18:30.000Z","of":"tmobile.com","spelling":"adjacent_key","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"199.193.114.101","flagged_at":"2026-11-05T22:18:30Z"}]}],"url":"https://domainspoof.com/brands/t-mobile"},{"hostname":"toilsbymailny.com","first_observed":"2026-11-05T22:18:30.000Z","first_published":"2026-11-05T22:18:30.000Z","brands":[{"id":"e-zpass-new-york","name":"E-ZPass New York","url":"https://domainspoof.com/brands/e-zpass-new-york"}],"dns":"resolved","resolved":["213.227.156.74"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of tollsbymailny.com (similar-looking characters), resolved to 213.227.156.74, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T22:18:30.000Z","first_published":"2026-11-05T22:18:30.000Z","of":"tollsbymailny.com","spelling":"homoglyph","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"213.227.156.74","flagged_at":"2026-11-05T22:18:30Z"}]}],"url":"https://domainspoof.com/brands/e-zpass-new-york"},{"hostname":"tokenpoccket.net","first_observed":"2026-11-05T22:18:30.000Z","first_published":"2026-11-05T22:18:30.000Z","brands":[{"id":"tokenpocket","name":"TokenPocket","url":"https://domainspoof.com/brands/tokenpocket"}],"dns":"resolved","resolved":["43.174.199.236"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of tokenpocket.pro (a doubled letter), resolved to 43.174.199.236, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T22:18:30.000Z","first_published":"2026-11-05T22:18:30.000Z","of":"tokenpocket.pro","spelling":"repetition","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"43.174.199.236","flagged_at":"2026-11-05T22:18:30Z"}]}],"url":"https://domainspoof.com/brands/tokenpocket"},{"hostname":"tokenpocke.cyou","first_observed":"2026-11-05T22:18:30.000Z","first_published":"2026-11-05T22:18:30.000Z","brands":[{"id":"tokenpocket","name":"TokenPocket","url":"https://domainspoof.com/brands/tokenpocket"}],"dns":"resolved","resolved":["109.206.247.15"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of tokenpocket.pro (a dropped letter), resolved to 109.206.247.15 on Spamhaus DROP","first_observed":"2026-11-05T22:18:30.000Z","first_published":"2026-11-05T22:18:30.000Z","of":"tokenpocket.pro","spelling":"omission","found_by":"zone_file","listings":[{"kind":"address","source":"spamhaus_drop","list_name":"Spamhaus DROP","address":"109.206.247.15","flagged_at":"2026-11-05T22:18:30Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/tokenpocket"},{"hostname":"tripadvidor.co.uk","first_observed":"2026-11-05T22:18:30.000Z","first_published":"2026-11-05T22:18:30.000Z","brands":[{"id":"tripadvisor","name":"Tripadvisor","url":"https://domainspoof.com/brands/tripadvisor"}],"dns":"resolved","resolved":["212.7.194.71"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of tripadvisor.com (a letter from a neighbouring key), resolved to 212.7.194.71, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T22:18:30.000Z","first_published":"2026-11-05T22:18:30.000Z","of":"tripadvisor.com","spelling":"adjacent_key","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"212.7.194.71","flagged_at":"2026-11-05T22:18:30Z"}]}],"url":"https://domainspoof.com/brands/tripadvisor"},{"hostname":"tripdvisor.co","first_observed":"2026-11-05T22:18:30.000Z","first_published":"2026-11-05T22:18:30.000Z","brands":[{"id":"tripadvisor","name":"Tripadvisor","url":"https://domainspoof.com/brands/tripadvisor"}],"dns":"resolved","resolved":["5.79.75.212"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of tripadvisor.com (a dropped letter), resolved to 5.79.75.212, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T22:18:30.000Z","first_published":"2026-11-05T22:18:30.000Z","of":"tripadvisor.com","spelling":"omission","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"5.79.75.212","flagged_at":"2026-11-05T22:18:30Z"}]}],"url":"https://domainspoof.com/brands/tripadvisor"},{"hostname":"trubotax.com","first_observed":"2026-11-05T22:18:30.000Z","first_published":"2026-11-05T22:18:30.000Z","brands":[{"id":"intuit","name":"Intuit","url":"https://domainspoof.com/brands/intuit"}],"dns":"resolved","resolved":["212.7.194.67"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of turbotax.com (two letters swapped), resolved to 212.7.194.67, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T22:18:30.000Z","first_published":"2026-11-05T22:18:30.000Z","of":"turbotax.com","spelling":"transposition","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"212.7.194.67","flagged_at":"2026-11-05T22:18:30Z"}]}],"url":"https://domainspoof.com/brands/intuit"},{"hostname":"tubotax.com","first_observed":"2026-11-05T22:18:30.000Z","first_published":"2026-11-05T22:18:30.000Z","brands":[{"id":"intuit","name":"Intuit","url":"https://domainspoof.com/brands/intuit"}],"dns":"resolved","resolved":["69.162.80.52"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of turbotax.com (a dropped letter), resolved to 69.162.80.52, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T22:18:30.000Z","first_published":"2026-11-05T22:18:30.000Z","of":"turbotax.com","spelling":"omission","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"69.162.80.52","flagged_at":"2026-11-05T22:18:30Z"}]}],"url":"https://domainspoof.com/brands/intuit"},{"hostname":"tufbotax.com","first_observed":"2026-11-05T22:18:30.000Z","first_published":"2026-11-05T22:18:30.000Z","brands":[{"id":"intuit","name":"Intuit","url":"https://domainspoof.com/brands/intuit"}],"dns":"resolved","resolved":["78.157.209.173"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of turbotax.com (a letter from a neighbouring key), resolved to 78.157.209.173, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T22:18:30.000Z","first_published":"2026-11-05T22:18:30.000Z","of":"turbotax.com","spelling":"adjacent_key","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"78.157.209.173","flagged_at":"2026-11-05T22:18:30Z"}]}],"url":"https://domainspoof.com/brands/intuit"},{"hostname":"turkishairllines.com","first_observed":"2026-11-05T22:18:30.000Z","first_published":"2026-11-05T22:18:30.000Z","brands":[{"id":"turkish-airlines","name":"Turkish Airlines","url":"https://domainspoof.com/brands/turkish-airlines"}],"dns":"resolved","resolved":["69.162.80.53"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of turkishairlines.com (a doubled letter), resolved to 69.162.80.53, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T22:18:30.000Z","first_published":"2026-11-05T22:18:30.000Z","of":"turkishairlines.com","spelling":"repetition","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"69.162.80.53","flagged_at":"2026-11-05T22:18:30Z"}]}],"url":"https://domainspoof.com/brands/turkish-airlines"},{"hostname":"turksihairlines.com","first_observed":"2026-11-05T22:18:30.000Z","first_published":"2026-11-05T22:18:30.000Z","brands":[{"id":"turkish-airlines","name":"Turkish Airlines","url":"https://domainspoof.com/brands/turkish-airlines"}],"dns":"resolved","resolved":["77.247.182.251"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of turkishairlines.com (two letters swapped), resolved to 77.247.182.251, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T22:18:30.000Z","first_published":"2026-11-05T22:18:30.000Z","of":"turkishairlines.com","spelling":"transposition","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"77.247.182.251","flagged_at":"2026-11-05T22:18:30Z"}]}],"url":"https://domainspoof.com/brands/turkish-airlines"},{"hostname":"ubeeats.com","first_observed":"2026-11-05T22:18:30.000Z","first_published":"2026-11-05T22:18:30.000Z","brands":[{"id":"uber-eats","name":"Uber Eats","url":"https://domainspoof.com/brands/uber-eats"}],"dns":"resolved","resolved":["74.63.219.254"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of ubereats.com (a dropped letter), resolved to 74.63.219.254, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T22:18:30.000Z","first_published":"2026-11-05T22:18:30.000Z","of":"ubereats.com","spelling":"omission","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"74.63.219.254","flagged_at":"2026-11-05T22:18:30Z"}]}],"url":"https://domainspoof.com/brands/uber-eats"},{"hostname":"uber.help","first_observed":"2026-11-05T22:18:30.000Z","first_published":"2026-11-05T22:18:30.000Z","brands":[{"id":"uber","name":"Uber","url":"https://domainspoof.com/brands/uber"}],"dns":"resolved","resolved":["23.105.175.16"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of uber.com (same name, other ending), resolved to 23.105.175.16, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T22:18:30.000Z","first_published":"2026-11-05T22:18:30.000Z","of":"uber.com","spelling":"tld","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"23.105.175.16","flagged_at":"2026-11-05T22:18:30Z"}]}],"url":"https://domainspoof.com/brands/uber"},{"hostname":"ubereeats.com","first_observed":"2026-11-05T22:18:30.000Z","first_published":"2026-11-05T22:18:30.000Z","brands":[{"id":"uber-eats","name":"Uber Eats","url":"https://domainspoof.com/brands/uber-eats"}],"dns":"resolved","resolved":["199.193.114.42"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of ubereats.com (a doubled letter), resolved to 199.193.114.42, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T22:18:30.000Z","first_published":"2026-11-05T22:18:30.000Z","of":"ubereats.com","spelling":"repetition","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"199.193.114.42","flagged_at":"2026-11-05T22:18:30Z"}]}],"url":"https://domainspoof.com/brands/uber-eats"},{"hostname":"uberwats.com","first_observed":"2026-11-05T22:18:30.000Z","first_published":"2026-11-05T22:18:30.000Z","brands":[{"id":"uber-eats","name":"Uber Eats","url":"https://domainspoof.com/brands/uber-eats"}],"dns":"resolved","resolved":["37.48.110.48"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of ubereats.com (a letter from a neighbouring key), resolved to 37.48.110.48, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T22:18:30.000Z","first_published":"2026-11-05T22:18:30.000Z","of":"ubereats.com","spelling":"adjacent_key","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"37.48.110.48","flagged_at":"2026-11-05T22:18:30Z"}]}],"url":"https://domainspoof.com/brands/uber-eats"},{"hostname":"ubisodt.com","first_observed":"2026-11-05T22:18:30.000Z","first_published":"2026-11-05T22:18:30.000Z","brands":[{"id":"ubisoft","name":"Ubisoft","url":"https://domainspoof.com/brands/ubisoft"}],"dns":"resolved","resolved":["77.247.182.242"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of ubisoft.com (a letter from a neighbouring key), resolved to 77.247.182.242, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T22:18:30.000Z","first_published":"2026-11-05T22:18:30.000Z","of":"ubisoft.com","spelling":"adjacent_key","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"77.247.182.242","flagged_at":"2026-11-05T22:18:30Z"}]}],"url":"https://domainspoof.com/brands/ubisoft"},{"hostname":"ubisof.com","first_observed":"2026-11-05T22:18:30.000Z","first_published":"2026-11-05T22:18:30.000Z","brands":[{"id":"ubisoft","name":"Ubisoft","url":"https://domainspoof.com/brands/ubisoft"}],"dns":"resolved","resolved":["69.162.80.61"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of ubisoft.com (a dropped letter), resolved to 69.162.80.61, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T22:18:30.000Z","first_published":"2026-11-05T22:18:30.000Z","of":"ubisoft.com","spelling":"omission","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"69.162.80.61","flagged_at":"2026-11-05T22:18:30Z"}]}],"url":"https://domainspoof.com/brands/ubisoft"},{"hostname":"ubisofr.com","first_observed":"2026-11-05T22:18:30.000Z","first_published":"2026-11-05T22:18:30.000Z","brands":[{"id":"ubisoft","name":"Ubisoft","url":"https://domainspoof.com/brands/ubisoft"}],"dns":"resolved","resolved":["77.247.182.247"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of ubisoft.com (a letter from a neighbouring key), resolved to 77.247.182.247, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T22:18:30.000Z","first_published":"2026-11-05T22:18:30.000Z","of":"ubisoft.com","spelling":"adjacent_key","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"77.247.182.247","flagged_at":"2026-11-05T22:18:30Z"}]}],"url":"https://domainspoof.com/brands/ubisoft"},{"hostname":"ubisoft.co","first_observed":"2026-11-05T22:18:30.000Z","first_published":"2026-11-05T22:18:30.000Z","brands":[{"id":"ubisoft","name":"Ubisoft","url":"https://domainspoof.com/brands/ubisoft"}],"dns":"resolved","resolved":["212.92.104.116"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of ubisoft.com (same name, other ending), resolved to 212.92.104.116, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T22:18:30.000Z","first_published":"2026-11-05T22:18:30.000Z","of":"ubisoft.com","spelling":"tld","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"212.92.104.116","flagged_at":"2026-11-05T22:18:30Z"}]}],"url":"https://domainspoof.com/brands/ubisoft"},{"hostname":"ubisot.com","first_observed":"2026-11-05T22:18:30.000Z","first_published":"2026-11-05T22:18:30.000Z","brands":[{"id":"ubisoft","name":"Ubisoft","url":"https://domainspoof.com/brands/ubisoft"}],"dns":"resolved","resolved":["212.92.105.219"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of ubisoft.com (a dropped letter), resolved to 212.92.105.219, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T22:18:30.000Z","first_published":"2026-11-05T22:18:30.000Z","of":"ubisoft.com","spelling":"omission","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"212.92.105.219","flagged_at":"2026-11-05T22:18:30Z"}]}],"url":"https://domainspoof.com/brands/ubisoft"},{"hostname":"uebreats.com","first_observed":"2026-11-05T22:18:30.000Z","first_published":"2026-11-05T22:18:30.000Z","brands":[{"id":"uber-eats","name":"Uber Eats","url":"https://domainspoof.com/brands/uber-eats"}],"dns":"resolved","resolved":["199.193.114.45"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of ubereats.com (two letters swapped), resolved to 199.193.114.45, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T22:18:30.000Z","first_published":"2026-11-05T22:18:30.000Z","of":"ubereats.com","spelling":"transposition","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"199.193.114.45","flagged_at":"2026-11-05T22:18:30Z"}]}],"url":"https://domainspoof.com/brands/uber-eats"},{"hostname":"uefa.co","first_observed":"2026-11-05T22:18:30.000Z","first_published":"2026-11-05T22:18:30.000Z","brands":[{"id":"uefa","name":"UEFA","url":"https://domainspoof.com/brands/uefa"}],"dns":"resolved","resolved":["37.48.72.213"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of uefa.com (same name, other ending), resolved to 37.48.72.213, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T22:18:30.000Z","first_published":"2026-11-05T22:18:30.000Z","of":"uefa.com","spelling":"tld","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"37.48.72.213","flagged_at":"2026-11-05T22:18:30Z"}]}],"url":"https://domainspoof.com/brands/uefa"},{"hostname":"usabetwork.com","first_observed":"2026-11-05T22:18:30.000Z","first_published":"2026-11-05T22:18:30.000Z","brands":[{"id":"usa-network","name":"USA Network","url":"https://domainspoof.com/brands/usa-network"}],"dns":"resolved","resolved":["69.162.80.59"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of usanetwork.com (a letter from a neighbouring key), resolved to 69.162.80.59, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T22:18:30.000Z","first_published":"2026-11-05T22:18:30.000Z","of":"usanetwork.com","spelling":"adjacent_key","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"69.162.80.59","flagged_at":"2026-11-05T22:18:30Z"}]}],"url":"https://domainspoof.com/brands/usa-network"},{"hostname":"usanetwok.com","first_observed":"2026-11-05T22:18:30.000Z","first_published":"2026-11-05T22:18:30.000Z","brands":[{"id":"usa-network","name":"USA Network","url":"https://domainspoof.com/brands/usa-network"}],"dns":"resolved","resolved":["212.7.194.68"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of usanetwork.com (a dropped letter), resolved to 212.7.194.68, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T22:18:30.000Z","first_published":"2026-11-05T22:18:30.000Z","of":"usanetwork.com","spelling":"omission","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"212.7.194.68","flagged_at":"2026-11-05T22:18:30Z"}]}],"url":"https://domainspoof.com/brands/usa-network"},{"hostname":"usbankreliacatd.com","first_observed":"2026-11-05T22:18:30.000Z","first_published":"2026-11-05T22:18:30.000Z","brands":[{"id":"u-s-bank","name":"U.S. Bank","url":"https://domainspoof.com/brands/u-s-bank"}],"dns":"resolved","resolved":["213.227.156.74"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of usbankreliacard.com (a letter from a neighbouring key), resolved to 213.227.156.74, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T22:18:30.000Z","first_published":"2026-11-05T22:18:30.000Z","of":"usbankreliacard.com","spelling":"adjacent_key","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"213.227.156.74","flagged_at":"2026-11-05T22:18:30Z"}]}],"url":"https://domainspoof.com/brands/u-s-bank"},{"hostname":"usbankteliacard.com","first_observed":"2026-11-05T22:18:30.000Z","first_published":"2026-11-05T22:18:30.000Z","brands":[{"id":"u-s-bank","name":"U.S. Bank","url":"https://domainspoof.com/brands/u-s-bank"}],"dns":"resolved","resolved":["212.7.194.67"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of usbankreliacard.com (a letter from a neighbouring key), resolved to 212.7.194.67, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T22:18:30.000Z","first_published":"2026-11-05T22:18:30.000Z","of":"usbankreliacard.com","spelling":"adjacent_key","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"212.7.194.67","flagged_at":"2026-11-05T22:18:30Z"}]}],"url":"https://domainspoof.com/brands/u-s-bank"},{"hostname":"usbbank.com","first_observed":"2026-11-05T22:18:30.000Z","first_published":"2026-11-05T22:18:30.000Z","brands":[{"id":"u-s-bank","name":"U.S. Bank","url":"https://domainspoof.com/brands/u-s-bank"}],"dns":"resolved","resolved":["64.31.3.237"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of usbank.com (a doubled letter), resolved to 64.31.3.237, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T22:18:30.000Z","first_published":"2026-11-05T22:18:30.000Z","of":"usbank.com","spelling":"repetition","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"64.31.3.237","flagged_at":"2026-11-05T22:18:30Z"}]}],"url":"https://domainspoof.com/brands/u-s-bank"},{"hostname":"usbnak.com","first_observed":"2026-11-05T22:18:30.000Z","first_published":"2026-11-05T22:18:30.000Z","brands":[{"id":"u-s-bank","name":"U.S. Bank","url":"https://domainspoof.com/brands/u-s-bank"}],"dns":"resolved","resolved":["45.82.67.240"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of usbank.com (two letters swapped), resolved to 45.82.67.240, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T22:18:30.000Z","first_published":"2026-11-05T22:18:30.000Z","of":"usbank.com","spelling":"transposition","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"45.82.67.240","flagged_at":"2026-11-05T22:18:30Z"}]}],"url":"https://domainspoof.com/brands/u-s-bank"},{"hostname":"usp-s.com","first_observed":"2026-11-05T22:18:30.000Z","first_published":"2026-11-05T22:18:30.000Z","brands":[{"id":"usps","name":"USPS","url":"https://domainspoof.com/brands/usps"}],"dns":"resolved","resolved":["37.48.110.48"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of usps.com (an added hyphen), resolved to 37.48.110.48, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T22:18:30.000Z","first_published":"2026-11-05T22:18:30.000Z","of":"usps.com","spelling":"hyphen","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"37.48.110.48","flagged_at":"2026-11-05T22:18:30Z"}]}],"url":"https://domainspoof.com/brands/usps"},{"hostname":"ussa.live","first_observed":"2026-11-05T22:18:30.000Z","first_published":"2026-11-05T22:18:30.000Z","brands":[{"id":"usaa","name":"USAA","url":"https://domainspoof.com/brands/usaa"}],"dns":"resolved","resolved":["23.82.16.55"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of usaa.com (a letter from a neighbouring key), resolved to 23.82.16.55, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T22:18:30.000Z","first_published":"2026-11-05T22:18:30.000Z","of":"usaa.com","spelling":"adjacent_key","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"23.82.16.55","flagged_at":"2026-11-05T22:18:30Z"}]}],"url":"https://domainspoof.com/brands/usaa"},{"hostname":"uubereats.com","first_observed":"2026-11-05T22:18:30.000Z","first_published":"2026-11-05T22:18:30.000Z","brands":[{"id":"uber-eats","name":"Uber Eats","url":"https://domainspoof.com/brands/uber-eats"}],"dns":"resolved","resolved":["199.193.114.45"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of ubereats.com (a doubled letter), resolved to 199.193.114.45, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T22:18:30.000Z","first_published":"2026-11-05T22:18:30.000Z","of":"ubereats.com","spelling":"repetition","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"199.193.114.45","flagged_at":"2026-11-05T22:18:30Z"}]}],"url":"https://domainspoof.com/brands/uber-eats"},{"hostname":"uuniqlo.com","first_observed":"2026-11-05T22:18:30.000Z","first_published":"2026-11-05T22:18:30.000Z","brands":[{"id":"uniqlo","name":"UNIQLO","url":"https://domainspoof.com/brands/uniqlo"}],"dns":"resolved","resolved":["199.193.114.100"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of uniqlo.com (a doubled letter), resolved to 199.193.114.100, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T22:18:30.000Z","first_published":"2026-11-05T22:18:30.000Z","of":"uniqlo.com","spelling":"repetition","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"199.193.114.100","flagged_at":"2026-11-05T22:18:30Z"}]}],"url":"https://domainspoof.com/brands/uniqlo"},{"hostname":"uvereats.com","first_observed":"2026-11-05T22:18:30.000Z","first_published":"2026-11-05T22:18:30.000Z","brands":[{"id":"uber-eats","name":"Uber Eats","url":"https://domainspoof.com/brands/uber-eats"}],"dns":"resolved","resolved":["77.247.182.246"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of ubereats.com (a letter from a neighbouring key), resolved to 77.247.182.246, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T22:18:30.000Z","first_published":"2026-11-05T22:18:30.000Z","of":"ubereats.com","spelling":"adjacent_key","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"77.247.182.246","flagged_at":"2026-11-05T22:18:30Z"}]}],"url":"https://domainspoof.com/brands/uber-eats"},{"hostname":"veeizon.com","first_observed":"2026-11-05T22:18:30.000Z","first_published":"2026-11-05T22:18:30.000Z","brands":[{"id":"verizon","name":"Verizon","url":"https://domainspoof.com/brands/verizon"}],"dns":"resolved","resolved":["208.115.249.235"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of verizon.com (a letter from a neighbouring key), resolved to 208.115.249.235, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T22:18:30.000Z","first_published":"2026-11-05T22:18:30.000Z","of":"verizon.com","spelling":"adjacent_key","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"208.115.249.235","flagged_at":"2026-11-05T22:18:30Z"}]}],"url":"https://domainspoof.com/brands/verizon"},{"hostname":"veenmo.com","first_observed":"2026-11-05T22:18:30.000Z","first_published":"2026-11-05T22:18:30.000Z","brands":[{"id":"venmo","name":"Venmo","url":"https://domainspoof.com/brands/venmo"}],"dns":"resolved","resolved":["199.193.114.100"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of venmo.com (a doubled letter), resolved to 199.193.114.100, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T22:18:30.000Z","first_published":"2026-11-05T22:18:30.000Z","of":"venmo.com","spelling":"repetition","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"199.193.114.100","flagged_at":"2026-11-05T22:18:30Z"}]}],"url":"https://domainspoof.com/brands/venmo"},{"hostname":"vefizon.com","first_observed":"2026-11-05T22:18:30.000Z","first_published":"2026-11-05T22:18:30.000Z","brands":[{"id":"verizon","name":"Verizon","url":"https://domainspoof.com/brands/verizon"}],"dns":"resolved","resolved":["64.31.3.235"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of verizon.com (a letter from a neighbouring key), resolved to 64.31.3.235, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T22:18:30.000Z","first_published":"2026-11-05T22:18:30.000Z","of":"verizon.com","spelling":"adjacent_key","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"64.31.3.235","flagged_at":"2026-11-05T22:18:30Z"}]}],"url":"https://domainspoof.com/brands/verizon"},{"hostname":"vemno.com","first_observed":"2026-11-05T22:18:30.000Z","first_published":"2026-11-05T22:18:30.000Z","brands":[{"id":"venmo","name":"Venmo","url":"https://domainspoof.com/brands/venmo"}],"dns":"resolved","resolved":["64.31.3.234"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of venmo.com (two letters swapped), resolved to 64.31.3.234, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T22:18:30.000Z","first_published":"2026-11-05T22:18:30.000Z","of":"venmo.com","spelling":"transposition","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"64.31.3.234","flagged_at":"2026-11-05T22:18:30Z"}]}],"url":"https://domainspoof.com/brands/venmo"},{"hostname":"veriizon.com","first_observed":"2026-11-05T22:18:30.000Z","first_published":"2026-11-05T22:18:30.000Z","brands":[{"id":"verizon","name":"Verizon","url":"https://domainspoof.com/brands/verizon"}],"dns":"resolved","resolved":["37.48.72.213"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of verizon.com (a doubled letter), resolved to 37.48.72.213, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T22:18:30.000Z","first_published":"2026-11-05T22:18:30.000Z","of":"verizon.com","spelling":"repetition","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"37.48.72.213","flagged_at":"2026-11-05T22:18:30Z"}]}],"url":"https://domainspoof.com/brands/verizon"},{"hostname":"verizonwirelezs.com","first_observed":"2026-11-05T22:18:30.000Z","first_published":"2026-11-05T22:18:30.000Z","brands":[{"id":"verizon","name":"Verizon","url":"https://domainspoof.com/brands/verizon"}],"dns":"resolved","resolved":["216.245.213.77"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of verizonwireless.com (a letter from a neighbouring key), resolved to 216.245.213.77, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T22:18:30.000Z","first_published":"2026-11-05T22:18:30.000Z","of":"verizonwireless.com","spelling":"adjacent_key","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"216.245.213.77","flagged_at":"2026-11-05T22:18:30Z"}]}],"url":"https://domainspoof.com/brands/verizon"},{"hostname":"verizonwirreless.com","first_observed":"2026-11-05T22:18:30.000Z","first_published":"2026-11-05T22:18:30.000Z","brands":[{"id":"verizon","name":"Verizon","url":"https://domainspoof.com/brands/verizon"}],"dns":"resolved","resolved":["64.31.3.234"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of verizonwireless.com (a doubled letter), resolved to 64.31.3.234, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T22:18:30.000Z","first_published":"2026-11-05T22:18:30.000Z","of":"verizonwireless.com","spelling":"repetition","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"64.31.3.234","flagged_at":"2026-11-05T22:18:30Z"}]}],"url":"https://domainspoof.com/brands/verizon"},{"hostname":"visalstudio.com","first_observed":"2026-11-05T22:18:30.000Z","first_published":"2026-11-05T22:18:30.000Z","brands":[{"id":"visual-studio-code","name":"Visual Studio Code","url":"https://domainspoof.com/brands/visual-studio-code"}],"dns":"resolved","resolved":["212.92.105.219"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of visualstudio.com (a dropped letter), resolved to 212.92.105.219, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T22:18:30.000Z","first_published":"2026-11-05T22:18:30.000Z","of":"visualstudio.com","spelling":"omission","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"212.92.105.219","flagged_at":"2026-11-05T22:18:30Z"}]}],"url":"https://domainspoof.com/brands/visual-studio-code"},{"hostname":"visialstudio.com","first_observed":"2026-11-05T22:18:30.000Z","first_published":"2026-11-05T22:18:30.000Z","brands":[{"id":"visual-studio-code","name":"Visual Studio Code","url":"https://domainspoof.com/brands/visual-studio-code"}],"dns":"resolved","resolved":["77.247.182.245"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of visualstudio.com (a letter from a neighbouring key), resolved to 77.247.182.245, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T22:18:30.000Z","first_published":"2026-11-05T22:18:30.000Z","of":"visualstudio.com","spelling":"adjacent_key","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"77.247.182.245","flagged_at":"2026-11-05T22:18:30Z"}]}],"url":"https://domainspoof.com/brands/visual-studio-code"},{"hostname":"vodadone.co.uk","first_observed":"2026-11-05T22:18:30.000Z","first_published":"2026-11-05T22:18:30.000Z","brands":[{"id":"vodafone","name":"Vodafone","url":"https://domainspoof.com/brands/vodafone"}],"dns":"resolved","resolved":["69.162.80.57"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of vodafone.com (a letter from a neighbouring key), resolved to 69.162.80.57, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T22:18:30.000Z","first_published":"2026-11-05T22:18:30.000Z","of":"vodafone.com","spelling":"adjacent_key","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"69.162.80.57","flagged_at":"2026-11-05T22:18:30Z"}]}],"url":"https://domainspoof.com/brands/vodafone"},{"hostname":"vodafne.com","first_observed":"2026-11-05T22:18:30.000Z","first_published":"2026-11-05T22:18:30.000Z","brands":[{"id":"vodafone","name":"Vodafone","url":"https://domainspoof.com/brands/vodafone"}],"dns":"resolved","resolved":["69.162.80.56"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of vodafone.com (a dropped letter), resolved to 69.162.80.56, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T22:18:30.000Z","first_published":"2026-11-05T22:18:30.000Z","of":"vodafone.com","spelling":"omission","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"69.162.80.56","flagged_at":"2026-11-05T22:18:30Z"}]}],"url":"https://domainspoof.com/brands/vodafone"},{"hostname":"vodafoone.co.uk","first_observed":"2026-11-05T22:18:30.000Z","first_published":"2026-11-05T22:18:30.000Z","brands":[{"id":"vodafone","name":"Vodafone","url":"https://domainspoof.com/brands/vodafone"}],"dns":"resolved","resolved":["69.162.80.53"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of vodafone.com (a doubled letter), resolved to 69.162.80.53, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T22:18:30.000Z","first_published":"2026-11-05T22:18:30.000Z","of":"vodafone.com","spelling":"repetition","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"69.162.80.53","flagged_at":"2026-11-05T22:18:30Z"}]}],"url":"https://domainspoof.com/brands/vodafone"},{"hostname":"vodaofne.co.uk","first_observed":"2026-11-05T22:18:30.000Z","first_published":"2026-11-05T22:18:30.000Z","brands":[{"id":"vodafone","name":"Vodafone","url":"https://domainspoof.com/brands/vodafone"}],"dns":"resolved","resolved":["69.162.80.55"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of vodafone.com (two letters swapped), resolved to 69.162.80.55, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T22:18:30.000Z","first_published":"2026-11-05T22:18:30.000Z","of":"vodafone.com","spelling":"transposition","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"69.162.80.55","flagged_at":"2026-11-05T22:18:30Z"}]}],"url":"https://domainspoof.com/brands/vodafone"},{"hostname":"vodfone.com","first_observed":"2026-11-05T22:18:30.000Z","first_published":"2026-11-05T22:18:30.000Z","brands":[{"id":"vodafone","name":"Vodafone","url":"https://domainspoof.com/brands/vodafone"}],"dns":"resolved","resolved":["69.162.80.58"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of vodafone.com (a dropped letter), resolved to 69.162.80.58, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T22:18:30.000Z","first_published":"2026-11-05T22:18:30.000Z","of":"vodafone.com","spelling":"omission","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"69.162.80.58","flagged_at":"2026-11-05T22:18:30Z"}]}],"url":"https://domainspoof.com/brands/vodafone"},{"hostname":"volvovars.com","first_observed":"2026-11-05T22:18:30.000Z","first_published":"2026-11-05T22:18:30.000Z","brands":[{"id":"volvo","name":"Volvo","url":"https://domainspoof.com/brands/volvo"}],"dns":"resolved","resolved":["213.227.156.75"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of volvocars.com (a letter from a neighbouring key), resolved to 213.227.156.75, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T22:18:30.000Z","first_published":"2026-11-05T22:18:30.000Z","of":"volvocars.com","spelling":"adjacent_key","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"213.227.156.75","flagged_at":"2026-11-05T22:18:30Z"}]}],"url":"https://domainspoof.com/brands/volvo"},{"hostname":"volvoxars.com","first_observed":"2026-11-05T22:18:30.000Z","first_published":"2026-11-05T22:18:30.000Z","brands":[{"id":"volvo","name":"Volvo","url":"https://domainspoof.com/brands/volvo"}],"dns":"resolved","resolved":["69.162.80.55"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of volvocars.com (a letter from a neighbouring key), resolved to 69.162.80.55, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T22:18:30.000Z","first_published":"2026-11-05T22:18:30.000Z","of":"volvocars.com","spelling":"adjacent_key","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"69.162.80.55","flagged_at":"2026-11-05T22:18:30Z"}]}],"url":"https://domainspoof.com/brands/volvo"},{"hostname":"vosafone.co.uk","first_observed":"2026-11-05T22:18:30.000Z","first_published":"2026-11-05T22:18:30.000Z","brands":[{"id":"vodafone","name":"Vodafone","url":"https://domainspoof.com/brands/vodafone"}],"dns":"resolved","resolved":["212.7.194.67"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of vodafone.com (a letter from a neighbouring key), resolved to 212.7.194.67, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T22:18:30.000Z","first_published":"2026-11-05T22:18:30.000Z","of":"vodafone.com","spelling":"adjacent_key","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"212.7.194.67","flagged_at":"2026-11-05T22:18:30Z"}]}],"url":"https://domainspoof.com/brands/vodafone"},{"hostname":"vpdafone.co.uk","first_observed":"2026-11-05T22:18:30.000Z","first_published":"2026-11-05T22:18:30.000Z","brands":[{"id":"vodafone","name":"Vodafone","url":"https://domainspoof.com/brands/vodafone"}],"dns":"resolved","resolved":["212.7.194.71"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of vodafone.com (a letter from a neighbouring key), resolved to 212.7.194.71, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T22:18:30.000Z","first_published":"2026-11-05T22:18:30.000Z","of":"vodafone.com","spelling":"adjacent_key","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"212.7.194.71","flagged_at":"2026-11-05T22:18:30Z"}]}],"url":"https://domainspoof.com/brands/vodafone"},{"hostname":"vsrizon.com","first_observed":"2026-11-05T22:18:30.000Z","first_published":"2026-11-05T22:18:30.000Z","brands":[{"id":"verizon","name":"Verizon","url":"https://domainspoof.com/brands/verizon"}],"dns":"resolved","resolved":["23.105.175.17"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of verizon.com (a letter from a neighbouring key), resolved to 23.105.175.17, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T22:18:30.000Z","first_published":"2026-11-05T22:18:30.000Z","of":"verizon.com","spelling":"adjacent_key","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"23.105.175.17","flagged_at":"2026-11-05T22:18:30Z"}]}],"url":"https://domainspoof.com/brands/verizon"},{"hostname":"vwnmo.com","first_observed":"2026-11-05T22:18:30.000Z","first_published":"2026-11-05T22:18:30.000Z","brands":[{"id":"venmo","name":"Venmo","url":"https://domainspoof.com/brands/venmo"}],"dns":"resolved","resolved":["45.82.67.143"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of venmo.com (a letter from a neighbouring key), resolved to 45.82.67.143, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T22:18:30.000Z","first_published":"2026-11-05T22:18:30.000Z","of":"venmo.com","spelling":"adjacent_key","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"45.82.67.143","flagged_at":"2026-11-05T22:18:30Z"}]}],"url":"https://domainspoof.com/brands/venmo"},{"hostname":"walmaet.com","first_observed":"2026-11-05T22:18:30.000Z","first_published":"2026-11-05T22:18:30.000Z","brands":[{"id":"walmart","name":"Walmart","url":"https://domainspoof.com/brands/walmart"}],"dns":"resolved","resolved":["212.7.194.68"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of walmart.com (a letter from a neighbouring key), resolved to 212.7.194.68, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T22:18:30.000Z","first_published":"2026-11-05T22:18:30.000Z","of":"walmart.com","spelling":"adjacent_key","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"212.7.194.68","flagged_at":"2026-11-05T22:18:30Z"}]}],"url":"https://domainspoof.com/brands/walmart"},{"hostname":"webx.de","first_observed":"2026-11-05T22:18:30.000Z","first_published":"2026-11-05T22:18:30.000Z","brands":[{"id":"webex","name":"Webex","url":"https://domainspoof.com/brands/webex"}],"dns":"resolved","resolved":["91.98.101.145"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of webex.com (a dropped letter), resolved to 91.98.101.145, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T22:18:30.000Z","first_published":"2026-11-05T22:18:30.000Z","of":"webex.com","spelling":"omission","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"91.98.101.145","flagged_at":"2026-11-05T22:18:30Z"}]}],"url":"https://domainspoof.com/brands/webex"},{"hostname":"wedternunion.com","first_observed":"2026-11-05T22:18:30.000Z","first_published":"2026-11-05T22:18:30.000Z","brands":[{"id":"western-union","name":"Western Union","url":"https://domainspoof.com/brands/western-union"}],"dns":"resolved","resolved":["199.193.114.101"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of westernunion.com (a letter from a neighbouring key), resolved to 199.193.114.101, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T22:18:30.000Z","first_published":"2026-11-05T22:18:30.000Z","of":"westernunion.com","spelling":"adjacent_key","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"199.193.114.101","flagged_at":"2026-11-05T22:18:30Z"}]}],"url":"https://domainspoof.com/brands/western-union"},{"hostname":"wellsfarbo.com","first_observed":"2026-11-05T22:18:30.000Z","first_published":"2026-11-05T22:18:30.000Z","brands":[{"id":"wells-fargo","name":"Wells Fargo","url":"https://domainspoof.com/brands/wells-fargo"}],"dns":"resolved","resolved":["64.31.3.237"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of wellsfargo.com (a letter from a neighbouring key), resolved to 64.31.3.237, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T22:18:30.000Z","first_published":"2026-11-05T22:18:30.000Z","of":"wellsfargo.com","spelling":"adjacent_key","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"64.31.3.237","flagged_at":"2026-11-05T22:18:30Z"}]}],"url":"https://domainspoof.com/brands/wells-fargo"},{"hostname":"wellsfargadvisors.com","first_observed":"2026-11-05T22:18:30.000Z","first_published":"2026-11-05T22:18:30.000Z","brands":[{"id":"wells-fargo","name":"Wells Fargo","url":"https://domainspoof.com/brands/wells-fargo"}],"dns":"resolved","resolved":["212.7.194.68"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of wellsfargoadvisors.com (a dropped letter), resolved to 212.7.194.68, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T22:18:30.000Z","first_published":"2026-11-05T22:18:30.000Z","of":"wellsfargoadvisors.com","spelling":"omission","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"212.7.194.68","flagged_at":"2026-11-05T22:18:30Z"}]}],"url":"https://domainspoof.com/brands/wells-fargo"},{"hostname":"wellsfargoadivsors.com","first_observed":"2026-11-05T22:18:30.000Z","first_published":"2026-11-05T22:18:30.000Z","brands":[{"id":"wells-fargo","name":"Wells Fargo","url":"https://domainspoof.com/brands/wells-fargo"}],"dns":"resolved","resolved":["69.162.80.60"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of wellsfargoadvisors.com (two letters swapped), resolved to 69.162.80.60, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T22:18:30.000Z","first_published":"2026-11-05T22:18:30.000Z","of":"wellsfargoadvisors.com","spelling":"transposition","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"69.162.80.60","flagged_at":"2026-11-05T22:18:30Z"}]}],"url":"https://domainspoof.com/brands/wells-fargo"},{"hostname":"wellsfargoadvidors.com","first_observed":"2026-11-05T22:18:30.000Z","first_published":"2026-11-05T22:18:30.000Z","brands":[{"id":"wells-fargo","name":"Wells Fargo","url":"https://domainspoof.com/brands/wells-fargo"}],"dns":"resolved","resolved":["199.193.114.45"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of wellsfargoadvisors.com (a letter from a neighbouring key), resolved to 199.193.114.45, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T22:18:30.000Z","first_published":"2026-11-05T22:18:30.000Z","of":"wellsfargoadvisors.com","spelling":"adjacent_key","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"199.193.114.45","flagged_at":"2026-11-05T22:18:30Z"}]}],"url":"https://domainspoof.com/brands/wells-fargo"},{"hostname":"wellsfargoadvisors.co","first_observed":"2026-11-05T22:18:30.000Z","first_published":"2026-11-05T22:18:30.000Z","brands":[{"id":"wells-fargo","name":"Wells Fargo","url":"https://domainspoof.com/brands/wells-fargo"}],"dns":"resolved","resolved":["216.245.197.46"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of wellsfargoadvisors.com (same name, other ending), resolved to 216.245.197.46, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T22:18:30.000Z","first_published":"2026-11-05T22:18:30.000Z","of":"wellsfargoadvisors.com","spelling":"tld","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"216.245.197.46","flagged_at":"2026-11-05T22:18:30Z"}]}],"url":"https://domainspoof.com/brands/wells-fargo"},{"hostname":"wellsfargoadvsors.com","first_observed":"2026-11-05T22:18:30.000Z","first_published":"2026-11-05T22:18:30.000Z","brands":[{"id":"wells-fargo","name":"Wells Fargo","url":"https://domainspoof.com/brands/wells-fargo"}],"dns":"resolved","resolved":["212.7.194.53"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of wellsfargoadvisors.com (a dropped letter), resolved to 212.7.194.53, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T22:18:30.000Z","first_published":"2026-11-05T22:18:30.000Z","of":"wellsfargoadvisors.com","spelling":"omission","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"212.7.194.53","flagged_at":"2026-11-05T22:18:30Z"}]}],"url":"https://domainspoof.com/brands/wells-fargo"},{"hostname":"wellsfatgoadvisors.com","first_observed":"2026-11-05T22:18:30.000Z","first_published":"2026-11-05T22:18:30.000Z","brands":[{"id":"wells-fargo","name":"Wells Fargo","url":"https://domainspoof.com/brands/wells-fargo"}],"dns":"resolved","resolved":["77.247.182.248"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of wellsfargoadvisors.com (a letter from a neighbouring key), resolved to 77.247.182.248, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T22:18:30.000Z","first_published":"2026-11-05T22:18:30.000Z","of":"wellsfargoadvisors.com","spelling":"adjacent_key","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"77.247.182.248","flagged_at":"2026-11-05T22:18:30Z"}]}],"url":"https://domainspoof.com/brands/wells-fargo"},{"hostname":"wellsfwrgo.com","first_observed":"2026-11-05T22:18:30.000Z","first_published":"2026-11-05T22:18:30.000Z","brands":[{"id":"wells-fargo","name":"Wells Fargo","url":"https://domainspoof.com/brands/wells-fargo"}],"dns":"resolved","resolved":["45.82.67.96"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of wellsfargo.com (a letter from a neighbouring key), resolved to 45.82.67.96, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T22:18:30.000Z","first_published":"2026-11-05T22:18:30.000Z","of":"wellsfargo.com","spelling":"adjacent_key","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"45.82.67.96","flagged_at":"2026-11-05T22:18:30Z"}]}],"url":"https://domainspoof.com/brands/wells-fargo"},{"hostname":"wellsgargoadvisors.com","first_observed":"2026-11-05T22:18:30.000Z","first_published":"2026-11-05T22:18:30.000Z","brands":[{"id":"wells-fargo","name":"Wells Fargo","url":"https://domainspoof.com/brands/wells-fargo"}],"dns":"resolved","resolved":["69.162.80.62"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of wellsfargoadvisors.com (a letter from a neighbouring key), resolved to 69.162.80.62, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T22:18:30.000Z","first_published":"2026-11-05T22:18:30.000Z","of":"wellsfargoadvisors.com","spelling":"adjacent_key","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"69.162.80.62","flagged_at":"2026-11-05T22:18:30Z"}]}],"url":"https://domainspoof.com/brands/wells-fargo"},{"hostname":"westernhnion.com","first_observed":"2026-11-05T22:18:30.000Z","first_published":"2026-11-05T22:18:30.000Z","brands":[{"id":"western-union","name":"Western Union","url":"https://domainspoof.com/brands/western-union"}],"dns":"resolved","resolved":["77.247.182.242"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of westernunion.com (a letter from a neighbouring key), resolved to 77.247.182.242, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T22:18:30.000Z","first_published":"2026-11-05T22:18:30.000Z","of":"westernunion.com","spelling":"adjacent_key","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"77.247.182.242","flagged_at":"2026-11-05T22:18:30Z"}]}],"url":"https://domainspoof.com/brands/western-union"},{"hostname":"westernnion.com","first_observed":"2026-11-05T22:18:30.000Z","first_published":"2026-11-05T22:18:30.000Z","brands":[{"id":"western-union","name":"Western Union","url":"https://domainspoof.com/brands/western-union"}],"dns":"resolved","resolved":["199.193.114.103"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of westernunion.com (a dropped letter), resolved to 199.193.114.103, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T22:18:30.000Z","first_published":"2026-11-05T22:18:30.000Z","of":"westernunion.com","spelling":"omission","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"199.193.114.103","flagged_at":"2026-11-05T22:18:30Z"}]}],"url":"https://domainspoof.com/brands/western-union"},{"hostname":"westernumion.com","first_observed":"2026-11-05T22:18:30.000Z","first_published":"2026-11-05T22:18:30.000Z","brands":[{"id":"western-union","name":"Western Union","url":"https://domainspoof.com/brands/western-union"}],"dns":"resolved","resolved":["199.193.114.100"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of westernunion.com (a letter from a neighbouring key), resolved to 199.193.114.100, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T22:18:30.000Z","first_published":"2026-11-05T22:18:30.000Z","of":"westernunion.com","spelling":"adjacent_key","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"199.193.114.100","flagged_at":"2026-11-05T22:18:30Z"}]}],"url":"https://domainspoof.com/brands/western-union"},{"hostname":"westernunino.com","first_observed":"2026-11-05T22:18:30.000Z","first_published":"2026-11-05T22:18:30.000Z","brands":[{"id":"western-union","name":"Western Union","url":"https://domainspoof.com/brands/western-union"}],"dns":"resolved","resolved":["216.245.213.76"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of westernunion.com (two letters swapped), resolved to 216.245.213.76, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T22:18:30.000Z","first_published":"2026-11-05T22:18:30.000Z","of":"westernunion.com","spelling":"transposition","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"216.245.213.76","flagged_at":"2026-11-05T22:18:30Z"}]}],"url":"https://domainspoof.com/brands/western-union"},{"hostname":"westerunnion.com","first_observed":"2026-11-05T22:18:30.000Z","first_published":"2026-11-05T22:18:30.000Z","brands":[{"id":"western-union","name":"Western Union","url":"https://domainspoof.com/brands/western-union"}],"dns":"resolved","resolved":["77.247.182.242"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of westernunion.com (two letters swapped), resolved to 77.247.182.242, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T22:18:30.000Z","first_published":"2026-11-05T22:18:30.000Z","of":"westernunion.com","spelling":"transposition","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"77.247.182.242","flagged_at":"2026-11-05T22:18:30Z"}]}],"url":"https://domainspoof.com/brands/western-union"},{"hostname":"wetsernunion.com","first_observed":"2026-11-05T22:18:30.000Z","first_published":"2026-11-05T22:18:30.000Z","brands":[{"id":"western-union","name":"Western Union","url":"https://domainspoof.com/brands/western-union"}],"dns":"resolved","resolved":["216.245.197.44"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of westernunion.com (two letters swapped), resolved to 216.245.197.44, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T22:18:30.000Z","first_published":"2026-11-05T22:18:30.000Z","of":"westernunion.com","spelling":"transposition","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"216.245.197.44","flagged_at":"2026-11-05T22:18:30Z"}]}],"url":"https://domainspoof.com/brands/western-union"},{"hostname":"wevex.vip","first_observed":"2026-11-05T22:18:30.000Z","first_published":"2026-11-05T22:18:30.000Z","brands":[{"id":"webex","name":"Webex","url":"https://domainspoof.com/brands/webex"}],"dns":"resolved","resolved":["137.220.156.174"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of webex.com (a letter from a neighbouring key), resolved to 137.220.156.174 on Spamhaus DROP","first_observed":"2026-11-05T22:18:30.000Z","first_published":"2026-11-05T22:18:30.000Z","of":"webex.com","spelling":"adjacent_key","found_by":"dns_sweep","listings":[{"kind":"address","source":"spamhaus_drop","list_name":"Spamhaus DROP","address":"137.220.156.174","flagged_at":"2026-11-05T22:18:30Z"}]}],"url":"https://domainspoof.com/brands/webex"},{"hostname":"wharsapp.com","first_observed":"2026-11-05T22:18:30.000Z","first_published":"2026-11-05T22:18:30.000Z","brands":[{"id":"whatsapp","name":"WhatsApp","url":"https://domainspoof.com/brands/whatsapp"}],"dns":"resolved","resolved":["45.82.67.143"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of whatsapp.com (a letter from a neighbouring key), resolved to 45.82.67.143, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T22:18:30.000Z","first_published":"2026-11-05T22:18:30.000Z","of":"whatsapp.com","spelling":"adjacent_key","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"45.82.67.143","flagged_at":"2026-11-05T22:18:30Z"}]}],"url":"https://domainspoof.com/brands/whatsapp"},{"hostname":"whaysapp.com","first_observed":"2026-11-05T22:18:30.000Z","first_published":"2026-11-05T22:18:30.000Z","brands":[{"id":"whatsapp","name":"WhatsApp","url":"https://domainspoof.com/brands/whatsapp"}],"dns":"resolved","resolved":["199.193.114.100"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of whatsapp.com (a letter from a neighbouring key), resolved to 199.193.114.100, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T22:18:30.000Z","first_published":"2026-11-05T22:18:30.000Z","of":"whatsapp.com","spelling":"adjacent_key","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"199.193.114.100","flagged_at":"2026-11-05T22:18:30Z"}]}],"url":"https://domainspoof.com/brands/whatsapp"},{"hostname":"wixstatic.co","first_observed":"2026-11-05T22:18:30.000Z","first_published":"2026-11-05T22:18:30.000Z","brands":[{"id":"wix","name":"Wix","url":"https://domainspoof.com/brands/wix"}],"dns":"resolved","resolved":["94.75.193.71"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of wixstatic.com (same name, other ending), resolved to 94.75.193.71, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T22:18:30.000Z","first_published":"2026-11-05T22:18:30.000Z","of":"wixstatic.com","spelling":"tld","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"94.75.193.71","flagged_at":"2026-11-05T22:18:30Z"}]}],"url":"https://domainspoof.com/brands/wix"},{"hostname":"wizzzair.com","first_observed":"2026-11-05T22:18:30.000Z","first_published":"2026-11-05T22:18:30.000Z","brands":[{"id":"wizz-air","name":"Wizz Air","url":"https://domainspoof.com/brands/wizz-air"}],"dns":"resolved","resolved":["78.157.209.172"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of wizzair.com (a doubled letter), resolved to 78.157.209.172, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T22:18:30.000Z","first_published":"2026-11-05T22:18:30.000Z","of":"wizzair.com","spelling":"repetition","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"78.157.209.172","flagged_at":"2026-11-05T22:18:30Z"}]}],"url":"https://domainspoof.com/brands/wizz-air"},{"hostname":"wordpreas.com","first_observed":"2026-11-05T22:18:30.000Z","first_published":"2026-11-05T22:18:30.000Z","brands":[{"id":"wordpress","name":"WordPress","url":"https://domainspoof.com/brands/wordpress"}],"dns":"resolved","resolved":["5.79.75.212"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of wordpress.com (a letter from a neighbouring key), resolved to 5.79.75.212, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T22:18:30.000Z","first_published":"2026-11-05T22:18:30.000Z","of":"wordpress.com","spelling":"adjacent_key","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"5.79.75.212","flagged_at":"2026-11-05T22:18:30Z"}]}],"url":"https://domainspoof.com/brands/wordpress"},{"hostname":"wordpresa.com","first_observed":"2026-11-05T22:18:30.000Z","first_published":"2026-11-05T22:18:30.000Z","brands":[{"id":"wordpress","name":"WordPress","url":"https://domainspoof.com/brands/wordpress"}],"dns":"resolved","resolved":["208.115.249.235"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of wordpress.com (a letter from a neighbouring key), resolved to 208.115.249.235, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T22:18:30.000Z","first_published":"2026-11-05T22:18:30.000Z","of":"wordpress.com","spelling":"adjacent_key","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"208.115.249.235","flagged_at":"2026-11-05T22:18:30Z"}]}],"url":"https://domainspoof.com/brands/wordpress"},{"hostname":"wordprress.com","first_observed":"2026-11-05T22:18:30.000Z","first_published":"2026-11-05T22:18:30.000Z","brands":[{"id":"wordpress","name":"WordPress","url":"https://domainspoof.com/brands/wordpress"}],"dns":"resolved","resolved":["37.48.72.213"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of wordpress.com (a doubled letter), resolved to 37.48.72.213, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T22:18:30.000Z","first_published":"2026-11-05T22:18:30.000Z","of":"wordpress.com","spelling":"repetition","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"37.48.72.213","flagged_at":"2026-11-05T22:18:30Z"}]}],"url":"https://domainspoof.com/brands/wordpress"},{"hostname":"wordprrss.com","first_observed":"2026-11-05T22:18:30.000Z","first_published":"2026-11-05T22:18:30.000Z","brands":[{"id":"wordpress","name":"WordPress","url":"https://domainspoof.com/brands/wordpress"}],"dns":"resolved","resolved":["212.92.104.115"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of wordpress.com (a letter from a neighbouring key), resolved to 212.92.104.115, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T22:18:30.000Z","first_published":"2026-11-05T22:18:30.000Z","of":"wordpress.com","spelling":"adjacent_key","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"212.92.104.115","flagged_at":"2026-11-05T22:18:30Z"}]}],"url":"https://domainspoof.com/brands/wordpress"},{"hostname":"yandexx.com","first_observed":"2026-11-05T22:18:30.000Z","first_published":"2026-11-05T22:18:30.000Z","brands":[{"id":"yandex","name":"Yandex","url":"https://domainspoof.com/brands/yandex"}],"dns":"resolved","resolved":["64.31.3.234"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of yandex.ru (a doubled letter), resolved to 64.31.3.234, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T22:18:30.000Z","first_published":"2026-11-05T22:18:30.000Z","of":"yandex.ru","spelling":"repetition","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"64.31.3.234","flagged_at":"2026-11-05T22:18:30Z"}]}],"url":"https://domainspoof.com/brands/yandex"},{"hostname":"yanndex.com","first_observed":"2026-11-05T22:18:30.000Z","first_published":"2026-11-05T22:18:30.000Z","brands":[{"id":"yandex","name":"Yandex","url":"https://domainspoof.com/brands/yandex"}],"dns":"resolved","resolved":["208.115.249.234"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of yandex.ru (a doubled letter), resolved to 208.115.249.234, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T22:18:30.000Z","first_published":"2026-11-05T22:18:30.000Z","of":"yandex.ru","spelling":"repetition","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"208.115.249.234","flagged_at":"2026-11-05T22:18:30Z"}]}],"url":"https://domainspoof.com/brands/yandex"},{"hostname":"yicketmaster.com","first_observed":"2026-11-05T22:18:30.000Z","first_published":"2026-11-05T22:18:30.000Z","brands":[{"id":"ticketmaster","name":"Ticketmaster","url":"https://domainspoof.com/brands/ticketmaster"}],"dns":"resolved","resolved":["212.7.194.68"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of ticketmaster.com (a letter from a neighbouring key), resolved to 212.7.194.68, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T22:18:30.000Z","first_published":"2026-11-05T22:18:30.000Z","of":"ticketmaster.com","spelling":"adjacent_key","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"212.7.194.68","flagged_at":"2026-11-05T22:18:30Z"}]}],"url":"https://domainspoof.com/brands/ticketmaster"},{"hostname":"ymail-login.com","first_observed":"2026-11-05T22:18:30.000Z","first_published":"2026-11-05T22:18:30.000Z","brands":[{"id":"yahoo","name":"Yahoo","url":"https://domainspoof.com/brands/yahoo"}],"dns":"resolved","resolved":["212.92.104.116"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of ymail.com (the name with an added word), resolved to 212.92.104.116, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T22:18:30.000Z","first_published":"2026-11-05T22:18:30.000Z","of":"ymail.com","spelling":"combo","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"212.92.104.116","flagged_at":"2026-11-05T22:18:30Z"}]}],"url":"https://domainspoof.com/brands/yahoo"},{"hostname":"youtibe.com","first_observed":"2026-11-05T22:18:30.000Z","first_published":"2026-11-05T22:18:30.000Z","brands":[{"id":"youtube","name":"YouTube","url":"https://domainspoof.com/brands/youtube"}],"dns":"resolved","resolved":["69.162.80.54"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of youtube.com (a letter from a neighbouring key), resolved to 69.162.80.54, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T22:18:30.000Z","first_published":"2026-11-05T22:18:30.000Z","of":"youtube.com","spelling":"adjacent_key","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"69.162.80.54","flagged_at":"2026-11-05T22:18:30Z"}]}],"url":"https://domainspoof.com/brands/youtube"},{"hostname":"youube.nl","first_observed":"2026-11-05T22:18:30.000Z","first_published":"2026-11-05T22:18:30.000Z","brands":[{"id":"youtube","name":"YouTube","url":"https://domainspoof.com/brands/youtube"}],"dns":"resolved","resolved":["92.63.172.227","2a05:1500:600:9:1c00:6dff:fe00:1665"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of youtube.com (a dropped letter), resolved to 92.63.172.227, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T22:18:30.000Z","first_published":"2026-11-05T22:18:30.000Z","of":"youtube.com","spelling":"omission","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"92.63.172.227","flagged_at":"2026-11-05T22:18:30Z"}]}],"url":"https://domainspoof.com/brands/youtube"},{"hostname":"yyandex.com","first_observed":"2026-11-05T22:18:30.000Z","first_published":"2026-11-05T22:18:30.000Z","brands":[{"id":"yandex","name":"Yandex","url":"https://domainspoof.com/brands/yandex"}],"dns":"resolved","resolved":["216.245.213.74"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of yandex.ru (a doubled letter), resolved to 216.245.213.74, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T22:18:30.000Z","first_published":"2026-11-05T22:18:30.000Z","of":"yandex.ru","spelling":"repetition","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"216.245.213.74","flagged_at":"2026-11-05T22:18:30Z"}]}],"url":"https://domainspoof.com/brands/yandex"},{"hostname":"araba-paribu.com","first_observed":"2026-10-31T19:06:01.382Z","first_published":"2026-11-05T22:17:08.801Z","brands":[{"id":"paribu","name":"Paribu","url":"https://domainspoof.com/brands/paribu"}],"dns":"resolved","resolved":["64.89.160.49"],"resolved_at":"2026-11-05T22:28:51Z","dns_checked_at":"2026-11-05T22:28:51.000Z","dns_since":"2026-11-05T22:28:51.000Z","findings":[{"id":"fo264lei5lkcjioi4lpip","kind":"spamhaus_drop","summary":"Resolved to 64.89.160.49 on Spamhaus DROP","first_observed":"2026-10-31T19:06:01.382Z","first_published":"2026-11-05T22:17:08.801Z","address":"64.89.160.49","list":"spamhaus_drop","list_name":"Spamhaus DROP"}],"url":"https://domainspoof.com/brands/paribu"},{"hostname":"321zz3277w0cc6205f4a10b1add7371411f.polar-tensor.com","first_observed":"2026-11-05T21:00:52.107Z","first_published":"2026-11-05T22:16:08.941Z","brands":[],"dns":"resolved","resolved":["5.189.134.86","57.128.187.75","57.129.49.179","193.242.211.59"],"resolved_at":"2026-11-06T03:46:49Z","dns_checked_at":"2026-11-05T22:28:51.000Z","dns_since":"2026-11-05T22:28:51.000Z","findings":[{"id":"fxpmsg3z37faptvhuq7jv","kind":"reported_domain","summary":"Under polar-tensor.com, listed by MetaMask","first_observed":"2026-11-05T21:00:52.107Z","first_published":"2026-11-05T22:16:08.941Z","source":"metamask","source_name":"MetaMask","under":"polar-tensor.com"}],"url":"https://domainspoof.com/live?show=all&q=321zz3277w0cc6205f4a10b1add7371411f.polar-tensor.com"},{"hostname":"54321zz3277w0cc6205f4a10b1add7371411f.polar-tensor.com","first_observed":"2026-11-05T21:00:52.107Z","first_published":"2026-11-05T22:16:08.941Z","brands":[],"dns":"resolved","resolved":["5.189.134.86","57.128.187.75","57.129.49.179","193.242.211.59"],"resolved_at":"2026-11-06T03:36:05Z","dns_checked_at":"2026-11-05T22:28:51.000Z","dns_since":"2026-11-05T22:28:51.000Z","findings":[{"id":"frr7vvw33cews76jd2g43","kind":"reported_domain","summary":"Under polar-tensor.com, listed by MetaMask","first_observed":"2026-11-05T21:00:52.107Z","first_published":"2026-11-05T22:16:08.941Z","source":"metamask","source_name":"MetaMask","under":"polar-tensor.com"}],"url":"https://domainspoof.com/live?show=all&q=54321zz3277w0cc6205f4a10b1add7371411f.polar-tensor.com"},{"hostname":"6jk9sx.hdiv8jy.com","first_observed":"2026-11-05T22:05:41.495Z","first_published":"2026-11-05T22:16:08.941Z","brands":[],"dns":"resolved","resolved":["185.53.179.136"],"resolved_at":"2026-11-05T22:06:11Z","dns_checked_at":"2026-11-05T22:28:51.000Z","dns_since":"2026-11-05T22:28:51.000Z","findings":[{"id":"fbls75yzv5vcvn3tjmz7k","kind":"reported_domain","summary":"Under hdiv8jy.com, listed by MetaMask","first_observed":"2026-11-05T22:05:41.495Z","first_published":"2026-11-05T22:16:08.941Z","source":"metamask","source_name":"MetaMask","under":"hdiv8jy.com"}],"url":"https://domainspoof.com/live?show=all&q=6jk9sx.hdiv8jy.com"},{"hostname":"897362-cb.com","first_observed":"2026-11-05T21:31:24.466Z","first_published":"2026-11-05T22:16:08.941Z","brands":[],"dns":"resolved","resolved":["104.21.2.133","172.67.129.63"],"resolved_at":"2026-11-05T21:41:26Z","dns_checked_at":"2026-11-05T22:28:51.000Z","dns_since":"2026-11-05T22:28:51.000Z","findings":[{"id":"f35bfydb5cpoujz5dmm2s","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T21:31:24.466Z","first_published":"2026-11-05T22:16:08.941Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=897362-cb.com"},{"hostname":"aciduporta.store","first_observed":"2026-11-05T21:19:57.964Z","first_published":"2026-11-05T22:16:08.941Z","brands":[],"dns":"resolved","resolved":["104.21.2.141","172.67.129.74","2606:4700:3033::ac43:814a","2606:4700:3034::6815:28d"],"resolved_at":"2026-11-05T21:20:13Z","dns_checked_at":"2026-11-05T22:28:51.000Z","dns_since":"2026-11-05T22:28:51.000Z","findings":[{"id":"fe4cdvpjklisplpgkv5ux","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T21:19:57.964Z","first_published":"2026-11-05T22:16:08.941Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=aciduporta.store"},{"hostname":"action-yahoo.com","first_observed":"2026-11-05T21:06:01.385Z","first_published":"2026-11-05T22:16:08.941Z","brands":[],"dns":"resolved","resolved":["104.21.87.148","172.67.169.232"],"resolved_at":"2026-11-06T00:15:46Z","dns_checked_at":"2026-11-05T22:28:51.000Z","dns_since":"2026-11-05T22:28:51.000Z","findings":[{"id":"f5wafdgkvtfavcnjppcr4","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T21:06:01.385Z","first_published":"2026-11-05T22:16:08.941Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=action-yahoo.com"},{"hostname":"agilidapp.com","first_observed":"2026-11-05T21:21:16.826Z","first_published":"2026-11-05T22:16:08.941Z","brands":[],"dns":"resolved","resolved":["192.250.227.186"],"resolved_at":"2026-11-05T21:21:50Z","dns_checked_at":"2026-11-05T22:28:51.000Z","dns_since":"2026-11-05T22:28:51.000Z","findings":[{"id":"fzmetjq27gl32kjwzf64f","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T21:21:16.826Z","first_published":"2026-11-05T22:16:08.941Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=agilidapp.com"},{"hostname":"airdrops-xrptundra.com","first_observed":"2026-11-05T21:31:24.466Z","first_published":"2026-11-05T22:16:08.941Z","brands":[],"dns":"resolved","resolved":["104.21.54.162","172.67.140.91"],"resolved_at":"2026-11-05T21:41:56Z","dns_checked_at":"2026-11-05T22:28:51.000Z","dns_since":"2026-11-05T22:28:51.000Z","findings":[{"id":"f66easm6ltfktsc622nfk","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T21:31:24.466Z","first_published":"2026-11-05T22:16:08.941Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/airdrops-xrptundra.com/"}],"url":"https://domainspoof.com/live?show=all&q=airdrops-xrptundra.com"},{"hostname":"aiyaphorm-de.live","first_observed":"2026-11-05T22:01:08.886Z","first_published":"2026-11-05T22:16:08.941Z","brands":[],"dns":"resolved","resolved":["104.21.48.31","172.67.176.108"],"resolved_at":"2026-11-05T22:01:40Z","dns_checked_at":"2026-11-05T22:28:51.000Z","dns_since":"2026-11-05T22:28:51.000Z","findings":[{"id":"fbftho4e5ggfi6cxqfibq","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T22:01:08.886Z","first_published":"2026-11-05T22:16:08.941Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=aiyaphorm-de.live"},{"hostname":"allocation-laptoptoken.com","first_observed":"2026-11-05T21:31:24.466Z","first_published":"2026-11-05T22:16:08.941Z","brands":[],"dns":"resolved","resolved":["104.21.13.19","172.67.167.232"],"resolved_at":"2026-11-05T21:41:57Z","dns_checked_at":"2026-11-05T22:28:51.000Z","dns_since":"2026-11-05T22:28:51.000Z","findings":[{"id":"fwgmlgvir3tzgbf6lwb3u","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T21:31:24.466Z","first_published":"2026-11-05T22:16:08.941Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=allocation-laptoptoken.com"},{"hostname":"apeaap.com.br","first_observed":"2026-11-05T22:01:08.886Z","first_published":"2026-11-05T22:16:08.941Z","brands":[],"dns":"resolved","resolved":["177.104.174.36"],"resolved_at":"2026-11-06T00:21:22Z","dns_checked_at":"2026-11-05T22:28:51.000Z","dns_since":"2026-11-05T22:28:51.000Z","findings":[{"id":"fyupvywft7rabofiy6rq5","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T22:01:08.886Z","first_published":"2026-11-05T22:16:08.941Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/apeaap.com.br/"}],"url":"https://domainspoof.com/live?show=all&q=apeaap.com.br"},{"hostname":"api-doc.alpha-aml.com","first_observed":"2026-11-05T21:46:19.674Z","first_published":"2026-11-05T22:16:08.941Z","brands":[],"dns":"resolved","resolved":["216.150.1.129","216.150.16.129"],"resolved_at":"2026-11-05T21:46:41Z","dns_checked_at":"2026-11-05T22:28:51.000Z","dns_since":"2026-11-05T22:28:51.000Z","findings":[{"id":"faan6vojnx7ngo625i4dz","kind":"reported_domain","summary":"Under alpha-aml.com, reported by PhishDestroy","first_observed":"2026-11-05T21:46:19.674Z","first_published":"2026-11-05T22:16:08.941Z","source":"phishdestroy","source_name":"PhishDestroy","under":"alpha-aml.com","source_url":"https://phishdestroy.io/domain/alpha-aml.com/"}],"url":"https://domainspoof.com/live?show=all&q=api-doc.alpha-aml.com"},{"hostname":"api.hemmenwellness.com","first_observed":"2026-11-05T21:21:16.826Z","first_published":"2026-11-05T22:16:08.941Z","brands":[],"dns":"resolved","resolved":["139.196.84.235"],"resolved_at":"2026-11-05T21:21:50Z","dns_checked_at":"2026-11-05T22:28:51.000Z","dns_since":"2026-11-05T22:28:51.000Z","findings":[{"id":"f4waoedo23ua7fkvd3c2y","kind":"reported_domain","summary":"Under hemmenwellness.com, reported by PhishDestroy","first_observed":"2026-11-05T21:21:16.826Z","first_published":"2026-11-05T22:16:08.941Z","source":"phishdestroy","source_name":"PhishDestroy","under":"hemmenwellness.com","source_url":"https://phishdestroy.io/domain/hemmenwellness.com/"}],"url":"https://domainspoof.com/live?show=all&q=api.hemmenwellness.com"},{"hostname":"api.spot-prolia-ai-tech-com.financecryptoworld.com","first_observed":"2026-11-05T21:26:20.288Z","first_published":"2026-11-05T22:16:08.941Z","brands":[],"dns":"resolved","resolved":["104.21.10.130","172.67.131.121"],"resolved_at":"2026-11-05T21:33:21Z","dns_checked_at":"2026-11-05T22:28:51.000Z","dns_since":"2026-11-05T22:28:51.000Z","findings":[{"id":"fkzgdjbevswn56yedwhut","kind":"reported_domain","summary":"Under financecryptoworld.com, listed by CERT Polska","first_observed":"2026-11-05T21:26:20.288Z","first_published":"2026-11-05T22:16:08.941Z","source":"cert_polska","source_name":"CERT Polska","under":"financecryptoworld.com"}],"url":"https://domainspoof.com/live?show=all&q=api.spot-prolia-ai-tech-com.financecryptoworld.com"},{"hostname":"autoconfig.agilidapp.com","first_observed":"2026-11-05T21:21:16.826Z","first_published":"2026-11-05T22:16:08.941Z","brands":[],"dns":"resolved","resolved":["192.250.227.186"],"resolved_at":"2026-11-05T21:21:51Z","dns_checked_at":"2026-11-05T22:28:51.000Z","dns_since":"2026-11-05T22:28:51.000Z","findings":[{"id":"fgfjm2vkf5ehseya7nnue","kind":"reported_domain","summary":"Under agilidapp.com, listed by CERT Polska","first_observed":"2026-11-05T21:21:16.826Z","first_published":"2026-11-05T22:16:08.941Z","source":"cert_polska","source_name":"CERT Polska","under":"agilidapp.com"}],"url":"https://domainspoof.com/live?show=all&q=autoconfig.agilidapp.com"},{"hostname":"autodiscover.agilidapp.com","first_observed":"2026-11-05T21:21:16.826Z","first_published":"2026-11-05T22:16:08.941Z","brands":[],"dns":"resolved","resolved":["192.250.227.186"],"resolved_at":"2026-11-05T21:21:51Z","dns_checked_at":"2026-11-05T22:28:51.000Z","dns_since":"2026-11-05T22:28:51.000Z","findings":[{"id":"f4ogyeh7dzsffqv6hrq6a","kind":"reported_domain","summary":"Under agilidapp.com, listed by CERT Polska","first_observed":"2026-11-05T21:21:16.826Z","first_published":"2026-11-05T22:16:08.941Z","source":"cert_polska","source_name":"CERT Polska","under":"agilidapp.com"}],"url":"https://domainspoof.com/live?show=all&q=autodiscover.agilidapp.com"},{"hostname":"avexprofit-de.live","first_observed":"2026-11-05T21:15:32.020Z","first_published":"2026-11-05T22:16:08.941Z","brands":[],"dns":"resolved","resolved":["104.21.76.60","172.67.190.82"],"resolved_at":"2026-11-05T21:23:00Z","dns_checked_at":"2026-11-05T22:28:51.000Z","dns_since":"2026-11-05T22:28:51.000Z","findings":[{"id":"fddmjlpqrly3f7h6wbhhr","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T21:15:32.020Z","first_published":"2026-11-05T22:16:08.941Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=avexprofit-de.live"},{"hostname":"badge-firelight.finance","first_observed":"2026-11-05T21:36:28.021Z","first_published":"2026-11-05T22:16:08.941Z","brands":[],"dns":"resolved","resolved":["104.21.77.231","172.67.212.145"],"resolved_at":"2026-11-06T02:00:41Z","dns_checked_at":"2026-11-05T22:28:51.000Z","dns_since":"2026-11-05T22:28:51.000Z","findings":[{"id":"fbkd4c3y2ldyu4q7s3vqy","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T21:36:28.021Z","first_published":"2026-11-05T22:16:08.941Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=badge-firelight.finance"},{"hostname":"bastion.socialvisor.ru","first_observed":"2026-11-05T21:46:19.674Z","first_published":"2026-11-05T22:16:08.941Z","brands":[],"dns":"resolved","resolved":["91.215.41.91"],"resolved_at":"2026-11-05T21:53:50Z","dns_checked_at":"2026-11-05T22:28:51.000Z","dns_since":"2026-11-05T22:28:51.000Z","findings":[{"id":"fh62m5ioh3stzasygiryk","kind":"reported_domain","summary":"Under socialvisor.ru, reported by PhishDestroy","first_observed":"2026-11-05T21:46:19.674Z","first_published":"2026-11-05T22:16:08.941Z","source":"phishdestroy","source_name":"PhishDestroy","under":"socialvisor.ru","source_url":"https://phishdestroy.io/domain/socialvisor.ru/"}],"url":"https://domainspoof.com/live?show=all&q=bastion.socialvisor.ru"},{"hostname":"bc.official-platform.com","first_observed":"2026-11-05T21:26:20.288Z","first_published":"2026-11-05T22:16:08.941Z","brands":[],"dns":"resolved","resolved":["104.21.35.144","172.67.175.188"],"resolved_at":"2026-11-05T21:33:44Z","dns_checked_at":"2026-11-05T22:28:51.000Z","dns_since":"2026-11-05T22:28:51.000Z","findings":[{"id":"fahk5zx3ypj6bibbfosfg","kind":"reported_domain","summary":"Under official-platform.com, listed by CERT Polska","first_observed":"2026-11-05T21:26:20.288Z","first_published":"2026-11-05T22:16:08.941Z","source":"cert_polska","source_name":"CERT Polska","under":"official-platform.com"}],"url":"https://domainspoof.com/live?show=all&q=bc.official-platform.com"},{"hostname":"bdag.club","first_observed":"2026-11-05T22:01:08.886Z","first_published":"2026-11-05T22:16:08.941Z","brands":[],"dns":"resolved","resolved":["104.21.57.57","172.67.159.145"],"resolved_at":"2026-11-05T22:09:26Z","dns_checked_at":"2026-11-05T22:28:51.000Z","dns_since":"2026-11-05T22:28:51.000Z","findings":[{"id":"foc3no2rwrb7qqqxpjvww","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T22:01:08.886Z","first_published":"2026-11-05T22:16:08.941Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/bdag.club/"}],"url":"https://domainspoof.com/live?show=all&q=bdag.club"},{"hostname":"betxner.com","first_observed":"2026-11-05T21:46:19.674Z","first_published":"2026-11-05T22:16:08.941Z","brands":[],"dns":"resolved","resolved":["104.21.90.197","172.67.160.219"],"resolved_at":"2026-11-05T21:53:50Z","dns_checked_at":"2026-11-05T22:28:51.000Z","dns_since":"2026-11-05T22:28:51.000Z","findings":[{"id":"fyf5nt4gfruklawcaqrv6","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T21:46:19.674Z","first_published":"2026-11-05T22:16:08.941Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=betxner.com"},{"hostname":"biblioteksbladet.stage.io-ext.se","first_observed":"2026-11-05T22:01:08.886Z","first_published":"2026-11-05T22:16:08.941Z","brands":[],"dns":"resolved","resolved":["188.208.37.75"],"resolved_at":"2026-11-05T22:09:26Z","dns_checked_at":"2026-11-05T22:28:51.000Z","dns_since":"2026-11-05T22:28:51.000Z","findings":[{"id":"feppk5u4r3cnlmu3wr63e","kind":"reported_domain","summary":"Under io-ext.se, listed by MetaMask","first_observed":"2026-11-05T22:01:08.886Z","first_published":"2026-11-05T22:16:08.941Z","source":"metamask","source_name":"MetaMask","under":"io-ext.se"}],"url":"https://domainspoof.com/live?show=all&q=biblioteksbladet.stage.io-ext.se"},{"hostname":"biitcoinvn.io","first_observed":"2026-11-05T21:26:20.288Z","first_published":"2026-11-05T22:16:08.941Z","brands":[],"dns":"resolved","resolved":["104.21.60.16","172.67.187.181"],"resolved_at":"2026-11-05T21:33:45Z","dns_checked_at":"2026-11-05T22:28:51.000Z","dns_since":"2026-11-05T22:28:51.000Z","findings":[{"id":"fybpzd4bkrbsutt2qp3vy","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T21:26:20.288Z","first_published":"2026-11-05T22:16:08.941Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/biitcoinvn.io/"}],"url":"https://domainspoof.com/live?show=all&q=biitcoinvn.io"},{"hostname":"binancetm.com","first_observed":"2026-11-05T21:26:20.288Z","first_published":"2026-11-05T22:16:08.941Z","brands":[],"dns":"no_address","resolved":[],"resolved_at":"2026-11-05T21:33:45Z","dns_checked_at":"2026-11-06T14:46:24.000Z","findings":[{"id":"fjb4w6sgpauznurixw5uw","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T21:26:20.288Z","first_published":"2026-11-05T22:16:08.941Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=binancetm.com"},{"hostname":"birkekapithorn-de.live","first_observed":"2026-11-05T22:01:08.886Z","first_published":"2026-11-05T22:16:08.941Z","brands":[],"dns":"resolved","resolved":["104.21.94.20","172.67.218.101"],"resolved_at":"2026-11-05T22:09:26Z","dns_checked_at":"2026-11-05T22:28:51.000Z","dns_since":"2026-11-05T22:28:51.000Z","findings":[{"id":"fp32co5ohtiwcs3uezvxz","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T22:01:08.886Z","first_published":"2026-11-05T22:16:08.941Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=birkekapithorn-de.live"},{"hostname":"bnhucorz.mjpwvktg.isrfaxwq.vicwpbqz.nirfhjym.uatmfwcq.gatewaylearning.ezgateway.net","first_observed":"2026-11-05T21:26:20.288Z","first_published":"2026-11-05T22:16:08.941Z","brands":[],"dns":"resolved","resolved":["15.204.116.29"],"resolved_at":"2026-11-05T21:33:45Z","dns_checked_at":"2026-11-05T22:28:51.000Z","dns_since":"2026-11-05T22:28:51.000Z","findings":[{"id":"fq55udf3a2ktwwx3brcko","kind":"reported_domain","summary":"Under ezgateway.net, listed by USOM","first_observed":"2026-11-05T21:26:20.288Z","first_published":"2026-11-05T22:16:08.941Z","source":"usom","source_name":"USOM","under":"ezgateway.net"}],"url":"https://domainspoof.com/live?show=all&q=bnhucorz.mjpwvktg.isrfaxwq.vicwpbqz.nirfhjym.uatmfwcq.gatewaylearning.ezgateway.net"},{"hostname":"boost.acctplugins.com","first_observed":"2026-11-05T22:01:08.886Z","first_published":"2026-11-05T22:16:08.941Z","brands":[],"dns":"resolved","resolved":["156.232.88.10"],"resolved_at":"2026-11-05T22:09:26Z","dns_checked_at":"2026-11-05T22:28:51.000Z","dns_since":"2026-11-05T22:28:51.000Z","findings":[{"id":"faerpa3vv5o7t6soegmwj","kind":"reported_domain","summary":"Under acctplugins.com, reported by PhishDestroy","first_observed":"2026-11-05T22:01:08.886Z","first_published":"2026-11-05T22:16:08.941Z","source":"phishdestroy","source_name":"PhishDestroy","under":"acctplugins.com","source_url":"https://phishdestroy.io/domain/acctplugins.com/"}],"url":"https://domainspoof.com/live?show=all&q=boost.acctplugins.com"},{"hostname":"bourcapitve-fr.live","first_observed":"2026-11-05T22:05:41.495Z","first_published":"2026-11-05T22:16:08.941Z","brands":[],"dns":"resolved","resolved":["104.21.5.193","172.67.154.174"],"resolved_at":"2026-11-05T22:11:57Z","dns_checked_at":"2026-11-05T22:28:51.000Z","dns_since":"2026-11-05T22:28:51.000Z","findings":[{"id":"ffhnx63p2xoebq7ebo26t","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T22:05:41.495Z","first_published":"2026-11-05T22:16:08.941Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=bourcapitve-fr.live"},{"hostname":"brulvaxenv.live","first_observed":"2026-11-05T21:00:52.107Z","first_published":"2026-11-05T22:16:08.941Z","brands":[],"dns":"resolved","resolved":["104.21.21.72","172.67.197.2"],"resolved_at":"2026-11-05T21:08:28Z","dns_checked_at":"2026-11-05T22:28:51.000Z","dns_since":"2026-11-05T22:28:51.000Z","findings":[{"id":"fnanas4scflyuezjplcu7","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T21:00:52.107Z","first_published":"2026-11-05T22:16:08.941Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=brulvaxenv.live"},{"hostname":"builderdeckexpo.com","first_observed":"2026-11-05T21:06:01.385Z","first_published":"2026-11-05T22:16:08.941Z","brands":[],"dns":"resolved","resolved":["92.205.172.242"],"resolved_at":"2026-11-05T21:08:15Z","dns_checked_at":"2026-11-05T22:28:51.000Z","dns_since":"2026-11-05T22:28:51.000Z","findings":[{"id":"fncstzxhepjvcu7k2uyfy","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T21:06:01.385Z","first_published":"2026-11-05T22:16:08.941Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/builderdeckexpo.com/"}],"url":"https://domainspoof.com/live?show=all&q=builderdeckexpo.com"},{"hostname":"bundotrep-de.live","first_observed":"2026-11-05T21:21:16.826Z","first_published":"2026-11-05T22:16:08.941Z","brands":[],"dns":"resolved","resolved":["104.21.20.82","172.67.191.253"],"resolved_at":"2026-11-05T21:26:10Z","dns_checked_at":"2026-11-05T22:28:51.000Z","dns_since":"2026-11-05T22:28:51.000Z","findings":[{"id":"ffihjzi6cyhvdhvakpxl2","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T21:21:16.826Z","first_published":"2026-11-05T22:16:08.941Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=bundotrep-de.live"},{"hostname":"calm-peace.com","first_observed":"2026-11-05T21:21:16.826Z","first_published":"2026-11-05T22:16:08.941Z","brands":[],"dns":"no_address","resolved":[],"resolved_at":"2026-11-05T21:26:11Z","dns_checked_at":"2026-11-06T14:46:24.000Z","findings":[{"id":"fce35prov2h2qvpogvckz","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T21:21:16.826Z","first_published":"2026-11-05T22:16:08.941Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=calm-peace.com"},{"hostname":"capgiraffewaste.com","first_observed":"2026-11-05T21:56:40.477Z","first_published":"2026-11-05T22:16:08.941Z","brands":[],"dns":"resolved","resolved":["104.21.75.107","172.67.221.89"],"resolved_at":"2026-11-05T21:57:12Z","dns_checked_at":"2026-11-05T22:28:51.000Z","dns_since":"2026-11-05T22:28:51.000Z","findings":[{"id":"fkwecthctnkj72gkrib2l","kind":"reported_domain","summary":"Listed by USOM","first_observed":"2026-11-05T21:56:40.477Z","first_published":"2026-11-05T22:16:08.941Z","source":"usom","source_name":"USOM"}],"url":"https://domainspoof.com/live?show=all&q=capgiraffewaste.com"},{"hostname":"captcha.slon17-cc.com","first_observed":"2026-11-05T21:11:00.934Z","first_published":"2026-11-05T22:16:08.941Z","brands":[],"dns":"resolved","resolved":["153.52.111.64"],"resolved_at":"2026-11-05T21:11:39Z","dns_checked_at":"2026-11-05T22:28:51.000Z","dns_since":"2026-11-05T22:28:51.000Z","findings":[{"id":"f4iyo2rfnaxflqzjosmec","kind":"reported_domain","summary":"Under slon17-cc.com, reported by PhishDestroy","first_observed":"2026-11-05T21:11:00.934Z","first_published":"2026-11-05T22:16:08.941Z","source":"phishdestroy","source_name":"PhishDestroy","under":"slon17-cc.com","source_url":"https://phishdestroy.io/domain/slon17-cc.com/"}],"url":"https://domainspoof.com/live?show=all&q=captcha.slon17-cc.com"},{"hostname":"cardinghub.cm","first_observed":"2026-11-05T21:06:01.385Z","first_published":"2026-11-05T22:16:08.941Z","brands":[],"dns":"resolved","resolved":["104.21.26.84","172.67.135.184"],"resolved_at":"2026-11-05T21:08:15Z","dns_checked_at":"2026-11-05T22:28:51.000Z","dns_since":"2026-11-05T22:28:51.000Z","findings":[{"id":"fj3b5e3yf2lxquj5z7pao","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T21:06:01.385Z","first_published":"2026-11-05T22:16:08.941Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/cardinghub.cm/"}],"url":"https://domainspoof.com/live?show=all&q=cardinghub.cm"},{"hostname":"chalet-lumiere-alpine.com","first_observed":"2026-11-05T21:26:20.288Z","first_published":"2026-11-05T22:16:08.941Z","brands":[],"dns":"resolved","resolved":["35.204.150.5"],"resolved_at":"2026-11-05T21:34:03Z","dns_checked_at":"2026-11-05T22:28:51.000Z","dns_since":"2026-11-05T22:28:51.000Z","findings":[{"id":"f2eetleeoiaxvuoytyysi","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T21:26:20.288Z","first_published":"2026-11-05T22:16:08.941Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=chalet-lumiere-alpine.com"},{"hostname":"chat.devnet-v2.lightchain.ai","first_observed":"2026-11-05T21:51:39.899Z","first_published":"2026-11-05T22:16:08.941Z","brands":[],"dns":"resolved","resolved":["216.150.1.65","216.150.16.65"],"resolved_at":"2026-11-05T22:01:43Z","dns_checked_at":"2026-11-05T22:28:51.000Z","dns_since":"2026-11-05T22:28:51.000Z","findings":[{"id":"fttdff3xxwd4d3trznblj","kind":"reported_domain","summary":"Under lightchain.ai, reported by PhishDestroy","first_observed":"2026-11-05T21:51:39.899Z","first_published":"2026-11-05T22:16:08.941Z","source":"phishdestroy","source_name":"PhishDestroy","under":"lightchain.ai","source_url":"https://phishdestroy.io/domain/lightchain.ai/"}],"url":"https://domainspoof.com/live?show=all&q=chat.devnet-v2.lightchain.ai"},{"hostname":"checkmsftlogs.com","first_observed":"2026-11-05T21:19:57.964Z","first_published":"2026-11-05T22:16:08.941Z","brands":[],"dns":"resolved","resolved":["104.21.68.210","172.67.198.168","2606:4700:3031::6815:44d2","2606:4700:3033::ac43:c6a8"],"resolved_at":"2026-11-05T21:20:13Z","dns_checked_at":"2026-11-05T22:28:51.000Z","dns_since":"2026-11-05T22:28:51.000Z","findings":[{"id":"finxm3t46ivryy6pp5xw7","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T21:19:57.964Z","first_published":"2026-11-05T22:16:08.941Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=checkmsftlogs.com"},{"hostname":"claimsolanex-ai.site","first_observed":"2026-11-05T21:56:40.477Z","first_published":"2026-11-05T22:16:08.941Z","brands":[],"dns":"resolved","resolved":["104.21.71.91","172.67.170.78"],"resolved_at":"2026-11-05T21:57:12Z","dns_checked_at":"2026-11-05T22:28:51.000Z","dns_since":"2026-11-05T22:28:51.000Z","findings":[{"id":"fel6kvnv23nqes2zs7qke","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T21:56:40.477Z","first_published":"2026-11-05T22:16:08.941Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/claimsolanex-ai.site/"}],"url":"https://domainspoof.com/live?show=all&q=claimsolanex-ai.site"},{"hostname":"codeklm.com","first_observed":"2026-11-05T21:11:00.934Z","first_published":"2026-11-05T22:16:08.941Z","brands":[],"dns":"resolved","resolved":["103.224.182.250"],"resolved_at":"2026-11-05T21:11:40Z","dns_checked_at":"2026-11-05T22:28:51.000Z","dns_since":"2026-11-05T22:28:51.000Z","findings":[{"id":"f2i7adgobs2z3lxl5k7ks","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T21:11:00.934Z","first_published":"2026-11-05T22:16:08.941Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=codeklm.com"},{"hostname":"coinbase-forestdd.net","first_observed":"2026-11-05T22:05:41.495Z","first_published":"2026-11-05T22:16:08.941Z","brands":[{"id":"coinbase","name":"Coinbase","url":"https://domainspoof.com/brands/coinbase"}],"dns":"no_address","resolved":[],"resolved_at":"2026-11-06T04:12:57Z","dns_checked_at":"2026-11-05T22:28:51.000Z","findings":[{"id":"fk2wjhsefzvfobnzudw7i","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T22:05:41.495Z","first_published":"2026-11-05T22:16:08.941Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/brands/coinbase"},{"hostname":"cool84.com","first_observed":"2026-11-05T21:11:00.934Z","first_published":"2026-11-05T22:16:08.941Z","brands":[],"dns":"resolved","resolved":["162.4.84.247"],"resolved_at":"2026-11-05T21:11:43Z","dns_checked_at":"2026-11-05T22:28:51.000Z","dns_since":"2026-11-05T22:28:51.000Z","findings":[{"id":"fmsyzmpntopyqebdvmxh3","kind":"reported_domain","summary":"Listed by NPA 165 (finance and insurance)","first_observed":"2026-11-05T21:11:00.934Z","first_published":"2026-11-05T22:16:08.941Z","source":"npa","source_name":"NPA 165","claim":{"category":"finance and insurance"}}],"url":"https://domainspoof.com/live?show=all&q=cool84.com"},{"hostname":"coopersfsl.com","first_observed":"2026-11-05T21:00:52.107Z","first_published":"2026-11-05T22:16:08.941Z","brands":[{"id":"saison-card","name":"Saison Card","url":"https://domainspoof.com/brands/saison-card"}],"dns":"resolved","resolved":["104.21.13.52","172.67.154.199"],"resolved_at":"2026-11-06T04:32:09Z","dns_checked_at":"2026-11-05T22:28:51.000Z","dns_since":"2026-11-05T22:28:51.000Z","findings":[{"id":"f56hgs2pmxkqo7mdj65to","kind":"reported_domain","summary":"Listed by JPCERT/CC as imitating SAISON CARD","first_observed":"2026-11-05T21:00:52.107Z","first_published":"2026-11-05T22:16:08.941Z","source":"jpcert","source_name":"JPCERT/CC","claim":{"brand":"SAISON CARD"}}],"url":"https://domainspoof.com/brands/saison-card"},{"hostname":"cpanel.agilidapp.com","first_observed":"2026-11-05T21:21:16.826Z","first_published":"2026-11-05T22:16:08.941Z","brands":[],"dns":"resolved","resolved":["192.250.227.186"],"resolved_at":"2026-11-05T21:26:31Z","dns_checked_at":"2026-11-05T22:28:51.000Z","dns_since":"2026-11-05T22:28:51.000Z","findings":[{"id":"fwtd5ucujax5agsuyjp4w","kind":"reported_domain","summary":"Under agilidapp.com, listed by CERT Polska","first_observed":"2026-11-05T21:21:16.826Z","first_published":"2026-11-05T22:16:08.941Z","source":"cert_polska","source_name":"CERT Polska","under":"agilidapp.com"}],"url":"https://domainspoof.com/live?show=all&q=cpanel.agilidapp.com"},{"hostname":"cpc.hemmenwellness.com","first_observed":"2026-11-05T21:21:16.826Z","first_published":"2026-11-05T22:16:08.941Z","brands":[],"dns":"resolved","resolved":["139.196.84.235"],"resolved_at":"2026-11-05T21:26:31Z","dns_checked_at":"2026-11-05T22:28:51.000Z","dns_since":"2026-11-05T22:28:51.000Z","findings":[{"id":"flc42djmq2ixmxfdfg6h2","kind":"reported_domain","summary":"Under hemmenwellness.com, reported by PhishDestroy","first_observed":"2026-11-05T21:21:16.826Z","first_published":"2026-11-05T22:16:08.941Z","source":"phishdestroy","source_name":"PhishDestroy","under":"hemmenwellness.com","source_url":"https://phishdestroy.io/domain/hemmenwellness.com/"}],"url":"https://domainspoof.com/live?show=all&q=cpc.hemmenwellness.com"},{"hostname":"cpcalendars.agilidapp.com","first_observed":"2026-11-05T21:21:16.826Z","first_published":"2026-11-05T22:16:08.941Z","brands":[],"dns":"resolved","resolved":["192.250.227.186"],"resolved_at":"2026-11-05T21:26:31Z","dns_checked_at":"2026-11-05T22:28:51.000Z","dns_since":"2026-11-05T22:28:51.000Z","findings":[{"id":"fwxya5w4omswe3ivfzqlp","kind":"reported_domain","summary":"Under agilidapp.com, listed by CERT Polska","first_observed":"2026-11-05T21:21:16.826Z","first_published":"2026-11-05T22:16:08.941Z","source":"cert_polska","source_name":"CERT Polska","under":"agilidapp.com"}],"url":"https://domainspoof.com/live?show=all&q=cpcalendars.agilidapp.com"},{"hostname":"cpcontacts.agilidapp.com","first_observed":"2026-11-05T21:21:16.826Z","first_published":"2026-11-05T22:16:08.941Z","brands":[],"dns":"resolved","resolved":["192.250.227.186"],"resolved_at":"2026-11-05T21:26:31Z","dns_checked_at":"2026-11-05T22:28:51.000Z","dns_since":"2026-11-05T22:28:51.000Z","findings":[{"id":"fjraq7r3vb2oxqxdro3on","kind":"reported_domain","summary":"Under agilidapp.com, listed by CERT Polska","first_observed":"2026-11-05T21:21:16.826Z","first_published":"2026-11-05T22:16:08.941Z","source":"cert_polska","source_name":"CERT Polska","under":"agilidapp.com"}],"url":"https://domainspoof.com/live?show=all&q=cpcontacts.agilidapp.com"},{"hostname":"creaenaltura.com","first_observed":"2026-11-05T22:05:41.495Z","first_published":"2026-11-05T22:16:08.941Z","brands":[],"dns":"resolved","resolved":["104.21.66.62","172.67.201.134"],"resolved_at":"2026-11-05T22:06:15Z","dns_checked_at":"2026-11-05T22:28:51.000Z","dns_since":"2026-11-05T22:28:51.000Z","findings":[{"id":"fj3jnsjm6cavnyjoyzcxt","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T22:05:41.495Z","first_published":"2026-11-05T22:16:08.941Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=creaenaltura.com"},{"hostname":"dapp-contract.com","first_observed":"2026-11-05T21:15:32.020Z","first_published":"2026-11-05T22:16:08.941Z","brands":[],"dns":"resolved","resolved":["104.21.69.166","172.67.210.140"],"resolved_at":"2026-11-05T21:16:17Z","dns_checked_at":"2026-11-05T22:28:51.000Z","dns_since":"2026-11-05T22:28:51.000Z","findings":[{"id":"fpdqhfpc44r7uasuj4ubp","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T21:15:32.020Z","first_published":"2026-11-05T22:16:08.941Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=dapp-contract.com"},{"hostname":"data-finanzas-cdmxi.live","first_observed":"2026-11-05T21:06:01.385Z","first_published":"2026-11-05T22:16:08.941Z","brands":[],"dns":"resolved","resolved":["104.21.93.82","172.67.207.155"],"resolved_at":"2026-11-05T21:08:18Z","dns_checked_at":"2026-11-05T22:28:51.000Z","dns_since":"2026-11-05T22:28:51.000Z","findings":[{"id":"f5ukedzzrukrlm3tzfyhv","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T21:06:01.385Z","first_published":"2026-11-05T22:16:08.941Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/data-finanzas-cdmxi.live/"}],"url":"https://domainspoof.com/live?show=all&q=data-finanzas-cdmxi.live"},{"hostname":"degenxcity.com","first_observed":"2026-11-05T21:41:00.835Z","first_published":"2026-11-05T22:16:08.941Z","brands":[],"dns":"resolved","resolved":["104.21.79.52","172.67.142.97"],"resolved_at":"2026-11-06T03:12:21Z","dns_checked_at":"2026-11-05T22:28:51.000Z","dns_since":"2026-11-05T22:28:51.000Z","findings":[{"id":"fcyez3ft6olbcxmmclaoa","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T21:41:00.835Z","first_published":"2026-11-05T22:16:08.941Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/degenxcity.com/"}],"url":"https://domainspoof.com/live?show=all&q=degenxcity.com"},{"hostname":"dev.api.hemmenwellness.com","first_observed":"2026-11-05T21:21:16.826Z","first_published":"2026-11-05T22:16:08.941Z","brands":[],"dns":"resolved","resolved":["139.196.84.235"],"resolved_at":"2026-11-05T21:26:32Z","dns_checked_at":"2026-11-05T22:28:51.000Z","dns_since":"2026-11-05T22:28:51.000Z","findings":[{"id":"fxzzlmwfwztychmufvqy4","kind":"reported_domain","summary":"Under hemmenwellness.com, reported by PhishDestroy","first_observed":"2026-11-05T21:21:16.826Z","first_published":"2026-11-05T22:16:08.941Z","source":"phishdestroy","source_name":"PhishDestroy","under":"hemmenwellness.com","source_url":"https://phishdestroy.io/domain/hemmenwellness.com/"}],"url":"https://domainspoof.com/live?show=all&q=dev.api.hemmenwellness.com"},{"hostname":"dev.cpc.hemmenwellness.com","first_observed":"2026-11-05T21:21:16.826Z","first_published":"2026-11-05T22:16:08.941Z","brands":[],"dns":"resolved","resolved":["139.196.84.235"],"resolved_at":"2026-11-05T21:26:32Z","dns_checked_at":"2026-11-05T22:28:51.000Z","dns_since":"2026-11-05T22:28:51.000Z","findings":[{"id":"fahwp2qpzv3csxlzj2azo","kind":"reported_domain","summary":"Under hemmenwellness.com, reported by PhishDestroy","first_observed":"2026-11-05T21:21:16.826Z","first_published":"2026-11-05T22:16:08.941Z","source":"phishdestroy","source_name":"PhishDestroy","under":"hemmenwellness.com","source_url":"https://phishdestroy.io/domain/hemmenwellness.com/"}],"url":"https://domainspoof.com/live?show=all&q=dev.cpc.hemmenwellness.com"},{"hostname":"dexscreenerrank.com","first_observed":"2026-11-05T21:00:52.107Z","first_published":"2026-11-05T22:16:08.941Z","brands":[],"dns":"resolved","resolved":["64.111.93.27"],"resolved_at":"2026-11-05T21:09:28Z","dns_checked_at":"2026-11-05T22:28:51.000Z","dns_since":"2026-11-05T22:28:51.000Z","findings":[{"id":"ftcaapjthz2wtwqwyf3wt","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T21:00:52.107Z","first_published":"2026-11-05T22:16:08.941Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=dexscreenerrank.com"},{"hostname":"dexscreenervoteapp.com","first_observed":"2026-11-05T21:00:52.107Z","first_published":"2026-11-05T22:16:08.941Z","brands":[],"dns":"resolved","resolved":["64.111.93.27"],"resolved_at":"2026-11-05T21:09:28Z","dns_checked_at":"2026-11-05T22:28:51.000Z","dns_since":"2026-11-05T22:28:51.000Z","findings":[{"id":"fquqpzqjw3pof5uuwur56","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T21:00:52.107Z","first_published":"2026-11-05T22:16:08.941Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=dexscreenervoteapp.com"},{"hostname":"dexscreenervoteclub.com","first_observed":"2026-11-05T21:00:52.107Z","first_published":"2026-11-05T22:16:08.941Z","brands":[],"dns":"resolved","resolved":["64.111.93.27"],"resolved_at":"2026-11-05T21:09:28Z","dns_checked_at":"2026-11-05T22:28:51.000Z","dns_since":"2026-11-05T22:28:51.000Z","findings":[{"id":"fu4ilrvbgaqlaszpzhscw","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T21:00:52.107Z","first_published":"2026-11-05T22:16:08.941Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=dexscreenervoteclub.com"},{"hostname":"dexscreenervotehub.com","first_observed":"2026-11-05T21:06:01.385Z","first_published":"2026-11-05T22:16:08.941Z","brands":[],"dns":"resolved","resolved":["64.111.93.27"],"resolved_at":"2026-11-05T21:08:18Z","dns_checked_at":"2026-11-05T22:28:51.000Z","dns_since":"2026-11-05T22:28:51.000Z","findings":[{"id":"fqaasldpch5czswcysgiq","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T21:06:01.385Z","first_published":"2026-11-05T22:16:08.941Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=dexscreenervotehub.com"},{"hostname":"dexscreenervotelive.com","first_observed":"2026-11-05T21:06:01.385Z","first_published":"2026-11-05T22:16:08.941Z","brands":[],"dns":"resolved","resolved":["64.111.93.27"],"resolved_at":"2026-11-05T21:08:18Z","dns_checked_at":"2026-11-05T22:28:51.000Z","dns_since":"2026-11-05T22:28:51.000Z","findings":[{"id":"f75vwyiscmlua65lckify","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T21:06:01.385Z","first_published":"2026-11-05T22:16:08.941Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=dexscreenervotelive.com"},{"hostname":"dexscreenervotepro.com","first_observed":"2026-11-05T21:06:01.385Z","first_published":"2026-11-05T22:16:08.941Z","brands":[],"dns":"resolved","resolved":["64.111.93.27"],"resolved_at":"2026-11-05T21:08:18Z","dns_checked_at":"2026-11-05T22:28:51.000Z","dns_since":"2026-11-05T22:28:51.000Z","findings":[{"id":"ftvbzyhuu6eeztfxabkom","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T21:06:01.385Z","first_published":"2026-11-05T22:16:08.941Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=dexscreenervotepro.com"},{"hostname":"dify.socialvisor.ru","first_observed":"2026-11-05T21:15:32.020Z","first_published":"2026-11-05T22:16:08.941Z","brands":[],"dns":"resolved","resolved":["91.215.41.91"],"resolved_at":"2026-11-05T21:16:17Z","dns_checked_at":"2026-11-05T22:28:51.000Z","dns_since":"2026-11-05T22:28:51.000Z","findings":[{"id":"fedpjfl4cqos3xxxchfqy","kind":"reported_domain","summary":"Under socialvisor.ru, reported by PhishDestroy","first_observed":"2026-11-05T21:15:32.020Z","first_published":"2026-11-05T22:16:08.941Z","source":"phishdestroy","source_name":"PhishDestroy","under":"socialvisor.ru","source_url":"https://phishdestroy.io/domain/socialvisor.ru/"}],"url":"https://domainspoof.com/live?show=all&q=dify.socialvisor.ru"},{"hostname":"discover--en-ledgr.pages.dev","first_observed":"2026-11-05T21:36:28.021Z","first_published":"2026-11-05T22:16:08.941Z","brands":[],"dns":"resolved","resolved":["172.66.44.95","172.66.47.161"],"resolved_at":"2026-11-05T21:45:30Z","dns_checked_at":"2026-11-05T22:28:51.000Z","dns_since":"2026-11-05T22:28:51.000Z","findings":[{"id":"fftslpi6zbd63z3epte2m","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T21:36:28.021Z","first_published":"2026-11-05T22:16:08.941Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=discover--en-ledgr.pages.dev"},{"hostname":"doc-ledger-uss.pages.dev","first_observed":"2026-11-05T21:36:28.021Z","first_published":"2026-11-05T22:16:08.941Z","brands":[],"dns":"resolved","resolved":["172.66.44.109","172.66.47.147"],"resolved_at":"2026-11-05T21:45:30Z","dns_checked_at":"2026-11-05T22:28:51.000Z","dns_since":"2026-11-05T22:28:51.000Z","findings":[{"id":"fjd3n2t7ouungt6x4ikkk","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T21:36:28.021Z","first_published":"2026-11-05T22:16:08.941Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=doc-ledger-uss.pages.dev"},{"hostname":"docs.ni-electrical.com","first_observed":"2026-11-05T21:36:28.021Z","first_published":"2026-11-05T22:16:08.941Z","brands":[],"dns":"resolved","resolved":["109.238.86.5"],"resolved_at":"2026-11-05T21:45:30Z","dns_checked_at":"2026-11-05T22:28:51.000Z","dns_since":"2026-11-05T22:28:51.000Z","findings":[{"id":"f3phe6qrgxeccd6uirlag","kind":"reported_domain","summary":"Under ni-electrical.com, listed by CERT Polska","first_observed":"2026-11-05T21:36:28.021Z","first_published":"2026-11-05T22:16:08.941Z","source":"cert_polska","source_name":"CERT Polska","under":"ni-electrical.com"}],"url":"https://domainspoof.com/live?show=all&q=docs.ni-electrical.com"},{"hostname":"drefxvip.com","first_observed":"2026-11-05T21:15:32.020Z","first_published":"2026-11-05T22:16:08.941Z","brands":[],"dns":"resolved","resolved":["104.21.21.169","172.67.199.163"],"resolved_at":"2026-11-05T21:16:17Z","dns_checked_at":"2026-11-05T22:28:51.000Z","dns_since":"2026-11-05T22:28:51.000Z","findings":[{"id":"f4jmkznnzb47eacypx3hg","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T21:15:32.020Z","first_published":"2026-11-05T22:16:08.941Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=drefxvip.com"},{"hostname":"dsv.com.abakotest.com.ar","first_observed":"2026-11-05T21:51:39.899Z","first_published":"2026-11-05T22:16:08.941Z","brands":[],"dns":"resolved","resolved":["148.251.239.20"],"resolved_at":"2026-11-05T22:02:25Z","dns_checked_at":"2026-11-05T22:28:51.000Z","dns_since":"2026-11-05T22:28:51.000Z","findings":[{"id":"fy46kbqxxwjzmbboil2xr","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T21:51:39.899Z","first_published":"2026-11-05T22:16:08.941Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/dsv.com.abakotest.com.ar/"}],"url":"https://domainspoof.com/live?show=all&q=dsv.com.abakotest.com.ar"},{"hostname":"dynamo-pass.com","first_observed":"2026-11-05T21:36:28.021Z","first_published":"2026-11-05T22:16:08.941Z","brands":[],"dns":"resolved","resolved":["104.21.85.105","172.67.204.157"],"resolved_at":"2026-11-05T21:45:31Z","dns_checked_at":"2026-11-05T22:28:51.000Z","dns_since":"2026-11-05T22:28:51.000Z","findings":[{"id":"fsinmz2gqkfieankbk2d6","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T21:36:28.021Z","first_published":"2026-11-05T22:16:08.941Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=dynamo-pass.com"},{"hostname":"en-ledgrlive-desktop.pages.dev","first_observed":"2026-11-05T21:41:00.835Z","first_published":"2026-11-05T22:16:08.941Z","brands":[],"dns":"resolved","resolved":["172.66.44.190","172.66.47.66"],"resolved_at":"2026-11-05T21:41:27Z","dns_checked_at":"2026-11-05T22:28:51.000Z","dns_since":"2026-11-05T22:28:51.000Z","findings":[{"id":"fq6iftoucntfeef6ayjyi","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T21:41:00.835Z","first_published":"2026-11-05T22:16:08.941Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=en-ledgrlive-desktop.pages.dev"},{"hostname":"esordpastu.store","first_observed":"2026-11-05T21:19:57.964Z","first_published":"2026-11-05T22:16:08.941Z","brands":[],"dns":"resolved","resolved":["104.21.14.185","172.67.160.37","2606:4700:3030::ac43:a025","2606:4700:3036::6815:eb9"],"resolved_at":"2026-11-05T21:20:13Z","dns_checked_at":"2026-11-05T22:28:51.000Z","dns_since":"2026-11-05T22:28:51.000Z","findings":[{"id":"f3jp7de6zu2v3aidvr6y5","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T21:19:57.964Z","first_published":"2026-11-05T22:16:08.941Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=esordpastu.store"},{"hostname":"ethers.fi","first_observed":"2026-11-05T21:41:00.835Z","first_published":"2026-11-05T22:16:08.941Z","brands":[],"dns":"resolved","resolved":["13.248.169.48","76.223.54.146"],"resolved_at":"2026-11-06T00:21:30Z","dns_checked_at":"2026-11-05T22:28:51.000Z","dns_since":"2026-11-05T22:28:51.000Z","findings":[{"id":"fpgeffdogs7vzvlwvd75l","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T21:41:00.835Z","first_published":"2026-11-05T22:16:08.941Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=ethers.fi"},{"hostname":"exploaian.shop","first_observed":"2026-11-05T21:15:32.020Z","first_published":"2026-11-05T22:16:08.941Z","brands":[],"dns":"resolved","resolved":["104.21.37.137","172.67.208.198"],"resolved_at":"2026-11-05T21:16:18Z","dns_checked_at":"2026-11-05T22:28:51.000Z","dns_since":"2026-11-05T22:28:51.000Z","findings":[{"id":"flirvarlon6pniiycm7u5","kind":"reported_domain","summary":"Listed by NPA 165 (e-commerce)","first_observed":"2026-11-05T21:15:32.020Z","first_published":"2026-11-05T22:16:08.941Z","source":"npa","source_name":"NPA 165","claim":{"category":"e-commerce"}}],"url":"https://domainspoof.com/live?show=all&q=exploaian.shop"},{"hostname":"feimust.com","first_observed":"2026-11-05T21:36:28.021Z","first_published":"2026-11-05T22:16:08.941Z","brands":[{"id":"jcb","name":"JCB","url":"https://domainspoof.com/brands/jcb"}],"dns":"resolved","resolved":["107.163.230.234"],"resolved_at":"2026-11-05T21:37:13Z","dns_checked_at":"2026-11-05T22:28:51.000Z","dns_since":"2026-11-05T22:28:51.000Z","findings":[{"id":"fgrajs6tqsdrfsi2qp5gy","kind":"reported_domain","summary":"Listed by JPCERT/CC as imitating JCB","first_observed":"2026-11-05T21:36:28.021Z","first_published":"2026-11-05T22:16:08.941Z","source":"jpcert","source_name":"JPCERT/CC","claim":{"brand":"JCB"}}],"url":"https://domainspoof.com/brands/jcb"},{"hostname":"ff7765.com","first_observed":"2026-11-05T21:15:32.020Z","first_published":"2026-11-05T22:16:08.941Z","brands":[],"dns":"resolved","resolved":["23.145.152.202"],"resolved_at":"2026-11-05T21:16:18Z","dns_checked_at":"2026-11-05T22:28:51.000Z","dns_since":"2026-11-05T22:28:51.000Z","findings":[{"id":"fjz2u7uu4po7nnrnme74w","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T21:15:32.020Z","first_published":"2026-11-05T22:16:08.941Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/ff7765.com/"}],"url":"https://domainspoof.com/live?show=all&q=ff7765.com"},{"hostname":"fi-ventures.com","first_observed":"2026-11-05T22:05:41.495Z","first_published":"2026-11-05T22:16:08.941Z","brands":[],"dns":"resolved","resolved":["104.21.48.93","172.67.183.63"],"resolved_at":"2026-11-05T22:06:18Z","dns_checked_at":"2026-11-05T22:28:51.000Z","dns_since":"2026-11-05T22:28:51.000Z","findings":[{"id":"f2lexl4umvil76yl2ecuv","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T22:05:41.495Z","first_published":"2026-11-05T22:16:08.941Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/fi-ventures.com/"}],"url":"https://domainspoof.com/live?show=all&q=fi-ventures.com"},{"hostname":"finance.socialvisor.ru","first_observed":"2026-11-05T21:15:32.020Z","first_published":"2026-11-05T22:16:08.941Z","brands":[],"dns":"resolved","resolved":["91.215.41.91"],"resolved_at":"2026-11-05T21:16:18Z","dns_checked_at":"2026-11-05T22:28:51.000Z","dns_since":"2026-11-05T22:28:51.000Z","findings":[{"id":"f7wvgg4ict7gilxhfev36","kind":"reported_domain","summary":"Under socialvisor.ru, reported by PhishDestroy","first_observed":"2026-11-05T21:15:32.020Z","first_published":"2026-11-05T22:16:08.941Z","source":"phishdestroy","source_name":"PhishDestroy","under":"socialvisor.ru","source_url":"https://phishdestroy.io/domain/socialvisor.ru/"}],"url":"https://domainspoof.com/live?show=all&q=finance.socialvisor.ru"},{"hostname":"firelight-s2.network","first_observed":"2026-11-05T21:51:39.899Z","first_published":"2026-11-05T22:16:08.941Z","brands":[],"dns":"resolved","resolved":["104.21.37.38","172.67.203.184"],"resolved_at":"2026-11-05T22:02:27Z","dns_checked_at":"2026-11-05T22:28:51.000Z","dns_since":"2026-11-05T22:28:51.000Z","findings":[{"id":"fuc4bixoz4vtevfowdjwg","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T21:51:39.899Z","first_published":"2026-11-05T22:16:08.941Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=firelight-s2.network"},{"hostname":"fzdik.asia","first_observed":"2026-11-05T21:36:28.021Z","first_published":"2026-11-05T22:16:08.941Z","brands":[],"dns":"resolved","resolved":["104.21.18.251","172.67.184.71"],"resolved_at":"2026-11-05T21:37:13Z","dns_checked_at":"2026-11-05T22:28:51.000Z","dns_since":"2026-11-05T22:28:51.000Z","findings":[{"id":"f6nsqjkctk422sqfqhlxj","kind":"reported_domain","summary":"Listed by NPA 165 (information services)","first_observed":"2026-11-05T21:36:28.021Z","first_published":"2026-11-05T22:16:08.941Z","source":"npa","source_name":"NPA 165","claim":{"category":"information services"}}],"url":"https://domainspoof.com/live?show=all&q=fzdik.asia"},{"hostname":"gedikyt.com","first_observed":"2026-11-05T21:06:01.385Z","first_published":"2026-11-05T22:16:08.941Z","brands":[],"dns":"resolved","resolved":["216.150.1.129","216.150.16.1"],"resolved_at":"2026-11-05T21:08:18Z","dns_checked_at":"2026-11-05T22:28:51.000Z","dns_since":"2026-11-05T22:28:51.000Z","findings":[{"id":"fzhftf5sqvtmlv3hxicgq","kind":"reported_domain","summary":"Listed by USOM","first_observed":"2026-11-05T21:06:01.385Z","first_published":"2026-11-05T22:16:08.941Z","source":"usom","source_name":"USOM"}],"url":"https://domainspoof.com/live?show=all&q=gedikyt.com"},{"hostname":"ggdropp.com","first_observed":"2026-11-05T21:15:32.020Z","first_published":"2026-11-05T22:16:08.941Z","brands":[],"dns":"resolved","resolved":["104.21.2.207","172.67.152.232"],"resolved_at":"2026-11-05T21:16:18Z","dns_checked_at":"2026-11-05T22:28:51.000Z","dns_since":"2026-11-05T22:28:51.000Z","findings":[{"id":"fqi7abuey6nb5nw3syro5","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T21:15:32.020Z","first_published":"2026-11-05T22:16:08.941Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/ggdropp.com/"}],"url":"https://domainspoof.com/live?show=all&q=ggdropp.com"},{"hostname":"git.socialvisor.ru","first_observed":"2026-11-05T21:06:01.385Z","first_published":"2026-11-05T22:16:08.941Z","brands":[],"dns":"resolved","resolved":["91.215.41.91"],"resolved_at":"2026-11-05T21:08:18Z","dns_checked_at":"2026-11-05T22:28:51.000Z","dns_since":"2026-11-05T22:28:51.000Z","findings":[{"id":"f3jfdrd7ufhlyxehgempn","kind":"reported_domain","summary":"Under socialvisor.ru, reported by PhishDestroy","first_observed":"2026-11-05T21:06:01.385Z","first_published":"2026-11-05T22:16:08.941Z","source":"phishdestroy","source_name":"PhishDestroy","under":"socialvisor.ru","source_url":"https://phishdestroy.io/domain/socialvisor.ru/"}],"url":"https://domainspoof.com/live?show=all&q=git.socialvisor.ru"},{"hostname":"github-hd.deno.net","first_observed":"2026-11-05T21:34:41.503Z","first_published":"2026-11-05T22:16:08.941Z","brands":[{"id":"github","name":"GitHub","url":"https://domainspoof.com/brands/github"}],"dns":"resolved","resolved":["69.67.170.170"],"resolved_at":"2026-11-05T22:28:51Z","dns_checked_at":"2026-11-05T22:28:51.000Z","dns_since":"2026-11-05T22:28:51.000Z","findings":[{"id":"foctvvjqwelgjedzly3zo","kind":"phishing_infrastructure","summary":"Resolved to 69.67.170.170, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T21:34:41.503Z","first_published":"2026-11-05T22:16:08.941Z","address":"69.67.170.170","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/github"},{"hostname":"glacial-trails.com","first_observed":"2026-11-05T21:21:16.826Z","first_published":"2026-11-05T22:16:08.941Z","brands":[],"dns":"resolved","resolved":["104.21.73.197","172.67.148.204"],"resolved_at":"2026-11-05T21:26:37Z","dns_checked_at":"2026-11-05T22:28:51.000Z","dns_since":"2026-11-05T22:28:51.000Z","findings":[{"id":"fdyrtskyn2udbwaxdqjy4","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T21:21:16.826Z","first_published":"2026-11-05T22:16:08.941Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=glacial-trails.com"},{"hostname":"glrcastrk.life","first_observed":"2026-11-05T21:06:01.385Z","first_published":"2026-11-05T22:16:08.941Z","brands":[],"dns":"resolved","resolved":["104.21.34.254","172.67.210.110"],"resolved_at":"2026-11-05T21:08:18Z","dns_checked_at":"2026-11-05T22:28:51.000Z","dns_since":"2026-11-05T22:28:51.000Z","findings":[{"id":"fiba4yz3qq3fga463rpjb","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T21:06:01.385Z","first_published":"2026-11-05T22:16:08.941Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=glrcastrk.life"},{"hostname":"governance-valantis.xyz","first_observed":"2026-11-05T21:46:19.674Z","first_published":"2026-11-05T22:16:08.941Z","brands":[],"dns":"resolved","resolved":["104.21.68.176","172.67.197.135"],"resolved_at":"2026-11-05T21:55:07Z","dns_checked_at":"2026-11-05T22:28:51.000Z","dns_since":"2026-11-05T22:28:51.000Z","findings":[{"id":"fst2a46nlklkdtd46xd5n","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T21:46:19.674Z","first_published":"2026-11-05T22:16:08.941Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=governance-valantis.xyz"},{"hostname":"grymmon-coren93-fr.live","first_observed":"2026-11-05T21:11:00.934Z","first_published":"2026-11-05T22:16:08.941Z","brands":[],"dns":"resolved","resolved":["104.21.23.142","172.67.211.164"],"resolved_at":"2026-11-06T00:47:14Z","dns_checked_at":"2026-11-05T22:28:51.000Z","dns_since":"2026-11-05T22:28:51.000Z","findings":[{"id":"fc7l27aa2pjcqplrtwitl","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T21:11:00.934Z","first_published":"2026-11-05T22:16:08.941Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=grymmon-coren93-fr.live"},{"hostname":"grymmon-coren94-de.live","first_observed":"2026-11-05T21:41:00.835Z","first_published":"2026-11-05T22:16:08.941Z","brands":[],"dns":"resolved","resolved":["104.21.59.176","172.67.182.5"],"resolved_at":"2026-11-05T21:48:10Z","dns_checked_at":"2026-11-05T22:28:51.000Z","dns_since":"2026-11-05T22:28:51.000Z","findings":[{"id":"fafxfdc62fjm7uhvbcsvo","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T21:41:00.835Z","first_published":"2026-11-05T22:16:08.941Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=grymmon-coren94-de.live"},{"hostname":"havndlee.shop","first_observed":"2026-11-05T21:26:20.288Z","first_published":"2026-11-05T22:16:08.941Z","brands":[],"dns":"resolved","resolved":["104.21.14.101","172.67.158.159"],"resolved_at":"2026-11-05T21:34:42Z","dns_checked_at":"2026-11-05T22:28:51.000Z","dns_since":"2026-11-05T22:28:51.000Z","findings":[{"id":"fra34lmjgpsbmdp6vpedh","kind":"reported_domain","summary":"Listed by NPA 165 (finance and insurance)","first_observed":"2026-11-05T21:26:20.288Z","first_published":"2026-11-05T22:16:08.941Z","source":"npa","source_name":"NPA 165","claim":{"category":"finance and insurance"}}],"url":"https://domainspoof.com/live?show=all&q=havndlee.shop"},{"hostname":"hr.socialvisor.ru","first_observed":"2026-11-05T21:06:01.385Z","first_published":"2026-11-05T22:16:08.941Z","brands":[],"dns":"resolved","resolved":["91.215.41.91"],"resolved_at":"2026-11-05T21:08:18Z","dns_checked_at":"2026-11-05T22:28:51.000Z","dns_since":"2026-11-05T22:28:51.000Z","findings":[{"id":"fmhbdl3qmjf4xizy7pyaj","kind":"reported_domain","summary":"Under socialvisor.ru, reported by PhishDestroy","first_observed":"2026-11-05T21:06:01.385Z","first_published":"2026-11-05T22:16:08.941Z","source":"phishdestroy","source_name":"PhishDestroy","under":"socialvisor.ru","source_url":"https://phishdestroy.io/domain/socialvisor.ru/"}],"url":"https://domainspoof.com/live?show=all&q=hr.socialvisor.ru"},{"hostname":"https-stashpatrick.gl","first_observed":"2026-11-05T21:56:40.477Z","first_published":"2026-11-05T22:16:08.941Z","brands":[],"dns":"resolved","resolved":["104.21.69.160","172.67.210.89"],"resolved_at":"2026-11-05T22:06:31Z","dns_checked_at":"2026-11-05T22:28:51.000Z","dns_since":"2026-11-05T22:28:51.000Z","findings":[{"id":"fitdioovwk6hyc7olpjmx","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T21:56:40.477Z","first_published":"2026-11-05T22:16:08.941Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/https-stashpatrick.gl/"}],"url":"https://domainspoof.com/live?show=all&q=https-stashpatrick.gl"},{"hostname":"hub-avalanche.com","first_observed":"2026-11-05T22:01:08.886Z","first_published":"2026-11-05T22:16:08.941Z","brands":[],"dns":"resolved","resolved":["104.21.75.132","172.67.177.72"],"resolved_at":"2026-11-05T22:09:55Z","dns_checked_at":"2026-11-05T22:28:51.000Z","dns_since":"2026-11-05T22:28:51.000Z","findings":[{"id":"fbuvxxynf527usdc3qwwx","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T22:01:08.886Z","first_published":"2026-11-05T22:16:08.941Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/hub-avalanche.com/"}],"url":"https://domainspoof.com/live?show=all&q=hub-avalanche.com"},{"hostname":"hyperliquidusersupport.net","first_observed":"2026-11-05T21:00:52.107Z","first_published":"2026-11-05T22:16:08.941Z","brands":[],"dns":"resolved","resolved":["104.21.63.204","172.67.150.16"],"resolved_at":"2026-11-06T01:07:28Z","dns_checked_at":"2026-11-05T22:28:51.000Z","dns_since":"2026-11-05T22:28:51.000Z","findings":[{"id":"f6cbursr5seaiuzfma7al","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T21:00:52.107Z","first_published":"2026-11-05T22:16:08.941Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/hyperliquidusersupport.net/"}],"url":"https://domainspoof.com/live?show=all&q=hyperliquidusersupport.net"},{"hostname":"i-saglkrnd.cfd","first_observed":"2026-11-05T21:48:17.117Z","first_published":"2026-11-05T22:16:08.941Z","brands":[],"dns":"resolved","resolved":["104.21.20.208","172.67.194.105","2606:4700:3034::ac43:c269","2606:4700:3035::6815:14d0"],"resolved_at":"2026-11-05T21:50:51Z","dns_checked_at":"2026-11-05T22:28:51.000Z","dns_since":"2026-11-05T22:28:51.000Z","findings":[{"id":"fgd2uw67bz6jkqjipgp2r","kind":"reported_domain","summary":"Listed by USOM","first_observed":"2026-11-05T21:48:17.117Z","first_published":"2026-11-05T22:16:08.941Z","source":"usom","source_name":"USOM"}],"url":"https://domainspoof.com/live?show=all&q=i-saglkrnd.cfd"},{"hostname":"innpartner.com","first_observed":"2026-11-05T21:26:20.288Z","first_published":"2026-11-05T22:16:08.941Z","brands":[],"dns":"resolved","resolved":["162.214.216.132"],"resolved_at":"2026-11-06T13:12:13Z","dns_checked_at":"2026-11-05T22:28:51.000Z","dns_since":"2026-11-05T22:28:51.000Z","findings":[{"id":"fpj3pmdvx3sbxfhxkjrf7","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T21:26:20.288Z","first_published":"2026-11-05T22:16:08.941Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/innpartner.com/"}],"url":"https://domainspoof.com/live?show=all&q=innpartner.com"},{"hostname":"iqyouxuantw.shop","first_observed":"2026-11-05T22:01:08.886Z","first_published":"2026-11-05T22:16:08.941Z","brands":[],"dns":"resolved","resolved":["104.21.59.228","172.67.184.211"],"resolved_at":"2026-11-05T22:09:59Z","dns_checked_at":"2026-11-05T22:28:51.000Z","dns_since":"2026-11-05T22:28:51.000Z","findings":[{"id":"fdpc2ycjcgesnre3ngyrq","kind":"reported_domain","summary":"Listed by NPA 165 (e-commerce)","first_observed":"2026-11-05T22:01:08.886Z","first_published":"2026-11-05T22:16:08.941Z","source":"npa","source_name":"NPA 165","claim":{"category":"e-commerce"}}],"url":"https://domainspoof.com/live?show=all&q=iqyouxuantw.shop"},{"hostname":"italian-language.biz","first_observed":"2026-11-05T21:26:20.288Z","first_published":"2026-11-05T22:16:08.941Z","brands":[],"dns":"resolved","resolved":["208.123.118.155"],"resolved_at":"2026-11-05T21:34:50Z","dns_checked_at":"2026-11-05T22:28:51.000Z","dns_since":"2026-11-05T22:28:51.000Z","findings":[{"id":"fhv3sozjghwr6jyd6r7lx","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T21:26:20.288Z","first_published":"2026-11-05T22:16:08.941Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/italian-language.biz/"}],"url":"https://domainspoof.com/live?show=all&q=italian-language.biz"},{"hostname":"kavaio.org","first_observed":"2026-11-05T21:06:01.385Z","first_published":"2026-11-05T22:16:08.941Z","brands":[],"dns":"no_address","resolved":[],"resolved_at":"2026-11-05T21:08:19Z","dns_checked_at":"2026-11-06T14:46:24.000Z","findings":[{"id":"fzzcbcbunkbv5n5kkj437","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T21:06:01.385Z","first_published":"2026-11-05T22:16:08.941Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=kavaio.org"},{"hostname":"kirilqqwoo24pl.eu.cc","first_observed":"2026-11-05T21:19:57.964Z","first_published":"2026-11-05T22:16:08.941Z","brands":[],"dns":"resolved","resolved":["104.21.23.210","172.67.213.166","2606:4700:3036::ac43:d5a6","2606:4700:3037::6815:17d2"],"resolved_at":"2026-11-05T21:20:13Z","dns_checked_at":"2026-11-05T22:28:51.000Z","dns_since":"2026-11-05T22:28:51.000Z","findings":[{"id":"fjzihqio3bitixso75445","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T21:19:57.964Z","first_published":"2026-11-05T22:16:08.941Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=kirilqqwoo24pl.eu.cc"},{"hostname":"kraken-defi.live","first_observed":"2026-11-05T21:15:32.020Z","first_published":"2026-11-05T22:16:08.941Z","brands":[],"dns":"resolved","resolved":["13.248.213.45","76.223.67.189"],"resolved_at":"2026-11-06T01:07:30Z","dns_checked_at":"2026-11-05T22:28:51.000Z","dns_since":"2026-11-05T22:28:51.000Z","findings":[{"id":"f73xnwl7mxjf7uc3bsq6n","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T21:15:32.020Z","first_published":"2026-11-05T22:16:08.941Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/kraken-defi.live/"}],"url":"https://domainspoof.com/live?show=all&q=kraken-defi.live"},{"hostname":"kupikody.com","first_observed":"2026-11-05T22:01:08.886Z","first_published":"2026-11-05T22:16:08.941Z","brands":[],"dns":"resolved","resolved":["104.21.76.254","172.67.202.192"],"resolved_at":"2026-11-05T22:09:59Z","dns_checked_at":"2026-11-05T22:28:51.000Z","dns_since":"2026-11-05T22:28:51.000Z","findings":[{"id":"fsogtdndgcfc4gnoza5db","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T22:01:08.886Z","first_published":"2026-11-05T22:16:08.941Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/kupikody.com/"}],"url":"https://domainspoof.com/live?show=all&q=kupikody.com"},{"hostname":"labcobalt.net","first_observed":"2026-11-05T21:41:00.835Z","first_published":"2026-11-05T22:16:08.941Z","brands":[],"dns":"resolved","resolved":["104.21.64.48","172.67.176.12"],"resolved_at":"2026-11-05T21:41:30Z","dns_checked_at":"2026-11-05T22:28:51.000Z","dns_since":"2026-11-05T22:28:51.000Z","findings":[{"id":"fxvdhcwb7v5nlaxrgyrhi","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T21:41:00.835Z","first_published":"2026-11-05T22:16:08.941Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/labcobalt.net/"}],"url":"https://domainspoof.com/live?show=all&q=labcobalt.net"},{"hostname":"ledgr-io-desklive.pages.dev","first_observed":"2026-11-05T21:21:16.826Z","first_published":"2026-11-05T22:16:08.941Z","brands":[],"dns":"resolved","resolved":["172.66.44.124","172.66.47.132"],"resolved_at":"2026-11-05T21:26:53Z","dns_checked_at":"2026-11-05T22:28:51.000Z","dns_since":"2026-11-05T22:28:51.000Z","findings":[{"id":"f6rmjparwbligivyrt5ol","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T21:21:16.826Z","first_published":"2026-11-05T22:16:08.941Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=ledgr-io-desklive.pages.dev"},{"hostname":"legacybitfundex-fi.live","first_observed":"2026-11-05T21:46:19.674Z","first_published":"2026-11-05T22:16:08.941Z","brands":[],"dns":"resolved","resolved":["104.21.20.70","172.67.191.221"],"resolved_at":"2026-11-05T21:55:17Z","dns_checked_at":"2026-11-05T22:28:51.000Z","dns_since":"2026-11-05T22:28:51.000Z","findings":[{"id":"fwm7ldvvoqn5bnuot3hzk","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T21:46:19.674Z","first_published":"2026-11-05T22:16:08.941Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=legacybitfundex-fi.live"},{"hostname":"legacybitfundex-sv.live","first_observed":"2026-11-05T21:31:24.466Z","first_published":"2026-11-05T22:16:08.941Z","brands":[],"dns":"resolved","resolved":["104.21.84.48","172.67.186.143"],"resolved_at":"2026-11-05T21:31:59Z","dns_checked_at":"2026-11-05T22:28:51.000Z","dns_since":"2026-11-05T22:28:51.000Z","findings":[{"id":"fp4w4veuymqhv5srtsqhz","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T21:31:24.466Z","first_published":"2026-11-05T22:16:08.941Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=legacybitfundex-sv.live"},{"hostname":"loemvoai.net","first_observed":"2026-11-05T21:19:57.964Z","first_published":"2026-11-05T22:16:08.941Z","brands":[],"dns":"resolved","resolved":["104.21.58.175","172.67.162.101","2606:4700:3034::ac43:a265","2606:4700:3037::6815:3aaf"],"resolved_at":"2026-11-05T21:20:13Z","dns_checked_at":"2026-11-05T22:28:51.000Z","dns_since":"2026-11-05T22:28:51.000Z","findings":[{"id":"f4jqiasmd75erw6mct2yl","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T21:19:57.964Z","first_published":"2026-11-05T22:16:08.941Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=loemvoai.net"},{"hostname":"m.hemmenwellness.com","first_observed":"2026-11-05T21:21:16.826Z","first_published":"2026-11-05T22:16:08.941Z","brands":[],"dns":"resolved","resolved":["112.19.11.180"],"resolved_at":"2026-11-05T21:26:55Z","dns_checked_at":"2026-11-05T22:28:51.000Z","dns_since":"2026-11-05T22:28:51.000Z","findings":[{"id":"f4vr424hrzcfsx7ak33py","kind":"reported_domain","summary":"Under hemmenwellness.com, reported by PhishDestroy","first_observed":"2026-11-05T21:21:16.826Z","first_published":"2026-11-05T22:16:08.941Z","source":"phishdestroy","source_name":"PhishDestroy","under":"hemmenwellness.com","source_url":"https://phishdestroy.io/domain/hemmenwellness.com/"}],"url":"https://domainspoof.com/live?show=all&q=m.hemmenwellness.com"},{"hostname":"magicdroper.com","first_observed":"2026-11-05T21:36:28.021Z","first_published":"2026-11-05T22:16:08.941Z","brands":[],"dns":"resolved","resolved":["104.21.47.88","172.67.145.253"],"resolved_at":"2026-11-05T21:37:13Z","dns_checked_at":"2026-11-05T22:28:51.000Z","dns_since":"2026-11-05T22:28:51.000Z","findings":[{"id":"fyiuo2r6az2gddtnm2ors","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T21:36:28.021Z","first_published":"2026-11-05T22:16:08.941Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/magicdroper.com/"}],"url":"https://domainspoof.com/live?show=all&q=magicdroper.com"},{"hostname":"mail.agilidapp.com","first_observed":"2026-11-05T21:21:16.826Z","first_published":"2026-11-05T22:16:08.941Z","brands":[],"dns":"resolved","resolved":["192.250.227.186"],"resolved_at":"2026-11-05T21:26:55Z","dns_checked_at":"2026-11-05T22:28:51.000Z","dns_since":"2026-11-05T22:28:51.000Z","findings":[{"id":"f66t2ayuawn6cqj7sbfhp","kind":"reported_domain","summary":"Under agilidapp.com, listed by CERT Polska","first_observed":"2026-11-05T21:21:16.826Z","first_published":"2026-11-05T22:16:08.941Z","source":"cert_polska","source_name":"CERT Polska","under":"agilidapp.com"}],"url":"https://domainspoof.com/live?show=all&q=mail.agilidapp.com"},{"hostname":"mail.apeaap.com.br","first_observed":"2026-11-05T22:01:08.886Z","first_published":"2026-11-05T22:16:08.941Z","brands":[],"dns":"resolved","resolved":["177.104.174.36"],"resolved_at":"2026-11-05T22:10:00Z","dns_checked_at":"2026-11-05T22:28:51.000Z","dns_since":"2026-11-05T22:28:51.000Z","findings":[{"id":"fjtte5yol3fixmxcmfktx","kind":"reported_domain","summary":"Under apeaap.com.br, reported by PhishDestroy","first_observed":"2026-11-05T22:01:08.886Z","first_published":"2026-11-05T22:16:08.941Z","source":"phishdestroy","source_name":"PhishDestroy","under":"apeaap.com.br","source_url":"https://phishdestroy.io/domain/apeaap.com.br/"}],"url":"https://domainspoof.com/live?show=all&q=mail.apeaap.com.br"},{"hostname":"maketw.com","first_observed":"2026-11-05T21:00:52.107Z","first_published":"2026-11-05T22:16:08.941Z","brands":[],"dns":"no_address","resolved":[],"resolved_at":"2026-11-05T21:05:01Z","dns_checked_at":"2026-11-06T14:46:24.000Z","findings":[{"id":"fzjrx7jwhwr46yy5mycde","kind":"reported_domain","summary":"Listed by NPA 165 (information services)","first_observed":"2026-11-05T21:00:52.107Z","first_published":"2026-11-05T22:16:08.941Z","source":"npa","source_name":"NPA 165","claim":{"category":"information services"}}],"url":"https://domainspoof.com/live?show=all&q=maketw.com"},{"hostname":"malisorgula.org","first_observed":"2026-11-05T21:48:17.117Z","first_published":"2026-11-05T22:16:08.941Z","brands":[],"dns":"resolved","resolved":["162.4.84.247"],"resolved_at":"2026-11-05T21:50:51Z","dns_checked_at":"2026-11-05T22:28:51.000Z","dns_since":"2026-11-05T22:28:51.000Z","findings":[{"id":"fwui5xdxdomvluufjwxkh","kind":"reported_domain","summary":"Listed by USOM","first_observed":"2026-11-05T21:48:17.117Z","first_published":"2026-11-05T22:16:08.941Z","source":"usom","source_name":"USOM"}],"url":"https://domainspoof.com/live?show=all&q=malisorgula.org"},{"hostname":"maliyetrsorgu.org","first_observed":"2026-11-05T21:48:17.117Z","first_published":"2026-11-05T22:16:08.941Z","brands":[],"dns":"resolved","resolved":["162.4.84.247"],"resolved_at":"2026-11-05T21:50:51Z","dns_checked_at":"2026-11-05T22:28:51.000Z","dns_since":"2026-11-05T22:28:51.000Z","findings":[{"id":"ftv5xirmifs4cux4vl4lt","kind":"reported_domain","summary":"Listed by USOM","first_observed":"2026-11-05T21:48:17.117Z","first_published":"2026-11-05T22:16:08.941Z","source":"usom","source_name":"USOM"}],"url":"https://domainspoof.com/live?show=all&q=maliyetrsorgu.org"},{"hostname":"matomo.zenavlico.cyou","first_observed":"2026-11-05T21:06:01.385Z","first_published":"2026-11-05T22:16:08.941Z","brands":[],"dns":"resolved","resolved":["95.85.244.13"],"resolved_at":"2026-11-05T21:08:18Z","dns_checked_at":"2026-11-05T22:28:51.000Z","dns_since":"2026-11-05T22:28:51.000Z","findings":[{"id":"fxtp3qjlgq26dhvwup3ju","kind":"reported_domain","summary":"Under zenavlico.cyou, listed by CERT Polska","first_observed":"2026-11-05T21:06:01.385Z","first_published":"2026-11-05T22:16:08.941Z","source":"cert_polska","source_name":"CERT Polska","under":"zenavlico.cyou"}],"url":"https://domainspoof.com/live?show=all&q=matomo.zenavlico.cyou"},{"hostname":"mcsdirect.tech","first_observed":"2026-11-05T21:11:00.934Z","first_published":"2026-11-05T22:16:08.941Z","brands":[],"dns":"resolved","resolved":["72.62.191.8","2a02:4780:7:3adf::1"],"resolved_at":"2026-11-05T21:11:45Z","dns_checked_at":"2026-11-05T22:28:51.000Z","dns_since":"2026-11-05T22:28:51.000Z","findings":[{"id":"fh2khbb4khbg4kpthte7x","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T21:11:00.934Z","first_published":"2026-11-05T22:16:08.941Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/mcsdirect.tech/"}],"url":"https://domainspoof.com/live?show=all&q=mcsdirect.tech"},{"hostname":"mehasrn.duckdns.org","first_observed":"2026-11-05T21:48:17.117Z","first_published":"2026-11-05T22:16:08.941Z","brands":[],"dns":"resolved","resolved":["64.89.160.238"],"resolved_at":"2026-11-05T21:50:51Z","dns_checked_at":"2026-11-05T22:28:51.000Z","dns_since":"2026-11-05T22:28:51.000Z","findings":[{"id":"fr2heiy2fsxqzh6r3ltgd","kind":"reported_domain","summary":"Listed by USOM","first_observed":"2026-11-05T21:48:17.117Z","first_published":"2026-11-05T22:16:08.941Z","source":"usom","source_name":"USOM"}],"url":"https://domainspoof.com/live?show=all&q=mehasrn.duckdns.org"},{"hostname":"metabase.socialvisor.ru","first_observed":"2026-11-05T21:56:40.477Z","first_published":"2026-11-05T22:16:08.941Z","brands":[],"dns":"resolved","resolved":["91.215.41.91"],"resolved_at":"2026-11-05T22:06:36Z","dns_checked_at":"2026-11-05T22:28:51.000Z","dns_since":"2026-11-05T22:28:51.000Z","findings":[{"id":"ft3vtgbhpwnzzusfk5afa","kind":"reported_domain","summary":"Under socialvisor.ru, reported by PhishDestroy","first_observed":"2026-11-05T21:56:40.477Z","first_published":"2026-11-05T22:16:08.941Z","source":"phishdestroy","source_name":"PhishDestroy","under":"socialvisor.ru","source_url":"https://phishdestroy.io/domain/socialvisor.ru/"}],"url":"https://domainspoof.com/live?show=all&q=metabase.socialvisor.ru"},{"hostname":"modalwa.com","first_observed":"2026-11-05T21:41:00.835Z","first_published":"2026-11-05T22:16:08.941Z","brands":[],"dns":"resolved","resolved":["139.59.118.85"],"resolved_at":"2026-11-06T00:11:21Z","dns_checked_at":"2026-11-05T22:28:51.000Z","dns_since":"2026-11-05T22:28:51.000Z","findings":[{"id":"fhul6qlsnp3avu63mp7ln","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T21:41:00.835Z","first_published":"2026-11-05T22:16:08.941Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/modalwa.com/"}],"url":"https://domainspoof.com/live?show=all&q=modalwa.com"},{"hostname":"modern-d.com.ua","first_observed":"2026-11-05T21:21:16.826Z","first_published":"2026-11-05T22:16:08.941Z","brands":[],"dns":"resolved","resolved":["104.21.95.89","172.67.170.62"],"resolved_at":"2026-11-06T08:05:59Z","dns_checked_at":"2026-11-05T22:28:51.000Z","dns_since":"2026-11-05T22:28:51.000Z","findings":[{"id":"fqu3cejwscfmhnbsqcirg","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T21:21:16.826Z","first_published":"2026-11-05T22:16:08.941Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/modern-d.com.ua/"}],"url":"https://domainspoof.com/live?show=all&q=modern-d.com.ua"},{"hostname":"monarchmoney.pro","first_observed":"2026-11-05T21:06:01.385Z","first_published":"2026-11-05T22:16:08.941Z","brands":[],"dns":"resolved","resolved":["104.21.44.67","172.67.196.115"],"resolved_at":"2026-11-05T21:08:19Z","dns_checked_at":"2026-11-05T22:28:51.000Z","dns_since":"2026-11-05T22:28:51.000Z","findings":[{"id":"febjrssw2n4c65rbvosa7","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T21:06:01.385Z","first_published":"2026-11-05T22:16:08.941Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=monarchmoney.pro"},{"hostname":"moonshot-vote.io","first_observed":"2026-11-05T21:00:52.107Z","first_published":"2026-11-05T22:16:08.941Z","brands":[],"dns":"resolved","resolved":["104.21.36.150","172.67.195.158"],"resolved_at":"2026-11-05T21:05:00Z","dns_checked_at":"2026-11-05T22:28:51.000Z","dns_since":"2026-11-05T22:28:51.000Z","findings":[{"id":"fg3qoaduvfleqrdg6jy44","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T21:00:52.107Z","first_published":"2026-11-05T22:16:08.941Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/moonshot-vote.io/"}],"url":"https://domainspoof.com/live?show=all&q=moonshot-vote.io"},{"hostname":"mqggq.top","first_observed":"2026-11-05T21:11:00.934Z","first_published":"2026-11-05T22:16:08.941Z","brands":[],"dns":"resolved","resolved":["104.21.43.241","172.67.189.7"],"resolved_at":"2026-11-05T21:11:45Z","dns_checked_at":"2026-11-05T22:28:51.000Z","dns_since":"2026-11-05T22:28:51.000Z","findings":[{"id":"f55qapr7imvxvkt5dg2cs","kind":"reported_domain","summary":"Listed by NPA 165 (finance and insurance)","first_observed":"2026-11-05T21:11:00.934Z","first_published":"2026-11-05T22:16:08.941Z","source":"npa","source_name":"NPA 165","claim":{"category":"finance and insurance"}}],"url":"https://domainspoof.com/live?show=all&q=mqggq.top"},{"hostname":"nbxbdsa.xyz","first_observed":"2026-11-05T21:26:20.288Z","first_published":"2026-11-05T22:16:08.941Z","brands":[],"dns":"resolved","resolved":["104.21.2.9","172.67.128.125"],"resolved_at":"2026-11-06T02:34:13Z","dns_checked_at":"2026-11-05T22:28:51.000Z","dns_since":"2026-11-05T22:28:51.000Z","findings":[{"id":"fzvinqs4f2avmfv3e7aoh","kind":"reported_domain","summary":"Listed by NPA 165 (e-commerce)","first_observed":"2026-11-05T21:26:20.288Z","first_published":"2026-11-05T22:16:08.941Z","source":"npa","source_name":"NPA 165","claim":{"category":"e-commerce"}}],"url":"https://domainspoof.com/live?show=all&q=nbxbdsa.xyz"},{"hostname":"neutron-claim.com","first_observed":"2026-11-05T21:36:28.021Z","first_published":"2026-11-05T22:16:08.941Z","brands":[],"dns":"resolved","resolved":["104.21.67.132","172.67.176.231"],"resolved_at":"2026-11-05T21:37:13Z","dns_checked_at":"2026-11-05T22:28:51.000Z","dns_since":"2026-11-05T22:28:51.000Z","findings":[{"id":"f7viykc7g7o6epdz2rj3s","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T21:36:28.021Z","first_published":"2026-11-05T22:16:08.941Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=neutron-claim.com"},{"hostname":"nextcloud.socialvisor.ru","first_observed":"2026-11-05T22:05:41.495Z","first_published":"2026-11-05T22:16:08.941Z","brands":[],"dns":"resolved","resolved":["91.215.41.91"],"resolved_at":"2026-11-05T22:06:21Z","dns_checked_at":"2026-11-05T22:28:51.000Z","dns_since":"2026-11-05T22:28:51.000Z","findings":[{"id":"f2bcwcjjcb4jmeg2ghlbv","kind":"reported_domain","summary":"Under socialvisor.ru, reported by PhishDestroy","first_observed":"2026-11-05T22:05:41.495Z","first_published":"2026-11-05T22:16:08.941Z","source":"phishdestroy","source_name":"PhishDestroy","under":"socialvisor.ru","source_url":"https://phishdestroy.io/domain/socialvisor.ru/"}],"url":"https://domainspoof.com/live?show=all&q=nextcloud.socialvisor.ru"},{"hostname":"nfltrump.net","first_observed":"2026-11-05T22:01:08.886Z","first_published":"2026-11-05T22:16:08.941Z","brands":[],"dns":"resolved","resolved":["104.21.55.100","172.67.147.116"],"resolved_at":"2026-11-05T22:10:01Z","dns_checked_at":"2026-11-05T22:28:51.000Z","dns_since":"2026-11-05T22:28:51.000Z","findings":[{"id":"f5u5vffdwt64ycej6q2p5","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T22:01:08.886Z","first_published":"2026-11-05T22:16:08.941Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=nfltrump.net"},{"hostname":"novixtra.com","first_observed":"2026-11-05T21:48:17.117Z","first_published":"2026-11-05T22:16:08.941Z","brands":[],"dns":"resolved","resolved":["104.21.78.14","172.67.214.112","2606:4700:3037::6815:4e0e","2606:4700:3037::ac43:d670"],"resolved_at":"2026-11-05T21:50:51Z","dns_checked_at":"2026-11-05T22:28:51.000Z","dns_since":"2026-11-05T22:28:51.000Z","findings":[{"id":"fwhdjeluwb7qor7lzkscc","kind":"reported_domain","summary":"Listed by USOM","first_observed":"2026-11-05T21:48:17.117Z","first_published":"2026-11-05T22:16:08.941Z","source":"usom","source_name":"USOM"}],"url":"https://domainspoof.com/live?show=all&q=novixtra.com"},{"hostname":"nssmo.com","first_observed":"2026-11-05T21:36:28.021Z","first_published":"2026-11-05T22:16:08.941Z","brands":[],"dns":"resolved","resolved":["104.21.53.216","172.67.219.39"],"resolved_at":"2026-11-05T21:37:13Z","dns_checked_at":"2026-11-05T22:28:51.000Z","dns_since":"2026-11-05T22:28:51.000Z","findings":[{"id":"fssoyigovifke5ahe6in3","kind":"reported_domain","summary":"Listed by NPA 165 (information services)","first_observed":"2026-11-05T21:36:28.021Z","first_published":"2026-11-05T22:16:08.941Z","source":"npa","source_name":"NPA 165","claim":{"category":"information services"}}],"url":"https://domainspoof.com/live?show=all&q=nssmo.com"},{"hostname":"nz-degencity.com","first_observed":"2026-11-05T21:00:52.107Z","first_published":"2026-11-05T22:16:08.941Z","brands":[],"dns":"resolved","resolved":["104.21.35.95","172.67.217.14"],"resolved_at":"2026-11-06T02:52:04Z","dns_checked_at":"2026-11-05T22:28:51.000Z","dns_since":"2026-11-05T22:28:51.000Z","findings":[{"id":"f6hc3jqreootevcnrtfvr","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T21:00:52.107Z","first_published":"2026-11-05T22:16:08.941Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/nz-degencity.com/"}],"url":"https://domainspoof.com/live?show=all&q=nz-degencity.com"},{"hostname":"occasy-cutover-rehearsal.fi-ventures.com","first_observed":"2026-11-05T22:05:41.495Z","first_published":"2026-11-05T22:16:08.941Z","brands":[],"dns":"resolved","resolved":["104.21.48.93","172.67.183.63"],"resolved_at":"2026-11-05T22:06:21Z","dns_checked_at":"2026-11-05T22:28:51.000Z","dns_since":"2026-11-05T22:28:51.000Z","findings":[{"id":"fvvsjp2c6jde6kdjdqznh","kind":"reported_domain","summary":"Under fi-ventures.com, reported by PhishDestroy","first_observed":"2026-11-05T22:05:41.495Z","first_published":"2026-11-05T22:16:08.941Z","source":"phishdestroy","source_name":"PhishDestroy","under":"fi-ventures.com","source_url":"https://phishdestroy.io/domain/fi-ventures.com/"}],"url":"https://domainspoof.com/live?show=all&q=occasy-cutover-rehearsal.fi-ventures.com"},{"hostname":"onrefinance.support","first_observed":"2026-11-05T21:56:40.477Z","first_published":"2026-11-05T22:16:08.941Z","brands":[],"dns":"resolved","resolved":["104.21.62.107","172.67.223.14"],"resolved_at":"2026-11-05T22:06:40Z","dns_checked_at":"2026-11-05T22:28:51.000Z","dns_since":"2026-11-05T22:28:51.000Z","findings":[{"id":"fk37wttenh4nd6rhfeadb","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T21:56:40.477Z","first_published":"2026-11-05T22:16:08.941Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=onrefinance.support"},{"hostname":"openivaimmm.com","first_observed":"2026-11-05T21:36:28.021Z","first_published":"2026-11-05T22:16:08.941Z","brands":[],"dns":"resolved","resolved":["162.4.84.247"],"resolved_at":"2026-11-05T21:37:14Z","dns_checked_at":"2026-11-05T22:28:51.000Z","dns_since":"2026-11-05T22:28:51.000Z","findings":[{"id":"fnidg2djsuwqgodawinws","kind":"reported_domain","summary":"Listed by NPA 165 (finance and insurance)","first_observed":"2026-11-05T21:36:28.021Z","first_published":"2026-11-05T22:16:08.941Z","source":"npa","source_name":"NPA 165","claim":{"category":"finance and insurance"}}],"url":"https://domainspoof.com/live?show=all&q=openivaimmm.com"},{"hostname":"paczzka5797834.qpon","first_observed":"2026-11-05T21:19:57.964Z","first_published":"2026-11-05T22:16:08.941Z","brands":[],"dns":"resolved","resolved":["104.21.75.249","172.67.184.16","2606:4700:3033::ac43:b810","2606:4700:3036::6815:4bf9"],"resolved_at":"2026-11-05T21:20:13Z","dns_checked_at":"2026-11-05T22:28:51.000Z","dns_since":"2026-11-05T22:28:51.000Z","findings":[{"id":"fa3sxc3fjnc3tvhhu4dca","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T21:19:57.964Z","first_published":"2026-11-05T22:16:08.941Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=paczzka5797834.qpon"},{"hostname":"pay.katyautopro.com","first_observed":"2026-11-05T21:11:00.934Z","first_published":"2026-11-05T22:16:08.941Z","brands":[],"dns":"not_found","resolved":[],"resolved_at":"2026-11-05T21:11:46Z","dns_checked_at":"2026-11-06T14:46:24.000Z","findings":[{"id":"fje54yqkv7mstow3gmhsq","kind":"reported_domain","summary":"Under katyautopro.com, reported by PhishDestroy","first_observed":"2026-11-05T21:11:00.934Z","first_published":"2026-11-05T22:16:08.941Z","source":"phishdestroy","source_name":"PhishDestroy","under":"katyautopro.com","source_url":"https://phishdestroy.io/domain/katyautopro.com/"}],"url":"https://domainspoof.com/live?show=all&q=pay.katyautopro.com"},{"hostname":"pickshot.app","first_observed":"2026-11-05T21:41:00.835Z","first_published":"2026-11-05T22:16:08.941Z","brands":[],"dns":"resolved","resolved":["104.21.65.213","172.67.167.20"],"resolved_at":"2026-11-05T21:41:30Z","dns_checked_at":"2026-11-05T22:28:51.000Z","dns_since":"2026-11-05T22:28:51.000Z","findings":[{"id":"fnhzsurrz5gppd6x4c2wh","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T21:41:00.835Z","first_published":"2026-11-05T22:16:08.941Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=pickshot.app"},{"hostname":"pittualiza.store","first_observed":"2026-11-05T21:19:57.964Z","first_published":"2026-11-05T22:16:08.941Z","brands":[],"dns":"resolved","resolved":["104.21.41.228","172.67.195.151","2606:4700:3030::6815:29e4","2606:4700:3035::ac43:c397"],"resolved_at":"2026-11-05T21:20:13Z","dns_checked_at":"2026-11-05T22:28:51.000Z","dns_since":"2026-11-05T22:28:51.000Z","findings":[{"id":"f46memmseua6wyvap34gu","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T21:19:57.964Z","first_published":"2026-11-05T22:16:08.941Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=pittualiza.store"},{"hostname":"pl-016262917267oferta028220k0283839.lat","first_observed":"2026-11-05T21:19:57.964Z","first_published":"2026-11-05T22:16:08.941Z","brands":[],"dns":"resolved","resolved":["104.21.72.236","172.67.187.211","2606:4700:3036::6815:48ec","2606:4700:3036::ac43:bbd3"],"resolved_at":"2026-11-05T21:20:13Z","dns_checked_at":"2026-11-05T22:28:51.000Z","dns_since":"2026-11-05T22:28:51.000Z","findings":[{"id":"fmzpfljujhenes234qbni","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T21:19:57.964Z","first_published":"2026-11-05T22:16:08.941Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=pl-016262917267oferta028220k0283839.lat"},{"hostname":"pl-numerbiletu93921391940.sbs","first_observed":"2026-11-05T21:19:57.964Z","first_published":"2026-11-05T22:16:08.941Z","brands":[],"dns":"resolved","resolved":["104.21.50.55","172.67.168.20","2606:4700:3033::6815:3237","2606:4700:3036::ac43:a814"],"resolved_at":"2026-11-05T21:20:13Z","dns_checked_at":"2026-11-05T22:28:51.000Z","dns_since":"2026-11-05T22:28:51.000Z","findings":[{"id":"fsr3xhmjslynsop3xbcj7","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T21:19:57.964Z","first_published":"2026-11-05T22:16:08.941Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=pl-numerbiletu93921391940.sbs"},{"hostname":"plastitude.com","first_observed":"2026-11-05T21:00:52.107Z","first_published":"2026-11-05T22:16:08.941Z","brands":[],"dns":"resolved","resolved":["130.131.222.103"],"resolved_at":"2026-11-05T21:05:00Z","dns_checked_at":"2026-11-05T22:28:51.000Z","dns_since":"2026-11-05T22:28:51.000Z","findings":[{"id":"fnqfam757qiy7qhs42vsi","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T21:00:52.107Z","first_published":"2026-11-05T22:16:08.941Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=plastitude.com"},{"hostname":"polzentraai-pl.live","first_observed":"2026-11-05T21:00:52.107Z","first_published":"2026-11-05T22:16:08.941Z","brands":[],"dns":"resolved","resolved":["104.21.17.14","172.67.218.242"],"resolved_at":"2026-11-06T04:23:06Z","dns_checked_at":"2026-11-05T22:28:51.000Z","dns_since":"2026-11-05T22:28:51.000Z","findings":[{"id":"flkisrongbp5trh7me3lx","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T21:00:52.107Z","first_published":"2026-11-05T22:16:08.941Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=polzentraai-pl.live"},{"hostname":"posteslara.com","first_observed":"2026-11-05T21:41:00.835Z","first_published":"2026-11-05T22:16:08.941Z","brands":[],"dns":"resolved","resolved":["40.160.16.184"],"resolved_at":"2026-11-05T21:41:30Z","dns_checked_at":"2026-11-05T22:28:51.000Z","dns_since":"2026-11-05T22:28:51.000Z","findings":[{"id":"fqh4ygp6muh22pweqrsmg","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T21:41:00.835Z","first_published":"2026-11-05T22:16:08.941Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/posteslara.com/"}],"url":"https://domainspoof.com/live?show=all&q=posteslara.com"},{"hostname":"prinosibtc-nl.live","first_observed":"2026-11-05T21:21:16.826Z","first_published":"2026-11-05T22:16:08.941Z","brands":[],"dns":"resolved","resolved":["104.21.89.129","172.67.189.71"],"resolved_at":"2026-11-05T21:27:04Z","dns_checked_at":"2026-11-05T22:28:51.000Z","dns_since":"2026-11-05T22:28:51.000Z","findings":[{"id":"fvgvia6dcg7sq24k4gyoj","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T21:21:16.826Z","first_published":"2026-11-05T22:16:08.941Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=prinosibtc-nl.live"},{"hostname":"proposal-telcoin.xyz","first_observed":"2026-11-05T21:36:28.021Z","first_published":"2026-11-05T22:16:08.941Z","brands":[],"dns":"resolved","resolved":["104.21.4.88","172.67.131.224"],"resolved_at":"2026-11-05T21:37:15Z","dns_checked_at":"2026-11-05T22:28:51.000Z","dns_since":"2026-11-05T22:28:51.000Z","findings":[{"id":"fi4qnt4k5tgvgmhip4c4c","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T21:36:28.021Z","first_published":"2026-11-05T22:16:08.941Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=proposal-telcoin.xyz"},{"hostname":"proyectos.quillacollo.gob.bo","first_observed":"2026-11-05T21:51:39.899Z","first_published":"2026-11-05T22:16:08.941Z","brands":[],"dns":"resolved","resolved":["200.58.81.35"],"resolved_at":"2026-11-05T22:02:36Z","dns_checked_at":"2026-11-05T22:28:51.000Z","dns_since":"2026-11-05T22:28:51.000Z","findings":[{"id":"f4zgklbwq3zwcky37j3om","kind":"reported_domain","summary":"Under quillacollo.gob.bo, listed by CERT Polska","first_observed":"2026-11-05T21:51:39.899Z","first_published":"2026-11-05T22:16:08.941Z","source":"cert_polska","source_name":"CERT Polska","under":"quillacollo.gob.bo"}],"url":"https://domainspoof.com/live?show=all&q=proyectos.quillacollo.gob.bo"},{"hostname":"quantummedrol-de.live","first_observed":"2026-11-05T21:21:16.826Z","first_published":"2026-11-05T22:16:08.941Z","brands":[],"dns":"resolved","resolved":["104.21.16.92","172.67.167.48"],"resolved_at":"2026-11-06T00:12:54Z","dns_checked_at":"2026-11-05T22:28:51.000Z","dns_since":"2026-11-05T22:28:51.000Z","findings":[{"id":"fv2ez7wb2hbaio5763ywi","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T21:21:16.826Z","first_published":"2026-11-05T22:16:08.941Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=quantummedrol-de.live"},{"hostname":"racchaniso.store","first_observed":"2026-11-05T21:19:57.964Z","first_published":"2026-11-05T22:16:08.941Z","brands":[],"dns":"not_found","resolved":[],"resolved_at":"2026-11-05T21:20:13Z","dns_checked_at":"2026-11-06T14:46:24.000Z","findings":[{"id":"fsqjig6zrdjbh43cfcjpr","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T21:19:57.964Z","first_published":"2026-11-05T22:16:08.941Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=racchaniso.store"},{"hostname":"rainbet-casino.pages.dev","first_observed":"2026-11-05T21:21:16.826Z","first_published":"2026-11-05T22:16:08.941Z","brands":[],"dns":"resolved","resolved":["172.66.44.177","172.66.47.79"],"resolved_at":"2026-11-05T21:27:07Z","dns_checked_at":"2026-11-05T22:28:51.000Z","dns_since":"2026-11-05T22:28:51.000Z","findings":[{"id":"fjlrwvwpblldpt3ezkewz","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T21:21:16.826Z","first_published":"2026-11-05T22:16:08.941Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=rainbet-casino.pages.dev"},{"hostname":"ravenfundmere.live","first_observed":"2026-11-05T22:01:08.886Z","first_published":"2026-11-05T22:16:08.941Z","brands":[],"dns":"resolved","resolved":["104.21.34.46","172.67.197.235"],"resolved_at":"2026-11-05T22:10:02Z","dns_checked_at":"2026-11-05T22:28:51.000Z","dns_since":"2026-11-05T22:28:51.000Z","findings":[{"id":"fqnp4zmqjd5w5oknxl7q5","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T22:01:08.886Z","first_published":"2026-11-05T22:16:08.941Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=ravenfundmere.live"},{"hostname":"register-hyperunit.app","first_observed":"2026-11-05T21:21:16.826Z","first_published":"2026-11-05T22:16:08.941Z","brands":[],"dns":"resolved","resolved":["104.21.96.29","172.67.150.161"],"resolved_at":"2026-11-06T01:50:31Z","dns_checked_at":"2026-11-05T22:28:51.000Z","dns_since":"2026-11-05T22:28:51.000Z","findings":[{"id":"f6ilx6m4ycteahhgq46fz","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T21:21:16.826Z","first_published":"2026-11-05T22:16:08.941Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=register-hyperunit.app"},{"hostname":"registers-cysicfoundation.org","first_observed":"2026-11-05T21:11:00.934Z","first_published":"2026-11-05T22:16:08.941Z","brands":[],"dns":"resolved","resolved":["104.21.31.140","172.67.177.21"],"resolved_at":"2026-11-06T09:00:48Z","dns_checked_at":"2026-11-05T22:28:51.000Z","dns_since":"2026-11-05T22:28:51.000Z","findings":[{"id":"finz4imwwn3zzqcwg3ios","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T21:11:00.934Z","first_published":"2026-11-05T22:16:08.941Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/registers-cysicfoundation.org/"}],"url":"https://domainspoof.com/live?show=all&q=registers-cysicfoundation.org"},{"hostname":"rimpebomba.store","first_observed":"2026-11-05T21:46:19.674Z","first_published":"2026-11-05T22:16:08.941Z","brands":[],"dns":"no_address","resolved":[],"resolved_at":"2026-11-05T21:55:24Z","dns_checked_at":"2026-11-06T14:46:24.000Z","findings":[{"id":"fqtbyng66ss6uxwjyddrb","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T21:46:19.674Z","first_published":"2026-11-05T22:16:08.941Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=rimpebomba.store"},{"hostname":"ritmocorexar.click","first_observed":"2026-11-05T21:26:20.288Z","first_published":"2026-11-05T22:16:08.941Z","brands":[],"dns":"resolved","resolved":["185.62.56.63"],"resolved_at":"2026-11-05T21:35:06Z","dns_checked_at":"2026-11-05T22:28:51.000Z","dns_since":"2026-11-05T22:28:51.000Z","findings":[{"id":"fbwaolhpv2oi2a6kriczb","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T21:26:20.288Z","first_published":"2026-11-05T22:16:08.941Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=ritmocorexar.click"},{"hostname":"ross-vermoheim.com","first_observed":"2026-11-05T21:21:16.826Z","first_published":"2026-11-05T22:16:08.941Z","brands":[],"dns":"resolved","resolved":["104.21.27.88","172.67.169.21"],"resolved_at":"2026-11-06T02:14:03Z","dns_checked_at":"2026-11-05T22:28:51.000Z","dns_since":"2026-11-05T22:28:51.000Z","findings":[{"id":"f2djlexnpxxlp6nrlppwq","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T21:21:16.826Z","first_published":"2026-11-05T22:16:08.941Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=ross-vermoheim.com"},{"hostname":"s536hh7e95253434.opik.net","first_observed":"2026-11-05T21:48:17.117Z","first_published":"2026-11-05T22:16:08.941Z","brands":[],"dns":"resolved","resolved":["159.100.19.243"],"resolved_at":"2026-11-05T21:50:51Z","dns_checked_at":"2026-11-05T22:28:51.000Z","dns_since":"2026-11-05T22:28:51.000Z","findings":[{"id":"fgk2mucfcjsog57z5xkfe","kind":"reported_domain","summary":"Listed by USOM","first_observed":"2026-11-05T21:48:17.117Z","first_published":"2026-11-05T22:16:08.941Z","source":"usom","source_name":"USOM"}],"url":"https://domainspoof.com/live?show=all&q=s536hh7e95253434.opik.net"},{"hostname":"sales-papertrade.xyz","first_observed":"2026-11-05T22:01:08.886Z","first_published":"2026-11-05T22:16:08.941Z","brands":[],"dns":"resolved","resolved":["104.21.19.40","172.67.184.246"],"resolved_at":"2026-11-05T22:10:03Z","dns_checked_at":"2026-11-05T22:28:51.000Z","dns_since":"2026-11-05T22:28:51.000Z","findings":[{"id":"fazkj6vl3hmeqrxhj4trn","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T22:01:08.886Z","first_published":"2026-11-05T22:16:08.941Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=sales-papertrade.xyz"},{"hostname":"secureservice-network.com","first_observed":"2026-11-05T21:46:19.674Z","first_published":"2026-11-05T22:16:08.941Z","brands":[],"dns":"resolved","resolved":["104.21.79.229","172.67.149.76"],"resolved_at":"2026-11-05T21:55:28Z","dns_checked_at":"2026-11-05T22:28:51.000Z","dns_since":"2026-11-05T22:28:51.000Z","findings":[{"id":"f7ytoerhelanqwkvku2gb","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T21:46:19.674Z","first_published":"2026-11-05T22:16:08.941Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=secureservice-network.com"},{"hostname":"seekreward.live","first_observed":"2026-11-05T22:01:08.886Z","first_published":"2026-11-05T22:16:08.941Z","brands":[],"dns":"resolved","resolved":["104.21.87.119","172.67.143.10"],"resolved_at":"2026-11-05T22:10:05Z","dns_checked_at":"2026-11-05T22:28:51.000Z","dns_since":"2026-11-05T22:28:51.000Z","findings":[{"id":"fyxxxhlmnp6evc2leow2r","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T22:01:08.886Z","first_published":"2026-11-05T22:16:08.941Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/seekreward.live/"}],"url":"https://domainspoof.com/live?show=all&q=seekreward.live"},{"hostname":"shbusinesscenter.info","first_observed":"2026-11-05T21:06:01.385Z","first_published":"2026-11-05T22:16:08.941Z","brands":[],"dns":"resolved","resolved":["162.4.84.247"],"resolved_at":"2026-11-05T21:08:23Z","dns_checked_at":"2026-11-05T22:28:51.000Z","dns_since":"2026-11-05T22:28:51.000Z","findings":[{"id":"fah2jswxjb6k5voygjdfu","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T21:06:01.385Z","first_published":"2026-11-05T22:16:08.941Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=shbusinesscenter.info"},{"hostname":"shopcp-dwixpwoq.com","first_observed":"2026-11-05T21:21:16.826Z","first_published":"2026-11-05T22:16:08.941Z","brands":[],"dns":"no_address","resolved":[],"resolved_at":"2026-11-05T21:27:22Z","dns_checked_at":"2026-11-06T14:46:24.000Z","findings":[{"id":"fm23veu2vjfmbi2nay7dt","kind":"reported_domain","summary":"Listed by NPA 165 (finance and insurance)","first_observed":"2026-11-05T21:21:16.826Z","first_published":"2026-11-05T22:16:08.941Z","source":"npa","source_name":"NPA 165","claim":{"category":"finance and insurance"}}],"url":"https://domainspoof.com/live?show=all&q=shopcp-dwixpwoq.com"},{"hostname":"siknport.com","first_observed":"2026-11-05T21:41:00.835Z","first_published":"2026-11-05T22:16:08.941Z","brands":[],"dns":"resolved","resolved":["104.21.16.181","172.67.215.63"],"resolved_at":"2026-11-05T21:41:32Z","dns_checked_at":"2026-11-05T22:28:51.000Z","dns_since":"2026-11-05T22:28:51.000Z","findings":[{"id":"fyvbxek4poopb3caqx5td","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T21:41:00.835Z","first_published":"2026-11-05T22:16:08.941Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/siknport.com/"}],"url":"https://domainspoof.com/live?show=all&q=siknport.com"},{"hostname":"skelvurizont-nl.live","first_observed":"2026-11-05T21:00:52.107Z","first_published":"2026-11-05T22:16:08.941Z","brands":[],"dns":"resolved","resolved":["104.21.88.6","172.67.149.224"],"resolved_at":"2026-11-05T21:05:00Z","dns_checked_at":"2026-11-05T22:28:51.000Z","dns_since":"2026-11-05T22:28:51.000Z","findings":[{"id":"ff5ue54uph4drb2nsrtmd","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T21:00:52.107Z","first_published":"2026-11-05T22:16:08.941Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=skelvurizont-nl.live"},{"hostname":"skelvurizont-ro.live","first_observed":"2026-11-05T21:46:19.674Z","first_published":"2026-11-05T22:16:08.941Z","brands":[],"dns":"resolved","resolved":["104.21.30.243","172.67.174.52"],"resolved_at":"2026-11-06T00:21:28Z","dns_checked_at":"2026-11-05T22:28:51.000Z","dns_since":"2026-11-05T22:28:51.000Z","findings":[{"id":"f4tcjydt6nzxt2ljopotv","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T21:46:19.674Z","first_published":"2026-11-05T22:16:08.941Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=skelvurizont-ro.live"},{"hostname":"skrovendiq-nl.live","first_observed":"2026-11-05T21:11:00.934Z","first_published":"2026-11-05T22:16:08.941Z","brands":[],"dns":"resolved","resolved":["104.21.58.60","172.67.168.9"],"resolved_at":"2026-11-05T21:11:47Z","dns_checked_at":"2026-11-05T22:28:51.000Z","dns_since":"2026-11-05T22:28:51.000Z","findings":[{"id":"fdujks7sek73bsv76zd6y","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T21:11:00.934Z","first_published":"2026-11-05T22:16:08.941Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=skrovendiq-nl.live"},{"hostname":"skrovendiq-pt.live","first_observed":"2026-11-05T21:46:19.674Z","first_published":"2026-11-05T22:16:08.941Z","brands":[],"dns":"resolved","resolved":["104.21.88.99","172.67.176.77"],"resolved_at":"2026-11-05T21:55:28Z","dns_checked_at":"2026-11-05T22:28:51.000Z","dns_since":"2026-11-05T22:28:51.000Z","findings":[{"id":"f4eep3spj4mnzfroathpo","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T21:46:19.674Z","first_published":"2026-11-05T22:16:08.941Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=skrovendiq-pt.live"},{"hostname":"sledzeniepaczki.cfd","first_observed":"2026-11-05T21:19:57.964Z","first_published":"2026-11-05T22:16:08.941Z","brands":[],"dns":"resolved","resolved":["94.154.172.39"],"resolved_at":"2026-11-06T10:18:53Z","dns_checked_at":"2026-11-05T22:28:51.000Z","dns_since":"2026-11-05T22:28:51.000Z","findings":[{"id":"fjzv7nvxy2qgecajhpqei","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T21:19:57.964Z","first_published":"2026-11-05T22:16:08.941Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=sledzeniepaczki.cfd"},{"hostname":"sponsorlugun.online","first_observed":"2026-11-05T21:15:32.020Z","first_published":"2026-11-05T22:16:08.941Z","brands":[],"dns":"resolved","resolved":["64.89.160.46"],"resolved_at":"2026-11-05T21:16:21Z","dns_checked_at":"2026-11-05T22:28:51.000Z","dns_since":"2026-11-05T22:28:51.000Z","findings":[{"id":"f5egdeez474lpcnc5qbpk","kind":"reported_domain","summary":"Listed by USOM","first_observed":"2026-11-05T21:15:32.020Z","first_published":"2026-11-05T22:16:08.941Z","source":"usom","source_name":"USOM"}],"url":"https://domainspoof.com/live?show=all&q=sponsorlugun.online"},{"hostname":"stellar-banking.com","first_observed":"2026-11-05T22:05:41.495Z","first_published":"2026-11-05T22:16:08.941Z","brands":[],"dns":"resolved","resolved":["104.21.4.72","172.67.131.194"],"resolved_at":"2026-11-05T22:06:21Z","dns_checked_at":"2026-11-05T22:28:51.000Z","dns_since":"2026-11-05T22:28:51.000Z","findings":[{"id":"fgihh5nshsq7ozjjopiqw","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T22:05:41.495Z","first_published":"2026-11-05T22:16:08.941Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=stellar-banking.com"},{"hostname":"storage.socialvisor.ru","first_observed":"2026-11-05T21:15:32.020Z","first_published":"2026-11-05T22:16:08.941Z","brands":[],"dns":"resolved","resolved":["91.215.41.91"],"resolved_at":"2026-11-05T21:16:21Z","dns_checked_at":"2026-11-05T22:28:51.000Z","dns_since":"2026-11-05T22:28:51.000Z","findings":[{"id":"fra7dyimcyzecomintat4","kind":"reported_domain","summary":"Under socialvisor.ru, reported by PhishDestroy","first_observed":"2026-11-05T21:15:32.020Z","first_published":"2026-11-05T22:16:08.941Z","source":"phishdestroy","source_name":"PhishDestroy","under":"socialvisor.ru","source_url":"https://phishdestroy.io/domain/socialvisor.ru/"}],"url":"https://domainspoof.com/live?show=all&q=storage.socialvisor.ru"},{"hostname":"streamflow-dapp.site","first_observed":"2026-11-05T21:36:28.021Z","first_published":"2026-11-05T22:16:08.941Z","brands":[],"dns":"resolved","resolved":["104.21.80.194","172.67.153.78"],"resolved_at":"2026-11-05T21:37:15Z","dns_checked_at":"2026-11-05T22:28:51.000Z","dns_since":"2026-11-05T22:28:51.000Z","findings":[{"id":"fxcga4esbpvwhwsro3icd","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T21:36:28.021Z","first_published":"2026-11-05T22:16:08.941Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=streamflow-dapp.site"},{"hostname":"suportechat1.com","first_observed":"2026-11-05T21:41:00.835Z","first_published":"2026-11-05T22:16:08.941Z","brands":[],"dns":"resolved","resolved":["104.21.49.157","172.67.191.48"],"resolved_at":"2026-11-05T21:41:32Z","dns_checked_at":"2026-11-05T22:28:51.000Z","dns_since":"2026-11-05T22:28:51.000Z","findings":[{"id":"fpea2ohugfxdvsjpfuqq6","kind":"reported_domain","summary":"Reported by PhishTank","first_observed":"2026-11-05T21:41:00.835Z","first_published":"2026-11-05T22:16:08.941Z","source":"phishtank","source_name":"PhishTank","source_url":"https://phishtank.org/phish_detail.php?phish_id=9549256"}],"url":"https://domainspoof.com/live?show=all&q=suportechat1.com"},{"hostname":"swagger.socialvisor.ru","first_observed":"2026-11-05T21:21:16.826Z","first_published":"2026-11-05T22:16:08.941Z","brands":[],"dns":"resolved","resolved":["91.215.41.91"],"resolved_at":"2026-11-05T21:27:23Z","dns_checked_at":"2026-11-05T22:28:51.000Z","dns_since":"2026-11-05T22:28:51.000Z","findings":[{"id":"fqxcnzdgcw36idtf7cz3h","kind":"reported_domain","summary":"Under socialvisor.ru, reported by PhishDestroy","first_observed":"2026-11-05T21:21:16.826Z","first_published":"2026-11-05T22:16:08.941Z","source":"phishdestroy","source_name":"PhishDestroy","under":"socialvisor.ru","source_url":"https://phishdestroy.io/domain/socialvisor.ru/"}],"url":"https://domainspoof.com/live?show=all&q=swagger.socialvisor.ru"},{"hostname":"sybjk.com","first_observed":"2026-11-05T21:15:32.020Z","first_published":"2026-11-05T22:16:08.941Z","brands":[],"dns":"resolved","resolved":["104.21.58.74","172.67.157.124"],"resolved_at":"2026-11-05T21:16:21Z","dns_checked_at":"2026-11-05T22:28:51.000Z","dns_since":"2026-11-05T22:28:51.000Z","findings":[{"id":"fbjg456m7e2eopklmpau7","kind":"reported_domain","summary":"Listed by NPA 165 (finance and insurance)","first_observed":"2026-11-05T21:15:32.020Z","first_published":"2026-11-05T22:16:08.941Z","source":"npa","source_name":"NPA 165","claim":{"category":"finance and insurance"}}],"url":"https://domainspoof.com/live?show=all&q=sybjk.com"},{"hostname":"t.clawpower.vip","first_observed":"2026-11-05T21:11:00.934Z","first_published":"2026-11-05T22:16:08.941Z","brands":[],"dns":"resolved","resolved":["8.218.191.99"],"resolved_at":"2026-11-05T21:11:47Z","dns_checked_at":"2026-11-05T22:28:51.000Z","dns_since":"2026-11-05T22:28:51.000Z","findings":[{"id":"f4xxebhvji6mm7pxgzvo6","kind":"reported_domain","summary":"Under clawpower.vip, reported by PhishDestroy","first_observed":"2026-11-05T21:11:00.934Z","first_published":"2026-11-05T22:16:08.941Z","source":"phishdestroy","source_name":"PhishDestroy","under":"clawpower.vip","source_url":"https://phishdestroy.io/domain/clawpower.vip/"}],"url":"https://domainspoof.com/live?show=all&q=t.clawpower.vip"},{"hostname":"terehjkqazm.yoga","first_observed":"2026-11-05T21:11:00.934Z","first_published":"2026-11-05T22:16:08.941Z","brands":[],"dns":"resolved","resolved":["104.21.68.167","172.67.197.58"],"resolved_at":"2026-11-05T21:11:47Z","dns_checked_at":"2026-11-05T22:28:51.000Z","dns_since":"2026-11-05T22:28:51.000Z","findings":[{"id":"frndva7s4dbx367xxnulz","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T21:11:00.934Z","first_published":"2026-11-05T22:16:08.941Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=terehjkqazm.yoga"},{"hostname":"thunes.qwid.io","first_observed":"2026-11-05T21:46:19.674Z","first_published":"2026-11-05T22:16:08.941Z","brands":[],"dns":"resolved","resolved":["104.26.8.67","104.26.9.67","172.67.70.89"],"resolved_at":"2026-11-05T21:55:29Z","dns_checked_at":"2026-11-05T22:28:51.000Z","dns_since":"2026-11-05T22:28:51.000Z","findings":[{"id":"ff5vkxx43hr3uf6kovmdg","kind":"reported_domain","summary":"Under qwid.io, listed by MetaMask","first_observed":"2026-11-05T21:46:19.674Z","first_published":"2026-11-05T22:16:08.941Z","source":"metamask","source_name":"MetaMask","under":"qwid.io"}],"url":"https://domainspoof.com/live?show=all&q=thunes.qwid.io"},{"hostname":"top4top.me","first_observed":"2026-11-05T21:21:16.826Z","first_published":"2026-11-05T22:16:08.941Z","brands":[],"dns":"resolved","resolved":["77.37.83.54","93.127.179.245"],"resolved_at":"2026-11-05T21:27:35Z","dns_checked_at":"2026-11-05T22:28:51.000Z","dns_since":"2026-11-05T22:28:51.000Z","findings":[{"id":"f6e5iuaynfadf4qerakug","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T21:21:16.826Z","first_published":"2026-11-05T22:16:08.941Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/top4top.me/"}],"url":"https://domainspoof.com/live?show=all&q=top4top.me"},{"hostname":"trezor-suit-web.wasmer.app","first_observed":"2026-11-05T21:37:16.146Z","first_published":"2026-11-05T22:16:08.941Z","brands":[{"id":"trezor","name":"Trezor","url":"https://domainspoof.com/brands/trezor"}],"dns":"resolved","resolved":["5.161.23.223"],"resolved_at":"2026-11-05T22:28:51Z","dns_checked_at":"2026-11-05T22:28:51.000Z","dns_since":"2026-11-05T22:28:51.000Z","findings":[{"id":"f7knleoylncajvm7rm4b7","kind":"phishing_infrastructure","summary":"Resolved to 5.161.23.223, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T21:37:16.146Z","first_published":"2026-11-05T22:16:08.941Z","address":"5.161.23.223","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/trezor"},{"hostname":"twilight-routes.com","first_observed":"2026-11-05T21:51:39.899Z","first_published":"2026-11-05T22:16:08.941Z","brands":[],"dns":"resolved","resolved":["104.21.33.23","172.67.140.56"],"resolved_at":"2026-11-05T22:02:47Z","dns_checked_at":"2026-11-05T22:28:51.000Z","dns_since":"2026-11-05T22:28:51.000Z","findings":[{"id":"fzbyxa5sgpwcospcj7rez","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T21:51:39.899Z","first_published":"2026-11-05T22:16:08.941Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=twilight-routes.com"},{"hostname":"typedai.app","first_observed":"2026-11-05T21:41:00.835Z","first_published":"2026-11-05T22:16:08.941Z","brands":[],"dns":"resolved","resolved":["104.21.21.50","172.67.196.107"],"resolved_at":"2026-11-06T01:21:22Z","dns_checked_at":"2026-11-05T22:28:51.000Z","dns_since":"2026-11-05T22:28:51.000Z","findings":[{"id":"f2r2gn77re5tfo6lzvj3o","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T21:41:00.835Z","first_published":"2026-11-05T22:16:08.941Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=typedai.app"},{"hostname":"us-trezrio-strt.pages.dev","first_observed":"2026-11-05T21:31:24.466Z","first_published":"2026-11-05T22:16:08.941Z","brands":[],"dns":"resolved","resolved":["172.66.44.133","172.66.47.123"],"resolved_at":"2026-11-05T21:32:01Z","dns_checked_at":"2026-11-05T22:28:51.000Z","dns_since":"2026-11-05T22:28:51.000Z","findings":[{"id":"fxdedpmewejpcfetnc3h7","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T21:31:24.466Z","first_published":"2026-11-05T22:16:08.941Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=us-trezrio-strt.pages.dev"},{"hostname":"us04webzoominvite.us","first_observed":"2026-11-05T21:26:20.288Z","first_published":"2026-11-05T22:16:08.941Z","brands":[],"dns":"resolved","resolved":["104.21.68.78","172.67.191.243"],"resolved_at":"2026-11-05T21:35:20Z","dns_checked_at":"2026-11-05T22:28:51.000Z","dns_since":"2026-11-05T22:28:51.000Z","findings":[{"id":"fbdjif67wczj54sm5snet","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T21:26:20.288Z","first_published":"2026-11-05T22:16:08.941Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=us04webzoominvite.us"},{"hostname":"utoken.click","first_observed":"2026-11-05T21:15:32.020Z","first_published":"2026-11-05T22:16:08.941Z","brands":[],"dns":"resolved","resolved":["104.21.34.129","172.67.161.66"],"resolved_at":"2026-11-05T21:16:26Z","dns_checked_at":"2026-11-05T22:28:51.000Z","dns_since":"2026-11-05T22:28:51.000Z","findings":[{"id":"fb4dyjayfc4nmyej2kora","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T21:15:32.020Z","first_published":"2026-11-05T22:16:08.941Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=utoken.click"},{"hostname":"uvikelront-de.live","first_observed":"2026-11-05T21:36:28.021Z","first_published":"2026-11-05T22:16:08.941Z","brands":[],"dns":"resolved","resolved":["104.21.90.64","172.67.153.166"],"resolved_at":"2026-11-05T21:37:16Z","dns_checked_at":"2026-11-05T22:28:51.000Z","dns_since":"2026-11-05T22:28:51.000Z","findings":[{"id":"fablssxr4vea4cxswswfp","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T21:36:28.021Z","first_published":"2026-11-05T22:16:08.941Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=uvikelront-de.live"},{"hostname":"vcdsfwe.xyz","first_observed":"2026-11-05T21:26:20.288Z","first_published":"2026-11-05T22:16:08.941Z","brands":[],"dns":"resolved","resolved":["104.21.49.156","172.67.191.47"],"resolved_at":"2026-11-05T21:35:23Z","dns_checked_at":"2026-11-05T22:28:51.000Z","dns_since":"2026-11-05T22:28:51.000Z","findings":[{"id":"fsjl4izpe7ng4kxn25ahe","kind":"reported_domain","summary":"Listed by NPA 165 (e-commerce)","first_observed":"2026-11-05T21:26:20.288Z","first_published":"2026-11-05T22:16:08.941Z","source":"npa","source_name":"NPA 165","claim":{"category":"e-commerce"}}],"url":"https://domainspoof.com/live?show=all&q=vcdsfwe.xyz"},{"hostname":"verditer-volute.shop","first_observed":"2026-11-05T21:19:57.964Z","first_published":"2026-11-05T22:16:08.941Z","brands":[],"dns":"resolved","resolved":["34.8.165.143"],"resolved_at":"2026-11-05T21:20:13Z","dns_checked_at":"2026-11-05T22:28:51.000Z","dns_since":"2026-11-05T22:28:51.000Z","findings":[{"id":"feirayr3si34iirraebsp","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T21:19:57.964Z","first_published":"2026-11-05T22:16:08.941Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=verditer-volute.shop"},{"hostname":"vifcapitoire-nl.live","first_observed":"2026-11-05T21:31:24.466Z","first_published":"2026-11-05T22:16:08.941Z","brands":[],"dns":"resolved","resolved":["104.21.31.48","172.67.174.249"],"resolved_at":"2026-11-05T21:32:01Z","dns_checked_at":"2026-11-05T22:28:51.000Z","dns_since":"2026-11-05T22:28:51.000Z","findings":[{"id":"febvkpbtjarcyfab6hrvx","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T21:31:24.466Z","first_published":"2026-11-05T22:16:08.941Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=vifcapitoire-nl.live"},{"hostname":"vonkrentveld-de.live","first_observed":"2026-11-05T21:21:16.826Z","first_published":"2026-11-05T22:16:08.941Z","brands":[],"dns":"resolved","resolved":["104.21.33.79","172.67.160.4"],"resolved_at":"2026-11-06T00:10:21Z","dns_checked_at":"2026-11-05T22:28:51.000Z","dns_since":"2026-11-05T22:28:51.000Z","findings":[{"id":"fcbccjtdjpzvysyb3prdk","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T21:21:16.826Z","first_published":"2026-11-05T22:16:08.941Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=vonkrentveld-de.live"},{"hostname":"voyanx.com","first_observed":"2026-11-05T22:01:08.886Z","first_published":"2026-11-05T22:16:08.941Z","brands":[],"dns":"resolved","resolved":["35.157.26.135","63.176.8.218"],"resolved_at":"2026-11-05T22:10:07Z","dns_checked_at":"2026-11-05T22:28:51.000Z","dns_since":"2026-11-05T22:28:51.000Z","findings":[{"id":"f4zceft4ubsocgu2ugtcs","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T22:01:08.886Z","first_published":"2026-11-05T22:16:08.941Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/voyanx.com/"}],"url":"https://domainspoof.com/live?show=all&q=voyanx.com"},{"hostname":"webdisk.agilidapp.com","first_observed":"2026-11-05T21:21:16.826Z","first_published":"2026-11-05T22:16:08.941Z","brands":[],"dns":"resolved","resolved":["192.250.227.186"],"resolved_at":"2026-11-05T21:27:39Z","dns_checked_at":"2026-11-05T22:28:51.000Z","dns_since":"2026-11-05T22:28:51.000Z","findings":[{"id":"fyicqrnqgmq2dryacswu4","kind":"reported_domain","summary":"Under agilidapp.com, listed by CERT Polska","first_observed":"2026-11-05T21:21:16.826Z","first_published":"2026-11-05T22:16:08.941Z","source":"cert_polska","source_name":"CERT Polska","under":"agilidapp.com"}],"url":"https://domainspoof.com/live?show=all&q=webdisk.agilidapp.com"},{"hostname":"webhook.socialvisor.ru","first_observed":"2026-11-05T21:56:40.477Z","first_published":"2026-11-05T22:16:08.941Z","brands":[],"dns":"resolved","resolved":["91.215.41.91"],"resolved_at":"2026-11-05T21:57:17Z","dns_checked_at":"2026-11-05T22:28:51.000Z","dns_since":"2026-11-05T22:28:51.000Z","findings":[{"id":"fm3vzsvvuwatjbswctowo","kind":"reported_domain","summary":"Under socialvisor.ru, reported by PhishDestroy","first_observed":"2026-11-05T21:56:40.477Z","first_published":"2026-11-05T22:16:08.941Z","source":"phishdestroy","source_name":"PhishDestroy","under":"socialvisor.ru","source_url":"https://phishdestroy.io/domain/socialvisor.ru/"}],"url":"https://domainspoof.com/live?show=all&q=webhook.socialvisor.ru"},{"hostname":"webmail.agilidapp.com","first_observed":"2026-11-05T21:21:16.826Z","first_published":"2026-11-05T22:16:08.941Z","brands":[],"dns":"resolved","resolved":["192.250.227.186"],"resolved_at":"2026-11-05T21:27:39Z","dns_checked_at":"2026-11-05T22:28:51.000Z","dns_since":"2026-11-05T22:28:51.000Z","findings":[{"id":"fivrpwv2uyeyaq2hswy3l","kind":"reported_domain","summary":"Under agilidapp.com, listed by CERT Polska","first_observed":"2026-11-05T21:21:16.826Z","first_published":"2026-11-05T22:16:08.941Z","source":"cert_polska","source_name":"CERT Polska","under":"agilidapp.com"}],"url":"https://domainspoof.com/live?show=all&q=webmail.agilidapp.com"},{"hostname":"webmetandiecoineksnnd.io","first_observed":"2026-11-05T21:21:16.826Z","first_published":"2026-11-05T22:16:08.941Z","brands":[],"dns":"no_address","resolved":[],"resolved_at":"2026-11-05T21:27:39Z","dns_checked_at":"2026-11-06T14:46:24.000Z","findings":[{"id":"fipo6wpib73blc4nvtmkg","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T21:21:16.826Z","first_published":"2026-11-05T22:16:08.941Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=webmetandiecoineksnnd.io"},{"hostname":"whislock.store","first_observed":"2026-11-05T21:26:20.288Z","first_published":"2026-11-05T22:16:08.941Z","brands":[],"dns":"resolved","resolved":["104.21.31.184","172.67.179.38"],"resolved_at":"2026-11-05T21:35:25Z","dns_checked_at":"2026-11-05T22:28:51.000Z","dns_since":"2026-11-05T22:28:51.000Z","findings":[{"id":"fcvsmqdtmeta5l6jzrtq3","kind":"reported_domain","summary":"Listed by USOM","first_observed":"2026-11-05T21:26:20.288Z","first_published":"2026-11-05T22:16:08.941Z","source":"usom","source_name":"USOM"}],"url":"https://domainspoof.com/live?show=all&q=whislock.store"},{"hostname":"winecoterie.com","first_observed":"2026-11-05T21:19:57.964Z","first_published":"2026-11-05T22:16:08.941Z","brands":[],"dns":"resolved","resolved":["104.21.47.18","172.67.143.198","2606:4700:3031::ac43:8fc6","2606:4700:3035::6815:2f12"],"resolved_at":"2026-11-05T21:20:13Z","dns_checked_at":"2026-11-05T22:28:51.000Z","dns_since":"2026-11-05T22:28:51.000Z","findings":[{"id":"fy2dlrbll74xuxtnencri","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T21:19:57.964Z","first_published":"2026-11-05T22:16:08.941Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=winecoterie.com"},{"hostname":"winflow.me","first_observed":"2026-11-05T21:31:24.466Z","first_published":"2026-11-05T22:16:08.941Z","brands":[],"dns":"resolved","resolved":["104.21.66.112","172.67.159.116"],"resolved_at":"2026-11-05T21:32:01Z","dns_checked_at":"2026-11-05T22:28:51.000Z","dns_since":"2026-11-05T22:28:51.000Z","findings":[{"id":"fdadhq5z3p34lolniimnq","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T21:31:24.466Z","first_published":"2026-11-05T22:16:08.941Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/winflow.me/"}],"url":"https://domainspoof.com/live?show=all&q=winflow.me"},{"hostname":"worldlibertyfinancial-unlock.live","first_observed":"2026-11-05T21:11:00.934Z","first_published":"2026-11-05T22:16:08.941Z","brands":[],"dns":"resolved","resolved":["104.21.64.219","172.67.187.230"],"resolved_at":"2026-11-05T21:11:49Z","dns_checked_at":"2026-11-05T22:28:51.000Z","dns_since":"2026-11-05T22:28:51.000Z","findings":[{"id":"fpqovdnoumdf6j4c34yjk","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T21:11:00.934Z","first_published":"2026-11-05T22:16:08.941Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=worldlibertyfinancial-unlock.live"},{"hostname":"wpcef.asia","first_observed":"2026-11-05T21:00:52.107Z","first_published":"2026-11-05T22:16:08.941Z","brands":[],"dns":"resolved","resolved":["104.21.32.12","172.67.182.33"],"resolved_at":"2026-11-05T21:05:00Z","dns_checked_at":"2026-11-05T22:28:51.000Z","dns_since":"2026-11-05T22:28:51.000Z","findings":[{"id":"finse3y2m6xk342nbt6x4","kind":"reported_domain","summary":"Listed by NPA 165 (information services)","first_observed":"2026-11-05T21:00:52.107Z","first_published":"2026-11-05T22:16:08.941Z","source":"npa","source_name":"NPA 165","claim":{"category":"information services"}}],"url":"https://domainspoof.com/live?show=all&q=wpcef.asia"},{"hostname":"wqcmvuod.xlfsipbk.dglooolb.abyivmzxo.hbrcidmq.zkmbyjrs.tczglrpw.gatewaylearning.ezgateway.net","first_observed":"2026-11-05T22:01:08.886Z","first_published":"2026-11-05T22:16:08.941Z","brands":[],"dns":"resolved","resolved":["15.204.116.29"],"resolved_at":"2026-11-05T22:10:08Z","dns_checked_at":"2026-11-05T22:28:51.000Z","dns_since":"2026-11-05T22:28:51.000Z","findings":[{"id":"f4e35dsxdv4dhieigvyls","kind":"reported_domain","summary":"Under ezgateway.net, listed by USOM","first_observed":"2026-11-05T22:01:08.886Z","first_published":"2026-11-05T22:16:08.941Z","source":"usom","source_name":"USOM","under":"ezgateway.net"}],"url":"https://domainspoof.com/live?show=all&q=wqcmvuod.xlfsipbk.dglooolb.abyivmzxo.hbrcidmq.zkmbyjrs.tczglrpw.gatewaylearning.ezgateway.net"},{"hostname":"wqytdieq.zmmhjqva.jfoequlrn.kcmwpdeu.onvgwjec.gecxorwd.tczglrpw.gatewaylearning.ezgateway.net","first_observed":"2026-11-05T22:01:08.886Z","first_published":"2026-11-05T22:16:08.941Z","brands":[],"dns":"resolved","resolved":["15.204.116.29"],"resolved_at":"2026-11-05T22:10:07Z","dns_checked_at":"2026-11-05T22:28:51.000Z","dns_since":"2026-11-05T22:28:51.000Z","findings":[{"id":"fcrep2bvhzilyettd4qfy","kind":"reported_domain","summary":"Under ezgateway.net, listed by USOM","first_observed":"2026-11-05T22:01:08.886Z","first_published":"2026-11-05T22:16:08.941Z","source":"usom","source_name":"USOM","under":"ezgateway.net"}],"url":"https://domainspoof.com/live?show=all&q=wqytdieq.zmmhjqva.jfoequlrn.kcmwpdeu.onvgwjec.gecxorwd.tczglrpw.gatewaylearning.ezgateway.net"},{"hostname":"wrb6pjn1fb6ykrpc.onvgwjec.gecxorwd.tczglrpw.gatewaylearning.ezgateway.net","first_observed":"2026-11-05T22:01:08.886Z","first_published":"2026-11-05T22:16:08.941Z","brands":[],"dns":"resolved","resolved":["15.204.116.29"],"resolved_at":"2026-11-05T22:10:08Z","dns_checked_at":"2026-11-05T22:28:51.000Z","dns_since":"2026-11-05T22:28:51.000Z","findings":[{"id":"fc4qdbpbx2e54sp2bvkla","kind":"reported_domain","summary":"Under ezgateway.net, listed by USOM","first_observed":"2026-11-05T22:01:08.886Z","first_published":"2026-11-05T22:16:08.941Z","source":"usom","source_name":"USOM","under":"ezgateway.net"}],"url":"https://domainspoof.com/live?show=all&q=wrb6pjn1fb6ykrpc.onvgwjec.gecxorwd.tczglrpw.gatewaylearning.ezgateway.net"},{"hostname":"wricnejh.hykfgdax.kldxqguc.elqsmaiy.qikgwrfz.csarxeio.tczglrpw.gatewaylearning.ezgateway.net","first_observed":"2026-11-05T22:01:08.886Z","first_published":"2026-11-05T22:16:08.941Z","brands":[],"dns":"resolved","resolved":["15.204.116.29"],"resolved_at":"2026-11-05T22:10:08Z","dns_checked_at":"2026-11-05T22:28:51.000Z","dns_since":"2026-11-05T22:28:51.000Z","findings":[{"id":"fzcbr277ujhizh5ddgqum","kind":"reported_domain","summary":"Under ezgateway.net, listed by USOM","first_observed":"2026-11-05T22:01:08.886Z","first_published":"2026-11-05T22:16:08.941Z","source":"usom","source_name":"USOM","under":"ezgateway.net"}],"url":"https://domainspoof.com/live?show=all&q=wricnejh.hykfgdax.kldxqguc.elqsmaiy.qikgwrfz.csarxeio.tczglrpw.gatewaylearning.ezgateway.net"},{"hostname":"wriflcovs.qozykmrg.xiwokslb.wviyzmqf.tomjzfci.tczglrpw.www.gatewaylearning.ezgateway.net","first_observed":"2026-11-05T22:01:08.886Z","first_published":"2026-11-05T22:16:08.941Z","brands":[],"dns":"resolved","resolved":["15.204.116.29"],"resolved_at":"2026-11-05T22:10:08Z","dns_checked_at":"2026-11-05T22:28:51.000Z","dns_since":"2026-11-05T22:28:51.000Z","findings":[{"id":"fbzfv7f535asjdi35axj4","kind":"reported_domain","summary":"Under ezgateway.net, listed by USOM","first_observed":"2026-11-05T22:01:08.886Z","first_published":"2026-11-05T22:16:08.941Z","source":"usom","source_name":"USOM","under":"ezgateway.net"}],"url":"https://domainspoof.com/live?show=all&q=wriflcovs.qozykmrg.xiwokslb.wviyzmqf.tomjzfci.tczglrpw.www.gatewaylearning.ezgateway.net"},{"hostname":"wrivhdln.bnjxekgo.ftdawxky.qikgwrfz.csarxeio.tczglrpw.gatewaylearning.ezgateway.net","first_observed":"2026-11-05T22:01:08.886Z","first_published":"2026-11-05T22:16:08.941Z","brands":[],"dns":"resolved","resolved":["15.204.116.29"],"resolved_at":"2026-11-05T22:10:08Z","dns_checked_at":"2026-11-05T22:28:51.000Z","dns_since":"2026-11-05T22:28:51.000Z","findings":[{"id":"fwsgvibxfawlmm5cn44gv","kind":"reported_domain","summary":"Under ezgateway.net, listed by USOM","first_observed":"2026-11-05T22:01:08.886Z","first_published":"2026-11-05T22:16:08.941Z","source":"usom","source_name":"USOM","under":"ezgateway.net"}],"url":"https://domainspoof.com/live?show=all&q=wrivhdln.bnjxekgo.ftdawxky.qikgwrfz.csarxeio.tczglrpw.gatewaylearning.ezgateway.net"},{"hostname":"wrmubzaj.dtnrgbov.jurbzaqfs.uotyckrw.nofbagcj.gecxorwd.tczglrpw.gatewaylearning.ezgateway.net","first_observed":"2026-11-05T22:01:08.886Z","first_published":"2026-11-05T22:16:08.941Z","brands":[],"dns":"resolved","resolved":["15.204.116.29"],"resolved_at":"2026-11-05T22:10:07Z","dns_checked_at":"2026-11-05T22:28:51.000Z","dns_since":"2026-11-05T22:28:51.000Z","findings":[{"id":"f2mduzonbrb6sediywroc","kind":"reported_domain","summary":"Under ezgateway.net, listed by USOM","first_observed":"2026-11-05T22:01:08.886Z","first_published":"2026-11-05T22:16:08.941Z","source":"usom","source_name":"USOM","under":"ezgateway.net"}],"url":"https://domainspoof.com/live?show=all&q=wrmubzaj.dtnrgbov.jurbzaqfs.uotyckrw.nofbagcj.gecxorwd.tczglrpw.gatewaylearning.ezgateway.net"},{"hostname":"ws.glrcastrk.life","first_observed":"2026-11-05T21:31:24.466Z","first_published":"2026-11-05T22:16:08.941Z","brands":[],"dns":"resolved","resolved":["188.166.30.189"],"resolved_at":"2026-11-05T21:32:04Z","dns_checked_at":"2026-11-05T22:28:51.000Z","dns_since":"2026-11-05T22:28:51.000Z","findings":[{"id":"fw3qchubpzvl7ppqgovjg","kind":"reported_domain","summary":"Under glrcastrk.life, listed by MetaMask","first_observed":"2026-11-05T21:31:24.466Z","first_published":"2026-11-05T22:16:08.941Z","source":"metamask","source_name":"MetaMask","under":"glrcastrk.life"}],"url":"https://domainspoof.com/live?show=all&q=ws.glrcastrk.life"},{"hostname":"wthq.cloud","first_observed":"2026-11-05T22:01:08.886Z","first_published":"2026-11-05T22:16:08.941Z","brands":[],"dns":"resolved","resolved":["104.21.51.139","172.67.181.40"],"resolved_at":"2026-11-05T22:10:08Z","dns_checked_at":"2026-11-05T22:28:51.000Z","dns_since":"2026-11-05T22:28:51.000Z","findings":[{"id":"fjfumywzgmld3r2xcxoeu","kind":"reported_domain","summary":"Listed by NPA 165 (e-commerce)","first_observed":"2026-11-05T22:01:08.886Z","first_published":"2026-11-05T22:16:08.941Z","source":"npa","source_name":"NPA 165","claim":{"category":"e-commerce"}}],"url":"https://domainspoof.com/live?show=all&q=wthq.cloud"},{"hostname":"www.agilidapp.com","first_observed":"2026-11-05T21:21:16.826Z","first_published":"2026-11-05T22:16:08.941Z","brands":[],"dns":"resolved","resolved":["192.250.227.186"],"resolved_at":"2026-11-05T21:27:40Z","dns_checked_at":"2026-11-05T22:28:51.000Z","dns_since":"2026-11-05T22:28:51.000Z","findings":[{"id":"fnm27j3ruvssyi7xpw2fc","kind":"reported_domain","summary":"Under agilidapp.com, listed by CERT Polska","first_observed":"2026-11-05T21:21:16.826Z","first_published":"2026-11-05T22:16:08.941Z","source":"cert_polska","source_name":"CERT Polska","under":"agilidapp.com"}],"url":"https://domainspoof.com/live?show=all&q=www.agilidapp.com"},{"hostname":"www.aitradingsignals.net","first_observed":"2026-11-05T21:11:00.934Z","first_published":"2026-11-05T22:16:08.941Z","brands":[],"dns":"resolved","resolved":["185.7.214.147"],"resolved_at":"2026-11-05T21:11:49Z","dns_checked_at":"2026-11-05T22:28:51.000Z","dns_since":"2026-11-05T22:28:51.000Z","findings":[{"id":"fmdyrrgrahqnj73harnjb","kind":"reported_domain","summary":"Under aitradingsignals.net, listed by CERT Polska","first_observed":"2026-11-05T21:11:00.934Z","first_published":"2026-11-05T22:16:08.941Z","source":"cert_polska","source_name":"CERT Polska","under":"aitradingsignals.net"}],"url":"https://domainspoof.com/live?show=all&q=www.aitradingsignals.net"},{"hostname":"www.alpha-aml.com","first_observed":"2026-11-05T21:26:20.288Z","first_published":"2026-11-05T22:16:08.941Z","brands":[],"dns":"resolved","resolved":["104.21.30.139","172.67.172.248"],"resolved_at":"2026-11-05T21:33:21Z","dns_checked_at":"2026-11-05T22:28:51.000Z","dns_since":"2026-11-05T22:28:51.000Z","findings":[{"id":"fefr2rtqferlhjogk3jhk","kind":"reported_domain","summary":"Under alpha-aml.com, reported by PhishDestroy","first_observed":"2026-11-05T21:26:20.288Z","first_published":"2026-11-05T22:16:08.941Z","source":"phishdestroy","source_name":"PhishDestroy","under":"alpha-aml.com","source_url":"https://phishdestroy.io/domain/alpha-aml.com/"}],"url":"https://domainspoof.com/live?show=all&q=www.alpha-aml.com"},{"hostname":"www.apeaap.com.br","first_observed":"2026-11-05T22:01:08.886Z","first_published":"2026-11-05T22:16:08.941Z","brands":[],"dns":"resolved","resolved":["177.104.174.36"],"resolved_at":"2026-11-05T22:10:08Z","dns_checked_at":"2026-11-05T22:28:51.000Z","dns_since":"2026-11-05T22:28:51.000Z","findings":[{"id":"fivuk3r445uzmv7zs7kbv","kind":"reported_domain","summary":"Under apeaap.com.br, reported by PhishDestroy","first_observed":"2026-11-05T22:01:08.886Z","first_published":"2026-11-05T22:16:08.941Z","source":"phishdestroy","source_name":"PhishDestroy","under":"apeaap.com.br","source_url":"https://phishdestroy.io/domain/apeaap.com.br/"}],"url":"https://domainspoof.com/live?show=all&q=www.apeaap.com.br"},{"hostname":"www.apeadvisor.com","first_observed":"2026-11-05T21:11:00.934Z","first_published":"2026-11-05T22:16:08.941Z","brands":[],"dns":"resolved","resolved":["185.7.214.147"],"resolved_at":"2026-11-05T21:11:49Z","dns_checked_at":"2026-11-05T22:28:51.000Z","dns_since":"2026-11-05T22:28:51.000Z","findings":[{"id":"fpwwawyu4ybkqmr5cqghq","kind":"reported_domain","summary":"Under apeadvisor.com, listed by CERT Polska","first_observed":"2026-11-05T21:11:00.934Z","first_published":"2026-11-05T22:16:08.941Z","source":"cert_polska","source_name":"CERT Polska","under":"apeadvisor.com"}],"url":"https://domainspoof.com/live?show=all&q=www.apeadvisor.com"},{"hostname":"www.aragcapitalecto.com","first_observed":"2026-11-05T21:11:00.934Z","first_published":"2026-11-05T22:16:08.941Z","brands":[],"dns":"resolved","resolved":["185.7.214.147"],"resolved_at":"2026-11-05T21:11:49Z","dns_checked_at":"2026-11-05T22:28:51.000Z","dns_since":"2026-11-05T22:28:51.000Z","findings":[{"id":"fplwcf3dv2cyxydwqmza2","kind":"reported_domain","summary":"Under aragcapitalecto.com, listed by CERT Polska","first_observed":"2026-11-05T21:11:00.934Z","first_published":"2026-11-05T22:16:08.941Z","source":"cert_polska","source_name":"CERT Polska","under":"aragcapitalecto.com"}],"url":"https://domainspoof.com/live?show=all&q=www.aragcapitalecto.com"},{"hostname":"www.avoirgence.org","first_observed":"2026-11-05T21:15:32.020Z","first_published":"2026-11-05T22:16:08.941Z","brands":[],"dns":"resolved","resolved":["185.7.214.147"],"resolved_at":"2026-11-05T21:16:26Z","dns_checked_at":"2026-11-05T22:28:51.000Z","dns_since":"2026-11-05T22:28:51.000Z","findings":[{"id":"f6iew5jnzfpdq2ftayqhz","kind":"reported_domain","summary":"Under avoirgence.org, listed by CERT Polska","first_observed":"2026-11-05T21:15:32.020Z","first_published":"2026-11-05T22:16:08.941Z","source":"cert_polska","source_name":"CERT Polska","under":"avoirgence.org"}],"url":"https://domainspoof.com/live?show=all&q=www.avoirgence.org"},{"hostname":"www.azeticzeal.com","first_observed":"2026-11-05T21:11:00.934Z","first_published":"2026-11-05T22:16:08.941Z","brands":[],"dns":"resolved","resolved":["185.7.214.147"],"resolved_at":"2026-11-05T21:11:49Z","dns_checked_at":"2026-11-05T22:28:51.000Z","dns_since":"2026-11-05T22:28:51.000Z","findings":[{"id":"fpcxqnodajaephbgtm7vw","kind":"reported_domain","summary":"Under azeticzeal.com, listed by CERT Polska","first_observed":"2026-11-05T21:11:00.934Z","first_published":"2026-11-05T22:16:08.941Z","source":"cert_polska","source_name":"CERT Polska","under":"azeticzeal.com"}],"url":"https://domainspoof.com/live?show=all&q=www.azeticzeal.com"},{"hostname":"www.bissell-turkiye.com","first_observed":"2026-11-05T21:31:24.466Z","first_published":"2026-11-05T22:16:08.941Z","brands":[],"dns":"resolved","resolved":["196.245.57.133"],"resolved_at":"2026-11-05T21:32:04Z","dns_checked_at":"2026-11-05T22:28:51.000Z","dns_since":"2026-11-05T22:28:51.000Z","findings":[{"id":"fglr27udxo6ft2b7pvaop","kind":"reported_domain","summary":"Under bissell-turkiye.com, listed by USOM","first_observed":"2026-11-05T21:31:24.466Z","first_published":"2026-11-05T22:16:08.941Z","source":"usom","source_name":"USOM","under":"bissell-turkiye.com"}],"url":"https://domainspoof.com/live?show=all&q=www.bissell-turkiye.com"},{"hostname":"www.bitcoin-trader-es.com","first_observed":"2026-11-05T21:15:32.020Z","first_published":"2026-11-05T22:16:08.941Z","brands":[],"dns":"resolved","resolved":["185.7.214.147"],"resolved_at":"2026-11-05T21:16:26Z","dns_checked_at":"2026-11-05T22:28:51.000Z","dns_since":"2026-11-05T22:28:51.000Z","findings":[{"id":"fhidry3jqaqd4u7cigjrf","kind":"reported_domain","summary":"Under bitcoin-trader-es.com, listed by CERT Polska","first_observed":"2026-11-05T21:15:32.020Z","first_published":"2026-11-05T22:16:08.941Z","source":"cert_polska","source_name":"CERT Polska","under":"bitcoin-trader-es.com"}],"url":"https://domainspoof.com/live?show=all&q=www.bitcoin-trader-es.com"},{"hostname":"www.boost.acctplugins.com","first_observed":"2026-11-05T22:01:08.886Z","first_published":"2026-11-05T22:16:08.941Z","brands":[],"dns":"resolved","resolved":["156.232.88.10"],"resolved_at":"2026-11-05T22:10:08Z","dns_checked_at":"2026-11-05T22:28:51.000Z","dns_since":"2026-11-05T22:28:51.000Z","findings":[{"id":"fhn3analp7e3bdlvpnih6","kind":"reported_domain","summary":"Under acctplugins.com, reported by PhishDestroy","first_observed":"2026-11-05T22:01:08.886Z","first_published":"2026-11-05T22:16:08.941Z","source":"phishdestroy","source_name":"PhishDestroy","under":"acctplugins.com","source_url":"https://phishdestroy.io/domain/acctplugins.com/"}],"url":"https://domainspoof.com/live?show=all&q=www.boost.acctplugins.com"},{"hostname":"www.bourseline-ai.com","first_observed":"2026-11-05T21:15:32.020Z","first_published":"2026-11-05T22:16:08.941Z","brands":[],"dns":"resolved","resolved":["185.7.214.147"],"resolved_at":"2026-11-05T21:16:26Z","dns_checked_at":"2026-11-05T22:28:51.000Z","dns_since":"2026-11-05T22:28:51.000Z","findings":[{"id":"fgiqdo7lv6xq3onk7tjgc","kind":"reported_domain","summary":"Under bourseline-ai.com, listed by CERT Polska","first_observed":"2026-11-05T21:15:32.020Z","first_published":"2026-11-05T22:16:08.941Z","source":"cert_polska","source_name":"CERT Polska","under":"bourseline-ai.com"}],"url":"https://domainspoof.com/live?show=all&q=www.bourseline-ai.com"},{"hostname":"www.btcaurallonv15.org","first_observed":"2026-11-05T21:21:16.826Z","first_published":"2026-11-05T22:16:08.941Z","brands":[],"dns":"resolved","resolved":["185.7.214.147"],"resolved_at":"2026-11-05T21:27:40Z","dns_checked_at":"2026-11-05T22:28:51.000Z","dns_since":"2026-11-05T22:28:51.000Z","findings":[{"id":"feelby6sakedscfummuoq","kind":"reported_domain","summary":"Under btcaurallonv15.org, listed by CERT Polska","first_observed":"2026-11-05T21:21:16.826Z","first_published":"2026-11-05T22:16:08.941Z","source":"cert_polska","source_name":"CERT Polska","under":"btcaurallonv15.org"}],"url":"https://domainspoof.com/live?show=all&q=www.btcaurallonv15.org"},{"hostname":"www.builderdeckexpo.com","first_observed":"2026-11-05T21:06:01.385Z","first_published":"2026-11-05T22:16:08.941Z","brands":[],"dns":"resolved","resolved":["92.205.172.242"],"resolved_at":"2026-11-05T21:08:23Z","dns_checked_at":"2026-11-05T22:28:51.000Z","dns_since":"2026-11-05T22:28:51.000Z","findings":[{"id":"ff73fscyczm4tcr5hydf5","kind":"reported_domain","summary":"Under builderdeckexpo.com, reported by PhishDestroy","first_observed":"2026-11-05T21:06:01.385Z","first_published":"2026-11-05T22:16:08.941Z","source":"phishdestroy","source_name":"PhishDestroy","under":"builderdeckexpo.com","source_url":"https://phishdestroy.io/domain/builderdeckexpo.com/"}],"url":"https://domainspoof.com/live?show=all&q=www.builderdeckexpo.com"},{"hostname":"www.bvbqq.ezgateway.net","first_observed":"2026-11-05T22:05:41.495Z","first_published":"2026-11-05T22:16:08.941Z","brands":[],"dns":"resolved","resolved":["172.67.165.35"],"resolved_at":"2026-11-06T03:21:20Z","dns_checked_at":"2026-11-05T22:28:51.000Z","dns_since":"2026-11-05T22:28:51.000Z","findings":[{"id":"fyqxjhva4n3q7vxk2mrbm","kind":"reported_domain","summary":"Under ezgateway.net, listed by USOM","first_observed":"2026-11-05T22:05:41.495Z","first_published":"2026-11-05T22:16:08.941Z","source":"usom","source_name":"USOM","under":"ezgateway.net"}],"url":"https://domainspoof.com/live?show=all&q=www.bvbqq.ezgateway.net"},{"hostname":"www.chalet-lumiere-alpine.com","first_observed":"2026-11-05T21:26:20.288Z","first_published":"2026-11-05T22:16:08.941Z","brands":[],"dns":"resolved","resolved":["35.204.150.5"],"resolved_at":"2026-11-05T21:33:45Z","dns_checked_at":"2026-11-05T22:28:51.000Z","dns_since":"2026-11-05T22:28:51.000Z","findings":[{"id":"fncyrvpx7rljz5yvhc5d2","kind":"reported_domain","summary":"Under chalet-lumiere-alpine.com, listed by MetaMask","first_observed":"2026-11-05T21:26:20.288Z","first_published":"2026-11-05T22:16:08.941Z","source":"metamask","source_name":"MetaMask","under":"chalet-lumiere-alpine.com"}],"url":"https://domainspoof.com/live?show=all&q=www.chalet-lumiere-alpine.com"},{"hostname":"www.cortexalite.net","first_observed":"2026-11-05T21:15:32.020Z","first_published":"2026-11-05T22:16:08.941Z","brands":[],"dns":"resolved","resolved":["185.7.214.147"],"resolved_at":"2026-11-05T21:16:26Z","dns_checked_at":"2026-11-05T22:28:51.000Z","dns_since":"2026-11-05T22:28:51.000Z","findings":[{"id":"fo2fex6pwrjvpyotf7lkh","kind":"reported_domain","summary":"Under cortexalite.net, listed by CERT Polska","first_observed":"2026-11-05T21:15:32.020Z","first_published":"2026-11-05T22:16:08.941Z","source":"cert_polska","source_name":"CERT Polska","under":"cortexalite.net"}],"url":"https://domainspoof.com/live?show=all&q=www.cortexalite.net"},{"hostname":"www.cortexalite.org","first_observed":"2026-11-05T21:15:32.020Z","first_published":"2026-11-05T22:16:08.941Z","brands":[],"dns":"resolved","resolved":["185.7.214.147"],"resolved_at":"2026-11-05T21:16:26Z","dns_checked_at":"2026-11-05T22:28:51.000Z","dns_since":"2026-11-05T22:28:51.000Z","findings":[{"id":"fyl2aibj3bqiihumqfopw","kind":"reported_domain","summary":"Under cortexalite.org, listed by CERT Polska","first_observed":"2026-11-05T21:15:32.020Z","first_published":"2026-11-05T22:16:08.941Z","source":"cert_polska","source_name":"CERT Polska","under":"cortexalite.org"}],"url":"https://domainspoof.com/live?show=all&q=www.cortexalite.org"},{"hostname":"www.criptotranquilo.net","first_observed":"2026-11-05T21:15:32.020Z","first_published":"2026-11-05T22:16:08.941Z","brands":[],"dns":"resolved","resolved":["185.7.214.147"],"resolved_at":"2026-11-05T21:16:26Z","dns_checked_at":"2026-11-05T22:28:51.000Z","dns_since":"2026-11-05T22:28:51.000Z","findings":[{"id":"fjxweb2wpraiavsnug2ca","kind":"reported_domain","summary":"Under criptotranquilo.net, listed by CERT Polska","first_observed":"2026-11-05T21:15:32.020Z","first_published":"2026-11-05T22:16:08.941Z","source":"cert_polska","source_name":"CERT Polska","under":"criptotranquilo.net"}],"url":"https://domainspoof.com/live?show=all&q=www.criptotranquilo.net"},{"hostname":"www.dexscreenerrank.com","first_observed":"2026-11-05T21:00:52.107Z","first_published":"2026-11-05T22:16:08.941Z","brands":[],"dns":"resolved","resolved":["64.111.93.27"],"resolved_at":"2026-11-05T21:05:00Z","dns_checked_at":"2026-11-05T22:28:51.000Z","dns_since":"2026-11-05T22:28:51.000Z","findings":[{"id":"f4mbkgktrjchhpvjya7f6","kind":"reported_domain","summary":"Under dexscreenerrank.com, listed by MetaMask","first_observed":"2026-11-05T21:00:52.107Z","first_published":"2026-11-05T22:16:08.941Z","source":"metamask","source_name":"MetaMask","under":"dexscreenerrank.com"}],"url":"https://domainspoof.com/live?show=all&q=www.dexscreenerrank.com"},{"hostname":"www.dexscreenervoteapp.com","first_observed":"2026-11-05T21:00:52.107Z","first_published":"2026-11-05T22:16:08.941Z","brands":[],"dns":"resolved","resolved":["64.111.93.27"],"resolved_at":"2026-11-05T21:05:00Z","dns_checked_at":"2026-11-05T22:28:51.000Z","dns_since":"2026-11-05T22:28:51.000Z","findings":[{"id":"f2ncyanjpfobxxmva5ghy","kind":"reported_domain","summary":"Under dexscreenervoteapp.com, listed by MetaMask","first_observed":"2026-11-05T21:00:52.107Z","first_published":"2026-11-05T22:16:08.941Z","source":"metamask","source_name":"MetaMask","under":"dexscreenervoteapp.com"}],"url":"https://domainspoof.com/live?show=all&q=www.dexscreenervoteapp.com"},{"hostname":"www.dexscreenervoteclub.com","first_observed":"2026-11-05T21:00:52.107Z","first_published":"2026-11-05T22:16:08.941Z","brands":[],"dns":"resolved","resolved":["64.111.93.27"],"resolved_at":"2026-11-05T21:05:00Z","dns_checked_at":"2026-11-05T22:28:51.000Z","dns_since":"2026-11-05T22:28:51.000Z","findings":[{"id":"fweyq6nqrhkw3fpcyfy6w","kind":"reported_domain","summary":"Under dexscreenervoteclub.com, listed by MetaMask","first_observed":"2026-11-05T21:00:52.107Z","first_published":"2026-11-05T22:16:08.941Z","source":"metamask","source_name":"MetaMask","under":"dexscreenervoteclub.com"}],"url":"https://domainspoof.com/live?show=all&q=www.dexscreenervoteclub.com"},{"hostname":"www.dexscreenervotehub.com","first_observed":"2026-11-05T21:06:01.385Z","first_published":"2026-11-05T22:16:08.941Z","brands":[],"dns":"resolved","resolved":["64.111.93.27"],"resolved_at":"2026-11-05T21:08:23Z","dns_checked_at":"2026-11-05T22:28:51.000Z","dns_since":"2026-11-05T22:28:51.000Z","findings":[{"id":"fwh2ajluvcdaboq5dc2yt","kind":"reported_domain","summary":"Under dexscreenervotehub.com, listed by MetaMask","first_observed":"2026-11-05T21:06:01.385Z","first_published":"2026-11-05T22:16:08.941Z","source":"metamask","source_name":"MetaMask","under":"dexscreenervotehub.com"}],"url":"https://domainspoof.com/live?show=all&q=www.dexscreenervotehub.com"},{"hostname":"www.dexscreenervotelive.com","first_observed":"2026-11-05T21:06:01.385Z","first_published":"2026-11-05T22:16:08.941Z","brands":[],"dns":"resolved","resolved":["64.111.93.27"],"resolved_at":"2026-11-05T21:08:23Z","dns_checked_at":"2026-11-05T22:28:51.000Z","dns_since":"2026-11-05T22:28:51.000Z","findings":[{"id":"f35cjljlixhp7ct2w4ejr","kind":"reported_domain","summary":"Under dexscreenervotelive.com, listed by MetaMask","first_observed":"2026-11-05T21:06:01.385Z","first_published":"2026-11-05T22:16:08.941Z","source":"metamask","source_name":"MetaMask","under":"dexscreenervotelive.com"}],"url":"https://domainspoof.com/live?show=all&q=www.dexscreenervotelive.com"},{"hostname":"www.dexscreenervotepro.com","first_observed":"2026-11-05T21:06:01.385Z","first_published":"2026-11-05T22:16:08.941Z","brands":[],"dns":"resolved","resolved":["64.111.93.27"],"resolved_at":"2026-11-05T21:08:23Z","dns_checked_at":"2026-11-05T22:28:51.000Z","dns_since":"2026-11-05T22:28:51.000Z","findings":[{"id":"fszbilpehg6kcnc5hwigo","kind":"reported_domain","summary":"Under dexscreenervotepro.com, listed by MetaMask","first_observed":"2026-11-05T21:06:01.385Z","first_published":"2026-11-05T22:16:08.941Z","source":"metamask","source_name":"MetaMask","under":"dexscreenervotepro.com"}],"url":"https://domainspoof.com/live?show=all&q=www.dexscreenervotepro.com"},{"hostname":"www.duvescaia.net","first_observed":"2026-11-05T21:21:16.826Z","first_published":"2026-11-05T22:16:08.941Z","brands":[],"dns":"resolved","resolved":["185.7.214.147"],"resolved_at":"2026-11-05T21:27:41Z","dns_checked_at":"2026-11-05T22:28:51.000Z","dns_since":"2026-11-05T22:28:51.000Z","findings":[{"id":"fip6su5h7jwnqwsnib2t4","kind":"reported_domain","summary":"Under duvescaia.net, listed by CERT Polska","first_observed":"2026-11-05T21:21:16.826Z","first_published":"2026-11-05T22:16:08.941Z","source":"cert_polska","source_name":"CERT Polska","under":"duvescaia.net"}],"url":"https://domainspoof.com/live?show=all&q=www.duvescaia.net"},{"hostname":"www.elastic.zenavlico.cyou","first_observed":"2026-11-05T21:56:40.477Z","first_published":"2026-11-05T22:16:08.941Z","brands":[],"dns":"resolved","resolved":["95.85.244.13"],"resolved_at":"2026-11-05T21:57:17Z","dns_checked_at":"2026-11-05T22:28:51.000Z","dns_since":"2026-11-05T22:28:51.000Z","findings":[{"id":"fhsn4pj4jek7borup7wek","kind":"reported_domain","summary":"Under zenavlico.cyou, listed by CERT Polska","first_observed":"2026-11-05T21:56:40.477Z","first_published":"2026-11-05T22:16:08.941Z","source":"cert_polska","source_name":"CERT Polska","under":"zenavlico.cyou"}],"url":"https://domainspoof.com/live?show=all&q=www.elastic.zenavlico.cyou"},{"hostname":"www.eqripsorix-ai.net","first_observed":"2026-11-05T21:21:16.826Z","first_published":"2026-11-05T22:16:08.941Z","brands":[],"dns":"resolved","resolved":["185.7.214.147"],"resolved_at":"2026-11-05T21:27:41Z","dns_checked_at":"2026-11-05T22:28:51.000Z","dns_since":"2026-11-05T22:28:51.000Z","findings":[{"id":"fzfh66366kxnw2er6y53n","kind":"reported_domain","summary":"Under eqripsorix-ai.net, listed by CERT Polska","first_observed":"2026-11-05T21:21:16.826Z","first_published":"2026-11-05T22:16:08.941Z","source":"cert_polska","source_name":"CERT Polska","under":"eqripsorix-ai.net"}],"url":"https://domainspoof.com/live?show=all&q=www.eqripsorix-ai.net"},{"hostname":"www.essorprime-ai.com","first_observed":"2026-11-05T21:21:16.826Z","first_published":"2026-11-05T22:16:08.941Z","brands":[],"dns":"resolved","resolved":["185.7.214.147"],"resolved_at":"2026-11-05T21:27:41Z","dns_checked_at":"2026-11-05T22:28:51.000Z","dns_since":"2026-11-05T22:28:51.000Z","findings":[{"id":"fqj4d3bcusi7wfepelim3","kind":"reported_domain","summary":"Under essorprime-ai.com, listed by CERT Polska","first_observed":"2026-11-05T21:21:16.826Z","first_published":"2026-11-05T22:16:08.941Z","source":"cert_polska","source_name":"CERT Polska","under":"essorprime-ai.com"}],"url":"https://domainspoof.com/live?show=all&q=www.essorprime-ai.com"},{"hostname":"www.explatform.org","first_observed":"2026-11-05T21:21:16.826Z","first_published":"2026-11-05T22:16:08.941Z","brands":[],"dns":"resolved","resolved":["185.7.214.147"],"resolved_at":"2026-11-05T21:27:41Z","dns_checked_at":"2026-11-05T22:28:51.000Z","dns_since":"2026-11-05T22:28:51.000Z","findings":[{"id":"fj37n5r7pnxu42obpjr7u","kind":"reported_domain","summary":"Under explatform.org, listed by CERT Polska","first_observed":"2026-11-05T21:21:16.826Z","first_published":"2026-11-05T22:16:08.941Z","source":"cert_polska","source_name":"CERT Polska","under":"explatform.org"}],"url":"https://domainspoof.com/live?show=all&q=www.explatform.org"},{"hostname":"www.festgeldaktuell.net","first_observed":"2026-11-05T21:21:16.826Z","first_published":"2026-11-05T22:16:08.941Z","brands":[],"dns":"resolved","resolved":["185.7.214.147"],"resolved_at":"2026-11-05T21:27:41Z","dns_checked_at":"2026-11-05T22:28:51.000Z","dns_since":"2026-11-05T22:28:51.000Z","findings":[{"id":"f3iiohdgjbnsgl3sjmhnx","kind":"reported_domain","summary":"Under festgeldaktuell.net, listed by CERT Polska","first_observed":"2026-11-05T21:21:16.826Z","first_published":"2026-11-05T22:16:08.941Z","source":"cert_polska","source_name":"CERT Polska","under":"festgeldaktuell.net"}],"url":"https://domainspoof.com/live?show=all&q=www.festgeldaktuell.net"},{"hostname":"www.geldroncorex.com","first_observed":"2026-11-05T21:21:16.826Z","first_published":"2026-11-05T22:16:08.941Z","brands":[],"dns":"resolved","resolved":["185.7.214.147"],"resolved_at":"2026-11-05T21:27:42Z","dns_checked_at":"2026-11-05T22:28:51.000Z","dns_since":"2026-11-05T22:28:51.000Z","findings":[{"id":"fzjeuypgsp43mys42tbps","kind":"reported_domain","summary":"Under geldroncorex.com, listed by CERT Polska","first_observed":"2026-11-05T21:21:16.826Z","first_published":"2026-11-05T22:16:08.941Z","source":"cert_polska","source_name":"CERT Polska","under":"geldroncorex.com"}],"url":"https://domainspoof.com/live?show=all&q=www.geldroncorex.com"},{"hostname":"www.hayavara.net","first_observed":"2026-11-05T21:26:20.288Z","first_published":"2026-11-05T22:16:08.941Z","brands":[],"dns":"resolved","resolved":["185.7.214.147"],"resolved_at":"2026-11-05T21:35:25Z","dns_checked_at":"2026-11-05T22:28:51.000Z","dns_since":"2026-11-05T22:28:51.000Z","findings":[{"id":"fe4cgobdwmgboa2qpzsdo","kind":"reported_domain","summary":"Under hayavara.net, listed by CERT Polska","first_observed":"2026-11-05T21:26:20.288Z","first_published":"2026-11-05T22:16:08.941Z","source":"cert_polska","source_name":"CERT Polska","under":"hayavara.net"}],"url":"https://domainspoof.com/live?show=all&q=www.hayavara.net"},{"hostname":"www.https-stashpatrick.gl","first_observed":"2026-11-05T21:56:40.477Z","first_published":"2026-11-05T22:16:08.941Z","brands":[],"dns":"resolved","resolved":["104.21.69.160","172.67.210.89"],"resolved_at":"2026-11-05T21:57:17Z","dns_checked_at":"2026-11-05T22:28:51.000Z","dns_since":"2026-11-05T22:28:51.000Z","findings":[{"id":"fw46exobqk2hdy6qgfebh","kind":"reported_domain","summary":"Under https-stashpatrick.gl, reported by PhishDestroy","first_observed":"2026-11-05T21:56:40.477Z","first_published":"2026-11-05T22:16:08.941Z","source":"phishdestroy","source_name":"PhishDestroy","under":"https-stashpatrick.gl","source_url":"https://phishdestroy.io/domain/https-stashpatrick.gl/"}],"url":"https://domainspoof.com/live?show=all&q=www.https-stashpatrick.gl"},{"hostname":"www.impulsoaicapital.com","first_observed":"2026-11-05T21:26:20.288Z","first_published":"2026-11-05T22:16:08.941Z","brands":[],"dns":"resolved","resolved":["185.7.214.147"],"resolved_at":"2026-11-05T21:35:26Z","dns_checked_at":"2026-11-05T22:28:51.000Z","dns_since":"2026-11-05T22:28:51.000Z","findings":[{"id":"f54gtmfr2flvzvoh4wtzo","kind":"reported_domain","summary":"Under impulsoaicapital.com, listed by CERT Polska","first_observed":"2026-11-05T21:26:20.288Z","first_published":"2026-11-05T22:16:08.941Z","source":"cert_polska","source_name":"CERT Polska","under":"impulsoaicapital.com"}],"url":"https://domainspoof.com/live?show=all&q=www.impulsoaicapital.com"},{"hostname":"www.investoraaicapital.com","first_observed":"2026-11-05T21:26:20.288Z","first_published":"2026-11-05T22:16:08.941Z","brands":[],"dns":"resolved","resolved":["185.7.214.147"],"resolved_at":"2026-11-05T21:35:25Z","dns_checked_at":"2026-11-05T22:28:51.000Z","dns_since":"2026-11-05T22:28:51.000Z","findings":[{"id":"f2en5egkecpx2sog4si6n","kind":"reported_domain","summary":"Under investoraaicapital.com, listed by CERT Polska","first_observed":"2026-11-05T21:26:20.288Z","first_published":"2026-11-05T22:16:08.941Z","source":"cert_polska","source_name":"CERT Polska","under":"investoraaicapital.com"}],"url":"https://domainspoof.com/live?show=all&q=www.investoraaicapital.com"},{"hostname":"www.ironbureau.net","first_observed":"2026-11-05T21:26:20.288Z","first_published":"2026-11-05T22:16:08.941Z","brands":[],"dns":"resolved","resolved":["185.7.214.147"],"resolved_at":"2026-11-05T21:35:25Z","dns_checked_at":"2026-11-05T22:28:51.000Z","dns_since":"2026-11-05T22:28:51.000Z","findings":[{"id":"fie6orw2byyzu3kqk7nyb","kind":"reported_domain","summary":"Under ironbureau.net, listed by CERT Polska","first_observed":"2026-11-05T21:26:20.288Z","first_published":"2026-11-05T22:16:08.941Z","source":"cert_polska","source_name":"CERT Polska","under":"ironbureau.net"}],"url":"https://domainspoof.com/live?show=all&q=www.ironbureau.net"},{"hostname":"www.kweoxithx-ai.net","first_observed":"2026-11-05T21:26:20.288Z","first_published":"2026-11-05T22:16:08.941Z","brands":[],"dns":"resolved","resolved":["185.7.214.147"],"resolved_at":"2026-11-05T21:35:26Z","dns_checked_at":"2026-11-05T22:28:51.000Z","dns_since":"2026-11-05T22:28:51.000Z","findings":[{"id":"f3rzkcraultzpytobifmf","kind":"reported_domain","summary":"Under kweoxithx-ai.net, listed by CERT Polska","first_observed":"2026-11-05T21:26:20.288Z","first_published":"2026-11-05T22:16:08.941Z","source":"cert_polska","source_name":"CERT Polska","under":"kweoxithx-ai.net"}],"url":"https://domainspoof.com/live?show=all&q=www.kweoxithx-ai.net"},{"hostname":"www.mcsdirect.tech","first_observed":"2026-11-05T21:11:00.934Z","first_published":"2026-11-05T22:16:08.941Z","brands":[],"dns":"resolved","resolved":["72.62.191.8","2a02:4780:7:3adf::1"],"resolved_at":"2026-11-05T21:11:49Z","dns_checked_at":"2026-11-05T22:28:51.000Z","dns_since":"2026-11-05T22:28:51.000Z","findings":[{"id":"f44z2ukgk4kal4u3aacsp","kind":"reported_domain","summary":"Under mcsdirect.tech, reported by PhishDestroy","first_observed":"2026-11-05T21:11:00.934Z","first_published":"2026-11-05T22:16:08.941Z","source":"phishdestroy","source_name":"PhishDestroy","under":"mcsdirect.tech","source_url":"https://phishdestroy.io/domain/mcsdirect.tech/"}],"url":"https://domainspoof.com/live?show=all&q=www.mcsdirect.tech"},{"hostname":"www.nacionalniprogram.org","first_observed":"2026-11-05T21:31:24.466Z","first_published":"2026-11-05T22:16:08.941Z","brands":[],"dns":"resolved","resolved":["185.7.214.147"],"resolved_at":"2026-11-05T21:32:04Z","dns_checked_at":"2026-11-05T22:28:51.000Z","dns_since":"2026-11-05T22:28:51.000Z","findings":[{"id":"fu2pa6cep4lgayponkdyq","kind":"reported_domain","summary":"Under nacionalniprogram.org, listed by CERT Polska","first_observed":"2026-11-05T21:31:24.466Z","first_published":"2026-11-05T22:16:08.941Z","source":"cert_polska","source_name":"CERT Polska","under":"nacionalniprogram.org"}],"url":"https://domainspoof.com/live?show=all&q=www.nacionalniprogram.org"},{"hostname":"www.onbijkj.cluster100.hosting.ovh.net.e-trott-ardenne.be","first_observed":"2026-11-05T21:08:23.987Z","first_published":"2026-11-05T22:16:08.941Z","brands":[{"id":"ovhcloud","name":"OVHcloud","url":"https://domainspoof.com/brands/ovhcloud"}],"dns":"resolved","resolved":["5.135.23.164"],"resolved_at":"2026-11-05T22:28:51Z","dns_checked_at":"2026-11-05T22:28:51.000Z","dns_since":"2026-11-05T22:28:51.000Z","findings":[{"id":"fkiezlo5mp7irce6xw6zo","kind":"phishing_infrastructure","summary":"Resolved to 5.135.23.164, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T21:08:23.987Z","first_published":"2026-11-05T22:16:08.941Z","address":"5.135.23.164","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/ovhcloud"},{"hostname":"www.pay.katyautopro.com","first_observed":"2026-11-05T21:11:00.934Z","first_published":"2026-11-05T22:16:08.941Z","brands":[],"dns":"not_found","resolved":[],"resolved_at":"2026-11-05T21:11:49Z","dns_checked_at":"2026-11-06T14:46:24.000Z","findings":[{"id":"fvdwh572pq3p3kz4yljih","kind":"reported_domain","summary":"Under katyautopro.com, reported by PhishDestroy","first_observed":"2026-11-05T21:11:00.934Z","first_published":"2026-11-05T22:16:08.941Z","source":"phishdestroy","source_name":"PhishDestroy","under":"katyautopro.com","source_url":"https://phishdestroy.io/domain/katyautopro.com/"}],"url":"https://domainspoof.com/live?show=all&q=www.pay.katyautopro.com"},{"hostname":"www.phost.com.br.cssi.com.br","first_observed":"2026-11-05T21:21:16.826Z","first_published":"2026-11-05T22:16:08.941Z","brands":[],"dns":"resolved","resolved":["187.110.165.199"],"resolved_at":"2026-11-05T21:27:42Z","dns_checked_at":"2026-11-05T22:28:51.000Z","dns_since":"2026-11-05T22:28:51.000Z","findings":[{"id":"fhknoydcyl66qrovtzpsb","kind":"reported_domain","summary":"Under phost.com.br.cssi.com.br, reported by PhishDestroy","first_observed":"2026-11-05T21:21:16.826Z","first_published":"2026-11-05T22:16:08.941Z","source":"phishdestroy","source_name":"PhishDestroy","under":"phost.com.br.cssi.com.br","source_url":"https://phishdestroy.io/domain/phost.com.br.cssi.com.br/"}],"url":"https://domainspoof.com/live?show=all&q=www.phost.com.br.cssi.com.br"},{"hostname":"www.qhzci.ezgateway.net","first_observed":"2026-11-05T21:46:19.674Z","first_published":"2026-11-05T22:16:08.941Z","brands":[],"dns":"resolved","resolved":["172.67.165.35"],"resolved_at":"2026-11-05T21:55:41Z","dns_checked_at":"2026-11-05T22:28:51.000Z","dns_since":"2026-11-05T22:28:51.000Z","findings":[{"id":"fqjvbuka555ao3kihofa4","kind":"reported_domain","summary":"Under ezgateway.net, listed by USOM","first_observed":"2026-11-05T21:46:19.674Z","first_published":"2026-11-05T22:16:08.941Z","source":"usom","source_name":"USOM","under":"ezgateway.net"}],"url":"https://domainspoof.com/live?show=all&q=www.qhzci.ezgateway.net"},{"hostname":"www.service.zenavlico.cyou","first_observed":"2026-11-05T22:05:41.495Z","first_published":"2026-11-05T22:16:08.941Z","brands":[],"dns":"resolved","resolved":["95.85.244.13"],"resolved_at":"2026-11-05T22:06:23Z","dns_checked_at":"2026-11-05T22:28:51.000Z","dns_since":"2026-11-05T22:28:51.000Z","findings":[{"id":"febxewypgrp7oeltxgrx2","kind":"reported_domain","summary":"Under zenavlico.cyou, listed by CERT Polska","first_observed":"2026-11-05T22:05:41.495Z","first_published":"2026-11-05T22:16:08.941Z","source":"cert_polska","source_name":"CERT Polska","under":"zenavlico.cyou"}],"url":"https://domainspoof.com/live?show=all&q=www.service.zenavlico.cyou"},{"hostname":"www.slboo.ezgateway.net","first_observed":"2026-11-05T21:21:16.826Z","first_published":"2026-11-05T22:16:08.941Z","brands":[],"dns":"resolved","resolved":["172.67.165.35"],"resolved_at":"2026-11-06T01:12:25Z","dns_checked_at":"2026-11-05T22:28:51.000Z","dns_since":"2026-11-05T22:28:51.000Z","findings":[{"id":"fvr3g2tcbmgsdh5f3g3ld","kind":"reported_domain","summary":"Under ezgateway.net, listed by USOM","first_observed":"2026-11-05T21:21:16.826Z","first_published":"2026-11-05T22:16:08.941Z","source":"usom","source_name":"USOM","under":"ezgateway.net"}],"url":"https://domainspoof.com/live?show=all&q=www.slboo.ezgateway.net"},{"hostname":"www.stawkibet-pl.pl","first_observed":"2026-11-05T21:11:00.934Z","first_published":"2026-11-05T22:16:08.941Z","brands":[],"dns":"resolved","resolved":["104.21.10.248","172.67.164.215"],"resolved_at":"2026-11-05T21:11:49Z","dns_checked_at":"2026-11-05T22:28:51.000Z","dns_since":"2026-11-05T22:28:51.000Z","findings":[{"id":"fj3m6abf37e2dv3w64vnn","kind":"reported_domain","summary":"Under stawkibet-pl.pl, reported by PhishDestroy","first_observed":"2026-11-05T21:11:00.934Z","first_published":"2026-11-05T22:16:08.941Z","source":"phishdestroy","source_name":"PhishDestroy","under":"stawkibet-pl.pl","source_url":"https://phishdestroy.io/domain/stawkibet-pl.pl/"}],"url":"https://domainspoof.com/live?show=all&q=www.stawkibet-pl.pl"},{"hostname":"www.top4top.me","first_observed":"2026-11-05T21:21:16.826Z","first_published":"2026-11-05T22:16:08.941Z","brands":[],"dns":"resolved","resolved":["77.37.83.20","91.108.98.149"],"resolved_at":"2026-11-05T21:27:43Z","dns_checked_at":"2026-11-05T22:28:51.000Z","dns_since":"2026-11-05T22:28:51.000Z","findings":[{"id":"fpqsgkxelfkub6gm7ul56","kind":"reported_domain","summary":"Under top4top.me, reported by PhishDestroy","first_observed":"2026-11-05T21:21:16.826Z","first_published":"2026-11-05T22:16:08.941Z","source":"phishdestroy","source_name":"PhishDestroy","under":"top4top.me","source_url":"https://phishdestroy.io/domain/top4top.me/"}],"url":"https://domainspoof.com/live?show=all&q=www.top4top.me"},{"hostname":"x-statusreview.com","first_observed":"2026-11-05T21:11:00.934Z","first_published":"2026-11-05T22:16:08.941Z","brands":[],"dns":"no_address","resolved":[],"resolved_at":"2026-11-05T21:11:49Z","dns_checked_at":"2026-11-06T14:46:24.000Z","findings":[{"id":"fkq6cky3c2fp2b2pp3qgt","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T21:11:00.934Z","first_published":"2026-11-05T22:16:08.941Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=x-statusreview.com"},{"hostname":"xa90b-cointelegraph.com","first_observed":"2026-11-05T21:15:32.020Z","first_published":"2026-11-05T22:16:08.941Z","brands":[{"id":"cointelegraph","name":"Cointelegraph","url":"https://domainspoof.com/brands/cointelegraph"}],"dns":"resolved","resolved":["104.21.79.2","172.67.139.56","2606:4700:3034::ac43:8b38","2606:4700:3035::6815:4f02"],"resolved_at":"2026-11-05T21:16:26Z","dns_checked_at":"2026-11-05T22:28:51.000Z","dns_since":"2026-11-05T22:28:51.000Z","findings":[{"id":"f4fldcnielkybmddifcc5","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T21:15:32.020Z","first_published":"2026-11-05T22:16:08.941Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/xa90b-cointelegraph.com/"}],"url":"https://domainspoof.com/brands/cointelegraph"},{"hostname":"xenqoria.live","first_observed":"2026-11-05T21:06:01.385Z","first_published":"2026-11-05T22:16:08.941Z","brands":[],"dns":"resolved","resolved":["104.21.94.45","172.67.219.160"],"resolved_at":"2026-11-05T21:08:24Z","dns_checked_at":"2026-11-05T22:28:51.000Z","dns_since":"2026-11-05T22:28:51.000Z","findings":[{"id":"fmhvet7aynhsm6avfcqqn","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T21:06:01.385Z","first_published":"2026-11-05T22:16:08.941Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=xenqoria.live"},{"hostname":"xskaif.work","first_observed":"2026-11-05T21:15:32.020Z","first_published":"2026-11-05T22:16:08.941Z","brands":[],"dns":"resolved","resolved":["104.21.24.181","172.67.219.225"],"resolved_at":"2026-11-05T21:16:26Z","dns_checked_at":"2026-11-05T22:28:51.000Z","dns_since":"2026-11-05T22:28:51.000Z","findings":[{"id":"fnlohn2ghi2zipxrzt6sq","kind":"reported_domain","summary":"Listed by NPA 165 (information services)","first_observed":"2026-11-05T21:15:32.020Z","first_published":"2026-11-05T22:16:08.941Z","source":"npa","source_name":"NPA 165","claim":{"category":"information services"}}],"url":"https://domainspoof.com/live?show=all&q=xskaif.work"},{"hostname":"yielldbasis.com","first_observed":"2026-11-05T21:56:40.477Z","first_published":"2026-11-05T22:16:08.941Z","brands":[],"dns":"resolved","resolved":["104.21.56.197","172.67.187.216"],"resolved_at":"2026-11-05T21:57:17Z","dns_checked_at":"2026-11-05T22:28:51.000Z","dns_since":"2026-11-05T22:28:51.000Z","findings":[{"id":"fcsvs6u53qlti7shphsoq","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T21:56:40.477Z","first_published":"2026-11-05T22:16:08.941Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=yielldbasis.com"},{"hostname":"ytydf.com","first_observed":"2026-11-05T22:01:08.886Z","first_published":"2026-11-05T22:16:08.941Z","brands":[],"dns":"resolved","resolved":["104.21.2.77","172.67.128.229"],"resolved_at":"2026-11-05T22:10:08Z","dns_checked_at":"2026-11-05T22:28:51.000Z","dns_since":"2026-11-05T22:28:51.000Z","findings":[{"id":"filka24jf4ry4zu42xbi3","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T22:01:08.886Z","first_published":"2026-11-05T22:16:08.941Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=ytydf.com"},{"hostname":"ziropellet.store","first_observed":"2026-11-05T21:06:01.385Z","first_published":"2026-11-05T22:16:08.941Z","brands":[],"dns":"resolved","resolved":["66.235.200.251"],"resolved_at":"2026-11-06T00:36:28Z","dns_checked_at":"2026-11-05T22:28:51.000Z","dns_since":"2026-11-05T22:28:51.000Z","findings":[{"id":"f6a665awcswx6uvcedhvs","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T21:06:01.385Z","first_published":"2026-11-05T22:16:08.941Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=ziropellet.store"},{"hostname":"zoraptly.com","first_observed":"2026-11-05T21:21:16.826Z","first_published":"2026-11-05T22:16:08.941Z","brands":[],"dns":"resolved","resolved":["104.21.6.78","172.67.134.157"],"resolved_at":"2026-11-05T21:27:45Z","dns_checked_at":"2026-11-05T22:28:51.000Z","dns_since":"2026-11-05T22:28:51.000Z","findings":[{"id":"facrnublz6g6sk4ume24y","kind":"reported_domain","summary":"Listed by USOM","first_observed":"2026-11-05T21:21:16.826Z","first_published":"2026-11-05T22:16:08.941Z","source":"usom","source_name":"USOM"}],"url":"https://domainspoof.com/live?show=all&q=zoraptly.com"},{"hostname":"agoa.it","first_observed":"2026-11-05T21:06:21.000Z","first_published":"2026-11-05T21:06:21.000Z","brands":[{"id":"agoda","name":"Agoda","url":"https://domainspoof.com/brands/agoda"}],"dns":"resolved","resolved":["62.149.128.40"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of agoda.com (a dropped letter), resolved to 62.149.128.40, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T21:06:21.000Z","first_published":"2026-11-05T21:06:21.000Z","of":"agoda.com","spelling":"omission","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"62.149.128.40","flagged_at":"2026-11-05T21:06:21Z"}]}],"url":"https://domainspoof.com/brands/agoda"},{"hostname":"agrenta.com","first_observed":"2026-11-05T21:06:21.000Z","first_published":"2026-11-05T21:06:21.000Z","brands":[{"id":"argenta","name":"Argenta","url":"https://domainspoof.com/brands/argenta"}],"dns":"resolved","resolved":["62.149.128.40"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of argenta.be (two letters swapped), resolved to 62.149.128.40, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T21:06:21.000Z","first_published":"2026-11-05T21:06:21.000Z","of":"argenta.be","spelling":"transposition","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"62.149.128.40","flagged_at":"2026-11-05T21:06:21Z"}]}],"url":"https://domainspoof.com/brands/argenta"},{"hostname":"aruba-pec.com","first_observed":"2026-11-05T21:06:21.000Z","first_published":"2026-11-05T21:06:21.000Z","brands":[{"id":"aruba","name":"Aruba","url":"https://domainspoof.com/brands/aruba"}],"dns":"resolved","resolved":["62.149.128.40"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of arubapec.it (an added hyphen), resolved to 62.149.128.40, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T21:06:21.000Z","first_published":"2026-11-05T21:06:21.000Z","of":"arubapec.it","spelling":"hyphen","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"62.149.128.40","flagged_at":"2026-11-05T21:06:21Z"}]}],"url":"https://domainspoof.com/brands/aruba"},{"hostname":"aruba-pec.net","first_observed":"2026-11-05T21:06:21.000Z","first_published":"2026-11-05T21:06:21.000Z","brands":[{"id":"aruba","name":"Aruba","url":"https://domainspoof.com/brands/aruba"}],"dns":"resolved","resolved":["62.149.128.40"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of arubapec.it (an added hyphen), resolved to 62.149.128.40, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T21:06:21.000Z","first_published":"2026-11-05T21:06:21.000Z","of":"arubapec.it","spelling":"hyphen","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"62.149.128.40","flagged_at":"2026-11-05T21:06:21Z"}]}],"url":"https://domainspoof.com/brands/aruba"},{"hostname":"aruba.net","first_observed":"2026-11-05T21:06:21.000Z","first_published":"2026-11-05T21:06:21.000Z","brands":[{"id":"aruba","name":"Aruba","url":"https://domainspoof.com/brands/aruba"}],"dns":"resolved","resolved":["62.149.128.40"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of aruba.it (same name, other ending), resolved to 62.149.128.40, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T21:06:21.000Z","first_published":"2026-11-05T21:06:21.000Z","of":"aruba.it","spelling":"tld","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"62.149.128.40","flagged_at":"2026-11-05T21:06:21Z"}]}],"url":"https://domainspoof.com/brands/aruba"},{"hostname":"arubapec.app","first_observed":"2026-11-05T21:06:21.000Z","first_published":"2026-11-05T21:06:21.000Z","brands":[{"id":"aruba","name":"Aruba","url":"https://domainspoof.com/brands/aruba"}],"dns":"resolved","resolved":["62.149.128.40"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of arubapec.it (same name, other ending), resolved to 62.149.128.40, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T21:06:21.000Z","first_published":"2026-11-05T21:06:21.000Z","of":"arubapec.it","spelling":"tld","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"62.149.128.40","flagged_at":"2026-11-05T21:06:21Z"}]}],"url":"https://domainspoof.com/brands/aruba"},{"hostname":"arubapec.co.uk","first_observed":"2026-11-05T21:06:21.000Z","first_published":"2026-11-05T21:06:21.000Z","brands":[{"id":"aruba","name":"Aruba","url":"https://domainspoof.com/brands/aruba"}],"dns":"resolved","resolved":["62.149.128.40"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of arubapec.it (same name, other ending), resolved to 62.149.128.40, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T21:06:21.000Z","first_published":"2026-11-05T21:06:21.000Z","of":"arubapec.it","spelling":"tld","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"62.149.128.40","flagged_at":"2026-11-05T21:06:21Z"}]}],"url":"https://domainspoof.com/brands/aruba"},{"hostname":"subwaysurfers.co","first_observed":"2026-11-05T21:06:21.000Z","first_published":"2026-11-05T21:06:21.000Z","brands":[{"id":"subway-surfers","name":"Subway Surfers","url":"https://domainspoof.com/brands/subway-surfers"}],"dns":"resolved","resolved":["77.247.179.85"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of subwaysurfers.com (same name, other ending), resolved to 77.247.179.85, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T21:06:21.000Z","first_published":"2026-11-05T21:06:21.000Z","of":"subwaysurfers.com","spelling":"tld","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"77.247.179.85","flagged_at":"2026-11-05T21:06:21Z"}]}],"url":"https://domainspoof.com/brands/subway-surfers"},{"hostname":"subwaysurfers.org","first_observed":"2026-11-05T21:06:21.000Z","first_published":"2026-11-05T21:06:21.000Z","brands":[{"id":"subway-surfers","name":"Subway Surfers","url":"https://domainspoof.com/brands/subway-surfers"}],"dns":"resolved","resolved":["192.157.56.140"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of subwaysurfers.com (same name, other ending), resolved to 192.157.56.140, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T21:06:21.000Z","first_published":"2026-11-05T21:06:21.000Z","of":"subwaysurfers.com","spelling":"tld","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"192.157.56.140","flagged_at":"2026-11-05T21:06:21Z"}]}],"url":"https://domainspoof.com/brands/subway-surfers"},{"hostname":"sunpsss.com","first_observed":"2026-11-05T21:06:21.000Z","first_published":"2026-11-05T21:06:21.000Z","brands":[{"id":"sunpass","name":"SunPass","url":"https://domainspoof.com/brands/sunpass"}],"dns":"resolved","resolved":["213.227.156.75"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of sunpass.com (a letter from a neighbouring key), resolved to 213.227.156.75, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T21:06:21.000Z","first_published":"2026-11-05T21:06:21.000Z","of":"sunpass.com","spelling":"adjacent_key","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"213.227.156.75","flagged_at":"2026-11-05T21:06:21Z"}]}],"url":"https://domainspoof.com/brands/sunpass"},{"hostname":"supercll.com","first_observed":"2026-11-05T21:06:21.000Z","first_published":"2026-11-05T21:06:21.000Z","brands":[{"id":"supercell","name":"Supercell","url":"https://domainspoof.com/brands/supercell"}],"dns":"resolved","resolved":["216.245.213.78"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of supercell.com (a dropped letter), resolved to 216.245.213.78, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T21:06:21.000Z","first_published":"2026-11-05T21:06:21.000Z","of":"supercell.com","spelling":"omission","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"216.245.213.78","flagged_at":"2026-11-05T21:06:21Z"}]}],"url":"https://domainspoof.com/brands/supercell"},{"hostname":"t-mobbile.com","first_observed":"2026-11-05T21:06:21.000Z","first_published":"2026-11-05T21:06:21.000Z","brands":[{"id":"t-mobile","name":"T-Mobile","url":"https://domainspoof.com/brands/t-mobile"}],"dns":"resolved","resolved":["69.162.80.51"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of t-mobile.com (a doubled letter), resolved to 69.162.80.51, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T21:06:21.000Z","first_published":"2026-11-05T21:06:21.000Z","of":"t-mobile.com","spelling":"repetition","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"69.162.80.51","flagged_at":"2026-11-05T21:06:21Z"}]}],"url":"https://domainspoof.com/brands/t-mobile"},{"hostname":"taccobell.com","first_observed":"2026-11-05T21:06:21.000Z","first_published":"2026-11-05T21:06:21.000Z","brands":[{"id":"taco-bell","name":"Taco Bell","url":"https://domainspoof.com/brands/taco-bell"}],"dns":"resolved","resolved":["77.247.179.89"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of tacobell.com (a doubled letter), resolved to 77.247.179.89, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T21:06:21.000Z","first_published":"2026-11-05T21:06:21.000Z","of":"tacobell.com","spelling":"repetition","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"77.247.179.89","flagged_at":"2026-11-05T21:06:21Z"}]}],"url":"https://domainspoof.com/brands/taco-bell"},{"hostname":"tacobel.com","first_observed":"2026-11-05T21:06:21.000Z","first_published":"2026-11-05T21:06:21.000Z","brands":[{"id":"taco-bell","name":"Taco Bell","url":"https://domainspoof.com/brands/taco-bell"}],"dns":"resolved","resolved":["199.193.114.102"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of tacobell.com (a dropped letter), resolved to 199.193.114.102, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T21:06:21.000Z","first_published":"2026-11-05T21:06:21.000Z","of":"tacobell.com","spelling":"omission","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"199.193.114.102","flagged_at":"2026-11-05T21:06:21Z"}]}],"url":"https://domainspoof.com/brands/taco-bell"},{"hostname":"talkralk.co.uk","first_observed":"2026-11-05T21:06:21.000Z","first_published":"2026-11-05T21:06:21.000Z","brands":[{"id":"talktalk","name":"TalkTalk","url":"https://domainspoof.com/brands/talktalk"}],"dns":"resolved","resolved":["77.247.182.248"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of talktalk.co.uk (a letter from a neighbouring key), resolved to 77.247.182.248, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T21:06:21.000Z","first_published":"2026-11-05T21:06:21.000Z","of":"talktalk.co.uk","spelling":"adjacent_key","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"77.247.182.248","flagged_at":"2026-11-05T21:06:21Z"}]}],"url":"https://domainspoof.com/brands/talktalk"},{"hostname":"talktalj.co.uk","first_observed":"2026-11-05T21:06:21.000Z","first_published":"2026-11-05T21:06:21.000Z","brands":[{"id":"talktalk","name":"TalkTalk","url":"https://domainspoof.com/brands/talktalk"}],"dns":"resolved","resolved":["216.245.213.76"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of talktalk.co.uk (a letter from a neighbouring key), resolved to 216.245.213.76, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T21:06:21.000Z","first_published":"2026-11-05T21:06:21.000Z","of":"talktalk.co.uk","spelling":"adjacent_key","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"216.245.213.76","flagged_at":"2026-11-05T21:06:21Z"}]}],"url":"https://domainspoof.com/brands/talktalk"},{"hostname":"talktlk.co.uk","first_observed":"2026-11-05T21:06:21.000Z","first_published":"2026-11-05T21:06:21.000Z","brands":[{"id":"talktalk","name":"TalkTalk","url":"https://domainspoof.com/brands/talktalk"}],"dns":"resolved","resolved":["216.245.213.77"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of talktalk.co.uk (a dropped letter), resolved to 216.245.213.77, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T21:06:21.000Z","first_published":"2026-11-05T21:06:21.000Z","of":"talktalk.co.uk","spelling":"omission","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"216.245.213.77","flagged_at":"2026-11-05T21:06:21Z"}]}],"url":"https://domainspoof.com/brands/talktalk"},{"hostname":"talktslk.co.uk","first_observed":"2026-11-05T21:06:21.000Z","first_published":"2026-11-05T21:06:21.000Z","brands":[{"id":"talktalk","name":"TalkTalk","url":"https://domainspoof.com/brands/talktalk"}],"dns":"resolved","resolved":["216.245.213.75"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of talktalk.co.uk (a letter from a neighbouring key), resolved to 216.245.213.75, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T21:06:21.000Z","first_published":"2026-11-05T21:06:21.000Z","of":"talktalk.co.uk","spelling":"adjacent_key","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"216.245.213.75","flagged_at":"2026-11-05T21:06:21Z"}]}],"url":"https://domainspoof.com/brands/talktalk"},{"hostname":"taoba0.com","first_observed":"2026-11-05T21:06:21.000Z","first_published":"2026-11-05T21:06:21.000Z","brands":[{"id":"alibaba","name":"Alibaba","url":"https://domainspoof.com/brands/alibaba"}],"dns":"resolved","resolved":["77.247.179.91"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of taobao.com (similar-looking characters), resolved to 77.247.179.91, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T21:06:21.000Z","first_published":"2026-11-05T21:06:21.000Z","of":"taobao.com","spelling":"homoglyph","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"77.247.179.91","flagged_at":"2026-11-05T21:06:21Z"}]}],"url":"https://domainspoof.com/brands/alibaba"},{"hostname":"tellus.sbs","first_observed":"2026-11-05T21:06:21.000Z","first_published":"2026-11-05T21:06:21.000Z","brands":[{"id":"telus","name":"Telus","url":"https://domainspoof.com/brands/telus"}],"dns":"resolved","resolved":["2.59.170.20","104.219.250.37"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of telus.com (a doubled letter), resolved to 2.59.170.20, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T21:06:21.000Z","first_published":"2026-11-05T21:06:21.000Z","of":"telus.com","spelling":"repetition","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"2.59.170.20","flagged_at":"2026-11-05T21:06:21Z"}]}],"url":"https://domainspoof.com/brands/telus"},{"hostname":"telstea.com","first_observed":"2026-11-05T21:06:21.000Z","first_published":"2026-11-05T21:06:21.000Z","brands":[{"id":"telstra","name":"Telstra","url":"https://domainspoof.com/brands/telstra"}],"dns":"resolved","resolved":["212.7.194.71"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of telstra.com.au (a letter from a neighbouring key), resolved to 212.7.194.71, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T21:06:21.000Z","first_published":"2026-11-05T21:06:21.000Z","of":"telstra.com.au","spelling":"adjacent_key","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"212.7.194.71","flagged_at":"2026-11-05T21:06:21Z"}]}],"url":"https://domainspoof.com/brands/telstra"},{"hostname":"2026trump.com","first_observed":"2026-11-05T20:56:59.413Z","first_published":"2026-11-05T21:04:39.105Z","brands":[],"dns":"resolved","resolved":["104.21.79.186","172.67.147.25"],"resolved_at":"2026-11-05T21:04:54Z","dns_checked_at":"2026-11-05T21:17:56.000Z","dns_since":"2026-11-05T21:17:56.000Z","findings":[{"id":"f7h3qw2ii5nknlbccjzox","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T20:56:59.413Z","first_published":"2026-11-05T21:04:39.105Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=2026trump.com"},{"hostname":"adnocprofit.net","first_observed":"2026-11-05T20:52:44.570Z","first_published":"2026-11-05T21:04:39.105Z","brands":[],"dns":"resolved","resolved":["104.21.58.242","172.67.166.71"],"resolved_at":"2026-11-06T06:51:45Z","dns_checked_at":"2026-11-05T21:17:56.000Z","dns_since":"2026-11-05T21:17:56.000Z","findings":[{"id":"fdf3b3ccoedpogeus2lpk","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T20:52:44.570Z","first_published":"2026-11-05T21:04:39.105Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/adnocprofit.net/"}],"url":"https://domainspoof.com/live?show=all&q=adnocprofit.net"},{"hostname":"aiyaphorm-nl.live","first_observed":"2026-11-05T20:41:54.183Z","first_published":"2026-11-05T21:04:39.105Z","brands":[],"dns":"resolved","resolved":["104.21.58.135","172.67.204.75"],"resolved_at":"2026-11-05T20:42:44Z","dns_checked_at":"2026-11-05T21:17:56.000Z","dns_since":"2026-11-05T21:17:56.000Z","findings":[{"id":"fiisygceutlipesjgkucn","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T20:41:54.183Z","first_published":"2026-11-05T21:04:39.105Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=aiyaphorm-nl.live"},{"hostname":"allocations-nillion.xyz","first_observed":"2026-11-05T20:46:40.021Z","first_published":"2026-11-05T21:04:39.105Z","brands":[],"dns":"resolved","resolved":["104.21.13.19","172.67.167.232"],"resolved_at":"2026-11-05T20:56:21Z","dns_checked_at":"2026-11-05T21:17:56.000Z","dns_since":"2026-11-05T21:17:56.000Z","findings":[{"id":"fk6ncwax2qecukndlxcwt","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T20:46:40.021Z","first_published":"2026-11-05T21:04:39.105Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=allocations-nillion.xyz"},{"hostname":"amlbot-verification.com","first_observed":"2026-11-05T20:56:59.413Z","first_published":"2026-11-05T21:04:39.105Z","brands":[],"dns":"resolved","resolved":["104.21.73.114","172.67.144.180"],"resolved_at":"2026-11-05T21:05:44Z","dns_checked_at":"2026-11-05T21:17:56.000Z","dns_since":"2026-11-05T21:17:56.000Z","findings":[{"id":"fjmub4g25mlwqymga26tu","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T20:56:59.413Z","first_published":"2026-11-05T21:04:39.105Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=amlbot-verification.com"},{"hostname":"andydayzz.com","first_observed":"2026-11-05T20:56:59.413Z","first_published":"2026-11-05T21:04:39.105Z","brands":[],"dns":"resolved","resolved":["104.21.39.210","172.67.148.128"],"resolved_at":"2026-11-05T21:05:44Z","dns_checked_at":"2026-11-05T21:17:56.000Z","dns_since":"2026-11-05T21:17:56.000Z","findings":[{"id":"fa2fqsow2r62vnoq2cqjt","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T20:56:59.413Z","first_published":"2026-11-05T21:04:39.105Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=andydayzz.com"},{"hostname":"api-binance.us","first_observed":"2026-11-05T20:41:54.183Z","first_published":"2026-11-05T21:04:39.105Z","brands":[{"id":"binance","name":"Binance","url":"https://domainspoof.com/brands/binance"}],"dns":"resolved","resolved":["104.21.8.15","172.67.156.160","2606:4700:3035::ac43:9ca0","2606:4700:3036::6815:80f"],"resolved_at":"2026-11-05T20:42:44Z","dns_checked_at":"2026-11-05T21:17:56.000Z","dns_since":"2026-11-05T21:17:56.000Z","findings":[{"id":"ftn6277jer4ei2ypcjulw","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T20:41:54.183Z","first_published":"2026-11-05T21:04:39.105Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/brands/binance"},{"hostname":"assets.atfounder.com","first_observed":"2026-11-05T20:52:44.570Z","first_published":"2026-11-05T21:04:39.105Z","brands":[],"dns":"resolved","resolved":["104.21.12.199","172.67.153.56"],"resolved_at":"2026-11-05T20:53:34Z","dns_checked_at":"2026-11-05T21:17:56.000Z","dns_since":"2026-11-05T21:17:56.000Z","findings":[{"id":"f7dt2qn2wissqobmeiqgd","kind":"reported_domain","summary":"Under atfounder.com, listed by MetaMask","first_observed":"2026-11-05T20:52:44.570Z","first_published":"2026-11-05T21:04:39.105Z","source":"metamask","source_name":"MetaMask","under":"atfounder.com"}],"url":"https://domainspoof.com/live?show=all&q=assets.atfounder.com"},{"hostname":"auth0-openreachlink.com","first_observed":"2026-11-05T20:48:03.424Z","first_published":"2026-11-05T21:04:39.105Z","brands":[{"id":"okta","name":"Okta","url":"https://domainspoof.com/brands/okta"}],"dns":"resolved","resolved":["66.198.225.66","45.151.91.170"],"resolved_at":"2026-11-05T21:17:56Z","dns_checked_at":"2026-11-05T21:17:56.000Z","dns_since":"2026-11-05T21:17:56.000Z","findings":[{"id":"fu4snb54vkg7iutqdxnic","kind":"spamhaus_drop","summary":"Resolved to 66.198.225.66 on Spamhaus DROP","first_observed":"2026-11-05T20:48:03.424Z","first_published":"2026-11-05T21:04:39.105Z","address":"66.198.225.66","list":"spamhaus_drop","list_name":"Spamhaus DROP"}],"url":"https://domainspoof.com/brands/okta"},{"hostname":"bissell-turkiye.com","first_observed":"2026-11-05T20:56:59.413Z","first_published":"2026-11-05T21:04:39.105Z","brands":[],"dns":"resolved","resolved":["196.245.57.133"],"resolved_at":"2026-11-05T20:57:35Z","dns_checked_at":"2026-11-05T21:17:56.000Z","dns_since":"2026-11-05T21:17:56.000Z","findings":[{"id":"fqqgnuw4gwqrfo52pvscj","kind":"reported_domain","summary":"Listed by USOM","first_observed":"2026-11-05T20:56:59.413Z","first_published":"2026-11-05T21:04:39.105Z","source":"usom","source_name":"USOM"}],"url":"https://domainspoof.com/live?show=all&q=bissell-turkiye.com"},{"hostname":"bitex-financial.cc","first_observed":"2026-11-05T20:41:54.183Z","first_published":"2026-11-05T21:04:39.105Z","brands":[],"dns":"resolved","resolved":["198.251.81.188"],"resolved_at":"2026-11-05T20:42:52Z","dns_checked_at":"2026-11-05T21:17:56.000Z","dns_since":"2026-11-05T21:17:56.000Z","findings":[{"id":"fdwog3xuasufzd5gh7ypx","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T20:41:54.183Z","first_published":"2026-11-05T21:04:39.105Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/bitex-financial.cc/"}],"url":"https://domainspoof.com/live?show=all&q=bitex-financial.cc"},{"hostname":"bitgetai-ja.live","first_observed":"2026-11-05T20:52:44.570Z","first_published":"2026-11-05T21:04:39.105Z","brands":[],"dns":"resolved","resolved":["104.21.60.115","172.67.196.33"],"resolved_at":"2026-11-05T20:53:46Z","dns_checked_at":"2026-11-05T21:17:56.000Z","dns_since":"2026-11-05T21:17:56.000Z","findings":[{"id":"fo4n3d2uq5jro556kojcj","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T20:52:44.570Z","first_published":"2026-11-05T21:04:39.105Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=bitgetai-ja.live"},{"hostname":"bitpie-app.cn","first_observed":"2026-11-05T20:57:35.559Z","first_published":"2026-11-05T21:04:39.105Z","brands":[{"id":"bitpie","name":"Bitpie","url":"https://domainspoof.com/brands/bitpie"}],"dns":"resolved","resolved":["192.197.113.153"],"resolved_at":"2026-11-05T21:17:56Z","dns_checked_at":"2026-11-05T21:17:56.000Z","dns_since":"2026-11-05T21:17:56.000Z","findings":[{"id":"fyydq4lsucpiutqqnn37o","kind":"phishing_infrastructure","summary":"Resolved to 192.197.113.153, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T20:57:35.559Z","first_published":"2026-11-05T21:04:39.105Z","address":"192.197.113.153","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/bitpie"},{"hostname":"btcmixer.wiki","first_observed":"2026-11-05T20:46:40.021Z","first_published":"2026-11-05T21:04:39.105Z","brands":[],"dns":"resolved","resolved":["34.41.139.193"],"resolved_at":"2026-11-05T20:56:34Z","dns_checked_at":"2026-11-05T21:17:56.000Z","dns_since":"2026-11-05T21:17:56.000Z","findings":[{"id":"fas3recr2wngoslvzjqkw","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T20:46:40.021Z","first_published":"2026-11-05T21:04:39.105Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/btcmixer.wiki/"}],"url":"https://domainspoof.com/live?show=all&q=btcmixer.wiki"},{"hostname":"bymaples.info","first_observed":"2026-11-05T20:46:40.021Z","first_published":"2026-11-05T21:04:39.105Z","brands":[],"dns":"resolved","resolved":["104.21.46.41","172.67.223.155"],"resolved_at":"2026-11-05T20:56:52Z","dns_checked_at":"2026-11-05T21:17:56.000Z","dns_since":"2026-11-05T21:17:56.000Z","findings":[{"id":"fporaihy2i62de56qmsxe","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T20:46:40.021Z","first_published":"2026-11-05T21:04:39.105Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=bymaples.info"},{"hostname":"calm-asset.com","first_observed":"2026-11-05T20:56:59.413Z","first_published":"2026-11-05T21:04:39.105Z","brands":[],"dns":"resolved","resolved":["104.21.87.141","172.67.169.225"],"resolved_at":"2026-11-05T20:57:53Z","dns_checked_at":"2026-11-05T21:17:56.000Z","dns_since":"2026-11-05T21:17:56.000Z","findings":[{"id":"fg3ppkk3npwew4xbnba3q","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T20:56:59.413Z","first_published":"2026-11-05T21:04:39.105Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=calm-asset.com"},{"hostname":"cart-whatsapp.hl.cn","first_observed":"2026-11-05T20:41:54.183Z","first_published":"2026-11-05T21:04:39.105Z","brands":[{"id":"whatsapp","name":"WhatsApp","url":"https://domainspoof.com/brands/whatsapp"}],"dns":"resolved","resolved":["104.21.94.133","172.67.168.76","2606:4700:3030::6815:5e85","2606:4700:3037::ac43:a84c"],"resolved_at":"2026-11-05T20:42:57Z","dns_checked_at":"2026-11-05T21:17:56.000Z","dns_since":"2026-11-05T21:17:56.000Z","findings":[{"id":"fdzwth2uiw7a3zeo3zrq2","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T20:41:54.183Z","first_published":"2026-11-05T21:04:39.105Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/cart-whatsapp.hl.cn/"}],"url":"https://domainspoof.com/brands/whatsapp"},{"hostname":"casiveraresmigirisi.vip","first_observed":"2026-11-05T20:46:40.021Z","first_published":"2026-11-05T21:04:39.105Z","brands":[],"dns":"resolved","resolved":["104.21.33.168","172.67.165.9"],"resolved_at":"2026-11-06T00:15:46Z","dns_checked_at":"2026-11-05T21:17:56.000Z","dns_since":"2026-11-05T21:17:56.000Z","findings":[{"id":"fz4upfsfhdx52wjjsftyp","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T20:46:40.021Z","first_published":"2026-11-05T21:04:39.105Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/casiveraresmigirisi.vip/"}],"url":"https://domainspoof.com/live?show=all&q=casiveraresmigirisi.vip"},{"hostname":"cenxuo.shop","first_observed":"2026-11-05T20:41:54.183Z","first_published":"2026-11-05T21:04:39.105Z","brands":[],"dns":"resolved","resolved":["104.21.92.164","172.67.196.9"],"resolved_at":"2026-11-05T20:42:57Z","dns_checked_at":"2026-11-05T21:17:56.000Z","dns_since":"2026-11-05T21:17:56.000Z","findings":[{"id":"fotulrn4zksrcn6fnjkx7","kind":"reported_domain","summary":"Listed by NPA 165 (information services)","first_observed":"2026-11-05T20:41:54.183Z","first_published":"2026-11-05T21:04:39.105Z","source":"npa","source_name":"NPA 165","claim":{"category":"information services"}}],"url":"https://domainspoof.com/live?show=all&q=cenxuo.shop"},{"hostname":"cpanel.parcelguardexpress.com","first_observed":"2026-11-05T20:41:54.183Z","first_published":"2026-11-05T21:04:39.105Z","brands":[],"dns":"resolved","resolved":["51.38.146.100"],"resolved_at":"2026-11-05T20:43:06Z","dns_checked_at":"2026-11-05T21:17:56.000Z","dns_since":"2026-11-05T21:17:56.000Z","findings":[{"id":"fufm4vt7qdwwvow3nk4fe","kind":"reported_domain","summary":"Under parcelguardexpress.com, reported by PhishDestroy","first_observed":"2026-11-05T20:41:54.183Z","first_published":"2026-11-05T21:04:39.105Z","source":"phishdestroy","source_name":"PhishDestroy","under":"parcelguardexpress.com","source_url":"https://phishdestroy.io/domain/parcelguardexpress.com/"}],"url":"https://domainspoof.com/live?show=all&q=cpanel.parcelguardexpress.com"},{"hostname":"cpcalendars.parcelguardexpress.com","first_observed":"2026-11-05T20:41:54.183Z","first_published":"2026-11-05T21:04:39.105Z","brands":[],"dns":"resolved","resolved":["51.38.146.100"],"resolved_at":"2026-11-05T20:43:06Z","dns_checked_at":"2026-11-05T21:17:56.000Z","dns_since":"2026-11-05T21:17:56.000Z","findings":[{"id":"fqgacc7gkaqehhovutat3","kind":"reported_domain","summary":"Under parcelguardexpress.com, reported by PhishDestroy","first_observed":"2026-11-05T20:41:54.183Z","first_published":"2026-11-05T21:04:39.105Z","source":"phishdestroy","source_name":"PhishDestroy","under":"parcelguardexpress.com","source_url":"https://phishdestroy.io/domain/parcelguardexpress.com/"}],"url":"https://domainspoof.com/live?show=all&q=cpcalendars.parcelguardexpress.com"},{"hostname":"cpcontacts.parcelguardexpress.com","first_observed":"2026-11-05T20:41:54.183Z","first_published":"2026-11-05T21:04:39.105Z","brands":[],"dns":"resolved","resolved":["51.38.146.100"],"resolved_at":"2026-11-05T20:43:06Z","dns_checked_at":"2026-11-05T21:17:56.000Z","dns_since":"2026-11-05T21:17:56.000Z","findings":[{"id":"f7rccvdfmzx6s5fn34mdy","kind":"reported_domain","summary":"Under parcelguardexpress.com, reported by PhishDestroy","first_observed":"2026-11-05T20:41:54.183Z","first_published":"2026-11-05T21:04:39.105Z","source":"phishdestroy","source_name":"PhishDestroy","under":"parcelguardexpress.com","source_url":"https://phishdestroy.io/domain/parcelguardexpress.com/"}],"url":"https://domainspoof.com/live?show=all&q=cpcontacts.parcelguardexpress.com"},{"hostname":"cricfytvapk.cc","first_observed":"2026-11-05T20:46:40.021Z","first_published":"2026-11-05T21:04:39.105Z","brands":[],"dns":"resolved","resolved":["104.21.65.161","172.67.147.38"],"resolved_at":"2026-11-05T20:57:17Z","dns_checked_at":"2026-11-05T21:17:56.000Z","dns_since":"2026-11-05T21:17:56.000Z","findings":[{"id":"fxztu3efybpufwa2bgi7e","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T20:46:40.021Z","first_published":"2026-11-05T21:04:39.105Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=cricfytvapk.cc"},{"hostname":"crypto-ust.com","first_observed":"2026-11-05T20:52:44.570Z","first_published":"2026-11-05T21:04:39.105Z","brands":[],"dns":"resolved","resolved":["104.21.11.216","172.67.167.72"],"resolved_at":"2026-11-05T20:53:54Z","dns_checked_at":"2026-11-05T21:17:56.000Z","dns_since":"2026-11-05T21:17:56.000Z","findings":[{"id":"fb2sfs7c3fzq3paabr6ga","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T20:52:44.570Z","first_published":"2026-11-05T21:04:39.105Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=crypto-ust.com"},{"hostname":"dashboard-shido.xyz","first_observed":"2026-11-05T20:56:59.413Z","first_published":"2026-11-05T21:04:39.105Z","brands":[],"dns":"resolved","resolved":["104.21.51.167","172.67.182.253"],"resolved_at":"2026-11-05T20:58:04Z","dns_checked_at":"2026-11-05T21:17:56.000Z","dns_since":"2026-11-05T21:17:56.000Z","findings":[{"id":"fkrjfgycezayfc7dspddc","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T20:56:59.413Z","first_published":"2026-11-05T21:04:39.105Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/dashboard-shido.xyz/"}],"url":"https://domainspoof.com/live?show=all&q=dashboard-shido.xyz"},{"hostname":"digitalassetwealth.org","first_observed":"2026-11-05T20:56:59.413Z","first_published":"2026-11-05T21:04:39.105Z","brands":[],"dns":"resolved","resolved":["104.21.40.132","172.67.151.243"],"resolved_at":"2026-11-05T20:58:04Z","dns_checked_at":"2026-11-05T21:17:56.000Z","dns_since":"2026-11-05T21:17:56.000Z","findings":[{"id":"f445uomitfze4bmav6wzc","kind":"reported_domain","summary":"Listed by NPA 165 (information services)","first_observed":"2026-11-05T20:56:59.413Z","first_published":"2026-11-05T21:04:39.105Z","source":"npa","source_name":"NPA 165","claim":{"category":"information services"}}],"url":"https://domainspoof.com/live?show=all&q=digitalassetwealth.org"},{"hostname":"distribution-flarenetworks.live","first_observed":"2026-11-05T20:56:59.413Z","first_published":"2026-11-05T21:04:39.105Z","brands":[{"id":"flare-network","name":"Flare Network","url":"https://domainspoof.com/brands/flare-network"}],"dns":"resolved","resolved":["104.21.81.111","172.67.189.76","2606:4700:3034::6815:516f","2606:4700:3034::ac43:bd4c"],"resolved_at":"2026-11-05T20:58:04Z","dns_checked_at":"2026-11-05T21:17:56.000Z","dns_since":"2026-11-05T21:17:56.000Z","findings":[{"id":"fg6t46kfflai2geoadwya","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T20:56:59.413Z","first_published":"2026-11-05T21:04:39.105Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/brands/flare-network"},{"hostname":"falkevermoburg-de.live","first_observed":"2026-11-05T20:41:54.183Z","first_published":"2026-11-05T21:04:39.105Z","brands":[],"dns":"resolved","resolved":["104.21.9.65","172.67.159.50"],"resolved_at":"2026-11-05T20:43:07Z","dns_checked_at":"2026-11-05T21:17:56.000Z","dns_since":"2026-11-05T21:17:56.000Z","findings":[{"id":"flk64r6ut4cpgkx4laztz","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T20:41:54.183Z","first_published":"2026-11-05T21:04:39.105Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=falkevermoburg-de.live"},{"hostname":"forterendovale-nl.live","first_observed":"2026-11-05T20:52:44.570Z","first_published":"2026-11-05T21:04:39.105Z","brands":[],"dns":"resolved","resolved":["104.21.34.62","172.67.199.16"],"resolved_at":"2026-11-06T01:08:41Z","dns_checked_at":"2026-11-05T21:17:56.000Z","dns_since":"2026-11-05T21:17:56.000Z","findings":[{"id":"fzuzeydcqzddqzzw5fpom","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T20:52:44.570Z","first_published":"2026-11-05T21:04:39.105Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=forterendovale-nl.live"},{"hostname":"fsocietymart-arena.store","first_observed":"2026-11-05T20:52:44.570Z","first_published":"2026-11-05T21:04:39.105Z","brands":[],"dns":"no_address","resolved":[],"resolved_at":"2026-11-05T20:53:55Z","dns_checked_at":"2026-11-06T13:34:20.000Z","findings":[{"id":"fivcjizbdc7gi56wqv3uf","kind":"reported_domain","summary":"Listed by NPA 165 (e-commerce)","first_observed":"2026-11-05T20:52:44.570Z","first_published":"2026-11-05T21:04:39.105Z","source":"npa","source_name":"NPA 165","claim":{"category":"e-commerce"}}],"url":"https://domainspoof.com/live?show=all&q=fsocietymart-arena.store"},{"hostname":"gitea.socialvisor.ru","first_observed":"2026-11-05T20:46:40.021Z","first_published":"2026-11-05T21:04:39.105Z","brands":[],"dns":"resolved","resolved":["91.215.41.91"],"resolved_at":"2026-11-05T20:57:28Z","dns_checked_at":"2026-11-05T21:17:56.000Z","dns_since":"2026-11-05T21:17:56.000Z","findings":[{"id":"f63u7vpwefo2a46mvkt45","kind":"reported_domain","summary":"Under socialvisor.ru, reported by PhishDestroy","first_observed":"2026-11-05T20:46:40.021Z","first_published":"2026-11-05T21:04:39.105Z","source":"phishdestroy","source_name":"PhishDestroy","under":"socialvisor.ru","source_url":"https://phishdestroy.io/domain/socialvisor.ru/"}],"url":"https://domainspoof.com/live?show=all&q=gitea.socialvisor.ru"},{"hostname":"gro89k-fxempire.com","first_observed":"2026-11-05T20:52:44.570Z","first_published":"2026-11-05T21:04:39.105Z","brands":[],"dns":"resolved","resolved":["192.142.10.5"],"resolved_at":"2026-11-05T20:53:55Z","dns_checked_at":"2026-11-05T21:17:56.000Z","dns_since":"2026-11-05T21:17:56.000Z","findings":[{"id":"fx6mxfhqt4odaerwiywbg","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T20:52:44.570Z","first_published":"2026-11-05T21:04:39.105Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/gro89k-fxempire.com/"}],"url":"https://domainspoof.com/live?show=all&q=gro89k-fxempire.com"},{"hostname":"guantumspaceai-fr.live","first_observed":"2026-11-05T20:52:44.570Z","first_published":"2026-11-05T21:04:39.105Z","brands":[],"dns":"resolved","resolved":["104.21.16.130","172.67.212.183"],"resolved_at":"2026-11-05T20:53:55Z","dns_checked_at":"2026-11-05T21:17:56.000Z","dns_since":"2026-11-05T21:17:56.000Z","findings":[{"id":"fdqjh7qr52vlsqdxm3jp3","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T20:52:44.570Z","first_published":"2026-11-05T21:04:39.105Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=guantumspaceai-fr.live"},{"hostname":"gweryxalvon-nl.live","first_observed":"2026-11-05T20:41:54.183Z","first_published":"2026-11-05T21:04:39.105Z","brands":[],"dns":"resolved","resolved":["104.21.93.202","172.67.214.93"],"resolved_at":"2026-11-06T00:10:25Z","dns_checked_at":"2026-11-05T21:17:56.000Z","dns_since":"2026-11-05T21:17:56.000Z","findings":[{"id":"f6posycdopih6l6xj3gvh","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T20:41:54.183Z","first_published":"2026-11-05T21:04:39.105Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=gweryxalvon-nl.live"},{"hostname":"gweryxalvon.live","first_observed":"2026-11-05T20:56:59.413Z","first_published":"2026-11-05T21:04:39.105Z","brands":[],"dns":"resolved","resolved":["104.21.85.37","172.67.201.228"],"resolved_at":"2026-11-05T20:58:04Z","dns_checked_at":"2026-11-05T21:17:56.000Z","dns_since":"2026-11-05T21:17:56.000Z","findings":[{"id":"fjx4xebipznkuzgr2qygl","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T20:56:59.413Z","first_published":"2026-11-05T21:04:39.105Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=gweryxalvon.live"},{"hostname":"internationalbusinessmaclsihinesibm.vu","first_observed":"2026-11-05T20:46:40.021Z","first_published":"2026-11-05T21:04:39.105Z","brands":[],"dns":"resolved","resolved":["104.21.56.163","172.67.153.170"],"resolved_at":"2026-11-05T20:52:18Z","dns_checked_at":"2026-11-05T21:17:56.000Z","dns_since":"2026-11-05T21:17:56.000Z","findings":[{"id":"frqucyjzk2obngmwbokfp","kind":"reported_domain","summary":"Listed by USOM","first_observed":"2026-11-05T20:46:40.021Z","first_published":"2026-11-05T21:04:39.105Z","source":"usom","source_name":"USOM"}],"url":"https://domainspoof.com/live?show=all&q=internationalbusinessmaclsihinesibm.vu"},{"hostname":"io-cash-swap.icu","first_observed":"2026-11-05T20:52:44.570Z","first_published":"2026-11-05T21:04:39.105Z","brands":[],"dns":"no_address","resolved":[],"resolved_at":"2026-11-05T20:53:56Z","dns_checked_at":"2026-11-06T13:34:20.000Z","findings":[{"id":"fyx7wwqi4mkihpctvxmxf","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T20:52:44.570Z","first_published":"2026-11-05T21:04:39.105Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=io-cash-swap.icu"},{"hostname":"jelvruvozan-nl.live","first_observed":"2026-11-05T20:46:40.021Z","first_published":"2026-11-05T21:04:39.105Z","brands":[],"dns":"resolved","resolved":["104.21.66.179","172.67.162.248"],"resolved_at":"2026-11-06T01:08:44Z","dns_checked_at":"2026-11-05T21:17:56.000Z","dns_since":"2026-11-05T21:17:56.000Z","findings":[{"id":"fux52tyuzhbbpst4l3nsr","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T20:46:40.021Z","first_published":"2026-11-05T21:04:39.105Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=jelvruvozan-nl.live"},{"hostname":"knightsmail.org","first_observed":"2026-11-05T20:56:59.413Z","first_published":"2026-11-05T21:04:39.105Z","brands":[],"dns":"resolved","resolved":["129.121.78.193"],"resolved_at":"2026-11-05T20:58:05Z","dns_checked_at":"2026-11-05T21:17:56.000Z","dns_since":"2026-11-05T21:17:56.000Z","findings":[{"id":"fpnwffq53nxtnekj7vkxn","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T20:56:59.413Z","first_published":"2026-11-05T21:04:39.105Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=knightsmail.org"},{"hostname":"kodera.jp","first_observed":"2026-11-05T20:46:40.021Z","first_published":"2026-11-05T21:04:39.105Z","brands":[],"dns":"resolved","resolved":["114.17.21.146"],"resolved_at":"2026-11-05T20:52:18Z","dns_checked_at":"2026-11-05T21:17:56.000Z","dns_since":"2026-11-05T21:17:56.000Z","findings":[{"id":"fbu3cjt675ixz34haojlw","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T20:46:40.021Z","first_published":"2026-11-05T21:04:39.105Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/kodera.jp/"}],"url":"https://domainspoof.com/live?show=all&q=kodera.jp"},{"hostname":"kr68.net","first_observed":"2026-11-05T20:52:44.570Z","first_published":"2026-11-05T21:04:39.105Z","brands":[],"dns":"resolved","resolved":["104.21.84.231","172.67.198.95"],"resolved_at":"2026-11-05T20:53:56Z","dns_checked_at":"2026-11-05T21:17:56.000Z","dns_since":"2026-11-05T21:17:56.000Z","findings":[{"id":"fi7gdezrz3b3jwkqexkqh","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T20:52:44.570Z","first_published":"2026-11-05T21:04:39.105Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/kr68.net/"}],"url":"https://domainspoof.com/live?show=all&q=kr68.net"},{"hostname":"krak-darknet.cc","first_observed":"2026-11-05T20:46:40.021Z","first_published":"2026-11-05T21:04:39.105Z","brands":[],"dns":"resolved","resolved":["104.21.50.123","172.67.163.44"],"resolved_at":"2026-11-06T01:30:08Z","dns_checked_at":"2026-11-05T21:17:56.000Z","dns_since":"2026-11-05T21:17:56.000Z","findings":[{"id":"f4i2oqnj47o3xr5bs7diz","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T20:46:40.021Z","first_published":"2026-11-05T21:04:39.105Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/krak-darknet.cc/"}],"url":"https://domainspoof.com/live?show=all&q=krak-darknet.cc"},{"hostname":"krevpixelon-nl.live","first_observed":"2026-11-05T20:46:40.021Z","first_published":"2026-11-05T21:04:39.105Z","brands":[],"dns":"resolved","resolved":["104.21.25.180","172.67.134.114"],"resolved_at":"2026-11-05T20:52:18Z","dns_checked_at":"2026-11-05T21:17:56.000Z","dns_since":"2026-11-05T21:17:56.000Z","findings":[{"id":"fuh34vkm52o3jiwpycsyq","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T20:46:40.021Z","first_published":"2026-11-05T21:04:39.105Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=krevpixelon-nl.live"},{"hostname":"ledger-com-hek.pages.dev","first_observed":"2026-11-05T20:56:59.413Z","first_published":"2026-11-05T21:04:39.105Z","brands":[],"dns":"resolved","resolved":["172.66.45.39","172.66.46.217"],"resolved_at":"2026-11-05T20:58:05Z","dns_checked_at":"2026-11-05T21:17:56.000Z","dns_since":"2026-11-05T21:17:56.000Z","findings":[{"id":"fw77d7a5xazse6wzwilns","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T20:56:59.413Z","first_published":"2026-11-05T21:04:39.105Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=ledger-com-hek.pages.dev"},{"hostname":"limpobolkstead.live","first_observed":"2026-11-05T20:41:54.183Z","first_published":"2026-11-05T21:04:39.105Z","brands":[],"dns":"resolved","resolved":["104.21.87.98","172.67.169.50"],"resolved_at":"2026-11-05T20:43:08Z","dns_checked_at":"2026-11-05T21:17:56.000Z","dns_since":"2026-11-05T21:17:56.000Z","findings":[{"id":"fdqyq2syv3ujryguoo6h5","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T20:41:54.183Z","first_published":"2026-11-05T21:04:39.105Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=limpobolkstead.live"},{"hostname":"lookzone.digital","first_observed":"2026-11-05T20:52:44.570Z","first_published":"2026-11-05T21:04:39.105Z","brands":[],"dns":"resolved","resolved":["103.224.182.250"],"resolved_at":"2026-11-05T20:53:56Z","dns_checked_at":"2026-11-05T21:17:56.000Z","dns_since":"2026-11-05T21:17:56.000Z","findings":[{"id":"fippjycwt6cewf2aimiqw","kind":"reported_domain","summary":"Listed by USOM","first_observed":"2026-11-05T20:52:44.570Z","first_published":"2026-11-05T21:04:39.105Z","source":"usom","source_name":"USOM"}],"url":"https://domainspoof.com/live?show=all&q=lookzone.digital"},{"hostname":"loveswin.com","first_observed":"2026-11-05T20:52:44.570Z","first_published":"2026-11-05T21:04:39.105Z","brands":[],"dns":"resolved","resolved":["104.21.9.177","172.67.161.37"],"resolved_at":"2026-11-05T20:53:56Z","dns_checked_at":"2026-11-05T21:17:56.000Z","dns_since":"2026-11-05T21:17:56.000Z","findings":[{"id":"f5w3s24j7b23ykzn64m7w","kind":"reported_domain","summary":"Listed by NPA 165 (information services)","first_observed":"2026-11-05T20:52:44.570Z","first_published":"2026-11-05T21:04:39.105Z","source":"npa","source_name":"NPA 165","claim":{"category":"information services"}}],"url":"https://domainspoof.com/live?show=all&q=loveswin.com"},{"hostname":"lucid-routes.com","first_observed":"2026-11-05T20:41:54.183Z","first_published":"2026-11-05T21:04:39.105Z","brands":[],"dns":"resolved","resolved":["104.21.52.227","172.67.205.55"],"resolved_at":"2026-11-05T20:43:08Z","dns_checked_at":"2026-11-05T21:17:56.000Z","dns_since":"2026-11-05T21:17:56.000Z","findings":[{"id":"fbxjuqtpaoiurhf2pqsz5","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T20:41:54.183Z","first_published":"2026-11-05T21:04:39.105Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=lucid-routes.com"},{"hostname":"lukrowancia.live","first_observed":"2026-11-05T20:56:59.413Z","first_published":"2026-11-05T21:04:39.105Z","brands":[],"dns":"resolved","resolved":["104.21.62.46","172.67.220.59"],"resolved_at":"2026-11-05T20:58:07Z","dns_checked_at":"2026-11-05T21:17:56.000Z","dns_since":"2026-11-05T21:17:56.000Z","findings":[{"id":"f4m5zwl5t7gq7dolc4mj5","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T20:56:59.413Z","first_published":"2026-11-05T21:04:39.105Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=lukrowancia.live"},{"hostname":"mail.parcelguardexpress.com","first_observed":"2026-11-05T20:41:54.183Z","first_published":"2026-11-05T21:04:39.105Z","brands":[],"dns":"resolved","resolved":["51.38.146.100"],"resolved_at":"2026-11-05T20:43:08Z","dns_checked_at":"2026-11-05T21:17:56.000Z","dns_since":"2026-11-05T21:17:56.000Z","findings":[{"id":"fukhlbzipjyggrycw3pqn","kind":"reported_domain","summary":"Under parcelguardexpress.com, reported by PhishDestroy","first_observed":"2026-11-05T20:41:54.183Z","first_published":"2026-11-05T21:04:39.105Z","source":"phishdestroy","source_name":"PhishDestroy","under":"parcelguardexpress.com","source_url":"https://phishdestroy.io/domain/parcelguardexpress.com/"}],"url":"https://domainspoof.com/live?show=all&q=mail.parcelguardexpress.com"},{"hostname":"mallpaseosanfrancisco.com.ve","first_observed":"2026-11-05T20:46:40.021Z","first_published":"2026-11-05T21:04:39.105Z","brands":[],"dns":"resolved","resolved":["52.5.155.30"],"resolved_at":"2026-11-05T20:52:18Z","dns_checked_at":"2026-11-05T21:17:56.000Z","dns_since":"2026-11-05T21:17:56.000Z","findings":[{"id":"foj4hkslzago3ec4kppet","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T20:46:40.021Z","first_published":"2026-11-05T21:04:39.105Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/mallpaseosanfrancisco.com.ve/"}],"url":"https://domainspoof.com/live?show=all&q=mallpaseosanfrancisco.com.ve"},{"hostname":"nazvelqorn-it.live","first_observed":"2026-11-05T20:56:59.413Z","first_published":"2026-11-05T21:04:39.105Z","brands":[],"dns":"resolved","resolved":["104.21.48.42","172.67.176.179"],"resolved_at":"2026-11-06T00:58:23Z","dns_checked_at":"2026-11-05T21:17:56.000Z","dns_since":"2026-11-05T21:17:56.000Z","findings":[{"id":"fitivhgb6es7gcjhpx27h","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T20:56:59.413Z","first_published":"2026-11-05T21:04:39.105Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=nazvelqorn-it.live"},{"hostname":"okx-listings.com","first_observed":"2026-11-05T20:52:44.570Z","first_published":"2026-11-05T21:04:39.105Z","brands":[],"dns":"resolved","resolved":["80.66.78.83"],"resolved_at":"2026-11-05T20:53:56Z","dns_checked_at":"2026-11-05T21:17:56.000Z","dns_since":"2026-11-05T21:17:56.000Z","findings":[{"id":"fhox5pzcfynky64d5qp36","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T20:52:44.570Z","first_published":"2026-11-05T21:04:39.105Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/okx-listings.com/"}],"url":"https://domainspoof.com/live?show=all&q=okx-listings.com"},{"hostname":"owlto.net","first_observed":"2026-11-05T20:52:44.570Z","first_published":"2026-11-05T21:04:39.105Z","brands":[],"dns":"resolved","resolved":["104.21.45.45","172.67.209.177"],"resolved_at":"2026-11-05T20:53:59Z","dns_checked_at":"2026-11-05T21:17:56.000Z","dns_since":"2026-11-05T21:17:56.000Z","findings":[{"id":"ftrawgkv3arivavawwfwb","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T20:52:44.570Z","first_published":"2026-11-05T21:04:39.105Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/owlto.net/"}],"url":"https://domainspoof.com/live?show=all&q=owlto.net"},{"hostname":"parcelguardexpress.com","first_observed":"2026-11-05T20:41:54.183Z","first_published":"2026-11-05T21:04:39.105Z","brands":[],"dns":"resolved","resolved":["51.38.146.100"],"resolved_at":"2026-11-05T20:43:11Z","dns_checked_at":"2026-11-05T21:17:56.000Z","dns_since":"2026-11-05T21:17:56.000Z","findings":[{"id":"f4szu45fcawq7hwhvewbe","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T20:41:54.183Z","first_published":"2026-11-05T21:04:39.105Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/parcelguardexpress.com/"}],"url":"https://domainspoof.com/live?show=all&q=parcelguardexpress.com"},{"hostname":"pathwaysleadingbeyondordinaryambition.cryptopayment.xyz","first_observed":"2026-11-05T20:56:59.413Z","first_published":"2026-11-05T21:04:39.105Z","brands":[],"dns":"resolved","resolved":["143.244.211.82"],"resolved_at":"2026-11-05T20:58:07Z","dns_checked_at":"2026-11-05T21:17:56.000Z","dns_since":"2026-11-05T21:17:56.000Z","findings":[{"id":"f6sgxj3tosrspb75o4rhi","kind":"reported_domain","summary":"Under cryptopayment.xyz, listed by MetaMask","first_observed":"2026-11-05T20:56:59.413Z","first_published":"2026-11-05T21:04:39.105Z","source":"metamask","source_name":"MetaMask","under":"cryptopayment.xyz"}],"url":"https://domainspoof.com/live?show=all&q=pathwaysleadingbeyondordinaryambition.cryptopayment.xyz"},{"hostname":"pelkruvilanz-de.live","first_observed":"2026-11-05T20:41:54.183Z","first_published":"2026-11-05T21:04:39.105Z","brands":[],"dns":"resolved","resolved":["104.21.40.203","172.67.157.6"],"resolved_at":"2026-11-06T02:34:15Z","dns_checked_at":"2026-11-05T21:17:56.000Z","dns_since":"2026-11-05T21:17:56.000Z","findings":[{"id":"f2huhampk4jk3hy5ulyja","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T20:41:54.183Z","first_published":"2026-11-05T21:04:39.105Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=pelkruvilanz-de.live"},{"hostname":"pepsico-jobs.com","first_observed":"2026-11-05T20:52:44.570Z","first_published":"2026-11-05T21:04:39.105Z","brands":[],"dns":"resolved","resolved":["91.195.240.94"],"resolved_at":"2026-11-05T20:53:59Z","dns_checked_at":"2026-11-05T21:17:56.000Z","dns_since":"2026-11-05T21:17:56.000Z","findings":[{"id":"faglm3wvhkutnsxof6okm","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T20:52:44.570Z","first_published":"2026-11-05T21:04:39.105Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/pepsico-jobs.com/"}],"url":"https://domainspoof.com/live?show=all&q=pepsico-jobs.com"},{"hostname":"portalmeuveiculo.com","first_observed":"2026-11-05T20:52:44.570Z","first_published":"2026-11-05T21:04:39.105Z","brands":[],"dns":"resolved","resolved":["104.21.93.80","172.67.207.153"],"resolved_at":"2026-11-05T20:53:59Z","dns_checked_at":"2026-11-05T21:17:56.000Z","dns_since":"2026-11-05T21:17:56.000Z","findings":[{"id":"fenuypwsi2qgnyexmiqgo","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T20:52:44.570Z","first_published":"2026-11-05T21:04:39.105Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/portalmeuveiculo.com/"}],"url":"https://domainspoof.com/live?show=all&q=portalmeuveiculo.com"},{"hostname":"rabbitmq.socialvisor.ru","first_observed":"2026-11-05T20:46:40.021Z","first_published":"2026-11-05T21:04:39.105Z","brands":[],"dns":"resolved","resolved":["91.215.41.91"],"resolved_at":"2026-11-05T20:52:18Z","dns_checked_at":"2026-11-05T21:17:56.000Z","dns_since":"2026-11-05T21:17:56.000Z","findings":[{"id":"fz5t3txioc3teudqq2fs6","kind":"reported_domain","summary":"Under socialvisor.ru, reported by PhishDestroy","first_observed":"2026-11-05T20:46:40.021Z","first_published":"2026-11-05T21:04:39.105Z","source":"phishdestroy","source_name":"PhishDestroy","under":"socialvisor.ru","source_url":"https://phishdestroy.io/domain/socialvisor.ru/"}],"url":"https://domainspoof.com/live?show=all&q=rabbitmq.socialvisor.ru"},{"hostname":"rayidumswap.ink","first_observed":"2026-11-05T20:56:59.413Z","first_published":"2026-11-05T21:04:39.105Z","brands":[],"dns":"resolved","resolved":["104.21.26.205","172.67.168.137"],"resolved_at":"2026-11-05T20:58:07Z","dns_checked_at":"2026-11-05T21:17:56.000Z","dns_since":"2026-11-05T21:17:56.000Z","findings":[{"id":"fdslwlmfmnppons6ru3zh","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T20:56:59.413Z","first_published":"2026-11-05T21:04:39.105Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=rayidumswap.ink"},{"hostname":"robloxhelp.site","first_observed":"2026-11-05T20:43:11.733Z","first_published":"2026-11-05T21:04:39.105Z","brands":[{"id":"roblox","name":"Roblox","url":"https://domainspoof.com/brands/roblox"}],"dns":"resolved","resolved":["92.53.96.169"],"resolved_at":"2026-11-05T21:17:56Z","dns_checked_at":"2026-11-05T21:17:56.000Z","dns_since":"2026-11-05T21:17:56.000Z","findings":[{"id":"fzapxtiea7b5nesjrauxl","kind":"phishing_infrastructure","summary":"Resolved to 92.53.96.169, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T20:43:11.733Z","first_published":"2026-11-05T21:04:39.105Z","address":"92.53.96.169","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"},{"kind":"lookalike","summary":"Registered lookalike of roblox.com (the name with an added word), resolved to 92.53.96.169, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","of":"roblox.com","spelling":"combo","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"92.53.96.169","flagged_at":"2026-11-06T01:53:03Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/roblox"},{"hostname":"rovalizio.live","first_observed":"2026-11-05T20:52:44.570Z","first_published":"2026-11-05T21:04:39.105Z","brands":[],"dns":"resolved","resolved":["104.21.23.53","172.67.209.54"],"resolved_at":"2026-11-05T20:53:59Z","dns_checked_at":"2026-11-05T21:17:56.000Z","dns_since":"2026-11-05T21:17:56.000Z","findings":[{"id":"ffv2dbj6k566nhmqf576h","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T20:52:44.570Z","first_published":"2026-11-05T21:04:39.105Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=rovalizio.live"},{"hostname":"sauleplacenca-fr.live","first_observed":"2026-11-05T20:52:44.570Z","first_published":"2026-11-05T21:04:39.105Z","brands":[],"dns":"resolved","resolved":["104.21.58.51","172.67.200.124"],"resolved_at":"2026-11-05T20:53:59Z","dns_checked_at":"2026-11-05T21:17:56.000Z","dns_since":"2026-11-05T21:17:56.000Z","findings":[{"id":"ffttxorjyq56tvidtohgv","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T20:52:44.570Z","first_published":"2026-11-05T21:04:39.105Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=sauleplacenca-fr.live"},{"hostname":"secureservice-network.net","first_observed":"2026-11-05T20:52:44.570Z","first_published":"2026-11-05T21:04:39.105Z","brands":[],"dns":"resolved","resolved":["104.21.28.2","172.67.170.27"],"resolved_at":"2026-11-06T00:32:21Z","dns_checked_at":"2026-11-05T21:17:56.000Z","dns_since":"2026-11-05T21:17:56.000Z","findings":[{"id":"fzvykmfo2co7siapkr33m","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T20:52:44.570Z","first_published":"2026-11-05T21:04:39.105Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=secureservice-network.net"},{"hostname":"slon17-cc.com","first_observed":"2026-11-05T20:41:54.183Z","first_published":"2026-11-05T21:04:39.105Z","brands":[],"dns":"resolved","resolved":["153.52.111.64"],"resolved_at":"2026-11-05T20:43:11Z","dns_checked_at":"2026-11-05T21:17:56.000Z","dns_since":"2026-11-05T21:17:56.000Z","findings":[{"id":"fh4mls2vh4oud2tf3qlfw","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T20:41:54.183Z","first_published":"2026-11-05T21:04:39.105Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/slon17-cc.com/"}],"url":"https://domainspoof.com/live?show=all&q=slon17-cc.com"},{"hostname":"soleilcapitence-fr.live","first_observed":"2026-11-05T20:52:44.570Z","first_published":"2026-11-05T21:04:39.105Z","brands":[],"dns":"resolved","resolved":["104.21.59.95","172.67.174.190"],"resolved_at":"2026-11-05T20:53:59Z","dns_checked_at":"2026-11-05T21:17:56.000Z","dns_since":"2026-11-05T21:17:56.000Z","findings":[{"id":"f4iemysah6kofeh7haw6t","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T20:52:44.570Z","first_published":"2026-11-05T21:04:39.105Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=soleilcapitence-fr.live"},{"hostname":"steinsparvik-no.live","first_observed":"2026-11-05T20:56:59.413Z","first_published":"2026-11-05T21:04:39.105Z","brands":[],"dns":"resolved","resolved":["104.21.53.202","172.67.218.175"],"resolved_at":"2026-11-05T20:58:08Z","dns_checked_at":"2026-11-05T21:17:57.000Z","dns_since":"2026-11-05T21:17:57.000Z","findings":[{"id":"fdmv7lhdp4ukayu3dkvah","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T20:56:59.413Z","first_published":"2026-11-05T21:04:39.105Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=steinsparvik-no.live"},{"hostname":"supercell.life","first_observed":"2026-11-05T20:53:59.971Z","first_published":"2026-11-05T21:04:39.105Z","brands":[{"id":"supercell","name":"Supercell","url":"https://domainspoof.com/brands/supercell"}],"dns":"resolved","resolved":["2.57.91.91"],"resolved_at":"2026-11-05T21:17:57Z","dns_checked_at":"2026-11-05T21:17:57.000Z","dns_since":"2026-11-05T21:17:57.000Z","findings":[{"id":"fqg3sj7tdsm3rt3ibaom5","kind":"phishing_infrastructure","summary":"Resolved to 2.57.91.91, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T20:53:59.971Z","first_published":"2026-11-05T21:04:39.105Z","address":"2.57.91.91","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/supercell"},{"hostname":"tracking.mails-creditagricole.com","first_observed":"2026-11-05T20:55:21.197Z","first_published":"2026-11-05T21:04:39.105Z","brands":[{"id":"credit-agricole","name":"Crédit Agricole","url":"https://domainspoof.com/brands/credit-agricole"}],"dns":"resolved","resolved":["51.254.13.185"],"resolved_at":"2026-11-05T21:17:57Z","dns_checked_at":"2026-11-05T21:17:57.000Z","dns_since":"2026-11-05T21:17:57.000Z","findings":[{"id":"f5f25i4q64jgc5xluakyz","kind":"phishing_infrastructure","summary":"Resolved to 51.254.13.185, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T20:55:21.197Z","first_published":"2026-11-05T21:04:39.105Z","address":"51.254.13.185","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/credit-agricole"},{"hostname":"trezor-io-start-cuba.wasmer.app","first_observed":"2026-11-05T20:54:00.192Z","first_published":"2026-11-05T21:04:39.105Z","brands":[{"id":"trezor","name":"Trezor","url":"https://domainspoof.com/brands/trezor"}],"dns":"resolved","resolved":["5.161.23.223"],"resolved_at":"2026-11-05T21:17:57Z","dns_checked_at":"2026-11-05T21:17:57.000Z","dns_since":"2026-11-05T21:17:57.000Z","findings":[{"id":"f46rrv4hcjdjgdiljcvjt","kind":"phishing_infrastructure","summary":"Resolved to 5.161.23.223, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T20:54:00.192Z","first_published":"2026-11-05T21:04:39.105Z","address":"5.161.23.223","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/trezor"},{"hostname":"trx-checks.com","first_observed":"2026-11-05T20:46:40.021Z","first_published":"2026-11-05T21:04:39.105Z","brands":[],"dns":"resolved","resolved":["103.224.182.250"],"resolved_at":"2026-11-05T20:55:21Z","dns_checked_at":"2026-11-05T21:17:57.000Z","dns_since":"2026-11-05T21:17:57.000Z","findings":[{"id":"ffbcfbwvqgqwvdyelzqhm","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T20:46:40.021Z","first_published":"2026-11-05T21:04:39.105Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/trx-checks.com/"}],"url":"https://domainspoof.com/live?show=all&q=trx-checks.com"},{"hostname":"velonario.live","first_observed":"2026-11-05T20:46:40.021Z","first_published":"2026-11-05T21:04:39.105Z","brands":[],"dns":"resolved","resolved":["104.21.76.71","172.67.191.21"],"resolved_at":"2026-11-05T20:55:21Z","dns_checked_at":"2026-11-05T21:17:57.000Z","dns_since":"2026-11-05T21:17:57.000Z","findings":[{"id":"f2c3qqf5abrakv2wz2opb","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T20:46:40.021Z","first_published":"2026-11-05T21:04:39.105Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=velonario.live"},{"hostname":"vlamwaardiek-de.live","first_observed":"2026-11-05T20:46:40.021Z","first_published":"2026-11-05T21:04:39.105Z","brands":[],"dns":"resolved","resolved":["104.21.91.247","172.67.182.211"],"resolved_at":"2026-11-05T20:55:21Z","dns_checked_at":"2026-11-05T21:17:57.000Z","dns_since":"2026-11-05T21:17:57.000Z","findings":[{"id":"ftsytkofr6roxb43o32rh","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T20:46:40.021Z","first_published":"2026-11-05T21:04:39.105Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=vlamwaardiek-de.live"},{"hostname":"vortexedgeai-shop.pages.dev","first_observed":"2026-11-05T20:56:59.413Z","first_published":"2026-11-05T21:04:39.105Z","brands":[],"dns":"resolved","resolved":["172.66.44.246","172.66.47.10"],"resolved_at":"2026-11-05T20:58:08Z","dns_checked_at":"2026-11-05T21:17:57.000Z","dns_since":"2026-11-05T21:17:57.000Z","findings":[{"id":"fv7rxjlkop27zb3jrho6w","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T20:56:59.413Z","first_published":"2026-11-05T21:04:39.105Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=vortexedgeai-shop.pages.dev"},{"hostname":"vote-firelight.xyz","first_observed":"2026-11-05T20:52:44.570Z","first_published":"2026-11-05T21:04:39.105Z","brands":[{"id":"firelight","name":"Firelight","url":"https://domainspoof.com/brands/firelight"}],"dns":"resolved","resolved":["104.21.53.157","172.67.214.161"],"resolved_at":"2026-11-05T20:54:00Z","dns_checked_at":"2026-11-05T21:17:57.000Z","dns_since":"2026-11-05T21:17:57.000Z","findings":[{"id":"fhcgynw5qi5t5c45xmuia","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T20:52:44.570Z","first_published":"2026-11-05T21:04:39.105Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/brands/firelight"},{"hostname":"vsdvwda.xyz","first_observed":"2026-11-05T20:46:40.021Z","first_published":"2026-11-05T21:04:39.105Z","brands":[],"dns":"resolved","resolved":["104.21.30.62","172.67.172.50"],"resolved_at":"2026-11-06T00:10:21Z","dns_checked_at":"2026-11-05T21:17:57.000Z","dns_since":"2026-11-05T21:17:57.000Z","findings":[{"id":"fvix3s3mk2u2qwmdi5ky3","kind":"reported_domain","summary":"Listed by NPA 165 (e-commerce)","first_observed":"2026-11-05T20:46:40.021Z","first_published":"2026-11-05T21:04:39.105Z","source":"npa","source_name":"NPA 165","claim":{"category":"e-commerce"}}],"url":"https://domainspoof.com/live?show=all&q=vsdvwda.xyz"},{"hostname":"wandiesshop-bargain.store","first_observed":"2026-11-05T20:46:40.021Z","first_published":"2026-11-05T21:04:39.105Z","brands":[],"dns":"no_address","resolved":[],"resolved_at":"2026-11-05T20:55:21Z","dns_checked_at":"2026-11-06T13:34:20.000Z","findings":[{"id":"fy7fg2qkhzcuu2nbvezzr","kind":"reported_domain","summary":"Listed by NPA 165 (e-commerce)","first_observed":"2026-11-05T20:46:40.021Z","first_published":"2026-11-05T21:04:39.105Z","source":"npa","source_name":"NPA 165","claim":{"category":"e-commerce"}}],"url":"https://domainspoof.com/live?show=all&q=wandiesshop-bargain.store"},{"hostname":"webdisk.parcelguardexpress.com","first_observed":"2026-11-05T20:41:54.183Z","first_published":"2026-11-05T21:04:39.105Z","brands":[],"dns":"resolved","resolved":["51.38.146.100"],"resolved_at":"2026-11-05T20:43:14Z","dns_checked_at":"2026-11-05T21:17:57.000Z","dns_since":"2026-11-05T21:17:57.000Z","findings":[{"id":"fonrpkp7xl32qp25niqc2","kind":"reported_domain","summary":"Under parcelguardexpress.com, reported by PhishDestroy","first_observed":"2026-11-05T20:41:54.183Z","first_published":"2026-11-05T21:04:39.105Z","source":"phishdestroy","source_name":"PhishDestroy","under":"parcelguardexpress.com","source_url":"https://phishdestroy.io/domain/parcelguardexpress.com/"}],"url":"https://domainspoof.com/live?show=all&q=webdisk.parcelguardexpress.com"},{"hostname":"webmail.parcelguardexpress.com","first_observed":"2026-11-05T20:41:54.183Z","first_published":"2026-11-05T21:04:39.105Z","brands":[],"dns":"resolved","resolved":["51.38.146.100"],"resolved_at":"2026-11-05T20:43:14Z","dns_checked_at":"2026-11-05T21:17:57.000Z","dns_since":"2026-11-05T21:17:57.000Z","findings":[{"id":"fqfiueg6r6na7admttlwb","kind":"reported_domain","summary":"Under parcelguardexpress.com, reported by PhishDestroy","first_observed":"2026-11-05T20:41:54.183Z","first_published":"2026-11-05T21:04:39.105Z","source":"phishdestroy","source_name":"PhishDestroy","under":"parcelguardexpress.com","source_url":"https://phishdestroy.io/domain/parcelguardexpress.com/"}],"url":"https://domainspoof.com/live?show=all&q=webmail.parcelguardexpress.com"},{"hostname":"wenitentra.live","first_observed":"2026-11-05T20:41:54.183Z","first_published":"2026-11-05T21:04:39.105Z","brands":[],"dns":"resolved","resolved":["104.21.49.222","172.67.152.252"],"resolved_at":"2026-11-05T20:43:14Z","dns_checked_at":"2026-11-05T21:17:57.000Z","dns_since":"2026-11-05T21:17:57.000Z","findings":[{"id":"fzqsjlw4rx6g732galwfx","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T20:41:54.183Z","first_published":"2026-11-05T21:04:39.105Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=wenitentra.live"},{"hostname":"www.kodera.jp","first_observed":"2026-11-05T20:46:40.021Z","first_published":"2026-11-05T21:04:39.105Z","brands":[],"dns":"resolved","resolved":["114.17.21.146"],"resolved_at":"2026-11-05T20:55:26Z","dns_checked_at":"2026-11-05T21:17:57.000Z","dns_since":"2026-11-05T21:17:57.000Z","findings":[{"id":"fvvoph6wsrtrkpoygdixw","kind":"reported_domain","summary":"Under kodera.jp, reported by PhishDestroy","first_observed":"2026-11-05T20:46:40.021Z","first_published":"2026-11-05T21:04:39.105Z","source":"phishdestroy","source_name":"PhishDestroy","under":"kodera.jp","source_url":"https://phishdestroy.io/domain/kodera.jp/"}],"url":"https://domainspoof.com/live?show=all&q=www.kodera.jp"},{"hostname":"www.mail.zenavlico.cyou","first_observed":"2026-11-05T20:46:40.021Z","first_published":"2026-11-05T21:04:39.105Z","brands":[],"dns":"resolved","resolved":["95.85.244.13"],"resolved_at":"2026-11-05T20:55:25Z","dns_checked_at":"2026-11-05T21:17:57.000Z","dns_since":"2026-11-05T21:17:57.000Z","findings":[{"id":"fq3ebafvzsnoinhi5g7id","kind":"reported_domain","summary":"Under zenavlico.cyou, listed by CERT Polska","first_observed":"2026-11-05T20:46:40.021Z","first_published":"2026-11-05T21:04:39.105Z","source":"cert_polska","source_name":"CERT Polska","under":"zenavlico.cyou"}],"url":"https://domainspoof.com/live?show=all&q=www.mail.zenavlico.cyou"},{"hostname":"www.parcelguardexpress.com","first_observed":"2026-11-05T20:41:54.183Z","first_published":"2026-11-05T21:04:39.105Z","brands":[],"dns":"resolved","resolved":["51.38.146.100"],"resolved_at":"2026-11-05T20:43:14Z","dns_checked_at":"2026-11-05T21:17:57.000Z","dns_since":"2026-11-05T21:17:57.000Z","findings":[{"id":"fcvhpidwwoyzuqphy55go","kind":"reported_domain","summary":"Under parcelguardexpress.com, reported by PhishDestroy","first_observed":"2026-11-05T20:41:54.183Z","first_published":"2026-11-05T21:04:39.105Z","source":"phishdestroy","source_name":"PhishDestroy","under":"parcelguardexpress.com","source_url":"https://phishdestroy.io/domain/parcelguardexpress.com/"}],"url":"https://domainspoof.com/live?show=all&q=www.parcelguardexpress.com"},{"hostname":"www.payload.crypto-polis.org","first_observed":"2026-11-05T20:52:44.570Z","first_published":"2026-11-05T21:04:39.105Z","brands":[],"dns":"resolved","resolved":["185.178.208.132","185.178.208.182"],"resolved_at":"2026-11-05T20:59:01Z","dns_checked_at":"2026-11-05T21:17:57.000Z","dns_since":"2026-11-05T21:17:57.000Z","findings":[{"id":"fjaxmtgc3iv4wehr5hr53","kind":"reported_domain","summary":"Under crypto-polis.org, reported by PhishDestroy","first_observed":"2026-11-05T20:52:44.570Z","first_published":"2026-11-05T21:04:39.105Z","source":"phishdestroy","source_name":"PhishDestroy","under":"crypto-polis.org","source_url":"https://phishdestroy.io/domain/crypto-polis.org/"}],"url":"https://domainspoof.com/live?show=all&q=www.payload.crypto-polis.org"},{"hostname":"www.pickshot.app","first_observed":"2026-11-05T20:56:59.413Z","first_published":"2026-11-05T21:04:39.105Z","brands":[],"dns":"resolved","resolved":["104.21.65.213","172.67.167.20"],"resolved_at":"2026-11-05T20:58:08Z","dns_checked_at":"2026-11-05T21:17:57.000Z","dns_since":"2026-11-05T21:17:57.000Z","findings":[{"id":"fhnrswnelu5c3ccb2obi4","kind":"reported_domain","summary":"Under pickshot.app, listed by MetaMask","first_observed":"2026-11-05T20:56:59.413Z","first_published":"2026-11-05T21:04:39.105Z","source":"metamask","source_name":"MetaMask","under":"pickshot.app"}],"url":"https://domainspoof.com/live?show=all&q=www.pickshot.app"},{"hostname":"www.robloxhelp.site","first_observed":"2026-11-05T20:43:14.999Z","first_published":"2026-11-05T21:04:39.105Z","brands":[{"id":"roblox","name":"Roblox","url":"https://domainspoof.com/brands/roblox"}],"dns":"resolved","resolved":["92.53.96.169"],"resolved_at":"2026-11-05T21:17:57Z","dns_checked_at":"2026-11-05T21:17:57.000Z","dns_since":"2026-11-05T21:17:57.000Z","findings":[{"id":"fejoun2zegml7u4u33236","kind":"phishing_infrastructure","summary":"Resolved to 92.53.96.169, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T20:43:14.999Z","first_published":"2026-11-05T21:04:39.105Z","address":"92.53.96.169","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/roblox"},{"hostname":"www.wertbot.com","first_observed":"2026-11-05T20:46:40.021Z","first_published":"2026-11-05T21:04:39.105Z","brands":[],"dns":"resolved","resolved":["185.7.214.147"],"resolved_at":"2026-11-05T20:55:28Z","dns_checked_at":"2026-11-05T21:17:57.000Z","dns_since":"2026-11-05T21:17:57.000Z","findings":[{"id":"fa6xirus24xclk3e3ay4r","kind":"reported_domain","summary":"Under wertbot.com, listed by CERT Polska","first_observed":"2026-11-05T20:46:40.021Z","first_published":"2026-11-05T21:04:39.105Z","source":"cert_polska","source_name":"CERT Polska","under":"wertbot.com"}],"url":"https://domainspoof.com/live?show=all&q=www.wertbot.com"},{"hostname":"zelancia-ai-fr.live","first_observed":"2026-11-05T20:41:54.183Z","first_published":"2026-11-05T21:04:39.105Z","brands":[],"dns":"resolved","resolved":["104.21.19.12","172.67.184.111"],"resolved_at":"2026-11-06T04:05:50Z","dns_checked_at":"2026-11-05T21:17:57.000Z","dns_since":"2026-11-05T21:17:57.000Z","findings":[{"id":"fgahnk7lxmwv2q4e4th6x","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T20:41:54.183Z","first_published":"2026-11-05T21:04:39.105Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=zelancia-ai-fr.live"},{"hostname":"ziraatbankasiai-tr.live","first_observed":"2026-11-05T20:46:40.021Z","first_published":"2026-11-05T21:04:39.105Z","brands":[],"dns":"resolved","resolved":["104.21.80.134","172.67.183.125"],"resolved_at":"2026-11-06T00:15:58Z","dns_checked_at":"2026-11-05T21:17:57.000Z","dns_since":"2026-11-05T21:17:57.000Z","findings":[{"id":"feof57ilftaormdy5uzix","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T20:46:40.021Z","first_published":"2026-11-05T21:04:39.105Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=ziraatbankasiai-tr.live"},{"hostname":"ambc.live","first_observed":"2026-11-05T20:50:51.000Z","first_published":"2026-11-05T20:50:51.000Z","brands":[{"id":"smbc","name":"SMBC","url":"https://domainspoof.com/brands/smbc"}],"dns":"resolved","resolved":["185.150.189.29"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of smbc.co.jp (a letter from a neighbouring key), resolved to 185.150.189.29, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T20:50:51.000Z","first_published":"2026-11-05T20:50:51.000Z","of":"smbc.co.jp","spelling":"adjacent_key","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"185.150.189.29","flagged_at":"2026-11-05T20:50:51Z"}]}],"url":"https://domainspoof.com/brands/smbc"},{"hostname":"anapchat.com","first_observed":"2026-11-05T20:50:51.000Z","first_published":"2026-11-05T20:50:51.000Z","brands":[{"id":"snapchat","name":"Snapchat","url":"https://domainspoof.com/brands/snapchat"}],"dns":"resolved","resolved":["216.245.197.42"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of snapchat.com (a letter from a neighbouring key), resolved to 216.245.197.42, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T20:50:51.000Z","first_published":"2026-11-05T20:50:51.000Z","of":"snapchat.com","spelling":"adjacent_key","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"216.245.197.42","flagged_at":"2026-11-05T20:50:51Z"}]}],"url":"https://domainspoof.com/brands/snapchat"},{"hostname":"aony.com","first_observed":"2026-11-05T20:50:51.000Z","first_published":"2026-11-05T20:50:51.000Z","brands":[{"id":"sony","name":"Sony","url":"https://domainspoof.com/brands/sony"}],"dns":"resolved","resolved":["64.31.3.238"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of sony.com (a letter from a neighbouring key), resolved to 64.31.3.238, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T20:50:51.000Z","first_published":"2026-11-05T20:50:51.000Z","of":"sony.com","spelling":"adjacent_key","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"64.31.3.238","flagged_at":"2026-11-05T20:50:51Z"}]}],"url":"https://domainspoof.com/brands/sony"},{"hostname":"sahrefile.com","first_observed":"2026-11-05T20:50:51.000Z","first_published":"2026-11-05T20:50:51.000Z","brands":[{"id":"sharefile","name":"ShareFile","url":"https://domainspoof.com/brands/sharefile"}],"dns":"resolved","resolved":["213.227.156.74"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of sharefile.com (two letters swapped), resolved to 213.227.156.74, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T20:50:51.000Z","first_published":"2026-11-05T20:50:51.000Z","of":"sharefile.com","spelling":"transposition","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"213.227.156.74","flagged_at":"2026-11-05T20:50:51Z"}]}],"url":"https://domainspoof.com/brands/sharefile"},{"hostname":"sapcex.com","first_observed":"2026-11-05T20:50:51.000Z","first_published":"2026-11-05T20:50:51.000Z","brands":[{"id":"spacex","name":"SpaceX","url":"https://domainspoof.com/brands/spacex"}],"dns":"resolved","resolved":["74.63.219.253"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of spacex.com (two letters swapped), resolved to 74.63.219.253, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T20:50:51.000Z","first_published":"2026-11-05T20:50:51.000Z","of":"spacex.com","spelling":"transposition","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"74.63.219.253","flagged_at":"2026-11-05T20:50:51Z"}]}],"url":"https://domainspoof.com/brands/spacex"},{"hostname":"sauarespace.com","first_observed":"2026-11-05T20:50:51.000Z","first_published":"2026-11-05T20:50:51.000Z","brands":[{"id":"squarespace","name":"Squarespace","url":"https://domainspoof.com/brands/squarespace"}],"dns":"resolved","resolved":["216.245.213.76"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of squarespace.com (a letter from a neighbouring key), resolved to 216.245.213.76, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T20:50:51.000Z","first_published":"2026-11-05T20:50:51.000Z","of":"squarespace.com","spelling":"adjacent_key","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"216.245.213.76","flagged_at":"2026-11-05T20:50:51Z"}]}],"url":"https://domainspoof.com/brands/squarespace"},{"hostname":"sharefule.com","first_observed":"2026-11-05T20:50:51.000Z","first_published":"2026-11-05T20:50:51.000Z","brands":[{"id":"sharefile","name":"ShareFile","url":"https://domainspoof.com/brands/sharefile"}],"dns":"resolved","resolved":["23.105.175.18"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of sharefile.com (a letter from a neighbouring key), resolved to 23.105.175.18, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T20:50:51.000Z","first_published":"2026-11-05T20:50:51.000Z","of":"sharefile.com","spelling":"adjacent_key","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"23.105.175.18","flagged_at":"2026-11-05T20:50:51Z"}]}],"url":"https://domainspoof.com/brands/sharefile"},{"hostname":"shien.live","first_observed":"2026-11-05T20:50:51.000Z","first_published":"2026-11-05T20:50:51.000Z","brands":[{"id":"shein","name":"Shein","url":"https://domainspoof.com/brands/shein"}],"dns":"resolved","resolved":["212.92.105.19"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of shein.com (two letters swapped), resolved to 212.92.105.19, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T20:50:51.000Z","first_published":"2026-11-05T20:50:51.000Z","of":"shein.com","spelling":"transposition","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"212.92.105.19","flagged_at":"2026-11-05T20:50:51Z"}]}],"url":"https://domainspoof.com/brands/shein"},{"hostname":"shien.store","first_observed":"2026-11-05T20:50:51.000Z","first_published":"2026-11-05T20:50:51.000Z","brands":[{"id":"shein","name":"Shein","url":"https://domainspoof.com/brands/shein"}],"dns":"resolved","resolved":["78.157.209.171"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of shein.com (two letters swapped), resolved to 78.157.209.171, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T20:50:51.000Z","first_published":"2026-11-05T20:50:51.000Z","of":"shein.com","spelling":"transposition","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"78.157.209.171","flagged_at":"2026-11-05T20:50:51Z"}]}],"url":"https://domainspoof.com/brands/shein"},{"hostname":"shoppee.ph","first_observed":"2026-11-05T20:50:51.000Z","first_published":"2026-11-05T20:50:51.000Z","brands":[{"id":"shopee","name":"Shopee","url":"https://domainspoof.com/brands/shopee"}],"dns":"resolved","resolved":["23.82.16.54"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of shopee.com.br (a doubled letter), resolved to 23.82.16.54, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T20:50:51.000Z","first_published":"2026-11-05T20:50:51.000Z","of":"shopee.com.br","spelling":"repetition","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"23.82.16.54","flagged_at":"2026-11-05T20:50:51Z"}]}],"url":"https://domainspoof.com/brands/shopee"},{"hostname":"sigaporeair.com","first_observed":"2026-11-05T20:50:51.000Z","first_published":"2026-11-05T20:50:51.000Z","brands":[{"id":"singapore-airlines","name":"Singapore Airlines","url":"https://domainspoof.com/brands/singapore-airlines"}],"dns":"resolved","resolved":["69.162.80.56"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of singaporeair.com (a dropped letter), resolved to 69.162.80.56, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T20:50:51.000Z","first_published":"2026-11-05T20:50:51.000Z","of":"singaporeair.com","spelling":"omission","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"69.162.80.56","flagged_at":"2026-11-05T20:50:51Z"}]}],"url":"https://domainspoof.com/brands/singapore-airlines"},{"hostname":"siteground.live","first_observed":"2026-11-05T20:50:51.000Z","first_published":"2026-11-05T20:50:51.000Z","brands":[{"id":"siteground","name":"SiteGround","url":"https://domainspoof.com/brands/siteground"}],"dns":"resolved","resolved":["185.150.189.123"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of siteground.com (same name, other ending), resolved to 185.150.189.123, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T20:50:51.000Z","first_published":"2026-11-05T20:50:51.000Z","of":"siteground.com","spelling":"tld","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"185.150.189.123","flagged_at":"2026-11-05T20:50:51Z"}]}],"url":"https://domainspoof.com/brands/siteground"},{"hostname":"smartthins.com","first_observed":"2026-11-05T20:50:51.000Z","first_published":"2026-11-05T20:50:51.000Z","brands":[{"id":"samsung","name":"Samsung","url":"https://domainspoof.com/brands/samsung"}],"dns":"resolved","resolved":["69.162.80.53"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of smartthings.com (a dropped letter), resolved to 69.162.80.53, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T20:50:51.000Z","first_published":"2026-11-05T20:50:51.000Z","of":"smartthings.com","spelling":"omission","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"69.162.80.53","flagged_at":"2026-11-05T20:50:51Z"}]}],"url":"https://domainspoof.com/brands/samsung"},{"hostname":"smbx.io","first_observed":"2026-11-05T20:50:51.000Z","first_published":"2026-11-05T20:50:51.000Z","brands":[{"id":"smbc","name":"SMBC","url":"https://domainspoof.com/brands/smbc"}],"dns":"resolved","resolved":["173.234.157.138"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of smbc.co.jp (a letter from a neighbouring key), resolved to 173.234.157.138, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T20:50:51.000Z","first_published":"2026-11-05T20:50:51.000Z","of":"smbc.co.jp","spelling":"adjacent_key","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"173.234.157.138","flagged_at":"2026-11-05T20:50:51Z"}]}],"url":"https://domainspoof.com/brands/smbc"},{"hostname":"snapchhat.com","first_observed":"2026-11-05T20:50:51.000Z","first_published":"2026-11-05T20:50:51.000Z","brands":[{"id":"snapchat","name":"Snapchat","url":"https://domainspoof.com/brands/snapchat"}],"dns":"resolved","resolved":["77.247.182.245"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of snapchat.com (a doubled letter), resolved to 77.247.182.245, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T20:50:51.000Z","first_published":"2026-11-05T20:50:51.000Z","of":"snapchat.com","spelling":"repetition","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"77.247.182.245","flagged_at":"2026-11-05T20:50:51Z"}]}],"url":"https://domainspoof.com/brands/snapchat"},{"hostname":"sont.net","first_observed":"2026-11-05T20:50:51.000Z","first_published":"2026-11-05T20:50:51.000Z","brands":[{"id":"sony","name":"Sony","url":"https://domainspoof.com/brands/sony"}],"dns":"resolved","resolved":["212.92.104.115"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of sony.com (a letter from a neighbouring key), resolved to 212.92.104.115, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T20:50:51.000Z","first_published":"2026-11-05T20:50:51.000Z","of":"sony.com","spelling":"adjacent_key","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"212.92.104.115","flagged_at":"2026-11-05T20:50:51Z"}]}],"url":"https://domainspoof.com/brands/sony"},{"hostname":"spoify.com","first_observed":"2026-11-05T20:50:51.000Z","first_published":"2026-11-05T20:50:51.000Z","brands":[{"id":"spotify","name":"Spotify","url":"https://domainspoof.com/brands/spotify"}],"dns":"resolved","resolved":["37.48.77.79"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of spotify.com (a dropped letter), resolved to 37.48.77.79, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T20:50:51.000Z","first_published":"2026-11-05T20:50:51.000Z","of":"spotify.com","spelling":"omission","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"37.48.77.79","flagged_at":"2026-11-05T20:50:51Z"}]}],"url":"https://domainspoof.com/brands/spotify"},{"hostname":"sppotify.com","first_observed":"2026-11-05T20:50:51.000Z","first_published":"2026-11-05T20:50:51.000Z","brands":[{"id":"spotify","name":"Spotify","url":"https://domainspoof.com/brands/spotify"}],"dns":"resolved","resolved":["45.82.67.96"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of spotify.com (a doubled letter), resolved to 45.82.67.96, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T20:50:51.000Z","first_published":"2026-11-05T20:50:51.000Z","of":"spotify.com","spelling":"repetition","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"45.82.67.96","flagged_at":"2026-11-05T20:50:51Z"}]}],"url":"https://domainspoof.com/brands/spotify"},{"hostname":"sqarespace.com","first_observed":"2026-11-05T20:50:51.000Z","first_published":"2026-11-05T20:50:51.000Z","brands":[{"id":"squarespace","name":"Squarespace","url":"https://domainspoof.com/brands/squarespace"}],"dns":"resolved","resolved":["199.193.114.101"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of squarespace.com (a dropped letter), resolved to 199.193.114.101, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T20:50:51.000Z","first_published":"2026-11-05T20:50:51.000Z","of":"squarespace.com","spelling":"omission","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"199.193.114.101","flagged_at":"2026-11-05T20:50:51Z"}]}],"url":"https://domainspoof.com/brands/squarespace"},{"hostname":"squaresoace.com","first_observed":"2026-11-05T20:50:51.000Z","first_published":"2026-11-05T20:50:51.000Z","brands":[{"id":"squarespace","name":"Squarespace","url":"https://domainspoof.com/brands/squarespace"}],"dns":"resolved","resolved":["212.92.105.210"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of squarespace.com (a letter from a neighbouring key), resolved to 212.92.105.210, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T20:50:51.000Z","first_published":"2026-11-05T20:50:51.000Z","of":"squarespace.com","spelling":"adjacent_key","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"212.92.105.210","flagged_at":"2026-11-05T20:50:51Z"}]}],"url":"https://domainspoof.com/brands/squarespace"},{"hostname":"squarespce.com","first_observed":"2026-11-05T20:50:51.000Z","first_published":"2026-11-05T20:50:51.000Z","brands":[{"id":"squarespace","name":"Squarespace","url":"https://domainspoof.com/brands/squarespace"}],"dns":"resolved","resolved":["69.162.80.60"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of squarespace.com (a dropped letter), resolved to 69.162.80.60, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T20:50:51.000Z","first_published":"2026-11-05T20:50:51.000Z","of":"squarespace.com","spelling":"omission","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"69.162.80.60","flagged_at":"2026-11-05T20:50:51Z"}]}],"url":"https://domainspoof.com/brands/squarespace"},{"hostname":"squaresppace.com","first_observed":"2026-11-05T20:50:51.000Z","first_published":"2026-11-05T20:50:51.000Z","brands":[{"id":"squarespace","name":"Squarespace","url":"https://domainspoof.com/brands/squarespace"}],"dns":"resolved","resolved":["94.75.193.71"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of squarespace.com (a doubled letter), resolved to 94.75.193.71, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T20:50:51.000Z","first_published":"2026-11-05T20:50:51.000Z","of":"squarespace.com","spelling":"repetition","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"94.75.193.71","flagged_at":"2026-11-05T20:50:51Z"}]}],"url":"https://domainspoof.com/brands/squarespace"},{"hostname":"statebankofindia.co","first_observed":"2026-11-05T20:50:51.000Z","first_published":"2026-11-05T20:50:51.000Z","brands":[{"id":"state-bank-of-india","name":"State Bank of India","url":"https://domainspoof.com/brands/state-bank-of-india"}],"dns":"resolved","resolved":["78.157.209.171"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of statebankofindia.hk (same name, other ending), resolved to 78.157.209.171, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T20:50:51.000Z","first_published":"2026-11-05T20:50:51.000Z","of":"statebankofindia.hk","spelling":"tld","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"78.157.209.171","flagged_at":"2026-11-05T20:50:51Z"}]}],"url":"https://domainspoof.com/brands/state-bank-of-india"},{"hostname":"steacommunity.com","first_observed":"2026-11-05T20:50:51.000Z","first_published":"2026-11-05T20:50:51.000Z","brands":[{"id":"steam","name":"Steam","url":"https://domainspoof.com/brands/steam"}],"dns":"resolved","resolved":["74.63.219.253"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of steamcommunity.com (a dropped letter), resolved to 74.63.219.253, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T20:50:51.000Z","first_published":"2026-11-05T20:50:51.000Z","of":"steamcommunity.com","spelling":"omission","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"74.63.219.253","flagged_at":"2026-11-05T20:50:51Z"}]}],"url":"https://domainspoof.com/brands/steam"},{"hostname":"steamcommuity.com","first_observed":"2026-11-05T20:50:51.000Z","first_published":"2026-11-05T20:50:51.000Z","brands":[{"id":"steam","name":"Steam","url":"https://domainspoof.com/brands/steam"}],"dns":"resolved","resolved":["69.162.80.61"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of steamcommunity.com (a dropped letter), resolved to 69.162.80.61, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T20:50:51.000Z","first_published":"2026-11-05T20:50:51.000Z","of":"steamcommunity.com","spelling":"omission","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"69.162.80.61","flagged_at":"2026-11-05T20:50:51Z"}]}],"url":"https://domainspoof.com/brands/steam"},{"hostname":"steamcommuntiy.com","first_observed":"2026-11-05T20:50:51.000Z","first_published":"2026-11-05T20:50:51.000Z","brands":[{"id":"steam","name":"Steam","url":"https://domainspoof.com/brands/steam"}],"dns":"resolved","resolved":["69.162.80.61"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of steamcommunity.com (two letters swapped), resolved to 69.162.80.61, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T20:50:51.000Z","first_published":"2026-11-05T20:50:51.000Z","of":"steamcommunity.com","spelling":"transposition","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"69.162.80.61","flagged_at":"2026-11-05T20:50:51Z"}]}],"url":"https://domainspoof.com/brands/steam"},{"hostname":"steammpowered.com","first_observed":"2026-11-05T20:50:51.000Z","first_published":"2026-11-05T20:50:51.000Z","brands":[{"id":"steam","name":"Steam","url":"https://domainspoof.com/brands/steam"}],"dns":"resolved","resolved":["216.245.213.75"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of steampowered.com (a doubled letter), resolved to 216.245.213.75, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T20:50:51.000Z","first_published":"2026-11-05T20:50:51.000Z","of":"steampowered.com","spelling":"repetition","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"216.245.213.75","flagged_at":"2026-11-05T20:50:51Z"}]}],"url":"https://domainspoof.com/brands/steam"},{"hostname":"steampowered.org","first_observed":"2026-11-05T20:50:51.000Z","first_published":"2026-11-05T20:50:51.000Z","brands":[{"id":"steam","name":"Steam","url":"https://domainspoof.com/brands/steam"}],"dns":"resolved","resolved":["69.162.80.55"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of steampowered.com (same name, other ending), resolved to 69.162.80.55, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T20:50:51.000Z","first_published":"2026-11-05T20:50:51.000Z","of":"steampowered.com","spelling":"tld","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"69.162.80.55","flagged_at":"2026-11-05T20:50:51Z"}]}],"url":"https://domainspoof.com/brands/steam"},{"hostname":"steampowred.com","first_observed":"2026-11-05T20:50:51.000Z","first_published":"2026-11-05T20:50:51.000Z","brands":[{"id":"steam","name":"Steam","url":"https://domainspoof.com/brands/steam"}],"dns":"resolved","resolved":["45.82.67.195"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of steampowered.com (a dropped letter), resolved to 45.82.67.195, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T20:50:51.000Z","first_published":"2026-11-05T20:50:51.000Z","of":"steampowered.com","spelling":"omission","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"45.82.67.195","flagged_at":"2026-11-05T20:50:51Z"}]}],"url":"https://domainspoof.com/brands/steam"},{"hostname":"steampowwered.com","first_observed":"2026-11-05T20:50:51.000Z","first_published":"2026-11-05T20:50:51.000Z","brands":[{"id":"steam","name":"Steam","url":"https://domainspoof.com/brands/steam"}],"dns":"resolved","resolved":["212.7.194.53"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of steampowered.com (a doubled letter), resolved to 212.7.194.53, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T20:50:51.000Z","first_published":"2026-11-05T20:50:51.000Z","of":"steampowered.com","spelling":"repetition","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"212.7.194.53","flagged_at":"2026-11-05T20:50:51Z"}]}],"url":"https://domainspoof.com/brands/steam"},{"hostname":"001002.duckdns.org","first_observed":"2026-11-05T20:18:45.204Z","first_published":"2026-11-05T20:49:00.545Z","brands":[],"dns":"resolved","resolved":["64.89.160.238","192.169.69.25"],"resolved_at":"2026-11-05T20:21:54Z","dns_checked_at":"2026-11-05T20:57:37.000Z","dns_since":"2026-11-05T20:57:37.000Z","findings":[{"id":"fhprgeydtrznqtihz4j67","kind":"reported_domain","summary":"Listed by USOM","first_observed":"2026-11-05T20:18:45.204Z","first_published":"2026-11-05T20:49:00.545Z","source":"usom","source_name":"USOM"}],"url":"https://domainspoof.com/live?show=all&q=001002.duckdns.org"},{"hostname":"91777.in","first_observed":"2026-11-05T20:11:22.932Z","first_published":"2026-11-05T20:49:00.545Z","brands":[],"dns":"resolved","resolved":["104.21.73.154","172.67.190.152"],"resolved_at":"2026-11-06T05:06:04Z","dns_checked_at":"2026-11-05T20:57:37.000Z","dns_since":"2026-11-05T20:57:37.000Z","findings":[{"id":"f36lb7d6epg3csb6gozdr","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T20:11:22.932Z","first_published":"2026-11-05T20:49:00.545Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/91777.in/"}],"url":"https://domainspoof.com/live?show=all&q=91777.in"},{"hostname":"abacusdarknet.org","first_observed":"2026-11-05T20:16:29.525Z","first_published":"2026-11-05T20:49:00.545Z","brands":[],"dns":"resolved","resolved":["104.21.56.205","172.67.187.222"],"resolved_at":"2026-11-05T20:17:01Z","dns_checked_at":"2026-11-05T20:57:37.000Z","dns_since":"2026-11-05T20:57:37.000Z","findings":[{"id":"fepkgblswvxtn7c7gfuyu","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T20:16:29.525Z","first_published":"2026-11-05T20:49:00.545Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/abacusdarknet.org/"}],"url":"https://domainspoof.com/live?show=all&q=abacusdarknet.org"},{"hostname":"accesdocument.com","first_observed":"2026-11-05T20:21:03.017Z","first_published":"2026-11-05T20:49:00.545Z","brands":[],"dns":"resolved","resolved":["144.172.109.240"],"resolved_at":"2026-11-05T20:21:28Z","dns_checked_at":"2026-11-05T20:57:37.000Z","dns_since":"2026-11-05T20:57:37.000Z","findings":[{"id":"fwidug4ed334vago2lkwk","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T20:21:03.017Z","first_published":"2026-11-05T20:49:00.545Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=accesdocument.com"},{"hostname":"aethir-allocations.xyz","first_observed":"2026-11-05T20:16:29.525Z","first_published":"2026-11-05T20:49:00.545Z","brands":[],"dns":"resolved","resolved":["104.21.81.134","172.67.161.50"],"resolved_at":"2026-11-05T20:17:07Z","dns_checked_at":"2026-11-05T20:57:37.000Z","dns_since":"2026-11-05T20:57:37.000Z","findings":[{"id":"fno7y3jl4fpacfbxubyl7","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T20:16:29.525Z","first_published":"2026-11-05T20:49:00.545Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=aethir-allocations.xyz"},{"hostname":"aiyaphorm-it.live","first_observed":"2026-11-05T20:11:22.932Z","first_published":"2026-11-05T20:49:00.545Z","brands":[],"dns":"resolved","resolved":["104.21.6.128","172.67.134.221"],"resolved_at":"2026-11-05T20:16:38Z","dns_checked_at":"2026-11-05T20:57:37.000Z","dns_since":"2026-11-05T20:57:37.000Z","findings":[{"id":"forwsmtflascbfdl2jwip","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T20:11:22.932Z","first_published":"2026-11-05T20:49:00.545Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=aiyaphorm-it.live"},{"hostname":"albafundorix.live","first_observed":"2026-11-05T20:21:03.017Z","first_published":"2026-11-05T20:49:00.545Z","brands":[],"dns":"resolved","resolved":["104.21.13.247","172.67.133.140"],"resolved_at":"2026-11-05T20:21:34Z","dns_checked_at":"2026-11-05T20:57:37.000Z","dns_since":"2026-11-05T20:57:37.000Z","findings":[{"id":"f6hzvgnrj3x3c6yzqg7wu","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T20:21:03.017Z","first_published":"2026-11-05T20:49:00.545Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=albafundorix.live"},{"hostname":"allocations-asterdex.xyz","first_observed":"2026-11-05T20:26:30.950Z","first_published":"2026-11-05T20:49:00.545Z","brands":[{"id":"aster-dex","name":"Aster DEX","url":"https://domainspoof.com/brands/aster-dex"}],"dns":"resolved","resolved":["104.21.44.124","172.67.199.190","2606:4700:3030::6815:2c7c","2606:4700:3032::ac43:c7be"],"resolved_at":"2026-11-05T20:31:11Z","dns_checked_at":"2026-11-05T20:57:37.000Z","dns_since":"2026-11-05T20:57:37.000Z","findings":[{"id":"fzxl4l2rgjl5uuwy6b4iw","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T20:26:30.950Z","first_published":"2026-11-05T20:49:00.545Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/brands/aster-dex"},{"hostname":"alphaholdingsltd.org","first_observed":"2026-11-05T20:36:22.122Z","first_published":"2026-11-05T20:49:00.545Z","brands":[],"dns":"resolved","resolved":["149.56.180.32"],"resolved_at":"2026-11-05T20:48:01Z","dns_checked_at":"2026-11-05T20:57:37.000Z","dns_since":"2026-11-05T20:57:37.000Z","findings":[{"id":"fuqlfkk3jpzndx5kuebmv","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T20:36:22.122Z","first_published":"2026-11-05T20:49:00.545Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/alphaholdingsltd.org/"}],"url":"https://domainspoof.com/live?show=all&q=alphaholdingsltd.org"},{"hostname":"amltrust.org","first_observed":"2026-11-05T20:11:22.932Z","first_published":"2026-11-05T20:49:00.545Z","brands":[],"dns":"resolved","resolved":["103.224.182.250"],"resolved_at":"2026-11-05T20:16:38Z","dns_checked_at":"2026-11-05T20:57:37.000Z","dns_since":"2026-11-05T20:57:37.000Z","findings":[{"id":"fqz4idqqa5fhstbgoaqc4","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T20:11:22.932Z","first_published":"2026-11-05T20:49:00.545Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/amltrust.org/"}],"url":"https://domainspoof.com/live?show=all&q=amltrust.org"},{"hostname":"amplolucrenio.live","first_observed":"2026-11-05T20:31:23.623Z","first_published":"2026-11-05T20:49:00.545Z","brands":[],"dns":"resolved","resolved":["104.21.51.181","172.67.183.148"],"resolved_at":"2026-11-05T20:31:53Z","dns_checked_at":"2026-11-05T20:57:37.000Z","dns_since":"2026-11-05T20:57:37.000Z","findings":[{"id":"fewf2zfffujkjkcozbbnt","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T20:31:23.623Z","first_published":"2026-11-05T20:49:00.545Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=amplolucrenio.live"},{"hostname":"api.mellgamex.live","first_observed":"2026-11-05T20:11:22.932Z","first_published":"2026-11-05T20:49:00.545Z","brands":[],"dns":"resolved","resolved":["89.248.67.125"],"resolved_at":"2026-11-05T20:16:38Z","dns_checked_at":"2026-11-05T20:57:37.000Z","dns_since":"2026-11-05T20:57:37.000Z","findings":[{"id":"fl7unjwya2q7tq3jndf7g","kind":"reported_domain","summary":"Under mellgamex.live, reported by PhishDestroy","first_observed":"2026-11-05T20:11:22.932Z","first_published":"2026-11-05T20:49:00.545Z","source":"phishdestroy","source_name":"PhishDestroy","under":"mellgamex.live","source_url":"https://phishdestroy.io/domain/mellgamex.live/"}],"url":"https://domainspoof.com/live?show=all&q=api.mellgamex.live"},{"hostname":"api.mellstroy.gifts","first_observed":"2026-11-05T20:16:29.525Z","first_published":"2026-11-05T20:49:00.545Z","brands":[],"dns":"resolved","resolved":["89.248.67.195"],"resolved_at":"2026-11-05T20:17:07Z","dns_checked_at":"2026-11-05T20:57:37.000Z","dns_since":"2026-11-05T20:57:37.000Z","findings":[{"id":"f426s6y354kldrwqqvu5u","kind":"reported_domain","summary":"Under mellstroy.gifts, reported by PhishDestroy","first_observed":"2026-11-05T20:16:29.525Z","first_published":"2026-11-05T20:49:00.545Z","source":"phishdestroy","source_name":"PhishDestroy","under":"mellstroy.gifts","source_url":"https://phishdestroy.io/domain/mellstroy.gifts/"}],"url":"https://domainspoof.com/live?show=all&q=api.mellstroy.gifts"},{"hostname":"api.messageanonbot.xyz","first_observed":"2026-11-05T20:21:03.017Z","first_published":"2026-11-05T20:49:00.545Z","brands":[],"dns":"resolved","resolved":["104.21.77.200","172.67.211.113"],"resolved_at":"2026-11-05T20:21:34Z","dns_checked_at":"2026-11-05T20:57:37.000Z","dns_since":"2026-11-05T20:57:37.000Z","findings":[{"id":"fso4kyyiyoqvcurr3jh62","kind":"reported_domain","summary":"Under messageanonbot.xyz, reported by PhishDestroy","first_observed":"2026-11-05T20:21:03.017Z","first_published":"2026-11-05T20:49:00.545Z","source":"phishdestroy","source_name":"PhishDestroy","under":"messageanonbot.xyz","source_url":"https://phishdestroy.io/domain/messageanonbot.xyz/"}],"url":"https://domainspoof.com/live?show=all&q=api.messageanonbot.xyz"},{"hostname":"artemisgpt-fr.live","first_observed":"2026-11-05T20:36:22.122Z","first_published":"2026-11-05T20:49:00.545Z","brands":[],"dns":"resolved","resolved":["104.21.69.120","172.67.208.3"],"resolved_at":"2026-11-06T03:26:25Z","dns_checked_at":"2026-11-05T20:57:37.000Z","dns_since":"2026-11-05T20:57:37.000Z","findings":[{"id":"fakxv2nqk5vtd5qkggb2f","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T20:36:22.122Z","first_published":"2026-11-05T20:49:00.545Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=artemisgpt-fr.live"},{"hostname":"auronix-pro.live","first_observed":"2026-11-05T20:16:29.525Z","first_published":"2026-11-05T20:49:00.545Z","brands":[],"dns":"resolved","resolved":["104.21.86.30","172.67.214.100"],"resolved_at":"2026-11-05T20:17:07Z","dns_checked_at":"2026-11-05T20:57:37.000Z","dns_since":"2026-11-05T20:57:37.000Z","findings":[{"id":"f6ul3co7nbc2xy4djkrpa","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T20:16:29.525Z","first_published":"2026-11-05T20:49:00.545Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=auronix-pro.live"},{"hostname":"autodiscover.lekelereson.com","first_observed":"2026-11-05T20:16:29.525Z","first_published":"2026-11-05T20:49:00.545Z","brands":[],"dns":"resolved","resolved":["162.4.84.255"],"resolved_at":"2026-11-05T20:17:07Z","dns_checked_at":"2026-11-05T20:57:37.000Z","dns_since":"2026-11-05T20:57:37.000Z","findings":[{"id":"fgsgbqaphhtpo7skqxkku","kind":"reported_domain","summary":"Under lekelereson.com, listed by CERT Polska","first_observed":"2026-11-05T20:16:29.525Z","first_published":"2026-11-05T20:49:00.545Z","source":"cert_polska","source_name":"CERT Polska","under":"lekelereson.com"}],"url":"https://domainspoof.com/live?show=all&q=autodiscover.lekelereson.com"},{"hostname":"axeovix-de.live","first_observed":"2026-11-05T20:36:22.122Z","first_published":"2026-11-05T20:49:00.545Z","brands":[],"dns":"resolved","resolved":["104.21.91.242","172.67.182.41"],"resolved_at":"2026-11-05T20:48:09Z","dns_checked_at":"2026-11-05T20:57:37.000Z","dns_since":"2026-11-05T20:57:37.000Z","findings":[{"id":"fyxvpyjwyvibigf2fe2ec","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T20:36:22.122Z","first_published":"2026-11-05T20:49:00.545Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=axeovix-de.live"},{"hostname":"banabatcakala.lol","first_observed":"2026-11-05T20:18:45.204Z","first_published":"2026-11-05T20:49:00.545Z","brands":[],"dns":"resolved","resolved":["88.99.15.166"],"resolved_at":"2026-11-05T20:21:54Z","dns_checked_at":"2026-11-05T20:57:37.000Z","dns_since":"2026-11-05T20:57:37.000Z","findings":[{"id":"fw46exvmmuknzjqi2rvuh","kind":"reported_domain","summary":"Listed by USOM","first_observed":"2026-11-05T20:18:45.204Z","first_published":"2026-11-05T20:49:00.545Z","source":"usom","source_name":"USOM"}],"url":"https://domainspoof.com/live?show=all&q=banabatcakala.lol"},{"hostname":"bloxlink.win","first_observed":"2026-11-05T20:26:30.950Z","first_published":"2026-11-05T20:49:00.545Z","brands":[],"dns":"resolved","resolved":["202.170.75.200"],"resolved_at":"2026-11-05T20:31:34Z","dns_checked_at":"2026-11-05T20:57:37.000Z","dns_since":"2026-11-05T20:57:37.000Z","findings":[{"id":"fkxlnc7y6jfbtaqv7sau3","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T20:26:30.950Z","first_published":"2026-11-05T20:49:00.545Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/bloxlink.win/"}],"url":"https://domainspoof.com/live?show=all&q=bloxlink.win"},{"hostname":"bluebubbletea.com","first_observed":"2026-11-05T20:26:30.950Z","first_published":"2026-11-05T20:49:00.545Z","brands":[],"dns":"resolved","resolved":["104.21.88.44","172.67.172.137"],"resolved_at":"2026-11-05T20:31:34Z","dns_checked_at":"2026-11-05T20:57:37.000Z","dns_since":"2026-11-05T20:57:37.000Z","findings":[{"id":"fsqos3nayq5rffbfro2u6","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T20:26:30.950Z","first_published":"2026-11-05T20:49:00.545Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=bluebubbletea.com"},{"hostname":"brulvaxen.live","first_observed":"2026-11-05T20:21:03.017Z","first_published":"2026-11-05T20:49:00.545Z","brands":[],"dns":"resolved","resolved":["104.21.58.123","172.67.204.8"],"resolved_at":"2026-11-05T20:21:41Z","dns_checked_at":"2026-11-05T20:57:37.000Z","dns_since":"2026-11-05T20:57:37.000Z","findings":[{"id":"fvzhnhkovedtb6gxfpg2f","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T20:21:03.017Z","first_published":"2026-11-05T20:49:00.545Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=brulvaxen.live"},{"hostname":"btc-phloris.live","first_observed":"2026-11-05T20:21:03.017Z","first_published":"2026-11-05T20:49:00.545Z","brands":[],"dns":"resolved","resolved":["104.21.53.138","172.67.213.99"],"resolved_at":"2026-11-05T20:21:41Z","dns_checked_at":"2026-11-05T20:57:37.000Z","dns_since":"2026-11-05T20:57:37.000Z","findings":[{"id":"filacqnqtqcxds55bnpuj","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T20:21:03.017Z","first_published":"2026-11-05T20:49:00.545Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=btc-phloris.live"},{"hostname":"calincapital.live","first_observed":"2026-11-05T20:16:29.525Z","first_published":"2026-11-05T20:49:00.545Z","brands":[],"dns":"resolved","resolved":["104.21.30.60","172.67.172.48"],"resolved_at":"2026-11-05T20:29:26Z","dns_checked_at":"2026-11-05T20:57:37.000Z","dns_since":"2026-11-05T20:57:37.000Z","findings":[{"id":"f5pobe725i6u5hw36wg4g","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T20:16:29.525Z","first_published":"2026-11-05T20:49:00.545Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=calincapital.live"},{"hostname":"capitalfundbnk.live","first_observed":"2026-11-05T20:26:30.950Z","first_published":"2026-11-05T20:49:00.545Z","brands":[],"dns":"resolved","resolved":["34.76.205.124"],"resolved_at":"2026-11-05T20:31:45Z","dns_checked_at":"2026-11-05T20:57:37.000Z","dns_since":"2026-11-05T20:57:37.000Z","findings":[{"id":"f4a4hn4u7uzevrmspsrhz","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T20:26:30.950Z","first_published":"2026-11-05T20:49:00.545Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/capitalfundbnk.live/"}],"url":"https://domainspoof.com/live?show=all&q=capitalfundbnk.live"},{"hostname":"chameleonsol.art","first_observed":"2026-11-05T20:21:03.017Z","first_published":"2026-11-05T20:49:00.545Z","brands":[],"dns":"resolved","resolved":["216.198.79.1"],"resolved_at":"2026-11-05T20:21:43Z","dns_checked_at":"2026-11-05T20:57:37.000Z","dns_since":"2026-11-05T20:57:37.000Z","findings":[{"id":"f3sswif7waj23vn6szyar","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T20:21:03.017Z","first_published":"2026-11-05T20:49:00.545Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=chameleonsol.art"},{"hostname":"cicekcidunyasi.duckdns.org","first_observed":"2026-11-05T20:18:45.204Z","first_published":"2026-11-05T20:49:00.545Z","brands":[],"dns":"resolved","resolved":["192.169.69.25","217.60.102.144"],"resolved_at":"2026-11-05T20:21:54Z","dns_checked_at":"2026-11-05T20:57:37.000Z","dns_since":"2026-11-05T20:57:37.000Z","findings":[{"id":"fpqkvi5lhpgznye2rbh35","kind":"reported_domain","summary":"Listed by USOM","first_observed":"2026-11-05T20:18:45.204Z","first_published":"2026-11-05T20:49:00.545Z","source":"usom","source_name":"USOM"}],"url":"https://domainspoof.com/live?show=all&q=cicekcidunyasi.duckdns.org"},{"hostname":"cn-roblox.com","first_observed":"2026-11-05T20:39:08.698Z","first_published":"2026-11-05T20:49:00.545Z","brands":[{"id":"roblox","name":"Roblox","url":"https://domainspoof.com/brands/roblox"}],"dns":"resolved","resolved":["134.122.140.181"],"resolved_at":"2026-11-05T20:57:37Z","dns_checked_at":"2026-11-05T20:57:37.000Z","dns_since":"2026-11-05T20:57:37.000Z","findings":[{"id":"fcbyhb2q25brjdlmjbwjm","kind":"spamhaus_drop","summary":"Resolved to 134.122.140.181 on Spamhaus DROP","first_observed":"2026-11-05T20:39:08.698Z","first_published":"2026-11-05T20:49:00.545Z","address":"134.122.140.181","list":"spamhaus_drop","list_name":"Spamhaus DROP"}],"url":"https://domainspoof.com/brands/roblox"},{"hostname":"cpcontacts.yinebanagel.com","first_observed":"2026-11-05T20:21:03.017Z","first_published":"2026-11-05T20:49:00.545Z","brands":[],"dns":"resolved","resolved":["162.4.84.255"],"resolved_at":"2026-11-05T20:21:50Z","dns_checked_at":"2026-11-05T20:57:37.000Z","dns_since":"2026-11-05T20:57:37.000Z","findings":[{"id":"fr5jr2dqidszr7bjnsl3s","kind":"reported_domain","summary":"Under yinebanagel.com, listed by CERT Polska","first_observed":"2026-11-05T20:21:03.017Z","first_published":"2026-11-05T20:49:00.545Z","source":"cert_polska","source_name":"CERT Polska","under":"yinebanagel.com"}],"url":"https://domainspoof.com/live?show=all&q=cpcontacts.yinebanagel.com"},{"hostname":"cvvfullzshop.cc","first_observed":"2026-11-05T20:16:29.525Z","first_published":"2026-11-05T20:49:00.545Z","brands":[],"dns":"resolved","resolved":["104.21.28.156","172.67.170.232"],"resolved_at":"2026-11-05T20:29:44Z","dns_checked_at":"2026-11-05T20:57:37.000Z","dns_since":"2026-11-05T20:57:37.000Z","findings":[{"id":"fnvmlaw4koieqietd27a5","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T20:16:29.525Z","first_published":"2026-11-05T20:49:00.545Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/cvvfullzshop.cc/"}],"url":"https://domainspoof.com/live?show=all&q=cvvfullzshop.cc"},{"hostname":"dashboard-rovr.xyz","first_observed":"2026-11-05T20:21:03.017Z","first_published":"2026-11-05T20:49:00.545Z","brands":[],"dns":"resolved","resolved":["104.21.19.208","172.67.190.50"],"resolved_at":"2026-11-05T20:21:50Z","dns_checked_at":"2026-11-05T20:57:37.000Z","dns_since":"2026-11-05T20:57:37.000Z","findings":[{"id":"flm7cnjtv5gmnakmw3asp","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T20:21:03.017Z","first_published":"2026-11-05T20:49:00.545Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/dashboard-rovr.xyz/"}],"url":"https://domainspoof.com/live?show=all&q=dashboard-rovr.xyz"},{"hostname":"dofus-touch-fr.com","first_observed":"2026-11-05T20:36:59.707Z","first_published":"2026-11-05T20:49:00.545Z","brands":[{"id":"dofus","name":"Dofus","url":"https://domainspoof.com/brands/dofus"}],"dns":"resolved","resolved":["176.123.0.55"],"resolved_at":"2026-11-05T20:57:37Z","dns_checked_at":"2026-11-05T20:57:37.000Z","dns_since":"2026-11-05T20:57:37.000Z","findings":[{"id":"fju2ksz2jlfx7s7n62hjh","kind":"phishing_infrastructure","summary":"Resolved to 176.123.0.55, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T20:36:59.707Z","first_published":"2026-11-05T20:49:00.545Z","address":"176.123.0.55","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/dofus"},{"hostname":"dota2buff.net","first_observed":"2026-11-05T20:21:03.017Z","first_published":"2026-11-05T20:49:00.545Z","brands":[],"dns":"resolved","resolved":["104.21.41.179","172.67.149.22"],"resolved_at":"2026-11-05T20:21:50Z","dns_checked_at":"2026-11-05T20:57:37.000Z","dns_since":"2026-11-05T20:57:37.000Z","findings":[{"id":"fm534z6j7u6ka5oq3vjez","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T20:21:03.017Z","first_published":"2026-11-05T20:49:00.545Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/dota2buff.net/"}],"url":"https://domainspoof.com/live?show=all&q=dota2buff.net"},{"hostname":"ehel4he5e2v4266s.webredirect.org","first_observed":"2026-11-05T20:18:45.204Z","first_published":"2026-11-05T20:49:00.545Z","brands":[],"dns":"resolved","resolved":["159.100.19.242"],"resolved_at":"2026-11-05T20:21:54Z","dns_checked_at":"2026-11-05T20:57:37.000Z","dns_since":"2026-11-05T20:57:37.000Z","findings":[{"id":"fsyx3uudyhmr5h3vxqxde","kind":"reported_domain","summary":"Listed by USOM","first_observed":"2026-11-05T20:18:45.204Z","first_published":"2026-11-05T20:49:00.545Z","source":"usom","source_name":"USOM"}],"url":"https://domainspoof.com/live?show=all&q=ehel4he5e2v4266s.webredirect.org"},{"hostname":"eicheschatzheim-de.live","first_observed":"2026-11-05T20:36:22.122Z","first_published":"2026-11-05T20:49:00.545Z","brands":[],"dns":"resolved","resolved":["104.21.62.67","172.67.221.13"],"resolved_at":"2026-11-05T20:36:59Z","dns_checked_at":"2026-11-05T20:57:37.000Z","dns_since":"2026-11-05T20:57:37.000Z","findings":[{"id":"fol43mkfswmijz6wvgmdm","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T20:36:22.122Z","first_published":"2026-11-05T20:49:00.545Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=eicheschatzheim-de.live"},{"hostname":"emeklilere-cepteteb-com.my-homeip.de","first_observed":"2026-11-05T20:18:45.204Z","first_published":"2026-11-05T20:49:00.545Z","brands":[],"dns":"resolved","resolved":["3.67.168.154"],"resolved_at":"2026-11-05T20:21:54Z","dns_checked_at":"2026-11-05T20:57:37.000Z","dns_since":"2026-11-05T20:57:37.000Z","findings":[{"id":"fzttsumzj6jvkktyv64zs","kind":"reported_domain","summary":"Listed by USOM","first_observed":"2026-11-05T20:18:45.204Z","first_published":"2026-11-05T20:49:00.545Z","source":"usom","source_name":"USOM"}],"url":"https://domainspoof.com/live?show=all&q=emeklilere-cepteteb-com.my-homeip.de"},{"hostname":"eurasia.aaterrainc.com","first_observed":"2026-11-05T20:31:23.623Z","first_published":"2026-11-05T20:49:00.545Z","brands":[],"dns":"resolved","resolved":["104.21.47.167","172.67.171.174"],"resolved_at":"2026-11-05T20:40:01Z","dns_checked_at":"2026-11-05T20:57:37.000Z","dns_since":"2026-11-05T20:57:37.000Z","findings":[{"id":"fhykxgdikpwj6e36mxtz6","kind":"reported_domain","summary":"Under aaterrainc.com, listed by MetaMask","first_observed":"2026-11-05T20:31:23.623Z","first_published":"2026-11-05T20:49:00.545Z","source":"metamask","source_name":"MetaMask","under":"aaterrainc.com"}],"url":"https://domainspoof.com/live?show=all&q=eurasia.aaterrainc.com"},{"hostname":"fiercapoeuvre-fr.live","first_observed":"2026-11-05T20:36:22.122Z","first_published":"2026-11-05T20:49:00.545Z","brands":[],"dns":"resolved","resolved":["104.21.48.73","172.67.181.116"],"resolved_at":"2026-11-05T20:37:00Z","dns_checked_at":"2026-11-05T20:57:37.000Z","dns_since":"2026-11-05T20:57:37.000Z","findings":[{"id":"fnrxt3ubht23gfef3v753","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T20:36:22.122Z","first_published":"2026-11-05T20:49:00.545Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=fiercapoeuvre-fr.live"},{"hostname":"filescn.cn","first_observed":"2026-11-05T20:36:22.122Z","first_published":"2026-11-05T20:49:00.545Z","brands":[],"dns":"resolved","resolved":["118.193.47.110"],"resolved_at":"2026-11-05T20:37:00Z","dns_checked_at":"2026-11-05T20:57:37.000Z","dns_since":"2026-11-05T20:57:37.000Z","findings":[{"id":"fx7ugn3bxfvtd2aqfljpc","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T20:36:22.122Z","first_published":"2026-11-05T20:49:00.545Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=filescn.cn"},{"hostname":"finoraai-it.live","first_observed":"2026-11-05T20:11:22.932Z","first_published":"2026-11-05T20:49:00.545Z","brands":[],"dns":"resolved","resolved":["104.21.31.68","172.67.175.62"],"resolved_at":"2026-11-05T20:19:02Z","dns_checked_at":"2026-11-05T20:57:37.000Z","dns_since":"2026-11-05T20:57:37.000Z","findings":[{"id":"fu4spq4r34oqszxbfq4gn","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T20:11:22.932Z","first_published":"2026-11-05T20:49:00.545Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=finoraai-it.live"},{"hostname":"flowdextrust-it.live","first_observed":"2026-11-05T20:26:30.950Z","first_published":"2026-11-05T20:49:00.545Z","brands":[],"dns":"resolved","resolved":["104.21.38.152","172.67.223.236"],"resolved_at":"2026-11-05T20:32:15Z","dns_checked_at":"2026-11-05T20:57:37.000Z","dns_since":"2026-11-05T20:57:37.000Z","findings":[{"id":"fyatrlbgta4gvng5e6qxz","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T20:26:30.950Z","first_published":"2026-11-05T20:49:00.545Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=flowdextrust-it.live"},{"hostname":"garanti-finans-merkezim.cloud","first_observed":"2026-11-05T20:18:45.204Z","first_published":"2026-11-05T20:49:00.545Z","brands":[],"dns":"resolved","resolved":["31.56.209.168"],"resolved_at":"2026-11-05T20:21:54Z","dns_checked_at":"2026-11-05T20:57:37.000Z","dns_since":"2026-11-05T20:57:37.000Z","findings":[{"id":"fyjftijhb3v47vf7n5prc","kind":"reported_domain","summary":"Listed by USOM","first_observed":"2026-11-05T20:18:45.204Z","first_published":"2026-11-05T20:49:00.545Z","source":"usom","source_name":"USOM"}],"url":"https://domainspoof.com/live?show=all&q=garanti-finans-merkezim.cloud"},{"hostname":"garena.mn","first_observed":"2026-11-05T20:06:39.645Z","first_published":"2026-11-05T20:49:00.545Z","brands":[{"id":"garena","name":"Garena","url":"https://domainspoof.com/brands/garena"}],"dns":"resolved","resolved":["153.52.255.77"],"resolved_at":"2026-11-05T20:57:37Z","dns_checked_at":"2026-11-05T20:57:37.000Z","dns_since":"2026-11-05T20:57:37.000Z","findings":[{"id":"flkcimracddgsa5wgbj5l","kind":"phishing_infrastructure","summary":"Resolved to 153.52.255.77, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T20:06:39.645Z","first_published":"2026-11-05T20:49:00.545Z","address":"153.52.255.77","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/garena"},{"hostname":"gdsgwds.xyz","first_observed":"2026-11-05T20:21:03.017Z","first_published":"2026-11-05T20:49:00.545Z","brands":[],"dns":"resolved","resolved":["104.21.92.170","172.67.196.145"],"resolved_at":"2026-11-05T20:21:51Z","dns_checked_at":"2026-11-05T20:57:37.000Z","dns_since":"2026-11-05T20:57:37.000Z","findings":[{"id":"fwotp5ixmoggyaufq3d2z","kind":"reported_domain","summary":"Listed by NPA 165 (e-commerce)","first_observed":"2026-11-05T20:21:03.017Z","first_published":"2026-11-05T20:49:00.545Z","source":"npa","source_name":"NPA 165","claim":{"category":"e-commerce"}}],"url":"https://domainspoof.com/live?show=all&q=gdsgwds.xyz"},{"hostname":"goldtraded.com","first_observed":"2026-11-05T20:36:22.122Z","first_published":"2026-11-05T20:49:00.545Z","brands":[],"dns":"resolved","resolved":["104.21.30.11","172.67.150.47"],"resolved_at":"2026-11-06T04:07:24Z","dns_checked_at":"2026-11-05T20:57:37.000Z","dns_since":"2026-11-05T20:57:37.000Z","findings":[{"id":"frzj6pu3j34pcqfpfgwbs","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T20:36:22.122Z","first_published":"2026-11-05T20:49:00.545Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=goldtraded.com"},{"hostname":"haberler154232.sbs","first_observed":"2026-11-05T20:18:45.204Z","first_published":"2026-11-05T20:49:00.545Z","brands":[],"dns":"resolved","resolved":["64.89.160.238"],"resolved_at":"2026-11-05T20:21:54Z","dns_checked_at":"2026-11-05T20:57:37.000Z","dns_since":"2026-11-05T20:57:37.000Z","findings":[{"id":"fiyx4qs5vwzhpwfp5zo3c","kind":"reported_domain","summary":"Listed by USOM","first_observed":"2026-11-05T20:18:45.204Z","first_published":"2026-11-05T20:49:00.545Z","source":"usom","source_name":"USOM"}],"url":"https://domainspoof.com/live?show=all&q=haberler154232.sbs"},{"hostname":"hesapavantaji.cyou","first_observed":"2026-11-05T20:18:45.204Z","first_published":"2026-11-05T20:49:00.545Z","brands":[],"dns":"resolved","resolved":["217.60.102.144"],"resolved_at":"2026-11-05T20:21:54Z","dns_checked_at":"2026-11-05T20:57:37.000Z","dns_since":"2026-11-05T20:57:37.000Z","findings":[{"id":"fxqospmwrmq5pgthc4wfp","kind":"reported_domain","summary":"Listed by USOM","first_observed":"2026-11-05T20:18:45.204Z","first_published":"2026-11-05T20:49:00.545Z","source":"usom","source_name":"USOM"}],"url":"https://domainspoof.com/live?show=all&q=hesapavantaji.cyou"},{"hostname":"icloud-online.ru","first_observed":"2026-11-05T20:40:15.178Z","first_published":"2026-11-05T20:49:00.545Z","brands":[{"id":"apple","name":"Apple","url":"https://domainspoof.com/brands/apple"}],"dns":"resolved","resolved":["95.163.244.138"],"resolved_at":"2026-11-05T20:57:37Z","dns_checked_at":"2026-11-05T20:57:37.000Z","dns_since":"2026-11-05T20:57:37.000Z","findings":[{"id":"fsgupdepg37bbdee5idn3","kind":"phishing_infrastructure","summary":"Resolved to 95.163.244.138, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T20:40:15.178Z","first_published":"2026-11-05T20:49:00.545Z","address":"95.163.244.138","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/apple"},{"hostname":"immediatebitnex-engine.com","first_observed":"2026-11-05T20:36:22.122Z","first_published":"2026-11-05T20:49:00.545Z","brands":[],"dns":"resolved","resolved":["185.62.58.179"],"resolved_at":"2026-11-05T20:47:36Z","dns_checked_at":"2026-11-05T20:57:37.000Z","dns_since":"2026-11-05T20:57:37.000Z","findings":[{"id":"fco4hhz6fremsj355e2k7","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T20:36:22.122Z","first_published":"2026-11-05T20:49:00.545Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=immediatebitnex-engine.com"},{"hostname":"io-en-us.vip","first_observed":"2026-11-05T20:36:22.122Z","first_published":"2026-11-05T20:49:00.545Z","brands":[],"dns":"resolved","resolved":["104.21.86.204","172.67.136.205"],"resolved_at":"2026-11-06T00:37:15Z","dns_checked_at":"2026-11-05T20:57:38.000Z","dns_since":"2026-11-05T20:57:38.000Z","findings":[{"id":"frrcrqpboqpgzfe6kgttc","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T20:36:22.122Z","first_published":"2026-11-05T20:49:00.545Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=io-en-us.vip"},{"hostname":"istanbulbasvurutr.lol","first_observed":"2026-11-05T20:18:45.204Z","first_published":"2026-11-05T20:49:00.545Z","brands":[],"dns":"resolved","resolved":["31.56.209.93"],"resolved_at":"2026-11-05T20:21:54Z","dns_checked_at":"2026-11-05T20:57:38.000Z","dns_since":"2026-11-05T20:57:38.000Z","findings":[{"id":"flqktdzccptyvcexvx5ow","kind":"reported_domain","summary":"Listed by USOM","first_observed":"2026-11-05T20:18:45.204Z","first_published":"2026-11-05T20:49:00.545Z","source":"usom","source_name":"USOM"}],"url":"https://domainspoof.com/live?show=all&q=istanbulbasvurutr.lol"},{"hostname":"ivelon-syncn92.live","first_observed":"2026-11-05T20:21:03.017Z","first_published":"2026-11-05T20:49:00.545Z","brands":[],"dns":"resolved","resolved":["104.21.9.25","172.67.158.162"],"resolved_at":"2026-11-05T20:21:52Z","dns_checked_at":"2026-11-05T20:57:38.000Z","dns_since":"2026-11-05T20:57:38.000Z","findings":[{"id":"fkomebyk2um7p6ft3rvmn","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T20:21:03.017Z","first_published":"2026-11-05T20:49:00.545Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=ivelon-syncn92.live"},{"hostname":"jitfc.gifga.com","first_observed":"2026-11-05T20:36:22.122Z","first_published":"2026-11-05T20:49:00.545Z","brands":[],"dns":"resolved","resolved":["149.56.215.164"],"resolved_at":"2026-11-05T20:47:38Z","dns_checked_at":"2026-11-05T20:57:38.000Z","dns_since":"2026-11-05T20:57:38.000Z","findings":[{"id":"fqfhoibksi3lmxlzsny56","kind":"reported_domain","summary":"Under gifga.com, listed by MetaMask","first_observed":"2026-11-05T20:36:22.122Z","first_published":"2026-11-05T20:49:00.545Z","source":"metamask","source_name":"MetaMask","under":"gifga.com"}],"url":"https://domainspoof.com/live?show=all&q=jitfc.gifga.com"},{"hostname":"jundi-ic.com","first_observed":"2026-11-05T20:21:03.017Z","first_published":"2026-11-05T20:49:00.545Z","brands":[],"dns":"resolved","resolved":["162.4.84.247"],"resolved_at":"2026-11-05T20:21:52Z","dns_checked_at":"2026-11-05T20:57:38.000Z","dns_since":"2026-11-05T20:57:38.000Z","findings":[{"id":"fxmd55bb3ebsrzl5ngoe6","kind":"reported_domain","summary":"Listed by NPA 165 (e-commerce)","first_observed":"2026-11-05T20:21:03.017Z","first_published":"2026-11-05T20:49:00.545Z","source":"npa","source_name":"NPA 165","claim":{"category":"e-commerce"}}],"url":"https://domainspoof.com/live?show=all&q=jundi-ic.com"},{"hostname":"kalyptowave.click","first_observed":"2026-11-05T20:26:30.950Z","first_published":"2026-11-05T20:49:00.545Z","brands":[],"dns":"resolved","resolved":["185.62.57.10","185.62.57.205"],"resolved_at":"2026-11-06T10:23:04Z","dns_checked_at":"2026-11-05T20:57:38.000Z","dns_since":"2026-11-05T20:57:38.000Z","findings":[{"id":"fjzprfimzguamtetkwd52","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T20:26:30.950Z","first_published":"2026-11-05T20:49:00.545Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=kalyptowave.click"},{"hostname":"kerrarlabs.com","first_observed":"2026-11-05T20:21:03.017Z","first_published":"2026-11-05T20:49:00.545Z","brands":[],"dns":"resolved","resolved":["104.21.86.102","172.67.217.213"],"resolved_at":"2026-11-05T20:21:52Z","dns_checked_at":"2026-11-05T20:57:38.000Z","dns_since":"2026-11-05T20:57:38.000Z","findings":[{"id":"fxtnoqx7rzjmro5dgnpsr","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T20:21:03.017Z","first_published":"2026-11-05T20:49:00.545Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=kerrarlabs.com"},{"hostname":"kooperatifmarketde.blogdns.com","first_observed":"2026-11-05T20:18:45.204Z","first_published":"2026-11-05T20:49:00.545Z","brands":[],"dns":"resolved","resolved":["13.63.158.187"],"resolved_at":"2026-11-05T20:21:54Z","dns_checked_at":"2026-11-05T20:57:38.000Z","dns_since":"2026-11-05T20:57:38.000Z","findings":[{"id":"fapcu4v5iqzb65g3oiwur","kind":"reported_domain","summary":"Listed by USOM","first_observed":"2026-11-05T20:18:45.204Z","first_published":"2026-11-05T20:49:00.545Z","source":"usom","source_name":"USOM"}],"url":"https://domainspoof.com/live?show=all&q=kooperatifmarketde.blogdns.com"},{"hostname":"kzalton-logic.live","first_observed":"2026-11-05T20:21:03.017Z","first_published":"2026-11-05T20:49:00.545Z","brands":[],"dns":"resolved","resolved":["104.21.93.197","172.67.214.51"],"resolved_at":"2026-11-05T20:21:52Z","dns_checked_at":"2026-11-05T20:57:38.000Z","dns_since":"2026-11-05T20:57:38.000Z","findings":[{"id":"fpqqbfpfhq6wgvhastiyy","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T20:21:03.017Z","first_published":"2026-11-05T20:49:00.545Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=kzalton-logic.live"},{"hostname":"kzalton-logic920.live","first_observed":"2026-11-05T20:16:29.525Z","first_published":"2026-11-05T20:49:00.545Z","brands":[],"dns":"resolved","resolved":["104.21.15.103","172.67.162.42"],"resolved_at":"2026-11-05T20:29:53Z","dns_checked_at":"2026-11-05T20:57:38.000Z","dns_since":"2026-11-05T20:57:38.000Z","findings":[{"id":"fogufa5ndm4ikwqqpwdo2","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T20:16:29.525Z","first_published":"2026-11-05T20:49:00.545Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=kzalton-logic920.live"},{"hostname":"lotech-globals.cc.tesco-capital.cc","first_observed":"2026-11-05T20:06:42.397Z","first_published":"2026-11-05T20:49:00.545Z","brands":[{"id":"tesco","name":"Tesco","url":"https://domainspoof.com/brands/tesco"}],"dns":"resolved","resolved":["5.182.208.206"],"resolved_at":"2026-11-05T20:57:38Z","dns_checked_at":"2026-11-05T20:57:38.000Z","dns_since":"2026-11-05T20:57:38.000Z","findings":[{"id":"fjkdcmnkvrpp4bx6hdmvl","kind":"phishing_infrastructure","summary":"Resolved to 5.182.208.206, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T20:06:42.397Z","first_published":"2026-11-05T20:49:00.545Z","address":"5.182.208.206","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/tesco"},{"hostname":"loupcapitange.live","first_observed":"2026-11-05T20:36:22.122Z","first_published":"2026-11-05T20:49:00.545Z","brands":[],"dns":"resolved","resolved":["104.21.6.70","172.67.134.149"],"resolved_at":"2026-11-05T20:47:41Z","dns_checked_at":"2026-11-05T20:57:38.000Z","dns_since":"2026-11-05T20:57:38.000Z","findings":[{"id":"fnmatjzig4ophbi2mkdgj","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T20:36:22.122Z","first_published":"2026-11-05T20:49:00.545Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=loupcapitange.live"},{"hostname":"mail.zenavlico.cyou","first_observed":"2026-11-05T20:31:23.623Z","first_published":"2026-11-05T20:49:00.545Z","brands":[],"dns":"resolved","resolved":["95.85.244.13"],"resolved_at":"2026-11-05T20:40:19Z","dns_checked_at":"2026-11-05T20:57:38.000Z","dns_since":"2026-11-05T20:57:38.000Z","findings":[{"id":"frawjvtjlnzi3ip5symb2","kind":"reported_domain","summary":"Under zenavlico.cyou, listed by CERT Polska","first_observed":"2026-11-05T20:31:23.623Z","first_published":"2026-11-05T20:49:00.545Z","source":"cert_polska","source_name":"CERT Polska","under":"zenavlico.cyou"}],"url":"https://domainspoof.com/live?show=all&q=mail.zenavlico.cyou"},{"hostname":"maliyecezasi.org","first_observed":"2026-11-05T20:18:45.204Z","first_published":"2026-11-05T20:49:00.545Z","brands":[],"dns":"resolved","resolved":["162.4.84.247"],"resolved_at":"2026-11-05T20:21:54Z","dns_checked_at":"2026-11-05T20:57:38.000Z","dns_since":"2026-11-05T20:57:38.000Z","findings":[{"id":"fkdbq5uqgk533n5vqjw76","kind":"reported_domain","summary":"Listed by USOM","first_observed":"2026-11-05T20:18:45.204Z","first_published":"2026-11-05T20:49:00.545Z","source":"usom","source_name":"USOM"}],"url":"https://domainspoof.com/live?show=all&q=maliyecezasi.org"},{"hostname":"meet.socialvisor.ru","first_observed":"2026-11-05T20:11:22.932Z","first_published":"2026-11-05T20:49:00.545Z","brands":[],"dns":"resolved","resolved":["91.215.41.91"],"resolved_at":"2026-11-05T20:19:25Z","dns_checked_at":"2026-11-05T20:57:38.000Z","dns_since":"2026-11-05T20:57:38.000Z","findings":[{"id":"fc5eaiima3ffnhjqxn67f","kind":"reported_domain","summary":"Under socialvisor.ru, reported by PhishDestroy","first_observed":"2026-11-05T20:11:22.932Z","first_published":"2026-11-05T20:49:00.545Z","source":"phishdestroy","source_name":"PhishDestroy","under":"socialvisor.ru","source_url":"https://phishdestroy.io/domain/socialvisor.ru/"}],"url":"https://domainspoof.com/live?show=all&q=meet.socialvisor.ru"},{"hostname":"mellgamex.live","first_observed":"2026-11-05T20:36:22.122Z","first_published":"2026-11-05T20:49:00.545Z","brands":[],"dns":"resolved","resolved":["89.248.67.125"],"resolved_at":"2026-11-05T20:47:43Z","dns_checked_at":"2026-11-05T20:57:38.000Z","dns_since":"2026-11-05T20:57:38.000Z","findings":[{"id":"fdabqzf65gzoiwy44ngdg","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T20:36:22.122Z","first_published":"2026-11-05T20:49:00.545Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/mellgamex.live/"}],"url":"https://domainspoof.com/live?show=all&q=mellgamex.live"},{"hostname":"michael-kors.kiev.ua","first_observed":"2026-11-05T20:06:42.002Z","first_published":"2026-11-05T20:49:00.545Z","brands":[{"id":"michael-kors","name":"Michael Kors","url":"https://domainspoof.com/brands/michael-kors"}],"dns":"resolved","resolved":["185.104.45.89","185.104.45.189"],"resolved_at":"2026-11-05T20:57:38Z","dns_checked_at":"2026-11-05T20:57:38.000Z","dns_since":"2026-11-05T20:57:38.000Z","findings":[{"id":"fmnyoyxgfofuyxw7cj5bj","kind":"phishing_infrastructure","summary":"Resolved to 185.104.45.89, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T20:06:42.002Z","first_published":"2026-11-05T20:49:00.545Z","address":"185.104.45.89","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/michael-kors"},{"hostname":"mistralrenditmere.live","first_observed":"2026-11-05T20:16:29.525Z","first_published":"2026-11-05T20:49:00.545Z","brands":[],"dns":"resolved","resolved":["104.21.54.198","172.67.141.140"],"resolved_at":"2026-11-05T20:29:55Z","dns_checked_at":"2026-11-05T20:57:38.000Z","dns_since":"2026-11-05T20:57:38.000Z","findings":[{"id":"fhlaf4xqs2xt67mm6hgzu","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T20:16:29.525Z","first_published":"2026-11-05T20:49:00.545Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=mistralrenditmere.live"},{"hostname":"mixers.money","first_observed":"2026-11-05T20:36:22.122Z","first_published":"2026-11-05T20:49:00.545Z","brands":[],"dns":"resolved","resolved":["104.21.93.102","172.67.208.169"],"resolved_at":"2026-11-05T20:47:45Z","dns_checked_at":"2026-11-05T20:57:38.000Z","dns_since":"2026-11-05T20:57:38.000Z","findings":[{"id":"fonphxftijmmodvg4qlbl","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T20:36:22.122Z","first_published":"2026-11-05T20:49:00.545Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=mixers.money"},{"hostname":"modplug.org","first_observed":"2026-11-05T20:26:30.950Z","first_published":"2026-11-05T20:49:00.545Z","brands":[],"dns":"resolved","resolved":["104.21.92.89","172.67.190.221"],"resolved_at":"2026-11-05T20:32:28Z","dns_checked_at":"2026-11-05T20:57:38.000Z","dns_since":"2026-11-05T20:57:38.000Z","findings":[{"id":"fz7cvsyi326untkemlw2u","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T20:26:30.950Z","first_published":"2026-11-05T20:49:00.545Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/modplug.org/"}],"url":"https://domainspoof.com/live?show=all&q=modplug.org"},{"hostname":"mvortixtrade72.live","first_observed":"2026-11-05T20:16:29.525Z","first_published":"2026-11-05T20:49:00.545Z","brands":[],"dns":"resolved","resolved":["104.21.12.155","172.67.132.46"],"resolved_at":"2026-11-05T20:29:56Z","dns_checked_at":"2026-11-05T20:57:38.000Z","dns_since":"2026-11-05T20:57:38.000Z","findings":[{"id":"fpyxyjwxgjh5x5up25qc4","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T20:16:29.525Z","first_published":"2026-11-05T20:49:00.545Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=mvortixtrade72.live"},{"hostname":"mygeldronai-app.com","first_observed":"2026-11-05T20:21:03.017Z","first_published":"2026-11-05T20:49:00.545Z","brands":[],"dns":"resolved","resolved":["104.21.27.218","172.67.169.198"],"resolved_at":"2026-11-05T20:21:52Z","dns_checked_at":"2026-11-05T20:57:38.000Z","dns_since":"2026-11-05T20:57:38.000Z","findings":[{"id":"fw4ielqfmhjcxwe56mwrw","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T20:21:03.017Z","first_published":"2026-11-05T20:49:00.545Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=mygeldronai-app.com"},{"hostname":"myrentixaiapp.org","first_observed":"2026-11-05T20:21:03.017Z","first_published":"2026-11-05T20:49:00.545Z","brands":[],"dns":"resolved","resolved":["104.21.53.76","172.67.210.99"],"resolved_at":"2026-11-05T20:21:52Z","dns_checked_at":"2026-11-05T20:57:38.000Z","dns_since":"2026-11-05T20:57:38.000Z","findings":[{"id":"fzlnpsbj3f6v6rzqwe3p6","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T20:21:03.017Z","first_published":"2026-11-05T20:49:00.545Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=myrentixaiapp.org"},{"hostname":"mzaltrov.live","first_observed":"2026-11-05T20:26:30.950Z","first_published":"2026-11-05T20:49:00.545Z","brands":[],"dns":"resolved","resolved":["104.21.85.4","172.67.200.107"],"resolved_at":"2026-11-05T20:32:29Z","dns_checked_at":"2026-11-05T20:57:38.000Z","dns_since":"2026-11-05T20:57:38.000Z","findings":[{"id":"fatbkpcqz4jh27gxgozcf","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T20:26:30.950Z","first_published":"2026-11-05T20:49:00.545Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=mzaltrov.live"},{"hostname":"mzeldravoq.live","first_observed":"2026-11-05T20:11:22.932Z","first_published":"2026-11-05T20:49:00.545Z","brands":[],"dns":"resolved","resolved":["104.21.63.160","172.67.171.12"],"resolved_at":"2026-11-05T20:19:28Z","dns_checked_at":"2026-11-05T20:57:38.000Z","dns_since":"2026-11-05T20:57:38.000Z","findings":[{"id":"fi7v5z6yobxeprez2rgpr","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T20:11:22.932Z","first_published":"2026-11-05T20:49:00.545Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=mzeldravoq.live"},{"hostname":"nazvelgorn.live","first_observed":"2026-11-05T20:26:30.950Z","first_published":"2026-11-05T20:49:00.545Z","brands":[],"dns":"resolved","resolved":["104.21.13.180","172.67.132.234"],"resolved_at":"2026-11-05T20:32:29Z","dns_checked_at":"2026-11-05T20:57:38.000Z","dns_since":"2026-11-05T20:57:38.000Z","findings":[{"id":"fhwmh5qjwcmeabhonjevw","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T20:26:30.950Z","first_published":"2026-11-05T20:49:00.545Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=nazvelgorn.live"},{"hostname":"nazvelqorn.live","first_observed":"2026-11-05T20:16:29.525Z","first_published":"2026-11-05T20:49:00.545Z","brands":[],"dns":"resolved","resolved":["104.21.88.39","172.67.172.73"],"resolved_at":"2026-11-05T20:29:56Z","dns_checked_at":"2026-11-05T20:57:38.000Z","dns_since":"2026-11-05T20:57:38.000Z","findings":[{"id":"f324ymv3rpixqrnjm5cco","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T20:16:29.525Z","first_published":"2026-11-05T20:49:00.545Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=nazvelqorn.live"},{"hostname":"newschoolk4y5bgpx8u7zqethreadobe.top","first_observed":"2026-11-05T20:11:22.932Z","first_published":"2026-11-05T20:49:00.545Z","brands":[],"dns":"resolved","resolved":["94.26.3.193"],"resolved_at":"2026-11-05T20:19:29Z","dns_checked_at":"2026-11-05T20:57:38.000Z","dns_since":"2026-11-05T20:57:38.000Z","findings":[{"id":"fdfqhc4c6twvebzvg6cnr","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T20:11:22.932Z","first_published":"2026-11-05T20:49:00.545Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=newschoolk4y5bgpx8u7zqethreadobe.top"},{"hostname":"northtexasteaparty.org","first_observed":"2026-11-05T20:21:03.017Z","first_published":"2026-11-05T20:49:00.545Z","brands":[],"dns":"resolved","resolved":["103.224.182.250"],"resolved_at":"2026-11-05T20:21:52Z","dns_checked_at":"2026-11-05T20:57:38.000Z","dns_since":"2026-11-05T20:57:38.000Z","findings":[{"id":"f7zwvjmiz4akslz5tkyrp","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T20:21:03.017Z","first_published":"2026-11-05T20:49:00.545Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=northtexasteaparty.org"},{"hostname":"old.rvcmedical.com.bo","first_observed":"2026-11-05T20:26:30.950Z","first_published":"2026-11-05T20:49:00.545Z","brands":[],"dns":"resolved","resolved":["181.115.198.138"],"resolved_at":"2026-11-05T20:32:31Z","dns_checked_at":"2026-11-05T20:57:38.000Z","dns_since":"2026-11-05T20:57:38.000Z","findings":[{"id":"fur2kgv5slrp5xzwsn7le","kind":"reported_domain","summary":"Under rvcmedical.com.bo, reported by PhishDestroy","first_observed":"2026-11-05T20:26:30.950Z","first_published":"2026-11-05T20:49:00.545Z","source":"phishdestroy","source_name":"PhishDestroy","under":"rvcmedical.com.bo","source_url":"https://phishdestroy.io/domain/rvcmedical.com.bo/"}],"url":"https://domainspoof.com/live?show=all&q=old.rvcmedical.com.bo"},{"hostname":"openusd.technology","first_observed":"2026-11-05T20:31:23.623Z","first_published":"2026-11-05T20:49:00.545Z","brands":[],"dns":"resolved","resolved":["104.21.22.246","172.67.207.225"],"resolved_at":"2026-11-05T20:40:25Z","dns_checked_at":"2026-11-05T20:57:38.000Z","dns_since":"2026-11-05T20:57:38.000Z","findings":[{"id":"fwdy4ihv3jyog6q6yvh7u","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T20:31:23.623Z","first_published":"2026-11-05T20:49:00.545Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=openusd.technology"},{"hostname":"origin.socialvisor.ru","first_observed":"2026-11-05T20:21:03.017Z","first_published":"2026-11-05T20:49:00.545Z","brands":[],"dns":"resolved","resolved":["91.215.41.91"],"resolved_at":"2026-11-05T20:21:53Z","dns_checked_at":"2026-11-05T20:57:38.000Z","dns_since":"2026-11-05T20:57:38.000Z","findings":[{"id":"ftbk52r5rj623b2bwth3r","kind":"reported_domain","summary":"Under socialvisor.ru, reported by PhishDestroy","first_observed":"2026-11-05T20:21:03.017Z","first_published":"2026-11-05T20:49:00.545Z","source":"phishdestroy","source_name":"PhishDestroy","under":"socialvisor.ru","source_url":"https://phishdestroy.io/domain/socialvisor.ru/"}],"url":"https://domainspoof.com/live?show=all&q=origin.socialvisor.ru"},{"hostname":"pay-bitigift.com","first_observed":"2026-11-05T20:36:22.122Z","first_published":"2026-11-05T20:49:00.545Z","brands":[],"dns":"resolved","resolved":["104.21.32.88","172.67.185.77"],"resolved_at":"2026-11-05T20:47:52Z","dns_checked_at":"2026-11-05T20:57:38.000Z","dns_since":"2026-11-05T20:57:38.000Z","findings":[{"id":"f5ssqj5e4t3afcrjmf5uq","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T20:36:22.122Z","first_published":"2026-11-05T20:49:00.545Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=pay-bitigift.com"},{"hostname":"profitesafondos.live","first_observed":"2026-11-05T20:21:03.017Z","first_published":"2026-11-05T20:49:00.545Z","brands":[],"dns":"resolved","resolved":["104.21.21.57","172.67.196.133"],"resolved_at":"2026-11-05T20:21:53Z","dns_checked_at":"2026-11-05T20:57:38.000Z","dns_since":"2026-11-05T20:57:38.000Z","findings":[{"id":"f57mu3el72oabrwm6dsub","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T20:21:03.017Z","first_published":"2026-11-05T20:49:00.545Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=profitesafondos.live"},{"hostname":"puramonetorio.live","first_observed":"2026-11-05T20:26:30.950Z","first_published":"2026-11-05T20:49:00.545Z","brands":[],"dns":"resolved","resolved":["104.21.3.180","172.67.153.152"],"resolved_at":"2026-11-05T20:32:33Z","dns_checked_at":"2026-11-05T20:57:38.000Z","dns_since":"2026-11-05T20:57:38.000Z","findings":[{"id":"fob3x3cmunstgscbgg4jy","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T20:26:30.950Z","first_published":"2026-11-05T20:49:00.545Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=puramonetorio.live"},{"hostname":"purfinrevoux.live","first_observed":"2026-11-05T20:21:03.017Z","first_published":"2026-11-05T20:49:00.545Z","brands":[],"dns":"resolved","resolved":["104.21.63.28","172.67.142.169"],"resolved_at":"2026-11-05T20:21:53Z","dns_checked_at":"2026-11-05T20:57:38.000Z","dns_since":"2026-11-05T20:57:38.000Z","findings":[{"id":"fffivywvyedhx6qgdbqo6","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T20:21:03.017Z","first_published":"2026-11-05T20:49:00.545Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=purfinrevoux.live"},{"hostname":"rentovexpro.live","first_observed":"2026-11-05T20:31:23.623Z","first_published":"2026-11-05T20:49:00.545Z","brands":[],"dns":"resolved","resolved":["104.21.37.132","172.67.208.63"],"resolved_at":"2026-11-05T20:40:31Z","dns_checked_at":"2026-11-05T20:57:38.000Z","dns_since":"2026-11-05T20:57:38.000Z","findings":[{"id":"fgktnijro7vhckfw25kqa","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T20:31:23.623Z","first_published":"2026-11-05T20:49:00.545Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=rentovexpro.live"},{"hostname":"rzjzy.asia","first_observed":"2026-11-05T20:31:23.623Z","first_published":"2026-11-05T20:49:00.545Z","brands":[],"dns":"resolved","resolved":["104.21.8.215","172.67.140.68"],"resolved_at":"2026-11-05T20:40:33Z","dns_checked_at":"2026-11-05T20:57:38.000Z","dns_since":"2026-11-05T20:57:38.000Z","findings":[{"id":"fsiknsihbm6aq4vsv6ndj","kind":"reported_domain","summary":"Listed by NPA 165 (information services)","first_observed":"2026-11-05T20:31:23.623Z","first_published":"2026-11-05T20:49:00.545Z","source":"npa","source_name":"NPA 165","claim":{"category":"information services"}}],"url":"https://domainspoof.com/live?show=all&q=rzjzy.asia"},{"hostname":"sentierinvestenca.live","first_observed":"2026-11-05T20:21:03.017Z","first_published":"2026-11-05T20:49:00.545Z","brands":[],"dns":"resolved","resolved":["104.21.85.52","172.67.202.121"],"resolved_at":"2026-11-06T00:06:27Z","dns_checked_at":"2026-11-05T20:57:38.000Z","dns_since":"2026-11-05T20:57:38.000Z","findings":[{"id":"ftkgldib6ftyrvhiaowtq","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T20:21:03.017Z","first_published":"2026-11-05T20:49:00.545Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=sentierinvestenca.live"},{"hostname":"sorgumali.org","first_observed":"2026-11-05T20:31:23.623Z","first_published":"2026-11-05T20:49:00.545Z","brands":[],"dns":"resolved","resolved":["104.21.72.184","172.67.153.218"],"resolved_at":"2026-11-05T20:40:41Z","dns_checked_at":"2026-11-05T20:57:38.000Z","dns_since":"2026-11-05T20:57:38.000Z","findings":[{"id":"fse3elmmufbifwdncckmu","kind":"reported_domain","summary":"Listed by USOM","first_observed":"2026-11-05T20:31:23.623Z","first_published":"2026-11-05T20:49:00.545Z","source":"usom","source_name":"USOM"}],"url":"https://domainspoof.com/live?show=all&q=sorgumali.org"},{"hostname":"strumienwartoryn-it.live","first_observed":"2026-11-05T20:11:22.932Z","first_published":"2026-11-05T20:49:00.545Z","brands":[],"dns":"resolved","resolved":["104.21.8.231","172.67.188.207"],"resolved_at":"2026-11-05T20:19:54Z","dns_checked_at":"2026-11-05T20:57:38.000Z","dns_since":"2026-11-05T20:57:38.000Z","findings":[{"id":"fbfwu3yywmejdiozcq6uf","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T20:11:22.932Z","first_published":"2026-11-05T20:49:00.545Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=strumienwartoryn-it.live"},{"hostname":"swetly.live","first_observed":"2026-11-05T20:26:30.950Z","first_published":"2026-11-05T20:49:00.545Z","brands":[],"dns":"resolved","resolved":["104.21.47.33","172.67.144.45"],"resolved_at":"2026-11-05T20:32:43Z","dns_checked_at":"2026-11-05T20:57:38.000Z","dns_since":"2026-11-05T20:57:38.000Z","findings":[{"id":"fwj6rthqlsrcfvb2zzxay","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T20:26:30.950Z","first_published":"2026-11-05T20:49:00.545Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=swetly.live"},{"hostname":"taublu.digital","first_observed":"2026-11-05T20:36:22.122Z","first_published":"2026-11-05T20:49:00.545Z","brands":[],"dns":"resolved","resolved":["104.21.30.35","172.67.150.120"],"resolved_at":"2026-11-05T20:48:13Z","dns_checked_at":"2026-11-05T20:57:38.000Z","dns_since":"2026-11-05T20:57:38.000Z","findings":[{"id":"f54rqhr6tdn7uf4lxghvv","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T20:36:22.122Z","first_published":"2026-11-05T20:49:00.545Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=taublu.digital"},{"hostname":"test.mylogdepot.com","first_observed":"2026-11-05T20:31:23.623Z","first_published":"2026-11-05T20:49:00.545Z","brands":[],"dns":"resolved","resolved":["163.61.188.7"],"resolved_at":"2026-11-05T20:40:42Z","dns_checked_at":"2026-11-05T20:57:38.000Z","dns_since":"2026-11-05T20:57:38.000Z","findings":[{"id":"fddtdxsx2clxae3sz6urb","kind":"reported_domain","summary":"Under mylogdepot.com, reported by PhishDestroy","first_observed":"2026-11-05T20:31:23.623Z","first_published":"2026-11-05T20:49:00.545Z","source":"phishdestroy","source_name":"PhishDestroy","under":"mylogdepot.com","source_url":"https://phishdestroy.io/domain/mylogdepot.com/"}],"url":"https://domainspoof.com/live?show=all&q=test.mylogdepot.com"},{"hostname":"testdomain23232.top","first_observed":"2026-11-05T20:26:30.950Z","first_published":"2026-11-05T20:49:00.545Z","brands":[],"dns":"resolved","resolved":["104.21.34.129","172.67.161.66"],"resolved_at":"2026-11-05T20:32:44Z","dns_checked_at":"2026-11-05T20:57:38.000Z","dns_since":"2026-11-05T20:57:38.000Z","findings":[{"id":"ffgwu2u2nadijrsaqimth","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T20:26:30.950Z","first_published":"2026-11-05T20:49:00.545Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=testdomain23232.top"},{"hostname":"tindkapitvik-no.live","first_observed":"2026-11-05T20:26:30.950Z","first_published":"2026-11-05T20:49:00.545Z","brands":[],"dns":"resolved","resolved":["104.21.19.126","172.67.186.44"],"resolved_at":"2026-11-05T20:32:44Z","dns_checked_at":"2026-11-05T20:57:38.000Z","dns_since":"2026-11-05T20:57:38.000Z","findings":[{"id":"flykf4m3vl4bqt7nyhwdr","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T20:26:30.950Z","first_published":"2026-11-05T20:49:00.545Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=tindkapitvik-no.live"},{"hostname":"tokentides.store","first_observed":"2026-11-05T20:21:03.017Z","first_published":"2026-11-05T20:49:00.545Z","brands":[],"dns":"resolved","resolved":["104.21.38.123","172.67.222.163"],"resolved_at":"2026-11-05T20:21:55Z","dns_checked_at":"2026-11-05T20:57:38.000Z","dns_since":"2026-11-05T20:57:38.000Z","findings":[{"id":"fqfgpbusqblxcnki6bugj","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T20:21:03.017Z","first_published":"2026-11-05T20:49:00.545Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=tokentides.store"},{"hostname":"trader-pro-ai-platform-com.financecryptoworld.com","first_observed":"2026-11-05T20:21:03.017Z","first_published":"2026-11-05T20:49:00.545Z","brands":[],"dns":"resolved","resolved":["104.21.10.130","172.67.131.121"],"resolved_at":"2026-11-05T20:21:55Z","dns_checked_at":"2026-11-05T20:57:38.000Z","dns_since":"2026-11-05T20:57:38.000Z","findings":[{"id":"fnqgdtmtr2zrwdjufvti7","kind":"reported_domain","summary":"Under financecryptoworld.com, listed by CERT Polska","first_observed":"2026-11-05T20:21:03.017Z","first_published":"2026-11-05T20:49:00.545Z","source":"cert_polska","source_name":"CERT Polska","under":"financecryptoworld.com"}],"url":"https://domainspoof.com/live?show=all&q=trader-pro-ai-platform-com.financecryptoworld.com"},{"hostname":"valutumai-es.live","first_observed":"2026-11-05T20:31:23.623Z","first_published":"2026-11-05T20:49:00.545Z","brands":[],"dns":"resolved","resolved":["104.21.92.74","172.67.188.161"],"resolved_at":"2026-11-05T20:40:52Z","dns_checked_at":"2026-11-05T20:57:38.000Z","dns_since":"2026-11-05T20:57:38.000Z","findings":[{"id":"f27xd3jfrhn2ucorjg3bi","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T20:31:23.623Z","first_published":"2026-11-05T20:49:00.545Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=valutumai-es.live"},{"hostname":"velariotrace-it.live","first_observed":"2026-11-05T20:11:22.932Z","first_published":"2026-11-05T20:49:00.545Z","brands":[],"dns":"resolved","resolved":["104.21.7.236","172.67.156.137"],"resolved_at":"2026-11-05T20:20:09Z","dns_checked_at":"2026-11-05T20:57:38.000Z","dns_since":"2026-11-05T20:57:38.000Z","findings":[{"id":"f3ce6dfon3cwhrj4n24zj","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T20:11:22.932Z","first_published":"2026-11-05T20:49:00.545Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=velariotrace-it.live"},{"hostname":"veloraapp-solution-com.financecryptoworld.com","first_observed":"2026-11-05T20:11:22.932Z","first_published":"2026-11-05T20:49:00.545Z","brands":[],"dns":"resolved","resolved":["104.21.10.130","172.67.131.121"],"resolved_at":"2026-11-05T20:20:09Z","dns_checked_at":"2026-11-05T20:57:38.000Z","dns_since":"2026-11-05T20:57:38.000Z","findings":[{"id":"fuzcybjsvjrworqw5grrk","kind":"reported_domain","summary":"Under financecryptoworld.com, listed by CERT Polska","first_observed":"2026-11-05T20:11:22.932Z","first_published":"2026-11-05T20:49:00.545Z","source":"cert_polska","source_name":"CERT Polska","under":"financecryptoworld.com"}],"url":"https://domainspoof.com/live?show=all&q=veloraapp-solution-com.financecryptoworld.com"},{"hostname":"vipaccess-gokite-ai.com","first_observed":"2026-11-05T20:16:29.525Z","first_published":"2026-11-05T20:49:00.545Z","brands":[],"dns":"resolved","resolved":["104.21.1.196","172.67.129.223"],"resolved_at":"2026-11-06T08:15:37Z","dns_checked_at":"2026-11-05T20:57:39.000Z","dns_since":"2026-11-05T20:57:39.000Z","findings":[{"id":"f7fsh6wb7rpcsfw2j676r","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T20:16:29.525Z","first_published":"2026-11-05T20:49:00.545Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/vipaccess-gokite-ai.com/"}],"url":"https://domainspoof.com/live?show=all&q=vipaccess-gokite-ai.com"},{"hostname":"vireluneqastorix.shop","first_observed":"2026-11-05T20:31:23.623Z","first_published":"2026-11-05T20:49:00.545Z","brands":[],"dns":"resolved","resolved":["104.21.17.22","172.67.219.148"],"resolved_at":"2026-11-06T01:21:21Z","dns_checked_at":"2026-11-05T20:57:39.000Z","dns_since":"2026-11-05T20:57:39.000Z","findings":[{"id":"f4ehakqbnvqfwtxe4oosd","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T20:31:23.623Z","first_published":"2026-11-05T20:49:00.545Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=vireluneqastorix.shop"},{"hostname":"warvenwealthvaleuk.live","first_observed":"2026-11-05T20:16:29.525Z","first_published":"2026-11-05T20:49:00.545Z","brands":[],"dns":"resolved","resolved":["104.21.3.25","172.67.130.18"],"resolved_at":"2026-11-05T20:30:08Z","dns_checked_at":"2026-11-05T20:57:39.000Z","dns_since":"2026-11-05T20:57:39.000Z","findings":[{"id":"fx6hmyl5nk6so52io7bsk","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T20:16:29.525Z","first_published":"2026-11-05T20:49:00.545Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=warvenwealthvaleuk.live"},{"hostname":"werewolfs01.com","first_observed":"2026-11-05T20:11:22.932Z","first_published":"2026-11-05T20:49:00.545Z","brands":[],"dns":"resolved","resolved":["104.21.25.42","172.67.222.172"],"resolved_at":"2026-11-06T00:11:31Z","dns_checked_at":"2026-11-05T20:57:39.000Z","dns_since":"2026-11-05T20:57:39.000Z","findings":[{"id":"fah6kmnaxuauiw5dr2rre","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T20:11:22.932Z","first_published":"2026-11-05T20:49:00.545Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/werewolfs01.com/"}],"url":"https://domainspoof.com/live?show=all&q=werewolfs01.com"},{"hostname":"worldcoin-a71.pages.dev","first_observed":"2026-11-05T20:31:23.623Z","first_published":"2026-11-05T20:49:00.545Z","brands":[],"dns":"resolved","resolved":["172.66.44.135","172.66.47.121"],"resolved_at":"2026-11-05T20:40:54Z","dns_checked_at":"2026-11-05T20:57:39.000Z","dns_since":"2026-11-05T20:57:39.000Z","findings":[{"id":"fjddhxtxghm6omftshlzq","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T20:31:23.623Z","first_published":"2026-11-05T20:49:00.545Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=worldcoin-a71.pages.dev"},{"hostname":"wqs3vp.xyz","first_observed":"2026-11-05T20:36:22.122Z","first_published":"2026-11-05T20:49:00.545Z","brands":[],"dns":"resolved","resolved":["104.21.55.59","172.67.145.89"],"resolved_at":"2026-11-05T20:37:06Z","dns_checked_at":"2026-11-05T20:57:39.000Z","dns_since":"2026-11-05T20:57:39.000Z","findings":[{"id":"fall4cm7t52dqwr5pynfk","kind":"reported_domain","summary":"Listed by NPA 165 (e-commerce)","first_observed":"2026-11-05T20:36:22.122Z","first_published":"2026-11-05T20:49:00.545Z","source":"npa","source_name":"NPA 165","claim":{"category":"e-commerce"}}],"url":"https://domainspoof.com/live?show=all&q=wqs3vp.xyz"},{"hostname":"www-codtbde-extend-list.myonlineportal.ch","first_observed":"2026-11-05T20:18:45.204Z","first_published":"2026-11-05T20:49:00.545Z","brands":[],"dns":"resolved","resolved":["94.183.168.35"],"resolved_at":"2026-11-05T20:21:54Z","dns_checked_at":"2026-11-05T20:57:39.000Z","dns_since":"2026-11-05T20:57:39.000Z","findings":[{"id":"ff6eyfawqvv34gkrqh7dw","kind":"reported_domain","summary":"Listed by USOM","first_observed":"2026-11-05T20:18:45.204Z","first_published":"2026-11-05T20:49:00.545Z","source":"usom","source_name":"USOM"}],"url":"https://domainspoof.com/live?show=all&q=www-codtbde-extend-list.myonlineportal.ch"},{"hostname":"www-tbde-weby-cepte.myonlineportal.ch","first_observed":"2026-11-05T20:18:45.204Z","first_published":"2026-11-05T20:49:00.545Z","brands":[],"dns":"resolved","resolved":["94.183.168.35"],"resolved_at":"2026-11-05T20:21:54Z","dns_checked_at":"2026-11-05T20:57:39.000Z","dns_since":"2026-11-05T20:57:39.000Z","findings":[{"id":"f4wtp4634k7frscxt6doa","kind":"reported_domain","summary":"Listed by USOM","first_observed":"2026-11-05T20:18:45.204Z","first_published":"2026-11-05T20:49:00.545Z","source":"usom","source_name":"USOM"}],"url":"https://domainspoof.com/live?show=all&q=www-tbde-weby-cepte.myonlineportal.ch"},{"hostname":"www.api.mellgamex.live","first_observed":"2026-11-05T20:11:22.932Z","first_published":"2026-11-05T20:49:00.545Z","brands":[],"dns":"resolved","resolved":["104.21.81.218","172.67.165.58"],"resolved_at":"2026-11-05T20:20:12Z","dns_checked_at":"2026-11-05T20:57:39.000Z","dns_since":"2026-11-05T20:57:39.000Z","findings":[{"id":"fvf25mudzgoiovwx6zad6","kind":"reported_domain","summary":"Under mellgamex.live, reported by PhishDestroy","first_observed":"2026-11-05T20:11:22.932Z","first_published":"2026-11-05T20:49:00.545Z","source":"phishdestroy","source_name":"PhishDestroy","under":"mellgamex.live","source_url":"https://phishdestroy.io/domain/mellgamex.live/"}],"url":"https://domainspoof.com/live?show=all&q=www.api.mellgamex.live"},{"hostname":"www.api.mellstroy.gifts","first_observed":"2026-11-05T20:16:29.525Z","first_published":"2026-11-05T20:49:00.545Z","brands":[],"dns":"resolved","resolved":["104.21.81.128","172.67.160.230"],"resolved_at":"2026-11-05T20:30:09Z","dns_checked_at":"2026-11-05T20:57:39.000Z","dns_since":"2026-11-05T20:57:39.000Z","findings":[{"id":"fzqdrhdqmv54wqkajblv7","kind":"reported_domain","summary":"Under mellstroy.gifts, reported by PhishDestroy","first_observed":"2026-11-05T20:16:29.525Z","first_published":"2026-11-05T20:49:00.545Z","source":"phishdestroy","source_name":"PhishDestroy","under":"mellstroy.gifts","source_url":"https://phishdestroy.io/domain/mellstroy.gifts/"}],"url":"https://domainspoof.com/live?show=all&q=www.api.mellstroy.gifts"},{"hostname":"www.bybit.us.cc","first_observed":"2026-11-05T20:31:23.623Z","first_published":"2026-11-05T20:49:00.545Z","brands":[{"id":"bybit","name":"Bybit","url":"https://domainspoof.com/brands/bybit"}],"dns":"resolved","resolved":["177.4.10.90"],"resolved_at":"2026-11-05T20:40:55Z","dns_checked_at":"2026-11-05T20:57:39.000Z","dns_since":"2026-11-05T20:57:39.000Z","findings":[{"id":"fsgrbbnpyednucfvptwls","kind":"reported_domain","summary":"Under bybit.us.cc, listed by MetaMask","first_observed":"2026-11-05T20:31:23.623Z","first_published":"2026-11-05T20:49:00.545Z","source":"metamask","source_name":"MetaMask","under":"bybit.us.cc"}],"url":"https://domainspoof.com/brands/bybit"},{"hostname":"www.cn-roblox.com","first_observed":"2026-11-05T20:40:55.644Z","first_published":"2026-11-05T20:49:00.545Z","brands":[{"id":"roblox","name":"Roblox","url":"https://domainspoof.com/brands/roblox"}],"dns":"resolved","resolved":["134.122.140.181"],"resolved_at":"2026-11-05T20:57:39Z","dns_checked_at":"2026-11-05T20:57:39.000Z","dns_since":"2026-11-05T20:57:39.000Z","findings":[{"id":"fpjczxbvf52qsvwxlpaeo","kind":"spamhaus_drop","summary":"Resolved to 134.122.140.181 on Spamhaus DROP","first_observed":"2026-11-05T20:40:55.644Z","first_published":"2026-11-05T20:49:00.545Z","address":"134.122.140.181","list":"spamhaus_drop","list_name":"Spamhaus DROP"}],"url":"https://domainspoof.com/brands/roblox"},{"hostname":"www.estudiosoftalmologicos.com","first_observed":"2026-11-05T20:21:03.017Z","first_published":"2026-11-05T20:49:00.545Z","brands":[],"dns":"resolved","resolved":["64.29.17.65","216.198.79.65"],"resolved_at":"2026-11-05T20:22:01Z","dns_checked_at":"2026-11-05T20:57:39.000Z","dns_since":"2026-11-05T20:57:39.000Z","findings":[{"id":"fql7sp6avgnbgeoumdsjq","kind":"reported_domain","summary":"Under estudiosoftalmologicos.com, reported by PhishDestroy","first_observed":"2026-11-05T20:21:03.017Z","first_published":"2026-11-05T20:49:00.545Z","source":"phishdestroy","source_name":"PhishDestroy","under":"estudiosoftalmologicos.com","source_url":"https://phishdestroy.io/domain/estudiosoftalmologicos.com/"}],"url":"https://domainspoof.com/live?show=all&q=www.estudiosoftalmologicos.com"},{"hostname":"www.filescn.cn","first_observed":"2026-11-05T20:36:22.122Z","first_published":"2026-11-05T20:49:00.545Z","brands":[],"dns":"resolved","resolved":["118.193.47.110"],"resolved_at":"2026-11-05T20:37:06Z","dns_checked_at":"2026-11-05T20:57:39.000Z","dns_since":"2026-11-05T20:57:39.000Z","findings":[{"id":"feyq7334p3csq6ugpuvrp","kind":"reported_domain","summary":"Under filescn.cn, listed by MetaMask","first_observed":"2026-11-05T20:36:22.122Z","first_published":"2026-11-05T20:49:00.545Z","source":"metamask","source_name":"MetaMask","under":"filescn.cn"}],"url":"https://domainspoof.com/live?show=all&q=www.filescn.cn"},{"hostname":"www.icloud-online.ru","first_observed":"2026-11-05T20:40:56.886Z","first_published":"2026-11-05T20:49:00.545Z","brands":[{"id":"apple","name":"Apple","url":"https://domainspoof.com/brands/apple"}],"dns":"resolved","resolved":["95.163.244.138"],"resolved_at":"2026-11-05T20:57:39Z","dns_checked_at":"2026-11-05T20:57:39.000Z","dns_since":"2026-11-05T20:57:39.000Z","findings":[{"id":"fojufao33ot5mrntwm7zl","kind":"phishing_infrastructure","summary":"Resolved to 95.163.244.138, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T20:40:56.886Z","first_published":"2026-11-05T20:49:00.545Z","address":"95.163.244.138","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/apple"},{"hostname":"www.internal-api.zenavlico.cyou","first_observed":"2026-11-05T20:11:22.932Z","first_published":"2026-11-05T20:49:00.545Z","brands":[],"dns":"resolved","resolved":["95.85.244.13"],"resolved_at":"2026-11-05T20:20:14Z","dns_checked_at":"2026-11-05T20:57:39.000Z","dns_since":"2026-11-05T20:57:39.000Z","findings":[{"id":"ffx4ob2af3woidchbxvvf","kind":"reported_domain","summary":"Under zenavlico.cyou, listed by CERT Polska","first_observed":"2026-11-05T20:11:22.932Z","first_published":"2026-11-05T20:49:00.545Z","source":"cert_polska","source_name":"CERT Polska","under":"zenavlico.cyou"}],"url":"https://domainspoof.com/live?show=all&q=www.internal-api.zenavlico.cyou"},{"hostname":"www.lotech-globals.cc.tesco-capital.cc","first_observed":"2026-11-05T20:06:45.379Z","first_published":"2026-11-05T20:49:00.545Z","brands":[{"id":"tesco","name":"Tesco","url":"https://domainspoof.com/brands/tesco"}],"dns":"resolved","resolved":["5.182.208.206"],"resolved_at":"2026-11-05T20:57:39Z","dns_checked_at":"2026-11-05T20:57:39.000Z","dns_since":"2026-11-05T20:57:39.000Z","findings":[{"id":"f32o23auv7zkwezwtqkym","kind":"phishing_infrastructure","summary":"Resolved to 5.182.208.206, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T20:06:45.379Z","first_published":"2026-11-05T20:49:00.545Z","address":"5.182.208.206","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/tesco"},{"hostname":"www.mellgamex.live","first_observed":"2026-11-05T20:36:22.122Z","first_published":"2026-11-05T20:49:00.545Z","brands":[],"dns":"resolved","resolved":["104.21.81.218","172.67.165.58"],"resolved_at":"2026-11-05T20:37:06Z","dns_checked_at":"2026-11-05T20:57:39.000Z","dns_since":"2026-11-05T20:57:39.000Z","findings":[{"id":"fgumz6wgmnsz53ztsfod4","kind":"reported_domain","summary":"Under mellgamex.live, reported by PhishDestroy","first_observed":"2026-11-05T20:36:22.122Z","first_published":"2026-11-05T20:49:00.545Z","source":"phishdestroy","source_name":"PhishDestroy","under":"mellgamex.live","source_url":"https://phishdestroy.io/domain/mellgamex.live/"}],"url":"https://domainspoof.com/live?show=all&q=www.mellgamex.live"},{"hostname":"www.mellstroy.gifts","first_observed":"2026-11-05T20:36:22.122Z","first_published":"2026-11-05T20:49:00.545Z","brands":[],"dns":"resolved","resolved":["104.21.81.128","172.67.160.230"],"resolved_at":"2026-11-05T20:37:06Z","dns_checked_at":"2026-11-05T20:57:39.000Z","dns_since":"2026-11-05T20:57:39.000Z","findings":[{"id":"fae3y4yzp427g4plyjzg4","kind":"reported_domain","summary":"Under mellstroy.gifts, reported by PhishDestroy","first_observed":"2026-11-05T20:36:22.122Z","first_published":"2026-11-05T20:49:00.545Z","source":"phishdestroy","source_name":"PhishDestroy","under":"mellstroy.gifts","source_url":"https://phishdestroy.io/domain/mellstroy.gifts/"}],"url":"https://domainspoof.com/live?show=all&q=www.mellstroy.gifts"},{"hostname":"www.michael-kors.kiev.ua","first_observed":"2026-11-05T20:06:45.383Z","first_published":"2026-11-05T20:49:00.545Z","brands":[{"id":"michael-kors","name":"Michael Kors","url":"https://domainspoof.com/brands/michael-kors"}],"dns":"resolved","resolved":["185.104.45.89","185.104.45.189"],"resolved_at":"2026-11-05T20:57:39Z","dns_checked_at":"2026-11-05T20:57:39.000Z","dns_since":"2026-11-05T20:57:39.000Z","findings":[{"id":"fhbrr6jz37g67l2qlpszh","kind":"phishing_infrastructure","summary":"Resolved to 185.104.45.89, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T20:06:45.383Z","first_published":"2026-11-05T20:49:00.545Z","address":"185.104.45.89","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/michael-kors"},{"hostname":"www.ms-core.xyz","first_observed":"2026-11-05T20:36:22.122Z","first_published":"2026-11-05T20:49:00.545Z","brands":[],"dns":"resolved","resolved":["104.21.50.232","172.67.213.102"],"resolved_at":"2026-11-05T20:37:06Z","dns_checked_at":"2026-11-05T20:57:39.000Z","dns_since":"2026-11-05T20:57:39.000Z","findings":[{"id":"fk47qsuf7co7hqc7phvca","kind":"reported_domain","summary":"Under ms-core.xyz, listed by MetaMask","first_observed":"2026-11-05T20:36:22.122Z","first_published":"2026-11-05T20:49:00.545Z","source":"metamask","source_name":"MetaMask","under":"ms-core.xyz"}],"url":"https://domainspoof.com/live?show=all&q=www.ms-core.xyz"},{"hostname":"www.pos.mauryabilling.in","first_observed":"2026-11-05T20:36:22.122Z","first_published":"2026-11-05T20:49:00.545Z","brands":[],"dns":"resolved","resolved":["157.90.1.43"],"resolved_at":"2026-11-05T20:37:07Z","dns_checked_at":"2026-11-05T20:57:39.000Z","dns_since":"2026-11-05T20:57:39.000Z","findings":[{"id":"fjhjtngivc6kdwua4ir7w","kind":"reported_domain","summary":"Under mauryabilling.in, listed by CERT Polska","first_observed":"2026-11-05T20:36:22.122Z","first_published":"2026-11-05T20:49:00.545Z","source":"cert_polska","source_name":"CERT Polska","under":"mauryabilling.in"}],"url":"https://domainspoof.com/live?show=all&q=www.pos.mauryabilling.in"},{"hostname":"www.protonvpn.forum","first_observed":"2026-11-05T20:37:07.009Z","first_published":"2026-11-05T20:49:00.545Z","brands":[{"id":"proton","name":"Proton","url":"https://domainspoof.com/brands/proton"}],"dns":"resolved","resolved":["172.232.24.161","172.232.24.235","172.234.25.42"],"resolved_at":"2026-11-05T20:57:39Z","dns_checked_at":"2026-11-05T20:57:39.000Z","dns_since":"2026-11-05T20:57:39.000Z","findings":[{"id":"fg2a32eil6t65uruetbxv","kind":"phishing_infrastructure","summary":"Resolved to 172.232.24.161, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T20:37:07.009Z","first_published":"2026-11-05T20:49:00.545Z","address":"172.232.24.161","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/proton"},{"hostname":"www.test.mylogdepot.com","first_observed":"2026-11-05T20:31:23.623Z","first_published":"2026-11-05T20:49:00.545Z","brands":[],"dns":"resolved","resolved":["163.61.188.7"],"resolved_at":"2026-11-05T20:40:58Z","dns_checked_at":"2026-11-05T20:57:39.000Z","dns_since":"2026-11-05T20:57:39.000Z","findings":[{"id":"fdkv4yocbwsn6smzwr2q3","kind":"reported_domain","summary":"Under mylogdepot.com, reported by PhishDestroy","first_observed":"2026-11-05T20:31:23.623Z","first_published":"2026-11-05T20:49:00.545Z","source":"phishdestroy","source_name":"PhishDestroy","under":"mylogdepot.com","source_url":"https://phishdestroy.io/domain/mylogdepot.com/"}],"url":"https://domainspoof.com/live?show=all&q=www.test.mylogdepot.com"},{"hostname":"xwlink.cloud","first_observed":"2026-11-05T20:18:45.204Z","first_published":"2026-11-05T20:49:00.545Z","brands":[],"dns":"resolved","resolved":["31.56.209.168"],"resolved_at":"2026-11-05T20:21:54Z","dns_checked_at":"2026-11-05T20:57:39.000Z","dns_since":"2026-11-05T20:57:39.000Z","findings":[{"id":"fe5nx7ttydzmneuecfjo6","kind":"reported_domain","summary":"Listed by USOM","first_observed":"2026-11-05T20:18:45.204Z","first_published":"2026-11-05T20:49:00.545Z","source":"usom","source_name":"USOM"}],"url":"https://domainspoof.com/live?show=all&q=xwlink.cloud"},{"hostname":"yandexmail.host","first_observed":"2026-11-05T20:20:20.203Z","first_published":"2026-11-05T20:49:00.545Z","brands":[{"id":"yandex","name":"Yandex","url":"https://domainspoof.com/brands/yandex"}],"dns":"resolved","resolved":["172.232.24.161","172.232.24.235","172.234.25.42"],"resolved_at":"2026-11-05T20:57:39Z","dns_checked_at":"2026-11-05T20:57:39.000Z","dns_since":"2026-11-05T20:57:39.000Z","findings":[{"id":"f7655cb467etprwqs5q7f","kind":"phishing_infrastructure","summary":"Resolved to 172.232.24.161, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T20:20:20.203Z","first_published":"2026-11-05T20:49:00.545Z","address":"172.232.24.161","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/yandex"},{"hostname":"yhdoxasdfrkswlapdsfty.com","first_observed":"2026-11-05T20:16:29.525Z","first_published":"2026-11-05T20:49:00.545Z","brands":[],"dns":"resolved","resolved":["104.21.24.35","172.67.216.189"],"resolved_at":"2026-11-05T20:30:10Z","dns_checked_at":"2026-11-05T20:57:39.000Z","dns_since":"2026-11-05T20:57:39.000Z","findings":[{"id":"fdk6pibm2hvla65omk7lz","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T20:16:29.525Z","first_published":"2026-11-05T20:49:00.545Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=yhdoxasdfrkswlapdsfty.com"},{"hostname":"yshbcsa.xyz","first_observed":"2026-11-05T20:31:23.623Z","first_published":"2026-11-05T20:49:00.545Z","brands":[],"dns":"resolved","resolved":["104.21.76.87","172.67.191.153"],"resolved_at":"2026-11-05T20:41:02Z","dns_checked_at":"2026-11-05T20:57:39.000Z","dns_since":"2026-11-05T20:57:39.000Z","findings":[{"id":"fakuj522uoynkoybgj5fj","kind":"reported_domain","summary":"Listed by NPA 165 (e-commerce)","first_observed":"2026-11-05T20:31:23.623Z","first_published":"2026-11-05T20:49:00.545Z","source":"npa","source_name":"NPA 165","claim":{"category":"e-commerce"}}],"url":"https://domainspoof.com/live?show=all&q=yshbcsa.xyz"},{"hostname":"zdvxwh.asia","first_observed":"2026-11-05T20:26:30.950Z","first_published":"2026-11-05T20:49:00.545Z","brands":[],"dns":"resolved","resolved":["104.21.46.87","172.67.137.3"],"resolved_at":"2026-11-05T20:33:04Z","dns_checked_at":"2026-11-05T20:57:39.000Z","dns_since":"2026-11-05T20:57:39.000Z","findings":[{"id":"fs5bwlotzno6zbg4vtlcw","kind":"reported_domain","summary":"Listed by NPA 165 (e-commerce)","first_observed":"2026-11-05T20:26:30.950Z","first_published":"2026-11-05T20:49:00.545Z","source":"npa","source_name":"NPA 165","claim":{"category":"e-commerce"}}],"url":"https://domainspoof.com/live?show=all&q=zdvxwh.asia"},{"hostname":"zeltix-pt.com","first_observed":"2026-11-05T20:36:22.122Z","first_published":"2026-11-05T20:49:00.545Z","brands":[],"dns":"resolved","resolved":["104.21.68.127","172.67.195.137"],"resolved_at":"2026-11-06T01:46:28Z","dns_checked_at":"2026-11-05T20:57:39.000Z","dns_since":"2026-11-05T20:57:39.000Z","findings":[{"id":"fey2krruwqs2qprvk5noz","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T20:36:22.122Z","first_published":"2026-11-05T20:49:00.545Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=zeltix-pt.com"},{"hostname":"ziraatbankasiai-nl.live","first_observed":"2026-11-05T20:11:22.932Z","first_published":"2026-11-05T20:49:00.545Z","brands":[],"dns":"resolved","resolved":["104.21.29.59","172.67.171.105"],"resolved_at":"2026-11-05T20:20:21Z","dns_checked_at":"2026-11-05T20:57:39.000Z","dns_since":"2026-11-05T20:57:39.000Z","findings":[{"id":"f3k4iccvz3xgqxyyyry3e","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T20:11:22.932Z","first_published":"2026-11-05T20:49:00.545Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=ziraatbankasiai-nl.live"},{"hostname":"zoomupdate.net","first_observed":"2026-11-05T20:36:22.122Z","first_published":"2026-11-05T20:49:00.545Z","brands":[],"dns":"resolved","resolved":["104.21.6.36","172.67.154.203"],"resolved_at":"2026-11-05T20:37:09Z","dns_checked_at":"2026-11-05T20:57:39.000Z","dns_since":"2026-11-05T20:57:39.000Z","findings":[{"id":"fpt5oiu46eqcy4gg34nud","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T20:36:22.122Z","first_published":"2026-11-05T20:49:00.545Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=zoomupdate.net"},{"hostname":"zpsqt.com","first_observed":"2026-11-05T20:26:30.950Z","first_published":"2026-11-05T20:49:00.545Z","brands":[],"dns":"resolved","resolved":["104.21.69.137","172.67.208.248"],"resolved_at":"2026-11-05T20:33:04Z","dns_checked_at":"2026-11-05T20:57:39.000Z","dns_since":"2026-11-05T20:57:39.000Z","findings":[{"id":"fwrkn2dli7lbu3jtx7d62","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T20:26:30.950Z","first_published":"2026-11-05T20:49:00.545Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=zpsqt.com"},{"hostname":"delta.technology","first_observed":"2026-11-05T20:14:26.000Z","first_published":"2026-11-05T20:14:26.000Z","brands":[{"id":"delta-air-lines","name":"Delta Air Lines","url":"https://domainspoof.com/brands/delta-air-lines"}],"dns":"resolved","resolved":["195.110.124.133"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of delta.com (same name, other ending), resolved to 195.110.124.133, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T20:14:26.000Z","first_published":"2026-11-05T20:14:26.000Z","of":"delta.com","spelling":"tld","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"195.110.124.133","flagged_at":"2026-11-05T20:14:26Z"}]}],"url":"https://domainspoof.com/brands/delta-air-lines"},{"hostname":"erddit.com","first_observed":"2026-11-05T20:14:26.000Z","first_published":"2026-11-05T20:14:26.000Z","brands":[{"id":"reddit","name":"Reddit","url":"https://domainspoof.com/brands/reddit"}],"dns":"resolved","resolved":["74.63.219.254"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of reddit.com (two letters swapped), resolved to 74.63.219.254, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T20:14:26.000Z","first_published":"2026-11-05T20:14:26.000Z","of":"reddit.com","spelling":"transposition","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"74.63.219.254","flagged_at":"2026-11-05T20:14:26Z"}]}],"url":"https://domainspoof.com/brands/reddit"},{"hostname":"kddi.okinawa","first_observed":"2026-11-05T20:14:26.000Z","first_published":"2026-11-05T20:14:26.000Z","brands":[{"id":"kddi","name":"KDDI","url":"https://domainspoof.com/brands/kddi"}],"dns":"resolved","resolved":["150.95.255.38"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of kddi.com (same name, other ending), resolved to 150.95.255.38, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T20:14:26.000Z","first_published":"2026-11-05T20:14:26.000Z","of":"kddi.com","spelling":"tld","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"150.95.255.38","flagged_at":"2026-11-05T20:14:26Z"}]}],"url":"https://domainspoof.com/brands/kddi"},{"hostname":"orblox.com","first_observed":"2026-11-05T20:14:26.000Z","first_published":"2026-11-05T20:14:26.000Z","brands":[{"id":"roblox","name":"Roblox","url":"https://domainspoof.com/brands/roblox"}],"dns":"resolved","resolved":["69.162.80.57"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of roblox.com (two letters swapped), resolved to 69.162.80.57, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T20:14:26.000Z","first_published":"2026-11-05T20:14:26.000Z","of":"roblox.com","spelling":"transposition","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"69.162.80.57","flagged_at":"2026-11-05T20:14:26Z"}]}],"url":"https://domainspoof.com/brands/roblox"},{"hostname":"orotonmail.com","first_observed":"2026-11-05T20:14:26.000Z","first_published":"2026-11-05T20:14:26.000Z","brands":[{"id":"proton-mail","name":"Proton Mail","url":"https://domainspoof.com/brands/proton-mail"}],"dns":"resolved","resolved":["94.75.193.71"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of protonmail.com (a letter from a neighbouring key), resolved to 94.75.193.71, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T20:14:26.000Z","first_published":"2026-11-05T20:14:26.000Z","of":"protonmail.com","spelling":"adjacent_key","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"94.75.193.71","flagged_at":"2026-11-05T20:14:26Z"}]}],"url":"https://domainspoof.com/brands/proton-mail"},{"hostname":"pjobp.pl","first_observed":"2026-11-05T20:14:26.000Z","first_published":"2026-11-05T20:14:26.000Z","brands":[{"id":"pko-bp","name":"PKO BP","url":"https://domainspoof.com/brands/pko-bp"}],"dns":"resolved","resolved":["185.253.212.22"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of pkobp.pl (a letter from a neighbouring key), resolved to 185.253.212.22, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T20:14:26.000Z","first_published":"2026-11-05T20:14:26.000Z","of":"pkobp.pl","spelling":"adjacent_key","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"185.253.212.22","flagged_at":"2026-11-05T20:14:26Z"}]}],"url":"https://domainspoof.com/brands/pko-bp"},{"hostname":"playetation.com","first_observed":"2026-11-05T20:14:26.000Z","first_published":"2026-11-05T20:14:26.000Z","brands":[{"id":"playstation","name":"PlayStation","url":"https://domainspoof.com/brands/playstation"}],"dns":"resolved","resolved":["216.245.213.76"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of playstation.com (a letter from a neighbouring key), resolved to 216.245.213.76, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T20:14:26.000Z","first_published":"2026-11-05T20:14:26.000Z","of":"playstation.com","spelling":"adjacent_key","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"216.245.213.76","flagged_at":"2026-11-05T20:14:26Z"}]}],"url":"https://domainspoof.com/brands/playstation"},{"hostname":"playstaion.com","first_observed":"2026-11-05T20:14:26.000Z","first_published":"2026-11-05T20:14:26.000Z","brands":[{"id":"playstation","name":"PlayStation","url":"https://domainspoof.com/brands/playstation"}],"dns":"resolved","resolved":["69.162.80.62"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of playstation.com (a dropped letter), resolved to 69.162.80.62, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T20:14:26.000Z","first_published":"2026-11-05T20:14:26.000Z","of":"playstation.com","spelling":"omission","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"69.162.80.62","flagged_at":"2026-11-05T20:14:26Z"}]}],"url":"https://domainspoof.com/brands/playstation"},{"hostname":"plqystation.com","first_observed":"2026-11-05T20:14:26.000Z","first_published":"2026-11-05T20:14:26.000Z","brands":[{"id":"playstation","name":"PlayStation","url":"https://domainspoof.com/brands/playstation"}],"dns":"resolved","resolved":["216.245.213.75"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of playstation.com (a letter from a neighbouring key), resolved to 216.245.213.75, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T20:14:26.000Z","first_published":"2026-11-05T20:14:26.000Z","of":"playstation.com","spelling":"adjacent_key","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"216.245.213.75","flagged_at":"2026-11-05T20:14:26Z"}]}],"url":"https://domainspoof.com/brands/playstation"},{"hostname":"plyastation.com","first_observed":"2026-11-05T20:14:26.000Z","first_published":"2026-11-05T20:14:26.000Z","brands":[{"id":"playstation","name":"PlayStation","url":"https://domainspoof.com/brands/playstation"}],"dns":"resolved","resolved":["77.247.182.245"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of playstation.com (two letters swapped), resolved to 77.247.182.245, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T20:14:26.000Z","first_published":"2026-11-05T20:14:26.000Z","of":"playstation.com","spelling":"transposition","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"77.247.182.245","flagged_at":"2026-11-05T20:14:26Z"}]}],"url":"https://domainspoof.com/brands/playstation"},{"hostname":"popmart.live","first_observed":"2026-11-05T20:14:26.000Z","first_published":"2026-11-05T20:14:26.000Z","brands":[{"id":"pop-mart","name":"Pop Mart","url":"https://domainspoof.com/brands/pop-mart"}],"dns":"resolved","resolved":["64.120.31.120"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of popmart.com (same name, other ending), resolved to 64.120.31.120, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T20:14:26.000Z","first_published":"2026-11-05T20:14:26.000Z","of":"popmart.com","spelling":"tld","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"64.120.31.120","flagged_at":"2026-11-05T20:14:26Z"}]}],"url":"https://domainspoof.com/brands/pop-mart"},{"hostname":"pprimevideo.com","first_observed":"2026-11-05T20:14:26.000Z","first_published":"2026-11-05T20:14:26.000Z","brands":[{"id":"amazon","name":"Amazon","url":"https://domainspoof.com/brands/amazon"}],"dns":"resolved","resolved":["216.245.213.75"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of primevideo.com (a doubled letter), resolved to 216.245.213.75, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T20:14:26.000Z","first_published":"2026-11-05T20:14:26.000Z","of":"primevideo.com","spelling":"repetition","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"216.245.213.75","flagged_at":"2026-11-05T20:14:26Z"}]}],"url":"https://domainspoof.com/brands/amazon"},{"hostname":"primeviceo.com","first_observed":"2026-11-05T20:14:26.000Z","first_published":"2026-11-05T20:14:26.000Z","brands":[{"id":"amazon","name":"Amazon","url":"https://domainspoof.com/brands/amazon"}],"dns":"resolved","resolved":["77.247.182.243"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of primevideo.com (a letter from a neighbouring key), resolved to 77.247.182.243, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T20:14:26.000Z","first_published":"2026-11-05T20:14:26.000Z","of":"primevideo.com","spelling":"adjacent_key","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"77.247.182.243","flagged_at":"2026-11-05T20:14:26Z"}]}],"url":"https://domainspoof.com/brands/amazon"},{"hostname":"primeviddo.com","first_observed":"2026-11-05T20:14:26.000Z","first_published":"2026-11-05T20:14:26.000Z","brands":[{"id":"amazon","name":"Amazon","url":"https://domainspoof.com/brands/amazon"}],"dns":"resolved","resolved":["216.245.213.75"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of primevideo.com (a letter from a neighbouring key), resolved to 216.245.213.75, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T20:14:26.000Z","first_published":"2026-11-05T20:14:26.000Z","of":"primevideo.com","spelling":"adjacent_key","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"216.245.213.75","flagged_at":"2026-11-05T20:14:26Z"}]}],"url":"https://domainspoof.com/brands/amazon"},{"hostname":"primevidek.com","first_observed":"2026-11-05T20:14:26.000Z","first_published":"2026-11-05T20:14:26.000Z","brands":[{"id":"amazon","name":"Amazon","url":"https://domainspoof.com/brands/amazon"}],"dns":"resolved","resolved":["77.247.182.247"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of primevideo.com (a letter from a neighbouring key), resolved to 77.247.182.247, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T20:14:26.000Z","first_published":"2026-11-05T20:14:26.000Z","of":"primevideo.com","spelling":"adjacent_key","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"77.247.182.247","flagged_at":"2026-11-05T20:14:26Z"}]}],"url":"https://domainspoof.com/brands/amazon"},{"hostname":"primevidel.com","first_observed":"2026-11-05T20:14:26.000Z","first_published":"2026-11-05T20:14:26.000Z","brands":[{"id":"amazon","name":"Amazon","url":"https://domainspoof.com/brands/amazon"}],"dns":"resolved","resolved":["77.247.182.250"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of primevideo.com (a letter from a neighbouring key), resolved to 77.247.182.250, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T20:14:26.000Z","first_published":"2026-11-05T20:14:26.000Z","of":"primevideo.com","spelling":"adjacent_key","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"77.247.182.250","flagged_at":"2026-11-05T20:14:26Z"}]}],"url":"https://domainspoof.com/brands/amazon"},{"hostname":"primevixeo.com","first_observed":"2026-11-05T20:14:26.000Z","first_published":"2026-11-05T20:14:26.000Z","brands":[{"id":"amazon","name":"Amazon","url":"https://domainspoof.com/brands/amazon"}],"dns":"resolved","resolved":["77.247.182.251"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of primevideo.com (a letter from a neighbouring key), resolved to 77.247.182.251, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T20:14:26.000Z","first_published":"2026-11-05T20:14:26.000Z","of":"primevideo.com","spelling":"adjacent_key","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"77.247.182.251","flagged_at":"2026-11-05T20:14:26Z"}]}],"url":"https://domainspoof.com/brands/amazon"},{"hostname":"privateemai.com","first_observed":"2026-11-05T20:14:26.000Z","first_published":"2026-11-05T20:14:26.000Z","brands":[{"id":"namecheap","name":"Namecheap","url":"https://domainspoof.com/brands/namecheap"}],"dns":"resolved","resolved":["199.193.114.45"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of privateemail.com (a dropped letter), resolved to 199.193.114.45, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T20:14:26.000Z","first_published":"2026-11-05T20:14:26.000Z","of":"privateemail.com","spelling":"omission","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"199.193.114.45","flagged_at":"2026-11-05T20:14:26Z"}]}],"url":"https://domainspoof.com/brands/namecheap"},{"hostname":"prize-pump.fun","first_observed":"2026-11-05T20:14:26.000Z","first_published":"2026-11-05T20:14:26.000Z","brands":[{"id":"pump-fun","name":"pump.fun","url":"https://domainspoof.com/brands/pump-fun"}],"dns":"resolved","resolved":["104.21.18.58","172.67.180.111","2606:4700:3031::6815:123a","2606:4700:3032::ac43:b46f"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of pump.fun (the name with an added word), reported by PhishDestroy","first_observed":"2026-11-05T20:14:26.000Z","first_published":"2026-11-05T20:14:26.000Z","of":"pump.fun","spelling":"combo","found_by":"dns_sweep","listings":[{"kind":"reported","source":"phishdestroy","source_name":"PhishDestroy","host":"prize-pump.fun","flagged_at":"2026-11-05T20:14:26Z"}]}],"url":"https://domainspoof.com/brands/pump-fun"},{"hostname":"proronmail.com","first_observed":"2026-11-05T20:14:26.000Z","first_published":"2026-11-05T20:14:26.000Z","brands":[{"id":"proton-mail","name":"Proton Mail","url":"https://domainspoof.com/brands/proton-mail"}],"dns":"resolved","resolved":["185.150.189.124"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of protonmail.com (a letter from a neighbouring key), resolved to 185.150.189.124, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T20:14:26.000Z","first_published":"2026-11-05T20:14:26.000Z","of":"protonmail.com","spelling":"adjacent_key","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"185.150.189.124","flagged_at":"2026-11-05T20:14:26Z"}]}],"url":"https://domainspoof.com/brands/proton-mail"},{"hostname":"protnomail.com","first_observed":"2026-11-05T20:14:26.000Z","first_published":"2026-11-05T20:14:26.000Z","brands":[{"id":"proton-mail","name":"Proton Mail","url":"https://domainspoof.com/brands/proton-mail"}],"dns":"resolved","resolved":["213.227.156.75"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of protonmail.com (two letters swapped), resolved to 213.227.156.75, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T20:14:26.000Z","first_published":"2026-11-05T20:14:26.000Z","of":"protonmail.com","spelling":"transposition","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"213.227.156.75","flagged_at":"2026-11-05T20:14:26Z"}]}],"url":"https://domainspoof.com/brands/proton-mail"},{"hostname":"protonmal.com","first_observed":"2026-11-05T20:14:26.000Z","first_published":"2026-11-05T20:14:26.000Z","brands":[{"id":"proton-mail","name":"Proton Mail","url":"https://domainspoof.com/brands/proton-mail"}],"dns":"resolved","resolved":["212.92.105.215"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of protonmail.com (a dropped letter), resolved to 212.92.105.215, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T20:14:26.000Z","first_published":"2026-11-05T20:14:26.000Z","of":"protonmail.com","spelling":"omission","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"212.92.105.215","flagged_at":"2026-11-05T20:14:26Z"}]}],"url":"https://domainspoof.com/brands/proton-mail"},{"hostname":"protonmial.com","first_observed":"2026-11-05T20:14:26.000Z","first_published":"2026-11-05T20:14:26.000Z","brands":[{"id":"proton-mail","name":"Proton Mail","url":"https://domainspoof.com/brands/proton-mail"}],"dns":"resolved","resolved":["77.247.179.88"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of protonmail.com (two letters swapped), resolved to 77.247.179.88, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T20:14:26.000Z","first_published":"2026-11-05T20:14:26.000Z","of":"protonmail.com","spelling":"transposition","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"77.247.179.88","flagged_at":"2026-11-05T20:14:26Z"}]}],"url":"https://domainspoof.com/brands/proton-mail"},{"hostname":"prrotonmail.com","first_observed":"2026-11-05T20:14:26.000Z","first_published":"2026-11-05T20:14:26.000Z","brands":[{"id":"proton-mail","name":"Proton Mail","url":"https://domainspoof.com/brands/proton-mail"}],"dns":"resolved","resolved":["94.75.193.71"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of protonmail.com (a doubled letter), resolved to 94.75.193.71, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T20:14:26.000Z","first_published":"2026-11-05T20:14:26.000Z","of":"protonmail.com","spelling":"repetition","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"94.75.193.71","flagged_at":"2026-11-05T20:14:26Z"}]}],"url":"https://domainspoof.com/brands/proton-mail"},{"hostname":"prtonmail.com","first_observed":"2026-11-05T20:14:26.000Z","first_published":"2026-11-05T20:14:26.000Z","brands":[{"id":"proton-mail","name":"Proton Mail","url":"https://domainspoof.com/brands/proton-mail"}],"dns":"resolved","resolved":["74.63.219.254"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of protonmail.com (a dropped letter), resolved to 74.63.219.254, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T20:14:26.000Z","first_published":"2026-11-05T20:14:26.000Z","of":"protonmail.com","spelling":"omission","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"74.63.219.254","flagged_at":"2026-11-05T20:14:26Z"}]}],"url":"https://domainspoof.com/brands/proton-mail"},{"hostname":"pubg.me","first_observed":"2026-11-05T20:14:26.000Z","first_published":"2026-11-05T20:14:26.000Z","brands":[{"id":"pubg","name":"PUBG","url":"https://domainspoof.com/brands/pubg"}],"dns":"resolved","resolved":["172.241.213.97"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of pubg.com (same name, other ending), resolved to 172.241.213.97, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T20:14:26.000Z","first_published":"2026-11-05T20:14:26.000Z","of":"pubg.com","spelling":"tld","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"172.241.213.97","flagged_at":"2026-11-05T20:14:26Z"}]}],"url":"https://domainspoof.com/brands/pubg"},{"hostname":"qataraieways.com","first_observed":"2026-11-05T20:14:26.000Z","first_published":"2026-11-05T20:14:26.000Z","brands":[{"id":"qatar-airways","name":"Qatar Airways","url":"https://domainspoof.com/brands/qatar-airways"}],"dns":"resolved","resolved":["69.162.80.56"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of qatarairways.com (a letter from a neighbouring key), resolved to 69.162.80.56, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T20:14:26.000Z","first_published":"2026-11-05T20:14:26.000Z","of":"qatarairways.com","spelling":"adjacent_key","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"69.162.80.56","flagged_at":"2026-11-05T20:14:26Z"}]}],"url":"https://domainspoof.com/brands/qatar-airways"},{"hostname":"qatarairawys.com","first_observed":"2026-11-05T20:14:26.000Z","first_published":"2026-11-05T20:14:26.000Z","brands":[{"id":"qatar-airways","name":"Qatar Airways","url":"https://domainspoof.com/brands/qatar-airways"}],"dns":"resolved","resolved":["212.7.194.71"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of qatarairways.com (two letters swapped), resolved to 212.7.194.71, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T20:14:26.000Z","first_published":"2026-11-05T20:14:26.000Z","of":"qatarairways.com","spelling":"transposition","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"212.7.194.71","flagged_at":"2026-11-05T20:14:26Z"}]}],"url":"https://domainspoof.com/brands/qatar-airways"},{"hostname":"qatarairwas.com","first_observed":"2026-11-05T20:14:26.000Z","first_published":"2026-11-05T20:14:26.000Z","brands":[{"id":"qatar-airways","name":"Qatar Airways","url":"https://domainspoof.com/brands/qatar-airways"}],"dns":"resolved","resolved":["212.7.194.67"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of qatarairways.com (a dropped letter), resolved to 212.7.194.67, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T20:14:26.000Z","first_published":"2026-11-05T20:14:26.000Z","of":"qatarairways.com","spelling":"omission","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"212.7.194.67","flagged_at":"2026-11-05T20:14:26Z"}]}],"url":"https://domainspoof.com/brands/qatar-airways"},{"hostname":"qatarairwasy.com","first_observed":"2026-11-05T20:14:26.000Z","first_published":"2026-11-05T20:14:26.000Z","brands":[{"id":"qatar-airways","name":"Qatar Airways","url":"https://domainspoof.com/brands/qatar-airways"}],"dns":"resolved","resolved":["199.193.114.100"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of qatarairways.com (two letters swapped), resolved to 199.193.114.100, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T20:14:26.000Z","first_published":"2026-11-05T20:14:26.000Z","of":"qatarairways.com","spelling":"transposition","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"199.193.114.100","flagged_at":"2026-11-05T20:14:26Z"}]}],"url":"https://domainspoof.com/brands/qatar-airways"},{"hostname":"qatarairwaya.com","first_observed":"2026-11-05T20:14:26.000Z","first_published":"2026-11-05T20:14:26.000Z","brands":[{"id":"qatar-airways","name":"Qatar Airways","url":"https://domainspoof.com/brands/qatar-airways"}],"dns":"resolved","resolved":["69.162.80.52"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of qatarairways.com (a letter from a neighbouring key), resolved to 69.162.80.52, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T20:14:26.000Z","first_published":"2026-11-05T20:14:26.000Z","of":"qatarairways.com","spelling":"adjacent_key","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"69.162.80.52","flagged_at":"2026-11-05T20:14:26Z"}]}],"url":"https://domainspoof.com/brands/qatar-airways"},{"hostname":"qatarairwayys.com","first_observed":"2026-11-05T20:14:26.000Z","first_published":"2026-11-05T20:14:26.000Z","brands":[{"id":"qatar-airways","name":"Qatar Airways","url":"https://domainspoof.com/brands/qatar-airways"}],"dns":"resolved","resolved":["69.162.80.56"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of qatarairways.com (a doubled letter), resolved to 69.162.80.56, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T20:14:26.000Z","first_published":"2026-11-05T20:14:26.000Z","of":"qatarairways.com","spelling":"repetition","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"69.162.80.56","flagged_at":"2026-11-05T20:14:26Z"}]}],"url":"https://domainspoof.com/brands/qatar-airways"},{"hostname":"qatarairwsys.com","first_observed":"2026-11-05T20:14:26.000Z","first_published":"2026-11-05T20:14:26.000Z","brands":[{"id":"qatar-airways","name":"Qatar Airways","url":"https://domainspoof.com/brands/qatar-airways"}],"dns":"resolved","resolved":["23.105.175.15"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of qatarairways.com (a letter from a neighbouring key), resolved to 23.105.175.15, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T20:14:26.000Z","first_published":"2026-11-05T20:14:26.000Z","of":"qatarairways.com","spelling":"adjacent_key","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"23.105.175.15","flagged_at":"2026-11-05T20:14:26Z"}]}],"url":"https://domainspoof.com/brands/qatar-airways"},{"hostname":"qatatairways.com","first_observed":"2026-11-05T20:14:26.000Z","first_published":"2026-11-05T20:14:26.000Z","brands":[{"id":"qatar-airways","name":"Qatar Airways","url":"https://domainspoof.com/brands/qatar-airways"}],"dns":"resolved","resolved":["69.162.80.51"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of qatarairways.com (a letter from a neighbouring key), resolved to 69.162.80.51, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T20:14:26.000Z","first_published":"2026-11-05T20:14:26.000Z","of":"qatarairways.com","spelling":"adjacent_key","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"69.162.80.51","flagged_at":"2026-11-05T20:14:26Z"}]}],"url":"https://domainspoof.com/brands/qatar-airways"},{"hostname":"qayarairways.com","first_observed":"2026-11-05T20:14:26.000Z","first_published":"2026-11-05T20:14:26.000Z","brands":[{"id":"qatar-airways","name":"Qatar Airways","url":"https://domainspoof.com/brands/qatar-airways"}],"dns":"resolved","resolved":["216.245.213.74"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of qatarairways.com (a letter from a neighbouring key), resolved to 216.245.213.74, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T20:14:26.000Z","first_published":"2026-11-05T20:14:26.000Z","of":"qatarairways.com","spelling":"adjacent_key","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"216.245.213.74","flagged_at":"2026-11-05T20:14:26Z"}]}],"url":"https://domainspoof.com/brands/qatar-airways"},{"hostname":"qhickbooks.com","first_observed":"2026-11-05T20:14:26.000Z","first_published":"2026-11-05T20:14:26.000Z","brands":[{"id":"intuit","name":"Intuit","url":"https://domainspoof.com/brands/intuit"}],"dns":"resolved","resolved":["212.7.194.68"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of quickbooks.com (a letter from a neighbouring key), resolved to 212.7.194.68, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T20:14:26.000Z","first_published":"2026-11-05T20:14:26.000Z","of":"quickbooks.com","spelling":"adjacent_key","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"212.7.194.68","flagged_at":"2026-11-05T20:14:26Z"}]}],"url":"https://domainspoof.com/brands/intuit"},{"hostname":"qiwi.org","first_observed":"2026-11-05T20:14:26.000Z","first_published":"2026-11-05T20:14:26.000Z","brands":[{"id":"qiwi","name":"Qiwi","url":"https://domainspoof.com/brands/qiwi"}],"dns":"resolved","resolved":["212.7.194.71"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of qiwi.com (same name, other ending), resolved to 212.7.194.71, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T20:14:26.000Z","first_published":"2026-11-05T20:14:26.000Z","of":"qiwi.com","spelling":"tld","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"212.7.194.71","flagged_at":"2026-11-05T20:14:26Z"}]}],"url":"https://domainspoof.com/brands/qiwi"},{"hostname":"qtarairways.com","first_observed":"2026-11-05T20:14:26.000Z","first_published":"2026-11-05T20:14:26.000Z","brands":[{"id":"qatar-airways","name":"Qatar Airways","url":"https://domainspoof.com/brands/qatar-airways"}],"dns":"resolved","resolved":["212.7.194.71"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of qatarairways.com (a dropped letter), resolved to 212.7.194.71, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T20:14:26.000Z","first_published":"2026-11-05T20:14:26.000Z","of":"qatarairways.com","spelling":"omission","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"212.7.194.71","flagged_at":"2026-11-05T20:14:26Z"}]}],"url":"https://domainspoof.com/brands/qatar-airways"},{"hostname":"quckbooks.com","first_observed":"2026-11-05T20:14:26.000Z","first_published":"2026-11-05T20:14:26.000Z","brands":[{"id":"intuit","name":"Intuit","url":"https://domainspoof.com/brands/intuit"}],"dns":"resolved","resolved":["45.82.67.240"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of quickbooks.com (a dropped letter), resolved to 45.82.67.240, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T20:14:26.000Z","first_published":"2026-11-05T20:14:26.000Z","of":"quickbooks.com","spelling":"omission","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"45.82.67.240","flagged_at":"2026-11-05T20:14:26Z"}]}],"url":"https://domainspoof.com/brands/intuit"},{"hostname":"quicjbooks.com","first_observed":"2026-11-05T20:14:26.000Z","first_published":"2026-11-05T20:14:26.000Z","brands":[{"id":"intuit","name":"Intuit","url":"https://domainspoof.com/brands/intuit"}],"dns":"resolved","resolved":["208.115.249.238"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of quickbooks.com (a letter from a neighbouring key), resolved to 208.115.249.238, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T20:14:26.000Z","first_published":"2026-11-05T20:14:26.000Z","of":"quickbooks.com","spelling":"adjacent_key","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"208.115.249.238","flagged_at":"2026-11-05T20:14:26Z"}]}],"url":"https://domainspoof.com/brands/intuit"},{"hostname":"quickb00ks.com","first_observed":"2026-11-05T20:14:26.000Z","first_published":"2026-11-05T20:14:26.000Z","brands":[{"id":"intuit","name":"Intuit","url":"https://domainspoof.com/brands/intuit"}],"dns":"resolved","resolved":["212.7.194.53"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of quickbooks.com (similar-looking characters), resolved to 212.7.194.53, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T20:14:26.000Z","first_published":"2026-11-05T20:14:26.000Z","of":"quickbooks.com","spelling":"homoglyph","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"212.7.194.53","flagged_at":"2026-11-05T20:14:26Z"}]}],"url":"https://domainspoof.com/brands/intuit"},{"hostname":"quickbbooks.com","first_observed":"2026-11-05T20:14:26.000Z","first_published":"2026-11-05T20:14:26.000Z","brands":[{"id":"intuit","name":"Intuit","url":"https://domainspoof.com/brands/intuit"}],"dns":"resolved","resolved":["212.7.194.71"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of quickbooks.com (a doubled letter), resolved to 212.7.194.71, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T20:14:26.000Z","first_published":"2026-11-05T20:14:26.000Z","of":"quickbooks.com","spelling":"repetition","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"212.7.194.71","flagged_at":"2026-11-05T20:14:26Z"}]}],"url":"https://domainspoof.com/brands/intuit"},{"hostname":"quickbo0ks.com","first_observed":"2026-11-05T20:14:26.000Z","first_published":"2026-11-05T20:14:26.000Z","brands":[{"id":"intuit","name":"Intuit","url":"https://domainspoof.com/brands/intuit"}],"dns":"resolved","resolved":["45.82.67.143"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of quickbooks.com (similar-looking characters), resolved to 45.82.67.143, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T20:14:26.000Z","first_published":"2026-11-05T20:14:26.000Z","of":"quickbooks.com","spelling":"homoglyph","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"45.82.67.143","flagged_at":"2026-11-05T20:14:26Z"}]}],"url":"https://domainspoof.com/brands/intuit"},{"hostname":"quickbokos.com","first_observed":"2026-11-05T20:14:26.000Z","first_published":"2026-11-05T20:14:26.000Z","brands":[{"id":"intuit","name":"Intuit","url":"https://domainspoof.com/brands/intuit"}],"dns":"resolved","resolved":["69.162.80.61"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of quickbooks.com (two letters swapped), resolved to 69.162.80.61, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T20:14:26.000Z","first_published":"2026-11-05T20:14:26.000Z","of":"quickbooks.com","spelling":"transposition","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"69.162.80.61","flagged_at":"2026-11-05T20:14:26Z"}]}],"url":"https://domainspoof.com/brands/intuit"},{"hostname":"quickboks.com","first_observed":"2026-11-05T20:14:26.000Z","first_published":"2026-11-05T20:14:26.000Z","brands":[{"id":"intuit","name":"Intuit","url":"https://domainspoof.com/brands/intuit"}],"dns":"resolved","resolved":["37.48.77.83"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of quickbooks.com (a dropped letter), resolved to 37.48.77.83, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T20:14:26.000Z","first_published":"2026-11-05T20:14:26.000Z","of":"quickbooks.com","spelling":"omission","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"37.48.77.83","flagged_at":"2026-11-05T20:14:26Z"}]}],"url":"https://domainspoof.com/brands/intuit"},{"hostname":"quickbooka.com","first_observed":"2026-11-05T20:14:26.000Z","first_published":"2026-11-05T20:14:26.000Z","brands":[{"id":"intuit","name":"Intuit","url":"https://domainspoof.com/brands/intuit"}],"dns":"resolved","resolved":["45.82.67.195"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of quickbooks.com (a letter from a neighbouring key), resolved to 45.82.67.195, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T20:14:26.000Z","first_published":"2026-11-05T20:14:26.000Z","of":"quickbooks.com","spelling":"adjacent_key","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"45.82.67.195","flagged_at":"2026-11-05T20:14:26Z"}]}],"url":"https://domainspoof.com/brands/intuit"},{"hostname":"quickbookd.com","first_observed":"2026-11-05T20:14:26.000Z","first_published":"2026-11-05T20:14:26.000Z","brands":[{"id":"intuit","name":"Intuit","url":"https://domainspoof.com/brands/intuit"}],"dns":"resolved","resolved":["212.7.194.71"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of quickbooks.com (a letter from a neighbouring key), resolved to 212.7.194.71, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T20:14:26.000Z","first_published":"2026-11-05T20:14:26.000Z","of":"quickbooks.com","spelling":"adjacent_key","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"212.7.194.71","flagged_at":"2026-11-05T20:14:26Z"}]}],"url":"https://domainspoof.com/brands/intuit"},{"hostname":"quickbooks.co","first_observed":"2026-11-05T20:14:26.000Z","first_published":"2026-11-05T20:14:26.000Z","brands":[{"id":"intuit","name":"Intuit","url":"https://domainspoof.com/brands/intuit"}],"dns":"resolved","resolved":["69.162.80.60"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of quickbooks.com (same name, other ending), resolved to 69.162.80.60, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T20:14:26.000Z","first_published":"2026-11-05T20:14:26.000Z","of":"quickbooks.com","spelling":"tld","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"69.162.80.60","flagged_at":"2026-11-05T20:14:26Z"}]}],"url":"https://domainspoof.com/brands/intuit"},{"hostname":"quickgooks.com","first_observed":"2026-11-05T20:14:26.000Z","first_published":"2026-11-05T20:14:26.000Z","brands":[{"id":"intuit","name":"Intuit","url":"https://domainspoof.com/brands/intuit"}],"dns":"resolved","resolved":["69.162.80.56"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of quickbooks.com (a letter from a neighbouring key), resolved to 69.162.80.56, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T20:14:26.000Z","first_published":"2026-11-05T20:14:26.000Z","of":"quickbooks.com","spelling":"adjacent_key","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"69.162.80.56","flagged_at":"2026-11-05T20:14:26Z"}]}],"url":"https://domainspoof.com/brands/intuit"},{"hostname":"quiickbooks.com","first_observed":"2026-11-05T20:14:26.000Z","first_published":"2026-11-05T20:14:26.000Z","brands":[{"id":"intuit","name":"Intuit","url":"https://domainspoof.com/brands/intuit"}],"dns":"resolved","resolved":["199.193.114.102"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of quickbooks.com (a doubled letter), resolved to 199.193.114.102, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T20:14:26.000Z","first_published":"2026-11-05T20:14:26.000Z","of":"quickbooks.com","spelling":"repetition","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"199.193.114.102","flagged_at":"2026-11-05T20:14:26Z"}]}],"url":"https://domainspoof.com/brands/intuit"},{"hostname":"quixkbooks.com","first_observed":"2026-11-05T20:14:26.000Z","first_published":"2026-11-05T20:14:26.000Z","brands":[{"id":"intuit","name":"Intuit","url":"https://domainspoof.com/brands/intuit"}],"dns":"resolved","resolved":["212.92.104.117"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of quickbooks.com (a letter from a neighbouring key), resolved to 212.92.104.117, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T20:14:26.000Z","first_published":"2026-11-05T20:14:26.000Z","of":"quickbooks.com","spelling":"adjacent_key","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"212.92.104.117","flagged_at":"2026-11-05T20:14:26Z"}]}],"url":"https://domainspoof.com/brands/intuit"},{"hostname":"quuckbooks.com","first_observed":"2026-11-05T20:14:26.000Z","first_published":"2026-11-05T20:14:26.000Z","brands":[{"id":"intuit","name":"Intuit","url":"https://domainspoof.com/brands/intuit"}],"dns":"resolved","resolved":["212.7.194.67"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of quickbooks.com (a letter from a neighbouring key), resolved to 212.7.194.67, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T20:14:26.000Z","first_published":"2026-11-05T20:14:26.000Z","of":"quickbooks.com","spelling":"adjacent_key","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"212.7.194.67","flagged_at":"2026-11-05T20:14:26Z"}]}],"url":"https://domainspoof.com/brands/intuit"},{"hostname":"r0ku.com","first_observed":"2026-11-05T20:14:26.000Z","first_published":"2026-11-05T20:14:26.000Z","brands":[{"id":"roku","name":"Roku","url":"https://domainspoof.com/brands/roku"}],"dns":"resolved","resolved":["212.7.194.71"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of roku.com (similar-looking characters), resolved to 212.7.194.71, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T20:14:26.000Z","first_published":"2026-11-05T20:14:26.000Z","of":"roku.com","spelling":"homoglyph","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"212.7.194.71","flagged_at":"2026-11-05T20:14:26Z"}]}],"url":"https://domainspoof.com/brands/roku"},{"hostname":"raclspace.com","first_observed":"2026-11-05T20:14:26.000Z","first_published":"2026-11-05T20:14:26.000Z","brands":[{"id":"rackspace","name":"Rackspace","url":"https://domainspoof.com/brands/rackspace"}],"dns":"resolved","resolved":["212.92.104.117"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of rackspace.com (a letter from a neighbouring key), resolved to 212.92.104.117, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T20:14:26.000Z","first_published":"2026-11-05T20:14:26.000Z","of":"rackspace.com","spelling":"adjacent_key","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"212.92.104.117","flagged_at":"2026-11-05T20:14:26Z"}]}],"url":"https://domainspoof.com/brands/rackspace"},{"hostname":"rakuuten.com","first_observed":"2026-11-05T20:14:26.000Z","first_published":"2026-11-05T20:14:26.000Z","brands":[{"id":"rakuten","name":"Rakuten","url":"https://domainspoof.com/brands/rakuten"}],"dns":"resolved","resolved":["45.82.67.240"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of rakuten.co.jp (a doubled letter), resolved to 45.82.67.240, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T20:14:26.000Z","first_published":"2026-11-05T20:14:26.000Z","of":"rakuten.co.jp","spelling":"repetition","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"45.82.67.240","flagged_at":"2026-11-05T20:14:26Z"}]}],"url":"https://domainspoof.com/brands/rakuten"},{"hostname":"rbcroyalbak.com","first_observed":"2026-11-05T20:14:26.000Z","first_published":"2026-11-05T20:14:26.000Z","brands":[{"id":"rbc","name":"RBC","url":"https://domainspoof.com/brands/rbc"}],"dns":"resolved","resolved":["199.193.114.100"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of rbcroyalbank.com (a dropped letter), resolved to 199.193.114.100, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T20:14:26.000Z","first_published":"2026-11-05T20:14:26.000Z","of":"rbcroyalbank.com","spelling":"omission","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"199.193.114.100","flagged_at":"2026-11-05T20:14:26Z"}]}],"url":"https://domainspoof.com/brands/rbc"},{"hostname":"riotgams.com","first_observed":"2026-11-05T20:14:26.000Z","first_published":"2026-11-05T20:14:26.000Z","brands":[{"id":"riot-games","name":"Riot Games","url":"https://domainspoof.com/brands/riot-games"}],"dns":"resolved","resolved":["216.245.197.44"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of riotgames.com (a dropped letter), resolved to 216.245.197.44, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T20:14:26.000Z","first_published":"2026-11-05T20:14:26.000Z","of":"riotgames.com","spelling":"omission","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"216.245.197.44","flagged_at":"2026-11-05T20:14:26Z"}]}],"url":"https://domainspoof.com/brands/riot-games"},{"hostname":"riotganes.com","first_observed":"2026-11-05T20:14:26.000Z","first_published":"2026-11-05T20:14:26.000Z","brands":[{"id":"riot-games","name":"Riot Games","url":"https://domainspoof.com/brands/riot-games"}],"dns":"resolved","resolved":["213.227.156.75"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of riotgames.com (a letter from a neighbouring key), resolved to 213.227.156.75, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T20:14:26.000Z","first_published":"2026-11-05T20:14:26.000Z","of":"riotgames.com","spelling":"adjacent_key","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"213.227.156.75","flagged_at":"2026-11-05T20:14:26Z"}]}],"url":"https://domainspoof.com/brands/riot-games"},{"hostname":"rockstargsmes.com","first_observed":"2026-11-05T20:14:26.000Z","first_published":"2026-11-05T20:14:26.000Z","brands":[{"id":"rockstar-games","name":"Rockstar Games","url":"https://domainspoof.com/brands/rockstar-games"}],"dns":"resolved","resolved":["69.162.80.55"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of rockstargames.com (a letter from a neighbouring key), resolved to 69.162.80.55, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T20:14:26.000Z","first_published":"2026-11-05T20:14:26.000Z","of":"rockstargames.com","spelling":"adjacent_key","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"69.162.80.55","flagged_at":"2026-11-05T20:14:26Z"}]}],"url":"https://domainspoof.com/brands/rockstar-games"},{"hostname":"rohinhood.com","first_observed":"2026-11-05T20:14:26.000Z","first_published":"2026-11-05T20:14:26.000Z","brands":[{"id":"robinhood","name":"Robinhood","url":"https://domainspoof.com/brands/robinhood"}],"dns":"resolved","resolved":["216.245.213.73"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of robinhood.com (a letter from a neighbouring key), resolved to 216.245.213.73, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T20:14:26.000Z","first_published":"2026-11-05T20:14:26.000Z","of":"robinhood.com","spelling":"adjacent_key","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"216.245.213.73","flagged_at":"2026-11-05T20:14:26Z"}]}],"url":"https://domainspoof.com/brands/robinhood"},{"hostname":"roju.live","first_observed":"2026-11-05T20:14:26.000Z","first_published":"2026-11-05T20:14:26.000Z","brands":[{"id":"roku","name":"Roku","url":"https://domainspoof.com/brands/roku"}],"dns":"resolved","resolved":["77.247.179.85"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of roku.com (a letter from a neighbouring key), resolved to 77.247.179.85, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T20:14:26.000Z","first_published":"2026-11-05T20:14:26.000Z","of":"roku.com","spelling":"adjacent_key","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"77.247.179.85","flagged_at":"2026-11-05T20:14:26Z"}]}],"url":"https://domainspoof.com/brands/roku"},{"hostname":"rokni.xyz","first_observed":"2026-11-05T20:14:26.000Z","first_published":"2026-11-05T20:14:26.000Z","brands":[{"id":"rokin","name":"Rokin","url":"https://domainspoof.com/brands/rokin"}],"dns":"resolved","resolved":["23.82.16.54"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of rokin.or.jp (two letters swapped), resolved to 23.82.16.54, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T20:14:26.000Z","first_published":"2026-11-05T20:14:26.000Z","of":"rokin.or.jp","spelling":"transposition","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"23.82.16.54","flagged_at":"2026-11-05T20:14:26Z"}]}],"url":"https://domainspoof.com/brands/rokin"},{"hostname":"rokstargames.com","first_observed":"2026-11-05T20:14:26.000Z","first_published":"2026-11-05T20:14:26.000Z","brands":[{"id":"rockstar-games","name":"Rockstar Games","url":"https://domainspoof.com/brands/rockstar-games"}],"dns":"resolved","resolved":["77.247.179.90"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of rockstargames.com (a dropped letter), resolved to 77.247.179.90, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T20:14:26.000Z","first_published":"2026-11-05T20:14:26.000Z","of":"rockstargames.com","spelling":"omission","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"77.247.179.90","flagged_at":"2026-11-05T20:14:26Z"}]}],"url":"https://domainspoof.com/brands/rockstar-games"},{"hostname":"roku.live","first_observed":"2026-11-05T20:14:26.000Z","first_published":"2026-11-05T20:14:26.000Z","brands":[{"id":"roku","name":"Roku","url":"https://domainspoof.com/brands/roku"}],"dns":"resolved","resolved":["23.82.16.54"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of roku.com (same name, other ending), resolved to 23.82.16.54, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T20:14:26.000Z","first_published":"2026-11-05T20:14:26.000Z","of":"roku.com","spelling":"tld","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"23.82.16.54","flagged_at":"2026-11-05T20:14:26Z"}]}],"url":"https://domainspoof.com/brands/roku"},{"hostname":"royalmaill.com","first_observed":"2026-11-05T20:14:26.000Z","first_published":"2026-11-05T20:14:26.000Z","brands":[{"id":"royal-mail","name":"Royal Mail","url":"https://domainspoof.com/brands/royal-mail"}],"dns":"resolved","resolved":["208.115.249.237"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of royalmail.com (a doubled letter), resolved to 208.115.249.237, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T20:14:26.000Z","first_published":"2026-11-05T20:14:26.000Z","of":"royalmail.com","spelling":"repetition","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"208.115.249.237","flagged_at":"2026-11-05T20:14:26Z"}]}],"url":"https://domainspoof.com/brands/royal-mail"},{"hostname":"royalmial.com","first_observed":"2026-11-05T20:14:26.000Z","first_published":"2026-11-05T20:14:26.000Z","brands":[{"id":"royal-mail","name":"Royal Mail","url":"https://domainspoof.com/brands/royal-mail"}],"dns":"resolved","resolved":["77.247.182.251"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of royalmail.com (two letters swapped), resolved to 77.247.182.251, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T20:14:26.000Z","first_published":"2026-11-05T20:14:26.000Z","of":"royalmail.com","spelling":"transposition","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"77.247.182.251","flagged_at":"2026-11-05T20:14:26Z"}]}],"url":"https://domainspoof.com/brands/royal-mail"},{"hostname":"rpbinhood.com","first_observed":"2026-11-05T20:14:26.000Z","first_published":"2026-11-05T20:14:26.000Z","brands":[{"id":"robinhood","name":"Robinhood","url":"https://domainspoof.com/brands/robinhood"}],"dns":"resolved","resolved":["216.245.213.73"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of robinhood.com (a letter from a neighbouring key), resolved to 216.245.213.73, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T20:14:26.000Z","first_published":"2026-11-05T20:14:26.000Z","of":"robinhood.com","spelling":"adjacent_key","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"216.245.213.73","flagged_at":"2026-11-05T20:14:26Z"}]}],"url":"https://domainspoof.com/brands/robinhood"},{"hostname":"rrobinhood.com","first_observed":"2026-11-05T20:14:26.000Z","first_published":"2026-11-05T20:14:26.000Z","brands":[{"id":"robinhood","name":"Robinhood","url":"https://domainspoof.com/brands/robinhood"}],"dns":"resolved","resolved":["77.247.182.245"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of robinhood.com (a doubled letter), resolved to 77.247.182.245, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T20:14:26.000Z","first_published":"2026-11-05T20:14:26.000Z","of":"robinhood.com","spelling":"repetition","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"77.247.182.245","flagged_at":"2026-11-05T20:14:26Z"}]}],"url":"https://domainspoof.com/brands/robinhood"},{"hostname":"ryanair.org","first_observed":"2026-11-05T20:14:26.000Z","first_published":"2026-11-05T20:14:26.000Z","brands":[{"id":"ryanair","name":"Ryanair","url":"https://domainspoof.com/brands/ryanair"}],"dns":"resolved","resolved":["69.162.80.58"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of ryanair.com (same name, other ending), resolved to 69.162.80.58, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T20:14:26.000Z","first_published":"2026-11-05T20:14:26.000Z","of":"ryanair.com","spelling":"tld","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"69.162.80.58","flagged_at":"2026-11-05T20:14:26Z"}]}],"url":"https://domainspoof.com/brands/ryanair"},{"hostname":"ryanari.com","first_observed":"2026-11-05T20:14:26.000Z","first_published":"2026-11-05T20:14:26.000Z","brands":[{"id":"ryanair","name":"Ryanair","url":"https://domainspoof.com/brands/ryanair"}],"dns":"resolved","resolved":["45.82.67.96"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of ryanair.com (two letters swapped), resolved to 45.82.67.96, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T20:14:26.000Z","first_published":"2026-11-05T20:14:26.000Z","of":"ryanair.com","spelling":"transposition","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"45.82.67.96","flagged_at":"2026-11-05T20:14:26Z"}]}],"url":"https://domainspoof.com/brands/ryanair"},{"hostname":"saalik.shop","first_observed":"2026-11-05T20:14:26.000Z","first_published":"2026-11-05T20:14:26.000Z","brands":[{"id":"salik","name":"Salik","url":"https://domainspoof.com/brands/salik"}],"dns":"resolved","resolved":["2.59.170.20","104.219.250.37"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of salik.ae (a doubled letter), resolved to 2.59.170.20, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T20:14:26.000Z","first_published":"2026-11-05T20:14:26.000Z","of":"salik.ae","spelling":"repetition","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"2.59.170.20","flagged_at":"2026-11-05T20:14:26Z"}]}],"url":"https://domainspoof.com/brands/salik"},{"hostname":"salesfoece.com","first_observed":"2026-11-05T20:14:26.000Z","first_published":"2026-11-05T20:14:26.000Z","brands":[{"id":"salesforce","name":"Salesforce","url":"https://domainspoof.com/brands/salesforce"}],"dns":"resolved","resolved":["199.193.114.102"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of salesforce.com (a letter from a neighbouring key), resolved to 199.193.114.102, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T20:14:26.000Z","first_published":"2026-11-05T20:14:26.000Z","of":"salesforce.com","spelling":"adjacent_key","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"199.193.114.102","flagged_at":"2026-11-05T20:14:26Z"}]}],"url":"https://domainspoof.com/brands/salesforce"},{"hostname":"salesfoorce.com","first_observed":"2026-11-05T20:14:26.000Z","first_published":"2026-11-05T20:14:26.000Z","brands":[{"id":"salesforce","name":"Salesforce","url":"https://domainspoof.com/brands/salesforce"}],"dns":"resolved","resolved":["208.115.249.236"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of salesforce.com (a doubled letter), resolved to 208.115.249.236, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T20:14:26.000Z","first_published":"2026-11-05T20:14:26.000Z","of":"salesforce.com","spelling":"repetition","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"208.115.249.236","flagged_at":"2026-11-05T20:14:26Z"}]}],"url":"https://domainspoof.com/brands/salesforce"},{"hostname":"salesfprce.com","first_observed":"2026-11-05T20:14:26.000Z","first_published":"2026-11-05T20:14:26.000Z","brands":[{"id":"salesforce","name":"Salesforce","url":"https://domainspoof.com/brands/salesforce"}],"dns":"resolved","resolved":["45.82.67.143"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of salesforce.com (a letter from a neighbouring key), resolved to 45.82.67.143, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T20:14:26.000Z","first_published":"2026-11-05T20:14:26.000Z","of":"salesforce.com","spelling":"adjacent_key","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"45.82.67.143","flagged_at":"2026-11-05T20:14:26Z"}]}],"url":"https://domainspoof.com/brands/salesforce"},{"hostname":"samdung.com","first_observed":"2026-11-05T20:14:26.000Z","first_published":"2026-11-05T20:14:26.000Z","brands":[{"id":"samsung","name":"Samsung","url":"https://domainspoof.com/brands/samsung"}],"dns":"resolved","resolved":["64.31.3.236"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of samsung.com (a letter from a neighbouring key), resolved to 64.31.3.236, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T20:14:26.000Z","first_published":"2026-11-05T20:14:26.000Z","of":"samsung.com","spelling":"adjacent_key","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"64.31.3.236","flagged_at":"2026-11-05T20:14:26Z"}]}],"url":"https://domainspoof.com/brands/samsung"},{"hostname":"sameung.com","first_observed":"2026-11-05T20:14:26.000Z","first_published":"2026-11-05T20:14:26.000Z","brands":[{"id":"samsung","name":"Samsung","url":"https://domainspoof.com/brands/samsung"}],"dns":"resolved","resolved":["212.7.194.67"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of samsung.com (a letter from a neighbouring key), resolved to 212.7.194.67, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T20:14:26.000Z","first_published":"2026-11-05T20:14:26.000Z","of":"samsung.com","spelling":"adjacent_key","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"212.7.194.67","flagged_at":"2026-11-05T20:14:26Z"}]}],"url":"https://domainspoof.com/brands/samsung"},{"hostname":"samshng.com","first_observed":"2026-11-05T20:14:26.000Z","first_published":"2026-11-05T20:14:26.000Z","brands":[{"id":"samsung","name":"Samsung","url":"https://domainspoof.com/brands/samsung"}],"dns":"resolved","resolved":["77.247.182.246"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of samsung.com (a letter from a neighbouring key), resolved to 77.247.182.246, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T20:14:26.000Z","first_published":"2026-11-05T20:14:26.000Z","of":"samsung.com","spelling":"adjacent_key","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"77.247.182.246","flagged_at":"2026-11-05T20:14:26Z"}]}],"url":"https://domainspoof.com/brands/samsung"},{"hostname":"samsug.com","first_observed":"2026-11-05T20:14:26.000Z","first_published":"2026-11-05T20:14:26.000Z","brands":[{"id":"samsung","name":"Samsung","url":"https://domainspoof.com/brands/samsung"}],"dns":"resolved","resolved":["69.162.80.53"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of samsung.com (a dropped letter), resolved to 69.162.80.53, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T20:14:26.000Z","first_published":"2026-11-05T20:14:26.000Z","of":"samsung.com","spelling":"omission","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"69.162.80.53","flagged_at":"2026-11-05T20:14:26Z"}]}],"url":"https://domainspoof.com/brands/samsung"},{"hostname":"samsumg.co","first_observed":"2026-11-05T20:14:26.000Z","first_published":"2026-11-05T20:14:26.000Z","brands":[{"id":"samsung","name":"Samsung","url":"https://domainspoof.com/brands/samsung"}],"dns":"resolved","resolved":["216.245.197.44"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of samsung.com (a letter from a neighbouring key), resolved to 216.245.197.44, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T20:14:26.000Z","first_published":"2026-11-05T20:14:26.000Z","of":"samsung.com","spelling":"adjacent_key","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"216.245.197.44","flagged_at":"2026-11-05T20:14:26Z"}]}],"url":"https://domainspoof.com/brands/samsung"},{"hostname":"samsun.co","first_observed":"2026-11-05T20:14:26.000Z","first_published":"2026-11-05T20:14:26.000Z","brands":[{"id":"samsung","name":"Samsung","url":"https://domainspoof.com/brands/samsung"}],"dns":"resolved","resolved":["77.247.179.87"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of samsung.com (a dropped letter), resolved to 77.247.179.87, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T20:14:26.000Z","first_published":"2026-11-05T20:14:26.000Z","of":"samsung.com","spelling":"omission","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"77.247.179.87","flagged_at":"2026-11-05T20:14:26Z"}]}],"url":"https://domainspoof.com/brands/samsung"},{"hostname":"samsunf.com","first_observed":"2026-11-05T20:14:26.000Z","first_published":"2026-11-05T20:14:26.000Z","brands":[{"id":"samsung","name":"Samsung","url":"https://domainspoof.com/brands/samsung"}],"dns":"resolved","resolved":["69.162.80.53"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of samsung.com (a letter from a neighbouring key), resolved to 69.162.80.53, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T20:14:26.000Z","first_published":"2026-11-05T20:14:26.000Z","of":"samsung.com","spelling":"adjacent_key","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"69.162.80.53","flagged_at":"2026-11-05T20:14:26Z"}]}],"url":"https://domainspoof.com/brands/samsung"},{"hostname":"samsungg.com","first_observed":"2026-11-05T20:14:26.000Z","first_published":"2026-11-05T20:14:26.000Z","brands":[{"id":"samsung","name":"Samsung","url":"https://domainspoof.com/brands/samsung"}],"dns":"resolved","resolved":["45.82.67.96"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of samsung.com (a doubled letter), resolved to 45.82.67.96, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T20:14:26.000Z","first_published":"2026-11-05T20:14:26.000Z","of":"samsung.com","spelling":"repetition","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"45.82.67.96","flagged_at":"2026-11-05T20:14:26Z"}]}],"url":"https://domainspoof.com/brands/samsung"},{"hostname":"samusng.com","first_observed":"2026-11-05T20:14:26.000Z","first_published":"2026-11-05T20:14:26.000Z","brands":[{"id":"samsung","name":"Samsung","url":"https://domainspoof.com/brands/samsung"}],"dns":"resolved","resolved":["172.241.213.98"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of samsung.com (two letters swapped), resolved to 172.241.213.98, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T20:14:26.000Z","first_published":"2026-11-05T20:14:26.000Z","of":"samsung.com","spelling":"transposition","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"172.241.213.98","flagged_at":"2026-11-05T20:14:26Z"}]}],"url":"https://domainspoof.com/brands/samsung"},{"hostname":"samwung.com","first_observed":"2026-11-05T20:14:26.000Z","first_published":"2026-11-05T20:14:26.000Z","brands":[{"id":"samsung","name":"Samsung","url":"https://domainspoof.com/brands/samsung"}],"dns":"resolved","resolved":["77.247.182.246"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of samsung.com (a letter from a neighbouring key), resolved to 77.247.182.246, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T20:14:26.000Z","first_published":"2026-11-05T20:14:26.000Z","of":"samsung.com","spelling":"adjacent_key","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"77.247.182.246","flagged_at":"2026-11-05T20:14:26Z"}]}],"url":"https://domainspoof.com/brands/samsung"},{"hostname":"schwab.co","first_observed":"2026-11-05T20:14:26.000Z","first_published":"2026-11-05T20:14:26.000Z","brands":[{"id":"charles-schwab","name":"Charles Schwab","url":"https://domainspoof.com/brands/charles-schwab"}],"dns":"resolved","resolved":["64.31.3.235"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of schwab.com (same name, other ending), resolved to 64.31.3.235, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T20:14:26.000Z","first_published":"2026-11-05T20:14:26.000Z","of":"schwab.com","spelling":"tld","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"64.31.3.235","flagged_at":"2026-11-05T20:14:26Z"}]}],"url":"https://domainspoof.com/brands/charles-schwab"},{"hostname":"scotiabsnk.com","first_observed":"2026-11-05T20:14:26.000Z","first_published":"2026-11-05T20:14:26.000Z","brands":[{"id":"scotiabank","name":"Scotiabank","url":"https://domainspoof.com/brands/scotiabank"}],"dns":"resolved","resolved":["45.82.67.143"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of scotiabank.com (a letter from a neighbouring key), resolved to 45.82.67.143, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T20:14:26.000Z","first_published":"2026-11-05T20:14:26.000Z","of":"scotiabank.com","spelling":"adjacent_key","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"45.82.67.143","flagged_at":"2026-11-05T20:14:26Z"}]}],"url":"https://domainspoof.com/brands/scotiabank"},{"hostname":"sendgrid.click","first_observed":"2026-11-05T20:14:26.000Z","first_published":"2026-11-05T20:14:26.000Z","brands":[{"id":"sendgrid","name":"SendGrid","url":"https://domainspoof.com/brands/sendgrid"}],"dns":"resolved","resolved":["216.245.197.45"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of sendgrid.com (same name, other ending), resolved to 216.245.197.45, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T20:14:26.000Z","first_published":"2026-11-05T20:14:26.000Z","of":"sendgrid.com","spelling":"tld","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"216.245.197.45","flagged_at":"2026-11-05T20:14:26Z"}]}],"url":"https://domainspoof.com/brands/sendgrid"},{"hostname":"snatander.co.uk","first_observed":"2026-11-05T20:14:26.000Z","first_published":"2026-11-05T20:14:26.000Z","brands":[{"id":"santander","name":"Santander","url":"https://domainspoof.com/brands/santander"}],"dns":"resolved","resolved":["216.245.213.75"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of santander.com (two letters swapped), resolved to 216.245.213.75, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T20:14:26.000Z","first_published":"2026-11-05T20:14:26.000Z","of":"santander.com","spelling":"transposition","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"216.245.213.75","flagged_at":"2026-11-05T20:14:26Z"}]}],"url":"https://domainspoof.com/brands/santander"},{"hostname":"sscotiabank.com","first_observed":"2026-11-05T20:14:26.000Z","first_published":"2026-11-05T20:14:26.000Z","brands":[{"id":"scotiabank","name":"Scotiabank","url":"https://domainspoof.com/brands/scotiabank"}],"dns":"resolved","resolved":["199.193.114.100"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of scotiabank.com (a doubled letter), resolved to 199.193.114.100, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T20:14:26.000Z","first_published":"2026-11-05T20:14:26.000Z","of":"scotiabank.com","spelling":"repetition","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"199.193.114.100","flagged_at":"2026-11-05T20:14:26Z"}]}],"url":"https://domainspoof.com/brands/scotiabank"},{"hostname":"wuickbooks.com","first_observed":"2026-11-05T20:14:26.000Z","first_published":"2026-11-05T20:14:26.000Z","brands":[{"id":"intuit","name":"Intuit","url":"https://domainspoof.com/brands/intuit"}],"dns":"resolved","resolved":["212.7.194.71"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of quickbooks.com (a letter from a neighbouring key), resolved to 212.7.194.71, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T20:14:26.000Z","first_published":"2026-11-05T20:14:26.000Z","of":"quickbooks.com","spelling":"adjacent_key","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"212.7.194.71","flagged_at":"2026-11-05T20:14:26Z"}]}],"url":"https://domainspoof.com/brands/intuit"},{"hostname":"16thlevel.com","first_observed":"2026-11-05T18:56:58.162Z","first_published":"2026-11-05T20:12:24.139Z","brands":[],"dns":"resolved","resolved":["212.90.120.121"],"resolved_at":"2026-11-06T02:00:39Z","dns_checked_at":"2026-11-05T20:18:44.000Z","dns_since":"2026-11-05T20:18:44.000Z","findings":[{"id":"f2vtqsxtyqmpv6oyoddrv","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T18:56:58.162Z","first_published":"2026-11-05T20:12:24.139Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=16thlevel.com"},{"hostname":"24d.online","first_observed":"2026-11-05T19:26:14.408Z","first_published":"2026-11-05T20:12:24.139Z","brands":[],"dns":"resolved","resolved":["212.90.120.121"],"resolved_at":"2026-11-06T02:00:39Z","dns_checked_at":"2026-11-05T20:18:44.000Z","dns_since":"2026-11-05T20:18:44.000Z","findings":[{"id":"fdo2dpiaw2cltnotgpahm","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T19:26:14.408Z","first_published":"2026-11-05T20:12:24.139Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=24d.online"},{"hostname":"474932-gmail.com","first_observed":"2026-11-05T19:41:53.584Z","first_published":"2026-11-05T20:12:24.139Z","brands":[{"id":"google","name":"Google","url":"https://domainspoof.com/brands/google"}],"dns":"resolved","resolved":["104.21.13.134","172.67.132.216","2606:4700:3031::6815:d86","2606:4700:3035::ac43:84d8"],"resolved_at":"2026-11-05T19:42:12Z","dns_checked_at":"2026-11-05T20:18:44.000Z","dns_since":"2026-11-05T20:18:44.000Z","findings":[{"id":"fr3sthyjpxcq25vv4264e","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T19:41:53.584Z","first_published":"2026-11-05T20:12:24.139Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/brands/google"},{"hostname":"9gkfd3-4e3n-ujwho-jz5p8-cb4ny3.pages.dev","first_observed":"2026-11-05T20:00:49.404Z","first_published":"2026-11-05T20:12:24.139Z","brands":[],"dns":"resolved","resolved":["172.66.44.225","172.66.47.31"],"resolved_at":"2026-11-05T20:01:01Z","dns_checked_at":"2026-11-05T20:18:44.000Z","dns_since":"2026-11-05T20:18:44.000Z","findings":[{"id":"fkwzppi74y5prc7yq3sqk","kind":"reported_domain","summary":"Reported by PhishTank","first_observed":"2026-11-05T20:00:49.404Z","first_published":"2026-11-05T20:12:24.139Z","source":"phishtank","source_name":"PhishTank","source_url":"https://phishtank.org/phish_detail.php?phish_id=9479291"}],"url":"https://domainspoof.com/live?show=all&q=9gkfd3-4e3n-ujwho-jz5p8-cb4ny3.pages.dev"},{"hostname":"abnamro.cn","first_observed":"2026-11-05T19:57:17.413Z","first_published":"2026-11-05T20:12:24.139Z","brands":[{"id":"abn-amro","name":"ABN AMRO","url":"https://domainspoof.com/brands/abn-amro"}],"dns":"resolved","resolved":["208.98.43.34","208.98.43.39"],"resolved_at":"2026-11-05T20:18:44Z","dns_checked_at":"2026-11-05T20:18:44.000Z","dns_since":"2026-11-05T20:18:44.000Z","findings":[{"id":"frvjad2fibpiatk7jnlza","kind":"phishing_infrastructure","summary":"Resolved to 208.98.43.34, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T19:57:17.413Z","first_published":"2026-11-05T20:12:24.139Z","address":"208.98.43.34","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/abn-amro"},{"hostname":"access.socialvisor.ru","first_observed":"2026-11-05T18:56:58.162Z","first_published":"2026-11-05T20:12:24.139Z","brands":[],"dns":"resolved","resolved":["91.215.41.91"],"resolved_at":"2026-11-05T18:57:16Z","dns_checked_at":"2026-11-05T20:18:44.000Z","dns_since":"2026-11-05T20:18:44.000Z","findings":[{"id":"ffuom3zb22mm5yenvbsmt","kind":"reported_domain","summary":"Under socialvisor.ru, reported by PhishDestroy","first_observed":"2026-11-05T18:56:58.162Z","first_published":"2026-11-05T20:12:24.139Z","source":"phishdestroy","source_name":"PhishDestroy","under":"socialvisor.ru","source_url":"https://phishdestroy.io/domain/socialvisor.ru/"}],"url":"https://domainspoof.com/live?show=all&q=access.socialvisor.ru"},{"hostname":"aerodrome.nexus","first_observed":"2026-11-05T19:10:41.672Z","first_published":"2026-11-05T20:12:24.139Z","brands":[],"dns":"resolved","resolved":["104.21.76.91","172.67.191.157"],"resolved_at":"2026-11-05T19:17:06Z","dns_checked_at":"2026-11-05T20:18:44.000Z","dns_since":"2026-11-05T20:18:44.000Z","findings":[{"id":"f6t6qct2eug22whsgttht","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T19:10:41.672Z","first_published":"2026-11-05T20:12:24.139Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=aerodrome.nexus"},{"hostname":"agc-mm.com","first_observed":"2026-11-05T19:05:38.392Z","first_published":"2026-11-05T20:12:24.139Z","brands":[],"dns":"resolved","resolved":["163.128.99.179"],"resolved_at":"2026-11-05T19:06:13Z","dns_checked_at":"2026-11-05T20:18:44.000Z","dns_since":"2026-11-05T20:18:44.000Z","findings":[{"id":"ftvuh5ek2xzbjlxpbxfny","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T19:05:38.392Z","first_published":"2026-11-05T20:12:24.139Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=agc-mm.com"},{"hostname":"airdave.cryptopayment.xyz","first_observed":"2026-11-05T19:36:57.164Z","first_published":"2026-11-05T20:12:24.139Z","brands":[],"dns":"resolved","resolved":["143.244.211.82"],"resolved_at":"2026-11-05T19:39:31Z","dns_checked_at":"2026-11-05T20:18:44.000Z","dns_since":"2026-11-05T20:18:44.000Z","findings":[{"id":"fh3hsc4uygsiabfuko2sh","kind":"reported_domain","summary":"Under cryptopayment.xyz, listed by MetaMask","first_observed":"2026-11-05T19:36:57.164Z","first_published":"2026-11-05T20:12:24.139Z","source":"metamask","source_name":"MetaMask","under":"cryptopayment.xyz"}],"url":"https://domainspoof.com/live?show=all&q=airdave.cryptopayment.xyz"},{"hostname":"aiyaphorm-pt.live","first_observed":"2026-11-05T19:36:57.164Z","first_published":"2026-11-05T20:12:24.139Z","brands":[],"dns":"resolved","resolved":["104.21.7.42","172.67.135.186"],"resolved_at":"2026-11-05T19:39:31Z","dns_checked_at":"2026-11-05T20:18:44.000Z","dns_since":"2026-11-05T20:18:44.000Z","findings":[{"id":"fpww5remwztg3imc2rukk","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T19:36:57.164Z","first_published":"2026-11-05T20:12:24.139Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=aiyaphorm-pt.live"},{"hostname":"albafundorix-it.live","first_observed":"2026-11-05T19:31:10.785Z","first_published":"2026-11-05T20:12:24.139Z","brands":[],"dns":"resolved","resolved":["104.21.76.85","172.67.191.151"],"resolved_at":"2026-11-05T19:36:52Z","dns_checked_at":"2026-11-05T20:18:44.000Z","dns_since":"2026-11-05T20:18:44.000Z","findings":[{"id":"f6yonq2eyxsy26suugzgq","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T19:31:10.785Z","first_published":"2026-11-05T20:12:24.139Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=albafundorix-it.live"},{"hostname":"allocation-umia.finance","first_observed":"2026-11-05T18:56:58.162Z","first_published":"2026-11-05T20:12:24.139Z","brands":[],"dns":"resolved","resolved":["104.21.90.67","172.67.196.15"],"resolved_at":"2026-11-05T18:57:19Z","dns_checked_at":"2026-11-05T20:18:44.000Z","dns_since":"2026-11-05T20:18:44.000Z","findings":[{"id":"fanepzddxidfjl7sqfvgl","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T18:56:58.162Z","first_published":"2026-11-05T20:12:24.139Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=allocation-umia.finance"},{"hostname":"api.blockblend.io","first_observed":"2026-11-05T19:57:04.920Z","first_published":"2026-11-05T20:12:24.139Z","brands":[],"dns":"resolved","resolved":["66.33.60.193","76.76.21.241"],"resolved_at":"2026-11-05T19:57:19Z","dns_checked_at":"2026-11-05T20:18:44.000Z","dns_since":"2026-11-05T20:18:44.000Z","findings":[{"id":"fm2ty76g734z4mfgbuhfl","kind":"reported_domain","summary":"Under blockblend.io, reported by PhishDestroy","first_observed":"2026-11-05T19:57:04.920Z","first_published":"2026-11-05T20:12:24.139Z","source":"phishdestroy","source_name":"PhishDestroy","under":"blockblend.io","source_url":"https://phishdestroy.io/domain/blockblend.io/"}],"url":"https://domainspoof.com/live?show=all&q=api.blockblend.io"},{"hostname":"api.ms-core.xyz","first_observed":"2026-11-05T19:00:49.069Z","first_published":"2026-11-05T20:12:24.139Z","brands":[],"dns":"resolved","resolved":["104.21.50.232","172.67.213.102"],"resolved_at":"2026-11-05T19:01:08Z","dns_checked_at":"2026-11-05T20:18:44.000Z","dns_since":"2026-11-05T20:18:44.000Z","findings":[{"id":"f5oxfvcutxrus3dxv2jjs","kind":"reported_domain","summary":"Under ms-core.xyz, listed by MetaMask","first_observed":"2026-11-05T19:00:49.069Z","first_published":"2026-11-05T20:12:24.139Z","source":"metamask","source_name":"MetaMask","under":"ms-core.xyz"}],"url":"https://domainspoof.com/live?show=all&q=api.ms-core.xyz"},{"hostname":"api.veloraapp-solution-com.financecryptoworld.com","first_observed":"2026-11-05T19:31:10.785Z","first_published":"2026-11-05T20:12:24.139Z","brands":[],"dns":"resolved","resolved":["104.21.10.130","172.67.131.121"],"resolved_at":"2026-11-05T19:36:53Z","dns_checked_at":"2026-11-05T20:18:44.000Z","dns_since":"2026-11-05T20:18:44.000Z","findings":[{"id":"fwhu23ejcobezxg3pqrrz","kind":"reported_domain","summary":"Under financecryptoworld.com, listed by CERT Polska","first_observed":"2026-11-05T19:31:10.785Z","first_published":"2026-11-05T20:12:24.139Z","source":"cert_polska","source_name":"CERT Polska","under":"financecryptoworld.com"}],"url":"https://domainspoof.com/live?show=all&q=api.veloraapp-solution-com.financecryptoworld.com"},{"hostname":"app.storage-ewc-licence.shop","first_observed":"2026-11-05T19:10:41.672Z","first_published":"2026-11-05T20:12:24.139Z","brands":[],"dns":"resolved","resolved":["104.21.28.10","172.67.170.35"],"resolved_at":"2026-11-05T19:17:07Z","dns_checked_at":"2026-11-05T20:18:44.000Z","dns_since":"2026-11-05T20:18:44.000Z","findings":[{"id":"fmvmendjdxyclsqulqhhp","kind":"reported_domain","summary":"Under storage-ewc-licence.shop, listed by MetaMask","first_observed":"2026-11-05T19:10:41.672Z","first_published":"2026-11-05T20:12:24.139Z","source":"metamask","source_name":"MetaMask","under":"storage-ewc-licence.shop"}],"url":"https://domainspoof.com/live?show=all&q=app.storage-ewc-licence.shop"},{"hostname":"arksan.ascsonoway.com","first_observed":"2026-11-05T19:51:38.274Z","first_published":"2026-11-05T20:12:24.139Z","brands":[],"dns":"resolved","resolved":["64.227.208.248"],"resolved_at":"2026-11-05T19:52:03Z","dns_checked_at":"2026-11-05T20:18:44.000Z","dns_since":"2026-11-05T20:18:44.000Z","findings":[{"id":"fh7qjjad5yet2uinsa2xy","kind":"reported_domain","summary":"Under ascsonoway.com, listed by MetaMask","first_observed":"2026-11-05T19:51:38.274Z","first_published":"2026-11-05T20:12:24.139Z","source":"metamask","source_name":"MetaMask","under":"ascsonoway.com"}],"url":"https://domainspoof.com/live?show=all&q=arksan.ascsonoway.com"},{"hostname":"auredane-uk.com","first_observed":"2026-11-05T19:16:29.893Z","first_published":"2026-11-05T20:12:24.139Z","brands":[],"dns":"resolved","resolved":["104.21.90.171","172.67.158.56"],"resolved_at":"2026-11-06T07:46:30Z","dns_checked_at":"2026-11-05T20:18:44.000Z","dns_since":"2026-11-05T20:18:44.000Z","findings":[{"id":"fhf6tghpc7x2jvnwzlkwh","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T19:16:29.893Z","first_published":"2026-11-05T20:12:24.139Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=auredane-uk.com"},{"hostname":"autopilot-aero.com","first_observed":"2026-11-05T19:16:29.893Z","first_published":"2026-11-05T20:12:24.139Z","brands":[],"dns":"resolved","resolved":["104.21.20.155","172.67.193.43"],"resolved_at":"2026-11-05T19:17:04Z","dns_checked_at":"2026-11-05T20:18:44.000Z","dns_since":"2026-11-05T20:18:44.000Z","findings":[{"id":"flplfmey23wcxcrelxrmm","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T19:16:29.893Z","first_published":"2026-11-05T20:12:24.139Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=autopilot-aero.com"},{"hostname":"babyswapub.com","first_observed":"2026-11-05T20:05:35.030Z","first_published":"2026-11-05T20:12:24.139Z","brands":[],"dns":"resolved","resolved":["162.4.84.247"],"resolved_at":"2026-11-05T20:08:46Z","dns_checked_at":"2026-11-05T20:18:44.000Z","dns_since":"2026-11-05T20:18:44.000Z","findings":[{"id":"faim6he2hfh5yryvpu2jf","kind":"reported_domain","summary":"Listed by NPA 165 (finance and insurance)","first_observed":"2026-11-05T20:05:35.030Z","first_published":"2026-11-05T20:12:24.139Z","source":"npa","source_name":"NPA 165","claim":{"category":"finance and insurance"}}],"url":"https://domainspoof.com/live?show=all&q=babyswapub.com"},{"hostname":"ballright.shit.vc","first_observed":"2026-11-05T18:56:58.162Z","first_published":"2026-11-05T20:12:24.139Z","brands":[],"dns":"resolved","resolved":["31.77.128.201"],"resolved_at":"2026-11-05T19:04:42Z","dns_checked_at":"2026-11-05T20:18:44.000Z","dns_since":"2026-11-05T20:18:44.000Z","findings":[{"id":"fcchel646u5uunja6r5qa","kind":"reported_domain","summary":"Under shit.vc, listed by MetaMask","first_observed":"2026-11-05T18:56:58.162Z","first_published":"2026-11-05T20:12:24.139Z","source":"metamask","source_name":"MetaMask","under":"shit.vc"}],"url":"https://domainspoof.com/live?show=all&q=ballright.shit.vc"},{"hostname":"balticpipepl.com","first_observed":"2026-11-05T19:36:57.164Z","first_published":"2026-11-05T20:12:24.139Z","brands":[],"dns":"resolved","resolved":["104.21.62.123","172.67.223.196"],"resolved_at":"2026-11-05T19:40:05Z","dns_checked_at":"2026-11-05T20:18:44.000Z","dns_since":"2026-11-05T20:18:44.000Z","findings":[{"id":"f34nr362x66kpnzai2j2m","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T19:36:57.164Z","first_published":"2026-11-05T20:12:24.139Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=balticpipepl.com"},{"hostname":"bank.arenaglobalfinance.com","first_observed":"2026-11-05T19:10:41.672Z","first_published":"2026-11-05T20:12:24.139Z","brands":[],"dns":"resolved","resolved":["185.53.179.136"],"resolved_at":"2026-11-05T19:17:58Z","dns_checked_at":"2026-11-05T20:18:44.000Z","dns_since":"2026-11-05T20:18:44.000Z","findings":[{"id":"fdatvisqxx37a54yghnkz","kind":"reported_domain","summary":"Under arenaglobalfinance.com, listed by MetaMask","first_observed":"2026-11-05T19:10:41.672Z","first_published":"2026-11-05T20:12:24.139Z","source":"metamask","source_name":"MetaMask","under":"arenaglobalfinance.com"}],"url":"https://domainspoof.com/live?show=all&q=bank.arenaglobalfinance.com"},{"hostname":"baseinvexus.live","first_observed":"2026-11-05T19:31:10.785Z","first_published":"2026-11-05T20:12:24.139Z","brands":[],"dns":"resolved","resolved":["104.21.85.48","172.67.202.76"],"resolved_at":"2026-11-05T19:37:10Z","dns_checked_at":"2026-11-05T20:18:44.000Z","dns_since":"2026-11-05T20:18:44.000Z","findings":[{"id":"fe4jrsayqfgyqqxfi2sqq","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T19:31:10.785Z","first_published":"2026-11-05T20:12:24.139Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=baseinvexus.live"},{"hostname":"baserda.net","first_observed":"2026-11-05T19:31:10.785Z","first_published":"2026-11-05T20:12:24.139Z","brands":[],"dns":"resolved","resolved":["104.21.1.231","172.67.152.143"],"resolved_at":"2026-11-05T19:37:10Z","dns_checked_at":"2026-11-05T20:18:44.000Z","dns_since":"2026-11-05T20:18:44.000Z","findings":[{"id":"fyju5o5aalpykdat6tcwe","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T19:31:10.785Z","first_published":"2026-11-05T20:12:24.139Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=baserda.net"},{"hostname":"bergrendithal-de.live","first_observed":"2026-11-05T19:21:29.552Z","first_published":"2026-11-05T20:12:24.139Z","brands":[],"dns":"resolved","resolved":["104.21.86.65","172.67.216.88"],"resolved_at":"2026-11-05T19:30:11Z","dns_checked_at":"2026-11-05T20:18:44.000Z","dns_since":"2026-11-05T20:18:44.000Z","findings":[{"id":"fiuhy72mjtznwlfykxery","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T19:21:29.552Z","first_published":"2026-11-05T20:12:24.139Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=bergrendithal-de.live"},{"hostname":"bezoi.net","first_observed":"2026-11-05T19:26:14.408Z","first_published":"2026-11-05T20:12:24.139Z","brands":[],"dns":"not_found","resolved":[],"resolved_at":"2026-11-05T19:33:55Z","dns_checked_at":"2026-11-06T12:31:48.000Z","findings":[{"id":"fws4sxvv7oawwvkaxcwrg","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T19:26:14.408Z","first_published":"2026-11-05T20:12:24.139Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=bezoi.net"},{"hostname":"billionsfoundation-allocations.xyz","first_observed":"2026-11-05T19:05:38.392Z","first_published":"2026-11-05T20:12:24.139Z","brands":[],"dns":"resolved","resolved":["104.21.25.56","172.67.222.249"],"resolved_at":"2026-11-05T19:10:53Z","dns_checked_at":"2026-11-05T20:18:44.000Z","dns_since":"2026-11-05T20:18:44.000Z","findings":[{"id":"fws4kd2afdicmwywrb6sd","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T19:05:38.392Z","first_published":"2026-11-05T20:12:24.139Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=billionsfoundation-allocations.xyz"},{"hostname":"bitrefill.com-cu01-esim-gift.com","first_observed":"2026-11-05T19:40:05.629Z","first_published":"2026-11-05T20:12:24.139Z","brands":[{"id":"bitrefill","name":"Bitrefill","url":"https://domainspoof.com/brands/bitrefill"}],"dns":"resolved","resolved":["62.60.226.39"],"resolved_at":"2026-11-05T20:18:44Z","dns_checked_at":"2026-11-05T20:18:44.000Z","dns_since":"2026-11-05T20:18:44.000Z","findings":[{"id":"f2qqazafczcnhhljum7g4","kind":"spamhaus_drop","summary":"Resolved to 62.60.226.39 on Spamhaus DROP","first_observed":"2026-11-05T19:40:05.629Z","first_published":"2026-11-05T20:12:24.139Z","address":"62.60.226.39","list":"spamhaus_drop","list_name":"Spamhaus DROP"}],"url":"https://domainspoof.com/brands/bitrefill"},{"hostname":"boros.markets","first_observed":"2026-11-05T19:00:49.069Z","first_published":"2026-11-05T20:12:24.139Z","brands":[],"dns":"resolved","resolved":["75.2.60.5","99.83.231.61"],"resolved_at":"2026-11-05T19:01:17Z","dns_checked_at":"2026-11-05T20:18:44.000Z","dns_since":"2026-11-05T20:18:44.000Z","findings":[{"id":"fz6vnmptfepuj66lsbu2z","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T19:00:49.069Z","first_published":"2026-11-05T20:12:24.139Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=boros.markets"},{"hostname":"brintaxioflarvix-fr.live","first_observed":"2026-11-05T19:41:53.584Z","first_published":"2026-11-05T20:12:24.139Z","brands":[],"dns":"resolved","resolved":["104.21.3.138","172.67.130.192"],"resolved_at":"2026-11-05T19:52:01Z","dns_checked_at":"2026-11-05T20:18:44.000Z","dns_since":"2026-11-05T20:18:44.000Z","findings":[{"id":"fvsmjnw7vosvxmfc26hmf","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T19:41:53.584Z","first_published":"2026-11-05T20:12:24.139Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=brintaxioflarvix-fr.live"},{"hostname":"buyflashusdt.shop","first_observed":"2026-11-05T19:41:53.584Z","first_published":"2026-11-05T20:12:24.139Z","brands":[],"dns":"resolved","resolved":["163.128.111.1"],"resolved_at":"2026-11-05T19:52:34Z","dns_checked_at":"2026-11-05T20:18:44.000Z","dns_since":"2026-11-05T20:18:44.000Z","findings":[{"id":"fmcmdbx2gphijnwjuwewy","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T19:41:53.584Z","first_published":"2026-11-05T20:12:24.139Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/buyflashusdt.shop/"}],"url":"https://domainspoof.com/live?show=all&q=buyflashusdt.shop"},{"hostname":"buzzik.bet","first_observed":"2026-11-05T18:56:58.162Z","first_published":"2026-11-05T20:12:24.139Z","brands":[],"dns":"resolved","resolved":["144.31.106.24"],"resolved_at":"2026-11-05T19:04:52Z","dns_checked_at":"2026-11-05T20:18:44.000Z","dns_since":"2026-11-05T20:18:44.000Z","findings":[{"id":"fuge5vmh6smtwpkvnb4ok","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T18:56:58.162Z","first_published":"2026-11-05T20:12:24.139Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/buzzik.bet/"}],"url":"https://domainspoof.com/live?show=all&q=buzzik.bet"},{"hostname":"canopynetwork.app","first_observed":"2026-11-05T19:10:41.672Z","first_published":"2026-11-05T20:12:24.139Z","brands":[],"dns":"resolved","resolved":["104.21.0.147","172.67.186.8"],"resolved_at":"2026-11-05T19:18:27Z","dns_checked_at":"2026-11-05T20:18:44.000Z","dns_since":"2026-11-05T20:18:44.000Z","findings":[{"id":"f6k2vg3wc4c7bfvpp27hh","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T19:10:41.672Z","first_published":"2026-11-05T20:12:24.139Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/canopynetwork.app/"}],"url":"https://domainspoof.com/live?show=all&q=canopynetwork.app"},{"hostname":"ccd-ih9q13-adciw-girf-hmf.pages.dev","first_observed":"2026-11-05T19:16:29.893Z","first_published":"2026-11-05T20:12:24.139Z","brands":[],"dns":"resolved","resolved":["172.66.44.174","172.66.47.82"],"resolved_at":"2026-11-05T19:24:44Z","dns_checked_at":"2026-11-05T20:18:44.000Z","dns_since":"2026-11-05T20:18:44.000Z","findings":[{"id":"frmpuzuiy26y7pvdxd2id","kind":"reported_domain","summary":"Reported by PhishTank","first_observed":"2026-11-05T19:16:29.893Z","first_published":"2026-11-05T20:12:24.139Z","source":"phishtank","source_name":"PhishTank","source_url":"https://phishtank.org/phish_detail.php?phish_id=9479325"}],"url":"https://domainspoof.com/live?show=all&q=ccd-ih9q13-adciw-girf-hmf.pages.dev"},{"hostname":"cdn.vkname.com","first_observed":"2026-11-05T19:16:29.893Z","first_published":"2026-11-05T20:12:24.139Z","brands":[],"dns":"resolved","resolved":["188.72.112.1"],"resolved_at":"2026-11-05T19:24:44Z","dns_checked_at":"2026-11-05T20:18:44.000Z","dns_since":"2026-11-05T20:18:44.000Z","findings":[{"id":"fccasj46wfwrw3nysajs3","kind":"reported_domain","summary":"Under vkname.com, reported by PhishDestroy","first_observed":"2026-11-05T19:16:29.893Z","first_published":"2026-11-05T20:12:24.139Z","source":"phishdestroy","source_name":"PhishDestroy","under":"vkname.com","source_url":"https://phishdestroy.io/domain/vkname.com/"}],"url":"https://domainspoof.com/live?show=all&q=cdn.vkname.com"},{"hostname":"chiankmeyunk.live","first_observed":"2026-11-05T20:05:35.030Z","first_published":"2026-11-05T20:12:24.139Z","brands":[],"dns":"resolved","resolved":["104.21.8.215","172.67.140.68"],"resolved_at":"2026-11-05T20:08:53Z","dns_checked_at":"2026-11-05T20:18:44.000Z","dns_since":"2026-11-05T20:18:44.000Z","findings":[{"id":"fnbfamykcz2rp2chyv22f","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T20:05:35.030Z","first_published":"2026-11-05T20:12:24.139Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=chiankmeyunk.live"},{"hostname":"ci.zenavlico.cyou","first_observed":"2026-11-05T19:46:44.250Z","first_published":"2026-11-05T20:12:24.139Z","brands":[],"dns":"resolved","resolved":["95.85.244.13"],"resolved_at":"2026-11-05T19:57:51Z","dns_checked_at":"2026-11-05T20:18:44.000Z","dns_since":"2026-11-05T20:18:44.000Z","findings":[{"id":"f35ob76neprp26ktutsps","kind":"reported_domain","summary":"Under zenavlico.cyou, listed by CERT Polska","first_observed":"2026-11-05T19:46:44.250Z","first_published":"2026-11-05T20:12:24.139Z","source":"cert_polska","source_name":"CERT Polska","under":"zenavlico.cyou"}],"url":"https://domainspoof.com/live?show=all&q=ci.zenavlico.cyou"},{"hostname":"claim-ftx.com","first_observed":"2026-11-05T19:51:38.274Z","first_published":"2026-11-05T20:12:24.139Z","brands":[],"dns":"no_address","resolved":[],"resolved_at":"2026-11-05T19:52:05Z","dns_checked_at":"2026-11-06T12:31:48.000Z","findings":[{"id":"fch5jxtd5ykobsemhai2e","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T19:51:38.274Z","first_published":"2026-11-05T20:12:24.139Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=claim-ftx.com"},{"hostname":"com-swap.at","first_observed":"2026-11-05T19:41:53.584Z","first_published":"2026-11-05T20:12:24.139Z","brands":[],"dns":"resolved","resolved":["104.21.68.149","172.67.196.48"],"resolved_at":"2026-11-05T19:52:42Z","dns_checked_at":"2026-11-05T20:18:44.000Z","dns_since":"2026-11-05T20:18:44.000Z","findings":[{"id":"fopnftknpdzsotilvdpyi","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T19:41:53.584Z","first_published":"2026-11-05T20:12:24.139Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=com-swap.at"},{"hostname":"community-airdrop.top","first_observed":"2026-11-05T19:57:04.920Z","first_published":"2026-11-05T20:12:24.139Z","brands":[],"dns":"resolved","resolved":["104.21.84.182","172.67.195.180"],"resolved_at":"2026-11-05T20:01:17Z","dns_checked_at":"2026-11-05T20:18:44.000Z","dns_since":"2026-11-05T20:18:44.000Z","findings":[{"id":"fbrlwl5pmn5pnamtaybtr","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T19:57:04.920Z","first_published":"2026-11-05T20:12:24.139Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=community-airdrop.top"},{"hostname":"contentsubmission-x.com","first_observed":"2026-11-05T19:05:38.392Z","first_published":"2026-11-05T20:12:24.139Z","brands":[],"dns":"no_address","resolved":[],"resolved_at":"2026-11-05T19:11:15Z","dns_checked_at":"2026-11-06T12:31:48.000Z","findings":[{"id":"fkdjsedcpra2ftz4zdgud","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T19:05:38.392Z","first_published":"2026-11-05T20:12:24.139Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=contentsubmission-x.com"},{"hostname":"cool27.com","first_observed":"2026-11-05T19:36:57.164Z","first_published":"2026-11-05T20:12:24.139Z","brands":[],"dns":"resolved","resolved":["162.4.84.247"],"resolved_at":"2026-11-05T19:40:40Z","dns_checked_at":"2026-11-05T20:18:44.000Z","dns_since":"2026-11-05T20:18:44.000Z","findings":[{"id":"ffftprboyy2fr3hub72su","kind":"reported_domain","summary":"Listed by NPA 165 (finance and insurance)","first_observed":"2026-11-05T19:36:57.164Z","first_published":"2026-11-05T20:12:24.139Z","source":"npa","source_name":"NPA 165","claim":{"category":"finance and insurance"}}],"url":"https://domainspoof.com/live?show=all&q=cool27.com"},{"hostname":"creteportway.live","first_observed":"2026-11-05T19:36:57.164Z","first_published":"2026-11-05T20:12:24.139Z","brands":[],"dns":"resolved","resolved":["104.21.23.161","172.67.212.81"],"resolved_at":"2026-11-06T00:26:28Z","dns_checked_at":"2026-11-05T20:18:44.000Z","dns_since":"2026-11-05T20:18:44.000Z","findings":[{"id":"fxcyqhnjjtnk34yw3dov3","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T19:36:57.164Z","first_published":"2026-11-05T20:12:24.139Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=creteportway.live"},{"hostname":"crypto-885137.com","first_observed":"2026-11-05T19:52:09.974Z","first_published":"2026-11-05T20:12:24.139Z","brands":[{"id":"crypto-com","name":"Crypto.com","url":"https://domainspoof.com/brands/crypto-com"}],"dns":"resolved","resolved":["209.99.189.196"],"resolved_at":"2026-11-05T20:18:44Z","dns_checked_at":"2026-11-05T20:18:44.000Z","dns_since":"2026-11-05T20:18:44.000Z","findings":[{"id":"f43mmftwffxao5gf7drqf","kind":"spamhaus_drop","summary":"Resolved to 209.99.189.196 on Spamhaus DROP","first_observed":"2026-11-05T19:52:09.974Z","first_published":"2026-11-05T20:12:24.139Z","address":"209.99.189.196","list":"spamhaus_drop","list_name":"Spamhaus DROP"}],"url":"https://domainspoof.com/brands/crypto-com"},{"hostname":"cumbrerelmartech-com.financecryptoworld.com","first_observed":"2026-11-05T19:16:29.893Z","first_published":"2026-11-05T20:12:24.139Z","brands":[],"dns":"resolved","resolved":["104.21.10.130","172.67.131.121"],"resolved_at":"2026-11-05T19:25:11Z","dns_checked_at":"2026-11-05T20:18:44.000Z","dns_since":"2026-11-05T20:18:44.000Z","findings":[{"id":"fgeorr6o5pochrcpzqrtu","kind":"reported_domain","summary":"Under financecryptoworld.com, listed by CERT Polska","first_observed":"2026-11-05T19:16:29.893Z","first_published":"2026-11-05T20:12:24.139Z","source":"cert_polska","source_name":"CERT Polska","under":"financecryptoworld.com"}],"url":"https://domainspoof.com/live?show=all&q=cumbrerelmartech-com.financecryptoworld.com"},{"hostname":"daciacapital.digital","first_observed":"2026-11-05T19:16:29.893Z","first_published":"2026-11-05T20:12:24.139Z","brands":[],"dns":"resolved","resolved":["104.21.4.138","172.67.132.34"],"resolved_at":"2026-11-05T19:25:11Z","dns_checked_at":"2026-11-05T20:18:44.000Z","dns_since":"2026-11-05T20:18:44.000Z","findings":[{"id":"faagi6vkdkwwfx6jvob6j","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T19:16:29.893Z","first_published":"2026-11-05T20:12:24.139Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=daciacapital.digital"},{"hostname":"dailybeautywellness.com","first_observed":"2026-11-05T19:26:14.408Z","first_published":"2026-11-05T20:12:24.139Z","brands":[],"dns":"resolved","resolved":["104.234.134.75"],"resolved_at":"2026-11-05T19:26:52Z","dns_checked_at":"2026-11-05T20:18:44.000Z","dns_since":"2026-11-05T20:18:44.000Z","findings":[{"id":"f3fba4362vqurucihzv45","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T19:26:14.408Z","first_published":"2026-11-05T20:12:24.139Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=dailybeautywellness.com"},{"hostname":"darknetfail.com","first_observed":"2026-11-05T19:10:41.672Z","first_published":"2026-11-05T20:12:24.139Z","brands":[],"dns":"resolved","resolved":["104.21.24.161","172.67.219.152"],"resolved_at":"2026-11-05T19:18:59Z","dns_checked_at":"2026-11-05T20:18:44.000Z","dns_since":"2026-11-05T20:18:44.000Z","findings":[{"id":"f6g7yonmc5oxpwvdbda6j","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T19:10:41.672Z","first_published":"2026-11-05T20:12:24.139Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/darknetfail.com/"}],"url":"https://domainspoof.com/live?show=all&q=darknetfail.com"},{"hostname":"detailed-earnings.com","first_observed":"2026-11-05T19:31:10.785Z","first_published":"2026-11-05T20:12:24.139Z","brands":[],"dns":"resolved","resolved":["104.21.25.132","172.67.134.66"],"resolved_at":"2026-11-05T19:31:40Z","dns_checked_at":"2026-11-05T20:18:44.000Z","dns_since":"2026-11-05T20:18:44.000Z","findings":[{"id":"fak7xveyybm5lwndy6vlw","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T19:31:10.785Z","first_published":"2026-11-05T20:12:24.139Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=detailed-earnings.com"},{"hostname":"doc-ledgrwalet-auth.pages.dev","first_observed":"2026-11-05T19:36:57.164Z","first_published":"2026-11-05T20:12:24.139Z","brands":[],"dns":"resolved","resolved":["172.66.45.14","172.66.46.242"],"resolved_at":"2026-11-05T19:40:41Z","dns_checked_at":"2026-11-05T20:18:44.000Z","dns_since":"2026-11-05T20:18:44.000Z","findings":[{"id":"frodukoj4iley4yllshpk","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T19:36:57.164Z","first_published":"2026-11-05T20:12:24.139Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=doc-ledgrwalet-auth.pages.dev"},{"hostname":"doodling.app","first_observed":"2026-11-05T19:51:38.274Z","first_published":"2026-11-05T20:12:24.139Z","brands":[],"dns":"resolved","resolved":["104.21.38.40","172.67.218.195"],"resolved_at":"2026-11-05T19:52:09Z","dns_checked_at":"2026-11-05T20:18:44.000Z","dns_since":"2026-11-05T20:18:44.000Z","findings":[{"id":"f4dptl74rfjsn7noxkhqc","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T19:51:38.274Z","first_published":"2026-11-05T20:12:24.139Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=doodling.app"},{"hostname":"downloads.pickshot.app","first_observed":"2026-11-05T19:57:04.920Z","first_published":"2026-11-05T20:12:24.139Z","brands":[],"dns":"resolved","resolved":["104.21.65.213","172.67.167.20"],"resolved_at":"2026-11-05T20:01:33Z","dns_checked_at":"2026-11-05T20:18:44.000Z","dns_since":"2026-11-05T20:18:44.000Z","findings":[{"id":"fhnwbu4phh2clf3nu43ly","kind":"reported_domain","summary":"Under pickshot.app, listed by MetaMask","first_observed":"2026-11-05T19:57:04.920Z","first_published":"2026-11-05T20:12:24.139Z","source":"metamask","source_name":"MetaMask","under":"pickshot.app"}],"url":"https://domainspoof.com/live?show=all&q=downloads.pickshot.app"},{"hostname":"dravora-gld-felquna-r5x4fw97-3fw.pages.dev","first_observed":"2026-11-05T19:21:29.552Z","first_published":"2026-11-05T20:12:24.139Z","brands":[],"dns":"resolved","resolved":["172.66.44.156","172.66.47.100"],"resolved_at":"2026-11-05T19:22:33Z","dns_checked_at":"2026-11-05T20:18:44.000Z","dns_since":"2026-11-05T20:18:44.000Z","findings":[{"id":"fvuz5t4tbpy5v43bidq5f","kind":"reported_domain","summary":"Reported by PhishTank","first_observed":"2026-11-05T19:21:29.552Z","first_published":"2026-11-05T20:12:24.139Z","source":"phishtank","source_name":"PhishTank","source_url":"https://phishtank.org/phish_detail.php?phish_id=9479349"}],"url":"https://domainspoof.com/live?show=all&q=dravora-gld-felquna-r5x4fw97-3fw.pages.dev"},{"hostname":"drone.socialvisor.ru","first_observed":"2026-11-05T19:57:04.920Z","first_published":"2026-11-05T20:12:24.139Z","brands":[],"dns":"resolved","resolved":["91.215.41.91"],"resolved_at":"2026-11-05T20:01:33Z","dns_checked_at":"2026-11-05T20:18:44.000Z","dns_since":"2026-11-05T20:18:44.000Z","findings":[{"id":"fxqqmsoh3y23axbe5ek4t","kind":"reported_domain","summary":"Under socialvisor.ru, reported by PhishDestroy","first_observed":"2026-11-05T19:57:04.920Z","first_published":"2026-11-05T20:12:24.139Z","source":"phishdestroy","source_name":"PhishDestroy","under":"socialvisor.ru","source_url":"https://phishdestroy.io/domain/socialvisor.ru/"}],"url":"https://domainspoof.com/live?show=all&q=drone.socialvisor.ru"},{"hostname":"drvbii.beer","first_observed":"2026-11-05T19:16:29.893Z","first_published":"2026-11-05T20:12:24.139Z","brands":[],"dns":"resolved","resolved":["104.21.87.122","172.67.143.75"],"resolved_at":"2026-11-05T19:25:12Z","dns_checked_at":"2026-11-05T20:18:44.000Z","dns_since":"2026-11-05T20:18:44.000Z","findings":[{"id":"fwthevcfurnuccuqkz743","kind":"reported_domain","summary":"Listed by NPA 165 (e-commerce)","first_observed":"2026-11-05T19:16:29.893Z","first_published":"2026-11-05T20:12:24.139Z","source":"npa","source_name":"NPA 165","claim":{"category":"e-commerce"}}],"url":"https://domainspoof.com/live?show=all&q=drvbii.beer"},{"hostname":"dupecommigration.xyz","first_observed":"2026-11-05T20:05:35.030Z","first_published":"2026-11-05T20:12:24.139Z","brands":[],"dns":"resolved","resolved":["104.21.69.182","172.67.211.124"],"resolved_at":"2026-11-06T01:07:27Z","dns_checked_at":"2026-11-05T20:18:44.000Z","dns_since":"2026-11-05T20:18:44.000Z","findings":[{"id":"fgmx774ragyawe7us654b","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T20:05:35.030Z","first_published":"2026-11-05T20:12:24.139Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/dupecommigration.xyz/"}],"url":"https://domainspoof.com/live?show=all&q=dupecommigration.xyz"},{"hostname":"dyno-light.com","first_observed":"2026-11-05T19:31:10.785Z","first_published":"2026-11-05T20:12:24.139Z","brands":[],"dns":"resolved","resolved":["104.21.59.204","172.67.183.136"],"resolved_at":"2026-11-05T19:31:40Z","dns_checked_at":"2026-11-05T20:18:44.000Z","dns_since":"2026-11-05T20:18:44.000Z","findings":[{"id":"fsonood3qmiwwsclnf5l4","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T19:31:10.785Z","first_published":"2026-11-05T20:12:24.139Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=dyno-light.com"},{"hostname":"dyno-shine.com","first_observed":"2026-11-05T19:05:38.392Z","first_published":"2026-11-05T20:12:24.139Z","brands":[],"dns":"resolved","resolved":["104.21.61.9","172.67.204.172"],"resolved_at":"2026-11-05T19:11:48Z","dns_checked_at":"2026-11-05T20:18:44.000Z","dns_since":"2026-11-05T20:18:44.000Z","findings":[{"id":"fmdk7egqvkr6mw3ck2r4l","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T19:05:38.392Z","first_published":"2026-11-05T20:12:24.139Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=dyno-shine.com"},{"hostname":"emyportal.com","first_observed":"2026-11-05T19:41:53.584Z","first_published":"2026-11-05T20:12:24.139Z","brands":[],"dns":"resolved","resolved":["104.21.52.106","172.67.198.46"],"resolved_at":"2026-11-05T19:53:19Z","dns_checked_at":"2026-11-05T20:18:44.000Z","dns_since":"2026-11-05T20:18:44.000Z","findings":[{"id":"fjvaqebkosx5gy3flkhoi","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T19:41:53.584Z","first_published":"2026-11-05T20:12:24.139Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=emyportal.com"},{"hostname":"entatic.co","first_observed":"2026-11-05T19:57:04.920Z","first_published":"2026-11-05T20:12:24.139Z","brands":[],"dns":"resolved","resolved":["104.21.11.251","172.67.150.225"],"resolved_at":"2026-11-06T00:26:28Z","dns_checked_at":"2026-11-05T20:18:44.000Z","dns_since":"2026-11-05T20:18:44.000Z","findings":[{"id":"f7h5x4ub5a5tnelpe5ybs","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T19:57:04.920Z","first_published":"2026-11-05T20:12:24.139Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/entatic.co/"}],"url":"https://domainspoof.com/live?show=all&q=entatic.co"},{"hostname":"ethena.gold","first_observed":"2026-11-05T20:05:35.030Z","first_published":"2026-11-05T20:12:24.139Z","brands":[{"id":"ethena","name":"Ethena","url":"https://domainspoof.com/brands/ethena"}],"dns":"resolved","resolved":["104.21.28.37","172.67.144.14","2606:4700:3032::ac43:900e","2606:4700:3033::6815:1c25"],"resolved_at":"2026-11-05T20:09:00Z","dns_checked_at":"2026-11-05T20:18:44.000Z","dns_since":"2026-11-05T20:18:44.000Z","findings":[{"id":"f7wtltv77ryhqrdkkgjax","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T20:05:35.030Z","first_published":"2026-11-05T20:12:24.139Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/brands/ethena"},{"hostname":"evolucionfinanciera.live","first_observed":"2026-11-05T20:05:35.030Z","first_published":"2026-11-05T20:12:24.139Z","brands":[],"dns":"resolved","resolved":["104.21.55.249","172.67.174.209"],"resolved_at":"2026-11-05T20:09:00Z","dns_checked_at":"2026-11-05T20:18:44.000Z","dns_since":"2026-11-05T20:18:44.000Z","findings":[{"id":"f4h4j2qulzswmr2hd3ery","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T20:05:35.030Z","first_published":"2026-11-05T20:12:24.139Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=evolucionfinanciera.live"},{"hostname":"exploit-re.xyz","first_observed":"2026-11-05T19:46:44.250Z","first_published":"2026-11-05T20:12:24.139Z","brands":[],"dns":"resolved","resolved":["104.21.53.254","172.67.221.232"],"resolved_at":"2026-11-05T19:58:11Z","dns_checked_at":"2026-11-05T20:18:44.000Z","dns_since":"2026-11-05T20:18:44.000Z","findings":[{"id":"fywvwhstsh5bkgipxtopz","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T19:46:44.250Z","first_published":"2026-11-05T20:12:24.139Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=exploit-re.xyz"},{"hostname":"faroxplay.com","first_observed":"2026-11-05T19:57:04.920Z","first_published":"2026-11-05T20:12:24.139Z","brands":[],"dns":"resolved","resolved":["104.21.23.181","172.67.212.120"],"resolved_at":"2026-11-05T20:01:36Z","dns_checked_at":"2026-11-05T20:18:44.000Z","dns_since":"2026-11-05T20:18:44.000Z","findings":[{"id":"firyqr6pmddepj4xsxw52","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T19:57:04.920Z","first_published":"2026-11-05T20:12:24.139Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/faroxplay.com/"}],"url":"https://domainspoof.com/live?show=all&q=faroxplay.com"},{"hostname":"fileissues-x.com","first_observed":"2026-11-05T19:41:53.584Z","first_published":"2026-11-05T20:12:24.139Z","brands":[],"dns":"no_address","resolved":[],"resolved_at":"2026-11-05T19:53:23Z","dns_checked_at":"2026-11-06T12:31:48.000Z","findings":[{"id":"ffadaupz565udix3rsgaa","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T19:41:53.584Z","first_published":"2026-11-05T20:12:24.139Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=fileissues-x.com"},{"hostname":"financewebdesk.xyz","first_observed":"2026-11-05T19:16:29.893Z","first_published":"2026-11-05T20:12:24.139Z","brands":[],"dns":"resolved","resolved":["104.21.18.113","172.67.181.200"],"resolved_at":"2026-11-05T19:25:15Z","dns_checked_at":"2026-11-05T20:18:44.000Z","dns_since":"2026-11-05T20:18:44.000Z","findings":[{"id":"fp5h3ray32jxfnlo7mqhg","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T19:16:29.893Z","first_published":"2026-11-05T20:12:24.139Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=financewebdesk.xyz"},{"hostname":"fintradix-platform.com","first_observed":"2026-11-05T19:57:04.920Z","first_published":"2026-11-05T20:12:24.139Z","brands":[],"dns":"resolved","resolved":["185.62.57.10","185.62.57.14"],"resolved_at":"2026-11-06T10:59:44Z","dns_checked_at":"2026-11-05T20:18:44.000Z","dns_since":"2026-11-05T20:18:44.000Z","findings":[{"id":"fs2u6rkyuue3vimzqdyys","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T19:57:04.920Z","first_published":"2026-11-05T20:12:24.139Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=fintradix-platform.com"},{"hostname":"firstswissherithage.com","first_observed":"2026-11-05T18:56:58.162Z","first_published":"2026-11-05T20:12:24.139Z","brands":[],"dns":"resolved","resolved":["89.117.51.233"],"resolved_at":"2026-11-05T19:05:07Z","dns_checked_at":"2026-11-05T20:18:44.000Z","dns_since":"2026-11-05T20:18:44.000Z","findings":[{"id":"fcv7uu6co7q6anjpaga4f","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T18:56:58.162Z","first_published":"2026-11-05T20:12:24.139Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/firstswissherithage.com/"}],"url":"https://domainspoof.com/live?show=all&q=firstswissherithage.com"},{"hostname":"floscapital.com","first_observed":"2026-11-05T19:26:14.408Z","first_published":"2026-11-05T20:12:24.139Z","brands":[],"dns":"resolved","resolved":["23.153.104.17"],"resolved_at":"2026-11-05T19:26:39Z","dns_checked_at":"2026-11-05T20:18:44.000Z","dns_since":"2026-11-05T20:18:44.000Z","findings":[{"id":"fbauafb545dbqpgwd3n4i","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T19:26:14.408Z","first_published":"2026-11-05T20:12:24.139Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/floscapital.com/"}],"url":"https://domainspoof.com/live?show=all&q=floscapital.com"},{"hostname":"foundation-bmo.pages.dev","first_observed":"2026-11-05T19:36:57.164Z","first_published":"2026-11-05T20:12:24.139Z","brands":[],"dns":"resolved","resolved":["172.66.44.53","172.66.47.203"],"resolved_at":"2026-11-05T19:40:45Z","dns_checked_at":"2026-11-05T20:18:44.000Z","dns_since":"2026-11-05T20:18:44.000Z","findings":[{"id":"fi65aasdyvnpoehwubnkj","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T19:36:57.164Z","first_published":"2026-11-05T20:12:24.139Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=foundation-bmo.pages.dev"},{"hostname":"fra-2b6b60.wb-cdn-global.com","first_observed":"2026-11-05T18:56:58.162Z","first_published":"2026-11-05T20:12:24.139Z","brands":[],"dns":"resolved","resolved":["37.114.50.79"],"resolved_at":"2026-11-05T19:05:07Z","dns_checked_at":"2026-11-05T20:18:44.000Z","dns_since":"2026-11-05T20:18:44.000Z","findings":[{"id":"fwgitzbd3avyretdevocv","kind":"reported_domain","summary":"Under wb-cdn-global.com, listed by MetaMask","first_observed":"2026-11-05T18:56:58.162Z","first_published":"2026-11-05T20:12:24.139Z","source":"metamask","source_name":"MetaMask","under":"wb-cdn-global.com"}],"url":"https://domainspoof.com/live?show=all&q=fra-2b6b60.wb-cdn-global.com"},{"hostname":"fsocietymart-spot.store","first_observed":"2026-11-05T19:36:57.164Z","first_published":"2026-11-05T20:12:24.139Z","brands":[],"dns":"no_address","resolved":[],"resolved_at":"2026-11-05T19:40:45Z","dns_checked_at":"2026-11-06T12:31:48.000Z","findings":[{"id":"f3z5l6ofr3h32osbsfcct","kind":"reported_domain","summary":"Listed by NPA 165 (e-commerce)","first_observed":"2026-11-05T19:36:57.164Z","first_published":"2026-11-05T20:12:24.139Z","source":"npa","source_name":"NPA 165","claim":{"category":"e-commerce"}}],"url":"https://domainspoof.com/live?show=all&q=fsocietymart-spot.store"},{"hostname":"gdhc.agndatacom.com","first_observed":"2026-11-05T20:05:35.030Z","first_published":"2026-11-05T20:12:24.139Z","brands":[],"dns":"resolved","resolved":["185.53.179.136"],"resolved_at":"2026-11-05T20:09:02Z","dns_checked_at":"2026-11-05T20:18:44.000Z","dns_since":"2026-11-05T20:18:44.000Z","findings":[{"id":"f4h5icckj3med7oksiewl","kind":"reported_domain","summary":"Under agndatacom.com, listed by MetaMask","first_observed":"2026-11-05T20:05:35.030Z","first_published":"2026-11-05T20:12:24.139Z","source":"metamask","source_name":"MetaMask","under":"agndatacom.com"}],"url":"https://domainspoof.com/live?show=all&q=gdhc.agndatacom.com"},{"hostname":"glimmer-paths.com","first_observed":"2026-11-05T19:10:41.672Z","first_published":"2026-11-05T20:12:24.139Z","brands":[],"dns":"resolved","resolved":["104.21.81.240","172.67.192.29"],"resolved_at":"2026-11-05T19:19:10Z","dns_checked_at":"2026-11-05T20:18:44.000Z","dns_since":"2026-11-05T20:18:44.000Z","findings":[{"id":"ffrad3kgs2lws3z4qvb6j","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T19:10:41.672Z","first_published":"2026-11-05T20:12:24.139Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=glimmer-paths.com"},{"hostname":"globalassetway.com","first_observed":"2026-11-05T19:46:44.250Z","first_published":"2026-11-05T20:12:24.139Z","brands":[],"dns":"resolved","resolved":["144.76.98.182"],"resolved_at":"2026-11-05T19:58:12Z","dns_checked_at":"2026-11-05T20:18:44.000Z","dns_since":"2026-11-05T20:18:44.000Z","findings":[{"id":"f4oj3cc5nkefj7ote5qyh","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T19:46:44.250Z","first_published":"2026-11-05T20:12:24.139Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/globalassetway.com/"}],"url":"https://domainspoof.com/live?show=all&q=globalassetway.com"},{"hostname":"goldenchance.fit","first_observed":"2026-11-05T18:56:58.162Z","first_published":"2026-11-05T20:12:24.139Z","brands":[],"dns":"resolved","resolved":["104.21.43.124","172.67.179.20"],"resolved_at":"2026-11-05T19:05:08Z","dns_checked_at":"2026-11-05T20:18:44.000Z","dns_since":"2026-11-05T20:18:44.000Z","findings":[{"id":"fsj36ymbosl6bsetb22b2","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T18:56:58.162Z","first_published":"2026-11-05T20:12:24.139Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=goldenchance.fit"},{"hostname":"goldenchance.ink","first_observed":"2026-11-05T18:56:58.162Z","first_published":"2026-11-05T20:12:24.139Z","brands":[],"dns":"resolved","resolved":["104.21.24.44","172.67.216.199"],"resolved_at":"2026-11-05T19:05:08Z","dns_checked_at":"2026-11-05T20:18:44.000Z","dns_since":"2026-11-05T20:18:44.000Z","findings":[{"id":"fnv6jfdiyahgrxmp3smjo","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T18:56:58.162Z","first_published":"2026-11-05T20:12:24.139Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=goldenchance.ink"},{"hostname":"governance-fungolabs.pages.dev","first_observed":"2026-11-05T19:05:38.392Z","first_published":"2026-11-05T20:12:24.139Z","brands":[],"dns":"not_found","resolved":[],"resolved_at":"2026-11-05T19:11:58Z","dns_checked_at":"2026-11-06T12:31:48.000Z","findings":[{"id":"fpz3kuqouy6ydsocbpqh7","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T19:05:38.392Z","first_published":"2026-11-05T20:12:24.139Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=governance-fungolabs.pages.dev"},{"hostname":"governance-quant.com","first_observed":"2026-11-05T20:00:49.404Z","first_published":"2026-11-05T20:12:24.139Z","brands":[],"dns":"resolved","resolved":["104.21.86.234","172.67.137.155"],"resolved_at":"2026-11-05T20:06:39Z","dns_checked_at":"2026-11-05T20:18:44.000Z","dns_since":"2026-11-05T20:18:44.000Z","findings":[{"id":"f55phoajpxouswxm2uwp4","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T20:00:49.404Z","first_published":"2026-11-05T20:12:24.139Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=governance-quant.com"},{"hostname":"governance-torchpad.pages.dev","first_observed":"2026-11-05T19:05:38.392Z","first_published":"2026-11-05T20:12:24.139Z","brands":[],"dns":"not_found","resolved":[],"resolved_at":"2026-11-05T19:11:58Z","dns_checked_at":"2026-11-06T12:31:48.000Z","findings":[{"id":"f6dy7bmpa6ygc465xnlrq","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T19:05:38.392Z","first_published":"2026-11-05T20:12:24.139Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=governance-torchpad.pages.dev"},{"hostname":"gro24z-cointelegraph.com","first_observed":"2026-11-05T19:40:46.756Z","first_published":"2026-11-05T20:12:24.139Z","brands":[{"id":"cointelegraph","name":"Cointelegraph","url":"https://domainspoof.com/brands/cointelegraph"}],"dns":"resolved","resolved":["192.142.10.5"],"resolved_at":"2026-11-05T20:18:44Z","dns_checked_at":"2026-11-05T20:18:44.000Z","dns_since":"2026-11-05T20:18:44.000Z","findings":[{"id":"fq2nv5axp4vjxw6pilf4h","kind":"phishing_infrastructure","summary":"Resolved to 192.142.10.5, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T19:40:46.756Z","first_published":"2026-11-05T20:12:24.139Z","address":"192.142.10.5","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/cointelegraph"},{"hostname":"gugutown.com","first_observed":"2026-11-05T19:10:41.672Z","first_published":"2026-11-05T20:12:24.139Z","brands":[],"dns":"resolved","resolved":["165.154.238.16"],"resolved_at":"2026-11-05T19:19:10Z","dns_checked_at":"2026-11-05T20:18:44.000Z","dns_since":"2026-11-05T20:18:44.000Z","findings":[{"id":"fp5wgx3jbavqcwct2elaa","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T19:10:41.672Z","first_published":"2026-11-05T20:12:24.139Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=gugutown.com"},{"hostname":"guiadoautocuidado.com","first_observed":"2026-11-05T19:00:49.069Z","first_published":"2026-11-05T20:12:24.139Z","brands":[],"dns":"resolved","resolved":["104.21.79.140","172.67.146.13"],"resolved_at":"2026-11-05T19:01:25Z","dns_checked_at":"2026-11-05T20:18:44.000Z","dns_since":"2026-11-05T20:18:44.000Z","findings":[{"id":"f2q5uog3jtjttm7hwmbt3","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T19:00:49.069Z","first_published":"2026-11-05T20:12:24.139Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/guiadoautocuidado.com/"}],"url":"https://domainspoof.com/live?show=all&q=guiadoautocuidado.com"},{"hostname":"gweryxalvon-es.live","first_observed":"2026-11-05T19:57:04.920Z","first_published":"2026-11-05T20:12:24.139Z","brands":[],"dns":"resolved","resolved":["104.21.43.229","172.67.186.189"],"resolved_at":"2026-11-05T20:01:37Z","dns_checked_at":"2026-11-05T20:18:44.000Z","dns_since":"2026-11-05T20:18:44.000Z","findings":[{"id":"fkxbv2zzkyfpaicbwrscp","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T19:57:04.920Z","first_published":"2026-11-05T20:12:24.139Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=gweryxalvon-es.live"},{"hostname":"gweryxalvon-it.live","first_observed":"2026-11-05T20:05:35.030Z","first_published":"2026-11-05T20:12:24.139Z","brands":[],"dns":"resolved","resolved":["104.21.73.144","172.67.145.149"],"resolved_at":"2026-11-05T20:09:02Z","dns_checked_at":"2026-11-05T20:18:44.000Z","dns_since":"2026-11-05T20:18:44.000Z","findings":[{"id":"fgydr73hddassvb2erkmd","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T20:05:35.030Z","first_published":"2026-11-05T20:12:24.139Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=gweryxalvon-it.live"},{"hostname":"gyeaj.asia","first_observed":"2026-11-05T19:41:53.584Z","first_published":"2026-11-05T20:12:24.139Z","brands":[],"dns":"resolved","resolved":["104.21.15.40","172.67.161.101"],"resolved_at":"2026-11-05T19:53:28Z","dns_checked_at":"2026-11-05T20:18:44.000Z","dns_since":"2026-11-05T20:18:44.000Z","findings":[{"id":"f53wvz47mau3gvlfzigzg","kind":"reported_domain","summary":"Listed by NPA 165 (information services)","first_observed":"2026-11-05T19:41:53.584Z","first_published":"2026-11-05T20:12:24.139Z","source":"npa","source_name":"NPA 165","claim":{"category":"information services"}}],"url":"https://domainspoof.com/live?show=all&q=gyeaj.asia"},{"hostname":"harbor.ni-electrical.com","first_observed":"2026-11-05T19:51:38.274Z","first_published":"2026-11-05T20:12:24.139Z","brands":[],"dns":"resolved","resolved":["109.238.86.5"],"resolved_at":"2026-11-05T19:52:10Z","dns_checked_at":"2026-11-05T20:18:44.000Z","dns_since":"2026-11-05T20:18:44.000Z","findings":[{"id":"fooc6kwlvpx4pca772nll","kind":"reported_domain","summary":"Under ni-electrical.com, listed by CERT Polska","first_observed":"2026-11-05T19:51:38.274Z","first_published":"2026-11-05T20:12:24.139Z","source":"cert_polska","source_name":"CERT Polska","under":"ni-electrical.com"}],"url":"https://domainspoof.com/live?show=all&q=harbor.ni-electrical.com"},{"hostname":"help-wealthsimple.com","first_observed":"2026-11-05T19:41:53.584Z","first_published":"2026-11-05T20:12:24.139Z","brands":[],"dns":"resolved","resolved":["104.21.21.44","172.67.196.101"],"resolved_at":"2026-11-05T19:53:29Z","dns_checked_at":"2026-11-05T20:18:44.000Z","dns_since":"2026-11-05T20:18:44.000Z","findings":[{"id":"ffdfwspkitwsvs7yyirmo","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T19:41:53.584Z","first_published":"2026-11-05T20:12:24.139Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=help-wealthsimple.com"},{"hostname":"heuff.asia","first_observed":"2026-11-05T19:41:53.584Z","first_published":"2026-11-05T20:12:24.139Z","brands":[],"dns":"resolved","resolved":["104.21.91.181","172.67.177.207"],"resolved_at":"2026-11-05T19:53:29Z","dns_checked_at":"2026-11-05T20:18:44.000Z","dns_since":"2026-11-05T20:18:44.000Z","findings":[{"id":"fu33srhwdfrllx3abtfgn","kind":"reported_domain","summary":"Listed by NPA 165 (information services)","first_observed":"2026-11-05T19:41:53.584Z","first_published":"2026-11-05T20:12:24.139Z","source":"npa","source_name":"NPA 165","claim":{"category":"information services"}}],"url":"https://domainspoof.com/live?show=all&q=heuff.asia"},{"hostname":"hextoken.live","first_observed":"2026-11-05T20:05:35.030Z","first_published":"2026-11-05T20:12:24.139Z","brands":[],"dns":"resolved","resolved":["104.21.38.64","172.67.219.182"],"resolved_at":"2026-11-06T03:41:21Z","dns_checked_at":"2026-11-05T20:18:44.000Z","dns_since":"2026-11-05T20:18:44.000Z","findings":[{"id":"f5gvylwgaemzt2rxzrnlz","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T20:05:35.030Z","first_published":"2026-11-05T20:12:24.139Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/hextoken.live/"}],"url":"https://domainspoof.com/live?show=all&q=hextoken.live"},{"hostname":"huedlle.top","first_observed":"2026-11-05T19:26:14.408Z","first_published":"2026-11-05T20:12:24.139Z","brands":[],"dns":"resolved","resolved":["104.21.50.146","172.67.207.3"],"resolved_at":"2026-11-05T19:26:39Z","dns_checked_at":"2026-11-05T20:18:44.000Z","dns_since":"2026-11-05T20:18:44.000Z","findings":[{"id":"fi56vrr3avnmq25mzjhpl","kind":"reported_domain","summary":"Listed by NPA 165 (e-commerce)","first_observed":"2026-11-05T19:26:14.408Z","first_published":"2026-11-05T20:12:24.139Z","source":"npa","source_name":"NPA 165","claim":{"category":"e-commerce"}}],"url":"https://domainspoof.com/live?show=all&q=huedlle.top"},{"hostname":"id.usps.international","first_observed":"2026-11-05T19:57:04.920Z","first_published":"2026-11-05T20:12:24.139Z","brands":[],"dns":"resolved","resolved":["162.159.143.12","172.66.3.8"],"resolved_at":"2026-11-05T20:01:42Z","dns_checked_at":"2026-11-05T20:18:44.000Z","dns_since":"2026-11-05T20:18:44.000Z","findings":[{"id":"f55wyev4uh2nexrkbacub","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T19:57:04.920Z","first_published":"2026-11-05T20:12:24.139Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=id.usps.international"},{"hostname":"ihykg.asia","first_observed":"2026-11-05T19:16:29.893Z","first_published":"2026-11-05T20:12:24.139Z","brands":[],"dns":"resolved","resolved":["104.21.9.54","172.67.159.30"],"resolved_at":"2026-11-05T19:25:18Z","dns_checked_at":"2026-11-05T20:18:44.000Z","dns_since":"2026-11-05T20:18:44.000Z","findings":[{"id":"fo44jjmbbcyvkvzrowxlk","kind":"reported_domain","summary":"Listed by NPA 165 (information services)","first_observed":"2026-11-05T19:16:29.893Z","first_published":"2026-11-05T20:12:24.139Z","source":"npa","source_name":"NPA 165","claim":{"category":"information services"}}],"url":"https://domainspoof.com/live?show=all&q=ihykg.asia"},{"hostname":"infonorgehelse.com","first_observed":"2026-11-05T20:00:49.404Z","first_published":"2026-11-05T20:12:24.139Z","brands":[],"dns":"resolved","resolved":["158.94.208.88"],"resolved_at":"2026-11-05T20:06:41Z","dns_checked_at":"2026-11-05T20:18:44.000Z","dns_since":"2026-11-05T20:18:44.000Z","findings":[{"id":"fptfjdddlits2ns4xtc6a","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T20:00:49.404Z","first_published":"2026-11-05T20:12:24.139Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=infonorgehelse.com"},{"hostname":"io-wallet-suite.app","first_observed":"2026-11-05T19:26:14.408Z","first_published":"2026-11-05T20:12:24.139Z","brands":[],"dns":"no_address","resolved":[],"resolved_at":"2026-11-05T19:26:39Z","dns_checked_at":"2026-11-06T12:27:48.000Z","findings":[{"id":"feathrh7o2rggfd6r7j33","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T19:26:14.408Z","first_published":"2026-11-05T20:12:24.139Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=io-wallet-suite.app"},{"hostname":"itfinquant-app.com","first_observed":"2026-11-05T19:36:57.164Z","first_published":"2026-11-05T20:12:24.139Z","brands":[],"dns":"resolved","resolved":["91.236.116.210"],"resolved_at":"2026-11-05T19:40:50Z","dns_checked_at":"2026-11-05T20:18:44.000Z","dns_since":"2026-11-05T20:18:44.000Z","findings":[{"id":"fupkix4teijcggeytoc5k","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T19:36:57.164Z","first_published":"2026-11-05T20:12:24.139Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/itfinquant-app.com/"}],"url":"https://domainspoof.com/live?show=all&q=itfinquant-app.com"},{"hostname":"jelvruvozanai-de.live","first_observed":"2026-11-05T19:57:04.920Z","first_published":"2026-11-05T20:12:24.139Z","brands":[],"dns":"resolved","resolved":["104.21.6.47","172.67.154.235"],"resolved_at":"2026-11-05T20:01:42Z","dns_checked_at":"2026-11-05T20:18:44.000Z","dns_since":"2026-11-05T20:18:44.000Z","findings":[{"id":"fbl6363lcrc7uti6zyqne","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T19:57:04.920Z","first_published":"2026-11-05T20:12:24.139Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=jelvruvozanai-de.live"},{"hostname":"kamenvynosin-cs.live","first_observed":"2026-11-05T19:00:49.069Z","first_published":"2026-11-05T20:12:24.139Z","brands":[],"dns":"resolved","resolved":["104.21.75.248","172.67.184.15"],"resolved_at":"2026-11-05T19:01:29Z","dns_checked_at":"2026-11-05T20:18:44.000Z","dns_since":"2026-11-05T20:18:44.000Z","findings":[{"id":"f5jqlsdgig4x4xymwnis2","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T19:00:49.069Z","first_published":"2026-11-05T20:12:24.139Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=kamenvynosin-cs.live"},{"hostname":"kamenvynosin.live","first_observed":"2026-11-05T20:00:49.404Z","first_published":"2026-11-05T20:12:24.139Z","brands":[],"dns":"resolved","resolved":["104.21.52.11","172.67.193.234"],"resolved_at":"2026-11-05T20:06:41Z","dns_checked_at":"2026-11-05T20:18:44.000Z","dns_since":"2026-11-05T20:18:44.000Z","findings":[{"id":"fp2j45dswm5hglmsaiqet","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T20:00:49.404Z","first_published":"2026-11-05T20:12:24.139Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=kamenvynosin.live"},{"hostname":"kgmostrgov.top","first_observed":"2026-11-05T19:31:10.785Z","first_published":"2026-11-05T20:12:24.139Z","brands":[],"dns":"resolved","resolved":["107.175.136.230"],"resolved_at":"2026-11-05T19:31:43Z","dns_checked_at":"2026-11-05T20:18:44.000Z","dns_since":"2026-11-05T20:18:44.000Z","findings":[{"id":"fhdfoz3334kiyubstotod","kind":"reported_domain","summary":"Listed by USOM","first_observed":"2026-11-05T19:31:10.785Z","first_published":"2026-11-05T20:12:24.139Z","source":"usom","source_name":"USOM"}],"url":"https://domainspoof.com/live?show=all&q=kgmostrgov.top"},{"hostname":"kinetiq.page","first_observed":"2026-11-05T19:26:14.408Z","first_published":"2026-11-05T20:12:24.139Z","brands":[],"dns":"resolved","resolved":["153.52.255.88"],"resolved_at":"2026-11-05T19:26:52Z","dns_checked_at":"2026-11-05T20:18:44.000Z","dns_since":"2026-11-05T20:18:44.000Z","findings":[{"id":"f6q6m3b2cjb2pm7wd5p4o","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T19:26:14.408Z","first_published":"2026-11-05T20:12:24.139Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=kinetiq.page"},{"hostname":"kinietiq.co","first_observed":"2026-11-05T18:56:58.162Z","first_published":"2026-11-05T20:12:24.139Z","brands":[],"dns":"resolved","resolved":["35.157.26.135","63.176.8.218"],"resolved_at":"2026-11-05T19:05:11Z","dns_checked_at":"2026-11-05T20:18:44.000Z","dns_since":"2026-11-05T20:18:44.000Z","findings":[{"id":"fakgvqpujhdovotkn7azc","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T18:56:58.162Z","first_published":"2026-11-05T20:12:24.139Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=kinietiq.co"},{"hostname":"kocholdng-turkishairlines.live","first_observed":"2026-11-05T19:41:53.584Z","first_published":"2026-11-05T20:12:24.139Z","brands":[{"id":"turkish-airlines","name":"Turkish Airlines","url":"https://domainspoof.com/brands/turkish-airlines"}],"dns":"resolved","resolved":["104.21.20.105","172.67.192.87","2606:4700:3034::6815:1469","2606:4700:3036::ac43:c057"],"resolved_at":"2026-11-05T19:53:40Z","dns_checked_at":"2026-11-05T20:18:44.000Z","dns_since":"2026-11-05T20:18:44.000Z","findings":[{"id":"fwwmwu6hkqklrqug35dpi","kind":"reported_domain","summary":"Listed by USOM","first_observed":"2026-11-05T19:41:53.584Z","first_published":"2026-11-05T20:12:24.139Z","source":"usom","source_name":"USOM"}],"url":"https://domainspoof.com/brands/turkish-airlines"},{"hostname":"krevpixelon-fr.live","first_observed":"2026-11-05T19:57:04.920Z","first_published":"2026-11-05T20:12:24.139Z","brands":[],"dns":"resolved","resolved":["104.21.38.125","172.67.222.165"],"resolved_at":"2026-11-05T20:01:43Z","dns_checked_at":"2026-11-05T20:18:44.000Z","dns_since":"2026-11-05T20:18:44.000Z","findings":[{"id":"f3i7xp7qc4x24kmlevxqz","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T19:57:04.920Z","first_published":"2026-11-05T20:12:24.139Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=krevpixelon-fr.live"},{"hostname":"kyc-10283.eu.cc","first_observed":"2026-11-05T18:56:58.162Z","first_published":"2026-11-05T20:12:24.139Z","brands":[],"dns":"resolved","resolved":["104.21.62.99","172.67.222.209"],"resolved_at":"2026-11-06T02:26:31Z","dns_checked_at":"2026-11-05T20:18:44.000Z","dns_since":"2026-11-05T20:18:44.000Z","findings":[{"id":"f4co4zcaeobp6eqwjv5gk","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T18:56:58.162Z","first_published":"2026-11-05T20:12:24.139Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=kyc-10283.eu.cc"},{"hostname":"lapiattaforma.pro","first_observed":"2026-11-05T19:31:10.785Z","first_published":"2026-11-05T20:12:24.139Z","brands":[],"dns":"resolved","resolved":["104.21.95.76","172.67.169.220"],"resolved_at":"2026-11-05T19:31:43Z","dns_checked_at":"2026-11-05T20:18:44.000Z","dns_since":"2026-11-05T20:18:44.000Z","findings":[{"id":"fy7oub5dhlshsc3pac5jz","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T19:31:10.785Z","first_published":"2026-11-05T20:12:24.139Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=lapiattaforma.pro"},{"hostname":"launch-flarenetworks.live","first_observed":"2026-11-05T19:21:29.552Z","first_published":"2026-11-05T20:12:24.139Z","brands":[{"id":"flare-network","name":"Flare Network","url":"https://domainspoof.com/brands/flare-network"}],"dns":"resolved","resolved":["104.21.27.247","172.67.143.205","2606:4700:3030::ac43:8fcd","2606:4700:3037::6815:1bf7"],"resolved_at":"2026-11-05T19:22:39Z","dns_checked_at":"2026-11-05T20:18:44.000Z","dns_since":"2026-11-05T20:18:44.000Z","findings":[{"id":"fxnl4fcw64hs757ojdoug","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T19:21:29.552Z","first_published":"2026-11-05T20:12:24.139Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/launch-flarenetworks.live/"}],"url":"https://domainspoof.com/brands/flare-network"},{"hostname":"lava.nodeshub.online","first_observed":"2026-11-05T19:57:04.920Z","first_published":"2026-11-05T20:12:24.139Z","brands":[],"dns":"resolved","resolved":["104.26.6.49","104.26.7.49","172.67.68.84"],"resolved_at":"2026-11-05T20:01:43Z","dns_checked_at":"2026-11-05T20:18:44.000Z","dns_since":"2026-11-05T20:18:44.000Z","findings":[{"id":"f32523jnofjxhznsvm3ne","kind":"reported_domain","summary":"Under nodeshub.online, reported by PhishDestroy","first_observed":"2026-11-05T19:57:04.920Z","first_published":"2026-11-05T20:12:24.139Z","source":"phishdestroy","source_name":"PhishDestroy","under":"nodeshub.online","source_url":"https://phishdestroy.io/domain/nodeshub.online/"}],"url":"https://domainspoof.com/live?show=all&q=lava.nodeshub.online"},{"hostname":"ledger-live-aplication.io","first_observed":"2026-11-05T20:05:35.030Z","first_published":"2026-11-05T20:12:24.139Z","brands":[{"id":"ledger","name":"Ledger","url":"https://domainspoof.com/brands/ledger"}],"dns":"resolved","resolved":["104.21.57.166","172.67.164.235","2606:4700:3035::ac43:a4eb","2606:4700:3037::6815:39a6"],"resolved_at":"2026-11-06T00:11:21Z","dns_checked_at":"2026-11-05T20:18:44.000Z","dns_since":"2026-11-05T20:18:44.000Z","findings":[{"id":"fmmboyvm2tgzcany2ikwq","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T20:05:35.030Z","first_published":"2026-11-05T20:12:24.139Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/brands/ledger"},{"hostname":"ledgerbryn-ai.live","first_observed":"2026-11-05T19:41:53.584Z","first_published":"2026-11-05T20:12:24.139Z","brands":[],"dns":"resolved","resolved":["104.21.69.232","172.67.215.111"],"resolved_at":"2026-11-05T19:53:41Z","dns_checked_at":"2026-11-05T20:18:44.000Z","dns_since":"2026-11-05T20:18:44.000Z","findings":[{"id":"fobismnyd2fsgay4oim45","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T19:41:53.584Z","first_published":"2026-11-05T20:12:24.139Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=ledgerbryn-ai.live"},{"hostname":"ledgr-com-strrt.pages.dev","first_observed":"2026-11-05T19:26:14.408Z","first_published":"2026-11-05T20:12:24.139Z","brands":[],"dns":"resolved","resolved":["172.66.44.83","172.66.47.173"],"resolved_at":"2026-11-05T19:26:52Z","dns_checked_at":"2026-11-05T20:18:44.000Z","dns_since":"2026-11-05T20:18:44.000Z","findings":[{"id":"fmqcczws7fejawiwte3i6","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T19:26:14.408Z","first_published":"2026-11-05T20:12:24.139Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=ledgr-com-strrt.pages.dev"},{"hostname":"ledgrs-oi--u.pages.dev","first_observed":"2026-11-05T19:36:57.164Z","first_published":"2026-11-05T20:12:24.139Z","brands":[],"dns":"resolved","resolved":["172.66.44.110","172.66.47.146"],"resolved_at":"2026-11-05T19:40:52Z","dns_checked_at":"2026-11-05T20:18:44.000Z","dns_since":"2026-11-05T20:18:44.000Z","findings":[{"id":"fqy7kdgdmii57c5oj72v2","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T19:36:57.164Z","first_published":"2026-11-05T20:12:24.139Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=ledgrs-oi--u.pages.dev"},{"hostname":"lekkirendovik-pl.live","first_observed":"2026-11-05T20:05:35.030Z","first_published":"2026-11-05T20:12:24.139Z","brands":[],"dns":"resolved","resolved":["104.21.69.186","172.67.212.47"],"resolved_at":"2026-11-05T20:09:05Z","dns_checked_at":"2026-11-05T20:18:44.000Z","dns_since":"2026-11-05T20:18:44.000Z","findings":[{"id":"fi5fkh7ohosr5ezw5353x","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T20:05:35.030Z","first_published":"2026-11-05T20:12:24.139Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=lekkirendovik-pl.live"},{"hostname":"leperixfin.live","first_observed":"2026-11-05T19:57:04.920Z","first_published":"2026-11-05T20:12:24.139Z","brands":[],"dns":"resolved","resolved":["104.21.20.136","172.67.192.239"],"resolved_at":"2026-11-05T20:01:44Z","dns_checked_at":"2026-11-05T20:18:44.000Z","dns_since":"2026-11-05T20:18:44.000Z","findings":[{"id":"fqusggihgvfkngg657jqi","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T19:57:04.920Z","first_published":"2026-11-05T20:12:24.139Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=leperixfin.live"},{"hostname":"lewdgamespc.com","first_observed":"2026-11-05T20:00:49.404Z","first_published":"2026-11-05T20:12:24.139Z","brands":[],"dns":"resolved","resolved":["104.21.84.156","172.67.194.145"],"resolved_at":"2026-11-05T20:06:41Z","dns_checked_at":"2026-11-05T20:18:44.000Z","dns_since":"2026-11-05T20:18:44.000Z","findings":[{"id":"f55h6h74c6odamjbxw3o2","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T20:00:49.404Z","first_published":"2026-11-05T20:12:24.139Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/lewdgamespc.com/"}],"url":"https://domainspoof.com/live?show=all&q=lewdgamespc.com"},{"hostname":"licitlogs.org.floscapital.com","first_observed":"2026-11-05T19:26:14.408Z","first_published":"2026-11-05T20:12:24.139Z","brands":[],"dns":"resolved","resolved":["23.153.104.17"],"resolved_at":"2026-11-05T19:26:52Z","dns_checked_at":"2026-11-05T20:18:44.000Z","dns_since":"2026-11-05T20:18:44.000Z","findings":[{"id":"fgd47p7xqu5xe3r33wcn2","kind":"reported_domain","summary":"Under floscapital.com, reported by PhishDestroy","first_observed":"2026-11-05T19:26:14.408Z","first_published":"2026-11-05T20:12:24.139Z","source":"phishdestroy","source_name":"PhishDestroy","under":"floscapital.com","source_url":"https://phishdestroy.io/domain/floscapital.com/"}],"url":"https://domainspoof.com/live?show=all&q=licitlogs.org.floscapital.com"},{"hostname":"liuyunge.com","first_observed":"2026-11-05T19:36:57.164Z","first_published":"2026-11-05T20:12:24.139Z","brands":[],"dns":"resolved","resolved":["104.21.90.116","172.67.200.101"],"resolved_at":"2026-11-05T19:40:52Z","dns_checked_at":"2026-11-05T20:18:44.000Z","dns_since":"2026-11-05T20:18:44.000Z","findings":[{"id":"f5c4f4oteamhtnheeyik7","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T19:36:57.164Z","first_published":"2026-11-05T20:12:24.139Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=liuyunge.com"},{"hostname":"llm.crypto-polis.org","first_observed":"2026-11-05T19:05:38.392Z","first_published":"2026-11-05T20:12:24.139Z","brands":[],"dns":"resolved","resolved":["185.178.208.132","185.178.208.182"],"resolved_at":"2026-11-05T19:12:09Z","dns_checked_at":"2026-11-05T20:18:44.000Z","dns_since":"2026-11-05T20:18:44.000Z","findings":[{"id":"fwgod4om7haroxmdc36cp","kind":"reported_domain","summary":"Under crypto-polis.org, reported by PhishDestroy","first_observed":"2026-11-05T19:05:38.392Z","first_published":"2026-11-05T20:12:24.139Z","source":"phishdestroy","source_name":"PhishDestroy","under":"crypto-polis.org","source_url":"https://phishdestroy.io/domain/crypto-polis.org/"}],"url":"https://domainspoof.com/live?show=all&q=llm.crypto-polis.org"},{"hostname":"lluuka.com","first_observed":"2026-11-05T19:57:04.920Z","first_published":"2026-11-05T20:12:24.139Z","brands":[],"dns":"resolved","resolved":["104.21.48.36","172.67.176.113"],"resolved_at":"2026-11-05T20:01:44Z","dns_checked_at":"2026-11-05T20:18:44.000Z","dns_since":"2026-11-05T20:18:44.000Z","findings":[{"id":"f7adsgg237j7jtnxxrnos","kind":"reported_domain","summary":"Listed by NPA 165 (finance and insurance)","first_observed":"2026-11-05T19:57:04.920Z","first_published":"2026-11-05T20:12:24.139Z","source":"npa","source_name":"NPA 165","claim":{"category":"finance and insurance"}}],"url":"https://domainspoof.com/live?show=all&q=lluuka.com"},{"hostname":"lovesorgupanelim.click","first_observed":"2026-11-05T20:00:49.404Z","first_published":"2026-11-05T20:12:24.139Z","brands":[],"dns":"resolved","resolved":["104.21.41.28","172.67.159.57"],"resolved_at":"2026-11-05T20:06:41Z","dns_checked_at":"2026-11-05T20:18:44.000Z","dns_since":"2026-11-05T20:18:44.000Z","findings":[{"id":"fcihszkkvax2ermrvkbe3","kind":"reported_domain","summary":"Listed by USOM","first_observed":"2026-11-05T20:00:49.404Z","first_published":"2026-11-05T20:12:24.139Z","source":"usom","source_name":"USOM"}],"url":"https://domainspoof.com/live?show=all&q=lovesorgupanelim.click"},{"hostname":"lqkdkjd.cn","first_observed":"2026-11-05T19:10:41.672Z","first_published":"2026-11-05T20:12:24.139Z","brands":[],"dns":"resolved","resolved":["104.21.85.85","172.67.203.250"],"resolved_at":"2026-11-05T19:19:23Z","dns_checked_at":"2026-11-05T20:18:44.000Z","dns_since":"2026-11-05T20:18:44.000Z","findings":[{"id":"fxip76lpph6nrpoutaie6","kind":"reported_domain","summary":"Listed by NPA 165 (information services)","first_observed":"2026-11-05T19:10:41.672Z","first_published":"2026-11-05T20:12:24.139Z","source":"npa","source_name":"NPA 165","claim":{"category":"information services"}}],"url":"https://domainspoof.com/live?show=all&q=lqkdkjd.cn"},{"hostname":"lucesdelrio.com","first_observed":"2026-11-05T18:56:58.162Z","first_published":"2026-11-05T20:12:24.139Z","brands":[],"dns":"resolved","resolved":["104.21.4.37","172.67.131.158"],"resolved_at":"2026-11-05T19:05:11Z","dns_checked_at":"2026-11-05T20:18:44.000Z","dns_since":"2026-11-05T20:18:44.000Z","findings":[{"id":"fl7ahlgbqegqyjtseywyg","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T18:56:58.162Z","first_published":"2026-11-05T20:12:24.139Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=lucesdelrio.com"},{"hostname":"mailru.site","first_observed":"2026-11-05T19:31:43.332Z","first_published":"2026-11-05T20:12:24.139Z","brands":[{"id":"mail-ru","name":"Mail.ru","url":"https://domainspoof.com/brands/mail-ru"}],"dns":"resolved","resolved":["172.232.24.161","172.232.24.235","172.234.25.42"],"resolved_at":"2026-11-05T20:18:45Z","dns_checked_at":"2026-11-05T20:18:45.000Z","dns_since":"2026-11-05T20:18:45.000Z","findings":[{"id":"fikbwyohzgf5unmctsjla","kind":"phishing_infrastructure","summary":"Resolved to 172.232.24.161, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T19:31:43.332Z","first_published":"2026-11-05T20:12:24.139Z","address":"172.232.24.161","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/mail-ru"},{"hostname":"mazaltrov.live","first_observed":"2026-11-05T19:46:44.250Z","first_published":"2026-11-05T20:12:24.139Z","brands":[],"dns":"resolved","resolved":["104.21.92.146","172.67.195.52"],"resolved_at":"2026-11-05T19:58:18Z","dns_checked_at":"2026-11-05T20:18:45.000Z","dns_since":"2026-11-05T20:18:45.000Z","findings":[{"id":"fbmn7xcsyq4uuni27saqt","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T19:46:44.250Z","first_published":"2026-11-05T20:12:24.139Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=mazaltrov.live"},{"hostname":"memorifundai.digital","first_observed":"2026-11-05T19:36:57.164Z","first_published":"2026-11-05T20:12:24.139Z","brands":[],"dns":"resolved","resolved":["185.62.58.101"],"resolved_at":"2026-11-06T00:47:24Z","dns_checked_at":"2026-11-05T20:18:45.000Z","dns_since":"2026-11-05T20:18:45.000Z","findings":[{"id":"fmyk47ofruw5mghufvmwg","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T19:36:57.164Z","first_published":"2026-11-05T20:12:24.139Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=memorifundai.digital"},{"hostname":"metrics.rollbux.com","first_observed":"2026-11-05T19:26:14.408Z","first_published":"2026-11-05T20:12:24.139Z","brands":[],"dns":"resolved","resolved":["104.20.18.209","172.66.162.224"],"resolved_at":"2026-11-05T19:26:52Z","dns_checked_at":"2026-11-05T20:18:45.000Z","dns_since":"2026-11-05T20:18:45.000Z","findings":[{"id":"fnl2l67qazvmllost7usm","kind":"reported_domain","summary":"Under rollbux.com, reported by PhishDestroy","first_observed":"2026-11-05T19:26:14.408Z","first_published":"2026-11-05T20:12:24.139Z","source":"phishdestroy","source_name":"PhishDestroy","under":"rollbux.com","source_url":"https://phishdestroy.io/domain/rollbux.com/"}],"url":"https://domainspoof.com/live?show=all&q=metrics.rollbux.com"},{"hostname":"mexcproe.co","first_observed":"2026-11-05T19:00:49.069Z","first_published":"2026-11-05T20:12:24.139Z","brands":[],"dns":"resolved","resolved":["104.21.61.149","172.67.211.119"],"resolved_at":"2026-11-06T02:52:04Z","dns_checked_at":"2026-11-05T20:18:45.000Z","dns_since":"2026-11-05T20:18:45.000Z","findings":[{"id":"fviqowv4vffgyjsvl6ctx","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T19:00:49.069Z","first_published":"2026-11-05T20:12:24.139Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=mexcproe.co"},{"hostname":"mi-servicio-disney-ayuda.com","first_observed":"2026-11-05T19:22:39.494Z","first_published":"2026-11-05T20:12:24.139Z","brands":[{"id":"disney-plus","name":"Disney+","url":"https://domainspoof.com/brands/disney-plus"}],"dns":"resolved","resolved":["180.178.191.25"],"resolved_at":"2026-11-05T20:18:45Z","dns_checked_at":"2026-11-05T20:18:45.000Z","dns_since":"2026-11-05T20:18:45.000Z","findings":[{"id":"f7e7l67dnfp7qq6ypr7ph","kind":"spamhaus_drop","summary":"Resolved to 180.178.191.25 on Spamhaus DROP","first_observed":"2026-11-05T19:22:39.494Z","first_published":"2026-11-05T20:12:24.139Z","address":"180.178.191.25","list":"spamhaus_drop","list_name":"Spamhaus DROP"}],"url":"https://domainspoof.com/brands/disney-plus"},{"hostname":"microcapallocation.xyz","first_observed":"2026-11-05T19:51:38.274Z","first_published":"2026-11-05T20:12:24.139Z","brands":[],"dns":"resolved","resolved":["104.21.52.211","172.67.204.24"],"resolved_at":"2026-11-06T00:21:26Z","dns_checked_at":"2026-11-05T20:18:45.000Z","dns_since":"2026-11-05T20:18:45.000Z","findings":[{"id":"f2neci7ofnstl6mzw52qk","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T19:51:38.274Z","first_published":"2026-11-05T20:12:24.139Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=microcapallocation.xyz"},{"hostname":"microsft-support.com","first_observed":"2026-11-05T19:36:57.164Z","first_published":"2026-11-05T20:12:24.139Z","brands":[],"dns":"resolved","resolved":["104.21.24.103","172.67.218.47"],"resolved_at":"2026-11-05T19:40:53Z","dns_checked_at":"2026-11-05T20:18:45.000Z","dns_since":"2026-11-05T20:18:45.000Z","findings":[{"id":"fis7eocgh7tpdpa6j3khh","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T19:36:57.164Z","first_published":"2026-11-05T20:12:24.139Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=microsft-support.com"},{"hostname":"ml.crypto-polis.org","first_observed":"2026-11-05T18:56:58.162Z","first_published":"2026-11-05T20:12:24.139Z","brands":[],"dns":"resolved","resolved":["185.178.208.132","185.178.208.182"],"resolved_at":"2026-11-05T19:05:12Z","dns_checked_at":"2026-11-05T20:18:45.000Z","dns_since":"2026-11-05T20:18:45.000Z","findings":[{"id":"fqlqzkntxssj5ohn66ncd","kind":"reported_domain","summary":"Under crypto-polis.org, reported by PhishDestroy","first_observed":"2026-11-05T18:56:58.162Z","first_published":"2026-11-05T20:12:24.139Z","source":"phishdestroy","source_name":"PhishDestroy","under":"crypto-polis.org","source_url":"https://phishdestroy.io/domain/crypto-polis.org/"}],"url":"https://domainspoof.com/live?show=all&q=ml.crypto-polis.org"},{"hostname":"moonshot-gems.money","first_observed":"2026-11-05T18:56:58.162Z","first_published":"2026-11-05T20:12:24.139Z","brands":[],"dns":"resolved","resolved":["104.21.0.217","172.67.128.81"],"resolved_at":"2026-11-05T19:05:12Z","dns_checked_at":"2026-11-05T20:18:45.000Z","dns_since":"2026-11-05T20:18:45.000Z","findings":[{"id":"f5uh37fupbeyasg6vmuvi","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T18:56:58.162Z","first_published":"2026-11-05T20:12:24.139Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/moonshot-gems.money/"}],"url":"https://domainspoof.com/live?show=all&q=moonshot-gems.money"},{"hostname":"mzeldravoqai.live","first_observed":"2026-11-05T19:41:53.584Z","first_published":"2026-11-05T20:12:24.139Z","brands":[],"dns":"resolved","resolved":["104.21.88.102","172.67.176.80"],"resolved_at":"2026-11-05T19:53:46Z","dns_checked_at":"2026-11-05T20:18:45.000Z","dns_since":"2026-11-05T20:18:45.000Z","findings":[{"id":"ft247prujkifictvokcgf","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T19:41:53.584Z","first_published":"2026-11-05T20:12:24.139Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=mzeldravoqai.live"},{"hostname":"naira-refinery-ai.com","first_observed":"2026-11-05T19:51:38.274Z","first_published":"2026-11-05T20:12:24.139Z","brands":[],"dns":"resolved","resolved":["104.21.84.196","172.67.196.60"],"resolved_at":"2026-11-06T07:46:58Z","dns_checked_at":"2026-11-05T20:18:45.000Z","dns_since":"2026-11-05T20:18:45.000Z","findings":[{"id":"fm4eo5xzrqsunlh7cyfbr","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T19:51:38.274Z","first_published":"2026-11-05T20:12:24.139Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=naira-refinery-ai.com"},{"hostname":"nationalr.digital","first_observed":"2026-11-05T19:05:38.392Z","first_published":"2026-11-05T20:12:24.139Z","brands":[],"dns":"resolved","resolved":["104.21.69.2","172.67.202.33"],"resolved_at":"2026-11-05T19:12:12Z","dns_checked_at":"2026-11-05T20:18:45.000Z","dns_since":"2026-11-05T20:18:45.000Z","findings":[{"id":"fpnihqxu35ajqfazp4rge","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T19:05:38.392Z","first_published":"2026-11-05T20:12:24.139Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=nationalr.digital"},{"hostname":"nazvelgorn-es.live","first_observed":"2026-11-05T20:00:49.404Z","first_published":"2026-11-05T20:12:24.139Z","brands":[],"dns":"resolved","resolved":["104.21.96.17","172.67.150.65"],"resolved_at":"2026-11-05T20:06:42Z","dns_checked_at":"2026-11-05T20:18:45.000Z","dns_since":"2026-11-05T20:18:45.000Z","findings":[{"id":"fm2owo5xvpdelerk7d7mc","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T20:00:49.404Z","first_published":"2026-11-05T20:12:24.139Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=nazvelgorn-es.live"},{"hostname":"nazvelgorn-nl.live","first_observed":"2026-11-05T19:41:53.584Z","first_published":"2026-11-05T20:12:24.139Z","brands":[],"dns":"resolved","resolved":["104.21.83.10","172.67.166.194"],"resolved_at":"2026-11-05T19:53:47Z","dns_checked_at":"2026-11-05T20:18:45.000Z","dns_since":"2026-11-05T20:18:45.000Z","findings":[{"id":"f4kli3i7wurcelpoakdq5","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T19:41:53.584Z","first_published":"2026-11-05T20:12:24.139Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=nazvelgorn-nl.live"},{"hostname":"nazvelgorn-ro.live","first_observed":"2026-11-05T19:05:38.392Z","first_published":"2026-11-05T20:12:24.139Z","brands":[],"dns":"resolved","resolved":["104.21.78.144","172.67.222.200"],"resolved_at":"2026-11-05T19:12:12Z","dns_checked_at":"2026-11-05T20:18:45.000Z","dns_since":"2026-11-05T20:18:45.000Z","findings":[{"id":"ffgbpwdxuwwtzdwlw66ex","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T19:05:38.392Z","first_published":"2026-11-05T20:12:24.139Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=nazvelgorn-ro.live"},{"hostname":"nazvelqorn-nl.live","first_observed":"2026-11-05T19:05:38.392Z","first_published":"2026-11-05T20:12:24.139Z","brands":[],"dns":"resolved","resolved":["104.21.14.110","172.67.158.169"],"resolved_at":"2026-11-05T19:12:13Z","dns_checked_at":"2026-11-05T20:18:45.000Z","dns_since":"2026-11-05T20:18:45.000Z","findings":[{"id":"fo5rm5fjnucjhwjlxfatq","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T19:05:38.392Z","first_published":"2026-11-05T20:12:24.139Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=nazvelqorn-nl.live"},{"hostname":"neon-moss.com","first_observed":"2026-11-05T19:10:41.672Z","first_published":"2026-11-05T20:12:24.139Z","brands":[],"dns":"resolved","resolved":["104.21.4.112","172.67.132.5"],"resolved_at":"2026-11-05T19:19:27Z","dns_checked_at":"2026-11-05T20:18:45.000Z","dns_since":"2026-11-05T20:18:45.000Z","findings":[{"id":"figaai2pe44vg6qagyaki","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T19:10:41.672Z","first_published":"2026-11-05T20:12:24.139Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=neon-moss.com"},{"hostname":"neosoul.digital","first_observed":"2026-11-05T20:05:35.030Z","first_published":"2026-11-05T20:12:24.139Z","brands":[],"dns":"resolved","resolved":["104.21.16.39","172.67.166.22"],"resolved_at":"2026-11-05T20:09:06Z","dns_checked_at":"2026-11-05T20:18:45.000Z","dns_since":"2026-11-05T20:18:45.000Z","findings":[{"id":"fmkdclcrk7y6rcdrdhwek","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T20:05:35.030Z","first_published":"2026-11-05T20:12:24.139Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=neosoul.digital"},{"hostname":"neovalor.org","first_observed":"2026-11-05T19:26:14.408Z","first_published":"2026-11-05T20:12:24.139Z","brands":[],"dns":"resolved","resolved":["104.21.74.184","172.67.161.57"],"resolved_at":"2026-11-05T19:26:52Z","dns_checked_at":"2026-11-05T20:18:45.000Z","dns_since":"2026-11-05T20:18:45.000Z","findings":[{"id":"fnwc27bh2czfianagenlq","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T19:26:14.408Z","first_published":"2026-11-05T20:12:24.139Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=neovalor.org"},{"hostname":"new-s-uites.pages.dev","first_observed":"2026-11-05T19:36:57.164Z","first_published":"2026-11-05T20:12:24.139Z","brands":[],"dns":"resolved","resolved":["172.66.44.183","172.66.47.73"],"resolved_at":"2026-11-05T19:40:54Z","dns_checked_at":"2026-11-05T20:18:45.000Z","dns_since":"2026-11-05T20:18:45.000Z","findings":[{"id":"fzkmoautrryezfhsg3ekk","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T19:36:57.164Z","first_published":"2026-11-05T20:12:24.139Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=new-s-uites.pages.dev"},{"hostname":"node.blockblend.io","first_observed":"2026-11-05T19:31:10.785Z","first_published":"2026-11-05T20:12:24.139Z","brands":[],"dns":"resolved","resolved":["104.21.52.60","172.67.195.246"],"resolved_at":"2026-11-05T19:31:43Z","dns_checked_at":"2026-11-05T20:18:45.000Z","dns_since":"2026-11-05T20:18:45.000Z","findings":[{"id":"fme2pclpgy5a6nhm5xoaj","kind":"reported_domain","summary":"Under blockblend.io, reported by PhishDestroy","first_observed":"2026-11-05T19:31:10.785Z","first_published":"2026-11-05T20:12:24.139Z","source":"phishdestroy","source_name":"PhishDestroy","under":"blockblend.io","source_url":"https://phishdestroy.io/domain/blockblend.io/"}],"url":"https://domainspoof.com/live?show=all&q=node.blockblend.io"},{"hostname":"noreply-notificacion.es","first_observed":"2026-11-05T19:41:53.584Z","first_published":"2026-11-05T20:12:24.139Z","brands":[],"dns":"resolved","resolved":["37.27.34.85","2a02:4780:27:2156:0:153d:dd82:4"],"resolved_at":"2026-11-06T06:54:36Z","dns_checked_at":"2026-11-05T20:18:45.000Z","dns_since":"2026-11-05T20:18:45.000Z","findings":[{"id":"fggidpk4rde72umscsekn","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T19:41:53.584Z","first_published":"2026-11-05T20:12:24.139Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/noreply-notificacion.es/"}],"url":"https://domainspoof.com/live?show=all&q=noreply-notificacion.es"},{"hostname":"norqelaxis.live","first_observed":"2026-11-05T19:41:53.584Z","first_published":"2026-11-05T20:12:24.139Z","brands":[],"dns":"resolved","resolved":["104.21.74.36","172.67.197.49"],"resolved_at":"2026-11-05T19:53:47Z","dns_checked_at":"2026-11-05T20:18:45.000Z","dns_since":"2026-11-05T20:18:45.000Z","findings":[{"id":"f25rfc4vo664lx6ca5mcj","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T19:41:53.584Z","first_published":"2026-11-05T20:12:24.139Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=norqelaxis.live"},{"hostname":"nytheral.click","first_observed":"2026-11-05T19:51:38.274Z","first_published":"2026-11-05T20:12:24.139Z","brands":[],"dns":"resolved","resolved":["185.62.56.121"],"resolved_at":"2026-11-05T19:52:13Z","dns_checked_at":"2026-11-05T20:18:45.000Z","dns_since":"2026-11-05T20:18:45.000Z","findings":[{"id":"fz7gtk23wvre27kgtbe2g","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T19:51:38.274Z","first_published":"2026-11-05T20:12:24.139Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=nytheral.click"},{"hostname":"obligoria.live","first_observed":"2026-11-05T19:36:57.164Z","first_published":"2026-11-05T20:12:24.139Z","brands":[],"dns":"resolved","resolved":["104.21.95.114","172.67.144.168"],"resolved_at":"2026-11-06T00:26:30Z","dns_checked_at":"2026-11-05T20:18:45.000Z","dns_since":"2026-11-05T20:18:45.000Z","findings":[{"id":"fcspar2hvitiwb5bvbdt3","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T19:36:57.164Z","first_published":"2026-11-05T20:12:24.139Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=obligoria.live"},{"hostname":"ojephe.daunt.link","first_observed":"2026-11-05T19:57:04.920Z","first_published":"2026-11-05T20:12:24.139Z","brands":[],"dns":"resolved","resolved":["185.149.120.195"],"resolved_at":"2026-11-05T20:01:46Z","dns_checked_at":"2026-11-05T20:18:45.000Z","dns_since":"2026-11-05T20:18:45.000Z","findings":[{"id":"fdjn56y6nj4ll67ylf5xt","kind":"reported_domain","summary":"Under daunt.link, reported by PhishDestroy","first_observed":"2026-11-05T19:57:04.920Z","first_published":"2026-11-05T20:12:24.139Z","source":"phishdestroy","source_name":"PhishDestroy","under":"daunt.link","source_url":"https://phishdestroy.io/domain/daunt.link/"}],"url":"https://domainspoof.com/live?show=all&q=ojephe.daunt.link"},{"hostname":"one.link","first_observed":"2026-11-05T19:26:14.408Z","first_published":"2026-11-05T20:12:24.139Z","brands":[],"dns":"resolved","resolved":["54.215.31.113"],"resolved_at":"2026-11-05T19:26:52Z","dns_checked_at":"2026-11-05T20:18:45.000Z","dns_since":"2026-11-05T20:18:45.000Z","findings":[{"id":"fjp7g72pphkcjmuozbv2l","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T19:26:14.408Z","first_published":"2026-11-05T20:12:24.139Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/one.link/"}],"url":"https://domainspoof.com/live?show=all&q=one.link"},{"hostname":"opal-paths.com","first_observed":"2026-11-05T19:16:29.893Z","first_published":"2026-11-05T20:12:24.139Z","brands":[],"dns":"resolved","resolved":["104.21.17.134","172.67.176.203"],"resolved_at":"2026-11-05T19:25:22Z","dns_checked_at":"2026-11-05T20:18:45.000Z","dns_since":"2026-11-05T20:18:45.000Z","findings":[{"id":"fgsbqbrs26mi5ebfotivp","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T19:16:29.893Z","first_published":"2026-11-05T20:12:24.139Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=opal-paths.com"},{"hostname":"ordnf.com","first_observed":"2026-11-05T19:51:38.274Z","first_published":"2026-11-05T20:12:24.139Z","brands":[],"dns":"resolved","resolved":["104.21.79.240","172.67.172.4"],"resolved_at":"2026-11-06T00:15:57Z","dns_checked_at":"2026-11-05T20:18:45.000Z","dns_since":"2026-11-05T20:18:45.000Z","findings":[{"id":"fcrwefdcrm7scv5egxaxv","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T19:51:38.274Z","first_published":"2026-11-05T20:12:24.139Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=ordnf.com"},{"hostname":"orkflow.kingdom-dmc.com","first_observed":"2026-11-05T19:46:44.250Z","first_published":"2026-11-05T20:12:24.139Z","brands":[],"dns":"resolved","resolved":["185.215.4.42"],"resolved_at":"2026-11-05T19:58:20Z","dns_checked_at":"2026-11-05T20:18:45.000Z","dns_since":"2026-11-05T20:18:45.000Z","findings":[{"id":"fzmd7b5ycs3qhzpqrv6mc","kind":"reported_domain","summary":"Under kingdom-dmc.com, listed by MetaMask","first_observed":"2026-11-05T19:46:44.250Z","first_published":"2026-11-05T20:12:24.139Z","source":"metamask","source_name":"MetaMask","under":"kingdom-dmc.com"}],"url":"https://domainspoof.com/live?show=all&q=orkflow.kingdom-dmc.com"},{"hostname":"orwinshove.net","first_observed":"2026-11-05T19:51:38.274Z","first_published":"2026-11-05T20:12:24.139Z","brands":[],"dns":"resolved","resolved":["104.21.68.188","172.67.197.213"],"resolved_at":"2026-11-05T19:52:13Z","dns_checked_at":"2026-11-05T20:18:45.000Z","dns_since":"2026-11-05T20:18:45.000Z","findings":[{"id":"frg7iizvxblwzvh6dyued","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T19:51:38.274Z","first_published":"2026-11-05T20:12:24.139Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=orwinshove.net"},{"hostname":"pantedomme.pro","first_observed":"2026-11-05T19:41:53.584Z","first_published":"2026-11-05T20:12:24.139Z","brands":[],"dns":"resolved","resolved":["104.21.89.251","172.67.166.109"],"resolved_at":"2026-11-05T19:53:49Z","dns_checked_at":"2026-11-05T20:18:45.000Z","dns_since":"2026-11-05T20:18:45.000Z","findings":[{"id":"f5i7ooosy6kgpxgvknguj","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T19:41:53.584Z","first_published":"2026-11-05T20:12:24.139Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=pantedomme.pro"},{"hostname":"parsatsite.shop","first_observed":"2026-11-05T19:31:10.785Z","first_published":"2026-11-05T20:12:24.139Z","brands":[],"dns":"resolved","resolved":["104.17.177.238"],"resolved_at":"2026-11-05T19:31:43Z","dns_checked_at":"2026-11-05T20:18:45.000Z","dns_since":"2026-11-05T20:18:45.000Z","findings":[{"id":"fzrvzbdhfb6crtj7d6wdo","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T19:31:10.785Z","first_published":"2026-11-05T20:12:24.139Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=parsatsite.shop"},{"hostname":"patrevance.com","first_observed":"2026-11-05T19:31:10.785Z","first_published":"2026-11-05T20:12:24.139Z","brands":[],"dns":"resolved","resolved":["104.21.50.62","172.67.157.139"],"resolved_at":"2026-11-05T19:31:43Z","dns_checked_at":"2026-11-05T20:18:45.000Z","dns_since":"2026-11-05T20:18:45.000Z","findings":[{"id":"ftplf5gey6wfykk2bpg7z","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T19:31:10.785Z","first_published":"2026-11-05T20:12:24.139Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=patrevance.com"},{"hostname":"pay-bitrefill.com-cu01-esim-gift.com","first_observed":"2026-11-05T19:40:57.909Z","first_published":"2026-11-05T20:12:24.139Z","brands":[{"id":"bitrefill","name":"Bitrefill","url":"https://domainspoof.com/brands/bitrefill"}],"dns":"resolved","resolved":["62.60.226.39"],"resolved_at":"2026-11-05T20:18:45Z","dns_checked_at":"2026-11-05T20:18:45.000Z","dns_since":"2026-11-05T20:18:45.000Z","findings":[{"id":"f4nlqci63hwf4xf6aig6l","kind":"spamhaus_drop","summary":"Resolved to 62.60.226.39 on Spamhaus DROP","first_observed":"2026-11-05T19:40:57.909Z","first_published":"2026-11-05T20:12:24.139Z","address":"62.60.226.39","list":"spamhaus_drop","list_name":"Spamhaus DROP"}],"url":"https://domainspoof.com/brands/bitrefill"},{"hostname":"payment.socialvisor.ru","first_observed":"2026-11-05T19:46:44.250Z","first_published":"2026-11-05T20:12:24.139Z","brands":[],"dns":"resolved","resolved":["91.215.41.91"],"resolved_at":"2026-11-05T19:58:21Z","dns_checked_at":"2026-11-05T20:18:45.000Z","dns_since":"2026-11-05T20:18:45.000Z","findings":[{"id":"f6wmsxip7ugb3hzfnswdb","kind":"reported_domain","summary":"Under socialvisor.ru, reported by PhishDestroy","first_observed":"2026-11-05T19:46:44.250Z","first_published":"2026-11-05T20:12:24.139Z","source":"phishdestroy","source_name":"PhishDestroy","under":"socialvisor.ru","source_url":"https://phishdestroy.io/domain/socialvisor.ru/"}],"url":"https://domainspoof.com/live?show=all&q=payment.socialvisor.ru"},{"hostname":"paywall-app.coinssend.com","first_observed":"2026-11-05T19:46:44.250Z","first_published":"2026-11-05T20:12:24.139Z","brands":[],"dns":"resolved","resolved":["104.21.32.45","172.67.182.206"],"resolved_at":"2026-11-05T19:58:21Z","dns_checked_at":"2026-11-05T20:18:45.000Z","dns_since":"2026-11-05T20:18:45.000Z","findings":[{"id":"fzhmqdrjlzzrum4abycdw","kind":"reported_domain","summary":"Under coinssend.com, reported by PhishDestroy","first_observed":"2026-11-05T19:46:44.250Z","first_published":"2026-11-05T20:12:24.139Z","source":"phishdestroy","source_name":"PhishDestroy","under":"coinssend.com","source_url":"https://phishdestroy.io/domain/coinssend.com/"}],"url":"https://domainspoof.com/live?show=all&q=paywall-app.coinssend.com"},{"hostname":"paywall.coinssend.com","first_observed":"2026-11-05T19:46:44.250Z","first_published":"2026-11-05T20:12:24.139Z","brands":[],"dns":"resolved","resolved":["104.21.32.45","172.67.182.206"],"resolved_at":"2026-11-05T19:58:21Z","dns_checked_at":"2026-11-05T20:18:45.000Z","dns_since":"2026-11-05T20:18:45.000Z","findings":[{"id":"fqgez4apbncrl5gdvzrfe","kind":"reported_domain","summary":"Under coinssend.com, reported by PhishDestroy","first_observed":"2026-11-05T19:46:44.250Z","first_published":"2026-11-05T20:12:24.139Z","source":"phishdestroy","source_name":"PhishDestroy","under":"coinssend.com","source_url":"https://phishdestroy.io/domain/coinssend.com/"}],"url":"https://domainspoof.com/live?show=all&q=paywall.coinssend.com"},{"hostname":"pfidifdjfheujdfherws.cryptopayment.xyz","first_observed":"2026-11-05T19:51:38.274Z","first_published":"2026-11-05T20:12:24.139Z","brands":[],"dns":"resolved","resolved":["143.244.211.82"],"resolved_at":"2026-11-05T19:52:13Z","dns_checked_at":"2026-11-05T20:18:45.000Z","dns_since":"2026-11-05T20:18:45.000Z","findings":[{"id":"fx77uyb7vz26nvrptkvhb","kind":"reported_domain","summary":"Under cryptopayment.xyz, listed by MetaMask","first_observed":"2026-11-05T19:51:38.274Z","first_published":"2026-11-05T20:12:24.139Z","source":"metamask","source_name":"MetaMask","under":"cryptopayment.xyz"}],"url":"https://domainspoof.com/live?show=all&q=pfidifdjfheujdfherws.cryptopayment.xyz"},{"hostname":"phanextension.app","first_observed":"2026-11-05T20:05:35.030Z","first_published":"2026-11-05T20:12:24.139Z","brands":[],"dns":"resolved","resolved":["185.158.133.1"],"resolved_at":"2026-11-05T20:09:08Z","dns_checked_at":"2026-11-05T20:18:45.000Z","dns_since":"2026-11-05T20:18:45.000Z","findings":[{"id":"fvfqygult66oof3dxyibj","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T20:05:35.030Z","first_published":"2026-11-05T20:12:24.139Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=phanextension.app"},{"hostname":"plovurikant-it.live","first_observed":"2026-11-05T20:05:35.030Z","first_published":"2026-11-05T20:12:24.139Z","brands":[],"dns":"resolved","resolved":["104.21.29.145","172.67.149.99"],"resolved_at":"2026-11-05T20:09:08Z","dns_checked_at":"2026-11-05T20:18:45.000Z","dns_since":"2026-11-05T20:18:45.000Z","findings":[{"id":"f53xnjfckubupkyyxj7hr","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T20:05:35.030Z","first_published":"2026-11-05T20:12:24.139Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=plovurikant-it.live"},{"hostname":"pochta.login.pay.avito.qiwbpchh9caly81t.rhxyvcq9vvts2ld9.r.mail.leankoala.com","first_observed":"2026-11-05T19:19:35.305Z","first_published":"2026-11-05T20:12:24.139Z","brands":[{"id":"avito","name":"Avito","url":"https://domainspoof.com/brands/avito"},{"id":"russian-post","name":"Russian Post","url":"https://domainspoof.com/brands/russian-post"}],"dns":"resolved","resolved":["172.246.243.65"],"resolved_at":"2026-11-05T20:18:45Z","dns_checked_at":"2026-11-05T20:18:45.000Z","dns_since":"2026-11-05T20:18:45.000Z","findings":[{"id":"fcsg3o72njunihzwsi6hr","kind":"phishing_infrastructure","summary":"Resolved to 172.246.243.65, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T19:19:35.305Z","first_published":"2026-11-05T20:12:24.139Z","address":"172.246.243.65","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/avito"},{"hostname":"polkavirexuno.com","first_observed":"2026-11-05T19:26:14.408Z","first_published":"2026-11-05T20:12:24.139Z","brands":[],"dns":"resolved","resolved":["104.21.65.79","172.67.189.102"],"resolved_at":"2026-11-05T19:26:52Z","dns_checked_at":"2026-11-05T20:18:45.000Z","dns_since":"2026-11-05T20:18:45.000Z","findings":[{"id":"ffbny72fbnokwyflszpmh","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T19:26:14.408Z","first_published":"2026-11-05T20:12:24.139Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=polkavirexuno.com"},{"hostname":"polyrun.xyz","first_observed":"2026-11-05T19:10:41.672Z","first_published":"2026-11-05T20:12:24.139Z","brands":[],"dns":"resolved","resolved":["104.21.20.58","172.67.191.207"],"resolved_at":"2026-11-05T19:19:35Z","dns_checked_at":"2026-11-05T20:18:45.000Z","dns_since":"2026-11-05T20:18:45.000Z","findings":[{"id":"fg4tzsp7ioh53f5ktiu7l","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T19:10:41.672Z","first_published":"2026-11-05T20:12:24.139Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/polyrun.xyz/"}],"url":"https://domainspoof.com/live?show=all&q=polyrun.xyz"},{"hostname":"portal.0gfoundation.dev","first_observed":"2026-11-05T19:10:41.672Z","first_published":"2026-11-05T20:12:24.139Z","brands":[],"dns":"resolved","resolved":["64.29.17.65","216.198.79.65"],"resolved_at":"2026-11-05T19:19:35Z","dns_checked_at":"2026-11-05T20:18:45.000Z","dns_since":"2026-11-05T20:18:45.000Z","findings":[{"id":"frl3fvzmpla7qgen3jgk7","kind":"reported_domain","summary":"Under 0gfoundation.dev, listed by MetaMask","first_observed":"2026-11-05T19:10:41.672Z","first_published":"2026-11-05T20:12:24.139Z","source":"metamask","source_name":"MetaMask","under":"0gfoundation.dev"}],"url":"https://domainspoof.com/live?show=all&q=portal.0gfoundation.dev"},{"hostname":"portal.tor.taxi","first_observed":"2026-11-05T20:05:35.030Z","first_published":"2026-11-05T20:12:24.139Z","brands":[],"dns":"resolved","resolved":["185.129.100.227"],"resolved_at":"2026-11-05T20:09:08Z","dns_checked_at":"2026-11-05T20:18:45.000Z","dns_since":"2026-11-05T20:18:45.000Z","findings":[{"id":"fyojugwthlvz3dufmikfl","kind":"reported_domain","summary":"Under tor.taxi, reported by PhishDestroy","first_observed":"2026-11-05T20:05:35.030Z","first_published":"2026-11-05T20:12:24.139Z","source":"phishdestroy","source_name":"PhishDestroy","under":"tor.taxi","source_url":"https://phishdestroy.io/domain/tor.taxi/"}],"url":"https://domainspoof.com/live?show=all&q=portal.tor.taxi"},{"hostname":"prefect.socialvisor.ru","first_observed":"2026-11-05T18:56:58.162Z","first_published":"2026-11-05T20:12:24.139Z","brands":[],"dns":"resolved","resolved":["91.215.41.91"],"resolved_at":"2026-11-05T19:05:13Z","dns_checked_at":"2026-11-05T20:18:45.000Z","dns_since":"2026-11-05T20:18:45.000Z","findings":[{"id":"fldclvxtpsopxxbpcffg3","kind":"reported_domain","summary":"Under socialvisor.ru, reported by PhishDestroy","first_observed":"2026-11-05T18:56:58.162Z","first_published":"2026-11-05T20:12:24.139Z","source":"phishdestroy","source_name":"PhishDestroy","under":"socialvisor.ru","source_url":"https://phishdestroy.io/domain/socialvisor.ru/"}],"url":"https://domainspoof.com/live?show=all&q=prefect.socialvisor.ru"},{"hostname":"prestigeluxerise-fr.live","first_observed":"2026-11-05T19:26:14.408Z","first_published":"2026-11-05T20:12:24.139Z","brands":[],"dns":"resolved","resolved":["104.21.17.31","172.67.219.228"],"resolved_at":"2026-11-05T19:26:52Z","dns_checked_at":"2026-11-05T20:18:45.000Z","dns_since":"2026-11-05T20:18:45.000Z","findings":[{"id":"fh2l6iczacbczm7dy2jss","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T19:26:14.408Z","first_published":"2026-11-05T20:12:24.139Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=prestigeluxerise-fr.live"},{"hostname":"pro-ethbase.com","first_observed":"2026-11-05T19:26:14.408Z","first_published":"2026-11-05T20:12:24.139Z","brands":[],"dns":"resolved","resolved":["104.21.26.156","172.67.137.34"],"resolved_at":"2026-11-05T19:26:52Z","dns_checked_at":"2026-11-05T20:18:45.000Z","dns_since":"2026-11-05T20:18:45.000Z","findings":[{"id":"fjndb5sqywop7aknbqqtb","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T19:26:14.408Z","first_published":"2026-11-05T20:12:24.139Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=pro-ethbase.com"},{"hostname":"prulkovizan-es.live","first_observed":"2026-11-05T19:57:04.920Z","first_published":"2026-11-05T20:12:24.139Z","brands":[],"dns":"resolved","resolved":["104.21.38.146","172.67.223.167"],"resolved_at":"2026-11-05T20:01:47Z","dns_checked_at":"2026-11-05T20:18:45.000Z","dns_since":"2026-11-05T20:18:45.000Z","findings":[{"id":"fyjzmqrylxed4tkzzfkx7","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T19:57:04.920Z","first_published":"2026-11-05T20:12:24.139Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=prulkovizan-es.live"},{"hostname":"prulkovizan-nl.live","first_observed":"2026-11-05T19:05:38.392Z","first_published":"2026-11-05T20:12:24.139Z","brands":[],"dns":"resolved","resolved":["104.21.50.253","172.67.215.120"],"resolved_at":"2026-11-05T19:12:20Z","dns_checked_at":"2026-11-05T20:18:45.000Z","dns_since":"2026-11-05T20:18:45.000Z","findings":[{"id":"fkmjujdx2q6z2r7f5oeds","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T19:05:38.392Z","first_published":"2026-11-05T20:12:24.139Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=prulkovizan-nl.live"},{"hostname":"prulkovizan-ro.live","first_observed":"2026-11-05T18:56:58.162Z","first_published":"2026-11-05T20:12:24.139Z","brands":[],"dns":"resolved","resolved":["104.21.44.190","172.67.203.60"],"resolved_at":"2026-11-05T19:05:14Z","dns_checked_at":"2026-11-05T20:18:45.000Z","dns_since":"2026-11-05T20:18:45.000Z","findings":[{"id":"f4jubgv7ark6rkrzoljpd","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T18:56:58.162Z","first_published":"2026-11-05T20:12:24.139Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=prulkovizan-ro.live"},{"hostname":"psigt.online","first_observed":"2026-11-05T19:21:29.552Z","first_published":"2026-11-05T20:12:24.139Z","brands":[],"dns":"no_address","resolved":[],"resolved_at":"2026-11-05T19:22:39Z","dns_checked_at":"2026-11-06T12:27:48.000Z","findings":[{"id":"fpn7atsqvlxbmvnbu6xsb","kind":"reported_domain","summary":"Listed by NPA 165 (e-commerce)","first_observed":"2026-11-05T19:21:29.552Z","first_published":"2026-11-05T20:12:24.139Z","source":"npa","source_name":"NPA 165","claim":{"category":"e-commerce"}}],"url":"https://domainspoof.com/live?show=all&q=psigt.online"},{"hostname":"psiodripar.site","first_observed":"2026-11-05T19:26:14.408Z","first_published":"2026-11-05T20:12:24.139Z","brands":[],"dns":"resolved","resolved":["104.21.3.129","172.67.130.183"],"resolved_at":"2026-11-06T03:21:34Z","dns_checked_at":"2026-11-05T20:18:45.000Z","dns_since":"2026-11-05T20:18:45.000Z","findings":[{"id":"fv3fyoi72rd23agu7kqz7","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T19:26:14.408Z","first_published":"2026-11-05T20:12:24.139Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=psiodripar.site"},{"hostname":"ptildozexai.live","first_observed":"2026-11-05T20:05:35.030Z","first_published":"2026-11-05T20:12:24.139Z","brands":[],"dns":"resolved","resolved":["104.21.25.95","172.67.133.248"],"resolved_at":"2026-11-05T20:09:09Z","dns_checked_at":"2026-11-05T20:18:45.000Z","dns_since":"2026-11-05T20:18:45.000Z","findings":[{"id":"fem6itqj6tu3g5eoxmuuy","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T20:05:35.030Z","first_published":"2026-11-05T20:12:24.139Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=ptildozexai.live"},{"hostname":"qevoraxisapp-de.live","first_observed":"2026-11-05T19:05:38.392Z","first_published":"2026-11-05T20:12:24.139Z","brands":[],"dns":"resolved","resolved":["104.21.66.166","172.67.205.204"],"resolved_at":"2026-11-05T19:12:21Z","dns_checked_at":"2026-11-05T20:18:45.000Z","dns_since":"2026-11-05T20:18:45.000Z","findings":[{"id":"fl4b4ojtstdpam4afer4o","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T19:05:38.392Z","first_published":"2026-11-05T20:12:24.139Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=qevoraxisapp-de.live"},{"hostname":"rainbet-hu.com","first_observed":"2026-11-05T19:36:57.164Z","first_published":"2026-11-05T20:12:24.139Z","brands":[],"dns":"resolved","resolved":["104.21.86.102","172.67.217.213"],"resolved_at":"2026-11-05T19:40:59Z","dns_checked_at":"2026-11-05T20:18:45.000Z","dns_since":"2026-11-05T20:18:45.000Z","findings":[{"id":"frb6qfbyabmkg3bi2pa5c","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T19:36:57.164Z","first_published":"2026-11-05T20:12:24.139Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=rainbet-hu.com"},{"hostname":"rainbet-promo-code.net","first_observed":"2026-11-05T19:10:41.672Z","first_published":"2026-11-05T20:12:24.139Z","brands":[],"dns":"resolved","resolved":["104.21.53.136","172.67.213.33"],"resolved_at":"2026-11-06T00:32:16Z","dns_checked_at":"2026-11-05T20:18:45.000Z","dns_since":"2026-11-05T20:18:45.000Z","findings":[{"id":"fecskvrq7d7tjb5ux56r4","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T19:10:41.672Z","first_published":"2026-11-05T20:12:24.139Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=rainbet-promo-code.net"},{"hostname":"rapid-escapes.com","first_observed":"2026-11-05T19:16:29.893Z","first_published":"2026-11-05T20:12:24.139Z","brands":[],"dns":"resolved","resolved":["104.21.48.2","172.67.175.36"],"resolved_at":"2026-11-05T19:25:23Z","dns_checked_at":"2026-11-05T20:18:45.000Z","dns_since":"2026-11-05T20:18:45.000Z","findings":[{"id":"fq3uh7ciwg576geicm43m","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T19:16:29.893Z","first_published":"2026-11-05T20:12:24.139Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=rapid-escapes.com"},{"hostname":"register-osero.org","first_observed":"2026-11-05T19:16:29.893Z","first_published":"2026-11-05T20:12:24.139Z","brands":[],"dns":"resolved","resolved":["104.21.32.227","172.67.156.81"],"resolved_at":"2026-11-05T19:25:24Z","dns_checked_at":"2026-11-05T20:18:45.000Z","dns_since":"2026-11-05T20:18:45.000Z","findings":[{"id":"fiuiajvhlcjsk4naoo7mu","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T19:16:29.893Z","first_published":"2026-11-05T20:12:24.139Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=register-osero.org"},{"hostname":"rent.posinu.com","first_observed":"2026-11-05T19:51:38.274Z","first_published":"2026-11-05T20:12:24.139Z","brands":[],"dns":"resolved","resolved":["164.92.222.238"],"resolved_at":"2026-11-05T19:52:13Z","dns_checked_at":"2026-11-05T20:18:45.000Z","dns_since":"2026-11-05T20:18:45.000Z","findings":[{"id":"frcogfsmeqdwqfmm6trgl","kind":"reported_domain","summary":"Under posinu.com, listed by CERT Polska","first_observed":"2026-11-05T19:51:38.274Z","first_published":"2026-11-05T20:12:24.139Z","source":"cert_polska","source_name":"CERT Polska","under":"posinu.com"}],"url":"https://domainspoof.com/live?show=all&q=rent.posinu.com"},{"hostname":"rentoira.live","first_observed":"2026-11-05T20:05:35.030Z","first_published":"2026-11-05T20:12:24.139Z","brands":[],"dns":"resolved","resolved":["104.21.78.222","172.67.137.220"],"resolved_at":"2026-11-05T20:09:09Z","dns_checked_at":"2026-11-05T20:18:45.000Z","dns_since":"2026-11-05T20:18:45.000Z","findings":[{"id":"f4vgnjgddftslkzs2oo4f","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T20:05:35.030Z","first_published":"2026-11-05T20:12:24.139Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=rentoira.live"},{"hostname":"rentovexpro-es.live","first_observed":"2026-11-05T19:51:38.274Z","first_published":"2026-11-05T20:12:24.139Z","brands":[],"dns":"resolved","resolved":["104.21.25.114","172.67.134.48"],"resolved_at":"2026-11-05T19:52:13Z","dns_checked_at":"2026-11-05T20:18:45.000Z","dns_since":"2026-11-05T20:18:45.000Z","findings":[{"id":"fs536bwc6taxgh6mwc4ud","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T19:51:38.274Z","first_published":"2026-11-05T20:12:24.139Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=rentovexpro-es.live"},{"hostname":"riolux-investir-tech-com.financecryptoworld.com","first_observed":"2026-11-05T19:26:14.408Z","first_published":"2026-11-05T20:12:24.139Z","brands":[],"dns":"resolved","resolved":["104.21.10.130","172.67.131.121"],"resolved_at":"2026-11-05T19:26:52Z","dns_checked_at":"2026-11-05T20:18:45.000Z","dns_since":"2026-11-05T20:18:45.000Z","findings":[{"id":"fw5c2kqmz43t63wpbnmhm","kind":"reported_domain","summary":"Under financecryptoworld.com, listed by CERT Polska","first_observed":"2026-11-05T19:26:14.408Z","first_published":"2026-11-05T20:12:24.139Z","source":"cert_polska","source_name":"CERT Polska","under":"financecryptoworld.com"}],"url":"https://domainspoof.com/live?show=all&q=riolux-investir-tech-com.financecryptoworld.com"},{"hostname":"rovenalixpro-it.live","first_observed":"2026-11-05T19:31:10.785Z","first_published":"2026-11-05T20:12:24.139Z","brands":[],"dns":"resolved","resolved":["104.21.88.249","172.67.154.178"],"resolved_at":"2026-11-05T19:31:43Z","dns_checked_at":"2026-11-05T20:18:45.000Z","dns_since":"2026-11-05T20:18:45.000Z","findings":[{"id":"fuqmsrgwe3efkdspwuqep","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T19:31:10.785Z","first_published":"2026-11-05T20:12:24.139Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=rovenalixpro-it.live"},{"hostname":"rsyxtbao.myhfgopl.xijnudcy.csarxeio.tczglrpw.gatewaylearning.ezgateway.net","first_observed":"2026-11-05T18:56:58.162Z","first_published":"2026-11-05T20:12:24.139Z","brands":[],"dns":"resolved","resolved":["15.204.116.29"],"resolved_at":"2026-11-05T19:05:15Z","dns_checked_at":"2026-11-05T20:18:45.000Z","dns_since":"2026-11-05T20:18:45.000Z","findings":[{"id":"f6spnr2ta5cnrnfzms5u7","kind":"reported_domain","summary":"Under ezgateway.net, listed by USOM","first_observed":"2026-11-05T18:56:58.162Z","first_published":"2026-11-05T20:12:24.139Z","source":"usom","source_name":"USOM","under":"ezgateway.net"}],"url":"https://domainspoof.com/live?show=all&q=rsyxtbao.myhfgopl.xijnudcy.csarxeio.tczglrpw.gatewaylearning.ezgateway.net"},{"hostname":"savryn-pulseai.com","first_observed":"2026-11-05T20:00:49.404Z","first_published":"2026-11-05T20:12:24.139Z","brands":[],"dns":"resolved","resolved":["104.21.37.247","172.67.216.114"],"resolved_at":"2026-11-05T20:06:42Z","dns_checked_at":"2026-11-05T20:18:45.000Z","dns_since":"2026-11-05T20:18:45.000Z","findings":[{"id":"f2oye6kosqi7ilawizjjx","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T20:00:49.404Z","first_published":"2026-11-05T20:12:24.139Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=savryn-pulseai.com"},{"hostname":"sber.login.yandex.qiwbpchh9caly81t.rhxyvcq9vvts2ld9.r.mail.leankoala.com","first_observed":"2026-11-05T19:19:40.594Z","first_published":"2026-11-05T20:12:24.139Z","brands":[{"id":"yandex","name":"Yandex","url":"https://domainspoof.com/brands/yandex"}],"dns":"resolved","resolved":["172.246.243.65"],"resolved_at":"2026-11-05T20:18:45Z","dns_checked_at":"2026-11-05T20:18:45.000Z","dns_since":"2026-11-05T20:18:45.000Z","findings":[{"id":"f5xbrcvrtzhshvseiotah","kind":"phishing_infrastructure","summary":"Resolved to 172.246.243.65, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T19:19:40.594Z","first_published":"2026-11-05T20:12:24.139Z","address":"172.246.243.65","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/yandex"},{"hostname":"searchdrop.live","first_observed":"2026-11-05T19:05:38.392Z","first_published":"2026-11-05T20:12:24.139Z","brands":[],"dns":"resolved","resolved":["104.21.16.83","172.67.166.245"],"resolved_at":"2026-11-05T19:12:27Z","dns_checked_at":"2026-11-05T20:18:45.000Z","dns_since":"2026-11-05T20:18:45.000Z","findings":[{"id":"f7wsu6ctzpyc2lmbdzpt3","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T19:05:38.392Z","first_published":"2026-11-05T20:12:24.139Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=searchdrop.live"},{"hostname":"searchfortrust.pro","first_observed":"2026-11-05T19:16:29.893Z","first_published":"2026-11-05T20:12:24.139Z","brands":[],"dns":"resolved","resolved":["104.21.10.159","172.67.190.134"],"resolved_at":"2026-11-06T00:12:59Z","dns_checked_at":"2026-11-05T20:18:45.000Z","dns_since":"2026-11-05T20:18:45.000Z","findings":[{"id":"f6mb6ib4egvov644qfujd","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T19:16:29.893Z","first_published":"2026-11-05T20:12:24.139Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/searchfortrust.pro/"}],"url":"https://domainspoof.com/live?show=all&q=searchfortrust.pro"},{"hostname":"secure-coinbase-rewardclaimspcx-com.pages.dev","first_observed":"2026-11-05T19:41:53.584Z","first_published":"2026-11-05T20:12:24.139Z","brands":[{"id":"coinbase","name":"Coinbase","url":"https://domainspoof.com/brands/coinbase"}],"dns":"resolved","resolved":["172.66.44.193","172.66.47.63","2606:4700:310c::ac42:2cc1","2606:4700:310c::ac42:2f3f"],"resolved_at":"2026-11-05T19:53:55Z","dns_checked_at":"2026-11-05T20:18:45.000Z","dns_since":"2026-11-05T20:18:45.000Z","findings":[{"id":"f56set6sw2aijvyt7sh6g","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T19:41:53.584Z","first_published":"2026-11-05T20:12:24.139Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/brands/coinbase"},{"hostname":"sentierinvestencaai-fr.live","first_observed":"2026-11-05T19:10:41.672Z","first_published":"2026-11-05T20:12:24.139Z","brands":[],"dns":"resolved","resolved":["104.21.16.127","172.67.212.180"],"resolved_at":"2026-11-05T19:19:46Z","dns_checked_at":"2026-11-05T20:18:45.000Z","dns_since":"2026-11-05T20:18:45.000Z","findings":[{"id":"fkijx3bupiecv2pbxks2y","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T19:10:41.672Z","first_published":"2026-11-05T20:12:24.139Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=sentierinvestencaai-fr.live"},{"hostname":"sentierodexlink-it.live","first_observed":"2026-11-05T20:05:35.030Z","first_published":"2026-11-05T20:12:24.139Z","brands":[],"dns":"resolved","resolved":["104.21.13.135","172.67.132.224"],"resolved_at":"2026-11-05T20:09:11Z","dns_checked_at":"2026-11-05T20:18:45.000Z","dns_since":"2026-11-05T20:18:45.000Z","findings":[{"id":"f7oogcnd47sbu7ff35xqg","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T20:05:35.030Z","first_published":"2026-11-05T20:12:24.139Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=sentierodexlink-it.live"},{"hostname":"shapeshiftdesktop.app","first_observed":"2026-11-05T19:36:57.164Z","first_published":"2026-11-05T20:12:24.139Z","brands":[],"dns":"resolved","resolved":["104.21.41.104","172.67.146.141"],"resolved_at":"2026-11-05T19:41:03Z","dns_checked_at":"2026-11-05T20:18:45.000Z","dns_since":"2026-11-05T20:18:45.000Z","findings":[{"id":"fprwjl5emi4e6beyzrynn","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T19:36:57.164Z","first_published":"2026-11-05T20:12:24.139Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/shapeshiftdesktop.app/"}],"url":"https://domainspoof.com/live?show=all&q=shapeshiftdesktop.app"},{"hostname":"share.socialvisor.ru","first_observed":"2026-11-05T19:46:44.250Z","first_published":"2026-11-05T20:12:24.139Z","brands":[],"dns":"resolved","resolved":["91.215.41.91"],"resolved_at":"2026-11-05T19:58:25Z","dns_checked_at":"2026-11-05T20:18:45.000Z","dns_since":"2026-11-05T20:18:45.000Z","findings":[{"id":"f2u23wp62mlq33ex76v3c","kind":"reported_domain","summary":"Under socialvisor.ru, reported by PhishDestroy","first_observed":"2026-11-05T19:46:44.250Z","first_published":"2026-11-05T20:12:24.139Z","source":"phishdestroy","source_name":"PhishDestroy","under":"socialvisor.ru","source_url":"https://phishdestroy.io/domain/socialvisor.ru/"}],"url":"https://domainspoof.com/live?show=all&q=share.socialvisor.ru"},{"hostname":"shimmering-lands.com","first_observed":"2026-11-05T20:05:35.030Z","first_published":"2026-11-05T20:12:24.139Z","brands":[],"dns":"resolved","resolved":["104.21.91.251","172.67.183.107"],"resolved_at":"2026-11-05T20:09:11Z","dns_checked_at":"2026-11-05T20:18:45.000Z","dns_since":"2026-11-05T20:18:45.000Z","findings":[{"id":"fvgr4tajob2jpnihqllvt","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T20:05:35.030Z","first_published":"2026-11-05T20:12:24.139Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=shimmering-lands.com"},{"hostname":"shoekikan.live","first_observed":"2026-11-05T19:41:53.584Z","first_published":"2026-11-05T20:12:24.139Z","brands":[],"dns":"resolved","resolved":["104.21.50.253","172.67.215.120"],"resolved_at":"2026-11-05T19:53:55Z","dns_checked_at":"2026-11-05T20:18:45.000Z","dns_since":"2026-11-05T20:18:45.000Z","findings":[{"id":"f6l3rpbi6pa4xjibte5gb","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T19:41:53.584Z","first_published":"2026-11-05T20:12:24.139Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=shoekikan.live"},{"hostname":"signalcormax600.click","first_observed":"2026-11-05T19:26:14.408Z","first_published":"2026-11-05T20:12:24.139Z","brands":[],"dns":"resolved","resolved":["185.62.57.28"],"resolved_at":"2026-11-05T19:26:57Z","dns_checked_at":"2026-11-05T20:18:45.000Z","dns_since":"2026-11-05T20:18:45.000Z","findings":[{"id":"fmynjkcjd2kpkwwftrc5y","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T19:26:14.408Z","first_published":"2026-11-05T20:12:24.139Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=signalcormax600.click"},{"hostname":"sleepagotchi.trade","first_observed":"2026-11-05T19:05:38.392Z","first_published":"2026-11-05T20:12:24.139Z","brands":[],"dns":"resolved","resolved":["104.21.82.87","172.67.155.112"],"resolved_at":"2026-11-05T19:12:28Z","dns_checked_at":"2026-11-05T20:18:45.000Z","dns_since":"2026-11-05T20:18:45.000Z","findings":[{"id":"fhspjq3ikqdr3ha4qoba7","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T19:05:38.392Z","first_published":"2026-11-05T20:12:24.139Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=sleepagotchi.trade"},{"hostname":"sneaker-style.shop","first_observed":"2026-11-05T19:51:38.274Z","first_published":"2026-11-05T20:12:24.139Z","brands":[],"dns":"resolved","resolved":["104.18.71.116"],"resolved_at":"2026-11-05T19:52:13Z","dns_checked_at":"2026-11-05T20:18:45.000Z","dns_since":"2026-11-05T20:18:45.000Z","findings":[{"id":"flji7hhj6e34f3xl7yks3","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T19:51:38.274Z","first_published":"2026-11-05T20:12:24.139Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=sneaker-style.shop"},{"hostname":"sp19ct7-vurem-biz-salek-donis.pages.dev","first_observed":"2026-11-05T19:41:53.584Z","first_published":"2026-11-05T20:12:24.139Z","brands":[],"dns":"resolved","resolved":["172.66.44.73","172.66.47.183"],"resolved_at":"2026-11-05T19:53:55Z","dns_checked_at":"2026-11-05T20:18:45.000Z","dns_since":"2026-11-05T20:18:45.000Z","findings":[{"id":"fpgygdxhjvzhx5vhzrorf","kind":"reported_domain","summary":"Reported by PhishTank","first_observed":"2026-11-05T19:41:53.584Z","first_published":"2026-11-05T20:12:24.139Z","source":"phishtank","source_name":"PhishTank","source_url":"https://phishtank.org/phish_detail.php?phish_id=9479630"}],"url":"https://domainspoof.com/live?show=all&q=sp19ct7-vurem-biz-salek-donis.pages.dev"},{"hostname":"spydoge.com","first_observed":"2026-11-05T19:26:14.408Z","first_published":"2026-11-05T20:12:24.139Z","brands":[],"dns":"resolved","resolved":["216.150.16.1","216.150.16.129"],"resolved_at":"2026-11-05T19:26:57Z","dns_checked_at":"2026-11-05T20:18:45.000Z","dns_since":"2026-11-05T20:18:45.000Z","findings":[{"id":"f7a6hrbbjo6n755x4rmzw","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T19:26:14.408Z","first_published":"2026-11-05T20:12:24.139Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/spydoge.com/"}],"url":"https://domainspoof.com/live?show=all&q=spydoge.com"},{"hostname":"stakescasino.us","first_observed":"2026-11-05T19:16:29.893Z","first_published":"2026-11-05T20:12:24.139Z","brands":[],"dns":"resolved","resolved":["34.111.179.208"],"resolved_at":"2026-11-05T19:25:28Z","dns_checked_at":"2026-11-05T20:18:45.000Z","dns_since":"2026-11-05T20:18:45.000Z","findings":[{"id":"fohaftg3drbdbkrpit5cq","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T19:16:29.893Z","first_published":"2026-11-05T20:12:24.139Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/stakescasino.us/"}],"url":"https://domainspoof.com/live?show=all&q=stakescasino.us"},{"hostname":"stargakleyx-atrely.com","first_observed":"2026-11-05T19:36:57.164Z","first_published":"2026-11-05T20:12:24.139Z","brands":[],"dns":"no_address","resolved":[],"resolved_at":"2026-11-05T19:41:03Z","dns_checked_at":"2026-11-06T12:27:48.000Z","findings":[{"id":"fjmnj2fe3yr2zzqw4i3iv","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T19:36:57.164Z","first_published":"2026-11-05T20:12:24.139Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=stargakleyx-atrely.com"},{"hostname":"status-microsoft.com","first_observed":"2026-11-05T20:00:49.404Z","first_published":"2026-11-05T20:12:24.139Z","brands":[{"id":"microsoft","name":"Microsoft","url":"https://domainspoof.com/brands/microsoft"}],"dns":"resolved","resolved":["104.21.24.65","172.67.217.82","2606:4700:3030::6815:1841","2606:4700:3031::ac43:d952"],"resolved_at":"2026-11-05T20:06:44Z","dns_checked_at":"2026-11-05T20:18:45.000Z","dns_since":"2026-11-05T20:18:45.000Z","findings":[{"id":"fdcmwn3wmf4xhaj4pv2ej","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T20:00:49.404Z","first_published":"2026-11-05T20:12:24.139Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/brands/microsoft"},{"hostname":"status.www.fhmfdvkxcqvpn.pdwithchloe.com","first_observed":"2026-11-05T19:41:53.584Z","first_published":"2026-11-05T20:12:24.139Z","brands":[],"dns":"resolved","resolved":["185.149.120.183"],"resolved_at":"2026-11-05T19:53:56Z","dns_checked_at":"2026-11-05T20:18:45.000Z","dns_since":"2026-11-05T20:18:45.000Z","findings":[{"id":"fqlgmrstazp7dsgepnfyh","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T19:41:53.584Z","first_published":"2026-11-05T20:12:24.139Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/status.www.fhmfdvkxcqvpn.pdwithchloe.com/"}],"url":"https://domainspoof.com/live?show=all&q=status.www.fhmfdvkxcqvpn.pdwithchloe.com"},{"hostname":"steinsparvik-nl.live","first_observed":"2026-11-05T19:00:49.069Z","first_published":"2026-11-05T20:12:24.139Z","brands":[],"dns":"resolved","resolved":["104.21.70.9","172.67.217.174"],"resolved_at":"2026-11-05T19:01:30Z","dns_checked_at":"2026-11-05T20:18:45.000Z","dns_since":"2026-11-05T20:18:45.000Z","findings":[{"id":"fzrjxcmyqepy56rkd6oan","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T19:00:49.069Z","first_published":"2026-11-05T20:12:24.139Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=steinsparvik-nl.live"},{"hostname":"strapi.crypto-polis.org","first_observed":"2026-11-05T19:46:44.250Z","first_published":"2026-11-05T20:12:24.139Z","brands":[],"dns":"resolved","resolved":["185.178.208.132","185.178.208.182"],"resolved_at":"2026-11-05T19:58:25Z","dns_checked_at":"2026-11-05T20:18:45.000Z","dns_since":"2026-11-05T20:18:45.000Z","findings":[{"id":"fgvu76elxj5txea3aujd3","kind":"reported_domain","summary":"Under crypto-polis.org, reported by PhishDestroy","first_observed":"2026-11-05T19:46:44.250Z","first_published":"2026-11-05T20:12:24.139Z","source":"phishdestroy","source_name":"PhishDestroy","under":"crypto-polis.org","source_url":"https://phishdestroy.io/domain/crypto-polis.org/"}],"url":"https://domainspoof.com/live?show=all&q=strapi.crypto-polis.org"},{"hostname":"sueldoraia.pro","first_observed":"2026-11-05T19:41:53.584Z","first_published":"2026-11-05T20:12:24.139Z","brands":[],"dns":"resolved","resolved":["104.21.67.122","172.67.221.230"],"resolved_at":"2026-11-05T19:53:56Z","dns_checked_at":"2026-11-05T20:18:45.000Z","dns_since":"2026-11-05T20:18:45.000Z","findings":[{"id":"fzqhiol47gxccma7wjsib","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T19:41:53.584Z","first_published":"2026-11-05T20:12:24.139Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=sueldoraia.pro"},{"hostname":"swapdaypro-40.shop","first_observed":"2026-11-05T18:56:58.162Z","first_published":"2026-11-05T20:12:24.139Z","brands":[],"dns":"resolved","resolved":["104.21.17.114","172.67.175.198"],"resolved_at":"2026-11-06T06:22:45Z","dns_checked_at":"2026-11-05T20:18:45.000Z","dns_since":"2026-11-05T20:18:45.000Z","findings":[{"id":"fgipmp3d3cguhxg4eco2i","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T18:56:58.162Z","first_published":"2026-11-05T20:12:24.139Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=swapdaypro-40.shop"},{"hostname":"sxwsc-ol5x-0o6-bi01k-818z.pages.dev","first_observed":"2026-11-05T19:26:14.408Z","first_published":"2026-11-05T20:12:24.139Z","brands":[],"dns":"resolved","resolved":["172.66.44.66","172.66.47.190"],"resolved_at":"2026-11-05T19:26:57Z","dns_checked_at":"2026-11-05T20:18:45.000Z","dns_since":"2026-11-05T20:18:45.000Z","findings":[{"id":"fv4sodj7wadzoerwhzy3p","kind":"reported_domain","summary":"Reported by PhishTank","first_observed":"2026-11-05T19:26:14.408Z","first_published":"2026-11-05T20:12:24.139Z","source":"phishtank","source_name":"PhishTank","source_url":"https://phishtank.org/phish_detail.php?phish_id=9479639"}],"url":"https://domainspoof.com/live?show=all&q=sxwsc-ol5x-0o6-bi01k-818z.pages.dev"},{"hostname":"syntekai.live","first_observed":"2026-11-05T19:57:04.920Z","first_published":"2026-11-05T20:12:24.139Z","brands":[],"dns":"resolved","resolved":["104.21.94.84","172.67.221.73"],"resolved_at":"2026-11-05T20:01:50Z","dns_checked_at":"2026-11-05T20:18:45.000Z","dns_since":"2026-11-05T20:18:45.000Z","findings":[{"id":"frkgncf4likmqwkrl3rnx","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T19:57:04.920Z","first_published":"2026-11-05T20:12:24.139Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=syntekai.live"},{"hostname":"tearns-invite.cc","first_observed":"2026-11-05T19:10:41.672Z","first_published":"2026-11-05T20:12:24.139Z","brands":[],"dns":"resolved","resolved":["104.21.29.157","172.67.149.111"],"resolved_at":"2026-11-05T19:19:48Z","dns_checked_at":"2026-11-05T20:18:45.000Z","dns_since":"2026-11-05T20:18:45.000Z","findings":[{"id":"f6nx74ybzmtxpflgddopp","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T19:10:41.672Z","first_published":"2026-11-05T20:12:24.139Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=tearns-invite.cc"},{"hostname":"telecisxsu.love","first_observed":"2026-11-05T19:16:29.893Z","first_published":"2026-11-05T20:12:24.139Z","brands":[],"dns":"resolved","resolved":["104.21.40.109","172.67.150.188"],"resolved_at":"2026-11-05T19:25:28Z","dns_checked_at":"2026-11-05T20:18:45.000Z","dns_since":"2026-11-05T20:18:45.000Z","findings":[{"id":"fpt7swsbbno6iw4lhrjy4","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T19:16:29.893Z","first_published":"2026-11-05T20:12:24.139Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=telecisxsu.love"},{"hostname":"teljingelse-no.com","first_observed":"2026-11-05T19:26:14.408Z","first_published":"2026-11-05T20:12:24.139Z","brands":[],"dns":"resolved","resolved":["104.21.35.122","172.67.221.43"],"resolved_at":"2026-11-05T19:26:57Z","dns_checked_at":"2026-11-05T20:18:45.000Z","dns_since":"2026-11-05T20:18:45.000Z","findings":[{"id":"fulzr637mtio7reklyvud","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T19:26:14.408Z","first_published":"2026-11-05T20:12:24.139Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=teljingelse-no.com"},{"hostname":"the-rainbet-uk-com.pages.dev","first_observed":"2026-11-05T19:57:04.920Z","first_published":"2026-11-05T20:12:24.139Z","brands":[],"dns":"resolved","resolved":["172.66.44.79","172.66.47.177"],"resolved_at":"2026-11-05T20:01:50Z","dns_checked_at":"2026-11-05T20:18:45.000Z","dns_since":"2026-11-05T20:18:45.000Z","findings":[{"id":"foeqk5h2balzvpmg3gxwg","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T19:57:04.920Z","first_published":"2026-11-05T20:12:24.139Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=the-rainbet-uk-com.pages.dev"},{"hostname":"tiktok1.site","first_observed":"2026-11-05T19:52:15.356Z","first_published":"2026-11-05T20:12:24.139Z","brands":[{"id":"tiktok","name":"TikTok","url":"https://domainspoof.com/brands/tiktok"}],"dns":"resolved","resolved":["92.53.96.169"],"resolved_at":"2026-11-05T20:18:45Z","dns_checked_at":"2026-11-05T20:18:45.000Z","dns_since":"2026-11-05T20:18:45.000Z","findings":[{"id":"focc4k3r3vkej43zmrzq7","kind":"phishing_infrastructure","summary":"Resolved to 92.53.96.169, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T19:52:15.356Z","first_published":"2026-11-05T20:12:24.139Z","address":"92.53.96.169","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"},{"kind":"lookalike","summary":"Registered domain containing “tiktok”, a name we match for TikTok, resolved to 92.53.96.169, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","of":"tiktok.com","spelling":"combo","match":"name","token":"tiktok","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"92.53.96.169","flagged_at":"2026-11-06T01:53:03Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/tiktok"},{"hostname":"tntjv.icu","first_observed":"2026-11-05T19:16:29.893Z","first_published":"2026-11-05T20:12:24.139Z","brands":[],"dns":"resolved","resolved":["104.21.81.196","172.67.146.61"],"resolved_at":"2026-11-05T19:25:31Z","dns_checked_at":"2026-11-05T20:18:45.000Z","dns_since":"2026-11-05T20:18:45.000Z","findings":[{"id":"flkdlxqpffjr336gqmtjb","kind":"reported_domain","summary":"Listed by NPA 165 (information services)","first_observed":"2026-11-05T19:16:29.893Z","first_published":"2026-11-05T20:12:24.139Z","source":"npa","source_name":"NPA 165","claim":{"category":"information services"}}],"url":"https://domainspoof.com/live?show=all&q=tntjv.icu"},{"hostname":"tonminepro.com","first_observed":"2026-11-05T19:36:57.164Z","first_published":"2026-11-05T20:12:24.139Z","brands":[],"dns":"resolved","resolved":["104.21.39.230","172.67.149.175"],"resolved_at":"2026-11-05T19:41:06Z","dns_checked_at":"2026-11-05T20:18:45.000Z","dns_since":"2026-11-05T20:18:45.000Z","findings":[{"id":"ff5jkzhngtbrztqtk7rjj","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T19:36:57.164Z","first_published":"2026-11-05T20:12:24.139Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/tonminepro.com/"}],"url":"https://domainspoof.com/live?show=all&q=tonminepro.com"},{"hostname":"tourprogr.digital","first_observed":"2026-11-05T19:31:10.785Z","first_published":"2026-11-05T20:12:24.139Z","brands":[],"dns":"resolved","resolved":["104.21.14.226","172.67.204.138"],"resolved_at":"2026-11-05T19:31:44Z","dns_checked_at":"2026-11-05T20:18:45.000Z","dns_since":"2026-11-05T20:18:45.000Z","findings":[{"id":"f557bdp7pnptoyfcw7cvs","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T19:31:10.785Z","first_published":"2026-11-05T20:12:24.139Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=tourprogr.digital"},{"hostname":"tracefortress.com","first_observed":"2026-11-05T19:46:44.250Z","first_published":"2026-11-05T20:12:24.139Z","brands":[],"dns":"resolved","resolved":["198.54.132.28"],"resolved_at":"2026-11-05T19:58:26Z","dns_checked_at":"2026-11-05T20:18:45.000Z","dns_since":"2026-11-05T20:18:45.000Z","findings":[{"id":"fkh5cljldn4dt5ibqncq6","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T19:46:44.250Z","first_published":"2026-11-05T20:12:24.139Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/tracefortress.com/"}],"url":"https://domainspoof.com/live?show=all&q=tracefortress.com"},{"hostname":"trade-avaprosystem-com.financecryptoworld.com","first_observed":"2026-11-05T19:26:14.408Z","first_published":"2026-11-05T20:12:24.139Z","brands":[],"dns":"resolved","resolved":["104.21.10.130","172.67.131.121"],"resolved_at":"2026-11-05T19:26:58Z","dns_checked_at":"2026-11-05T20:18:45.000Z","dns_since":"2026-11-05T20:18:45.000Z","findings":[{"id":"f5tgu64r5bk2lsmeppbie","kind":"reported_domain","summary":"Under financecryptoworld.com, listed by CERT Polska","first_observed":"2026-11-05T19:26:14.408Z","first_published":"2026-11-05T20:12:24.139Z","source":"cert_polska","source_name":"CERT Polska","under":"financecryptoworld.com"}],"url":"https://domainspoof.com/live?show=all&q=trade-avaprosystem-com.financecryptoworld.com"},{"hostname":"trandixai-shop.pages.dev","first_observed":"2026-11-05T19:21:29.552Z","first_published":"2026-11-05T20:12:24.139Z","brands":[],"dns":"resolved","resolved":["172.66.44.189","172.66.47.67"],"resolved_at":"2026-11-05T19:22:42Z","dns_checked_at":"2026-11-05T20:18:45.000Z","dns_since":"2026-11-05T20:18:45.000Z","findings":[{"id":"fzwgt4vya2wrw4jjw2qum","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T19:21:29.552Z","first_published":"2026-11-05T20:12:24.139Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=trandixai-shop.pages.dev"},{"hostname":"trezor-ilogin.pages.dev","first_observed":"2026-11-05T19:46:44.250Z","first_published":"2026-11-05T20:12:24.139Z","brands":[{"id":"trezor","name":"Trezor","url":"https://domainspoof.com/brands/trezor"}],"dns":"resolved","resolved":["172.66.44.249","172.66.47.7","2606:4700:310c::ac42:2cf9","2606:4700:310c::ac42:2f07"],"resolved_at":"2026-11-06T03:36:13Z","dns_checked_at":"2026-11-05T20:18:45.000Z","dns_since":"2026-11-05T20:18:45.000Z","findings":[{"id":"fqjiew2pjlmrfefa6rkla","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T19:46:44.250Z","first_published":"2026-11-05T20:12:24.139Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/brands/trezor"},{"hostname":"trustwalletbolster.com","first_observed":"2026-11-05T19:26:14.408Z","first_published":"2026-11-05T20:12:24.139Z","brands":[],"dns":"no_address","resolved":[],"resolved_at":"2026-11-05T19:26:58Z","dns_checked_at":"2026-11-06T12:27:48.000Z","findings":[{"id":"ftobqassqk2cnytwgyhyz","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T19:26:14.408Z","first_published":"2026-11-05T20:12:24.139Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=trustwalletbolster.com"},{"hostname":"tryest-link.com","first_observed":"2026-11-05T19:46:44.250Z","first_published":"2026-11-05T20:12:24.139Z","brands":[],"dns":"resolved","resolved":["104.21.82.3","172.67.167.86"],"resolved_at":"2026-11-05T19:58:26Z","dns_checked_at":"2026-11-05T20:18:45.000Z","dns_since":"2026-11-05T20:18:45.000Z","findings":[{"id":"f4bwlv55dt5fh4ogynfgq","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T19:46:44.250Z","first_published":"2026-11-05T20:12:24.139Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=tryest-link.com"},{"hostname":"ucuzfilament.com","first_observed":"2026-11-05T19:36:57.164Z","first_published":"2026-11-05T20:12:24.139Z","brands":[],"dns":"resolved","resolved":["104.21.78.161","172.67.223.191"],"resolved_at":"2026-11-05T19:41:07Z","dns_checked_at":"2026-11-05T20:18:45.000Z","dns_since":"2026-11-05T20:18:45.000Z","findings":[{"id":"fk6haqxcqvre4tleonzs4","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T19:36:57.164Z","first_published":"2026-11-05T20:12:24.139Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=ucuzfilament.com"},{"hostname":"uptime.socialvisor.ru","first_observed":"2026-11-05T19:46:44.250Z","first_published":"2026-11-05T20:12:24.139Z","brands":[],"dns":"resolved","resolved":["91.215.41.91"],"resolved_at":"2026-11-05T19:58:26Z","dns_checked_at":"2026-11-05T20:18:45.000Z","dns_since":"2026-11-05T20:18:45.000Z","findings":[{"id":"f6zwhbzzvhurpzu4g5sih","kind":"reported_domain","summary":"Under socialvisor.ru, reported by PhishDestroy","first_observed":"2026-11-05T19:46:44.250Z","first_published":"2026-11-05T20:12:24.139Z","source":"phishdestroy","source_name":"PhishDestroy","under":"socialvisor.ru","source_url":"https://phishdestroy.io/domain/socialvisor.ru/"}],"url":"https://domainspoof.com/live?show=all&q=uptime.socialvisor.ru"},{"hostname":"urbanx-es.live","first_observed":"2026-11-05T20:05:35.030Z","first_published":"2026-11-05T20:12:24.139Z","brands":[],"dns":"resolved","resolved":["104.21.24.47","172.67.216.211"],"resolved_at":"2026-11-05T20:09:13Z","dns_checked_at":"2026-11-05T20:18:45.000Z","dns_since":"2026-11-05T20:18:45.000Z","findings":[{"id":"fi2i27n2jjrwzt2tomqmj","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T20:05:35.030Z","first_published":"2026-11-05T20:12:24.139Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=urbanx-es.live"},{"hostname":"uselaunchmint.xyz","first_observed":"2026-11-05T19:05:38.392Z","first_published":"2026-11-05T20:12:24.139Z","brands":[],"dns":"not_found","resolved":[],"resolved_at":"2026-11-05T19:12:32Z","dns_checked_at":"2026-11-06T12:27:48.000Z","findings":[{"id":"f6pdcly35qmrujttjzda6","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T19:05:38.392Z","first_published":"2026-11-05T20:12:24.139Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=uselaunchmint.xyz"},{"hostname":"v1.socialvisor.ru","first_observed":"2026-11-05T19:05:38.392Z","first_published":"2026-11-05T20:12:24.139Z","brands":[],"dns":"resolved","resolved":["91.215.41.91"],"resolved_at":"2026-11-05T19:12:32Z","dns_checked_at":"2026-11-05T20:18:45.000Z","dns_since":"2026-11-05T20:18:45.000Z","findings":[{"id":"fuxeomvmkjx4aaoaiqt3c","kind":"reported_domain","summary":"Under socialvisor.ru, reported by PhishDestroy","first_observed":"2026-11-05T19:05:38.392Z","first_published":"2026-11-05T20:12:24.139Z","source":"phishdestroy","source_name":"PhishDestroy","under":"socialvisor.ru","source_url":"https://phishdestroy.io/domain/socialvisor.ru/"}],"url":"https://domainspoof.com/live?show=all&q=v1.socialvisor.ru"},{"hostname":"vanced-official.com","first_observed":"2026-11-05T20:05:35.030Z","first_published":"2026-11-05T20:12:24.139Z","brands":[],"dns":"resolved","resolved":["104.18.0.227","104.18.1.227"],"resolved_at":"2026-11-05T20:09:13Z","dns_checked_at":"2026-11-05T20:18:45.000Z","dns_since":"2026-11-05T20:18:45.000Z","findings":[{"id":"fe7egv5ketvxlsh3x7ycy","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T20:05:35.030Z","first_published":"2026-11-05T20:12:24.139Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=vanced-official.com"},{"hostname":"vandexio-it.live","first_observed":"2026-11-05T19:31:10.785Z","first_published":"2026-11-05T20:12:24.139Z","brands":[],"dns":"resolved","resolved":["104.21.45.232","172.67.220.15"],"resolved_at":"2026-11-05T19:31:44Z","dns_checked_at":"2026-11-05T20:18:45.000Z","dns_since":"2026-11-05T20:18:45.000Z","findings":[{"id":"fdy47suynodapoaqhvt36","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T19:31:10.785Z","first_published":"2026-11-05T20:12:24.139Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=vandexio-it.live"},{"hostname":"vantismarkets.com","first_observed":"2026-11-05T19:51:38.274Z","first_published":"2026-11-05T20:12:24.139Z","brands":[],"dns":"resolved","resolved":["191.101.104.222","195.35.60.25"],"resolved_at":"2026-11-05T19:52:15Z","dns_checked_at":"2026-11-05T20:18:45.000Z","dns_since":"2026-11-05T20:18:45.000Z","findings":[{"id":"fwuqenhfihvlxf25lmmtr","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T19:51:38.274Z","first_published":"2026-11-05T20:12:24.139Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/vantismarkets.com/"}],"url":"https://domainspoof.com/live?show=all&q=vantismarkets.com"},{"hostname":"varinational.co","first_observed":"2026-11-05T19:57:04.920Z","first_published":"2026-11-05T20:12:24.139Z","brands":[],"dns":"no_address","resolved":[],"resolved_at":"2026-11-05T20:01:53Z","dns_checked_at":"2026-11-06T12:27:48.000Z","findings":[{"id":"fnaztooulo2ufgsvpqk7x","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T19:57:04.920Z","first_published":"2026-11-05T20:12:24.139Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=varinational.co"},{"hostname":"varonbet.com","first_observed":"2026-11-05T19:10:41.672Z","first_published":"2026-11-05T20:12:24.139Z","brands":[],"dns":"resolved","resolved":["103.224.182.250"],"resolved_at":"2026-11-05T19:19:54Z","dns_checked_at":"2026-11-05T20:18:45.000Z","dns_since":"2026-11-05T20:18:45.000Z","findings":[{"id":"flv3nasgepufkzhtk5oav","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T19:10:41.672Z","first_published":"2026-11-05T20:12:24.139Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/varonbet.com/"}],"url":"https://domainspoof.com/live?show=all&q=varonbet.com"},{"hostname":"verify-819.eu.cc","first_observed":"2026-11-05T18:56:58.162Z","first_published":"2026-11-05T20:12:24.139Z","brands":[],"dns":"resolved","resolved":["104.21.47.28","172.67.144.40"],"resolved_at":"2026-11-06T04:05:50Z","dns_checked_at":"2026-11-05T20:18:45.000Z","dns_since":"2026-11-05T20:18:45.000Z","findings":[{"id":"fxsruwz6ed7oez7g5alra","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T18:56:58.162Z","first_published":"2026-11-05T20:12:24.139Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=verify-819.eu.cc"},{"hostname":"vifboursade-nl.live","first_observed":"2026-11-05T19:46:44.250Z","first_published":"2026-11-05T20:12:24.139Z","brands":[],"dns":"resolved","resolved":["104.21.43.110","172.67.178.40"],"resolved_at":"2026-11-05T19:58:27Z","dns_checked_at":"2026-11-05T20:18:45.000Z","dns_since":"2026-11-05T20:18:45.000Z","findings":[{"id":"fo46m6lh5benn757nqsbf","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T19:46:44.250Z","first_published":"2026-11-05T20:12:24.139Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=vifboursade-nl.live"},{"hostname":"vimg.sberbankmobile.ru","first_observed":"2026-11-05T19:05:19.782Z","first_published":"2026-11-05T20:12:24.139Z","brands":[{"id":"sberbank","name":"Sberbank","url":"https://domainspoof.com/brands/sberbank"}],"dns":"resolved","resolved":["87.242.79.60"],"resolved_at":"2026-11-05T20:18:45Z","dns_checked_at":"2026-11-05T20:18:45.000Z","dns_since":"2026-11-05T20:18:45.000Z","findings":[{"id":"fwgasmxy4rm43ohsphdqj","kind":"phishing_infrastructure","summary":"Resolved to 87.242.79.60, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T19:05:19.782Z","first_published":"2026-11-05T20:12:24.139Z","address":"87.242.79.60","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/sberbank"},{"hostname":"virtual-allocations.xyz","first_observed":"2026-11-05T19:57:04.920Z","first_published":"2026-11-05T20:12:24.139Z","brands":[],"dns":"resolved","resolved":["104.21.82.144","172.67.202.185"],"resolved_at":"2026-11-05T20:01:53Z","dns_checked_at":"2026-11-05T20:18:45.000Z","dns_since":"2026-11-05T20:18:45.000Z","findings":[{"id":"fr32lxo65e5erwymi6osg","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T19:57:04.920Z","first_published":"2026-11-05T20:12:24.139Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=virtual-allocations.xyz"},{"hostname":"volt-mosaic.com","first_observed":"2026-11-05T19:21:29.552Z","first_published":"2026-11-05T20:12:24.139Z","brands":[],"dns":"resolved","resolved":["104.21.90.182","172.67.203.208"],"resolved_at":"2026-11-05T19:30:19Z","dns_checked_at":"2026-11-05T20:18:45.000Z","dns_since":"2026-11-05T20:18:45.000Z","findings":[{"id":"fbulzkgwrohzimiul63ky","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T19:21:29.552Z","first_published":"2026-11-05T20:12:24.139Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=volt-mosaic.com"},{"hostname":"vts-risk-calculator-uat.trendlineforex.com","first_observed":"2026-11-05T19:26:14.408Z","first_published":"2026-11-05T20:12:24.139Z","brands":[],"dns":"resolved","resolved":["104.21.1.239","172.67.152.151"],"resolved_at":"2026-11-05T19:26:59Z","dns_checked_at":"2026-11-05T20:18:45.000Z","dns_since":"2026-11-05T20:18:45.000Z","findings":[{"id":"fdfr34fvwu5cb3knrohtt","kind":"reported_domain","summary":"Under trendlineforex.com, reported by PhishDestroy","first_observed":"2026-11-05T19:26:14.408Z","first_published":"2026-11-05T20:12:24.139Z","source":"phishdestroy","source_name":"PhishDestroy","under":"trendlineforex.com","source_url":"https://phishdestroy.io/domain/trendlineforex.com/"}],"url":"https://domainspoof.com/live?show=all&q=vts-risk-calculator-uat.trendlineforex.com"},{"hostname":"walletexo-us.pages.dev","first_observed":"2026-11-05T18:56:58.162Z","first_published":"2026-11-05T20:12:24.139Z","brands":[],"dns":"resolved","resolved":["172.66.44.175","172.66.47.81"],"resolved_at":"2026-11-05T19:05:20Z","dns_checked_at":"2026-11-05T20:18:45.000Z","dns_since":"2026-11-05T20:18:45.000Z","findings":[{"id":"fbdpmjan2m4d6j6hsl3q2","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T18:56:58.162Z","first_published":"2026-11-05T20:12:24.139Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=walletexo-us.pages.dev"},{"hostname":"weryfi-64153d.eu.cc","first_observed":"2026-11-05T19:10:41.672Z","first_published":"2026-11-05T20:12:24.139Z","brands":[],"dns":"resolved","resolved":["104.21.14.157","172.67.203.206"],"resolved_at":"2026-11-05T19:19:54Z","dns_checked_at":"2026-11-05T20:18:45.000Z","dns_since":"2026-11-05T20:18:45.000Z","findings":[{"id":"f7kkcj2nc2kslg2soico5","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T19:10:41.672Z","first_published":"2026-11-05T20:12:24.139Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=weryfi-64153d.eu.cc"},{"hostname":"whm.zenavlico.cyou","first_observed":"2026-11-05T19:05:38.392Z","first_published":"2026-11-05T20:12:24.139Z","brands":[],"dns":"resolved","resolved":["95.85.244.13"],"resolved_at":"2026-11-05T19:12:36Z","dns_checked_at":"2026-11-05T20:18:45.000Z","dns_since":"2026-11-05T20:18:45.000Z","findings":[{"id":"fncwkqx3kvrruqzfl4ebl","kind":"reported_domain","summary":"Under zenavlico.cyou, listed by CERT Polska","first_observed":"2026-11-05T19:05:38.392Z","first_published":"2026-11-05T20:12:24.139Z","source":"cert_polska","source_name":"CERT Polska","under":"zenavlico.cyou"}],"url":"https://domainspoof.com/live?show=all&q=whm.zenavlico.cyou"},{"hostname":"wildtrade247.com.floscapital.com","first_observed":"2026-11-05T19:26:14.408Z","first_published":"2026-11-05T20:12:24.139Z","brands":[],"dns":"resolved","resolved":["23.153.104.17"],"resolved_at":"2026-11-05T19:26:59Z","dns_checked_at":"2026-11-05T20:18:45.000Z","dns_since":"2026-11-05T20:18:45.000Z","findings":[{"id":"fncrydo7zgkgus67nx7d7","kind":"reported_domain","summary":"Under floscapital.com, reported by PhishDestroy","first_observed":"2026-11-05T19:26:14.408Z","first_published":"2026-11-05T20:12:24.139Z","source":"phishdestroy","source_name":"PhishDestroy","under":"floscapital.com","source_url":"https://phishdestroy.io/domain/floscapital.com/"}],"url":"https://domainspoof.com/live?show=all&q=wildtrade247.com.floscapital.com"},{"hostname":"winisol.com","first_observed":"2026-11-05T19:26:14.408Z","first_published":"2026-11-05T20:12:24.139Z","brands":[],"dns":"resolved","resolved":["174.138.39.196"],"resolved_at":"2026-11-05T19:26:59Z","dns_checked_at":"2026-11-05T20:18:45.000Z","dns_since":"2026-11-05T20:18:45.000Z","findings":[{"id":"f4m5yw3y3vzrgl5rh5zyz","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T19:26:14.408Z","first_published":"2026-11-05T20:12:24.139Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=winisol.com"},{"hostname":"wompstores.lat","first_observed":"2026-11-05T19:05:38.392Z","first_published":"2026-11-05T20:12:24.139Z","brands":[],"dns":"resolved","resolved":["66.29.148.190"],"resolved_at":"2026-11-05T19:12:36Z","dns_checked_at":"2026-11-05T20:18:45.000Z","dns_since":"2026-11-05T20:18:45.000Z","findings":[{"id":"fuw5ubf2wsgnnojyey6sc","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T19:05:38.392Z","first_published":"2026-11-05T20:12:24.139Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=wompstores.lat"},{"hostname":"www.abnamro.cn","first_observed":"2026-11-05T20:01:54.359Z","first_published":"2026-11-05T20:12:24.139Z","brands":[{"id":"abn-amro","name":"ABN AMRO","url":"https://domainspoof.com/brands/abn-amro"}],"dns":"resolved","resolved":["208.98.40.226","208.98.43.92"],"resolved_at":"2026-11-05T20:18:45Z","dns_checked_at":"2026-11-05T20:18:45.000Z","dns_since":"2026-11-05T20:18:45.000Z","findings":[{"id":"frfhoc5ztwm3dladms4sh","kind":"phishing_infrastructure","summary":"Resolved to 208.98.40.226, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T20:01:54.359Z","first_published":"2026-11-05T20:12:24.139Z","address":"208.98.40.226","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/abn-amro"},{"hostname":"www.amazon-swap.aakashtiwari.me","first_observed":"2026-11-05T19:05:38.392Z","first_published":"2026-11-05T20:12:24.139Z","brands":[],"dns":"resolved","resolved":["64.29.17.1","216.198.79.1"],"resolved_at":"2026-11-05T19:12:36Z","dns_checked_at":"2026-11-05T20:18:45.000Z","dns_since":"2026-11-05T20:18:45.000Z","findings":[{"id":"fbuhgjeyk6myzdvfevxsh","kind":"reported_domain","summary":"Under amazon-swap.aakashtiwari.me, listed by CERT Polska","first_observed":"2026-11-05T19:05:38.392Z","first_published":"2026-11-05T20:12:24.139Z","source":"cert_polska","source_name":"CERT Polska","under":"amazon-swap.aakashtiwari.me"}],"url":"https://domainspoof.com/live?show=all&q=www.amazon-swap.aakashtiwari.me"},{"hostname":"www.ambiance.ezgateway.net","first_observed":"2026-11-05T20:00:49.404Z","first_published":"2026-11-05T20:12:24.139Z","brands":[],"dns":"resolved","resolved":["172.67.165.35"],"resolved_at":"2026-11-05T20:06:45Z","dns_checked_at":"2026-11-05T20:18:45.000Z","dns_since":"2026-11-05T20:18:45.000Z","findings":[{"id":"fyuw37kohphv4evybci24","kind":"reported_domain","summary":"Under ezgateway.net, listed by USOM","first_observed":"2026-11-05T20:00:49.404Z","first_published":"2026-11-05T20:12:24.139Z","source":"usom","source_name":"USOM","under":"ezgateway.net"}],"url":"https://domainspoof.com/live?show=all&q=www.ambiance.ezgateway.net"},{"hostname":"www.beforewemeetapp.com","first_observed":"2026-11-05T19:16:29.893Z","first_published":"2026-11-05T20:12:24.139Z","brands":[],"dns":"resolved","resolved":["185.158.133.1"],"resolved_at":"2026-11-05T19:25:34Z","dns_checked_at":"2026-11-05T20:18:45.000Z","dns_since":"2026-11-05T20:18:45.000Z","findings":[{"id":"fwy3jgvlbvjhqxrr74zda","kind":"reported_domain","summary":"Under beforewemeetapp.com, listed by MetaMask","first_observed":"2026-11-05T19:16:29.893Z","first_published":"2026-11-05T20:12:24.139Z","source":"metamask","source_name":"MetaMask","under":"beforewemeetapp.com"}],"url":"https://domainspoof.com/live?show=all&q=www.beforewemeetapp.com"},{"hostname":"www.bitrefill.com-cu01-esim-gift.com","first_observed":"2026-11-05T19:41:10.418Z","first_published":"2026-11-05T20:12:24.139Z","brands":[{"id":"bitrefill","name":"Bitrefill","url":"https://domainspoof.com/brands/bitrefill"}],"dns":"resolved","resolved":["62.60.226.39"],"resolved_at":"2026-11-05T20:18:45Z","dns_checked_at":"2026-11-05T20:18:45.000Z","dns_since":"2026-11-05T20:18:45.000Z","findings":[{"id":"fzerxwv3irgrwjvczixgb","kind":"spamhaus_drop","summary":"Resolved to 62.60.226.39 on Spamhaus DROP","first_observed":"2026-11-05T19:41:10.418Z","first_published":"2026-11-05T20:12:24.139Z","address":"62.60.226.39","list":"spamhaus_drop","list_name":"Spamhaus DROP"}],"url":"https://domainspoof.com/brands/bitrefill"},{"hostname":"www.cryptop2p.live","first_observed":"2026-11-05T20:00:49.404Z","first_published":"2026-11-05T20:12:24.139Z","brands":[],"dns":"resolved","resolved":["13.248.213.45","76.223.67.189"],"resolved_at":"2026-11-05T20:06:45Z","dns_checked_at":"2026-11-05T20:18:45.000Z","dns_since":"2026-11-05T20:18:45.000Z","findings":[{"id":"f4zjdrtjc32pepxhqwrlc","kind":"reported_domain","summary":"Under cryptop2p.live, reported by PhishDestroy","first_observed":"2026-11-05T20:00:49.404Z","first_published":"2026-11-05T20:12:24.139Z","source":"phishdestroy","source_name":"PhishDestroy","under":"cryptop2p.live","source_url":"https://phishdestroy.io/domain/cryptop2p.live/"}],"url":"https://domainspoof.com/live?show=all&q=www.cryptop2p.live"},{"hostname":"www.findmysupportappleid.help","first_observed":"2026-11-05T18:55:56.770Z","first_published":"2026-11-05T20:12:24.139Z","brands":[{"id":"apple","name":"Apple","url":"https://domainspoof.com/brands/apple"}],"dns":"resolved","resolved":["172.232.24.161","172.232.24.235","172.234.25.42"],"resolved_at":"2026-11-05T20:18:45Z","dns_checked_at":"2026-11-05T20:18:45.000Z","dns_since":"2026-11-05T20:18:45.000Z","findings":[{"id":"fpcxefqgkl3kgut25xbgn","kind":"phishing_infrastructure","summary":"Resolved to 172.232.24.161, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T18:55:56.770Z","first_published":"2026-11-05T20:12:24.139Z","address":"172.232.24.161","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/apple"},{"hostname":"www.furniture-sale.shop","first_observed":"2026-11-05T19:10:41.672Z","first_published":"2026-11-05T20:12:24.139Z","brands":[],"dns":"resolved","resolved":["104.18.13.234"],"resolved_at":"2026-11-05T19:19:55Z","dns_checked_at":"2026-11-05T20:18:45.000Z","dns_since":"2026-11-05T20:18:45.000Z","findings":[{"id":"fnnd6oneieyvdgusg576h","kind":"reported_domain","summary":"Under furniture-sale.shop, listed by CERT Polska","first_observed":"2026-11-05T19:10:41.672Z","first_published":"2026-11-05T20:12:24.139Z","source":"cert_polska","source_name":"CERT Polska","under":"furniture-sale.shop"}],"url":"https://domainspoof.com/live?show=all&q=www.furniture-sale.shop"},{"hostname":"www.gessoportoseguro.com.br","first_observed":"2026-11-05T19:10:41.672Z","first_published":"2026-11-05T20:12:24.139Z","brands":[],"dns":"resolved","resolved":["199.36.158.100"],"resolved_at":"2026-11-05T19:19:55Z","dns_checked_at":"2026-11-05T20:18:45.000Z","dns_since":"2026-11-05T20:18:45.000Z","findings":[{"id":"fxadnmexluzz5efctn725","kind":"reported_domain","summary":"Under gessoportoseguro.com.br, reported by PhishDestroy","first_observed":"2026-11-05T19:10:41.672Z","first_published":"2026-11-05T20:12:24.139Z","source":"phishdestroy","source_name":"PhishDestroy","under":"gessoportoseguro.com.br","source_url":"https://phishdestroy.io/domain/gessoportoseguro.com.br/"}],"url":"https://domainspoof.com/live?show=all&q=www.gessoportoseguro.com.br"},{"hostname":"www.ic-cep.com","first_observed":"2026-11-05T19:05:38.392Z","first_published":"2026-11-05T20:12:24.139Z","brands":[],"dns":"resolved","resolved":["38.246.253.18"],"resolved_at":"2026-11-05T19:12:37Z","dns_checked_at":"2026-11-05T20:18:45.000Z","dns_since":"2026-11-05T20:18:45.000Z","findings":[{"id":"fi2dzrhlv2c4ynot7pbzc","kind":"reported_domain","summary":"Under ic-cep.com, listed by USOM","first_observed":"2026-11-05T19:05:38.392Z","first_published":"2026-11-05T20:12:24.139Z","source":"usom","source_name":"USOM","under":"ic-cep.com"}],"url":"https://domainspoof.com/live?show=all&q=www.ic-cep.com"},{"hostname":"www.jeromerenaux.com","first_observed":"2026-11-05T19:10:41.672Z","first_published":"2026-11-05T20:12:24.139Z","brands":[],"dns":"resolved","resolved":["199.36.158.100"],"resolved_at":"2026-11-05T19:19:55Z","dns_checked_at":"2026-11-05T20:18:45.000Z","dns_since":"2026-11-05T20:18:45.000Z","findings":[{"id":"faavppvtqwflr6feubn3p","kind":"reported_domain","summary":"Under jeromerenaux.com, reported by PhishDestroy","first_observed":"2026-11-05T19:10:41.672Z","first_published":"2026-11-05T20:12:24.139Z","source":"phishdestroy","source_name":"PhishDestroy","under":"jeromerenaux.com","source_url":"https://phishdestroy.io/domain/jeromerenaux.com/"}],"url":"https://domainspoof.com/live?show=all&q=www.jeromerenaux.com"},{"hostname":"www.kinetiq.page","first_observed":"2026-11-05T19:57:04.920Z","first_published":"2026-11-05T20:12:24.139Z","brands":[],"dns":"not_found","resolved":[],"resolved_at":"2026-11-05T20:01:54Z","dns_checked_at":"2026-11-06T12:27:48.000Z","findings":[{"id":"fjlkooxkzn4v2xmsddlet","kind":"reported_domain","summary":"Under kinetiq.page, listed by MetaMask","first_observed":"2026-11-05T19:57:04.920Z","first_published":"2026-11-05T20:12:24.139Z","source":"metamask","source_name":"MetaMask","under":"kinetiq.page"}],"url":"https://domainspoof.com/live?show=all&q=www.kinetiq.page"},{"hostname":"www.kwdjs.ezgateway.net","first_observed":"2026-11-05T19:31:10.785Z","first_published":"2026-11-05T20:12:24.139Z","brands":[],"dns":"resolved","resolved":["172.67.165.35"],"resolved_at":"2026-11-05T19:31:45Z","dns_checked_at":"2026-11-05T20:18:45.000Z","dns_since":"2026-11-05T20:18:45.000Z","findings":[{"id":"f323j2iczez3frkpdrpk3","kind":"reported_domain","summary":"Under ezgateway.net, listed by USOM","first_observed":"2026-11-05T19:31:10.785Z","first_published":"2026-11-05T20:12:24.139Z","source":"usom","source_name":"USOM","under":"ezgateway.net"}],"url":"https://domainspoof.com/live?show=all&q=www.kwdjs.ezgateway.net"},{"hostname":"www.lewdgamespc.com","first_observed":"2026-11-05T20:00:49.404Z","first_published":"2026-11-05T20:12:24.139Z","brands":[],"dns":"resolved","resolved":["104.21.84.156","172.67.194.145"],"resolved_at":"2026-11-05T20:06:45Z","dns_checked_at":"2026-11-05T20:18:45.000Z","dns_since":"2026-11-05T20:18:45.000Z","findings":[{"id":"fq6aky6xc6dqcahso56mq","kind":"reported_domain","summary":"Under lewdgamespc.com, reported by PhishDestroy","first_observed":"2026-11-05T20:00:49.404Z","first_published":"2026-11-05T20:12:24.139Z","source":"phishdestroy","source_name":"PhishDestroy","under":"lewdgamespc.com","source_url":"https://phishdestroy.io/domain/lewdgamespc.com/"}],"url":"https://domainspoof.com/live?show=all&q=www.lewdgamespc.com"},{"hostname":"www.licitlogs.org.floscapital.com","first_observed":"2026-11-05T19:26:14.408Z","first_published":"2026-11-05T20:12:24.139Z","brands":[],"dns":"resolved","resolved":["23.153.104.17"],"resolved_at":"2026-11-05T19:26:59Z","dns_checked_at":"2026-11-05T20:18:45.000Z","dns_since":"2026-11-05T20:18:45.000Z","findings":[{"id":"f5arca6zzy4a7xd4nr4zp","kind":"reported_domain","summary":"Under floscapital.com, reported by PhishDestroy","first_observed":"2026-11-05T19:26:14.408Z","first_published":"2026-11-05T20:12:24.139Z","source":"phishdestroy","source_name":"PhishDestroy","under":"floscapital.com","source_url":"https://phishdestroy.io/domain/floscapital.com/"}],"url":"https://domainspoof.com/live?show=all&q=www.licitlogs.org.floscapital.com"},{"hostname":"www.onion.tor.taxi","first_observed":"2026-11-05T19:16:29.893Z","first_published":"2026-11-05T20:12:24.139Z","brands":[],"dns":"resolved","resolved":["185.129.100.227"],"resolved_at":"2026-11-05T19:25:34Z","dns_checked_at":"2026-11-05T20:18:45.000Z","dns_since":"2026-11-05T20:18:45.000Z","findings":[{"id":"ftdze35pdpnnd3rffqdum","kind":"reported_domain","summary":"Under tor.taxi, reported by PhishDestroy","first_observed":"2026-11-05T19:16:29.893Z","first_published":"2026-11-05T20:12:24.139Z","source":"phishdestroy","source_name":"PhishDestroy","under":"tor.taxi","source_url":"https://phishdestroy.io/domain/tor.taxi/"}],"url":"https://domainspoof.com/live?show=all&q=www.onion.tor.taxi"},{"hostname":"www.parsatsite.shop","first_observed":"2026-11-05T19:31:10.785Z","first_published":"2026-11-05T20:12:24.139Z","brands":[],"dns":"resolved","resolved":["104.17.177.238"],"resolved_at":"2026-11-05T19:31:45Z","dns_checked_at":"2026-11-05T20:18:45.000Z","dns_since":"2026-11-05T20:18:45.000Z","findings":[{"id":"f63anw77zak3h65uceulf","kind":"reported_domain","summary":"Under parsatsite.shop, listed by CERT Polska","first_observed":"2026-11-05T19:31:10.785Z","first_published":"2026-11-05T20:12:24.139Z","source":"cert_polska","source_name":"CERT Polska","under":"parsatsite.shop"}],"url":"https://domainspoof.com/live?show=all&q=www.parsatsite.shop"},{"hostname":"www.pay-bitrefill.com-cu01-esim-gift.com","first_observed":"2026-11-05T19:41:11.694Z","first_published":"2026-11-05T20:12:24.139Z","brands":[{"id":"bitrefill","name":"Bitrefill","url":"https://domainspoof.com/brands/bitrefill"}],"dns":"resolved","resolved":["62.60.226.39"],"resolved_at":"2026-11-05T20:18:45Z","dns_checked_at":"2026-11-05T20:18:45.000Z","dns_since":"2026-11-05T20:18:45.000Z","findings":[{"id":"fdtes22kk4wx4uhkzg5wc","kind":"spamhaus_drop","summary":"Resolved to 62.60.226.39 on Spamhaus DROP","first_observed":"2026-11-05T19:41:11.694Z","first_published":"2026-11-05T20:12:24.139Z","address":"62.60.226.39","list":"spamhaus_drop","list_name":"Spamhaus DROP"}],"url":"https://domainspoof.com/brands/bitrefill"},{"hostname":"www.seafile.zenavlico.cyou","first_observed":"2026-11-05T20:00:49.404Z","first_published":"2026-11-05T20:12:24.139Z","brands":[],"dns":"resolved","resolved":["95.85.244.13"],"resolved_at":"2026-11-05T20:06:45Z","dns_checked_at":"2026-11-05T20:18:45.000Z","dns_since":"2026-11-05T20:18:45.000Z","findings":[{"id":"ftmr4qloc5htmggt3voiy","kind":"reported_domain","summary":"Under zenavlico.cyou, listed by CERT Polska","first_observed":"2026-11-05T20:00:49.404Z","first_published":"2026-11-05T20:12:24.139Z","source":"cert_polska","source_name":"CERT Polska","under":"zenavlico.cyou"}],"url":"https://domainspoof.com/live?show=all&q=www.seafile.zenavlico.cyou"},{"hostname":"www.suresh.quicktent.org","first_observed":"2026-11-05T20:05:35.030Z","first_published":"2026-11-05T20:12:24.139Z","brands":[],"dns":"resolved","resolved":["91.229.239.28"],"resolved_at":"2026-11-05T20:09:15Z","dns_checked_at":"2026-11-05T20:18:45.000Z","dns_since":"2026-11-05T20:18:45.000Z","findings":[{"id":"fb7ljp3ngak5itzivb736","kind":"reported_domain","summary":"Under quicktent.org, reported by PhishDestroy","first_observed":"2026-11-05T20:05:35.030Z","first_published":"2026-11-05T20:12:24.139Z","source":"phishdestroy","source_name":"PhishDestroy","under":"quicktent.org","source_url":"https://phishdestroy.io/domain/quicktent.org/"}],"url":"https://domainspoof.com/live?show=all&q=www.suresh.quicktent.org"},{"hostname":"www.tiktok1.site","first_observed":"2026-11-05T19:52:15.694Z","first_published":"2026-11-05T20:12:24.139Z","brands":[{"id":"tiktok","name":"TikTok","url":"https://domainspoof.com/brands/tiktok"}],"dns":"resolved","resolved":["92.53.96.169"],"resolved_at":"2026-11-05T20:18:45Z","dns_checked_at":"2026-11-05T20:18:45.000Z","dns_since":"2026-11-05T20:18:45.000Z","findings":[{"id":"fprnb5l5pvjtecy6bthyz","kind":"phishing_infrastructure","summary":"Resolved to 92.53.96.169, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T19:52:15.694Z","first_published":"2026-11-05T20:12:24.139Z","address":"92.53.96.169","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/tiktok"},{"hostname":"www.toyo-trade.com","first_observed":"2026-11-05T19:41:53.584Z","first_published":"2026-11-05T20:12:24.139Z","brands":[{"id":"jr-east","name":"JR East","url":"https://domainspoof.com/brands/jr-east"}],"dns":"resolved","resolved":["156.253.127.20"],"resolved_at":"2026-11-05T19:54:05Z","dns_checked_at":"2026-11-05T20:18:45.000Z","dns_since":"2026-11-05T20:18:45.000Z","findings":[{"id":"fj6fpu2m63g33qbqmcljp","kind":"reported_domain","summary":"Listed by JPCERT/CC as imitating JRE POINT","first_observed":"2026-11-05T19:41:53.584Z","first_published":"2026-11-05T20:12:24.139Z","source":"jpcert","source_name":"JPCERT/CC","claim":{"brand":"JRE POINT"}}],"url":"https://domainspoof.com/brands/jr-east"},{"hostname":"www.vantismarkets.com","first_observed":"2026-11-05T19:51:38.274Z","first_published":"2026-11-05T20:12:24.139Z","brands":[],"dns":"resolved","resolved":["191.101.104.16","195.35.60.78"],"resolved_at":"2026-11-05T19:52:15Z","dns_checked_at":"2026-11-05T20:18:45.000Z","dns_since":"2026-11-05T20:18:45.000Z","findings":[{"id":"fsbyoltudmbwhs7x73g2v","kind":"reported_domain","summary":"Under vantismarkets.com, reported by PhishDestroy","first_observed":"2026-11-05T19:51:38.274Z","first_published":"2026-11-05T20:12:24.139Z","source":"phishdestroy","source_name":"PhishDestroy","under":"vantismarkets.com","source_url":"https://phishdestroy.io/domain/vantismarkets.com/"}],"url":"https://domainspoof.com/live?show=all&q=www.vantismarkets.com"},{"hostname":"www.whm.zenavlico.cyou","first_observed":"2026-11-05T19:05:38.392Z","first_published":"2026-11-05T20:12:24.139Z","brands":[],"dns":"resolved","resolved":["95.85.244.13"],"resolved_at":"2026-11-05T19:12:38Z","dns_checked_at":"2026-11-05T20:18:45.000Z","dns_since":"2026-11-05T20:18:45.000Z","findings":[{"id":"fnkqhdeaaygn2s3mr3tyc","kind":"reported_domain","summary":"Under zenavlico.cyou, listed by CERT Polska","first_observed":"2026-11-05T19:05:38.392Z","first_published":"2026-11-05T20:12:24.139Z","source":"cert_polska","source_name":"CERT Polska","under":"zenavlico.cyou"}],"url":"https://domainspoof.com/live?show=all&q=www.whm.zenavlico.cyou"},{"hostname":"www.wildtrade247.com.floscapital.com","first_observed":"2026-11-05T19:26:14.408Z","first_published":"2026-11-05T20:12:24.139Z","brands":[],"dns":"resolved","resolved":["23.153.104.17"],"resolved_at":"2026-11-05T19:26:59Z","dns_checked_at":"2026-11-05T20:18:45.000Z","dns_since":"2026-11-05T20:18:45.000Z","findings":[{"id":"f4di66n2c3mpzoj4mjnlw","kind":"reported_domain","summary":"Under floscapital.com, reported by PhishDestroy","first_observed":"2026-11-05T19:26:14.408Z","first_published":"2026-11-05T20:12:24.139Z","source":"phishdestroy","source_name":"PhishDestroy","under":"floscapital.com","source_url":"https://phishdestroy.io/domain/floscapital.com/"}],"url":"https://domainspoof.com/live?show=all&q=www.wildtrade247.com.floscapital.com"},{"hostname":"www.wompstores.lat","first_observed":"2026-11-05T19:05:38.392Z","first_published":"2026-11-05T20:12:24.139Z","brands":[],"dns":"resolved","resolved":["66.29.148.190"],"resolved_at":"2026-11-05T19:12:38Z","dns_checked_at":"2026-11-05T20:18:45.000Z","dns_since":"2026-11-05T20:18:45.000Z","findings":[{"id":"fg7sxqgtvlle2ov2cj2pq","kind":"reported_domain","summary":"Under wompstores.lat, listed by MetaMask","first_observed":"2026-11-05T19:05:38.392Z","first_published":"2026-11-05T20:12:24.139Z","source":"metamask","source_name":"MetaMask","under":"wompstores.lat"}],"url":"https://domainspoof.com/live?show=all&q=www.wompstores.lat"},{"hostname":"www.x-swap.org","first_observed":"2026-11-05T19:51:38.274Z","first_published":"2026-11-05T20:12:24.139Z","brands":[],"dns":"resolved","resolved":["66.33.60.130","76.76.21.61"],"resolved_at":"2026-11-05T19:52:15Z","dns_checked_at":"2026-11-05T20:18:45.000Z","dns_since":"2026-11-05T20:18:45.000Z","findings":[{"id":"fyyqdlj7iizu4lg2g2i7c","kind":"reported_domain","summary":"Under x-swap.org, reported by PhishDestroy","first_observed":"2026-11-05T19:51:38.274Z","first_published":"2026-11-05T20:12:24.139Z","source":"phishdestroy","source_name":"PhishDestroy","under":"x-swap.org","source_url":"https://phishdestroy.io/domain/x-swap.org/"}],"url":"https://domainspoof.com/live?show=all&q=www.x-swap.org"},{"hostname":"xn--monshot-9mc.com","first_observed":"2026-11-05T19:57:04.920Z","first_published":"2026-11-05T20:12:24.139Z","brands":[],"dns":"resolved","resolved":["104.21.22.108","172.67.204.99"],"resolved_at":"2026-11-05T20:01:55Z","dns_checked_at":"2026-11-05T20:18:45.000Z","dns_since":"2026-11-05T20:18:45.000Z","findings":[{"id":"faudilg6q6pylycy4tteo","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T19:57:04.920Z","first_published":"2026-11-05T20:12:24.139Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/xn--monshot-9mc.com/"}],"url":"https://domainspoof.com/live?show=all&q=xn--monshot-9mc.com"},{"hostname":"yasha-migration.pages.dev","first_observed":"2026-11-05T19:26:14.408Z","first_published":"2026-11-05T20:12:24.139Z","brands":[],"dns":"resolved","resolved":["172.66.44.147","172.66.47.109"],"resolved_at":"2026-11-05T19:26:59Z","dns_checked_at":"2026-11-05T20:18:45.000Z","dns_since":"2026-11-05T20:18:45.000Z","findings":[{"id":"fbcejsurbmk3filyekqaj","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T19:26:14.408Z","first_published":"2026-11-05T20:12:24.139Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=yasha-migration.pages.dev"},{"hostname":"yywwgp.top","first_observed":"2026-11-05T19:57:04.920Z","first_published":"2026-11-05T20:12:24.139Z","brands":[],"dns":"resolved","resolved":["104.21.28.70","172.67.144.155"],"resolved_at":"2026-11-05T20:01:55Z","dns_checked_at":"2026-11-05T20:18:45.000Z","dns_since":"2026-11-05T20:18:45.000Z","findings":[{"id":"fk2xwdrwavtuw6hcypjpx","kind":"reported_domain","summary":"Listed by NPA 165 (information services)","first_observed":"2026-11-05T19:57:04.920Z","first_published":"2026-11-05T20:12:24.139Z","source":"npa","source_name":"NPA 165","claim":{"category":"information services"}}],"url":"https://domainspoof.com/live?show=all&q=yywwgp.top"},{"hostname":"zazerfiosuir.com","first_observed":"2026-11-05T19:41:53.584Z","first_published":"2026-11-05T20:12:24.139Z","brands":[],"dns":"resolved","resolved":["104.21.96.108","172.67.177.22"],"resolved_at":"2026-11-05T19:42:15Z","dns_checked_at":"2026-11-05T20:18:45.000Z","dns_since":"2026-11-05T20:18:45.000Z","findings":[{"id":"foh3lcigzn6r3kbsfivim","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T19:41:53.584Z","first_published":"2026-11-05T20:12:24.139Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=zazerfiosuir.com"},{"hostname":"zemantraki-de.live","first_observed":"2026-11-05T19:36:57.164Z","first_published":"2026-11-05T20:12:24.139Z","brands":[],"dns":"resolved","resolved":["104.21.19.127","172.67.186.45"],"resolved_at":"2026-11-05T19:41:13Z","dns_checked_at":"2026-11-05T20:18:45.000Z","dns_since":"2026-11-05T20:18:45.000Z","findings":[{"id":"fgcpszrt7tgw7df2figc7","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T19:36:57.164Z","first_published":"2026-11-05T20:12:24.139Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=zemantraki-de.live"},{"hostname":"zhovrantek-fr.live","first_observed":"2026-11-05T19:26:14.408Z","first_published":"2026-11-05T20:12:24.139Z","brands":[],"dns":"resolved","resolved":["104.21.53.210","172.67.218.214"],"resolved_at":"2026-11-05T19:26:59Z","dns_checked_at":"2026-11-05T20:18:45.000Z","dns_since":"2026-11-05T20:18:45.000Z","findings":[{"id":"fnn53hkx3uphxodfipzwn","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T19:26:14.408Z","first_published":"2026-11-05T20:12:24.139Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=zhovrantek-fr.live"},{"hostname":"zhovrantek.live","first_observed":"2026-11-05T20:00:49.404Z","first_published":"2026-11-05T20:12:24.139Z","brands":[],"dns":"resolved","resolved":["104.21.70.79","172.67.221.211"],"resolved_at":"2026-11-05T20:06:45Z","dns_checked_at":"2026-11-05T20:18:45.000Z","dns_since":"2026-11-05T20:18:45.000Z","findings":[{"id":"fgo6mr5puqc7btcdtl3dd","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T20:00:49.404Z","first_published":"2026-11-05T20:12:24.139Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=zhovrantek.live"},{"hostname":"zinchumbel.store","first_observed":"2026-11-05T19:00:49.069Z","first_published":"2026-11-05T20:12:24.139Z","brands":[],"dns":"no_address","resolved":[],"resolved_at":"2026-11-05T19:01:32Z","dns_checked_at":"2026-11-06T12:27:48.000Z","findings":[{"id":"f4nuezhlog73cvalqixx2","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T19:00:49.069Z","first_published":"2026-11-05T20:12:24.139Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=zinchumbel.store"},{"hostname":"ziwere-botuja.info","first_observed":"2026-11-05T20:00:49.404Z","first_published":"2026-11-05T20:12:24.139Z","brands":[],"dns":"resolved","resolved":["104.21.67.172","172.67.178.253"],"resolved_at":"2026-11-05T20:06:45Z","dns_checked_at":"2026-11-05T20:18:45.000Z","dns_since":"2026-11-05T20:18:45.000Z","findings":[{"id":"fralgqjyj232pov2obit6","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T20:00:49.404Z","first_published":"2026-11-05T20:12:24.139Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=ziwere-botuja.info"},{"hostname":"zwinzshopping.shop","first_observed":"2026-11-05T19:05:38.392Z","first_published":"2026-11-05T20:12:24.139Z","brands":[],"dns":"no_address","resolved":[],"resolved_at":"2026-11-05T19:12:41Z","dns_checked_at":"2026-11-06T12:27:48.000Z","findings":[{"id":"flk5xvldjon7nqkngh2h7","kind":"reported_domain","summary":"Listed by NPA 165 (e-commerce)","first_observed":"2026-11-05T19:05:38.392Z","first_published":"2026-11-05T20:12:24.139Z","source":"npa","source_name":"NPA 165","claim":{"category":"e-commerce"}}],"url":"https://domainspoof.com/live?show=all&q=zwinzshopping.shop"},{"hostname":"apypal.com","first_observed":"2026-11-05T19:04:00.000Z","first_published":"2026-11-05T19:04:00.000Z","brands":[{"id":"paypal","name":"PayPal","url":"https://domainspoof.com/brands/paypal"}],"dns":"resolved","resolved":["212.7.194.67"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of paypal.com (two letters swapped), resolved to 212.7.194.67, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T19:04:00.000Z","first_published":"2026-11-05T19:04:00.000Z","of":"paypal.com","spelling":"transposition","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"212.7.194.67","flagged_at":"2026-11-05T19:04:00Z"}]}],"url":"https://domainspoof.com/brands/paypal"},{"hostname":"ikea.tokyo","first_observed":"2026-11-05T19:04:00.000Z","first_published":"2026-11-05T19:04:00.000Z","brands":[{"id":"ikea","name":"IKEA","url":"https://domainspoof.com/brands/ikea"}],"dns":"resolved","resolved":["150.95.255.38"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of ikea.com (same name, other ending), resolved to 150.95.255.38, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T19:04:00.000Z","first_published":"2026-11-05T19:04:00.000Z","of":"ikea.com","spelling":"tld","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"150.95.255.38","flagged_at":"2026-11-05T19:04:00Z"}]}],"url":"https://domainspoof.com/brands/ikea"},{"hostname":"jike.me","first_observed":"2026-11-05T19:04:00.000Z","first_published":"2026-11-05T19:04:00.000Z","brands":[{"id":"nike","name":"Nike","url":"https://domainspoof.com/brands/nike"}],"dns":"resolved","resolved":["185.150.189.124"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of nike.com (a letter from a neighbouring key), resolved to 185.150.189.124, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T19:04:00.000Z","first_published":"2026-11-05T19:04:00.000Z","of":"nike.com","spelling":"adjacent_key","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"185.150.189.124","flagged_at":"2026-11-05T19:04:00Z"}]}],"url":"https://domainspoof.com/brands/nike"},{"hostname":"kichaelkors.com","first_observed":"2026-11-05T19:04:00.000Z","first_published":"2026-11-05T19:04:00.000Z","brands":[{"id":"michael-kors","name":"Michael Kors","url":"https://domainspoof.com/brands/michael-kors"}],"dns":"resolved","resolved":["69.162.80.61"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of michaelkors.com (a letter from a neighbouring key), resolved to 69.162.80.61, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T19:04:00.000Z","first_published":"2026-11-05T19:04:00.000Z","of":"michaelkors.com","spelling":"adjacent_key","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"69.162.80.61","flagged_at":"2026-11-05T19:04:00Z"}]}],"url":"https://domainspoof.com/brands/michael-kors"},{"hostname":"mcihaelkors.com","first_observed":"2026-11-05T19:04:00.000Z","first_published":"2026-11-05T19:04:00.000Z","brands":[{"id":"michael-kors","name":"Michael Kors","url":"https://domainspoof.com/brands/michael-kors"}],"dns":"resolved","resolved":["69.162.80.61"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of michaelkors.com (two letters swapped), resolved to 69.162.80.61, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T19:04:00.000Z","first_published":"2026-11-05T19:04:00.000Z","of":"michaelkors.com","spelling":"transposition","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"69.162.80.61","flagged_at":"2026-11-05T19:04:00Z"}]}],"url":"https://domainspoof.com/brands/michael-kors"},{"hostname":"meramask.io","first_observed":"2026-11-05T19:04:00.000Z","first_published":"2026-11-05T19:04:00.000Z","brands":[{"id":"metamask","name":"MetaMask","url":"https://domainspoof.com/brands/metamask"}],"dns":"resolved","resolved":["185.53.179.128"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of metamask.io (a letter from a neighbouring key), listed by MetaMask","first_observed":"2026-11-05T19:04:00.000Z","first_published":"2026-11-05T19:04:00.000Z","of":"metamask.io","spelling":"adjacent_key","found_by":"dns_sweep","listings":[{"kind":"reported","source":"metamask","source_name":"MetaMask","host":"meramask.io","flagged_at":"2026-11-05T19:04:00Z"}]}],"url":"https://domainspoof.com/brands/metamask"},{"hostname":"metamasj.io","first_observed":"2026-11-05T19:04:00.000Z","first_published":"2026-11-05T19:04:00.000Z","brands":[{"id":"metamask","name":"MetaMask","url":"https://domainspoof.com/brands/metamask"}],"dns":"resolved","resolved":["185.53.179.128"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of metamask.io (a letter from a neighbouring key), listed by MetaMask","first_observed":"2026-11-05T19:04:00.000Z","first_published":"2026-11-05T19:04:00.000Z","of":"metamask.io","spelling":"adjacent_key","found_by":"dns_sweep","listings":[{"kind":"reported","source":"metamask","source_name":"MetaMask","host":"metamasj.io","flagged_at":"2026-11-05T19:04:00Z"}]}],"url":"https://domainspoof.com/brands/metamask"},{"hostname":"metamasl.io","first_observed":"2026-11-05T19:04:00.000Z","first_published":"2026-11-05T19:04:00.000Z","brands":[{"id":"metamask","name":"MetaMask","url":"https://domainspoof.com/brands/metamask"}],"dns":"resolved","resolved":["185.53.179.128"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of metamask.io (a letter from a neighbouring key), listed by MetaMask","first_observed":"2026-11-05T19:04:00.000Z","first_published":"2026-11-05T19:04:00.000Z","of":"metamask.io","spelling":"adjacent_key","found_by":"dns_sweep","listings":[{"kind":"reported","source":"metamask","source_name":"MetaMask","host":"metamasl.io","flagged_at":"2026-11-05T19:04:00Z"}]}],"url":"https://domainspoof.com/brands/metamask"},{"hostname":"meto.app","first_observed":"2026-11-05T19:04:00.000Z","first_published":"2026-11-05T19:04:00.000Z","brands":[{"id":"meti","name":"METI","url":"https://domainspoof.com/brands/meti"}],"dns":"resolved","resolved":["185.151.30.171","2a07:7800::171"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of meti.go.jp (a letter from a neighbouring key), resolved to 185.151.30.171, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T19:04:00.000Z","first_published":"2026-11-05T19:04:00.000Z","of":"meti.go.jp","spelling":"adjacent_key","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"185.151.30.171","flagged_at":"2026-11-05T19:04:00Z"}]}],"url":"https://domainspoof.com/brands/meti"},{"hostname":"metsmask.io","first_observed":"2026-11-05T19:04:00.000Z","first_published":"2026-11-05T19:04:00.000Z","brands":[{"id":"metamask","name":"MetaMask","url":"https://domainspoof.com/brands/metamask"}],"dns":"resolved","resolved":["185.53.179.128"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of metamask.io (a letter from a neighbouring key), listed by MetaMask","first_observed":"2026-11-05T19:04:00.000Z","first_published":"2026-11-05T19:04:00.000Z","of":"metamask.io","spelling":"adjacent_key","found_by":"dns_sweep","listings":[{"kind":"reported","source":"metamask","source_name":"MetaMask","host":"metsmask.io","flagged_at":"2026-11-05T19:04:00Z"}]}],"url":"https://domainspoof.com/brands/metamask"},{"hostname":"meyamask.io","first_observed":"2026-11-05T19:04:00.000Z","first_published":"2026-11-05T19:04:00.000Z","brands":[{"id":"metamask","name":"MetaMask","url":"https://domainspoof.com/brands/metamask"}],"dns":"resolved","resolved":["185.53.179.128"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of metamask.io (a letter from a neighbouring key), listed by MetaMask","first_observed":"2026-11-05T19:04:00.000Z","first_published":"2026-11-05T19:04:00.000Z","of":"metamask.io","spelling":"adjacent_key","found_by":"dns_sweep","listings":[{"kind":"reported","source":"metamask","source_name":"MetaMask","host":"meyamask.io","flagged_at":"2026-11-05T19:04:00Z"}]}],"url":"https://domainspoof.com/brands/metamask"},{"hostname":"micgaelkors.com","first_observed":"2026-11-05T19:04:00.000Z","first_published":"2026-11-05T19:04:00.000Z","brands":[{"id":"michael-kors","name":"Michael Kors","url":"https://domainspoof.com/brands/michael-kors"}],"dns":"resolved","resolved":["212.7.194.67"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of michaelkors.com (a letter from a neighbouring key), resolved to 212.7.194.67, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T19:04:00.000Z","first_published":"2026-11-05T19:04:00.000Z","of":"michaelkors.com","spelling":"adjacent_key","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"212.7.194.67","flagged_at":"2026-11-05T19:04:00Z"}]}],"url":"https://domainspoof.com/brands/michael-kors"},{"hostname":"michaekors.com","first_observed":"2026-11-05T19:04:00.000Z","first_published":"2026-11-05T19:04:00.000Z","brands":[{"id":"michael-kors","name":"Michael Kors","url":"https://domainspoof.com/brands/michael-kors"}],"dns":"resolved","resolved":["69.162.80.55"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of michaelkors.com (a dropped letter), resolved to 69.162.80.55, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T19:04:00.000Z","first_published":"2026-11-05T19:04:00.000Z","of":"michaelkors.com","spelling":"omission","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"69.162.80.55","flagged_at":"2026-11-05T19:04:00Z"}]}],"url":"https://domainspoof.com/brands/michael-kors"},{"hostname":"michaelkkrs.com","first_observed":"2026-11-05T19:04:00.000Z","first_published":"2026-11-05T19:04:00.000Z","brands":[{"id":"michael-kors","name":"Michael Kors","url":"https://domainspoof.com/brands/michael-kors"}],"dns":"resolved","resolved":["212.7.194.71"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of michaelkors.com (a letter from a neighbouring key), resolved to 212.7.194.71, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T19:04:00.000Z","first_published":"2026-11-05T19:04:00.000Z","of":"michaelkors.com","spelling":"adjacent_key","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"212.7.194.71","flagged_at":"2026-11-05T19:04:00Z"}]}],"url":"https://domainspoof.com/brands/michael-kors"},{"hostname":"michaelkods.com","first_observed":"2026-11-05T19:04:00.000Z","first_published":"2026-11-05T19:04:00.000Z","brands":[{"id":"michael-kors","name":"Michael Kors","url":"https://domainspoof.com/brands/michael-kors"}],"dns":"resolved","resolved":["69.162.80.56"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of michaelkors.com (a letter from a neighbouring key), resolved to 69.162.80.56, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T19:04:00.000Z","first_published":"2026-11-05T19:04:00.000Z","of":"michaelkors.com","spelling":"adjacent_key","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"69.162.80.56","flagged_at":"2026-11-05T19:04:00Z"}]}],"url":"https://domainspoof.com/brands/michael-kors"},{"hostname":"michaelkots.com","first_observed":"2026-11-05T19:04:00.000Z","first_published":"2026-11-05T19:04:00.000Z","brands":[{"id":"michael-kors","name":"Michael Kors","url":"https://domainspoof.com/brands/michael-kors"}],"dns":"resolved","resolved":["77.247.182.247"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of michaelkors.com (a letter from a neighbouring key), resolved to 77.247.182.247, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T19:04:00.000Z","first_published":"2026-11-05T19:04:00.000Z","of":"michaelkors.com","spelling":"adjacent_key","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"77.247.182.247","flagged_at":"2026-11-05T19:04:00Z"}]}],"url":"https://domainspoof.com/brands/michael-kors"},{"hostname":"michelkors.com","first_observed":"2026-11-05T19:04:00.000Z","first_published":"2026-11-05T19:04:00.000Z","brands":[{"id":"michael-kors","name":"Michael Kors","url":"https://domainspoof.com/brands/michael-kors"}],"dns":"resolved","resolved":["199.193.114.102"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of michaelkors.com (a dropped letter), resolved to 199.193.114.102, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T19:04:00.000Z","first_published":"2026-11-05T19:04:00.000Z","of":"michaelkors.com","spelling":"omission","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"199.193.114.102","flagged_at":"2026-11-05T19:04:00Z"}]}],"url":"https://domainspoof.com/brands/michael-kors"},{"hostname":"micorsoftonline.com","first_observed":"2026-11-05T19:04:00.000Z","first_published":"2026-11-05T19:04:00.000Z","brands":[{"id":"microsoft","name":"Microsoft","url":"https://domainspoof.com/brands/microsoft"}],"dns":"resolved","resolved":["77.247.179.83"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of microsoftonline.com (two letters swapped), resolved to 77.247.179.83, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T19:04:00.000Z","first_published":"2026-11-05T19:04:00.000Z","of":"microsoftonline.com","spelling":"transposition","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"77.247.179.83","flagged_at":"2026-11-05T19:04:00Z"}]}],"url":"https://domainspoof.com/brands/microsoft"},{"hostname":"microsfot.us","first_observed":"2026-11-05T19:04:00.000Z","first_published":"2026-11-05T19:04:00.000Z","brands":[{"id":"microsoft","name":"Microsoft","url":"https://domainspoof.com/brands/microsoft"}],"dns":"resolved","resolved":["77.247.179.82"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of microsoft.com (two letters swapped), resolved to 77.247.179.82, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T19:04:00.000Z","first_published":"2026-11-05T19:04:00.000Z","of":"microsoft.com","spelling":"transposition","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"77.247.179.82","flagged_at":"2026-11-05T19:04:00Z"}]}],"url":"https://domainspoof.com/brands/microsoft"},{"hostname":"microsoft635.com","first_observed":"2026-11-05T19:04:00.000Z","first_published":"2026-11-05T19:04:00.000Z","brands":[{"id":"microsoft","name":"Microsoft","url":"https://domainspoof.com/brands/microsoft"}],"dns":"resolved","resolved":["77.247.182.243"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of microsoft365.com (two letters swapped), resolved to 77.247.182.243, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T19:04:00.000Z","first_published":"2026-11-05T19:04:00.000Z","of":"microsoft365.com","spelling":"transposition","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"77.247.182.243","flagged_at":"2026-11-05T19:04:00Z"}]}],"url":"https://domainspoof.com/brands/microsoft"},{"hostname":"mihaelkors.com","first_observed":"2026-11-05T19:04:00.000Z","first_published":"2026-11-05T19:04:00.000Z","brands":[{"id":"michael-kors","name":"Michael Kors","url":"https://domainspoof.com/brands/michael-kors"}],"dns":"resolved","resolved":["45.82.67.143"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of michaelkors.com (a dropped letter), resolved to 45.82.67.143, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T19:04:00.000Z","first_published":"2026-11-05T19:04:00.000Z","of":"michaelkors.com","spelling":"omission","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"45.82.67.143","flagged_at":"2026-11-05T19:04:00Z"}]}],"url":"https://domainspoof.com/brands/michael-kors"},{"hostname":"mineecraft.net","first_observed":"2026-11-05T19:04:00.000Z","first_published":"2026-11-05T19:04:00.000Z","brands":[{"id":"minecraft","name":"Minecraft","url":"https://domainspoof.com/brands/minecraft"}],"dns":"resolved","resolved":["45.82.67.240"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of minecraft.net (a doubled letter), resolved to 45.82.67.240, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T19:04:00.000Z","first_published":"2026-11-05T19:04:00.000Z","of":"minecraft.net","spelling":"repetition","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"45.82.67.240","flagged_at":"2026-11-05T19:04:00Z"}]}],"url":"https://domainspoof.com/brands/minecraft"},{"hostname":"mmichaelkors.com","first_observed":"2026-11-05T19:04:00.000Z","first_published":"2026-11-05T19:04:00.000Z","brands":[{"id":"michael-kors","name":"Michael Kors","url":"https://domainspoof.com/brands/michael-kors"}],"dns":"resolved","resolved":["216.245.213.73"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of michaelkors.com (a doubled letter), resolved to 216.245.213.73, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T19:04:00.000Z","first_published":"2026-11-05T19:04:00.000Z","of":"michaelkors.com","spelling":"repetition","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"216.245.213.73","flagged_at":"2026-11-05T19:04:00Z"}]}],"url":"https://domainspoof.com/brands/michael-kors"},{"hostname":"mobillegends.net","first_observed":"2026-11-05T19:04:00.000Z","first_published":"2026-11-05T19:04:00.000Z","brands":[{"id":"mobile-legends","name":"Mobile Legends","url":"https://domainspoof.com/brands/mobile-legends"}],"dns":"resolved","resolved":["172.241.213.98"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of mobilelegends.com (a dropped letter), resolved to 172.241.213.98, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T19:04:00.000Z","first_published":"2026-11-05T19:04:00.000Z","of":"mobilelegends.com","spelling":"omission","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"172.241.213.98","flagged_at":"2026-11-05T19:04:00Z"}]}],"url":"https://domainspoof.com/brands/mobile-legends"},{"hostname":"mrtamask.io","first_observed":"2026-11-05T19:04:00.000Z","first_published":"2026-11-05T19:04:00.000Z","brands":[{"id":"metamask","name":"MetaMask","url":"https://domainspoof.com/brands/metamask"}],"dns":"resolved","resolved":["185.53.179.128"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of metamask.io (a letter from a neighbouring key), listed by MetaMask","first_observed":"2026-11-05T19:04:00.000Z","first_published":"2026-11-05T19:04:00.000Z","of":"metamask.io","spelling":"adjacent_key","found_by":"dns_sweep","listings":[{"kind":"reported","source":"metamask","source_name":"MetaMask","host":"mrtamask.io","flagged_at":"2026-11-05T19:04:00Z"}]}],"url":"https://domainspoof.com/brands/metamask"},{"hostname":"mwtamask.io","first_observed":"2026-11-05T19:04:00.000Z","first_published":"2026-11-05T19:04:00.000Z","brands":[{"id":"metamask","name":"MetaMask","url":"https://domainspoof.com/brands/metamask"}],"dns":"resolved","resolved":["185.53.179.128"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of metamask.io (a letter from a neighbouring key), listed by MetaMask","first_observed":"2026-11-05T19:04:00.000Z","first_published":"2026-11-05T19:04:00.000Z","of":"metamask.io","spelling":"adjacent_key","found_by":"dns_sweep","listings":[{"kind":"reported","source":"metamask","source_name":"MetaMask","host":"mwtamask.io","flagged_at":"2026-11-05T19:04:00Z"}]}],"url":"https://domainspoof.com/brands/metamask"},{"hostname":"myetherwalet.com","first_observed":"2026-11-05T19:04:00.000Z","first_published":"2026-11-05T19:04:00.000Z","brands":[{"id":"myetherwallet","name":"MyEtherWallet","url":"https://domainspoof.com/brands/myetherwallet"}],"dns":"resolved","resolved":["185.53.179.128"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of myetherwallet.com (a dropped letter), listed by MetaMask","first_observed":"2026-11-05T19:04:00.000Z","first_published":"2026-11-05T19:04:00.000Z","of":"myetherwallet.com","spelling":"omission","found_by":"dns_sweep","listings":[{"kind":"reported","source":"metamask","source_name":"MetaMask","host":"myetherwalet.com","flagged_at":"2026-11-05T19:04:00Z"}]}],"url":"https://domainspoof.com/brands/myetherwallet"},{"hostname":"mywokrday.com","first_observed":"2026-11-05T19:04:00.000Z","first_published":"2026-11-05T19:04:00.000Z","brands":[{"id":"workday","name":"Workday","url":"https://domainspoof.com/brands/workday"}],"dns":"resolved","resolved":["77.247.182.248"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of myworkday.com (two letters swapped), resolved to 77.247.182.248, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T19:04:00.000Z","first_published":"2026-11-05T19:04:00.000Z","of":"myworkday.com","spelling":"transposition","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"77.247.182.248","flagged_at":"2026-11-05T19:04:00Z"}]}],"url":"https://domainspoof.com/brands/workday"},{"hostname":"myworkdday.com","first_observed":"2026-11-05T19:04:00.000Z","first_published":"2026-11-05T19:04:00.000Z","brands":[{"id":"workday","name":"Workday","url":"https://domainspoof.com/brands/workday"}],"dns":"resolved","resolved":["213.227.156.75"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of myworkday.com (a doubled letter), resolved to 213.227.156.75, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T19:04:00.000Z","first_published":"2026-11-05T19:04:00.000Z","of":"myworkday.com","spelling":"repetition","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"213.227.156.75","flagged_at":"2026-11-05T19:04:00Z"}]}],"url":"https://domainspoof.com/brands/workday"},{"hostname":"nameccheap.com","first_observed":"2026-11-05T19:04:00.000Z","first_published":"2026-11-05T19:04:00.000Z","brands":[{"id":"namecheap","name":"Namecheap","url":"https://domainspoof.com/brands/namecheap"}],"dns":"resolved","resolved":["216.245.197.42"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of namecheap.com (a doubled letter), resolved to 216.245.197.42, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T19:04:00.000Z","first_published":"2026-11-05T19:04:00.000Z","of":"namecheap.com","spelling":"repetition","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"216.245.197.42","flagged_at":"2026-11-05T19:04:00Z"}]}],"url":"https://domainspoof.com/brands/namecheap"},{"hostname":"namecheal.com","first_observed":"2026-11-05T19:04:00.000Z","first_published":"2026-11-05T19:04:00.000Z","brands":[{"id":"namecheap","name":"Namecheap","url":"https://domainspoof.com/brands/namecheap"}],"dns":"resolved","resolved":["216.245.197.41"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of namecheap.com (a letter from a neighbouring key), resolved to 216.245.197.41, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T19:04:00.000Z","first_published":"2026-11-05T19:04:00.000Z","of":"namecheap.com","spelling":"adjacent_key","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"216.245.197.41","flagged_at":"2026-11-05T19:04:00Z"}]}],"url":"https://domainspoof.com/brands/namecheap"},{"hostname":"natest.co.uk","first_observed":"2026-11-05T19:04:00.000Z","first_published":"2026-11-05T19:04:00.000Z","brands":[{"id":"natwest","name":"NatWest","url":"https://domainspoof.com/brands/natwest"}],"dns":"resolved","resolved":["77.247.179.83"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of natwest.com (a dropped letter), resolved to 77.247.179.83, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T19:04:00.000Z","first_published":"2026-11-05T19:04:00.000Z","of":"natwest.com","spelling":"omission","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"77.247.179.83","flagged_at":"2026-11-05T19:04:00Z"}]}],"url":"https://domainspoof.com/brands/natwest"},{"hostname":"natwets.com","first_observed":"2026-11-05T19:04:00.000Z","first_published":"2026-11-05T19:04:00.000Z","brands":[{"id":"natwest","name":"NatWest","url":"https://domainspoof.com/brands/natwest"}],"dns":"resolved","resolved":["199.193.114.101"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of natwest.com (two letters swapped), resolved to 199.193.114.101, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T19:04:00.000Z","first_published":"2026-11-05T19:04:00.000Z","of":"natwest.com","spelling":"transposition","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"199.193.114.101","flagged_at":"2026-11-05T19:04:00Z"}]}],"url":"https://domainspoof.com/brands/natwest"},{"hostname":"navyfeceral.org","first_observed":"2026-11-05T19:04:00.000Z","first_published":"2026-11-05T19:04:00.000Z","brands":[{"id":"navy-federal-credit-union","name":"Navy Federal Credit Union","url":"https://domainspoof.com/brands/navy-federal-credit-union"}],"dns":"resolved","resolved":["199.193.114.44"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of navyfederal.org (a letter from a neighbouring key), resolved to 199.193.114.44, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T19:04:00.000Z","first_published":"2026-11-05T19:04:00.000Z","of":"navyfederal.org","spelling":"adjacent_key","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"199.193.114.44","flagged_at":"2026-11-05T19:04:00Z"}]}],"url":"https://domainspoof.com/brands/navy-federal-credit-union"},{"hostname":"navyfedeeal.org","first_observed":"2026-11-05T19:04:00.000Z","first_published":"2026-11-05T19:04:00.000Z","brands":[{"id":"navy-federal-credit-union","name":"Navy Federal Credit Union","url":"https://domainspoof.com/brands/navy-federal-credit-union"}],"dns":"resolved","resolved":["199.193.114.43"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of navyfederal.org (a letter from a neighbouring key), resolved to 199.193.114.43, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T19:04:00.000Z","first_published":"2026-11-05T19:04:00.000Z","of":"navyfederal.org","spelling":"adjacent_key","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"199.193.114.43","flagged_at":"2026-11-05T19:04:00Z"}]}],"url":"https://domainspoof.com/brands/navy-federal-credit-union"},{"hostname":"navyfederaal.org","first_observed":"2026-11-05T19:04:00.000Z","first_published":"2026-11-05T19:04:00.000Z","brands":[{"id":"navy-federal-credit-union","name":"Navy Federal Credit Union","url":"https://domainspoof.com/brands/navy-federal-credit-union"}],"dns":"resolved","resolved":["213.227.156.75"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of navyfederal.org (a doubled letter), resolved to 213.227.156.75, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T19:04:00.000Z","first_published":"2026-11-05T19:04:00.000Z","of":"navyfederal.org","spelling":"repetition","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"213.227.156.75","flagged_at":"2026-11-05T19:04:00Z"}]}],"url":"https://domainspoof.com/brands/navy-federal-credit-union"},{"hostname":"navyfederql.org","first_observed":"2026-11-05T19:04:00.000Z","first_published":"2026-11-05T19:04:00.000Z","brands":[{"id":"navy-federal-credit-union","name":"Navy Federal Credit Union","url":"https://domainspoof.com/brands/navy-federal-credit-union"}],"dns":"resolved","resolved":["199.193.114.46"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of navyfederal.org (a letter from a neighbouring key), resolved to 199.193.114.46, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T19:04:00.000Z","first_published":"2026-11-05T19:04:00.000Z","of":"navyfederal.org","spelling":"adjacent_key","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"199.193.114.46","flagged_at":"2026-11-05T19:04:00Z"}]}],"url":"https://domainspoof.com/brands/navy-federal-credit-union"},{"hostname":"navyfeederal.org","first_observed":"2026-11-05T19:04:00.000Z","first_published":"2026-11-05T19:04:00.000Z","brands":[{"id":"navy-federal-credit-union","name":"Navy Federal Credit Union","url":"https://domainspoof.com/brands/navy-federal-credit-union"}],"dns":"resolved","resolved":["213.227.156.74"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of navyfederal.org (a doubled letter), resolved to 213.227.156.74, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T19:04:00.000Z","first_published":"2026-11-05T19:04:00.000Z","of":"navyfederal.org","spelling":"repetition","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"213.227.156.74","flagged_at":"2026-11-05T19:04:00Z"}]}],"url":"https://domainspoof.com/brands/navy-federal-credit-union"},{"hostname":"navyfereral.org","first_observed":"2026-11-05T19:04:00.000Z","first_published":"2026-11-05T19:04:00.000Z","brands":[{"id":"navy-federal-credit-union","name":"Navy Federal Credit Union","url":"https://domainspoof.com/brands/navy-federal-credit-union"}],"dns":"resolved","resolved":["212.7.194.67"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of navyfederal.org (a letter from a neighbouring key), resolved to 212.7.194.67, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T19:04:00.000Z","first_published":"2026-11-05T19:04:00.000Z","of":"navyfederal.org","spelling":"adjacent_key","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"212.7.194.67","flagged_at":"2026-11-05T19:04:00Z"}]}],"url":"https://domainspoof.com/brands/navy-federal-credit-union"},{"hostname":"nayvfederal.org","first_observed":"2026-11-05T19:04:00.000Z","first_published":"2026-11-05T19:04:00.000Z","brands":[{"id":"navy-federal-credit-union","name":"Navy Federal Credit Union","url":"https://domainspoof.com/brands/navy-federal-credit-union"}],"dns":"resolved","resolved":["199.193.114.45"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of navyfederal.org (two letters swapped), resolved to 199.193.114.45, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T19:04:00.000Z","first_published":"2026-11-05T19:04:00.000Z","of":"navyfederal.org","spelling":"transposition","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"199.193.114.45","flagged_at":"2026-11-05T19:04:00Z"}]}],"url":"https://domainspoof.com/brands/navy-federal-credit-union"},{"hostname":"ncquckpass.com","first_observed":"2026-11-05T19:04:00.000Z","first_published":"2026-11-05T19:04:00.000Z","brands":[{"id":"nc-quick-pass","name":"NC Quick Pass","url":"https://domainspoof.com/brands/nc-quick-pass"}],"dns":"resolved","resolved":["77.247.182.243"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of ncquickpass.com (a dropped letter), resolved to 77.247.182.243, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T19:04:00.000Z","first_published":"2026-11-05T19:04:00.000Z","of":"ncquickpass.com","spelling":"omission","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"77.247.182.243","flagged_at":"2026-11-05T19:04:00Z"}]}],"url":"https://domainspoof.com/brands/nc-quick-pass"},{"hostname":"neepresso.com","first_observed":"2026-11-05T19:04:00.000Z","first_published":"2026-11-05T19:04:00.000Z","brands":[{"id":"nespresso","name":"Nespresso","url":"https://domainspoof.com/brands/nespresso"}],"dns":"resolved","resolved":["199.193.114.42"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of nespresso.com (a letter from a neighbouring key), resolved to 199.193.114.42, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T19:04:00.000Z","first_published":"2026-11-05T19:04:00.000Z","of":"nespresso.com","spelling":"adjacent_key","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"199.193.114.42","flagged_at":"2026-11-05T19:04:00Z"}]}],"url":"https://domainspoof.com/brands/nespresso"},{"hostname":"netaacad.com","first_observed":"2026-11-05T19:04:00.000Z","first_published":"2026-11-05T19:04:00.000Z","brands":[{"id":"cisco","name":"Cisco","url":"https://domainspoof.com/brands/cisco"}],"dns":"resolved","resolved":["77.247.179.88"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of netacad.com (a doubled letter), resolved to 77.247.179.88, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T19:04:00.000Z","first_published":"2026-11-05T19:04:00.000Z","of":"netacad.com","spelling":"repetition","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"77.247.179.88","flagged_at":"2026-11-05T19:04:00Z"}]}],"url":"https://domainspoof.com/brands/cisco"},{"hostname":"netamask.io","first_observed":"2026-11-05T19:04:00.000Z","first_published":"2026-11-05T19:04:00.000Z","brands":[{"id":"metamask","name":"MetaMask","url":"https://domainspoof.com/brands/metamask"}],"dns":"resolved","resolved":["185.53.179.128"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of metamask.io (a letter from a neighbouring key), listed by MetaMask","first_observed":"2026-11-05T19:04:00.000Z","first_published":"2026-11-05T19:04:00.000Z","of":"metamask.io","spelling":"adjacent_key","found_by":"dns_sweep","listings":[{"kind":"reported","source":"metamask","source_name":"MetaMask","host":"netamask.io","flagged_at":"2026-11-05T19:04:00Z"}]}],"url":"https://domainspoof.com/brands/metamask"},{"hostname":"ninetndo.com","first_observed":"2026-11-05T19:04:00.000Z","first_published":"2026-11-05T19:04:00.000Z","brands":[{"id":"nintendo","name":"Nintendo","url":"https://domainspoof.com/brands/nintendo"}],"dns":"resolved","resolved":["37.48.110.47"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of nintendo.com (two letters swapped), resolved to 37.48.110.47, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T19:04:00.000Z","first_published":"2026-11-05T19:04:00.000Z","of":"nintendo.com","spelling":"transposition","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"37.48.110.47","flagged_at":"2026-11-05T19:04:00Z"}]}],"url":"https://domainspoof.com/brands/nintendo"},{"hostname":"nnavyfederal.org","first_observed":"2026-11-05T19:04:00.000Z","first_published":"2026-11-05T19:04:00.000Z","brands":[{"id":"navy-federal-credit-union","name":"Navy Federal Credit Union","url":"https://domainspoof.com/brands/navy-federal-credit-union"}],"dns":"resolved","resolved":["199.193.114.44"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of navyfederal.org (a doubled letter), resolved to 199.193.114.44, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T19:04:00.000Z","first_published":"2026-11-05T19:04:00.000Z","of":"navyfederal.org","spelling":"repetition","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"199.193.114.44","flagged_at":"2026-11-05T19:04:00Z"}]}],"url":"https://domainspoof.com/brands/navy-federal-credit-union"},{"hostname":"nsvyfederal.org","first_observed":"2026-11-05T19:04:00.000Z","first_published":"2026-11-05T19:04:00.000Z","brands":[{"id":"navy-federal-credit-union","name":"Navy Federal Credit Union","url":"https://domainspoof.com/brands/navy-federal-credit-union"}],"dns":"resolved","resolved":["216.245.213.76"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of navyfederal.org (a letter from a neighbouring key), resolved to 216.245.213.76, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T19:04:00.000Z","first_published":"2026-11-05T19:04:00.000Z","of":"navyfederal.org","spelling":"adjacent_key","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"216.245.213.76","flagged_at":"2026-11-05T19:04:00Z"}]}],"url":"https://domainspoof.com/brands/navy-federal-credit-union"},{"hostname":"officd365.com","first_observed":"2026-11-05T19:04:00.000Z","first_published":"2026-11-05T19:04:00.000Z","brands":[{"id":"microsoft","name":"Microsoft","url":"https://domainspoof.com/brands/microsoft"}],"dns":"resolved","resolved":["216.245.213.74"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of office365.com (a letter from a neighbouring key), resolved to 216.245.213.74, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T19:04:00.000Z","first_published":"2026-11-05T19:04:00.000Z","of":"office365.com","spelling":"adjacent_key","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"216.245.213.74","flagged_at":"2026-11-05T19:04:00Z"}]}],"url":"https://domainspoof.com/brands/microsoft"},{"hostname":"officr365.com","first_observed":"2026-11-05T19:04:00.000Z","first_published":"2026-11-05T19:04:00.000Z","brands":[{"id":"microsoft","name":"Microsoft","url":"https://domainspoof.com/brands/microsoft"}],"dns":"resolved","resolved":["199.193.114.42"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of office365.com (a letter from a neighbouring key), resolved to 199.193.114.42, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T19:04:00.000Z","first_published":"2026-11-05T19:04:00.000Z","of":"office365.com","spelling":"adjacent_key","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"199.193.114.42","flagged_at":"2026-11-05T19:04:00Z"}]}],"url":"https://domainspoof.com/brands/microsoft"},{"hostname":"offiec365.com","first_observed":"2026-11-05T19:04:00.000Z","first_published":"2026-11-05T19:04:00.000Z","brands":[{"id":"microsoft","name":"Microsoft","url":"https://domainspoof.com/brands/microsoft"}],"dns":"resolved","resolved":["77.247.182.244"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of office365.com (two letters swapped), resolved to 77.247.182.244, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T19:04:00.000Z","first_published":"2026-11-05T19:04:00.000Z","of":"office365.com","spelling":"transposition","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"77.247.182.244","flagged_at":"2026-11-05T19:04:00Z"}]}],"url":"https://domainspoof.com/brands/microsoft"},{"hostname":"ofifce365.com","first_observed":"2026-11-05T19:04:00.000Z","first_published":"2026-11-05T19:04:00.000Z","brands":[{"id":"microsoft","name":"Microsoft","url":"https://domainspoof.com/brands/microsoft"}],"dns":"resolved","resolved":["77.247.182.242"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of office365.com (two letters swapped), resolved to 77.247.182.242, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T19:04:00.000Z","first_published":"2026-11-05T19:04:00.000Z","of":"office365.com","spelling":"transposition","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"77.247.182.242","flagged_at":"2026-11-05T19:04:00Z"}]}],"url":"https://domainspoof.com/brands/microsoft"},{"hostname":"ok-ta.nl","first_observed":"2026-11-05T19:04:00.000Z","first_published":"2026-11-05T19:04:00.000Z","brands":[{"id":"okta","name":"Okta","url":"https://domainspoof.com/brands/okta"}],"dns":"resolved","resolved":["217.160.0.52","2001:8d8:100f:f000::200"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of okta.com (an added hyphen), resolved to 217.160.0.52, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T19:04:00.000Z","first_published":"2026-11-05T19:04:00.000Z","of":"okta.com","spelling":"hyphen","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"217.160.0.52","flagged_at":"2026-11-05T19:04:00Z"}]}],"url":"https://domainspoof.com/brands/okta"},{"hostname":"okya.ph","first_observed":"2026-11-05T19:04:00.000Z","first_published":"2026-11-05T19:04:00.000Z","brands":[{"id":"okta","name":"Okta","url":"https://domainspoof.com/brands/okta"}],"dns":"resolved","resolved":["212.92.105.196"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of okta.com (a letter from a neighbouring key), resolved to 212.92.105.196, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T19:04:00.000Z","first_published":"2026-11-05T19:04:00.000Z","of":"okta.com","spelling":"adjacent_key","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"212.92.105.196","flagged_at":"2026-11-05T19:04:00Z"}]}],"url":"https://domainspoof.com/brands/okta"},{"hostname":"onecrive.com","first_observed":"2026-11-05T19:04:00.000Z","first_published":"2026-11-05T19:04:00.000Z","brands":[{"id":"microsoft","name":"Microsoft","url":"https://domainspoof.com/brands/microsoft"}],"dns":"resolved","resolved":["213.227.156.74"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of onedrive.com (a letter from a neighbouring key), resolved to 213.227.156.74, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T19:04:00.000Z","first_published":"2026-11-05T19:04:00.000Z","of":"onedrive.com","spelling":"adjacent_key","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"213.227.156.74","flagged_at":"2026-11-05T19:04:00Z"}]}],"url":"https://domainspoof.com/brands/microsoft"},{"hostname":"onedtive.com","first_observed":"2026-11-05T19:04:00.000Z","first_published":"2026-11-05T19:04:00.000Z","brands":[{"id":"microsoft","name":"Microsoft","url":"https://domainspoof.com/brands/microsoft"}],"dns":"resolved","resolved":["216.245.213.73"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of onedrive.com (a letter from a neighbouring key), resolved to 216.245.213.73, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T19:04:00.000Z","first_published":"2026-11-05T19:04:00.000Z","of":"onedrive.com","spelling":"adjacent_key","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"216.245.213.73","flagged_at":"2026-11-05T19:04:00Z"}]}],"url":"https://domainspoof.com/brands/microsoft"},{"hostname":"onelgoin.com","first_observed":"2026-11-05T19:04:00.000Z","first_published":"2026-11-05T19:04:00.000Z","brands":[{"id":"onelogin","name":"OneLogin","url":"https://domainspoof.com/brands/onelogin"}],"dns":"resolved","resolved":["216.245.213.78"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of onelogin.com (two letters swapped), resolved to 216.245.213.78, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T19:04:00.000Z","first_published":"2026-11-05T19:04:00.000Z","of":"onelogin.com","spelling":"transposition","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"216.245.213.78","flagged_at":"2026-11-05T19:04:00Z"}]}],"url":"https://domainspoof.com/brands/onelogin"},{"hostname":"onelogi.com","first_observed":"2026-11-05T19:04:00.000Z","first_published":"2026-11-05T19:04:00.000Z","brands":[{"id":"onelogin","name":"OneLogin","url":"https://domainspoof.com/brands/onelogin"}],"dns":"resolved","resolved":["199.193.114.44"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of onelogin.com (a dropped letter), resolved to 199.193.114.44, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T19:04:00.000Z","first_published":"2026-11-05T19:04:00.000Z","of":"onelogin.com","spelling":"omission","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"199.193.114.44","flagged_at":"2026-11-05T19:04:00Z"}]}],"url":"https://domainspoof.com/brands/onelogin"},{"hostname":"oneogin.com","first_observed":"2026-11-05T19:04:00.000Z","first_published":"2026-11-05T19:04:00.000Z","brands":[{"id":"onelogin","name":"OneLogin","url":"https://domainspoof.com/brands/onelogin"}],"dns":"resolved","resolved":["77.247.182.244"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of onelogin.com (a dropped letter), resolved to 77.247.182.244, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T19:04:00.000Z","first_published":"2026-11-05T19:04:00.000Z","of":"onelogin.com","spelling":"omission","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"77.247.182.244","flagged_at":"2026-11-05T19:04:00Z"}]}],"url":"https://domainspoof.com/brands/onelogin"},{"hostname":"onliesbi.com","first_observed":"2026-11-05T19:04:00.000Z","first_published":"2026-11-05T19:04:00.000Z","brands":[{"id":"state-bank-of-india","name":"State Bank of India","url":"https://domainspoof.com/brands/state-bank-of-india"}],"dns":"resolved","resolved":["69.162.80.53"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of onlinesbi.com (a dropped letter), resolved to 69.162.80.53, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T19:04:00.000Z","first_published":"2026-11-05T19:04:00.000Z","of":"onlinesbi.com","spelling":"omission","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"69.162.80.53","flagged_at":"2026-11-05T19:04:00Z"}]}],"url":"https://domainspoof.com/brands/state-bank-of-india"},{"hostname":"onney.fr","first_observed":"2026-11-05T19:04:00.000Z","first_published":"2026-11-05T19:04:00.000Z","brands":[{"id":"oney","name":"Oney","url":"https://domainspoof.com/brands/oney"}],"dns":"resolved","resolved":["2.57.91.91"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of oney.es (a doubled letter), resolved to 2.57.91.91, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T19:04:00.000Z","first_published":"2026-11-05T19:04:00.000Z","of":"oney.es","spelling":"repetition","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"2.57.91.91","flagged_at":"2026-11-05T19:04:00Z"}]}],"url":"https://domainspoof.com/brands/oney"},{"hostname":"orginenergy.com","first_observed":"2026-11-05T19:04:00.000Z","first_published":"2026-11-05T19:04:00.000Z","brands":[{"id":"origin-energy","name":"Origin Energy","url":"https://domainspoof.com/brands/origin-energy"}],"dns":"resolved","resolved":["69.162.80.55"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of originenergy.com.au (a dropped letter), resolved to 69.162.80.55, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T19:04:00.000Z","first_published":"2026-11-05T19:04:00.000Z","of":"originenergy.com.au","spelling":"omission","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"69.162.80.55","flagged_at":"2026-11-05T19:04:00Z"}]}],"url":"https://domainspoof.com/brands/origin-energy"},{"hostname":"pakpost.com","first_observed":"2026-11-05T19:04:00.000Z","first_published":"2026-11-05T19:04:00.000Z","brands":[{"id":"pakistan-post","name":"Pakistan Post","url":"https://domainspoof.com/brands/pakistan-post"}],"dns":"resolved","resolved":["37.48.77.83"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of pakpost.gov.pk (same name, other ending), resolved to 37.48.77.83, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T19:04:00.000Z","first_published":"2026-11-05T19:04:00.000Z","of":"pakpost.gov.pk","spelling":"tld","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"37.48.77.83","flagged_at":"2026-11-05T19:04:00Z"}]}],"url":"https://domainspoof.com/brands/pakistan-post"},{"hostname":"parakountplus.com","first_observed":"2026-11-05T19:04:00.000Z","first_published":"2026-11-05T19:04:00.000Z","brands":[{"id":"paramount-plus","name":"Paramount+","url":"https://domainspoof.com/brands/paramount-plus"}],"dns":"resolved","resolved":["216.245.213.75"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of paramountplus.com (a letter from a neighbouring key), resolved to 216.245.213.75, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T19:04:00.000Z","first_published":"2026-11-05T19:04:00.000Z","of":"paramountplus.com","spelling":"adjacent_key","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"216.245.213.75","flagged_at":"2026-11-05T19:04:00Z"}]}],"url":"https://domainspoof.com/brands/paramount-plus"},{"hostname":"paramkuntplus.com","first_observed":"2026-11-05T19:04:00.000Z","first_published":"2026-11-05T19:04:00.000Z","brands":[{"id":"paramount-plus","name":"Paramount+","url":"https://domainspoof.com/brands/paramount-plus"}],"dns":"resolved","resolved":["77.247.182.246"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of paramountplus.com (a letter from a neighbouring key), resolved to 77.247.182.246, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T19:04:00.000Z","first_published":"2026-11-05T19:04:00.000Z","of":"paramountplus.com","spelling":"adjacent_key","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"77.247.182.246","flagged_at":"2026-11-05T19:04:00Z"}]}],"url":"https://domainspoof.com/brands/paramount-plus"},{"hostname":"paramohntplus.com","first_observed":"2026-11-05T19:04:00.000Z","first_published":"2026-11-05T19:04:00.000Z","brands":[{"id":"paramount-plus","name":"Paramount+","url":"https://domainspoof.com/brands/paramount-plus"}],"dns":"resolved","resolved":["77.247.182.244"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of paramountplus.com (a letter from a neighbouring key), resolved to 77.247.182.244, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T19:04:00.000Z","first_published":"2026-11-05T19:04:00.000Z","of":"paramountplus.com","spelling":"adjacent_key","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"77.247.182.244","flagged_at":"2026-11-05T19:04:00Z"}]}],"url":"https://domainspoof.com/brands/paramount-plus"},{"hostname":"paramojntplus.com","first_observed":"2026-11-05T19:04:00.000Z","first_published":"2026-11-05T19:04:00.000Z","brands":[{"id":"paramount-plus","name":"Paramount+","url":"https://domainspoof.com/brands/paramount-plus"}],"dns":"resolved","resolved":["216.245.213.74"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of paramountplus.com (a letter from a neighbouring key), resolved to 216.245.213.74, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T19:04:00.000Z","first_published":"2026-11-05T19:04:00.000Z","of":"paramountplus.com","spelling":"adjacent_key","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"216.245.213.74","flagged_at":"2026-11-05T19:04:00Z"}]}],"url":"https://domainspoof.com/brands/paramount-plus"},{"hostname":"paramouhtplus.com","first_observed":"2026-11-05T19:04:00.000Z","first_published":"2026-11-05T19:04:00.000Z","brands":[{"id":"paramount-plus","name":"Paramount+","url":"https://domainspoof.com/brands/paramount-plus"}],"dns":"resolved","resolved":["77.247.182.244"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of paramountplus.com (a letter from a neighbouring key), resolved to 77.247.182.244, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T19:04:00.000Z","first_published":"2026-11-05T19:04:00.000Z","of":"paramountplus.com","spelling":"adjacent_key","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"77.247.182.244","flagged_at":"2026-11-05T19:04:00Z"}]}],"url":"https://domainspoof.com/brands/paramount-plus"},{"hostname":"paramoujtplus.com","first_observed":"2026-11-05T19:04:00.000Z","first_published":"2026-11-05T19:04:00.000Z","brands":[{"id":"paramount-plus","name":"Paramount+","url":"https://domainspoof.com/brands/paramount-plus"}],"dns":"resolved","resolved":["216.245.213.74"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of paramountplus.com (a letter from a neighbouring key), resolved to 216.245.213.74, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T19:04:00.000Z","first_published":"2026-11-05T19:04:00.000Z","of":"paramountplus.com","spelling":"adjacent_key","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"216.245.213.74","flagged_at":"2026-11-05T19:04:00Z"}]}],"url":"https://domainspoof.com/brands/paramount-plus"},{"hostname":"paramountllus.com","first_observed":"2026-11-05T19:04:00.000Z","first_published":"2026-11-05T19:04:00.000Z","brands":[{"id":"paramount-plus","name":"Paramount+","url":"https://domainspoof.com/brands/paramount-plus"}],"dns":"resolved","resolved":["216.245.213.74"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of paramountplus.com (a letter from a neighbouring key), resolved to 216.245.213.74, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T19:04:00.000Z","first_published":"2026-11-05T19:04:00.000Z","of":"paramountplus.com","spelling":"adjacent_key","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"216.245.213.74","flagged_at":"2026-11-05T19:04:00Z"}]}],"url":"https://domainspoof.com/brands/paramount-plus"},{"hostname":"paramountpius.com","first_observed":"2026-11-05T19:04:00.000Z","first_published":"2026-11-05T19:04:00.000Z","brands":[{"id":"paramount-plus","name":"Paramount+","url":"https://domainspoof.com/brands/paramount-plus"}],"dns":"resolved","resolved":["77.247.182.246"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of paramountplus.com (similar-looking characters), resolved to 77.247.182.246, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T19:04:00.000Z","first_published":"2026-11-05T19:04:00.000Z","of":"paramountplus.com","spelling":"homoglyph","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"77.247.182.246","flagged_at":"2026-11-05T19:04:00Z"}]}],"url":"https://domainspoof.com/brands/paramount-plus"},{"hostname":"paramountplux.com","first_observed":"2026-11-05T19:04:00.000Z","first_published":"2026-11-05T19:04:00.000Z","brands":[{"id":"paramount-plus","name":"Paramount+","url":"https://domainspoof.com/brands/paramount-plus"}],"dns":"resolved","resolved":["216.245.213.75"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of paramountplus.com (a letter from a neighbouring key), resolved to 216.245.213.75, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T19:04:00.000Z","first_published":"2026-11-05T19:04:00.000Z","of":"paramountplus.com","spelling":"adjacent_key","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"216.245.213.75","flagged_at":"2026-11-05T19:04:00Z"}]}],"url":"https://domainspoof.com/brands/paramount-plus"},{"hostname":"paramountppus.com","first_observed":"2026-11-05T19:04:00.000Z","first_published":"2026-11-05T19:04:00.000Z","brands":[{"id":"paramount-plus","name":"Paramount+","url":"https://domainspoof.com/brands/paramount-plus"}],"dns":"resolved","resolved":["77.247.182.246"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of paramountplus.com (a letter from a neighbouring key), resolved to 77.247.182.246, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T19:04:00.000Z","first_published":"2026-11-05T19:04:00.000Z","of":"paramountplus.com","spelling":"adjacent_key","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"77.247.182.246","flagged_at":"2026-11-05T19:04:00Z"}]}],"url":"https://domainspoof.com/brands/paramount-plus"},{"hostname":"parqmountplus.com","first_observed":"2026-11-05T19:04:00.000Z","first_published":"2026-11-05T19:04:00.000Z","brands":[{"id":"paramount-plus","name":"Paramount+","url":"https://domainspoof.com/brands/paramount-plus"}],"dns":"resolved","resolved":["216.245.213.74"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of paramountplus.com (a letter from a neighbouring key), resolved to 216.245.213.74, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T19:04:00.000Z","first_published":"2026-11-05T19:04:00.000Z","of":"paramountplus.com","spelling":"adjacent_key","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"216.245.213.74","flagged_at":"2026-11-05T19:04:00Z"}]}],"url":"https://domainspoof.com/brands/paramount-plus"},{"hostname":"parwmountplus.com","first_observed":"2026-11-05T19:04:00.000Z","first_published":"2026-11-05T19:04:00.000Z","brands":[{"id":"paramount-plus","name":"Paramount+","url":"https://domainspoof.com/brands/paramount-plus"}],"dns":"resolved","resolved":["77.247.182.250"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of paramountplus.com (a letter from a neighbouring key), resolved to 77.247.182.250, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T19:04:00.000Z","first_published":"2026-11-05T19:04:00.000Z","of":"paramountplus.com","spelling":"adjacent_key","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"77.247.182.250","flagged_at":"2026-11-05T19:04:00Z"}]}],"url":"https://domainspoof.com/brands/paramount-plus"},{"hostname":"payapl.com","first_observed":"2026-11-05T19:04:00.000Z","first_published":"2026-11-05T19:04:00.000Z","brands":[{"id":"paypal","name":"PayPal","url":"https://domainspoof.com/brands/paypal"}],"dns":"resolved","resolved":["212.92.105.216"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of paypal.com (two letters swapped), resolved to 212.92.105.216, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T19:04:00.000Z","first_published":"2026-11-05T19:04:00.000Z","of":"paypal.com","spelling":"transposition","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"212.92.105.216","flagged_at":"2026-11-05T19:04:00Z"}]}],"url":"https://domainspoof.com/brands/paypal"},{"hostname":"payapl.me","first_observed":"2026-11-05T19:04:00.000Z","first_published":"2026-11-05T19:04:00.000Z","brands":[{"id":"paypal","name":"PayPal","url":"https://domainspoof.com/brands/paypal"}],"dns":"resolved","resolved":["216.245.197.45"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of paypal.com (two letters swapped), resolved to 216.245.197.45, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T19:04:00.000Z","first_published":"2026-11-05T19:04:00.000Z","of":"paypal.com","spelling":"transposition","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"216.245.197.45","flagged_at":"2026-11-05T19:04:00Z"}]}],"url":"https://domainspoof.com/brands/paypal"},{"hostname":"roico.vip","first_observed":"2026-11-05T19:04:00.000Z","first_published":"2026-11-05T19:04:00.000Z","brands":[{"id":"orico","name":"Orico","url":"https://domainspoof.com/brands/orico"}],"dns":"resolved","resolved":["137.220.156.180"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of orico.co.jp (two letters swapped), resolved to 137.220.156.180 on Spamhaus DROP","first_observed":"2026-11-05T19:04:00.000Z","first_published":"2026-11-05T19:04:00.000Z","of":"orico.co.jp","spelling":"transposition","found_by":"dns_sweep","listings":[{"kind":"address","source":"spamhaus_drop","list_name":"Spamhaus DROP","address":"137.220.156.180","flagged_at":"2026-11-05T19:04:00Z"}]}],"url":"https://domainspoof.com/brands/orico"},{"hostname":"snap.tokyo","first_observed":"2026-11-05T19:04:00.000Z","first_published":"2026-11-05T19:04:00.000Z","brands":[{"id":"snapchat","name":"Snapchat","url":"https://domainspoof.com/brands/snapchat"}],"dns":"resolved","resolved":["150.95.255.38"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of snap.com (same name, other ending), resolved to 150.95.255.38, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T19:04:00.000Z","first_published":"2026-11-05T19:04:00.000Z","of":"snap.com","spelling":"tld","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"150.95.255.38","flagged_at":"2026-11-05T19:04:00Z"}]}],"url":"https://domainspoof.com/brands/snapchat"},{"hostname":"so-net.tokyo","first_observed":"2026-11-05T19:04:00.000Z","first_published":"2026-11-05T19:04:00.000Z","brands":[{"id":"so-net","name":"So-net","url":"https://domainspoof.com/brands/so-net"}],"dns":"resolved","resolved":["150.95.255.38"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of so-net.ne.jp (same name, other ending), resolved to 150.95.255.38, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T19:04:00.000Z","first_published":"2026-11-05T19:04:00.000Z","of":"so-net.ne.jp","spelling":"tld","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"150.95.255.38","flagged_at":"2026-11-05T19:04:00Z"}]}],"url":"https://domainspoof.com/brands/so-net"},{"hostname":"18-vote-netnetcapital.pages.dev","first_observed":"2026-11-05T17:53:50.776Z","first_published":"2026-11-05T19:02:12.870Z","brands":[],"dns":"resolved","resolved":["172.66.44.79","172.66.47.177"],"resolved_at":"2026-11-06T10:05:43Z","dns_checked_at":"2026-11-05T19:07:57.000Z","dns_since":"2026-11-05T19:07:57.000Z","findings":[{"id":"fhzhdesezm5srkds6nxgq","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T17:53:50.776Z","first_published":"2026-11-05T19:02:12.870Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=18-vote-netnetcapital.pages.dev"},{"hostname":"187433google.com","first_observed":"2026-11-05T18:31:55.333Z","first_published":"2026-11-05T19:02:12.870Z","brands":[],"dns":"resolved","resolved":["104.21.36.161","172.67.196.193","2606:4700:3035::6815:24a1","2606:4700:3036::ac43:c4c1"],"resolved_at":"2026-11-05T18:32:10Z","dns_checked_at":"2026-11-05T19:07:57.000Z","dns_since":"2026-11-05T19:07:57.000Z","findings":[{"id":"fkv6qitclduyfhgkmnrcs","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T18:31:55.333Z","first_published":"2026-11-05T19:02:12.870Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=187433google.com"},{"hostname":"2-governance-ptahtrade.pages.dev","first_observed":"2026-11-05T17:53:50.776Z","first_published":"2026-11-05T19:02:12.870Z","brands":[],"dns":"resolved","resolved":["172.66.44.131","172.66.47.125","2606:4700:310c::ac42:2c83","2606:4700:310c::ac42:2f7d"],"resolved_at":"2026-11-05T17:56:36Z","dns_checked_at":"2026-11-05T19:07:57.000Z","dns_since":"2026-11-05T19:07:57.000Z","findings":[{"id":"fwmpw2nbmzsvqs5qvs62l","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T17:53:50.776Z","first_published":"2026-11-05T19:02:12.870Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=2-governance-ptahtrade.pages.dev"},{"hostname":"2026-casibom.icu","first_observed":"2026-11-05T18:21:18.053Z","first_published":"2026-11-05T19:02:12.870Z","brands":[],"dns":"resolved","resolved":["104.21.26.57","172.67.168.57"],"resolved_at":"2026-11-05T18:21:34Z","dns_checked_at":"2026-11-05T19:07:57.000Z","dns_since":"2026-11-05T19:07:57.000Z","findings":[{"id":"fpepdyfvwprwyov6rhmhd","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T18:21:18.053Z","first_published":"2026-11-05T19:02:12.870Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/2026-casibom.icu/"}],"url":"https://domainspoof.com/live?show=all&q=2026-casibom.icu"},{"hostname":"240g57.hdiv8jy.com","first_observed":"2026-11-05T18:26:07.076Z","first_published":"2026-11-05T19:02:12.870Z","brands":[],"dns":"resolved","resolved":["185.53.179.136"],"resolved_at":"2026-11-05T18:26:23Z","dns_checked_at":"2026-11-05T19:07:57.000Z","dns_since":"2026-11-05T19:07:57.000Z","findings":[{"id":"fmwhzcjzijsejseyqrnwf","kind":"reported_domain","summary":"Under hdiv8jy.com, listed by MetaMask","first_observed":"2026-11-05T18:26:07.076Z","first_published":"2026-11-05T19:02:12.870Z","source":"metamask","source_name":"MetaMask","under":"hdiv8jy.com"}],"url":"https://domainspoof.com/live?show=all&q=240g57.hdiv8jy.com"},{"hostname":"247.elafure.com","first_observed":"2026-11-05T18:46:52.803Z","first_published":"2026-11-05T19:02:12.870Z","brands":[],"dns":"resolved","resolved":["163.61.188.2"],"resolved_at":"2026-11-05T18:47:09Z","dns_checked_at":"2026-11-05T19:07:57.000Z","dns_since":"2026-11-05T19:07:57.000Z","findings":[{"id":"fndbbvwk3vd7ux7x7cyz4","kind":"reported_domain","summary":"Under elafure.com, listed by MetaMask","first_observed":"2026-11-05T18:46:52.803Z","first_published":"2026-11-05T19:02:12.870Z","source":"metamask","source_name":"MetaMask","under":"elafure.com"}],"url":"https://domainspoof.com/live?show=all&q=247.elafure.com"},{"hostname":"294870-crypto.com","first_observed":"2026-11-05T18:11:07.120Z","first_published":"2026-11-05T19:02:12.870Z","brands":[{"id":"crypto-com","name":"Crypto.com","url":"https://domainspoof.com/brands/crypto-com"}],"dns":"resolved","resolved":["104.21.47.83","172.67.170.202","2606:4700:3031::6815:2f53","2606:4700:3036::ac43:aaca"],"resolved_at":"2026-11-05T18:11:26Z","dns_checked_at":"2026-11-05T19:07:57.000Z","dns_since":"2026-11-05T19:07:57.000Z","findings":[{"id":"f3d3y2psyvdrjcntrpalg","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T18:11:07.120Z","first_published":"2026-11-05T19:02:12.870Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/brands/crypto-com"},{"hostname":"3-derivegovernance.pages.dev","first_observed":"2026-11-05T17:53:50.776Z","first_published":"2026-11-05T19:02:12.870Z","brands":[],"dns":"resolved","resolved":["172.66.44.168","172.66.47.88","2606:4700:310c::ac42:2ca8","2606:4700:310c::ac42:2f58"],"resolved_at":"2026-11-05T17:56:36Z","dns_checked_at":"2026-11-05T19:07:57.000Z","dns_since":"2026-11-05T19:07:57.000Z","findings":[{"id":"fu547jg2cifoj2ximudrb","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T17:53:50.776Z","first_published":"2026-11-05T19:02:12.870Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=3-derivegovernance.pages.dev"},{"hostname":"3-katananetwork.pages.dev","first_observed":"2026-11-05T17:53:50.776Z","first_published":"2026-11-05T19:02:12.870Z","brands":[],"dns":"resolved","resolved":["172.66.44.131","172.66.47.125","2606:4700:310c::ac42:2c83","2606:4700:310c::ac42:2f7d"],"resolved_at":"2026-11-05T17:56:36Z","dns_checked_at":"2026-11-05T19:07:57.000Z","dns_since":"2026-11-05T19:07:57.000Z","findings":[{"id":"f6l2lsrsyzyxbaz7xf6xn","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T17:53:50.776Z","first_published":"2026-11-05T19:02:12.870Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=3-katananetwork.pages.dev"},{"hostname":"3-policy-hyperliquidgov.pages.dev","first_observed":"2026-11-05T17:53:50.776Z","first_published":"2026-11-05T19:02:12.870Z","brands":[{"id":"hyperliquid","name":"Hyperliquid","url":"https://domainspoof.com/brands/hyperliquid"}],"dns":"resolved","resolved":["172.66.44.60","172.66.47.196","2606:4700:310c::ac42:2c3c","2606:4700:310c::ac42:2fc4"],"resolved_at":"2026-11-05T17:56:36Z","dns_checked_at":"2026-11-05T19:07:57.000Z","dns_since":"2026-11-05T19:07:57.000Z","findings":[{"id":"feryoi6vrrfvbupd7ckw7","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T17:53:50.776Z","first_published":"2026-11-05T19:02:12.870Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/brands/hyperliquid"},{"hostname":"31-76-30-75.rdns.vpspay.net","first_observed":"2026-11-05T18:21:18.053Z","first_published":"2026-11-05T19:02:12.870Z","brands":[],"dns":"resolved","resolved":["31.76.30.75"],"resolved_at":"2026-11-05T18:21:34Z","dns_checked_at":"2026-11-05T19:07:57.000Z","dns_since":"2026-11-05T19:07:57.000Z","findings":[{"id":"fe5xgricjo7ncnacmmidy","kind":"reported_domain","summary":"Under vpspay.net, reported by PhishDestroy","first_observed":"2026-11-05T18:21:18.053Z","first_published":"2026-11-05T19:02:12.870Z","source":"phishdestroy","source_name":"PhishDestroy","under":"vpspay.net","source_url":"https://phishdestroy.io/domain/vpspay.net/"}],"url":"https://domainspoof.com/live?show=all&q=31-76-30-75.rdns.vpspay.net"},{"hostname":"364920-crypto.com","first_observed":"2026-11-05T18:26:07.076Z","first_published":"2026-11-05T19:02:12.870Z","brands":[{"id":"crypto-com","name":"Crypto.com","url":"https://domainspoof.com/brands/crypto-com"}],"dns":"resolved","resolved":["104.21.44.31","172.67.194.86","2606:4700:3030::ac43:c256","2606:4700:3036::6815:2c1f"],"resolved_at":"2026-11-05T18:26:23Z","dns_checked_at":"2026-11-05T19:07:57.000Z","dns_since":"2026-11-05T19:07:57.000Z","findings":[{"id":"fvtw6xk5wxee2tft5huzv","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T18:26:07.076Z","first_published":"2026-11-05T19:02:12.870Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/brands/crypto-com"},{"hostname":"397205-crypto.com","first_observed":"2026-11-05T18:41:34.727Z","first_published":"2026-11-05T19:02:12.870Z","brands":[{"id":"crypto-com","name":"Crypto.com","url":"https://domainspoof.com/brands/crypto-com"}],"dns":"resolved","resolved":["104.21.38.244","172.67.168.216","2606:4700:3035::ac43:a8d8","2606:4700:3037::6815:26f4"],"resolved_at":"2026-11-05T18:41:50Z","dns_checked_at":"2026-11-05T19:07:57.000Z","dns_since":"2026-11-05T19:07:57.000Z","findings":[{"id":"fvah7cb6uwlkjyrwuwzhr","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T18:41:34.727Z","first_published":"2026-11-05T19:02:12.870Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/brands/crypto-com"},{"hostname":"4-ethenagov.pages.dev","first_observed":"2026-11-05T17:53:50.776Z","first_published":"2026-11-05T19:02:12.870Z","brands":[{"id":"ethena","name":"Ethena","url":"https://domainspoof.com/brands/ethena"}],"dns":"resolved","resolved":["172.66.44.58","172.66.47.198","2606:4700:310c::ac42:2c3a","2606:4700:310c::ac42:2fc6"],"resolved_at":"2026-11-05T17:56:36Z","dns_checked_at":"2026-11-05T19:07:57.000Z","dns_since":"2026-11-05T19:07:57.000Z","findings":[{"id":"fksyzmfw2qjnalv4hhtaw","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T17:53:50.776Z","first_published":"2026-11-05T19:02:12.870Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/brands/ethena"},{"hostname":"4-fraxfinance.pages.dev","first_observed":"2026-11-05T17:53:50.776Z","first_published":"2026-11-05T19:02:12.870Z","brands":[],"dns":"resolved","resolved":["172.66.44.144","172.66.47.112","2606:4700:310c::ac42:2c90","2606:4700:310c::ac42:2f70"],"resolved_at":"2026-11-05T17:56:36Z","dns_checked_at":"2026-11-05T19:07:57.000Z","dns_since":"2026-11-05T19:07:57.000Z","findings":[{"id":"f2cd6avb7gcxvfcdjrzuk","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T17:53:50.776Z","first_published":"2026-11-05T19:02:12.870Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=4-fraxfinance.pages.dev"},{"hostname":"4-governance-fungolabs.pages.dev","first_observed":"2026-11-05T17:53:50.776Z","first_published":"2026-11-05T19:02:12.870Z","brands":[],"dns":"resolved","resolved":["172.66.44.107","172.66.47.149","2606:4700:310c::ac42:2c6b","2606:4700:310c::ac42:2f95"],"resolved_at":"2026-11-05T17:56:36Z","dns_checked_at":"2026-11-05T19:07:57.000Z","dns_since":"2026-11-05T19:07:57.000Z","findings":[{"id":"fpr7tmzj4piys7xdary3r","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T17:53:50.776Z","first_published":"2026-11-05T19:02:12.870Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=4-governance-fungolabs.pages.dev"},{"hostname":"4-vote-zesteco.pages.dev","first_observed":"2026-11-05T17:53:50.776Z","first_published":"2026-11-05T19:02:12.870Z","brands":[],"dns":"resolved","resolved":["172.66.44.105","172.66.47.151","2606:4700:310c::ac42:2c69","2606:4700:310c::ac42:2f97"],"resolved_at":"2026-11-05T17:56:36Z","dns_checked_at":"2026-11-05T19:07:57.000Z","dns_since":"2026-11-05T19:07:57.000Z","findings":[{"id":"flf3f4qyyyzp47xwtypki","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T17:53:50.776Z","first_published":"2026-11-05T19:02:12.870Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=4-vote-zesteco.pages.dev"},{"hostname":"5-hub-zamaecosystem.pages.dev","first_observed":"2026-11-05T17:53:50.776Z","first_published":"2026-11-05T19:02:12.870Z","brands":[],"dns":"resolved","resolved":["172.66.44.115","172.66.47.141","2606:4700:310c::ac42:2c73","2606:4700:310c::ac42:2f8d"],"resolved_at":"2026-11-05T17:56:36Z","dns_checked_at":"2026-11-05T19:07:57.000Z","dns_since":"2026-11-05T19:07:57.000Z","findings":[{"id":"foxc55asmvfn4ule37ldw","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T17:53:50.776Z","first_published":"2026-11-05T19:02:12.870Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=5-hub-zamaecosystem.pages.dev"},{"hostname":"5-orbioeco.pages.dev","first_observed":"2026-11-05T17:53:50.776Z","first_published":"2026-11-05T19:02:12.870Z","brands":[],"dns":"resolved","resolved":["172.66.44.57","172.66.47.199","2606:4700:310c::ac42:2c39","2606:4700:310c::ac42:2fc7"],"resolved_at":"2026-11-05T17:56:36Z","dns_checked_at":"2026-11-05T19:07:57.000Z","dns_since":"2026-11-05T19:07:57.000Z","findings":[{"id":"fa3qi6ulmsuhxtp3ush6d","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T17:53:50.776Z","first_published":"2026-11-05T19:02:12.870Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=5-orbioeco.pages.dev"},{"hostname":"5-torchpadgov.pages.dev","first_observed":"2026-11-05T17:53:50.776Z","first_published":"2026-11-05T19:02:12.870Z","brands":[],"dns":"resolved","resolved":["172.66.44.231","172.66.47.25","2606:4700:310c::ac42:2ce7","2606:4700:310c::ac42:2f19"],"resolved_at":"2026-11-05T17:56:36Z","dns_checked_at":"2026-11-05T19:07:57.000Z","dns_since":"2026-11-05T19:07:57.000Z","findings":[{"id":"fn6getcjj44kvc47sog2r","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T17:53:50.776Z","first_published":"2026-11-05T19:02:12.870Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=5-torchpadgov.pages.dev"},{"hostname":"57294.sbs","first_observed":"2026-11-05T18:20:10.932Z","first_published":"2026-11-05T19:02:12.870Z","brands":[],"dns":"resolved","resolved":["104.21.6.58","172.67.154.248","2606:4700:3031::ac43:9af8","2606:4700:3032::6815:63a"],"resolved_at":"2026-11-05T18:22:07Z","dns_checked_at":"2026-11-05T19:07:57.000Z","dns_since":"2026-11-05T19:07:57.000Z","findings":[{"id":"f3ac4crupco5eigssvqt2","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T18:20:10.932Z","first_published":"2026-11-05T19:02:12.870Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=57294.sbs"},{"hostname":"6-gliderfi.pages.dev","first_observed":"2026-11-05T17:53:50.776Z","first_published":"2026-11-05T19:02:12.870Z","brands":[],"dns":"not_found","resolved":[],"resolved_at":"2026-11-05T17:56:36Z","dns_checked_at":"2026-11-06T11:27:33.000Z","findings":[{"id":"ftddn4lvtpxjxqp5rbplo","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T17:53:50.776Z","first_published":"2026-11-05T19:02:12.870Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=6-gliderfi.pages.dev"},{"hostname":"643527-crypto.com","first_observed":"2026-11-05T18:00:49.708Z","first_published":"2026-11-05T19:02:12.870Z","brands":[{"id":"crypto-com","name":"Crypto.com","url":"https://domainspoof.com/brands/crypto-com"}],"dns":"resolved","resolved":["104.21.14.224","172.67.204.136","2606:4700:3035::6815:ee0","2606:4700:3035::ac43:cc88"],"resolved_at":"2026-11-05T18:00:56Z","dns_checked_at":"2026-11-05T19:07:57.000Z","dns_since":"2026-11-05T19:07:57.000Z","findings":[{"id":"fw2azilia364sgzr7hgxz","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T18:00:49.708Z","first_published":"2026-11-05T19:02:12.870Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/brands/crypto-com"},{"hostname":"662857coinbase.com","first_observed":"2026-11-05T18:21:18.053Z","first_published":"2026-11-05T19:02:12.870Z","brands":[],"dns":"resolved","resolved":["104.21.79.45","172.67.141.239","2606:4700:3030::6815:4f2d","2606:4700:3033::ac43:8def"],"resolved_at":"2026-11-05T18:21:34Z","dns_checked_at":"2026-11-05T19:07:57.000Z","dns_since":"2026-11-05T19:07:57.000Z","findings":[{"id":"f2mzw2bao5a42yfe6eagf","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T18:21:18.053Z","first_published":"2026-11-05T19:02:12.870Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=662857coinbase.com"},{"hostname":"680235-crypto.com","first_observed":"2026-11-05T18:36:46.331Z","first_published":"2026-11-05T19:02:12.870Z","brands":[{"id":"crypto-com","name":"Crypto.com","url":"https://domainspoof.com/brands/crypto-com"}],"dns":"resolved","resolved":["104.21.31.87","172.67.175.193","2606:4700:3032::6815:1f57","2606:4700:3037::ac43:afc1"],"resolved_at":"2026-11-05T18:37:02Z","dns_checked_at":"2026-11-05T19:07:57.000Z","dns_since":"2026-11-05T19:07:57.000Z","findings":[{"id":"fb4xkjhhdrth5mmyfpiyw","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T18:36:46.331Z","first_published":"2026-11-05T19:02:12.870Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/brands/crypto-com"},{"hostname":"7-hyperlendeco.pages.dev","first_observed":"2026-11-05T17:53:50.776Z","first_published":"2026-11-05T19:02:12.870Z","brands":[],"dns":"resolved","resolved":["172.66.44.147","172.66.47.109","2606:4700:310c::ac42:2c93","2606:4700:310c::ac42:2f6d"],"resolved_at":"2026-11-05T17:56:36Z","dns_checked_at":"2026-11-05T19:07:57.000Z","dns_since":"2026-11-05T19:07:57.000Z","findings":[{"id":"fj47vdudtiudepkqfc35k","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T17:53:50.776Z","first_published":"2026-11-05T19:02:12.870Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=7-hyperlendeco.pages.dev"},{"hostname":"718456-crypto.com","first_observed":"2026-11-05T18:21:18.053Z","first_published":"2026-11-05T19:02:12.870Z","brands":[{"id":"crypto-com","name":"Crypto.com","url":"https://domainspoof.com/brands/crypto-com"}],"dns":"resolved","resolved":["104.21.88.3","172.67.149.195","2606:4700:3030::ac43:95c3","2606:4700:3033::6815:5803"],"resolved_at":"2026-11-05T18:21:34Z","dns_checked_at":"2026-11-05T19:07:57.000Z","dns_since":"2026-11-05T19:07:57.000Z","findings":[{"id":"fu6htjc6blvwkyqzckwrr","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T18:21:18.053Z","first_published":"2026-11-05T19:02:12.870Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/brands/crypto-com"},{"hostname":"819306-crypto.com","first_observed":"2026-11-05T18:00:49.708Z","first_published":"2026-11-05T19:02:12.870Z","brands":[{"id":"crypto-com","name":"Crypto.com","url":"https://domainspoof.com/brands/crypto-com"}],"dns":"resolved","resolved":["104.21.46.193","172.67.141.146","2606:4700:3030::ac43:8d92","2606:4700:3031::6815:2ec1"],"resolved_at":"2026-11-05T18:00:56Z","dns_checked_at":"2026-11-05T19:07:57.000Z","dns_since":"2026-11-05T19:07:57.000Z","findings":[{"id":"fb7jd3izjldfu6yf443jx","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T18:00:49.708Z","first_published":"2026-11-05T19:02:12.870Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/brands/crypto-com"},{"hostname":"9-hookrfun.pages.dev","first_observed":"2026-11-05T17:53:50.776Z","first_published":"2026-11-05T19:02:12.870Z","brands":[],"dns":"resolved","resolved":["172.66.44.148","172.66.47.108"],"resolved_at":"2026-11-06T15:16:00Z","dns_checked_at":"2026-11-05T19:07:57.000Z","dns_since":"2026-11-05T19:07:57.000Z","findings":[{"id":"ft33kypyzojbfztszsw6v","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T17:53:50.776Z","first_published":"2026-11-05T19:02:12.870Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=9-hookrfun.pages.dev"},{"hostname":"928516-crypto.com","first_observed":"2026-11-05T18:05:57.557Z","first_published":"2026-11-05T19:02:12.870Z","brands":[{"id":"crypto-com","name":"Crypto.com","url":"https://domainspoof.com/brands/crypto-com"}],"dns":"resolved","resolved":["104.21.33.233","172.67.193.159","2606:4700:3033::ac43:c19f","2606:4700:3037::6815:21e9"],"resolved_at":"2026-11-05T18:06:05Z","dns_checked_at":"2026-11-05T19:07:57.000Z","dns_since":"2026-11-05T19:07:57.000Z","findings":[{"id":"faqznduhfrsmc5wy7dq27","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T18:05:57.557Z","first_published":"2026-11-05T19:02:12.870Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/brands/crypto-com"},{"hostname":"amberonlife.com","first_observed":"2026-11-05T18:20:10.932Z","first_published":"2026-11-05T19:02:12.870Z","brands":[],"dns":"resolved","resolved":["104.21.2.11","172.67.128.127","2606:4700:3033::ac43:807f","2606:4700:3037::6815:20b"],"resolved_at":"2026-11-05T18:22:07Z","dns_checked_at":"2026-11-05T19:07:57.000Z","dns_since":"2026-11-05T19:07:57.000Z","findings":[{"id":"f3imhehibwsdddlgb3tha","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T18:20:10.932Z","first_published":"2026-11-05T19:02:12.870Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=amberonlife.com"},{"hostname":"ambientfinance.net","first_observed":"2026-11-05T18:31:55.333Z","first_published":"2026-11-05T19:02:12.870Z","brands":[],"dns":"resolved","resolved":["104.21.76.176","172.67.198.98"],"resolved_at":"2026-11-06T11:31:51Z","dns_checked_at":"2026-11-05T19:07:57.000Z","dns_since":"2026-11-05T19:07:57.000Z","findings":[{"id":"fu5l36xlmzkrc2atftycf","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T18:31:55.333Z","first_published":"2026-11-05T19:02:12.870Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=ambientfinance.net"},{"hostname":"ambientfinance.org","first_observed":"2026-11-05T18:36:46.331Z","first_published":"2026-11-05T19:02:12.870Z","brands":[],"dns":"resolved","resolved":["104.21.23.54","172.67.209.55"],"resolved_at":"2026-11-06T11:31:51Z","dns_checked_at":"2026-11-05T19:07:57.000Z","dns_since":"2026-11-05T19:07:57.000Z","findings":[{"id":"fvg4rbd377fwo7kn4edt3","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T18:36:46.331Z","first_published":"2026-11-05T19:02:12.870Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=ambientfinance.org"},{"hostname":"anajapan.net","first_observed":"2026-11-05T18:31:55.333Z","first_published":"2026-11-05T19:02:12.870Z","brands":[],"dns":"resolved","resolved":["104.21.75.108","172.67.221.90"],"resolved_at":"2026-11-05T18:39:05Z","dns_checked_at":"2026-11-05T19:07:57.000Z","dns_since":"2026-11-05T19:07:57.000Z","findings":[{"id":"ffij6nfgitqamd5v7mjso","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T18:31:55.333Z","first_published":"2026-11-05T19:02:12.870Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=anajapan.net"},{"hostname":"anlagstein-de.live","first_observed":"2026-11-05T18:51:40.666Z","first_published":"2026-11-05T19:02:12.870Z","brands":[],"dns":"resolved","resolved":["104.21.73.105","172.67.189.167"],"resolved_at":"2026-11-05T18:59:21Z","dns_checked_at":"2026-11-05T19:07:57.000Z","dns_since":"2026-11-05T19:07:57.000Z","findings":[{"id":"fz3unrg5fgef3ehbmvpl3","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T18:51:40.666Z","first_published":"2026-11-05T19:02:12.870Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=anlagstein-de.live"},{"hostname":"any-swap.net","first_observed":"2026-11-05T17:57:01.210Z","first_published":"2026-11-05T19:02:12.870Z","brands":[],"dns":"resolved","resolved":["104.21.59.208","172.67.183.170"],"resolved_at":"2026-11-06T11:31:51Z","dns_checked_at":"2026-11-05T19:07:57.000Z","dns_since":"2026-11-05T19:07:57.000Z","findings":[{"id":"fzlanzw4ylziezsnhllsq","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T17:57:01.210Z","first_published":"2026-11-05T19:02:12.870Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=any-swap.net"},{"hostname":"aojiong.com","first_observed":"2026-11-05T18:46:52.803Z","first_published":"2026-11-05T19:02:12.870Z","brands":[],"dns":"resolved","resolved":["104.21.39.84","172.67.170.21"],"resolved_at":"2026-11-05T18:55:06Z","dns_checked_at":"2026-11-05T19:07:57.000Z","dns_since":"2026-11-05T19:07:57.000Z","findings":[{"id":"fce5gemxpfk4rppgiyagb","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T18:46:52.803Z","first_published":"2026-11-05T19:02:12.870Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=aojiong.com"},{"hostname":"api.swaplotemaxsoftware-com.financecryptoworld.com","first_observed":"2026-11-05T18:16:28.648Z","first_published":"2026-11-05T19:02:12.870Z","brands":[],"dns":"resolved","resolved":["104.21.10.130","172.67.131.121"],"resolved_at":"2026-11-05T18:16:49Z","dns_checked_at":"2026-11-05T19:07:57.000Z","dns_since":"2026-11-05T19:07:57.000Z","findings":[{"id":"f6kejo2l36vofawb332ci","kind":"reported_domain","summary":"Under financecryptoworld.com, listed by CERT Polska","first_observed":"2026-11-05T18:16:28.648Z","first_published":"2026-11-05T19:02:12.870Z","source":"cert_polska","source_name":"CERT Polska","under":"financecryptoworld.com"}],"url":"https://domainspoof.com/live?show=all&q=api.swaplotemaxsoftware-com.financecryptoworld.com"},{"hostname":"app-autofinance.com","first_observed":"2026-11-05T18:11:07.120Z","first_published":"2026-11-05T19:02:12.870Z","brands":[],"dns":"resolved","resolved":["104.21.8.212","172.67.140.65"],"resolved_at":"2026-11-06T11:31:51Z","dns_checked_at":"2026-11-05T19:07:57.000Z","dns_since":"2026-11-05T19:07:57.000Z","findings":[{"id":"fy3uro3jlul4uvfekwwh4","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T18:11:07.120Z","first_published":"2026-11-05T19:02:12.870Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=app-autofinance.com"},{"hostname":"artifactory.socialvisor.ru","first_observed":"2026-11-05T18:00:49.708Z","first_published":"2026-11-05T19:02:12.870Z","brands":[],"dns":"resolved","resolved":["91.215.41.91"],"resolved_at":"2026-11-05T18:01:00Z","dns_checked_at":"2026-11-05T19:07:57.000Z","dns_since":"2026-11-05T19:07:57.000Z","findings":[{"id":"fjckegusw4nmmlvjyfbj4","kind":"reported_domain","summary":"Under socialvisor.ru, reported by PhishDestroy","first_observed":"2026-11-05T18:00:49.708Z","first_published":"2026-11-05T19:02:12.870Z","source":"phishdestroy","source_name":"PhishDestroy","under":"socialvisor.ru","source_url":"https://phishdestroy.io/domain/socialvisor.ru/"}],"url":"https://domainspoof.com/live?show=all&q=artifactory.socialvisor.ru"},{"hostname":"artificialvote.top","first_observed":"2026-11-05T17:53:50.776Z","first_published":"2026-11-05T19:02:12.870Z","brands":[],"dns":"resolved","resolved":["104.21.22.117","172.67.204.146","2606:4700:3031::ac43:cc92","2606:4700:3034::6815:1675"],"resolved_at":"2026-11-05T17:56:36Z","dns_checked_at":"2026-11-05T19:07:57.000Z","dns_since":"2026-11-05T19:07:57.000Z","findings":[{"id":"flkly6k3tfocfc7kwcylh","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T17:53:50.776Z","first_published":"2026-11-05T19:02:12.870Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=artificialvote.top"},{"hostname":"asistencia-disney.com","first_observed":"2026-11-05T18:39:06.459Z","first_published":"2026-11-05T19:02:12.870Z","brands":[{"id":"disney-plus","name":"Disney+","url":"https://domainspoof.com/brands/disney-plus"}],"dns":"resolved","resolved":["45.74.61.7"],"resolved_at":"2026-11-05T19:07:57Z","dns_checked_at":"2026-11-05T19:07:57.000Z","dns_since":"2026-11-05T19:07:57.000Z","findings":[{"id":"fbvch57brco54gfwve3f7","kind":"phishing_infrastructure","summary":"Resolved to 45.74.61.7, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T18:39:06.459Z","first_published":"2026-11-05T19:02:12.870Z","address":"45.74.61.7","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"},{"id":"fz2otdwpbm4zykpviqjqg","kind":"spamhaus_drop","summary":"Resolved to 45.74.61.7 on Spamhaus DROP","first_observed":"2026-11-05T18:39:06.459Z","first_published":"2026-11-05T19:02:12.870Z","address":"45.74.61.7","list":"spamhaus_drop","list_name":"Spamhaus DROP"}],"url":"https://domainspoof.com/brands/disney-plus"},{"hostname":"auth.octra.org","first_observed":"2026-11-05T18:16:28.648Z","first_published":"2026-11-05T19:02:12.870Z","brands":[],"dns":"resolved","resolved":["104.26.14.236","104.26.15.236","172.67.73.170"],"resolved_at":"2026-11-05T18:16:49Z","dns_checked_at":"2026-11-05T19:07:57.000Z","dns_since":"2026-11-05T19:07:57.000Z","findings":[{"id":"fvee3sl5hgobx7ezfmb7a","kind":"reported_domain","summary":"Under octra.org, reported by PhishDestroy","first_observed":"2026-11-05T18:16:28.648Z","first_published":"2026-11-05T19:02:12.870Z","source":"phishdestroy","source_name":"PhishDestroy","under":"octra.org","source_url":"https://phishdestroy.io/domain/octra.org/"}],"url":"https://domainspoof.com/live?show=all&q=auth.octra.org"},{"hostname":"authorization16-ledger.com","first_observed":"2026-11-05T18:46:52.803Z","first_published":"2026-11-05T19:02:12.870Z","brands":[],"dns":"resolved","resolved":["104.21.31.196","172.67.179.158"],"resolved_at":"2026-11-05T18:55:06Z","dns_checked_at":"2026-11-05T19:07:57.000Z","dns_since":"2026-11-05T19:07:57.000Z","findings":[{"id":"fssmu4icnb52lfkjlch4o","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T18:46:52.803Z","first_published":"2026-11-05T19:02:12.870Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=authorization16-ledger.com"},{"hostname":"auto.b67.ch","first_observed":"2026-11-05T18:51:40.666Z","first_published":"2026-11-05T19:02:12.870Z","brands":[],"dns":"resolved","resolved":["185.178.193.239","2001:1680:101:88a::1"],"resolved_at":"2026-11-05T18:59:21Z","dns_checked_at":"2026-11-05T19:07:57.000Z","dns_since":"2026-11-05T19:07:57.000Z","findings":[{"id":"fejbst7hzygramqpyjfkx","kind":"reported_domain","summary":"Under b67.ch, reported by PhishDestroy","first_observed":"2026-11-05T18:51:40.666Z","first_published":"2026-11-05T19:02:12.870Z","source":"phishdestroy","source_name":"PhishDestroy","under":"b67.ch","source_url":"https://phishdestroy.io/domain/b67.ch/"}],"url":"https://domainspoof.com/live?show=all&q=auto.b67.ch"},{"hostname":"axoptys.com","first_observed":"2026-11-05T18:00:49.708Z","first_published":"2026-11-05T19:02:12.870Z","brands":[],"dns":"no_address","resolved":[],"resolved_at":"2026-11-05T18:01:00Z","dns_checked_at":"2026-11-06T11:27:33.000Z","findings":[{"id":"fu4ojnk2qqhmidaejmw7k","kind":"reported_domain","summary":"Listed by NPA 165 (finance and insurance)","first_observed":"2026-11-05T18:00:49.708Z","first_published":"2026-11-05T19:02:12.870Z","source":"npa","source_name":"NPA 165","claim":{"category":"finance and insurance"}}],"url":"https://domainspoof.com/live?show=all&q=axoptys.com"},{"hostname":"bc-game.net.ph","first_observed":"2026-11-05T18:21:18.053Z","first_published":"2026-11-05T19:02:12.870Z","brands":[],"dns":"resolved","resolved":["104.21.16.30","172.67.166.13"],"resolved_at":"2026-11-05T18:34:36Z","dns_checked_at":"2026-11-05T19:07:57.000Z","dns_since":"2026-11-05T19:07:57.000Z","findings":[{"id":"fkhiicbcxtjcqrn6lxxzh","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T18:21:18.053Z","first_published":"2026-11-05T19:02:12.870Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=bc-game.net.ph"},{"hostname":"berliner-sparkasse.vu","first_observed":"2026-11-05T18:41:34.727Z","first_published":"2026-11-05T19:02:12.870Z","brands":[{"id":"sparkasse","name":"Sparkasse","url":"https://domainspoof.com/brands/sparkasse"}],"dns":"resolved","resolved":["108.165.164.58"],"resolved_at":"2026-11-05T19:07:57Z","dns_checked_at":"2026-11-05T19:07:57.000Z","dns_since":"2026-11-05T19:07:57.000Z","findings":[{"id":"fr6724omxapljyxbjfgae","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T18:41:34.727Z","first_published":"2026-11-05T19:02:12.870Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/berliner-sparkasse.vu/"},{"id":"fk4tkxdutbi7vwhmzceca","kind":"phishing_infrastructure","summary":"Resolved to 108.165.164.58, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T18:50:08.561Z","first_published":"2026-11-05T19:02:12.870Z","address":"108.165.164.58","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/sparkasse"},{"hostname":"bitgetai-nl.live","first_observed":"2026-11-05T18:21:18.053Z","first_published":"2026-11-05T19:02:12.870Z","brands":[],"dns":"resolved","resolved":["104.21.46.52","172.67.223.224"],"resolved_at":"2026-11-05T18:34:37Z","dns_checked_at":"2026-11-05T19:07:57.000Z","dns_since":"2026-11-05T19:07:57.000Z","findings":[{"id":"fe2xivdloss755vjn5fry","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T18:21:18.053Z","first_published":"2026-11-05T19:02:12.870Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=bitgetai-nl.live"},{"hostname":"bitora.vip","first_observed":"2026-11-05T18:00:49.708Z","first_published":"2026-11-05T19:02:12.870Z","brands":[],"dns":"resolved","resolved":["104.21.84.16","172.67.184.194"],"resolved_at":"2026-11-05T18:04:30Z","dns_checked_at":"2026-11-05T19:07:57.000Z","dns_since":"2026-11-05T19:07:57.000Z","findings":[{"id":"fd2574h62bub2gp742ojw","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T18:00:49.708Z","first_published":"2026-11-05T19:02:12.870Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/bitora.vip/"}],"url":"https://domainspoof.com/live?show=all&q=bitora.vip"},{"hostname":"blaizeswaps.pro","first_observed":"2026-11-05T17:46:36.171Z","first_published":"2026-11-05T19:02:12.870Z","brands":[],"dns":"resolved","resolved":["104.21.54.76","172.67.136.194"],"resolved_at":"2026-11-05T17:57:22Z","dns_checked_at":"2026-11-05T19:07:57.000Z","dns_since":"2026-11-05T19:07:57.000Z","findings":[{"id":"fg42zd4fej57o3b4z63kw","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T17:46:36.171Z","first_published":"2026-11-05T19:02:12.870Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=blaizeswaps.pro"},{"hostname":"blaze-swap.org","first_observed":"2026-11-05T18:05:57.557Z","first_published":"2026-11-05T19:02:12.870Z","brands":[],"dns":"resolved","resolved":["104.21.73.22","172.67.137.160"],"resolved_at":"2026-11-06T11:31:57Z","dns_checked_at":"2026-11-05T19:07:57.000Z","dns_since":"2026-11-05T19:07:57.000Z","findings":[{"id":"fsnh2gxry36ttlgl5kdf6","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T18:05:57.557Z","first_published":"2026-11-05T19:02:12.870Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=blaze-swap.org"},{"hostname":"blazebasic.com","first_observed":"2026-11-05T18:20:10.932Z","first_published":"2026-11-05T19:02:12.870Z","brands":[],"dns":"resolved","resolved":["104.21.36.139","172.67.194.216","2606:4700:3031::6815:248b","2606:4700:3034::ac43:c2d8"],"resolved_at":"2026-11-05T18:22:07Z","dns_checked_at":"2026-11-05T19:07:57.000Z","dns_since":"2026-11-05T19:07:57.000Z","findings":[{"id":"feb3ma3eblx3qkzpj53ts","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T18:20:10.932Z","first_published":"2026-11-05T19:02:12.870Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=blazebasic.com"},{"hostname":"blockchain-centralized-trade.com","first_observed":"2026-11-05T18:41:34.727Z","first_published":"2026-11-05T19:02:12.870Z","brands":[],"dns":"resolved","resolved":["104.21.93.107","172.67.208.215"],"resolved_at":"2026-11-05T18:50:09Z","dns_checked_at":"2026-11-05T19:07:57.000Z","dns_since":"2026-11-05T19:07:57.000Z","findings":[{"id":"fgdibmrxsd6d6pobiho4y","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T18:41:34.727Z","first_published":"2026-11-05T19:02:12.870Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/blockchain-centralized-trade.com/"}],"url":"https://domainspoof.com/live?show=all&q=blockchain-centralized-trade.com"},{"hostname":"blsp.gl","first_observed":"2026-11-05T18:00:49.708Z","first_published":"2026-11-05T19:02:12.870Z","brands":[],"dns":"resolved","resolved":["185.163.204.87"],"resolved_at":"2026-11-05T18:04:30Z","dns_checked_at":"2026-11-05T19:07:57.000Z","dns_since":"2026-11-05T19:07:57.000Z","findings":[{"id":"ftclns5lgvakijvnvncnx","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T18:00:49.708Z","first_published":"2026-11-05T19:02:12.870Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/blsp.gl/"}],"url":"https://domainspoof.com/live?show=all&q=blsp.gl"},{"hostname":"bonzofinance.com","first_observed":"2026-11-05T18:26:07.076Z","first_published":"2026-11-05T19:02:12.870Z","brands":[],"dns":"resolved","resolved":["104.21.47.170","172.67.171.175"],"resolved_at":"2026-11-06T11:37:06Z","dns_checked_at":"2026-11-05T19:07:57.000Z","dns_since":"2026-11-05T19:07:57.000Z","findings":[{"id":"fl7n73jpeq43hi6oqylf3","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T18:26:07.076Z","first_published":"2026-11-05T19:02:12.870Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=bonzofinance.com"},{"hostname":"bonzofinance.net","first_observed":"2026-11-05T18:31:55.333Z","first_published":"2026-11-05T19:02:12.870Z","brands":[],"dns":"resolved","resolved":["104.21.15.36","172.67.161.77"],"resolved_at":"2026-11-06T11:37:06Z","dns_checked_at":"2026-11-05T19:07:57.000Z","dns_since":"2026-11-05T19:07:57.000Z","findings":[{"id":"fapuwfhknig4tw2qt5vw7","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T18:31:55.333Z","first_published":"2026-11-05T19:02:12.870Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=bonzofinance.net"},{"hostname":"brezzapatrimato-es.live","first_observed":"2026-11-05T17:57:01.210Z","first_published":"2026-11-05T19:02:12.870Z","brands":[],"dns":"resolved","resolved":["104.21.17.218","172.67.178.88"],"resolved_at":"2026-11-05T17:57:26Z","dns_checked_at":"2026-11-05T19:07:57.000Z","dns_since":"2026-11-05T19:07:57.000Z","findings":[{"id":"fmc6dljr2yaavnq6vciyl","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T17:57:01.210Z","first_published":"2026-11-05T19:02:12.870Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=brezzapatrimato-es.live"},{"hostname":"bromsolutions.b67.ch","first_observed":"2026-11-05T18:51:40.666Z","first_published":"2026-11-05T19:02:12.870Z","brands":[],"dns":"resolved","resolved":["185.178.193.239","2001:1680:101:88a::1"],"resolved_at":"2026-11-05T18:59:35Z","dns_checked_at":"2026-11-05T19:07:57.000Z","dns_since":"2026-11-05T19:07:57.000Z","findings":[{"id":"fmko2rapfkhx4aoxzczgv","kind":"reported_domain","summary":"Under b67.ch, reported by PhishDestroy","first_observed":"2026-11-05T18:51:40.666Z","first_published":"2026-11-05T19:02:12.870Z","source":"phishdestroy","source_name":"PhishDestroy","under":"b67.ch","source_url":"https://phishdestroy.io/domain/b67.ch/"}],"url":"https://domainspoof.com/live?show=all&q=bromsolutions.b67.ch"},{"hostname":"brulvaxen-nl.live","first_observed":"2026-11-05T18:16:28.648Z","first_published":"2026-11-05T19:02:12.870Z","brands":[],"dns":"resolved","resolved":["104.21.16.157","172.67.213.242"],"resolved_at":"2026-11-05T18:22:12Z","dns_checked_at":"2026-11-05T19:07:57.000Z","dns_since":"2026-11-05T19:07:57.000Z","findings":[{"id":"fy2lnryc4zs4jvwts7747","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T18:16:28.648Z","first_published":"2026-11-05T19:02:12.870Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=brulvaxen-nl.live"},{"hostname":"buy.aquarium.istanbul-ticket.co","first_observed":"2026-11-05T17:46:36.171Z","first_published":"2026-11-05T19:02:12.870Z","brands":[],"dns":"resolved","resolved":["104.20.27.61","172.66.172.52"],"resolved_at":"2026-11-05T17:57:59Z","dns_checked_at":"2026-11-05T19:07:57.000Z","dns_since":"2026-11-05T19:07:57.000Z","findings":[{"id":"f2brbkg5nf2lndw5qsuyu","kind":"reported_domain","summary":"Under istanbul-ticket.co, listed by USOM","first_observed":"2026-11-05T17:46:36.171Z","first_published":"2026-11-05T19:02:12.870Z","source":"usom","source_name":"USOM","under":"istanbul-ticket.co"}],"url":"https://domainspoof.com/live?show=all&q=buy.aquarium.istanbul-ticket.co"},{"hostname":"buyprocessing.com","first_observed":"2026-11-05T18:26:07.076Z","first_published":"2026-11-05T19:02:12.870Z","brands":[],"dns":"resolved","resolved":["104.21.77.184","172.67.210.241"],"resolved_at":"2026-11-05T18:36:13Z","dns_checked_at":"2026-11-05T19:07:57.000Z","dns_since":"2026-11-05T19:07:57.000Z","findings":[{"id":"fx7yyodnxxbxssykk7lgj","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T18:26:07.076Z","first_published":"2026-11-05T19:02:12.870Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/buyprocessing.com/"}],"url":"https://domainspoof.com/live?show=all&q=buyprocessing.com"},{"hostname":"c-xjy.com","first_observed":"2026-11-05T18:41:34.727Z","first_published":"2026-11-05T19:02:12.870Z","brands":[],"dns":"resolved","resolved":["104.21.60.109","172.67.195.227"],"resolved_at":"2026-11-05T18:50:27Z","dns_checked_at":"2026-11-05T19:07:57.000Z","dns_since":"2026-11-05T19:07:57.000Z","findings":[{"id":"fol7smkwajqthe4g3236f","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T18:41:34.727Z","first_published":"2026-11-05T19:02:12.870Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=c-xjy.com"},{"hostname":"calm-balance.com","first_observed":"2026-11-05T18:00:49.708Z","first_published":"2026-11-05T19:02:12.870Z","brands":[],"dns":"resolved","resolved":["104.21.15.129","172.67.162.161"],"resolved_at":"2026-11-05T18:04:32Z","dns_checked_at":"2026-11-05T19:07:57.000Z","dns_since":"2026-11-05T19:07:57.000Z","findings":[{"id":"f5esweuv3ljnguxxqcyjs","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T18:00:49.708Z","first_published":"2026-11-05T19:02:12.870Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=calm-balance.com"},{"hostname":"calm-breezes.com","first_observed":"2026-11-05T17:57:01.210Z","first_published":"2026-11-05T19:02:12.870Z","brands":[],"dns":"resolved","resolved":["104.21.6.230","172.67.135.111"],"resolved_at":"2026-11-05T17:57:32Z","dns_checked_at":"2026-11-05T19:07:57.000Z","dns_since":"2026-11-05T19:07:57.000Z","findings":[{"id":"f5ab2hr2tvio3hwcoqmrf","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T17:57:01.210Z","first_published":"2026-11-05T19:02:12.870Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=calm-breezes.com"},{"hostname":"caltw.shop","first_observed":"2026-11-05T18:00:49.708Z","first_published":"2026-11-05T19:02:12.870Z","brands":[],"dns":"resolved","resolved":["104.21.80.244","172.67.155.156"],"resolved_at":"2026-11-05T18:04:32Z","dns_checked_at":"2026-11-05T19:07:57.000Z","dns_since":"2026-11-05T19:07:57.000Z","findings":[{"id":"fk5nur5vo4fnbvhm6uxtv","kind":"reported_domain","summary":"Listed by NPA 165 (e-commerce)","first_observed":"2026-11-05T18:00:49.708Z","first_published":"2026-11-05T19:02:12.870Z","source":"npa","source_name":"NPA 165","claim":{"category":"e-commerce"}}],"url":"https://domainspoof.com/live?show=all&q=caltw.shop"},{"hostname":"camp-ledger-2zm.pages.dev","first_observed":"2026-11-05T18:26:07.076Z","first_published":"2026-11-05T19:02:12.870Z","brands":[],"dns":"resolved","resolved":["172.66.44.91","172.66.47.165"],"resolved_at":"2026-11-05T18:36:13Z","dns_checked_at":"2026-11-05T19:07:57.000Z","dns_since":"2026-11-05T19:07:57.000Z","findings":[{"id":"frftbbnufiewshuf3i5cc","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T18:26:07.076Z","first_published":"2026-11-05T19:02:12.870Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=camp-ledger-2zm.pages.dev"},{"hostname":"canalempresasnetbia.digital","first_observed":"2026-11-05T18:41:34.727Z","first_published":"2026-11-05T19:02:12.870Z","brands":[{"id":"bradesco","name":"Bradesco","url":"https://domainspoof.com/brands/bradesco"}],"dns":"resolved","resolved":["34.76.205.124"],"resolved_at":"2026-11-05T18:50:28Z","dns_checked_at":"2026-11-05T19:07:57.000Z","dns_since":"2026-11-05T19:07:57.000Z","findings":[{"id":"fc7f6zhimhyssdx657tq4","kind":"reported_domain","summary":"Reported by PhishTank as imitating Bradesco","first_observed":"2026-11-05T18:41:34.727Z","first_published":"2026-11-05T19:02:12.870Z","source":"phishtank","source_name":"PhishTank","claim":{"brand":"Bradesco"},"source_url":"https://phishtank.org/phish_detail.php?phish_id=9409125"}],"url":"https://domainspoof.com/brands/bradesco"},{"hostname":"cbx.a1b.mytemp.website","first_observed":"2026-11-05T18:20:10.932Z","first_published":"2026-11-05T19:02:12.870Z","brands":[],"dns":"resolved","resolved":["92.205.173.219"],"resolved_at":"2026-11-05T18:22:07Z","dns_checked_at":"2026-11-05T19:07:57.000Z","dns_since":"2026-11-05T19:07:57.000Z","findings":[{"id":"f6a6ls4ynijkjqvj35vui","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T18:20:10.932Z","first_published":"2026-11-05T19:02:12.870Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=cbx.a1b.mytemp.website"},{"hostname":"cdek.login.yandex.qiwbpchh9caly81t.rhxyvcq9vvts2ld9.r.mail.leankoala.com","first_observed":"2026-11-05T17:57:32.162Z","first_published":"2026-11-05T19:02:12.870Z","brands":[{"id":"yandex","name":"Yandex","url":"https://domainspoof.com/brands/yandex"}],"dns":"resolved","resolved":["172.246.243.65"],"resolved_at":"2026-11-05T19:07:57Z","dns_checked_at":"2026-11-05T19:07:57.000Z","dns_since":"2026-11-05T19:07:57.000Z","findings":[{"id":"f6iiwevjrvecw7nfzv6ox","kind":"phishing_infrastructure","summary":"Resolved to 172.246.243.65, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T17:57:32.162Z","first_published":"2026-11-05T19:02:12.870Z","address":"172.246.243.65","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/yandex"},{"hostname":"charmiusau.com","first_observed":"2026-11-05T18:00:49.708Z","first_published":"2026-11-05T19:02:12.870Z","brands":[],"dns":"resolved","resolved":["104.21.34.206","172.67.208.98"],"resolved_at":"2026-11-05T18:04:32Z","dns_checked_at":"2026-11-05T19:07:57.000Z","dns_since":"2026-11-05T19:07:57.000Z","findings":[{"id":"feory36v2rbvjj45a5tre","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T18:00:49.708Z","first_published":"2026-11-05T19:02:12.870Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/charmiusau.com/"}],"url":"https://domainspoof.com/live?show=all&q=charmiusau.com"},{"hostname":"cian-protocol.com","first_observed":"2026-11-05T18:11:07.120Z","first_published":"2026-11-05T19:02:12.870Z","brands":[],"dns":"resolved","resolved":["104.21.68.10","172.67.184.154"],"resolved_at":"2026-11-06T11:37:08Z","dns_checked_at":"2026-11-05T19:07:57.000Z","dns_since":"2026-11-05T19:07:57.000Z","findings":[{"id":"flodxultllvedb3evnwgf","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T18:11:07.120Z","first_published":"2026-11-05T19:02:12.870Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=cian-protocol.com"},{"hostname":"civic-ledger.top","first_observed":"2026-11-05T18:36:46.331Z","first_published":"2026-11-05T19:02:12.870Z","brands":[],"dns":"resolved","resolved":["104.21.89.138","172.67.160.52"],"resolved_at":"2026-11-05T18:37:17Z","dns_checked_at":"2026-11-05T19:07:57.000Z","dns_since":"2026-11-05T19:07:57.000Z","findings":[{"id":"fz4wqpjasshfar4wov65u","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T18:36:46.331Z","first_published":"2026-11-05T19:02:12.870Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=civic-ledger.top"},{"hostname":"claimvaluechoserewards.sbs","first_observed":"2026-11-05T18:41:34.727Z","first_published":"2026-11-05T19:02:12.870Z","brands":[],"dns":"resolved","resolved":["104.21.16.142","172.67.212.246"],"resolved_at":"2026-11-05T18:50:30Z","dns_checked_at":"2026-11-05T19:07:57.000Z","dns_since":"2026-11-05T19:07:57.000Z","findings":[{"id":"fjpcuomficttbmk4dhmtv","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T18:41:34.727Z","first_published":"2026-11-05T19:02:12.870Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/claimvaluechoserewards.sbs/"}],"url":"https://domainspoof.com/live?show=all&q=claimvaluechoserewards.sbs"},{"hostname":"coindigitalspayments.com","first_observed":"2026-11-05T18:16:28.648Z","first_published":"2026-11-05T19:02:12.870Z","brands":[],"dns":"resolved","resolved":["104.21.2.222","172.67.129.191"],"resolved_at":"2026-11-05T18:22:50Z","dns_checked_at":"2026-11-05T19:07:57.000Z","dns_since":"2026-11-05T19:07:57.000Z","findings":[{"id":"f4ndobx7k2smxy7ikcgce","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T18:16:28.648Z","first_published":"2026-11-05T19:02:12.870Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/coindigitalspayments.com/"}],"url":"https://domainspoof.com/live?show=all&q=coindigitalspayments.com"},{"hostname":"coinpssf.com","first_observed":"2026-11-05T17:57:01.210Z","first_published":"2026-11-05T19:02:12.870Z","brands":[],"dns":"resolved","resolved":["104.21.38.23","172.67.218.9"],"resolved_at":"2026-11-05T17:57:32Z","dns_checked_at":"2026-11-05T19:07:57.000Z","dns_since":"2026-11-05T19:07:57.000Z","findings":[{"id":"fofkxgklsctalpkcbaimu","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T17:57:01.210Z","first_published":"2026-11-05T19:02:12.870Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=coinpssf.com"},{"hostname":"com-secure.web.id","first_observed":"2026-11-05T18:00:49.708Z","first_published":"2026-11-05T19:02:12.870Z","brands":[],"dns":"resolved","resolved":["43.163.109.17"],"resolved_at":"2026-11-05T18:04:33Z","dns_checked_at":"2026-11-05T19:07:57.000Z","dns_since":"2026-11-05T19:07:57.000Z","findings":[{"id":"fmsucm5fw6bebg5if5keh","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T18:00:49.708Z","first_published":"2026-11-05T19:02:12.870Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=com-secure.web.id"},{"hostname":"compound-finance.net","first_observed":"2026-11-05T17:46:36.171Z","first_published":"2026-11-05T19:02:12.870Z","brands":[],"dns":"resolved","resolved":["104.21.67.90","172.67.219.36"],"resolved_at":"2026-11-05T17:58:02Z","dns_checked_at":"2026-11-05T19:07:57.000Z","dns_since":"2026-11-05T19:07:57.000Z","findings":[{"id":"fwr2gn27l7shsxzou2g7k","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T17:46:36.171Z","first_published":"2026-11-05T19:02:12.870Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/compound-finance.net/"}],"url":"https://domainspoof.com/live?show=all&q=compound-finance.net"},{"hostname":"connect-firelight.xyz","first_observed":"2026-11-05T18:21:18.053Z","first_published":"2026-11-05T19:02:12.870Z","brands":[],"dns":"resolved","resolved":["104.21.12.96","172.67.194.7"],"resolved_at":"2026-11-05T18:21:44Z","dns_checked_at":"2026-11-05T19:07:57.000Z","dns_since":"2026-11-05T19:07:57.000Z","findings":[{"id":"f533vomsrsanvqqo5nmbd","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T18:21:18.053Z","first_published":"2026-11-05T19:02:12.870Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=connect-firelight.xyz"},{"hostname":"console.xmrwallet.me","first_observed":"2026-11-05T18:41:34.727Z","first_published":"2026-11-05T19:02:12.870Z","brands":[],"dns":"resolved","resolved":["185.129.100.248"],"resolved_at":"2026-11-05T18:50:30Z","dns_checked_at":"2026-11-05T19:07:57.000Z","dns_since":"2026-11-05T19:07:57.000Z","findings":[{"id":"f3irqrnh5ys2mwgc5krvc","kind":"reported_domain","summary":"Under xmrwallet.me, reported by PhishDestroy","first_observed":"2026-11-05T18:41:34.727Z","first_published":"2026-11-05T19:02:12.870Z","source":"phishdestroy","source_name":"PhishDestroy","under":"xmrwallet.me","source_url":"https://phishdestroy.io/domain/xmrwallet.me/"}],"url":"https://domainspoof.com/live?show=all&q=console.xmrwallet.me"},{"hostname":"convex-finance.org","first_observed":"2026-11-05T18:21:18.053Z","first_published":"2026-11-05T19:02:12.870Z","brands":[],"dns":"resolved","resolved":["104.21.24.149","172.67.219.67"],"resolved_at":"2026-11-06T11:37:09Z","dns_checked_at":"2026-11-05T19:07:57.000Z","dns_since":"2026-11-05T19:07:57.000Z","findings":[{"id":"fc52qdjdd4pqyhselich2","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T18:21:18.053Z","first_published":"2026-11-05T19:02:12.870Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=convex-finance.org"},{"hostname":"cow-swap.net","first_observed":"2026-11-05T18:26:07.076Z","first_published":"2026-11-05T19:02:12.870Z","brands":[],"dns":"resolved","resolved":["104.21.67.184","172.67.179.120"],"resolved_at":"2026-11-06T11:37:09Z","dns_checked_at":"2026-11-05T19:07:57.000Z","dns_since":"2026-11-05T19:07:57.000Z","findings":[{"id":"fh3tbsjfsy5mivbbnxlqz","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T18:26:07.076Z","first_published":"2026-11-05T19:02:12.870Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=cow-swap.net"},{"hostname":"crypto-ocbcx.xyz","first_observed":"2026-11-05T17:53:50.776Z","first_published":"2026-11-05T19:02:12.870Z","brands":[],"dns":"not_found","resolved":[],"resolved_at":"2026-11-05T17:56:36Z","dns_checked_at":"2026-11-06T11:27:33.000Z","findings":[{"id":"flr2vrh4evou53pcemmqr","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T17:53:50.776Z","first_published":"2026-11-05T19:02:12.870Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=crypto-ocbcx.xyz"},{"hostname":"dghjc.com","first_observed":"2026-11-05T18:41:34.727Z","first_published":"2026-11-05T19:02:12.870Z","brands":[],"dns":"resolved","resolved":["104.21.69.98","172.67.206.251"],"resolved_at":"2026-11-05T18:50:57Z","dns_checked_at":"2026-11-05T19:07:57.000Z","dns_since":"2026-11-05T19:07:57.000Z","findings":[{"id":"ffjyumcdmdtjt67glwlzd","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T18:41:34.727Z","first_published":"2026-11-05T19:02:12.870Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=dghjc.com"},{"hostname":"directus.socialvisor.ru","first_observed":"2026-11-05T18:00:49.708Z","first_published":"2026-11-05T19:02:12.870Z","brands":[],"dns":"resolved","resolved":["91.215.41.91"],"resolved_at":"2026-11-05T18:04:35Z","dns_checked_at":"2026-11-05T19:07:57.000Z","dns_since":"2026-11-05T19:07:57.000Z","findings":[{"id":"fwnwvy5xhsdqmxqrvx2ef","kind":"reported_domain","summary":"Under socialvisor.ru, reported by PhishDestroy","first_observed":"2026-11-05T18:00:49.708Z","first_published":"2026-11-05T19:02:12.870Z","source":"phishdestroy","source_name":"PhishDestroy","under":"socialvisor.ru","source_url":"https://phishdestroy.io/domain/socialvisor.ru/"}],"url":"https://domainspoof.com/live?show=all&q=directus.socialvisor.ru"},{"hostname":"disabalgom.store","first_observed":"2026-11-05T18:20:10.932Z","first_published":"2026-11-05T19:02:12.870Z","brands":[],"dns":"resolved","resolved":["104.21.75.120","172.67.175.148","2606:4700:3031::ac43:af94","2606:4700:3034::6815:4b78"],"resolved_at":"2026-11-05T18:22:07Z","dns_checked_at":"2026-11-05T19:07:57.000Z","dns_since":"2026-11-05T19:07:57.000Z","findings":[{"id":"f3lguh3m24yngqel3jgl6","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T18:20:10.932Z","first_published":"2026-11-05T19:02:12.870Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=disabalgom.store"},{"hostname":"drovakensha.com","first_observed":"2026-11-05T18:20:10.932Z","first_published":"2026-11-05T19:02:12.870Z","brands":[],"dns":"resolved","resolved":["104.21.53.69","172.67.209.173","2606:4700:3030::ac43:d1ad","2606:4700:3034::6815:3545"],"resolved_at":"2026-11-05T18:22:07Z","dns_checked_at":"2026-11-05T19:07:57.000Z","dns_since":"2026-11-05T19:07:57.000Z","findings":[{"id":"fy4jvhsidc47gx43kclxx","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T18:20:10.932Z","first_published":"2026-11-05T19:02:12.870Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=drovakensha.com"},{"hostname":"dynamic-zenith.com","first_observed":"2026-11-05T18:21:18.053Z","first_published":"2026-11-05T19:02:12.870Z","brands":[],"dns":"resolved","resolved":["104.21.21.187","172.67.199.206"],"resolved_at":"2026-11-05T18:21:48Z","dns_checked_at":"2026-11-05T19:07:57.000Z","dns_since":"2026-11-05T19:07:57.000Z","findings":[{"id":"fmkqjm4c33rq46433hivp","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T18:21:18.053Z","first_published":"2026-11-05T19:02:12.870Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=dynamic-zenith.com"},{"hostname":"dzsck.com","first_observed":"2026-11-05T18:46:52.803Z","first_published":"2026-11-05T19:02:12.870Z","brands":[],"dns":"resolved","resolved":["104.21.64.233","172.67.137.150"],"resolved_at":"2026-11-05T18:55:46Z","dns_checked_at":"2026-11-05T19:07:57.000Z","dns_since":"2026-11-05T19:07:57.000Z","findings":[{"id":"fnmdqxjye3gx7rawugrz7","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T18:46:52.803Z","first_published":"2026-11-05T19:02:12.870Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=dzsck.com"},{"hostname":"eigen-cloud.net","first_observed":"2026-11-05T18:11:07.120Z","first_published":"2026-11-05T19:02:12.870Z","brands":[],"dns":"resolved","resolved":["104.21.84.152","172.67.194.141"],"resolved_at":"2026-11-06T11:37:11Z","dns_checked_at":"2026-11-05T19:07:57.000Z","dns_since":"2026-11-05T19:07:57.000Z","findings":[{"id":"ffnxlehkdezoh6mn4mqtn","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T18:11:07.120Z","first_published":"2026-11-05T19:02:12.870Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=eigen-cloud.net"},{"hostname":"eliice.com","first_observed":"2026-11-05T18:21:18.053Z","first_published":"2026-11-05T19:02:12.870Z","brands":[],"dns":"resolved","resolved":["104.21.47.28","172.67.144.40"],"resolved_at":"2026-11-05T18:21:48Z","dns_checked_at":"2026-11-05T19:07:57.000Z","dns_since":"2026-11-05T19:07:57.000Z","findings":[{"id":"fycigpwf3d4w5lmtzimlg","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T18:21:18.053Z","first_published":"2026-11-05T19:02:12.870Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/eliice.com/"}],"url":"https://domainspoof.com/live?show=all&q=eliice.com"},{"hostname":"ember-ledger-4127.pages.dev","first_observed":"2026-11-05T18:36:46.331Z","first_published":"2026-11-05T19:02:12.870Z","brands":[],"dns":"resolved","resolved":["172.66.45.46","172.66.46.210"],"resolved_at":"2026-11-05T18:43:53Z","dns_checked_at":"2026-11-05T19:07:57.000Z","dns_since":"2026-11-05T19:07:57.000Z","findings":[{"id":"foci5j2fiw2a2dhlu5syi","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T18:36:46.331Z","first_published":"2026-11-05T19:02:12.870Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=ember-ledger-4127.pages.dev"},{"hostname":"energy-lumen.com","first_observed":"2026-11-05T18:36:46.331Z","first_published":"2026-11-05T19:02:12.870Z","brands":[],"dns":"resolved","resolved":["104.21.80.155","172.67.151.87"],"resolved_at":"2026-11-05T18:43:53Z","dns_checked_at":"2026-11-05T19:07:57.000Z","dns_since":"2026-11-05T19:07:57.000Z","findings":[{"id":"fwnt2327ead63u4llmwkt","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T18:36:46.331Z","first_published":"2026-11-05T19:02:12.870Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=energy-lumen.com"},{"hostname":"ent.hubcert.com.br","first_observed":"2026-11-05T18:00:49.708Z","first_published":"2026-11-05T19:02:12.870Z","brands":[],"dns":"resolved","resolved":["162.240.108.214"],"resolved_at":"2026-11-05T18:04:36Z","dns_checked_at":"2026-11-05T19:07:57.000Z","dns_since":"2026-11-05T19:07:57.000Z","findings":[{"id":"fjdq5w7ojasictjfid6nc","kind":"reported_domain","summary":"Under hubcert.com.br, reported by PhishDestroy","first_observed":"2026-11-05T18:00:49.708Z","first_published":"2026-11-05T19:02:12.870Z","source":"phishdestroy","source_name":"PhishDestroy","under":"hubcert.com.br","source_url":"https://phishdestroy.io/domain/hubcert.com.br/"}],"url":"https://domainspoof.com/live?show=all&q=ent.hubcert.com.br"},{"hostname":"escotbabeylon-listcrawler.com","first_observed":"2026-11-05T18:36:46.331Z","first_published":"2026-11-05T19:02:12.870Z","brands":[],"dns":"resolved","resolved":["104.248.238.34"],"resolved_at":"2026-11-06T14:07:42Z","dns_checked_at":"2026-11-05T19:07:57.000Z","dns_since":"2026-11-05T19:07:57.000Z","findings":[{"id":"fwulpbn4izkthjfwjkjgh","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T18:36:46.331Z","first_published":"2026-11-05T19:02:12.870Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=escotbabeylon-listcrawler.com"},{"hostname":"estv-meine-admin-info-2026.cc","first_observed":"2026-11-05T17:53:50.776Z","first_published":"2026-11-05T19:02:12.870Z","brands":[],"dns":"resolved","resolved":["104.21.50.174","172.67.207.120","2606:4700:3031::ac43:cf78","2606:4700:3036::6815:32ae"],"resolved_at":"2026-11-05T17:56:36Z","dns_checked_at":"2026-11-05T19:07:57.000Z","dns_since":"2026-11-05T19:07:57.000Z","findings":[{"id":"f6podi7kc5lctahhdynnl","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T17:53:50.776Z","first_published":"2026-11-05T19:02:12.870Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=estv-meine-admin-info-2026.cc"},{"hostname":"ethenafndn.com","first_observed":"2026-11-05T18:21:18.053Z","first_published":"2026-11-05T19:02:12.870Z","brands":[{"id":"ethena","name":"Ethena","url":"https://domainspoof.com/brands/ethena"}],"dns":"resolved","resolved":["104.21.52.117","172.67.198.127","2606:4700:3032::ac43:c67f","2606:4700:3037::6815:3475"],"resolved_at":"2026-11-06T10:41:12Z","dns_checked_at":"2026-11-05T19:07:57.000Z","dns_since":"2026-11-05T19:07:57.000Z","findings":[{"id":"fu77zdcyssugnfp3odecy","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T18:21:18.053Z","first_published":"2026-11-05T19:02:12.870Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/brands/ethena"},{"hostname":"eurofinstrategy.info","first_observed":"2026-11-05T18:46:52.803Z","first_published":"2026-11-05T19:02:12.870Z","brands":[{"id":"paypay","name":"PayPay","url":"https://domainspoof.com/brands/paypay"}],"dns":"resolved","resolved":["103.224.212.142"],"resolved_at":"2026-11-05T18:55:46Z","dns_checked_at":"2026-11-05T19:07:57.000Z","dns_since":"2026-11-05T19:07:57.000Z","findings":[{"id":"fz5td5i74nn5x7wqchwcw","kind":"reported_domain","summary":"Listed by JPCERT/CC as imitating PayPay","first_observed":"2026-11-05T18:46:52.803Z","first_published":"2026-11-05T19:02:12.870Z","source":"jpcert","source_name":"JPCERT/CC","claim":{"brand":"PayPay"}}],"url":"https://domainspoof.com/brands/paypay"},{"hostname":"events-aave.xyz","first_observed":"2026-11-05T17:46:36.171Z","first_published":"2026-11-05T19:02:12.870Z","brands":[],"dns":"resolved","resolved":["104.21.31.204","172.67.179.242"],"resolved_at":"2026-11-05T17:58:44Z","dns_checked_at":"2026-11-05T19:07:57.000Z","dns_since":"2026-11-05T19:07:57.000Z","findings":[{"id":"fzupfpnytz7aae2lbt2wq","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T17:46:36.171Z","first_published":"2026-11-05T19:02:12.870Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=events-aave.xyz"},{"hostname":"evlerbasvurularbenim.com","first_observed":"2026-11-05T18:48:30.891Z","first_published":"2026-11-05T19:02:12.870Z","brands":[],"dns":"resolved","resolved":["104.21.13.56","172.67.132.158","2606:4700:3037::6815:d38","2606:4700:3037::ac43:849e"],"resolved_at":"2026-11-05T18:53:23Z","dns_checked_at":"2026-11-05T19:07:57.000Z","dns_since":"2026-11-05T19:07:57.000Z","findings":[{"id":"fqd6azssc5y3picmyu3km","kind":"reported_domain","summary":"Listed by USOM","first_observed":"2026-11-05T18:48:30.891Z","first_published":"2026-11-05T19:02:12.870Z","source":"usom","source_name":"USOM"}],"url":"https://domainspoof.com/live?show=all&q=evlerbasvurularbenim.com"},{"hostname":"falcon-finances.org","first_observed":"2026-11-05T17:51:59.862Z","first_published":"2026-11-05T19:02:12.870Z","brands":[],"dns":"resolved","resolved":["104.21.38.217","172.67.139.82"],"resolved_at":"2026-11-05T17:52:37Z","dns_checked_at":"2026-11-05T19:07:57.000Z","dns_since":"2026-11-05T19:07:57.000Z","findings":[{"id":"f6jbkp26e6egu7byat2b6","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T17:51:59.862Z","first_published":"2026-11-05T19:02:12.870Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=falcon-finances.org"},{"hostname":"falnx.com","first_observed":"2026-11-05T18:51:40.666Z","first_published":"2026-11-05T19:02:12.870Z","brands":[],"dns":"resolved","resolved":["104.21.87.75","172.67.142.90"],"resolved_at":"2026-11-05T19:00:24Z","dns_checked_at":"2026-11-05T19:07:57.000Z","dns_since":"2026-11-05T19:07:57.000Z","findings":[{"id":"f2schlr6rsv2gszyokhwo","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T18:51:40.666Z","first_published":"2026-11-05T19:02:12.870Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=falnx.com"},{"hostname":"fcrck.asia","first_observed":"2026-11-05T18:41:34.727Z","first_published":"2026-11-05T19:02:12.870Z","brands":[],"dns":"resolved","resolved":["104.21.34.96","172.67.158.224"],"resolved_at":"2026-11-05T18:51:02Z","dns_checked_at":"2026-11-05T19:07:57.000Z","dns_since":"2026-11-05T19:07:57.000Z","findings":[{"id":"fz57nkci7zr7lfcs56jln","kind":"reported_domain","summary":"Listed by NPA 165 (information services)","first_observed":"2026-11-05T18:41:34.727Z","first_published":"2026-11-05T19:02:12.870Z","source":"npa","source_name":"NPA 165","claim":{"category":"information services"}}],"url":"https://domainspoof.com/live?show=all&q=fcrck.asia"},{"hostname":"figure-markets.net","first_observed":"2026-11-05T18:11:07.120Z","first_published":"2026-11-05T19:02:12.870Z","brands":[],"dns":"resolved","resolved":["104.21.29.163","172.67.149.117"],"resolved_at":"2026-11-06T11:37:11Z","dns_checked_at":"2026-11-05T19:07:57.000Z","dns_since":"2026-11-05T19:07:57.000Z","findings":[{"id":"fbueendyivo2qybx7tipg","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T18:11:07.120Z","first_published":"2026-11-05T19:02:12.870Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=figure-markets.net"},{"hostname":"finance-proposals.fun","first_observed":"2026-11-05T17:53:50.776Z","first_published":"2026-11-05T19:02:12.870Z","brands":[],"dns":"resolved","resolved":["104.21.93.101","172.67.208.168","2606:4700:3030::6815:5d65","2606:4700:3031::ac43:d0a8"],"resolved_at":"2026-11-05T17:56:36Z","dns_checked_at":"2026-11-05T19:07:57.000Z","dns_since":"2026-11-05T19:07:57.000Z","findings":[{"id":"fecbthxcwoysjm2yxgedf","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T17:53:50.776Z","first_published":"2026-11-05T19:02:12.870Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=finance-proposals.fun"},{"hostname":"finance-proposals.top","first_observed":"2026-11-05T17:53:50.776Z","first_published":"2026-11-05T19:02:12.870Z","brands":[],"dns":"resolved","resolved":["104.21.10.18","172.67.162.30","2606:4700:3032::6815:a12","2606:4700:3037::ac43:a21e"],"resolved_at":"2026-11-05T17:56:36Z","dns_checked_at":"2026-11-05T19:07:57.000Z","dns_since":"2026-11-05T19:07:57.000Z","findings":[{"id":"f47ygukjqafqfvqszez6i","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T17:53:50.776Z","first_published":"2026-11-05T19:02:12.870Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=finance-proposals.top"},{"hostname":"finanse-bonus.top","first_observed":"2026-11-05T18:20:10.932Z","first_published":"2026-11-05T19:02:12.870Z","brands":[],"dns":"not_found","resolved":[],"resolved_at":"2026-11-05T18:22:07Z","dns_checked_at":"2026-11-06T11:27:33.000Z","findings":[{"id":"fyq7s5xsrendtolk3hgb4","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T18:20:10.932Z","first_published":"2026-11-05T19:02:12.870Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=finanse-bonus.top"},{"hostname":"fjfenterprises.com","first_observed":"2026-11-05T18:20:10.932Z","first_published":"2026-11-05T19:02:12.870Z","brands":[],"dns":"resolved","resolved":["104.21.48.78","172.67.181.188","2606:4700:3033::6815:304e","2606:4700:3035::ac43:b5bc"],"resolved_at":"2026-11-05T18:22:07Z","dns_checked_at":"2026-11-05T19:07:57.000Z","dns_since":"2026-11-05T19:07:57.000Z","findings":[{"id":"ffzsh46cmkxol5zlim3se","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T18:20:10.932Z","first_published":"2026-11-05T19:02:12.870Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=fjfenterprises.com"},{"hostname":"foedlged.space","first_observed":"2026-11-05T18:36:46.331Z","first_published":"2026-11-05T19:02:12.870Z","brands":[],"dns":"resolved","resolved":["104.21.7.251","172.67.156.143"],"resolved_at":"2026-11-05T18:43:54Z","dns_checked_at":"2026-11-05T19:07:57.000Z","dns_since":"2026-11-05T19:07:57.000Z","findings":[{"id":"ff3dj3mts5kxbhqt3tyl5","kind":"reported_domain","summary":"Listed by NPA 165 (e-commerce)","first_observed":"2026-11-05T18:36:46.331Z","first_published":"2026-11-05T19:02:12.870Z","source":"npa","source_name":"NPA 165","claim":{"category":"e-commerce"}}],"url":"https://domainspoof.com/live?show=all&q=foedlged.space"},{"hostname":"folks-finance.org","first_observed":"2026-11-05T17:51:59.862Z","first_published":"2026-11-05T19:02:12.870Z","brands":[],"dns":"resolved","resolved":["104.21.82.23","172.67.151.91"],"resolved_at":"2026-11-05T17:52:37Z","dns_checked_at":"2026-11-05T19:07:57.000Z","dns_since":"2026-11-05T19:07:57.000Z","findings":[{"id":"feeojf3bt2gzirqfiwvcf","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T17:51:59.862Z","first_published":"2026-11-05T19:02:12.870Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=folks-finance.org"},{"hostname":"folksfinance.org","first_observed":"2026-11-05T18:36:46.331Z","first_published":"2026-11-05T19:02:12.870Z","brands":[],"dns":"resolved","resolved":["104.21.2.183","172.67.129.139"],"resolved_at":"2026-11-06T11:37:11Z","dns_checked_at":"2026-11-05T19:07:57.000Z","dns_since":"2026-11-05T19:07:57.000Z","findings":[{"id":"frt7mnmlf3szwqxrf762t","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T18:36:46.331Z","first_published":"2026-11-05T19:02:12.870Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=folksfinance.org"},{"hostname":"folksfinances.com","first_observed":"2026-11-05T18:26:07.076Z","first_published":"2026-11-05T19:02:12.870Z","brands":[],"dns":"resolved","resolved":["104.21.79.196","172.67.171.7"],"resolved_at":"2026-11-06T11:41:53Z","dns_checked_at":"2026-11-05T19:07:57.000Z","dns_since":"2026-11-05T19:07:57.000Z","findings":[{"id":"fci5yrp2hmurvnowrcada","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T18:26:07.076Z","first_published":"2026-11-05T19:02:12.870Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=folksfinances.com"},{"hostname":"foretrendoire-fr.live","first_observed":"2026-11-05T18:11:07.120Z","first_published":"2026-11-05T19:02:12.870Z","brands":[],"dns":"resolved","resolved":["104.21.12.151","172.67.132.42"],"resolved_at":"2026-11-05T18:11:40Z","dns_checked_at":"2026-11-05T19:07:57.000Z","dns_since":"2026-11-05T19:07:57.000Z","findings":[{"id":"fuuy3iv3xdere2f6engwe","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T18:11:07.120Z","first_published":"2026-11-05T19:02:12.870Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=foretrendoire-fr.live"},{"hostname":"francorea-fin-digital.pages.dev","first_observed":"2026-11-05T17:46:36.171Z","first_published":"2026-11-05T19:02:12.870Z","brands":[],"dns":"resolved","resolved":["172.66.44.87","172.66.47.169"],"resolved_at":"2026-11-05T17:58:47Z","dns_checked_at":"2026-11-05T19:07:57.000Z","dns_since":"2026-11-05T19:07:57.000Z","findings":[{"id":"fnb53fjqia567iuc6e7wo","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T17:46:36.171Z","first_published":"2026-11-05T19:02:12.870Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=francorea-fin-digital.pages.dev"},{"hostname":"frax-finance.com","first_observed":"2026-11-05T17:57:01.210Z","first_published":"2026-11-05T19:02:12.870Z","brands":[],"dns":"resolved","resolved":["104.21.83.182","172.67.180.126"],"resolved_at":"2026-11-06T11:41:53Z","dns_checked_at":"2026-11-05T19:07:57.000Z","dns_since":"2026-11-05T19:07:57.000Z","findings":[{"id":"ftigfyehsw7tkoqqltcpm","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T17:57:01.210Z","first_published":"2026-11-05T19:02:12.870Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=frax-finance.com"},{"hostname":"fsawznkx.euconldz.fmvrxzcy.gvuolhky.emnbzdvj.uatmfwcq.gatewaylearning.ezgateway.net","first_observed":"2026-11-05T18:36:46.331Z","first_published":"2026-11-05T19:02:12.870Z","brands":[],"dns":"resolved","resolved":["15.204.116.29"],"resolved_at":"2026-11-05T18:43:54Z","dns_checked_at":"2026-11-05T19:07:57.000Z","dns_since":"2026-11-05T19:07:57.000Z","findings":[{"id":"fdhebnareua4xcfjizxxz","kind":"reported_domain","summary":"Under ezgateway.net, listed by USOM","first_observed":"2026-11-05T18:36:46.331Z","first_published":"2026-11-05T19:02:12.870Z","source":"usom","source_name":"USOM","under":"ezgateway.net"}],"url":"https://domainspoof.com/live?show=all&q=fsawznkx.euconldz.fmvrxzcy.gvuolhky.emnbzdvj.uatmfwcq.gatewaylearning.ezgateway.net"},{"hostname":"futuresdetg.com","first_observed":"2026-11-05T18:41:34.727Z","first_published":"2026-11-05T19:02:12.870Z","brands":[],"dns":"resolved","resolved":["104.21.12.63","172.67.193.182"],"resolved_at":"2026-11-05T18:51:03Z","dns_checked_at":"2026-11-05T19:07:57.000Z","dns_since":"2026-11-05T19:07:57.000Z","findings":[{"id":"fnk2uvrvoces4xjiwqlw6","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T18:41:34.727Z","first_published":"2026-11-05T19:02:12.870Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=futuresdetg.com"},{"hostname":"futuresfdrr.com","first_observed":"2026-11-05T18:41:34.727Z","first_published":"2026-11-05T19:02:12.870Z","brands":[],"dns":"resolved","resolved":["104.21.5.80","172.67.133.49"],"resolved_at":"2026-11-05T18:51:03Z","dns_checked_at":"2026-11-05T19:07:57.000Z","dns_since":"2026-11-05T19:07:57.000Z","findings":[{"id":"fdrsz6yfddiucjsobo543","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T18:41:34.727Z","first_published":"2026-11-05T19:02:12.870Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=futuresfdrr.com"},{"hostname":"get-ledgrlive-walete.pages.dev","first_observed":"2026-11-05T18:26:07.076Z","first_published":"2026-11-05T19:02:12.870Z","brands":[],"dns":"resolved","resolved":["172.66.44.168","172.66.47.88"],"resolved_at":"2026-11-05T18:26:33Z","dns_checked_at":"2026-11-05T19:07:57.000Z","dns_since":"2026-11-05T19:07:57.000Z","findings":[{"id":"f4uqbfbtkcoz2pgda7mci","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T18:26:07.076Z","first_published":"2026-11-05T19:02:12.870Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=get-ledgrlive-walete.pages.dev"},{"hostname":"giftcardscheck.online","first_observed":"2026-11-05T18:51:40.666Z","first_published":"2026-11-05T19:02:12.870Z","brands":[],"dns":"resolved","resolved":["163.61.188.9"],"resolved_at":"2026-11-05T19:00:27Z","dns_checked_at":"2026-11-05T19:07:57.000Z","dns_since":"2026-11-05T19:07:57.000Z","findings":[{"id":"ftjof6scjlr3cafjnmfcm","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T18:51:40.666Z","first_published":"2026-11-05T19:02:12.870Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/giftcardscheck.online/"}],"url":"https://domainspoof.com/live?show=all&q=giftcardscheck.online"},{"hostname":"glyph-exchange.net","first_observed":"2026-11-05T17:51:59.862Z","first_published":"2026-11-05T19:02:12.870Z","brands":[],"dns":"resolved","resolved":["104.21.37.241","172.67.215.132"],"resolved_at":"2026-11-06T11:41:53Z","dns_checked_at":"2026-11-05T19:07:57.000Z","dns_since":"2026-11-05T19:07:57.000Z","findings":[{"id":"fpynqe2xotiwndxjc3y2n","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T17:51:59.862Z","first_published":"2026-11-05T19:02:12.870Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=glyph-exchange.net"},{"hostname":"gmbcoin.com","first_observed":"2026-11-05T17:51:59.862Z","first_published":"2026-11-05T19:02:12.870Z","brands":[],"dns":"resolved","resolved":["13.223.25.84","54.243.117.197"],"resolved_at":"2026-11-05T17:52:37Z","dns_checked_at":"2026-11-05T19:07:57.000Z","dns_since":"2026-11-05T19:07:57.000Z","findings":[{"id":"fu56tbc4dfrx2c6aiipkf","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T17:51:59.862Z","first_published":"2026-11-05T19:02:12.870Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=gmbcoin.com"},{"hostname":"gmx.b67.ch","first_observed":"2026-11-05T18:51:40.666Z","first_published":"2026-11-05T19:02:12.870Z","brands":[],"dns":"resolved","resolved":["185.178.193.239","2001:1680:101:88a::1"],"resolved_at":"2026-11-05T19:00:27Z","dns_checked_at":"2026-11-05T19:07:57.000Z","dns_since":"2026-11-05T19:07:57.000Z","findings":[{"id":"fxc2izagosjd4axped5gj","kind":"reported_domain","summary":"Under b67.ch, reported by PhishDestroy","first_observed":"2026-11-05T18:51:40.666Z","first_published":"2026-11-05T19:02:12.870Z","source":"phishdestroy","source_name":"PhishDestroy","under":"b67.ch","source_url":"https://phishdestroy.io/domain/b67.ch/"}],"url":"https://domainspoof.com/live?show=all&q=gmx.b67.ch"},{"hostname":"governace-flarenetworks.app","first_observed":"2026-11-05T17:46:36.171Z","first_published":"2026-11-05T19:02:12.870Z","brands":[{"id":"flare-network","name":"Flare Network","url":"https://domainspoof.com/brands/flare-network"}],"dns":"resolved","resolved":["104.21.48.240","172.67.157.2","2606:4700:3033::ac43:9d02","2606:4700:3037::6815:30f0"],"resolved_at":"2026-11-05T17:58:49Z","dns_checked_at":"2026-11-05T19:07:57.000Z","dns_since":"2026-11-05T19:07:57.000Z","findings":[{"id":"fitjrk7sx3efoqulflbyq","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T17:46:36.171Z","first_published":"2026-11-05T19:02:12.870Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/brands/flare-network"},{"hostname":"governance-fobo.pages.dev","first_observed":"2026-11-05T17:53:50.776Z","first_published":"2026-11-05T19:02:12.870Z","brands":[],"dns":"resolved","resolved":["172.66.44.169","172.66.47.87","2606:4700:310c::ac42:2ca9","2606:4700:310c::ac42:2f57"],"resolved_at":"2026-11-05T17:56:36Z","dns_checked_at":"2026-11-05T19:07:57.000Z","dns_since":"2026-11-05T19:07:57.000Z","findings":[{"id":"fso6nsbe2qfthn4gqqpgp","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T17:53:50.776Z","first_published":"2026-11-05T19:02:12.870Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=governance-fobo.pages.dev"},{"hostname":"gptforge-fr.live","first_observed":"2026-11-05T18:36:46.331Z","first_published":"2026-11-05T19:02:12.870Z","brands":[],"dns":"resolved","resolved":["104.21.25.18","172.67.222.3"],"resolved_at":"2026-11-05T18:43:56Z","dns_checked_at":"2026-11-05T19:07:57.000Z","dns_since":"2026-11-05T19:07:57.000Z","findings":[{"id":"fed7qma3t6hxjdsqjasgq","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T18:36:46.331Z","first_published":"2026-11-05T19:02:12.870Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=gptforge-fr.live"},{"hostname":"grafing.nak.b67.ch","first_observed":"2026-11-05T18:51:40.666Z","first_published":"2026-11-05T19:02:12.870Z","brands":[],"dns":"resolved","resolved":["185.178.193.239","2001:1680:101:88a::1"],"resolved_at":"2026-11-05T19:00:28Z","dns_checked_at":"2026-11-05T19:07:57.000Z","dns_since":"2026-11-05T19:07:57.000Z","findings":[{"id":"fvbnqceyusehxjgxctrfw","kind":"reported_domain","summary":"Under b67.ch, reported by PhishDestroy","first_observed":"2026-11-05T18:51:40.666Z","first_published":"2026-11-05T19:02:12.870Z","source":"phishdestroy","source_name":"PhishDestroy","under":"b67.ch","source_url":"https://phishdestroy.io/domain/b67.ch/"}],"url":"https://domainspoof.com/live?show=all&q=grafing.nak.b67.ch"},{"hostname":"greekscholar.com","first_observed":"2026-11-05T18:16:28.648Z","first_published":"2026-11-05T19:02:12.870Z","brands":[],"dns":"resolved","resolved":["13.248.213.45","76.223.67.189"],"resolved_at":"2026-11-06T05:56:11Z","dns_checked_at":"2026-11-05T19:07:57.000Z","dns_since":"2026-11-05T19:07:57.000Z","findings":[{"id":"ffkkq6ux3eqgdtoifjnum","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T18:16:28.648Z","first_published":"2026-11-05T19:02:12.870Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=greekscholar.com"},{"hostname":"gridoakhub.com","first_observed":"2026-11-05T17:53:50.776Z","first_published":"2026-11-05T19:02:12.870Z","brands":[],"dns":"resolved","resolved":["198.251.89.144"],"resolved_at":"2026-11-05T17:56:36Z","dns_checked_at":"2026-11-05T19:07:57.000Z","dns_since":"2026-11-05T19:07:57.000Z","findings":[{"id":"ffl2f3cxzqb2kiso2c6zf","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T17:53:50.776Z","first_published":"2026-11-05T19:02:12.870Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=gridoakhub.com"},{"hostname":"guacamole.socialvisor.ru","first_observed":"2026-11-05T18:46:52.803Z","first_published":"2026-11-05T19:02:12.870Z","brands":[],"dns":"resolved","resolved":["91.215.41.91"],"resolved_at":"2026-11-05T18:55:48Z","dns_checked_at":"2026-11-05T19:07:57.000Z","dns_since":"2026-11-05T19:07:57.000Z","findings":[{"id":"ffrjwouyjra3zdr36rac2","kind":"reported_domain","summary":"Under socialvisor.ru, reported by PhishDestroy","first_observed":"2026-11-05T18:46:52.803Z","first_published":"2026-11-05T19:02:12.870Z","source":"phishdestroy","source_name":"PhishDestroy","under":"socialvisor.ru","source_url":"https://phishdestroy.io/domain/socialvisor.ru/"}],"url":"https://domainspoof.com/live?show=all&q=guacamole.socialvisor.ru"},{"hostname":"guncel-giris-adresi.icu","first_observed":"2026-11-05T18:26:07.076Z","first_published":"2026-11-05T19:02:12.870Z","brands":[],"dns":"resolved","resolved":["104.21.39.230","172.67.149.175"],"resolved_at":"2026-11-05T18:26:33Z","dns_checked_at":"2026-11-05T19:07:57.000Z","dns_since":"2026-11-05T19:07:57.000Z","findings":[{"id":"fi44d3pr2sdikryfbw2de","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T18:26:07.076Z","first_published":"2026-11-05T19:02:12.870Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/guncel-giris-adresi.icu/"}],"url":"https://domainspoof.com/live?show=all&q=guncel-giris-adresi.icu"},{"hostname":"hays.b67.ch","first_observed":"2026-11-05T18:51:40.666Z","first_published":"2026-11-05T19:02:12.870Z","brands":[],"dns":"resolved","resolved":["185.178.193.239","2001:1680:101:88a::1"],"resolved_at":"2026-11-05T19:00:29Z","dns_checked_at":"2026-11-05T19:07:57.000Z","dns_since":"2026-11-05T19:07:57.000Z","findings":[{"id":"fsqpbfzysg25xbmisccp2","kind":"reported_domain","summary":"Under b67.ch, reported by PhishDestroy","first_observed":"2026-11-05T18:51:40.666Z","first_published":"2026-11-05T19:02:12.870Z","source":"phishdestroy","source_name":"PhishDestroy","under":"b67.ch","source_url":"https://phishdestroy.io/domain/b67.ch/"}],"url":"https://domainspoof.com/live?show=all&q=hays.b67.ch"},{"hostname":"hbs.nak.b67.ch","first_observed":"2026-11-05T18:51:40.666Z","first_published":"2026-11-05T19:02:12.870Z","brands":[],"dns":"resolved","resolved":["185.178.193.239","2001:1680:101:88a::1"],"resolved_at":"2026-11-05T19:00:28Z","dns_checked_at":"2026-11-05T19:07:57.000Z","dns_since":"2026-11-05T19:07:57.000Z","findings":[{"id":"fkrclctt5yfbipzoioyst","kind":"reported_domain","summary":"Under b67.ch, reported by PhishDestroy","first_observed":"2026-11-05T18:51:40.666Z","first_published":"2026-11-05T19:02:12.870Z","source":"phishdestroy","source_name":"PhishDestroy","under":"b67.ch","source_url":"https://phishdestroy.io/domain/b67.ch/"}],"url":"https://domainspoof.com/live?show=all&q=hbs.nak.b67.ch"},{"hostname":"home-faqs-io-logn-trezr.pages.dev","first_observed":"2026-11-05T18:16:28.648Z","first_published":"2026-11-05T19:02:12.870Z","brands":[],"dns":"resolved","resolved":["172.66.45.32","172.66.46.224"],"resolved_at":"2026-11-05T18:23:24Z","dns_checked_at":"2026-11-05T19:07:57.000Z","dns_since":"2026-11-05T19:07:57.000Z","findings":[{"id":"feneptimd5yx3shjtywf6","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T18:16:28.648Z","first_published":"2026-11-05T19:02:12.870Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=home-faqs-io-logn-trezr.pages.dev"},{"hostname":"hsdvxbvc.top","first_observed":"2026-11-05T18:05:57.557Z","first_published":"2026-11-05T19:02:12.870Z","brands":[],"dns":"resolved","resolved":["104.21.51.44","172.67.220.184"],"resolved_at":"2026-11-05T18:06:31Z","dns_checked_at":"2026-11-05T19:07:57.000Z","dns_since":"2026-11-05T19:07:57.000Z","findings":[{"id":"fovuim4zbmqvtrnurnakv","kind":"reported_domain","summary":"Listed by NPA 165 (information services)","first_observed":"2026-11-05T18:05:57.557Z","first_published":"2026-11-05T19:02:12.870Z","source":"npa","source_name":"NPA 165","claim":{"category":"information services"}}],"url":"https://domainspoof.com/live?show=all&q=hsdvxbvc.top"},{"hostname":"hub-torchpad.fun","first_observed":"2026-11-05T17:53:50.776Z","first_published":"2026-11-05T19:02:12.870Z","brands":[],"dns":"resolved","resolved":["104.21.29.237","172.67.149.250","2606:4700:3032::6815:1ded","2606:4700:3036::ac43:95fa"],"resolved_at":"2026-11-05T17:56:36Z","dns_checked_at":"2026-11-05T19:07:57.000Z","dns_since":"2026-11-05T19:07:57.000Z","findings":[{"id":"f5fjfueidpobgaqmqylm3","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T17:53:50.776Z","first_published":"2026-11-05T19:02:12.870Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=hub-torchpad.fun"},{"hostname":"hub-zamaeco.icu","first_observed":"2026-11-05T17:53:50.776Z","first_published":"2026-11-05T19:02:12.870Z","brands":[],"dns":"resolved","resolved":["104.21.1.151","172.67.128.13","2606:4700:3031::ac43:800d","2606:4700:3036::6815:197"],"resolved_at":"2026-11-05T17:56:36Z","dns_checked_at":"2026-11-05T19:07:57.000Z","dns_since":"2026-11-05T19:07:57.000Z","findings":[{"id":"f36ye7sfp5z2wwusrhub4","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T17:53:50.776Z","first_published":"2026-11-05T19:02:12.870Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=hub-zamaeco.icu"},{"hostname":"hukukportal.org","first_observed":"2026-11-05T18:00:49.708Z","first_published":"2026-11-05T19:02:12.870Z","brands":[],"dns":"resolved","resolved":["104.21.33.207","172.67.166.159"],"resolved_at":"2026-11-05T18:01:03Z","dns_checked_at":"2026-11-05T19:07:57.000Z","dns_since":"2026-11-05T19:07:57.000Z","findings":[{"id":"fy7mxn6alaof3lmd7miko","kind":"reported_domain","summary":"Listed by USOM","first_observed":"2026-11-05T18:00:49.708Z","first_published":"2026-11-05T19:02:12.870Z","source":"usom","source_name":"USOM"}],"url":"https://domainspoof.com/live?show=all&q=hukukportal.org"},{"hostname":"hyfokui.pro","first_observed":"2026-11-05T17:51:59.862Z","first_published":"2026-11-05T19:02:12.870Z","brands":[],"dns":"resolved","resolved":["104.21.7.15","172.67.155.95"],"resolved_at":"2026-11-05T17:52:37Z","dns_checked_at":"2026-11-05T19:07:57.000Z","dns_since":"2026-11-05T19:07:57.000Z","findings":[{"id":"fmeiqljkzmzqvvhlr3j36","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T17:51:59.862Z","first_published":"2026-11-05T19:02:12.870Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=hyfokui.pro"},{"hostname":"imberstatu.store","first_observed":"2026-11-05T18:20:10.932Z","first_published":"2026-11-05T19:02:12.870Z","brands":[],"dns":"resolved","resolved":["104.21.42.186","172.67.208.22","2606:4700:3031::ac43:d016","2606:4700:3035::6815:2aba"],"resolved_at":"2026-11-05T18:22:07Z","dns_checked_at":"2026-11-05T19:07:57.000Z","dns_since":"2026-11-05T19:07:57.000Z","findings":[{"id":"f6jmamgbn33b3hqdjlvkc","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T18:20:10.932Z","first_published":"2026-11-05T19:02:12.870Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=imberstatu.store"},{"hostname":"info.bobe.app","first_observed":"2026-11-05T18:11:07.120Z","first_published":"2026-11-05T19:02:12.870Z","brands":[],"dns":"resolved","resolved":["64.29.17.67","216.198.79.67"],"resolved_at":"2026-11-05T18:11:44Z","dns_checked_at":"2026-11-05T19:07:57.000Z","dns_since":"2026-11-05T19:07:57.000Z","findings":[{"id":"fniywfnt3ndiqmc2jxhli","kind":"reported_domain","summary":"Under bobe.app, reported by PhishDestroy","first_observed":"2026-11-05T18:11:07.120Z","first_published":"2026-11-05T19:02:12.870Z","source":"phishdestroy","source_name":"PhishDestroy","under":"bobe.app","source_url":"https://phishdestroy.io/domain/bobe.app/"}],"url":"https://domainspoof.com/live?show=all&q=info.bobe.app"},{"hostname":"investtmaster.com","first_observed":"2026-11-05T17:51:59.862Z","first_published":"2026-11-05T19:02:12.870Z","brands":[],"dns":"resolved","resolved":["104.21.52.166","172.67.201.86"],"resolved_at":"2026-11-05T17:52:38Z","dns_checked_at":"2026-11-05T19:07:57.000Z","dns_since":"2026-11-05T19:07:57.000Z","findings":[{"id":"ftbh7tuqtslfixcyqz7he","kind":"reported_domain","summary":"Listed by USOM","first_observed":"2026-11-05T17:51:59.862Z","first_published":"2026-11-05T19:02:12.870Z","source":"usom","source_name":"USOM"}],"url":"https://domainspoof.com/live?show=all&q=investtmaster.com"},{"hostname":"iosqiill24pl.eu.cc","first_observed":"2026-11-05T18:20:10.932Z","first_published":"2026-11-05T19:02:12.870Z","brands":[],"dns":"resolved","resolved":["104.21.35.246","172.67.181.192","2606:4700:3033::6815:23f6","2606:4700:3035::ac43:b5c0"],"resolved_at":"2026-11-05T18:22:07Z","dns_checked_at":"2026-11-05T19:07:57.000Z","dns_since":"2026-11-05T19:07:57.000Z","findings":[{"id":"fezj43svmk3bje5kmvzb2","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T18:20:10.932Z","first_published":"2026-11-05T19:02:12.870Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=iosqiill24pl.eu.cc"},{"hostname":"jupiter-foundatlon.pages.dev","first_observed":"2026-11-05T17:53:50.776Z","first_published":"2026-11-05T19:02:12.870Z","brands":[],"dns":"not_found","resolved":[],"resolved_at":"2026-11-05T17:56:36Z","dns_checked_at":"2026-11-06T11:27:33.000Z","findings":[{"id":"flbctpeg3fjg6gg2lcdiy","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T17:53:50.776Z","first_published":"2026-11-05T19:02:12.870Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=jupiter-foundatlon.pages.dev"},{"hostname":"jxbaichuan.com","first_observed":"2026-11-05T18:46:52.803Z","first_published":"2026-11-05T19:02:12.870Z","brands":[],"dns":"resolved","resolved":["104.21.31.30","172.67.174.231"],"resolved_at":"2026-11-05T18:55:50Z","dns_checked_at":"2026-11-05T19:07:57.000Z","dns_since":"2026-11-05T19:07:57.000Z","findings":[{"id":"f7ejq6xxlbgr2lwicmzxo","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T18:46:52.803Z","first_published":"2026-11-05T19:02:12.870Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=jxbaichuan.com"},{"hostname":"k3-capital.org","first_observed":"2026-11-05T18:16:28.648Z","first_published":"2026-11-05T19:02:12.870Z","brands":[],"dns":"resolved","resolved":["104.21.23.79","172.67.209.205"],"resolved_at":"2026-11-06T11:41:53Z","dns_checked_at":"2026-11-05T19:07:57.000Z","dns_since":"2026-11-05T19:07:57.000Z","findings":[{"id":"fdxagipbzsydvyqzg574h","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T18:16:28.648Z","first_published":"2026-11-05T19:02:12.870Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=k3-capital.org"},{"hostname":"kapitalden-pt.live","first_observed":"2026-11-05T18:51:40.666Z","first_published":"2026-11-05T19:02:12.870Z","brands":[],"dns":"resolved","resolved":["104.21.77.38","172.67.204.6"],"resolved_at":"2026-11-05T19:00:33Z","dns_checked_at":"2026-11-05T19:07:57.000Z","dns_since":"2026-11-05T19:07:57.000Z","findings":[{"id":"ftmme5wt4hpuitqezhifm","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T18:51:40.666Z","first_published":"2026-11-05T19:02:12.870Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=kapitalden-pt.live"},{"hostname":"kassegewinnburg-de.live","first_observed":"2026-11-05T17:46:36.171Z","first_published":"2026-11-05T19:02:12.870Z","brands":[],"dns":"resolved","resolved":["104.21.89.164","172.67.189.246"],"resolved_at":"2026-11-05T17:58:57Z","dns_checked_at":"2026-11-05T19:07:57.000Z","dns_since":"2026-11-05T19:07:57.000Z","findings":[{"id":"flextjdvkledi5dfck5kg","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T17:46:36.171Z","first_published":"2026-11-05T19:02:12.870Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=kassegewinnburg-de.live"},{"hostname":"kravobet.com","first_observed":"2026-11-05T18:41:34.727Z","first_published":"2026-11-05T19:02:12.870Z","brands":[],"dns":"resolved","resolved":["103.224.182.250"],"resolved_at":"2026-11-05T18:51:16Z","dns_checked_at":"2026-11-05T19:07:57.000Z","dns_since":"2026-11-05T19:07:57.000Z","findings":[{"id":"fv4pzhtxgu2em6cxsvfmh","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T18:41:34.727Z","first_published":"2026-11-05T19:02:12.870Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/kravobet.com/"}],"url":"https://domainspoof.com/live?show=all&q=kravobet.com"},{"hostname":"kurumportal.org","first_observed":"2026-11-05T18:00:49.708Z","first_published":"2026-11-05T19:02:12.870Z","brands":[],"dns":"resolved","resolved":["104.21.45.26","172.67.208.19"],"resolved_at":"2026-11-05T18:01:04Z","dns_checked_at":"2026-11-05T19:07:57.000Z","dns_since":"2026-11-05T19:07:57.000Z","findings":[{"id":"fv5hm35qbqczcbz7m7o4i","kind":"reported_domain","summary":"Listed by USOM","first_observed":"2026-11-05T18:00:49.708Z","first_published":"2026-11-05T19:02:12.870Z","source":"usom","source_name":"USOM"}],"url":"https://domainspoof.com/live?show=all&q=kurumportal.org"},{"hostname":"leagueoflegends2.ru","first_observed":"2026-11-05T17:57:37.664Z","first_published":"2026-11-05T19:02:12.870Z","brands":[{"id":"riot-games","name":"Riot Games","url":"https://domainspoof.com/brands/riot-games"}],"dns":"resolved","resolved":["95.163.244.138"],"resolved_at":"2026-11-05T19:07:57Z","dns_checked_at":"2026-11-05T19:07:57.000Z","dns_since":"2026-11-05T19:07:57.000Z","findings":[{"id":"fequqtkrvmuj6ubdo3voh","kind":"phishing_infrastructure","summary":"Resolved to 95.163.244.138, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T17:57:37.664Z","first_published":"2026-11-05T19:02:12.870Z","address":"95.163.244.138","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/riot-games"},{"hostname":"ledger-com-start-us-lpk.pages.dev","first_observed":"2026-11-05T17:57:01.210Z","first_published":"2026-11-05T19:02:12.870Z","brands":[],"dns":"resolved","resolved":["172.66.44.129","172.66.47.127"],"resolved_at":"2026-11-05T17:57:37Z","dns_checked_at":"2026-11-05T19:07:57.000Z","dns_since":"2026-11-05T19:07:57.000Z","findings":[{"id":"ftji6xst4g7djv4e5jsuo","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T17:57:01.210Z","first_published":"2026-11-05T19:02:12.870Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=ledger-com-start-us-lpk.pages.dev"},{"hostname":"ledger-live-aplications.io","first_observed":"2026-11-05T18:05:57.557Z","first_published":"2026-11-05T19:02:12.870Z","brands":[{"id":"ledger","name":"Ledger","url":"https://domainspoof.com/brands/ledger"}],"dns":"resolved","resolved":["104.21.65.248","172.67.195.208","2606:4700:3032::ac43:c3d0","2606:4700:3037::6815:41f8"],"resolved_at":"2026-11-05T18:06:33Z","dns_checked_at":"2026-11-05T19:07:57.000Z","dns_since":"2026-11-05T19:07:57.000Z","findings":[{"id":"f2pipavwkohmxsrhcmkhg","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T18:05:57.557Z","first_published":"2026-11-05T19:02:12.870Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/brands/ledger"},{"hostname":"lifelock.tech","first_observed":"2026-11-05T18:06:34.102Z","first_published":"2026-11-05T19:02:12.870Z","brands":[{"id":"norton","name":"Norton","url":"https://domainspoof.com/brands/norton"}],"dns":"resolved","resolved":["2.57.91.91"],"resolved_at":"2026-11-05T19:07:57Z","dns_checked_at":"2026-11-05T19:07:57.000Z","dns_since":"2026-11-05T19:07:57.000Z","findings":[{"id":"ffht6wrybxxisrttqvwp6","kind":"phishing_infrastructure","summary":"Resolved to 2.57.91.91, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T18:06:34.102Z","first_published":"2026-11-05T19:02:12.870Z","address":"2.57.91.91","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/norton"},{"hostname":"lighter-allocations.xyz","first_observed":"2026-11-05T18:11:07.120Z","first_published":"2026-11-05T19:02:12.870Z","brands":[],"dns":"resolved","resolved":["104.21.20.66","172.67.191.216"],"resolved_at":"2026-11-05T18:11:46Z","dns_checked_at":"2026-11-05T19:07:57.000Z","dns_since":"2026-11-05T19:07:57.000Z","findings":[{"id":"fatpmjzpwptweafnoieuk","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T18:11:07.120Z","first_published":"2026-11-05T19:02:12.870Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=lighter-allocations.xyz"},{"hostname":"linea-bridge.com","first_observed":"2026-11-05T17:51:59.862Z","first_published":"2026-11-05T19:02:12.870Z","brands":[],"dns":"resolved","resolved":["104.21.26.8","172.67.135.28"],"resolved_at":"2026-11-06T11:41:53Z","dns_checked_at":"2026-11-05T19:07:57.000Z","dns_since":"2026-11-05T19:07:57.000Z","findings":[{"id":"ftoaoxxlvvboo6wosoyeo","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T17:51:59.862Z","first_published":"2026-11-05T19:02:12.870Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=linea-bridge.com"},{"hostname":"liquidcotizadura.live","first_observed":"2026-11-05T17:46:36.171Z","first_published":"2026-11-05T19:02:12.870Z","brands":[],"dns":"resolved","resolved":["104.21.73.221","172.67.150.87"],"resolved_at":"2026-11-05T17:59:00Z","dns_checked_at":"2026-11-05T19:07:57.000Z","dns_since":"2026-11-05T19:07:57.000Z","findings":[{"id":"foumxsjlxxfnwfffzqxz2","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T17:46:36.171Z","first_published":"2026-11-05T19:02:12.870Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=liquidcotizadura.live"},{"hostname":"lista-dao.net","first_observed":"2026-11-05T18:05:57.557Z","first_published":"2026-11-05T19:02:12.870Z","brands":[],"dns":"resolved","resolved":["104.21.42.106","172.67.161.62"],"resolved_at":"2026-11-06T11:41:53Z","dns_checked_at":"2026-11-05T19:07:57.000Z","dns_since":"2026-11-05T19:07:57.000Z","findings":[{"id":"fgzwtukcnbjb7c4n4k25g","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T18:05:57.557Z","first_published":"2026-11-05T19:02:12.870Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=lista-dao.net"},{"hostname":"liverfring.store","first_observed":"2026-11-05T18:20:10.932Z","first_published":"2026-11-05T19:02:12.870Z","brands":[],"dns":"resolved","resolved":["104.21.70.204","172.67.139.73","2606:4700:3036::6815:46cc","2606:4700:3037::ac43:8b49"],"resolved_at":"2026-11-05T18:22:07Z","dns_checked_at":"2026-11-05T19:07:57.000Z","dns_since":"2026-11-05T19:07:57.000Z","findings":[{"id":"facug5r7tevf2kwvpaum2","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T18:20:10.932Z","first_published":"2026-11-05T19:02:12.870Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=liverfring.store"},{"hostname":"livraison-chronopost.kl.com.ua","first_observed":"2026-11-05T18:23:33.899Z","first_published":"2026-11-05T19:02:12.870Z","brands":[{"id":"chronopost","name":"Chronopost","url":"https://domainspoof.com/brands/chronopost"}],"dns":"resolved","resolved":["5.79.66.145"],"resolved_at":"2026-11-05T19:07:57Z","dns_checked_at":"2026-11-05T19:07:57.000Z","dns_since":"2026-11-05T19:07:57.000Z","findings":[{"id":"fqx3dzp2t7j4jt3zyut5u","kind":"phishing_infrastructure","summary":"Resolved to 5.79.66.145, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T18:23:33.899Z","first_published":"2026-11-05T19:02:12.870Z","address":"5.79.66.145","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/chronopost"},{"hostname":"lkdfjbvnyt927.cn","first_observed":"2026-11-05T18:41:34.727Z","first_published":"2026-11-05T19:02:12.870Z","brands":[],"dns":"resolved","resolved":["104.21.57.92","172.67.190.14"],"resolved_at":"2026-11-05T18:51:18Z","dns_checked_at":"2026-11-05T19:07:57.000Z","dns_since":"2026-11-05T19:07:57.000Z","findings":[{"id":"ft2afdsd7kutgynhmg2g7","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T18:41:34.727Z","first_published":"2026-11-05T19:02:12.870Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/lkdfjbvnyt927.cn/"}],"url":"https://domainspoof.com/live?show=all&q=lkdfjbvnyt927.cn"},{"hostname":"login-teams.live","first_observed":"2026-11-05T18:51:40.666Z","first_published":"2026-11-05T19:02:12.870Z","brands":[],"dns":"resolved","resolved":["2.26.72.181"],"resolved_at":"2026-11-05T19:00:35Z","dns_checked_at":"2026-11-05T19:07:57.000Z","dns_since":"2026-11-05T19:07:57.000Z","findings":[{"id":"fgrgclz244z5qdpju2vox","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T18:51:40.666Z","first_published":"2026-11-05T19:02:12.870Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=login-teams.live"},{"hostname":"logn-e-trezr.pages.dev","first_observed":"2026-11-05T18:16:28.648Z","first_published":"2026-11-05T19:02:12.870Z","brands":[],"dns":"resolved","resolved":["172.66.45.35","172.66.46.221"],"resolved_at":"2026-11-05T18:23:34Z","dns_checked_at":"2026-11-05T19:07:57.000Z","dns_since":"2026-11-05T19:07:57.000Z","findings":[{"id":"fu5kcb35lblrkjg7tstmr","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T18:16:28.648Z","first_published":"2026-11-05T19:02:12.870Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=logn-e-trezr.pages.dev"},{"hostname":"logn-n-ledgr.pages.dev","first_observed":"2026-11-05T17:57:01.210Z","first_published":"2026-11-05T19:02:12.870Z","brands":[],"dns":"resolved","resolved":["172.66.44.133","172.66.47.123"],"resolved_at":"2026-11-05T17:57:37Z","dns_checked_at":"2026-11-05T19:07:57.000Z","dns_since":"2026-11-05T19:07:57.000Z","findings":[{"id":"fstynutlqkw4qx4vadeph","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T17:57:01.210Z","first_published":"2026-11-05T19:02:12.870Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=logn-n-ledgr.pages.dev"},{"hostname":"loxavariumkapiloq-nl.live","first_observed":"2026-11-05T18:21:18.053Z","first_published":"2026-11-05T19:02:12.870Z","brands":[],"dns":"resolved","resolved":["104.21.73.222","172.67.167.89"],"resolved_at":"2026-11-05T18:21:49Z","dns_checked_at":"2026-11-05T19:07:57.000Z","dns_since":"2026-11-05T19:07:57.000Z","findings":[{"id":"fda4qlpwizlnjz4oddm6q","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T18:21:18.053Z","first_published":"2026-11-05T19:02:12.870Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=loxavariumkapiloq-nl.live"},{"hostname":"lpitee.bar","first_observed":"2026-11-05T18:11:07.120Z","first_published":"2026-11-05T19:02:12.870Z","brands":[],"dns":"resolved","resolved":["13.248.213.45","76.223.67.189"],"resolved_at":"2026-11-05T18:11:46Z","dns_checked_at":"2026-11-05T19:07:57.000Z","dns_since":"2026-11-05T19:07:57.000Z","findings":[{"id":"fgzw2edmm2r5u4vjvfzlb","kind":"reported_domain","summary":"Listed by NPA 165 (e-commerce)","first_observed":"2026-11-05T18:11:07.120Z","first_published":"2026-11-05T19:02:12.870Z","source":"npa","source_name":"NPA 165","claim":{"category":"e-commerce"}}],"url":"https://domainspoof.com/live?show=all&q=lpitee.bar"},{"hostname":"lumiarbitrow-fr.live","first_observed":"2026-11-05T18:11:07.120Z","first_published":"2026-11-05T19:02:12.870Z","brands":[],"dns":"resolved","resolved":["104.21.59.170","172.67.181.92"],"resolved_at":"2026-11-05T18:11:46Z","dns_checked_at":"2026-11-05T19:07:57.000Z","dns_since":"2026-11-05T19:07:57.000Z","findings":[{"id":"f5pynpitqn5itljkapvrs","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T18:11:07.120Z","first_published":"2026-11-05T19:02:12.870Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=lumiarbitrow-fr.live"},{"hostname":"m2bmjk.qpon","first_observed":"2026-11-05T18:20:10.932Z","first_published":"2026-11-05T19:02:12.870Z","brands":[],"dns":"resolved","resolved":["104.21.12.38","172.67.193.165","2606:4700:3031::6815:c26","2606:4700:3032::ac43:c1a5"],"resolved_at":"2026-11-05T18:22:07Z","dns_checked_at":"2026-11-05T19:07:57.000Z","dns_since":"2026-11-05T19:07:57.000Z","findings":[{"id":"fxfssqfx3fvzhyunfb3ks","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T18:20:10.932Z","first_published":"2026-11-05T19:02:12.870Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=m2bmjk.qpon"},{"hostname":"mail.coinxes.io","first_observed":"2026-11-05T18:16:28.648Z","first_published":"2026-11-05T19:02:12.870Z","brands":[],"dns":"resolved","resolved":["91.84.111.201"],"resolved_at":"2026-11-05T18:23:34Z","dns_checked_at":"2026-11-05T19:07:57.000Z","dns_since":"2026-11-05T19:07:57.000Z","findings":[{"id":"f4ttqzg2s5j6kwrliefhs","kind":"reported_domain","summary":"Under coinxes.io, reported by PhishDestroy","first_observed":"2026-11-05T18:16:28.648Z","first_published":"2026-11-05T19:02:12.870Z","source":"phishdestroy","source_name":"PhishDestroy","under":"coinxes.io","source_url":"https://phishdestroy.io/domain/coinxes.io/"}],"url":"https://domainspoof.com/live?show=all&q=mail.coinxes.io"},{"hostname":"mail.revbit.net","first_observed":"2026-11-05T18:16:28.648Z","first_published":"2026-11-05T19:02:12.870Z","brands":[],"dns":"resolved","resolved":["62.84.102.240"],"resolved_at":"2026-11-05T18:23:34Z","dns_checked_at":"2026-11-05T19:07:57.000Z","dns_since":"2026-11-05T19:07:57.000Z","findings":[{"id":"f7qfs5c4orwj3c7jxpbl4","kind":"reported_domain","summary":"Under revbit.net, reported by PhishDestroy","first_observed":"2026-11-05T18:16:28.648Z","first_published":"2026-11-05T19:02:12.870Z","source":"phishdestroy","source_name":"PhishDestroy","under":"revbit.net","source_url":"https://phishdestroy.io/domain/revbit.net/"}],"url":"https://domainspoof.com/live?show=all&q=mail.revbit.net"},{"hostname":"mail.scoaladejoaca.ro","first_observed":"2026-11-05T18:41:34.727Z","first_published":"2026-11-05T19:02:12.870Z","brands":[],"dns":"resolved","resolved":["188.34.142.87"],"resolved_at":"2026-11-05T18:51:20Z","dns_checked_at":"2026-11-05T19:07:57.000Z","dns_since":"2026-11-05T19:07:57.000Z","findings":[{"id":"fad2yxnb47xqjclnji76n","kind":"reported_domain","summary":"Under scoaladejoaca.ro, reported by PhishDestroy","first_observed":"2026-11-05T18:41:34.727Z","first_published":"2026-11-05T19:02:12.870Z","source":"phishdestroy","source_name":"PhishDestroy","under":"scoaladejoaca.ro","source_url":"https://phishdestroy.io/domain/scoaladejoaca.ro/"}],"url":"https://domainspoof.com/live?show=all&q=mail.scoaladejoaca.ro"},{"hostname":"mail.swapgate.io","first_observed":"2026-11-05T18:16:28.648Z","first_published":"2026-11-05T19:02:12.870Z","brands":[],"dns":"resolved","resolved":["77.246.101.36"],"resolved_at":"2026-11-05T18:23:34Z","dns_checked_at":"2026-11-05T19:07:57.000Z","dns_since":"2026-11-05T19:07:57.000Z","findings":[{"id":"fid5rbuiabaalwyq4akml","kind":"reported_domain","summary":"Under swapgate.io, reported by PhishDestroy","first_observed":"2026-11-05T18:16:28.648Z","first_published":"2026-11-05T19:02:12.870Z","source":"phishdestroy","source_name":"PhishDestroy","under":"swapgate.io","source_url":"https://phishdestroy.io/domain/swapgate.io/"}],"url":"https://domainspoof.com/live?show=all&q=mail.swapgate.io"},{"hostname":"mail.vapedragonsquad.co.za","first_observed":"2026-11-05T17:57:01.210Z","first_published":"2026-11-05T19:02:12.870Z","brands":[],"dns":"resolved","resolved":["41.72.149.125"],"resolved_at":"2026-11-05T17:57:37Z","dns_checked_at":"2026-11-05T19:07:57.000Z","dns_since":"2026-11-05T19:07:57.000Z","findings":[{"id":"fyg56dad2ksggzn3tn3gz","kind":"reported_domain","summary":"Under vapedragonsquad.co.za, listed by CERT Polska","first_observed":"2026-11-05T17:57:01.210Z","first_published":"2026-11-05T19:02:12.870Z","source":"cert_polska","source_name":"CERT Polska","under":"vapedragonsquad.co.za"}],"url":"https://domainspoof.com/live?show=all&q=mail.vapedragonsquad.co.za"},{"hostname":"mail.zoomcommercesupport.com","first_observed":"2026-11-05T18:11:07.120Z","first_published":"2026-11-05T19:02:12.870Z","brands":[],"dns":"resolved","resolved":["192.185.52.133"],"resolved_at":"2026-11-05T18:11:46Z","dns_checked_at":"2026-11-05T19:07:57.000Z","dns_since":"2026-11-05T19:07:57.000Z","findings":[{"id":"f22qrv5rojeweo66wkkq3","kind":"reported_domain","summary":"Under zoomcommercesupport.com, listed by MetaMask","first_observed":"2026-11-05T18:11:07.120Z","first_published":"2026-11-05T19:02:12.870Z","source":"metamask","source_name":"MetaMask","under":"zoomcommercesupport.com"}],"url":"https://domainspoof.com/live?show=all&q=mail.zoomcommercesupport.com"},{"hostname":"mainnet-starknet.com","first_observed":"2026-11-05T17:57:01.210Z","first_published":"2026-11-05T19:02:12.870Z","brands":[{"id":"starknet","name":"Starknet","url":"https://domainspoof.com/brands/starknet"}],"dns":"resolved","resolved":["104.21.84.101","172.67.191.14","2606:4700:3033::6815:5465","2606:4700:3037::ac43:bf0e"],"resolved_at":"2026-11-05T17:57:37Z","dns_checked_at":"2026-11-05T19:07:57.000Z","dns_since":"2026-11-05T19:07:57.000Z","findings":[{"id":"fth7qokrrsjlavvzjy656","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T17:57:01.210Z","first_published":"2026-11-05T19:02:12.870Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/brands/starknet"},{"hostname":"marginrivou-nl.live","first_observed":"2026-11-05T18:51:40.666Z","first_published":"2026-11-05T19:02:12.870Z","brands":[],"dns":"resolved","resolved":["104.21.95.83","172.67.143.215"],"resolved_at":"2026-11-05T19:00:35Z","dns_checked_at":"2026-11-05T19:07:57.000Z","dns_since":"2026-11-05T19:07:57.000Z","findings":[{"id":"f4iyahwgkcaygn6iqyb4q","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T18:51:40.666Z","first_published":"2026-11-05T19:02:12.870Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=marginrivou-nl.live"},{"hostname":"marketpl.shop","first_observed":"2026-11-05T18:21:18.053Z","first_published":"2026-11-05T19:02:12.870Z","brands":[],"dns":"no_address","resolved":[],"resolved_at":"2026-11-05T18:21:49Z","dns_checked_at":"2026-11-06T11:27:33.000Z","findings":[{"id":"fb7umgvmatae6hwmkp7yi","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T18:21:18.053Z","first_published":"2026-11-05T19:02:12.870Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=marketpl.shop"},{"hostname":"memeze.lol","first_observed":"2026-11-05T18:36:46.331Z","first_published":"2026-11-05T19:02:12.870Z","brands":[],"dns":"resolved","resolved":["104.21.27.162","172.67.143.63"],"resolved_at":"2026-11-05T18:43:59Z","dns_checked_at":"2026-11-05T19:07:57.000Z","dns_since":"2026-11-05T19:07:57.000Z","findings":[{"id":"fb7penekowlf5ufe4nbdt","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T18:36:46.331Z","first_published":"2026-11-05T19:02:12.870Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/memeze.lol/"}],"url":"https://domainspoof.com/live?show=all&q=memeze.lol"},{"hostname":"met-treasury.pages.dev","first_observed":"2026-11-05T17:53:50.776Z","first_published":"2026-11-05T19:02:12.870Z","brands":[],"dns":"not_found","resolved":[],"resolved_at":"2026-11-05T17:56:36Z","dns_checked_at":"2026-11-06T11:27:33.000Z","findings":[{"id":"fov24wve42rxktprhik2z","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T17:53:50.776Z","first_published":"2026-11-05T19:02:12.870Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=met-treasury.pages.dev"},{"hostname":"microsofls.com","first_observed":"2026-11-05T17:57:01.210Z","first_published":"2026-11-05T19:02:12.870Z","brands":[],"dns":"resolved","resolved":["64.95.12.148"],"resolved_at":"2026-11-05T17:57:37Z","dns_checked_at":"2026-11-05T19:07:57.000Z","dns_since":"2026-11-05T19:07:57.000Z","findings":[{"id":"fpdotmjxwnttpzqlf4lpm","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T17:57:01.210Z","first_published":"2026-11-05T19:02:12.870Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=microsofls.com"},{"hostname":"migros.b67.ch","first_observed":"2026-11-05T18:51:40.666Z","first_published":"2026-11-05T19:02:12.870Z","brands":[],"dns":"resolved","resolved":["185.178.193.239","2001:1680:101:88a::1"],"resolved_at":"2026-11-05T19:00:35Z","dns_checked_at":"2026-11-05T19:07:57.000Z","dns_since":"2026-11-05T19:07:57.000Z","findings":[{"id":"fry4lq5vtcfjb4cxs4juw","kind":"reported_domain","summary":"Under b67.ch, reported by PhishDestroy","first_observed":"2026-11-05T18:51:40.666Z","first_published":"2026-11-05T19:02:12.870Z","source":"phishdestroy","source_name":"PhishDestroy","under":"b67.ch","source_url":"https://phishdestroy.io/domain/b67.ch/"}],"url":"https://domainspoof.com/live?show=all&q=migros.b67.ch"},{"hostname":"minecraft-gx.online","first_observed":"2026-11-05T17:54:35.527Z","first_published":"2026-11-05T19:02:12.870Z","brands":[{"id":"minecraft","name":"Minecraft","url":"https://domainspoof.com/brands/minecraft"}],"dns":"resolved","resolved":["95.163.244.138"],"resolved_at":"2026-11-05T19:07:57Z","dns_checked_at":"2026-11-05T19:07:57.000Z","dns_since":"2026-11-05T19:07:57.000Z","findings":[{"id":"f4ls7anp27wvd4qwy42ab","kind":"phishing_infrastructure","summary":"Resolved to 95.163.244.138, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T17:54:35.527Z","first_published":"2026-11-05T19:02:12.870Z","address":"95.163.244.138","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/minecraft"},{"hostname":"mirzozhonov-buyandsell.com","first_observed":"2026-11-05T17:57:01.210Z","first_published":"2026-11-05T19:02:12.870Z","brands":[],"dns":"resolved","resolved":["104.21.62.184","172.67.138.37"],"resolved_at":"2026-11-05T17:57:37Z","dns_checked_at":"2026-11-05T19:07:57.000Z","dns_since":"2026-11-05T19:07:57.000Z","findings":[{"id":"fpbmf7g5pab2o3nomojcp","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T17:57:01.210Z","first_published":"2026-11-05T19:02:12.870Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/mirzozhonov-buyandsell.com/"}],"url":"https://domainspoof.com/live?show=all&q=mirzozhonov-buyandsell.com"},{"hostname":"moglichegewinne-de.live","first_observed":"2026-11-05T18:51:40.666Z","first_published":"2026-11-05T19:02:12.870Z","brands":[],"dns":"resolved","resolved":["104.21.20.98","172.67.192.15"],"resolved_at":"2026-11-05T19:00:35Z","dns_checked_at":"2026-11-05T19:07:57.000Z","dns_since":"2026-11-05T19:07:57.000Z","findings":[{"id":"ffodxjgpcwigr7j5daytw","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T18:51:40.666Z","first_published":"2026-11-05T19:02:12.870Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=moglichegewinne-de.live"},{"hostname":"morooms.com","first_observed":"2026-11-05T18:05:57.557Z","first_published":"2026-11-05T19:02:12.870Z","brands":[],"dns":"resolved","resolved":["27.254.86.122"],"resolved_at":"2026-11-05T18:06:35Z","dns_checked_at":"2026-11-05T19:07:57.000Z","dns_since":"2026-11-05T19:07:57.000Z","findings":[{"id":"fwqmcshwrfk64shrvvugr","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T18:05:57.557Z","first_published":"2026-11-05T19:02:12.870Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/morooms.com/"}],"url":"https://domainspoof.com/live?show=all&q=morooms.com"},{"hostname":"ms-core.xyz","first_observed":"2026-11-05T17:46:36.171Z","first_published":"2026-11-05T19:02:12.870Z","brands":[],"dns":"resolved","resolved":["104.21.50.232","172.67.213.102"],"resolved_at":"2026-11-05T17:59:03Z","dns_checked_at":"2026-11-05T19:07:57.000Z","dns_since":"2026-11-05T19:07:57.000Z","findings":[{"id":"fau3fx6uffhrtowye4tbv","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T17:46:36.171Z","first_published":"2026-11-05T19:02:12.870Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=ms-core.xyz"},{"hostname":"mullerpay.com.ng","first_observed":"2026-11-05T17:46:36.171Z","first_published":"2026-11-05T19:02:12.870Z","brands":[],"dns":"resolved","resolved":["45.13.226.9"],"resolved_at":"2026-11-05T17:59:03Z","dns_checked_at":"2026-11-05T19:07:57.000Z","dns_since":"2026-11-05T19:07:57.000Z","findings":[{"id":"fwps74qhv57prcditt3g6","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T17:46:36.171Z","first_published":"2026-11-05T19:02:12.870Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/mullerpay.com.ng/"}],"url":"https://domainspoof.com/live?show=all&q=mullerpay.com.ng"},{"hostname":"myluprixapp-gpt.org","first_observed":"2026-11-05T17:51:59.862Z","first_published":"2026-11-05T19:02:12.870Z","brands":[],"dns":"resolved","resolved":["104.21.11.202","172.67.192.156"],"resolved_at":"2026-11-05T17:52:38Z","dns_checked_at":"2026-11-05T19:07:57.000Z","dns_since":"2026-11-05T19:07:57.000Z","findings":[{"id":"fijkzihrezoxiwkqtjjt4","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T17:51:59.862Z","first_published":"2026-11-05T19:02:12.870Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=myluprixapp-gpt.org"},{"hostname":"mzeldravoq-nl.live","first_observed":"2026-11-05T18:51:40.666Z","first_published":"2026-11-05T19:02:12.870Z","brands":[],"dns":"resolved","resolved":["104.21.42.82","172.67.203.98"],"resolved_at":"2026-11-05T19:00:36Z","dns_checked_at":"2026-11-05T19:07:57.000Z","dns_since":"2026-11-05T19:07:57.000Z","findings":[{"id":"f42yllaw5kiqtu6zsrx5y","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T18:51:40.666Z","first_published":"2026-11-05T19:02:12.870Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=mzeldravoq-nl.live"},{"hostname":"nagios.glek-panel.com","first_observed":"2026-11-05T18:26:07.076Z","first_published":"2026-11-05T19:02:12.870Z","brands":[],"dns":"resolved","resolved":["185.178.208.163"],"resolved_at":"2026-11-05T18:26:36Z","dns_checked_at":"2026-11-05T19:07:57.000Z","dns_since":"2026-11-05T19:07:57.000Z","findings":[{"id":"fu6rb2mrzwu263q2w7nws","kind":"reported_domain","summary":"Under glek-panel.com, reported by PhishDestroy","first_observed":"2026-11-05T18:26:07.076Z","first_published":"2026-11-05T19:02:12.870Z","source":"phishdestroy","source_name":"PhishDestroy","under":"glek-panel.com","source_url":"https://phishdestroy.io/domain/glek-panel.com/"}],"url":"https://domainspoof.com/live?show=all&q=nagios.glek-panel.com"},{"hostname":"nazvelgorn-de.live","first_observed":"2026-11-05T18:11:07.120Z","first_published":"2026-11-05T19:02:12.870Z","brands":[],"dns":"resolved","resolved":["104.21.12.203","172.67.153.64"],"resolved_at":"2026-11-05T18:11:47Z","dns_checked_at":"2026-11-05T19:07:57.000Z","dns_since":"2026-11-05T19:07:57.000Z","findings":[{"id":"f26q4blzujiajhyrgcbcr","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T18:11:07.120Z","first_published":"2026-11-05T19:02:12.870Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=nazvelgorn-de.live"},{"hostname":"nazvelgorn-el.live","first_observed":"2026-11-05T18:36:46.331Z","first_published":"2026-11-05T19:02:12.870Z","brands":[],"dns":"resolved","resolved":["104.21.84.172","172.67.195.110"],"resolved_at":"2026-11-05T18:43:59Z","dns_checked_at":"2026-11-05T19:07:57.000Z","dns_since":"2026-11-05T19:07:57.000Z","findings":[{"id":"fikglwo4vg3yfaksq2xlr","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T18:36:46.331Z","first_published":"2026-11-05T19:02:12.870Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=nazvelgorn-el.live"},{"hostname":"nazvelqorn-ro.live","first_observed":"2026-11-05T17:51:59.862Z","first_published":"2026-11-05T19:02:12.870Z","brands":[],"dns":"resolved","resolved":["104.21.46.194","172.67.141.147"],"resolved_at":"2026-11-05T17:52:38Z","dns_checked_at":"2026-11-05T19:07:57.000Z","dns_since":"2026-11-05T19:07:57.000Z","findings":[{"id":"f25vukyvkebyy5qgcqjxp","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T17:51:59.862Z","first_published":"2026-11-05T19:02:12.870Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=nazvelqorn-ro.live"},{"hostname":"neopixellightsaber.co","first_observed":"2026-11-05T18:16:28.648Z","first_published":"2026-11-05T19:02:12.870Z","brands":[],"dns":"resolved","resolved":["194.238.30.141"],"resolved_at":"2026-11-05T18:23:36Z","dns_checked_at":"2026-11-05T19:07:57.000Z","dns_since":"2026-11-05T19:07:57.000Z","findings":[{"id":"fgxx64o3chjihwomedbu4","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T18:16:28.648Z","first_published":"2026-11-05T19:02:12.870Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/neopixellightsaber.co/"}],"url":"https://domainspoof.com/live?show=all&q=neopixellightsaber.co"},{"hostname":"news-xaman.app","first_observed":"2026-11-05T17:53:50.776Z","first_published":"2026-11-05T19:02:12.870Z","brands":[{"id":"xaman","name":"Xaman","url":"https://domainspoof.com/brands/xaman"}],"dns":"resolved","resolved":["104.21.38.95","172.67.221.125","2606:4700:3030::6815:265f","2606:4700:3036::ac43:dd7d"],"resolved_at":"2026-11-05T17:56:36Z","dns_checked_at":"2026-11-05T19:07:57.000Z","dns_since":"2026-11-05T19:07:57.000Z","findings":[{"id":"fyqvyawdhjnvbzvlu74vp","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T17:53:50.776Z","first_published":"2026-11-05T19:02:12.870Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/brands/xaman"},{"hostname":"newsy0-id61.cfd","first_observed":"2026-11-05T18:20:10.932Z","first_published":"2026-11-05T19:02:12.870Z","brands":[],"dns":"no_address","resolved":[],"resolved_at":"2026-11-05T18:22:07Z","dns_checked_at":"2026-11-06T11:27:33.000Z","findings":[{"id":"f45kp2utry2l2uvyotvja","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T18:20:10.932Z","first_published":"2026-11-05T19:02:12.870Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=newsy0-id61.cfd"},{"hostname":"nexus-mutual.org","first_observed":"2026-11-05T18:31:55.333Z","first_published":"2026-11-05T19:02:12.870Z","brands":[],"dns":"resolved","resolved":["104.21.35.91","172.67.216.109"],"resolved_at":"2026-11-06T11:41:53Z","dns_checked_at":"2026-11-05T19:07:57.000Z","dns_since":"2026-11-05T19:07:57.000Z","findings":[{"id":"fjxn47rjd4nwcuhhwulmc","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T18:31:55.333Z","first_published":"2026-11-05T19:02:12.870Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=nexus-mutual.org"},{"hostname":"nillion-eligibility.xyz","first_observed":"2026-11-05T17:57:01.210Z","first_published":"2026-11-05T19:02:12.870Z","brands":[],"dns":"resolved","resolved":["104.21.35.138","172.67.175.93"],"resolved_at":"2026-11-05T17:57:37Z","dns_checked_at":"2026-11-05T19:07:57.000Z","dns_since":"2026-11-05T19:07:57.000Z","findings":[{"id":"fimlkyer74mga7q5i3ex2","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T17:57:01.210Z","first_published":"2026-11-05T19:02:12.870Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=nillion-eligibility.xyz"},{"hostname":"norvenvault-sk.live","first_observed":"2026-11-05T17:51:59.862Z","first_published":"2026-11-05T19:02:12.870Z","brands":[],"dns":"resolved","resolved":["104.21.10.15","172.67.131.58"],"resolved_at":"2026-11-05T17:52:38Z","dns_checked_at":"2026-11-05T19:07:57.000Z","dns_since":"2026-11-05T19:07:57.000Z","findings":[{"id":"fklwyw53mnobcqoaekxa5","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T17:51:59.862Z","first_published":"2026-11-05T19:02:12.870Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=norvenvault-sk.live"},{"hostname":"novaupulse.info","first_observed":"2026-11-05T18:51:40.666Z","first_published":"2026-11-05T19:02:12.870Z","brands":[],"dns":"resolved","resolved":["104.21.75.252","172.67.184.141"],"resolved_at":"2026-11-05T19:00:37Z","dns_checked_at":"2026-11-05T19:07:57.000Z","dns_since":"2026-11-05T19:07:57.000Z","findings":[{"id":"fpjjerp3rsrpvklmvkvmy","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T18:51:40.666Z","first_published":"2026-11-05T19:02:12.870Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=novaupulse.info"},{"hostname":"octaipro4.com","first_observed":"2026-11-05T18:16:28.648Z","first_published":"2026-11-05T19:02:12.870Z","brands":[],"dns":"resolved","resolved":["104.21.8.180","172.67.157.162"],"resolved_at":"2026-11-05T18:23:37Z","dns_checked_at":"2026-11-05T19:07:57.000Z","dns_since":"2026-11-05T19:07:57.000Z","findings":[{"id":"fzdsiaddgsdnqtm6sl7hy","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T18:16:28.648Z","first_published":"2026-11-05T19:02:12.870Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=octaipro4.com"},{"hostname":"octra.org","first_observed":"2026-11-05T18:16:28.648Z","first_published":"2026-11-05T19:02:12.870Z","brands":[],"dns":"resolved","resolved":["104.26.14.236","104.26.15.236","172.67.73.170"],"resolved_at":"2026-11-05T18:23:37Z","dns_checked_at":"2026-11-05T19:07:57.000Z","dns_since":"2026-11-05T19:07:57.000Z","findings":[{"id":"flz4dakrhxw4ouid2kwv2","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T18:16:28.648Z","first_published":"2026-11-05T19:02:12.870Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/octra.org/"}],"url":"https://domainspoof.com/live?show=all&q=octra.org"},{"hostname":"ofert798203.sbs","first_observed":"2026-11-05T18:20:10.932Z","first_published":"2026-11-05T19:02:12.870Z","brands":[],"dns":"resolved","resolved":["104.21.30.21","172.67.150.104","2606:4700:3030::6815:1e15","2606:4700:3033::ac43:9668"],"resolved_at":"2026-11-05T18:22:07Z","dns_checked_at":"2026-11-05T19:07:57.000Z","dns_since":"2026-11-05T19:07:57.000Z","findings":[{"id":"fkurfz2vepne62k4hlr3w","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T18:20:10.932Z","first_published":"2026-11-05T19:02:12.870Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=ofert798203.sbs"},{"hostname":"oferta-7421135.cfd","first_observed":"2026-11-05T18:20:10.932Z","first_published":"2026-11-05T19:02:12.870Z","brands":[],"dns":"resolved","resolved":["104.21.76.192","172.67.199.116","2606:4700:3033::6815:4cc0","2606:4700:3036::ac43:c774"],"resolved_at":"2026-11-05T18:22:07Z","dns_checked_at":"2026-11-05T19:07:57.000Z","dns_since":"2026-11-05T19:07:57.000Z","findings":[{"id":"fm5lvjiphlwjihyw37p7u","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T18:20:10.932Z","first_published":"2026-11-05T19:02:12.870Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=oferta-7421135.cfd"},{"hostname":"openivailll.com","first_observed":"2026-11-05T17:51:59.862Z","first_published":"2026-11-05T19:02:12.870Z","brands":[],"dns":"resolved","resolved":["162.4.84.247"],"resolved_at":"2026-11-05T17:52:38Z","dns_checked_at":"2026-11-05T19:07:57.000Z","dns_since":"2026-11-05T19:07:57.000Z","findings":[{"id":"fstll3c4lauizgpdypaiq","kind":"reported_domain","summary":"Listed by NPA 165 (finance and insurance)","first_observed":"2026-11-05T17:51:59.862Z","first_published":"2026-11-05T19:02:12.870Z","source":"npa","source_name":"NPA 165","claim":{"category":"finance and insurance"}}],"url":"https://domainspoof.com/live?show=all&q=openivailll.com"},{"hostname":"orcamento.androidloading.com","first_observed":"2026-11-05T18:26:07.076Z","first_published":"2026-11-05T19:02:12.870Z","brands":[],"dns":"resolved","resolved":["185.178.208.191"],"resolved_at":"2026-11-05T18:26:37Z","dns_checked_at":"2026-11-05T19:07:57.000Z","dns_since":"2026-11-05T19:07:57.000Z","findings":[{"id":"faxmtfzwmyskt6dqn2yna","kind":"reported_domain","summary":"Under androidloading.com, reported by PhishDestroy","first_observed":"2026-11-05T18:26:07.076Z","first_published":"2026-11-05T19:02:12.870Z","source":"phishdestroy","source_name":"PhishDestroy","under":"androidloading.com","source_url":"https://phishdestroy.io/domain/androidloading.com/"}],"url":"https://domainspoof.com/live?show=all&q=orcamento.androidloading.com"},{"hostname":"orcamento.crypto-polis.org","first_observed":"2026-11-05T17:51:59.862Z","first_published":"2026-11-05T19:02:12.870Z","brands":[],"dns":"resolved","resolved":["185.178.208.132","185.178.208.182"],"resolved_at":"2026-11-05T17:52:38Z","dns_checked_at":"2026-11-05T19:07:57.000Z","dns_since":"2026-11-05T19:07:57.000Z","findings":[{"id":"flu5axche4vllzskenwxu","kind":"reported_domain","summary":"Under crypto-polis.org, reported by PhishDestroy","first_observed":"2026-11-05T17:51:59.862Z","first_published":"2026-11-05T19:02:12.870Z","source":"phishdestroy","source_name":"PhishDestroy","under":"crypto-polis.org","source_url":"https://phishdestroy.io/domain/crypto-polis.org/"}],"url":"https://domainspoof.com/live?show=all&q=orcamento.crypto-polis.org"},{"hostname":"orcamento.tor.taxi","first_observed":"2026-11-05T17:46:36.171Z","first_published":"2026-11-05T19:02:12.870Z","brands":[],"dns":"resolved","resolved":["185.129.100.227"],"resolved_at":"2026-11-05T17:59:04Z","dns_checked_at":"2026-11-05T19:07:57.000Z","dns_since":"2026-11-05T19:07:57.000Z","findings":[{"id":"fxpst5jn45ziqphfw7wmh","kind":"reported_domain","summary":"Under tor.taxi, reported by PhishDestroy","first_observed":"2026-11-05T17:46:36.171Z","first_published":"2026-11-05T19:02:12.870Z","source":"phishdestroy","source_name":"PhishDestroy","under":"tor.taxi","source_url":"https://phishdestroy.io/domain/tor.taxi/"}],"url":"https://domainspoof.com/live?show=all&q=orcamento.tor.taxi"},{"hostname":"order-checkout.com","first_observed":"2026-11-05T18:41:34.727Z","first_published":"2026-11-05T19:02:12.870Z","brands":[],"dns":"resolved","resolved":["104.21.88.133","172.67.180.18"],"resolved_at":"2026-11-05T18:51:25Z","dns_checked_at":"2026-11-05T19:07:57.000Z","dns_since":"2026-11-05T19:07:57.000Z","findings":[{"id":"f7f5a5dstlhfchn2kszaa","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T18:41:34.727Z","first_published":"2026-11-05T19:02:12.870Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=order-checkout.com"},{"hostname":"ore-distribution.com","first_observed":"2026-11-05T17:53:50.776Z","first_published":"2026-11-05T19:02:12.870Z","brands":[],"dns":"no_address","resolved":[],"resolved_at":"2026-11-05T17:56:36Z","dns_checked_at":"2026-11-06T11:27:33.000Z","findings":[{"id":"f5veemyoo7uhcdzl2w4xu","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T17:53:50.776Z","first_published":"2026-11-05T19:02:12.870Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=ore-distribution.com"},{"hostname":"overffolli.store","first_observed":"2026-11-05T18:00:49.708Z","first_published":"2026-11-05T19:02:12.870Z","brands":[],"dns":"resolved","resolved":["104.21.29.130","172.67.149.6"],"resolved_at":"2026-11-05T18:01:04Z","dns_checked_at":"2026-11-05T19:07:57.000Z","dns_since":"2026-11-05T19:07:57.000Z","findings":[{"id":"f2gx457xlr52yx5dlpdal","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T18:00:49.708Z","first_published":"2026-11-05T19:02:12.870Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=overffolli.store"},{"hostname":"overupuckn.store","first_observed":"2026-11-05T18:20:10.932Z","first_published":"2026-11-05T19:02:12.870Z","brands":[],"dns":"resolved","resolved":["104.21.90.145","172.67.157.194","2606:4700:3036::6815:5a91","2606:4700:3036::ac43:9dc2"],"resolved_at":"2026-11-05T18:22:07Z","dns_checked_at":"2026-11-05T19:07:57.000Z","dns_since":"2026-11-05T19:07:57.000Z","findings":[{"id":"fb2ik37jbq3ajmculowqq","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T18:20:10.932Z","first_published":"2026-11-05T19:02:12.870Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=overupuckn.store"},{"hostname":"paribu-tr.live","first_observed":"2026-11-05T18:31:55.333Z","first_published":"2026-11-05T19:02:12.870Z","brands":[{"id":"paribu","name":"Paribu","url":"https://domainspoof.com/brands/paribu"}],"dns":"resolved","resolved":["104.21.89.42","172.67.156.88","2606:4700:3033::ac43:9c58","2606:4700:3035::6815:592a"],"resolved_at":"2026-11-05T18:40:10Z","dns_checked_at":"2026-11-05T19:07:57.000Z","dns_since":"2026-11-05T19:07:57.000Z","findings":[{"id":"ftyjbz5yw5dddhnl6ywt2","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T18:31:55.333Z","first_published":"2026-11-05T19:02:12.870Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/brands/paribu"},{"hostname":"payload.crypto-polis.org","first_observed":"2026-11-05T18:46:52.803Z","first_published":"2026-11-05T19:02:12.870Z","brands":[],"dns":"resolved","resolved":["185.178.208.132","185.178.208.182"],"resolved_at":"2026-11-05T18:55:52Z","dns_checked_at":"2026-11-05T19:07:57.000Z","dns_since":"2026-11-05T19:07:57.000Z","findings":[{"id":"fcq2y2cbsywn6o6wi44pi","kind":"reported_domain","summary":"Under crypto-polis.org, reported by PhishDestroy","first_observed":"2026-11-05T18:46:52.803Z","first_published":"2026-11-05T19:02:12.870Z","source":"phishdestroy","source_name":"PhishDestroy","under":"crypto-polis.org","source_url":"https://phishdestroy.io/domain/crypto-polis.org/"}],"url":"https://domainspoof.com/live?show=all&q=payload.crypto-polis.org"},{"hostname":"payload.socialvisor.ru","first_observed":"2026-11-05T18:00:49.708Z","first_published":"2026-11-05T19:02:12.870Z","brands":[],"dns":"resolved","resolved":["91.215.41.91"],"resolved_at":"2026-11-05T18:01:04Z","dns_checked_at":"2026-11-05T19:07:58.000Z","dns_since":"2026-11-05T19:07:58.000Z","findings":[{"id":"ftavv6a2zxdzdar3afhop","kind":"reported_domain","summary":"Under socialvisor.ru, reported by PhishDestroy","first_observed":"2026-11-05T18:00:49.708Z","first_published":"2026-11-05T19:02:12.870Z","source":"phishdestroy","source_name":"PhishDestroy","under":"socialvisor.ru","source_url":"https://phishdestroy.io/domain/socialvisor.ru/"}],"url":"https://domainspoof.com/live?show=all&q=payload.socialvisor.ru"},{"hostname":"pe1-zfs6k-3q8k-j53ka-tgl6x.pages.dev","first_observed":"2026-11-05T18:05:57.557Z","first_published":"2026-11-05T19:02:12.870Z","brands":[],"dns":"resolved","resolved":["172.66.44.139","172.66.47.117"],"resolved_at":"2026-11-05T18:06:37Z","dns_checked_at":"2026-11-05T19:07:58.000Z","dns_since":"2026-11-05T19:07:58.000Z","findings":[{"id":"fiuz2hoofntiqbrlo3afq","kind":"reported_domain","summary":"Reported by PhishTank","first_observed":"2026-11-05T18:05:57.557Z","first_published":"2026-11-05T19:02:12.870Z","source":"phishtank","source_name":"PhishTank","source_url":"https://phishtank.org/phish_detail.php?phish_id=9479437"}],"url":"https://domainspoof.com/live?show=all&q=pe1-zfs6k-3q8k-j53ka-tgl6x.pages.dev"},{"hostname":"pifgnrdc.aranmqisl.fmwdnalk.hdamwzvs.ijdyvoge.gatewaylearning.ezgateway.net","first_observed":"2026-11-05T18:36:46.331Z","first_published":"2026-11-05T19:02:12.870Z","brands":[],"dns":"resolved","resolved":["15.204.116.29"],"resolved_at":"2026-11-05T18:44:02Z","dns_checked_at":"2026-11-05T19:07:58.000Z","dns_since":"2026-11-05T19:07:58.000Z","findings":[{"id":"fyy2tiilyjlequsrmut2o","kind":"reported_domain","summary":"Under ezgateway.net, listed by USOM","first_observed":"2026-11-05T18:36:46.331Z","first_published":"2026-11-05T19:02:12.870Z","source":"usom","source_name":"USOM","under":"ezgateway.net"}],"url":"https://domainspoof.com/live?show=all&q=pifgnrdc.aranmqisl.fmwdnalk.hdamwzvs.ijdyvoge.gatewaylearning.ezgateway.net"},{"hostname":"pkzlr.com","first_observed":"2026-11-05T18:41:34.727Z","first_published":"2026-11-05T19:02:12.870Z","brands":[],"dns":"resolved","resolved":["104.21.95.85","172.67.143.217"],"resolved_at":"2026-11-05T18:51:25Z","dns_checked_at":"2026-11-05T19:07:58.000Z","dns_since":"2026-11-05T19:07:58.000Z","findings":[{"id":"f24adzw22jjcszyxbdw46","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T18:41:34.727Z","first_published":"2026-11-05T19:02:12.870Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=pkzlr.com"},{"hostname":"pl-33099002862291oferta51825292f27.sbs","first_observed":"2026-11-05T18:20:10.932Z","first_published":"2026-11-05T19:02:12.870Z","brands":[],"dns":"resolved","resolved":["fd10:aec2:5dae::"],"resolved_at":"2026-11-05T18:22:07Z","dns_checked_at":"2026-11-05T19:07:58.000Z","dns_since":"2026-11-05T19:07:58.000Z","findings":[{"id":"fvdu47o5pzrqfdys7hdra","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T18:20:10.932Z","first_published":"2026-11-05T19:02:12.870Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=pl-33099002862291oferta51825292f27.sbs"},{"hostname":"plperhjuisu.com","first_observed":"2026-11-05T18:46:52.803Z","first_published":"2026-11-05T19:02:12.870Z","brands":[],"dns":"resolved","resolved":["104.21.57.158","172.67.191.30"],"resolved_at":"2026-11-05T18:55:53Z","dns_checked_at":"2026-11-05T19:07:58.000Z","dns_since":"2026-11-05T19:07:58.000Z","findings":[{"id":"fkkaw5jkpolvoaf7vgdma","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T18:46:52.803Z","first_published":"2026-11-05T19:02:12.870Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=plperhjuisu.com"},{"hostname":"portal-morpho.com","first_observed":"2026-11-05T18:41:34.727Z","first_published":"2026-11-05T19:02:12.870Z","brands":[],"dns":"resolved","resolved":["104.21.7.23","172.67.135.165"],"resolved_at":"2026-11-05T18:51:26Z","dns_checked_at":"2026-11-05T19:07:58.000Z","dns_since":"2026-11-05T19:07:58.000Z","findings":[{"id":"f2af5f5l7egi3rda6qzh2","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T18:41:34.727Z","first_published":"2026-11-05T19:02:12.870Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=portal-morpho.com"},{"hostname":"portalbridges.com","first_observed":"2026-11-05T18:26:07.076Z","first_published":"2026-11-05T19:02:12.870Z","brands":[],"dns":"resolved","resolved":["104.21.50.251","172.67.215.118"],"resolved_at":"2026-11-06T11:41:54Z","dns_checked_at":"2026-11-05T19:07:58.000Z","dns_since":"2026-11-05T19:07:58.000Z","findings":[{"id":"ftrxwnqkqxeparbfr2lm4","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T18:26:07.076Z","first_published":"2026-11-05T19:02:12.870Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=portalbridges.com"},{"hostname":"portalbridges.net","first_observed":"2026-11-05T18:26:07.076Z","first_published":"2026-11-05T19:02:12.870Z","brands":[],"dns":"resolved","resolved":["104.21.70.108","172.67.222.222"],"resolved_at":"2026-11-06T11:41:54Z","dns_checked_at":"2026-11-05T19:07:58.000Z","dns_since":"2026-11-05T19:07:58.000Z","findings":[{"id":"fux4fo2gkxoejghyx5vxf","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T18:26:07.076Z","first_published":"2026-11-05T19:02:12.870Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=portalbridges.net"},{"hostname":"prevalia-de.live","first_observed":"2026-11-05T18:51:40.666Z","first_published":"2026-11-05T19:02:12.870Z","brands":[],"dns":"resolved","resolved":["104.21.31.247","172.67.181.130"],"resolved_at":"2026-11-05T19:00:40Z","dns_checked_at":"2026-11-05T19:07:58.000Z","dns_since":"2026-11-05T19:07:58.000Z","findings":[{"id":"fvcgkkouz37aptbcepxfi","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T18:51:40.666Z","first_published":"2026-11-05T19:02:12.870Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=prevalia-de.live"},{"hostname":"projetartengnetworking.com","first_observed":"2026-11-05T18:51:40.666Z","first_published":"2026-11-05T19:02:12.870Z","brands":[],"dns":"resolved","resolved":["104.21.85.163","172.67.207.164"],"resolved_at":"2026-11-05T19:00:40Z","dns_checked_at":"2026-11-05T19:07:58.000Z","dns_since":"2026-11-05T19:07:58.000Z","findings":[{"id":"fmh7ohibdd3pppdfbacjn","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T18:51:40.666Z","first_published":"2026-11-05T19:02:12.870Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=projetartengnetworking.com"},{"hostname":"r9n49brct3luy644.td-card.net","first_observed":"2026-11-05T18:31:55.333Z","first_published":"2026-11-05T19:02:12.870Z","brands":[],"dns":"resolved","resolved":["185.53.179.136"],"resolved_at":"2026-11-05T18:40:11Z","dns_checked_at":"2026-11-05T19:07:58.000Z","dns_since":"2026-11-05T19:07:58.000Z","findings":[{"id":"fnn2s2yibz4a2kdjutj2n","kind":"reported_domain","summary":"Under td-card.net, listed by MetaMask","first_observed":"2026-11-05T18:31:55.333Z","first_published":"2026-11-05T19:02:12.870Z","source":"metamask","source_name":"MetaMask","under":"td-card.net"}],"url":"https://domainspoof.com/live?show=all&q=r9n49brct3luy644.td-card.net"},{"hostname":"ra7iap.hdiv8jy.com","first_observed":"2026-11-05T18:26:07.076Z","first_published":"2026-11-05T19:02:12.870Z","brands":[],"dns":"resolved","resolved":["185.53.179.136"],"resolved_at":"2026-11-05T18:26:37Z","dns_checked_at":"2026-11-05T19:07:58.000Z","dns_since":"2026-11-05T19:07:58.000Z","findings":[{"id":"fjfnsdznly3erysh5lxks","kind":"reported_domain","summary":"Under hdiv8jy.com, listed by MetaMask","first_observed":"2026-11-05T18:26:07.076Z","first_published":"2026-11-05T19:02:12.870Z","source":"metamask","source_name":"MetaMask","under":"hdiv8jy.com"}],"url":"https://domainspoof.com/live?show=all&q=ra7iap.hdiv8jy.com"},{"hostname":"rainbet-be.net","first_observed":"2026-11-05T18:31:55.333Z","first_published":"2026-11-05T19:02:12.870Z","brands":[],"dns":"resolved","resolved":["104.21.46.15","172.67.222.63"],"resolved_at":"2026-11-05T18:40:11Z","dns_checked_at":"2026-11-05T19:07:58.000Z","dns_since":"2026-11-05T19:07:58.000Z","findings":[{"id":"fr6ihmdkxtr3zphqb3idf","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T18:31:55.333Z","first_published":"2026-11-05T19:02:12.870Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=rainbet-be.net"},{"hostname":"rainbet-games-vip.pages.dev","first_observed":"2026-11-05T18:05:57.557Z","first_published":"2026-11-05T19:02:12.870Z","brands":[],"dns":"resolved","resolved":["172.66.44.194","172.66.47.62"],"resolved_at":"2026-11-05T18:06:38Z","dns_checked_at":"2026-11-05T19:07:58.000Z","dns_since":"2026-11-05T19:07:58.000Z","findings":[{"id":"fcu3o3oqlmplwx4ljvoeg","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T18:05:57.557Z","first_published":"2026-11-05T19:02:12.870Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=rainbet-games-vip.pages.dev"},{"hostname":"ramseseco.pages.dev","first_observed":"2026-11-05T17:53:50.776Z","first_published":"2026-11-05T19:02:12.870Z","brands":[],"dns":"resolved","resolved":["172.66.44.152","172.66.47.104","2606:4700:310c::ac42:2c98","2606:4700:310c::ac42:2f68"],"resolved_at":"2026-11-05T17:56:36Z","dns_checked_at":"2026-11-05T19:07:58.000Z","dns_since":"2026-11-05T19:07:58.000Z","findings":[{"id":"fvksr7c2hxrcvhyhj2a4a","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T17:53:50.776Z","first_published":"2026-11-05T19:02:12.870Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=ramseseco.pages.dev"},{"hostname":"redebairro-ifood.com.br","first_observed":"2026-11-05T18:26:37.427Z","first_published":"2026-11-05T19:02:12.870Z","brands":[{"id":"ifood","name":"iFood","url":"https://domainspoof.com/brands/ifood"}],"dns":"resolved","resolved":["200.160.2.95"],"resolved_at":"2026-11-05T19:07:58Z","dns_checked_at":"2026-11-05T19:07:58.000Z","dns_since":"2026-11-05T19:07:58.000Z","findings":[{"id":"f43eeumx3nd7gtv2vetsm","kind":"phishing_infrastructure","summary":"Resolved to 200.160.2.95, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T18:26:37.427Z","first_published":"2026-11-05T19:02:12.870Z","address":"200.160.2.95","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/ifood"},{"hostname":"rimpudisla.store","first_observed":"2026-11-05T18:20:10.932Z","first_published":"2026-11-05T19:02:12.870Z","brands":[],"dns":"resolved","resolved":["104.21.14.4","172.67.133.150","2606:4700:3033::ac43:8596","2606:4700:3035::6815:e04"],"resolved_at":"2026-11-05T18:22:07Z","dns_checked_at":"2026-11-05T19:07:58.000Z","dns_since":"2026-11-05T19:07:58.000Z","findings":[{"id":"f2pvb5i6tg4ewpqn7goir","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T18:20:10.932Z","first_published":"2026-11-05T19:02:12.870Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=rimpudisla.store"},{"hostname":"ringagrava.store","first_observed":"2026-11-05T18:20:10.932Z","first_published":"2026-11-05T19:02:12.870Z","brands":[],"dns":"resolved","resolved":["104.21.18.30","172.67.179.232","2606:4700:3032::ac43:b3e8","2606:4700:3033::6815:121e"],"resolved_at":"2026-11-05T18:22:07Z","dns_checked_at":"2026-11-05T19:07:58.000Z","dns_since":"2026-11-05T19:07:58.000Z","findings":[{"id":"f5pt6cwx7chqsz4mugfbe","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T18:20:10.932Z","first_published":"2026-11-05T19:02:12.870Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=ringagrava.store"},{"hostname":"safepal.claims","first_observed":"2026-11-05T18:46:52.803Z","first_published":"2026-11-05T19:02:12.870Z","brands":[{"id":"safepal","name":"SafePal","url":"https://domainspoof.com/brands/safepal"}],"dns":"resolved","resolved":["104.21.56.248","172.67.157.58","2606:4700:3033::6815:38f8","2606:4700:3035::ac43:9d3a"],"resolved_at":"2026-11-05T18:55:53Z","dns_checked_at":"2026-11-05T19:07:58.000Z","dns_since":"2026-11-05T19:07:58.000Z","findings":[{"id":"f3wzphrtjlms5zb4gwalc","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T18:46:52.803Z","first_published":"2026-11-05T19:02:12.870Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/brands/safepal"},{"hostname":"savourpec.com","first_observed":"2026-11-05T18:20:10.932Z","first_published":"2026-11-05T19:02:12.870Z","brands":[],"dns":"resolved","resolved":["104.21.16.108","172.67.167.67","2606:4700:3030::ac43:a743","2606:4700:3037::6815:106c"],"resolved_at":"2026-11-05T18:22:07Z","dns_checked_at":"2026-11-05T19:07:58.000Z","dns_since":"2026-11-05T19:07:58.000Z","findings":[{"id":"fnswy54jjvzwki3hfs52d","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T18:20:10.932Z","first_published":"2026-11-05T19:02:12.870Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=savourpec.com"},{"hostname":"scoaladejoaca.ro","first_observed":"2026-11-05T18:41:34.727Z","first_published":"2026-11-05T19:02:12.870Z","brands":[],"dns":"resolved","resolved":["188.34.142.87"],"resolved_at":"2026-11-05T18:51:29Z","dns_checked_at":"2026-11-05T19:07:58.000Z","dns_since":"2026-11-05T19:07:58.000Z","findings":[{"id":"f7am2yi4zxo2t66a4ddnr","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T18:41:34.727Z","first_published":"2026-11-05T19:02:12.870Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/scoaladejoaca.ro/"}],"url":"https://domainspoof.com/live?show=all&q=scoaladejoaca.ro"},{"hostname":"seafile.crypto-polis.org","first_observed":"2026-11-05T17:57:01.210Z","first_published":"2026-11-05T19:02:12.870Z","brands":[],"dns":"resolved","resolved":["185.178.208.132","185.178.208.182"],"resolved_at":"2026-11-05T17:57:40Z","dns_checked_at":"2026-11-05T19:07:58.000Z","dns_since":"2026-11-05T19:07:58.000Z","findings":[{"id":"fpw2y64buu7v5afidgfj6","kind":"reported_domain","summary":"Under crypto-polis.org, reported by PhishDestroy","first_observed":"2026-11-05T17:57:01.210Z","first_published":"2026-11-05T19:02:12.870Z","source":"phishdestroy","source_name":"PhishDestroy","under":"crypto-polis.org","source_url":"https://phishdestroy.io/domain/crypto-polis.org/"}],"url":"https://domainspoof.com/live?show=all&q=seafile.crypto-polis.org"},{"hostname":"seco.b67.ch","first_observed":"2026-11-05T18:51:40.666Z","first_published":"2026-11-05T19:02:12.870Z","brands":[],"dns":"resolved","resolved":["185.178.193.239","2001:1680:101:88a::1"],"resolved_at":"2026-11-05T19:00:52Z","dns_checked_at":"2026-11-05T19:07:58.000Z","dns_since":"2026-11-05T19:07:58.000Z","findings":[{"id":"fu6xfw2hzrpfjy26kxneq","kind":"reported_domain","summary":"Under b67.ch, reported by PhishDestroy","first_observed":"2026-11-05T18:51:40.666Z","first_published":"2026-11-05T19:02:12.870Z","source":"phishdestroy","source_name":"PhishDestroy","under":"b67.ch","source_url":"https://phishdestroy.io/domain/b67.ch/"}],"url":"https://domainspoof.com/live?show=all&q=seco.b67.ch"},{"hostname":"secure-docu-pdf.help","first_observed":"2026-11-05T18:41:34.727Z","first_published":"2026-11-05T19:02:12.870Z","brands":[],"dns":"resolved","resolved":["104.21.44.106","172.67.198.187"],"resolved_at":"2026-11-05T18:51:31Z","dns_checked_at":"2026-11-05T19:07:58.000Z","dns_since":"2026-11-05T19:07:58.000Z","findings":[{"id":"f4sd5btpmvptmhz3kqrx6","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T18:41:34.727Z","first_published":"2026-11-05T19:02:12.870Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=secure-docu-pdf.help"},{"hostname":"silksuite.org","first_observed":"2026-11-05T18:31:55.333Z","first_published":"2026-11-05T19:02:12.870Z","brands":[],"dns":"resolved","resolved":["104.21.40.57","172.67.176.122"],"resolved_at":"2026-11-06T11:47:02Z","dns_checked_at":"2026-11-05T19:07:58.000Z","dns_since":"2026-11-05T19:07:58.000Z","findings":[{"id":"fofisn2sck2ejnxp6pfjd","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T18:31:55.333Z","first_published":"2026-11-05T19:02:12.870Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=silksuite.org"},{"hostname":"sitemw399vzowgfl.xyz","first_observed":"2026-11-05T17:53:50.776Z","first_published":"2026-11-05T19:02:12.870Z","brands":[],"dns":"resolved","resolved":["104.21.90.155","172.67.202.64","2606:4700:3032::ac43:ca40","2606:4700:3036::6815:5a9b"],"resolved_at":"2026-11-05T17:56:36Z","dns_checked_at":"2026-11-05T19:07:58.000Z","dns_since":"2026-11-05T19:07:58.000Z","findings":[{"id":"fr2grh66t7zgmrw4m2spk","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T17:53:50.776Z","first_published":"2026-11-05T19:02:12.870Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=sitemw399vzowgfl.xyz"},{"hostname":"sitemw3aiuv3sl5t.xyz","first_observed":"2026-11-05T17:53:50.776Z","first_published":"2026-11-05T19:02:12.870Z","brands":[],"dns":"resolved","resolved":["104.21.18.139","172.67.182.78","2606:4700:3031::6815:128b","2606:4700:3032::ac43:b64e"],"resolved_at":"2026-11-05T17:56:36Z","dns_checked_at":"2026-11-05T19:07:58.000Z","dns_since":"2026-11-05T19:07:58.000Z","findings":[{"id":"fh3jx23mv4i22qfqrxguo","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T17:53:50.776Z","first_published":"2026-11-05T19:02:12.870Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=sitemw3aiuv3sl5t.xyz"},{"hostname":"skelvurizont-pt.live","first_observed":"2026-11-05T18:51:40.666Z","first_published":"2026-11-05T19:02:12.870Z","brands":[],"dns":"resolved","resolved":["104.21.91.102","172.67.215.155"],"resolved_at":"2026-11-05T19:00:53Z","dns_checked_at":"2026-11-05T19:07:58.000Z","dns_since":"2026-11-05T19:07:58.000Z","findings":[{"id":"fatvhvzamndlz2qfcnbvn","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T18:51:40.666Z","first_published":"2026-11-05T19:02:12.870Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=skelvurizont-pt.live"},{"hostname":"sky-money.net","first_observed":"2026-11-05T18:05:57.557Z","first_published":"2026-11-05T19:02:12.870Z","brands":[],"dns":"resolved","resolved":["104.21.86.242","172.67.137.242"],"resolved_at":"2026-11-06T11:47:02Z","dns_checked_at":"2026-11-05T19:07:58.000Z","dns_since":"2026-11-05T19:07:58.000Z","findings":[{"id":"f3kx5qxiz6lrsxj5m43ey","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T18:05:57.557Z","first_published":"2026-11-05T19:02:12.870Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=sky-money.net"},{"hostname":"slava-exchange.com","first_observed":"2026-11-05T18:36:46.331Z","first_published":"2026-11-05T19:02:12.870Z","brands":[],"dns":"resolved","resolved":["104.21.70.227","172.67.140.41"],"resolved_at":"2026-11-05T18:44:07Z","dns_checked_at":"2026-11-05T19:07:58.000Z","dns_since":"2026-11-05T19:07:58.000Z","findings":[{"id":"f4itrahhc6zh4cvsuykdx","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T18:36:46.331Z","first_published":"2026-11-05T19:02:12.870Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/slava-exchange.com/"}],"url":"https://domainspoof.com/live?show=all&q=slava-exchange.com"},{"hostname":"slaviaccsmeticsss.online","first_observed":"2026-11-05T18:20:10.932Z","first_published":"2026-11-05T19:02:12.870Z","brands":[],"dns":"resolved","resolved":["104.21.1.108","172.67.129.43","2606:4700:3031::6815:16c","2606:4700:3034::ac43:812b"],"resolved_at":"2026-11-05T18:22:07Z","dns_checked_at":"2026-11-05T19:07:58.000Z","dns_since":"2026-11-05T19:07:58.000Z","findings":[{"id":"f6f7dudni77jgfgw6vian","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T18:20:10.932Z","first_published":"2026-11-05T19:02:12.870Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=slaviaccsmeticsss.online"},{"hostname":"snapshot-hyperunit.com","first_observed":"2026-11-05T18:41:34.727Z","first_published":"2026-11-05T19:02:12.870Z","brands":[],"dns":"resolved","resolved":["104.21.91.41","172.67.209.135"],"resolved_at":"2026-11-05T18:51:32Z","dns_checked_at":"2026-11-05T19:07:58.000Z","dns_since":"2026-11-05T19:07:58.000Z","findings":[{"id":"f3gz6wyw7fbawxcirslyj","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T18:41:34.727Z","first_published":"2026-11-05T19:02:12.870Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=snapshot-hyperunit.com"},{"hostname":"socket-wordpress.net","first_observed":"2026-11-05T18:01:04.944Z","first_published":"2026-11-05T19:02:12.870Z","brands":[{"id":"wordpress","name":"WordPress","url":"https://domainspoof.com/brands/wordpress"}],"dns":"resolved","resolved":["184.174.96.89"],"resolved_at":"2026-11-05T19:07:58Z","dns_checked_at":"2026-11-05T19:07:58.000Z","dns_since":"2026-11-05T19:07:58.000Z","findings":[{"id":"ft24am5edzs7ana225kjn","kind":"phishing_infrastructure","summary":"Resolved to 184.174.96.89, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T18:01:04.944Z","first_published":"2026-11-05T19:02:12.870Z","address":"184.174.96.89","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/wordpress"},{"hostname":"solcasino.fyi","first_observed":"2026-11-05T18:16:28.648Z","first_published":"2026-11-05T19:02:12.870Z","brands":[],"dns":"resolved","resolved":["104.21.50.126","172.67.163.56"],"resolved_at":"2026-11-05T18:23:45Z","dns_checked_at":"2026-11-05T19:07:58.000Z","dns_since":"2026-11-05T19:07:58.000Z","findings":[{"id":"fmt23q65wt4nxkmzaiaqp","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T18:16:28.648Z","first_published":"2026-11-05T19:02:12.870Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=solcasino.fyi"},{"hostname":"sp19ct7-kurek-biz-voren-salif.pages.dev","first_observed":"2026-11-05T18:36:46.331Z","first_published":"2026-11-05T19:02:12.870Z","brands":[],"dns":"resolved","resolved":["172.66.45.3","172.66.46.253"],"resolved_at":"2026-11-05T18:44:07Z","dns_checked_at":"2026-11-05T19:07:58.000Z","dns_since":"2026-11-05T19:07:58.000Z","findings":[{"id":"f26u6ei6jnexdmz4j7wdw","kind":"reported_domain","summary":"Reported by PhishTank","first_observed":"2026-11-05T18:36:46.331Z","first_published":"2026-11-05T19:02:12.870Z","source":"phishtank","source_name":"PhishTank","source_url":"https://phishtank.org/phish_detail.php?phish_id=9479529"}],"url":"https://domainspoof.com/live?show=all&q=sp19ct7-kurek-biz-voren-salif.pages.dev"},{"hostname":"sscalping.cc","first_observed":"2026-11-05T18:36:46.331Z","first_published":"2026-11-05T19:02:12.870Z","brands":[],"dns":"resolved","resolved":["102.204.222.8"],"resolved_at":"2026-11-05T18:44:08Z","dns_checked_at":"2026-11-05T19:07:58.000Z","dns_since":"2026-11-05T19:07:58.000Z","findings":[{"id":"fxw5l6jfny53pj7ogi2xz","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T18:36:46.331Z","first_published":"2026-11-05T19:02:12.870Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/sscalping.cc/"}],"url":"https://domainspoof.com/live?show=all&q=sscalping.cc"},{"hostname":"sso-meta-mask-us.pages.dev","first_observed":"2026-11-05T18:41:34.727Z","first_published":"2026-11-05T19:02:12.870Z","brands":[{"id":"metamask","name":"MetaMask","url":"https://domainspoof.com/brands/metamask"}],"dns":"resolved","resolved":["172.66.44.54","172.66.47.202","2606:4700:310c::ac42:2c36","2606:4700:310c::ac42:2fca"],"resolved_at":"2026-11-05T18:51:32Z","dns_checked_at":"2026-11-05T19:07:58.000Z","dns_since":"2026-11-05T19:07:58.000Z","findings":[{"id":"finnsb3xvyfvnrvplb3en","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T18:41:34.727Z","first_published":"2026-11-05T19:02:12.870Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/brands/metamask"},{"hostname":"stabilkapital-no.live","first_observed":"2026-11-05T18:36:46.331Z","first_published":"2026-11-05T19:02:12.870Z","brands":[],"dns":"resolved","resolved":["104.21.94.207","172.67.140.12"],"resolved_at":"2026-11-05T18:44:08Z","dns_checked_at":"2026-11-05T19:07:58.000Z","dns_since":"2026-11-05T19:07:58.000Z","findings":[{"id":"ft6nncabpcc52gp2rt27c","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T18:36:46.331Z","first_published":"2026-11-05T19:02:12.870Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=stabilkapital-no.live"},{"hostname":"stake-wise.org","first_observed":"2026-11-05T18:16:28.648Z","first_published":"2026-11-05T19:02:12.870Z","brands":[],"dns":"resolved","resolved":["104.21.10.60","172.67.162.144"],"resolved_at":"2026-11-06T11:47:02Z","dns_checked_at":"2026-11-05T19:07:58.000Z","dns_since":"2026-11-05T19:07:58.000Z","findings":[{"id":"fitnwg2wyqo5l45cvmxxu","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T18:16:28.648Z","first_published":"2026-11-05T19:02:12.870Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=stake-wise.org"},{"hostname":"starknet.lt","first_observed":"2026-11-05T18:06:40.204Z","first_published":"2026-11-05T19:02:12.870Z","brands":[{"id":"starknet","name":"Starknet","url":"https://domainspoof.com/brands/starknet"}],"dns":"resolved","resolved":["2.57.91.91"],"resolved_at":"2026-11-05T19:07:58Z","dns_checked_at":"2026-11-05T19:07:58.000Z","dns_since":"2026-11-05T19:07:58.000Z","findings":[{"id":"ff3knnowxq7mprhfmlac7","kind":"phishing_infrastructure","summary":"Resolved to 2.57.91.91, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T18:06:40.204Z","first_published":"2026-11-05T19:02:12.870Z","address":"2.57.91.91","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/starknet"},{"hostname":"status-re-delivery.com","first_observed":"2026-11-05T18:20:10.932Z","first_published":"2026-11-05T19:02:12.870Z","brands":[],"dns":"resolved","resolved":["43.162.96.76"],"resolved_at":"2026-11-05T18:22:07Z","dns_checked_at":"2026-11-05T19:07:58.000Z","dns_since":"2026-11-05T19:07:58.000Z","findings":[{"id":"fk5so3l3cuixsymf72mpf","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T18:20:10.932Z","first_published":"2026-11-05T19:02:12.870Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=status-re-delivery.com"},{"hostname":"steakhouse-financial.com","first_observed":"2026-11-05T18:05:57.557Z","first_published":"2026-11-05T19:02:12.870Z","brands":[],"dns":"resolved","resolved":["104.21.81.146","172.67.189.253"],"resolved_at":"2026-11-06T11:47:02Z","dns_checked_at":"2026-11-05T19:07:58.000Z","dns_since":"2026-11-05T19:07:58.000Z","findings":[{"id":"fpqt2ax3nzgnhqculquuq","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T18:05:57.557Z","first_published":"2026-11-05T19:02:12.870Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=steakhouse-financial.com"},{"hostname":"steelcityhoops.com","first_observed":"2026-11-05T18:31:55.333Z","first_published":"2026-11-05T19:02:12.870Z","brands":[],"dns":"resolved","resolved":["104.21.71.201","172.67.171.159"],"resolved_at":"2026-11-05T18:40:17Z","dns_checked_at":"2026-11-05T19:07:58.000Z","dns_since":"2026-11-05T19:07:58.000Z","findings":[{"id":"fywygwz5sahojf4nmdlcd","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T18:31:55.333Z","first_published":"2026-11-05T19:02:12.870Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/steelcityhoops.com/"}],"url":"https://domainspoof.com/live?show=all&q=steelcityhoops.com"},{"hostname":"successcapitall.com","first_observed":"2026-11-05T18:46:52.803Z","first_published":"2026-11-05T19:02:12.870Z","brands":[],"dns":"resolved","resolved":["162.55.245.164"],"resolved_at":"2026-11-05T18:55:54Z","dns_checked_at":"2026-11-05T19:07:58.000Z","dns_since":"2026-11-05T19:07:58.000Z","findings":[{"id":"fmto6dxhbuvq6w3c3nche","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T18:46:52.803Z","first_published":"2026-11-05T19:02:12.870Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/successcapitall.com/"}],"url":"https://domainspoof.com/live?show=all&q=successcapitall.com"},{"hostname":"sui-lend.net","first_observed":"2026-11-05T18:05:57.557Z","first_published":"2026-11-05T19:02:12.870Z","brands":[],"dns":"resolved","resolved":["104.21.89.25","172.67.136.84"],"resolved_at":"2026-11-06T11:52:59Z","dns_checked_at":"2026-11-05T19:07:58.000Z","dns_since":"2026-11-05T19:07:58.000Z","findings":[{"id":"fxveuq2gedpokjfjvb7gn","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T18:05:57.557Z","first_published":"2026-11-05T19:02:12.870Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=sui-lend.net"},{"hostname":"summerpass-ethfi.app","first_observed":"2026-11-05T17:57:01.210Z","first_published":"2026-11-05T19:02:12.870Z","brands":[{"id":"ether-fi","name":"ether.fi","url":"https://domainspoof.com/brands/ether-fi"}],"dns":"resolved","resolved":["104.21.84.209","172.67.197.36","2606:4700:3032::ac43:c524","2606:4700:3034::6815:54d1"],"resolved_at":"2026-11-05T17:57:40Z","dns_checked_at":"2026-11-05T19:07:58.000Z","dns_since":"2026-11-05T19:07:58.000Z","findings":[{"id":"fwf6d4qgh7dsl4vzcwejm","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T17:57:01.210Z","first_published":"2026-11-05T19:02:12.870Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/brands/ether-fi"},{"hostname":"sunlive.meetlive.fun","first_observed":"2026-11-05T17:46:36.171Z","first_published":"2026-11-05T19:02:12.870Z","brands":[],"dns":"resolved","resolved":["159.198.36.22"],"resolved_at":"2026-11-05T17:59:12Z","dns_checked_at":"2026-11-05T19:07:58.000Z","dns_since":"2026-11-05T19:07:58.000Z","findings":[{"id":"fv3hgyhcza6xiutvfebae","kind":"reported_domain","summary":"Under meetlive.fun, listed by MetaMask","first_observed":"2026-11-05T17:46:36.171Z","first_published":"2026-11-05T19:02:12.870Z","source":"metamask","source_name":"MetaMask","under":"meetlive.fun"}],"url":"https://domainspoof.com/live?show=all&q=sunlive.meetlive.fun"},{"hostname":"surgecheat.com","first_observed":"2026-11-05T17:57:01.210Z","first_published":"2026-11-05T19:02:12.870Z","brands":[],"dns":"resolved","resolved":["104.21.95.46","172.67.143.1"],"resolved_at":"2026-11-05T17:57:40Z","dns_checked_at":"2026-11-05T19:07:58.000Z","dns_since":"2026-11-05T19:07:58.000Z","findings":[{"id":"fu7gypbebrd2esgjmuzcs","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T17:57:01.210Z","first_published":"2026-11-05T19:02:12.870Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/surgecheat.com/"}],"url":"https://domainspoof.com/live?show=all&q=surgecheat.com"},{"hostname":"swaplotemaxsoftware-com.financecryptoworld.com","first_observed":"2026-11-05T18:16:28.648Z","first_published":"2026-11-05T19:02:12.870Z","brands":[],"dns":"resolved","resolved":["104.21.10.130","172.67.131.121"],"resolved_at":"2026-11-05T18:23:46Z","dns_checked_at":"2026-11-05T19:07:58.000Z","dns_since":"2026-11-05T19:07:58.000Z","findings":[{"id":"feadd3zdleydbiet7zbuz","kind":"reported_domain","summary":"Under financecryptoworld.com, listed by CERT Polska","first_observed":"2026-11-05T18:16:28.648Z","first_published":"2026-11-05T19:02:12.870Z","source":"cert_polska","source_name":"CERT Polska","under":"financecryptoworld.com"}],"url":"https://domainspoof.com/live?show=all&q=swaplotemaxsoftware-com.financecryptoworld.com"},{"hostname":"swaptrx.io","first_observed":"2026-11-05T18:16:28.648Z","first_published":"2026-11-05T19:02:12.870Z","brands":[],"dns":"resolved","resolved":["104.21.65.133","172.67.163.123"],"resolved_at":"2026-11-05T18:23:46Z","dns_checked_at":"2026-11-05T19:07:58.000Z","dns_since":"2026-11-05T19:07:58.000Z","findings":[{"id":"fltidwncqmp6drn2qxdse","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T18:16:28.648Z","first_published":"2026-11-05T19:02:12.870Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/swaptrx.io/"}],"url":"https://domainspoof.com/live?show=all&q=swaptrx.io"},{"hostname":"t8sx5sgl4uc1pn.pages.dev","first_observed":"2026-11-05T18:00:49.708Z","first_published":"2026-11-05T19:02:12.870Z","brands":[],"dns":"resolved","resolved":["172.66.44.174","172.66.47.82"],"resolved_at":"2026-11-05T18:01:04Z","dns_checked_at":"2026-11-05T19:07:58.000Z","dns_since":"2026-11-05T19:07:58.000Z","findings":[{"id":"fn2fabdogf3rqtjpcptqu","kind":"reported_domain","summary":"Reported by PhishTank","first_observed":"2026-11-05T18:00:49.708Z","first_published":"2026-11-05T19:02:12.870Z","source":"phishtank","source_name":"PhishTank","source_url":"https://phishtank.org/phish_detail.php?phish_id=9109555"}],"url":"https://domainspoof.com/live?show=all&q=t8sx5sgl4uc1pn.pages.dev"},{"hostname":"teams.microsofls.com","first_observed":"2026-11-05T17:57:01.210Z","first_published":"2026-11-05T19:02:12.870Z","brands":[],"dns":"resolved","resolved":["64.95.12.148"],"resolved_at":"2026-11-05T17:57:40Z","dns_checked_at":"2026-11-05T19:07:58.000Z","dns_since":"2026-11-05T19:07:58.000Z","findings":[{"id":"fdrmtvltwyxvfgp3bi7ki","kind":"reported_domain","summary":"Under microsofls.com, listed by MetaMask","first_observed":"2026-11-05T17:57:01.210Z","first_published":"2026-11-05T19:02:12.870Z","source":"metamask","source_name":"MetaMask","under":"microsofls.com"}],"url":"https://domainspoof.com/live?show=all&q=teams.microsofls.com"},{"hostname":"tectonic-finance.net","first_observed":"2026-11-05T17:51:59.862Z","first_published":"2026-11-05T19:02:12.870Z","brands":[],"dns":"resolved","resolved":["104.21.0.246","172.67.151.126"],"resolved_at":"2026-11-06T11:52:59Z","dns_checked_at":"2026-11-05T19:07:58.000Z","dns_since":"2026-11-05T19:07:58.000Z","findings":[{"id":"fqjcaupqywhcd6267n4qj","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T17:51:59.862Z","first_published":"2026-11-05T19:02:12.870Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=tectonic-finance.net"},{"hostname":"tepiwa.digital","first_observed":"2026-11-05T18:21:18.053Z","first_published":"2026-11-05T19:02:12.870Z","brands":[],"dns":"resolved","resolved":["104.21.0.196","172.67.128.60"],"resolved_at":"2026-11-05T18:34:44Z","dns_checked_at":"2026-11-05T19:07:58.000Z","dns_since":"2026-11-05T19:07:58.000Z","findings":[{"id":"f36ijsl4gu3h5r7t7njkn","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T18:21:18.053Z","first_published":"2026-11-05T19:02:12.870Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=tepiwa.digital"},{"hostname":"thebellaroforgegpt.com","first_observed":"2026-11-05T18:36:46.331Z","first_published":"2026-11-05T19:02:12.870Z","brands":[],"dns":"resolved","resolved":["104.21.5.71","172.67.133.39"],"resolved_at":"2026-11-05T18:44:08Z","dns_checked_at":"2026-11-05T19:07:58.000Z","dns_since":"2026-11-05T19:07:58.000Z","findings":[{"id":"fqenftxszx4dpmbebxiwe","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T18:36:46.331Z","first_published":"2026-11-05T19:02:12.870Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=thebellaroforgegpt.com"},{"hostname":"tintifusil.store","first_observed":"2026-11-05T18:20:10.932Z","first_published":"2026-11-05T19:02:12.870Z","brands":[],"dns":"resolved","resolved":["104.21.54.128","172.67.138.180","2606:4700:3031::6815:3680","2606:4700:3033::ac43:8ab4"],"resolved_at":"2026-11-05T18:22:07Z","dns_checked_at":"2026-11-05T19:07:58.000Z","dns_since":"2026-11-05T19:07:58.000Z","findings":[{"id":"fwqpsgb2yjcqn2355g2r2","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T18:20:10.932Z","first_published":"2026-11-05T19:02:12.870Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=tintifusil.store"},{"hostname":"tizuqiuoy.top","first_observed":"2026-11-05T18:51:40.666Z","first_published":"2026-11-05T19:02:12.870Z","brands":[],"dns":"resolved","resolved":["104.21.90.154","172.67.202.63"],"resolved_at":"2026-11-05T19:00:56Z","dns_checked_at":"2026-11-05T19:07:58.000Z","dns_since":"2026-11-05T19:07:58.000Z","findings":[{"id":"f7wfjjjgnmbycrqdtu3di","kind":"reported_domain","summary":"Listed by NPA 165 (information services)","first_observed":"2026-11-05T18:51:40.666Z","first_published":"2026-11-05T19:02:12.870Z","source":"npa","source_name":"NPA 165","claim":{"category":"information services"}}],"url":"https://domainspoof.com/live?show=all&q=tizuqiuoy.top"},{"hostname":"tlojirnb.shop","first_observed":"2026-11-05T18:20:10.932Z","first_published":"2026-11-05T19:02:12.870Z","brands":[],"dns":"resolved","resolved":["104.17.231.54"],"resolved_at":"2026-11-05T18:22:07Z","dns_checked_at":"2026-11-05T19:07:58.000Z","dns_since":"2026-11-05T19:07:58.000Z","findings":[{"id":"fvi2xjb2xzaewgsc6t5m3","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T18:20:10.932Z","first_published":"2026-11-05T19:02:12.870Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=tlojirnb.shop"},{"hostname":"torzon-hub.live","first_observed":"2026-11-05T18:51:40.666Z","first_published":"2026-11-05T19:02:12.870Z","brands":[],"dns":"resolved","resolved":["104.21.66.215","172.67.164.100"],"resolved_at":"2026-11-05T18:52:03Z","dns_checked_at":"2026-11-05T19:07:58.000Z","dns_since":"2026-11-05T19:07:58.000Z","findings":[{"id":"fq35a4y3eqzvrwm6st4cm","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T18:51:40.666Z","first_published":"2026-11-05T19:02:12.870Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/torzon-hub.live/"}],"url":"https://domainspoof.com/live?show=all&q=torzon-hub.live"},{"hostname":"tracking.usaa-letter-services.online","first_observed":"2026-11-05T18:26:42.638Z","first_published":"2026-11-05T19:02:12.870Z","brands":[{"id":"usaa","name":"USAA","url":"https://domainspoof.com/brands/usaa"}],"dns":"resolved","resolved":["51.254.13.185"],"resolved_at":"2026-11-05T19:07:58Z","dns_checked_at":"2026-11-05T19:07:58.000Z","dns_since":"2026-11-05T19:07:58.000Z","findings":[{"id":"fyfqsj7tmf4266z364uyk","kind":"phishing_infrastructure","summary":"Resolved to 51.254.13.185, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T18:26:42.638Z","first_published":"2026-11-05T19:02:12.870Z","address":"51.254.13.185","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/usaa"},{"hostname":"tresor-log.pages.dev","first_observed":"2026-11-05T18:00:49.708Z","first_published":"2026-11-05T19:02:12.870Z","brands":[],"dns":"resolved","resolved":["172.66.44.212","172.66.47.44"],"resolved_at":"2026-11-05T18:01:06Z","dns_checked_at":"2026-11-05T19:07:58.000Z","dns_since":"2026-11-05T19:07:58.000Z","findings":[{"id":"fgwbsvi7xgzkiywitovym","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T18:00:49.708Z","first_published":"2026-11-05T19:02:12.870Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=tresor-log.pages.dev"},{"hostname":"truly2-quis51.cfd","first_observed":"2026-11-05T18:20:10.932Z","first_published":"2026-11-05T19:02:12.870Z","brands":[],"dns":"no_address","resolved":[],"resolved_at":"2026-11-05T18:22:07Z","dns_checked_at":"2026-11-06T11:27:33.000Z","findings":[{"id":"fmwewjmcvhy22pxrn7cje","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T18:20:10.932Z","first_published":"2026-11-05T19:02:12.870Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=truly2-quis51.cfd"},{"hostname":"truly5-doloremque73.cfd","first_observed":"2026-11-05T18:20:10.932Z","first_published":"2026-11-05T19:02:12.870Z","brands":[],"dns":"no_address","resolved":[],"resolved_at":"2026-11-05T18:22:07Z","dns_checked_at":"2026-11-06T11:27:33.000Z","findings":[{"id":"fxhtvz4ma2ihx4l3jkoaa","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T18:20:10.932Z","first_published":"2026-11-05T19:02:12.870Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=truly5-doloremque73.cfd"},{"hostname":"truly8-sequi15.cfd","first_observed":"2026-11-05T18:20:10.932Z","first_published":"2026-11-05T19:02:12.870Z","brands":[],"dns":"no_address","resolved":[],"resolved_at":"2026-11-05T18:22:07Z","dns_checked_at":"2026-11-06T11:27:33.000Z","findings":[{"id":"flzr7gr33jnrey6kapzgz","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T18:20:10.932Z","first_published":"2026-11-05T19:02:12.870Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=truly8-sequi15.cfd"},{"hostname":"trustwallet-com.cfd","first_observed":"2026-11-05T18:01:06.543Z","first_published":"2026-11-05T19:02:12.870Z","brands":[{"id":"trust-wallet","name":"Trust Wallet","url":"https://domainspoof.com/brands/trust-wallet"}],"dns":"resolved","resolved":["172.232.24.161","172.232.24.235","172.234.25.42"],"resolved_at":"2026-11-05T19:07:58Z","dns_checked_at":"2026-11-05T19:07:58.000Z","dns_since":"2026-11-05T19:07:58.000Z","findings":[{"id":"f3yblrprvm7fhxh7l4cfg","kind":"phishing_infrastructure","summary":"Resolved to 172.232.24.161, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T18:01:06.543Z","first_published":"2026-11-05T19:02:12.870Z","address":"172.232.24.161","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"},{"kind":"lookalike","summary":"Registered domain containing “trustwallet”, a name we match for Trust Wallet, listed by MetaMask, and resolved to 172.232.24.161, where reported phishing was found in the 48 hours before, and resolved to 172.232.24.235, where reported phishing was found in the 48 hours before, and resolved to 172.234.25.42, where reported phishing was found in the 48 hours before","first_observed":"2026-11-06T01:53:03.000Z","first_published":"2026-11-06T01:53:03.000Z","of":"trustwallet.com","spelling":"combo","match":"name","token":"trustwallet","found_by":"zone_file","listings":[{"kind":"reported","source":"metamask","source_name":"MetaMask","host":"trustwallet-com.cfd","flagged_at":"2026-11-06T01:53:03Z"},{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"172.232.24.161","flagged_at":"2026-11-06T01:53:03Z"},{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"172.232.24.235","flagged_at":"2026-11-06T01:53:03Z"},{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"172.234.25.42","flagged_at":"2026-11-06T01:53:03Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/trust-wallet"},{"hostname":"trustwallettransfar.com","first_observed":"2026-11-05T18:26:07.076Z","first_published":"2026-11-05T19:02:12.870Z","brands":[],"dns":"resolved","resolved":["104.21.11.188","172.67.192.98"],"resolved_at":"2026-11-05T18:26:42Z","dns_checked_at":"2026-11-05T19:07:58.000Z","dns_since":"2026-11-05T19:07:58.000Z","findings":[{"id":"fwiuddczrg3ey6vsji2cn","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T18:26:07.076Z","first_published":"2026-11-05T19:02:12.870Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=trustwallettransfar.com"},{"hostname":"twinkling-spots.com","first_observed":"2026-11-05T18:16:28.648Z","first_published":"2026-11-05T19:02:12.870Z","brands":[],"dns":"resolved","resolved":["104.21.9.62","172.67.159.38"],"resolved_at":"2026-11-05T18:23:49Z","dns_checked_at":"2026-11-05T19:07:58.000Z","dns_since":"2026-11-05T19:07:58.000Z","findings":[{"id":"f2dxqymvleko5lqxrzlfs","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T18:16:28.648Z","first_published":"2026-11-05T19:02:12.870Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=twinkling-spots.com"},{"hostname":"uehvxajp.qblcdxrh.nofbagcj.gecxorwd.tczglrpw.gatewaylearning.ezgateway.net","first_observed":"2026-11-05T18:36:46.331Z","first_published":"2026-11-05T19:02:12.870Z","brands":[],"dns":"resolved","resolved":["15.204.116.29"],"resolved_at":"2026-11-05T18:44:10Z","dns_checked_at":"2026-11-05T19:07:58.000Z","dns_since":"2026-11-05T19:07:58.000Z","findings":[{"id":"fihwxuomwmtvmquzlqbom","kind":"reported_domain","summary":"Under ezgateway.net, listed by USOM","first_observed":"2026-11-05T18:36:46.331Z","first_published":"2026-11-05T19:02:12.870Z","source":"usom","source_name":"USOM","under":"ezgateway.net"}],"url":"https://domainspoof.com/live?show=all&q=uehvxajp.qblcdxrh.nofbagcj.gecxorwd.tczglrpw.gatewaylearning.ezgateway.net"},{"hostname":"unbanxengine.shop","first_observed":"2026-11-05T17:46:36.171Z","first_published":"2026-11-05T19:02:12.870Z","brands":[],"dns":"resolved","resolved":["104.21.26.30","172.67.168.55"],"resolved_at":"2026-11-05T17:59:14Z","dns_checked_at":"2026-11-05T19:07:58.000Z","dns_since":"2026-11-05T19:07:58.000Z","findings":[{"id":"fwum7vjqwspaiipimep3h","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T17:46:36.171Z","first_published":"2026-11-05T19:02:12.870Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=unbanxengine.shop"},{"hostname":"usortech.com","first_observed":"2026-11-05T18:00:49.708Z","first_published":"2026-11-05T19:02:12.870Z","brands":[],"dns":"resolved","resolved":["104.21.45.81","172.67.212.62"],"resolved_at":"2026-11-05T18:01:06Z","dns_checked_at":"2026-11-05T19:07:58.000Z","dns_since":"2026-11-05T19:07:58.000Z","findings":[{"id":"fqgwz2eakhopyhji4rg5j","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T18:00:49.708Z","first_published":"2026-11-05T19:02:12.870Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/usortech.com/"}],"url":"https://domainspoof.com/live?show=all&q=usortech.com"},{"hostname":"uvikelront-fr.live","first_observed":"2026-11-05T17:46:36.171Z","first_published":"2026-11-05T19:02:12.870Z","brands":[],"dns":"resolved","resolved":["104.21.28.26","172.67.170.51"],"resolved_at":"2026-11-05T17:59:15Z","dns_checked_at":"2026-11-05T19:07:58.000Z","dns_since":"2026-11-05T19:07:58.000Z","findings":[{"id":"f5xatp4esx46xbjkaifoa","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T17:46:36.171Z","first_published":"2026-11-05T19:02:12.870Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=uvikelront-fr.live"},{"hostname":"uvikelront-nl.live","first_observed":"2026-11-05T17:51:59.862Z","first_published":"2026-11-05T19:02:12.870Z","brands":[],"dns":"resolved","resolved":["104.21.53.180","172.67.216.26"],"resolved_at":"2026-11-05T17:52:42Z","dns_checked_at":"2026-11-05T19:07:58.000Z","dns_since":"2026-11-05T19:07:58.000Z","findings":[{"id":"f6veefybv4ehqykzsqmab","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T17:51:59.862Z","first_published":"2026-11-05T19:02:12.870Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=uvikelront-nl.live"},{"hostname":"vapedragonsquad.co.za","first_observed":"2026-11-05T17:57:01.210Z","first_published":"2026-11-05T19:02:12.870Z","brands":[],"dns":"resolved","resolved":["41.72.149.125"],"resolved_at":"2026-11-05T17:57:42Z","dns_checked_at":"2026-11-05T19:07:58.000Z","dns_since":"2026-11-05T19:07:58.000Z","findings":[{"id":"fi5l7wyrl4nr2rhtrtdfj","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T17:57:01.210Z","first_published":"2026-11-05T19:02:12.870Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=vapedragonsquad.co.za"},{"hostname":"ventroviabexia-ai.shop","first_observed":"2026-11-05T18:11:07.120Z","first_published":"2026-11-05T19:02:12.870Z","brands":[],"dns":"resolved","resolved":["185.62.56.63"],"resolved_at":"2026-11-05T18:11:58Z","dns_checked_at":"2026-11-05T19:07:58.000Z","dns_since":"2026-11-05T19:07:58.000Z","findings":[{"id":"f7mmhcusei4vtnfg7w7iw","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T18:11:07.120Z","first_published":"2026-11-05T19:02:12.870Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=ventroviabexia-ai.shop"},{"hostname":"vesewae.pro","first_observed":"2026-11-05T18:41:34.727Z","first_published":"2026-11-05T19:02:12.870Z","brands":[],"dns":"resolved","resolved":["104.21.90.147","172.67.157.197"],"resolved_at":"2026-11-05T18:41:55Z","dns_checked_at":"2026-11-05T19:07:58.000Z","dns_since":"2026-11-05T19:07:58.000Z","findings":[{"id":"fhopclziyzulbzao4rvwl","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T18:41:34.727Z","first_published":"2026-11-05T19:02:12.870Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=vesewae.pro"},{"hostname":"virtuals-protocol.com","first_observed":"2026-11-05T17:46:36.171Z","first_published":"2026-11-05T19:02:12.870Z","brands":[{"id":"virtuals-protocol","name":"Virtuals Protocol","url":"https://domainspoof.com/brands/virtuals-protocol"}],"dns":"resolved","resolved":["104.21.75.163","172.67.178.189","2606:4700:3033::6815:4ba3","2606:4700:3035::ac43:b2bd"],"resolved_at":"2026-11-05T17:59:16Z","dns_checked_at":"2026-11-05T19:07:58.000Z","dns_since":"2026-11-05T19:07:58.000Z","findings":[{"id":"fhyocynyhboxsmdo3n5a7","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T17:46:36.171Z","first_published":"2026-11-05T19:02:12.870Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/brands/virtuals-protocol"},{"hostname":"voltacapitenza-it.live","first_observed":"2026-11-05T18:21:18.053Z","first_published":"2026-11-05T19:02:12.870Z","brands":[],"dns":"resolved","resolved":["104.21.55.228","172.67.173.204"],"resolved_at":"2026-11-05T18:34:50Z","dns_checked_at":"2026-11-05T19:07:58.000Z","dns_since":"2026-11-05T19:07:58.000Z","findings":[{"id":"fwkkhhdssiycdrqzrih2m","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T18:21:18.053Z","first_published":"2026-11-05T19:02:12.870Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=voltacapitenza-it.live"},{"hostname":"vote-lightcr.com","first_observed":"2026-11-05T18:41:34.727Z","first_published":"2026-11-05T19:02:12.870Z","brands":[],"dns":"resolved","resolved":["104.21.10.250","172.67.164.217"],"resolved_at":"2026-11-05T18:41:55Z","dns_checked_at":"2026-11-05T19:07:58.000Z","dns_since":"2026-11-05T19:07:58.000Z","findings":[{"id":"fghsk33h46d2r2tcfaefh","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T18:41:34.727Z","first_published":"2026-11-05T19:02:12.870Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=vote-lightcr.com"},{"hostname":"vote-netnetcap.com","first_observed":"2026-11-05T18:36:46.331Z","first_published":"2026-11-05T19:02:12.870Z","brands":[],"dns":"resolved","resolved":["104.21.35.207","172.67.179.146"],"resolved_at":"2026-11-05T18:44:11Z","dns_checked_at":"2026-11-05T19:07:58.000Z","dns_since":"2026-11-05T19:07:58.000Z","findings":[{"id":"fysqjwv4dnp6336utf74u","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T18:36:46.331Z","first_published":"2026-11-05T19:02:12.870Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=vote-netnetcap.com"},{"hostname":"vote-netnetcapital.xyz","first_observed":"2026-11-05T17:53:50.776Z","first_published":"2026-11-05T19:02:12.870Z","brands":[],"dns":"resolved","resolved":["104.21.77.108","172.67.207.45","2606:4700:3031::ac43:cf2d","2606:4700:3033::6815:4d6c"],"resolved_at":"2026-11-05T17:56:36Z","dns_checked_at":"2026-11-05T19:07:58.000Z","dns_since":"2026-11-05T19:07:58.000Z","findings":[{"id":"fgseztoucg2z3i6oyjvdd","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T17:53:50.776Z","first_published":"2026-11-05T19:02:12.870Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=vote-netnetcapital.xyz"},{"hostname":"vote-nillion.pages.dev","first_observed":"2026-11-05T17:53:50.776Z","first_published":"2026-11-05T19:02:12.870Z","brands":[],"dns":"resolved","resolved":["172.66.44.192","172.66.47.64","2606:4700:310c::ac42:2cc0","2606:4700:310c::ac42:2f40"],"resolved_at":"2026-11-05T17:56:36Z","dns_checked_at":"2026-11-05T19:07:58.000Z","dns_since":"2026-11-05T19:07:58.000Z","findings":[{"id":"f3774gxzxj5zp3irkmhls","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T17:53:50.776Z","first_published":"2026-11-05T19:02:12.870Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=vote-nillion.pages.dev"},{"hostname":"vpn.allhadeda.com","first_observed":"2026-11-05T18:31:55.333Z","first_published":"2026-11-05T19:02:12.870Z","brands":[],"dns":"resolved","resolved":["185.53.179.136"],"resolved_at":"2026-11-05T18:40:22Z","dns_checked_at":"2026-11-05T19:07:58.000Z","dns_since":"2026-11-05T19:07:58.000Z","findings":[{"id":"f67bcfnoqjtsywjxyiw6r","kind":"reported_domain","summary":"Under allhadeda.com, reported by PhishDestroy","first_observed":"2026-11-05T18:31:55.333Z","first_published":"2026-11-05T19:02:12.870Z","source":"phishdestroy","source_name":"PhishDestroy","under":"allhadeda.com","source_url":"https://phishdestroy.io/domain/allhadeda.com/"}],"url":"https://domainspoof.com/live?show=all&q=vpn.allhadeda.com"},{"hostname":"vvsfinance.org","first_observed":"2026-11-05T17:57:01.210Z","first_published":"2026-11-05T19:02:12.870Z","brands":[],"dns":"resolved","resolved":["104.21.23.31","172.67.208.120"],"resolved_at":"2026-11-06T11:53:02Z","dns_checked_at":"2026-11-05T19:07:58.000Z","dns_since":"2026-11-05T19:07:58.000Z","findings":[{"id":"fxqqmt4ewwazpbn6a6nlk","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T17:57:01.210Z","first_published":"2026-11-05T19:02:12.870Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=vvsfinance.org"},{"hostname":"vwymthba.oxirczje.jfpeoraqd.vurehdli.baytqfwi.asmjiuvo.ijdyvoge.gatewaylearning.ezgateway.net","first_observed":"2026-11-05T18:36:46.331Z","first_published":"2026-11-05T19:02:12.870Z","brands":[],"dns":"resolved","resolved":["15.204.116.29"],"resolved_at":"2026-11-05T18:44:11Z","dns_checked_at":"2026-11-05T19:07:58.000Z","dns_since":"2026-11-05T19:07:58.000Z","findings":[{"id":"feyw72m4twzkan6sqkjg6","kind":"reported_domain","summary":"Under ezgateway.net, listed by USOM","first_observed":"2026-11-05T18:36:46.331Z","first_published":"2026-11-05T19:02:12.870Z","source":"usom","source_name":"USOM","under":"ezgateway.net"}],"url":"https://domainspoof.com/live?show=all&q=vwymthba.oxirczje.jfpeoraqd.vurehdli.baytqfwi.asmjiuvo.ijdyvoge.gatewaylearning.ezgateway.net"},{"hostname":"webapi.onchainex.pw","first_observed":"2026-11-05T18:05:57.557Z","first_published":"2026-11-05T19:02:12.870Z","brands":[],"dns":"resolved","resolved":["104.21.80.48","172.67.174.87"],"resolved_at":"2026-11-05T18:06:44Z","dns_checked_at":"2026-11-05T19:07:58.000Z","dns_since":"2026-11-05T19:07:58.000Z","findings":[{"id":"fpbo3izzoynzxvgh6sca6","kind":"reported_domain","summary":"Under onchainex.pw, listed by MetaMask","first_observed":"2026-11-05T18:05:57.557Z","first_published":"2026-11-05T19:02:12.870Z","source":"metamask","source_name":"MetaMask","under":"onchainex.pw"}],"url":"https://domainspoof.com/live?show=all&q=webapi.onchainex.pw"},{"hostname":"webullxmakets.com","first_observed":"2026-11-05T17:53:50.776Z","first_published":"2026-11-05T19:02:12.870Z","brands":[],"dns":"resolved","resolved":["198.251.89.144"],"resolved_at":"2026-11-05T17:56:36Z","dns_checked_at":"2026-11-05T19:07:58.000Z","dns_since":"2026-11-05T19:07:58.000Z","findings":[{"id":"fg7vyikvo6i5mukdsa5r2","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T17:53:50.776Z","first_published":"2026-11-05T19:02:12.870Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=webullxmakets.com"},{"hostname":"weryf-82533.eu.cc","first_observed":"2026-11-05T17:51:59.862Z","first_published":"2026-11-05T19:02:12.870Z","brands":[],"dns":"resolved","resolved":["104.21.41.68","172.67.189.198"],"resolved_at":"2026-11-05T17:52:42Z","dns_checked_at":"2026-11-05T19:07:58.000Z","dns_since":"2026-11-05T19:07:58.000Z","findings":[{"id":"feol22k7pdpnjwdvqjh7q","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T17:51:59.862Z","first_published":"2026-11-05T19:02:12.870Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=weryf-82533.eu.cc"},{"hostname":"www-findmy-icloud.online","first_observed":"2026-11-05T18:06:44.416Z","first_published":"2026-11-05T19:02:12.870Z","brands":[{"id":"apple","name":"Apple","url":"https://domainspoof.com/brands/apple"}],"dns":"resolved","resolved":["2.57.91.91"],"resolved_at":"2026-11-05T18:06:44Z","dns_checked_at":"2026-11-05T19:07:58.000Z","dns_since":"2026-11-05T19:07:58.000Z","findings":[{"id":"ftppi6z23ov7d6d3emrua","kind":"phishing_infrastructure","summary":"Resolved to 2.57.91.91, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T18:06:44.416Z","first_published":"2026-11-05T19:02:12.870Z","address":"2.57.91.91","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/apple"},{"hostname":"www.0b5ca4e3-3219-4b35-b984-5320e8ba98e622.crypto-polis.org","first_observed":"2026-11-05T18:36:46.331Z","first_published":"2026-11-05T19:02:12.870Z","brands":[],"dns":"resolved","resolved":["185.178.208.132","185.178.208.182"],"resolved_at":"2026-11-05T18:44:12Z","dns_checked_at":"2026-11-05T19:07:58.000Z","dns_since":"2026-11-05T19:07:58.000Z","findings":[{"id":"fbnnyvw7xyrgsfi4x34gv","kind":"reported_domain","summary":"Under crypto-polis.org, reported by PhishDestroy","first_observed":"2026-11-05T18:36:46.331Z","first_published":"2026-11-05T19:02:12.870Z","source":"phishdestroy","source_name":"PhishDestroy","under":"crypto-polis.org","source_url":"https://phishdestroy.io/domain/crypto-polis.org/"}],"url":"https://domainspoof.com/live?show=all&q=www.0b5ca4e3-3219-4b35-b984-5320e8ba98e622.crypto-polis.org"},{"hostname":"www.11st-beta.crypto-polis.org","first_observed":"2026-11-05T18:36:46.331Z","first_published":"2026-11-05T19:02:12.870Z","brands":[],"dns":"resolved","resolved":["185.178.208.132","185.178.208.182"],"resolved_at":"2026-11-05T18:44:12Z","dns_checked_at":"2026-11-05T19:07:58.000Z","dns_since":"2026-11-05T19:07:58.000Z","findings":[{"id":"f2so7eqbazmydisjdker5","kind":"reported_domain","summary":"Under crypto-polis.org, reported by PhishDestroy","first_observed":"2026-11-05T18:36:46.331Z","first_published":"2026-11-05T19:02:12.870Z","source":"phishdestroy","source_name":"PhishDestroy","under":"crypto-polis.org","source_url":"https://phishdestroy.io/domain/crypto-polis.org/"}],"url":"https://domainspoof.com/live?show=all&q=www.11st-beta.crypto-polis.org"},{"hostname":"www.11st-client.crypto-polis.org","first_observed":"2026-11-05T18:36:46.331Z","first_published":"2026-11-05T19:02:12.870Z","brands":[],"dns":"resolved","resolved":["185.178.208.132","185.178.208.182"],"resolved_at":"2026-11-05T18:44:12Z","dns_checked_at":"2026-11-05T19:07:58.000Z","dns_since":"2026-11-05T19:07:58.000Z","findings":[{"id":"fspppufcxewohh5f2cb5m","kind":"reported_domain","summary":"Under crypto-polis.org, reported by PhishDestroy","first_observed":"2026-11-05T18:36:46.331Z","first_published":"2026-11-05T19:02:12.870Z","source":"phishdestroy","source_name":"PhishDestroy","under":"crypto-polis.org","source_url":"https://phishdestroy.io/domain/crypto-polis.org/"}],"url":"https://domainspoof.com/live?show=all&q=www.11st-client.crypto-polis.org"},{"hostname":"www.247.elafure.com","first_observed":"2026-11-05T18:46:52.803Z","first_published":"2026-11-05T19:02:12.870Z","brands":[],"dns":"resolved","resolved":["163.61.188.2"],"resolved_at":"2026-11-05T18:55:56Z","dns_checked_at":"2026-11-05T19:07:58.000Z","dns_since":"2026-11-05T19:07:58.000Z","findings":[{"id":"f6qoo7wl3q2g4r6faghvk","kind":"reported_domain","summary":"Under elafure.com, listed by MetaMask","first_observed":"2026-11-05T18:46:52.803Z","first_published":"2026-11-05T19:02:12.870Z","source":"metamask","source_name":"MetaMask","under":"elafure.com"}],"url":"https://domainspoof.com/live?show=all&q=www.247.elafure.com"},{"hostname":"www.admin-test.crypto-polis.org","first_observed":"2026-11-05T17:46:36.171Z","first_published":"2026-11-05T19:02:12.870Z","brands":[],"dns":"resolved","resolved":["185.178.208.132","185.178.208.182"],"resolved_at":"2026-11-05T17:59:18Z","dns_checked_at":"2026-11-05T19:07:58.000Z","dns_since":"2026-11-05T19:07:58.000Z","findings":[{"id":"furlkc44lgawljqry4s5f","kind":"reported_domain","summary":"Under crypto-polis.org, reported by PhishDestroy","first_observed":"2026-11-05T17:46:36.171Z","first_published":"2026-11-05T19:02:12.870Z","source":"phishdestroy","source_name":"PhishDestroy","under":"crypto-polis.org","source_url":"https://phishdestroy.io/domain/crypto-polis.org/"}],"url":"https://domainspoof.com/live?show=all&q=www.admin-test.crypto-polis.org"},{"hostname":"www.daytonsholdings.hoxtonbank.com","first_observed":"2026-11-05T18:41:34.727Z","first_published":"2026-11-05T19:02:12.870Z","brands":[],"dns":"resolved","resolved":["194.36.191.196"],"resolved_at":"2026-11-05T18:41:55Z","dns_checked_at":"2026-11-05T19:07:58.000Z","dns_since":"2026-11-05T19:07:58.000Z","findings":[{"id":"fi3svb4iitrycaltb2hl7","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T18:41:34.727Z","first_published":"2026-11-05T19:02:12.870Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/www.daytonsholdings.hoxtonbank.com/"}],"url":"https://domainspoof.com/live?show=all&q=www.daytonsholdings.hoxtonbank.com"},{"hostname":"www.drone.crypto-polis.org","first_observed":"2026-11-05T18:21:18.053Z","first_published":"2026-11-05T19:02:12.870Z","brands":[],"dns":"resolved","resolved":["185.178.208.132","185.178.208.182"],"resolved_at":"2026-11-05T18:34:52Z","dns_checked_at":"2026-11-05T19:07:58.000Z","dns_since":"2026-11-05T19:07:58.000Z","findings":[{"id":"fmd5p76ww2ctqcztrxb3p","kind":"reported_domain","summary":"Under crypto-polis.org, reported by PhishDestroy","first_observed":"2026-11-05T18:21:18.053Z","first_published":"2026-11-05T19:02:12.870Z","source":"phishdestroy","source_name":"PhishDestroy","under":"crypto-polis.org","source_url":"https://phishdestroy.io/domain/crypto-polis.org/"}],"url":"https://domainspoof.com/live?show=all&q=www.drone.crypto-polis.org"},{"hostname":"www.ent.hubcert.com.br","first_observed":"2026-11-05T18:00:49.708Z","first_published":"2026-11-05T19:02:12.870Z","brands":[],"dns":"resolved","resolved":["162.240.108.214"],"resolved_at":"2026-11-05T18:01:06Z","dns_checked_at":"2026-11-05T19:07:58.000Z","dns_since":"2026-11-05T19:07:58.000Z","findings":[{"id":"fh7nf4o3k23bbpbt3mblw","kind":"reported_domain","summary":"Under hubcert.com.br, reported by PhishDestroy","first_observed":"2026-11-05T18:00:49.708Z","first_published":"2026-11-05T19:02:12.870Z","source":"phishdestroy","source_name":"PhishDestroy","under":"hubcert.com.br","source_url":"https://phishdestroy.io/domain/hubcert.com.br/"}],"url":"https://domainspoof.com/live?show=all&q=www.ent.hubcert.com.br"},{"hostname":"www.leagueoflegends2.ru","first_observed":"2026-11-05T17:57:42.128Z","first_published":"2026-11-05T19:02:12.870Z","brands":[{"id":"riot-games","name":"Riot Games","url":"https://domainspoof.com/brands/riot-games"}],"dns":"resolved","resolved":["95.163.244.138"],"resolved_at":"2026-11-05T19:07:58Z","dns_checked_at":"2026-11-05T19:07:58.000Z","dns_since":"2026-11-05T19:07:58.000Z","findings":[{"id":"fnrhsniscxkofb5pg25yx","kind":"phishing_infrastructure","summary":"Resolved to 95.163.244.138, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T17:57:42.128Z","first_published":"2026-11-05T19:02:12.870Z","address":"95.163.244.138","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/riot-games"},{"hostname":"www.lifelock.tech","first_observed":"2026-11-05T18:06:45.438Z","first_published":"2026-11-05T19:02:12.870Z","brands":[{"id":"norton","name":"Norton","url":"https://domainspoof.com/brands/norton"}],"dns":"resolved","resolved":["2.57.91.91"],"resolved_at":"2026-11-05T19:07:58Z","dns_checked_at":"2026-11-05T19:07:58.000Z","dns_since":"2026-11-05T19:07:58.000Z","findings":[{"id":"fzanq7bct4goxzh5hchnv","kind":"phishing_infrastructure","summary":"Resolved to 2.57.91.91, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T18:06:45.438Z","first_published":"2026-11-05T19:02:12.870Z","address":"2.57.91.91","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/norton"},{"hostname":"www.livraison-chronopost.kl.com.ua","first_observed":"2026-11-05T18:23:53.068Z","first_published":"2026-11-05T19:02:12.870Z","brands":[{"id":"chronopost","name":"Chronopost","url":"https://domainspoof.com/brands/chronopost"}],"dns":"resolved","resolved":["5.79.66.145"],"resolved_at":"2026-11-05T19:07:58Z","dns_checked_at":"2026-11-05T19:07:58.000Z","dns_since":"2026-11-05T19:07:58.000Z","findings":[{"id":"fxol7g26deaj7ejwruv7q","kind":"phishing_infrastructure","summary":"Resolved to 5.79.66.145, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T18:23:53.068Z","first_published":"2026-11-05T19:02:12.870Z","address":"5.79.66.145","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/chronopost"},{"hostname":"www.minecraft-horizon.com","first_observed":"2026-11-05T18:06:45.575Z","first_published":"2026-11-05T19:02:12.870Z","brands":[{"id":"minecraft","name":"Minecraft","url":"https://domainspoof.com/brands/minecraft"}],"dns":"resolved","resolved":["188.165.53.185"],"resolved_at":"2026-11-05T19:07:58Z","dns_checked_at":"2026-11-05T19:07:58.000Z","dns_since":"2026-11-05T19:07:58.000Z","findings":[{"id":"f3jk3gsm7u2qwnass7bkn","kind":"phishing_infrastructure","summary":"Resolved to 188.165.53.185, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T18:06:45.575Z","first_published":"2026-11-05T19:02:12.870Z","address":"188.165.53.185","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/minecraft"},{"hostname":"www.morooms.com","first_observed":"2026-11-05T18:05:57.557Z","first_published":"2026-11-05T19:02:12.870Z","brands":[],"dns":"resolved","resolved":["27.254.86.122"],"resolved_at":"2026-11-05T18:06:45Z","dns_checked_at":"2026-11-05T19:07:58.000Z","dns_since":"2026-11-05T19:07:58.000Z","findings":[{"id":"fjvmb7pranp4fbfjjubdz","kind":"reported_domain","summary":"Under morooms.com, reported by PhishDestroy","first_observed":"2026-11-05T18:05:57.557Z","first_published":"2026-11-05T19:02:12.870Z","source":"phishdestroy","source_name":"PhishDestroy","under":"morooms.com","source_url":"https://phishdestroy.io/domain/morooms.com/"}],"url":"https://domainspoof.com/live?show=all&q=www.morooms.com"},{"hostname":"www.phanextension.app","first_observed":"2026-11-05T17:57:01.210Z","first_published":"2026-11-05T19:02:12.870Z","brands":[],"dns":"resolved","resolved":["185.158.133.1"],"resolved_at":"2026-11-06T05:01:21Z","dns_checked_at":"2026-11-05T19:07:58.000Z","dns_since":"2026-11-05T19:07:58.000Z","findings":[{"id":"f3svea4zggx343tfu24qt","kind":"reported_domain","summary":"Under phanextension.app, listed by MetaMask","first_observed":"2026-11-05T17:57:01.210Z","first_published":"2026-11-05T19:02:12.870Z","source":"metamask","source_name":"MetaMask","under":"phanextension.app"}],"url":"https://domainspoof.com/live?show=all&q=www.phanextension.app"},{"hostname":"www.picsartsapk.com.in","first_observed":"2026-11-05T17:51:59.862Z","first_published":"2026-11-05T19:02:12.870Z","brands":[],"dns":"resolved","resolved":["104.21.89.52","172.67.188.33"],"resolved_at":"2026-11-05T17:52:42Z","dns_checked_at":"2026-11-05T19:07:58.000Z","dns_since":"2026-11-05T19:07:58.000Z","findings":[{"id":"fedo6wdakraa2gdrgagfe","kind":"reported_domain","summary":"Under picsartsapk.com.in, listed by MetaMask","first_observed":"2026-11-05T17:51:59.862Z","first_published":"2026-11-05T19:02:12.870Z","source":"metamask","source_name":"MetaMask","under":"picsartsapk.com.in"}],"url":"https://domainspoof.com/live?show=all&q=www.picsartsapk.com.in"},{"hostname":"www.protonvpn.rest","first_observed":"2026-11-05T18:44:13.171Z","first_published":"2026-11-05T19:02:12.870Z","brands":[{"id":"proton","name":"Proton","url":"https://domainspoof.com/brands/proton"}],"dns":"resolved","resolved":["172.232.24.161","172.232.24.235","172.234.25.42"],"resolved_at":"2026-11-05T19:07:58Z","dns_checked_at":"2026-11-05T19:07:58.000Z","dns_since":"2026-11-05T19:07:58.000Z","findings":[{"id":"fnskgcrnf7jy5vtrlrugb","kind":"phishing_infrastructure","summary":"Resolved to 172.232.24.161, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T18:44:13.171Z","first_published":"2026-11-05T19:02:12.870Z","address":"172.232.24.161","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/proton"},{"hostname":"www.redebairro-ifood.com.br","first_observed":"2026-11-05T18:35:26.562Z","first_published":"2026-11-05T19:02:12.870Z","brands":[{"id":"ifood","name":"iFood","url":"https://domainspoof.com/brands/ifood"}],"dns":"resolved","resolved":["200.160.2.95"],"resolved_at":"2026-11-05T19:07:58Z","dns_checked_at":"2026-11-05T19:07:58.000Z","dns_since":"2026-11-05T19:07:58.000Z","findings":[{"id":"f7wl64xkpayupkxjpprty","kind":"phishing_infrastructure","summary":"Resolved to 200.160.2.95, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T18:35:26.562Z","first_published":"2026-11-05T19:02:12.870Z","address":"200.160.2.95","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/ifood"},{"hostname":"www.scoaladejoaca.ro","first_observed":"2026-11-05T18:41:34.727Z","first_published":"2026-11-05T19:02:12.870Z","brands":[],"dns":"resolved","resolved":["188.34.142.87"],"resolved_at":"2026-11-05T18:41:55Z","dns_checked_at":"2026-11-05T19:07:58.000Z","dns_since":"2026-11-05T19:07:58.000Z","findings":[{"id":"frkncobpcttolidwenmdv","kind":"reported_domain","summary":"Under scoaladejoaca.ro, reported by PhishDestroy","first_observed":"2026-11-05T18:41:34.727Z","first_published":"2026-11-05T19:02:12.870Z","source":"phishdestroy","source_name":"PhishDestroy","under":"scoaladejoaca.ro","source_url":"https://phishdestroy.io/domain/scoaladejoaca.ro/"}],"url":"https://domainspoof.com/live?show=all&q=www.scoaladejoaca.ro"},{"hostname":"www.sharkcatsol.xyz","first_observed":"2026-11-05T18:41:34.727Z","first_published":"2026-11-05T19:02:12.870Z","brands":[],"dns":"resolved","resolved":["104.21.16.206","172.67.215.235"],"resolved_at":"2026-11-05T18:41:55Z","dns_checked_at":"2026-11-05T19:07:58.000Z","dns_since":"2026-11-05T19:07:58.000Z","findings":[{"id":"fxzs634yomojuha3fqglx","kind":"reported_domain","summary":"Under sharkcatsol.xyz, listed by MetaMask","first_observed":"2026-11-05T18:41:34.727Z","first_published":"2026-11-05T19:02:12.870Z","source":"metamask","source_name":"MetaMask","under":"sharkcatsol.xyz"}],"url":"https://domainspoof.com/live?show=all&q=www.sharkcatsol.xyz"},{"hostname":"www.starknet.lt","first_observed":"2026-11-05T18:06:45.879Z","first_published":"2026-11-05T19:02:12.870Z","brands":[{"id":"starknet","name":"Starknet","url":"https://domainspoof.com/brands/starknet"}],"dns":"resolved","resolved":["2.57.91.91"],"resolved_at":"2026-11-05T19:07:58Z","dns_checked_at":"2026-11-05T19:07:58.000Z","dns_since":"2026-11-05T19:07:58.000Z","findings":[{"id":"fj7q6olloqfgrz7kspcmm","kind":"phishing_infrastructure","summary":"Resolved to 2.57.91.91, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T18:06:45.879Z","first_published":"2026-11-05T19:02:12.870Z","address":"2.57.91.91","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/starknet"},{"hostname":"www.steamsupport.info","first_observed":"2026-11-05T17:57:01.210Z","first_published":"2026-11-05T19:02:12.870Z","brands":[],"dns":"resolved","resolved":["198.49.23.144","198.49.23.145","198.185.159.144","198.185.159.145"],"resolved_at":"2026-11-05T17:57:42Z","dns_checked_at":"2026-11-05T19:07:58.000Z","dns_since":"2026-11-05T19:07:58.000Z","findings":[{"id":"fjwygap2s6iav4h5vunj4","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T17:57:01.210Z","first_published":"2026-11-05T19:02:12.870Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/www.steamsupport.info/"}],"url":"https://domainspoof.com/live?show=all&q=www.steamsupport.info"},{"hostname":"www.supplier.crypto-polis.org","first_observed":"2026-11-05T17:46:36.171Z","first_published":"2026-11-05T19:02:12.870Z","brands":[],"dns":"resolved","resolved":["185.178.208.132","185.178.208.182"],"resolved_at":"2026-11-05T17:59:20Z","dns_checked_at":"2026-11-05T19:07:58.000Z","dns_since":"2026-11-05T19:07:58.000Z","findings":[{"id":"f6klrksjvdlnz4mmfvpnd","kind":"reported_domain","summary":"Under crypto-polis.org, reported by PhishDestroy","first_observed":"2026-11-05T17:46:36.171Z","first_published":"2026-11-05T19:02:12.870Z","source":"phishdestroy","source_name":"PhishDestroy","under":"crypto-polis.org","source_url":"https://phishdestroy.io/domain/crypto-polis.org/"}],"url":"https://domainspoof.com/live?show=all&q=www.supplier.crypto-polis.org"},{"hostname":"www.teams.microsofls.com","first_observed":"2026-11-05T17:57:01.210Z","first_published":"2026-11-05T19:02:12.870Z","brands":[],"dns":"resolved","resolved":["64.95.12.148"],"resolved_at":"2026-11-05T17:57:42Z","dns_checked_at":"2026-11-05T19:07:58.000Z","dns_since":"2026-11-05T19:07:58.000Z","findings":[{"id":"f2ow54qdvizo2es4xiwoj","kind":"reported_domain","summary":"Under microsofls.com, listed by MetaMask","first_observed":"2026-11-05T17:57:01.210Z","first_published":"2026-11-05T19:02:12.870Z","source":"metamask","source_name":"MetaMask","under":"microsofls.com"}],"url":"https://domainspoof.com/live?show=all&q=www.teams.microsofls.com"},{"hostname":"www.trustwallet-com.cfd","first_observed":"2026-11-05T18:06:45.991Z","first_published":"2026-11-05T19:02:12.870Z","brands":[{"id":"trust-wallet","name":"Trust Wallet","url":"https://domainspoof.com/brands/trust-wallet"}],"dns":"resolved","resolved":["172.232.24.161","172.232.24.235","172.234.25.42"],"resolved_at":"2026-11-05T19:07:58Z","dns_checked_at":"2026-11-05T19:07:58.000Z","dns_since":"2026-11-05T19:07:58.000Z","findings":[{"id":"fdiz4oz6vbjzkpjv5h7ib","kind":"phishing_infrastructure","summary":"Resolved to 172.232.24.161, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T18:06:45.991Z","first_published":"2026-11-05T19:02:12.870Z","address":"172.232.24.161","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/trust-wallet"},{"hostname":"www.vapedragonsquad.co.za","first_observed":"2026-11-05T17:57:01.210Z","first_published":"2026-11-05T19:02:12.870Z","brands":[],"dns":"resolved","resolved":["41.72.149.125"],"resolved_at":"2026-11-05T17:57:42Z","dns_checked_at":"2026-11-05T19:07:58.000Z","dns_since":"2026-11-05T19:07:58.000Z","findings":[{"id":"fl25ehni7nbcn3j23dg3v","kind":"reported_domain","summary":"Under vapedragonsquad.co.za, listed by CERT Polska","first_observed":"2026-11-05T17:57:01.210Z","first_published":"2026-11-05T19:02:12.870Z","source":"cert_polska","source_name":"CERT Polska","under":"vapedragonsquad.co.za"}],"url":"https://domainspoof.com/live?show=all&q=www.vapedragonsquad.co.za"},{"hostname":"www.webhook.zenavlico.cyou","first_observed":"2026-11-05T17:46:36.171Z","first_published":"2026-11-05T19:02:12.870Z","brands":[],"dns":"resolved","resolved":["95.85.244.13"],"resolved_at":"2026-11-05T17:59:21Z","dns_checked_at":"2026-11-05T19:07:58.000Z","dns_since":"2026-11-05T19:07:58.000Z","findings":[{"id":"flcnn6767bea4k4vfkd2n","kind":"reported_domain","summary":"Under zenavlico.cyou, listed by CERT Polska","first_observed":"2026-11-05T17:46:36.171Z","first_published":"2026-11-05T19:02:12.870Z","source":"cert_polska","source_name":"CERT Polska","under":"zenavlico.cyou"}],"url":"https://domainspoof.com/live?show=all&q=www.webhook.zenavlico.cyou"},{"hostname":"www.www-findmy-icloud.online","first_observed":"2026-11-05T18:06:46.211Z","first_published":"2026-11-05T19:02:12.870Z","brands":[{"id":"apple","name":"Apple","url":"https://domainspoof.com/brands/apple"}],"dns":"not_found","resolved":["2.57.91.91"],"resolved_at":"2026-11-05T18:06:46Z","dns_checked_at":"2026-11-06T11:27:34.000Z","findings":[{"id":"febd2applqqpcyg3ifwtd","kind":"phishing_infrastructure","summary":"Resolved to 2.57.91.91, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T18:06:46.211Z","first_published":"2026-11-05T19:02:12.870Z","address":"2.57.91.91","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/apple"},{"hostname":"www.ziropellet.store","first_observed":"2026-11-05T18:46:52.803Z","first_published":"2026-11-05T19:02:12.870Z","brands":[],"dns":"resolved","resolved":["66.235.200.251"],"resolved_at":"2026-11-05T18:55:57Z","dns_checked_at":"2026-11-05T19:07:58.000Z","dns_since":"2026-11-05T19:07:58.000Z","findings":[{"id":"fbqa3tigpbgjbh5ilxb3d","kind":"reported_domain","summary":"Under ziropellet.store, listed by CERT Polska","first_observed":"2026-11-05T18:46:52.803Z","first_published":"2026-11-05T19:02:12.870Z","source":"cert_polska","source_name":"CERT Polska","under":"ziropellet.store"}],"url":"https://domainspoof.com/live?show=all&q=www.ziropellet.store"},{"hostname":"www.zoomcommercesupport.com","first_observed":"2026-11-05T18:11:07.120Z","first_published":"2026-11-05T19:02:12.870Z","brands":[],"dns":"resolved","resolved":["192.185.52.133"],"resolved_at":"2026-11-05T18:11:59Z","dns_checked_at":"2026-11-05T19:07:58.000Z","dns_since":"2026-11-05T19:07:58.000Z","findings":[{"id":"fx4vcz5rlh2kdypo77cjv","kind":"reported_domain","summary":"Under zoomcommercesupport.com, listed by MetaMask","first_observed":"2026-11-05T18:11:07.120Z","first_published":"2026-11-05T19:02:12.870Z","source":"metamask","source_name":"MetaMask","under":"zoomcommercesupport.com"}],"url":"https://domainspoof.com/live?show=all&q=www.zoomcommercesupport.com"},{"hostname":"wwwlpko.terminaid.be","first_observed":"2026-11-05T18:20:10.932Z","first_published":"2026-11-05T19:02:12.870Z","brands":[],"dns":"resolved","resolved":["50.6.193.115"],"resolved_at":"2026-11-05T18:22:07Z","dns_checked_at":"2026-11-05T19:07:58.000Z","dns_since":"2026-11-05T19:07:58.000Z","findings":[{"id":"fzreatuusos4zvr56w7wv","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T18:20:10.932Z","first_published":"2026-11-05T19:02:12.870Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=wwwlpko.terminaid.be"},{"hostname":"xmamaill.top","first_observed":"2026-11-05T17:53:50.776Z","first_published":"2026-11-05T19:02:12.870Z","brands":[],"dns":"resolved","resolved":["104.21.61.32","172.67.205.166","2606:4700:3032::6815:3d20","2606:4700:3037::ac43:cda6"],"resolved_at":"2026-11-05T17:56:36Z","dns_checked_at":"2026-11-05T19:07:58.000Z","dns_since":"2026-11-05T19:07:58.000Z","findings":[{"id":"foiq67ezs73g2pe552onm","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T17:53:50.776Z","first_published":"2026-11-05T19:02:12.870Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=xmamaill.top"},{"hostname":"zama-votes.pages.dev","first_observed":"2026-11-05T17:53:50.776Z","first_published":"2026-11-05T19:02:12.870Z","brands":[],"dns":"resolved","resolved":["172.66.44.139","172.66.47.117","2606:4700:310c::ac42:2c8b","2606:4700:310c::ac42:2f75"],"resolved_at":"2026-11-05T17:56:36Z","dns_checked_at":"2026-11-05T19:07:58.000Z","dns_since":"2026-11-05T19:07:58.000Z","findings":[{"id":"f7igiopealmnp5mgx4glp","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T17:53:50.776Z","first_published":"2026-11-05T19:02:12.870Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=zama-votes.pages.dev"},{"hostname":"zenithswap.io","first_observed":"2026-11-05T18:05:57.557Z","first_published":"2026-11-05T19:02:12.870Z","brands":[],"dns":"resolved","resolved":["104.21.9.40","172.67.141.113"],"resolved_at":"2026-11-06T07:00:39Z","dns_checked_at":"2026-11-05T19:07:58.000Z","dns_since":"2026-11-05T19:07:58.000Z","findings":[{"id":"feoueonx3cwinmvxu7nce","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T18:05:57.557Z","first_published":"2026-11-05T19:02:12.870Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/zenithswap.io/"}],"url":"https://domainspoof.com/live?show=all&q=zenithswap.io"},{"hostname":"zenturaki-de.live","first_observed":"2026-11-05T18:46:52.803Z","first_published":"2026-11-05T19:02:12.870Z","brands":[],"dns":"resolved","resolved":["104.21.32.103","172.67.185.140"],"resolved_at":"2026-11-05T18:55:59Z","dns_checked_at":"2026-11-05T19:07:58.000Z","dns_since":"2026-11-05T19:07:58.000Z","findings":[{"id":"fa3rw47tpptcqtdkszv6o","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T18:46:52.803Z","first_published":"2026-11-05T19:02:12.870Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=zenturaki-de.live"},{"hostname":"zoomcommercesupport.com","first_observed":"2026-11-05T18:11:07.120Z","first_published":"2026-11-05T19:02:12.870Z","brands":[],"dns":"resolved","resolved":["192.185.52.133"],"resolved_at":"2026-11-05T18:12:00Z","dns_checked_at":"2026-11-05T19:07:58.000Z","dns_since":"2026-11-05T19:07:58.000Z","findings":[{"id":"fzdfp53wld6nyzktqjkwm","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T18:11:07.120Z","first_published":"2026-11-05T19:02:12.870Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=zoomcommercesupport.com"},{"hostname":"atamairlines.com","first_observed":"2026-11-05T17:53:28.000Z","first_published":"2026-11-05T17:53:28.000Z","brands":[{"id":"latam-airlines","name":"LATAM Airlines","url":"https://domainspoof.com/brands/latam-airlines"}],"dns":"resolved","resolved":["77.247.182.247"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of latamairlines.com (a dropped letter), resolved to 77.247.182.247, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T17:53:28.000Z","first_published":"2026-11-05T17:53:28.000Z","of":"latamairlines.com","spelling":"omission","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"77.247.182.247","flagged_at":"2026-11-05T17:53:28Z"}]}],"url":"https://domainspoof.com/brands/latam-airlines"},{"hostname":"gooogle.com.vn","first_observed":"2026-11-05T17:53:28.000Z","first_published":"2026-11-05T17:53:28.000Z","brands":[{"id":"google","name":"Google","url":"https://domainspoof.com/brands/google"}],"dns":"resolved","resolved":["206.206.126.131"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of google.com (a doubled letter), resolved to 206.206.126.131, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T17:53:28.000Z","first_published":"2026-11-05T17:53:28.000Z","of":"google.com","spelling":"repetition","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"206.206.126.131","flagged_at":"2026-11-05T17:53:28Z"}]}],"url":"https://domainspoof.com/brands/google"},{"hostname":"igau.com.br","first_observed":"2026-11-05T17:53:28.000Z","first_published":"2026-11-05T17:53:28.000Z","brands":[{"id":"itau","name":"Itaú","url":"https://domainspoof.com/brands/itau"}],"dns":"resolved","resolved":["2.57.91.91"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of itau.com.br (a letter from a neighbouring key), resolved to 2.57.91.91, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T17:53:28.000Z","first_published":"2026-11-05T17:53:28.000Z","of":"itau.com.br","spelling":"adjacent_key","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"2.57.91.91","flagged_at":"2026-11-05T17:53:28Z"}]}],"url":"https://domainspoof.com/brands/itau"},{"hostname":"iidl.co.uk","first_observed":"2026-11-05T17:53:28.000Z","first_published":"2026-11-05T17:53:28.000Z","brands":[{"id":"lidl","name":"Lidl","url":"https://domainspoof.com/brands/lidl"}],"dns":"resolved","resolved":["213.171.195.105"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of lidl.com (similar-looking characters), resolved to 213.171.195.105, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T17:53:28.000Z","first_published":"2026-11-05T17:53:28.000Z","of":"lidl.com","spelling":"homoglyph","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"213.171.195.105","flagged_at":"2026-11-05T17:53:28Z"}]}],"url":"https://domainspoof.com/brands/lidl"},{"hostname":"jmorganchase.com","first_observed":"2026-11-05T17:53:28.000Z","first_published":"2026-11-05T17:53:28.000Z","brands":[{"id":"chase","name":"Chase","url":"https://domainspoof.com/brands/chase"}],"dns":"resolved","resolved":["69.162.80.57"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of jpmorganchase.com (a dropped letter), resolved to 69.162.80.57, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T17:53:28.000Z","first_published":"2026-11-05T17:53:28.000Z","of":"jpmorganchase.com","spelling":"omission","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"69.162.80.57","flagged_at":"2026-11-05T17:53:28Z"}]}],"url":"https://domainspoof.com/brands/chase"},{"hostname":"jpmmorganchase.com","first_observed":"2026-11-05T17:53:28.000Z","first_published":"2026-11-05T17:53:28.000Z","brands":[{"id":"chase","name":"Chase","url":"https://domainspoof.com/brands/chase"}],"dns":"resolved","resolved":["77.247.182.244"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of jpmorganchase.com (a doubled letter), resolved to 77.247.182.244, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T17:53:28.000Z","first_published":"2026-11-05T17:53:28.000Z","of":"jpmorganchase.com","spelling":"repetition","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"77.247.182.244","flagged_at":"2026-11-05T17:53:28Z"}]}],"url":"https://domainspoof.com/brands/chase"},{"hostname":"jpmorgancase.com","first_observed":"2026-11-05T17:53:28.000Z","first_published":"2026-11-05T17:53:28.000Z","brands":[{"id":"chase","name":"Chase","url":"https://domainspoof.com/brands/chase"}],"dns":"resolved","resolved":["77.247.182.243"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of jpmorganchase.com (a dropped letter), resolved to 77.247.182.243, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T17:53:28.000Z","first_published":"2026-11-05T17:53:28.000Z","of":"jpmorganchase.com","spelling":"omission","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"77.247.182.243","flagged_at":"2026-11-05T17:53:28Z"}]}],"url":"https://domainspoof.com/brands/chase"},{"hostname":"jtexress.ph","first_observed":"2026-11-05T17:53:28.000Z","first_published":"2026-11-05T17:53:28.000Z","brands":[{"id":"j-and-t-express","name":"J&T Express","url":"https://domainspoof.com/brands/j-and-t-express"}],"dns":"resolved","resolved":["212.92.105.200"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of jtexpress.com (a dropped letter), resolved to 212.92.105.200, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T17:53:28.000Z","first_published":"2026-11-05T17:53:28.000Z","of":"jtexpress.com","spelling":"omission","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"212.92.105.200","flagged_at":"2026-11-05T17:53:28Z"}]}],"url":"https://domainspoof.com/brands/j-and-t-express"},{"hostname":"kafland.de","first_observed":"2026-11-05T17:53:28.000Z","first_published":"2026-11-05T17:53:28.000Z","brands":[{"id":"kaufland","name":"Kaufland","url":"https://domainspoof.com/brands/kaufland"}],"dns":"resolved","resolved":["212.7.194.67"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of kaufland.de (a dropped letter), resolved to 212.7.194.67, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T17:53:28.000Z","first_published":"2026-11-05T17:53:28.000Z","of":"kaufland.de","spelling":"omission","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"212.7.194.67","flagged_at":"2026-11-05T17:53:28Z"}]}],"url":"https://domainspoof.com/brands/kaufland"},{"hostname":"kleinannzeigen.net","first_observed":"2026-11-05T17:53:28.000Z","first_published":"2026-11-05T17:53:28.000Z","brands":[{"id":"kleinanzeigen","name":"Kleinanzeigen","url":"https://domainspoof.com/brands/kleinanzeigen"}],"dns":"resolved","resolved":["196.251.122.90"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of kleinanzeigen.de (a doubled letter), resolved to 196.251.122.90 on Spamhaus DROP","first_observed":"2026-11-05T17:53:28.000Z","first_published":"2026-11-05T17:53:28.000Z","of":"kleinanzeigen.de","spelling":"repetition","found_by":"dns_sweep","listings":[{"kind":"address","source":"spamhaus_drop","list_name":"Spamhaus DROP","address":"196.251.122.90","flagged_at":"2026-11-05T17:53:28Z"}]}],"url":"https://domainspoof.com/brands/kleinanzeigen"},{"hostname":"klibca.com","first_observed":"2026-11-05T17:53:28.000Z","first_published":"2026-11-05T17:53:28.000Z","brands":[{"id":"bank-central-asia","name":"Bank Central Asia","url":"https://domainspoof.com/brands/bank-central-asia"}],"dns":"resolved","resolved":["212.7.194.68"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of klikbca.com (a dropped letter), resolved to 212.7.194.68, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T17:53:28.000Z","first_published":"2026-11-05T17:53:28.000Z","of":"klikbca.com","spelling":"omission","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"212.7.194.68","flagged_at":"2026-11-05T17:53:28Z"}]}],"url":"https://domainspoof.com/brands/bank-central-asia"},{"hostname":"kraken.biz","first_observed":"2026-11-05T17:53:28.000Z","first_published":"2026-11-05T17:53:28.000Z","brands":[{"id":"kraken","name":"Kraken","url":"https://domainspoof.com/brands/kraken"}],"dns":"resolved","resolved":["208.115.249.238"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of kraken.com (same name, other ending), resolved to 208.115.249.238, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T17:53:28.000Z","first_published":"2026-11-05T17:53:28.000Z","of":"kraken.com","spelling":"tld","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"208.115.249.238","flagged_at":"2026-11-05T17:53:28Z"}]}],"url":"https://domainspoof.com/brands/kraken"},{"hostname":"kraken.ltd","first_observed":"2026-11-05T17:53:28.000Z","first_published":"2026-11-05T17:53:28.000Z","brands":[{"id":"kraken","name":"Kraken","url":"https://domainspoof.com/brands/kraken"}],"dns":"no_address","resolved":[],"findings":[{"kind":"lookalike","summary":"Registered lookalike of kraken.com (same name, other ending), listed by MetaMask","first_observed":"2026-11-05T17:53:28.000Z","first_published":"2026-11-05T17:53:28.000Z","of":"kraken.com","spelling":"tld","found_by":"dns_sweep","listings":[{"kind":"reported","source":"metamask","source_name":"MetaMask","host":"kraken.ltd","flagged_at":"2026-11-05T17:53:28Z"}]}],"url":"https://domainspoof.com/brands/kraken"},{"hostname":"laposste.net","first_observed":"2026-11-05T17:53:28.000Z","first_published":"2026-11-05T17:53:28.000Z","brands":[{"id":"la-poste","name":"La Poste","url":"https://domainspoof.com/brands/la-poste"}],"dns":"resolved","resolved":["74.63.219.252"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of laposte.fr (a doubled letter), resolved to 74.63.219.252, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T17:53:28.000Z","first_published":"2026-11-05T17:53:28.000Z","of":"laposte.fr","spelling":"repetition","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"74.63.219.252","flagged_at":"2026-11-05T17:53:28Z"}]}],"url":"https://domainspoof.com/brands/la-poste"},{"hostname":"laposye.net","first_observed":"2026-11-05T17:53:28.000Z","first_published":"2026-11-05T17:53:28.000Z","brands":[{"id":"la-poste","name":"La Poste","url":"https://domainspoof.com/brands/la-poste"}],"dns":"resolved","resolved":["199.193.114.102"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of laposte.fr (a letter from a neighbouring key), resolved to 199.193.114.102, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T17:53:28.000Z","first_published":"2026-11-05T17:53:28.000Z","of":"laposte.fr","spelling":"adjacent_key","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"199.193.114.102","flagged_at":"2026-11-05T17:53:28Z"}]}],"url":"https://domainspoof.com/brands/la-poste"},{"hostname":"leageoflegends.com","first_observed":"2026-11-05T17:53:28.000Z","first_published":"2026-11-05T17:53:28.000Z","brands":[{"id":"riot-games","name":"Riot Games","url":"https://domainspoof.com/brands/riot-games"}],"dns":"resolved","resolved":["212.7.194.53"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of leagueoflegends.com (a dropped letter), resolved to 212.7.194.53, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T17:53:28.000Z","first_published":"2026-11-05T17:53:28.000Z","of":"leagueoflegends.com","spelling":"omission","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"212.7.194.53","flagged_at":"2026-11-05T17:53:28Z"}]}],"url":"https://domainspoof.com/brands/riot-games"},{"hostname":"leaugeoflegends.com","first_observed":"2026-11-05T17:53:28.000Z","first_published":"2026-11-05T17:53:28.000Z","brands":[{"id":"riot-games","name":"Riot Games","url":"https://domainspoof.com/brands/riot-games"}],"dns":"resolved","resolved":["78.157.209.171"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of leagueoflegends.com (two letters swapped), resolved to 78.157.209.171, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T17:53:28.000Z","first_published":"2026-11-05T17:53:28.000Z","of":"leagueoflegends.com","spelling":"transposition","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"78.157.209.171","flagged_at":"2026-11-05T17:53:28Z"}]}],"url":"https://domainspoof.com/brands/riot-games"},{"hostname":"lexisnexix.com","first_observed":"2026-11-05T17:53:28.000Z","first_published":"2026-11-05T17:53:28.000Z","brands":[{"id":"lexisnexis","name":"LexisNexis","url":"https://domainspoof.com/brands/lexisnexis"}],"dns":"resolved","resolved":["212.7.194.67"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of lexisnexis.com (a letter from a neighbouring key), resolved to 212.7.194.67, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T17:53:28.000Z","first_published":"2026-11-05T17:53:28.000Z","of":"lexisnexis.com","spelling":"adjacent_key","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"212.7.194.67","flagged_at":"2026-11-05T17:53:28Z"}]}],"url":"https://domainspoof.com/brands/lexisnexis"},{"hostname":"lfthansa.com","first_observed":"2026-11-05T17:53:28.000Z","first_published":"2026-11-05T17:53:28.000Z","brands":[{"id":"lufthansa","name":"Lufthansa","url":"https://domainspoof.com/brands/lufthansa"}],"dns":"resolved","resolved":["69.162.80.58"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of lufthansa.com (a dropped letter), resolved to 69.162.80.58, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T17:53:28.000Z","first_published":"2026-11-05T17:53:28.000Z","of":"lufthansa.com","spelling":"omission","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"69.162.80.58","flagged_at":"2026-11-05T17:53:28Z"}]}],"url":"https://domainspoof.com/brands/lufthansa"},{"hostname":"licl.me","first_observed":"2026-11-05T17:53:28.000Z","first_published":"2026-11-05T17:53:28.000Z","brands":[{"id":"lidl","name":"Lidl","url":"https://domainspoof.com/brands/lidl"}],"dns":"resolved","resolved":["64.120.31.120"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of lidl.com (a letter from a neighbouring key), resolved to 64.120.31.120, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T17:53:28.000Z","first_published":"2026-11-05T17:53:28.000Z","of":"lidl.com","spelling":"adjacent_key","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"64.120.31.120","flagged_at":"2026-11-05T17:53:28Z"}]}],"url":"https://domainspoof.com/brands/lidl"},{"hostname":"liel.fr","first_observed":"2026-11-05T17:53:28.000Z","first_published":"2026-11-05T17:53:28.000Z","brands":[{"id":"lidl","name":"Lidl","url":"https://domainspoof.com/brands/lidl"}],"dns":"resolved","resolved":["46.105.57.169"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of lidl.com (a letter from a neighbouring key), resolved to 46.105.57.169, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T17:53:28.000Z","first_published":"2026-11-05T17:53:28.000Z","of":"lidl.com","spelling":"adjacent_key","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"46.105.57.169","flagged_at":"2026-11-05T17:53:28Z"}]}],"url":"https://domainspoof.com/brands/lidl"},{"hostname":"limkedin.com","first_observed":"2026-11-05T17:53:28.000Z","first_published":"2026-11-05T17:53:28.000Z","brands":[{"id":"linkedin","name":"LinkedIn","url":"https://domainspoof.com/brands/linkedin"}],"dns":"resolved","resolved":["212.92.104.122"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of linkedin.com (a letter from a neighbouring key), resolved to 212.92.104.122, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T17:53:28.000Z","first_published":"2026-11-05T17:53:28.000Z","of":"linkedin.com","spelling":"adjacent_key","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"212.92.104.122","flagged_at":"2026-11-05T17:53:28Z"}]}],"url":"https://domainspoof.com/brands/linkedin"},{"hostname":"linke-din.com","first_observed":"2026-11-05T17:53:28.000Z","first_published":"2026-11-05T17:53:28.000Z","brands":[{"id":"linkedin","name":"LinkedIn","url":"https://domainspoof.com/brands/linkedin"}],"dns":"resolved","resolved":["216.245.213.78"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of linkedin.com (an added hyphen), resolved to 216.245.213.78, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T17:53:28.000Z","first_published":"2026-11-05T17:53:28.000Z","of":"linkedin.com","spelling":"hyphen","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"216.245.213.78","flagged_at":"2026-11-05T17:53:28Z"}]}],"url":"https://domainspoof.com/brands/linkedin"},{"hostname":"linker-in.com","first_observed":"2026-11-05T17:53:28.000Z","first_published":"2026-11-05T17:53:28.000Z","brands":[{"id":"linkedin","name":"LinkedIn","url":"https://domainspoof.com/brands/linkedin"}],"dns":"resolved","resolved":["202.168.180.22","202.168.180.23","202.168.180.24","202.168.180.25","202.168.180.26","202.168.180.27","202.168.180.28","202.168.180.29"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of linked-in.fr (a letter from a neighbouring key), resolved to 202.168.180.22, where reported phishing was found in the 48 hours before, and resolved to 202.168.180.23, where reported phishing was found in the 48 hours before, and resolved to 202.168.180.24, where reported phishing was found in the 48 hours before, and resolved to 202.168.180.25, where reported phishing was found in the 48 hours before, and resolved to 202.168.180.26, where reported phishing was found in the 48 hours before, and resolved to 202.168.180.27, where reported phishing was found in the 48 hours before, and resolved to 202.168.180.28, where reported phishing was found in the 48 hours before, and resolved to 202.168.180.29, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T17:53:28.000Z","first_published":"2026-11-05T17:53:28.000Z","of":"linked-in.fr","spelling":"adjacent_key","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"202.168.180.22","flagged_at":"2026-11-05T17:53:28Z"},{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"202.168.180.23","flagged_at":"2026-11-05T17:53:28Z"},{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"202.168.180.24","flagged_at":"2026-11-05T17:53:28Z"},{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"202.168.180.25","flagged_at":"2026-11-05T17:53:28Z"},{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"202.168.180.26","flagged_at":"2026-11-05T17:53:28Z"},{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"202.168.180.27","flagged_at":"2026-11-05T17:53:28Z"},{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"202.168.180.28","flagged_at":"2026-11-05T17:53:28Z"},{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"202.168.180.29","flagged_at":"2026-11-05T17:53:28Z"}]}],"url":"https://domainspoof.com/brands/linkedin"},{"hostname":"linkt.me","first_observed":"2026-11-05T17:53:28.000Z","first_published":"2026-11-05T17:53:28.000Z","brands":[{"id":"linkt","name":"Linkt","url":"https://domainspoof.com/brands/linkt"}],"dns":"resolved","resolved":["216.245.197.45"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of linkt.com.au (same name, other ending), resolved to 216.245.197.45, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T17:53:28.000Z","first_published":"2026-11-05T17:53:28.000Z","of":"linkt.com.au","spelling":"tld","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"216.245.197.45","flagged_at":"2026-11-05T17:53:28Z"}]}],"url":"https://domainspoof.com/brands/linkt"},{"hostname":"linmedin.com","first_observed":"2026-11-05T17:53:28.000Z","first_published":"2026-11-05T17:53:28.000Z","brands":[{"id":"linkedin","name":"LinkedIn","url":"https://domainspoof.com/brands/linkedin"}],"dns":"resolved","resolved":["213.227.156.74"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of linkedin.com (a letter from a neighbouring key), resolved to 213.227.156.74, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T17:53:28.000Z","first_published":"2026-11-05T17:53:28.000Z","of":"linkedin.com","spelling":"adjacent_key","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"213.227.156.74","flagged_at":"2026-11-05T17:53:28Z"}]}],"url":"https://domainspoof.com/brands/linkedin"},{"hostname":"louisvutton.com","first_observed":"2026-11-05T17:53:28.000Z","first_published":"2026-11-05T17:53:28.000Z","brands":[{"id":"louis-vuitton","name":"Louis Vuitton","url":"https://domainspoof.com/brands/louis-vuitton"}],"dns":"resolved","resolved":["69.162.80.59"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of louisvuitton.com (a dropped letter), resolved to 69.162.80.59, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T17:53:28.000Z","first_published":"2026-11-05T17:53:28.000Z","of":"louisvuitton.com","spelling":"omission","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"69.162.80.59","flagged_at":"2026-11-05T17:53:28Z"}]}],"url":"https://domainspoof.com/brands/louis-vuitton"},{"hostname":"lufthana.com","first_observed":"2026-11-05T17:53:28.000Z","first_published":"2026-11-05T17:53:28.000Z","brands":[{"id":"lufthansa","name":"Lufthansa","url":"https://domainspoof.com/brands/lufthansa"}],"dns":"resolved","resolved":["77.247.182.247"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of lufthansa.com (a dropped letter), resolved to 77.247.182.247, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T17:53:28.000Z","first_published":"2026-11-05T17:53:28.000Z","of":"lufthansa.com","spelling":"omission","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"77.247.182.247","flagged_at":"2026-11-05T17:53:28Z"}]}],"url":"https://domainspoof.com/brands/lufthansa"},{"hostname":"lufthnasa.com","first_observed":"2026-11-05T17:53:28.000Z","first_published":"2026-11-05T17:53:28.000Z","brands":[{"id":"lufthansa","name":"Lufthansa","url":"https://domainspoof.com/brands/lufthansa"}],"dns":"resolved","resolved":["172.241.213.98"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of lufthansa.com (two letters swapped), resolved to 172.241.213.98, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T17:53:28.000Z","first_published":"2026-11-05T17:53:28.000Z","of":"lufthansa.com","spelling":"transposition","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"172.241.213.98","flagged_at":"2026-11-05T17:53:28Z"}]}],"url":"https://domainspoof.com/brands/lufthansa"},{"hostname":"lufyhansa.com","first_observed":"2026-11-05T17:53:28.000Z","first_published":"2026-11-05T17:53:28.000Z","brands":[{"id":"lufthansa","name":"Lufthansa","url":"https://domainspoof.com/brands/lufthansa"}],"dns":"resolved","resolved":["69.162.80.53"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of lufthansa.com (a letter from a neighbouring key), resolved to 69.162.80.53, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T17:53:28.000Z","first_published":"2026-11-05T17:53:28.000Z","of":"lufthansa.com","spelling":"adjacent_key","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"69.162.80.53","flagged_at":"2026-11-05T17:53:28Z"}]}],"url":"https://domainspoof.com/brands/lufthansa"},{"hostname":"lukulemon.com","first_observed":"2026-11-05T17:53:28.000Z","first_published":"2026-11-05T17:53:28.000Z","brands":[{"id":"lululemon","name":"Lululemon","url":"https://domainspoof.com/brands/lululemon"}],"dns":"resolved","resolved":["216.245.213.76"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of lululemon.com (a letter from a neighbouring key), resolved to 216.245.213.76, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T17:53:28.000Z","first_published":"2026-11-05T17:53:28.000Z","of":"lululemon.com","spelling":"adjacent_key","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"216.245.213.76","flagged_at":"2026-11-05T17:53:28Z"}]}],"url":"https://domainspoof.com/brands/lululemon"},{"hostname":"lululemo.com","first_observed":"2026-11-05T17:53:28.000Z","first_published":"2026-11-05T17:53:28.000Z","brands":[{"id":"lululemon","name":"Lululemon","url":"https://domainspoof.com/brands/lululemon"}],"dns":"resolved","resolved":["69.162.80.60"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of lululemon.com (a dropped letter), resolved to 69.162.80.60, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T17:53:28.000Z","first_published":"2026-11-05T17:53:28.000Z","of":"lululemon.com","spelling":"omission","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"69.162.80.60","flagged_at":"2026-11-05T17:53:28Z"}]}],"url":"https://domainspoof.com/brands/lululemon"},{"hostname":"lululemom.xyz","first_observed":"2026-11-05T17:53:28.000Z","first_published":"2026-11-05T17:53:28.000Z","brands":[{"id":"lululemon","name":"Lululemon","url":"https://domainspoof.com/brands/lululemon"}],"dns":"resolved","resolved":["78.157.209.171"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of lululemon.com (a letter from a neighbouring key), resolved to 78.157.209.171, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T17:53:28.000Z","first_published":"2026-11-05T17:53:28.000Z","of":"lululemon.com","spelling":"adjacent_key","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"78.157.209.171","flagged_at":"2026-11-05T17:53:28Z"}]}],"url":"https://domainspoof.com/brands/lululemon"},{"hostname":"luluoemon.com","first_observed":"2026-11-05T17:53:28.000Z","first_published":"2026-11-05T17:53:28.000Z","brands":[{"id":"lululemon","name":"Lululemon","url":"https://domainspoof.com/brands/lululemon"}],"dns":"resolved","resolved":["212.7.194.68"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of lululemon.com (a letter from a neighbouring key), resolved to 212.7.194.68, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T17:53:28.000Z","first_published":"2026-11-05T17:53:28.000Z","of":"lululemon.com","spelling":"adjacent_key","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"212.7.194.68","flagged_at":"2026-11-05T17:53:28Z"}]}],"url":"https://domainspoof.com/brands/lululemon"},{"hostname":"lylulemon.com","first_observed":"2026-11-05T17:53:28.000Z","first_published":"2026-11-05T17:53:28.000Z","brands":[{"id":"lululemon","name":"Lululemon","url":"https://domainspoof.com/brands/lululemon"}],"dns":"resolved","resolved":["212.7.194.71"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of lululemon.com (a letter from a neighbouring key), resolved to 212.7.194.71, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T17:53:28.000Z","first_published":"2026-11-05T17:53:28.000Z","of":"lululemon.com","spelling":"adjacent_key","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"212.7.194.71","flagged_at":"2026-11-05T17:53:28Z"}]}],"url":"https://domainspoof.com/brands/lululemon"},{"hostname":"madntbank.com","first_observed":"2026-11-05T17:53:28.000Z","first_published":"2026-11-05T17:53:28.000Z","brands":[{"id":"m-and-t-bank","name":"M&T Bank","url":"https://domainspoof.com/brands/m-and-t-bank"}],"dns":"resolved","resolved":["45.82.67.96"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of mandtbank.com (two letters swapped), resolved to 45.82.67.96, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T17:53:28.000Z","first_published":"2026-11-05T17:53:28.000Z","of":"mandtbank.com","spelling":"transposition","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"45.82.67.96","flagged_at":"2026-11-05T17:53:28Z"}]}],"url":"https://domainspoof.com/brands/m-and-t-bank"},{"hostname":"mandtbnk.com","first_observed":"2026-11-05T17:53:28.000Z","first_published":"2026-11-05T17:53:28.000Z","brands":[{"id":"m-and-t-bank","name":"M&T Bank","url":"https://domainspoof.com/brands/m-and-t-bank"}],"dns":"resolved","resolved":["69.162.80.53"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of mandtbank.com (a dropped letter), resolved to 69.162.80.53, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T17:53:28.000Z","first_published":"2026-11-05T17:53:28.000Z","of":"mandtbank.com","spelling":"omission","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"69.162.80.53","flagged_at":"2026-11-05T17:53:28Z"}]}],"url":"https://domainspoof.com/brands/m-and-t-bank"},{"hostname":"marri0tt.com","first_observed":"2026-11-05T17:53:28.000Z","first_published":"2026-11-05T17:53:28.000Z","brands":[{"id":"marriott","name":"Marriott","url":"https://domainspoof.com/brands/marriott"}],"dns":"resolved","resolved":["212.7.194.67"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of marriott.com (similar-looking characters), resolved to 212.7.194.67, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T17:53:28.000Z","first_published":"2026-11-05T17:53:28.000Z","of":"marriott.com","spelling":"homoglyph","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"212.7.194.67","flagged_at":"2026-11-05T17:53:28Z"}]}],"url":"https://domainspoof.com/brands/marriott"},{"hostname":"marriottt.com","first_observed":"2026-11-05T17:53:28.000Z","first_published":"2026-11-05T17:53:28.000Z","brands":[{"id":"marriott","name":"Marriott","url":"https://domainspoof.com/brands/marriott"}],"dns":"resolved","resolved":["212.92.105.215"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of marriott.com (a doubled letter), resolved to 212.92.105.215, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T17:53:28.000Z","first_published":"2026-11-05T17:53:28.000Z","of":"marriott.com","spelling":"repetition","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"212.92.105.215","flagged_at":"2026-11-05T17:53:28Z"}]}],"url":"https://domainspoof.com/brands/marriott"},{"hostname":"marritot.com","first_observed":"2026-11-05T17:53:28.000Z","first_published":"2026-11-05T17:53:28.000Z","brands":[{"id":"marriott","name":"Marriott","url":"https://domainspoof.com/brands/marriott"}],"dns":"resolved","resolved":["212.7.194.53"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of marriott.com (two letters swapped), resolved to 212.7.194.53, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T17:53:28.000Z","first_published":"2026-11-05T17:53:28.000Z","of":"marriott.com","spelling":"transposition","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"212.7.194.53","flagged_at":"2026-11-05T17:53:28Z"}]}],"url":"https://domainspoof.com/brands/marriott"},{"hostname":"mastercars.site","first_observed":"2026-11-05T17:53:28.000Z","first_published":"2026-11-05T17:53:28.000Z","brands":[{"id":"mastercard","name":"Mastercard","url":"https://domainspoof.com/brands/mastercard"}],"dns":"resolved","resolved":["216.245.197.44"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of mastercard.com (a letter from a neighbouring key), resolved to 216.245.197.44, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T17:53:28.000Z","first_published":"2026-11-05T17:53:28.000Z","of":"mastercard.com","spelling":"adjacent_key","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"216.245.197.44","flagged_at":"2026-11-05T17:53:28Z"}]}],"url":"https://domainspoof.com/brands/mastercard"},{"hostname":"mayank.live","first_observed":"2026-11-05T17:53:28.000Z","first_published":"2026-11-05T17:53:28.000Z","brands":[{"id":"maybank","name":"Maybank","url":"https://domainspoof.com/brands/maybank"}],"dns":"resolved","resolved":["185.150.189.124"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of maybank.com (a dropped letter), resolved to 185.150.189.124, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T17:53:28.000Z","first_published":"2026-11-05T17:53:28.000Z","of":"maybank.com","spelling":"omission","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"185.150.189.124","flagged_at":"2026-11-05T17:53:28Z"}]}],"url":"https://domainspoof.com/brands/maybank"},{"hostname":"mayban2u.com","first_observed":"2026-11-05T17:53:28.000Z","first_published":"2026-11-05T17:53:28.000Z","brands":[{"id":"maybank","name":"Maybank","url":"https://domainspoof.com/brands/maybank"}],"dns":"resolved","resolved":["199.193.114.102"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of maybank2u.com.my (a dropped letter), resolved to 199.193.114.102, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T17:53:28.000Z","first_published":"2026-11-05T17:53:28.000Z","of":"maybank2u.com.my","spelling":"omission","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"199.193.114.102","flagged_at":"2026-11-05T17:53:28Z"}]}],"url":"https://domainspoof.com/brands/maybank"},{"hostname":"mbaay.com","first_observed":"2026-11-05T17:53:28.000Z","first_published":"2026-11-05T17:53:28.000Z","brands":[{"id":"mb-way","name":"MB WAY","url":"https://domainspoof.com/brands/mb-way"}],"dns":"resolved","resolved":["2.59.170.20","104.219.250.37"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of mbway.pt (a letter from a neighbouring key), resolved to 2.59.170.20, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T17:53:28.000Z","first_published":"2026-11-05T17:53:28.000Z","of":"mbway.pt","spelling":"adjacent_key","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"2.59.170.20","flagged_at":"2026-11-05T17:53:28Z"}]}],"url":"https://domainspoof.com/brands/mb-way"},{"hostname":"mbabk.pl","first_observed":"2026-11-05T17:53:28.000Z","first_published":"2026-11-05T17:53:28.000Z","brands":[{"id":"mbank","name":"mBank","url":"https://domainspoof.com/brands/mbank"}],"dns":"resolved","resolved":["185.253.212.22"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of mbank.pl (a letter from a neighbouring key), resolved to 185.253.212.22, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T17:53:28.000Z","first_published":"2026-11-05T17:53:28.000Z","of":"mbank.pl","spelling":"adjacent_key","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"185.253.212.22","flagged_at":"2026-11-05T17:53:28Z"}]}],"url":"https://domainspoof.com/brands/mbank"},{"hostname":"mbahk.com","first_observed":"2026-11-05T17:53:28.000Z","first_published":"2026-11-05T17:53:28.000Z","brands":[{"id":"mbank","name":"mBank","url":"https://domainspoof.com/brands/mbank"}],"dns":"resolved","resolved":["65.75.210.175"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of mbank.pl (a letter from a neighbouring key), resolved to 65.75.210.175, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T17:53:28.000Z","first_published":"2026-11-05T17:53:28.000Z","of":"mbank.pl","spelling":"adjacent_key","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"65.75.210.175","flagged_at":"2026-11-05T17:53:28Z"}]}],"url":"https://domainspoof.com/brands/mbank"},{"hostname":"mbannk.pl","first_observed":"2026-11-05T17:53:28.000Z","first_published":"2026-11-05T17:53:28.000Z","brands":[{"id":"mbank","name":"mBank","url":"https://domainspoof.com/brands/mbank"}],"dns":"resolved","resolved":["185.253.212.22"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of mbank.pl (a doubled letter), resolved to 185.253.212.22, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T17:53:28.000Z","first_published":"2026-11-05T17:53:28.000Z","of":"mbank.pl","spelling":"repetition","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"185.253.212.22","flagged_at":"2026-11-05T17:53:28Z"}]}],"url":"https://domainspoof.com/brands/mbank"},{"hostname":"mbsnk.app","first_observed":"2026-11-05T17:53:28.000Z","first_published":"2026-11-05T17:53:28.000Z","brands":[{"id":"mbank","name":"mBank","url":"https://domainspoof.com/brands/mbank"}],"dns":"resolved","resolved":["137.220.156.154"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of mbank.pl (a letter from a neighbouring key), resolved to 137.220.156.154 on Spamhaus DROP","first_observed":"2026-11-05T17:53:28.000Z","first_published":"2026-11-05T17:53:28.000Z","of":"mbank.pl","spelling":"adjacent_key","found_by":"dns_sweep","listings":[{"kind":"address","source":"spamhaus_drop","list_name":"Spamhaus DROP","address":"137.220.156.154","flagged_at":"2026-11-05T17:53:28Z"}]}],"url":"https://domainspoof.com/brands/mbank"},{"hostname":"mbsnk.pl","first_observed":"2026-11-05T17:53:28.000Z","first_published":"2026-11-05T17:53:28.000Z","brands":[{"id":"mbank","name":"mBank","url":"https://domainspoof.com/brands/mbank"}],"dns":"resolved","resolved":["185.253.212.22"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of mbank.pl (a letter from a neighbouring key), resolved to 185.253.212.22, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T17:53:28.000Z","first_published":"2026-11-05T17:53:28.000Z","of":"mbank.pl","spelling":"adjacent_key","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"185.253.212.22","flagged_at":"2026-11-05T17:53:28Z"}]}],"url":"https://domainspoof.com/brands/mbank"},{"hostname":"mdiafire.com","first_observed":"2026-11-05T17:53:28.000Z","first_published":"2026-11-05T17:53:28.000Z","brands":[{"id":"mediafire","name":"MediaFire","url":"https://domainspoof.com/brands/mediafire"}],"dns":"resolved","resolved":["74.63.219.252"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of mediafire.com (a dropped letter), resolved to 74.63.219.252, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T17:53:28.000Z","first_published":"2026-11-05T17:53:28.000Z","of":"mediafire.com","spelling":"omission","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"74.63.219.252","flagged_at":"2026-11-05T17:53:28Z"}]}],"url":"https://domainspoof.com/brands/mediafire"},{"hostname":"mecari.com","first_observed":"2026-11-05T17:53:28.000Z","first_published":"2026-11-05T17:53:28.000Z","brands":[{"id":"mercari","name":"Mercari","url":"https://domainspoof.com/brands/mercari"}],"dns":"resolved","resolved":["192.157.56.141"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of mercari.com (a dropped letter), resolved to 192.157.56.141, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T17:53:28.000Z","first_published":"2026-11-05T17:53:28.000Z","of":"mercari.com","spelling":"omission","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"192.157.56.141","flagged_at":"2026-11-05T17:53:28Z"}]}],"url":"https://domainspoof.com/brands/mercari"},{"hostname":"mediafirw.com","first_observed":"2026-11-05T17:53:28.000Z","first_published":"2026-11-05T17:53:28.000Z","brands":[{"id":"mediafire","name":"MediaFire","url":"https://domainspoof.com/brands/mediafire"}],"dns":"resolved","resolved":["212.7.194.67"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of mediafire.com (a letter from a neighbouring key), resolved to 212.7.194.67, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T17:53:28.000Z","first_published":"2026-11-05T17:53:28.000Z","of":"mediafire.com","spelling":"adjacent_key","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"212.7.194.67","flagged_at":"2026-11-05T17:53:28Z"}]}],"url":"https://domainspoof.com/brands/mediafire"},{"hostname":"mediafite.xyz","first_observed":"2026-11-05T17:53:28.000Z","first_published":"2026-11-05T17:53:28.000Z","brands":[{"id":"mediafire","name":"MediaFire","url":"https://domainspoof.com/brands/mediafire"}],"dns":"resolved","resolved":["216.245.197.45"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of mediafire.com (a letter from a neighbouring key), resolved to 216.245.197.45, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T17:53:28.000Z","first_published":"2026-11-05T17:53:28.000Z","of":"mediafire.com","spelling":"adjacent_key","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"216.245.197.45","flagged_at":"2026-11-05T17:53:28Z"}]}],"url":"https://domainspoof.com/brands/mediafire"},{"hostname":"meduafire.com","first_observed":"2026-11-05T17:53:28.000Z","first_published":"2026-11-05T17:53:28.000Z","brands":[{"id":"mediafire","name":"MediaFire","url":"https://domainspoof.com/brands/mediafire"}],"dns":"resolved","resolved":["212.92.105.213"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of mediafire.com (a letter from a neighbouring key), resolved to 212.92.105.213, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T17:53:28.000Z","first_published":"2026-11-05T17:53:28.000Z","of":"mediafire.com","spelling":"adjacent_key","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"212.92.105.213","flagged_at":"2026-11-05T17:53:28Z"}]}],"url":"https://domainspoof.com/brands/mediafire"},{"hostname":"mepco.online","first_observed":"2026-11-05T17:53:28.000Z","first_published":"2026-11-05T17:53:28.000Z","brands":[{"id":"kansai-electric-power","name":"Kansai Electric Power","url":"https://domainspoof.com/brands/kansai-electric-power"}],"dns":"resolved","resolved":["2.59.170.20","104.219.250.37"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of kepco.co.jp (a letter from a neighbouring key), resolved to 2.59.170.20, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T17:53:28.000Z","first_published":"2026-11-05T17:53:28.000Z","of":"kepco.co.jp","spelling":"adjacent_key","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"2.59.170.20","flagged_at":"2026-11-05T17:53:28Z"}]}],"url":"https://domainspoof.com/brands/kansai-electric-power"},{"hostname":"meracri.com","first_observed":"2026-11-05T17:53:28.000Z","first_published":"2026-11-05T17:53:28.000Z","brands":[{"id":"mercari","name":"Mercari","url":"https://domainspoof.com/brands/mercari"}],"dns":"resolved","resolved":["77.247.182.249"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of mercari.com (two letters swapped), resolved to 77.247.182.249, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T17:53:28.000Z","first_published":"2026-11-05T17:53:28.000Z","of":"mercari.com","spelling":"transposition","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"77.247.182.249","flagged_at":"2026-11-05T17:53:28Z"}]}],"url":"https://domainspoof.com/brands/mercari"},{"hostname":"mercadolive.com","first_observed":"2026-11-05T17:53:28.000Z","first_published":"2026-11-05T17:53:28.000Z","brands":[{"id":"mercado-libre","name":"Mercado Libre","url":"https://domainspoof.com/brands/mercado-libre"}],"dns":"resolved","resolved":["212.92.105.213"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of mercadolivre.com (a dropped letter), resolved to 212.92.105.213, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T17:53:28.000Z","first_published":"2026-11-05T17:53:28.000Z","of":"mercadolivre.com","spelling":"omission","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"212.92.105.213","flagged_at":"2026-11-05T17:53:28Z"}]}],"url":"https://domainspoof.com/brands/mercado-libre"},{"hostname":"mercaolivre.com","first_observed":"2026-11-05T17:53:28.000Z","first_published":"2026-11-05T17:53:28.000Z","brands":[{"id":"mercado-libre","name":"Mercado Libre","url":"https://domainspoof.com/brands/mercado-libre"}],"dns":"resolved","resolved":["212.7.194.71"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of mercadolivre.com (a dropped letter), resolved to 212.7.194.71, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T17:53:28.000Z","first_published":"2026-11-05T17:53:28.000Z","of":"mercadolivre.com","spelling":"omission","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"212.7.194.71","flagged_at":"2026-11-05T17:53:28Z"}]}],"url":"https://domainspoof.com/brands/mercado-libre"},{"hostname":"merraki.shop","first_observed":"2026-11-05T17:53:28.000Z","first_published":"2026-11-05T17:53:28.000Z","brands":[{"id":"cisco","name":"Cisco","url":"https://domainspoof.com/brands/cisco"}],"dns":"resolved","resolved":["2.59.170.20","104.219.250.37"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of meraki.com (a doubled letter), resolved to 2.59.170.20, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T17:53:28.000Z","first_published":"2026-11-05T17:53:28.000Z","of":"meraki.com","spelling":"repetition","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"2.59.170.20","flagged_at":"2026-11-05T17:53:28Z"}]}],"url":"https://domainspoof.com/brands/cisco"},{"hostname":"mialchimp.com","first_observed":"2026-11-05T17:53:28.000Z","first_published":"2026-11-05T17:53:28.000Z","brands":[{"id":"mailchimp","name":"Mailchimp","url":"https://domainspoof.com/brands/mailchimp"}],"dns":"resolved","resolved":["45.82.67.96"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of mailchimp.com (two letters swapped), resolved to 45.82.67.96, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T17:53:28.000Z","first_published":"2026-11-05T17:53:28.000Z","of":"mailchimp.com","spelling":"transposition","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"45.82.67.96","flagged_at":"2026-11-05T17:53:28Z"}]}],"url":"https://domainspoof.com/brands/mailchimp"},{"hostname":"mysk.pl","first_observed":"2026-11-05T17:53:28.000Z","first_published":"2026-11-05T17:53:28.000Z","brands":[{"id":"jysk","name":"JYSK","url":"https://domainspoof.com/brands/jysk"}],"dns":"resolved","resolved":["185.253.212.22"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of jysk.com (a letter from a neighbouring key), resolved to 185.253.212.22, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T17:53:28.000Z","first_published":"2026-11-05T17:53:28.000Z","of":"jysk.com","spelling":"adjacent_key","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"185.253.212.22","flagged_at":"2026-11-05T17:53:28Z"}]}],"url":"https://domainspoof.com/brands/jysk"},{"hostname":"polymarket.qpon","first_observed":"2026-11-05T17:53:28.000Z","first_published":"2026-11-05T17:53:28.000Z","brands":[{"id":"polymarket","name":"Polymarket","url":"https://domainspoof.com/brands/polymarket"}],"dns":"resolved","resolved":["104.21.22.190","172.67.206.163"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of polymarket.com (same name, other ending), listed by MetaMask","first_observed":"2026-11-05T17:53:28.000Z","first_published":"2026-11-05T17:53:28.000Z","of":"polymarket.com","spelling":"tld","found_by":"dns_sweep","listings":[{"kind":"reported","source":"metamask","source_name":"MetaMask","host":"polymarket.qpon","flagged_at":"2026-11-05T17:53:28Z"}]}],"url":"https://domainspoof.com/brands/polymarket"},{"hostname":"ssa.tokyo","first_observed":"2026-11-05T17:53:28.000Z","first_published":"2026-11-05T17:53:28.000Z","brands":[{"id":"social-security-administration","name":"Social Security Administration","url":"https://domainspoof.com/brands/social-security-administration"}],"dns":"resolved","resolved":["150.95.255.38"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of ssa.gov (same name, other ending), resolved to 150.95.255.38, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T17:53:28.000Z","first_published":"2026-11-05T17:53:28.000Z","of":"ssa.gov","spelling":"tld","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"150.95.255.38","flagged_at":"2026-11-05T17:53:28Z"}]}],"url":"https://domainspoof.com/brands/social-security-administration"},{"hostname":"temu.tokyo","first_observed":"2026-11-05T17:53:28.000Z","first_published":"2026-11-05T17:53:28.000Z","brands":[{"id":"temu","name":"Temu","url":"https://domainspoof.com/brands/temu"}],"dns":"resolved","resolved":["150.95.255.38"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of temu.com (same name, other ending), resolved to 150.95.255.38, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T17:53:28.000Z","first_published":"2026-11-05T17:53:28.000Z","of":"temu.com","spelling":"tld","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"150.95.255.38","flagged_at":"2026-11-05T17:53:28Z"}]}],"url":"https://domainspoof.com/brands/temu"},{"hostname":"twebstatic.com","first_observed":"2026-11-05T17:53:28.000Z","first_published":"2026-11-05T17:53:28.000Z","brands":[{"id":"shein","name":"Shein","url":"https://domainspoof.com/brands/shein"}],"dns":"resolved","resolved":["77.247.182.250"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of ltwebstatic.com (a dropped letter), resolved to 77.247.182.250, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T17:53:28.000Z","first_published":"2026-11-05T17:53:28.000Z","of":"ltwebstatic.com","spelling":"omission","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"77.247.182.250","flagged_at":"2026-11-05T17:53:28Z"}]}],"url":"https://domainspoof.com/brands/shein"},{"hostname":"ululemon.com","first_observed":"2026-11-05T17:53:28.000Z","first_published":"2026-11-05T17:53:28.000Z","brands":[{"id":"lululemon","name":"Lululemon","url":"https://domainspoof.com/brands/lululemon"}],"dns":"resolved","resolved":["199.193.114.46"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of lululemon.com (a dropped letter), resolved to 199.193.114.46, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T17:53:28.000Z","first_published":"2026-11-05T17:53:28.000Z","of":"lululemon.com","spelling":"omission","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"199.193.114.46","flagged_at":"2026-11-05T17:53:28Z"}]}],"url":"https://domainspoof.com/brands/lululemon"},{"hostname":"whatsapp.blue","first_observed":"2026-11-05T17:53:28.000Z","first_published":"2026-11-05T17:53:28.000Z","brands":[{"id":"whatsapp","name":"WhatsApp","url":"https://domainspoof.com/brands/whatsapp"}],"dns":"resolved","resolved":["54.39.222.96","2607:5300:60:408a::96"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of whatsapp.com (same name, other ending), resolved to 54.39.222.96, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T17:53:28.000Z","first_published":"2026-11-05T17:53:28.000Z","of":"whatsapp.com","spelling":"tld","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"54.39.222.96","flagged_at":"2026-11-05T17:53:28Z"}]}],"url":"https://domainspoof.com/brands/whatsapp"},{"hostname":"2-26-123-141.rdns.vpspay.net","first_observed":"2026-11-05T17:36:58.500Z","first_published":"2026-11-05T17:51:45.694Z","brands":[],"dns":"resolved","resolved":["2.26.123.141"],"resolved_at":"2026-11-05T17:44:21Z","dns_checked_at":"2026-11-05T17:56:41.000Z","dns_since":"2026-11-05T17:56:41.000Z","findings":[{"id":"ftgzyuzlnjwqn2wteob52","kind":"reported_domain","summary":"Under vpspay.net, reported by PhishDestroy","first_observed":"2026-11-05T17:36:58.500Z","first_published":"2026-11-05T17:51:45.694Z","source":"phishdestroy","source_name":"PhishDestroy","under":"vpspay.net","source_url":"https://phishdestroy.io/domain/vpspay.net/"}],"url":"https://domainspoof.com/live?show=all&q=2-26-123-141.rdns.vpspay.net"},{"hostname":"24478996bsvrkmpnyaprmsny.pro","first_observed":"2026-11-05T17:17:27.540Z","first_published":"2026-11-05T17:51:45.694Z","brands":[],"dns":"resolved","resolved":["64.89.160.238"],"resolved_at":"2026-11-05T17:17:34Z","dns_checked_at":"2026-11-05T17:56:41.000Z","dns_since":"2026-11-05T17:56:41.000Z","findings":[{"id":"f67veofme2uvjgvmrq2yz","kind":"reported_domain","summary":"Listed by USOM","first_observed":"2026-11-05T17:17:27.540Z","first_published":"2026-11-05T17:51:45.694Z","source":"usom","source_name":"USOM"}],"url":"https://domainspoof.com/live?show=all&q=24478996bsvrkmpnyaprmsny.pro"},{"hostname":"805264-crypto.com","first_observed":"2026-11-05T17:11:24.356Z","first_published":"2026-11-05T17:51:45.694Z","brands":[{"id":"crypto-com","name":"Crypto.com","url":"https://domainspoof.com/brands/crypto-com"}],"dns":"resolved","resolved":["104.21.69.211","172.67.213.92","2606:4700:3034::ac43:d55c","2606:4700:3036::6815:45d3"],"resolved_at":"2026-11-05T17:11:39Z","dns_checked_at":"2026-11-05T17:56:41.000Z","dns_since":"2026-11-05T17:56:41.000Z","findings":[{"id":"f5vzxvch3u74ckqiqfk5c","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T17:11:24.356Z","first_published":"2026-11-05T17:51:45.694Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/brands/crypto-com"},{"hostname":"abmahnungshilfe.de","first_observed":"2026-11-05T16:56:53.456Z","first_published":"2026-11-05T17:51:45.694Z","brands":[],"dns":"resolved","resolved":["45.42.212.223"],"resolved_at":"2026-11-05T16:57:05Z","dns_checked_at":"2026-11-05T17:56:41.000Z","dns_since":"2026-11-05T17:56:41.000Z","findings":[{"id":"f2fxrf5qo6ktflmlujrkz","kind":"reported_domain","summary":"Reported by PhishTank","first_observed":"2026-11-05T16:56:53.456Z","first_published":"2026-11-05T17:51:45.694Z","source":"phishtank","source_name":"PhishTank","source_url":"https://phishtank.org/phish_detail.php?phish_id=9166288"}],"url":"https://domainspoof.com/live?show=all&q=abmahnungshilfe.de"},{"hostname":"abundan-fincap.shop","first_observed":"2026-11-05T17:16:10.565Z","first_published":"2026-11-05T17:51:45.694Z","brands":[],"dns":"resolved","resolved":["104.21.79.236","172.67.150.9"],"resolved_at":"2026-11-05T17:16:31Z","dns_checked_at":"2026-11-05T17:56:41.000Z","dns_since":"2026-11-05T17:56:41.000Z","findings":[{"id":"fr7js6chpzigwisvhz5be","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T17:16:10.565Z","first_published":"2026-11-05T17:51:45.694Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=abundan-fincap.shop"},{"hostname":"adeccotraining.peexprod.com","first_observed":"2026-11-05T17:31:43.403Z","first_published":"2026-11-05T17:51:45.694Z","brands":[],"dns":"resolved","resolved":["51.255.51.52"],"resolved_at":"2026-11-05T17:37:14Z","dns_checked_at":"2026-11-05T17:56:41.000Z","dns_since":"2026-11-05T17:56:41.000Z","findings":[{"id":"fhbgslc66sm2b2o56wu53","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T17:31:43.403Z","first_published":"2026-11-05T17:51:45.694Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/adeccotraining.peexprod.com/"}],"url":"https://domainspoof.com/live?show=all&q=adeccotraining.peexprod.com"},{"hostname":"adqe.lucifergin.com","first_observed":"2026-11-05T17:21:30.538Z","first_published":"2026-11-05T17:51:45.694Z","brands":[],"dns":"resolved","resolved":["185.53.179.136"],"resolved_at":"2026-11-05T17:24:26Z","dns_checked_at":"2026-11-05T17:56:41.000Z","dns_since":"2026-11-05T17:56:41.000Z","findings":[{"id":"fmewmilu73vwafi6spgyt","kind":"reported_domain","summary":"Under lucifergin.com, listed by MetaMask","first_observed":"2026-11-05T17:21:30.538Z","first_published":"2026-11-05T17:51:45.694Z","source":"metamask","source_name":"MetaMask","under":"lucifergin.com"}],"url":"https://domainspoof.com/live?show=all&q=adqe.lucifergin.com"},{"hostname":"afri-vryheidx.com","first_observed":"2026-11-05T16:41:52.112Z","first_published":"2026-11-05T17:51:45.694Z","brands":[],"dns":"resolved","resolved":["104.21.60.21","172.67.187.186"],"resolved_at":"2026-11-05T16:43:56Z","dns_checked_at":"2026-11-05T17:56:41.000Z","dns_since":"2026-11-05T17:56:41.000Z","findings":[{"id":"fbf4kwoqfp5uvv2why2rt","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T16:41:52.112Z","first_published":"2026-11-05T17:51:45.694Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=afri-vryheidx.com"},{"hostname":"agent-bob-prod-app-server.license360.getkwikid.com","first_observed":"2026-11-05T17:26:51.740Z","first_published":"2026-11-05T17:51:45.694Z","brands":[],"dns":"resolved","resolved":["65.2.143.88"],"resolved_at":"2026-11-05T17:27:15Z","dns_checked_at":"2026-11-05T17:56:41.000Z","dns_since":"2026-11-05T17:56:41.000Z","findings":[{"id":"fidho3r57potpb4ibimxn","kind":"reported_domain","summary":"Under getkwikid.com, reported by PhishDestroy","first_observed":"2026-11-05T17:26:51.740Z","first_published":"2026-11-05T17:51:45.694Z","source":"phishdestroy","source_name":"PhishDestroy","under":"getkwikid.com","source_url":"https://phishdestroy.io/domain/getkwikid.com/"}],"url":"https://domainspoof.com/live?show=all&q=agent-bob-prod-app-server.license360.getkwikid.com"},{"hostname":"aiyaphorm-fr.live","first_observed":"2026-11-05T16:41:52.112Z","first_published":"2026-11-05T17:51:45.694Z","brands":[],"dns":"resolved","resolved":["104.21.83.245","172.67.183.155"],"resolved_at":"2026-11-05T16:43:56Z","dns_checked_at":"2026-11-05T17:56:41.000Z","dns_since":"2026-11-05T17:56:41.000Z","findings":[{"id":"fblzyjsg37haz2zw5mly7","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T16:41:52.112Z","first_published":"2026-11-05T17:51:45.694Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=aiyaphorm-fr.live"},{"hostname":"alphabonds.org","first_observed":"2026-11-05T17:16:10.565Z","first_published":"2026-11-05T17:51:45.694Z","brands":[],"dns":"resolved","resolved":["104.21.7.15","172.67.155.95"],"resolved_at":"2026-11-05T17:23:33Z","dns_checked_at":"2026-11-05T17:56:41.000Z","dns_since":"2026-11-05T17:56:41.000Z","findings":[{"id":"fzf26bmfm5veic7gg62p2","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T17:16:10.565Z","first_published":"2026-11-05T17:51:45.694Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/alphabonds.org/"}],"url":"https://domainspoof.com/live?show=all&q=alphabonds.org"},{"hostname":"ambient-finance.org","first_observed":"2026-11-05T17:41:44.806Z","first_published":"2026-11-05T17:51:45.694Z","brands":[],"dns":"resolved","resolved":["104.21.41.13","172.67.158.217"],"resolved_at":"2026-11-06T11:31:51Z","dns_checked_at":"2026-11-05T17:56:41.000Z","dns_since":"2026-11-05T17:56:41.000Z","findings":[{"id":"fscrtn25z7hucoplnsnid","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T17:41:44.806Z","first_published":"2026-11-05T17:51:45.694Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=ambient-finance.org"},{"hostname":"amlwallets.org","first_observed":"2026-11-05T16:46:43.799Z","first_published":"2026-11-05T17:51:45.694Z","brands":[],"dns":"resolved","resolved":["66.29.137.134"],"resolved_at":"2026-11-05T16:55:57Z","dns_checked_at":"2026-11-05T17:56:41.000Z","dns_since":"2026-11-05T17:56:41.000Z","findings":[{"id":"fikaedfm5jnpnx732iptf","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T16:46:43.799Z","first_published":"2026-11-05T17:51:45.694Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/amlwallets.org/"}],"url":"https://domainspoof.com/live?show=all&q=amlwallets.org"},{"hostname":"arjeplog.nf1.io-ext.se","first_observed":"2026-11-05T16:41:52.112Z","first_published":"2026-11-05T17:51:45.694Z","brands":[],"dns":"resolved","resolved":["195.246.120.17"],"resolved_at":"2026-11-05T16:43:56Z","dns_checked_at":"2026-11-05T17:56:41.000Z","dns_since":"2026-11-05T17:56:41.000Z","findings":[{"id":"fkvh75cf466iqpvryx5rb","kind":"reported_domain","summary":"Under io-ext.se, listed by MetaMask","first_observed":"2026-11-05T16:41:52.112Z","first_published":"2026-11-05T17:51:45.694Z","source":"metamask","source_name":"MetaMask","under":"io-ext.se"}],"url":"https://domainspoof.com/live?show=all&q=arjeplog.nf1.io-ext.se"},{"hostname":"arvidsjaur.nf1.io-ext.se","first_observed":"2026-11-05T16:41:52.112Z","first_published":"2026-11-05T17:51:45.694Z","brands":[],"dns":"resolved","resolved":["195.246.120.17"],"resolved_at":"2026-11-05T16:43:56Z","dns_checked_at":"2026-11-05T17:56:41.000Z","dns_since":"2026-11-05T17:56:41.000Z","findings":[{"id":"fzafaldlt5b6okvhm7vdc","kind":"reported_domain","summary":"Under io-ext.se, listed by MetaMask","first_observed":"2026-11-05T16:41:52.112Z","first_published":"2026-11-05T17:51:45.694Z","source":"metamask","source_name":"MetaMask","under":"io-ext.se"}],"url":"https://domainspoof.com/live?show=all&q=arvidsjaur.nf1.io-ext.se"},{"hostname":"asianmarketa.vip","first_observed":"2026-11-05T17:26:51.740Z","first_published":"2026-11-05T17:51:45.694Z","brands":[],"dns":"resolved","resolved":["104.21.17.222","172.67.178.156"],"resolved_at":"2026-11-05T17:27:15Z","dns_checked_at":"2026-11-05T17:56:41.000Z","dns_since":"2026-11-05T17:56:41.000Z","findings":[{"id":"fsibktgrram7w7u7thwyi","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T17:26:51.740Z","first_published":"2026-11-05T17:51:45.694Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=asianmarketa.vip"},{"hostname":"b.encryptsim.com","first_observed":"2026-11-05T16:41:52.112Z","first_published":"2026-11-05T17:51:45.694Z","brands":[],"dns":"resolved","resolved":["104.20.29.105","172.66.171.25"],"resolved_at":"2026-11-05T16:44:21Z","dns_checked_at":"2026-11-05T17:56:41.000Z","dns_since":"2026-11-05T17:56:41.000Z","findings":[{"id":"foocvqz2u26x6pp3mvhiz","kind":"reported_domain","summary":"Under encryptsim.com, reported by PhishDestroy","first_observed":"2026-11-05T16:41:52.112Z","first_published":"2026-11-05T17:51:45.694Z","source":"phishdestroy","source_name":"PhishDestroy","under":"encryptsim.com","source_url":"https://phishdestroy.io/domain/encryptsim.com/"}],"url":"https://domainspoof.com/live?show=all&q=b.encryptsim.com"},{"hostname":"badge-firelight.xyz","first_observed":"2026-11-05T17:16:10.565Z","first_published":"2026-11-05T17:51:45.694Z","brands":[],"dns":"resolved","resolved":["104.21.82.165","172.67.159.209"],"resolved_at":"2026-11-05T17:16:38Z","dns_checked_at":"2026-11-05T17:56:41.000Z","dns_since":"2026-11-05T17:56:41.000Z","findings":[{"id":"fakfvhyzrbm2qihu46qg7","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T17:16:10.565Z","first_published":"2026-11-05T17:51:45.694Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=badge-firelight.xyz"},{"hostname":"bijouai-fr.live","first_observed":"2026-11-05T17:26:51.740Z","first_published":"2026-11-05T17:51:45.694Z","brands":[],"dns":"resolved","resolved":["104.21.19.11","172.67.184.110"],"resolved_at":"2026-11-05T17:27:53Z","dns_checked_at":"2026-11-05T17:56:41.000Z","dns_since":"2026-11-05T17:56:41.000Z","findings":[{"id":"fhk4umi7dflcio3ywhovn","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T17:26:51.740Z","first_published":"2026-11-05T17:51:45.694Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=bijouai-fr.live"},{"hostname":"billrecharge.com.ng","first_observed":"2026-11-05T17:31:43.403Z","first_published":"2026-11-05T17:51:45.694Z","brands":[],"dns":"resolved","resolved":["163.61.188.7"],"resolved_at":"2026-11-05T17:38:01Z","dns_checked_at":"2026-11-05T17:56:41.000Z","dns_since":"2026-11-05T17:56:41.000Z","findings":[{"id":"f37agw3e6u6h5vjncs4pu","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T17:31:43.403Z","first_published":"2026-11-05T17:51:45.694Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/billrecharge.com.ng/"}],"url":"https://domainspoof.com/live?show=all&q=billrecharge.com.ng"},{"hostname":"bitgetai-de.live","first_observed":"2026-11-05T16:41:52.112Z","first_published":"2026-11-05T17:51:45.694Z","brands":[],"dns":"resolved","resolved":["104.21.74.178","172.67.160.236"],"resolved_at":"2026-11-05T16:44:22Z","dns_checked_at":"2026-11-05T17:56:41.000Z","dns_since":"2026-11-05T17:56:41.000Z","findings":[{"id":"f2ydlfh7duifckolhcuzw","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T16:41:52.112Z","first_published":"2026-11-05T17:51:45.694Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=bitgetai-de.live"},{"hostname":"bitrefill.com-ct01-esim-gift.com","first_observed":"2026-11-05T17:27:53.537Z","first_published":"2026-11-05T17:51:45.694Z","brands":[{"id":"bitrefill","name":"Bitrefill","url":"https://domainspoof.com/brands/bitrefill"}],"dns":"resolved","resolved":["62.60.226.39"],"resolved_at":"2026-11-05T17:56:41Z","dns_checked_at":"2026-11-05T17:56:41.000Z","dns_since":"2026-11-05T17:56:41.000Z","findings":[{"id":"fwmn2ykyqe7vfhtht5tze","kind":"spamhaus_drop","summary":"Resolved to 62.60.226.39 on Spamhaus DROP","first_observed":"2026-11-05T17:27:53.537Z","first_published":"2026-11-05T17:51:45.694Z","address":"62.60.226.39","list":"spamhaus_drop","list_name":"Spamhaus DROP"}],"url":"https://domainspoof.com/brands/bitrefill"},{"hostname":"bizzans.top","first_observed":"2026-11-05T17:31:43.403Z","first_published":"2026-11-05T17:51:45.694Z","brands":[],"dns":"resolved","resolved":["162.4.84.247"],"resolved_at":"2026-11-05T17:38:01Z","dns_checked_at":"2026-11-05T17:56:41.000Z","dns_since":"2026-11-05T17:56:41.000Z","findings":[{"id":"fn5y5hf7vxygdbdbvlsgv","kind":"reported_domain","summary":"Listed by NPA 165 (finance and insurance)","first_observed":"2026-11-05T17:31:43.403Z","first_published":"2026-11-05T17:51:45.694Z","source":"npa","source_name":"NPA 165","claim":{"category":"finance and insurance"}}],"url":"https://domainspoof.com/live?show=all&q=bizzans.top"},{"hostname":"blazeswap-app.com","first_observed":"2026-11-05T17:36:58.500Z","first_published":"2026-11-05T17:51:45.694Z","brands":[],"dns":"resolved","resolved":["104.21.93.186","172.67.213.254"],"resolved_at":"2026-11-05T17:44:55Z","dns_checked_at":"2026-11-05T17:56:41.000Z","dns_since":"2026-11-05T17:56:41.000Z","findings":[{"id":"fqjqtxxpmb3tzqvoqge2l","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T17:36:58.500Z","first_published":"2026-11-05T17:51:45.694Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=blazeswap-app.com"},{"hostname":"bonuses-fogo.com","first_observed":"2026-11-05T16:56:53.456Z","first_published":"2026-11-05T17:51:45.694Z","brands":[],"dns":"resolved","resolved":["104.21.76.29","172.67.186.28"],"resolved_at":"2026-11-05T17:05:02Z","dns_checked_at":"2026-11-05T17:56:41.000Z","dns_since":"2026-11-05T17:56:41.000Z","findings":[{"id":"faxl6h7xmebetqdmpebhm","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T16:56:53.456Z","first_published":"2026-11-05T17:51:45.694Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/bonuses-fogo.com/"}],"url":"https://domainspoof.com/live?show=all&q=bonuses-fogo.com"},{"hostname":"briand-monteve-fr.live","first_observed":"2026-11-05T17:21:30.538Z","first_published":"2026-11-05T17:51:45.694Z","brands":[],"dns":"resolved","resolved":["104.21.31.85","172.67.175.128"],"resolved_at":"2026-11-05T17:24:40Z","dns_checked_at":"2026-11-05T17:56:41.000Z","dns_since":"2026-11-05T17:56:41.000Z","findings":[{"id":"fg7qgevm3wr2j3encsae7","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T17:21:30.538Z","first_published":"2026-11-05T17:51:45.694Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=briand-monteve-fr.live"},{"hostname":"brt.45657w.com","first_observed":"2026-11-05T17:14:03.990Z","first_published":"2026-11-05T17:51:45.694Z","brands":[{"id":"brt","name":"BRT","url":"https://domainspoof.com/brands/brt"}],"dns":"resolved","resolved":["134.122.139.51"],"resolved_at":"2026-11-05T17:56:41Z","dns_checked_at":"2026-11-05T17:56:41.000Z","dns_since":"2026-11-05T17:56:41.000Z","findings":[{"id":"fh3df6bhj7754jrhedqpb","kind":"spamhaus_drop","summary":"Resolved to 134.122.139.51 on Spamhaus DROP","first_observed":"2026-11-05T17:14:03.990Z","first_published":"2026-11-05T17:51:45.694Z","address":"134.122.139.51","list":"spamhaus_drop","list_name":"Spamhaus DROP"}],"url":"https://domainspoof.com/brands/brt"},{"hostname":"burgerinvest-de.live","first_observed":"2026-11-05T16:51:41.224Z","first_published":"2026-11-05T17:51:45.694Z","brands":[],"dns":"resolved","resolved":["104.21.86.207","172.67.136.208"],"resolved_at":"2026-11-05T17:04:04Z","dns_checked_at":"2026-11-05T17:56:41.000Z","dns_since":"2026-11-05T17:56:41.000Z","findings":[{"id":"fmbuedcyi7iuqely4synw","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T16:51:41.224Z","first_published":"2026-11-05T17:51:45.694Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=burgerinvest-de.live"},{"hostname":"capitalflux.digital","first_observed":"2026-11-05T17:00:35.682Z","first_published":"2026-11-05T17:51:45.694Z","brands":[],"dns":"resolved","resolved":["185.62.57.28"],"resolved_at":"2026-11-05T17:14:19Z","dns_checked_at":"2026-11-05T17:56:41.000Z","dns_since":"2026-11-05T17:56:41.000Z","findings":[{"id":"fggk32rfc34hbwkr5qwn7","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T17:00:35.682Z","first_published":"2026-11-05T17:51:45.694Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=capitalflux.digital"},{"hostname":"capvalorenca-fr.live","first_observed":"2026-11-05T17:21:30.538Z","first_published":"2026-11-05T17:51:45.694Z","brands":[],"dns":"resolved","resolved":["104.21.29.4","172.67.171.54"],"resolved_at":"2026-11-05T17:21:54Z","dns_checked_at":"2026-11-05T17:56:41.000Z","dns_since":"2026-11-05T17:56:41.000Z","findings":[{"id":"fm3nq36csexmjzrmsg4n5","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T17:21:30.538Z","first_published":"2026-11-05T17:51:45.694Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=capvalorenca-fr.live"},{"hostname":"cardstop.co.uk","first_observed":"2026-11-05T17:21:54.545Z","first_published":"2026-11-05T17:51:45.694Z","brands":[{"id":"card-stop","name":"Card Stop","url":"https://domainspoof.com/brands/card-stop"}],"dns":"resolved","resolved":["45.77.102.235","64.176.195.8"],"resolved_at":"2026-11-05T17:56:41Z","dns_checked_at":"2026-11-05T17:56:41.000Z","dns_since":"2026-11-05T17:56:41.000Z","findings":[{"id":"fa6cat2laqhqlllcp5kl2","kind":"phishing_infrastructure","summary":"Resolved to 45.77.102.235, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T17:21:54.545Z","first_published":"2026-11-05T17:51:45.694Z","address":"45.77.102.235","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/card-stop"},{"hostname":"casi-boom.icu","first_observed":"2026-11-05T16:46:43.799Z","first_published":"2026-11-05T17:51:45.694Z","brands":[],"dns":"resolved","resolved":["104.21.95.8","172.67.142.123"],"resolved_at":"2026-11-05T16:56:22Z","dns_checked_at":"2026-11-05T17:56:41.000Z","dns_since":"2026-11-05T17:56:41.000Z","findings":[{"id":"faw3ca7fepfb7yltjuwvm","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T16:46:43.799Z","first_published":"2026-11-05T17:51:45.694Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/casi-boom.icu/"}],"url":"https://domainspoof.com/live?show=all&q=casi-boom.icu"},{"hostname":"catalyst-chain.com","first_observed":"2026-11-05T16:56:53.456Z","first_published":"2026-11-05T17:51:45.694Z","brands":[],"dns":"resolved","resolved":["213.111.158.253"],"resolved_at":"2026-11-05T17:05:16Z","dns_checked_at":"2026-11-05T17:56:41.000Z","dns_since":"2026-11-05T17:56:41.000Z","findings":[{"id":"fdkanqzvh4hyknpla6zpk","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T16:56:53.456Z","first_published":"2026-11-05T17:51:45.694Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/catalyst-chain.com/"}],"url":"https://domainspoof.com/live?show=all&q=catalyst-chain.com"},{"hostname":"cdbcc.xyz","first_observed":"2026-11-05T17:26:51.740Z","first_published":"2026-11-05T17:51:45.694Z","brands":[],"dns":"resolved","resolved":["104.21.25.158","172.67.134.92"],"resolved_at":"2026-11-05T17:28:22Z","dns_checked_at":"2026-11-05T17:56:41.000Z","dns_since":"2026-11-05T17:56:41.000Z","findings":[{"id":"f67s2nbfag45wlnvprbnr","kind":"reported_domain","summary":"Listed by NPA 165 (e-commerce)","first_observed":"2026-11-05T17:26:51.740Z","first_published":"2026-11-05T17:51:45.694Z","source":"npa","source_name":"NPA 165","claim":{"category":"e-commerce"}}],"url":"https://domainspoof.com/live?show=all&q=cdbcc.xyz"},{"hostname":"cervorendisco-it.live","first_observed":"2026-11-05T17:36:58.500Z","first_published":"2026-11-05T17:51:45.694Z","brands":[],"dns":"resolved","resolved":["104.21.77.182","172.67.210.239"],"resolved_at":"2026-11-05T17:45:08Z","dns_checked_at":"2026-11-05T17:56:41.000Z","dns_since":"2026-11-05T17:56:41.000Z","findings":[{"id":"fxb3qgxfmey3dn44eat27","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T17:36:58.500Z","first_published":"2026-11-05T17:51:45.694Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=cervorendisco-it.live"},{"hostname":"chainatarax500.live","first_observed":"2026-11-05T17:16:10.565Z","first_published":"2026-11-05T17:51:45.694Z","brands":[],"dns":"resolved","resolved":["104.21.10.119","172.67.163.32"],"resolved_at":"2026-11-05T17:16:44Z","dns_checked_at":"2026-11-05T17:56:41.000Z","dns_since":"2026-11-05T17:56:41.000Z","findings":[{"id":"faa4dxv2k3okaqu27pe7g","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T17:16:10.565Z","first_published":"2026-11-05T17:51:45.694Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=chainatarax500.live"},{"hostname":"chapmusic.cc","first_observed":"2026-11-05T16:51:41.224Z","first_published":"2026-11-05T17:51:45.694Z","brands":[],"dns":"resolved","resolved":["104.21.86.36","172.67.214.123"],"resolved_at":"2026-11-05T17:04:06Z","dns_checked_at":"2026-11-05T17:56:41.000Z","dns_since":"2026-11-05T17:56:41.000Z","findings":[{"id":"fc7chjugndbom2dykeaub","kind":"reported_domain","summary":"Listed by NPA 165 (finance and insurance)","first_observed":"2026-11-05T16:51:41.224Z","first_published":"2026-11-05T17:51:45.694Z","source":"npa","source_name":"NPA 165","claim":{"category":"finance and insurance"}}],"url":"https://domainspoof.com/live?show=all&q=chapmusic.cc"},{"hostname":"ciscostore.co.uk","first_observed":"2026-11-05T17:16:59.415Z","first_published":"2026-11-05T17:51:45.694Z","brands":[{"id":"cisco","name":"Cisco","url":"https://domainspoof.com/brands/cisco"}],"dns":"resolved","resolved":["45.77.102.235","64.176.195.8"],"resolved_at":"2026-11-05T17:56:41Z","dns_checked_at":"2026-11-05T17:56:41.000Z","dns_since":"2026-11-05T17:56:41.000Z","findings":[{"id":"fi7eecnu5r54aehl2z63p","kind":"phishing_infrastructure","summary":"Resolved to 45.77.102.235, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T17:16:59.415Z","first_published":"2026-11-05T17:51:45.694Z","address":"45.77.102.235","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/cisco"},{"hostname":"claimxrpl.com","first_observed":"2026-11-05T16:56:53.456Z","first_published":"2026-11-05T17:51:45.694Z","brands":[],"dns":"resolved","resolved":["104.21.79.170","172.67.146.158"],"resolved_at":"2026-11-05T17:05:16Z","dns_checked_at":"2026-11-05T17:56:41.000Z","dns_since":"2026-11-05T17:56:41.000Z","findings":[{"id":"fh5gmjrfkrnvy5ftmgpkv","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T16:56:53.456Z","first_published":"2026-11-05T17:51:45.694Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=claimxrpl.com"},{"hostname":"coin-volcano-download.co","first_observed":"2026-11-05T17:36:58.500Z","first_published":"2026-11-05T17:51:45.694Z","brands":[],"dns":"resolved","resolved":["104.21.28.115","172.67.145.228"],"resolved_at":"2026-11-05T17:45:09Z","dns_checked_at":"2026-11-05T17:56:41.000Z","dns_since":"2026-11-05T17:56:41.000Z","findings":[{"id":"fad3algpzcxdw2quonos7","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T17:36:58.500Z","first_published":"2026-11-05T17:51:45.694Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=coin-volcano-download.co"},{"hostname":"confident.codeified.info","first_observed":"2026-11-05T17:21:30.538Z","first_published":"2026-11-05T17:51:45.694Z","brands":[],"dns":"resolved","resolved":["162.4.84.247"],"resolved_at":"2026-11-05T17:21:54Z","dns_checked_at":"2026-11-05T17:56:41.000Z","dns_since":"2026-11-05T17:56:41.000Z","findings":[{"id":"fmvw7jgsnzgsco3kg2hmo","kind":"reported_domain","summary":"Under codeified.info, listed by CERT Polska","first_observed":"2026-11-05T17:21:30.538Z","first_published":"2026-11-05T17:51:45.694Z","source":"cert_polska","source_name":"CERT Polska","under":"codeified.info"}],"url":"https://domainspoof.com/live?show=all&q=confident.codeified.info"},{"hostname":"consul.socialvisor.ru","first_observed":"2026-11-05T17:21:30.538Z","first_published":"2026-11-05T17:51:45.694Z","brands":[],"dns":"resolved","resolved":["91.215.41.91"],"resolved_at":"2026-11-05T17:21:54Z","dns_checked_at":"2026-11-05T17:56:41.000Z","dns_since":"2026-11-05T17:56:41.000Z","findings":[{"id":"fyu65jyaauhdnu4ivxbhn","kind":"reported_domain","summary":"Under socialvisor.ru, reported by PhishDestroy","first_observed":"2026-11-05T17:21:30.538Z","first_published":"2026-11-05T17:51:45.694Z","source":"phishdestroy","source_name":"PhishDestroy","under":"socialvisor.ru","source_url":"https://phishdestroy.io/domain/socialvisor.ru/"}],"url":"https://domainspoof.com/live?show=all&q=consul.socialvisor.ru"},{"hostname":"cozycovepro.site","first_observed":"2026-11-05T16:46:43.799Z","first_published":"2026-11-05T17:51:45.694Z","brands":[],"dns":"resolved","resolved":["134.199.237.99"],"resolved_at":"2026-11-05T16:56:31Z","dns_checked_at":"2026-11-05T17:56:41.000Z","dns_since":"2026-11-05T17:56:41.000Z","findings":[{"id":"f3tkosvciv7lvlhjdaggs","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T16:46:43.799Z","first_published":"2026-11-05T17:51:45.694Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=cozycovepro.site"},{"hostname":"cynora.com.ng.xiaomi.org.ng","first_observed":"2026-11-05T17:11:54.274Z","first_published":"2026-11-05T17:51:45.694Z","brands":[{"id":"xiaomi","name":"Xiaomi","url":"https://domainspoof.com/brands/xiaomi"}],"dns":"resolved","resolved":["102.212.246.83"],"resolved_at":"2026-11-05T17:56:41Z","dns_checked_at":"2026-11-05T17:56:41.000Z","dns_since":"2026-11-05T17:56:41.000Z","findings":[{"id":"fgxpx4cdhqrhhgz277qwu","kind":"phishing_infrastructure","summary":"Resolved to 102.212.246.83, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T17:11:54.274Z","first_published":"2026-11-05T17:51:45.694Z","address":"102.212.246.83","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/xiaomi"},{"hostname":"dailywavebox.org","first_observed":"2026-11-05T17:05:43.524Z","first_published":"2026-11-05T17:51:45.694Z","brands":[],"dns":"no_address","resolved":[],"resolved_at":"2026-11-05T17:17:38Z","dns_checked_at":"2026-11-06T10:11:03.000Z","findings":[{"id":"fnhui3p22ca3ul55suji5","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T17:05:43.524Z","first_published":"2026-11-05T17:51:45.694Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=dailywavebox.org"},{"hostname":"degencityx.com","first_observed":"2026-11-05T17:26:51.740Z","first_published":"2026-11-05T17:51:45.694Z","brands":[],"dns":"resolved","resolved":["104.21.8.53","172.67.156.220"],"resolved_at":"2026-11-05T17:28:54Z","dns_checked_at":"2026-11-05T17:56:41.000Z","dns_since":"2026-11-05T17:56:41.000Z","findings":[{"id":"fxekq2leittdya4ctryuh","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T17:26:51.740Z","first_published":"2026-11-05T17:51:45.694Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/degencityx.com/"}],"url":"https://domainspoof.com/live?show=all&q=degencityx.com"},{"hostname":"dinamixorai-es.live","first_observed":"2026-11-05T17:21:30.538Z","first_published":"2026-11-05T17:51:45.694Z","brands":[],"dns":"resolved","resolved":["104.21.65.63","172.67.158.201"],"resolved_at":"2026-11-05T17:21:57Z","dns_checked_at":"2026-11-05T17:56:41.000Z","dns_since":"2026-11-05T17:56:41.000Z","findings":[{"id":"fbom7qfxgu6qifcad7kks","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T17:21:30.538Z","first_published":"2026-11-05T17:51:45.694Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=dinamixorai-es.live"},{"hostname":"dnrsus.com.drnsglobal.org","first_observed":"2026-11-05T17:31:43.403Z","first_published":"2026-11-05T17:51:45.694Z","brands":[],"dns":"resolved","resolved":["206.168.149.10"],"resolved_at":"2026-11-05T17:38:25Z","dns_checked_at":"2026-11-05T17:56:41.000Z","dns_since":"2026-11-05T17:56:41.000Z","findings":[{"id":"fqn6g7d5ugih63yq63odz","kind":"reported_domain","summary":"Under drnsglobal.org, reported by PhishDestroy","first_observed":"2026-11-05T17:31:43.403Z","first_published":"2026-11-05T17:51:45.694Z","source":"phishdestroy","source_name":"PhishDestroy","under":"drnsglobal.org","source_url":"https://phishdestroy.io/domain/drnsglobal.org/"}],"url":"https://domainspoof.com/live?show=all&q=dnrsus.com.drnsglobal.org"},{"hostname":"dobytnicaholdings.com","first_observed":"2026-11-05T17:05:43.524Z","first_published":"2026-11-05T17:51:45.694Z","brands":[],"dns":"resolved","resolved":["104.21.71.31","172.67.142.198"],"resolved_at":"2026-11-05T17:17:40Z","dns_checked_at":"2026-11-05T17:56:41.000Z","dns_since":"2026-11-05T17:56:41.000Z","findings":[{"id":"fszb3nyzwckq6m3sgq372","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T17:05:43.524Z","first_published":"2026-11-05T17:51:45.694Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=dobytnicaholdings.com"},{"hostname":"docker.polar-tensor.com","first_observed":"2026-11-05T17:31:43.403Z","first_published":"2026-11-05T17:51:45.694Z","brands":[],"dns":"resolved","resolved":["5.189.134.86","57.128.187.75","57.129.49.179","193.242.211.59"],"resolved_at":"2026-11-05T17:38:25Z","dns_checked_at":"2026-11-05T17:56:41.000Z","dns_since":"2026-11-05T17:56:41.000Z","findings":[{"id":"f5todkpxw4cnwir3pmnq2","kind":"reported_domain","summary":"Under polar-tensor.com, listed by MetaMask","first_observed":"2026-11-05T17:31:43.403Z","first_published":"2026-11-05T17:51:45.694Z","source":"metamask","source_name":"MetaMask","under":"polar-tensor.com"}],"url":"https://domainspoof.com/live?show=all&q=docker.polar-tensor.com"},{"hostname":"docs.olion.com","first_observed":"2026-11-05T17:36:58.500Z","first_published":"2026-11-05T17:51:45.694Z","brands":[],"dns":"resolved","resolved":["34.102.201.238"],"resolved_at":"2026-11-05T17:45:21Z","dns_checked_at":"2026-11-05T17:56:41.000Z","dns_since":"2026-11-05T17:56:41.000Z","findings":[{"id":"fro4rjpuad2j6cvjb6mpx","kind":"reported_domain","summary":"Under olion.com, reported by PhishDestroy","first_observed":"2026-11-05T17:36:58.500Z","first_published":"2026-11-05T17:51:45.694Z","source":"phishdestroy","source_name":"PhishDestroy","under":"olion.com","source_url":"https://phishdestroy.io/domain/olion.com/"}],"url":"https://domainspoof.com/live?show=all&q=docs.olion.com"},{"hostname":"drughub.nexus","first_observed":"2026-11-05T17:26:51.740Z","first_published":"2026-11-05T17:51:45.694Z","brands":[],"dns":"resolved","resolved":["104.21.39.220","172.67.149.30"],"resolved_at":"2026-11-05T17:28:56Z","dns_checked_at":"2026-11-05T17:56:41.000Z","dns_since":"2026-11-05T17:56:41.000Z","findings":[{"id":"fkhuoev7i2v42xdf6yiqw","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T17:26:51.740Z","first_published":"2026-11-05T17:51:45.694Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/drughub.nexus/"}],"url":"https://domainspoof.com/live?show=all&q=drughub.nexus"},{"hostname":"dublikat.shop","first_observed":"2026-11-05T17:21:30.538Z","first_published":"2026-11-05T17:51:45.694Z","brands":[],"dns":"resolved","resolved":["104.21.4.37","172.67.131.158"],"resolved_at":"2026-11-05T17:21:57Z","dns_checked_at":"2026-11-05T17:56:41.000Z","dns_since":"2026-11-05T17:56:41.000Z","findings":[{"id":"fwq22ukwquhngdnrm3opk","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T17:21:30.538Z","first_published":"2026-11-05T17:51:45.694Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/dublikat.shop/"}],"url":"https://domainspoof.com/live?show=all&q=dublikat.shop"},{"hostname":"duck.ag","first_observed":"2026-11-05T17:26:51.740Z","first_published":"2026-11-05T17:51:45.694Z","brands":[],"dns":"resolved","resolved":["75.2.60.5"],"resolved_at":"2026-11-05T17:28:56Z","dns_checked_at":"2026-11-05T17:56:41.000Z","dns_since":"2026-11-05T17:56:41.000Z","findings":[{"id":"fizghqzqo3bhyzgiskwyl","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T17:26:51.740Z","first_published":"2026-11-05T17:51:45.694Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/duck.ag/"}],"url":"https://domainspoof.com/live?show=all&q=duck.ag"},{"hostname":"dunebridgestudio.bond","first_observed":"2026-11-05T17:05:43.524Z","first_published":"2026-11-05T17:51:45.694Z","brands":[],"dns":"resolved","resolved":["104.21.69.226","172.67.214.151"],"resolved_at":"2026-11-05T17:17:40Z","dns_checked_at":"2026-11-05T17:56:41.000Z","dns_since":"2026-11-05T17:56:41.000Z","findings":[{"id":"f3xywgojjhiz5ywcbpf5o","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T17:05:43.524Z","first_published":"2026-11-05T17:51:45.694Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=dunebridgestudio.bond"},{"hostname":"en-live--ledgre.pages.dev","first_observed":"2026-11-05T17:41:44.806Z","first_published":"2026-11-05T17:51:45.694Z","brands":[],"dns":"resolved","resolved":["172.66.44.130","172.66.47.126"],"resolved_at":"2026-11-05T17:54:16Z","dns_checked_at":"2026-11-05T17:56:41.000Z","dns_since":"2026-11-05T17:56:41.000Z","findings":[{"id":"fepvdy3hzh6abjem7cvxl","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T17:41:44.806Z","first_published":"2026-11-05T17:51:45.694Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=en-live--ledgre.pages.dev"},{"hostname":"es-fintech.com","first_observed":"2026-11-05T17:36:58.500Z","first_published":"2026-11-05T17:51:45.694Z","brands":[],"dns":"resolved","resolved":["104.21.54.133","172.67.138.207"],"resolved_at":"2026-11-05T17:45:23Z","dns_checked_at":"2026-11-05T17:56:41.000Z","dns_since":"2026-11-05T17:56:41.000Z","findings":[{"id":"fikj7j37iof2sca7k6lig","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T17:36:58.500Z","first_published":"2026-11-05T17:51:45.694Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/es-fintech.com/"}],"url":"https://domainspoof.com/live?show=all&q=es-fintech.com"},{"hostname":"eu-changenow.at","first_observed":"2026-11-05T16:46:43.799Z","first_published":"2026-11-05T17:51:45.694Z","brands":[{"id":"changenow","name":"ChangeNOW","url":"https://domainspoof.com/brands/changenow"}],"dns":"resolved","resolved":["104.21.66.143","172.67.204.178"],"resolved_at":"2026-11-05T16:56:33Z","dns_checked_at":"2026-11-05T17:56:41.000Z","dns_since":"2026-11-05T17:56:41.000Z","findings":[{"id":"fqotejwl7jpqj5uqe5q7b","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T16:46:43.799Z","first_published":"2026-11-05T17:51:45.694Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/brands/changenow"},{"hostname":"euek.agndatacom.com","first_observed":"2026-11-05T16:41:52.112Z","first_published":"2026-11-05T17:51:45.694Z","brands":[],"dns":"resolved","resolved":["185.53.179.136"],"resolved_at":"2026-11-05T16:44:54Z","dns_checked_at":"2026-11-05T17:56:41.000Z","dns_since":"2026-11-05T17:56:41.000Z","findings":[{"id":"fjuvo2ndswtpfheyr4pzl","kind":"reported_domain","summary":"Under agndatacom.com, listed by MetaMask","first_observed":"2026-11-05T16:41:52.112Z","first_published":"2026-11-05T17:51:45.694Z","source":"metamask","source_name":"MetaMask","under":"agndatacom.com"}],"url":"https://domainspoof.com/live?show=all&q=euek.agndatacom.com"},{"hostname":"eugfg.shop","first_observed":"2026-11-05T16:46:43.799Z","first_published":"2026-11-05T17:51:45.694Z","brands":[],"dns":"resolved","resolved":["104.21.25.16","172.67.221.145"],"resolved_at":"2026-11-05T16:56:33Z","dns_checked_at":"2026-11-05T17:56:41.000Z","dns_since":"2026-11-05T17:56:41.000Z","findings":[{"id":"fdou4qikebegnu36q525k","kind":"reported_domain","summary":"Listed by NPA 165 (e-commerce)","first_observed":"2026-11-05T16:46:43.799Z","first_published":"2026-11-05T17:51:45.694Z","source":"npa","source_name":"NPA 165","claim":{"category":"e-commerce"}}],"url":"https://domainspoof.com/live?show=all&q=eugfg.shop"},{"hostname":"evolution-zenith.net","first_observed":"2026-11-05T17:26:51.740Z","first_published":"2026-11-05T17:51:45.694Z","brands":[],"dns":"resolved","resolved":["104.21.37.226","172.67.214.89"],"resolved_at":"2026-11-06T10:14:51Z","dns_checked_at":"2026-11-05T17:56:41.000Z","dns_since":"2026-11-05T17:56:41.000Z","findings":[{"id":"fjiqxyqualjamnr55vmkp","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T17:26:51.740Z","first_published":"2026-11-05T17:51:45.694Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=evolution-zenith.net"},{"hostname":"falkenberg.nf1.io-ext.se","first_observed":"2026-11-05T16:41:52.112Z","first_published":"2026-11-05T17:51:45.694Z","brands":[],"dns":"resolved","resolved":["195.246.120.17"],"resolved_at":"2026-11-05T16:44:56Z","dns_checked_at":"2026-11-05T17:56:41.000Z","dns_since":"2026-11-05T17:56:41.000Z","findings":[{"id":"fj7q5edxp2lkyl46lmwqa","kind":"reported_domain","summary":"Under io-ext.se, listed by MetaMask","first_observed":"2026-11-05T16:41:52.112Z","first_published":"2026-11-05T17:51:45.694Z","source":"metamask","source_name":"MetaMask","under":"io-ext.se"}],"url":"https://domainspoof.com/live?show=all&q=falkenberg.nf1.io-ext.se"},{"hostname":"fenix-finance.org","first_observed":"2026-11-05T17:41:44.806Z","first_published":"2026-11-05T17:51:45.694Z","brands":[],"dns":"resolved","resolved":["104.21.74.152","172.67.203.221"],"resolved_at":"2026-11-06T11:37:11Z","dns_checked_at":"2026-11-05T17:56:41.000Z","dns_since":"2026-11-05T17:56:41.000Z","findings":[{"id":"f45pu437vwbejnhg5jbno","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T17:41:44.806Z","first_published":"2026-11-05T17:51:45.694Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=fenix-finance.org"},{"hostname":"fgyqh.asia","first_observed":"2026-11-05T16:51:41.224Z","first_published":"2026-11-05T17:51:45.694Z","brands":[],"dns":"resolved","resolved":["104.21.46.40","172.67.223.144"],"resolved_at":"2026-11-05T16:52:05Z","dns_checked_at":"2026-11-05T17:56:41.000Z","dns_since":"2026-11-05T17:56:41.000Z","findings":[{"id":"foy4m4efdj7ucw3gxpftq","kind":"reported_domain","summary":"Listed by NPA 165 (information services)","first_observed":"2026-11-05T16:51:41.224Z","first_published":"2026-11-05T17:51:45.694Z","source":"npa","source_name":"NPA 165","claim":{"category":"information services"}}],"url":"https://domainspoof.com/live?show=all&q=fgyqh.asia"},{"hostname":"flowdextrust82-it.live","first_observed":"2026-11-05T17:41:44.806Z","first_published":"2026-11-05T17:51:45.694Z","brands":[],"dns":"resolved","resolved":["104.21.41.24","172.67.159.16"],"resolved_at":"2026-11-05T17:54:20Z","dns_checked_at":"2026-11-05T17:56:41.000Z","dns_since":"2026-11-05T17:56:41.000Z","findings":[{"id":"f7k7n4mbylie34jyszya6","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T17:41:44.806Z","first_published":"2026-11-05T17:51:45.694Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=flowdextrust82-it.live"},{"hostname":"fra-12124c.wb-cdn-global.com","first_observed":"2026-11-05T17:21:30.538Z","first_published":"2026-11-05T17:51:45.694Z","brands":[],"dns":"resolved","resolved":["45.133.74.82"],"resolved_at":"2026-11-05T17:22:00Z","dns_checked_at":"2026-11-05T17:56:41.000Z","dns_since":"2026-11-05T17:56:41.000Z","findings":[{"id":"ftl3jujcrekmgjwnd6bxd","kind":"reported_domain","summary":"Under wb-cdn-global.com, listed by MetaMask","first_observed":"2026-11-05T17:21:30.538Z","first_published":"2026-11-05T17:51:45.694Z","source":"metamask","source_name":"MetaMask","under":"wb-cdn-global.com"}],"url":"https://domainspoof.com/live?show=all&q=fra-12124c.wb-cdn-global.com"},{"hostname":"fra-21b468.wb-cdn-global.com","first_observed":"2026-11-05T16:56:53.456Z","first_published":"2026-11-05T17:51:45.694Z","brands":[],"dns":"resolved","resolved":["145.63.132.67"],"resolved_at":"2026-11-05T17:05:31Z","dns_checked_at":"2026-11-05T17:56:41.000Z","dns_since":"2026-11-05T17:56:41.000Z","findings":[{"id":"ffwi6n6pej3nhregdjamq","kind":"reported_domain","summary":"Under wb-cdn-global.com, listed by MetaMask","first_observed":"2026-11-05T16:56:53.456Z","first_published":"2026-11-05T17:51:45.694Z","source":"metamask","source_name":"MetaMask","under":"wb-cdn-global.com"}],"url":"https://domainspoof.com/live?show=all&q=fra-21b468.wb-cdn-global.com"},{"hostname":"futurenfdw.com","first_observed":"2026-11-05T17:05:43.524Z","first_published":"2026-11-05T17:51:45.694Z","brands":[],"dns":"resolved","resolved":["104.21.24.28","172.67.216.126"],"resolved_at":"2026-11-05T17:05:51Z","dns_checked_at":"2026-11-05T17:56:41.000Z","dns_since":"2026-11-05T17:56:41.000Z","findings":[{"id":"f6aptu2exxc6tcgmiu6e6","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T17:05:43.524Z","first_published":"2026-11-05T17:51:45.694Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=futurenfdw.com"},{"hostname":"fx.legacytrustfinance.com","first_observed":"2026-11-05T17:16:10.565Z","first_published":"2026-11-05T17:51:45.694Z","brands":[],"dns":"resolved","resolved":["198.251.84.200"],"resolved_at":"2026-11-05T17:16:48Z","dns_checked_at":"2026-11-05T17:56:41.000Z","dns_since":"2026-11-05T17:56:41.000Z","findings":[{"id":"fvorwalkfqpelfb5kz3ru","kind":"reported_domain","summary":"Under legacytrustfinance.com, reported by PhishDestroy","first_observed":"2026-11-05T17:16:10.565Z","first_published":"2026-11-05T17:51:45.694Z","source":"phishdestroy","source_name":"PhishDestroy","under":"legacytrustfinance.com","source_url":"https://phishdestroy.io/domain/legacytrustfinance.com/"}],"url":"https://domainspoof.com/live?show=all&q=fx.legacytrustfinance.com"},{"hostname":"gamevwr.com","first_observed":"2026-11-05T17:21:30.538Z","first_published":"2026-11-05T17:51:45.694Z","brands":[],"dns":"resolved","resolved":["103.224.182.250"],"resolved_at":"2026-11-05T17:22:00Z","dns_checked_at":"2026-11-05T17:56:41.000Z","dns_since":"2026-11-05T17:56:41.000Z","findings":[{"id":"f2ukvqsmpccqkm5ghfnm5","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T17:21:30.538Z","first_published":"2026-11-05T17:51:45.694Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=gamevwr.com"},{"hostname":"genboxx.net","first_observed":"2026-11-05T16:56:53.456Z","first_published":"2026-11-05T17:51:45.694Z","brands":[],"dns":"resolved","resolved":["104.21.74.56","172.67.155.175"],"resolved_at":"2026-11-05T17:05:31Z","dns_checked_at":"2026-11-05T17:56:41.000Z","dns_since":"2026-11-05T17:56:41.000Z","findings":[{"id":"fxzwjimcjjauzivzcrzzy","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T16:56:53.456Z","first_published":"2026-11-05T17:51:45.694Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=genboxx.net"},{"hostname":"giustowex-it.live","first_observed":"2026-11-05T17:00:35.682Z","first_published":"2026-11-05T17:51:45.694Z","brands":[],"dns":"resolved","resolved":["104.21.63.242","172.67.173.93"],"resolved_at":"2026-11-05T17:00:46Z","dns_checked_at":"2026-11-05T17:56:41.000Z","dns_since":"2026-11-05T17:56:41.000Z","findings":[{"id":"filoyuqiul5hdr3bsis2o","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T17:00:35.682Z","first_published":"2026-11-05T17:51:45.694Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=giustowex-it.live"},{"hostname":"glanz-gmbh.de","first_observed":"2026-11-05T17:26:51.740Z","first_published":"2026-11-05T17:51:45.694Z","brands":[],"dns":"resolved","resolved":["185.243.11.51","2a03:4000:2c:2aa:14:300:0:7"],"resolved_at":"2026-11-05T17:29:03Z","dns_checked_at":"2026-11-05T17:56:41.000Z","dns_since":"2026-11-05T17:56:41.000Z","findings":[{"id":"favfqnyv7mfshars6ouey","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T17:26:51.740Z","first_published":"2026-11-05T17:51:45.694Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/glanz-gmbh.de/"}],"url":"https://domainspoof.com/live?show=all&q=glanz-gmbh.de"},{"hostname":"global-huobi.com.cn","first_observed":"2026-11-05T17:16:10.565Z","first_published":"2026-11-05T17:51:45.694Z","brands":[],"dns":"no_address","resolved":[],"resolved_at":"2026-11-05T17:16:48Z","dns_checked_at":"2026-11-06T10:11:03.000Z","findings":[{"id":"fiefpj3mxct4l7ei6r4fi","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T17:16:10.565Z","first_published":"2026-11-05T17:51:45.694Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=global-huobi.com.cn"},{"hostname":"gorvulikent-it.live","first_observed":"2026-11-05T16:51:41.224Z","first_published":"2026-11-05T17:51:45.694Z","brands":[],"dns":"resolved","resolved":["104.21.47.112","172.67.147.55"],"resolved_at":"2026-11-05T16:52:05Z","dns_checked_at":"2026-11-05T17:56:41.000Z","dns_since":"2026-11-05T17:56:41.000Z","findings":[{"id":"fffhivgl3oy7p5obm4vnu","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T16:51:41.224Z","first_published":"2026-11-05T17:51:45.694Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=gorvulikent-it.live"},{"hostname":"gro82x-cryptoslate.com","first_observed":"2026-11-05T17:41:44.806Z","first_published":"2026-11-05T17:51:45.694Z","brands":[],"dns":"resolved","resolved":["192.142.10.5"],"resolved_at":"2026-11-05T17:54:22Z","dns_checked_at":"2026-11-05T17:56:41.000Z","dns_since":"2026-11-05T17:56:41.000Z","findings":[{"id":"fxzcn6trk6qmiewdfoivm","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T17:41:44.806Z","first_published":"2026-11-05T17:51:45.694Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/gro82x-cryptoslate.com/"}],"url":"https://domainspoof.com/live?show=all&q=gro82x-cryptoslate.com"},{"hostname":"grymmon-coren93-nl.live","first_observed":"2026-11-05T17:00:35.682Z","first_published":"2026-11-05T17:51:45.694Z","brands":[],"dns":"resolved","resolved":["104.21.96.129","172.67.180.250"],"resolved_at":"2026-11-05T17:00:46Z","dns_checked_at":"2026-11-05T17:56:41.000Z","dns_since":"2026-11-05T17:56:41.000Z","findings":[{"id":"f3bfs7obslxnw63pxpsnf","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T17:00:35.682Z","first_published":"2026-11-05T17:51:45.694Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=grymmon-coren93-nl.live"},{"hostname":"haberler4923648.sbs","first_observed":"2026-11-05T17:17:27.540Z","first_published":"2026-11-05T17:51:45.694Z","brands":[],"dns":"resolved","resolved":["64.89.160.238"],"resolved_at":"2026-11-05T17:17:34Z","dns_checked_at":"2026-11-05T17:56:41.000Z","dns_since":"2026-11-05T17:56:41.000Z","findings":[{"id":"foalnln2k7eixvk6uepxm","kind":"reported_domain","summary":"Listed by USOM","first_observed":"2026-11-05T17:17:27.540Z","first_published":"2026-11-05T17:51:45.694Z","source":"usom","source_name":"USOM"}],"url":"https://domainspoof.com/live?show=all&q=haberler4923648.sbs"},{"hostname":"helpdesk.ni-electrical.com","first_observed":"2026-11-05T17:36:58.500Z","first_published":"2026-11-05T17:51:45.694Z","brands":[],"dns":"resolved","resolved":["109.238.86.5"],"resolved_at":"2026-11-05T17:45:26Z","dns_checked_at":"2026-11-05T17:56:41.000Z","dns_since":"2026-11-05T17:56:41.000Z","findings":[{"id":"fo6iqexoczrnswkp3rado","kind":"reported_domain","summary":"Under ni-electrical.com, listed by CERT Polska","first_observed":"2026-11-05T17:36:58.500Z","first_published":"2026-11-05T17:51:45.694Z","source":"cert_polska","source_name":"CERT Polska","under":"ni-electrical.com"}],"url":"https://domainspoof.com/live?show=all&q=helpdesk.ni-electrical.com"},{"hostname":"hofkammerpro-de.live","first_observed":"2026-11-05T16:51:41.224Z","first_published":"2026-11-05T17:51:45.694Z","brands":[],"dns":"resolved","resolved":["104.21.87.221","172.67.170.251"],"resolved_at":"2026-11-05T16:52:05Z","dns_checked_at":"2026-11-05T17:56:41.000Z","dns_since":"2026-11-05T17:56:41.000Z","findings":[{"id":"fkqcp5fb47uxhj4eq5dbd","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T16:51:41.224Z","first_published":"2026-11-05T17:51:45.694Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=hofkammerpro-de.live"},{"hostname":"in-fohesap.com","first_observed":"2026-11-05T17:26:51.740Z","first_published":"2026-11-05T17:51:45.694Z","brands":[],"dns":"resolved","resolved":["104.21.57.95","172.67.190.17"],"resolved_at":"2026-11-05T17:29:13Z","dns_checked_at":"2026-11-05T17:56:41.000Z","dns_since":"2026-11-05T17:56:41.000Z","findings":[{"id":"fzdncp54b2ovph4vupjtf","kind":"reported_domain","summary":"Listed by USOM","first_observed":"2026-11-05T17:26:51.740Z","first_published":"2026-11-05T17:51:45.694Z","source":"usom","source_name":"USOM"}],"url":"https://domainspoof.com/live?show=all&q=in-fohesap.com"},{"hostname":"intexcorp.marketpl.shop","first_observed":"2026-11-05T17:36:58.500Z","first_published":"2026-11-05T17:51:45.694Z","brands":[],"dns":"resolved","resolved":["104.21.14.164","172.67.160.15"],"resolved_at":"2026-11-05T17:45:28Z","dns_checked_at":"2026-11-05T17:56:41.000Z","dns_since":"2026-11-05T17:56:41.000Z","findings":[{"id":"fglgbzcspjk6zbummaiu6","kind":"reported_domain","summary":"Under marketpl.shop, listed by CERT Polska","first_observed":"2026-11-05T17:36:58.500Z","first_published":"2026-11-05T17:51:45.694Z","source":"cert_polska","source_name":"CERT Polska","under":"marketpl.shop"}],"url":"https://domainspoof.com/live?show=all&q=intexcorp.marketpl.shop"},{"hostname":"io-wallet.run","first_observed":"2026-11-05T17:41:44.806Z","first_published":"2026-11-05T17:51:45.694Z","brands":[],"dns":"resolved","resolved":["104.21.27.79","172.67.141.212"],"resolved_at":"2026-11-05T17:54:30Z","dns_checked_at":"2026-11-05T17:56:41.000Z","dns_since":"2026-11-05T17:56:41.000Z","findings":[{"id":"fagiuhwi6uc3phgke7544","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T17:41:44.806Z","first_published":"2026-11-05T17:51:45.694Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=io-wallet.run"},{"hostname":"ironfundalis-nl.live","first_observed":"2026-11-05T16:41:52.112Z","first_published":"2026-11-05T17:51:45.694Z","brands":[],"dns":"resolved","resolved":["104.21.59.169","172.67.181.91"],"resolved_at":"2026-11-05T16:45:02Z","dns_checked_at":"2026-11-05T17:56:41.000Z","dns_since":"2026-11-05T17:56:41.000Z","findings":[{"id":"fnywyuwu5kqzo245s7jiv","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T16:41:52.112Z","first_published":"2026-11-05T17:51:45.694Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=ironfundalis-nl.live"},{"hostname":"itei.org.mx","first_observed":"2026-11-05T17:11:24.356Z","first_published":"2026-11-05T17:51:45.694Z","brands":[],"dns":"resolved","resolved":["38.45.71.108"],"resolved_at":"2026-11-05T17:11:54Z","dns_checked_at":"2026-11-05T17:56:41.000Z","dns_since":"2026-11-05T17:56:41.000Z","findings":[{"id":"fqkxlikijeghgdq6x4jrn","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T17:11:24.356Z","first_published":"2026-11-05T17:51:45.694Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/itei.org.mx/"}],"url":"https://domainspoof.com/live?show=all&q=itei.org.mx"},{"hostname":"jelvruvozanai-fr.live","first_observed":"2026-11-05T17:26:51.740Z","first_published":"2026-11-05T17:51:45.694Z","brands":[],"dns":"resolved","resolved":["104.21.41.141","172.67.191.53"],"resolved_at":"2026-11-05T17:29:14Z","dns_checked_at":"2026-11-05T17:56:41.000Z","dns_since":"2026-11-05T17:56:41.000Z","findings":[{"id":"fgfssfbxn7cq7gwl2dynp","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T17:26:51.740Z","first_published":"2026-11-05T17:51:45.694Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=jelvruvozanai-fr.live"},{"hostname":"jihgfedcbghfuvnotexists3216c8cb8a8-1669-4888-9584-d7052cf15662.acquency.com","first_observed":"2026-11-05T16:46:43.799Z","first_published":"2026-11-05T17:51:45.694Z","brands":[],"dns":"resolved","resolved":["104.21.41.18","172.67.189.8"],"resolved_at":"2026-11-05T16:56:38Z","dns_checked_at":"2026-11-05T17:56:41.000Z","dns_since":"2026-11-05T17:56:41.000Z","findings":[{"id":"ftauz3lusevdwfe5qhpsx","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T16:46:43.799Z","first_published":"2026-11-05T17:51:45.694Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/jihgfedcbghfuvnotexists3216c8cb8a8-1669-4888-9584-d7052cf15662.acquency.com/"}],"url":"https://domainspoof.com/live?show=all&q=jihgfedcbghfuvnotexists3216c8cb8a8-1669-4888-9584-d7052cf15662.acquency.com"},{"hostname":"jimmyquizgiveaway.com","first_observed":"2026-11-05T17:21:30.538Z","first_published":"2026-11-05T17:51:45.694Z","brands":[],"dns":"resolved","resolved":["3.33.130.190","15.197.148.33"],"resolved_at":"2026-11-05T17:22:01Z","dns_checked_at":"2026-11-05T17:56:41.000Z","dns_since":"2026-11-05T17:56:41.000Z","findings":[{"id":"fwi5miucn2ajjk3eow75z","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T17:21:30.538Z","first_published":"2026-11-05T17:51:45.694Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/jimmyquizgiveaway.com/"}],"url":"https://domainspoof.com/live?show=all&q=jimmyquizgiveaway.com"},{"hostname":"jnr7vz.shop","first_observed":"2026-11-05T16:41:52.112Z","first_published":"2026-11-05T17:51:45.694Z","brands":[],"dns":"resolved","resolved":["104.21.90.107","172.67.199.221"],"resolved_at":"2026-11-05T16:45:03Z","dns_checked_at":"2026-11-05T17:56:41.000Z","dns_since":"2026-11-05T17:56:41.000Z","findings":[{"id":"ff77igsc3o4g37lmthmkg","kind":"reported_domain","summary":"Listed by NPA 165 (e-commerce)","first_observed":"2026-11-05T16:41:52.112Z","first_published":"2026-11-05T17:51:45.694Z","source":"npa","source_name":"NPA 165","claim":{"category":"e-commerce"}}],"url":"https://domainspoof.com/live?show=all&q=jnr7vz.shop"},{"hostname":"jof-tech.com.ng","first_observed":"2026-11-05T17:31:43.403Z","first_published":"2026-11-05T17:51:45.694Z","brands":[],"dns":"resolved","resolved":["165.99.164.20"],"resolved_at":"2026-11-05T17:38:32Z","dns_checked_at":"2026-11-05T17:56:41.000Z","dns_since":"2026-11-05T17:56:41.000Z","findings":[{"id":"fupjgzccgun7npvxu7qrr","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T17:31:43.403Z","first_published":"2026-11-05T17:51:45.694Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/jof-tech.com.ng/"}],"url":"https://domainspoof.com/live?show=all&q=jof-tech.com.ng"},{"hostname":"jpy.chatgpt05.com","first_observed":"2026-11-05T17:22:01.076Z","first_published":"2026-11-05T17:51:45.694Z","brands":[{"id":"openai","name":"OpenAI","url":"https://domainspoof.com/brands/openai"}],"dns":"resolved","resolved":["134.122.139.51"],"resolved_at":"2026-11-05T17:56:41Z","dns_checked_at":"2026-11-05T17:56:41.000Z","dns_since":"2026-11-05T17:56:41.000Z","findings":[{"id":"fjuqqzgfktfzu23cht3fg","kind":"spamhaus_drop","summary":"Resolved to 134.122.139.51 on Spamhaus DROP","first_observed":"2026-11-05T17:22:01.076Z","first_published":"2026-11-05T17:51:45.694Z","address":"134.122.139.51","list":"spamhaus_drop","list_name":"Spamhaus DROP"}],"url":"https://domainspoof.com/brands/openai"},{"hostname":"kalyxen.io","first_observed":"2026-11-05T17:26:51.740Z","first_published":"2026-11-05T17:51:45.694Z","brands":[],"dns":"resolved","resolved":["216.150.1.1"],"resolved_at":"2026-11-05T17:29:15Z","dns_checked_at":"2026-11-05T17:56:41.000Z","dns_since":"2026-11-05T17:56:41.000Z","findings":[{"id":"fj4m7hx5d6davozqmczy7","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T17:26:51.740Z","first_published":"2026-11-05T17:51:45.694Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/kalyxen.io/"}],"url":"https://domainspoof.com/live?show=all&q=kalyxen.io"},{"hostname":"kfd0by.asia","first_observed":"2026-11-05T17:41:44.806Z","first_published":"2026-11-05T17:51:45.694Z","brands":[],"dns":"resolved","resolved":["104.21.49.85","172.67.160.112"],"resolved_at":"2026-11-05T17:54:32Z","dns_checked_at":"2026-11-05T17:56:41.000Z","dns_since":"2026-11-05T17:56:41.000Z","findings":[{"id":"fwjcuhvnu3lm6asqs3kb2","kind":"reported_domain","summary":"Listed by NPA 165 (e-commerce)","first_observed":"2026-11-05T17:41:44.806Z","first_published":"2026-11-05T17:51:45.694Z","source":"npa","source_name":"NPA 165","claim":{"category":"e-commerce"}}],"url":"https://domainspoof.com/live?show=all&q=kfd0by.asia"},{"hostname":"kmpnyybsvrr32352.info","first_observed":"2026-11-05T17:17:27.540Z","first_published":"2026-11-05T17:51:45.694Z","brands":[],"dns":"resolved","resolved":["64.89.160.238"],"resolved_at":"2026-11-05T17:17:34Z","dns_checked_at":"2026-11-05T17:56:41.000Z","dns_since":"2026-11-05T17:56:41.000Z","findings":[{"id":"f5qqk7ymbpvy2lq7fcwil","kind":"reported_domain","summary":"Listed by USOM","first_observed":"2026-11-05T17:17:27.540Z","first_published":"2026-11-05T17:51:45.694Z","source":"usom","source_name":"USOM"}],"url":"https://domainspoof.com/live?show=all&q=kmpnyybsvrr32352.info"},{"hostname":"kmpnyybsvrr32352.online","first_observed":"2026-11-05T17:17:27.540Z","first_published":"2026-11-05T17:51:45.694Z","brands":[],"dns":"resolved","resolved":["64.89.160.238"],"resolved_at":"2026-11-05T17:17:34Z","dns_checked_at":"2026-11-05T17:56:41.000Z","dns_since":"2026-11-05T17:56:41.000Z","findings":[{"id":"fah6u6yiruvdc4n7dl72s","kind":"reported_domain","summary":"Listed by USOM","first_observed":"2026-11-05T17:17:27.540Z","first_published":"2026-11-05T17:51:45.694Z","source":"usom","source_name":"USOM"}],"url":"https://domainspoof.com/live?show=all&q=kmpnyybsvrr32352.online"},{"hostname":"krkm-to.at","first_observed":"2026-11-05T17:11:24.356Z","first_published":"2026-11-05T17:51:45.694Z","brands":[],"dns":"resolved","resolved":["104.21.22.204","172.67.206.235"],"resolved_at":"2026-11-05T17:11:54Z","dns_checked_at":"2026-11-05T17:56:41.000Z","dns_since":"2026-11-05T17:56:41.000Z","findings":[{"id":"f46mngd2njjktkp6dauea","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T17:11:24.356Z","first_published":"2026-11-05T17:51:45.694Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/krkm-to.at/"}],"url":"https://domainspoof.com/live?show=all&q=krkm-to.at"},{"hostname":"kyo-finance.com","first_observed":"2026-11-05T17:36:58.500Z","first_published":"2026-11-05T17:51:45.694Z","brands":[],"dns":"resolved","resolved":["104.21.14.77","172.67.158.48"],"resolved_at":"2026-11-06T11:41:53Z","dns_checked_at":"2026-11-05T17:56:41.000Z","dns_since":"2026-11-05T17:56:41.000Z","findings":[{"id":"fm4vpms225nd4e4v5rgii","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T17:36:58.500Z","first_published":"2026-11-05T17:51:45.694Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=kyo-finance.com"},{"hostname":"lakiworld.casinolic.com","first_observed":"2026-11-05T17:41:44.806Z","first_published":"2026-11-05T17:51:45.694Z","brands":[],"dns":"resolved","resolved":["193.233.63.124"],"resolved_at":"2026-11-05T17:54:32Z","dns_checked_at":"2026-11-05T17:56:41.000Z","dns_since":"2026-11-05T17:56:41.000Z","findings":[{"id":"fbqzwrttgzmj4aiitbk3a","kind":"reported_domain","summary":"Under casinolic.com, reported by PhishDestroy","first_observed":"2026-11-05T17:41:44.806Z","first_published":"2026-11-05T17:51:45.694Z","source":"phishdestroy","source_name":"PhishDestroy","under":"casinolic.com","source_url":"https://phishdestroy.io/domain/casinolic.com/"}],"url":"https://domainspoof.com/live?show=all&q=lakiworld.casinolic.com"},{"hostname":"ledgerr--live--app.pages.dev","first_observed":"2026-11-05T16:41:52.112Z","first_published":"2026-11-05T17:51:45.694Z","brands":[],"dns":"resolved","resolved":["172.66.44.234","172.66.47.22"],"resolved_at":"2026-11-05T16:45:04Z","dns_checked_at":"2026-11-05T17:56:41.000Z","dns_since":"2026-11-05T17:56:41.000Z","findings":[{"id":"fw57is5e27tvsaukljerd","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T16:41:52.112Z","first_published":"2026-11-05T17:51:45.694Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=ledgerr--live--app.pages.dev"},{"hostname":"limanfindra.net","first_observed":"2026-11-05T17:16:10.565Z","first_published":"2026-11-05T17:51:45.694Z","brands":[],"dns":"resolved","resolved":["104.21.54.218","172.67.142.218"],"resolved_at":"2026-11-05T17:16:53Z","dns_checked_at":"2026-11-05T17:56:41.000Z","dns_since":"2026-11-05T17:56:41.000Z","findings":[{"id":"fhm4uysawsmh3zqhwbvkw","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T17:16:10.565Z","first_published":"2026-11-05T17:51:45.694Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=limanfindra.net"},{"hostname":"llm.socialvisor.ru","first_observed":"2026-11-05T16:46:43.799Z","first_published":"2026-11-05T17:51:45.694Z","brands":[],"dns":"resolved","resolved":["91.215.41.91"],"resolved_at":"2026-11-05T16:56:39Z","dns_checked_at":"2026-11-05T17:56:41.000Z","dns_since":"2026-11-05T17:56:41.000Z","findings":[{"id":"fgt5blq22wskpjcdt4c36","kind":"reported_domain","summary":"Under socialvisor.ru, reported by PhishDestroy","first_observed":"2026-11-05T16:46:43.799Z","first_published":"2026-11-05T17:51:45.694Z","source":"phishdestroy","source_name":"PhishDestroy","under":"socialvisor.ru","source_url":"https://phishdestroy.io/domain/socialvisor.ru/"}],"url":"https://domainspoof.com/live?show=all&q=llm.socialvisor.ru"},{"hostname":"loginsplug.ng","first_observed":"2026-11-05T17:31:43.403Z","first_published":"2026-11-05T17:51:45.694Z","brands":[],"dns":"resolved","resolved":["163.61.188.7"],"resolved_at":"2026-11-05T17:38:33Z","dns_checked_at":"2026-11-05T17:56:41.000Z","dns_since":"2026-11-05T17:56:41.000Z","findings":[{"id":"fnemczr5wnsqnsvjhw3pr","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T17:31:43.403Z","first_published":"2026-11-05T17:51:45.694Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/loginsplug.ng/"}],"url":"https://domainspoof.com/live?show=all&q=loginsplug.ng"},{"hostname":"magabit.net","first_observed":"2026-11-05T17:36:58.500Z","first_published":"2026-11-05T17:51:45.694Z","brands":[],"dns":"resolved","resolved":["162.159.135.42"],"resolved_at":"2026-11-05T17:45:30Z","dns_checked_at":"2026-11-05T17:56:41.000Z","dns_since":"2026-11-05T17:56:41.000Z","findings":[{"id":"fzgl7c4q64jwz4pazhu5g","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T17:36:58.500Z","first_published":"2026-11-05T17:51:45.694Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/magabit.net/"}],"url":"https://domainspoof.com/live?show=all&q=magabit.net"},{"hostname":"mail.accessglobaltrades.com","first_observed":"2026-11-05T17:31:43.403Z","first_published":"2026-11-05T17:51:45.694Z","brands":[],"dns":"resolved","resolved":["185.53.179.136"],"resolved_at":"2026-11-05T17:38:34Z","dns_checked_at":"2026-11-05T17:56:41.000Z","dns_since":"2026-11-05T17:56:41.000Z","findings":[{"id":"ftsdofljumvxjkdpn6qdd","kind":"reported_domain","summary":"Under accessglobaltrades.com, reported by PhishDestroy","first_observed":"2026-11-05T17:31:43.403Z","first_published":"2026-11-05T17:51:45.694Z","source":"phishdestroy","source_name":"PhishDestroy","under":"accessglobaltrades.com","source_url":"https://phishdestroy.io/domain/accessglobaltrades.com/"}],"url":"https://domainspoof.com/live?show=all&q=mail.accessglobaltrades.com"},{"hostname":"mansndksmsnskzkskek.org","first_observed":"2026-11-05T17:21:30.538Z","first_published":"2026-11-05T17:51:45.694Z","brands":[],"dns":"resolved","resolved":["104.21.14.188","172.67.160.40"],"resolved_at":"2026-11-05T17:22:01Z","dns_checked_at":"2026-11-05T17:56:41.000Z","dns_since":"2026-11-05T17:56:41.000Z","findings":[{"id":"ffaxg5ubpp3fp7bww62lg","kind":"reported_domain","summary":"Listed by USOM","first_observed":"2026-11-05T17:21:30.538Z","first_published":"2026-11-05T17:51:45.694Z","source":"usom","source_name":"USOM"}],"url":"https://domainspoof.com/live?show=all&q=mansndksmsnskzkskek.org"},{"hostname":"mansndksnskwlwkdnd.org","first_observed":"2026-11-05T17:21:30.538Z","first_published":"2026-11-05T17:51:45.694Z","brands":[],"dns":"resolved","resolved":["34.90.71.70"],"resolved_at":"2026-11-05T17:22:01Z","dns_checked_at":"2026-11-05T17:56:41.000Z","dns_since":"2026-11-05T17:56:41.000Z","findings":[{"id":"f6lj74hwqhp4ooikrmgai","kind":"reported_domain","summary":"Listed by USOM","first_observed":"2026-11-05T17:21:30.538Z","first_published":"2026-11-05T17:51:45.694Z","source":"usom","source_name":"USOM"}],"url":"https://domainspoof.com/live?show=all&q=mansndksnskwlwkdnd.org"},{"hostname":"marearentivo-it.live","first_observed":"2026-11-05T17:21:30.538Z","first_published":"2026-11-05T17:51:45.694Z","brands":[],"dns":"resolved","resolved":["104.21.64.215","172.67.187.226"],"resolved_at":"2026-11-05T17:22:01Z","dns_checked_at":"2026-11-05T17:56:41.000Z","dns_since":"2026-11-05T17:56:41.000Z","findings":[{"id":"fs537m3ij7pxjud7iasji","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T17:21:30.538Z","first_published":"2026-11-05T17:51:45.694Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=marearentivo-it.live"},{"hostname":"mareerentoire-fr.live","first_observed":"2026-11-05T17:26:51.740Z","first_published":"2026-11-05T17:51:45.694Z","brands":[],"dns":"resolved","resolved":["104.21.1.60","172.67.128.180"],"resolved_at":"2026-11-05T17:29:18Z","dns_checked_at":"2026-11-05T17:56:41.000Z","dns_since":"2026-11-05T17:56:41.000Z","findings":[{"id":"fwgsjplinlijljw67qe3t","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T17:26:51.740Z","first_published":"2026-11-05T17:51:45.694Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=mareerentoire-fr.live"},{"hostname":"mechanica.run","first_observed":"2026-11-05T16:51:41.224Z","first_published":"2026-11-05T17:51:45.694Z","brands":[],"dns":"resolved","resolved":["104.21.89.121","172.67.141.223"],"resolved_at":"2026-11-05T16:52:06Z","dns_checked_at":"2026-11-05T17:56:41.000Z","dns_since":"2026-11-05T17:56:41.000Z","findings":[{"id":"f25aabq2zvuj2kpskuwlm","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T16:51:41.224Z","first_published":"2026-11-05T17:51:45.694Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=mechanica.run"},{"hostname":"metabase.ni-electrical.com","first_observed":"2026-11-05T17:31:43.403Z","first_published":"2026-11-05T17:51:45.694Z","brands":[],"dns":"resolved","resolved":["109.238.86.5"],"resolved_at":"2026-11-05T17:38:34Z","dns_checked_at":"2026-11-05T17:56:41.000Z","dns_since":"2026-11-05T17:56:41.000Z","findings":[{"id":"fvqjdj7ymrcr4ymazejnx","kind":"reported_domain","summary":"Under ni-electrical.com, listed by CERT Polska","first_observed":"2026-11-05T17:31:43.403Z","first_published":"2026-11-05T17:51:45.694Z","source":"cert_polska","source_name":"CERT Polska","under":"ni-electrical.com"}],"url":"https://domainspoof.com/live?show=all&q=metabase.ni-electrical.com"},{"hostname":"meteoag.xyz","first_observed":"2026-11-05T17:11:24.356Z","first_published":"2026-11-05T17:51:45.694Z","brands":[],"dns":"no_address","resolved":[],"resolved_at":"2026-11-05T17:11:55Z","dns_checked_at":"2026-11-06T10:11:03.000Z","findings":[{"id":"fngp3acs343657ew4nzmb","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T17:11:24.356Z","first_published":"2026-11-05T17:51:45.694Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=meteoag.xyz"},{"hostname":"micosoft.us.ci","first_observed":"2026-11-05T17:16:10.565Z","first_published":"2026-11-05T17:51:45.694Z","brands":[],"dns":"resolved","resolved":["104.21.6.105","172.67.134.185"],"resolved_at":"2026-11-05T17:16:53Z","dns_checked_at":"2026-11-05T17:56:41.000Z","dns_since":"2026-11-05T17:56:41.000Z","findings":[{"id":"fnpns4s7vcjlu27vy6k4i","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T17:16:10.565Z","first_published":"2026-11-05T17:51:45.694Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=micosoft.us.ci"},{"hostname":"mightyes.top","first_observed":"2026-11-05T17:16:10.565Z","first_published":"2026-11-05T17:51:45.694Z","brands":[],"dns":"resolved","resolved":["104.21.20.44","172.67.191.85"],"resolved_at":"2026-11-06T05:26:43Z","dns_checked_at":"2026-11-05T17:56:41.000Z","dns_since":"2026-11-05T17:56:41.000Z","findings":[{"id":"fvljgfmsweradvhvymhn4","kind":"reported_domain","summary":"Listed by NPA 165 (information services)","first_observed":"2026-11-05T17:16:10.565Z","first_published":"2026-11-05T17:51:45.694Z","source":"npa","source_name":"NPA 165","claim":{"category":"information services"}}],"url":"https://domainspoof.com/live?show=all&q=mightyes.top"},{"hostname":"myexpressloginroyal.com","first_observed":"2026-11-05T17:41:44.806Z","first_published":"2026-11-05T17:51:45.694Z","brands":[],"dns":"resolved","resolved":["37.77.150.250"],"resolved_at":"2026-11-05T17:54:37Z","dns_checked_at":"2026-11-05T17:56:41.000Z","dns_since":"2026-11-05T17:56:41.000Z","findings":[{"id":"fbpyx3fprryypfh745r5g","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T17:41:44.806Z","first_published":"2026-11-05T17:51:45.694Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=myexpressloginroyal.com"},{"hostname":"nazvelqorn-el.live","first_observed":"2026-11-05T17:36:58.500Z","first_published":"2026-11-05T17:51:45.694Z","brands":[],"dns":"resolved","resolved":["104.21.19.78","172.67.185.167"],"resolved_at":"2026-11-06T02:34:13Z","dns_checked_at":"2026-11-05T17:56:41.000Z","dns_since":"2026-11-05T17:56:41.000Z","findings":[{"id":"fiajvsieqapx45fg3ims5","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T17:36:58.500Z","first_published":"2026-11-05T17:51:45.694Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=nazvelqorn-el.live"},{"hostname":"nekoocraft.com","first_observed":"2026-11-05T16:46:43.799Z","first_published":"2026-11-05T17:51:45.694Z","brands":[],"dns":"resolved","resolved":["104.21.39.53","172.67.143.139"],"resolved_at":"2026-11-06T04:43:16Z","dns_checked_at":"2026-11-05T17:56:41.000Z","dns_since":"2026-11-05T17:56:41.000Z","findings":[{"id":"f7u2u6r3pnejuwagg5kvw","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T16:46:43.799Z","first_published":"2026-11-05T17:51:45.694Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/nekoocraft.com/"}],"url":"https://domainspoof.com/live?show=all&q=nekoocraft.com"},{"hostname":"neuralprofit.net","first_observed":"2026-11-05T17:16:10.565Z","first_published":"2026-11-05T17:51:45.694Z","brands":[],"dns":"resolved","resolved":["104.21.63.119","172.67.145.118"],"resolved_at":"2026-11-05T17:16:53Z","dns_checked_at":"2026-11-05T17:56:41.000Z","dns_since":"2026-11-05T17:56:41.000Z","findings":[{"id":"frlgpo7rv6ftebim2m3ls","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T17:16:10.565Z","first_published":"2026-11-05T17:51:45.694Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=neuralprofit.net"},{"hostname":"neverland-allocations.xyz","first_observed":"2026-11-05T16:56:53.456Z","first_published":"2026-11-05T17:51:45.694Z","brands":[],"dns":"resolved","resolved":["104.21.15.203","172.67.163.245"],"resolved_at":"2026-11-05T17:05:41Z","dns_checked_at":"2026-11-05T17:56:41.000Z","dns_since":"2026-11-05T17:56:41.000Z","findings":[{"id":"fud6hwoc32qozr7fuuymz","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T16:56:53.456Z","first_published":"2026-11-05T17:51:45.694Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=neverland-allocations.xyz"},{"hostname":"newspolnd.pro","first_observed":"2026-11-05T17:36:58.500Z","first_published":"2026-11-05T17:51:45.694Z","brands":[],"dns":"resolved","resolved":["104.21.29.233","172.67.149.247"],"resolved_at":"2026-11-05T17:45:31Z","dns_checked_at":"2026-11-05T17:56:41.000Z","dns_since":"2026-11-05T17:56:41.000Z","findings":[{"id":"f7bw5boxmaqvtgcprt5t6","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T17:36:58.500Z","first_published":"2026-11-05T17:51:45.694Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=newspolnd.pro"},{"hostname":"norrkoping.nf1.io-ext.se","first_observed":"2026-11-05T16:41:52.112Z","first_published":"2026-11-05T17:51:45.694Z","brands":[],"dns":"resolved","resolved":["195.246.120.17"],"resolved_at":"2026-11-05T16:45:07Z","dns_checked_at":"2026-11-05T17:56:41.000Z","dns_since":"2026-11-05T17:56:41.000Z","findings":[{"id":"ffy2nar6cxbyjtx4yw5dg","kind":"reported_domain","summary":"Under io-ext.se, listed by MetaMask","first_observed":"2026-11-05T16:41:52.112Z","first_published":"2026-11-05T17:51:45.694Z","source":"metamask","source_name":"MetaMask","under":"io-ext.se"}],"url":"https://domainspoof.com/live?show=all&q=norrkoping.nf1.io-ext.se"},{"hostname":"norvenvault-fr.live","first_observed":"2026-11-05T17:26:51.740Z","first_published":"2026-11-05T17:51:45.694Z","brands":[],"dns":"resolved","resolved":["104.21.43.40","172.67.218.225"],"resolved_at":"2026-11-05T17:29:22Z","dns_checked_at":"2026-11-05T17:56:41.000Z","dns_since":"2026-11-05T17:56:41.000Z","findings":[{"id":"ff7seyoo7vukjkjhdd55p","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T17:26:51.740Z","first_published":"2026-11-05T17:51:45.694Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=norvenvault-fr.live"},{"hostname":"official-postmalone.com","first_observed":"2026-11-05T17:11:24.356Z","first_published":"2026-11-05T17:51:45.694Z","brands":[],"dns":"resolved","resolved":["64.29.17.65","216.198.79.1"],"resolved_at":"2026-11-05T17:11:55Z","dns_checked_at":"2026-11-05T17:56:41.000Z","dns_since":"2026-11-05T17:56:41.000Z","findings":[{"id":"f6foohyc2mxvqpcyl4ryv","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T17:11:24.356Z","first_published":"2026-11-05T17:51:45.694Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/official-postmalone.com/"}],"url":"https://domainspoof.com/live?show=all&q=official-postmalone.com"},{"hostname":"okmed.com.tw","first_observed":"2026-11-05T16:51:41.224Z","first_published":"2026-11-05T17:51:45.694Z","brands":[],"dns":"no_address","resolved":[],"resolved_at":"2026-11-05T16:52:06Z","dns_checked_at":"2026-11-06T10:11:03.000Z","findings":[{"id":"fzi5u72au5gemx66t4toz","kind":"reported_domain","summary":"Listed by NPA 165 (finance and insurance)","first_observed":"2026-11-05T16:51:41.224Z","first_published":"2026-11-05T17:51:45.694Z","source":"npa","source_name":"NPA 165","claim":{"category":"finance and insurance"}}],"url":"https://domainspoof.com/live?show=all&q=okmed.com.tw"},{"hostname":"onbijkj.cluster100.hosting.ovh.net.e-trott-ardenne.be","first_observed":"2026-11-05T17:37:13.240Z","first_published":"2026-11-05T17:51:45.694Z","brands":[{"id":"ovhcloud","name":"OVHcloud","url":"https://domainspoof.com/brands/ovhcloud"}],"dns":"resolved","resolved":["5.135.23.164"],"resolved_at":"2026-11-05T17:56:41Z","dns_checked_at":"2026-11-05T17:56:41.000Z","dns_since":"2026-11-05T17:56:41.000Z","findings":[{"id":"fvwncolazw2vrj5dlxdlz","kind":"phishing_infrastructure","summary":"Resolved to 5.135.23.164, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T17:37:13.240Z","first_published":"2026-11-05T17:51:45.694Z","address":"5.135.23.164","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/ovhcloud"},{"hostname":"ondofinance-allocations.xyz","first_observed":"2026-11-05T17:36:58.500Z","first_published":"2026-11-05T17:51:45.694Z","brands":[{"id":"ondo-finance","name":"Ondo Finance","url":"https://domainspoof.com/brands/ondo-finance"}],"dns":"resolved","resolved":["104.21.17.238","172.67.178.220","2606:4700:3035::6815:11ee","2606:4700:3037::ac43:b2dc"],"resolved_at":"2026-11-05T17:37:13Z","dns_checked_at":"2026-11-05T17:56:41.000Z","dns_since":"2026-11-05T17:56:41.000Z","findings":[{"id":"fhvpmlkq3ebveyv44hch4","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T17:36:58.500Z","first_published":"2026-11-05T17:51:45.694Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/brands/ondo-finance"},{"hostname":"onlineportaal-wetgevingspagina.info","first_observed":"2026-11-05T17:21:30.538Z","first_published":"2026-11-05T17:51:45.694Z","brands":[],"dns":"resolved","resolved":["104.21.69.165","172.67.210.139"],"resolved_at":"2026-11-05T17:22:02Z","dns_checked_at":"2026-11-05T17:56:41.000Z","dns_since":"2026-11-05T17:56:41.000Z","findings":[{"id":"f22chbwjj37hg72pcvyqi","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T17:21:30.538Z","first_published":"2026-11-05T17:51:45.694Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=onlineportaal-wetgevingspagina.info"},{"hostname":"onorefund-ai.digital","first_observed":"2026-11-05T17:16:10.565Z","first_published":"2026-11-05T17:51:45.694Z","brands":[],"dns":"resolved","resolved":["104.21.48.170","172.67.187.102"],"resolved_at":"2026-11-05T17:16:54Z","dns_checked_at":"2026-11-05T17:56:41.000Z","dns_since":"2026-11-05T17:56:41.000Z","findings":[{"id":"f5qgggu4su6o6jwefa5ox","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T17:16:10.565Z","first_published":"2026-11-05T17:51:45.694Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=onorefund-ai.digital"},{"hostname":"orveniqa-cs.live","first_observed":"2026-11-05T16:46:43.799Z","first_published":"2026-11-05T17:51:45.694Z","brands":[],"dns":"resolved","resolved":["104.21.81.13","172.67.155.231"],"resolved_at":"2026-11-05T16:56:41Z","dns_checked_at":"2026-11-05T17:56:41.000Z","dns_since":"2026-11-05T17:56:41.000Z","findings":[{"id":"ffke6rcat2cnr5zdkjvbt","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T16:46:43.799Z","first_published":"2026-11-05T17:51:45.694Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=orveniqa-cs.live"},{"hostname":"owa.accessglobaltrades.com","first_observed":"2026-11-05T17:31:43.403Z","first_published":"2026-11-05T17:51:45.694Z","brands":[],"dns":"resolved","resolved":["185.53.179.136"],"resolved_at":"2026-11-05T17:38:37Z","dns_checked_at":"2026-11-05T17:56:41.000Z","dns_since":"2026-11-05T17:56:41.000Z","findings":[{"id":"fpf4e7mvbk7tkruc5vvta","kind":"reported_domain","summary":"Under accessglobaltrades.com, reported by PhishDestroy","first_observed":"2026-11-05T17:31:43.403Z","first_published":"2026-11-05T17:51:45.694Z","source":"phishdestroy","source_name":"PhishDestroy","under":"accessglobaltrades.com","source_url":"https://phishdestroy.io/domain/accessglobaltrades.com/"}],"url":"https://domainspoof.com/live?show=all&q=owa.accessglobaltrades.com"},{"hostname":"partille.nf1.io-ext.se","first_observed":"2026-11-05T16:41:52.112Z","first_published":"2026-11-05T17:51:45.694Z","brands":[],"dns":"resolved","resolved":["195.246.120.17"],"resolved_at":"2026-11-05T16:45:08Z","dns_checked_at":"2026-11-05T17:56:41.000Z","dns_since":"2026-11-05T17:56:41.000Z","findings":[{"id":"f5x4yryvjz32lxfvavlic","kind":"reported_domain","summary":"Under io-ext.se, listed by MetaMask","first_observed":"2026-11-05T16:41:52.112Z","first_published":"2026-11-05T17:51:45.694Z","source":"metamask","source_name":"MetaMask","under":"io-ext.se"}],"url":"https://domainspoof.com/live?show=all&q=partille.nf1.io-ext.se"},{"hostname":"pay-bitrefill.com-ct01-esim-gift.com","first_observed":"2026-11-05T17:29:27.730Z","first_published":"2026-11-05T17:51:45.694Z","brands":[{"id":"bitrefill","name":"Bitrefill","url":"https://domainspoof.com/brands/bitrefill"}],"dns":"resolved","resolved":["62.60.226.39"],"resolved_at":"2026-11-05T17:56:41Z","dns_checked_at":"2026-11-05T17:56:41.000Z","dns_since":"2026-11-05T17:56:41.000Z","findings":[{"id":"fc4li3ao25czapu4pkdgj","kind":"spamhaus_drop","summary":"Resolved to 62.60.226.39 on Spamhaus DROP","first_observed":"2026-11-05T17:29:27.730Z","first_published":"2026-11-05T17:51:45.694Z","address":"62.60.226.39","list":"spamhaus_drop","list_name":"Spamhaus DROP"}],"url":"https://domainspoof.com/brands/bitrefill"},{"hostname":"pay.avito.youla.15-v.cdek.rhxyvcq9vvts2ld9.r.mail.leankoala.com","first_observed":"2026-11-05T17:29:27.763Z","first_published":"2026-11-05T17:51:45.694Z","brands":[{"id":"avito","name":"Avito","url":"https://domainspoof.com/brands/avito"},{"id":"youla","name":"Youla","url":"https://domainspoof.com/brands/youla"}],"dns":"resolved","resolved":["172.246.243.65"],"resolved_at":"2026-11-05T17:56:41Z","dns_checked_at":"2026-11-05T17:56:41.000Z","dns_since":"2026-11-05T17:56:41.000Z","findings":[{"id":"ffbyehreumdg7obnkuol7","kind":"phishing_infrastructure","summary":"Resolved to 172.246.243.65, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T17:29:27.763Z","first_published":"2026-11-05T17:51:45.694Z","address":"172.246.243.65","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/avito"},{"hostname":"pitea.nf1.io-ext.se","first_observed":"2026-11-05T16:41:52.112Z","first_published":"2026-11-05T17:51:45.694Z","brands":[],"dns":"resolved","resolved":["195.246.120.17"],"resolved_at":"2026-11-05T16:45:08Z","dns_checked_at":"2026-11-05T17:56:41.000Z","dns_since":"2026-11-05T17:56:41.000Z","findings":[{"id":"fmw725hdeow62zyv6p4c3","kind":"reported_domain","summary":"Under io-ext.se, listed by MetaMask","first_observed":"2026-11-05T16:41:52.112Z","first_published":"2026-11-05T17:51:45.694Z","source":"metamask","source_name":"MetaMask","under":"io-ext.se"}],"url":"https://domainspoof.com/live?show=all&q=pitea.nf1.io-ext.se"},{"hostname":"pochta.avito.pay.2015-11-12-sequencetypegeneratortypeplayground.cdek.rhxyvcq9vvts2ld9.r.mail.leankoala.com","first_observed":"2026-11-05T17:38:37.910Z","first_published":"2026-11-05T17:51:45.694Z","brands":[{"id":"avito","name":"Avito","url":"https://domainspoof.com/brands/avito"},{"id":"russian-post","name":"Russian Post","url":"https://domainspoof.com/brands/russian-post"}],"dns":"resolved","resolved":["172.246.243.65"],"resolved_at":"2026-11-05T17:56:41Z","dns_checked_at":"2026-11-05T17:56:41.000Z","dns_since":"2026-11-05T17:56:41.000Z","findings":[{"id":"fl2ns7ny3hpdikky42eef","kind":"phishing_infrastructure","summary":"Resolved to 172.246.243.65, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T17:38:37.910Z","first_published":"2026-11-05T17:51:45.694Z","address":"172.246.243.65","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/avito"},{"hostname":"portail-cdiscount.com","first_observed":"2026-11-05T17:37:13.238Z","first_published":"2026-11-05T17:51:45.694Z","brands":[{"id":"cdiscount","name":"Cdiscount","url":"https://domainspoof.com/brands/cdiscount"}],"dns":"resolved","resolved":["62.60.226.234"],"resolved_at":"2026-11-05T17:56:41Z","dns_checked_at":"2026-11-05T17:56:41.000Z","dns_since":"2026-11-05T17:56:41.000Z","findings":[{"id":"fqmtsnsqawik6aa4eadux","kind":"phishing_infrastructure","summary":"Resolved to 62.60.226.234, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T17:37:13.238Z","first_published":"2026-11-05T17:51:45.694Z","address":"62.60.226.234","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"},{"id":"finmbnd23oerndg3zkxxt","kind":"spamhaus_drop","summary":"Resolved to 62.60.226.234 on Spamhaus DROP","first_observed":"2026-11-05T17:37:13.238Z","first_published":"2026-11-05T17:51:45.694Z","address":"62.60.226.234","list":"spamhaus_drop","list_name":"Spamhaus DROP"}],"url":"https://domainspoof.com/brands/cdiscount"},{"hostname":"potenzialiprofitti-it.live","first_observed":"2026-11-05T16:51:41.224Z","first_published":"2026-11-05T17:51:45.694Z","brands":[],"dns":"resolved","resolved":["104.21.72.175","172.67.153.84"],"resolved_at":"2026-11-05T16:52:09Z","dns_checked_at":"2026-11-05T17:56:41.000Z","dns_since":"2026-11-05T17:56:41.000Z","findings":[{"id":"fqyvhrhdimych5nzu643p","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T16:51:41.224Z","first_published":"2026-11-05T17:51:45.694Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=potenzialiprofitti-it.live"},{"hostname":"primeelitecapital.com","first_observed":"2026-11-05T17:11:24.356Z","first_published":"2026-11-05T17:51:45.694Z","brands":[],"dns":"resolved","resolved":["104.21.83.44","172.67.212.136"],"resolved_at":"2026-11-05T17:11:56Z","dns_checked_at":"2026-11-05T17:56:41.000Z","dns_since":"2026-11-05T17:56:41.000Z","findings":[{"id":"fn57ilg5p3ypzligpl3i4","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T17:11:24.356Z","first_published":"2026-11-05T17:51:45.694Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/primeelitecapital.com/"}],"url":"https://domainspoof.com/live?show=all&q=primeelitecapital.com"},{"hostname":"projects.socialvisor.ru","first_observed":"2026-11-05T17:11:24.356Z","first_published":"2026-11-05T17:51:45.694Z","brands":[],"dns":"resolved","resolved":["91.215.41.91"],"resolved_at":"2026-11-05T17:11:56Z","dns_checked_at":"2026-11-05T17:56:41.000Z","dns_since":"2026-11-05T17:56:41.000Z","findings":[{"id":"fxmu3bw22jl2jhvxvxceh","kind":"reported_domain","summary":"Under socialvisor.ru, reported by PhishDestroy","first_observed":"2026-11-05T17:11:24.356Z","first_published":"2026-11-05T17:51:45.694Z","source":"phishdestroy","source_name":"PhishDestroy","under":"socialvisor.ru","source_url":"https://phishdestroy.io/domain/socialvisor.ru/"}],"url":"https://domainspoof.com/live?show=all&q=projects.socialvisor.ru"},{"hostname":"promosyon-cepteteb-com-tr.my-homeip.de","first_observed":"2026-11-05T17:17:27.540Z","first_published":"2026-11-05T17:51:45.694Z","brands":[],"dns":"resolved","resolved":["3.67.168.154"],"resolved_at":"2026-11-05T17:17:35Z","dns_checked_at":"2026-11-05T17:56:41.000Z","dns_since":"2026-11-05T17:56:41.000Z","findings":[{"id":"ferbvqdbdgzwealtktnoh","kind":"reported_domain","summary":"Listed by USOM","first_observed":"2026-11-05T17:17:27.540Z","first_published":"2026-11-05T17:51:45.694Z","source":"usom","source_name":"USOM"}],"url":"https://domainspoof.com/live?show=all&q=promosyon-cepteteb-com-tr.my-homeip.de"},{"hostname":"pumps-live.fun","first_observed":"2026-11-05T17:11:24.356Z","first_published":"2026-11-05T17:51:45.694Z","brands":[],"dns":"resolved","resolved":["104.21.61.84","172.67.207.179"],"resolved_at":"2026-11-05T17:11:56Z","dns_checked_at":"2026-11-05T17:56:41.000Z","dns_since":"2026-11-05T17:56:41.000Z","findings":[{"id":"fwhgfphwovfifoyfvo6ru","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T17:11:24.356Z","first_published":"2026-11-05T17:51:45.694Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=pumps-live.fun"},{"hostname":"puraacervanza-es.live","first_observed":"2026-11-05T17:31:43.403Z","first_published":"2026-11-05T17:51:45.694Z","brands":[],"dns":"resolved","resolved":["104.21.68.54","172.67.187.188"],"resolved_at":"2026-11-05T17:38:38Z","dns_checked_at":"2026-11-05T17:56:41.000Z","dns_since":"2026-11-05T17:56:41.000Z","findings":[{"id":"fdf7gwq2vfzobszux7rem","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T17:31:43.403Z","first_published":"2026-11-05T17:51:45.694Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=puraacervanza-es.live"},{"hostname":"pzbdp.asia","first_observed":"2026-11-05T17:21:30.538Z","first_published":"2026-11-05T17:51:45.694Z","brands":[],"dns":"resolved","resolved":["104.21.18.105","172.67.181.151"],"resolved_at":"2026-11-05T17:22:02Z","dns_checked_at":"2026-11-05T17:56:41.000Z","dns_since":"2026-11-05T17:56:41.000Z","findings":[{"id":"f74bhtmfmyxkfl66goyoh","kind":"reported_domain","summary":"Listed by NPA 165 (information services)","first_observed":"2026-11-05T17:21:30.538Z","first_published":"2026-11-05T17:51:45.694Z","source":"npa","source_name":"NPA 165","claim":{"category":"information services"}}],"url":"https://domainspoof.com/live?show=all&q=pzbdp.asia"},{"hostname":"q9r-zpd6ru-7zxe-9vk2j4-ap3w9.pages.dev","first_observed":"2026-11-05T17:41:44.806Z","first_published":"2026-11-05T17:51:45.694Z","brands":[],"dns":"resolved","resolved":["172.66.44.131","172.66.47.125"],"resolved_at":"2026-11-05T17:54:45Z","dns_checked_at":"2026-11-05T17:56:41.000Z","dns_since":"2026-11-05T17:56:41.000Z","findings":[{"id":"f4ceboloisqd6tqt5khbt","kind":"reported_domain","summary":"Reported by PhishTank","first_observed":"2026-11-05T17:41:44.806Z","first_published":"2026-11-05T17:51:45.694Z","source":"phishtank","source_name":"PhishTank","source_url":"https://phishtank.org/phish_detail.php?phish_id=9479449"}],"url":"https://domainspoof.com/live?show=all&q=q9r-zpd6ru-7zxe-9vk2j4-ap3w9.pages.dev"},{"hostname":"qql-series.com","first_observed":"2026-11-05T17:21:30.538Z","first_published":"2026-11-05T17:51:45.694Z","brands":[],"dns":"resolved","resolved":["104.21.87.117","172.67.143.8"],"resolved_at":"2026-11-06T10:00:35Z","dns_checked_at":"2026-11-05T17:56:41.000Z","dns_since":"2026-11-05T17:56:41.000Z","findings":[{"id":"f6afbbkik4kil4qxkasdc","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T17:21:30.538Z","first_published":"2026-11-05T17:51:45.694Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=qql-series.com"},{"hostname":"quicskwap.ink","first_observed":"2026-11-05T16:41:52.112Z","first_published":"2026-11-05T17:51:45.694Z","brands":[],"dns":"resolved","resolved":["104.21.16.167","172.67.214.221"],"resolved_at":"2026-11-05T16:45:10Z","dns_checked_at":"2026-11-05T17:56:41.000Z","dns_since":"2026-11-05T17:56:41.000Z","findings":[{"id":"f2lnguqnmr5pcpjd3yqgs","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T16:41:52.112Z","first_published":"2026-11-05T17:51:45.694Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=quicskwap.ink"},{"hostname":"rainbet-casino.live","first_observed":"2026-11-05T17:11:24.356Z","first_published":"2026-11-05T17:51:45.694Z","brands":[],"dns":"resolved","resolved":["104.21.55.221","172.67.173.197"],"resolved_at":"2026-11-06T02:56:00Z","dns_checked_at":"2026-11-05T17:56:41.000Z","dns_since":"2026-11-05T17:56:41.000Z","findings":[{"id":"fgnuvww7wvk4p3wg43xdj","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T17:11:24.356Z","first_published":"2026-11-05T17:51:45.694Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=rainbet-casino.live"},{"hostname":"rainbet-ceska.cz","first_observed":"2026-11-05T17:16:10.565Z","first_published":"2026-11-05T17:51:45.694Z","brands":[],"dns":"resolved","resolved":["104.21.89.172","172.67.162.176"],"resolved_at":"2026-11-05T17:16:54Z","dns_checked_at":"2026-11-05T17:56:41.000Z","dns_since":"2026-11-05T17:56:41.000Z","findings":[{"id":"f6vgssrrzux3k6cfvoiel","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T17:16:10.565Z","first_published":"2026-11-05T17:51:45.694Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=rainbet-ceska.cz"},{"hostname":"rainbet-fr.casino","first_observed":"2026-11-05T17:16:10.565Z","first_published":"2026-11-05T17:51:45.694Z","brands":[],"dns":"resolved","resolved":["104.21.93.35","172.67.204.53"],"resolved_at":"2026-11-05T17:16:54Z","dns_checked_at":"2026-11-05T17:56:41.000Z","dns_since":"2026-11-05T17:56:41.000Z","findings":[{"id":"fbqroa2qnaubdzlgldjwm","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T17:16:10.565Z","first_published":"2026-11-05T17:51:45.694Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=rainbet-fr.casino"},{"hostname":"rainbet-slovenija.si","first_observed":"2026-11-05T16:46:43.799Z","first_published":"2026-11-05T17:51:45.694Z","brands":[],"dns":"resolved","resolved":["104.21.26.47","172.67.135.98"],"resolved_at":"2026-11-05T16:56:42Z","dns_checked_at":"2026-11-05T17:56:41.000Z","dns_since":"2026-11-05T17:56:41.000Z","findings":[{"id":"fw3smsyfec77dorqfhuzl","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T16:46:43.799Z","first_published":"2026-11-05T17:51:45.694Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=rainbet-slovenija.si"},{"hostname":"rainbetcasinopolska-com.pages.dev","first_observed":"2026-11-05T16:41:52.112Z","first_published":"2026-11-05T17:51:45.694Z","brands":[],"dns":"resolved","resolved":["172.66.44.245","172.66.47.11"],"resolved_at":"2026-11-05T16:45:10Z","dns_checked_at":"2026-11-05T17:56:41.000Z","dns_since":"2026-11-05T17:56:41.000Z","findings":[{"id":"ftovdxflgjst2cnjnwkel","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T16:41:52.112Z","first_published":"2026-11-05T17:51:45.694Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=rainbetcasinopolska-com.pages.dev"},{"hostname":"ratshop.shop","first_observed":"2026-11-05T17:05:43.524Z","first_published":"2026-11-05T17:51:45.694Z","brands":[],"dns":"resolved","resolved":["66.198.225.66"],"resolved_at":"2026-11-05T17:05:55Z","dns_checked_at":"2026-11-05T17:56:41.000Z","dns_since":"2026-11-05T17:56:41.000Z","findings":[{"id":"fhrd5yfolqmzbw3xifh76","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T17:05:43.524Z","first_published":"2026-11-05T17:51:45.694Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/ratshop.shop/"}],"url":"https://domainspoof.com/live?show=all&q=ratshop.shop"},{"hostname":"rhubarb-velvet-bag.shop","first_observed":"2026-11-05T17:36:58.500Z","first_published":"2026-11-05T17:51:45.694Z","brands":[],"dns":"resolved","resolved":["34.8.77.192"],"resolved_at":"2026-11-05T17:37:13Z","dns_checked_at":"2026-11-05T17:56:41.000Z","dns_since":"2026-11-05T17:56:41.000Z","findings":[{"id":"f6a7mcxcqsqvnqdoal6zu","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T17:36:58.500Z","first_published":"2026-11-05T17:51:45.694Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=rhubarb-velvet-bag.shop"},{"hostname":"ripplesrewards.com","first_observed":"2026-11-05T16:46:43.799Z","first_published":"2026-11-05T17:51:45.694Z","brands":[],"dns":"resolved","resolved":["104.21.46.127","172.67.139.5"],"resolved_at":"2026-11-05T16:56:43Z","dns_checked_at":"2026-11-05T17:56:41.000Z","dns_since":"2026-11-05T17:56:41.000Z","findings":[{"id":"fn2joo7sxpqgmx3g7ky5d","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T16:46:43.799Z","first_published":"2026-11-05T17:51:45.694Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/ripplesrewards.com/"}],"url":"https://domainspoof.com/live?show=all&q=ripplesrewards.com"},{"hostname":"rocketchat.socialvisor.ru","first_observed":"2026-11-05T17:00:35.682Z","first_published":"2026-11-05T17:51:45.694Z","brands":[],"dns":"resolved","resolved":["91.215.41.91"],"resolved_at":"2026-11-05T17:00:48Z","dns_checked_at":"2026-11-05T17:56:41.000Z","dns_since":"2026-11-05T17:56:41.000Z","findings":[{"id":"fkonlfrxuafprxw5kztu4","kind":"reported_domain","summary":"Under socialvisor.ru, reported by PhishDestroy","first_observed":"2026-11-05T17:00:35.682Z","first_published":"2026-11-05T17:51:45.694Z","source":"phishdestroy","source_name":"PhishDestroy","under":"socialvisor.ru","source_url":"https://phishdestroy.io/domain/socialvisor.ru/"}],"url":"https://domainspoof.com/live?show=all&q=rocketchat.socialvisor.ru"},{"hostname":"scxerl.com","first_observed":"2026-11-05T17:26:51.740Z","first_published":"2026-11-05T17:51:45.694Z","brands":[],"dns":"resolved","resolved":["104.21.91.60","172.67.167.123"],"resolved_at":"2026-11-05T17:29:42Z","dns_checked_at":"2026-11-05T17:56:41.000Z","dns_since":"2026-11-05T17:56:41.000Z","findings":[{"id":"fhb5bmibuinpsgdyjgrij","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T17:26:51.740Z","first_published":"2026-11-05T17:51:45.694Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=scxerl.com"},{"hostname":"secure-web3-binance.com","first_observed":"2026-11-05T17:41:44.806Z","first_published":"2026-11-05T17:51:45.694Z","brands":[{"id":"binance","name":"Binance","url":"https://domainspoof.com/brands/binance"}],"dns":"resolved","resolved":["2.57.91.91","191.215.46.155"],"resolved_at":"2026-11-05T17:54:52Z","dns_checked_at":"2026-11-05T17:56:41.000Z","dns_since":"2026-11-05T17:56:41.000Z","findings":[{"id":"ftsusnzow63ksnguqahvb","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T17:41:44.806Z","first_published":"2026-11-05T17:51:45.694Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/brands/binance"},{"hostname":"sekerbankfinance.com","first_observed":"2026-11-05T17:00:35.682Z","first_published":"2026-11-05T17:51:45.694Z","brands":[],"dns":"resolved","resolved":["104.21.54.163","172.67.140.92"],"resolved_at":"2026-11-05T17:00:48Z","dns_checked_at":"2026-11-05T17:56:41.000Z","dns_since":"2026-11-05T17:56:41.000Z","findings":[{"id":"fqqhp2bw73e4zzfcldxc4","kind":"reported_domain","summary":"Listed by USOM","first_observed":"2026-11-05T17:00:35.682Z","first_published":"2026-11-05T17:51:45.694Z","source":"usom","source_name":"USOM"}],"url":"https://domainspoof.com/live?show=all&q=sekerbankfinance.com"},{"hostname":"silksuite.net","first_observed":"2026-11-05T17:31:43.403Z","first_published":"2026-11-05T17:51:45.694Z","brands":[],"dns":"resolved","resolved":["104.21.4.237","172.67.154.64"],"resolved_at":"2026-11-06T11:47:02Z","dns_checked_at":"2026-11-05T17:56:41.000Z","dns_since":"2026-11-05T17:56:41.000Z","findings":[{"id":"ffr6i7qbfalr2xm6lkhre","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T17:31:43.403Z","first_published":"2026-11-05T17:51:45.694Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=silksuite.net"},{"hostname":"skrovendiq-es.live","first_observed":"2026-11-05T17:21:30.538Z","first_published":"2026-11-05T17:51:45.694Z","brands":[],"dns":"resolved","resolved":["104.21.43.224","172.67.186.184"],"resolved_at":"2026-11-05T17:22:04Z","dns_checked_at":"2026-11-05T17:56:41.000Z","dns_since":"2026-11-05T17:56:41.000Z","findings":[{"id":"f4lw7wimnjw2tykq45jgf","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T17:21:30.538Z","first_published":"2026-11-05T17:51:45.694Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=skrovendiq-es.live"},{"hostname":"skrovendiq-ro.live","first_observed":"2026-11-05T16:46:43.799Z","first_published":"2026-11-05T17:51:45.694Z","brands":[],"dns":"resolved","resolved":["104.21.87.106","172.67.169.96"],"resolved_at":"2026-11-05T16:56:45Z","dns_checked_at":"2026-11-05T17:56:41.000Z","dns_since":"2026-11-05T17:56:41.000Z","findings":[{"id":"fcwtam44ulg5e53tp2vdl","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T16:46:43.799Z","first_published":"2026-11-05T17:51:45.694Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=skrovendiq-ro.live"},{"hostname":"smart-trade-group.com","first_observed":"2026-11-05T16:51:41.224Z","first_published":"2026-11-05T17:51:45.694Z","brands":[],"dns":"resolved","resolved":["104.21.55.221","172.67.173.197"],"resolved_at":"2026-11-05T16:52:09Z","dns_checked_at":"2026-11-05T17:56:41.000Z","dns_since":"2026-11-05T17:56:41.000Z","findings":[{"id":"fbm3lfvdi2ikbojil7xur","kind":"reported_domain","summary":"Listed by FSMA (fraudulent online trading platform)","first_observed":"2026-11-05T16:51:41.224Z","first_published":"2026-11-05T17:51:45.694Z","source":"fsma","source_name":"FSMA","claim":{"category":"fraudulent online trading platform"}}],"url":"https://domainspoof.com/live?show=all&q=smart-trade-group.com"},{"hostname":"sp19ct7-lurev-biz-sanek-domir.pages.dev","first_observed":"2026-11-05T17:05:43.524Z","first_published":"2026-11-05T17:51:45.694Z","brands":[],"dns":"resolved","resolved":["172.66.45.33","172.66.46.223"],"resolved_at":"2026-11-05T17:05:55Z","dns_checked_at":"2026-11-05T17:56:41.000Z","dns_since":"2026-11-05T17:56:41.000Z","findings":[{"id":"fevpwzml4ai2wk3bv72yx","kind":"reported_domain","summary":"Reported by PhishTank","first_observed":"2026-11-05T17:05:43.524Z","first_published":"2026-11-05T17:51:45.694Z","source":"phishtank","source_name":"PhishTank","source_url":"https://phishtank.org/phish_detail.php?phish_id=9479565"}],"url":"https://domainspoof.com/live?show=all&q=sp19ct7-lurev-biz-sanek-domir.pages.dev"},{"hostname":"stader-labs.com","first_observed":"2026-11-05T17:31:43.403Z","first_published":"2026-11-05T17:51:45.694Z","brands":[],"dns":"resolved","resolved":["104.21.5.198","172.67.133.205"],"resolved_at":"2026-11-06T11:47:02Z","dns_checked_at":"2026-11-05T17:56:41.000Z","dns_since":"2026-11-05T17:56:41.000Z","findings":[{"id":"flqe75x3prtfcmwbihd2o","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T17:31:43.403Z","first_published":"2026-11-05T17:51:45.694Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=stader-labs.com"},{"hostname":"stakehive.org","first_observed":"2026-11-05T17:16:10.565Z","first_published":"2026-11-05T17:51:45.694Z","brands":[],"dns":"resolved","resolved":["104.21.2.187","172.67.129.143"],"resolved_at":"2026-11-05T17:16:28Z","dns_checked_at":"2026-11-05T17:56:41.000Z","dns_since":"2026-11-05T17:56:41.000Z","findings":[{"id":"fngberqstrjpfxsjyxwz3","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T17:16:10.565Z","first_published":"2026-11-05T17:51:45.694Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/stakehive.org/"}],"url":"https://domainspoof.com/live?show=all&q=stakehive.org"},{"hostname":"start-ledger-web.pages.dev","first_observed":"2026-11-05T16:46:43.799Z","first_published":"2026-11-05T17:51:45.694Z","brands":[],"dns":"resolved","resolved":["172.66.44.189","172.66.47.67"],"resolved_at":"2026-11-06T02:26:40Z","dns_checked_at":"2026-11-05T17:56:41.000Z","dns_since":"2026-11-05T17:56:41.000Z","findings":[{"id":"ffwvvzhw2vwutdx3yt2js","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T16:46:43.799Z","first_published":"2026-11-05T17:51:45.694Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=start-ledger-web.pages.dev"},{"hostname":"start-ledgrr-live.pages.dev","first_observed":"2026-11-05T17:00:35.682Z","first_published":"2026-11-05T17:51:45.694Z","brands":[],"dns":"resolved","resolved":["172.66.44.211","172.66.47.45"],"resolved_at":"2026-11-05T17:00:48Z","dns_checked_at":"2026-11-05T17:56:41.000Z","dns_since":"2026-11-05T17:56:41.000Z","findings":[{"id":"felall7gcuuumcapudgjf","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T17:00:35.682Z","first_published":"2026-11-05T17:51:45.694Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=start-ledgrr-live.pages.dev"},{"hostname":"strapi.socialvisor.ru","first_observed":"2026-11-05T17:11:24.356Z","first_published":"2026-11-05T17:51:45.694Z","brands":[],"dns":"resolved","resolved":["91.215.41.91"],"resolved_at":"2026-11-05T17:11:58Z","dns_checked_at":"2026-11-05T17:56:41.000Z","dns_since":"2026-11-05T17:56:41.000Z","findings":[{"id":"ft74lontf4dbf3fvnghwe","kind":"reported_domain","summary":"Under socialvisor.ru, reported by PhishDestroy","first_observed":"2026-11-05T17:11:24.356Z","first_published":"2026-11-05T17:51:45.694Z","source":"phishdestroy","source_name":"PhishDestroy","under":"socialvisor.ru","source_url":"https://phishdestroy.io/domain/socialvisor.ru/"}],"url":"https://domainspoof.com/live?show=all&q=strapi.socialvisor.ru"},{"hostname":"studyandexchangeconsult.com","first_observed":"2026-11-05T17:41:44.806Z","first_published":"2026-11-05T17:51:45.694Z","brands":[],"dns":"resolved","resolved":["72.167.105.76"],"resolved_at":"2026-11-05T17:42:06Z","dns_checked_at":"2026-11-05T17:56:41.000Z","dns_since":"2026-11-05T17:56:41.000Z","findings":[{"id":"fakp5u2zg6tfljub53i7c","kind":"reported_domain","summary":"Listed by NPA 165 (transport and delivery)","first_observed":"2026-11-05T17:41:44.806Z","first_published":"2026-11-05T17:51:45.694Z","source":"npa","source_name":"NPA 165","claim":{"category":"transport and delivery"}}],"url":"https://domainspoof.com/live?show=all&q=studyandexchangeconsult.com"},{"hostname":"sullend.pro","first_observed":"2026-11-05T17:11:24.356Z","first_published":"2026-11-05T17:51:45.694Z","brands":[],"dns":"resolved","resolved":["104.21.59.49","172.67.213.206"],"resolved_at":"2026-11-05T17:11:58Z","dns_checked_at":"2026-11-05T17:56:41.000Z","dns_since":"2026-11-05T17:56:41.000Z","findings":[{"id":"fh3ygszqaysqtwo6gli4w","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T17:11:24.356Z","first_published":"2026-11-05T17:51:45.694Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=sullend.pro"},{"hostname":"superset.socialvisor.ru","first_observed":"2026-11-05T17:31:43.403Z","first_published":"2026-11-05T17:51:45.694Z","brands":[],"dns":"resolved","resolved":["91.215.41.91"],"resolved_at":"2026-11-05T17:38:43Z","dns_checked_at":"2026-11-05T17:56:41.000Z","dns_since":"2026-11-05T17:56:41.000Z","findings":[{"id":"fts7gv3fhlse4wvzio43x","kind":"reported_domain","summary":"Under socialvisor.ru, reported by PhishDestroy","first_observed":"2026-11-05T17:31:43.403Z","first_published":"2026-11-05T17:51:45.694Z","source":"phishdestroy","source_name":"PhishDestroy","under":"socialvisor.ru","source_url":"https://phishdestroy.io/domain/socialvisor.ru/"}],"url":"https://domainspoof.com/live?show=all&q=superset.socialvisor.ru"},{"hostname":"tabotcapitalai-it.live","first_observed":"2026-11-05T17:21:30.538Z","first_published":"2026-11-05T17:51:45.694Z","brands":[],"dns":"resolved","resolved":["104.21.20.67","172.67.191.217"],"resolved_at":"2026-11-05T17:22:04Z","dns_checked_at":"2026-11-05T17:56:41.000Z","dns_since":"2026-11-05T17:56:41.000Z","findings":[{"id":"fvsljfnqfp6afv7vv7p3d","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T17:21:30.538Z","first_published":"2026-11-05T17:51:45.694Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=tabotcapitalai-it.live"},{"hostname":"talmorux-no.live","first_observed":"2026-11-05T17:31:43.403Z","first_published":"2026-11-05T17:51:45.694Z","brands":[],"dns":"resolved","resolved":["104.21.31.32","172.67.174.233"],"resolved_at":"2026-11-05T17:38:43Z","dns_checked_at":"2026-11-05T17:56:41.000Z","dns_since":"2026-11-05T17:56:41.000Z","findings":[{"id":"ff2mxgiog5bywfjwnqnlc","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T17:31:43.403Z","first_published":"2026-11-05T17:51:45.694Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=talmorux-no.live"},{"hostname":"the.legacytrustfinance.com","first_observed":"2026-11-05T17:00:35.682Z","first_published":"2026-11-05T17:51:45.694Z","brands":[],"dns":"resolved","resolved":["198.251.84.200"],"resolved_at":"2026-11-05T17:00:51Z","dns_checked_at":"2026-11-05T17:56:41.000Z","dns_since":"2026-11-05T17:56:41.000Z","findings":[{"id":"fucmcovjul3w6odg5l7uv","kind":"reported_domain","summary":"Under legacytrustfinance.com, reported by PhishDestroy","first_observed":"2026-11-05T17:00:35.682Z","first_published":"2026-11-05T17:51:45.694Z","source":"phishdestroy","source_name":"PhishDestroy","under":"legacytrustfinance.com","source_url":"https://phishdestroy.io/domain/legacytrustfinance.com/"}],"url":"https://domainspoof.com/live?show=all&q=the.legacytrustfinance.com"},{"hostname":"thewhalegurusol.lat","first_observed":"2026-11-05T16:41:52.112Z","first_published":"2026-11-05T17:51:45.694Z","brands":[],"dns":"resolved","resolved":["104.21.91.229","172.67.181.66"],"resolved_at":"2026-11-05T16:45:17Z","dns_checked_at":"2026-11-05T17:56:41.000Z","dns_since":"2026-11-05T17:56:41.000Z","findings":[{"id":"ffoztv64a2qtuw5hn5am3","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T16:41:52.112Z","first_published":"2026-11-05T17:51:45.694Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/thewhalegurusol.lat/"}],"url":"https://domainspoof.com/live?show=all&q=thewhalegurusol.lat"},{"hostname":"titantrustees.com","first_observed":"2026-11-05T17:31:43.403Z","first_published":"2026-11-05T17:51:45.694Z","brands":[],"dns":"resolved","resolved":["91.108.98.238","93.127.179.30"],"resolved_at":"2026-11-05T17:38:43Z","dns_checked_at":"2026-11-05T17:56:41.000Z","dns_since":"2026-11-05T17:56:41.000Z","findings":[{"id":"fwyw3j7sqmnqe4nh42g76","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T17:31:43.403Z","first_published":"2026-11-05T17:51:45.694Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/titantrustees.com/"}],"url":"https://domainspoof.com/live?show=all&q=titantrustees.com"},{"hostname":"tomodesktop.app","first_observed":"2026-11-05T17:00:35.682Z","first_published":"2026-11-05T17:51:45.694Z","brands":[],"dns":"resolved","resolved":["104.21.96.135","172.67.181.160"],"resolved_at":"2026-11-05T17:00:51Z","dns_checked_at":"2026-11-05T17:56:41.000Z","dns_since":"2026-11-05T17:56:41.000Z","findings":[{"id":"foqqc6fyt6goyb7akrtw2","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T17:00:35.682Z","first_published":"2026-11-05T17:51:45.694Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/tomodesktop.app/"}],"url":"https://domainspoof.com/live?show=all&q=tomodesktop.app"},{"hostname":"toyota303quest.baby","first_observed":"2026-11-05T17:26:51.740Z","first_published":"2026-11-05T17:51:45.694Z","brands":[],"dns":"resolved","resolved":["104.21.88.2","172.67.149.194"],"resolved_at":"2026-11-05T17:29:52Z","dns_checked_at":"2026-11-05T17:56:41.000Z","dns_since":"2026-11-05T17:56:41.000Z","findings":[{"id":"fioye4y6faalg4t64t2el","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T17:26:51.740Z","first_published":"2026-11-05T17:51:45.694Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/toyota303quest.baby/"}],"url":"https://domainspoof.com/live?show=all&q=toyota303quest.baby"},{"hostname":"trustedsignaltrade.com","first_observed":"2026-11-05T16:56:53.456Z","first_published":"2026-11-05T17:51:45.694Z","brands":[],"dns":"resolved","resolved":["198.251.89.30"],"resolved_at":"2026-11-05T17:06:06Z","dns_checked_at":"2026-11-05T17:56:41.000Z","dns_since":"2026-11-05T17:56:41.000Z","findings":[{"id":"fg5t5z7ex23w5r2j5bupz","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T16:56:53.456Z","first_published":"2026-11-05T17:51:45.694Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=trustedsignaltrade.com"},{"hostname":"trustmining.live","first_observed":"2026-11-05T17:36:58.500Z","first_published":"2026-11-05T17:51:45.694Z","brands":[],"dns":"resolved","resolved":["104.21.82.147","172.67.158.174"],"resolved_at":"2026-11-06T08:11:57Z","dns_checked_at":"2026-11-05T17:56:41.000Z","dns_since":"2026-11-05T17:56:41.000Z","findings":[{"id":"fjtk5r63pavw5lik2nlra","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T17:36:58.500Z","first_published":"2026-11-05T17:51:45.694Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/trustmining.live/"}],"url":"https://domainspoof.com/live?show=all&q=trustmining.live"},{"hostname":"us-app--en-ledgr--live.pages.dev","first_observed":"2026-11-05T17:05:43.524Z","first_published":"2026-11-05T17:51:45.694Z","brands":[],"dns":"resolved","resolved":["172.66.44.146","172.66.47.110"],"resolved_at":"2026-11-05T17:05:56Z","dns_checked_at":"2026-11-05T17:56:41.000Z","dns_since":"2026-11-05T17:56:41.000Z","findings":[{"id":"fyvz2rim2ia2og7gangok","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T17:05:43.524Z","first_published":"2026-11-05T17:51:45.694Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=us-app--en-ledgr--live.pages.dev"},{"hostname":"v1.crypto-polis.org","first_observed":"2026-11-05T17:31:43.403Z","first_published":"2026-11-05T17:51:45.694Z","brands":[],"dns":"resolved","resolved":["185.178.208.132","185.178.208.182"],"resolved_at":"2026-11-05T17:38:46Z","dns_checked_at":"2026-11-05T17:56:41.000Z","dns_since":"2026-11-05T17:56:41.000Z","findings":[{"id":"fjj6pen5cq4y5zlfzy2yb","kind":"reported_domain","summary":"Under crypto-polis.org, reported by PhishDestroy","first_observed":"2026-11-05T17:31:43.403Z","first_published":"2026-11-05T17:51:45.694Z","source":"phishdestroy","source_name":"PhishDestroy","under":"crypto-polis.org","source_url":"https://phishdestroy.io/domain/crypto-polis.org/"}],"url":"https://domainspoof.com/live?show=all&q=v1.crypto-polis.org"},{"hostname":"v5oa.steinberixkapital.com","first_observed":"2026-11-05T17:21:30.538Z","first_published":"2026-11-05T17:51:45.694Z","brands":[],"dns":"resolved","resolved":["185.53.179.136"],"resolved_at":"2026-11-05T17:22:06Z","dns_checked_at":"2026-11-05T17:56:41.000Z","dns_since":"2026-11-05T17:56:41.000Z","findings":[{"id":"fmp3k5gjxjomtgw5bfqpw","kind":"reported_domain","summary":"Under steinberixkapital.com, reported by PhishDestroy","first_observed":"2026-11-05T17:21:30.538Z","first_published":"2026-11-05T17:51:45.694Z","source":"phishdestroy","source_name":"PhishDestroy","under":"steinberixkapital.com","source_url":"https://phishdestroy.io/domain/steinberixkapital.com/"}],"url":"https://domainspoof.com/live?show=all&q=v5oa.steinberixkapital.com"},{"hostname":"verify-clouds.click","first_observed":"2026-11-05T17:16:10.565Z","first_published":"2026-11-05T17:51:45.694Z","brands":[],"dns":"resolved","resolved":["104.21.10.67","172.67.131.66"],"resolved_at":"2026-11-05T17:16:29Z","dns_checked_at":"2026-11-05T17:56:41.000Z","dns_since":"2026-11-05T17:56:41.000Z","findings":[{"id":"ffobgbusal4nmfpzvvuuo","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T17:16:10.565Z","first_published":"2026-11-05T17:51:45.694Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=verify-clouds.click"},{"hostname":"virtuals-protocol.net","first_observed":"2026-11-05T17:41:44.806Z","first_published":"2026-11-05T17:51:45.694Z","brands":[{"id":"virtuals-protocol","name":"Virtuals Protocol","url":"https://domainspoof.com/brands/virtuals-protocol"}],"dns":"resolved","resolved":["104.21.2.93","172.67.129.10","2606:4700:3030::ac43:810a","2606:4700:3037::6815:25d"],"resolved_at":"2026-11-05T17:42:07Z","dns_checked_at":"2026-11-05T17:56:41.000Z","dns_since":"2026-11-05T17:56:41.000Z","findings":[{"id":"fnqi4upddsc4d7e5lwvhn","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T17:41:44.806Z","first_published":"2026-11-05T17:51:45.694Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/brands/virtuals-protocol"},{"hostname":"virtualsprotocol-rewards.xyz","first_observed":"2026-11-05T16:56:53.456Z","first_published":"2026-11-05T17:51:45.694Z","brands":[{"id":"virtuals-protocol","name":"Virtuals Protocol","url":"https://domainspoof.com/brands/virtuals-protocol"}],"dns":"resolved","resolved":["104.21.42.2","172.67.154.89","2606:4700:3032::ac43:9a59","2606:4700:3036::6815:2a02"],"resolved_at":"2026-11-05T17:06:10Z","dns_checked_at":"2026-11-05T17:56:41.000Z","dns_since":"2026-11-05T17:56:41.000Z","findings":[{"id":"few5n7f4nkivfarwmgcam","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T16:56:53.456Z","first_published":"2026-11-05T17:51:45.694Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/brands/virtuals-protocol"},{"hostname":"vodka.casinolic.com","first_observed":"2026-11-05T17:41:44.806Z","first_published":"2026-11-05T17:51:45.694Z","brands":[],"dns":"resolved","resolved":["193.233.63.124"],"resolved_at":"2026-11-05T17:42:07Z","dns_checked_at":"2026-11-05T17:56:41.000Z","dns_since":"2026-11-05T17:56:41.000Z","findings":[{"id":"f76hdtnkj544qftnkq7va","kind":"reported_domain","summary":"Under casinolic.com, reported by PhishDestroy","first_observed":"2026-11-05T17:41:44.806Z","first_published":"2026-11-05T17:51:45.694Z","source":"phishdestroy","source_name":"PhishDestroy","under":"casinolic.com","source_url":"https://phishdestroy.io/domain/casinolic.com/"}],"url":"https://domainspoof.com/live?show=all&q=vodka.casinolic.com"},{"hostname":"vogtrendifels-fr.live","first_observed":"2026-11-05T17:26:51.740Z","first_published":"2026-11-05T17:51:45.694Z","brands":[],"dns":"resolved","resolved":["104.21.2.87","172.67.186.240"],"resolved_at":"2026-11-05T17:29:56Z","dns_checked_at":"2026-11-05T17:56:41.000Z","dns_since":"2026-11-05T17:56:41.000Z","findings":[{"id":"ftz6fs2ravj22hfyqyyi6","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T17:26:51.740Z","first_published":"2026-11-05T17:51:45.694Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=vogtrendifels-fr.live"},{"hostname":"w06.avito-slbschool.ru","first_observed":"2026-11-05T17:11:59.011Z","first_published":"2026-11-05T17:51:45.694Z","brands":[{"id":"avito","name":"Avito","url":"https://domainspoof.com/brands/avito"}],"dns":"resolved","resolved":["111.90.143.122"],"resolved_at":"2026-11-05T17:56:41Z","dns_checked_at":"2026-11-05T17:56:41.000Z","dns_since":"2026-11-05T17:56:41.000Z","findings":[{"id":"ffsq6e2gtktrfrst57k5f","kind":"spamhaus_drop","summary":"Resolved to 111.90.143.122 on Spamhaus DROP","first_observed":"2026-11-05T17:11:59.011Z","first_published":"2026-11-05T17:51:45.694Z","address":"111.90.143.122","list":"spamhaus_drop","list_name":"Spamhaus DROP"}],"url":"https://domainspoof.com/brands/avito"},{"hostname":"w09.woodcraft-meb.ru","first_observed":"2026-11-05T17:21:30.538Z","first_published":"2026-11-05T17:51:45.694Z","brands":[],"dns":"resolved","resolved":["172.245.41.12"],"resolved_at":"2026-11-05T17:22:06Z","dns_checked_at":"2026-11-05T17:56:41.000Z","dns_since":"2026-11-05T17:56:41.000Z","findings":[{"id":"fphmrdsiyj7jkbbaovd2u","kind":"reported_domain","summary":"Under woodcraft-meb.ru, reported by PhishDestroy","first_observed":"2026-11-05T17:21:30.538Z","first_published":"2026-11-05T17:51:45.694Z","source":"phishdestroy","source_name":"PhishDestroy","under":"woodcraft-meb.ru","source_url":"https://phishdestroy.io/domain/woodcraft-meb.ru/"}],"url":"https://domainspoof.com/live?show=all&q=w09.woodcraft-meb.ru"},{"hostname":"wahytui.pro","first_observed":"2026-11-05T17:26:51.740Z","first_published":"2026-11-05T17:51:45.694Z","brands":[],"dns":"resolved","resolved":["104.21.41.185","172.67.166.80"],"resolved_at":"2026-11-05T17:29:57Z","dns_checked_at":"2026-11-05T17:56:41.000Z","dns_since":"2026-11-05T17:56:41.000Z","findings":[{"id":"f3vzpbuocsuvjw57utnbs","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T17:26:51.740Z","first_published":"2026-11-05T17:51:45.694Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=wahytui.pro"},{"hostname":"wdqowqkwdq.com","first_observed":"2026-11-05T17:41:44.806Z","first_published":"2026-11-05T17:51:45.694Z","brands":[],"dns":"resolved","resolved":["104.21.28.63","172.67.170.104"],"resolved_at":"2026-11-05T17:42:07Z","dns_checked_at":"2026-11-05T17:56:41.000Z","dns_since":"2026-11-05T17:56:41.000Z","findings":[{"id":"fywatrt3jazrfh54yynus","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T17:41:44.806Z","first_published":"2026-11-05T17:51:45.694Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=wdqowqkwdq.com"},{"hostname":"webadmin.socialvisor.ru","first_observed":"2026-11-05T17:31:43.403Z","first_published":"2026-11-05T17:51:45.694Z","brands":[],"dns":"resolved","resolved":["91.215.41.91"],"resolved_at":"2026-11-05T17:38:47Z","dns_checked_at":"2026-11-05T17:56:41.000Z","dns_since":"2026-11-05T17:56:41.000Z","findings":[{"id":"fzad7q3abrwdz6lrw2yrv","kind":"reported_domain","summary":"Under socialvisor.ru, reported by PhishDestroy","first_observed":"2026-11-05T17:31:43.403Z","first_published":"2026-11-05T17:51:45.694Z","source":"phishdestroy","source_name":"PhishDestroy","under":"socialvisor.ru","source_url":"https://phishdestroy.io/domain/socialvisor.ru/"}],"url":"https://domainspoof.com/live?show=all&q=webadmin.socialvisor.ru"},{"hostname":"webapp.ascsonoway.com","first_observed":"2026-11-05T17:11:24.356Z","first_published":"2026-11-05T17:51:45.694Z","brands":[],"dns":"resolved","resolved":["64.227.208.248"],"resolved_at":"2026-11-05T17:11:59Z","dns_checked_at":"2026-11-05T17:56:41.000Z","dns_since":"2026-11-05T17:56:41.000Z","findings":[{"id":"fimccl6gbcnkxtchndsvk","kind":"reported_domain","summary":"Under ascsonoway.com, listed by MetaMask","first_observed":"2026-11-05T17:11:24.356Z","first_published":"2026-11-05T17:51:45.694Z","source":"metamask","source_name":"MetaMask","under":"ascsonoway.com"}],"url":"https://domainspoof.com/live?show=all&q=webapp.ascsonoway.com"},{"hostname":"webhook.zenavlico.cyou","first_observed":"2026-11-05T17:05:43.524Z","first_published":"2026-11-05T17:51:45.694Z","brands":[],"dns":"resolved","resolved":["95.85.244.13"],"resolved_at":"2026-11-05T17:05:56Z","dns_checked_at":"2026-11-05T17:56:41.000Z","dns_since":"2026-11-05T17:56:41.000Z","findings":[{"id":"firwixdsjnlqg77drpnya","kind":"reported_domain","summary":"Under zenavlico.cyou, listed by CERT Polska","first_observed":"2026-11-05T17:05:43.524Z","first_published":"2026-11-05T17:51:45.694Z","source":"cert_polska","source_name":"CERT Polska","under":"zenavlico.cyou"}],"url":"https://domainspoof.com/live?show=all&q=webhook.zenavlico.cyou"},{"hostname":"webmail.accessglobaltrades.com","first_observed":"2026-11-05T17:31:43.403Z","first_published":"2026-11-05T17:51:45.694Z","brands":[],"dns":"resolved","resolved":["185.53.179.136"],"resolved_at":"2026-11-05T17:38:47Z","dns_checked_at":"2026-11-05T17:56:41.000Z","dns_since":"2026-11-05T17:56:41.000Z","findings":[{"id":"f62ammp2oodyetvgooa3d","kind":"reported_domain","summary":"Under accessglobaltrades.com, reported by PhishDestroy","first_observed":"2026-11-05T17:31:43.403Z","first_published":"2026-11-05T17:51:45.694Z","source":"phishdestroy","source_name":"PhishDestroy","under":"accessglobaltrades.com","source_url":"https://phishdestroy.io/domain/accessglobaltrades.com/"}],"url":"https://domainspoof.com/live?show=all&q=webmail.accessglobaltrades.com"},{"hostname":"werewolfs04.com","first_observed":"2026-11-05T17:11:24.356Z","first_published":"2026-11-05T17:51:45.694Z","brands":[],"dns":"resolved","resolved":["104.21.95.83","172.67.143.215"],"resolved_at":"2026-11-05T17:11:59Z","dns_checked_at":"2026-11-05T17:56:41.000Z","dns_since":"2026-11-05T17:56:41.000Z","findings":[{"id":"fhlaxnd52kqz6zacyhkjj","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T17:11:24.356Z","first_published":"2026-11-05T17:51:45.694Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/werewolfs04.com/"}],"url":"https://domainspoof.com/live?show=all&q=werewolfs04.com"},{"hostname":"wessexherald.pro","first_observed":"2026-11-05T17:11:24.356Z","first_published":"2026-11-05T17:51:45.694Z","brands":[],"dns":"resolved","resolved":["185.7.78.12"],"resolved_at":"2026-11-05T17:11:59Z","dns_checked_at":"2026-11-05T17:56:41.000Z","dns_since":"2026-11-05T17:56:41.000Z","findings":[{"id":"fab2swox2rrjjbttglxim","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T17:11:24.356Z","first_published":"2026-11-05T17:51:45.694Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=wessexherald.pro"},{"hostname":"wilmingtonroof.com","first_observed":"2026-11-05T17:05:43.524Z","first_published":"2026-11-05T17:51:45.694Z","brands":[],"dns":"resolved","resolved":["172.96.187.69"],"resolved_at":"2026-11-05T17:05:56Z","dns_checked_at":"2026-11-05T17:56:41.000Z","dns_since":"2026-11-05T17:56:41.000Z","findings":[{"id":"fuphwjtl6l53yxhiwgjg5","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T17:05:43.524Z","first_published":"2026-11-05T17:51:45.694Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=wilmingtonroof.com"},{"hostname":"wowoqpqwdq.com","first_observed":"2026-11-05T17:41:44.806Z","first_published":"2026-11-05T17:51:45.694Z","brands":[],"dns":"resolved","resolved":["104.21.17.153","172.67.177.13"],"resolved_at":"2026-11-05T17:42:07Z","dns_checked_at":"2026-11-05T17:56:41.000Z","dns_since":"2026-11-05T17:56:41.000Z","findings":[{"id":"fj5tfk4skixtavw47dgrs","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T17:41:44.806Z","first_published":"2026-11-05T17:51:45.694Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=wowoqpqwdq.com"},{"hostname":"wp.nf1.io-ext.se","first_observed":"2026-11-05T16:41:52.112Z","first_published":"2026-11-05T17:51:45.694Z","brands":[],"dns":"resolved","resolved":["195.246.120.17"],"resolved_at":"2026-11-05T16:45:23Z","dns_checked_at":"2026-11-05T17:56:41.000Z","dns_since":"2026-11-05T17:56:41.000Z","findings":[{"id":"fr74vdw3q4p2tbvzrpsmb","kind":"reported_domain","summary":"Under io-ext.se, listed by MetaMask","first_observed":"2026-11-05T16:41:52.112Z","first_published":"2026-11-05T17:51:45.694Z","source":"metamask","source_name":"MetaMask","under":"io-ext.se"}],"url":"https://domainspoof.com/live?show=all&q=wp.nf1.io-ext.se"},{"hostname":"www.862240-google.com","first_observed":"2026-11-05T17:26:51.740Z","first_published":"2026-11-05T17:51:45.694Z","brands":[{"id":"google","name":"Google","url":"https://domainspoof.com/brands/google"}],"dns":"resolved","resolved":["149.50.97.141"],"resolved_at":"2026-11-05T17:29:59Z","dns_checked_at":"2026-11-05T17:56:41.000Z","dns_since":"2026-11-05T17:56:41.000Z","findings":[{"id":"fdueoejeb3iukiaes2766","kind":"reported_domain","summary":"Under 862240-google.com, listed by MetaMask","first_observed":"2026-11-05T17:26:51.740Z","first_published":"2026-11-05T17:51:45.694Z","source":"metamask","source_name":"MetaMask","under":"862240-google.com"}],"url":"https://domainspoof.com/brands/google"},{"hostname":"www.adminhub.billrecharge.com.ng","first_observed":"2026-11-05T17:31:43.403Z","first_published":"2026-11-05T17:51:45.694Z","brands":[],"dns":"resolved","resolved":["163.61.188.7"],"resolved_at":"2026-11-05T17:38:47Z","dns_checked_at":"2026-11-05T17:56:41.000Z","dns_since":"2026-11-05T17:56:41.000Z","findings":[{"id":"fzclch5s2ofp73ujgooun","kind":"reported_domain","summary":"Under billrecharge.com.ng, reported by PhishDestroy","first_observed":"2026-11-05T17:31:43.403Z","first_published":"2026-11-05T17:51:45.694Z","source":"phishdestroy","source_name":"PhishDestroy","under":"billrecharge.com.ng","source_url":"https://phishdestroy.io/domain/billrecharge.com.ng/"}],"url":"https://domainspoof.com/live?show=all&q=www.adminhub.billrecharge.com.ng"},{"hostname":"www.amlwallets.org","first_observed":"2026-11-05T16:46:43.799Z","first_published":"2026-11-05T17:51:45.694Z","brands":[],"dns":"resolved","resolved":["66.29.137.134"],"resolved_at":"2026-11-05T16:56:49Z","dns_checked_at":"2026-11-05T17:56:41.000Z","dns_since":"2026-11-05T17:56:41.000Z","findings":[{"id":"f4hbxwwdkg37mzocph3ok","kind":"reported_domain","summary":"Under amlwallets.org, reported by PhishDestroy","first_observed":"2026-11-05T16:46:43.799Z","first_published":"2026-11-05T17:51:45.694Z","source":"phishdestroy","source_name":"PhishDestroy","under":"amlwallets.org","source_url":"https://phishdestroy.io/domain/amlwallets.org/"}],"url":"https://domainspoof.com/live?show=all&q=www.amlwallets.org"},{"hostname":"www.apiconn.jof-tech.com.ng","first_observed":"2026-11-05T17:31:43.403Z","first_published":"2026-11-05T17:51:45.694Z","brands":[],"dns":"resolved","resolved":["165.99.164.20"],"resolved_at":"2026-11-05T17:38:48Z","dns_checked_at":"2026-11-05T17:56:41.000Z","dns_since":"2026-11-05T17:56:41.000Z","findings":[{"id":"fh65xzkvqxokdipcoakif","kind":"reported_domain","summary":"Under jof-tech.com.ng, reported by PhishDestroy","first_observed":"2026-11-05T17:31:43.403Z","first_published":"2026-11-05T17:51:45.694Z","source":"phishdestroy","source_name":"PhishDestroy","under":"jof-tech.com.ng","source_url":"https://phishdestroy.io/domain/jof-tech.com.ng/"}],"url":"https://domainspoof.com/live?show=all&q=www.apiconn.jof-tech.com.ng"},{"hostname":"www.bitrefill.com-ct01-esim-gift.com","first_observed":"2026-11-05T17:30:00.132Z","first_published":"2026-11-05T17:51:45.694Z","brands":[{"id":"bitrefill","name":"Bitrefill","url":"https://domainspoof.com/brands/bitrefill"}],"dns":"resolved","resolved":["62.60.226.39"],"resolved_at":"2026-11-05T17:56:41Z","dns_checked_at":"2026-11-05T17:56:41.000Z","dns_since":"2026-11-05T17:56:41.000Z","findings":[{"id":"f4524pxn6i274c2ikfb3f","kind":"spamhaus_drop","summary":"Resolved to 62.60.226.39 on Spamhaus DROP","first_observed":"2026-11-05T17:30:00.132Z","first_published":"2026-11-05T17:51:45.694Z","address":"62.60.226.39","list":"spamhaus_drop","list_name":"Spamhaus DROP"}],"url":"https://domainspoof.com/brands/bitrefill"},{"hostname":"www.cardstop.co.uk","first_observed":"2026-11-05T17:22:06.981Z","first_published":"2026-11-05T17:51:45.694Z","brands":[{"id":"card-stop","name":"Card Stop","url":"https://domainspoof.com/brands/card-stop"}],"dns":"resolved","resolved":["45.77.102.235","64.176.195.8"],"resolved_at":"2026-11-05T17:56:41Z","dns_checked_at":"2026-11-05T17:56:41.000Z","dns_since":"2026-11-05T17:56:41.000Z","findings":[{"id":"f2pjqwhooi5ihj7cc4cbt","kind":"phishing_infrastructure","summary":"Resolved to 45.77.102.235, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T17:22:06.981Z","first_published":"2026-11-05T17:51:45.694Z","address":"45.77.102.235","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/card-stop"},{"hostname":"www.ciscostore.co.uk","first_observed":"2026-11-05T17:00:51.226Z","first_published":"2026-11-05T17:51:45.694Z","brands":[{"id":"cisco","name":"Cisco","url":"https://domainspoof.com/brands/cisco"}],"dns":"resolved","resolved":["45.77.102.235","64.176.195.8"],"resolved_at":"2026-11-05T17:56:41Z","dns_checked_at":"2026-11-05T17:56:41.000Z","dns_since":"2026-11-05T17:56:41.000Z","findings":[{"id":"fsydn2kr5oy6m7ks6cse7","kind":"phishing_infrastructure","summary":"Resolved to 45.77.102.235, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T17:00:51.226Z","first_published":"2026-11-05T17:51:45.694Z","address":"45.77.102.235","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/cisco"},{"hostname":"www.cynora.com.ng.xiaomi.org.ng","first_observed":"2026-11-05T17:11:59.177Z","first_published":"2026-11-05T17:51:45.694Z","brands":[{"id":"xiaomi","name":"Xiaomi","url":"https://domainspoof.com/brands/xiaomi"}],"dns":"resolved","resolved":["102.212.246.83"],"resolved_at":"2026-11-05T17:56:41Z","dns_checked_at":"2026-11-05T17:56:41.000Z","dns_since":"2026-11-05T17:56:41.000Z","findings":[{"id":"fvrrxp3jk2ldydqf2nb7h","kind":"phishing_infrastructure","summary":"Resolved to 102.212.246.83, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T17:11:59.177Z","first_published":"2026-11-05T17:51:45.694Z","address":"102.212.246.83","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/xiaomi"},{"hostname":"www.dnrsus.com.drnsglobal.org","first_observed":"2026-11-05T17:31:43.403Z","first_published":"2026-11-05T17:51:45.694Z","brands":[],"dns":"resolved","resolved":["206.168.149.10"],"resolved_at":"2026-11-05T17:38:48Z","dns_checked_at":"2026-11-05T17:56:41.000Z","dns_since":"2026-11-05T17:56:41.000Z","findings":[{"id":"fexuqhtdghbep57perkxs","kind":"reported_domain","summary":"Under drnsglobal.org, reported by PhishDestroy","first_observed":"2026-11-05T17:31:43.403Z","first_published":"2026-11-05T17:51:45.694Z","source":"phishdestroy","source_name":"PhishDestroy","under":"drnsglobal.org","source_url":"https://phishdestroy.io/domain/drnsglobal.org/"}],"url":"https://domainspoof.com/live?show=all&q=www.dnrsus.com.drnsglobal.org"},{"hostname":"www.flashusdtapps.store","first_observed":"2026-11-05T17:05:43.524Z","first_published":"2026-11-05T17:51:45.694Z","brands":[],"dns":"resolved","resolved":["13.140.163.172","169.58.153.162"],"resolved_at":"2026-11-05T17:05:56Z","dns_checked_at":"2026-11-05T17:56:41.000Z","dns_since":"2026-11-05T17:56:41.000Z","findings":[{"id":"fwpqpcdfvbxgbk4gfcodh","kind":"reported_domain","summary":"Under flashusdtapps.store, listed by MetaMask","first_observed":"2026-11-05T17:05:43.524Z","first_published":"2026-11-05T17:51:45.694Z","source":"metamask","source_name":"MetaMask","under":"flashusdtapps.store"}],"url":"https://domainspoof.com/live?show=all&q=www.flashusdtapps.store"},{"hostname":"www.flashusdttrc20.online","first_observed":"2026-11-05T17:05:43.524Z","first_published":"2026-11-05T17:51:45.694Z","brands":[],"dns":"resolved","resolved":["13.140.163.172","169.58.153.162"],"resolved_at":"2026-11-05T17:05:56Z","dns_checked_at":"2026-11-05T17:56:41.000Z","dns_since":"2026-11-05T17:56:41.000Z","findings":[{"id":"f4us3y5nf2eogzdwgek5v","kind":"reported_domain","summary":"Under flashusdttrc20.online, listed by MetaMask","first_observed":"2026-11-05T17:05:43.524Z","first_published":"2026-11-05T17:51:45.694Z","source":"metamask","source_name":"MetaMask","under":"flashusdttrc20.online"}],"url":"https://domainspoof.com/live?show=all&q=www.flashusdttrc20.online"},{"hostname":"www.foryoucrack.com","first_observed":"2026-11-05T17:41:44.806Z","first_published":"2026-11-05T17:51:45.694Z","brands":[],"dns":"resolved","resolved":["104.21.63.88","172.67.144.89"],"resolved_at":"2026-11-05T17:42:07Z","dns_checked_at":"2026-11-05T17:56:41.000Z","dns_since":"2026-11-05T17:56:41.000Z","findings":[{"id":"fsdwpftpywgy6pjyhqlpf","kind":"reported_domain","summary":"Under foryoucrack.com, reported by PhishDestroy","first_observed":"2026-11-05T17:41:44.806Z","first_published":"2026-11-05T17:51:45.694Z","source":"phishdestroy","source_name":"PhishDestroy","under":"foryoucrack.com","source_url":"https://phishdestroy.io/domain/foryoucrack.com/"}],"url":"https://domainspoof.com/live?show=all&q=www.foryoucrack.com"},{"hostname":"www.fx.legacytrustfinance.com","first_observed":"2026-11-05T17:16:10.565Z","first_published":"2026-11-05T17:51:45.694Z","brands":[],"dns":"resolved","resolved":["198.251.84.200"],"resolved_at":"2026-11-05T17:16:55Z","dns_checked_at":"2026-11-05T17:56:41.000Z","dns_since":"2026-11-05T17:56:41.000Z","findings":[{"id":"f2ishtzodzmkbv6thqzg4","kind":"reported_domain","summary":"Under legacytrustfinance.com, reported by PhishDestroy","first_observed":"2026-11-05T17:16:10.565Z","first_published":"2026-11-05T17:51:45.694Z","source":"phishdestroy","source_name":"PhishDestroy","under":"legacytrustfinance.com","source_url":"https://phishdestroy.io/domain/legacytrustfinance.com/"}],"url":"https://domainspoof.com/live?show=all&q=www.fx.legacytrustfinance.com"},{"hostname":"www.getfigure.co","first_observed":"2026-11-05T17:05:43.524Z","first_published":"2026-11-05T17:51:45.694Z","brands":[],"dns":"resolved","resolved":["3.33.251.168","15.197.225.128"],"resolved_at":"2026-11-05T17:05:56Z","dns_checked_at":"2026-11-05T17:56:41.000Z","dns_since":"2026-11-05T17:56:41.000Z","findings":[{"id":"fkbe2f5xalrjg6ibopxaw","kind":"reported_domain","summary":"Under getfigure.co, listed by MetaMask","first_observed":"2026-11-05T17:05:43.524Z","first_published":"2026-11-05T17:51:45.694Z","source":"metamask","source_name":"MetaMask","under":"getfigure.co"}],"url":"https://domainspoof.com/live?show=all&q=www.getfigure.co"},{"hostname":"www.itei.org.mx","first_observed":"2026-11-05T17:11:24.356Z","first_published":"2026-11-05T17:51:45.694Z","brands":[],"dns":"resolved","resolved":["38.45.71.108"],"resolved_at":"2026-11-05T17:11:59Z","dns_checked_at":"2026-11-05T17:56:41.000Z","dns_since":"2026-11-05T17:56:41.000Z","findings":[{"id":"fsfilacjmo7gncp4lklrc","kind":"reported_domain","summary":"Under itei.org.mx, reported by PhishDestroy","first_observed":"2026-11-05T17:11:24.356Z","first_published":"2026-11-05T17:51:45.694Z","source":"phishdestroy","source_name":"PhishDestroy","under":"itei.org.mx","source_url":"https://phishdestroy.io/domain/itei.org.mx/"}],"url":"https://domainspoof.com/live?show=all&q=www.itei.org.mx"},{"hostname":"www.keplrwallet-desktopapp.live","first_observed":"2026-11-05T17:26:51.740Z","first_published":"2026-11-05T17:51:45.694Z","brands":[],"dns":"resolved","resolved":["104.21.95.52","172.67.143.69"],"resolved_at":"2026-11-05T17:30:01Z","dns_checked_at":"2026-11-05T17:56:41.000Z","dns_since":"2026-11-05T17:56:41.000Z","findings":[{"id":"fzlyip4bu6ocbjhxtle6m","kind":"reported_domain","summary":"Under keplrwallet-desktopapp.live, listed by MetaMask","first_observed":"2026-11-05T17:26:51.740Z","first_published":"2026-11-05T17:51:45.694Z","source":"metamask","source_name":"MetaMask","under":"keplrwallet-desktopapp.live"}],"url":"https://domainspoof.com/live?show=all&q=www.keplrwallet-desktopapp.live"},{"hostname":"www.kreischerdesign.com","first_observed":"2026-11-05T16:46:43.799Z","first_published":"2026-11-05T17:51:45.694Z","brands":[],"dns":"resolved","resolved":["104.21.33.97","172.67.189.130"],"resolved_at":"2026-11-05T16:56:49Z","dns_checked_at":"2026-11-05T17:56:41.000Z","dns_since":"2026-11-05T17:56:41.000Z","findings":[{"id":"ftckxcrvhfbsyaa3bufix","kind":"reported_domain","summary":"Under kreischerdesign.com, reported by PhishDestroy","first_observed":"2026-11-05T16:46:43.799Z","first_published":"2026-11-05T17:51:45.694Z","source":"phishdestroy","source_name":"PhishDestroy","under":"kreischerdesign.com","source_url":"https://phishdestroy.io/domain/kreischerdesign.com/"}],"url":"https://domainspoof.com/live?show=all&q=www.kreischerdesign.com"},{"hostname":"www.lcairelaunch.live","first_observed":"2026-11-05T16:51:41.224Z","first_published":"2026-11-05T17:51:45.694Z","brands":[],"dns":"resolved","resolved":["64.29.17.65","216.198.79.65"],"resolved_at":"2026-11-05T16:52:09Z","dns_checked_at":"2026-11-05T17:56:41.000Z","dns_since":"2026-11-05T17:56:41.000Z","findings":[{"id":"fe3qczil3yrp54hraigaa","kind":"reported_domain","summary":"Under lcairelaunch.live, listed by MetaMask","first_observed":"2026-11-05T16:51:41.224Z","first_published":"2026-11-05T17:51:45.694Z","source":"metamask","source_name":"MetaMask","under":"lcairelaunch.live"}],"url":"https://domainspoof.com/live?show=all&q=www.lcairelaunch.live"},{"hostname":"www.mercadolibre.e-billing.com.ec","first_observed":"2026-11-05T17:42:07.216Z","first_published":"2026-11-05T17:51:45.694Z","brands":[{"id":"mercado-libre","name":"Mercado Libre","url":"https://domainspoof.com/brands/mercado-libre"}],"dns":"resolved","resolved":["70.32.23.12"],"resolved_at":"2026-11-05T17:56:41Z","dns_checked_at":"2026-11-05T17:56:41.000Z","dns_since":"2026-11-05T17:56:41.000Z","findings":[{"id":"f5uld26umdlhv4sk64xvw","kind":"phishing_infrastructure","summary":"Resolved to 70.32.23.12, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T17:42:07.216Z","first_published":"2026-11-05T17:51:45.694Z","address":"70.32.23.12","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/mercado-libre"},{"hostname":"www.minecraft-gx.online","first_observed":"2026-11-05T17:42:07.219Z","first_published":"2026-11-05T17:51:45.694Z","brands":[{"id":"minecraft","name":"Minecraft","url":"https://domainspoof.com/brands/minecraft"}],"dns":"resolved","resolved":["95.163.244.138"],"resolved_at":"2026-11-05T17:56:41Z","dns_checked_at":"2026-11-05T17:56:41.000Z","dns_since":"2026-11-05T17:56:41.000Z","findings":[{"id":"fsahgjtteui72jutfvms5","kind":"phishing_infrastructure","summary":"Resolved to 95.163.244.138, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T17:42:07.219Z","first_published":"2026-11-05T17:51:45.694Z","address":"95.163.244.138","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/minecraft"},{"hostname":"www.pay-bitrefill.com-ct01-esim-gift.com","first_observed":"2026-11-05T17:30:02.612Z","first_published":"2026-11-05T17:51:45.694Z","brands":[{"id":"bitrefill","name":"Bitrefill","url":"https://domainspoof.com/brands/bitrefill"}],"dns":"resolved","resolved":["62.60.226.39"],"resolved_at":"2026-11-05T17:56:41Z","dns_checked_at":"2026-11-05T17:56:41.000Z","dns_since":"2026-11-05T17:56:41.000Z","findings":[{"id":"fcxsoi25da7pmhslzzyk5","kind":"spamhaus_drop","summary":"Resolved to 62.60.226.39 on Spamhaus DROP","first_observed":"2026-11-05T17:30:02.612Z","first_published":"2026-11-05T17:51:45.694Z","address":"62.60.226.39","list":"spamhaus_drop","list_name":"Spamhaus DROP"}],"url":"https://domainspoof.com/brands/bitrefill"},{"hostname":"www.pittur.pitimbu.pb.gov.br","first_observed":"2026-11-05T17:05:43.524Z","first_published":"2026-11-05T17:51:45.694Z","brands":[{"id":"irs","name":"IRS","url":"https://domainspoof.com/brands/irs"}],"dns":"resolved","resolved":["186.227.205.42"],"resolved_at":"2026-11-05T17:05:57Z","dns_checked_at":"2026-11-05T17:56:41.000Z","dns_since":"2026-11-05T17:56:41.000Z","findings":[{"id":"fzr6l5nckkm23aptf4662","kind":"reported_domain","summary":"Reported by PhishTank as imitating Internal Revenue Service","first_observed":"2026-11-05T17:05:43.524Z","first_published":"2026-11-05T17:51:45.694Z","source":"phishtank","source_name":"PhishTank","claim":{"brand":"Internal Revenue Service"},"source_url":"https://phishtank.org/phish_detail.php?phish_id=8991229"}],"url":"https://domainspoof.com/brands/irs"},{"hostname":"www.protonvpn.courses","first_observed":"2026-11-05T17:11:59.257Z","first_published":"2026-11-05T17:51:45.694Z","brands":[{"id":"proton","name":"Proton","url":"https://domainspoof.com/brands/proton"}],"dns":"resolved","resolved":["172.232.24.161","172.232.24.235","172.234.25.42"],"resolved_at":"2026-11-05T17:56:41Z","dns_checked_at":"2026-11-05T17:56:41.000Z","dns_since":"2026-11-05T17:56:41.000Z","findings":[{"id":"fkse4hjhgkqqjab5noar7","kind":"phishing_infrastructure","summary":"Resolved to 172.232.24.161, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T17:11:59.257Z","first_published":"2026-11-05T17:51:45.694Z","address":"172.232.24.161","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/proton"},{"hostname":"www.protonvpn.garden","first_observed":"2026-11-05T17:11:59.266Z","first_published":"2026-11-05T17:51:45.694Z","brands":[{"id":"proton","name":"Proton","url":"https://domainspoof.com/brands/proton"}],"dns":"resolved","resolved":["172.232.24.161","172.232.24.235","172.234.25.42"],"resolved_at":"2026-11-05T17:56:41Z","dns_checked_at":"2026-11-05T17:56:41.000Z","dns_since":"2026-11-05T17:56:41.000Z","findings":[{"id":"fan2msnszvafu7evrd2ct","kind":"phishing_infrastructure","summary":"Resolved to 172.232.24.161, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T17:11:59.266Z","first_published":"2026-11-05T17:51:45.694Z","address":"172.232.24.161","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/proton"},{"hostname":"www.protonvpn.qpon","first_observed":"2026-11-05T17:11:59.266Z","first_published":"2026-11-05T17:51:45.694Z","brands":[{"id":"proton","name":"Proton","url":"https://domainspoof.com/brands/proton"}],"dns":"resolved","resolved":["172.232.24.161","172.232.24.235","172.234.25.42"],"resolved_at":"2026-11-05T17:56:41Z","dns_checked_at":"2026-11-05T17:56:41.000Z","dns_since":"2026-11-05T17:56:41.000Z","findings":[{"id":"fww2d3bwkqbxgwrkz5xer","kind":"phishing_infrastructure","summary":"Resolved to 172.232.24.161, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T17:11:59.266Z","first_published":"2026-11-05T17:51:45.694Z","address":"172.232.24.161","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/proton"},{"hostname":"www.protonvpn.study","first_observed":"2026-11-05T17:11:59.271Z","first_published":"2026-11-05T17:51:45.694Z","brands":[{"id":"proton","name":"Proton","url":"https://domainspoof.com/brands/proton"}],"dns":"resolved","resolved":["172.232.24.161","172.232.24.235","172.234.25.42"],"resolved_at":"2026-11-05T17:56:41Z","dns_checked_at":"2026-11-05T17:56:41.000Z","dns_since":"2026-11-05T17:56:41.000Z","findings":[{"id":"fykoxmpaldln56azmr6k5","kind":"phishing_infrastructure","summary":"Resolved to 172.232.24.161, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T17:11:59.271Z","first_published":"2026-11-05T17:51:45.694Z","address":"172.232.24.161","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/proton"},{"hostname":"www.spousal.ezgateway.net","first_observed":"2026-11-05T16:46:43.799Z","first_published":"2026-11-05T17:51:45.694Z","brands":[],"dns":"resolved","resolved":["172.67.165.35"],"resolved_at":"2026-11-05T16:56:50Z","dns_checked_at":"2026-11-05T17:56:41.000Z","dns_since":"2026-11-05T17:56:41.000Z","findings":[{"id":"fy7gm24xji4ksxoknwn7s","kind":"reported_domain","summary":"Under ezgateway.net, listed by USOM","first_observed":"2026-11-05T16:46:43.799Z","first_published":"2026-11-05T17:51:45.694Z","source":"usom","source_name":"USOM","under":"ezgateway.net"}],"url":"https://domainspoof.com/live?show=all&q=www.spousal.ezgateway.net"},{"hostname":"www.suresh.truebnb.org","first_observed":"2026-11-05T16:56:53.456Z","first_published":"2026-11-05T17:51:45.694Z","brands":[],"dns":"resolved","resolved":["91.229.239.28"],"resolved_at":"2026-11-05T17:06:18Z","dns_checked_at":"2026-11-05T17:56:41.000Z","dns_since":"2026-11-05T17:56:41.000Z","findings":[{"id":"fkze2ic3mj5hq3rvo2trj","kind":"reported_domain","summary":"Under truebnb.org, reported by PhishDestroy","first_observed":"2026-11-05T16:56:53.456Z","first_published":"2026-11-05T17:51:45.694Z","source":"phishdestroy","source_name":"PhishDestroy","under":"truebnb.org","source_url":"https://phishdestroy.io/domain/truebnb.org/"}],"url":"https://domainspoof.com/live?show=all&q=www.suresh.truebnb.org"},{"hostname":"www.tetherusdttrc20.store","first_observed":"2026-11-05T17:05:43.524Z","first_published":"2026-11-05T17:51:45.694Z","brands":[],"dns":"resolved","resolved":["13.140.163.172","169.58.153.162"],"resolved_at":"2026-11-05T17:05:57Z","dns_checked_at":"2026-11-05T17:56:41.000Z","dns_since":"2026-11-05T17:56:41.000Z","findings":[{"id":"fb66nii52ilooyju7cmvg","kind":"reported_domain","summary":"Under tetherusdttrc20.store, listed by MetaMask","first_observed":"2026-11-05T17:05:43.524Z","first_published":"2026-11-05T17:51:45.694Z","source":"metamask","source_name":"MetaMask","under":"tetherusdttrc20.store"}],"url":"https://domainspoof.com/live?show=all&q=www.tetherusdttrc20.store"},{"hostname":"www.the.legacytrustfinance.com","first_observed":"2026-11-05T17:00:35.682Z","first_published":"2026-11-05T17:51:45.694Z","brands":[],"dns":"resolved","resolved":["198.251.84.200"],"resolved_at":"2026-11-05T17:00:51Z","dns_checked_at":"2026-11-05T17:56:41.000Z","dns_since":"2026-11-05T17:56:41.000Z","findings":[{"id":"fntlu5w2mhioynwpkdoip","kind":"reported_domain","summary":"Under legacytrustfinance.com, reported by PhishDestroy","first_observed":"2026-11-05T17:00:35.682Z","first_published":"2026-11-05T17:51:45.694Z","source":"phishdestroy","source_name":"PhishDestroy","under":"legacytrustfinance.com","source_url":"https://phishdestroy.io/domain/legacytrustfinance.com/"}],"url":"https://domainspoof.com/live?show=all&q=www.the.legacytrustfinance.com"},{"hostname":"www.titantrustees.com","first_observed":"2026-11-05T17:31:43.403Z","first_published":"2026-11-05T17:51:45.694Z","brands":[],"dns":"resolved","resolved":["91.108.98.22","93.127.179.180"],"resolved_at":"2026-11-05T17:38:50Z","dns_checked_at":"2026-11-05T17:56:41.000Z","dns_since":"2026-11-05T17:56:41.000Z","findings":[{"id":"fcnawmyksf3xahmrf47d7","kind":"reported_domain","summary":"Under titantrustees.com, reported by PhishDestroy","first_observed":"2026-11-05T17:31:43.403Z","first_published":"2026-11-05T17:51:45.694Z","source":"phishdestroy","source_name":"PhishDestroy","under":"titantrustees.com","source_url":"https://phishdestroy.io/domain/titantrustees.com/"}],"url":"https://domainspoof.com/live?show=all&q=www.titantrustees.com"},{"hostname":"www.trustcash-exchange.com","first_observed":"2026-11-05T17:41:44.806Z","first_published":"2026-11-05T17:51:45.694Z","brands":[],"dns":"resolved","resolved":["52.223.13.41"],"resolved_at":"2026-11-05T17:42:07Z","dns_checked_at":"2026-11-05T17:56:41.000Z","dns_since":"2026-11-05T17:56:41.000Z","findings":[{"id":"fsjlwqwqkevvw5lwq3qjd","kind":"reported_domain","summary":"Under trustcash-exchange.com, reported by PhishDestroy","first_observed":"2026-11-05T17:41:44.806Z","first_published":"2026-11-05T17:51:45.694Z","source":"phishdestroy","source_name":"PhishDestroy","under":"trustcash-exchange.com","source_url":"https://phishdestroy.io/domain/trustcash-exchange.com/"}],"url":"https://domainspoof.com/live?show=all&q=www.trustcash-exchange.com"},{"hostname":"www.usdtflashsoftwares.store","first_observed":"2026-11-05T17:11:24.356Z","first_published":"2026-11-05T17:51:45.694Z","brands":[],"dns":"resolved","resolved":["13.140.163.172","169.58.153.162"],"resolved_at":"2026-11-05T17:11:59Z","dns_checked_at":"2026-11-05T17:56:41.000Z","dns_since":"2026-11-05T17:56:41.000Z","findings":[{"id":"f7jdeqg6ngjpdjx4tqyhf","kind":"reported_domain","summary":"Under usdtflashsoftwares.store, listed by MetaMask","first_observed":"2026-11-05T17:11:24.356Z","first_published":"2026-11-05T17:51:45.694Z","source":"metamask","source_name":"MetaMask","under":"usdtflashsoftwares.store"}],"url":"https://domainspoof.com/live?show=all&q=www.usdtflashsoftwares.store"},{"hostname":"www.vtlteglobal.com","first_observed":"2026-11-05T16:41:52.112Z","first_published":"2026-11-05T17:51:45.694Z","brands":[],"dns":"resolved","resolved":["13.248.213.45","76.223.67.189"],"resolved_at":"2026-11-05T16:45:26Z","dns_checked_at":"2026-11-05T17:56:41.000Z","dns_since":"2026-11-05T17:56:41.000Z","findings":[{"id":"fpvw6xneof5gm3gndlfiw","kind":"reported_domain","summary":"Under vtlteglobal.com, reported by PhishDestroy","first_observed":"2026-11-05T16:41:52.112Z","first_published":"2026-11-05T17:51:45.694Z","source":"phishdestroy","source_name":"PhishDestroy","under":"vtlteglobal.com","source_url":"https://phishdestroy.io/domain/vtlteglobal.com/"}],"url":"https://domainspoof.com/live?show=all&q=www.vtlteglobal.com"},{"hostname":"www.webdisk.ubc-quarie.com","first_observed":"2026-11-05T16:56:53.456Z","first_published":"2026-11-05T17:51:45.694Z","brands":[],"dns":"resolved","resolved":["162.4.84.252"],"resolved_at":"2026-11-05T17:06:19Z","dns_checked_at":"2026-11-05T17:56:41.000Z","dns_since":"2026-11-05T17:56:41.000Z","findings":[{"id":"fk4vkq7s7w2ngs2mhnh4d","kind":"reported_domain","summary":"Under ubc-quarie.com, reported by PhishDestroy","first_observed":"2026-11-05T16:56:53.456Z","first_published":"2026-11-05T17:51:45.694Z","source":"phishdestroy","source_name":"PhishDestroy","under":"ubc-quarie.com","source_url":"https://phishdestroy.io/domain/ubc-quarie.com/"}],"url":"https://domainspoof.com/live?show=all&q=www.webdisk.ubc-quarie.com"},{"hostname":"www.yoroixmurgodesktop.icu","first_observed":"2026-11-05T17:31:43.403Z","first_published":"2026-11-05T17:51:45.694Z","brands":[],"dns":"resolved","resolved":["104.21.61.149","172.67.211.119"],"resolved_at":"2026-11-05T17:38:50Z","dns_checked_at":"2026-11-05T17:56:41.000Z","dns_since":"2026-11-05T17:56:41.000Z","findings":[{"id":"fd32sgorqsok5pv7ugpko","kind":"reported_domain","summary":"Under yoroixmurgodesktop.icu, reported by PhishDestroy","first_observed":"2026-11-05T17:31:43.403Z","first_published":"2026-11-05T17:51:45.694Z","source":"phishdestroy","source_name":"PhishDestroy","under":"yoroixmurgodesktop.icu","source_url":"https://phishdestroy.io/domain/yoroixmurgodesktop.icu/"}],"url":"https://domainspoof.com/live?show=all&q=www.yoroixmurgodesktop.icu"},{"hostname":"www.ywaiwai.com.cn","first_observed":"2026-11-05T17:41:44.806Z","first_published":"2026-11-05T17:51:45.694Z","brands":[],"dns":"resolved","resolved":["104.21.86.163","172.67.221.192"],"resolved_at":"2026-11-05T17:42:07Z","dns_checked_at":"2026-11-05T17:56:41.000Z","dns_since":"2026-11-05T17:56:41.000Z","findings":[{"id":"fifv7nqo6ixqtc3itie7k","kind":"reported_domain","summary":"Under ywaiwai.com.cn, reported by PhishDestroy","first_observed":"2026-11-05T17:41:44.806Z","first_published":"2026-11-05T17:51:45.694Z","source":"phishdestroy","source_name":"PhishDestroy","under":"ywaiwai.com.cn","source_url":"https://phishdestroy.io/domain/ywaiwai.com.cn/"}],"url":"https://domainspoof.com/live?show=all&q=www.ywaiwai.com.cn"},{"hostname":"xmknkonfu.shop","first_observed":"2026-11-05T16:56:53.456Z","first_published":"2026-11-05T17:51:45.694Z","brands":[],"dns":"resolved","resolved":["104.21.88.95","172.67.175.214"],"resolved_at":"2026-11-05T17:06:21Z","dns_checked_at":"2026-11-05T17:56:41.000Z","dns_since":"2026-11-05T17:56:41.000Z","findings":[{"id":"fxiwvk4j5oyloetsogvx7","kind":"reported_domain","summary":"Listed by NPA 165 (information services)","first_observed":"2026-11-05T16:56:53.456Z","first_published":"2026-11-05T17:51:45.694Z","source":"npa","source_name":"NPA 165","claim":{"category":"information services"}}],"url":"https://domainspoof.com/live?show=all&q=xmknkonfu.shop"},{"hostname":"yocasino.org.es","first_observed":"2026-11-05T16:56:53.456Z","first_published":"2026-11-05T17:51:45.694Z","brands":[],"dns":"resolved","resolved":["104.21.33.171","172.67.165.12"],"resolved_at":"2026-11-05T17:06:24Z","dns_checked_at":"2026-11-05T17:56:41.000Z","dns_since":"2026-11-05T17:56:41.000Z","findings":[{"id":"fefceahovm4buq6n5vpqb","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T16:56:53.456Z","first_published":"2026-11-05T17:51:45.694Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=yocasino.org.es"},{"hostname":"ywaiwai.com.cn","first_observed":"2026-11-05T17:41:44.806Z","first_published":"2026-11-05T17:51:45.694Z","brands":[],"dns":"resolved","resolved":["104.21.86.163","172.67.221.192"],"resolved_at":"2026-11-05T17:42:07Z","dns_checked_at":"2026-11-05T17:56:41.000Z","dns_since":"2026-11-05T17:56:41.000Z","findings":[{"id":"fl6ut5hzehx63fxxepwka","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T17:41:44.806Z","first_published":"2026-11-05T17:51:45.694Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/ywaiwai.com.cn/"}],"url":"https://domainspoof.com/live?show=all&q=ywaiwai.com.cn"},{"hostname":"zimbra.accessglobaltrades.com","first_observed":"2026-11-05T17:31:43.403Z","first_published":"2026-11-05T17:51:45.694Z","brands":[],"dns":"resolved","resolved":["185.53.179.136"],"resolved_at":"2026-11-05T17:38:52Z","dns_checked_at":"2026-11-05T17:56:41.000Z","dns_since":"2026-11-05T17:56:41.000Z","findings":[{"id":"fi2cqv3rjc3rvziipyenb","kind":"reported_domain","summary":"Under accessglobaltrades.com, reported by PhishDestroy","first_observed":"2026-11-05T17:31:43.403Z","first_published":"2026-11-05T17:51:45.694Z","source":"phishdestroy","source_name":"PhishDestroy","under":"accessglobaltrades.com","source_url":"https://phishdestroy.io/domain/accessglobaltrades.com/"}],"url":"https://domainspoof.com/live?show=all&q=zimbra.accessglobaltrades.com"},{"hostname":"zk66666.com","first_observed":"2026-11-05T16:46:43.799Z","first_published":"2026-11-05T17:51:45.694Z","brands":[],"dns":"resolved","resolved":["216.137.53.4","216.137.53.32","216.137.53.40","216.137.53.43"],"resolved_at":"2026-11-05T16:56:51Z","dns_checked_at":"2026-11-05T17:56:41.000Z","dns_since":"2026-11-05T17:56:41.000Z","findings":[{"id":"fxevtw2ehfeb3bypvrqgw","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T16:46:43.799Z","first_published":"2026-11-05T17:51:45.694Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/zk66666.com/"}],"url":"https://domainspoof.com/live?show=all&q=zk66666.com"},{"hostname":"bitbox.technology","first_observed":"2026-11-05T16:43:47.000Z","first_published":"2026-11-05T16:43:47.000Z","brands":[{"id":"bitbox","name":"BitBox","url":"https://domainspoof.com/brands/bitbox"}],"dns":"resolved","resolved":["66.22.16.138"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of bitbox.swiss (same name, other ending), resolved to 66.22.16.138, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T16:43:47.000Z","first_published":"2026-11-05T16:43:47.000Z","of":"bitbox.swiss","spelling":"tld","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"66.22.16.138","flagged_at":"2026-11-05T16:43:47Z"}]}],"url":"https://domainspoof.com/brands/bitbox"},{"hostname":"bitget.club","first_observed":"2026-11-05T16:43:47.000Z","first_published":"2026-11-05T16:43:47.000Z","brands":[{"id":"bitget","name":"Bitget","url":"https://domainspoof.com/brands/bitget"}],"dns":"no_address","resolved":[],"findings":[{"kind":"lookalike","summary":"Registered lookalike of bitget.com (same name, other ending), reported by PhishDestroy","first_observed":"2026-11-05T16:43:47.000Z","first_published":"2026-11-05T16:43:47.000Z","of":"bitget.com","spelling":"tld","found_by":"dns_sweep","listings":[{"kind":"reported","source":"phishdestroy","source_name":"PhishDestroy","host":"bitget.club","flagged_at":"2026-11-05T16:43:47Z"}]}],"url":"https://domainspoof.com/brands/bitget"},{"hostname":"fede.com","first_observed":"2026-11-05T16:43:47.000Z","first_published":"2026-11-05T16:43:47.000Z","brands":[{"id":"fedex","name":"FedEx","url":"https://domainspoof.com/brands/fedex"}],"dns":"resolved","resolved":["45.82.67.240"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of fedex.com (a dropped letter), resolved to 45.82.67.240, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T16:43:47.000Z","first_published":"2026-11-05T16:43:47.000Z","of":"fedex.com","spelling":"omission","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"45.82.67.240","flagged_at":"2026-11-05T16:43:47Z"}]}],"url":"https://domainspoof.com/brands/fedex"},{"hostname":"fortinte.com","first_observed":"2026-11-05T16:43:47.000Z","first_published":"2026-11-05T16:43:47.000Z","brands":[{"id":"epic-games","name":"Epic Games","url":"https://domainspoof.com/brands/epic-games"}],"dns":"resolved","resolved":["185.150.189.166"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of fortnite.com (two letters swapped), resolved to 185.150.189.166, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T16:43:47.000Z","first_published":"2026-11-05T16:43:47.000Z","of":"fortnite.com","spelling":"transposition","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"185.150.189.166","flagged_at":"2026-11-05T16:43:47Z"}]}],"url":"https://domainspoof.com/brands/epic-games"},{"hostname":"fortnits.com","first_observed":"2026-11-05T16:43:47.000Z","first_published":"2026-11-05T16:43:47.000Z","brands":[{"id":"epic-games","name":"Epic Games","url":"https://domainspoof.com/brands/epic-games"}],"dns":"resolved","resolved":["62.212.89.90"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of fortnite.com (a letter from a neighbouring key), resolved to 62.212.89.90, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T16:43:47.000Z","first_published":"2026-11-05T16:43:47.000Z","of":"fortnite.com","spelling":"adjacent_key","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"62.212.89.90","flagged_at":"2026-11-05T16:43:47Z"}]}],"url":"https://domainspoof.com/brands/epic-games"},{"hostname":"fortnkte.com","first_observed":"2026-11-05T16:43:47.000Z","first_published":"2026-11-05T16:43:47.000Z","brands":[{"id":"epic-games","name":"Epic Games","url":"https://domainspoof.com/brands/epic-games"}],"dns":"resolved","resolved":["216.245.213.73"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of fortnite.com (a letter from a neighbouring key), resolved to 216.245.213.73, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T16:43:47.000Z","first_published":"2026-11-05T16:43:47.000Z","of":"fortnite.com","spelling":"adjacent_key","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"216.245.213.73","flagged_at":"2026-11-05T16:43:47Z"}]}],"url":"https://domainspoof.com/brands/epic-games"},{"hostname":"fottnite.com","first_observed":"2026-11-05T16:43:47.000Z","first_published":"2026-11-05T16:43:47.000Z","brands":[{"id":"epic-games","name":"Epic Games","url":"https://domainspoof.com/brands/epic-games"}],"dns":"resolved","resolved":["94.75.193.71"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of fortnite.com (a letter from a neighbouring key), resolved to 94.75.193.71, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T16:43:47.000Z","first_published":"2026-11-05T16:43:47.000Z","of":"fortnite.com","spelling":"adjacent_key","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"94.75.193.71","flagged_at":"2026-11-05T16:43:47Z"}]}],"url":"https://domainspoof.com/brands/epic-games"},{"hostname":"gani.fr","first_observed":"2026-11-05T16:43:47.000Z","first_published":"2026-11-05T16:43:47.000Z","brands":[{"id":"gandi","name":"Gandi","url":"https://domainspoof.com/brands/gandi"}],"dns":"resolved","resolved":["217.160.0.12"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of gandi.net (a dropped letter), resolved to 217.160.0.12, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T16:43:47.000Z","first_published":"2026-11-05T16:43:47.000Z","of":"gandi.net","spelling":"omission","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"217.160.0.12","flagged_at":"2026-11-05T16:43:47Z"}]}],"url":"https://domainspoof.com/brands/gandi"},{"hostname":"gitlba.com","first_observed":"2026-11-05T16:43:47.000Z","first_published":"2026-11-05T16:43:47.000Z","brands":[{"id":"gitlab","name":"GitLab","url":"https://domainspoof.com/brands/gitlab"}],"dns":"resolved","resolved":["199.193.114.42"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of gitlab.com (two letters swapped), resolved to 199.193.114.42, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T16:43:47.000Z","first_published":"2026-11-05T16:43:47.000Z","of":"gitlab.com","spelling":"transposition","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"199.193.114.42","flagged_at":"2026-11-05T16:43:47Z"}]}],"url":"https://domainspoof.com/brands/gitlab"},{"hostname":"googgle.cz","first_observed":"2026-11-05T16:43:47.000Z","first_published":"2026-11-05T16:43:47.000Z","brands":[{"id":"google","name":"Google","url":"https://domainspoof.com/brands/google"}],"dns":"resolved","resolved":["209.250.224.249"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of google.com (a doubled letter), resolved to 209.250.224.249, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T16:43:47.000Z","first_published":"2026-11-05T16:43:47.000Z","of":"google.com","spelling":"repetition","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"209.250.224.249","flagged_at":"2026-11-05T16:43:47Z"}]}],"url":"https://domainspoof.com/brands/google"},{"hostname":"googie.ph","first_observed":"2026-11-05T16:43:47.000Z","first_published":"2026-11-05T16:43:47.000Z","brands":[{"id":"google","name":"Google","url":"https://domainspoof.com/brands/google"}],"dns":"resolved","resolved":["212.92.105.196"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of google.com (similar-looking characters), resolved to 212.92.105.196, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T16:43:47.000Z","first_published":"2026-11-05T16:43:47.000Z","of":"google.com","spelling":"homoglyph","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"212.92.105.196","flagged_at":"2026-11-05T16:43:47Z"}]}],"url":"https://domainspoof.com/brands/google"},{"hostname":"havaan.com.br","first_observed":"2026-11-05T16:43:47.000Z","first_published":"2026-11-05T16:43:47.000Z","brands":[{"id":"havan","name":"Havan","url":"https://domainspoof.com/brands/havan"}],"dns":"resolved","resolved":["2.57.91.91"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of havan.com.br (a doubled letter), resolved to 2.57.91.91, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T16:43:47.000Z","first_published":"2026-11-05T16:43:47.000Z","of":"havan.com.br","spelling":"repetition","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"2.57.91.91","flagged_at":"2026-11-05T16:43:47Z"}]}],"url":"https://domainspoof.com/brands/havan"},{"hostname":"hotmwil.com","first_observed":"2026-11-05T16:43:47.000Z","first_published":"2026-11-05T16:43:47.000Z","brands":[{"id":"microsoft","name":"Microsoft","url":"https://domainspoof.com/brands/microsoft"}],"dns":"resolved","resolved":["212.7.194.71"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of hotmail.com (a letter from a neighbouring key), resolved to 212.7.194.71, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T16:43:47.000Z","first_published":"2026-11-05T16:43:47.000Z","of":"hotmail.com","spelling":"adjacent_key","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"212.7.194.71","flagged_at":"2026-11-05T16:43:47Z"}]}],"url":"https://domainspoof.com/brands/microsoft"},{"hostname":"hshc.cz","first_observed":"2026-11-05T16:43:47.000Z","first_published":"2026-11-05T16:43:47.000Z","brands":[{"id":"hsbc","name":"HSBC","url":"https://domainspoof.com/brands/hsbc"}],"dns":"resolved","resolved":["81.2.196.19"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of hsbc.com (a letter from a neighbouring key), resolved to 81.2.196.19, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T16:43:47.000Z","first_published":"2026-11-05T16:43:47.000Z","of":"hsbc.com","spelling":"adjacent_key","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"81.2.196.19","flagged_at":"2026-11-05T16:43:47Z"}]}],"url":"https://domainspoof.com/brands/hsbc"},{"hostname":"htx.lat","first_observed":"2026-11-05T16:43:47.000Z","first_published":"2026-11-05T16:43:47.000Z","brands":[{"id":"htx","name":"HTX (Huobi)","url":"https://domainspoof.com/brands/htx"}],"dns":"resolved","resolved":["92.53.96.141"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of htx.com (same name, other ending), resolved to 92.53.96.141, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T16:43:47.000Z","first_published":"2026-11-05T16:43:47.000Z","of":"htx.com","spelling":"tld","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"92.53.96.141","flagged_at":"2026-11-05T16:43:47Z"}]}],"url":"https://domainspoof.com/brands/htx"},{"hostname":"hyperliquid.click","first_observed":"2026-11-05T16:43:47.000Z","first_published":"2026-11-05T16:43:47.000Z","brands":[{"id":"hyperliquid","name":"Hyperliquid","url":"https://domainspoof.com/brands/hyperliquid"}],"dns":"resolved","resolved":["185.53.179.149"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of hyperliquid.xyz (same name, other ending), reported by PhishDestroy","first_observed":"2026-11-05T16:43:47.000Z","first_published":"2026-11-05T16:43:47.000Z","of":"hyperliquid.xyz","spelling":"tld","found_by":"dns_sweep","listings":[{"kind":"reported","source":"phishdestroy","source_name":"PhishDestroy","host":"hyperliquid.click","flagged_at":"2026-11-05T16:43:47Z"}]}],"url":"https://domainspoof.com/brands/hyperliquid"},{"hostname":"icicibanl.com","first_observed":"2026-11-05T16:43:47.000Z","first_published":"2026-11-05T16:43:47.000Z","brands":[{"id":"icici-bank","name":"ICICI Bank","url":"https://domainspoof.com/brands/icici-bank"}],"dns":"resolved","resolved":["199.193.114.100"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of icicibank.com (a letter from a neighbouring key), resolved to 199.193.114.100, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T16:43:47.000Z","first_published":"2026-11-05T16:43:47.000Z","of":"icicibank.com","spelling":"adjacent_key","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"199.193.114.100","flagged_at":"2026-11-05T16:43:47Z"}]}],"url":"https://domainspoof.com/brands/icici-bank"},{"hostname":"innps.it","first_observed":"2026-11-05T16:43:47.000Z","first_published":"2026-11-05T16:43:47.000Z","brands":[{"id":"inps","name":"INPS","url":"https://domainspoof.com/brands/inps"}],"dns":"resolved","resolved":["195.110.124.133"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of inps.it (a doubled letter), resolved to 195.110.124.133, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T16:43:47.000Z","first_published":"2026-11-05T16:43:47.000Z","of":"inps.it","spelling":"repetition","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"195.110.124.133","flagged_at":"2026-11-05T16:43:47Z"}]}],"url":"https://domainspoof.com/brands/inps"},{"hostname":"inps.lat","first_observed":"2026-11-05T16:43:47.000Z","first_published":"2026-11-05T16:43:47.000Z","brands":[{"id":"inps","name":"INPS","url":"https://domainspoof.com/brands/inps"}],"dns":"resolved","resolved":["134.122.190.24"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of inps.it (same name, other ending), resolved to 134.122.190.24 on Spamhaus DROP","first_observed":"2026-11-05T16:43:47.000Z","first_published":"2026-11-05T16:43:47.000Z","of":"inps.it","spelling":"tld","found_by":"dns_sweep","listings":[{"kind":"address","source":"spamhaus_drop","list_name":"Spamhaus DROP","address":"134.122.190.24","flagged_at":"2026-11-05T16:43:47Z"}]}],"url":"https://domainspoof.com/brands/inps"},{"hostname":"ion-os.es","first_observed":"2026-11-05T16:43:47.000Z","first_published":"2026-11-05T16:43:47.000Z","brands":[{"id":"ionos","name":"IONOS","url":"https://domainspoof.com/brands/ionos"}],"dns":"resolved","resolved":["217.160.0.173","2001:8d8:100f:f000::200"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of ionos.com (an added hyphen), resolved to 217.160.0.173, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T16:43:47.000Z","first_published":"2026-11-05T16:43:47.000Z","of":"ionos.com","spelling":"hyphen","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"217.160.0.173","flagged_at":"2026-11-05T16:43:47Z"}]}],"url":"https://domainspoof.com/brands/ionos"},{"hostname":"konos.de","first_observed":"2026-11-05T16:43:47.000Z","first_published":"2026-11-05T16:43:47.000Z","brands":[{"id":"ionos","name":"IONOS","url":"https://domainspoof.com/brands/ionos"}],"dns":"resolved","resolved":["81.169.145.165","2a01:238:20a:202:1165::"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of ionos.com (a letter from a neighbouring key), resolved to 81.169.145.165, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T16:43:47.000Z","first_published":"2026-11-05T16:43:47.000Z","of":"ionos.com","spelling":"adjacent_key","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"81.169.145.165","flagged_at":"2026-11-05T16:43:47Z"}]}],"url":"https://domainspoof.com/brands/ionos"},{"hostname":"nexigroup.finance","first_observed":"2026-11-05T16:43:47.000Z","first_published":"2026-11-05T16:43:47.000Z","brands":[{"id":"nexi","name":"Nexi","url":"https://domainspoof.com/brands/nexi"}],"dns":"resolved","resolved":["195.110.124.133"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of nexigroup.com (same name, other ending), resolved to 195.110.124.133, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T16:43:47.000Z","first_published":"2026-11-05T16:43:47.000Z","of":"nexigroup.com","spelling":"tld","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"195.110.124.133","flagged_at":"2026-11-05T16:43:47Z"}]}],"url":"https://domainspoof.com/brands/nexi"},{"hostname":"762904-crypto.com","first_observed":"2026-11-05T16:31:21.698Z","first_published":"2026-11-05T16:42:04.725Z","brands":[{"id":"crypto-com","name":"Crypto.com","url":"https://domainspoof.com/brands/crypto-com"}],"dns":"resolved","resolved":["104.21.89.4","172.67.155.54","2606:4700:3032::ac43:9b36","2606:4700:3037::6815:5904"],"resolved_at":"2026-11-05T16:31:36Z","dns_checked_at":"2026-11-05T16:55:41.000Z","dns_since":"2026-11-05T16:55:41.000Z","findings":[{"id":"ffu5ctj4sgetbiugi6s6w","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T16:31:21.698Z","first_published":"2026-11-05T16:42:04.725Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/brands/crypto-com"},{"hostname":"94hxnr-xhkn4-rk77-e371d7.pages.dev","first_observed":"2026-11-05T15:51:46.017Z","first_published":"2026-11-05T16:42:04.725Z","brands":[],"dns":"resolved","resolved":["172.66.44.55","172.66.47.201"],"resolved_at":"2026-11-05T15:51:58Z","dns_checked_at":"2026-11-05T16:55:41.000Z","dns_since":"2026-11-05T16:55:41.000Z","findings":[{"id":"f3bqubkjpz6cpqqfblsoy","kind":"reported_domain","summary":"Reported by PhishTank","first_observed":"2026-11-05T15:51:46.017Z","first_published":"2026-11-05T16:42:04.725Z","source":"phishtank","source_name":"PhishTank","source_url":"https://phishtank.org/phish_detail.php?phish_id=9479290"}],"url":"https://domainspoof.com/live?show=all&q=94hxnr-xhkn4-rk77-e371d7.pages.dev"},{"hostname":"9qranm8dv.static-cor-dncv.wasmer.app","first_observed":"2026-11-05T15:46:31.013Z","first_published":"2026-11-05T16:42:04.725Z","brands":[],"dns":"resolved","resolved":["141.94.158.208"],"resolved_at":"2026-11-05T15:53:49Z","dns_checked_at":"2026-11-05T16:55:41.000Z","dns_since":"2026-11-05T16:55:41.000Z","findings":[{"id":"fano5byvlt3esjsg7wb25","kind":"reported_domain","summary":"Under static-cor-dncv.wasmer.app, listed by CERT Polska","first_observed":"2026-11-05T15:46:31.013Z","first_published":"2026-11-05T16:42:04.725Z","source":"cert_polska","source_name":"CERT Polska","under":"static-cor-dncv.wasmer.app"}],"url":"https://domainspoof.com/live?show=all&q=9qranm8dv.static-cor-dncv.wasmer.app"},{"hostname":"acceptreservation-booking1.com","first_observed":"2026-11-05T15:31:21.422Z","first_published":"2026-11-05T16:42:04.725Z","brands":[],"dns":"resolved","resolved":["104.21.47.161","172.67.149.17"],"resolved_at":"2026-11-05T15:38:26Z","dns_checked_at":"2026-11-05T16:55:41.000Z","dns_since":"2026-11-05T16:55:41.000Z","findings":[{"id":"fcpjoc3ky6tkcmbw3vyx5","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T15:31:21.422Z","first_published":"2026-11-05T16:42:04.725Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=acceptreservation-booking1.com"},{"hostname":"accessportal-8761.me","first_observed":"2026-11-05T15:31:21.422Z","first_published":"2026-11-05T16:42:04.725Z","brands":[],"dns":"resolved","resolved":["104.21.18.243","172.67.183.236"],"resolved_at":"2026-11-05T15:38:51Z","dns_checked_at":"2026-11-05T16:55:41.000Z","dns_since":"2026-11-05T16:55:41.000Z","findings":[{"id":"ftz55efqfhxtdmsutr44s","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T15:31:21.422Z","first_published":"2026-11-05T16:42:04.725Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=accessportal-8761.me"},{"hostname":"accessportal.me","first_observed":"2026-11-05T15:41:12.412Z","first_published":"2026-11-05T16:42:04.725Z","brands":[],"dns":"resolved","resolved":["104.21.45.158","172.67.216.105"],"resolved_at":"2026-11-05T15:41:36Z","dns_checked_at":"2026-11-05T16:55:41.000Z","dns_since":"2026-11-05T16:55:41.000Z","findings":[{"id":"fgno4pmj33govgbyakuro","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T15:41:12.412Z","first_published":"2026-11-05T16:42:04.725Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=accessportal.me"},{"hostname":"admin.axirwallet.com","first_observed":"2026-11-05T15:31:21.422Z","first_published":"2026-11-05T16:42:04.725Z","brands":[],"dns":"resolved","resolved":["164.132.96.238"],"resolved_at":"2026-11-05T15:38:52Z","dns_checked_at":"2026-11-05T16:55:41.000Z","dns_since":"2026-11-05T16:55:41.000Z","findings":[{"id":"ftt4hqun3pwkomdpyse26","kind":"reported_domain","summary":"Under axirwallet.com, reported by PhishDestroy","first_observed":"2026-11-05T15:31:21.422Z","first_published":"2026-11-05T16:42:04.725Z","source":"phishdestroy","source_name":"PhishDestroy","under":"axirwallet.com","source_url":"https://phishdestroy.io/domain/axirwallet.com/"}],"url":"https://domainspoof.com/live?show=all&q=admin.axirwallet.com"},{"hostname":"aiwprton.hissesepetim.com","first_observed":"2026-11-05T15:41:12.412Z","first_published":"2026-11-05T16:42:04.725Z","brands":[],"dns":"resolved","resolved":["104.21.84.82","172.67.190.75"],"resolved_at":"2026-11-05T15:41:36Z","dns_checked_at":"2026-11-05T16:55:41.000Z","dns_since":"2026-11-05T16:55:41.000Z","findings":[{"id":"f2iewgyqgbswfocavg7ay","kind":"reported_domain","summary":"Under hissesepetim.com, listed by USOM","first_observed":"2026-11-05T15:41:12.412Z","first_published":"2026-11-05T16:42:04.725Z","source":"usom","source_name":"USOM","under":"hissesepetim.com"}],"url":"https://domainspoof.com/live?show=all&q=aiwprton.hissesepetim.com"},{"hostname":"altarioveyron-es.live","first_observed":"2026-11-05T16:21:08.591Z","first_published":"2026-11-05T16:42:04.725Z","brands":[],"dns":"resolved","resolved":["104.21.86.79","172.67.216.233"],"resolved_at":"2026-11-05T16:21:30Z","dns_checked_at":"2026-11-05T16:55:41.000Z","dns_since":"2026-11-05T16:55:41.000Z","findings":[{"id":"faou3xxbjo3jcdkvjmfwk","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T16:21:08.591Z","first_published":"2026-11-05T16:42:04.725Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=altarioveyron-es.live"},{"hostname":"aml-bot-trust.com","first_observed":"2026-11-05T16:16:21.134Z","first_published":"2026-11-05T16:42:04.725Z","brands":[],"dns":"resolved","resolved":["85.120.217.17"],"resolved_at":"2026-11-05T16:16:39Z","dns_checked_at":"2026-11-05T16:55:41.000Z","dns_since":"2026-11-05T16:55:41.000Z","findings":[{"id":"fqa3fnp5x2sxvwe5dtt45","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T16:16:21.134Z","first_published":"2026-11-05T16:42:04.725Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/aml-bot-trust.com/"}],"url":"https://domainspoof.com/live?show=all&q=aml-bot-trust.com"},{"hostname":"anguishafterglow.com","first_observed":"2026-11-05T15:56:59.990Z","first_published":"2026-11-05T16:42:04.725Z","brands":[],"dns":"resolved","resolved":["76.76.21.21"],"resolved_at":"2026-11-05T16:04:01Z","dns_checked_at":"2026-11-05T16:55:41.000Z","dns_since":"2026-11-05T16:55:41.000Z","findings":[{"id":"fsv3bkfekvp2akgcbnqcp","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T15:56:59.990Z","first_published":"2026-11-05T16:42:04.725Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/anguishafterglow.com/"}],"url":"https://domainspoof.com/live?show=all&q=anguishafterglow.com"},{"hostname":"app-benqi.net","first_observed":"2026-11-05T16:10:31.214Z","first_published":"2026-11-05T16:42:04.725Z","brands":[],"dns":"resolved","resolved":["104.21.54.38","172.67.223.104"],"resolved_at":"2026-11-06T11:31:51Z","dns_checked_at":"2026-11-05T16:55:41.000Z","dns_since":"2026-11-05T16:55:41.000Z","findings":[{"id":"f4nkziz3uwamxl4yj7icl","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T16:10:31.214Z","first_published":"2026-11-05T16:42:04.725Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=app-benqi.net"},{"hostname":"auth-ledgr-com-strt.pages.dev","first_observed":"2026-11-05T15:46:31.013Z","first_published":"2026-11-05T16:42:04.725Z","brands":[],"dns":"resolved","resolved":["172.66.44.176","172.66.47.80"],"resolved_at":"2026-11-05T15:54:06Z","dns_checked_at":"2026-11-05T16:55:41.000Z","dns_since":"2026-11-05T16:55:41.000Z","findings":[{"id":"fgx4qxqwvavrlcugqmty7","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T15:46:31.013Z","first_published":"2026-11-05T16:42:04.725Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=auth-ledgr-com-strt.pages.dev"},{"hostname":"authenticpodtalk.sbs","first_observed":"2026-11-05T15:56:59.990Z","first_published":"2026-11-05T16:42:04.725Z","brands":[],"dns":"resolved","resolved":["104.21.72.166","172.67.153.81"],"resolved_at":"2026-11-05T16:04:01Z","dns_checked_at":"2026-11-05T16:55:41.000Z","dns_since":"2026-11-05T16:55:41.000Z","findings":[{"id":"fci4hqspy43beijgwwldf","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T15:56:59.990Z","first_published":"2026-11-05T16:42:04.725Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=authenticpodtalk.sbs"},{"hostname":"axialys-fr.live","first_observed":"2026-11-05T15:36:14.003Z","first_published":"2026-11-05T16:42:04.725Z","brands":[],"dns":"resolved","resolved":["104.21.92.242","172.67.200.248"],"resolved_at":"2026-11-05T15:46:57Z","dns_checked_at":"2026-11-05T16:55:41.000Z","dns_since":"2026-11-05T16:55:41.000Z","findings":[{"id":"fkceo2wdvmrsvumbuw7k7","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T15:36:14.003Z","first_published":"2026-11-05T16:42:04.725Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=axialys-fr.live"},{"hostname":"axihjr.com","first_observed":"2026-11-05T16:10:31.214Z","first_published":"2026-11-05T16:42:04.725Z","brands":[],"dns":"no_address","resolved":[],"resolved_at":"2026-11-05T16:13:22Z","dns_checked_at":"2026-11-06T09:18:06.000Z","findings":[{"id":"fywuza55tvkzcysghmoha","kind":"reported_domain","summary":"Listed by NPA 165 (finance and insurance)","first_observed":"2026-11-05T16:10:31.214Z","first_published":"2026-11-05T16:42:04.725Z","source":"npa","source_name":"NPA 165","claim":{"category":"finance and insurance"}}],"url":"https://domainspoof.com/live?show=all&q=axihjr.com"},{"hostname":"azlek-nelwork.company","first_observed":"2026-11-05T16:05:51.778Z","first_published":"2026-11-05T16:42:04.725Z","brands":[],"dns":"resolved","resolved":["104.21.5.155","172.67.133.135"],"resolved_at":"2026-11-05T16:07:35Z","dns_checked_at":"2026-11-05T16:55:41.000Z","dns_since":"2026-11-05T16:55:41.000Z","findings":[{"id":"foc6dxbxrb6l62cqu7h7u","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T16:05:51.778Z","first_published":"2026-11-05T16:42:04.725Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/azlek-nelwork.company/"}],"url":"https://domainspoof.com/live?show=all&q=azlek-nelwork.company"},{"hostname":"baykar-devlet-programi.net","first_observed":"2026-11-05T16:31:21.698Z","first_published":"2026-11-05T16:42:04.725Z","brands":[{"id":"baykar","name":"Baykar","url":"https://domainspoof.com/brands/baykar"}],"dns":"resolved","resolved":["104.21.55.14","172.67.143.236","2606:4700:3031::ac43:8fec","2606:4700:3036::6815:370e"],"resolved_at":"2026-11-05T16:36:27Z","dns_checked_at":"2026-11-05T16:55:41.000Z","dns_since":"2026-11-05T16:55:41.000Z","findings":[{"id":"f62bq4svdvcedpxjbqxfh","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T16:31:21.698Z","first_published":"2026-11-05T16:42:04.725Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/brands/baykar"},{"hostname":"beefy-finance.net","first_observed":"2026-11-05T16:26:28.136Z","first_published":"2026-11-05T16:42:04.725Z","brands":[],"dns":"resolved","resolved":["104.21.36.178","172.67.198.64"],"resolved_at":"2026-11-05T16:34:16Z","dns_checked_at":"2026-11-05T16:55:41.000Z","dns_since":"2026-11-05T16:55:41.000Z","findings":[{"id":"fvizzpl3twdefdhiukkou","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T16:26:28.136Z","first_published":"2026-11-05T16:42:04.725Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=beefy-finance.net"},{"hostname":"bhlaawpllc.com","first_observed":"2026-11-05T16:31:21.698Z","first_published":"2026-11-05T16:42:04.725Z","brands":[],"dns":"resolved","resolved":["104.21.15.100","172.67.162.39"],"resolved_at":"2026-11-05T16:36:28Z","dns_checked_at":"2026-11-05T16:55:41.000Z","dns_since":"2026-11-05T16:55:41.000Z","findings":[{"id":"f54sfq5x4yjssft7bzokr","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T16:31:21.698Z","first_published":"2026-11-05T16:42:04.725Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=bhlaawpllc.com"},{"hostname":"bitbry.com","first_observed":"2026-11-05T15:46:31.013Z","first_published":"2026-11-05T16:42:04.725Z","brands":[],"dns":"resolved","resolved":["104.21.88.186","172.67.152.43"],"resolved_at":"2026-11-05T15:55:32Z","dns_checked_at":"2026-11-05T16:55:41.000Z","dns_since":"2026-11-05T16:55:41.000Z","findings":[{"id":"fcofrordihhsgtfm27tuj","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T15:46:31.013Z","first_published":"2026-11-05T16:42:04.725Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=bitbry.com"},{"hostname":"bitgetai-ko.live","first_observed":"2026-11-05T16:10:31.214Z","first_published":"2026-11-05T16:42:04.725Z","brands":[],"dns":"resolved","resolved":["104.21.67.181","172.67.179.82"],"resolved_at":"2026-11-05T16:14:00Z","dns_checked_at":"2026-11-05T16:55:41.000Z","dns_since":"2026-11-05T16:55:41.000Z","findings":[{"id":"fgdlfsepbioq242tvckh6","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T16:10:31.214Z","first_published":"2026-11-05T16:42:04.725Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=bitgetai-ko.live"},{"hostname":"bitvanta-fr.live","first_observed":"2026-11-05T16:16:21.134Z","first_published":"2026-11-05T16:42:04.725Z","brands":[],"dns":"resolved","resolved":["104.21.12.65","172.67.193.183"],"resolved_at":"2026-11-05T16:26:07Z","dns_checked_at":"2026-11-05T16:55:41.000Z","dns_since":"2026-11-05T16:55:41.000Z","findings":[{"id":"ftkfzye2dx3yi2wdllehm","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T16:16:21.134Z","first_published":"2026-11-05T16:42:04.725Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=bitvanta-fr.live"},{"hostname":"blablacar.ozon.98pochtabank.0update.yandex.sber.prod2.hawkinswoodshop.com","first_observed":"2026-11-05T16:01:02.126Z","first_published":"2026-11-05T16:42:04.725Z","brands":[{"id":"blablacar","name":"BlaBlaCar","url":"https://domainspoof.com/brands/blablacar"},{"id":"yandex","name":"Yandex","url":"https://domainspoof.com/brands/yandex"}],"dns":"resolved","resolved":["45.77.75.133","45.77.92.157","207.246.78.75"],"resolved_at":"2026-11-05T16:55:41Z","dns_checked_at":"2026-11-05T16:55:41.000Z","dns_since":"2026-11-05T16:55:41.000Z","findings":[{"id":"fhbf6ojhy5mmarroabtu7","kind":"phishing_infrastructure","summary":"Resolved to 45.77.75.133, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T16:01:02.126Z","first_published":"2026-11-05T16:42:04.725Z","address":"45.77.75.133","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/blablacar"},{"hostname":"blaze-swap.net","first_observed":"2026-11-05T16:16:21.134Z","first_published":"2026-11-05T16:42:04.725Z","brands":[],"dns":"resolved","resolved":["104.21.6.136","172.67.154.225"],"resolved_at":"2026-11-05T16:26:07Z","dns_checked_at":"2026-11-05T16:55:41.000Z","dns_since":"2026-11-05T16:55:41.000Z","findings":[{"id":"ftzxjyia273rbagunaoik","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T16:16:21.134Z","first_published":"2026-11-05T16:42:04.725Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=blaze-swap.net"},{"hostname":"bohemrendost-de.live","first_observed":"2026-11-05T16:05:51.778Z","first_published":"2026-11-05T16:42:04.725Z","brands":[],"dns":"resolved","resolved":["104.21.66.60","172.67.201.132"],"resolved_at":"2026-11-05T16:07:56Z","dns_checked_at":"2026-11-05T16:55:41.000Z","dns_since":"2026-11-05T16:55:41.000Z","findings":[{"id":"ftpp5h7m3eu3kuj3mymzl","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T16:05:51.778Z","first_published":"2026-11-05T16:42:04.725Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=bohemrendost-de.live"},{"hostname":"bonkclaim.com","first_observed":"2026-11-05T16:16:21.134Z","first_published":"2026-11-05T16:42:04.725Z","brands":[],"dns":"resolved","resolved":["104.21.90.26","172.67.151.136"],"resolved_at":"2026-11-05T16:26:07Z","dns_checked_at":"2026-11-05T16:55:41.000Z","dns_since":"2026-11-05T16:55:41.000Z","findings":[{"id":"ffwcdknhp7bex3q3tgzmy","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T16:16:21.134Z","first_published":"2026-11-05T16:42:04.725Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=bonkclaim.com"},{"hostname":"bonusal.icu","first_observed":"2026-11-05T15:56:59.990Z","first_published":"2026-11-05T16:42:04.725Z","brands":[],"dns":"resolved","resolved":["104.21.28.6","172.67.170.31"],"resolved_at":"2026-11-05T16:04:07Z","dns_checked_at":"2026-11-05T16:55:41.000Z","dns_since":"2026-11-05T16:55:41.000Z","findings":[{"id":"fddeuxhzx2tgcnq5r4ym6","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T15:56:59.990Z","first_published":"2026-11-05T16:42:04.725Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/bonusal.icu/"}],"url":"https://domainspoof.com/live?show=all&q=bonusal.icu"},{"hostname":"bright-lender.com","first_observed":"2026-11-05T16:26:28.136Z","first_published":"2026-11-05T16:42:04.725Z","brands":[],"dns":"no_address","resolved":[],"resolved_at":"2026-11-05T16:34:16Z","dns_checked_at":"2026-11-06T09:18:06.000Z","findings":[{"id":"fqivdboxzpzsr56gxmvfi","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T16:26:28.136Z","first_published":"2026-11-05T16:42:04.725Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=bright-lender.com"},{"hostname":"brisanocturna.com","first_observed":"2026-11-05T15:56:59.990Z","first_published":"2026-11-05T16:42:04.725Z","brands":[],"dns":"resolved","resolved":["104.21.87.15","172.67.139.38"],"resolved_at":"2026-11-05T16:04:07Z","dns_checked_at":"2026-11-05T16:55:41.000Z","dns_since":"2026-11-05T16:55:41.000Z","findings":[{"id":"fcrajnt4binjxjqrs73cm","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T15:56:59.990Z","first_published":"2026-11-05T16:42:04.725Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=brisanocturna.com"},{"hostname":"btc-stallix720.live","first_observed":"2026-11-05T16:05:51.778Z","first_published":"2026-11-05T16:42:04.725Z","brands":[],"dns":"resolved","resolved":["104.21.12.227","172.67.196.136"],"resolved_at":"2026-11-05T16:07:56Z","dns_checked_at":"2026-11-05T16:55:41.000Z","dns_since":"2026-11-05T16:55:41.000Z","findings":[{"id":"fpqnsuhmxz4a2t7267ouf","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T16:05:51.778Z","first_published":"2026-11-05T16:42:04.725Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=btc-stallix720.live"},{"hostname":"bursenixai-es.live","first_observed":"2026-11-05T16:16:21.134Z","first_published":"2026-11-05T16:42:04.725Z","brands":[],"dns":"resolved","resolved":["104.21.3.42","172.67.130.56"],"resolved_at":"2026-11-05T16:26:19Z","dns_checked_at":"2026-11-05T16:55:41.000Z","dns_since":"2026-11-05T16:55:41.000Z","findings":[{"id":"fhqiccg4b32zr2prtkgj4","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T16:16:21.134Z","first_published":"2026-11-05T16:42:04.725Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=bursenixai-es.live"},{"hostname":"capkcutapk.com","first_observed":"2026-11-05T15:51:46.017Z","first_published":"2026-11-05T16:42:04.725Z","brands":[],"dns":"resolved","resolved":["104.21.77.237","172.67.213.3"],"resolved_at":"2026-11-05T16:01:13Z","dns_checked_at":"2026-11-05T16:55:41.000Z","dns_since":"2026-11-05T16:55:41.000Z","findings":[{"id":"fhrhvc5wg4puru5dw46kh","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T15:51:46.017Z","first_published":"2026-11-05T16:42:04.725Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/capkcutapk.com/"}],"url":"https://domainspoof.com/live?show=all&q=capkcutapk.com"},{"hostname":"cicekci.xyz","first_observed":"2026-11-05T15:47:02.119Z","first_published":"2026-11-05T16:42:04.725Z","brands":[],"dns":"resolved","resolved":["104.21.44.151","172.67.200.230","2606:4700:3032::ac43:c8e6","2606:4700:3033::6815:2c97"],"resolved_at":"2026-11-05T15:47:43Z","dns_checked_at":"2026-11-05T16:55:41.000Z","dns_since":"2026-11-05T16:55:41.000Z","findings":[{"id":"f6xz3qi3js5cqg5k4zqdl","kind":"reported_domain","summary":"Listed by USOM","first_observed":"2026-11-05T15:47:02.119Z","first_published":"2026-11-05T16:42:04.725Z","source":"usom","source_name":"USOM"}],"url":"https://domainspoof.com/live?show=all&q=cicekci.xyz"},{"hostname":"cimarendizio-it.live","first_observed":"2026-11-05T15:36:14.003Z","first_published":"2026-11-05T16:42:04.725Z","brands":[],"dns":"resolved","resolved":["104.21.40.218","172.67.157.35"],"resolved_at":"2026-11-05T15:47:38Z","dns_checked_at":"2026-11-05T16:55:41.000Z","dns_since":"2026-11-05T16:55:41.000Z","findings":[{"id":"fizouwgovnmrg2j5ydbdk","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T15:36:14.003Z","first_published":"2026-11-05T16:42:04.725Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=cimarendizio-it.live"},{"hostname":"coinsmdcrypto.cc","first_observed":"2026-11-05T16:10:31.214Z","first_published":"2026-11-05T16:42:04.725Z","brands":[],"dns":"no_address","resolved":[],"resolved_at":"2026-11-05T16:14:39Z","dns_checked_at":"2026-11-06T09:18:06.000Z","findings":[{"id":"fcby2xheomcvrqry3yvms","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T16:10:31.214Z","first_published":"2026-11-05T16:42:04.725Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=coinsmdcrypto.cc"},{"hostname":"colegioconexao.com.br","first_observed":"2026-11-05T15:36:14.003Z","first_published":"2026-11-05T16:42:04.725Z","brands":[{"id":"paypal","name":"PayPal","url":"https://domainspoof.com/brands/paypal"}],"dns":"resolved","resolved":["128.201.75.97"],"resolved_at":"2026-11-05T15:47:38Z","dns_checked_at":"2026-11-05T16:55:41.000Z","dns_since":"2026-11-05T16:55:41.000Z","findings":[{"id":"fr65dq7a4zsyzoc6meexs","kind":"reported_domain","summary":"Reported by PhishTank as imitating PayPal","first_observed":"2026-11-05T15:36:14.003Z","first_published":"2026-11-05T16:42:04.725Z","source":"phishtank","source_name":"PhishTank","claim":{"brand":"PayPal"},"source_url":"https://phishtank.org/phish_detail.php?phish_id=9459322"}],"url":"https://domainspoof.com/brands/paypal"},{"hostname":"colomberendif-nl.live","first_observed":"2026-11-05T15:36:14.003Z","first_published":"2026-11-05T16:42:04.725Z","brands":[],"dns":"resolved","resolved":["104.21.91.153","172.67.223.116"],"resolved_at":"2026-11-05T15:47:38Z","dns_checked_at":"2026-11-05T16:55:41.000Z","dns_since":"2026-11-05T16:55:41.000Z","findings":[{"id":"fss2zpl7k5w2nuaprfups","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T15:36:14.003Z","first_published":"2026-11-05T16:42:04.725Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=colomberendif-nl.live"},{"hostname":"container.polar-tensor.com","first_observed":"2026-11-05T15:31:21.422Z","first_published":"2026-11-05T16:42:04.725Z","brands":[],"dns":"resolved","resolved":["5.189.134.86","57.128.187.75","57.129.49.179","193.242.211.59"],"resolved_at":"2026-11-05T15:41:21Z","dns_checked_at":"2026-11-05T16:55:41.000Z","dns_since":"2026-11-05T16:55:41.000Z","findings":[{"id":"f27nnfgfcrcpx2akuwh5v","kind":"reported_domain","summary":"Under polar-tensor.com, listed by MetaMask","first_observed":"2026-11-05T15:31:21.422Z","first_published":"2026-11-05T16:42:04.725Z","source":"metamask","source_name":"MetaMask","under":"polar-tensor.com"}],"url":"https://domainspoof.com/live?show=all&q=container.polar-tensor.com"},{"hostname":"cricfyy.com","first_observed":"2026-11-05T15:46:31.013Z","first_published":"2026-11-05T16:42:04.725Z","brands":[],"dns":"resolved","resolved":["104.21.21.201","172.67.200.23"],"resolved_at":"2026-11-05T15:46:45Z","dns_checked_at":"2026-11-05T16:55:41.000Z","dns_since":"2026-11-05T16:55:41.000Z","findings":[{"id":"ftntn3ypjwqlt3zrzxwhz","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T15:46:31.013Z","first_published":"2026-11-05T16:42:04.725Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=cricfyy.com"},{"hostname":"crsed.net","first_observed":"2026-11-05T16:36:38.552Z","first_published":"2026-11-05T16:42:04.725Z","brands":[],"dns":"resolved","resolved":["104.20.23.146","172.66.151.83"],"resolved_at":"2026-11-05T16:39:54Z","dns_checked_at":"2026-11-05T16:55:41.000Z","dns_since":"2026-11-05T16:55:41.000Z","findings":[{"id":"fdw2ztlips3advw6vp3fk","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T16:36:38.552Z","first_published":"2026-11-05T16:42:04.725Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/crsed.net/"}],"url":"https://domainspoof.com/live?show=all&q=crsed.net"},{"hostname":"dashboard-galxe.com","first_observed":"2026-11-05T15:56:59.990Z","first_published":"2026-11-05T16:42:04.725Z","brands":[],"dns":"resolved","resolved":["104.21.25.116","172.67.134.50"],"resolved_at":"2026-11-05T16:04:16Z","dns_checked_at":"2026-11-05T16:55:41.000Z","dns_since":"2026-11-05T16:55:41.000Z","findings":[{"id":"fyagd6y7bccvn26f5gpnu","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T15:56:59.990Z","first_published":"2026-11-05T16:42:04.725Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/dashboard-galxe.com/"}],"url":"https://domainspoof.com/live?show=all&q=dashboard-galxe.com"},{"hostname":"dashboard.fresh-focus.pro","first_observed":"2026-11-05T16:36:38.552Z","first_published":"2026-11-05T16:42:04.725Z","brands":[],"dns":"resolved","resolved":["190.115.18.13"],"resolved_at":"2026-11-05T16:39:55Z","dns_checked_at":"2026-11-05T16:55:41.000Z","dns_since":"2026-11-05T16:55:41.000Z","findings":[{"id":"fnghdeifod6qrzbcnsnuo","kind":"reported_domain","summary":"Under fresh-focus.pro, reported by PhishDestroy","first_observed":"2026-11-05T16:36:38.552Z","first_published":"2026-11-05T16:42:04.725Z","source":"phishdestroy","source_name":"PhishDestroy","under":"fresh-focus.pro","source_url":"https://phishdestroy.io/domain/fresh-focus.pro/"}],"url":"https://domainspoof.com/live?show=all&q=dashboard.fresh-focus.pro"},{"hostname":"dazzling-venues.com","first_observed":"2026-11-05T16:31:21.698Z","first_published":"2026-11-05T16:42:04.725Z","brands":[],"dns":"resolved","resolved":["104.21.28.137","172.67.170.215"],"resolved_at":"2026-11-05T16:36:50Z","dns_checked_at":"2026-11-05T16:55:41.000Z","dns_since":"2026-11-05T16:55:41.000Z","findings":[{"id":"fdx4wn63dhbstx5rujujw","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T16:31:21.698Z","first_published":"2026-11-05T16:42:04.725Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=dazzling-venues.com"},{"hostname":"de-performance.de","first_observed":"2026-11-05T15:41:12.412Z","first_published":"2026-11-05T16:42:04.725Z","brands":[],"dns":"resolved","resolved":["104.21.17.162","172.67.177.169"],"resolved_at":"2026-11-05T15:41:58Z","dns_checked_at":"2026-11-05T16:55:41.000Z","dns_since":"2026-11-05T16:55:41.000Z","findings":[{"id":"f7lekajg224lajsjg5srg","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T15:41:12.412Z","first_published":"2026-11-05T16:42:04.725Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/de-performance.de/"}],"url":"https://domainspoof.com/live?show=all&q=de-performance.de"},{"hostname":"dec-cntralised-exods.pages.dev","first_observed":"2026-11-05T15:51:46.017Z","first_published":"2026-11-05T16:42:04.725Z","brands":[],"dns":"resolved","resolved":["172.66.44.193","172.66.47.63"],"resolved_at":"2026-11-05T16:01:24Z","dns_checked_at":"2026-11-05T16:55:41.000Z","dns_since":"2026-11-05T16:55:41.000Z","findings":[{"id":"f7d2c2mumus2xwcjdvtb6","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T15:51:46.017Z","first_published":"2026-11-05T16:42:04.725Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=dec-cntralised-exods.pages.dev"},{"hostname":"dev-api.patiobydesign.com","first_observed":"2026-11-05T16:26:28.136Z","first_published":"2026-11-05T16:42:04.725Z","brands":[],"dns":"resolved","resolved":["185.149.120.183"],"resolved_at":"2026-11-05T16:27:02Z","dns_checked_at":"2026-11-05T16:55:41.000Z","dns_since":"2026-11-05T16:55:41.000Z","findings":[{"id":"fx57bhjyqkvdhwhne62ob","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T16:26:28.136Z","first_published":"2026-11-05T16:42:04.725Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/dev-api.patiobydesign.com/"}],"url":"https://domainspoof.com/live?show=all&q=dev-api.patiobydesign.com"},{"hostname":"dogecoin-cn.com","first_observed":"2026-11-05T16:36:38.552Z","first_published":"2026-11-05T16:42:04.725Z","brands":[],"dns":"resolved","resolved":["54.215.31.113"],"resolved_at":"2026-11-05T16:39:54Z","dns_checked_at":"2026-11-05T16:55:41.000Z","dns_since":"2026-11-05T16:55:41.000Z","findings":[{"id":"fddrf53xk4j6t5egayii5","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T16:36:38.552Z","first_published":"2026-11-05T16:42:04.725Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/dogecoin-cn.com/"}],"url":"https://domainspoof.com/live?show=all&q=dogecoin-cn.com"},{"hostname":"dreamscape-journey.com","first_observed":"2026-11-05T16:26:28.136Z","first_published":"2026-11-05T16:42:04.725Z","brands":[],"dns":"resolved","resolved":["104.21.17.90","172.67.175.103"],"resolved_at":"2026-11-05T16:27:02Z","dns_checked_at":"2026-11-05T16:55:41.000Z","dns_since":"2026-11-05T16:55:41.000Z","findings":[{"id":"f6eiijhqmqsbl3jczcqpe","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T16:26:28.136Z","first_published":"2026-11-05T16:42:04.725Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=dreamscape-journey.com"},{"hostname":"drone.crypto-polis.org","first_observed":"2026-11-05T16:36:38.552Z","first_published":"2026-11-05T16:42:04.725Z","brands":[],"dns":"resolved","resolved":["185.178.208.132","185.178.208.182"],"resolved_at":"2026-11-05T16:39:54Z","dns_checked_at":"2026-11-05T16:55:41.000Z","dns_since":"2026-11-05T16:55:41.000Z","findings":[{"id":"faoit33ptyzfc2n3wwv6k","kind":"reported_domain","summary":"Under crypto-polis.org, reported by PhishDestroy","first_observed":"2026-11-05T16:36:38.552Z","first_published":"2026-11-05T16:42:04.725Z","source":"phishdestroy","source_name":"PhishDestroy","under":"crypto-polis.org","source_url":"https://phishdestroy.io/domain/crypto-polis.org/"}],"url":"https://domainspoof.com/live?show=all&q=drone.crypto-polis.org"},{"hostname":"duendoan.shop","first_observed":"2026-11-05T16:10:31.214Z","first_published":"2026-11-05T16:42:04.725Z","brands":[],"dns":"resolved","resolved":["104.21.65.160","172.67.147.37"],"resolved_at":"2026-11-05T16:15:17Z","dns_checked_at":"2026-11-05T16:55:41.000Z","dns_since":"2026-11-05T16:55:41.000Z","findings":[{"id":"f5iy3d7lctqdusq2aet4c","kind":"reported_domain","summary":"Listed by NPA 165 (e-commerce)","first_observed":"2026-11-05T16:10:31.214Z","first_published":"2026-11-05T16:42:04.725Z","source":"npa","source_name":"NPA 165","claim":{"category":"e-commerce"}}],"url":"https://domainspoof.com/live?show=all&q=duendoan.shop"},{"hostname":"eboracumtribune.pro","first_observed":"2026-11-05T16:36:38.552Z","first_published":"2026-11-05T16:42:04.725Z","brands":[],"dns":"resolved","resolved":["185.7.78.12"],"resolved_at":"2026-11-05T16:39:55Z","dns_checked_at":"2026-11-05T16:55:41.000Z","dns_since":"2026-11-05T16:55:41.000Z","findings":[{"id":"fmpypcmt7swla6d6vjcyd","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T16:36:38.552Z","first_published":"2026-11-05T16:42:04.725Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=eboracumtribune.pro"},{"hostname":"efawosid.polar-tensor.com","first_observed":"2026-11-05T15:41:12.412Z","first_published":"2026-11-05T16:42:04.725Z","brands":[],"dns":"resolved","resolved":["5.189.134.86","57.128.187.75","57.129.49.179","193.242.211.59"],"resolved_at":"2026-11-06T04:11:59Z","dns_checked_at":"2026-11-05T16:55:41.000Z","dns_since":"2026-11-05T16:55:41.000Z","findings":[{"id":"fkigjj6jrl6bywp7b7b6p","kind":"reported_domain","summary":"Under polar-tensor.com, listed by MetaMask","first_observed":"2026-11-05T15:41:12.412Z","first_published":"2026-11-05T16:42:04.725Z","source":"metamask","source_name":"MetaMask","under":"polar-tensor.com"}],"url":"https://domainspoof.com/live?show=all&q=efawosid.polar-tensor.com"},{"hostname":"eligibility.today","first_observed":"2026-11-05T15:51:46.017Z","first_published":"2026-11-05T16:42:04.725Z","brands":[],"dns":"resolved","resolved":["104.21.33.35","172.67.158.129"],"resolved_at":"2026-11-05T16:01:25Z","dns_checked_at":"2026-11-05T16:55:41.000Z","dns_since":"2026-11-05T16:55:41.000Z","findings":[{"id":"fw2q5nx73gnfrq5ejapsw","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T15:51:46.017Z","first_published":"2026-11-05T16:42:04.725Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=eligibility.today"},{"hostname":"emerald-tours.com","first_observed":"2026-11-05T16:21:08.591Z","first_published":"2026-11-05T16:42:04.725Z","brands":[],"dns":"resolved","resolved":["104.21.64.105","172.67.181.26"],"resolved_at":"2026-11-05T16:31:26Z","dns_checked_at":"2026-11-05T16:55:41.000Z","dns_since":"2026-11-05T16:55:41.000Z","findings":[{"id":"ffcvyknqsoob2bgbgn5hh","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T16:21:08.591Z","first_published":"2026-11-05T16:42:04.725Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=emerald-tours.com"},{"hostname":"en-usa-desktop-ledgre.pages.dev","first_observed":"2026-11-05T15:36:14.003Z","first_published":"2026-11-05T16:42:04.725Z","brands":[],"dns":"resolved","resolved":["172.66.44.137","172.66.47.119"],"resolved_at":"2026-11-05T15:47:59Z","dns_checked_at":"2026-11-05T16:55:41.000Z","dns_since":"2026-11-05T16:55:41.000Z","findings":[{"id":"f5os4afdhqchwtqjxzq2d","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T15:36:14.003Z","first_published":"2026-11-05T16:42:04.725Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=en-usa-desktop-ledgre.pages.dev"},{"hostname":"eokunbbfa.shop","first_observed":"2026-11-05T16:21:08.591Z","first_published":"2026-11-05T16:42:04.725Z","brands":[],"dns":"resolved","resolved":["43.154.192.95"],"resolved_at":"2026-11-06T07:33:29Z","dns_checked_at":"2026-11-05T16:55:41.000Z","dns_since":"2026-11-05T16:55:41.000Z","findings":[{"id":"fyevzgs64lbm5jg7is4mh","kind":"reported_domain","summary":"Listed by NPA 165 (e-commerce)","first_observed":"2026-11-05T16:21:08.591Z","first_published":"2026-11-05T16:42:04.725Z","source":"npa","source_name":"NPA 165","claim":{"category":"e-commerce"}}],"url":"https://domainspoof.com/live?show=all&q=eokunbbfa.shop"},{"hostname":"evolucionfinanciera-es.live","first_observed":"2026-11-05T16:00:39.305Z","first_published":"2026-11-05T16:42:04.725Z","brands":[],"dns":"resolved","resolved":["104.21.53.148","172.67.213.141"],"resolved_at":"2026-11-05T16:01:08Z","dns_checked_at":"2026-11-05T16:55:41.000Z","dns_since":"2026-11-05T16:55:41.000Z","findings":[{"id":"fii2withe4sjllwomgink","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T16:00:39.305Z","first_published":"2026-11-05T16:42:04.725Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=evolucionfinanciera-es.live"},{"hostname":"explore.polar-tensor.com","first_observed":"2026-11-05T15:31:21.422Z","first_published":"2026-11-05T16:42:04.725Z","brands":[],"dns":"resolved","resolved":["5.189.134.86","57.128.187.75","57.129.49.179","193.242.211.59"],"resolved_at":"2026-11-05T15:42:03Z","dns_checked_at":"2026-11-05T16:55:41.000Z","dns_since":"2026-11-05T16:55:41.000Z","findings":[{"id":"fgayahjpskxodyxmb4rvb","kind":"reported_domain","summary":"Under polar-tensor.com, listed by MetaMask","first_observed":"2026-11-05T15:31:21.422Z","first_published":"2026-11-05T16:42:04.725Z","source":"metamask","source_name":"MetaMask","under":"polar-tensor.com"}],"url":"https://domainspoof.com/live?show=all&q=explore.polar-tensor.com"},{"hostname":"ezebrashop-sale.shop","first_observed":"2026-11-05T15:46:31.013Z","first_published":"2026-11-05T16:42:04.725Z","brands":[],"dns":"resolved","resolved":["104.21.96.89","172.67.176.67"],"resolved_at":"2026-11-06T03:21:31Z","dns_checked_at":"2026-11-05T16:55:41.000Z","dns_since":"2026-11-05T16:55:41.000Z","findings":[{"id":"fr2y3m2gqaznbq43zbkqk","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T15:46:31.013Z","first_published":"2026-11-05T16:42:04.725Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=ezebrashop-sale.shop"},{"hostname":"fadfny.shop","first_observed":"2026-11-05T15:36:14.003Z","first_published":"2026-11-05T16:42:04.725Z","brands":[],"dns":"resolved","resolved":["104.21.62.25","172.67.219.22"],"resolved_at":"2026-11-05T15:48:03Z","dns_checked_at":"2026-11-05T16:55:41.000Z","dns_since":"2026-11-05T16:55:41.000Z","findings":[{"id":"f4uz22gkgmcasdwl3zaqv","kind":"reported_domain","summary":"Listed by NPA 165 (e-commerce)","first_observed":"2026-11-05T15:36:14.003Z","first_published":"2026-11-05T16:42:04.725Z","source":"npa","source_name":"NPA 165","claim":{"category":"e-commerce"}}],"url":"https://domainspoof.com/live?show=all&q=fadfny.shop"},{"hostname":"farevex.com","first_observed":"2026-11-05T16:26:28.136Z","first_published":"2026-11-05T16:42:04.725Z","brands":[],"dns":"resolved","resolved":["104.21.94.88","172.67.221.148"],"resolved_at":"2026-11-05T16:27:02Z","dns_checked_at":"2026-11-05T16:55:41.000Z","dns_since":"2026-11-05T16:55:41.000Z","findings":[{"id":"fy3ofv4lhq34agoaxwve5","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T16:26:28.136Z","first_published":"2026-11-05T16:42:04.725Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/farevex.com/"}],"url":"https://domainspoof.com/live?show=all&q=farevex.com"},{"hostname":"fiducenza-it.live","first_observed":"2026-11-05T16:31:21.698Z","first_published":"2026-11-05T16:42:04.725Z","brands":[],"dns":"resolved","resolved":["104.21.12.84","172.67.151.238"],"resolved_at":"2026-11-05T16:36:52Z","dns_checked_at":"2026-11-05T16:55:41.000Z","dns_since":"2026-11-05T16:55:41.000Z","findings":[{"id":"fhfzciumvuwf26g7yec4o","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T16:31:21.698Z","first_published":"2026-11-05T16:42:04.725Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=fiducenza-it.live"},{"hostname":"flowise.aml.legal","first_observed":"2026-11-05T16:26:28.136Z","first_published":"2026-11-05T16:42:04.725Z","brands":[],"dns":"resolved","resolved":["186.2.175.179"],"resolved_at":"2026-11-05T16:27:02Z","dns_checked_at":"2026-11-05T16:55:41.000Z","dns_since":"2026-11-05T16:55:41.000Z","findings":[{"id":"f27dqvbtj2ym5byullhus","kind":"reported_domain","summary":"Under aml.legal, reported by PhishDestroy","first_observed":"2026-11-05T16:26:28.136Z","first_published":"2026-11-05T16:42:04.725Z","source":"phishdestroy","source_name":"PhishDestroy","under":"aml.legal","source_url":"https://phishdestroy.io/domain/aml.legal/"}],"url":"https://domainspoof.com/live?show=all&q=flowise.aml.legal"},{"hostname":"flying-tulip.net","first_observed":"2026-11-05T16:10:31.214Z","first_published":"2026-11-05T16:42:04.725Z","brands":[],"dns":"resolved","resolved":["104.21.2.74","172.67.128.226"],"resolved_at":"2026-11-06T11:37:11Z","dns_checked_at":"2026-11-05T16:55:41.000Z","dns_since":"2026-11-05T16:55:41.000Z","findings":[{"id":"feuvfuhkp7z7yb454ifg7","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T16:10:31.214Z","first_published":"2026-11-05T16:42:04.725Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=flying-tulip.net"},{"hostname":"fortrendoire-fr.live","first_observed":"2026-11-05T16:21:08.591Z","first_published":"2026-11-05T16:42:04.725Z","brands":[],"dns":"resolved","resolved":["104.21.72.143","172.67.151.95"],"resolved_at":"2026-11-05T16:31:28Z","dns_checked_at":"2026-11-05T16:55:41.000Z","dns_since":"2026-11-05T16:55:41.000Z","findings":[{"id":"f7ou2q4blf6svfhjydy7a","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T16:21:08.591Z","first_published":"2026-11-05T16:42:04.725Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=fortrendoire-fr.live"},{"hostname":"foto3969.link","first_observed":"2026-11-05T15:41:12.412Z","first_published":"2026-11-05T16:42:04.725Z","brands":[],"dns":"resolved","resolved":["64.239.109.1","64.239.123.193"],"resolved_at":"2026-11-05T15:41:59Z","dns_checked_at":"2026-11-05T16:55:41.000Z","dns_since":"2026-11-05T16:55:41.000Z","findings":[{"id":"fjecwhf3fhv3wj34gtfil","kind":"reported_domain","summary":"Listed by USOM","first_observed":"2026-11-05T15:41:12.412Z","first_published":"2026-11-05T16:42:04.725Z","source":"usom","source_name":"USOM"}],"url":"https://domainspoof.com/live?show=all&q=foto3969.link"},{"hostname":"foudreplacoria-nl.live","first_observed":"2026-11-05T16:05:51.778Z","first_published":"2026-11-05T16:42:04.725Z","brands":[],"dns":"resolved","resolved":["104.21.32.39","172.67.182.196"],"resolved_at":"2026-11-05T16:06:05Z","dns_checked_at":"2026-11-05T16:55:41.000Z","dns_since":"2026-11-05T16:55:41.000Z","findings":[{"id":"fljkno5uaij3i2wmxqmf3","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T16:05:51.778Z","first_published":"2026-11-05T16:42:04.725Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=foudreplacoria-nl.live"},{"hostname":"fra-0e2081.wb-cdn-global.com","first_observed":"2026-11-05T16:10:31.214Z","first_published":"2026-11-05T16:42:04.725Z","brands":[],"dns":"resolved","resolved":["38.97.56.124"],"resolved_at":"2026-11-05T16:15:23Z","dns_checked_at":"2026-11-05T16:55:41.000Z","dns_since":"2026-11-05T16:55:41.000Z","findings":[{"id":"fkl3q2g3rlmibk477m44i","kind":"reported_domain","summary":"Under wb-cdn-global.com, listed by MetaMask","first_observed":"2026-11-05T16:10:31.214Z","first_published":"2026-11-05T16:42:04.725Z","source":"metamask","source_name":"MetaMask","under":"wb-cdn-global.com"}],"url":"https://domainspoof.com/live?show=all&q=fra-0e2081.wb-cdn-global.com"},{"hostname":"futurecvwer.com","first_observed":"2026-11-05T16:16:21.134Z","first_published":"2026-11-05T16:42:04.725Z","brands":[],"dns":"resolved","resolved":["104.21.16.182","172.67.215.64"],"resolved_at":"2026-11-05T16:26:46Z","dns_checked_at":"2026-11-05T16:55:41.000Z","dns_since":"2026-11-05T16:55:41.000Z","findings":[{"id":"fbi4cgksfdhirmogbmvcu","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T16:16:21.134Z","first_published":"2026-11-05T16:42:04.725Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=futurecvwer.com"},{"hostname":"fuzzy-funds.com","first_observed":"2026-11-05T16:31:21.698Z","first_published":"2026-11-05T16:42:04.725Z","brands":[],"dns":"resolved","resolved":["104.21.40.90","172.67.183.70"],"resolved_at":"2026-11-05T16:36:52Z","dns_checked_at":"2026-11-05T16:55:41.000Z","dns_since":"2026-11-05T16:55:41.000Z","findings":[{"id":"f774dznbblizfsvfece5c","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T16:31:21.698Z","first_published":"2026-11-05T16:42:04.725Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=fuzzy-funds.com"},{"hostname":"gailshopping.store","first_observed":"2026-11-05T16:10:31.214Z","first_published":"2026-11-05T16:42:04.725Z","brands":[],"dns":"no_address","resolved":[],"resolved_at":"2026-11-05T16:15:24Z","dns_checked_at":"2026-11-06T09:18:06.000Z","findings":[{"id":"fxpclceb6zjr4vop7l6kf","kind":"reported_domain","summary":"Listed by NPA 165 (e-commerce)","first_observed":"2026-11-05T16:10:31.214Z","first_published":"2026-11-05T16:42:04.725Z","source":"npa","source_name":"NPA 165","claim":{"category":"e-commerce"}}],"url":"https://domainspoof.com/live?show=all&q=gailshopping.store"},{"hostname":"gedikmenkul.com","first_observed":"2026-11-05T15:41:12.412Z","first_published":"2026-11-05T16:42:04.725Z","brands":[],"dns":"resolved","resolved":["216.150.1.65","216.150.1.193"],"resolved_at":"2026-11-05T15:41:59Z","dns_checked_at":"2026-11-05T16:55:41.000Z","dns_since":"2026-11-05T16:55:41.000Z","findings":[{"id":"f5j273lxm4s7b4thgqchl","kind":"reported_domain","summary":"Listed by USOM","first_observed":"2026-11-05T15:41:12.412Z","first_published":"2026-11-05T16:42:04.725Z","source":"usom","source_name":"USOM"}],"url":"https://domainspoof.com/live?show=all&q=gedikmenkul.com"},{"hostname":"get-trzrsuite-io.pages.dev","first_observed":"2026-11-05T15:31:21.422Z","first_published":"2026-11-05T16:42:04.725Z","brands":[],"dns":"resolved","resolved":["172.66.44.159","172.66.47.97"],"resolved_at":"2026-11-05T15:42:08Z","dns_checked_at":"2026-11-05T16:55:41.000Z","dns_since":"2026-11-05T16:55:41.000Z","findings":[{"id":"fzgxy2eem7mk4zlurkrvi","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T15:31:21.422Z","first_published":"2026-11-05T16:42:04.725Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=get-trzrsuite-io.pages.dev"},{"hostname":"gk.brainprogramming.ru","first_observed":"2026-11-05T16:05:51.778Z","first_published":"2026-11-05T16:42:04.725Z","brands":[],"dns":"resolved","resolved":["178.248.237.90"],"resolved_at":"2026-11-05T16:06:05Z","dns_checked_at":"2026-11-05T16:55:41.000Z","dns_since":"2026-11-05T16:55:41.000Z","findings":[{"id":"f6bikyimn4s62nwcmninu","kind":"reported_domain","summary":"Under brainprogramming.ru, reported by PhishDestroy","first_observed":"2026-11-05T16:05:51.778Z","first_published":"2026-11-05T16:42:04.725Z","source":"phishdestroy","source_name":"PhishDestroy","under":"brainprogramming.ru","source_url":"https://phishdestroy.io/domain/brainprogramming.ru/"}],"url":"https://domainspoof.com/live?show=all&q=gk.brainprogramming.ru"},{"hostname":"goodgarden.se","first_observed":"2026-11-05T16:26:28.136Z","first_published":"2026-11-05T16:42:04.725Z","brands":[],"dns":"resolved","resolved":["199.36.158.100"],"resolved_at":"2026-11-05T16:27:03Z","dns_checked_at":"2026-11-05T16:55:41.000Z","dns_since":"2026-11-05T16:55:41.000Z","findings":[{"id":"f5ewrbimbkdpdyrm2lovr","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T16:26:28.136Z","first_published":"2026-11-05T16:42:04.725Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/goodgarden.se/"}],"url":"https://domainspoof.com/live?show=all&q=goodgarden.se"},{"hostname":"googlepay.cn","first_observed":"2026-11-05T15:48:06.493Z","first_published":"2026-11-05T16:42:04.725Z","brands":[{"id":"google","name":"Google","url":"https://domainspoof.com/brands/google"}],"dns":"resolved","resolved":["208.98.43.93","208.98.43.38"],"resolved_at":"2026-11-05T16:55:41Z","dns_checked_at":"2026-11-05T16:55:41.000Z","dns_since":"2026-11-05T16:55:41.000Z","findings":[{"id":"fdxdoi7ohuwcwiagpu4jl","kind":"phishing_infrastructure","summary":"Resolved to 208.98.43.93, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T15:48:06.493Z","first_published":"2026-11-05T16:42:04.725Z","address":"208.98.43.93","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/google"},{"hostname":"grafana.polar-tensor.com","first_observed":"2026-11-05T15:41:12.412Z","first_published":"2026-11-05T16:42:04.725Z","brands":[],"dns":"resolved","resolved":["5.189.134.86","57.128.187.75","57.129.49.179","193.242.211.59"],"resolved_at":"2026-11-06T03:41:21Z","dns_checked_at":"2026-11-05T16:55:41.000Z","dns_since":"2026-11-05T16:55:41.000Z","findings":[{"id":"fy7z6fxhoy6trggawxn2b","kind":"reported_domain","summary":"Under polar-tensor.com, listed by MetaMask","first_observed":"2026-11-05T15:41:12.412Z","first_published":"2026-11-05T16:42:04.725Z","source":"metamask","source_name":"MetaMask","under":"polar-tensor.com"}],"url":"https://domainspoof.com/live?show=all&q=grafana.polar-tensor.com"},{"hostname":"gweryxalvon-de.live","first_observed":"2026-11-05T16:26:28.136Z","first_published":"2026-11-05T16:42:04.725Z","brands":[],"dns":"resolved","resolved":["104.21.50.160","172.67.164.36"],"resolved_at":"2026-11-05T16:27:03Z","dns_checked_at":"2026-11-05T16:55:41.000Z","dns_since":"2026-11-05T16:55:41.000Z","findings":[{"id":"fwke6wfqy7xu6gkmgxtk6","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T16:26:28.136Z","first_published":"2026-11-05T16:42:04.725Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=gweryxalvon-de.live"},{"hostname":"hilikoa.com","first_observed":"2026-11-05T16:00:39.305Z","first_published":"2026-11-05T16:42:04.725Z","brands":[],"dns":"resolved","resolved":["104.21.18.31","172.67.179.233"],"resolved_at":"2026-11-05T16:01:08Z","dns_checked_at":"2026-11-05T16:55:41.000Z","dns_since":"2026-11-05T16:55:41.000Z","findings":[{"id":"f2c6bzqrc2dknujri42mz","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T16:00:39.305Z","first_published":"2026-11-05T16:42:04.725Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=hilikoa.com"},{"hostname":"icrypex-ai.digital","first_observed":"2026-11-05T16:00:39.305Z","first_published":"2026-11-05T16:42:04.725Z","brands":[],"dns":"resolved","resolved":["104.21.91.28","172.67.165.90"],"resolved_at":"2026-11-05T16:01:09Z","dns_checked_at":"2026-11-05T16:55:41.000Z","dns_since":"2026-11-05T16:55:41.000Z","findings":[{"id":"fadf3ro7wtrzz7suyfhtx","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T16:00:39.305Z","first_published":"2026-11-05T16:42:04.725Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=icrypex-ai.digital"},{"hostname":"immediatebienestar-es.live","first_observed":"2026-11-05T16:05:51.778Z","first_published":"2026-11-05T16:42:04.725Z","brands":[],"dns":"resolved","resolved":["104.21.67.116","172.67.221.214"],"resolved_at":"2026-11-05T16:06:05Z","dns_checked_at":"2026-11-05T16:55:41.000Z","dns_since":"2026-11-05T16:55:41.000Z","findings":[{"id":"fvvcdzwr2gzkafzp3ggof","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T16:05:51.778Z","first_published":"2026-11-05T16:42:04.725Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=immediatebienestar-es.live"},{"hostname":"immediateforcemob-fr.live","first_observed":"2026-11-05T15:56:59.990Z","first_published":"2026-11-05T16:42:04.725Z","brands":[],"dns":"resolved","resolved":["104.21.85.64","172.67.203.14"],"resolved_at":"2026-11-05T16:04:17Z","dns_checked_at":"2026-11-05T16:55:41.000Z","dns_since":"2026-11-05T16:55:41.000Z","findings":[{"id":"ffwwf4bulkctlzp3fcusp","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T15:56:59.990Z","first_published":"2026-11-05T16:42:04.725Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=immediateforcemob-fr.live"},{"hostname":"inbankpay.eu","first_observed":"2026-11-05T16:15:41.917Z","first_published":"2026-11-05T16:42:04.725Z","brands":[{"id":"inbank","name":"Inbank","url":"https://domainspoof.com/brands/inbank"}],"dns":"resolved","resolved":["185.31.240.240"],"resolved_at":"2026-11-05T16:55:41Z","dns_checked_at":"2026-11-05T16:55:41.000Z","dns_since":"2026-11-05T16:55:41.000Z","findings":[{"id":"fi5gwosxytging47bzrr3","kind":"phishing_infrastructure","summary":"Resolved to 185.31.240.240, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T16:15:41.917Z","first_published":"2026-11-05T16:42:04.725Z","address":"185.31.240.240","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/inbank"},{"hostname":"invexplatense-es.live","first_observed":"2026-11-05T16:00:39.305Z","first_published":"2026-11-05T16:42:04.725Z","brands":[],"dns":"resolved","resolved":["104.21.13.19","172.67.167.232"],"resolved_at":"2026-11-05T16:01:09Z","dns_checked_at":"2026-11-05T16:55:41.000Z","dns_since":"2026-11-05T16:55:41.000Z","findings":[{"id":"fmwf4otiw7isb3l7ep3zx","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T16:00:39.305Z","first_published":"2026-11-05T16:42:04.725Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=invexplatense-es.live"},{"hostname":"ititw.online","first_observed":"2026-11-05T16:16:21.134Z","first_published":"2026-11-05T16:42:04.725Z","brands":[],"dns":"resolved","resolved":["8.210.232.153"],"resolved_at":"2026-11-05T16:27:06Z","dns_checked_at":"2026-11-05T16:55:41.000Z","dns_since":"2026-11-05T16:55:41.000Z","findings":[{"id":"fqs6swslwrg7ebnw7oimf","kind":"reported_domain","summary":"Listed by NPA 165 (finance and insurance)","first_observed":"2026-11-05T16:16:21.134Z","first_published":"2026-11-05T16:42:04.725Z","source":"npa","source_name":"NPA 165","claim":{"category":"finance and insurance"}}],"url":"https://domainspoof.com/live?show=all&q=ititw.online"},{"hostname":"jibvcrqs.polar-tensor.com","first_observed":"2026-11-05T16:31:21.698Z","first_published":"2026-11-05T16:42:04.725Z","brands":[],"dns":"resolved","resolved":["5.189.134.86","57.128.187.75","57.129.49.179","193.242.211.59"],"resolved_at":"2026-11-06T03:51:55Z","dns_checked_at":"2026-11-05T16:55:41.000Z","dns_since":"2026-11-05T16:55:41.000Z","findings":[{"id":"f7qvjs3hi7i6jbjo5rfzv","kind":"reported_domain","summary":"Under polar-tensor.com, listed by MetaMask","first_observed":"2026-11-05T16:31:21.698Z","first_published":"2026-11-05T16:42:04.725Z","source":"metamask","source_name":"MetaMask","under":"polar-tensor.com"}],"url":"https://domainspoof.com/live?show=all&q=jibvcrqs.polar-tensor.com"},{"hostname":"js4519.com","first_observed":"2026-11-05T15:56:59.990Z","first_published":"2026-11-05T16:42:04.725Z","brands":[],"dns":"resolved","resolved":["168.76.227.176"],"resolved_at":"2026-11-05T16:04:17Z","dns_checked_at":"2026-11-05T16:55:41.000Z","dns_since":"2026-11-05T16:55:41.000Z","findings":[{"id":"f424fi4vzl2h22rp27ai2","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T15:56:59.990Z","first_published":"2026-11-05T16:42:04.725Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/js4519.com/"}],"url":"https://domainspoof.com/live?show=all&q=js4519.com"},{"hostname":"justocredovia-es.live","first_observed":"2026-11-05T16:00:39.305Z","first_published":"2026-11-05T16:42:04.725Z","brands":[],"dns":"resolved","resolved":["104.21.59.189","172.67.182.115"],"resolved_at":"2026-11-05T16:01:09Z","dns_checked_at":"2026-11-05T16:55:41.000Z","dns_since":"2026-11-05T16:55:41.000Z","findings":[{"id":"fiscgo72d72yyvubd6fd5","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T16:00:39.305Z","first_published":"2026-11-05T16:42:04.725Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=justocredovia-es.live"},{"hostname":"kdollldq.com","first_observed":"2026-11-05T15:56:59.990Z","first_published":"2026-11-05T16:42:04.725Z","brands":[],"dns":"resolved","resolved":["104.21.17.155","172.67.177.15"],"resolved_at":"2026-11-05T16:04:17Z","dns_checked_at":"2026-11-05T16:55:41.000Z","dns_since":"2026-11-05T16:55:41.000Z","findings":[{"id":"fr3qw364hkvohfddwwiab","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T15:56:59.990Z","first_published":"2026-11-05T16:42:04.725Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=kdollldq.com"},{"hostname":"khm.sale","first_observed":"2026-11-05T15:56:59.990Z","first_published":"2026-11-05T16:42:04.725Z","brands":[],"dns":"resolved","resolved":["104.21.71.14","172.67.168.252"],"resolved_at":"2026-11-05T16:04:17Z","dns_checked_at":"2026-11-05T16:55:41.000Z","dns_since":"2026-11-05T16:55:41.000Z","findings":[{"id":"f3tlxjmhigcwh2em7veei","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T15:56:59.990Z","first_published":"2026-11-05T16:42:04.725Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/khm.sale/"}],"url":"https://domainspoof.com/live?show=all&q=khm.sale"},{"hostname":"kiwiwealthgrid.click","first_observed":"2026-11-05T15:51:46.017Z","first_published":"2026-11-05T16:42:04.725Z","brands":[],"dns":"resolved","resolved":["185.62.58.179"],"resolved_at":"2026-11-05T16:01:30Z","dns_checked_at":"2026-11-05T16:55:41.000Z","dns_since":"2026-11-05T16:55:41.000Z","findings":[{"id":"fk4zc4ckgjnvjbmkfqjmu","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T15:51:46.017Z","first_published":"2026-11-05T16:42:04.725Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=kiwiwealthgrid.click"},{"hostname":"krevpixelon-it.live","first_observed":"2026-11-05T15:31:21.422Z","first_published":"2026-11-05T16:42:04.725Z","brands":[],"dns":"resolved","resolved":["104.21.28.248","172.67.171.49"],"resolved_at":"2026-11-05T15:31:44Z","dns_checked_at":"2026-11-05T16:55:41.000Z","dns_since":"2026-11-05T16:55:41.000Z","findings":[{"id":"fecu4hcyua4ndeznneptw","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T15:31:21.422Z","first_published":"2026-11-05T16:42:04.725Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=krevpixelon-it.live"},{"hostname":"ktnpy.asia","first_observed":"2026-11-05T16:36:38.552Z","first_published":"2026-11-05T16:42:04.725Z","brands":[],"dns":"resolved","resolved":["104.21.49.190","172.67.165.231"],"resolved_at":"2026-11-05T16:40:00Z","dns_checked_at":"2026-11-05T16:55:41.000Z","dns_since":"2026-11-05T16:55:41.000Z","findings":[{"id":"frjgfpovt3c6bb7k4ndzi","kind":"reported_domain","summary":"Listed by NPA 165 (information services)","first_observed":"2026-11-05T16:36:38.552Z","first_published":"2026-11-05T16:42:04.725Z","source":"npa","source_name":"NPA 165","claim":{"category":"information services"}}],"url":"https://domainspoof.com/live?show=all&q=ktnpy.asia"},{"hostname":"kumaroyna2026.com","first_observed":"2026-11-05T16:05:51.778Z","first_published":"2026-11-05T16:42:04.725Z","brands":[],"dns":"resolved","resolved":["104.21.18.92","172.67.181.136"],"resolved_at":"2026-11-05T16:06:05Z","dns_checked_at":"2026-11-05T16:55:41.000Z","dns_since":"2026-11-05T16:55:41.000Z","findings":[{"id":"fixcxjnqr6zgzfnqsaeh5","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T16:05:51.778Z","first_published":"2026-11-05T16:42:04.725Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/kumaroyna2026.com/"}],"url":"https://domainspoof.com/live?show=all&q=kumaroyna2026.com"},{"hostname":"lamaniahome.shop","first_observed":"2026-11-05T15:51:46.017Z","first_published":"2026-11-05T16:42:04.725Z","brands":[],"dns":"resolved","resolved":["34.8.77.192"],"resolved_at":"2026-11-05T16:01:30Z","dns_checked_at":"2026-11-05T16:55:41.000Z","dns_since":"2026-11-05T16:55:41.000Z","findings":[{"id":"fhb377tghfbxa6osgaidx","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T15:51:46.017Z","first_published":"2026-11-05T16:42:04.725Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=lamaniahome.shop"},{"hostname":"landeavoirecto-fr.live","first_observed":"2026-11-05T16:26:28.136Z","first_published":"2026-11-05T16:42:04.725Z","brands":[],"dns":"resolved","resolved":["104.21.56.96","172.67.183.189"],"resolved_at":"2026-11-05T16:27:04Z","dns_checked_at":"2026-11-05T16:55:41.000Z","dns_since":"2026-11-05T16:55:41.000Z","findings":[{"id":"f3uu4rp7dsr2ra46kkqqs","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T16:26:28.136Z","first_published":"2026-11-05T16:42:04.725Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=landeavoirecto-fr.live"},{"hostname":"ledger-live-applications.io","first_observed":"2026-11-05T15:51:46.017Z","first_published":"2026-11-05T16:42:04.725Z","brands":[{"id":"ledger","name":"Ledger","url":"https://domainspoof.com/brands/ledger"}],"dns":"resolved","resolved":["104.21.0.114","172.67.150.234","2606:4700:3033::ac43:96ea","2606:4700:3034::6815:72"],"resolved_at":"2026-11-05T16:01:30Z","dns_checked_at":"2026-11-05T16:55:41.000Z","dns_since":"2026-11-05T16:55:41.000Z","findings":[{"id":"fctrtbf4ne5lp7up3pqts","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T15:51:46.017Z","first_published":"2026-11-05T16:42:04.725Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/brands/ledger"},{"hostname":"ledger-live-desktops.io","first_observed":"2026-11-05T15:41:12.412Z","first_published":"2026-11-05T16:42:04.725Z","brands":[{"id":"ledger","name":"Ledger","url":"https://domainspoof.com/brands/ledger"}],"dns":"resolved","resolved":["104.21.19.192","172.67.188.146","2606:4700:3030::ac43:bc92","2606:4700:3035::6815:13c0"],"resolved_at":"2026-11-05T15:42:00Z","dns_checked_at":"2026-11-05T16:55:41.000Z","dns_since":"2026-11-05T16:55:41.000Z","findings":[{"id":"fwvh5zgc5g2zsxqrye4yo","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T15:41:12.412Z","first_published":"2026-11-05T16:42:04.725Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/brands/ledger"},{"hostname":"ledgrlie-eng.pages.dev","first_observed":"2026-11-05T16:10:31.214Z","first_published":"2026-11-05T16:42:04.725Z","brands":[],"dns":"resolved","resolved":["172.66.44.166","172.66.47.90"],"resolved_at":"2026-11-05T16:15:45Z","dns_checked_at":"2026-11-05T16:55:41.000Z","dns_since":"2026-11-05T16:55:41.000Z","findings":[{"id":"f6qgyolqjafwa3athfkhq","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T16:10:31.214Z","first_published":"2026-11-05T16:42:04.725Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=ledgrlie-eng.pages.dev"},{"hostname":"lista-app.pro","first_observed":"2026-11-05T15:46:31.013Z","first_published":"2026-11-05T16:42:04.725Z","brands":[],"dns":"resolved","resolved":["104.21.23.109","172.67.210.203"],"resolved_at":"2026-11-05T15:46:52Z","dns_checked_at":"2026-11-05T16:55:41.000Z","dns_since":"2026-11-05T16:55:41.000Z","findings":[{"id":"fskfoicfnfsy47qgzb3u6","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T15:46:31.013Z","first_published":"2026-11-05T16:42:04.725Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/lista-app.pro/"}],"url":"https://domainspoof.com/live?show=all&q=lista-app.pro"},{"hostname":"m-rndsglkrhber.cfd","first_observed":"2026-11-05T15:47:02.119Z","first_published":"2026-11-05T16:42:04.725Z","brands":[],"dns":"resolved","resolved":["104.21.39.188","172.67.148.67","2606:4700:3036::6815:27bc","2606:4700:3037::ac43:9443"],"resolved_at":"2026-11-05T15:47:43Z","dns_checked_at":"2026-11-05T16:55:41.000Z","dns_since":"2026-11-05T16:55:41.000Z","findings":[{"id":"fp7zshawzfhcmkbfykqju","kind":"reported_domain","summary":"Listed by USOM","first_observed":"2026-11-05T15:47:02.119Z","first_published":"2026-11-05T16:42:04.725Z","source":"usom","source_name":"USOM"}],"url":"https://domainspoof.com/live?show=all&q=m-rndsglkrhber.cfd"},{"hostname":"m-sglikrhber.cfd","first_observed":"2026-11-05T15:47:02.119Z","first_published":"2026-11-05T16:42:04.725Z","brands":[],"dns":"resolved","resolved":["104.21.89.116","172.67.158.232","2606:4700:3035::ac43:9ee8","2606:4700:3036::6815:5974"],"resolved_at":"2026-11-05T15:47:43Z","dns_checked_at":"2026-11-05T16:55:41.000Z","dns_since":"2026-11-05T16:55:41.000Z","findings":[{"id":"f7wqgzm72cwjbprxn7f7b","kind":"reported_domain","summary":"Listed by USOM","first_observed":"2026-11-05T15:47:02.119Z","first_published":"2026-11-05T16:42:04.725Z","source":"usom","source_name":"USOM"}],"url":"https://domainspoof.com/live?show=all&q=m-sglikrhber.cfd"},{"hostname":"m.js4519.com","first_observed":"2026-11-05T15:56:59.990Z","first_published":"2026-11-05T16:42:04.725Z","brands":[],"dns":"resolved","resolved":["168.76.227.176"],"resolved_at":"2026-11-05T16:04:17Z","dns_checked_at":"2026-11-05T16:55:41.000Z","dns_since":"2026-11-05T16:55:41.000Z","findings":[{"id":"fxioiuomqjhlytd4en7us","kind":"reported_domain","summary":"Under js4519.com, reported by PhishDestroy","first_observed":"2026-11-05T15:56:59.990Z","first_published":"2026-11-05T16:42:04.725Z","source":"phishdestroy","source_name":"PhishDestroy","under":"js4519.com","source_url":"https://phishdestroy.io/domain/js4519.com/"}],"url":"https://domainspoof.com/live?show=all&q=m.js4519.com"},{"hostname":"m.rallyvillemarketscn.com","first_observed":"2026-11-05T16:05:51.778Z","first_published":"2026-11-05T16:42:04.725Z","brands":[],"dns":"resolved","resolved":["162.4.84.247"],"resolved_at":"2026-11-05T16:06:05Z","dns_checked_at":"2026-11-05T16:55:41.000Z","dns_since":"2026-11-05T16:55:41.000Z","findings":[{"id":"fp7ah4chnqwpp5dzuupvq","kind":"reported_domain","summary":"Listed by NPA 165 (finance and insurance)","first_observed":"2026-11-05T16:05:51.778Z","first_published":"2026-11-05T16:42:04.725Z","source":"npa","source_name":"NPA 165","claim":{"category":"finance and insurance"}}],"url":"https://domainspoof.com/live?show=all&q=m.rallyvillemarketscn.com"},{"hostname":"maautomobile.orionacademy.com.ng","first_observed":"2026-11-05T15:51:46.017Z","first_published":"2026-11-05T16:42:04.725Z","brands":[],"dns":"resolved","resolved":["147.124.214.15"],"resolved_at":"2026-11-05T16:01:31Z","dns_checked_at":"2026-11-05T16:55:41.000Z","dns_since":"2026-11-05T16:55:41.000Z","findings":[{"id":"f3hjttnyakzcc5nnalkql","kind":"reported_domain","summary":"Under orionacademy.com.ng, reported by PhishDestroy","first_observed":"2026-11-05T15:51:46.017Z","first_published":"2026-11-05T16:42:04.725Z","source":"phishdestroy","source_name":"PhishDestroy","under":"orionacademy.com.ng","source_url":"https://phishdestroy.io/domain/orionacademy.com.ng/"}],"url":"https://domainspoof.com/live?show=all&q=maautomobile.orionacademy.com.ng"},{"hostname":"maple-finance.org","first_observed":"2026-11-05T16:26:28.136Z","first_published":"2026-11-05T16:42:04.725Z","brands":[],"dns":"resolved","resolved":["104.21.0.89","172.67.150.200"],"resolved_at":"2026-11-05T16:27:04Z","dns_checked_at":"2026-11-05T16:55:42.000Z","dns_since":"2026-11-05T16:55:42.000Z","findings":[{"id":"f6lmm3447kxjwfvcgdd36","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T16:26:28.136Z","first_published":"2026-11-05T16:42:04.725Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=maple-finance.org"},{"hostname":"massive-finance.org","first_observed":"2026-11-05T16:21:08.591Z","first_published":"2026-11-05T16:42:04.725Z","brands":[],"dns":"resolved","resolved":["104.21.40.167","172.67.187.114"],"resolved_at":"2026-11-05T16:31:33Z","dns_checked_at":"2026-11-05T16:55:42.000Z","dns_since":"2026-11-05T16:55:42.000Z","findings":[{"id":"fyom5lhkz6m3fjmjx6h2v","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T16:21:08.591Z","first_published":"2026-11-05T16:42:04.725Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/massive-finance.org/"}],"url":"https://domainspoof.com/live?show=all&q=massive-finance.org"},{"hostname":"matacapitstead.click","first_observed":"2026-11-05T15:41:12.412Z","first_published":"2026-11-05T16:42:04.725Z","brands":[],"dns":"resolved","resolved":["104.21.8.183","172.67.157.165"],"resolved_at":"2026-11-06T01:12:46Z","dns_checked_at":"2026-11-05T16:55:42.000Z","dns_since":"2026-11-05T16:55:42.000Z","findings":[{"id":"fsd4abgcpei5nfqsffo54","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T15:41:12.412Z","first_published":"2026-11-05T16:42:04.725Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=matacapitstead.click"},{"hostname":"mazaltrov-it.live","first_observed":"2026-11-05T15:41:12.412Z","first_published":"2026-11-05T16:42:04.725Z","brands":[],"dns":"resolved","resolved":["104.21.29.192","172.67.149.170"],"resolved_at":"2026-11-05T15:42:00Z","dns_checked_at":"2026-11-05T16:55:42.000Z","dns_since":"2026-11-05T16:55:42.000Z","findings":[{"id":"fjlgxaah5a4y3a7lbrs6d","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T15:41:12.412Z","first_published":"2026-11-05T16:42:04.725Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=mazaltrov-it.live"},{"hostname":"mellstroy.host","first_observed":"2026-11-05T15:41:12.412Z","first_published":"2026-11-05T16:42:04.725Z","brands":[],"dns":"resolved","resolved":["89.248.67.197"],"resolved_at":"2026-11-05T15:42:00Z","dns_checked_at":"2026-11-05T16:55:42.000Z","dns_since":"2026-11-05T16:55:42.000Z","findings":[{"id":"fp6znhtk3znacozgoifov","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T15:41:12.412Z","first_published":"2026-11-05T16:42:04.725Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/mellstroy.host/"}],"url":"https://domainspoof.com/live?show=all&q=mellstroy.host"},{"hostname":"meta-mask-extens-ion.pages.dev","first_observed":"2026-11-05T16:21:08.591Z","first_published":"2026-11-05T16:42:04.725Z","brands":[{"id":"metamask","name":"MetaMask","url":"https://domainspoof.com/brands/metamask"}],"dns":"resolved","resolved":["172.66.44.133","172.66.47.123","2606:4700:310c::ac42:2c85","2606:4700:310c::ac42:2f7b"],"resolved_at":"2026-11-05T16:31:33Z","dns_checked_at":"2026-11-05T16:55:42.000Z","dns_since":"2026-11-05T16:55:42.000Z","findings":[{"id":"f35zvo7kr4vycrnfrcoon","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T16:21:08.591Z","first_published":"2026-11-05T16:42:04.725Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/brands/metamask"},{"hostname":"meuseavoireve-fr.live","first_observed":"2026-11-05T16:21:08.591Z","first_published":"2026-11-05T16:42:04.725Z","brands":[],"dns":"resolved","resolved":["104.21.32.246","172.67.157.13"],"resolved_at":"2026-11-05T16:31:34Z","dns_checked_at":"2026-11-05T16:55:42.000Z","dns_since":"2026-11-05T16:55:42.000Z","findings":[{"id":"ffueulbjfmv5a76lqrb6p","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T16:21:08.591Z","first_published":"2026-11-05T16:42:04.725Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=meuseavoireve-fr.live"},{"hostname":"mexnbfgfdg.com","first_observed":"2026-11-05T16:21:08.591Z","first_published":"2026-11-05T16:42:04.725Z","brands":[],"dns":"resolved","resolved":["104.21.36.5","172.67.182.171"],"resolved_at":"2026-11-06T04:07:29Z","dns_checked_at":"2026-11-05T16:55:42.000Z","dns_since":"2026-11-05T16:55:42.000Z","findings":[{"id":"fsp673xhkt4gnfzj5qz6t","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T16:21:08.591Z","first_published":"2026-11-05T16:42:04.725Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=mexnbfgfdg.com"},{"hostname":"mez.ink","first_observed":"2026-11-05T16:16:21.134Z","first_published":"2026-11-05T16:42:04.725Z","brands":[],"dns":"resolved","resolved":["104.18.4.46","104.18.5.46"],"resolved_at":"2026-11-05T16:27:12Z","dns_checked_at":"2026-11-05T16:55:42.000Z","dns_since":"2026-11-05T16:55:42.000Z","findings":[{"id":"fd7nbfciufdi4x5kugv36","kind":"reported_domain","summary":"Reported by PhishTank","first_observed":"2026-11-05T16:16:21.134Z","first_published":"2026-11-05T16:42:04.725Z","source":"phishtank","source_name":"PhishTank","source_url":"https://phishtank.org/phish_detail.php?phish_id=9467247"}],"url":"https://domainspoof.com/live?show=all&q=mez.ink"},{"hostname":"mf30i-umfa-57wy3-064ga1-l314e8.pages.dev","first_observed":"2026-11-05T15:56:59.990Z","first_published":"2026-11-05T16:42:04.725Z","brands":[],"dns":"resolved","resolved":["172.66.44.83","172.66.47.173"],"resolved_at":"2026-11-05T16:04:18Z","dns_checked_at":"2026-11-05T16:55:42.000Z","dns_since":"2026-11-05T16:55:42.000Z","findings":[{"id":"fazhgxhmcxle22l2kdyzk","kind":"reported_domain","summary":"Reported by PhishTank","first_observed":"2026-11-05T15:56:59.990Z","first_published":"2026-11-05T16:42:04.725Z","source":"phishtank","source_name":"PhishTank","source_url":"https://phishtank.org/phish_detail.php?phish_id=9479415"}],"url":"https://domainspoof.com/live?show=all&q=mf30i-umfa-57wy3-064ga1-l314e8.pages.dev"},{"hostname":"mg-times.com","first_observed":"2026-11-05T16:26:28.136Z","first_published":"2026-11-05T16:42:04.725Z","brands":[],"dns":"resolved","resolved":["104.21.67.234","172.67.182.243"],"resolved_at":"2026-11-05T16:27:04Z","dns_checked_at":"2026-11-05T16:55:42.000Z","dns_since":"2026-11-05T16:55:42.000Z","findings":[{"id":"fsk6csognpcdvio7vhebg","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T16:26:28.136Z","first_published":"2026-11-05T16:42:04.725Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/mg-times.com/"}],"url":"https://domainspoof.com/live?show=all&q=mg-times.com"},{"hostname":"miradex.io","first_observed":"2026-11-05T16:31:21.698Z","first_published":"2026-11-05T16:42:04.725Z","brands":[],"dns":"resolved","resolved":["104.21.20.24","172.67.190.249"],"resolved_at":"2026-11-06T05:10:49Z","dns_checked_at":"2026-11-05T16:55:42.000Z","dns_since":"2026-11-05T16:55:42.000Z","findings":[{"id":"fhrh7kh3nk3qw4g2tniob","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T16:31:21.698Z","first_published":"2026-11-05T16:42:04.725Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=miradex.io"},{"hostname":"mirelganthvorzelyx-fr.live","first_observed":"2026-11-05T15:46:31.013Z","first_published":"2026-11-05T16:42:04.725Z","brands":[],"dns":"resolved","resolved":["104.21.54.196","172.67.141.93"],"resolved_at":"2026-11-05T15:46:52Z","dns_checked_at":"2026-11-05T16:55:42.000Z","dns_since":"2026-11-05T16:55:42.000Z","findings":[{"id":"fquxkv7vagjk3hp73v7mx","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T15:46:31.013Z","first_published":"2026-11-05T16:42:04.725Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=mirelganthvorzelyx-fr.live"},{"hostname":"mistralinvestoire-fr.live","first_observed":"2026-11-05T16:05:51.778Z","first_published":"2026-11-05T16:42:04.725Z","brands":[],"dns":"resolved","resolved":["104.21.11.93","172.67.165.182"],"resolved_at":"2026-11-05T16:06:05Z","dns_checked_at":"2026-11-05T16:55:42.000Z","dns_since":"2026-11-05T16:55:42.000Z","findings":[{"id":"fbwvzyu35kgeczk74ybva","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T16:05:51.778Z","first_published":"2026-11-05T16:42:04.725Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=mistralinvestoire-fr.live"},{"hostname":"monitor.emranweb.net","first_observed":"2026-11-05T15:56:59.990Z","first_published":"2026-11-05T16:42:04.725Z","brands":[],"dns":"resolved","resolved":["31.97.69.128"],"resolved_at":"2026-11-05T16:04:18Z","dns_checked_at":"2026-11-05T16:55:42.000Z","dns_since":"2026-11-05T16:55:42.000Z","findings":[{"id":"fx27gke3wlvdqd7zqt7nj","kind":"reported_domain","summary":"Under emranweb.net, reported by PhishDestroy","first_observed":"2026-11-05T15:56:59.990Z","first_published":"2026-11-05T16:42:04.725Z","source":"phishdestroy","source_name":"PhishDestroy","under":"emranweb.net","source_url":"https://phishdestroy.io/domain/emranweb.net/"}],"url":"https://domainspoof.com/live?show=all&q=monitor.emranweb.net"},{"hostname":"moonshot-listing.pages.dev","first_observed":"2026-11-05T16:16:21.134Z","first_published":"2026-11-05T16:42:04.725Z","brands":[],"dns":"resolved","resolved":["172.66.44.127","172.66.47.129"],"resolved_at":"2026-11-05T16:27:13Z","dns_checked_at":"2026-11-05T16:55:42.000Z","dns_since":"2026-11-05T16:55:42.000Z","findings":[{"id":"fufcvb3y5o4i3bgxwygrs","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T16:16:21.134Z","first_published":"2026-11-05T16:42:04.725Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=moonshot-listing.pages.dev"},{"hostname":"mortezosedge-de.live","first_observed":"2026-11-05T15:56:59.990Z","first_published":"2026-11-05T16:42:04.725Z","brands":[],"dns":"resolved","resolved":["104.21.80.226","172.67.154.135"],"resolved_at":"2026-11-05T16:04:18Z","dns_checked_at":"2026-11-05T16:55:42.000Z","dns_since":"2026-11-05T16:55:42.000Z","findings":[{"id":"f3573icjaui2amyxjwjoz","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T15:56:59.990Z","first_published":"2026-11-05T16:42:04.725Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=mortezosedge-de.live"},{"hostname":"motofelga.com","first_observed":"2026-11-05T15:46:31.013Z","first_published":"2026-11-05T16:42:04.725Z","brands":[],"dns":"resolved","resolved":["104.21.88.129","172.67.179.98"],"resolved_at":"2026-11-05T15:46:52Z","dns_checked_at":"2026-11-05T16:55:42.000Z","dns_since":"2026-11-05T16:55:42.000Z","findings":[{"id":"fibmi46xpivemllqbd6oj","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T15:46:31.013Z","first_published":"2026-11-05T16:42:04.725Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=motofelga.com"},{"hostname":"my.immortalpos.co.za","first_observed":"2026-11-05T15:51:46.017Z","first_published":"2026-11-05T16:42:04.725Z","brands":[],"dns":"resolved","resolved":["104.21.72.30","172.67.174.101"],"resolved_at":"2026-11-05T16:01:32Z","dns_checked_at":"2026-11-05T16:55:42.000Z","dns_since":"2026-11-05T16:55:42.000Z","findings":[{"id":"fv6sqjrrlb2n77znbttsz","kind":"reported_domain","summary":"Under immortalpos.co.za, reported by PhishDestroy","first_observed":"2026-11-05T15:51:46.017Z","first_published":"2026-11-05T16:42:04.725Z","source":"phishdestroy","source_name":"PhishDestroy","under":"immortalpos.co.za","source_url":"https://phishdestroy.io/domain/immortalpos.co.za/"}],"url":"https://domainspoof.com/live?show=all&q=my.immortalpos.co.za"},{"hostname":"my.polar-tensor.com","first_observed":"2026-11-05T15:31:21.422Z","first_published":"2026-11-05T16:42:04.725Z","brands":[],"dns":"resolved","resolved":["5.189.134.86","57.128.187.75","57.129.49.179","193.242.211.59"],"resolved_at":"2026-11-05T15:31:44Z","dns_checked_at":"2026-11-05T16:55:42.000Z","dns_since":"2026-11-05T16:55:42.000Z","findings":[{"id":"fznzrgvcosfjbwjbdfvcv","kind":"reported_domain","summary":"Under polar-tensor.com, listed by MetaMask","first_observed":"2026-11-05T15:31:21.422Z","first_published":"2026-11-05T16:42:04.725Z","source":"metamask","source_name":"MetaMask","under":"polar-tensor.com"}],"url":"https://domainspoof.com/live?show=all&q=my.polar-tensor.com"},{"hostname":"myetherewallet.com","first_observed":"2026-11-05T15:56:59.990Z","first_published":"2026-11-05T16:42:04.725Z","brands":[],"dns":"resolved","resolved":["13.223.25.84","54.243.117.197"],"resolved_at":"2026-11-05T16:04:18Z","dns_checked_at":"2026-11-05T16:55:42.000Z","dns_since":"2026-11-05T16:55:42.000Z","findings":[{"id":"fuzanj6ce7ubyveeuetz4","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T15:56:59.990Z","first_published":"2026-11-05T16:42:04.725Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=myetherewallet.com"},{"hostname":"myship7-11-com-tw-w4.sbs","first_observed":"2026-11-05T16:16:21.134Z","first_published":"2026-11-05T16:42:04.725Z","brands":[{"id":"7-eleven-taiwan","name":"7-ELEVEN Taiwan","url":"https://domainspoof.com/brands/7-eleven-taiwan"}],"dns":"resolved","resolved":["104.21.23.138","172.67.211.82","2606:4700:3030::ac43:d352","2606:4700:3033::6815:178a"],"resolved_at":"2026-11-05T16:27:15Z","dns_checked_at":"2026-11-05T16:55:42.000Z","dns_since":"2026-11-05T16:55:42.000Z","findings":[{"id":"fwxvbfejf63frf2tmllr2","kind":"reported_domain","summary":"Listed by NPA 165 (transport and delivery)","first_observed":"2026-11-05T16:16:21.134Z","first_published":"2026-11-05T16:42:04.725Z","source":"npa","source_name":"NPA 165","claim":{"category":"transport and delivery"}}],"url":"https://domainspoof.com/brands/7-eleven-taiwan"},{"hostname":"mzeldravoq-es.live","first_observed":"2026-11-05T16:00:39.305Z","first_published":"2026-11-05T16:42:04.725Z","brands":[],"dns":"resolved","resolved":["104.21.73.153","172.67.190.87"],"resolved_at":"2026-11-05T16:01:10Z","dns_checked_at":"2026-11-05T16:55:42.000Z","dns_since":"2026-11-05T16:55:42.000Z","findings":[{"id":"f5wdo2dathibbvbe6qc4j","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T16:00:39.305Z","first_published":"2026-11-05T16:42:04.725Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=mzeldravoq-es.live"},{"hostname":"nanovita-eligibility.xyz","first_observed":"2026-11-05T16:16:21.134Z","first_published":"2026-11-05T16:42:04.725Z","brands":[],"dns":"resolved","resolved":["104.21.71.192","172.67.148.23"],"resolved_at":"2026-11-05T16:27:15Z","dns_checked_at":"2026-11-05T16:55:42.000Z","dns_since":"2026-11-05T16:55:42.000Z","findings":[{"id":"fyrdbliyaptf3qyppctjs","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T16:16:21.134Z","first_published":"2026-11-05T16:42:04.725Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=nanovita-eligibility.xyz"},{"hostname":"nas.socialvisor.ru","first_observed":"2026-11-05T16:36:38.552Z","first_published":"2026-11-05T16:42:04.725Z","brands":[],"dns":"resolved","resolved":["91.215.41.91"],"resolved_at":"2026-11-05T16:40:01Z","dns_checked_at":"2026-11-05T16:55:42.000Z","dns_since":"2026-11-05T16:55:42.000Z","findings":[{"id":"fvjroccydszw5exlhj2vt","kind":"reported_domain","summary":"Under socialvisor.ru, reported by PhishDestroy","first_observed":"2026-11-05T16:36:38.552Z","first_published":"2026-11-05T16:42:04.725Z","source":"phishdestroy","source_name":"PhishDestroy","under":"socialvisor.ru","source_url":"https://phishdestroy.io/domain/socialvisor.ru/"}],"url":"https://domainspoof.com/live?show=all&q=nas.socialvisor.ru"},{"hostname":"nazvelqorn-de.live","first_observed":"2026-11-05T16:21:08.591Z","first_published":"2026-11-05T16:42:04.725Z","brands":[],"dns":"resolved","resolved":["104.21.82.194","172.67.162.211"],"resolved_at":"2026-11-05T16:31:34Z","dns_checked_at":"2026-11-05T16:55:42.000Z","dns_since":"2026-11-05T16:55:42.000Z","findings":[{"id":"f76lfw2lj32h6mnbo4afi","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T16:21:08.591Z","first_published":"2026-11-05T16:42:04.725Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=nazvelqorn-de.live"},{"hostname":"near-intents.net","first_observed":"2026-11-05T16:26:28.136Z","first_published":"2026-11-05T16:42:04.725Z","brands":[],"dns":"resolved","resolved":["104.21.33.182","172.67.191.61"],"resolved_at":"2026-11-05T16:27:05Z","dns_checked_at":"2026-11-05T16:55:42.000Z","dns_since":"2026-11-05T16:55:42.000Z","findings":[{"id":"fdahtp6kjjtf6hbgmcs5x","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T16:26:28.136Z","first_published":"2026-11-05T16:42:04.725Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=near-intents.net"},{"hostname":"neurshard-ai.digital","first_observed":"2026-11-05T15:36:14.003Z","first_published":"2026-11-05T16:42:04.725Z","brands":[],"dns":"resolved","resolved":["104.21.44.95","172.67.198.131"],"resolved_at":"2026-11-05T15:48:24Z","dns_checked_at":"2026-11-05T16:55:42.000Z","dns_since":"2026-11-05T16:55:42.000Z","findings":[{"id":"fqubebn3aka4m4qt6efco","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T15:36:14.003Z","first_published":"2026-11-05T16:42:04.725Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=neurshard-ai.digital"},{"hostname":"neuvefondvrac-it.live","first_observed":"2026-11-05T15:41:12.412Z","first_published":"2026-11-05T16:42:04.725Z","brands":[],"dns":"resolved","resolved":["104.21.53.152","172.67.214.155"],"resolved_at":"2026-11-05T15:42:01Z","dns_checked_at":"2026-11-05T16:55:42.000Z","dns_since":"2026-11-05T16:55:42.000Z","findings":[{"id":"fvauykth6ikzgia2ruqhe","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T15:41:12.412Z","first_published":"2026-11-05T16:42:04.725Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=neuvefondvrac-it.live"},{"hostname":"nexus-mutual.com","first_observed":"2026-11-05T16:26:28.136Z","first_published":"2026-11-05T16:42:04.725Z","brands":[],"dns":"resolved","resolved":["104.21.46.183","172.67.141.95"],"resolved_at":"2026-11-05T16:27:05Z","dns_checked_at":"2026-11-05T16:55:42.000Z","dns_since":"2026-11-05T16:55:42.000Z","findings":[{"id":"fvpcy4xlbru2lr7fxra6j","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T16:26:28.136Z","first_published":"2026-11-05T16:42:04.725Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=nexus-mutual.com"},{"hostname":"nobiloption-ai.digital","first_observed":"2026-11-05T16:00:39.305Z","first_published":"2026-11-05T16:42:04.725Z","brands":[],"dns":"resolved","resolved":["104.21.30.252","172.67.174.61"],"resolved_at":"2026-11-05T16:01:10Z","dns_checked_at":"2026-11-05T16:55:42.000Z","dns_since":"2026-11-05T16:55:42.000Z","findings":[{"id":"f3324wi7utiktxbcog6ug","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T16:00:39.305Z","first_published":"2026-11-05T16:42:04.725Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=nobiloption-ai.digital"},{"hostname":"nokti.amlpro.io","first_observed":"2026-11-05T15:36:14.003Z","first_published":"2026-11-05T16:42:04.725Z","brands":[],"dns":"resolved","resolved":["104.21.12.189","172.67.132.86"],"resolved_at":"2026-11-05T15:48:25Z","dns_checked_at":"2026-11-05T16:55:42.000Z","dns_since":"2026-11-05T16:55:42.000Z","findings":[{"id":"flncu62vwujqiftapvg43","kind":"reported_domain","summary":"Under amlpro.io, reported by PhishDestroy","first_observed":"2026-11-05T15:36:14.003Z","first_published":"2026-11-05T16:42:04.725Z","source":"phishdestroy","source_name":"PhishDestroy","under":"amlpro.io","source_url":"https://phishdestroy.io/domain/amlpro.io/"}],"url":"https://domainspoof.com/live?show=all&q=nokti.amlpro.io"},{"hostname":"ns.cloudflafe.com","first_observed":"2026-11-05T15:56:59.990Z","first_published":"2026-11-05T16:42:04.725Z","brands":[],"dns":"resolved","resolved":["45.10.243.43"],"resolved_at":"2026-11-05T16:04:18Z","dns_checked_at":"2026-11-05T16:55:42.000Z","dns_since":"2026-11-05T16:55:42.000Z","findings":[{"id":"f65vizw4levrn2or2qy6u","kind":"reported_domain","summary":"Under cloudflafe.com, listed by MetaMask","first_observed":"2026-11-05T15:56:59.990Z","first_published":"2026-11-05T16:42:04.725Z","source":"metamask","source_name":"MetaMask","under":"cloudflafe.com"}],"url":"https://domainspoof.com/live?show=all&q=ns.cloudflafe.com"},{"hostname":"nvc-info.beer","first_observed":"2026-11-05T16:21:08.591Z","first_published":"2026-11-05T16:42:04.725Z","brands":[],"dns":"resolved","resolved":["178.16.52.101"],"resolved_at":"2026-11-05T16:31:35Z","dns_checked_at":"2026-11-05T16:55:42.000Z","dns_since":"2026-11-05T16:55:42.000Z","findings":[{"id":"fqdcojma6teaq6osvfdcr","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T16:21:08.591Z","first_published":"2026-11-05T16:42:04.725Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=nvc-info.beer"},{"hostname":"nweawlzu.shop","first_observed":"2026-11-05T15:36:14.003Z","first_published":"2026-11-05T16:42:04.725Z","brands":[],"dns":"resolved","resolved":["104.17.231.54"],"resolved_at":"2026-11-06T07:53:49Z","dns_checked_at":"2026-11-05T16:55:42.000Z","dns_since":"2026-11-05T16:55:42.000Z","findings":[{"id":"f6jzyg7referbegk6slo5","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T15:36:14.003Z","first_published":"2026-11-05T16:42:04.725Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=nweawlzu.shop"},{"hostname":"ochnik.side-step.shop","first_observed":"2026-11-05T16:00:39.305Z","first_published":"2026-11-05T16:42:04.725Z","brands":[],"dns":"resolved","resolved":["104.21.38.142","172.67.223.163"],"resolved_at":"2026-11-05T16:01:10Z","dns_checked_at":"2026-11-05T16:55:42.000Z","dns_since":"2026-11-05T16:55:42.000Z","findings":[{"id":"f3sfoy6u6fotvitdhzuj7","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T16:00:39.305Z","first_published":"2026-11-05T16:42:04.725Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=ochnik.side-step.shop"},{"hostname":"octis.site","first_observed":"2026-11-05T15:36:14.003Z","first_published":"2026-11-05T16:42:04.725Z","brands":[],"dns":"resolved","resolved":["104.21.19.174","172.67.187.5"],"resolved_at":"2026-11-05T15:48:25Z","dns_checked_at":"2026-11-05T16:55:42.000Z","dns_since":"2026-11-05T16:55:42.000Z","findings":[{"id":"f2lt5p5o3dwkcryjmimos","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T15:36:14.003Z","first_published":"2026-11-05T16:42:04.725Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/octis.site/"}],"url":"https://domainspoof.com/live?show=all&q=octis.site"},{"hostname":"octra-allocations.xyz","first_observed":"2026-11-05T16:00:39.305Z","first_published":"2026-11-05T16:42:04.725Z","brands":[],"dns":"resolved","resolved":["104.21.23.108","172.67.210.202"],"resolved_at":"2026-11-05T16:01:10Z","dns_checked_at":"2026-11-05T16:55:42.000Z","dns_since":"2026-11-05T16:55:42.000Z","findings":[{"id":"frckbi2tktxq363d5lj2p","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T16:00:39.305Z","first_published":"2026-11-05T16:42:04.725Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=octra-allocations.xyz"},{"hostname":"od.da-fedex.com","first_observed":"2026-11-05T16:01:33.252Z","first_published":"2026-11-05T16:42:04.725Z","brands":[{"id":"fedex","name":"FedEx","url":"https://domainspoof.com/brands/fedex"}],"dns":"resolved","resolved":["43.174.246.29","43.174.247.29"],"resolved_at":"2026-11-05T16:55:42Z","dns_checked_at":"2026-11-05T16:55:42.000Z","dns_since":"2026-11-05T16:55:42.000Z","findings":[{"id":"f6t6pknnarg7m6kht7quf","kind":"phishing_infrastructure","summary":"Resolved to 43.174.246.29, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T16:01:33.252Z","first_published":"2026-11-05T16:42:04.725Z","address":"43.174.246.29","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/fedex"},{"hostname":"old.kingdom-dmc.com","first_observed":"2026-11-05T16:16:21.134Z","first_published":"2026-11-05T16:42:04.725Z","brands":[],"dns":"resolved","resolved":["185.215.4.42"],"resolved_at":"2026-11-05T16:27:18Z","dns_checked_at":"2026-11-05T16:55:42.000Z","dns_since":"2026-11-05T16:55:42.000Z","findings":[{"id":"f4jyox22ji6jcrfxkuia7","kind":"reported_domain","summary":"Under kingdom-dmc.com, listed by MetaMask","first_observed":"2026-11-05T16:16:21.134Z","first_published":"2026-11-05T16:42:04.725Z","source":"metamask","source_name":"MetaMask","under":"kingdom-dmc.com"}],"url":"https://domainspoof.com/live?show=all&q=old.kingdom-dmc.com"},{"hostname":"old.socialvisor.ru","first_observed":"2026-11-05T16:16:21.134Z","first_published":"2026-11-05T16:42:04.725Z","brands":[],"dns":"resolved","resolved":["91.215.41.91"],"resolved_at":"2026-11-05T16:27:18Z","dns_checked_at":"2026-11-05T16:55:42.000Z","dns_since":"2026-11-05T16:55:42.000Z","findings":[{"id":"f5da5b5gzrs5ylusyrmcq","kind":"reported_domain","summary":"Under socialvisor.ru, reported by PhishDestroy","first_observed":"2026-11-05T16:16:21.134Z","first_published":"2026-11-05T16:42:04.725Z","source":"phishdestroy","source_name":"PhishDestroy","under":"socialvisor.ru","source_url":"https://phishdestroy.io/domain/socialvisor.ru/"}],"url":"https://domainspoof.com/live?show=all&q=old.socialvisor.ru"},{"hostname":"old.tor.taxi","first_observed":"2026-11-05T16:21:08.591Z","first_published":"2026-11-05T16:42:04.725Z","brands":[],"dns":"resolved","resolved":["185.129.100.227"],"resolved_at":"2026-11-05T16:31:35Z","dns_checked_at":"2026-11-05T16:55:42.000Z","dns_since":"2026-11-05T16:55:42.000Z","findings":[{"id":"fg73h4csyrkbhjjhyikf5","kind":"reported_domain","summary":"Under tor.taxi, reported by PhishDestroy","first_observed":"2026-11-05T16:21:08.591Z","first_published":"2026-11-05T16:42:04.725Z","source":"phishdestroy","source_name":"PhishDestroy","under":"tor.taxi","source_url":"https://phishdestroy.io/domain/tor.taxi/"}],"url":"https://domainspoof.com/live?show=all&q=old.tor.taxi"},{"hostname":"orcamento.cookie-stock.com","first_observed":"2026-11-05T16:21:08.591Z","first_published":"2026-11-05T16:42:04.725Z","brands":[],"dns":"resolved","resolved":["185.178.208.177"],"resolved_at":"2026-11-05T16:31:36Z","dns_checked_at":"2026-11-05T16:55:42.000Z","dns_since":"2026-11-05T16:55:42.000Z","findings":[{"id":"f5bd244nacxyo36ch4lze","kind":"reported_domain","summary":"Under cookie-stock.com, reported by PhishDestroy","first_observed":"2026-11-05T16:21:08.591Z","first_published":"2026-11-05T16:42:04.725Z","source":"phishdestroy","source_name":"PhishDestroy","under":"cookie-stock.com","source_url":"https://phishdestroy.io/domain/cookie-stock.com/"}],"url":"https://domainspoof.com/live?show=all&q=orcamento.cookie-stock.com"},{"hostname":"palininnev.store","first_observed":"2026-11-05T16:05:51.778Z","first_published":"2026-11-05T16:42:04.725Z","brands":[],"dns":"no_address","resolved":[],"resolved_at":"2026-11-05T16:06:07Z","dns_checked_at":"2026-11-06T09:18:06.000Z","findings":[{"id":"fwfrgpb7lgrx3k4n3232a","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T16:05:51.778Z","first_published":"2026-11-05T16:42:04.725Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=palininnev.store"},{"hostname":"panel-firelight.xyz","first_observed":"2026-11-05T16:16:21.134Z","first_published":"2026-11-05T16:42:04.725Z","brands":[],"dns":"resolved","resolved":["104.21.28.123","172.67.146.43"],"resolved_at":"2026-11-05T16:27:19Z","dns_checked_at":"2026-11-05T16:55:42.000Z","dns_since":"2026-11-05T16:55:42.000Z","findings":[{"id":"fi5ymtmgv5c23swpbhcg2","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T16:16:21.134Z","first_published":"2026-11-05T16:42:04.725Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=panel-firelight.xyz"},{"hostname":"panel.teamcoinbase.co","first_observed":"2026-11-05T15:36:14.003Z","first_published":"2026-11-05T16:42:04.725Z","brands":[],"dns":"resolved","resolved":["185.53.179.136"],"resolved_at":"2026-11-05T15:48:31Z","dns_checked_at":"2026-11-05T16:55:42.000Z","dns_since":"2026-11-05T16:55:42.000Z","findings":[{"id":"fzyrvvlcvcgxmzwrhmajf","kind":"reported_domain","summary":"Under teamcoinbase.co, reported by PhishDestroy","first_observed":"2026-11-05T15:36:14.003Z","first_published":"2026-11-05T16:42:04.725Z","source":"phishdestroy","source_name":"PhishDestroy","under":"teamcoinbase.co","source_url":"https://phishdestroy.io/domain/teamcoinbase.co/"}],"url":"https://domainspoof.com/live?show=all&q=panel.teamcoinbase.co"},{"hostname":"peaceful-funds.com","first_observed":"2026-11-05T15:41:12.412Z","first_published":"2026-11-05T16:42:04.725Z","brands":[],"dns":"resolved","resolved":["104.21.7.222","172.67.156.125"],"resolved_at":"2026-11-05T15:41:28Z","dns_checked_at":"2026-11-05T16:55:42.000Z","dns_since":"2026-11-05T16:55:42.000Z","findings":[{"id":"fysipfur2wiqrdxzdjhmp","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T15:41:12.412Z","first_published":"2026-11-05T16:42:04.725Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=peaceful-funds.com"},{"hostname":"pheira-it.live","first_observed":"2026-11-05T15:41:12.412Z","first_published":"2026-11-05T16:42:04.725Z","brands":[],"dns":"resolved","resolved":["104.21.66.109","172.67.159.113"],"resolved_at":"2026-11-05T15:41:28Z","dns_checked_at":"2026-11-05T16:55:42.000Z","dns_since":"2026-11-05T16:55:42.000Z","findings":[{"id":"fcbb2zmbsgw67sb43uqkk","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T15:41:12.412Z","first_published":"2026-11-05T16:42:04.725Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=pheira-it.live"},{"hostname":"pigsoft.secureapp.online","first_observed":"2026-11-05T15:51:46.017Z","first_published":"2026-11-05T16:42:04.725Z","brands":[],"dns":"resolved","resolved":["179.61.192.12"],"resolved_at":"2026-11-05T16:01:33Z","dns_checked_at":"2026-11-05T16:55:42.000Z","dns_since":"2026-11-05T16:55:42.000Z","findings":[{"id":"f2adbbhyzm6c4qxogz2hh","kind":"reported_domain","summary":"Under secureapp.online, reported by PhishDestroy","first_observed":"2026-11-05T15:51:46.017Z","first_published":"2026-11-05T16:42:04.725Z","source":"phishdestroy","source_name":"PhishDestroy","under":"secureapp.online","source_url":"https://phishdestroy.io/domain/secureapp.online/"}],"url":"https://domainspoof.com/live?show=all&q=pigsoft.secureapp.online"},{"hostname":"pihole.tatto.li","first_observed":"2026-11-05T15:31:21.422Z","first_published":"2026-11-05T16:42:04.725Z","brands":[],"dns":"resolved","resolved":["138.89.14.10"],"resolved_at":"2026-11-05T15:31:44Z","dns_checked_at":"2026-11-05T16:55:42.000Z","dns_since":"2026-11-05T16:55:42.000Z","findings":[{"id":"fddrivaenl5meygzeducf","kind":"reported_domain","summary":"Under tatto.li, listed by MetaMask","first_observed":"2026-11-05T15:31:21.422Z","first_published":"2026-11-05T16:42:04.725Z","source":"metamask","source_name":"MetaMask","under":"tatto.li"}],"url":"https://domainspoof.com/live?show=all&q=pihole.tatto.li"},{"hostname":"pl-firmowe12324.click","first_observed":"2026-11-05T16:16:21.134Z","first_published":"2026-11-05T16:42:04.725Z","brands":[],"dns":"resolved","resolved":["104.21.4.35","172.67.131.156"],"resolved_at":"2026-11-05T16:27:20Z","dns_checked_at":"2026-11-05T16:55:42.000Z","dns_since":"2026-11-05T16:55:42.000Z","findings":[{"id":"f4qk7obwhqgrdi2r6jtmj","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T16:16:21.134Z","first_published":"2026-11-05T16:42:04.725Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=pl-firmowe12324.click"},{"hostname":"polskiemennlce.pl","first_observed":"2026-11-05T15:41:12.412Z","first_published":"2026-11-05T16:42:04.725Z","brands":[],"dns":"resolved","resolved":["104.21.67.236","172.67.182.245"],"resolved_at":"2026-11-05T15:41:28Z","dns_checked_at":"2026-11-05T16:55:42.000Z","dns_since":"2026-11-05T16:55:42.000Z","findings":[{"id":"fz3eqstjzk3uxfmgm5fc2","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T15:41:12.412Z","first_published":"2026-11-05T16:42:04.725Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=polskiemennlce.pl"},{"hostname":"polyarbiter.app","first_observed":"2026-11-05T16:36:38.552Z","first_published":"2026-11-05T16:42:04.725Z","brands":[],"dns":"resolved","resolved":["104.21.51.40","172.67.220.180"],"resolved_at":"2026-11-05T16:40:02Z","dns_checked_at":"2026-11-05T16:55:42.000Z","dns_since":"2026-11-05T16:55:42.000Z","findings":[{"id":"fyjvvoxqzejfk6xcb3jxt","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T16:36:38.552Z","first_published":"2026-11-05T16:42:04.725Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=polyarbiter.app"},{"hostname":"portal-trezorsuite-eng.pages.dev","first_observed":"2026-11-05T16:36:38.552Z","first_published":"2026-11-05T16:42:04.725Z","brands":[],"dns":"resolved","resolved":["172.66.44.199","172.66.47.57"],"resolved_at":"2026-11-05T16:40:02Z","dns_checked_at":"2026-11-05T16:55:42.000Z","dns_since":"2026-11-05T16:55:42.000Z","findings":[{"id":"fpfsu3ajlpskrnsezz5zl","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T16:36:38.552Z","first_published":"2026-11-05T16:42:04.725Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=portal-trezorsuite-eng.pages.dev"},{"hostname":"pourprevalorange-nl.live","first_observed":"2026-11-05T16:05:51.778Z","first_published":"2026-11-05T16:42:04.725Z","brands":[],"dns":"resolved","resolved":["104.21.15.142","172.67.162.198"],"resolved_at":"2026-11-05T16:06:07Z","dns_checked_at":"2026-11-05T16:55:42.000Z","dns_since":"2026-11-05T16:55:42.000Z","findings":[{"id":"fypwucqbbijmp2a6bo7va","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T16:05:51.778Z","first_published":"2026-11-05T16:42:04.725Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=pourprevalorange-nl.live"},{"hostname":"preview.myprepaidscenter.com","first_observed":"2026-11-05T15:46:31.013Z","first_published":"2026-11-05T16:42:04.725Z","brands":[],"dns":"resolved","resolved":["185.53.179.136"],"resolved_at":"2026-11-05T15:46:52Z","dns_checked_at":"2026-11-05T16:55:42.000Z","dns_since":"2026-11-05T16:55:42.000Z","findings":[{"id":"fyiq2vt7jn44vjctbwymm","kind":"reported_domain","summary":"Under myprepaidscenter.com, listed by MetaMask","first_observed":"2026-11-05T15:46:31.013Z","first_published":"2026-11-05T16:42:04.725Z","source":"metamask","source_name":"MetaMask","under":"myprepaidscenter.com"}],"url":"https://domainspoof.com/live?show=all&q=preview.myprepaidscenter.com"},{"hostname":"prod.aml.legal","first_observed":"2026-11-05T16:26:28.136Z","first_published":"2026-11-05T16:42:04.725Z","brands":[],"dns":"resolved","resolved":["186.2.175.179"],"resolved_at":"2026-11-05T16:34:17Z","dns_checked_at":"2026-11-05T16:55:42.000Z","dns_since":"2026-11-05T16:55:42.000Z","findings":[{"id":"fqjntocmw2hxcrtashrvp","kind":"reported_domain","summary":"Under aml.legal, reported by PhishDestroy","first_observed":"2026-11-05T16:26:28.136Z","first_published":"2026-11-05T16:42:04.725Z","source":"phishdestroy","source_name":"PhishDestroy","under":"aml.legal","source_url":"https://phishdestroy.io/domain/aml.legal/"}],"url":"https://domainspoof.com/live?show=all&q=prod.aml.legal"},{"hostname":"proposal-lighterxyz.pages.dev","first_observed":"2026-11-05T16:10:31.214Z","first_published":"2026-11-05T16:42:04.725Z","brands":[],"dns":"resolved","resolved":["172.66.44.247","172.66.47.9"],"resolved_at":"2026-11-05T16:16:00Z","dns_checked_at":"2026-11-05T16:55:42.000Z","dns_since":"2026-11-05T16:55:42.000Z","findings":[{"id":"fgvmt4326cpjo4pyuavta","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T16:10:31.214Z","first_published":"2026-11-05T16:42:04.725Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=proposal-lighterxyz.pages.dev"},{"hostname":"proprofitlab.pro","first_observed":"2026-11-05T15:41:12.412Z","first_published":"2026-11-05T16:42:04.725Z","brands":[],"dns":"resolved","resolved":["185.62.58.101"],"resolved_at":"2026-11-05T15:41:28Z","dns_checked_at":"2026-11-05T16:55:42.000Z","dns_since":"2026-11-05T16:55:42.000Z","findings":[{"id":"f2tkxjc45u4vj3qip7hbg","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T15:41:12.412Z","first_published":"2026-11-05T16:42:04.725Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=proprofitlab.pro"},{"hostname":"prulkovizan-it.live","first_observed":"2026-11-05T15:41:12.412Z","first_published":"2026-11-05T16:42:04.725Z","brands":[],"dns":"resolved","resolved":["104.21.9.252","172.67.131.50"],"resolved_at":"2026-11-05T15:41:28Z","dns_checked_at":"2026-11-05T16:55:42.000Z","dns_since":"2026-11-05T16:55:42.000Z","findings":[{"id":"fc2xxwx6wv2cq5cd5in7i","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T15:41:12.412Z","first_published":"2026-11-05T16:42:04.725Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=prulkovizan-it.live"},{"hostname":"pttavmbireyselsepetim.com","first_observed":"2026-11-05T15:31:21.422Z","first_published":"2026-11-05T16:42:04.725Z","brands":[],"dns":"resolved","resolved":["104.21.87.203","172.67.145.242"],"resolved_at":"2026-11-05T15:31:45Z","dns_checked_at":"2026-11-05T16:55:42.000Z","dns_since":"2026-11-05T16:55:42.000Z","findings":[{"id":"fvk2sm76zdqlaf5j3y4do","kind":"reported_domain","summary":"Listed by USOM","first_observed":"2026-11-05T15:31:21.422Z","first_published":"2026-11-05T16:42:04.725Z","source":"usom","source_name":"USOM"}],"url":"https://domainspoof.com/live?show=all&q=pttavmbireyselsepetim.com"},{"hostname":"puffer-finance.com","first_observed":"2026-11-05T16:05:51.778Z","first_published":"2026-11-05T16:42:04.725Z","brands":[],"dns":"resolved","resolved":["104.21.80.19","172.67.173.19"],"resolved_at":"2026-11-06T11:41:54Z","dns_checked_at":"2026-11-05T16:55:42.000Z","dns_since":"2026-11-05T16:55:42.000Z","findings":[{"id":"fcjlavx5ubdbz2oo42zt4","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T16:05:51.778Z","first_published":"2026-11-05T16:42:04.725Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=puffer-finance.com"},{"hostname":"pulsera-distribution.fr","first_observed":"2026-11-05T16:00:39.305Z","first_published":"2026-11-05T16:42:04.725Z","brands":[],"dns":"resolved","resolved":[],"resolved_at":"2026-11-05T16:01:10Z","dns_checked_at":"2026-11-05T16:55:42.000Z","dns_since":"2026-11-05T16:55:42.000Z","findings":[{"id":"frwdq4tqjotpmvosarqgh","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T16:00:39.305Z","first_published":"2026-11-05T16:42:04.725Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=pulsera-distribution.fr"},{"hostname":"px34-d443e2-7fv-0pdgm-fr9q.pages.dev","first_observed":"2026-11-05T15:51:46.017Z","first_published":"2026-11-05T16:42:04.725Z","brands":[],"dns":"resolved","resolved":["172.66.44.85","172.66.47.171"],"resolved_at":"2026-11-05T16:01:34Z","dns_checked_at":"2026-11-05T16:55:42.000Z","dns_since":"2026-11-05T16:55:42.000Z","findings":[{"id":"fqc3o4fvpenimgeeyujt3","kind":"reported_domain","summary":"Reported by PhishTank","first_observed":"2026-11-05T15:51:46.017Z","first_published":"2026-11-05T16:42:04.725Z","source":"phishtank","source_name":"PhishTank","source_url":"https://phishtank.org/phish_detail.php?phish_id=9479446"}],"url":"https://domainspoof.com/live?show=all&q=px34-d443e2-7fv-0pdgm-fr9q.pages.dev"},{"hostname":"qazmuro-mpt-zelquvi-c5x9fa37.pages.dev","first_observed":"2026-11-05T15:41:12.412Z","first_published":"2026-11-05T16:42:04.725Z","brands":[],"dns":"resolved","resolved":["172.66.44.100","172.66.47.156"],"resolved_at":"2026-11-05T15:41:28Z","dns_checked_at":"2026-11-05T16:55:42.000Z","dns_since":"2026-11-05T16:55:42.000Z","findings":[{"id":"fozcdvjgdbtkzrfpm5rfu","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T15:41:12.412Z","first_published":"2026-11-05T16:42:04.725Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=qazmuro-mpt-zelquvi-c5x9fa37.pages.dev"},{"hostname":"qwezt.com","first_observed":"2026-11-05T16:26:28.136Z","first_published":"2026-11-05T16:42:04.725Z","brands":[],"dns":"resolved","resolved":["124.121.123.84"],"resolved_at":"2026-11-05T16:34:18Z","dns_checked_at":"2026-11-05T16:55:42.000Z","dns_since":"2026-11-05T16:55:42.000Z","findings":[{"id":"ff43uhvtrbfrsr2thxsnv","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T16:26:28.136Z","first_published":"2026-11-05T16:42:04.725Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=qwezt.com"},{"hostname":"racingfanatic.net","first_observed":"2026-11-05T16:26:28.136Z","first_published":"2026-11-05T16:42:04.725Z","brands":[],"dns":"resolved","resolved":["104.21.64.196","172.67.155.84"],"resolved_at":"2026-11-05T16:34:19Z","dns_checked_at":"2026-11-05T16:55:42.000Z","dns_since":"2026-11-05T16:55:42.000Z","findings":[{"id":"flhtcp5f2vbsqg7kdsjxr","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T16:26:28.136Z","first_published":"2026-11-05T16:42:04.725Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=racingfanatic.net"},{"hostname":"rainbet-au.casino","first_observed":"2026-11-05T16:16:21.134Z","first_published":"2026-11-05T16:42:04.725Z","brands":[],"dns":"resolved","resolved":["104.21.66.172","172.67.162.113"],"resolved_at":"2026-11-05T16:27:24Z","dns_checked_at":"2026-11-05T16:55:42.000Z","dns_since":"2026-11-05T16:55:42.000Z","findings":[{"id":"frazddi2as6npaojvzsc3","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T16:16:21.134Z","first_published":"2026-11-05T16:42:04.725Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=rainbet-au.casino"},{"hostname":"rainbet-online.at","first_observed":"2026-11-05T15:31:21.422Z","first_published":"2026-11-05T16:42:04.725Z","brands":[],"dns":"resolved","resolved":["104.21.32.103","172.67.185.140"],"resolved_at":"2026-11-05T15:31:45Z","dns_checked_at":"2026-11-05T16:55:42.000Z","dns_since":"2026-11-05T16:55:42.000Z","findings":[{"id":"fkqsb3chulspmrpmjtiku","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T15:31:21.422Z","first_published":"2026-11-05T16:42:04.725Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=rainbet-online.at"},{"hostname":"rainbetslogin-org.pages.dev","first_observed":"2026-11-05T16:36:38.552Z","first_published":"2026-11-05T16:42:04.725Z","brands":[],"dns":"resolved","resolved":["172.66.45.22","172.66.46.234"],"resolved_at":"2026-11-05T16:40:03Z","dns_checked_at":"2026-11-05T16:55:42.000Z","dns_since":"2026-11-05T16:55:42.000Z","findings":[{"id":"fv64noscdvsymnfpzlhhc","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T16:36:38.552Z","first_published":"2026-11-05T16:42:04.725Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=rainbetslogin-org.pages.dev"},{"hostname":"rakebiit.com","first_observed":"2026-11-05T16:21:08.591Z","first_published":"2026-11-05T16:42:04.725Z","brands":[],"dns":"resolved","resolved":["104.21.87.131","172.67.143.95"],"resolved_at":"2026-11-05T16:31:37Z","dns_checked_at":"2026-11-05T16:55:42.000Z","dns_since":"2026-11-05T16:55:42.000Z","findings":[{"id":"fv2emnn2xwuolazbdoyrl","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T16:21:08.591Z","first_published":"2026-11-05T16:42:04.725Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/rakebiit.com/"}],"url":"https://domainspoof.com/live?show=all&q=rakebiit.com"},{"hostname":"ramoinvestezzaai-fr.live","first_observed":"2026-11-05T15:36:14.003Z","first_published":"2026-11-05T16:42:04.725Z","brands":[],"dns":"resolved","resolved":["104.21.29.135","172.67.149.55"],"resolved_at":"2026-11-05T15:48:34Z","dns_checked_at":"2026-11-05T16:55:42.000Z","dns_since":"2026-11-05T16:55:42.000Z","findings":[{"id":"fkeososf3rfuidiewy4xy","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T15:36:14.003Z","first_published":"2026-11-05T16:42:04.725Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=ramoinvestezzaai-fr.live"},{"hostname":"ravvasgrup.store","first_observed":"2026-11-05T15:31:21.422Z","first_published":"2026-11-05T16:42:04.725Z","brands":[],"dns":"no_address","resolved":[],"resolved_at":"2026-11-05T15:31:45Z","dns_checked_at":"2026-11-06T09:18:06.000Z","findings":[{"id":"fnurypkfznbhxx5rgbazz","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T15:31:21.422Z","first_published":"2026-11-05T16:42:04.725Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=ravvasgrup.store"},{"hostname":"refund-basenet.com","first_observed":"2026-11-05T16:36:38.552Z","first_published":"2026-11-05T16:42:04.725Z","brands":[],"dns":"no_address","resolved":[],"resolved_at":"2026-11-05T16:40:03Z","dns_checked_at":"2026-11-06T09:18:06.000Z","findings":[{"id":"fp6hinlh73xav3scethck","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T16:36:38.552Z","first_published":"2026-11-05T16:42:04.725Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=refund-basenet.com"},{"hostname":"refurbished.immortalpos.co.za","first_observed":"2026-11-05T15:51:46.017Z","first_published":"2026-11-05T16:42:04.725Z","brands":[],"dns":"resolved","resolved":["104.21.72.30","172.67.174.101"],"resolved_at":"2026-11-05T16:01:36Z","dns_checked_at":"2026-11-05T16:55:42.000Z","dns_since":"2026-11-05T16:55:42.000Z","findings":[{"id":"fl4otnckx54sh7rblnb7v","kind":"reported_domain","summary":"Under immortalpos.co.za, reported by PhishDestroy","first_observed":"2026-11-05T15:51:46.017Z","first_published":"2026-11-05T16:42:04.725Z","source":"phishdestroy","source_name":"PhishDestroy","under":"immortalpos.co.za","source_url":"https://phishdestroy.io/domain/immortalpos.co.za/"}],"url":"https://domainspoof.com/live?show=all&q=refurbished.immortalpos.co.za"},{"hostname":"registry.socialvisor.ru","first_observed":"2026-11-05T16:26:28.136Z","first_published":"2026-11-05T16:42:04.725Z","brands":[],"dns":"resolved","resolved":["91.215.41.91"],"resolved_at":"2026-11-05T16:34:19Z","dns_checked_at":"2026-11-05T16:55:42.000Z","dns_since":"2026-11-05T16:55:42.000Z","findings":[{"id":"fkzybkev37lryvrtysahx","kind":"reported_domain","summary":"Under socialvisor.ru, reported by PhishDestroy","first_observed":"2026-11-05T16:26:28.136Z","first_published":"2026-11-05T16:42:04.725Z","source":"phishdestroy","source_name":"PhishDestroy","under":"socialvisor.ru","source_url":"https://phishdestroy.io/domain/socialvisor.ru/"}],"url":"https://domainspoof.com/live?show=all&q=registry.socialvisor.ru"},{"hostname":"remote.socialvisor.ru","first_observed":"2026-11-05T16:36:38.552Z","first_published":"2026-11-05T16:42:04.725Z","brands":[],"dns":"resolved","resolved":["91.215.41.91"],"resolved_at":"2026-11-05T16:40:03Z","dns_checked_at":"2026-11-05T16:55:42.000Z","dns_since":"2026-11-05T16:55:42.000Z","findings":[{"id":"fuc7oteu4p7jya5ioapap","kind":"reported_domain","summary":"Under socialvisor.ru, reported by PhishDestroy","first_observed":"2026-11-05T16:36:38.552Z","first_published":"2026-11-05T16:42:04.725Z","source":"phishdestroy","source_name":"PhishDestroy","under":"socialvisor.ru","source_url":"https://phishdestroy.io/domain/socialvisor.ru/"}],"url":"https://domainspoof.com/live?show=all&q=remote.socialvisor.ru"},{"hostname":"renda-do-povo-pt.live","first_observed":"2026-11-05T15:31:21.422Z","first_published":"2026-11-05T16:42:04.725Z","brands":[],"dns":"resolved","resolved":["104.21.63.226","172.67.172.91"],"resolved_at":"2026-11-05T15:31:45Z","dns_checked_at":"2026-11-05T16:55:42.000Z","dns_since":"2026-11-05T16:55:42.000Z","findings":[{"id":"fkq4vccjen2txyf3lv6fj","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T15:31:21.422Z","first_published":"2026-11-05T16:42:04.725Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=renda-do-povo-pt.live"},{"hostname":"rendadopovo-pt.live","first_observed":"2026-11-05T16:26:28.136Z","first_published":"2026-11-05T16:42:04.725Z","brands":[],"dns":"resolved","resolved":["104.21.87.233","172.67.148.106"],"resolved_at":"2026-11-05T16:34:19Z","dns_checked_at":"2026-11-05T16:55:42.000Z","dns_since":"2026-11-05T16:55:42.000Z","findings":[{"id":"fegkqtyjfl2n5khtm6rdz","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T16:26:28.136Z","first_published":"2026-11-05T16:42:04.725Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=rendadopovo-pt.live"},{"hostname":"rendifelsgelder-de.live","first_observed":"2026-11-05T16:21:08.591Z","first_published":"2026-11-05T16:42:04.725Z","brands":[],"dns":"resolved","resolved":["104.21.89.9","172.67.155.126"],"resolved_at":"2026-11-05T16:31:38Z","dns_checked_at":"2026-11-05T16:55:42.000Z","dns_since":"2026-11-05T16:55:42.000Z","findings":[{"id":"fzaxoyps6hmgb74blcvg4","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T16:21:08.591Z","first_published":"2026-11-05T16:42:04.725Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=rendifelsgelder-de.live"},{"hostname":"reportdmca-x.com","first_observed":"2026-11-05T16:16:21.134Z","first_published":"2026-11-05T16:42:04.725Z","brands":[],"dns":"no_address","resolved":[],"resolved_at":"2026-11-05T16:27:25Z","dns_checked_at":"2026-11-06T09:18:06.000Z","findings":[{"id":"fzargq5mcpnxvzl6254a3","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T16:16:21.134Z","first_published":"2026-11-05T16:42:04.725Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=reportdmca-x.com"},{"hostname":"research.webnostra.pro","first_observed":"2026-11-05T16:26:28.136Z","first_published":"2026-11-05T16:42:04.725Z","brands":[],"dns":"resolved","resolved":["134.209.110.101"],"resolved_at":"2026-11-05T16:34:19Z","dns_checked_at":"2026-11-05T16:55:42.000Z","dns_since":"2026-11-05T16:55:42.000Z","findings":[{"id":"fyvdio2mvrbqdgxxaevit","kind":"reported_domain","summary":"Under webnostra.pro, reported by PhishDestroy","first_observed":"2026-11-05T16:26:28.136Z","first_published":"2026-11-05T16:42:04.725Z","source":"phishdestroy","source_name":"PhishDestroy","under":"webnostra.pro","source_url":"https://phishdestroy.io/domain/webnostra.pro/"}],"url":"https://domainspoof.com/live?show=all&q=research.webnostra.pro"},{"hostname":"reservationstep-booking.com","first_observed":"2026-11-05T16:10:31.214Z","first_published":"2026-11-05T16:42:04.725Z","brands":[],"dns":"resolved","resolved":["104.21.50.102","172.67.204.184"],"resolved_at":"2026-11-05T16:16:03Z","dns_checked_at":"2026-11-05T16:55:42.000Z","dns_since":"2026-11-05T16:55:42.000Z","findings":[{"id":"f7hvtak7ff7y2oshi2wao","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T16:10:31.214Z","first_published":"2026-11-05T16:42:04.725Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=reservationstep-booking.com"},{"hostname":"reserve-protocol.com","first_observed":"2026-11-05T16:05:51.778Z","first_published":"2026-11-05T16:42:04.725Z","brands":[],"dns":"resolved","resolved":["104.21.92.12","172.67.184.126"],"resolved_at":"2026-11-06T11:47:01Z","dns_checked_at":"2026-11-05T16:55:42.000Z","dns_since":"2026-11-05T16:55:42.000Z","findings":[{"id":"fy6kywqps3h52jkr6aqtg","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T16:05:51.778Z","first_published":"2026-11-05T16:42:04.725Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=reserve-protocol.com"},{"hostname":"rks.keylines.net.in","first_observed":"2026-11-05T15:46:31.013Z","first_published":"2026-11-05T16:42:04.725Z","brands":[],"dns":"resolved","resolved":["157.15.130.67"],"resolved_at":"2026-11-05T15:46:52Z","dns_checked_at":"2026-11-05T16:55:42.000Z","dns_since":"2026-11-05T16:55:42.000Z","findings":[{"id":"fnarvp4blm3k3lvukj6ql","kind":"reported_domain","summary":"Under keylines.net.in, listed by CERT Polska","first_observed":"2026-11-05T15:46:31.013Z","first_published":"2026-11-05T16:42:04.725Z","source":"cert_polska","source_name":"CERT Polska","under":"keylines.net.in"}],"url":"https://domainspoof.com/live?show=all&q=rks.keylines.net.in"},{"hostname":"robinhoodhelp.net","first_observed":"2026-11-05T16:34:19.405Z","first_published":"2026-11-05T16:42:04.725Z","brands":[{"id":"robinhood","name":"Robinhood","url":"https://domainspoof.com/brands/robinhood"}],"dns":"resolved","resolved":["84.16.249.171"],"resolved_at":"2026-11-05T16:55:42Z","dns_checked_at":"2026-11-05T16:55:42.000Z","dns_since":"2026-11-05T16:55:42.000Z","findings":[{"id":"f2l3eijm6rhimwbh2mmpp","kind":"phishing_infrastructure","summary":"Resolved to 84.16.249.171, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T16:34:19.405Z","first_published":"2026-11-05T16:42:04.725Z","address":"84.16.249.171","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/robinhood"},{"hostname":"roospincasino-au.net","first_observed":"2026-11-05T15:51:46.017Z","first_published":"2026-11-05T16:42:04.725Z","brands":[],"dns":"resolved","resolved":["104.21.33.152","172.67.146.136"],"resolved_at":"2026-11-05T16:01:37Z","dns_checked_at":"2026-11-05T16:55:42.000Z","dns_since":"2026-11-05T16:55:42.000Z","findings":[{"id":"fgamyp4xcr6qq6z5cip6f","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T15:51:46.017Z","first_published":"2026-11-05T16:42:04.725Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/roospincasino-au.net/"}],"url":"https://domainspoof.com/live?show=all&q=roospincasino-au.net"},{"hostname":"sandbox.socialvisor.ru","first_observed":"2026-11-05T16:21:08.591Z","first_published":"2026-11-05T16:42:04.725Z","brands":[],"dns":"resolved","resolved":["91.215.41.91"],"resolved_at":"2026-11-05T16:31:38Z","dns_checked_at":"2026-11-05T16:55:42.000Z","dns_since":"2026-11-05T16:55:42.000Z","findings":[{"id":"fyzequyjuplljlhk6kp3r","kind":"reported_domain","summary":"Under socialvisor.ru, reported by PhishDestroy","first_observed":"2026-11-05T16:21:08.591Z","first_published":"2026-11-05T16:42:04.725Z","source":"phishdestroy","source_name":"PhishDestroy","under":"socialvisor.ru","source_url":"https://phishdestroy.io/domain/socialvisor.ru/"}],"url":"https://domainspoof.com/live?show=all&q=sandbox.socialvisor.ru"},{"hostname":"scaleup.trygoflex.com","first_observed":"2026-11-05T16:00:39.305Z","first_published":"2026-11-05T16:42:04.725Z","brands":[],"dns":"resolved","resolved":["104.21.16.219","172.67.216.63"],"resolved_at":"2026-11-05T16:01:10Z","dns_checked_at":"2026-11-05T16:55:42.000Z","dns_since":"2026-11-05T16:55:42.000Z","findings":[{"id":"f7yz3w6jipwgwpmygosg2","kind":"reported_domain","summary":"Under trygoflex.com, reported by PhishDestroy","first_observed":"2026-11-05T16:00:39.305Z","first_published":"2026-11-05T16:42:04.725Z","source":"phishdestroy","source_name":"PhishDestroy","under":"trygoflex.com","source_url":"https://phishdestroy.io/domain/trygoflex.com/"}],"url":"https://domainspoof.com/live?show=all&q=scaleup.trygoflex.com"},{"hostname":"schmidt.wadevirgil.ezgateway.net","first_observed":"2026-11-05T16:10:31.214Z","first_published":"2026-11-05T16:42:04.725Z","brands":[],"dns":"resolved","resolved":["172.66.45.48","172.66.46.208"],"resolved_at":"2026-11-05T16:16:07Z","dns_checked_at":"2026-11-05T16:55:42.000Z","dns_since":"2026-11-05T16:55:42.000Z","findings":[{"id":"fmw6h7jycvzvhwcbxo27d","kind":"reported_domain","summary":"Under ezgateway.net, listed by USOM","first_observed":"2026-11-05T16:10:31.214Z","first_published":"2026-11-05T16:42:04.725Z","source":"usom","source_name":"USOM","under":"ezgateway.net"}],"url":"https://domainspoof.com/live?show=all&q=schmidt.wadevirgil.ezgateway.net"},{"hostname":"secure.aml.legal","first_observed":"2026-11-05T16:26:28.136Z","first_published":"2026-11-05T16:42:04.725Z","brands":[],"dns":"resolved","resolved":["186.2.175.179"],"resolved_at":"2026-11-05T16:34:21Z","dns_checked_at":"2026-11-05T16:55:42.000Z","dns_since":"2026-11-05T16:55:42.000Z","findings":[{"id":"fqhgkrrwoux5lq7jwqmnr","kind":"reported_domain","summary":"Under aml.legal, reported by PhishDestroy","first_observed":"2026-11-05T16:26:28.136Z","first_published":"2026-11-05T16:42:04.725Z","source":"phishdestroy","source_name":"PhishDestroy","under":"aml.legal","source_url":"https://phishdestroy.io/domain/aml.legal/"}],"url":"https://domainspoof.com/live?show=all&q=secure.aml.legal"},{"hostname":"shift2ucodrix-de.live","first_observed":"2026-11-05T16:00:39.305Z","first_published":"2026-11-05T16:42:04.725Z","brands":[],"dns":"resolved","resolved":["104.21.42.162","172.67.163.137"],"resolved_at":"2026-11-05T16:01:11Z","dns_checked_at":"2026-11-05T16:55:42.000Z","dns_since":"2026-11-05T16:55:42.000Z","findings":[{"id":"fc54gc4bn6a2b24wmamcs","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T16:00:39.305Z","first_published":"2026-11-05T16:42:04.725Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=shift2ucodrix-de.live"},{"hostname":"shiftcodrix-de.live","first_observed":"2026-11-05T16:00:39.305Z","first_published":"2026-11-05T16:42:04.725Z","brands":[],"dns":"resolved","resolved":["104.21.29.123","172.67.148.253"],"resolved_at":"2026-11-05T16:01:11Z","dns_checked_at":"2026-11-05T16:55:42.000Z","dns_since":"2026-11-05T16:55:42.000Z","findings":[{"id":"f3ojtuhy2ouk2dkzfmqyb","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T16:00:39.305Z","first_published":"2026-11-05T16:42:04.725Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=shiftcodrix-de.live"},{"hostname":"siranogroup.biz","first_observed":"2026-11-05T16:10:31.214Z","first_published":"2026-11-05T16:42:04.725Z","brands":[],"dns":"resolved","resolved":["104.21.1.50","172.67.128.138"],"resolved_at":"2026-11-05T16:16:16Z","dns_checked_at":"2026-11-05T16:55:42.000Z","dns_since":"2026-11-05T16:55:42.000Z","findings":[{"id":"fwewx76jpuz4fo6s4itul","kind":"reported_domain","summary":"Listed by FSMA as imitating Sirano Group (clone of an authorised firm)","first_observed":"2026-11-05T16:10:31.214Z","first_published":"2026-11-05T16:42:04.725Z","source":"fsma","source_name":"FSMA","claim":{"brand":"Sirano Group","category":"clone of an authorised firm"}}],"url":"https://domainspoof.com/live?show=all&q=siranogroup.biz"},{"hostname":"sivodex.com","first_observed":"2026-11-05T15:41:12.412Z","first_published":"2026-11-05T16:42:04.725Z","brands":[],"dns":"resolved","resolved":["104.21.46.97","172.67.137.88"],"resolved_at":"2026-11-05T15:42:01Z","dns_checked_at":"2026-11-05T16:55:42.000Z","dns_since":"2026-11-05T16:55:42.000Z","findings":[{"id":"ffferwdezr62ut7v2eqbk","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T15:41:12.412Z","first_published":"2026-11-05T16:42:04.725Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/sivodex.com/"}],"url":"https://domainspoof.com/live?show=all&q=sivodex.com"},{"hostname":"skrovendiq-it.live","first_observed":"2026-11-05T16:26:28.136Z","first_published":"2026-11-05T16:42:04.725Z","brands":[],"dns":"resolved","resolved":["104.21.95.26","172.67.169.75"],"resolved_at":"2026-11-05T16:27:08Z","dns_checked_at":"2026-11-05T16:55:42.000Z","dns_since":"2026-11-05T16:55:42.000Z","findings":[{"id":"fjkzt6kensx4tjjzfonqy","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T16:26:28.136Z","first_published":"2026-11-05T16:42:04.725Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=skrovendiq-it.live"},{"hostname":"slon-1at.cc","first_observed":"2026-11-05T15:51:46.017Z","first_published":"2026-11-05T16:42:04.725Z","brands":[],"dns":"resolved","resolved":["185.226.93.186"],"resolved_at":"2026-11-05T16:01:38Z","dns_checked_at":"2026-11-05T16:55:42.000Z","dns_since":"2026-11-05T16:55:42.000Z","findings":[{"id":"fkhdc3a4d3jpol4r4s5dw","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T15:51:46.017Z","first_published":"2026-11-05T16:42:04.725Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/slon-1at.cc/"}],"url":"https://domainspoof.com/live?show=all&q=slon-1at.cc"},{"hostname":"slotocash.co","first_observed":"2026-11-05T15:56:59.990Z","first_published":"2026-11-05T16:42:04.725Z","brands":[],"dns":"resolved","resolved":["104.21.31.117","172.67.176.124"],"resolved_at":"2026-11-05T16:04:20Z","dns_checked_at":"2026-11-05T16:55:42.000Z","dns_since":"2026-11-05T16:55:42.000Z","findings":[{"id":"f5zh656fc4fyq5sghbhzc","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T15:56:59.990Z","first_published":"2026-11-05T16:42:04.725Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=slotocash.co"},{"hostname":"sm.apps.bds-it.com","first_observed":"2026-11-05T16:21:08.591Z","first_published":"2026-11-05T16:42:04.725Z","brands":[],"dns":"resolved","resolved":["82.100.233.94"],"resolved_at":"2026-11-05T16:31:42Z","dns_checked_at":"2026-11-05T16:55:42.000Z","dns_since":"2026-11-05T16:55:42.000Z","findings":[{"id":"fiazxm7ca4qfanukffflb","kind":"reported_domain","summary":"Under bds-it.com, listed by MetaMask","first_observed":"2026-11-05T16:21:08.591Z","first_published":"2026-11-05T16:42:04.725Z","source":"metamask","source_name":"MetaMask","under":"bds-it.com"}],"url":"https://domainspoof.com/live?show=all&q=sm.apps.bds-it.com"},{"hostname":"soccersquidwing.com","first_observed":"2026-11-05T16:00:39.305Z","first_published":"2026-11-05T16:42:04.725Z","brands":[],"dns":"resolved","resolved":["104.21.40.182","172.67.137.87"],"resolved_at":"2026-11-05T16:01:11Z","dns_checked_at":"2026-11-05T16:55:42.000Z","dns_since":"2026-11-05T16:55:42.000Z","findings":[{"id":"ffgtcdafqlbdslfhhpfyb","kind":"reported_domain","summary":"Listed by USOM","first_observed":"2026-11-05T16:00:39.305Z","first_published":"2026-11-05T16:42:04.725Z","source":"usom","source_name":"USOM"}],"url":"https://domainspoof.com/live?show=all&q=soccersquidwing.com"},{"hostname":"sovryn.net","first_observed":"2026-11-05T16:05:51.778Z","first_published":"2026-11-05T16:42:04.725Z","brands":[],"dns":"resolved","resolved":["104.21.60.149","172.67.197.202"],"resolved_at":"2026-11-06T11:47:02Z","dns_checked_at":"2026-11-05T16:55:42.000Z","dns_since":"2026-11-05T16:55:42.000Z","findings":[{"id":"flpfrjeze7mfmf75xdwtz","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T16:05:51.778Z","first_published":"2026-11-05T16:42:04.725Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=sovryn.net"},{"hostname":"sp19ct7-durek-biz-falem-vonis.pages.dev","first_observed":"2026-11-05T16:21:08.591Z","first_published":"2026-11-05T16:42:04.725Z","brands":[],"dns":"resolved","resolved":["172.66.44.200","172.66.47.56"],"resolved_at":"2026-11-05T16:31:42Z","dns_checked_at":"2026-11-05T16:55:42.000Z","dns_since":"2026-11-05T16:55:42.000Z","findings":[{"id":"f5bzfg7ipapg6jamwgpse","kind":"reported_domain","summary":"Reported by PhishTank","first_observed":"2026-11-05T16:21:08.591Z","first_published":"2026-11-05T16:42:04.725Z","source":"phishtank","source_name":"PhishTank","source_url":"https://phishtank.org/phish_detail.php?phish_id=9479480"}],"url":"https://domainspoof.com/live?show=all&q=sp19ct7-durek-biz-falem-vonis.pages.dev"},{"hostname":"sp19ct7-durex-biz-sarem-konil.pages.dev","first_observed":"2026-11-05T15:31:21.422Z","first_published":"2026-11-05T16:42:04.725Z","brands":[],"dns":"resolved","resolved":["172.66.44.56","172.66.47.200"],"resolved_at":"2026-11-05T15:31:46Z","dns_checked_at":"2026-11-05T16:55:42.000Z","dns_since":"2026-11-05T16:55:42.000Z","findings":[{"id":"fa5bpp33ghhkitqqyysi6","kind":"reported_domain","summary":"Reported by PhishTank","first_observed":"2026-11-05T15:31:21.422Z","first_published":"2026-11-05T16:42:04.725Z","source":"phishtank","source_name":"PhishTank","source_url":"https://phishtank.org/phish_detail.php?phish_id=9479486"}],"url":"https://domainspoof.com/live?show=all&q=sp19ct7-durex-biz-sarem-konil.pages.dev"},{"hostname":"sp19ct7-mafor-biz-surex-kelin.pages.dev","first_observed":"2026-11-05T15:46:31.013Z","first_published":"2026-11-05T16:42:04.725Z","brands":[],"dns":"resolved","resolved":["172.66.45.43","172.66.46.213"],"resolved_at":"2026-11-05T15:46:53Z","dns_checked_at":"2026-11-05T16:55:42.000Z","dns_since":"2026-11-05T16:55:42.000Z","findings":[{"id":"fnyhqcw76ygg43u6wh7hj","kind":"reported_domain","summary":"Reported by PhishTank","first_observed":"2026-11-05T15:46:31.013Z","first_published":"2026-11-05T16:42:04.725Z","source":"phishtank","source_name":"PhishTank","source_url":"https://phishtank.org/phish_detail.php?phish_id=9479570"}],"url":"https://domainspoof.com/live?show=all&q=sp19ct7-mafor-biz-surex-kelin.pages.dev"},{"hostname":"spacexipotrade.com","first_observed":"2026-11-05T16:16:21.134Z","first_published":"2026-11-05T16:42:04.725Z","brands":[],"dns":"resolved","resolved":["162.55.65.66"],"resolved_at":"2026-11-05T16:27:46Z","dns_checked_at":"2026-11-05T16:55:42.000Z","dns_since":"2026-11-05T16:55:42.000Z","findings":[{"id":"fbx4iwpoa5vaicof6wvo7","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T16:16:21.134Z","first_published":"2026-11-05T16:42:04.725Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/spacexipotrade.com/"}],"url":"https://domainspoof.com/live?show=all&q=spacexipotrade.com"},{"hostname":"spark-crypto.com","first_observed":"2026-11-05T16:16:21.134Z","first_published":"2026-11-05T16:42:04.725Z","brands":[],"dns":"resolved","resolved":["104.21.30.82","172.67.172.131"],"resolved_at":"2026-11-05T16:27:46Z","dns_checked_at":"2026-11-05T16:55:42.000Z","dns_since":"2026-11-05T16:55:42.000Z","findings":[{"id":"fu4wuvsnzfxwklsszkkf5","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T16:16:21.134Z","first_published":"2026-11-05T16:42:04.725Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=spark-crypto.com"},{"hostname":"stellar-bonusstorm.click","first_observed":"2026-11-05T16:00:39.305Z","first_published":"2026-11-05T16:42:04.725Z","brands":[],"dns":"resolved","resolved":["104.21.16.57","172.67.210.34"],"resolved_at":"2026-11-05T16:01:11Z","dns_checked_at":"2026-11-05T16:55:42.000Z","dns_since":"2026-11-05T16:55:42.000Z","findings":[{"id":"fqbj47eph2lhtmpqkutnv","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T16:00:39.305Z","first_published":"2026-11-05T16:42:04.725Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=stellar-bonusstorm.click"},{"hostname":"store-www-dofus.com","first_observed":"2026-11-05T16:26:28.136Z","first_published":"2026-11-05T16:42:04.725Z","brands":[{"id":"dofus","name":"Dofus","url":"https://domainspoof.com/brands/dofus"}],"dns":"resolved","resolved":["185.53.179.136"],"resolved_at":"2026-11-05T16:27:08Z","dns_checked_at":"2026-11-05T16:55:42.000Z","dns_since":"2026-11-05T16:55:42.000Z","findings":[{"id":"fm55lljm6n2v5f5avlriu","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T16:26:28.136Z","first_published":"2026-11-05T16:42:04.725Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/brands/dofus"},{"hostname":"swap-fi.surf","first_observed":"2026-11-05T15:56:59.990Z","first_published":"2026-11-05T16:42:04.725Z","brands":[],"dns":"no_address","resolved":[],"resolved_at":"2026-11-05T16:04:20Z","dns_checked_at":"2026-11-06T09:18:06.000Z","findings":[{"id":"fi2rfejo5ibokjv7yc6ps","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T15:56:59.990Z","first_published":"2026-11-05T16:42:04.725Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=swap-fi.surf"},{"hostname":"tarmkoparmatifmarket.blogdns.com","first_observed":"2026-11-05T15:47:02.119Z","first_published":"2026-11-05T16:42:04.725Z","brands":[],"dns":"resolved","resolved":["13.63.158.187"],"resolved_at":"2026-11-05T15:47:43Z","dns_checked_at":"2026-11-05T16:55:42.000Z","dns_since":"2026-11-05T16:55:42.000Z","findings":[{"id":"f4gozsdx5hdhu6dwmwspc","kind":"reported_domain","summary":"Listed by USOM","first_observed":"2026-11-05T15:47:02.119Z","first_published":"2026-11-05T16:42:04.725Z","source":"usom","source_name":"USOM"}],"url":"https://domainspoof.com/live?show=all&q=tarmkoparmatifmarket.blogdns.com"},{"hostname":"tarnfundvane.online","first_observed":"2026-11-05T15:41:12.412Z","first_published":"2026-11-05T16:42:04.725Z","brands":[],"dns":"resolved","resolved":["104.21.41.99","172.67.164.44"],"resolved_at":"2026-11-05T15:42:08Z","dns_checked_at":"2026-11-05T16:55:42.000Z","dns_since":"2026-11-05T16:55:42.000Z","findings":[{"id":"fz4t4sxvdjpnzs4r2iw7d","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T15:41:12.412Z","first_published":"2026-11-05T16:42:04.725Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=tarnfundvane.online"},{"hostname":"tidebreak.xyz","first_observed":"2026-11-05T15:46:31.013Z","first_published":"2026-11-05T16:42:04.725Z","brands":[],"dns":"resolved","resolved":["104.21.63.120","172.67.145.119"],"resolved_at":"2026-11-06T04:01:00Z","dns_checked_at":"2026-11-05T16:55:42.000Z","dns_since":"2026-11-05T16:55:42.000Z","findings":[{"id":"f3c6qqkqy655gqr6f4wbs","kind":"reported_domain","summary":"Listed by USOM","first_observed":"2026-11-05T15:46:31.013Z","first_published":"2026-11-05T16:42:04.725Z","source":"usom","source_name":"USOM"}],"url":"https://domainspoof.com/live?show=all&q=tidebreak.xyz"},{"hostname":"tiktok888.xyz","first_observed":"2026-11-05T15:36:14.003Z","first_published":"2026-11-05T16:42:04.725Z","brands":[{"id":"tiktok","name":"TikTok","url":"https://domainspoof.com/brands/tiktok"}],"dns":"no_address","resolved":[],"resolved_at":"2026-11-06T15:49:14Z","dns_checked_at":"2026-11-05T16:55:42.000Z","findings":[{"id":"fou2ziv5nqety7pmjuqsa","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T15:36:14.003Z","first_published":"2026-11-05T16:42:04.725Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/brands/tiktok"},{"hostname":"tiplifeshortfilm.com","first_observed":"2026-11-05T15:41:12.412Z","first_published":"2026-11-05T16:42:04.725Z","brands":[],"dns":"resolved","resolved":["51.178.163.93"],"resolved_at":"2026-11-05T15:42:08Z","dns_checked_at":"2026-11-05T16:55:42.000Z","dns_since":"2026-11-05T16:55:42.000Z","findings":[{"id":"f3sa6o5fxmkuyypetjtkj","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T15:41:12.412Z","first_published":"2026-11-05T16:42:04.725Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/tiplifeshortfilm.com/"}],"url":"https://domainspoof.com/live?show=all&q=tiplifeshortfilm.com"},{"hostname":"tkmall-globas.com","first_observed":"2026-11-05T15:36:14.003Z","first_published":"2026-11-05T16:42:04.725Z","brands":[],"dns":"resolved","resolved":["104.21.85.162","172.67.207.163"],"resolved_at":"2026-11-05T15:48:44Z","dns_checked_at":"2026-11-05T16:55:42.000Z","dns_since":"2026-11-05T16:55:42.000Z","findings":[{"id":"fqc7snz2tlihqctphqynt","kind":"reported_domain","summary":"Listed by NPA 165 (e-commerce)","first_observed":"2026-11-05T15:36:14.003Z","first_published":"2026-11-05T16:42:04.725Z","source":"npa","source_name":"NPA 165","claim":{"category":"e-commerce"}}],"url":"https://domainspoof.com/live?show=all&q=tkmall-globas.com"},{"hostname":"trezer-suite-enn.pages.dev","first_observed":"2026-11-05T16:16:21.134Z","first_published":"2026-11-05T16:42:04.725Z","brands":[],"dns":"resolved","resolved":["172.66.44.99","172.66.47.157"],"resolved_at":"2026-11-05T16:16:44Z","dns_checked_at":"2026-11-05T16:55:42.000Z","dns_since":"2026-11-05T16:55:42.000Z","findings":[{"id":"fe4jy4miuptdospijzitx","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T16:16:21.134Z","first_published":"2026-11-05T16:42:04.725Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=trezer-suite-enn.pages.dev"},{"hostname":"trezorcheckup.io","first_observed":"2026-11-05T16:10:31.214Z","first_published":"2026-11-05T16:42:04.725Z","brands":[],"dns":"resolved","resolved":["104.21.52.100","172.67.198.16"],"resolved_at":"2026-11-05T16:16:27Z","dns_checked_at":"2026-11-05T16:55:42.000Z","dns_since":"2026-11-05T16:55:42.000Z","findings":[{"id":"fysz4s2hayzoecsqlphxk","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T16:10:31.214Z","first_published":"2026-11-05T16:42:04.725Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=trezorcheckup.io"},{"hostname":"turbo200codrix.shop","first_observed":"2026-11-05T15:46:31.013Z","first_published":"2026-11-05T16:42:04.725Z","brands":[],"dns":"resolved","resolved":["104.21.36.146","172.67.195.28"],"resolved_at":"2026-11-05T15:46:53Z","dns_checked_at":"2026-11-05T16:55:42.000Z","dns_since":"2026-11-05T16:55:42.000Z","findings":[{"id":"fexdfozfugl7lh3u5etjd","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T15:46:31.013Z","first_published":"2026-11-05T16:42:04.725Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=turbo200codrix.shop"},{"hostname":"ukharborstoneway.com","first_observed":"2026-11-05T16:00:39.305Z","first_published":"2026-11-05T16:42:04.725Z","brands":[],"dns":"resolved","resolved":["104.21.18.6","172.67.179.30"],"resolved_at":"2026-11-05T16:01:12Z","dns_checked_at":"2026-11-05T16:55:43.000Z","dns_since":"2026-11-05T16:55:43.000Z","findings":[{"id":"ffa2fbpdydmclwwogikto","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T16:00:39.305Z","first_published":"2026-11-05T16:42:04.725Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=ukharborstoneway.com"},{"hostname":"unbes.com","first_observed":"2026-11-05T16:31:21.698Z","first_published":"2026-11-05T16:42:04.725Z","brands":[],"dns":"resolved","resolved":["167.172.251.50"],"resolved_at":"2026-11-05T16:31:47Z","dns_checked_at":"2026-11-05T16:55:43.000Z","dns_since":"2026-11-05T16:55:43.000Z","findings":[{"id":"fbrsl23yf6qvdr6f4bgv4","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T16:31:21.698Z","first_published":"2026-11-05T16:42:04.725Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=unbes.com"},{"hostname":"update.pochta.216e6ta6fwh9gr9r.cdek.rhxyvcq9vvts2ld9.r.mail.leankoala.com","first_observed":"2026-11-05T15:46:53.637Z","first_published":"2026-11-05T16:42:04.725Z","brands":[{"id":"russian-post","name":"Russian Post","url":"https://domainspoof.com/brands/russian-post"}],"dns":"resolved","resolved":["172.246.243.65"],"resolved_at":"2026-11-05T16:55:43Z","dns_checked_at":"2026-11-05T16:55:43.000Z","dns_since":"2026-11-05T16:55:43.000Z","findings":[{"id":"f5ezanvo2vthggkdx4yhq","kind":"phishing_infrastructure","summary":"Resolved to 172.246.243.65, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T15:46:53.637Z","first_published":"2026-11-05T16:42:04.725Z","address":"172.246.243.65","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/russian-post"},{"hostname":"uphold.markets","first_observed":"2026-11-05T15:36:14.003Z","first_published":"2026-11-05T16:42:04.725Z","brands":[],"dns":"resolved","resolved":["104.21.35.5","172.67.210.114"],"resolved_at":"2026-11-05T15:48:47Z","dns_checked_at":"2026-11-05T16:55:43.000Z","dns_since":"2026-11-05T16:55:43.000Z","findings":[{"id":"fprakeaiug6ntkmqsyfy2","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T15:36:14.003Z","first_published":"2026-11-05T16:42:04.725Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=uphold.markets"},{"hostname":"us-web03.us","first_observed":"2026-11-05T16:00:39.305Z","first_published":"2026-11-05T16:42:04.725Z","brands":[],"dns":"resolved","resolved":["144.31.212.92"],"resolved_at":"2026-11-05T16:01:12Z","dns_checked_at":"2026-11-05T16:55:43.000Z","dns_since":"2026-11-05T16:55:43.000Z","findings":[{"id":"fpb4smklortn7mmun2d7v","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T16:00:39.305Z","first_published":"2026-11-05T16:42:04.725Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=us-web03.us"},{"hostname":"usual-money.net","first_observed":"2026-11-05T16:26:28.136Z","first_published":"2026-11-05T16:42:04.725Z","brands":[],"dns":"resolved","resolved":["104.21.59.12","172.67.167.103"],"resolved_at":"2026-11-05T16:27:08Z","dns_checked_at":"2026-11-05T16:55:43.000Z","dns_since":"2026-11-05T16:55:43.000Z","findings":[{"id":"fo3gst3libycdewebnd5b","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T16:26:28.136Z","first_published":"2026-11-05T16:42:04.725Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=usual-money.net"},{"hostname":"usweb0007zoom.us","first_observed":"2026-11-05T16:31:21.698Z","first_published":"2026-11-05T16:42:04.725Z","brands":[],"dns":"resolved","resolved":["104.21.9.177","172.67.161.37"],"resolved_at":"2026-11-05T16:31:47Z","dns_checked_at":"2026-11-05T16:55:43.000Z","dns_since":"2026-11-05T16:55:43.000Z","findings":[{"id":"f7hbjmvkyps5q6y4p5y7e","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T16:31:21.698Z","first_published":"2026-11-05T16:42:04.725Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=usweb0007zoom.us"},{"hostname":"v1.kingdom-dmc.com","first_observed":"2026-11-05T16:16:21.134Z","first_published":"2026-11-05T16:42:04.725Z","brands":[],"dns":"resolved","resolved":["185.215.4.42"],"resolved_at":"2026-11-05T16:16:44Z","dns_checked_at":"2026-11-05T16:55:43.000Z","dns_since":"2026-11-05T16:55:43.000Z","findings":[{"id":"fvkh5otncbi76zv7dd5uj","kind":"reported_domain","summary":"Under kingdom-dmc.com, listed by MetaMask","first_observed":"2026-11-05T16:16:21.134Z","first_published":"2026-11-05T16:42:04.725Z","source":"metamask","source_name":"MetaMask","under":"kingdom-dmc.com"}],"url":"https://domainspoof.com/live?show=all&q=v1.kingdom-dmc.com"},{"hostname":"v8888.cfd","first_observed":"2026-11-05T15:36:14.003Z","first_published":"2026-11-05T16:42:04.725Z","brands":[],"dns":"resolved","resolved":["104.21.69.73","172.67.206.14"],"resolved_at":"2026-11-05T15:48:48Z","dns_checked_at":"2026-11-05T16:55:43.000Z","dns_since":"2026-11-05T16:55:43.000Z","findings":[{"id":"f7jzwisqv3ula5t6pdlu7","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T15:36:14.003Z","first_published":"2026-11-05T16:42:04.725Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=v8888.cfd"},{"hostname":"valenixfin-de.live","first_observed":"2026-11-05T16:21:08.591Z","first_published":"2026-11-05T16:42:04.725Z","brands":[],"dns":"resolved","resolved":["104.21.35.71","172.67.215.134"],"resolved_at":"2026-11-05T16:31:46Z","dns_checked_at":"2026-11-05T16:55:43.000Z","dns_since":"2026-11-05T16:55:43.000Z","findings":[{"id":"f6lea2yfi62mglknyqlgy","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T16:21:08.591Z","first_published":"2026-11-05T16:42:04.725Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=valenixfin-de.live"},{"hostname":"vdofj2-r7viq-8ozld-t6a1-6g84.pages.dev","first_observed":"2026-11-05T16:05:51.778Z","first_published":"2026-11-05T16:42:04.725Z","brands":[],"dns":"resolved","resolved":["172.66.45.34","172.66.46.222"],"resolved_at":"2026-11-05T16:06:08Z","dns_checked_at":"2026-11-05T16:55:43.000Z","dns_since":"2026-11-05T16:55:43.000Z","findings":[{"id":"fixarok22vsbpvsl6hqe7","kind":"reported_domain","summary":"Reported by PhishTank","first_observed":"2026-11-05T16:05:51.778Z","first_published":"2026-11-05T16:42:04.725Z","source":"phishtank","source_name":"PhishTank","source_url":"https://phishtank.org/phish_detail.php?phish_id=9479650"}],"url":"https://domainspoof.com/live?show=all&q=vdofj2-r7viq-8ozld-t6a1-6g84.pages.dev"},{"hostname":"vehtuorn.shop","first_observed":"2026-11-05T15:56:59.990Z","first_published":"2026-11-05T16:42:04.725Z","brands":[],"dns":"resolved","resolved":["104.21.1.23","172.67.151.223"],"resolved_at":"2026-11-05T15:57:14Z","dns_checked_at":"2026-11-05T16:55:43.000Z","dns_since":"2026-11-05T16:55:43.000Z","findings":[{"id":"frnxzf4nxyp74fyoweuvy","kind":"reported_domain","summary":"Listed by NPA 165 (e-commerce)","first_observed":"2026-11-05T15:56:59.990Z","first_published":"2026-11-05T16:42:04.725Z","source":"npa","source_name":"NPA 165","claim":{"category":"e-commerce"}}],"url":"https://domainspoof.com/live?show=all&q=vehtuorn.shop"},{"hostname":"velonario-it.live","first_observed":"2026-11-05T15:46:31.013Z","first_published":"2026-11-05T16:42:04.725Z","brands":[],"dns":"resolved","resolved":["104.21.35.197","172.67.179.23"],"resolved_at":"2026-11-05T15:46:53Z","dns_checked_at":"2026-11-05T16:55:43.000Z","dns_since":"2026-11-05T16:55:43.000Z","findings":[{"id":"fumylmggcnycawhunxppt","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T15:46:31.013Z","first_published":"2026-11-05T16:42:04.725Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=velonario-it.live"},{"hostname":"vermeilinveroire-fr.live","first_observed":"2026-11-05T16:21:08.591Z","first_published":"2026-11-05T16:42:04.725Z","brands":[],"dns":"resolved","resolved":["104.21.66.200","172.67.207.59"],"resolved_at":"2026-11-05T16:31:46Z","dns_checked_at":"2026-11-05T16:55:43.000Z","dns_since":"2026-11-05T16:55:43.000Z","findings":[{"id":"fzryxy4f7b4fl6auquome","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T16:21:08.591Z","first_published":"2026-11-05T16:42:04.725Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=vermeilinveroire-fr.live"},{"hostname":"vivid-funding.com","first_observed":"2026-11-05T16:31:21.698Z","first_published":"2026-11-05T16:42:04.725Z","brands":[],"dns":"no_address","resolved":[],"resolved_at":"2026-11-05T16:31:47Z","dns_checked_at":"2026-11-06T09:18:06.000Z","findings":[{"id":"fhftw6n7iujknohoxx6qo","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T16:31:21.698Z","first_published":"2026-11-05T16:42:04.725Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=vivid-funding.com"},{"hostname":"vividvvivid.info","first_observed":"2026-11-05T15:46:31.013Z","first_published":"2026-11-05T16:42:04.725Z","brands":[],"dns":"resolved","resolved":["104.21.35.212","172.67.179.226"],"resolved_at":"2026-11-05T15:46:53Z","dns_checked_at":"2026-11-05T16:55:43.000Z","dns_since":"2026-11-05T16:55:43.000Z","findings":[{"id":"fdqr3rplojg4wgkkdjheg","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T15:46:31.013Z","first_published":"2026-11-05T16:42:04.725Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=vividvvivid.info"},{"hostname":"vogtrendifels-de.live","first_observed":"2026-11-05T16:00:39.305Z","first_published":"2026-11-05T16:42:04.725Z","brands":[],"dns":"resolved","resolved":["104.21.78.78","172.67.218.151"],"resolved_at":"2026-11-05T16:01:12Z","dns_checked_at":"2026-11-05T16:55:43.000Z","dns_since":"2026-11-05T16:55:43.000Z","findings":[{"id":"f7y3n7dfcfeamysm3kcqg","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T16:00:39.305Z","first_published":"2026-11-05T16:42:04.725Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=vogtrendifels-de.live"},{"hostname":"vpn1.polar-tensor.com","first_observed":"2026-11-05T15:36:14.003Z","first_published":"2026-11-05T16:42:04.725Z","brands":[],"dns":"resolved","resolved":["5.189.134.86","57.128.187.75","57.129.49.179","193.242.211.59"],"resolved_at":"2026-11-05T15:48:50Z","dns_checked_at":"2026-11-05T16:55:43.000Z","dns_since":"2026-11-05T16:55:43.000Z","findings":[{"id":"fqs342y6vmoaskdjhrgne","kind":"reported_domain","summary":"Under polar-tensor.com, listed by MetaMask","first_observed":"2026-11-05T15:36:14.003Z","first_published":"2026-11-05T16:42:04.725Z","source":"metamask","source_name":"MetaMask","under":"polar-tensor.com"}],"url":"https://domainspoof.com/live?show=all&q=vpn1.polar-tensor.com"},{"hostname":"walletlarp.com","first_observed":"2026-11-05T16:26:28.136Z","first_published":"2026-11-05T16:42:04.725Z","brands":[],"dns":"resolved","resolved":["75.2.60.5"],"resolved_at":"2026-11-05T16:27:08Z","dns_checked_at":"2026-11-05T16:55:43.000Z","dns_since":"2026-11-05T16:55:43.000Z","findings":[{"id":"fnxhucttddtx74lh6yjju","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T16:26:28.136Z","first_published":"2026-11-05T16:42:04.725Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/walletlarp.com/"}],"url":"https://domainspoof.com/live?show=all&q=walletlarp.com"},{"hostname":"web2.androidloading.com","first_observed":"2026-11-05T16:26:28.136Z","first_published":"2026-11-05T16:42:04.725Z","brands":[],"dns":"resolved","resolved":["185.178.208.191"],"resolved_at":"2026-11-05T16:27:08Z","dns_checked_at":"2026-11-05T16:55:43.000Z","dns_since":"2026-11-05T16:55:43.000Z","findings":[{"id":"fbu6cbaeyzwb74y7sjlcm","kind":"reported_domain","summary":"Under androidloading.com, reported by PhishDestroy","first_observed":"2026-11-05T16:26:28.136Z","first_published":"2026-11-05T16:42:04.725Z","source":"phishdestroy","source_name":"PhishDestroy","under":"androidloading.com","source_url":"https://phishdestroy.io/domain/androidloading.com/"}],"url":"https://domainspoof.com/live?show=all&q=web2.androidloading.com"},{"hostname":"webadmin.aml.legal","first_observed":"2026-11-05T16:26:28.136Z","first_published":"2026-11-05T16:42:04.725Z","brands":[],"dns":"resolved","resolved":["186.2.175.179"],"resolved_at":"2026-11-05T16:27:08Z","dns_checked_at":"2026-11-05T16:55:43.000Z","dns_since":"2026-11-05T16:55:43.000Z","findings":[{"id":"fur5o4yorhsvii42g67xf","kind":"reported_domain","summary":"Under aml.legal, reported by PhishDestroy","first_observed":"2026-11-05T16:26:28.136Z","first_published":"2026-11-05T16:42:04.725Z","source":"phishdestroy","source_name":"PhishDestroy","under":"aml.legal","source_url":"https://phishdestroy.io/domain/aml.legal/"}],"url":"https://domainspoof.com/live?show=all&q=webadmin.aml.legal"},{"hostname":"whatsapp-site-builder.com","first_observed":"2026-11-05T15:38:37.781Z","first_published":"2026-11-05T16:42:04.725Z","brands":[{"id":"whatsapp","name":"WhatsApp","url":"https://domainspoof.com/brands/whatsapp"}],"dns":"resolved","resolved":["93.127.179.147"],"resolved_at":"2026-11-05T15:38:37Z","dns_checked_at":"2026-11-05T16:55:43.000Z","dns_since":"2026-11-05T16:55:43.000Z","findings":[{"id":"ff7db7sm32th4263hmkxc","kind":"phishing_infrastructure","summary":"Resolved to 93.127.179.147, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T15:38:37.781Z","first_published":"2026-11-05T16:42:04.725Z","address":"93.127.179.147","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/whatsapp"},{"hostname":"whitelist-papertrade.app","first_observed":"2026-11-05T16:00:39.305Z","first_published":"2026-11-05T16:42:04.725Z","brands":[],"dns":"resolved","resolved":["104.21.80.171","172.67.152.52"],"resolved_at":"2026-11-05T16:01:12Z","dns_checked_at":"2026-11-05T16:55:43.000Z","dns_since":"2026-11-05T16:55:43.000Z","findings":[{"id":"frkxmgj6vd7fqjrbfnoms","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T16:00:39.305Z","first_published":"2026-11-05T16:42:04.725Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=whitelist-papertrade.app"},{"hostname":"wrqrasgfqqwr.sbs","first_observed":"2026-11-05T15:47:02.119Z","first_published":"2026-11-05T16:42:04.725Z","brands":[],"dns":"resolved","resolved":["207.241.172.137"],"resolved_at":"2026-11-05T15:47:44Z","dns_checked_at":"2026-11-05T16:55:43.000Z","dns_since":"2026-11-05T16:55:43.000Z","findings":[{"id":"fdh43aak2fhux5mzodyw7","kind":"reported_domain","summary":"Listed by USOM","first_observed":"2026-11-05T15:47:02.119Z","first_published":"2026-11-05T16:42:04.725Z","source":"usom","source_name":"USOM"}],"url":"https://domainspoof.com/live?show=all&q=wrqrasgfqqwr.sbs"},{"hostname":"www-budgettb-ayrica-cepte.myonlineportal.ch","first_observed":"2026-11-05T15:47:02.119Z","first_published":"2026-11-05T16:42:04.725Z","brands":[],"dns":"resolved","resolved":["94.183.168.35"],"resolved_at":"2026-11-05T15:47:44Z","dns_checked_at":"2026-11-05T16:55:43.000Z","dns_since":"2026-11-05T16:55:43.000Z","findings":[{"id":"fvpbwyzq6xnovwzhp7iak","kind":"reported_domain","summary":"Listed by USOM","first_observed":"2026-11-05T15:47:02.119Z","first_published":"2026-11-05T16:42:04.725Z","source":"usom","source_name":"USOM"}],"url":"https://domainspoof.com/live?show=all&q=www-budgettb-ayrica-cepte.myonlineportal.ch"},{"hostname":"www.102bb.ezgateway.net","first_observed":"2026-11-05T15:31:21.422Z","first_published":"2026-11-05T16:42:04.725Z","brands":[],"dns":"resolved","resolved":["104.21.13.213"],"resolved_at":"2026-11-05T15:38:39Z","dns_checked_at":"2026-11-05T16:55:43.000Z","dns_since":"2026-11-05T16:55:43.000Z","findings":[{"id":"fpab4k7hrkbg63a2yn3du","kind":"reported_domain","summary":"Under ezgateway.net, listed by USOM","first_observed":"2026-11-05T15:31:21.422Z","first_published":"2026-11-05T16:42:04.725Z","source":"usom","source_name":"USOM","under":"ezgateway.net"}],"url":"https://domainspoof.com/live?show=all&q=www.102bb.ezgateway.net"},{"hostname":"www.49ssd.ezgateway.net","first_observed":"2026-11-05T15:36:14.003Z","first_published":"2026-11-05T16:42:04.725Z","brands":[],"dns":"resolved","resolved":["104.21.13.213"],"resolved_at":"2026-11-05T15:48:52Z","dns_checked_at":"2026-11-05T16:55:43.000Z","dns_since":"2026-11-05T16:55:43.000Z","findings":[{"id":"fgaupabjrntvv6qrumgqs","kind":"reported_domain","summary":"Under ezgateway.net, listed by USOM","first_observed":"2026-11-05T15:36:14.003Z","first_published":"2026-11-05T16:42:04.725Z","source":"usom","source_name":"USOM","under":"ezgateway.net"}],"url":"https://domainspoof.com/live?show=all&q=www.49ssd.ezgateway.net"},{"hostname":"www.72kkk.ezgateway.net","first_observed":"2026-11-05T15:41:12.412Z","first_published":"2026-11-05T16:42:04.725Z","brands":[],"dns":"resolved","resolved":["104.21.13.213"],"resolved_at":"2026-11-05T15:42:08Z","dns_checked_at":"2026-11-05T16:55:43.000Z","dns_since":"2026-11-05T16:55:43.000Z","findings":[{"id":"fy6ky7gdede7jz4vvn455","kind":"reported_domain","summary":"Under ezgateway.net, listed by USOM","first_observed":"2026-11-05T15:41:12.412Z","first_published":"2026-11-05T16:42:04.725Z","source":"usom","source_name":"USOM","under":"ezgateway.net"}],"url":"https://domainspoof.com/live?show=all&q=www.72kkk.ezgateway.net"},{"hostname":"www.a1kapitalmenkulonline.com","first_observed":"2026-11-05T16:00:39.305Z","first_published":"2026-11-05T16:42:04.725Z","brands":[],"dns":"resolved","resolved":["51.79.38.229"],"resolved_at":"2026-11-05T16:01:12Z","dns_checked_at":"2026-11-05T16:55:43.000Z","dns_since":"2026-11-05T16:55:43.000Z","findings":[{"id":"f4tlhkmgw36zlso3syivr","kind":"reported_domain","summary":"Under a1kapitalmenkulonline.com, listed by USOM","first_observed":"2026-11-05T16:00:39.305Z","first_published":"2026-11-05T16:42:04.725Z","source":"usom","source_name":"USOM","under":"a1kapitalmenkulonline.com"}],"url":"https://domainspoof.com/live?show=all&q=www.a1kapitalmenkulonline.com"},{"hostname":"www.admin.zenavlico.cyou","first_observed":"2026-11-05T16:26:28.136Z","first_published":"2026-11-05T16:42:04.725Z","brands":[],"dns":"resolved","resolved":["95.85.244.13"],"resolved_at":"2026-11-05T16:27:08Z","dns_checked_at":"2026-11-05T16:55:43.000Z","dns_since":"2026-11-05T16:55:43.000Z","findings":[{"id":"fcgllpl2qqmoj5bphay2n","kind":"reported_domain","summary":"Under zenavlico.cyou, listed by CERT Polska","first_observed":"2026-11-05T16:26:28.136Z","first_published":"2026-11-05T16:42:04.725Z","source":"cert_polska","source_name":"CERT Polska","under":"zenavlico.cyou"}],"url":"https://domainspoof.com/live?show=all&q=www.admin.zenavlico.cyou"},{"hostname":"www.airbnb-reservations-rooms-31377018-properties.projedekorasyon.com.tr","first_observed":"2026-11-05T15:41:12.412Z","first_published":"2026-11-05T16:42:04.725Z","brands":[],"dns":"resolved","resolved":["83.150.213.76"],"resolved_at":"2026-11-05T15:42:08Z","dns_checked_at":"2026-11-05T16:55:43.000Z","dns_since":"2026-11-05T16:55:43.000Z","findings":[{"id":"fws5evpl4dq62f3amhxlj","kind":"reported_domain","summary":"Under airbnb-reservations-rooms-31377018-properties.projedekorasyon.com.tr, reported by PhishDestroy","first_observed":"2026-11-05T15:41:12.412Z","first_published":"2026-11-05T16:42:04.725Z","source":"phishdestroy","source_name":"PhishDestroy","under":"airbnb-reservations-rooms-31377018-properties.projedekorasyon.com.tr","source_url":"https://phishdestroy.io/domain/airbnb-reservations-rooms-31377018-properties.projedekorasyon.com.tr/"}],"url":"https://domainspoof.com/live?show=all&q=www.airbnb-reservations-rooms-31377018-properties.projedekorasyon.com.tr"},{"hostname":"www.cacti.crypto-polis.org","first_observed":"2026-11-05T16:21:08.591Z","first_published":"2026-11-05T16:42:04.725Z","brands":[],"dns":"resolved","resolved":["185.178.208.132","185.178.208.182"],"resolved_at":"2026-11-05T16:31:47Z","dns_checked_at":"2026-11-05T16:55:43.000Z","dns_since":"2026-11-05T16:55:43.000Z","findings":[{"id":"fkmigrxn4b6klcw6ura2a","kind":"reported_domain","summary":"Under crypto-polis.org, reported by PhishDestroy","first_observed":"2026-11-05T16:21:08.591Z","first_published":"2026-11-05T16:42:04.725Z","source":"phishdestroy","source_name":"PhishDestroy","under":"crypto-polis.org","source_url":"https://phishdestroy.io/domain/crypto-polis.org/"}],"url":"https://domainspoof.com/live?show=all&q=www.cacti.crypto-polis.org"},{"hostname":"www.demo.rocketchat.crypto-polis.org","first_observed":"2026-11-05T16:00:39.305Z","first_published":"2026-11-05T16:42:04.725Z","brands":[],"dns":"resolved","resolved":["185.178.208.132","185.178.208.182"],"resolved_at":"2026-11-05T16:01:12Z","dns_checked_at":"2026-11-05T16:55:43.000Z","dns_since":"2026-11-05T16:55:43.000Z","findings":[{"id":"focy56tpeaicslwt6cqgi","kind":"reported_domain","summary":"Under crypto-polis.org, reported by PhishDestroy","first_observed":"2026-11-05T16:00:39.305Z","first_published":"2026-11-05T16:42:04.725Z","source":"phishdestroy","source_name":"PhishDestroy","under":"crypto-polis.org","source_url":"https://phishdestroy.io/domain/crypto-polis.org/"}],"url":"https://domainspoof.com/live?show=all&q=www.demo.rocketchat.crypto-polis.org"},{"hostname":"www.gurl.pro","first_observed":"2026-11-05T15:46:31.013Z","first_published":"2026-11-05T16:42:04.725Z","brands":[],"dns":"resolved","resolved":["64.29.17.65","216.198.79.65"],"resolved_at":"2026-11-05T15:46:54Z","dns_checked_at":"2026-11-05T16:55:43.000Z","dns_since":"2026-11-05T16:55:43.000Z","findings":[{"id":"f2sv7ks75gwg6eu46c4ek","kind":"reported_domain","summary":"Under gurl.pro, reported by PhishDestroy","first_observed":"2026-11-05T15:46:31.013Z","first_published":"2026-11-05T16:42:04.725Z","source":"phishdestroy","source_name":"PhishDestroy","under":"gurl.pro","source_url":"https://phishdestroy.io/domain/gurl.pro/"}],"url":"https://domainspoof.com/live?show=all&q=www.gurl.pro"},{"hostname":"www.js4519.com","first_observed":"2026-11-05T15:56:59.990Z","first_published":"2026-11-05T16:42:04.725Z","brands":[],"dns":"resolved","resolved":["168.76.227.176"],"resolved_at":"2026-11-05T15:57:14Z","dns_checked_at":"2026-11-05T16:55:43.000Z","dns_since":"2026-11-05T16:55:43.000Z","findings":[{"id":"fac3u32dxi7ytc7jqtw5d","kind":"reported_domain","summary":"Under js4519.com, reported by PhishDestroy","first_observed":"2026-11-05T15:56:59.990Z","first_published":"2026-11-05T16:42:04.725Z","source":"phishdestroy","source_name":"PhishDestroy","under":"js4519.com","source_url":"https://phishdestroy.io/domain/js4519.com/"}],"url":"https://domainspoof.com/live?show=all&q=www.js4519.com"},{"hostname":"www.load.crypto-polis.org","first_observed":"2026-11-05T16:00:39.305Z","first_published":"2026-11-05T16:42:04.725Z","brands":[],"dns":"resolved","resolved":["185.178.208.132","185.178.208.182"],"resolved_at":"2026-11-05T16:01:13Z","dns_checked_at":"2026-11-05T16:55:43.000Z","dns_since":"2026-11-05T16:55:43.000Z","findings":[{"id":"f6qcbg62zesosunk4e337","kind":"reported_domain","summary":"Under crypto-polis.org, reported by PhishDestroy","first_observed":"2026-11-05T16:00:39.305Z","first_published":"2026-11-05T16:42:04.725Z","source":"phishdestroy","source_name":"PhishDestroy","under":"crypto-polis.org","source_url":"https://phishdestroy.io/domain/crypto-polis.org/"}],"url":"https://domainspoof.com/live?show=all&q=www.load.crypto-polis.org"},{"hostname":"www.lundalfinans.com","first_observed":"2026-11-05T16:05:51.778Z","first_published":"2026-11-05T16:42:04.725Z","brands":[],"dns":"resolved","resolved":["216.150.1.193","216.150.16.193"],"resolved_at":"2026-11-05T16:06:11Z","dns_checked_at":"2026-11-05T16:55:43.000Z","dns_since":"2026-11-05T16:55:43.000Z","findings":[{"id":"fxti3eajemsj5pneat3sh","kind":"reported_domain","summary":"Under lundalfinans.com, listed by USOM","first_observed":"2026-11-05T16:05:51.778Z","first_published":"2026-11-05T16:42:04.725Z","source":"usom","source_name":"USOM","under":"lundalfinans.com"}],"url":"https://domainspoof.com/live?show=all&q=www.lundalfinans.com"},{"hostname":"www.lznvb.ezgateway.net","first_observed":"2026-11-05T16:16:21.134Z","first_published":"2026-11-05T16:42:04.725Z","brands":[],"dns":"resolved","resolved":["172.67.165.35"],"resolved_at":"2026-11-05T16:16:49Z","dns_checked_at":"2026-11-05T16:55:43.000Z","dns_since":"2026-11-05T16:55:43.000Z","findings":[{"id":"fe5fdtoplh72u7kk4dvdg","kind":"reported_domain","summary":"Under ezgateway.net, listed by USOM","first_observed":"2026-11-05T16:16:21.134Z","first_published":"2026-11-05T16:42:04.725Z","source":"usom","source_name":"USOM","under":"ezgateway.net"}],"url":"https://domainspoof.com/live?show=all&q=www.lznvb.ezgateway.net"},{"hostname":"www.maautomobile.orionacademy.com.ng","first_observed":"2026-11-05T15:51:46.017Z","first_published":"2026-11-05T16:42:04.725Z","brands":[],"dns":"resolved","resolved":["147.124.214.15"],"resolved_at":"2026-11-05T16:01:43Z","dns_checked_at":"2026-11-05T16:55:43.000Z","dns_since":"2026-11-05T16:55:43.000Z","findings":[{"id":"fhkhcffbyucepcl6io5hl","kind":"reported_domain","summary":"Under orionacademy.com.ng, reported by PhishDestroy","first_observed":"2026-11-05T15:51:46.017Z","first_published":"2026-11-05T16:42:04.725Z","source":"phishdestroy","source_name":"PhishDestroy","under":"orionacademy.com.ng","source_url":"https://phishdestroy.io/domain/orionacademy.com.ng/"}],"url":"https://domainspoof.com/live?show=all&q=www.maautomobile.orionacademy.com.ng"},{"hostname":"www.mg-times.com","first_observed":"2026-11-05T16:26:28.136Z","first_published":"2026-11-05T16:42:04.725Z","brands":[],"dns":"resolved","resolved":["104.21.67.234","172.67.182.243"],"resolved_at":"2026-11-05T16:27:08Z","dns_checked_at":"2026-11-05T16:55:43.000Z","dns_since":"2026-11-05T16:55:43.000Z","findings":[{"id":"falciucomwpvqbsic33yd","kind":"reported_domain","summary":"Under mg-times.com, reported by PhishDestroy","first_observed":"2026-11-05T16:26:28.136Z","first_published":"2026-11-05T16:42:04.725Z","source":"phishdestroy","source_name":"PhishDestroy","under":"mg-times.com","source_url":"https://phishdestroy.io/domain/mg-times.com/"}],"url":"https://domainspoof.com/live?show=all&q=www.mg-times.com"},{"hostname":"www.motofelga.com","first_observed":"2026-11-05T15:46:31.013Z","first_published":"2026-11-05T16:42:04.725Z","brands":[],"dns":"resolved","resolved":["104.21.88.129","172.67.179.98"],"resolved_at":"2026-11-05T15:46:54Z","dns_checked_at":"2026-11-05T16:55:43.000Z","dns_since":"2026-11-05T16:55:43.000Z","findings":[{"id":"fceq7gjdozrnscc2b7sqj","kind":"reported_domain","summary":"Under motofelga.com, listed by CERT Polska","first_observed":"2026-11-05T15:46:31.013Z","first_published":"2026-11-05T16:42:04.725Z","source":"cert_polska","source_name":"CERT Polska","under":"motofelga.com"}],"url":"https://domainspoof.com/live?show=all&q=www.motofelga.com"},{"hostname":"www.mqtgr.ezgateway.net","first_observed":"2026-11-05T15:46:31.013Z","first_published":"2026-11-05T16:42:04.725Z","brands":[],"dns":"resolved","resolved":["172.67.165.35"],"resolved_at":"2026-11-05T15:46:54Z","dns_checked_at":"2026-11-05T16:55:43.000Z","dns_since":"2026-11-05T16:55:43.000Z","findings":[{"id":"fmzv2dfudeldpkspjhrfx","kind":"reported_domain","summary":"Under ezgateway.net, listed by USOM","first_observed":"2026-11-05T15:46:31.013Z","first_published":"2026-11-05T16:42:04.725Z","source":"usom","source_name":"USOM","under":"ezgateway.net"}],"url":"https://domainspoof.com/live?show=all&q=www.mqtgr.ezgateway.net"},{"hostname":"www.my.immortalpos.co.za","first_observed":"2026-11-05T15:51:46.017Z","first_published":"2026-11-05T16:42:04.725Z","brands":[],"dns":"resolved","resolved":["104.21.72.30","172.67.174.101"],"resolved_at":"2026-11-05T16:01:43Z","dns_checked_at":"2026-11-05T16:55:43.000Z","dns_since":"2026-11-05T16:55:43.000Z","findings":[{"id":"f4x63enzjukdewiuwdsmb","kind":"reported_domain","summary":"Under immortalpos.co.za, reported by PhishDestroy","first_observed":"2026-11-05T15:51:46.017Z","first_published":"2026-11-05T16:42:04.725Z","source":"phishdestroy","source_name":"PhishDestroy","under":"immortalpos.co.za","source_url":"https://phishdestroy.io/domain/immortalpos.co.za/"}],"url":"https://domainspoof.com/live?show=all&q=www.my.immortalpos.co.za"},{"hostname":"www.pigsoft.secureapp.online","first_observed":"2026-11-05T15:51:46.017Z","first_published":"2026-11-05T16:42:04.725Z","brands":[],"dns":"resolved","resolved":["179.61.192.12"],"resolved_at":"2026-11-05T16:01:43Z","dns_checked_at":"2026-11-05T16:55:43.000Z","dns_since":"2026-11-05T16:55:43.000Z","findings":[{"id":"fb5ftieap4gtujvzeaysi","kind":"reported_domain","summary":"Under secureapp.online, reported by PhishDestroy","first_observed":"2026-11-05T15:51:46.017Z","first_published":"2026-11-05T16:42:04.725Z","source":"phishdestroy","source_name":"PhishDestroy","under":"secureapp.online","source_url":"https://phishdestroy.io/domain/secureapp.online/"}],"url":"https://domainspoof.com/live?show=all&q=www.pigsoft.secureapp.online"},{"hostname":"www.protonvpn.casa","first_observed":"2026-11-05T16:27:08.941Z","first_published":"2026-11-05T16:42:04.725Z","brands":[{"id":"proton","name":"Proton","url":"https://domainspoof.com/brands/proton"}],"dns":"resolved","resolved":["172.232.24.161","172.232.24.235","172.234.25.42"],"resolved_at":"2026-11-05T16:55:43Z","dns_checked_at":"2026-11-05T16:55:43.000Z","dns_since":"2026-11-05T16:55:43.000Z","findings":[{"id":"fbjyob7xppkxepff3x62m","kind":"phishing_infrastructure","summary":"Resolved to 172.232.24.161, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T16:27:08.941Z","first_published":"2026-11-05T16:42:04.725Z","address":"172.232.24.161","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/proton"},{"hostname":"www.recuperation-de-donnees-iphone.com","first_observed":"2026-11-05T15:46:54.512Z","first_published":"2026-11-05T16:42:04.725Z","brands":[{"id":"apple","name":"Apple","url":"https://domainspoof.com/brands/apple"}],"dns":"resolved","resolved":["51.91.236.255"],"resolved_at":"2026-11-05T16:55:43Z","dns_checked_at":"2026-11-05T16:55:43.000Z","dns_since":"2026-11-05T16:55:43.000Z","findings":[{"id":"fll5aln5rfgtysel2q53v","kind":"phishing_infrastructure","summary":"Resolved to 51.91.236.255, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T15:46:54.512Z","first_published":"2026-11-05T16:42:04.725Z","address":"51.91.236.255","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/apple"},{"hostname":"www.refurbished.immortalpos.co.za","first_observed":"2026-11-05T15:51:46.017Z","first_published":"2026-11-05T16:42:04.725Z","brands":[],"dns":"resolved","resolved":["104.21.72.30","172.67.174.101"],"resolved_at":"2026-11-05T16:01:43Z","dns_checked_at":"2026-11-05T16:55:43.000Z","dns_since":"2026-11-05T16:55:43.000Z","findings":[{"id":"fmqpcn6zbbzr6dszkilcp","kind":"reported_domain","summary":"Under immortalpos.co.za, reported by PhishDestroy","first_observed":"2026-11-05T15:51:46.017Z","first_published":"2026-11-05T16:42:04.725Z","source":"phishdestroy","source_name":"PhishDestroy","under":"immortalpos.co.za","source_url":"https://phishdestroy.io/domain/immortalpos.co.za/"}],"url":"https://domainspoof.com/live?show=all&q=www.refurbished.immortalpos.co.za"},{"hostname":"www.rks.keylines.net.in","first_observed":"2026-11-05T15:46:31.013Z","first_published":"2026-11-05T16:42:04.725Z","brands":[],"dns":"resolved","resolved":["157.15.130.67"],"resolved_at":"2026-11-05T15:46:54Z","dns_checked_at":"2026-11-05T16:55:43.000Z","dns_since":"2026-11-05T16:55:43.000Z","findings":[{"id":"frvla2y6mllu6kupu3y2f","kind":"reported_domain","summary":"Under keylines.net.in, listed by CERT Polska","first_observed":"2026-11-05T15:46:31.013Z","first_published":"2026-11-05T16:42:04.725Z","source":"cert_polska","source_name":"CERT Polska","under":"keylines.net.in"}],"url":"https://domainspoof.com/live?show=all&q=www.rks.keylines.net.in"},{"hostname":"www.rtkashiwue.shop","first_observed":"2026-11-05T15:36:14.003Z","first_published":"2026-11-05T16:42:04.725Z","brands":[],"dns":"resolved","resolved":["104.21.84.240","172.67.198.229"],"resolved_at":"2026-11-05T15:48:54Z","dns_checked_at":"2026-11-05T16:55:43.000Z","dns_since":"2026-11-05T16:55:43.000Z","findings":[{"id":"flebsbuxtwtlzyjvwjwaw","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T15:36:14.003Z","first_published":"2026-11-05T16:42:04.725Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=www.rtkashiwue.shop"},{"hostname":"www.taobao-alibabainfo.shop","first_observed":"2026-11-05T15:42:08.440Z","first_published":"2026-11-05T16:42:04.725Z","brands":[{"id":"alibaba","name":"Alibaba","url":"https://domainspoof.com/brands/alibaba"}],"dns":"resolved","resolved":["27.124.5.22"],"resolved_at":"2026-11-06T09:18:06Z","dns_checked_at":"2026-11-06T09:18:06.000Z","findings":[{"id":"fseezih5zvi7eb5ptc45b","kind":"spamhaus_drop","summary":"Resolved to 27.124.5.22 on Spamhaus DROP","first_observed":"2026-11-05T15:42:08.440Z","first_published":"2026-11-05T16:42:04.725Z","address":"27.124.5.22","list":"spamhaus_drop","list_name":"Spamhaus DROP"}],"url":"https://domainspoof.com/brands/alibaba"},{"hostname":"www.test.mailpit.crypto-polis.org","first_observed":"2026-11-05T16:00:39.305Z","first_published":"2026-11-05T16:42:04.725Z","brands":[],"dns":"resolved","resolved":["185.178.208.132","185.178.208.182"],"resolved_at":"2026-11-05T16:01:13Z","dns_checked_at":"2026-11-05T16:55:43.000Z","dns_since":"2026-11-05T16:55:43.000Z","findings":[{"id":"fu4xavns2kskeqohuylgw","kind":"reported_domain","summary":"Under crypto-polis.org, reported by PhishDestroy","first_observed":"2026-11-05T16:00:39.305Z","first_published":"2026-11-05T16:42:04.725Z","source":"phishdestroy","source_name":"PhishDestroy","under":"crypto-polis.org","source_url":"https://phishdestroy.io/domain/crypto-polis.org/"}],"url":"https://domainspoof.com/live?show=all&q=www.test.mailpit.crypto-polis.org"},{"hostname":"www.v1.zenavlico.cyou","first_observed":"2026-11-05T16:05:51.778Z","first_published":"2026-11-05T16:42:04.725Z","brands":[],"dns":"resolved","resolved":["95.85.244.13"],"resolved_at":"2026-11-05T16:06:11Z","dns_checked_at":"2026-11-05T16:55:43.000Z","dns_since":"2026-11-05T16:55:43.000Z","findings":[{"id":"fk7knt2ammrtlvpksnous","kind":"reported_domain","summary":"Under zenavlico.cyou, listed by CERT Polska","first_observed":"2026-11-05T16:05:51.778Z","first_published":"2026-11-05T16:42:04.725Z","source":"cert_polska","source_name":"CERT Polska","under":"zenavlico.cyou"}],"url":"https://domainspoof.com/live?show=all&q=www.v1.zenavlico.cyou"},{"hostname":"wwyybp.top","first_observed":"2026-11-05T15:41:12.412Z","first_published":"2026-11-05T16:42:04.725Z","brands":[],"dns":"resolved","resolved":["104.21.90.109","172.67.199.223"],"resolved_at":"2026-11-05T15:42:08Z","dns_checked_at":"2026-11-05T16:55:43.000Z","dns_since":"2026-11-05T16:55:43.000Z","findings":[{"id":"fmn4sqd32cixd2ojthg2d","kind":"reported_domain","summary":"Listed by NPA 165 (information services)","first_observed":"2026-11-05T15:41:12.412Z","first_published":"2026-11-05T16:42:04.725Z","source":"npa","source_name":"NPA 165","claim":{"category":"information services"}}],"url":"https://domainspoof.com/live?show=all&q=wwyybp.top"},{"hostname":"x-redirect-secure.com","first_observed":"2026-11-05T16:31:21.698Z","first_published":"2026-11-05T16:42:04.725Z","brands":[],"dns":"resolved","resolved":["104.21.78.209","172.67.137.132"],"resolved_at":"2026-11-05T16:31:47Z","dns_checked_at":"2026-11-05T16:55:43.000Z","dns_since":"2026-11-05T16:55:43.000Z","findings":[{"id":"ffeh7t2yjtununwfgf7oo","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T16:31:21.698Z","first_published":"2026-11-05T16:42:04.725Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=x-redirect-secure.com"},{"hostname":"xixuza-tusuru.info","first_observed":"2026-11-05T16:16:21.134Z","first_published":"2026-11-05T16:42:04.725Z","brands":[],"dns":"resolved","resolved":["104.21.19.185","172.67.187.148"],"resolved_at":"2026-11-05T16:16:49Z","dns_checked_at":"2026-11-05T16:55:43.000Z","dns_since":"2026-11-05T16:55:43.000Z","findings":[{"id":"fwmujh3io67keykjrajks","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T16:16:21.134Z","first_published":"2026-11-05T16:42:04.725Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=xixuza-tusuru.info"},{"hostname":"xornrtbssa.shop","first_observed":"2026-11-05T15:51:46.017Z","first_published":"2026-11-05T16:42:04.725Z","brands":[],"dns":"resolved","resolved":["104.21.36.88","172.67.190.178"],"resolved_at":"2026-11-05T16:01:43Z","dns_checked_at":"2026-11-05T16:55:43.000Z","dns_since":"2026-11-05T16:55:43.000Z","findings":[{"id":"facwe43calhhz6el7ki2e","kind":"reported_domain","summary":"Listed by NPA 165 (information services)","first_observed":"2026-11-05T15:51:46.017Z","first_published":"2026-11-05T16:42:04.725Z","source":"npa","source_name":"NPA 165","claim":{"category":"information services"}}],"url":"https://domainspoof.com/live?show=all&q=xornrtbssa.shop"},{"hostname":"xrpledger-desk.app","first_observed":"2026-11-05T16:16:21.134Z","first_published":"2026-11-05T16:42:04.725Z","brands":[{"id":"ripple","name":"Ripple (XRP)","url":"https://domainspoof.com/brands/ripple"}],"dns":"resolved","resolved":["104.21.9.62","172.67.159.38","2606:4700:3033::6815:93e","2606:4700:3035::ac43:9f26"],"resolved_at":"2026-11-05T16:16:49Z","dns_checked_at":"2026-11-05T16:55:43.000Z","dns_since":"2026-11-05T16:55:43.000Z","findings":[{"id":"femjcida4fepukeej57cg","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T16:16:21.134Z","first_published":"2026-11-05T16:42:04.725Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/brands/ripple"},{"hostname":"xswap.ms","first_observed":"2026-11-05T15:36:14.003Z","first_published":"2026-11-05T16:42:04.725Z","brands":[],"dns":"resolved","resolved":["104.21.14.222","172.67.160.159"],"resolved_at":"2026-11-05T15:48:56Z","dns_checked_at":"2026-11-05T16:55:43.000Z","dns_since":"2026-11-05T16:55:43.000Z","findings":[{"id":"fa6d27oglgaxf27mxbgjl","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T15:36:14.003Z","first_published":"2026-11-05T16:42:04.725Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=xswap.ms"},{"hostname":"yandex.cdek.2sber.0update.yandex.sber.prod2.hawkinswoodshop.com","first_observed":"2026-11-05T16:01:45.257Z","first_published":"2026-11-05T16:42:04.725Z","brands":[{"id":"yandex","name":"Yandex","url":"https://domainspoof.com/brands/yandex"}],"dns":"resolved","resolved":["45.77.75.133","45.77.92.157","207.246.78.75"],"resolved_at":"2026-11-05T16:55:43Z","dns_checked_at":"2026-11-05T16:55:43.000Z","dns_since":"2026-11-05T16:55:43.000Z","findings":[{"id":"f7uz46zl24b3qqg3sjxf3","kind":"phishing_infrastructure","summary":"Resolved to 45.77.75.133, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T16:01:45.257Z","first_published":"2026-11-05T16:42:04.725Z","address":"45.77.75.133","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/yandex"},{"hostname":"zajindan332.top","first_observed":"2026-11-05T16:36:38.552Z","first_published":"2026-11-05T16:42:04.725Z","brands":[],"dns":"resolved","resolved":["103.224.182.250"],"resolved_at":"2026-11-05T16:36:54Z","dns_checked_at":"2026-11-05T16:55:43.000Z","dns_since":"2026-11-05T16:55:43.000Z","findings":[{"id":"fz5h4vt3dzrf6o4juuwt5","kind":"reported_domain","summary":"Listed by NPA 165 (lottery and gambling)","first_observed":"2026-11-05T16:36:38.552Z","first_published":"2026-11-05T16:42:04.725Z","source":"npa","source_name":"NPA 165","claim":{"category":"lottery and gambling"}}],"url":"https://domainspoof.com/live?show=all&q=zajindan332.top"},{"hostname":"zemi.zeal.app","first_observed":"2026-11-05T16:31:21.698Z","first_published":"2026-11-05T16:42:04.725Z","brands":[],"dns":"resolved","resolved":["5.223.64.221"],"resolved_at":"2026-11-05T16:31:49Z","dns_checked_at":"2026-11-05T16:55:43.000Z","dns_since":"2026-11-05T16:55:43.000Z","findings":[{"id":"f3kboxvfn6k5jfdxeeg2m","kind":"reported_domain","summary":"Under zeal.app, reported by PhishDestroy","first_observed":"2026-11-05T16:31:21.698Z","first_published":"2026-11-05T16:42:04.725Z","source":"phishdestroy","source_name":"PhishDestroy","under":"zeal.app","source_url":"https://phishdestroy.io/domain/zeal.app/"}],"url":"https://domainspoof.com/live?show=all&q=zemi.zeal.app"},{"hostname":"zeonixedge-de.live","first_observed":"2026-11-05T15:56:59.990Z","first_published":"2026-11-05T16:42:04.725Z","brands":[],"dns":"resolved","resolved":["104.21.29.14","172.67.148.72"],"resolved_at":"2026-11-05T15:57:14Z","dns_checked_at":"2026-11-05T16:55:43.000Z","dns_since":"2026-11-05T16:55:43.000Z","findings":[{"id":"feye2vizmlhlo5chjbgl3","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T15:56:59.990Z","first_published":"2026-11-05T16:42:04.725Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=zeonixedge-de.live"},{"hostname":"zgtcx.com","first_observed":"2026-11-05T16:21:08.591Z","first_published":"2026-11-05T16:42:04.725Z","brands":[],"dns":"resolved","resolved":["104.21.68.113","172.67.195.5"],"resolved_at":"2026-11-05T16:21:34Z","dns_checked_at":"2026-11-05T16:55:43.000Z","dns_since":"2026-11-05T16:55:43.000Z","findings":[{"id":"ffcawaumj776m7mbojgjz","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T16:21:08.591Z","first_published":"2026-11-05T16:42:04.725Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=zgtcx.com"},{"hostname":"zoom-connect-95999345.pages.dev","first_observed":"2026-11-05T16:00:39.305Z","first_published":"2026-11-05T16:42:04.725Z","brands":[],"dns":"resolved","resolved":["172.66.45.32","172.66.46.224"],"resolved_at":"2026-11-05T16:01:13Z","dns_checked_at":"2026-11-05T16:55:43.000Z","dns_since":"2026-11-05T16:55:43.000Z","findings":[{"id":"fpc2uhbhhsbfzacwdswio","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T16:00:39.305Z","first_published":"2026-11-05T16:42:04.725Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=zoom-connect-95999345.pages.dev"},{"hostname":"zorvixfin-nl.live","first_observed":"2026-11-05T15:36:14.003Z","first_published":"2026-11-05T16:42:04.725Z","brands":[],"dns":"resolved","resolved":["104.21.42.224","172.67.167.33"],"resolved_at":"2026-11-05T15:48:57Z","dns_checked_at":"2026-11-05T16:55:43.000Z","dns_since":"2026-11-05T16:55:43.000Z","findings":[{"id":"fvmrw55oxcrp7lh4kbw56","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T15:36:14.003Z","first_published":"2026-11-05T16:42:04.725Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=zorvixfin-nl.live"},{"hostname":"aave.casa","first_observed":"2026-11-05T15:35:03.000Z","first_published":"2026-11-05T15:35:03.000Z","brands":[{"id":"aave","name":"Aave","url":"https://domainspoof.com/brands/aave"}],"dns":"resolved","resolved":["104.21.50.247","172.67.215.7","2606:4700:3033::6815:32f7","2606:4700:3036::ac43:d707"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of aave.com (same name, other ending), listed by MetaMask","first_observed":"2026-11-05T15:35:03.000Z","first_published":"2026-11-05T15:35:03.000Z","of":"aave.com","spelling":"tld","found_by":"dns_sweep","listings":[{"kind":"reported","source":"metamask","source_name":"MetaMask","host":"aave.casa","flagged_at":"2026-11-05T15:35:03Z"}]}],"url":"https://domainspoof.com/brands/aave"},{"hostname":"codashopp.com","first_observed":"2026-11-05T15:35:03.000Z","first_published":"2026-11-05T15:35:03.000Z","brands":[{"id":"codashop","name":"Codashop","url":"https://domainspoof.com/brands/codashop"}],"dns":"resolved","resolved":["185.150.189.166"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of codashop.com (a doubled letter), resolved to 185.150.189.166, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T15:35:03.000Z","first_published":"2026-11-05T15:35:03.000Z","of":"codashop.com","spelling":"repetition","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"185.150.189.166","flagged_at":"2026-11-05T15:35:03Z"}]}],"url":"https://domainspoof.com/brands/codashop"},{"hostname":"coinbase.beer","first_observed":"2026-11-05T15:35:03.000Z","first_published":"2026-11-05T15:35:03.000Z","brands":[{"id":"coinbase","name":"Coinbase","url":"https://domainspoof.com/brands/coinbase"}],"dns":"resolved","resolved":["127.0.0.1"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of coinbase.com (same name, other ending), reported by PhishDestroy","first_observed":"2026-11-05T15:35:03.000Z","first_published":"2026-11-05T15:35:03.000Z","of":"coinbase.com","spelling":"tld","found_by":"dns_sweep","listings":[{"kind":"reported","source":"phishdestroy","source_name":"PhishDestroy","host":"coinbase.beer","flagged_at":"2026-11-05T15:35:03Z"}]}],"url":"https://domainspoof.com/brands/coinbase"},{"hostname":"coinbase.yoga","first_observed":"2026-11-05T15:35:03.000Z","first_published":"2026-11-05T15:35:03.000Z","brands":[{"id":"coinbase","name":"Coinbase","url":"https://domainspoof.com/brands/coinbase"}],"dns":"resolved","resolved":["104.21.4.92","172.67.131.228","2606:4700:3031::6815:45c","2606:4700:3035::ac43:83e4"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of coinbase.com (same name, other ending), listed by MetaMask","first_observed":"2026-11-05T15:35:03.000Z","first_published":"2026-11-05T15:35:03.000Z","of":"coinbase.com","spelling":"tld","found_by":"dns_sweep","listings":[{"kind":"reported","source":"metamask","source_name":"MetaMask","host":"coinbase.yoga","flagged_at":"2026-11-05T15:35:03Z"}]}],"url":"https://domainspoof.com/brands/coinbase"},{"hostname":"comcasy.net","first_observed":"2026-11-05T15:35:03.000Z","first_published":"2026-11-05T15:35:03.000Z","brands":[{"id":"comcast","name":"Comcast (Xfinity)","url":"https://domainspoof.com/brands/comcast"}],"dns":"resolved","resolved":["212.7.194.71"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of comcast.com (a letter from a neighbouring key), resolved to 212.7.194.71, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T15:35:03.000Z","first_published":"2026-11-05T15:35:03.000Z","of":"comcast.com","spelling":"adjacent_key","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"212.7.194.71","flagged_at":"2026-11-05T15:35:03Z"}]}],"url":"https://domainspoof.com/brands/comcast"},{"hostname":"craihslist.org","first_observed":"2026-11-05T15:35:03.000Z","first_published":"2026-11-05T15:35:03.000Z","brands":[{"id":"craigslist","name":"Craigslist","url":"https://domainspoof.com/brands/craigslist"}],"dns":"resolved","resolved":["77.247.179.87"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of craigslist.org (a letter from a neighbouring key), resolved to 77.247.179.87, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T15:35:03.000Z","first_published":"2026-11-05T15:35:03.000Z","of":"craigslist.org","spelling":"adjacent_key","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"77.247.179.87","flagged_at":"2026-11-05T15:35:03Z"}]}],"url":"https://domainspoof.com/brands/craigslist"},{"hostname":"craitslist.com","first_observed":"2026-11-05T15:35:03.000Z","first_published":"2026-11-05T15:35:03.000Z","brands":[{"id":"craigslist","name":"Craigslist","url":"https://domainspoof.com/brands/craigslist"}],"dns":"resolved","resolved":["199.193.114.103"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of craigslist.org (a letter from a neighbouring key), resolved to 199.193.114.103, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T15:35:03.000Z","first_published":"2026-11-05T15:35:03.000Z","of":"craigslist.org","spelling":"adjacent_key","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"199.193.114.103","flagged_at":"2026-11-05T15:35:03Z"}]}],"url":"https://domainspoof.com/brands/craigslist"},{"hostname":"dhl-tracking.live","first_observed":"2026-11-05T15:35:03.000Z","first_published":"2026-11-05T15:35:03.000Z","brands":[{"id":"dhl","name":"DHL","url":"https://domainspoof.com/brands/dhl"}],"dns":"resolved","resolved":["185.53.179.136"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of dhl.com (the name with an added word), reported by PhishDestroy","first_observed":"2026-11-05T15:35:03.000Z","first_published":"2026-11-05T15:35:03.000Z","of":"dhl.com","spelling":"combo","found_by":"dns_sweep","listings":[{"kind":"reported","source":"phishdestroy","source_name":"PhishDestroy","host":"dhl-tracking.live","flagged_at":"2026-11-05T15:35:03Z"}]}],"url":"https://domainspoof.com/brands/dhl"},{"hostname":"discord.com.pl","first_observed":"2026-11-05T15:35:03.000Z","first_published":"2026-11-05T15:35:03.000Z","brands":[{"id":"discord","name":"Discord","url":"https://domainspoof.com/brands/discord"}],"dns":"resolved","resolved":["185.253.212.22"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of discord.com (same name, other ending), resolved to 185.253.212.22, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T15:35:03.000Z","first_published":"2026-11-05T15:35:03.000Z","of":"discord.com","spelling":"tld","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"185.253.212.22","flagged_at":"2026-11-05T15:35:03Z"}]}],"url":"https://domainspoof.com/brands/discord"},{"hostname":"dr0pbox.net","first_observed":"2026-11-05T15:35:03.000Z","first_published":"2026-11-05T15:35:03.000Z","brands":[{"id":"dropbox","name":"Dropbox","url":"https://domainspoof.com/brands/dropbox"}],"dns":"resolved","resolved":["101.99.91.201"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of dropbox.com (similar-looking characters), resolved to 101.99.91.201, where reported phishing was found in the 48 hours before, and resolved to 101.99.91.201 on Spamhaus DROP","first_observed":"2026-11-05T15:35:03.000Z","first_published":"2026-11-05T15:35:03.000Z","of":"dropbox.com","spelling":"homoglyph","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"101.99.91.201","flagged_at":"2026-11-05T15:35:03Z"},{"kind":"address","source":"spamhaus_drop","list_name":"Spamhaus DROP","address":"101.99.91.201","flagged_at":"2026-11-05T15:35:03Z"}]}],"url":"https://domainspoof.com/brands/dropbox"},{"hostname":"eaiwa.org","first_observed":"2026-11-05T15:35:03.000Z","first_published":"2026-11-05T15:35:03.000Z","brands":[{"id":"daiwa-securities","name":"Daiwa Securities","url":"https://domainspoof.com/brands/daiwa-securities"}],"dns":"resolved","resolved":["2.59.170.20","104.219.250.37"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of daiwa.co.jp (a letter from a neighbouring key), resolved to 2.59.170.20, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T15:35:03.000Z","first_published":"2026-11-05T15:35:03.000Z","of":"daiwa.co.jp","spelling":"adjacent_key","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"2.59.170.20","flagged_at":"2026-11-05T15:35:03Z"}]}],"url":"https://domainspoof.com/brands/daiwa-securities"},{"hostname":"ebzy.com","first_observed":"2026-11-05T15:35:03.000Z","first_published":"2026-11-05T15:35:03.000Z","brands":[{"id":"ebay","name":"eBay","url":"https://domainspoof.com/brands/ebay"}],"dns":"resolved","resolved":["199.193.114.100"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of ebay.com (a letter from a neighbouring key), resolved to 199.193.114.100, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T15:35:03.000Z","first_published":"2026-11-05T15:35:03.000Z","of":"ebay.com","spelling":"adjacent_key","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"199.193.114.100","flagged_at":"2026-11-05T15:35:03Z"}]}],"url":"https://domainspoof.com/brands/ebay"},{"hostname":"epicgammes.com","first_observed":"2026-11-05T15:35:03.000Z","first_published":"2026-11-05T15:35:03.000Z","brands":[{"id":"epic-games","name":"Epic Games","url":"https://domainspoof.com/brands/epic-games"}],"dns":"resolved","resolved":["23.105.175.18"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of epicgames.com (a doubled letter), resolved to 23.105.175.18, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T15:35:03.000Z","first_published":"2026-11-05T15:35:03.000Z","of":"epicgames.com","spelling":"repetition","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"23.105.175.18","flagged_at":"2026-11-05T15:35:03Z"}]}],"url":"https://domainspoof.com/brands/epic-games"},{"hostname":"espm.es","first_observed":"2026-11-05T15:35:03.000Z","first_published":"2026-11-05T15:35:03.000Z","brands":[{"id":"espn","name":"ESPN","url":"https://domainspoof.com/brands/espn"}],"dns":"resolved","resolved":["2.57.91.91"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of espn.com (a letter from a neighbouring key), resolved to 2.57.91.91, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T15:35:03.000Z","first_published":"2026-11-05T15:35:03.000Z","of":"espn.com","spelling":"adjacent_key","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"2.57.91.91","flagged_at":"2026-11-05T15:35:03Z"}]}],"url":"https://domainspoof.com/brands/espn"},{"hostname":"ethena-foundation.com","first_observed":"2026-11-05T15:35:03.000Z","first_published":"2026-11-05T15:35:03.000Z","brands":[{"id":"ethena","name":"Ethena","url":"https://domainspoof.com/brands/ethena"}],"dns":"resolved","resolved":["104.21.76.105","172.67.193.15","2606:4700:3030::ac43:c10f","2606:4700:3033::6815:4c69"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of ethenafoundation.com (an added hyphen), listed by MetaMask","first_observed":"2026-11-05T15:35:03.000Z","first_published":"2026-11-05T15:35:03.000Z","of":"ethenafoundation.com","spelling":"hyphen","found_by":"dns_sweep","listings":[{"kind":"reported","source":"metamask","source_name":"MetaMask","host":"ethena-foundation.com","flagged_at":"2026-11-05T15:35:03Z"}]}],"url":"https://domainspoof.com/brands/ethena"},{"hostname":"kraken.rocks","first_observed":"2026-11-05T15:35:03.000Z","first_published":"2026-11-05T15:35:03.000Z","brands":[{"id":"kraken","name":"Kraken","url":"https://domainspoof.com/brands/kraken"}],"dns":"resolved","resolved":["88.99.101.251","2a01:4f8:221:11cd:9734:4c26:6044:5f33"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of kraken.com (same name, other ending), resolved to 88.99.101.251, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T15:35:03.000Z","first_published":"2026-11-05T15:35:03.000Z","of":"kraken.com","spelling":"tld","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"88.99.101.251","flagged_at":"2026-11-05T15:35:03Z"}]}],"url":"https://domainspoof.com/brands/kraken"},{"hostname":"0ks9g-0ng7r-um75-c0b07-h6etly.pages.dev","first_observed":"2026-11-05T14:36:29.359Z","first_published":"2026-11-05T15:33:07.108Z","brands":[],"dns":"resolved","resolved":["172.66.44.144","172.66.47.112"],"resolved_at":"2026-11-05T14:36:35Z","dns_checked_at":"2026-11-06T15:45:00.000Z","dns_since":"2026-11-05T15:44:33.000Z","findings":[{"id":"fh6jae3yozemvy4qr474b","kind":"reported_domain","summary":"Reported by PhishTank","first_observed":"2026-11-05T14:36:29.359Z","first_published":"2026-11-05T15:33:07.108Z","source":"phishtank","source_name":"PhishTank","source_url":"https://phishtank.org/phish_detail.php?phish_id=9479237"}],"url":"https://domainspoof.com/live?show=all&q=0ks9g-0ng7r-um75-c0b07-h6etly.pages.dev"},{"hostname":"11z6.vip","first_observed":"2026-11-05T15:26:04.061Z","first_published":"2026-11-05T15:33:07.108Z","brands":[],"dns":"resolved","resolved":["104.21.43.234","172.67.186.228"],"resolved_at":"2026-11-05T15:26:18Z","dns_checked_at":"2026-11-06T15:45:00.000Z","dns_since":"2026-11-05T15:44:33.000Z","findings":[{"id":"fgk6r25ahogryejfgbohb","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T15:26:04.061Z","first_published":"2026-11-05T15:33:07.108Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=11z6.vip"},{"hostname":"394761-crypto.com","first_observed":"2026-11-05T15:00:55.013Z","first_published":"2026-11-05T15:33:07.108Z","brands":[{"id":"crypto-com","name":"Crypto.com","url":"https://domainspoof.com/brands/crypto-com"}],"dns":"resolved","resolved":["104.21.94.67","172.67.220.138","2606:4700:3030::6815:5e43","2606:4700:3037::ac43:dc8a"],"resolved_at":"2026-11-05T15:00:59Z","dns_checked_at":"2026-11-06T15:45:00.000Z","dns_since":"2026-11-05T15:44:33.000Z","findings":[{"id":"fev4p33yxgfiiupavzqje","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T15:00:55.013Z","first_published":"2026-11-05T15:33:07.108Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/brands/crypto-com"},{"hostname":"439517-crypto.com","first_observed":"2026-11-05T14:36:29.359Z","first_published":"2026-11-05T15:33:07.108Z","brands":[{"id":"crypto-com","name":"Crypto.com","url":"https://domainspoof.com/brands/crypto-com"}],"dns":"resolved","resolved":["104.21.50.124","172.67.163.45","2606:4700:3036::6815:327c","2606:4700:3037::ac43:a32d"],"resolved_at":"2026-11-05T14:36:35Z","dns_checked_at":"2026-11-06T15:45:00.000Z","dns_since":"2026-11-05T15:44:33.000Z","findings":[{"id":"fxvqpb75wzsjjge6r5shq","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T14:36:29.359Z","first_published":"2026-11-05T15:33:07.108Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/brands/crypto-com"},{"hostname":"450731-crypto.com","first_observed":"2026-11-05T14:26:29.193Z","first_published":"2026-11-05T15:33:07.108Z","brands":[{"id":"crypto-com","name":"Crypto.com","url":"https://domainspoof.com/brands/crypto-com"}],"dns":"resolved","resolved":["104.21.87.49","172.67.141.130","2606:4700:3035::6815:5731","2606:4700:3035::ac43:8d82"],"resolved_at":"2026-11-05T14:26:47Z","dns_checked_at":"2026-11-06T15:45:00.000Z","dns_since":"2026-11-05T15:44:33.000Z","findings":[{"id":"fl7yljxv6gp7weujjsc34","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T14:26:29.193Z","first_published":"2026-11-05T15:33:07.108Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/brands/crypto-com"},{"hostname":"503681-crypto.com","first_observed":"2026-11-05T14:26:29.193Z","first_published":"2026-11-05T15:33:07.108Z","brands":[{"id":"crypto-com","name":"Crypto.com","url":"https://domainspoof.com/brands/crypto-com"}],"dns":"resolved","resolved":["104.21.58.235","172.67.209.253","2606:4700:3035::ac43:d1fd","2606:4700:3036::6815:3aeb"],"resolved_at":"2026-11-05T14:26:47Z","dns_checked_at":"2026-11-06T15:45:00.000Z","dns_since":"2026-11-05T15:44:33.000Z","findings":[{"id":"f23y2azjz6cnozr7cnp7r","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T14:26:29.193Z","first_published":"2026-11-05T15:33:07.108Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/brands/crypto-com"},{"hostname":"53298.sbs","first_observed":"2026-11-05T15:18:40.514Z","first_published":"2026-11-05T15:33:07.108Z","brands":[],"dns":"resolved","resolved":["104.21.48.155","172.67.154.66","2606:4700:3033::6815:309b","2606:4700:3034::ac43:9a42"],"resolved_at":"2026-11-05T15:20:06Z","dns_checked_at":"2026-11-06T15:45:00.000Z","dns_since":"2026-11-05T15:44:33.000Z","findings":[{"id":"faecshast3g332cdehcmz","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T15:18:40.514Z","first_published":"2026-11-05T15:33:07.108Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=53298.sbs"},{"hostname":"536218-crypto.com","first_observed":"2026-11-05T14:41:08.241Z","first_published":"2026-11-05T15:33:07.108Z","brands":[{"id":"crypto-com","name":"Crypto.com","url":"https://domainspoof.com/brands/crypto-com"}],"dns":"resolved","resolved":["104.21.84.66","172.67.187.171","2606:4700:3034::6815:5442","2606:4700:3035::ac43:bbab"],"resolved_at":"2026-11-05T14:41:18Z","dns_checked_at":"2026-11-06T15:45:00.000Z","dns_since":"2026-11-05T15:44:33.000Z","findings":[{"id":"feegatp6utcsbqqcqzdp7","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T14:41:08.241Z","first_published":"2026-11-05T15:33:07.108Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/brands/crypto-com"},{"hostname":"571408-crypto.com","first_observed":"2026-11-05T15:26:04.061Z","first_published":"2026-11-05T15:33:07.108Z","brands":[{"id":"crypto-com","name":"Crypto.com","url":"https://domainspoof.com/brands/crypto-com"}],"dns":"resolved","resolved":["104.21.70.2","172.67.217.1","2606:4700:3035::ac43:d901","2606:4700:3036::6815:4602"],"resolved_at":"2026-11-05T15:26:19Z","dns_checked_at":"2026-11-06T15:45:00.000Z","dns_since":"2026-11-05T15:44:33.000Z","findings":[{"id":"fotrviipsbuaijvc7zedk","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T15:26:04.061Z","first_published":"2026-11-05T15:33:07.108Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/brands/crypto-com"},{"hostname":"591803-crypto.com","first_observed":"2026-11-05T14:41:08.241Z","first_published":"2026-11-05T15:33:07.108Z","brands":[{"id":"crypto-com","name":"Crypto.com","url":"https://domainspoof.com/brands/crypto-com"}],"dns":"resolved","resolved":["104.21.38.166","172.67.136.120","2606:4700:3033::6815:26a6","2606:4700:3036::ac43:8878"],"resolved_at":"2026-11-05T14:41:18Z","dns_checked_at":"2026-11-06T15:45:00.000Z","dns_since":"2026-11-05T15:44:33.000Z","findings":[{"id":"fo5zso3tq4cqnyccgtnbz","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T14:41:08.241Z","first_published":"2026-11-05T15:33:07.108Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/brands/crypto-com"},{"hostname":"615849-crypto.com","first_observed":"2026-11-05T15:16:00.479Z","first_published":"2026-11-05T15:33:07.108Z","brands":[{"id":"crypto-com","name":"Crypto.com","url":"https://domainspoof.com/brands/crypto-com"}],"dns":"resolved","resolved":["104.21.62.140","172.67.168.92","2606:4700:3030::6815:3e8c","2606:4700:3035::ac43:a85c"],"resolved_at":"2026-11-05T15:16:14Z","dns_checked_at":"2026-11-06T15:45:00.000Z","dns_since":"2026-11-05T15:44:33.000Z","findings":[{"id":"fhlvjp2kfeemqo6jd435h","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T15:16:00.479Z","first_published":"2026-11-05T15:33:07.108Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/brands/crypto-com"},{"hostname":"735816-crypto.com","first_observed":"2026-11-05T14:26:29.193Z","first_published":"2026-11-05T15:33:07.108Z","brands":[{"id":"crypto-com","name":"Crypto.com","url":"https://domainspoof.com/brands/crypto-com"}],"dns":"resolved","resolved":["104.21.1.16","172.67.151.217","2606:4700:3034::6815:110","2606:4700:3034::ac43:97d9"],"resolved_at":"2026-11-05T14:26:47Z","dns_checked_at":"2026-11-06T15:45:00.000Z","dns_since":"2026-11-05T15:44:33.000Z","findings":[{"id":"fexetppxybiec5p46lrvd","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T14:26:29.193Z","first_published":"2026-11-05T15:33:07.108Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/brands/crypto-com"},{"hostname":"827053-crypto.com","first_observed":"2026-11-05T14:36:29.359Z","first_published":"2026-11-05T15:33:07.108Z","brands":[{"id":"crypto-com","name":"Crypto.com","url":"https://domainspoof.com/brands/crypto-com"}],"dns":"resolved","resolved":["104.21.71.129","172.67.145.88","2606:4700:3030::ac43:9158","2606:4700:3031::6815:4781"],"resolved_at":"2026-11-05T14:36:36Z","dns_checked_at":"2026-11-06T15:45:00.000Z","dns_since":"2026-11-05T15:44:33.000Z","findings":[{"id":"f5x7jf72i4y4fjjiaaw4x","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T14:36:29.359Z","first_published":"2026-11-05T15:33:07.108Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/brands/crypto-com"},{"hostname":"843651-crypto.com","first_observed":"2026-11-05T15:10:42.147Z","first_published":"2026-11-05T15:33:07.108Z","brands":[{"id":"crypto-com","name":"Crypto.com","url":"https://domainspoof.com/brands/crypto-com"}],"dns":"resolved","resolved":["104.21.38.199","172.67.138.77","2606:4700:3034::ac43:8a4d","2606:4700:3036::6815:26c7"],"resolved_at":"2026-11-05T15:10:58Z","dns_checked_at":"2026-11-06T15:45:00.000Z","dns_since":"2026-11-05T15:44:33.000Z","findings":[{"id":"fkqxh54c3ralyxhfv64pl","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T15:10:42.147Z","first_published":"2026-11-05T15:33:07.108Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/brands/crypto-com"},{"hostname":"85734.sbs","first_observed":"2026-11-05T15:18:40.514Z","first_published":"2026-11-05T15:33:07.108Z","brands":[],"dns":"resolved","resolved":["fd10:aec2:5dae::"],"resolved_at":"2026-11-05T15:20:06Z","dns_checked_at":"2026-11-06T15:45:00.000Z","dns_since":"2026-11-05T15:44:33.000Z","findings":[{"id":"f3oa7vlczv5okn35khyc5","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T15:18:40.514Z","first_published":"2026-11-05T15:33:07.108Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=85734.sbs"},{"hostname":"8zb-pqds06-mf02q-uk95vq-pln.pages.dev","first_observed":"2026-11-05T14:56:43.434Z","first_published":"2026-11-05T15:33:07.108Z","brands":[],"dns":"resolved","resolved":["172.66.44.118","172.66.47.138"],"resolved_at":"2026-11-05T14:56:52Z","dns_checked_at":"2026-11-06T15:45:00.000Z","dns_since":"2026-11-05T15:44:33.000Z","findings":[{"id":"fspfi6dbfzuhl27evpmme","kind":"reported_domain","summary":"Reported by PhishTank","first_observed":"2026-11-05T14:56:43.434Z","first_published":"2026-11-05T15:33:07.108Z","source":"phishtank","source_name":"PhishTank","source_url":"https://phishtank.org/phish_detail.php?phish_id=9479288"}],"url":"https://domainspoof.com/live?show=all&q=8zb-pqds06-mf02q-uk95vq-pln.pages.dev"},{"hostname":"916374-crypto.com","first_observed":"2026-11-05T14:31:19.205Z","first_published":"2026-11-05T15:33:07.108Z","brands":[{"id":"crypto-com","name":"Crypto.com","url":"https://domainspoof.com/brands/crypto-com"}],"dns":"resolved","resolved":["104.21.60.186","172.67.200.50","2606:4700:3031::6815:3cba","2606:4700:3035::ac43:c832"],"resolved_at":"2026-11-05T14:31:26Z","dns_checked_at":"2026-11-06T15:45:00.000Z","dns_since":"2026-11-05T15:44:33.000Z","findings":[{"id":"fprz34kns52fjctsftdig","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T14:31:19.205Z","first_published":"2026-11-05T15:33:07.108Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/brands/crypto-com"},{"hostname":"a.trysity.info","first_observed":"2026-11-05T14:46:20.048Z","first_published":"2026-11-05T15:33:07.108Z","brands":[],"dns":"resolved","resolved":["172.86.86.51"],"resolved_at":"2026-11-05T14:46:30Z","dns_checked_at":"2026-11-06T15:45:00.000Z","dns_since":"2026-11-05T15:44:33.000Z","findings":[{"id":"flenzgeprpnmdv6l447r7","kind":"reported_domain","summary":"Under trysity.info, listed by MetaMask","first_observed":"2026-11-05T14:46:20.048Z","first_published":"2026-11-05T15:33:07.108Z","source":"metamask","source_name":"MetaMask","under":"trysity.info"}],"url":"https://domainspoof.com/live?show=all&q=a.trysity.info"},{"hostname":"afrisynapse-za.net","first_observed":"2026-11-05T15:05:31.615Z","first_published":"2026-11-05T15:33:07.108Z","brands":[],"dns":"resolved","resolved":["104.21.71.26","172.67.142.109"],"resolved_at":"2026-11-05T15:06:41Z","dns_checked_at":"2026-11-06T15:45:00.000Z","dns_since":"2026-11-05T15:44:33.000Z","findings":[{"id":"f5efkqsgsqzv2ci6hhlfh","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T15:05:31.615Z","first_published":"2026-11-05T15:33:07.108Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=afrisynapse-za.net"},{"hostname":"agdnursneo.shop","first_observed":"2026-11-05T14:51:33.017Z","first_published":"2026-11-05T15:33:07.108Z","brands":[],"dns":"resolved","resolved":["104.21.64.151","172.67.152.33"],"resolved_at":"2026-11-05T14:51:43Z","dns_checked_at":"2026-11-06T15:45:00.000Z","dns_since":"2026-11-05T15:44:33.000Z","findings":[{"id":"fnkmfblpiswkdmlrixszn","kind":"reported_domain","summary":"Listed by NPA 165 (finance and insurance)","first_observed":"2026-11-05T14:51:33.017Z","first_published":"2026-11-05T15:33:07.108Z","source":"npa","source_name":"NPA 165","claim":{"category":"finance and insurance"}}],"url":"https://domainspoof.com/live?show=all&q=agdnursneo.shop"},{"hostname":"agitrade.shop","first_observed":"2026-11-05T14:26:29.193Z","first_published":"2026-11-05T15:33:07.108Z","brands":[],"dns":"resolved","resolved":["104.21.33.50","172.67.141.103"],"resolved_at":"2026-11-05T14:26:51Z","dns_checked_at":"2026-11-06T15:45:00.000Z","dns_since":"2026-11-05T15:44:33.000Z","findings":[{"id":"fuqqmchkypg2dgapmewrr","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T14:26:29.193Z","first_published":"2026-11-05T15:33:07.108Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=agitrade.shop"},{"hostname":"ai.teamcoinbase.co","first_observed":"2026-11-05T14:41:08.241Z","first_published":"2026-11-05T15:33:07.108Z","brands":[],"dns":"resolved","resolved":["185.53.179.136"],"resolved_at":"2026-11-05T14:41:22Z","dns_checked_at":"2026-11-06T15:45:00.000Z","dns_since":"2026-11-05T15:44:33.000Z","findings":[{"id":"fns76fswplsd4b6e3iove","kind":"reported_domain","summary":"Under teamcoinbase.co, reported by PhishDestroy","first_observed":"2026-11-05T14:41:08.241Z","first_published":"2026-11-05T15:33:07.108Z","source":"phishdestroy","source_name":"PhishDestroy","under":"teamcoinbase.co","source_url":"https://phishdestroy.io/domain/teamcoinbase.co/"}],"url":"https://domainspoof.com/live?show=all&q=ai.teamcoinbase.co"},{"hostname":"aiglerendanca-fr.live","first_observed":"2026-11-05T14:51:33.017Z","first_published":"2026-11-05T15:33:07.108Z","brands":[],"dns":"resolved","resolved":["104.21.6.74","172.67.134.153"],"resolved_at":"2026-11-05T14:51:43Z","dns_checked_at":"2026-11-06T15:45:00.000Z","dns_since":"2026-11-05T15:44:33.000Z","findings":[{"id":"fhks66lw5chljot3zbdwl","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T14:51:33.017Z","first_published":"2026-11-05T15:33:07.108Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=aiglerendanca-fr.live"},{"hostname":"aiglerentivo.com","first_observed":"2026-11-05T15:05:31.615Z","first_published":"2026-11-05T15:33:07.108Z","brands":[],"dns":"resolved","resolved":["104.21.30.39","172.67.150.134"],"resolved_at":"2026-11-05T15:06:41Z","dns_checked_at":"2026-11-06T15:45:00.000Z","dns_since":"2026-11-05T15:44:33.000Z","findings":[{"id":"fjo4zoqks3vywdlbnldza","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T15:05:31.615Z","first_published":"2026-11-05T15:33:07.108Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=aiglerentivo.com"},{"hostname":"aiyaphorm-es.live","first_observed":"2026-11-05T14:46:20.048Z","first_published":"2026-11-05T15:33:07.108Z","brands":[],"dns":"resolved","resolved":["104.21.92.31","172.67.185.91"],"resolved_at":"2026-11-05T14:46:34Z","dns_checked_at":"2026-11-06T15:45:00.000Z","dns_since":"2026-11-05T15:44:33.000Z","findings":[{"id":"faeblk3le7ztvmt5anh3k","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T14:46:20.048Z","first_published":"2026-11-05T15:33:07.108Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=aiyaphorm-es.live"},{"hostname":"alianca-rs.com.br","first_observed":"2026-11-05T14:46:20.048Z","first_published":"2026-11-05T15:33:07.108Z","brands":[],"dns":"resolved","resolved":["104.26.10.102","104.26.11.102","172.67.69.190"],"resolved_at":"2026-11-05T14:46:34Z","dns_checked_at":"2026-11-06T15:45:00.000Z","dns_since":"2026-11-05T15:44:33.000Z","findings":[{"id":"fetou2jsowimlducijfpf","kind":"reported_domain","summary":"Reported by PhishTank","first_observed":"2026-11-05T14:46:20.048Z","first_published":"2026-11-05T15:33:07.108Z","source":"phishtank","source_name":"PhishTank","source_url":"https://phishtank.org/phish_detail.php?phish_id=8708430"}],"url":"https://domainspoof.com/live?show=all&q=alianca-rs.com.br"},{"hostname":"allegro03.vip","first_observed":"2026-11-05T15:10:42.147Z","first_published":"2026-11-05T15:33:07.108Z","brands":[],"dns":"resolved","resolved":["104.21.12.5","172.67.131.215","2606:4700:3035::6815:c05","2606:4700:3035::ac43:83d7"],"resolved_at":"2026-11-05T15:11:01Z","dns_checked_at":"2026-11-06T15:45:00.000Z","dns_since":"2026-11-05T15:44:33.000Z","findings":[{"id":"finhjxsd22u6acke4apaz","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T15:10:42.147Z","first_published":"2026-11-05T15:33:07.108Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=allegro03.vip"},{"hostname":"aloesalbic.store","first_observed":"2026-11-05T15:18:40.514Z","first_published":"2026-11-05T15:33:07.108Z","brands":[],"dns":"not_found","resolved":["104.21.43.200","172.67.184.176","2606:4700:3032::ac43:b8b0","2606:4700:3037::6815:2bc8"],"resolved_at":"2026-11-05T15:20:06Z","dns_checked_at":"2026-11-06T16:45:16.000Z","findings":[{"id":"fbit64y66nybkw5asukyv","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T15:18:40.514Z","first_published":"2026-11-05T15:33:07.108Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=aloesalbic.store"},{"hostname":"alptronpro.digital","first_observed":"2026-11-05T14:31:19.205Z","first_published":"2026-11-05T15:33:07.108Z","brands":[],"dns":"resolved","resolved":["104.21.23.227","172.67.213.252"],"resolved_at":"2026-11-05T14:31:30Z","dns_checked_at":"2026-11-06T15:45:00.000Z","dns_since":"2026-11-05T15:44:33.000Z","findings":[{"id":"fkkjw5mqskxzybvkvwwf2","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T14:31:19.205Z","first_published":"2026-11-05T15:33:07.108Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=alptronpro.digital"},{"hostname":"amkpj.asia","first_observed":"2026-11-05T15:21:16.676Z","first_published":"2026-11-05T15:33:07.108Z","brands":[],"dns":"resolved","resolved":["104.21.73.57","172.67.158.69"],"resolved_at":"2026-11-05T15:21:37Z","dns_checked_at":"2026-11-06T15:45:00.000Z","dns_since":"2026-11-05T15:44:33.000Z","findings":[{"id":"fymcx36xsc65jstf3lpn7","kind":"reported_domain","summary":"Listed by NPA 165 (information services)","first_observed":"2026-11-05T15:21:16.676Z","first_published":"2026-11-05T15:33:07.108Z","source":"npa","source_name":"NPA 165","claim":{"category":"information services"}}],"url":"https://domainspoof.com/live?show=all&q=amkpj.asia"},{"hostname":"amperes-peak.com","first_observed":"2026-11-05T14:36:29.359Z","first_published":"2026-11-05T15:33:07.108Z","brands":[],"dns":"resolved","resolved":["104.21.16.117","172.67.212.10"],"resolved_at":"2026-11-05T14:36:40Z","dns_checked_at":"2026-11-06T15:45:00.000Z","dns_since":"2026-11-05T15:44:33.000Z","findings":[{"id":"foqtntk2snrzg7j4tib34","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T14:36:29.359Z","first_published":"2026-11-05T15:33:07.108Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=amperes-peak.com"},{"hostname":"api.lavandecoinpulseplatform-com.financecryptoworld.com","first_observed":"2026-11-05T15:05:31.615Z","first_published":"2026-11-05T15:33:07.108Z","brands":[],"dns":"resolved","resolved":["104.21.10.130","172.67.131.121"],"resolved_at":"2026-11-05T15:06:41Z","dns_checked_at":"2026-11-06T15:45:00.000Z","dns_since":"2026-11-05T15:44:33.000Z","findings":[{"id":"fj22zchskn6j2szkval5o","kind":"reported_domain","summary":"Under financecryptoworld.com, listed by CERT Polska","first_observed":"2026-11-05T15:05:31.615Z","first_published":"2026-11-05T15:33:07.108Z","source":"cert_polska","source_name":"CERT Polska","under":"financecryptoworld.com"}],"url":"https://domainspoof.com/live?show=all&q=api.lavandecoinpulseplatform-com.financecryptoworld.com"},{"hostname":"api.teamcoinbase.co","first_observed":"2026-11-05T15:05:31.615Z","first_published":"2026-11-05T15:33:07.108Z","brands":[],"dns":"resolved","resolved":["185.53.179.136"],"resolved_at":"2026-11-05T15:06:41Z","dns_checked_at":"2026-11-06T15:45:00.000Z","dns_since":"2026-11-05T15:44:33.000Z","findings":[{"id":"fgi64eykmkhnut4woalug","kind":"reported_domain","summary":"Under teamcoinbase.co, reported by PhishDestroy","first_observed":"2026-11-05T15:05:31.615Z","first_published":"2026-11-05T15:33:07.108Z","source":"phishdestroy","source_name":"PhishDestroy","under":"teamcoinbase.co","source_url":"https://phishdestroy.io/domain/teamcoinbase.co/"}],"url":"https://domainspoof.com/live?show=all&q=api.teamcoinbase.co"},{"hostname":"app-openbank.com","first_observed":"2026-11-05T14:36:29.359Z","first_published":"2026-11-05T15:33:07.108Z","brands":[],"dns":"resolved","resolved":["37.148.201.157"],"resolved_at":"2026-11-05T14:36:40Z","dns_checked_at":"2026-11-06T15:45:00.000Z","dns_since":"2026-11-05T15:44:33.000Z","findings":[{"id":"fuaba5ne2cze3oi2sgyrf","kind":"reported_domain","summary":"Reported by PhishTank","first_observed":"2026-11-05T14:36:29.359Z","first_published":"2026-11-05T15:33:07.108Z","source":"phishtank","source_name":"PhishTank","source_url":"https://phishtank.org/phish_detail.php?phish_id=9548502"}],"url":"https://domainspoof.com/live?show=all&q=app-openbank.com"},{"hostname":"app.trysity.info","first_observed":"2026-11-05T14:46:20.048Z","first_published":"2026-11-05T15:33:07.108Z","brands":[],"dns":"resolved","resolved":["172.86.86.51"],"resolved_at":"2026-11-05T14:46:34Z","dns_checked_at":"2026-11-06T15:45:00.000Z","dns_since":"2026-11-05T15:44:33.000Z","findings":[{"id":"fks5aqalzcal7ceak4ee2","kind":"reported_domain","summary":"Under trysity.info, listed by MetaMask","first_observed":"2026-11-05T14:46:20.048Z","first_published":"2026-11-05T15:33:07.108Z","source":"metamask","source_name":"MetaMask","under":"trysity.info"}],"url":"https://domainspoof.com/live?show=all&q=app.trysity.info"},{"hostname":"aquabroadcastlane.com","first_observed":"2026-11-05T14:51:33.017Z","first_published":"2026-11-05T15:33:07.108Z","brands":[],"dns":"resolved","resolved":["192.175.22.51"],"resolved_at":"2026-11-05T14:51:43Z","dns_checked_at":"2026-11-06T15:45:00.000Z","dns_since":"2026-11-05T15:44:33.000Z","findings":[{"id":"ft3r73ghurhzriq5fdckf","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T14:51:33.017Z","first_published":"2026-11-05T15:33:07.108Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=aquabroadcastlane.com"},{"hostname":"arconic.pages.dev","first_observed":"2026-11-05T14:46:20.048Z","first_published":"2026-11-05T15:33:07.108Z","brands":[],"dns":"resolved","resolved":["172.66.44.118","172.66.47.138"],"resolved_at":"2026-11-05T14:46:34Z","dns_checked_at":"2026-11-06T15:45:00.000Z","dns_since":"2026-11-05T15:44:33.000Z","findings":[{"id":"fvlsrucqbxp7oqhnpcha4","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T14:46:20.048Z","first_published":"2026-11-05T15:33:07.108Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=arconic.pages.dev"},{"hostname":"arvenpunto-it.live","first_observed":"2026-11-05T15:05:31.615Z","first_published":"2026-11-05T15:33:07.108Z","brands":[],"dns":"resolved","resolved":["104.21.57.31","172.67.188.234"],"resolved_at":"2026-11-05T15:06:41Z","dns_checked_at":"2026-11-06T15:45:00.000Z","dns_since":"2026-11-05T15:44:33.000Z","findings":[{"id":"fbmmc7dmliprxmti5icch","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T15:05:31.615Z","first_published":"2026-11-05T15:33:07.108Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=arvenpunto-it.live"},{"hostname":"atout-precocite.fr","first_observed":"2026-11-05T14:21:09.353Z","first_published":"2026-11-05T15:33:07.108Z","brands":[],"dns":"resolved","resolved":["213.186.33.3"],"resolved_at":"2026-11-05T14:21:31Z","dns_checked_at":"2026-11-06T15:45:00.000Z","dns_since":"2026-11-05T15:44:33.000Z","findings":[{"id":"fn4qkv6llinufg3g6dist","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T14:21:09.353Z","first_published":"2026-11-05T15:33:07.108Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/atout-precocite.fr/"}],"url":"https://domainspoof.com/live?show=all&q=atout-precocite.fr"},{"hostname":"autoconfig.bitbase-miners.com","first_observed":"2026-11-05T15:00:55.013Z","first_published":"2026-11-05T15:33:07.108Z","brands":[],"dns":"resolved","resolved":["5.182.208.207"],"resolved_at":"2026-11-05T15:01:00Z","dns_checked_at":"2026-11-06T15:45:00.000Z","dns_since":"2026-11-05T15:44:33.000Z","findings":[{"id":"fqvqaneuyyz2itzcy3spr","kind":"reported_domain","summary":"Under bitbase-miners.com, reported by PhishDestroy","first_observed":"2026-11-05T15:00:55.013Z","first_published":"2026-11-05T15:33:07.108Z","source":"phishdestroy","source_name":"PhishDestroy","under":"bitbase-miners.com","source_url":"https://phishdestroy.io/domain/bitbase-miners.com/"}],"url":"https://domainspoof.com/live?show=all&q=autoconfig.bitbase-miners.com"},{"hostname":"autodiscover.bitbase-miners.com","first_observed":"2026-11-05T15:00:55.013Z","first_published":"2026-11-05T15:33:07.108Z","brands":[],"dns":"resolved","resolved":["5.182.208.207"],"resolved_at":"2026-11-05T15:01:00Z","dns_checked_at":"2026-11-06T15:45:00.000Z","dns_since":"2026-11-05T15:44:33.000Z","findings":[{"id":"f6ppzgb2l33dr7gqh3xrp","kind":"reported_domain","summary":"Under bitbase-miners.com, reported by PhishDestroy","first_observed":"2026-11-05T15:00:55.013Z","first_published":"2026-11-05T15:33:07.108Z","source":"phishdestroy","source_name":"PhishDestroy","under":"bitbase-miners.com","source_url":"https://phishdestroy.io/domain/bitbase-miners.com/"}],"url":"https://domainspoof.com/live?show=all&q=autodiscover.bitbase-miners.com"},{"hostname":"avsrentacar.org","first_observed":"2026-11-05T14:51:33.017Z","first_published":"2026-11-05T15:33:07.108Z","brands":[],"dns":"resolved","resolved":["104.21.14.110","172.67.158.169"],"resolved_at":"2026-11-05T14:51:43Z","dns_checked_at":"2026-11-06T15:45:00.000Z","dns_since":"2026-11-05T15:44:33.000Z","findings":[{"id":"fqmrf7wabkvf2sjkov7rp","kind":"reported_domain","summary":"Listed by USOM","first_observed":"2026-11-05T14:51:33.017Z","first_published":"2026-11-05T15:33:07.108Z","source":"usom","source_name":"USOM"}],"url":"https://domainspoof.com/live?show=all&q=avsrentacar.org"},{"hostname":"bascz.top","first_observed":"2026-11-05T14:56:43.434Z","first_published":"2026-11-05T15:33:07.108Z","brands":[],"dns":"resolved","resolved":["104.21.45.7","172.67.207.68"],"resolved_at":"2026-11-05T14:59:26Z","dns_checked_at":"2026-11-06T15:45:00.000Z","dns_since":"2026-11-05T15:44:33.000Z","findings":[{"id":"functc3bbi2imol2edcs4","kind":"reported_domain","summary":"Listed by MODA (one-page scam site)","first_observed":"2026-11-05T14:56:43.434Z","first_published":"2026-11-05T15:33:07.108Z","source":"moda","source_name":"MODA","claim":{"category":"one-page scam site"}}],"url":"https://domainspoof.com/live?show=all&q=bascz.top"},{"hostname":"basex402.com","first_observed":"2026-11-05T14:46:20.048Z","first_published":"2026-11-05T15:33:07.108Z","brands":[],"dns":"resolved","resolved":["216.150.1.1"],"resolved_at":"2026-11-05T14:46:41Z","dns_checked_at":"2026-11-06T15:45:00.000Z","dns_since":"2026-11-05T15:44:33.000Z","findings":[{"id":"ffjl5zgw37buzfn6xnmer","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T14:46:20.048Z","first_published":"2026-11-05T15:33:07.108Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=basex402.com"},{"hostname":"baykartechnews.com","first_observed":"2026-11-05T14:36:29.359Z","first_published":"2026-11-05T15:33:07.108Z","brands":[],"dns":"resolved","resolved":["103.224.212.142"],"resolved_at":"2026-11-05T14:36:49Z","dns_checked_at":"2026-11-06T15:45:00.000Z","dns_since":"2026-11-05T15:44:33.000Z","findings":[{"id":"f7z3442cbblv6bcgsjvyv","kind":"reported_domain","summary":"Listed by USOM","first_observed":"2026-11-05T14:36:29.359Z","first_published":"2026-11-05T15:33:07.108Z","source":"usom","source_name":"USOM"}],"url":"https://domainspoof.com/live?show=all&q=baykartechnews.com"},{"hostname":"bcyzxgdy.shop","first_observed":"2026-11-05T14:36:29.359Z","first_published":"2026-11-05T15:33:07.108Z","brands":[],"dns":"resolved","resolved":["104.17.231.54"],"resolved_at":"2026-11-05T14:36:49Z","dns_checked_at":"2026-11-06T15:45:00.000Z","dns_since":"2026-11-05T15:44:33.000Z","findings":[{"id":"fjtoqnyk2jwrexm5htsrt","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T14:36:29.359Z","first_published":"2026-11-05T15:33:07.108Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=bcyzxgdy.shop"},{"hostname":"bingo.marserv.cc","first_observed":"2026-11-05T14:36:29.359Z","first_published":"2026-11-05T15:33:07.108Z","brands":[],"dns":"resolved","resolved":["43.255.159.94"],"resolved_at":"2026-11-05T14:36:49Z","dns_checked_at":"2026-11-06T15:45:00.000Z","dns_since":"2026-11-05T15:44:33.000Z","findings":[{"id":"f5v6fmz7ls3kgkaagwjhc","kind":"reported_domain","summary":"Under marserv.cc, listed by MetaMask","first_observed":"2026-11-05T14:36:29.359Z","first_published":"2026-11-05T15:33:07.108Z","source":"metamask","source_name":"MetaMask","under":"marserv.cc"}],"url":"https://domainspoof.com/live?show=all&q=bingo.marserv.cc"},{"hostname":"bitnest.me","first_observed":"2026-11-05T15:16:00.479Z","first_published":"2026-11-05T15:33:07.108Z","brands":[],"dns":"resolved","resolved":["104.21.20.99","172.67.192.17"],"resolved_at":"2026-11-05T15:27:31Z","dns_checked_at":"2026-11-06T15:45:00.000Z","dns_since":"2026-11-05T15:44:33.000Z","findings":[{"id":"frvksahzjhxy4mwnvgm7h","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T15:16:00.479Z","first_published":"2026-11-05T15:33:07.108Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/bitnest.me/"}],"url":"https://domainspoof.com/live?show=all&q=bitnest.me"},{"hostname":"bitrefill.com-cs01-esim-gift.com","first_observed":"2026-11-05T15:01:06.240Z","first_published":"2026-11-05T15:33:07.108Z","brands":[{"id":"bitrefill","name":"Bitrefill","url":"https://domainspoof.com/brands/bitrefill"}],"dns":"resolved","resolved":["62.60.226.39"],"resolved_at":"2026-11-06T15:45:00Z","dns_checked_at":"2026-11-06T15:45:00.000Z","dns_since":"2026-11-05T15:44:33.000Z","findings":[{"id":"flubqn5ko3do5wuv7fbwm","kind":"spamhaus_drop","summary":"Resolved to 62.60.226.39 on Spamhaus DROP","first_observed":"2026-11-05T15:01:06.240Z","first_published":"2026-11-05T15:33:07.108Z","address":"62.60.226.39","list":"spamhaus_drop","list_name":"Spamhaus DROP"}],"url":"https://domainspoof.com/brands/bitrefill"},{"hostname":"bnzeeyr.shop","first_observed":"2026-11-05T14:26:29.193Z","first_published":"2026-11-05T15:33:07.108Z","brands":[],"dns":"resolved","resolved":["104.21.14.38","172.67.157.179"],"resolved_at":"2026-11-05T14:33:45Z","dns_checked_at":"2026-11-06T15:45:00.000Z","dns_since":"2026-11-05T15:44:33.000Z","findings":[{"id":"fxgz7xxkxugrrb3vcczlo","kind":"reported_domain","summary":"Listed by NPA 165 (information services)","first_observed":"2026-11-05T14:26:29.193Z","first_published":"2026-11-05T15:33:07.108Z","source":"npa","source_name":"NPA 165","claim":{"category":"information services"}}],"url":"https://domainspoof.com/live?show=all&q=bnzeeyr.shop"},{"hostname":"bonkclaim-2vm.pages.dev","first_observed":"2026-11-05T15:26:04.061Z","first_published":"2026-11-05T15:33:07.108Z","brands":[],"dns":"resolved","resolved":["172.66.45.24","172.66.46.232"],"resolved_at":"2026-11-05T15:31:36Z","dns_checked_at":"2026-11-06T15:45:00.000Z","dns_since":"2026-11-05T15:44:33.000Z","findings":[{"id":"fcooodyjqrceo4d6jplwc","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T15:26:04.061Z","first_published":"2026-11-05T15:33:07.108Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=bonkclaim-2vm.pages.dev"},{"hostname":"bonus-al.icu","first_observed":"2026-11-05T15:26:04.061Z","first_published":"2026-11-05T15:33:07.108Z","brands":[],"dns":"resolved","resolved":["104.21.6.166","172.67.135.9"],"resolved_at":"2026-11-05T15:31:36Z","dns_checked_at":"2026-11-06T15:45:00.000Z","dns_since":"2026-11-05T15:44:33.000Z","findings":[{"id":"fzmfxk33ys2bjo54eq5ad","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T15:26:04.061Z","first_published":"2026-11-05T15:33:07.108Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/bonus-al.icu/"}],"url":"https://domainspoof.com/live?show=all&q=bonus-al.icu"},{"hostname":"borealcapitivo-fr.live","first_observed":"2026-11-05T14:51:33.017Z","first_published":"2026-11-05T15:33:07.108Z","brands":[],"dns":"resolved","resolved":["104.21.16.58","172.67.166.166"],"resolved_at":"2026-11-05T14:53:15Z","dns_checked_at":"2026-11-06T15:45:00.000Z","dns_since":"2026-11-05T15:44:33.000Z","findings":[{"id":"f6tepfrgvyty4l37gnb4s","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T14:51:33.017Z","first_published":"2026-11-05T15:33:07.108Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=borealcapitivo-fr.live"},{"hostname":"britexiumprimo-fr.live","first_observed":"2026-11-05T15:26:04.061Z","first_published":"2026-11-05T15:33:07.108Z","brands":[],"dns":"resolved","resolved":["104.21.53.239","172.67.220.75"],"resolved_at":"2026-11-05T15:31:36Z","dns_checked_at":"2026-11-06T15:45:00.000Z","dns_since":"2026-11-05T15:44:33.000Z","findings":[{"id":"ftijmxhdwn2qeusl555n3","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T15:26:04.061Z","first_published":"2026-11-05T15:33:07.108Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=britexiumprimo-fr.live"},{"hostname":"bsntimaz.piadwetc.gzejalyo.jqakeigr.npwbyidz.emnbzdvj.uatmfwcq.gatewaylearning.ezgateway.net","first_observed":"2026-11-05T15:16:00.479Z","first_published":"2026-11-05T15:33:07.108Z","brands":[],"dns":"resolved","resolved":["15.204.116.29"],"resolved_at":"2026-11-05T15:27:31Z","dns_checked_at":"2026-11-06T15:45:00.000Z","dns_since":"2026-11-05T15:44:33.000Z","findings":[{"id":"fjddkff4aphiom25wzev5","kind":"reported_domain","summary":"Under ezgateway.net, listed by USOM","first_observed":"2026-11-05T15:16:00.479Z","first_published":"2026-11-05T15:33:07.108Z","source":"usom","source_name":"USOM","under":"ezgateway.net"}],"url":"https://domainspoof.com/live?show=all&q=bsntimaz.piadwetc.gzejalyo.jqakeigr.npwbyidz.emnbzdvj.uatmfwcq.gatewaylearning.ezgateway.net"},{"hostname":"btcmentralixv7-pro.pages.dev","first_observed":"2026-11-05T14:41:08.241Z","first_published":"2026-11-05T15:33:07.108Z","brands":[],"dns":"resolved","resolved":["172.66.44.81","172.66.47.175"],"resolved_at":"2026-11-05T14:45:15Z","dns_checked_at":"2026-11-06T15:45:00.000Z","dns_since":"2026-11-05T15:44:33.000Z","findings":[{"id":"fef5vjfwhk6h7mw2sxtq7","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T14:41:08.241Z","first_published":"2026-11-05T15:33:07.108Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=btcmentralixv7-pro.pages.dev"},{"hostname":"caijingtw.shop","first_observed":"2026-11-05T14:36:29.359Z","first_published":"2026-11-05T15:33:07.108Z","brands":[],"dns":"resolved","resolved":["104.21.78.216","172.67.137.163"],"resolved_at":"2026-11-05T14:36:52Z","dns_checked_at":"2026-11-06T15:45:00.000Z","dns_since":"2026-11-05T15:44:33.000Z","findings":[{"id":"fez4chc5ypdy4quz72zyp","kind":"reported_domain","summary":"Listed by NPA 165 (finance and insurance)","first_observed":"2026-11-05T14:36:29.359Z","first_published":"2026-11-05T15:33:07.108Z","source":"npa","source_name":"NPA 165","claim":{"category":"finance and insurance"}}],"url":"https://domainspoof.com/live?show=all&q=caijingtw.shop"},{"hostname":"calls-icloud.com","first_observed":"2026-11-05T15:01:08.520Z","first_published":"2026-11-05T15:33:07.108Z","brands":[{"id":"apple","name":"Apple","url":"https://domainspoof.com/brands/apple"}],"dns":"resolved","resolved":["172.232.24.161","172.232.24.235","172.234.25.42"],"resolved_at":"2026-11-06T15:45:00Z","dns_checked_at":"2026-11-06T15:45:00.000Z","dns_since":"2026-11-05T15:44:33.000Z","findings":[{"id":"fxqbpl7g3ag3jcqln6a5o","kind":"phishing_infrastructure","summary":"Resolved to 172.232.24.161, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T15:01:08.520Z","first_published":"2026-11-05T15:33:07.108Z","address":"172.232.24.161","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/apple"},{"hostname":"carousell.cash","first_observed":"2026-11-05T14:59:35.089Z","first_published":"2026-11-05T15:33:07.108Z","brands":[{"id":"carousell","name":"Carousell","url":"https://domainspoof.com/brands/carousell"}],"dns":"resolved","resolved":["192.252.178.181"],"resolved_at":"2026-11-06T15:45:00Z","dns_checked_at":"2026-11-06T15:45:00.000Z","dns_since":"2026-11-05T15:44:33.000Z","findings":[{"id":"fk2rqntzndm6no5lgkpk7","kind":"spamhaus_drop","summary":"Resolved to 192.252.178.181 on Spamhaus DROP","first_observed":"2026-11-05T14:59:35.089Z","first_published":"2026-11-05T15:33:07.108Z","address":"192.252.178.181","list":"spamhaus_drop","list_name":"Spamhaus DROP"}],"url":"https://domainspoof.com/brands/carousell"},{"hostname":"caserltd.com","first_observed":"2026-11-05T14:36:29.359Z","first_published":"2026-11-05T15:33:07.108Z","brands":[],"dns":"resolved","resolved":["104.21.5.156","172.67.133.136"],"resolved_at":"2026-11-05T14:36:52Z","dns_checked_at":"2026-11-06T15:45:00.000Z","dns_since":"2026-11-05T15:44:33.000Z","findings":[{"id":"fdcxrpnkx5d3zeic2s2m3","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T14:36:29.359Z","first_published":"2026-11-05T15:33:07.108Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/caserltd.com/"}],"url":"https://domainspoof.com/live?show=all&q=caserltd.com"},{"hostname":"castillodetabernas.com","first_observed":"2026-11-05T14:36:29.359Z","first_published":"2026-11-05T15:33:07.108Z","brands":[],"dns":"resolved","resolved":["94.198.46.52"],"resolved_at":"2026-11-05T14:36:52Z","dns_checked_at":"2026-11-06T15:45:00.000Z","dns_since":"2026-11-05T15:44:33.000Z","findings":[{"id":"f6ceu2l3l47s6iep44l2v","kind":"reported_domain","summary":"Reported by PhishTank","first_observed":"2026-11-05T14:36:29.359Z","first_published":"2026-11-05T15:33:07.108Z","source":"phishtank","source_name":"PhishTank","source_url":"https://phishtank.org/phish_detail.php?phish_id=8123116"}],"url":"https://domainspoof.com/live?show=all&q=castillodetabernas.com"},{"hostname":"chainlotemaxpro-it.live","first_observed":"2026-11-05T14:56:43.434Z","first_published":"2026-11-05T15:33:07.108Z","brands":[],"dns":"resolved","resolved":["104.21.67.145","172.67.177.87"],"resolved_at":"2026-11-05T14:59:35Z","dns_checked_at":"2026-11-06T15:45:00.000Z","dns_since":"2026-11-05T15:44:33.000Z","findings":[{"id":"fti7ea5kpfeqje6j4zjf3","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T14:56:43.434Z","first_published":"2026-11-05T15:33:07.108Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=chainlotemaxpro-it.live"},{"hostname":"cicd-preview.kingdom-dmc.com","first_observed":"2026-11-05T15:21:16.676Z","first_published":"2026-11-05T15:33:07.108Z","brands":[],"dns":"resolved","resolved":["185.215.4.42"],"resolved_at":"2026-11-05T15:21:46Z","dns_checked_at":"2026-11-06T15:45:00.000Z","dns_since":"2026-11-05T15:44:33.000Z","findings":[{"id":"frncyi7udo3jytnodma5x","kind":"reported_domain","summary":"Under kingdom-dmc.com, listed by MetaMask","first_observed":"2026-11-05T15:21:16.676Z","first_published":"2026-11-05T15:33:07.108Z","source":"metamask","source_name":"MetaMask","under":"kingdom-dmc.com"}],"url":"https://domainspoof.com/live?show=all&q=cicd-preview.kingdom-dmc.com"},{"hostname":"cieloluminoso.com","first_observed":"2026-11-05T14:46:20.048Z","first_published":"2026-11-05T15:33:07.108Z","brands":[],"dns":"resolved","resolved":["104.21.61.169","172.67.212.94"],"resolved_at":"2026-11-05T14:48:53Z","dns_checked_at":"2026-11-06T15:45:00.000Z","dns_since":"2026-11-05T15:44:33.000Z","findings":[{"id":"fz5cn5evqlrno2pimn6kr","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T14:46:20.048Z","first_published":"2026-11-05T15:33:07.108Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=cieloluminoso.com"},{"hostname":"cispay.app","first_observed":"2026-11-05T14:21:09.353Z","first_published":"2026-11-05T15:33:07.108Z","brands":[],"dns":"resolved","resolved":["185.178.208.144"],"resolved_at":"2026-11-06T09:00:19Z","dns_checked_at":"2026-11-06T15:45:00.000Z","dns_since":"2026-11-05T15:44:33.000Z","findings":[{"id":"fl2btmztzzgy25noyahkj","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T14:21:09.353Z","first_published":"2026-11-05T15:33:07.108Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/cispay.app/"}],"url":"https://domainspoof.com/live?show=all&q=cispay.app"},{"hostname":"claim-solflare.com","first_observed":"2026-11-05T15:05:31.615Z","first_published":"2026-11-05T15:33:07.108Z","brands":[],"dns":"resolved","resolved":["104.21.39.17","172.67.142.32"],"resolved_at":"2026-11-05T15:06:52Z","dns_checked_at":"2026-11-06T15:45:00.000Z","dns_since":"2026-11-05T15:44:33.000Z","findings":[{"id":"f5a4y6ornvdzwgtealez2","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T15:05:31.615Z","first_published":"2026-11-05T15:33:07.108Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=claim-solflare.com"},{"hostname":"clashxpro.app","first_observed":"2026-11-05T15:05:31.615Z","first_published":"2026-11-05T15:33:07.108Z","brands":[],"dns":"resolved","resolved":["216.198.79.1"],"resolved_at":"2026-11-05T15:06:52Z","dns_checked_at":"2026-11-06T15:45:00.000Z","dns_since":"2026-11-05T15:44:33.000Z","findings":[{"id":"fzvaoqjdnjxys5fwopmhz","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T15:05:31.615Z","first_published":"2026-11-05T15:33:07.108Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=clashxpro.app"},{"hostname":"cmcmeuemsus.dev","first_observed":"2026-11-05T14:36:29.359Z","first_published":"2026-11-05T15:33:07.108Z","brands":[{"id":"societe-generale","name":"Société Générale","url":"https://domainspoof.com/brands/societe-generale"}],"dns":"resolved","resolved":["104.21.41.211","172.67.151.123"],"resolved_at":"2026-11-05T14:36:52Z","dns_checked_at":"2026-11-06T15:45:00.000Z","dns_since":"2026-11-05T15:44:33.000Z","findings":[{"id":"fxm5iu5jpglz2basbbo2g","kind":"reported_domain","summary":"Reported by PhishTank as imitating Société Générale","first_observed":"2026-11-05T14:36:29.359Z","first_published":"2026-11-05T15:33:07.108Z","source":"phishtank","source_name":"PhishTank","claim":{"brand":"Société Générale"},"source_url":"https://phishtank.org/phish_detail.php?phish_id=9550086"}],"url":"https://domainspoof.com/brands/societe-generale"},{"hostname":"coinpssd.com","first_observed":"2026-11-05T14:36:29.359Z","first_published":"2026-11-05T15:33:07.108Z","brands":[],"dns":"resolved","resolved":["104.21.3.26","172.67.130.19"],"resolved_at":"2026-11-05T14:36:52Z","dns_checked_at":"2026-11-06T15:45:00.000Z","dns_since":"2026-11-05T15:44:33.000Z","findings":[{"id":"focwgrf3eqv7rq6oxvodw","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T14:36:29.359Z","first_published":"2026-11-05T15:33:07.108Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=coinpssd.com"},{"hostname":"coinpssg.com","first_observed":"2026-11-05T15:26:04.061Z","first_published":"2026-11-05T15:33:07.108Z","brands":[],"dns":"resolved","resolved":["104.21.49.129","172.67.163.63"],"resolved_at":"2026-11-05T15:26:38Z","dns_checked_at":"2026-11-06T15:45:00.000Z","dns_since":"2026-11-05T15:44:33.000Z","findings":[{"id":"fyoy4zadoqwtnonhzqsq5","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T15:26:04.061Z","first_published":"2026-11-05T15:33:07.108Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=coinpssg.com"},{"hostname":"coinpsss.com","first_observed":"2026-11-05T14:26:29.193Z","first_published":"2026-11-05T15:33:07.108Z","brands":[],"dns":"resolved","resolved":["104.21.20.189","172.67.194.20"],"resolved_at":"2026-11-05T14:34:03Z","dns_checked_at":"2026-11-06T15:45:00.000Z","dns_since":"2026-11-05T15:44:33.000Z","findings":[{"id":"figajz2jqlepmeegskdbs","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T14:26:29.193Z","first_published":"2026-11-05T15:33:07.108Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=coinpsss.com"},{"hostname":"collectrcrypt.xyz","first_observed":"2026-11-05T15:16:00.479Z","first_published":"2026-11-05T15:33:07.108Z","brands":[],"dns":"resolved","resolved":["104.21.6.203","172.67.135.64"],"resolved_at":"2026-11-06T03:21:22Z","dns_checked_at":"2026-11-06T15:45:00.000Z","dns_since":"2026-11-05T15:44:33.000Z","findings":[{"id":"fjmj7t5g6dl5u2ipgdmul","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T15:16:00.479Z","first_published":"2026-11-05T15:33:07.108Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/collectrcrypt.xyz/"}],"url":"https://domainspoof.com/live?show=all&q=collectrcrypt.xyz"},{"hostname":"contrphosp.store","first_observed":"2026-11-05T15:18:40.514Z","first_published":"2026-11-05T15:33:07.108Z","brands":[],"dns":"not_found","resolved":["104.21.34.114","172.67.160.122","2606:4700:3030::ac43:a07a","2606:4700:3033::6815:2272"],"resolved_at":"2026-11-05T15:20:06Z","dns_checked_at":"2026-11-06T16:45:16.000Z","findings":[{"id":"f2ng2kfmjjay2o7qz33ls","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T15:18:40.514Z","first_published":"2026-11-05T15:33:07.108Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=contrphosp.store"},{"hostname":"coronafondenza-it.live","first_observed":"2026-11-05T14:36:29.359Z","first_published":"2026-11-05T15:33:07.108Z","brands":[],"dns":"resolved","resolved":["104.21.20.160","172.67.193.48"],"resolved_at":"2026-11-05T14:36:58Z","dns_checked_at":"2026-11-06T15:45:00.000Z","dns_since":"2026-11-05T15:44:33.000Z","findings":[{"id":"fmu5akbesr6tqb5bpbnby","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T14:36:29.359Z","first_published":"2026-11-05T15:33:07.108Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=coronafondenza-it.live"},{"hostname":"cpanel.bitbase-miners.com","first_observed":"2026-11-05T15:00:55.013Z","first_published":"2026-11-05T15:33:07.108Z","brands":[],"dns":"resolved","resolved":["5.182.208.207"],"resolved_at":"2026-11-05T15:01:10Z","dns_checked_at":"2026-11-06T15:45:00.000Z","dns_since":"2026-11-05T15:44:33.000Z","findings":[{"id":"fbdfpatdbljgmnbyf6jyb","kind":"reported_domain","summary":"Under bitbase-miners.com, reported by PhishDestroy","first_observed":"2026-11-05T15:00:55.013Z","first_published":"2026-11-05T15:33:07.108Z","source":"phishdestroy","source_name":"PhishDestroy","under":"bitbase-miners.com","source_url":"https://phishdestroy.io/domain/bitbase-miners.com/"}],"url":"https://domainspoof.com/live?show=all&q=cpanel.bitbase-miners.com"},{"hostname":"crescoedge.com","first_observed":"2026-11-05T15:26:04.061Z","first_published":"2026-11-05T15:33:07.108Z","brands":[],"dns":"resolved","resolved":["104.21.63.172","172.67.148.212"],"resolved_at":"2026-11-05T15:26:41Z","dns_checked_at":"2026-11-06T15:45:00.000Z","dns_since":"2026-11-05T15:44:33.000Z","findings":[{"id":"ffwam7xnfahgb54qbshob","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T15:26:04.061Z","first_published":"2026-11-05T15:33:07.108Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=crescoedge.com"},{"hostname":"crescovault.com","first_observed":"2026-11-05T14:21:09.353Z","first_published":"2026-11-05T15:33:07.108Z","brands":[],"dns":"resolved","resolved":["104.21.84.127","172.67.193.6"],"resolved_at":"2026-11-05T14:24:53Z","dns_checked_at":"2026-11-06T15:45:00.000Z","dns_since":"2026-11-05T15:44:33.000Z","findings":[{"id":"fskzpfg6lyxhx4n5wfosp","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T14:21:09.353Z","first_published":"2026-11-05T15:33:07.108Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=crescovault.com"},{"hostname":"cumbranzapartners.net","first_observed":"2026-11-05T15:26:04.061Z","first_published":"2026-11-05T15:33:07.108Z","brands":[],"dns":"resolved","resolved":["104.21.80.244","172.67.155.156"],"resolved_at":"2026-11-05T15:26:41Z","dns_checked_at":"2026-11-06T15:45:00.000Z","dns_since":"2026-11-05T15:44:33.000Z","findings":[{"id":"fpyfkyhby7juvtuqyqhu7","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T15:26:04.061Z","first_published":"2026-11-05T15:33:07.108Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=cumbranzapartners.net"},{"hostname":"daria.mariajackpot.space","first_observed":"2026-11-05T14:36:29.359Z","first_published":"2026-11-05T15:33:07.108Z","brands":[],"dns":"resolved","resolved":["142.132.214.87","2a01:4f8:262:52ea::1"],"resolved_at":"2026-11-05T14:36:58Z","dns_checked_at":"2026-11-06T15:45:00.000Z","dns_since":"2026-11-05T15:44:33.000Z","findings":[{"id":"fgj7obyjwh5ak34bdkbpl","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T14:36:29.359Z","first_published":"2026-11-05T15:33:07.108Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=daria.mariajackpot.space"},{"hostname":"deepmarkets.app","first_observed":"2026-11-05T14:56:43.434Z","first_published":"2026-11-05T15:33:07.108Z","brands":[],"dns":"resolved","resolved":["104.21.56.133","172.67.152.25"],"resolved_at":"2026-11-05T14:59:44Z","dns_checked_at":"2026-11-06T15:45:00.000Z","dns_since":"2026-11-05T15:44:33.000Z","findings":[{"id":"f7szqy6uegkckf5eo34sx","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T14:56:43.434Z","first_published":"2026-11-05T15:33:07.108Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=deepmarkets.app"},{"hostname":"defrorappa.store","first_observed":"2026-11-05T15:18:40.514Z","first_published":"2026-11-05T15:33:07.108Z","brands":[],"dns":"not_found","resolved":["104.21.9.62","172.67.159.38","2606:4700:3033::6815:93e","2606:4700:3035::ac43:9f26"],"resolved_at":"2026-11-05T15:20:06Z","dns_checked_at":"2026-11-06T16:45:16.000Z","findings":[{"id":"fpgk3bkcvgdrg3yibys45","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T15:18:40.514Z","first_published":"2026-11-05T15:33:07.108Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=defrorappa.store"},{"hostname":"demo.ni-electrical.com","first_observed":"2026-11-05T15:10:42.147Z","first_published":"2026-11-05T15:33:07.108Z","brands":[],"dns":"resolved","resolved":["109.238.86.5"],"resolved_at":"2026-11-05T15:18:54Z","dns_checked_at":"2026-11-06T15:45:00.000Z","dns_since":"2026-11-05T15:44:33.000Z","findings":[{"id":"f4djbwptqs2llztaonpx3","kind":"reported_domain","summary":"Under ni-electrical.com, listed by CERT Polska","first_observed":"2026-11-05T15:10:42.147Z","first_published":"2026-11-05T15:33:07.108Z","source":"cert_polska","source_name":"CERT Polska","under":"ni-electrical.com"}],"url":"https://domainspoof.com/live?show=all&q=demo.ni-electrical.com"},{"hostname":"dfge666.top","first_observed":"2026-11-05T14:56:43.434Z","first_published":"2026-11-05T15:33:07.108Z","brands":[],"dns":"resolved","resolved":["104.21.17.239","172.67.178.221"],"resolved_at":"2026-11-05T14:59:44Z","dns_checked_at":"2026-11-06T15:45:00.000Z","dns_since":"2026-11-05T15:44:33.000Z","findings":[{"id":"fsvrfpze36tsgiinfja3z","kind":"reported_domain","summary":"Listed by NPA 165 (information services)","first_observed":"2026-11-05T14:56:43.434Z","first_published":"2026-11-05T15:33:07.108Z","source":"npa","source_name":"NPA 165","claim":{"category":"information services"}}],"url":"https://domainspoof.com/live?show=all&q=dfge666.top"},{"hostname":"dinamixorai-it.live","first_observed":"2026-11-05T14:56:43.434Z","first_published":"2026-11-05T15:33:07.108Z","brands":[],"dns":"resolved","resolved":["104.21.10.49","172.67.189.241"],"resolved_at":"2026-11-05T14:59:44Z","dns_checked_at":"2026-11-06T15:45:00.000Z","dns_since":"2026-11-05T15:44:33.000Z","findings":[{"id":"f4klg2tzi6zer6m2fbcga","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T14:56:43.434Z","first_published":"2026-11-05T15:33:07.108Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=dinamixorai-it.live"},{"hostname":"doc--exxodus--web3.pages.dev","first_observed":"2026-11-05T14:31:19.205Z","first_published":"2026-11-05T15:33:07.108Z","brands":[],"dns":"resolved","resolved":["172.66.44.87","172.66.47.169"],"resolved_at":"2026-11-05T14:41:55Z","dns_checked_at":"2026-11-06T15:45:00.000Z","dns_since":"2026-11-05T15:44:33.000Z","findings":[{"id":"fymslvlej4ukvlxpcwdmv","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T14:31:19.205Z","first_published":"2026-11-05T15:33:07.108Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=doc--exxodus--web3.pages.dev"},{"hostname":"down.web6868168.com","first_observed":"2026-11-05T15:05:31.615Z","first_published":"2026-11-05T15:33:07.108Z","brands":[],"dns":"resolved","resolved":["38.190.198.66"],"resolved_at":"2026-11-05T15:07:00Z","dns_checked_at":"2026-11-06T15:45:00.000Z","dns_since":"2026-11-05T15:44:33.000Z","findings":[{"id":"fsqdfewbdg634v23qh5kc","kind":"reported_domain","summary":"Under web6868168.com, listed by MetaMask","first_observed":"2026-11-05T15:05:31.615Z","first_published":"2026-11-05T15:33:07.108Z","source":"metamask","source_name":"MetaMask","under":"web6868168.com"}],"url":"https://domainspoof.com/live?show=all&q=down.web6868168.com"},{"hostname":"dreamy-oceans.com","first_observed":"2026-11-05T14:21:09.353Z","first_published":"2026-11-05T15:33:07.108Z","brands":[],"dns":"resolved","resolved":["104.21.25.251","172.67.134.244"],"resolved_at":"2026-11-05T14:24:55Z","dns_checked_at":"2026-11-06T15:45:00.000Z","dns_since":"2026-11-05T15:44:33.000Z","findings":[{"id":"fut6oxnkqc4lkc2fee3uv","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T14:21:09.353Z","first_published":"2026-11-05T15:33:07.108Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=dreamy-oceans.com"},{"hostname":"dust-allocation.xyz","first_observed":"2026-11-05T15:05:31.615Z","first_published":"2026-11-05T15:33:07.108Z","brands":[],"dns":"resolved","resolved":["104.21.69.160","172.67.210.89"],"resolved_at":"2026-11-05T15:07:00Z","dns_checked_at":"2026-11-06T15:45:00.000Z","dns_since":"2026-11-05T15:44:33.000Z","findings":[{"id":"fr446he4ijknnn3lu7jia","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T15:05:31.615Z","first_published":"2026-11-05T15:33:07.108Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=dust-allocation.xyz"},{"hostname":"eltiempocomco.com","first_observed":"2026-11-05T15:10:42.147Z","first_published":"2026-11-05T15:33:07.108Z","brands":[],"dns":"resolved","resolved":["76.76.21.21"],"resolved_at":"2026-11-05T15:18:58Z","dns_checked_at":"2026-11-06T15:45:00.000Z","dns_since":"2026-11-05T15:44:33.000Z","findings":[{"id":"fyylb6xujucmkuqnjpyv3","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T15:10:42.147Z","first_published":"2026-11-05T15:33:07.108Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/eltiempocomco.com/"}],"url":"https://domainspoof.com/live?show=all&q=eltiempocomco.com"},{"hostname":"emberprotocol.xyz","first_observed":"2026-11-05T14:46:20.048Z","first_published":"2026-11-05T15:33:07.108Z","brands":[],"dns":"resolved","resolved":["104.21.84.23","172.67.185.7"],"resolved_at":"2026-11-05T14:48:59Z","dns_checked_at":"2026-11-06T15:45:00.000Z","dns_since":"2026-11-05T15:44:33.000Z","findings":[{"id":"fhbiu4jvtnpfj5znyh4m5","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T14:46:20.048Z","first_published":"2026-11-05T15:33:07.108Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=emberprotocol.xyz"},{"hostname":"enam.co.za","first_observed":"2026-11-05T15:16:00.479Z","first_published":"2026-11-05T15:33:07.108Z","brands":[],"dns":"resolved","resolved":["41.185.8.216"],"resolved_at":"2026-11-05T15:27:45Z","dns_checked_at":"2026-11-06T15:45:00.000Z","dns_since":"2026-11-05T15:44:33.000Z","findings":[{"id":"fqqqf4bzqwjez5wl4igdz","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T15:16:00.479Z","first_published":"2026-11-05T15:33:07.108Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/enam.co.za/"}],"url":"https://domainspoof.com/live?show=all&q=enam.co.za"},{"hostname":"enter-lienfiapp.xyz","first_observed":"2026-11-05T14:46:20.048Z","first_published":"2026-11-05T15:33:07.108Z","brands":[],"dns":"resolved","resolved":["104.21.85.119","172.67.205.151"],"resolved_at":"2026-11-05T14:48:59Z","dns_checked_at":"2026-11-06T15:45:00.000Z","dns_since":"2026-11-05T15:44:33.000Z","findings":[{"id":"f5xkcmgay6oajz3h7zhck","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T14:46:20.048Z","first_published":"2026-11-05T15:33:07.108Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=enter-lienfiapp.xyz"},{"hostname":"esecrreak.store","first_observed":"2026-11-05T15:18:40.514Z","first_published":"2026-11-05T15:33:07.108Z","brands":[],"dns":"not_found","resolved":["104.21.45.157","172.67.216.104","2606:4700:3031::ac43:d868","2606:4700:3034::6815:2d9d"],"resolved_at":"2026-11-05T15:20:06Z","dns_checked_at":"2026-11-06T16:45:16.000Z","findings":[{"id":"fdmuc55lb4zqj75dh7xrq","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T15:18:40.514Z","first_published":"2026-11-05T15:33:07.108Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=esecrreak.store"},{"hostname":"ethmix.to","first_observed":"2026-11-05T14:26:29.193Z","first_published":"2026-11-05T15:33:07.108Z","brands":[],"dns":"resolved","resolved":["104.21.6.209","172.67.135.70"],"resolved_at":"2026-11-05T14:34:25Z","dns_checked_at":"2026-11-06T15:45:00.000Z","dns_since":"2026-11-05T15:44:33.000Z","findings":[{"id":"frlsnueq6ydp72hjcvz7q","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T14:26:29.193Z","first_published":"2026-11-05T15:33:07.108Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=ethmix.to"},{"hostname":"fbrnltlxvcjyw4g7.tmfshgxq.bnhmdypo.yrudnegt.bxglmvpc.68o6prls9m8lftn9.gatewaylearning.ezgateway.net","first_observed":"2026-11-05T15:16:00.479Z","first_published":"2026-11-05T15:33:07.108Z","brands":[],"dns":"resolved","resolved":["15.204.116.29"],"resolved_at":"2026-11-05T15:27:47Z","dns_checked_at":"2026-11-06T15:45:00.000Z","dns_since":"2026-11-05T15:44:33.000Z","findings":[{"id":"fizrpea67fv7xpmeuuo52","kind":"reported_domain","summary":"Under ezgateway.net, listed by USOM","first_observed":"2026-11-05T15:16:00.479Z","first_published":"2026-11-05T15:33:07.108Z","source":"usom","source_name":"USOM","under":"ezgateway.net"}],"url":"https://domainspoof.com/live?show=all&q=fbrnltlxvcjyw4g7.tmfshgxq.bnhmdypo.yrudnegt.bxglmvpc.68o6prls9m8lftn9.gatewaylearning.ezgateway.net"},{"hostname":"fengshuipemarte.com","first_observed":"2026-11-05T15:00:55.013Z","first_published":"2026-11-05T15:33:07.108Z","brands":[],"dns":"resolved","resolved":["172.236.104.43","172.236.104.157","172.238.172.122"],"resolved_at":"2026-11-06T00:37:12Z","dns_checked_at":"2026-11-06T15:45:00.000Z","dns_since":"2026-11-05T15:44:33.000Z","findings":[{"id":"fub3ogo7n4naviamkpvap","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T15:00:55.013Z","first_published":"2026-11-05T15:33:07.108Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=fengshuipemarte.com"},{"hostname":"fervioai-ai-it.live","first_observed":"2026-11-05T15:05:31.615Z","first_published":"2026-11-05T15:33:07.108Z","brands":[],"dns":"resolved","resolved":["104.21.79.16","172.67.140.8"],"resolved_at":"2026-11-05T15:07:03Z","dns_checked_at":"2026-11-06T15:45:00.000Z","dns_since":"2026-11-05T15:44:33.000Z","findings":[{"id":"fdaqjui24bzf6ruy6muxi","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T15:05:31.615Z","first_published":"2026-11-05T15:33:07.108Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=fervioai-ai-it.live"},{"hostname":"fineverityconstruct.com","first_observed":"2026-11-05T15:18:40.514Z","first_published":"2026-11-05T15:33:07.108Z","brands":[],"dns":"resolved","resolved":["104.21.85.100","172.67.204.113","2606:4700:3034::ac43:cc71","2606:4700:3037::6815:5564"],"resolved_at":"2026-11-05T15:20:06Z","dns_checked_at":"2026-11-06T15:45:00.000Z","dns_since":"2026-11-05T15:44:33.000Z","findings":[{"id":"ftttnlei5m35mx6rw4atq","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T15:18:40.514Z","first_published":"2026-11-05T15:33:07.108Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=fineverityconstruct.com"},{"hostname":"fnfomn.shop","first_observed":"2026-11-05T14:26:29.193Z","first_published":"2026-11-05T15:33:07.108Z","brands":[],"dns":"resolved","resolved":["104.21.31.116","172.67.176.123"],"resolved_at":"2026-11-05T14:34:26Z","dns_checked_at":"2026-11-06T15:45:00.000Z","dns_since":"2026-11-05T15:44:33.000Z","findings":[{"id":"fe6jeoaxfdwzyj3uobxle","kind":"reported_domain","summary":"Listed by NPA 165 (e-commerce)","first_observed":"2026-11-05T14:26:29.193Z","first_published":"2026-11-05T15:33:07.108Z","source":"npa","source_name":"NPA 165","claim":{"category":"e-commerce"}}],"url":"https://domainspoof.com/live?show=all&q=fnfomn.shop"},{"hostname":"forum-arc.xyz","first_observed":"2026-11-05T14:26:29.193Z","first_published":"2026-11-05T15:33:07.108Z","brands":[],"dns":"resolved","resolved":["104.21.58.198","172.67.207.58"],"resolved_at":"2026-11-05T14:34:26Z","dns_checked_at":"2026-11-06T15:45:00.000Z","dns_since":"2026-11-05T15:44:33.000Z","findings":[{"id":"f6g5wgmk6srucoltdcg5h","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T14:26:29.193Z","first_published":"2026-11-05T15:33:07.108Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=forum-arc.xyz"},{"hostname":"freighterwebwallet.com","first_observed":"2026-11-05T14:36:29.359Z","first_published":"2026-11-05T15:33:07.108Z","brands":[],"dns":"resolved","resolved":["104.21.37.124","172.67.208.28"],"resolved_at":"2026-11-05T14:36:58Z","dns_checked_at":"2026-11-06T15:45:00.000Z","dns_since":"2026-11-05T15:44:33.000Z","findings":[{"id":"fwmvkncufke27zmpjw6ef","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T14:36:29.359Z","first_published":"2026-11-05T15:33:07.108Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=freighterwebwallet.com"},{"hostname":"furloritra.store","first_observed":"2026-11-05T15:18:40.514Z","first_published":"2026-11-05T15:33:07.108Z","brands":[],"dns":"not_found","resolved":["104.21.12.220","172.67.153.183","2606:4700:3035::6815:cdc","2606:4700:3036::ac43:99b7"],"resolved_at":"2026-11-05T15:20:06Z","dns_checked_at":"2026-11-06T16:45:16.000Z","findings":[{"id":"fbqbfzpgfqm7g2gogr2iq","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T15:18:40.514Z","first_published":"2026-11-05T15:33:07.108Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=furloritra.store"},{"hostname":"futurovonyxai.digital","first_observed":"2026-11-05T14:26:29.193Z","first_published":"2026-11-05T15:33:07.108Z","brands":[],"dns":"resolved","resolved":["185.62.57.10","185.62.57.205"],"resolved_at":"2026-11-06T10:27:46Z","dns_checked_at":"2026-11-06T15:45:00.000Z","dns_since":"2026-11-05T15:44:33.000Z","findings":[{"id":"fnx67qevzf6j4irlfto7r","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T14:26:29.193Z","first_published":"2026-11-05T15:33:07.108Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=futurovonyxai.digital"},{"hostname":"gfai-admin.web6868168.com","first_observed":"2026-11-05T15:05:31.615Z","first_published":"2026-11-05T15:33:07.108Z","brands":[],"dns":"resolved","resolved":["38.190.198.66"],"resolved_at":"2026-11-05T15:07:04Z","dns_checked_at":"2026-11-06T15:45:00.000Z","dns_since":"2026-11-05T15:44:33.000Z","findings":[{"id":"fgpzinz73y2cnmsnawop4","kind":"reported_domain","summary":"Under web6868168.com, listed by MetaMask","first_observed":"2026-11-05T15:05:31.615Z","first_published":"2026-11-05T15:33:07.108Z","source":"metamask","source_name":"MetaMask","under":"web6868168.com"}],"url":"https://domainspoof.com/live?show=all&q=gfai-admin.web6868168.com"},{"hostname":"gfai-api.web6868168.com","first_observed":"2026-11-05T15:05:31.615Z","first_published":"2026-11-05T15:33:07.108Z","brands":[],"dns":"resolved","resolved":["38.190.198.66"],"resolved_at":"2026-11-05T15:07:04Z","dns_checked_at":"2026-11-06T15:45:00.000Z","dns_since":"2026-11-05T15:44:33.000Z","findings":[{"id":"fgmiro5spsxpt2n6mhxm5","kind":"reported_domain","summary":"Under web6868168.com, listed by MetaMask","first_observed":"2026-11-05T15:05:31.615Z","first_published":"2026-11-05T15:33:07.108Z","source":"metamask","source_name":"MetaMask","under":"web6868168.com"}],"url":"https://domainspoof.com/live?show=all&q=gfai-api.web6868168.com"},{"hostname":"gfaiwallet.web6868168.com","first_observed":"2026-11-05T15:05:31.615Z","first_published":"2026-11-05T15:33:07.108Z","brands":[],"dns":"resolved","resolved":["38.190.198.66"],"resolved_at":"2026-11-05T15:07:04Z","dns_checked_at":"2026-11-06T15:45:00.000Z","dns_since":"2026-11-05T15:44:33.000Z","findings":[{"id":"fyoem7er3hbbd32cmm6ta","kind":"reported_domain","summary":"Under web6868168.com, listed by MetaMask","first_observed":"2026-11-05T15:05:31.615Z","first_published":"2026-11-05T15:33:07.108Z","source":"metamask","source_name":"MetaMask","under":"web6868168.com"}],"url":"https://domainspoof.com/live?show=all&q=gfaiwallet.web6868168.com"},{"hostname":"glow-rift.com","first_observed":"2026-11-05T14:46:20.048Z","first_published":"2026-11-05T15:33:07.108Z","brands":[],"dns":"resolved","resolved":["104.21.3.151","172.67.130.227"],"resolved_at":"2026-11-05T14:49:01Z","dns_checked_at":"2026-11-06T15:45:00.000Z","dns_since":"2026-11-05T15:44:33.000Z","findings":[{"id":"fsq6hnbv6ggc7hutc6ghl","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T14:46:20.048Z","first_published":"2026-11-05T15:33:07.108Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=glow-rift.com"},{"hostname":"go.trysity.info","first_observed":"2026-11-05T14:46:20.048Z","first_published":"2026-11-05T15:33:07.108Z","brands":[],"dns":"resolved","resolved":["172.86.86.51"],"resolved_at":"2026-11-05T14:49:01Z","dns_checked_at":"2026-11-06T15:45:00.000Z","dns_since":"2026-11-05T15:44:33.000Z","findings":[{"id":"f722bhu2hjni56dz4g4ba","kind":"reported_domain","summary":"Under trysity.info, listed by MetaMask","first_observed":"2026-11-05T14:46:20.048Z","first_published":"2026-11-05T15:33:07.108Z","source":"metamask","source_name":"MetaMask","under":"trysity.info"}],"url":"https://domainspoof.com/live?show=all&q=go.trysity.info"},{"hostname":"govern-aave.xyz","first_observed":"2026-11-05T14:26:29.193Z","first_published":"2026-11-05T15:33:07.108Z","brands":[],"dns":"resolved","resolved":["104.21.76.37","172.67.186.152"],"resolved_at":"2026-11-05T14:34:28Z","dns_checked_at":"2026-11-06T15:45:00.000Z","dns_since":"2026-11-05T15:44:33.000Z","findings":[{"id":"fuq4takw355wru7spgxze","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T14:26:29.193Z","first_published":"2026-11-05T15:33:07.108Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=govern-aave.xyz"},{"hostname":"granitesolution.shop","first_observed":"2026-11-05T14:36:29.359Z","first_published":"2026-11-05T15:33:07.108Z","brands":[],"dns":"resolved","resolved":["104.21.1.33","172.67.186.119"],"resolved_at":"2026-11-05T14:36:58Z","dns_checked_at":"2026-11-06T15:45:00.000Z","dns_since":"2026-11-05T15:44:33.000Z","findings":[{"id":"fl5zs4bw2olfkqvc6ztsd","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T14:36:29.359Z","first_published":"2026-11-05T15:33:07.108Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=granitesolution.shop"},{"hostname":"groklorum.icu","first_observed":"2026-11-05T14:51:33.017Z","first_published":"2026-11-05T15:33:07.108Z","brands":[],"dns":"resolved","resolved":["104.21.32.152","172.67.223.229"],"resolved_at":"2026-11-05T14:53:29Z","dns_checked_at":"2026-11-06T15:45:00.000Z","dns_since":"2026-11-05T15:44:33.000Z","findings":[{"id":"fmpsuk6mrfizjce4gp2aw","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T14:51:33.017Z","first_published":"2026-11-05T15:33:07.108Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/groklorum.icu/"}],"url":"https://domainspoof.com/live?show=all&q=groklorum.icu"},{"hostname":"guiadoautobr.com","first_observed":"2026-11-05T15:05:31.615Z","first_published":"2026-11-05T15:33:07.108Z","brands":[],"dns":"resolved","resolved":["104.21.17.122","172.67.176.191"],"resolved_at":"2026-11-05T15:07:04Z","dns_checked_at":"2026-11-06T15:45:00.000Z","dns_since":"2026-11-05T15:44:33.000Z","findings":[{"id":"fgioooggzopnpzbxnoi7d","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T15:05:31.615Z","first_published":"2026-11-05T15:33:07.108Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/guiadoautobr.com/"}],"url":"https://domainspoof.com/live?show=all&q=guiadoautobr.com"},{"hostname":"gykotia.pro","first_observed":"2026-11-05T15:26:04.061Z","first_published":"2026-11-05T15:33:07.108Z","brands":[],"dns":"resolved","resolved":["104.21.9.230","172.67.161.98"],"resolved_at":"2026-11-05T15:26:41Z","dns_checked_at":"2026-11-06T15:45:00.000Z","dns_since":"2026-11-05T15:44:33.000Z","findings":[{"id":"feddu5huwqh5ltu7di4nj","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T15:26:04.061Z","first_published":"2026-11-05T15:33:07.108Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=gykotia.pro"},{"hostname":"hackerkitchensdc.com","first_observed":"2026-11-05T14:31:19.205Z","first_published":"2026-11-05T15:33:07.108Z","brands":[],"dns":"resolved","resolved":["167.172.157.72"],"resolved_at":"2026-11-05T14:41:58Z","dns_checked_at":"2026-11-06T15:45:00.000Z","dns_since":"2026-11-05T15:44:33.000Z","findings":[{"id":"fj2bfhbedhpjzg3xjwsdh","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T14:31:19.205Z","first_published":"2026-11-05T15:33:07.108Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=hackerkitchensdc.com"},{"hostname":"hnanrdi.shop","first_observed":"2026-11-05T14:46:20.048Z","first_published":"2026-11-05T15:33:07.108Z","brands":[],"dns":"resolved","resolved":["104.21.30.48","172.67.150.149"],"resolved_at":"2026-11-05T14:49:02Z","dns_checked_at":"2026-11-06T15:45:00.000Z","dns_since":"2026-11-05T15:44:34.000Z","findings":[{"id":"fxzm6bi5vbegy7fx5jycj","kind":"reported_domain","summary":"Listed by NPA 165 (e-commerce)","first_observed":"2026-11-05T14:46:20.048Z","first_published":"2026-11-05T15:33:07.108Z","source":"npa","source_name":"NPA 165","claim":{"category":"e-commerce"}}],"url":"https://domainspoof.com/live?show=all&q=hnanrdi.shop"},{"hostname":"hodladvisor-ai.digital","first_observed":"2026-11-05T15:16:00.479Z","first_published":"2026-11-05T15:33:07.108Z","brands":[],"dns":"resolved","resolved":["104.21.30.233","172.67.173.249"],"resolved_at":"2026-11-05T15:27:47Z","dns_checked_at":"2026-11-06T15:45:00.000Z","dns_since":"2026-11-05T15:44:34.000Z","findings":[{"id":"fajgzy6c63m7llczzil4k","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T15:16:00.479Z","first_published":"2026-11-05T15:33:07.108Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=hodladvisor-ai.digital"},{"hostname":"homlaoutlets.shop","first_observed":"2026-11-05T15:18:40.514Z","first_published":"2026-11-05T15:33:07.108Z","brands":[],"dns":"resolved","resolved":["104.18.20.248"],"resolved_at":"2026-11-05T15:20:07Z","dns_checked_at":"2026-11-06T15:45:00.000Z","dns_since":"2026-11-05T15:44:34.000Z","findings":[{"id":"fuazu5sgew2vjz7c6piaq","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T15:18:40.514Z","first_published":"2026-11-05T15:33:07.108Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=homlaoutlets.shop"},{"hostname":"hotejka.ink","first_observed":"2026-11-05T14:41:08.241Z","first_published":"2026-11-05T15:33:07.108Z","brands":[],"dns":"resolved","resolved":["150.241.102.38"],"resolved_at":"2026-11-05T14:45:36Z","dns_checked_at":"2026-11-06T15:45:00.000Z","dns_since":"2026-11-05T15:44:34.000Z","findings":[{"id":"fxmwkspylqa3ooiaxguog","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T14:41:08.241Z","first_published":"2026-11-05T15:33:07.108Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/hotejka.ink/"}],"url":"https://domainspoof.com/live?show=all&q=hotejka.ink"},{"hostname":"housecoinusd1.xyz","first_observed":"2026-11-05T15:16:00.479Z","first_published":"2026-11-05T15:33:07.108Z","brands":[],"dns":"resolved","resolved":["64.29.17.1","216.198.79.1"],"resolved_at":"2026-11-06T01:46:12Z","dns_checked_at":"2026-11-06T15:45:00.000Z","dns_since":"2026-11-05T15:44:34.000Z","findings":[{"id":"fyowruekf3vxhqma4c47k","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T15:16:00.479Z","first_published":"2026-11-05T15:33:07.108Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/housecoinusd1.xyz/"}],"url":"https://domainspoof.com/live?show=all&q=housecoinusd1.xyz"},{"hostname":"hub-ethboost.net","first_observed":"2026-11-05T15:05:31.615Z","first_published":"2026-11-05T15:33:07.108Z","brands":[],"dns":"resolved","resolved":["104.21.90.200","172.67.161.19"],"resolved_at":"2026-11-05T15:07:05Z","dns_checked_at":"2026-11-06T15:45:00.000Z","dns_since":"2026-11-05T15:44:34.000Z","findings":[{"id":"fn5qgdkobp6mrn7n5xtmt","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T15:05:31.615Z","first_published":"2026-11-05T15:33:07.108Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/hub-ethboost.net/"}],"url":"https://domainspoof.com/live?show=all&q=hub-ethboost.net"},{"hostname":"huconui.com","first_observed":"2026-11-05T14:31:19.205Z","first_published":"2026-11-05T15:33:07.108Z","brands":[],"dns":"resolved","resolved":["104.21.71.197","172.67.148.44"],"resolved_at":"2026-11-05T14:41:58Z","dns_checked_at":"2026-11-06T15:45:00.000Z","dns_since":"2026-11-05T15:44:34.000Z","findings":[{"id":"f7inppbyzbhpcpvbgcnrk","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T14:31:19.205Z","first_published":"2026-11-05T15:33:07.108Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=huconui.com"},{"hostname":"ikqbf.asia","first_observed":"2026-11-05T14:51:33.017Z","first_published":"2026-11-05T15:33:07.108Z","brands":[],"dns":"resolved","resolved":["104.21.29.85","172.67.148.165"],"resolved_at":"2026-11-05T14:53:31Z","dns_checked_at":"2026-11-06T15:45:00.000Z","dns_since":"2026-11-05T15:44:34.000Z","findings":[{"id":"fdb2f2r5w45rvpglzy32w","kind":"reported_domain","summary":"Listed by NPA 165 (information services)","first_observed":"2026-11-05T14:51:33.017Z","first_published":"2026-11-05T15:33:07.108Z","source":"npa","source_name":"NPA 165","claim":{"category":"information services"}}],"url":"https://domainspoof.com/live?show=all&q=ikqbf.asia"},{"hostname":"ilanservisnzhizmet.com","first_observed":"2026-11-05T14:46:20.048Z","first_published":"2026-11-05T15:33:07.108Z","brands":[],"dns":"no_address","resolved":[],"resolved_at":"2026-11-05T14:49:03Z","dns_checked_at":"2026-11-06T15:45:00.000Z","dns_since":"2026-11-05T15:44:34.000Z","findings":[{"id":"f4fastpvg7jtmdmgdpueb","kind":"reported_domain","summary":"Listed by USOM","first_observed":"2026-11-05T14:46:20.048Z","first_published":"2026-11-05T15:33:07.108Z","source":"usom","source_name":"USOM"}],"url":"https://domainspoof.com/live?show=all&q=ilanservisnzhizmet.com"},{"hostname":"im.web6868168.com","first_observed":"2026-11-05T15:05:31.615Z","first_published":"2026-11-05T15:33:07.108Z","brands":[],"dns":"resolved","resolved":["38.190.198.66"],"resolved_at":"2026-11-05T15:07:06Z","dns_checked_at":"2026-11-06T15:45:00.000Z","dns_since":"2026-11-05T15:44:34.000Z","findings":[{"id":"fffsnwmq66dk6kxnjmbjn","kind":"reported_domain","summary":"Under web6868168.com, listed by MetaMask","first_observed":"2026-11-05T15:05:31.615Z","first_published":"2026-11-05T15:33:07.108Z","source":"metamask","source_name":"MetaMask","under":"web6868168.com"}],"url":"https://domainspoof.com/live?show=all&q=im.web6868168.com"},{"hostname":"img.polar-tensor.com","first_observed":"2026-11-05T14:26:29.193Z","first_published":"2026-11-05T15:33:07.108Z","brands":[],"dns":"resolved","resolved":["5.189.134.86","57.128.187.75","57.129.49.179","193.242.211.59"],"resolved_at":"2026-11-05T14:34:32Z","dns_checked_at":"2026-11-06T15:45:00.000Z","dns_since":"2026-11-05T15:44:34.000Z","findings":[{"id":"f5dxsxj65etxgqp5efcj6","kind":"reported_domain","summary":"Under polar-tensor.com, listed by MetaMask","first_observed":"2026-11-05T14:26:29.193Z","first_published":"2026-11-05T15:33:07.108Z","source":"metamask","source_name":"MetaMask","under":"polar-tensor.com"}],"url":"https://domainspoof.com/live?show=all&q=img.polar-tensor.com"},{"hostname":"ims.cigpcl.com","first_observed":"2026-11-05T15:00:55.013Z","first_published":"2026-11-05T15:33:07.108Z","brands":[],"dns":"resolved","resolved":["49.0.83.59"],"resolved_at":"2026-11-05T15:03:41Z","dns_checked_at":"2026-11-06T15:45:00.000Z","dns_since":"2026-11-05T15:44:34.000Z","findings":[{"id":"fporj3hpwojfjpx35jk2p","kind":"reported_domain","summary":"Under cigpcl.com, reported by PhishDestroy","first_observed":"2026-11-05T15:00:55.013Z","first_published":"2026-11-05T15:33:07.108Z","source":"phishdestroy","source_name":"PhishDestroy","under":"cigpcl.com","source_url":"https://phishdestroy.io/domain/cigpcl.com/"}],"url":"https://domainspoof.com/live?show=all&q=ims.cigpcl.com"},{"hostname":"invitation-review.info","first_observed":"2026-11-05T14:21:09.353Z","first_published":"2026-11-05T15:33:07.108Z","brands":[],"dns":"resolved","resolved":["104.21.79.3","172.67.139.57"],"resolved_at":"2026-11-05T14:25:04Z","dns_checked_at":"2026-11-06T15:45:00.000Z","dns_since":"2026-11-05T15:44:34.000Z","findings":[{"id":"f5axjfhscohgr2537awxv","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T14:21:09.353Z","first_published":"2026-11-05T15:33:07.108Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=invitation-review.info"},{"hostname":"itgkmfk.shop","first_observed":"2026-11-05T15:21:16.676Z","first_published":"2026-11-05T15:33:07.108Z","brands":[],"dns":"resolved","resolved":["104.21.61.202","172.67.214.113"],"resolved_at":"2026-11-05T15:21:52Z","dns_checked_at":"2026-11-06T15:45:00.000Z","dns_since":"2026-11-05T15:44:34.000Z","findings":[{"id":"f5w65ljgyqvskgm2sxjaq","kind":"reported_domain","summary":"Listed by NPA 165 (e-commerce)","first_observed":"2026-11-05T15:21:16.676Z","first_published":"2026-11-05T15:33:07.108Z","source":"npa","source_name":"NPA 165","claim":{"category":"e-commerce"}}],"url":"https://domainspoof.com/live?show=all&q=itgkmfk.shop"},{"hostname":"justupdatednews.com","first_observed":"2026-11-05T15:26:04.061Z","first_published":"2026-11-05T15:33:07.108Z","brands":[],"dns":"resolved","resolved":["104.21.47.241","172.67.174.140"],"resolved_at":"2026-11-05T15:26:43Z","dns_checked_at":"2026-11-06T15:45:00.000Z","dns_since":"2026-11-05T15:44:34.000Z","findings":[{"id":"fabcxjdf4wenkanefqlfq","kind":"reported_domain","summary":"Listed by USOM","first_observed":"2026-11-05T15:26:04.061Z","first_published":"2026-11-05T15:33:07.108Z","source":"usom","source_name":"USOM"}],"url":"https://domainspoof.com/live?show=all&q=justupdatednews.com"},{"hostname":"keenaccruvance.digital","first_observed":"2026-11-05T15:05:31.615Z","first_published":"2026-11-05T15:33:07.108Z","brands":[],"dns":"resolved","resolved":["104.21.71.83","172.67.143.250"],"resolved_at":"2026-11-05T15:07:07Z","dns_checked_at":"2026-11-06T15:45:00.000Z","dns_since":"2026-11-05T15:44:34.000Z","findings":[{"id":"fsv2t3quxjmrr6j3s635q","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T15:05:31.615Z","first_published":"2026-11-05T15:33:07.108Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=keenaccruvance.digital"},{"hostname":"kibana.indexprotraders.com","first_observed":"2026-11-05T15:00:55.013Z","first_published":"2026-11-05T15:33:07.108Z","brands":[],"dns":"resolved","resolved":["162.4.84.241"],"resolved_at":"2026-11-05T15:03:41Z","dns_checked_at":"2026-11-06T15:45:00.000Z","dns_since":"2026-11-05T15:44:34.000Z","findings":[{"id":"fsfvluw3epspiz3qq3bxy","kind":"reported_domain","summary":"Under indexprotraders.com, reported by PhishDestroy","first_observed":"2026-11-05T15:00:55.013Z","first_published":"2026-11-05T15:33:07.108Z","source":"phishdestroy","source_name":"PhishDestroy","under":"indexprotraders.com","source_url":"https://phishdestroy.io/domain/indexprotraders.com/"}],"url":"https://domainspoof.com/live?show=all&q=kibana.indexprotraders.com"},{"hostname":"kiborsenhandel.com","first_observed":"2026-11-05T14:31:19.205Z","first_published":"2026-11-05T15:33:07.108Z","brands":[],"dns":"resolved","resolved":["104.21.68.113","172.67.195.5"],"resolved_at":"2026-11-05T14:42:01Z","dns_checked_at":"2026-11-06T15:45:00.000Z","dns_since":"2026-11-05T15:44:34.000Z","findings":[{"id":"fty6fwxcwxldelzz6xdhm","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T14:31:19.205Z","first_published":"2026-11-05T15:33:07.108Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=kiborsenhandel.com"},{"hostname":"klozlot24.sbs","first_observed":"2026-11-05T14:31:19.205Z","first_published":"2026-11-05T15:33:07.108Z","brands":[],"dns":"resolved","resolved":["104.21.59.64","172.67.216.250"],"resolved_at":"2026-11-05T14:42:02Z","dns_checked_at":"2026-11-06T15:45:00.000Z","dns_since":"2026-11-05T15:44:34.000Z","findings":[{"id":"fft6ly5d5t5sxhpmdz3i3","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T14:31:19.205Z","first_published":"2026-11-05T15:33:07.108Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=klozlot24.sbs"},{"hostname":"kraken-dex.me","first_observed":"2026-11-05T14:51:33.017Z","first_published":"2026-11-05T15:33:07.108Z","brands":[],"dns":"resolved","resolved":["104.21.42.226","172.67.167.37"],"resolved_at":"2026-11-05T14:53:32Z","dns_checked_at":"2026-11-06T15:45:00.000Z","dns_since":"2026-11-05T15:44:34.000Z","findings":[{"id":"fgv4nwn4vs7dio7qtyfim","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T14:51:33.017Z","first_published":"2026-11-05T15:33:07.108Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=kraken-dex.me"},{"hostname":"krk59.cc","first_observed":"2026-11-05T15:26:04.061Z","first_published":"2026-11-05T15:33:07.108Z","brands":[],"dns":"resolved","resolved":["104.194.144.142"],"resolved_at":"2026-11-05T15:26:43Z","dns_checked_at":"2026-11-06T15:45:00.000Z","dns_since":"2026-11-05T15:44:34.000Z","findings":[{"id":"fxgdz3iqwrrrz4uoehqrm","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T15:26:04.061Z","first_published":"2026-11-05T15:33:07.108Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/krk59.cc/"}],"url":"https://domainspoof.com/live?show=all&q=krk59.cc"},{"hostname":"ledger-io-live-help.pages.dev","first_observed":"2026-11-05T14:36:29.359Z","first_published":"2026-11-05T15:33:07.108Z","brands":[],"dns":"resolved","resolved":["172.66.44.94","172.66.47.162"],"resolved_at":"2026-11-05T14:37:00Z","dns_checked_at":"2026-11-06T15:45:00.000Z","dns_since":"2026-11-05T15:44:34.000Z","findings":[{"id":"flunuzxbn4ubtbyoenqng","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T14:36:29.359Z","first_published":"2026-11-05T15:33:07.108Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=ledger-io-live-help.pages.dev"},{"hostname":"ledgerrr--start.pages.dev","first_observed":"2026-11-05T14:21:09.353Z","first_published":"2026-11-05T15:33:07.108Z","brands":[],"dns":"resolved","resolved":["172.66.44.182","172.66.47.74"],"resolved_at":"2026-11-05T14:25:05Z","dns_checked_at":"2026-11-06T15:45:00.000Z","dns_since":"2026-11-05T15:44:34.000Z","findings":[{"id":"fpgqu7ip6vbjdcxdjdikg","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T14:21:09.353Z","first_published":"2026-11-05T15:33:07.108Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=ledgerrr--start.pages.dev"},{"hostname":"ledgre-lives-log.pages.dev","first_observed":"2026-11-05T14:36:29.359Z","first_published":"2026-11-05T15:33:07.108Z","brands":[],"dns":"resolved","resolved":["172.66.44.202","172.66.47.54"],"resolved_at":"2026-11-05T14:37:00Z","dns_checked_at":"2026-11-06T15:45:00.000Z","dns_since":"2026-11-05T15:44:34.000Z","findings":[{"id":"frvcvgjadtsfbphqmf3dy","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T14:36:29.359Z","first_published":"2026-11-05T15:33:07.108Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=ledgre-lives-log.pages.dev"},{"hostname":"ledgrs-es-ui.pages.dev","first_observed":"2026-11-05T14:51:33.017Z","first_published":"2026-11-05T15:33:07.108Z","brands":[],"dns":"resolved","resolved":["172.66.45.45","172.66.46.211"],"resolved_at":"2026-11-05T14:53:32Z","dns_checked_at":"2026-11-06T15:45:00.000Z","dns_since":"2026-11-05T15:44:34.000Z","findings":[{"id":"frot2l7gsaaw7fuugucji","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T14:51:33.017Z","first_published":"2026-11-05T15:33:07.108Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=ledgrs-es-ui.pages.dev"},{"hostname":"lienlfi.app","first_observed":"2026-11-05T15:26:04.061Z","first_published":"2026-11-05T15:33:07.108Z","brands":[],"dns":"resolved","resolved":["104.21.88.86","172.67.174.83"],"resolved_at":"2026-11-05T15:26:43Z","dns_checked_at":"2026-11-06T15:45:00.000Z","dns_since":"2026-11-05T15:44:34.000Z","findings":[{"id":"fnch3iygk5ungo23unthk","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T15:26:04.061Z","first_published":"2026-11-05T15:33:07.108Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/lienlfi.app/"}],"url":"https://domainspoof.com/live?show=all&q=lienlfi.app"},{"hostname":"liminalmoney.digital","first_observed":"2026-11-05T15:26:04.061Z","first_published":"2026-11-05T15:33:07.108Z","brands":[],"dns":"resolved","resolved":["104.21.55.192","172.67.172.108"],"resolved_at":"2026-11-05T15:26:43Z","dns_checked_at":"2026-11-06T15:45:00.000Z","dns_since":"2026-11-05T15:44:34.000Z","findings":[{"id":"fapgzoefv3ccd5sbxywmw","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T15:26:04.061Z","first_published":"2026-11-05T15:33:07.108Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=liminalmoney.digital"},{"hostname":"lnoafo.shop","first_observed":"2026-11-05T14:41:08.241Z","first_published":"2026-11-05T15:33:07.108Z","brands":[],"dns":"resolved","resolved":["104.21.75.58","172.67.214.214"],"resolved_at":"2026-11-05T14:45:39Z","dns_checked_at":"2026-11-06T15:45:00.000Z","dns_since":"2026-11-05T15:44:34.000Z","findings":[{"id":"frcjthjt2xecvk7clckyx","kind":"reported_domain","summary":"Listed by NPA 165 (finance and insurance)","first_observed":"2026-11-05T14:41:08.241Z","first_published":"2026-11-05T15:33:07.108Z","source":"npa","source_name":"NPA 165","claim":{"category":"finance and insurance"}}],"url":"https://domainspoof.com/live?show=all&q=lnoafo.shop"},{"hostname":"lofi-ledger.com","first_observed":"2026-11-05T14:36:29.359Z","first_published":"2026-11-05T15:33:07.108Z","brands":[],"dns":"resolved","resolved":["104.21.0.201","172.67.128.65"],"resolved_at":"2026-11-05T14:37:00Z","dns_checked_at":"2026-11-06T15:45:00.000Z","dns_since":"2026-11-05T15:44:34.000Z","findings":[{"id":"ft3rigsrzywxs6iq7f3bo","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T14:36:29.359Z","first_published":"2026-11-05T15:33:07.108Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=lofi-ledger.com"},{"hostname":"logowanie-szybkie.shop","first_observed":"2026-11-05T15:26:04.061Z","first_published":"2026-11-05T15:33:07.108Z","brands":[],"dns":"resolved","resolved":["104.21.23.253","172.67.214.190"],"resolved_at":"2026-11-05T15:26:43Z","dns_checked_at":"2026-11-06T15:45:00.000Z","dns_since":"2026-11-05T15:44:34.000Z","findings":[{"id":"faf26bbym47i5xyzmcodb","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T15:26:04.061Z","first_published":"2026-11-05T15:33:07.108Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=logowanie-szybkie.shop"},{"hostname":"lokalna89030.sbs","first_observed":"2026-11-05T15:18:40.514Z","first_published":"2026-11-05T15:33:07.108Z","brands":[],"dns":"resolved","resolved":["104.21.48.90","172.67.183.11","2606:4700:3032::ac43:b70b","2606:4700:3037::6815:305a"],"resolved_at":"2026-11-05T15:20:06Z","dns_checked_at":"2026-11-06T15:45:00.000Z","dns_since":"2026-11-05T15:44:34.000Z","findings":[{"id":"fft4nicqqr2kl3xuktjyv","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T15:18:40.514Z","first_published":"2026-11-05T15:33:07.108Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=lokalna89030.sbs"},{"hostname":"lygyaou.com","first_observed":"2026-11-05T14:36:29.359Z","first_published":"2026-11-05T15:33:07.108Z","brands":[],"dns":"resolved","resolved":["104.21.2.199","172.67.129.155"],"resolved_at":"2026-11-05T14:37:00Z","dns_checked_at":"2026-11-06T15:45:00.000Z","dns_since":"2026-11-05T15:44:34.000Z","findings":[{"id":"fnl5jlrmd4nmfteohnnrw","kind":"reported_domain","summary":"Listed by USOM","first_observed":"2026-11-05T14:36:29.359Z","first_published":"2026-11-05T15:33:07.108Z","source":"usom","source_name":"USOM"}],"url":"https://domainspoof.com/live?show=all&q=lygyaou.com"},{"hostname":"macproxyhub.com","first_observed":"2026-11-05T14:36:29.359Z","first_published":"2026-11-05T15:33:07.108Z","brands":[],"dns":"resolved","resolved":["104.21.31.215","172.67.179.253"],"resolved_at":"2026-11-05T14:37:00Z","dns_checked_at":"2026-11-06T15:45:00.000Z","dns_since":"2026-11-05T15:44:34.000Z","findings":[{"id":"fp7wfr6echvnw7tuvff5x","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T14:36:29.359Z","first_published":"2026-11-05T15:33:07.108Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=macproxyhub.com"},{"hostname":"mail.bitbase-miners.com","first_observed":"2026-11-05T15:00:55.013Z","first_published":"2026-11-05T15:33:07.108Z","brands":[],"dns":"resolved","resolved":["5.182.208.207"],"resolved_at":"2026-11-05T15:03:40Z","dns_checked_at":"2026-11-06T15:45:00.000Z","dns_since":"2026-11-05T15:44:34.000Z","findings":[{"id":"f4szms4gajbmu74equwpp","kind":"reported_domain","summary":"Under bitbase-miners.com, reported by PhishDestroy","first_observed":"2026-11-05T15:00:55.013Z","first_published":"2026-11-05T15:33:07.108Z","source":"phishdestroy","source_name":"PhishDestroy","under":"bitbase-miners.com","source_url":"https://phishdestroy.io/domain/bitbase-miners.com/"}],"url":"https://domainspoof.com/live?show=all&q=mail.bitbase-miners.com"},{"hostname":"minttradehub.com","first_observed":"2026-11-05T14:46:20.048Z","first_published":"2026-11-05T15:33:07.108Z","brands":[],"dns":"resolved","resolved":["141.94.109.24"],"resolved_at":"2026-11-05T14:49:04Z","dns_checked_at":"2026-11-06T15:45:00.000Z","dns_since":"2026-11-05T15:44:34.000Z","findings":[{"id":"fubvlqyexlete6kmkp4jc","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T14:46:20.048Z","first_published":"2026-11-05T15:33:07.108Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/minttradehub.com/"}],"url":"https://domainspoof.com/live?show=all&q=minttradehub.com"},{"hostname":"monad-participation.xyz","first_observed":"2026-11-05T15:05:31.615Z","first_published":"2026-11-05T15:33:07.108Z","brands":[],"dns":"resolved","resolved":["104.21.92.177","172.67.197.18"],"resolved_at":"2026-11-05T15:07:09Z","dns_checked_at":"2026-11-06T15:45:00.000Z","dns_since":"2026-11-05T15:44:34.000Z","findings":[{"id":"fcjctlwkpminderwadopq","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T15:05:31.615Z","first_published":"2026-11-05T15:33:07.108Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=monad-participation.xyz"},{"hostname":"monitoring.polar-tensor.com","first_observed":"2026-11-05T14:31:19.205Z","first_published":"2026-11-05T15:33:07.108Z","brands":[],"dns":"resolved","resolved":["5.189.134.86","57.128.187.75","57.129.49.179","193.242.211.59"],"resolved_at":"2026-11-05T14:42:03Z","dns_checked_at":"2026-11-06T15:45:00.000Z","dns_since":"2026-11-05T15:44:34.000Z","findings":[{"id":"frt26pn5ngydysgdmvfal","kind":"reported_domain","summary":"Under polar-tensor.com, listed by MetaMask","first_observed":"2026-11-05T14:31:19.205Z","first_published":"2026-11-05T15:33:07.108Z","source":"metamask","source_name":"MetaMask","under":"polar-tensor.com"}],"url":"https://domainspoof.com/live?show=all&q=monitoring.polar-tensor.com"},{"hostname":"moonshot-votingreward.pages.dev","first_observed":"2026-11-05T15:16:00.479Z","first_published":"2026-11-05T15:33:07.108Z","brands":[],"dns":"resolved","resolved":["172.66.44.95","172.66.47.161"],"resolved_at":"2026-11-05T15:27:50Z","dns_checked_at":"2026-11-06T15:45:00.000Z","dns_since":"2026-11-05T15:44:34.000Z","findings":[{"id":"flpqnvnw6wwp3s5sltd2x","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T15:16:00.479Z","first_published":"2026-11-05T15:33:07.108Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=moonshot-votingreward.pages.dev"},{"hostname":"morphorelayerweb3.pages.dev","first_observed":"2026-11-05T14:21:09.353Z","first_published":"2026-11-05T15:33:07.108Z","brands":[],"dns":"resolved","resolved":["172.66.44.241","172.66.47.15"],"resolved_at":"2026-11-05T14:25:07Z","dns_checked_at":"2026-11-06T15:45:00.000Z","dns_since":"2026-11-05T15:44:34.000Z","findings":[{"id":"ffggwt2p2sejh35yoga5v","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T14:21:09.353Z","first_published":"2026-11-05T15:33:07.108Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=morphorelayerweb3.pages.dev"},{"hostname":"mt4.web6868168.com","first_observed":"2026-11-05T15:05:31.615Z","first_published":"2026-11-05T15:33:07.108Z","brands":[],"dns":"resolved","resolved":["38.190.198.66"],"resolved_at":"2026-11-05T15:07:09Z","dns_checked_at":"2026-11-06T15:45:00.000Z","dns_since":"2026-11-05T15:44:34.000Z","findings":[{"id":"fjmbbbu7a7w5nl7vpssw6","kind":"reported_domain","summary":"Under web6868168.com, listed by MetaMask","first_observed":"2026-11-05T15:05:31.615Z","first_published":"2026-11-05T15:33:07.108Z","source":"metamask","source_name":"MetaMask","under":"web6868168.com"}],"url":"https://domainspoof.com/live?show=all&q=mt4.web6868168.com"},{"hostname":"mx648.com","first_observed":"2026-11-05T15:05:31.615Z","first_published":"2026-11-05T15:33:07.108Z","brands":[],"dns":"resolved","resolved":["104.21.55.47","172.67.144.136"],"resolved_at":"2026-11-05T15:07:10Z","dns_checked_at":"2026-11-06T15:45:00.000Z","dns_since":"2026-11-05T15:44:34.000Z","findings":[{"id":"fhtlmyap72rjt4p4w7qx2","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T15:05:31.615Z","first_published":"2026-11-05T15:33:07.108Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/mx648.com/"}],"url":"https://domainspoof.com/live?show=all&q=mx648.com"},{"hostname":"myim-admin-control-6868168.web6868168.com","first_observed":"2026-11-05T15:05:31.615Z","first_published":"2026-11-05T15:33:07.108Z","brands":[],"dns":"resolved","resolved":["38.190.198.66"],"resolved_at":"2026-11-05T15:07:10Z","dns_checked_at":"2026-11-06T15:45:00.000Z","dns_since":"2026-11-05T15:44:34.000Z","findings":[{"id":"fawspv5k2ckyebqnjl65h","kind":"reported_domain","summary":"Under web6868168.com, listed by MetaMask","first_observed":"2026-11-05T15:05:31.615Z","first_published":"2026-11-05T15:33:07.108Z","source":"metamask","source_name":"MetaMask","under":"web6868168.com"}],"url":"https://domainspoof.com/live?show=all&q=myim-admin-control-6868168.web6868168.com"},{"hostname":"myim-api-gateway-6868168.web6868168.com","first_observed":"2026-11-05T15:05:31.615Z","first_published":"2026-11-05T15:33:07.108Z","brands":[],"dns":"resolved","resolved":["38.190.198.66"],"resolved_at":"2026-11-05T15:07:10Z","dns_checked_at":"2026-11-06T15:45:00.000Z","dns_since":"2026-11-05T15:44:34.000Z","findings":[{"id":"f4xkhzg5gijcndmjay27m","kind":"reported_domain","summary":"Under web6868168.com, listed by MetaMask","first_observed":"2026-11-05T15:05:31.615Z","first_published":"2026-11-05T15:33:07.108Z","source":"metamask","source_name":"MetaMask","under":"web6868168.com"}],"url":"https://domainspoof.com/live?show=all&q=myim-api-gateway-6868168.web6868168.com"},{"hostname":"mypackagearrival.com","first_observed":"2026-11-05T15:18:40.514Z","first_published":"2026-11-05T15:33:07.108Z","brands":[],"dns":"resolved","resolved":["37.114.52.69"],"resolved_at":"2026-11-05T15:20:06Z","dns_checked_at":"2026-11-06T15:45:00.000Z","dns_since":"2026-11-05T15:44:34.000Z","findings":[{"id":"f2phm4ofdvbvo7yq3cogl","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T15:18:40.514Z","first_published":"2026-11-05T15:33:07.108Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=mypackagearrival.com"},{"hostname":"mzeldravoq-it.live","first_observed":"2026-11-05T14:51:33.017Z","first_published":"2026-11-05T15:33:07.108Z","brands":[],"dns":"resolved","resolved":["104.21.75.190","172.67.180.224"],"resolved_at":"2026-11-05T14:53:34Z","dns_checked_at":"2026-11-06T15:45:00.000Z","dns_since":"2026-11-05T15:44:34.000Z","findings":[{"id":"fhw33zrwrwtl3zgbwa2ws","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T14:51:33.017Z","first_published":"2026-11-05T15:33:07.108Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=mzeldravoq-it.live"},{"hostname":"nadohq.site","first_observed":"2026-11-05T14:56:43.434Z","first_published":"2026-11-05T15:33:07.108Z","brands":[],"dns":"resolved","resolved":["104.21.94.214","172.67.140.83"],"resolved_at":"2026-11-05T14:59:50Z","dns_checked_at":"2026-11-06T15:45:00.000Z","dns_since":"2026-11-05T15:44:34.000Z","findings":[{"id":"fmevckhpdx35ptlwbiwdw","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T14:56:43.434Z","first_published":"2026-11-05T15:33:07.108Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=nadohq.site"},{"hostname":"nazvelgorn-it.live","first_observed":"2026-11-05T14:56:43.434Z","first_published":"2026-11-05T15:33:07.108Z","brands":[],"dns":"resolved","resolved":["104.21.10.91","172.67.162.193"],"resolved_at":"2026-11-05T14:59:50Z","dns_checked_at":"2026-11-06T15:45:00.000Z","dns_since":"2026-11-05T15:44:34.000Z","findings":[{"id":"foxgfo7gejbhx5zfbx6xj","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T14:56:43.434Z","first_published":"2026-11-05T15:33:07.108Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=nazvelgorn-it.live"},{"hostname":"ncaa-trump.live","first_observed":"2026-11-05T15:16:00.479Z","first_published":"2026-11-05T15:33:07.108Z","brands":[],"dns":"resolved","resolved":["104.21.2.66","172.67.128.217"],"resolved_at":"2026-11-05T15:27:51Z","dns_checked_at":"2026-11-06T15:45:00.000Z","dns_since":"2026-11-05T15:44:34.000Z","findings":[{"id":"fv6vgsm7gvtgcwjlzy3ey","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T15:16:00.479Z","first_published":"2026-11-05T15:33:07.108Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/ncaa-trump.live/"}],"url":"https://domainspoof.com/live?show=all&q=ncaa-trump.live"},{"hostname":"netflix-asist.com","first_observed":"2026-11-05T14:25:08.039Z","first_published":"2026-11-05T15:33:07.108Z","brands":[{"id":"netflix","name":"Netflix","url":"https://domainspoof.com/brands/netflix"}],"dns":"resolved","resolved":["104.250.165.184"],"resolved_at":"2026-11-06T15:45:00Z","dns_checked_at":"2026-11-06T15:45:00.000Z","dns_since":"2026-11-05T15:44:34.000Z","findings":[{"id":"fdfv7omdeae4tsxhvxaos","kind":"phishing_infrastructure","summary":"Resolved to 104.250.165.184, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T14:25:08.039Z","first_published":"2026-11-05T15:33:07.108Z","address":"104.250.165.184","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"},{"id":"ftbiphqke6n5nzofmcb2q","kind":"spamhaus_drop","summary":"Resolved to 104.250.165.184 on Spamhaus DROP","first_observed":"2026-11-05T14:25:08.039Z","first_published":"2026-11-05T15:33:07.108Z","address":"104.250.165.184","list":"spamhaus_drop","list_name":"Spamhaus DROP"}],"url":"https://domainspoof.com/brands/netflix"},{"hostname":"newebpay.buzz","first_observed":"2026-11-05T14:36:29.359Z","first_published":"2026-11-05T15:33:07.108Z","brands":[{"id":"newebpay","name":"NewebPay","url":"https://domainspoof.com/brands/newebpay"}],"dns":"no_address","resolved":[],"resolved_at":"2026-11-06T14:37:19Z","dns_checked_at":"2026-11-06T15:45:00.000Z","dns_since":"2026-11-05T15:44:34.000Z","findings":[{"id":"fj6w5h2yhlwtvbup52bqc","kind":"reported_domain","summary":"Listed by MODA (one-page scam site)","first_observed":"2026-11-05T14:36:29.359Z","first_published":"2026-11-05T15:33:07.108Z","source":"moda","source_name":"MODA","claim":{"category":"one-page scam site"}}],"url":"https://domainspoof.com/brands/newebpay"},{"hostname":"nivora-stride-gpt.de","first_observed":"2026-11-05T15:10:42.147Z","first_published":"2026-11-05T15:33:07.108Z","brands":[],"dns":"resolved","resolved":["104.21.77.157","172.67.209.149"],"resolved_at":"2026-11-05T15:19:23Z","dns_checked_at":"2026-11-06T15:45:00.000Z","dns_since":"2026-11-05T15:44:34.000Z","findings":[{"id":"fgzhrdigztylmyddnil6r","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T15:10:42.147Z","first_published":"2026-11-05T15:33:07.108Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=nivora-stride-gpt.de"},{"hostname":"nowe-05-11-26.eu.cc","first_observed":"2026-11-05T15:18:40.514Z","first_published":"2026-11-05T15:33:07.108Z","brands":[],"dns":"resolved","resolved":["104.21.67.39","172.67.211.246","2606:4700:3033::6815:4327","2606:4700:3036::ac43:d3f6"],"resolved_at":"2026-11-05T15:20:06Z","dns_checked_at":"2026-11-06T15:45:00.000Z","dns_since":"2026-11-05T15:44:34.000Z","findings":[{"id":"fufstry34d355dhj4sroo","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T15:18:40.514Z","first_published":"2026-11-05T15:33:07.108Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=nowe-05-11-26.eu.cc"},{"hostname":"o131px9qk6cvb486.mbuxvljr.seimngwj.xiwokslb.wviyzmqf.tomjzfci.tczglrpw.gatewaylearning.ezgateway.net","first_observed":"2026-11-05T15:16:00.479Z","first_published":"2026-11-05T15:33:07.108Z","brands":[],"dns":"resolved","resolved":["15.204.116.29"],"resolved_at":"2026-11-05T15:27:51Z","dns_checked_at":"2026-11-06T15:45:00.000Z","dns_since":"2026-11-05T15:44:34.000Z","findings":[{"id":"ftdh645d7dyqbu7zjvkzh","kind":"reported_domain","summary":"Under ezgateway.net, listed by USOM","first_observed":"2026-11-05T15:16:00.479Z","first_published":"2026-11-05T15:33:07.108Z","source":"usom","source_name":"USOM","under":"ezgateway.net"}],"url":"https://domainspoof.com/live?show=all&q=o131px9qk6cvb486.mbuxvljr.seimngwj.xiwokslb.wviyzmqf.tomjzfci.tczglrpw.gatewaylearning.ezgateway.net"},{"hostname":"oai.aigw.virzz.icu","first_observed":"2026-11-05T14:46:20.048Z","first_published":"2026-11-05T15:33:07.108Z","brands":[],"dns":"resolved","resolved":["104.21.71.244","172.67.172.101"],"resolved_at":"2026-11-05T14:49:05Z","dns_checked_at":"2026-11-06T15:45:00.000Z","dns_since":"2026-11-05T15:44:34.000Z","findings":[{"id":"fuksnloyel6pvexkbqudm","kind":"reported_domain","summary":"Under virzz.icu, listed by MetaMask","first_observed":"2026-11-05T14:46:20.048Z","first_published":"2026-11-05T15:33:07.108Z","source":"metamask","source_name":"MetaMask","under":"virzz.icu"}],"url":"https://domainspoof.com/live?show=all&q=oai.aigw.virzz.icu"},{"hostname":"oceanprotocol.art","first_observed":"2026-11-05T15:05:31.615Z","first_published":"2026-11-05T15:33:07.108Z","brands":[],"dns":"resolved","resolved":["104.21.34.108","172.67.159.67"],"resolved_at":"2026-11-05T15:07:10Z","dns_checked_at":"2026-11-06T15:45:00.000Z","dns_since":"2026-11-05T15:44:34.000Z","findings":[{"id":"fvemolhl4nlcboafcubbp","kind":"reported_domain","summary":"Listed by NPA 165 (e-commerce)","first_observed":"2026-11-05T15:05:31.615Z","first_published":"2026-11-05T15:33:07.108Z","source":"npa","source_name":"NPA 165","claim":{"category":"e-commerce"}}],"url":"https://domainspoof.com/live?show=all&q=oceanprotocol.art"},{"hostname":"old.polar-tensor.com","first_observed":"2026-11-05T15:16:00.479Z","first_published":"2026-11-05T15:33:07.108Z","brands":[],"dns":"resolved","resolved":["5.189.134.86","57.128.187.75","57.129.49.179","193.242.211.59"],"resolved_at":"2026-11-05T15:27:51Z","dns_checked_at":"2026-11-06T15:45:00.000Z","dns_since":"2026-11-05T15:44:34.000Z","findings":[{"id":"ffozg25hhiaunuytmzyjq","kind":"reported_domain","summary":"Under polar-tensor.com, listed by MetaMask","first_observed":"2026-11-05T15:16:00.479Z","first_published":"2026-11-05T15:33:07.108Z","source":"metamask","source_name":"MetaMask","under":"polar-tensor.com"}],"url":"https://domainspoof.com/live?show=all&q=old.polar-tensor.com"},{"hostname":"ondofinance-eligibility.xyz","first_observed":"2026-11-05T15:26:04.061Z","first_published":"2026-11-05T15:33:07.108Z","brands":[{"id":"ondo-finance","name":"Ondo Finance","url":"https://domainspoof.com/brands/ondo-finance"}],"dns":"resolved","resolved":["104.21.44.28","172.67.194.83","2606:4700:3030::ac43:c253","2606:4700:3037::6815:2c1c"],"resolved_at":"2026-11-05T15:26:44Z","dns_checked_at":"2026-11-06T15:45:00.000Z","dns_since":"2026-11-05T15:44:34.000Z","findings":[{"id":"f5rf7xkk3cnrdbqnw7jsg","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T15:26:04.061Z","first_published":"2026-11-05T15:33:07.108Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/brands/ondo-finance"},{"hostname":"orniramitavaden.com","first_observed":"2026-11-05T15:18:40.514Z","first_published":"2026-11-05T15:33:07.108Z","brands":[],"dns":"resolved","resolved":["104.21.40.232","172.67.157.148","2606:4700:3035::6815:28e8","2606:4700:3037::ac43:9d94"],"resolved_at":"2026-11-05T15:20:06Z","dns_checked_at":"2026-11-06T15:45:00.000Z","dns_since":"2026-11-05T15:44:34.000Z","findings":[{"id":"f2pqy5dck5b6wmlhieqkj","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T15:18:40.514Z","first_published":"2026-11-05T15:33:07.108Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=orniramitavaden.com"},{"hostname":"otc.web6868168.com","first_observed":"2026-11-05T15:05:31.615Z","first_published":"2026-11-05T15:33:07.108Z","brands":[],"dns":"resolved","resolved":["38.190.198.66"],"resolved_at":"2026-11-05T15:07:12Z","dns_checked_at":"2026-11-06T15:45:00.000Z","dns_since":"2026-11-05T15:44:34.000Z","findings":[{"id":"fyrsc3jmbtv64cqwtf276","kind":"reported_domain","summary":"Under web6868168.com, listed by MetaMask","first_observed":"2026-11-05T15:05:31.615Z","first_published":"2026-11-05T15:33:07.108Z","source":"metamask","source_name":"MetaMask","under":"web6868168.com"}],"url":"https://domainspoof.com/live?show=all&q=otc.web6868168.com"},{"hostname":"ovattimpit.store","first_observed":"2026-11-05T15:18:40.514Z","first_published":"2026-11-05T15:33:07.108Z","brands":[],"dns":"resolved","resolved":["104.21.82.214","172.67.164.2","2606:4700:3035::6815:52d6","2606:4700:3035::ac43:a402"],"resolved_at":"2026-11-05T15:20:06Z","dns_checked_at":"2026-11-06T15:45:00.000Z","dns_since":"2026-11-05T15:44:34.000Z","findings":[{"id":"fzm7v3rr53x32elqgl3ei","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T15:18:40.514Z","first_published":"2026-11-05T15:33:07.108Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=ovattimpit.store"},{"hostname":"p.i.trysity.info","first_observed":"2026-11-05T14:46:20.048Z","first_published":"2026-11-05T15:33:07.108Z","brands":[],"dns":"resolved","resolved":["172.86.86.51"],"resolved_at":"2026-11-05T14:49:05Z","dns_checked_at":"2026-11-06T15:45:00.000Z","dns_since":"2026-11-05T15:44:34.000Z","findings":[{"id":"fpi6b7hzc3bwgcjfx5xw2","kind":"reported_domain","summary":"Under trysity.info, listed by MetaMask","first_observed":"2026-11-05T14:46:20.048Z","first_published":"2026-11-05T15:33:07.108Z","source":"metamask","source_name":"MetaMask","under":"trysity.info"}],"url":"https://domainspoof.com/live?show=all&q=p.i.trysity.info"},{"hostname":"paribu--cekilis.live","first_observed":"2026-11-05T14:46:20.048Z","first_published":"2026-11-05T15:33:07.108Z","brands":[{"id":"paribu","name":"Paribu","url":"https://domainspoof.com/brands/paribu"}],"dns":"resolved","resolved":["64.89.160.49"],"resolved_at":"2026-11-06T15:45:00Z","dns_checked_at":"2026-11-06T15:45:00.000Z","dns_since":"2026-11-05T15:44:34.000Z","findings":[{"id":"f2652qerfmmxaczu2ijpr","kind":"reported_domain","summary":"Listed by USOM","first_observed":"2026-11-05T14:46:20.048Z","first_published":"2026-11-05T15:33:07.108Z","source":"usom","source_name":"USOM"},{"id":"fweofwwqjuqkfn3nbsxsr","kind":"spamhaus_drop","summary":"Resolved to 64.89.160.49 on Spamhaus DROP","first_observed":"2026-11-05T14:49:05.311Z","first_published":"2026-11-05T15:33:07.108Z","address":"64.89.160.49","list":"spamhaus_drop","list_name":"Spamhaus DROP"}],"url":"https://domainspoof.com/brands/paribu"},{"hostname":"pay-bitrefill.com-cs01-esim-gift.com","first_observed":"2026-11-05T15:03:42.086Z","first_published":"2026-11-05T15:33:07.108Z","brands":[{"id":"bitrefill","name":"Bitrefill","url":"https://domainspoof.com/brands/bitrefill"}],"dns":"resolved","resolved":["62.60.226.39"],"resolved_at":"2026-11-06T15:45:00Z","dns_checked_at":"2026-11-06T15:45:00.000Z","dns_since":"2026-11-05T15:44:34.000Z","findings":[{"id":"ft3i226prky7eluri635p","kind":"spamhaus_drop","summary":"Resolved to 62.60.226.39 on Spamhaus DROP","first_observed":"2026-11-05T15:03:42.086Z","first_published":"2026-11-05T15:33:07.108Z","address":"62.60.226.39","list":"spamhaus_drop","list_name":"Spamhaus DROP"}],"url":"https://domainspoof.com/brands/bitrefill"},{"hostname":"pay.zerodeficitccrnprep.com","first_observed":"2026-11-05T14:46:20.048Z","first_published":"2026-11-05T15:33:07.108Z","brands":[],"dns":"resolved","resolved":["104.18.35.156","172.64.152.100"],"resolved_at":"2026-11-05T14:49:05Z","dns_checked_at":"2026-11-06T15:45:00.000Z","dns_since":"2026-11-05T15:44:34.000Z","findings":[{"id":"fefxlceamdqordi53pss7","kind":"reported_domain","summary":"Under zerodeficitccrnprep.com, reported by PhishDestroy","first_observed":"2026-11-05T14:46:20.048Z","first_published":"2026-11-05T15:33:07.108Z","source":"phishdestroy","source_name":"PhishDestroy","under":"zerodeficitccrnprep.com","source_url":"https://phishdestroy.io/domain/zerodeficitccrnprep.com/"}],"url":"https://domainspoof.com/live?show=all&q=pay.zerodeficitccrnprep.com"},{"hostname":"physline.com","first_observed":"2026-11-05T14:36:29.359Z","first_published":"2026-11-05T15:33:07.108Z","brands":[],"dns":"resolved","resolved":["162.4.84.247"],"resolved_at":"2026-11-05T14:37:00Z","dns_checked_at":"2026-11-06T15:45:00.000Z","dns_since":"2026-11-05T15:44:34.000Z","findings":[{"id":"fjeshru2s3rvj6vdbkk4f","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T14:36:29.359Z","first_published":"2026-11-05T15:33:07.108Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=physline.com"},{"hostname":"pipeline.polar-tensor.com","first_observed":"2026-11-05T14:21:09.353Z","first_published":"2026-11-05T15:33:07.108Z","brands":[],"dns":"resolved","resolved":["5.189.134.86","57.128.187.75","57.129.49.179","193.242.211.59"],"resolved_at":"2026-11-06T03:41:26Z","dns_checked_at":"2026-11-06T15:45:00.000Z","dns_since":"2026-11-05T15:44:34.000Z","findings":[{"id":"feqepyosm42j5kxgmvugu","kind":"reported_domain","summary":"Under polar-tensor.com, listed by MetaMask","first_observed":"2026-11-05T14:21:09.353Z","first_published":"2026-11-05T15:33:07.108Z","source":"metamask","source_name":"MetaMask","under":"polar-tensor.com"}],"url":"https://domainspoof.com/live?show=all&q=pipeline.polar-tensor.com"},{"hostname":"piperrattr.store","first_observed":"2026-11-05T15:18:40.514Z","first_published":"2026-11-05T15:33:07.108Z","brands":[],"dns":"resolved","resolved":["104.21.22.162","172.67.205.167","2606:4700:3031::ac43:cda7","2606:4700:3036::6815:16a2"],"resolved_at":"2026-11-05T15:20:06Z","dns_checked_at":"2026-11-06T15:45:00.000Z","dns_since":"2026-11-05T15:44:34.000Z","findings":[{"id":"fop7v3est4f2sfbfj7f4k","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T15:18:40.514Z","first_published":"2026-11-05T15:33:07.108Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=piperrattr.store"},{"hostname":"piteqeo.pro","first_observed":"2026-11-05T15:21:16.676Z","first_published":"2026-11-05T15:33:07.108Z","brands":[],"dns":"resolved","resolved":["104.21.54.47","172.67.223.153"],"resolved_at":"2026-11-05T15:21:53Z","dns_checked_at":"2026-11-06T15:45:00.000Z","dns_since":"2026-11-05T15:44:34.000Z","findings":[{"id":"fbwz3ppzqvbzy2vsygxpi","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T15:21:16.676Z","first_published":"2026-11-05T15:33:07.108Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=piteqeo.pro"},{"hostname":"pl-926263827722oferta9377252828l.lat","first_observed":"2026-11-05T15:18:40.514Z","first_published":"2026-11-05T15:33:07.108Z","brands":[],"dns":"not_found","resolved":["fd10:aec2:5dae::"],"resolved_at":"2026-11-05T15:20:06Z","dns_checked_at":"2026-11-06T16:45:16.000Z","findings":[{"id":"fi3bznafkiojssvopn7ql","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T15:18:40.514Z","first_published":"2026-11-05T15:33:07.108Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=pl-926263827722oferta9377252828l.lat"},{"hostname":"pl-numerbiletu47792391.sbs","first_observed":"2026-11-05T15:18:40.514Z","first_published":"2026-11-05T15:33:07.108Z","brands":[],"dns":"resolved","resolved":["104.21.0.148","172.67.151.26","2606:4700:3034::6815:94","2606:4700:3034::ac43:971a"],"resolved_at":"2026-11-05T15:20:06Z","dns_checked_at":"2026-11-06T15:45:00.000Z","dns_since":"2026-11-05T15:44:34.000Z","findings":[{"id":"fflaurlbuxpirlhekjzkb","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T15:18:40.514Z","first_published":"2026-11-05T15:33:07.108Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=pl-numerbiletu47792391.sbs"},{"hostname":"plperhjuisusireki.com","first_observed":"2026-11-05T15:16:00.479Z","first_published":"2026-11-05T15:33:07.108Z","brands":[],"dns":"resolved","resolved":["104.21.10.193","172.67.190.204"],"resolved_at":"2026-11-05T15:27:52Z","dns_checked_at":"2026-11-06T15:45:00.000Z","dns_since":"2026-11-05T15:44:34.000Z","findings":[{"id":"f2njuc2pybup5xb6z6lx2","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T15:16:00.479Z","first_published":"2026-11-05T15:33:07.108Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=plperhjuisusireki.com"},{"hostname":"plperhjuisusirekire.com","first_observed":"2026-11-05T14:41:08.241Z","first_published":"2026-11-05T15:33:07.108Z","brands":[],"dns":"resolved","resolved":["104.21.31.217","172.67.180.1"],"resolved_at":"2026-11-05T14:45:41Z","dns_checked_at":"2026-11-06T15:45:00.000Z","dns_since":"2026-11-05T15:44:34.000Z","findings":[{"id":"fufz5zkpyz6jgabkn4wiz","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T14:41:08.241Z","first_published":"2026-11-05T15:33:07.108Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=plperhjuisusirekire.com"},{"hostname":"pothorinfo.store","first_observed":"2026-11-05T14:51:33.017Z","first_published":"2026-11-05T15:33:07.108Z","brands":[],"dns":"no_address","resolved":[],"resolved_at":"2026-11-05T14:53:35Z","dns_checked_at":"2026-11-06T15:45:00.000Z","dns_since":"2026-11-05T15:44:34.000Z","findings":[{"id":"fqydeaxihauhnoh6uwue2","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T14:51:33.017Z","first_published":"2026-11-05T15:33:07.108Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=pothorinfo.store"},{"hostname":"pradoinvestorio.com","first_observed":"2026-11-05T15:16:00.479Z","first_published":"2026-11-05T15:33:07.108Z","brands":[],"dns":"resolved","resolved":["104.21.8.182","172.67.157.164"],"resolved_at":"2026-11-05T15:27:52Z","dns_checked_at":"2026-11-06T15:45:00.000Z","dns_since":"2026-11-05T15:44:34.000Z","findings":[{"id":"f3xqb44osrg66pqceziqz","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T15:16:00.479Z","first_published":"2026-11-05T15:33:07.108Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=pradoinvestorio.com"},{"hostname":"pyebu.asia","first_observed":"2026-11-05T14:26:29.193Z","first_published":"2026-11-05T15:33:07.108Z","brands":[],"dns":"resolved","resolved":["104.21.81.166","172.67.145.9"],"resolved_at":"2026-11-05T14:34:41Z","dns_checked_at":"2026-11-06T15:45:00.000Z","dns_since":"2026-11-05T15:44:34.000Z","findings":[{"id":"fynudymhyonwfwif6xod2","kind":"reported_domain","summary":"Listed by NPA 165 (information services)","first_observed":"2026-11-05T14:26:29.193Z","first_published":"2026-11-05T15:33:07.108Z","source":"npa","source_name":"NPA 165","claim":{"category":"information services"}}],"url":"https://domainspoof.com/live?show=all&q=pyebu.asia"},{"hostname":"qzglfp.com","first_observed":"2026-11-05T14:46:20.048Z","first_published":"2026-11-05T15:33:07.108Z","brands":[],"dns":"resolved","resolved":["104.21.82.180","172.67.161.111"],"resolved_at":"2026-11-05T14:49:05Z","dns_checked_at":"2026-11-06T15:45:00.000Z","dns_since":"2026-11-05T15:44:34.000Z","findings":[{"id":"fccm4cxmcv65zxuhli4ip","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T14:46:20.048Z","first_published":"2026-11-05T15:33:07.108Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=qzglfp.com"},{"hostname":"rainbet-casino-de.bet","first_observed":"2026-11-05T14:36:29.359Z","first_published":"2026-11-05T15:33:07.108Z","brands":[],"dns":"resolved","resolved":["104.21.8.157","172.67.130.140"],"resolved_at":"2026-11-05T14:37:01Z","dns_checked_at":"2026-11-06T15:45:00.000Z","dns_since":"2026-11-05T15:44:34.000Z","findings":[{"id":"feac4tamnrttkaloqi7zm","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T14:36:29.359Z","first_published":"2026-11-05T15:33:07.108Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=rainbet-casino-de.bet"},{"hostname":"ravalizio-fr.live","first_observed":"2026-11-05T14:51:33.017Z","first_published":"2026-11-05T15:33:07.108Z","brands":[],"dns":"resolved","resolved":["104.21.27.189","172.67.143.117"],"resolved_at":"2026-11-05T14:53:36Z","dns_checked_at":"2026-11-06T15:45:00.000Z","dns_since":"2026-11-05T15:44:34.000Z","findings":[{"id":"fk7buy3lnprn7kqfwodmo","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T14:51:33.017Z","first_published":"2026-11-05T15:33:07.108Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=ravalizio-fr.live"},{"hostname":"ravalizio-it.live","first_observed":"2026-11-05T14:51:33.017Z","first_published":"2026-11-05T15:33:07.108Z","brands":[],"dns":"resolved","resolved":["104.21.75.193","172.67.180.227"],"resolved_at":"2026-11-05T14:53:36Z","dns_checked_at":"2026-11-06T15:45:00.000Z","dns_since":"2026-11-05T15:44:34.000Z","findings":[{"id":"fmhgbtnvsx5rjsp6c32wf","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T14:51:33.017Z","first_published":"2026-11-05T15:33:07.108Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=ravalizio-it.live"},{"hostname":"ravned.shop","first_observed":"2026-11-05T14:31:19.205Z","first_published":"2026-11-05T15:33:07.108Z","brands":[],"dns":"resolved","resolved":["104.21.9.75","172.67.159.76"],"resolved_at":"2026-11-05T14:42:06Z","dns_checked_at":"2026-11-06T15:45:00.000Z","dns_since":"2026-11-05T15:44:34.000Z","findings":[{"id":"f4doyodaua7kdyijludd5","kind":"reported_domain","summary":"Listed by NPA 165 (finance and insurance)","first_observed":"2026-11-05T14:31:19.205Z","first_published":"2026-11-05T15:33:07.108Z","source":"npa","source_name":"NPA 165","claim":{"category":"finance and insurance"}}],"url":"https://domainspoof.com/live?show=all&q=ravned.shop"},{"hostname":"reaktywacja-konta.com","first_observed":"2026-11-05T15:18:40.514Z","first_published":"2026-11-05T15:33:07.108Z","brands":[],"dns":"resolved","resolved":["104.21.96.54","172.67.173.73","2606:4700:3030::6815:6036","2606:4700:3031::ac43:ad49"],"resolved_at":"2026-11-05T15:20:06Z","dns_checked_at":"2026-11-06T15:45:00.000Z","dns_since":"2026-11-05T15:44:34.000Z","findings":[{"id":"fhrd235zfsxwy6uy3ckfc","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T15:18:40.514Z","first_published":"2026-11-05T15:33:07.108Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=reaktywacja-konta.com"},{"hostname":"reclamitiz.store","first_observed":"2026-11-05T15:18:40.514Z","first_published":"2026-11-05T15:33:07.108Z","brands":[],"dns":"resolved","resolved":["104.21.28.180","172.67.147.15","2606:4700:3034::6815:1cb4","2606:4700:3037::ac43:930f"],"resolved_at":"2026-11-05T15:20:06Z","dns_checked_at":"2026-11-06T15:45:00.000Z","dns_since":"2026-11-05T15:44:34.000Z","findings":[{"id":"fqqj2ylj5rjeubocdxbfh","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T15:18:40.514Z","first_published":"2026-11-05T15:33:07.108Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=reclamitiz.store"},{"hostname":"redfordbitspirex-ai.net","first_observed":"2026-11-05T14:36:29.359Z","first_published":"2026-11-05T15:33:07.108Z","brands":[],"dns":"resolved","resolved":["104.21.39.234","172.67.171.213"],"resolved_at":"2026-11-05T14:37:01Z","dns_checked_at":"2026-11-06T15:45:00.000Z","dns_since":"2026-11-05T15:44:34.000Z","findings":[{"id":"fturqqrejs25weyru2gj6","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T14:36:29.359Z","first_published":"2026-11-05T15:33:07.108Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/redfordbitspirex-ai.net/"}],"url":"https://domainspoof.com/live?show=all&q=redfordbitspirex-ai.net"},{"hostname":"registration-papertrade.com","first_observed":"2026-11-05T14:21:09.353Z","first_published":"2026-11-05T15:33:07.108Z","brands":[],"dns":"resolved","resolved":["104.21.69.60","172.67.205.205"],"resolved_at":"2026-11-05T14:25:11Z","dns_checked_at":"2026-11-06T15:45:00.000Z","dns_since":"2026-11-05T15:44:34.000Z","findings":[{"id":"fxmu5hvh2tpx5e236avug","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T14:21:09.353Z","first_published":"2026-11-05T15:33:07.108Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/registration-papertrade.com/"}],"url":"https://domainspoof.com/live?show=all&q=registration-papertrade.com"},{"hostname":"requindale.live","first_observed":"2026-11-05T14:26:29.193Z","first_published":"2026-11-05T15:33:07.108Z","brands":[],"dns":"resolved","resolved":["104.21.41.192","172.67.166.210"],"resolved_at":"2026-11-05T14:34:42Z","dns_checked_at":"2026-11-06T15:45:00.000Z","dns_since":"2026-11-05T15:44:34.000Z","findings":[{"id":"faet6kh7zrooj33kow5ek","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T14:26:29.193Z","first_published":"2026-11-05T15:33:07.108Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=requindale.live"},{"hostname":"result.sberbankmobile.ru","first_observed":"2026-11-05T15:26:44.442Z","first_published":"2026-11-05T15:33:07.108Z","brands":[{"id":"sberbank","name":"Sberbank","url":"https://domainspoof.com/brands/sberbank"}],"dns":"resolved","resolved":["87.242.79.60"],"resolved_at":"2026-11-06T15:45:00Z","dns_checked_at":"2026-11-06T15:45:00.000Z","dns_since":"2026-11-05T15:44:34.000Z","findings":[{"id":"f4espktebqyqh3uzfuien","kind":"phishing_infrastructure","summary":"Resolved to 87.242.79.60, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T15:26:44.442Z","first_published":"2026-11-05T15:33:07.108Z","address":"87.242.79.60","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/sberbank"},{"hostname":"rscisi-hguzf-6q7cws-relh.pages.dev","first_observed":"2026-11-05T14:56:43.434Z","first_published":"2026-11-05T15:33:07.108Z","brands":[],"dns":"resolved","resolved":["172.66.44.134","172.66.47.122"],"resolved_at":"2026-11-05T14:59:54Z","dns_checked_at":"2026-11-06T15:45:00.000Z","dns_since":"2026-11-05T15:44:34.000Z","findings":[{"id":"f5ddj74sjgr2b4rjrve6o","kind":"reported_domain","summary":"Reported by PhishTank","first_observed":"2026-11-05T14:56:43.434Z","first_published":"2026-11-05T15:33:07.108Z","source":"phishtank","source_name":"PhishTank","source_url":"https://phishtank.org/phish_detail.php?phish_id=9479459"}],"url":"https://domainspoof.com/live?show=all&q=rscisi-hguzf-6q7cws-relh.pages.dev"},{"hostname":"s.i.trysity.info","first_observed":"2026-11-05T14:46:20.048Z","first_published":"2026-11-05T15:33:07.108Z","brands":[],"dns":"resolved","resolved":["172.86.86.51"],"resolved_at":"2026-11-05T14:49:06Z","dns_checked_at":"2026-11-06T15:45:00.000Z","dns_since":"2026-11-05T15:44:34.000Z","findings":[{"id":"ffgh7urgsdsm7d3ob4sno","kind":"reported_domain","summary":"Under trysity.info, listed by MetaMask","first_observed":"2026-11-05T14:46:20.048Z","first_published":"2026-11-05T15:33:07.108Z","source":"metamask","source_name":"MetaMask","under":"trysity.info"}],"url":"https://domainspoof.com/live?show=all&q=s.i.trysity.info"},{"hostname":"sarservizi.it","first_observed":"2026-11-05T14:41:08.241Z","first_published":"2026-11-05T15:33:07.108Z","brands":[],"dns":"resolved","resolved":["104.21.8.55","172.67.156.224"],"resolved_at":"2026-11-05T14:45:43Z","dns_checked_at":"2026-11-06T15:45:00.000Z","dns_since":"2026-11-05T15:44:34.000Z","findings":[{"id":"fslddyks5fuigd5olicqd","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T14:41:08.241Z","first_published":"2026-11-05T15:33:07.108Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=sarservizi.it"},{"hostname":"sberbank.avito.pay.sbermarket.youla.sberbank.sber.prod2.hawkinswoodshop.com","first_observed":"2026-11-05T15:07:13.943Z","first_published":"2026-11-05T15:33:07.108Z","brands":[{"id":"avito","name":"Avito","url":"https://domainspoof.com/brands/avito"},{"id":"sberbank","name":"Sberbank","url":"https://domainspoof.com/brands/sberbank"},{"id":"youla","name":"Youla","url":"https://domainspoof.com/brands/youla"}],"dns":"resolved","resolved":["45.77.75.133","45.77.92.157","207.246.78.75"],"resolved_at":"2026-11-06T15:45:00Z","dns_checked_at":"2026-11-06T15:45:00.000Z","dns_since":"2026-11-05T15:44:34.000Z","findings":[{"id":"fqicugteiiwy4pfm7hsen","kind":"phishing_infrastructure","summary":"Resolved to 45.77.75.133, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T15:07:13.943Z","first_published":"2026-11-05T15:33:07.108Z","address":"45.77.75.133","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/avito"},{"hostname":"sensebroker-ai.digital","first_observed":"2026-11-05T14:51:33.017Z","first_published":"2026-11-05T15:33:07.108Z","brands":[],"dns":"resolved","resolved":["185.62.58.101"],"resolved_at":"2026-11-05T14:53:38Z","dns_checked_at":"2026-11-06T15:45:00.000Z","dns_since":"2026-11-05T15:44:34.000Z","findings":[{"id":"fk5n6e2rqqv2adpb6kfa2","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T14:51:33.017Z","first_published":"2026-11-05T15:33:07.108Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=sensebroker-ai.digital"},{"hostname":"sensorflarexxp-fr.live","first_observed":"2026-11-05T15:16:00.479Z","first_published":"2026-11-05T15:33:07.108Z","brands":[],"dns":"resolved","resolved":["104.21.50.68","172.67.158.116"],"resolved_at":"2026-11-05T15:27:55Z","dns_checked_at":"2026-11-06T15:45:00.000Z","dns_since":"2026-11-05T15:44:34.000Z","findings":[{"id":"f6zz6vrmsqbsaljkwqvhg","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T15:16:00.479Z","first_published":"2026-11-05T15:33:07.108Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=sensorflarexxp-fr.live"},{"hostname":"sentora-eligibility.xyz","first_observed":"2026-11-05T14:51:33.017Z","first_published":"2026-11-05T15:33:07.108Z","brands":[],"dns":"resolved","resolved":["104.21.19.102","172.67.185.192"],"resolved_at":"2026-11-05T14:53:38Z","dns_checked_at":"2026-11-06T15:45:00.000Z","dns_since":"2026-11-05T15:44:34.000Z","findings":[{"id":"fymi34ak7whtt3aqr7cvl","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T14:51:33.017Z","first_published":"2026-11-05T15:33:07.108Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=sentora-eligibility.xyz"},{"hostname":"shiftmaxaltpro.click","first_observed":"2026-11-05T14:26:29.193Z","first_published":"2026-11-05T15:33:07.108Z","brands":[],"dns":"resolved","resolved":["185.62.57.222"],"resolved_at":"2026-11-05T14:34:47Z","dns_checked_at":"2026-11-06T15:45:00.000Z","dns_since":"2026-11-05T15:44:34.000Z","findings":[{"id":"fkuyepickmv2q5ttahbjq","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T14:26:29.193Z","first_published":"2026-11-05T15:33:07.108Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=shiftmaxaltpro.click"},{"hostname":"sklnhouse.com","first_observed":"2026-11-05T15:10:42.147Z","first_published":"2026-11-05T15:33:07.108Z","brands":[],"dns":"resolved","resolved":["104.21.71.66","172.67.143.184"],"resolved_at":"2026-11-05T15:19:44Z","dns_checked_at":"2026-11-06T15:45:00.000Z","dns_since":"2026-11-05T15:44:34.000Z","findings":[{"id":"fmpjozrd3bebns4gh6jqo","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T15:10:42.147Z","first_published":"2026-11-05T15:33:07.108Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/sklnhouse.com/"}],"url":"https://domainspoof.com/live?show=all&q=sklnhouse.com"},{"hostname":"socasttool.com","first_observed":"2026-11-05T14:56:43.434Z","first_published":"2026-11-05T15:33:07.108Z","brands":[],"dns":"resolved","resolved":["104.21.80.129","172.67.181.80"],"resolved_at":"2026-11-05T14:59:56Z","dns_checked_at":"2026-11-06T15:45:00.000Z","dns_since":"2026-11-05T15:44:34.000Z","findings":[{"id":"fulks3nk6ekirutzucr3q","kind":"reported_domain","summary":"Listed by USOM","first_observed":"2026-11-05T14:56:43.434Z","first_published":"2026-11-05T15:33:07.108Z","source":"usom","source_name":"USOM"}],"url":"https://domainspoof.com/live?show=all&q=socasttool.com"},{"hostname":"sol-air.top","first_observed":"2026-11-05T14:21:09.353Z","first_published":"2026-11-05T15:33:07.108Z","brands":[],"dns":"resolved","resolved":["104.21.71.177","172.67.147.244"],"resolved_at":"2026-11-06T14:38:49Z","dns_checked_at":"2026-11-06T15:45:00.000Z","dns_since":"2026-11-05T15:44:34.000Z","findings":[{"id":"ff3foiuc4nx64sofzftjf","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T14:21:09.353Z","first_published":"2026-11-05T15:33:07.108Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/sol-air.top/"}],"url":"https://domainspoof.com/live?show=all&q=sol-air.top"},{"hostname":"soleilcapitange-fr.live","first_observed":"2026-11-05T14:51:33.017Z","first_published":"2026-11-05T15:33:07.108Z","brands":[],"dns":"resolved","resolved":["104.21.75.98","172.67.220.94"],"resolved_at":"2026-11-05T14:53:38Z","dns_checked_at":"2026-11-06T15:45:00.000Z","dns_since":"2026-11-05T15:44:34.000Z","findings":[{"id":"f7ickpyqhjhmihfpuidyr","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T14:51:33.017Z","first_published":"2026-11-05T15:33:07.108Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=soleilcapitange-fr.live"},{"hostname":"solmigrate.fun","first_observed":"2026-11-05T14:26:29.193Z","first_published":"2026-11-05T15:33:07.108Z","brands":[],"dns":"resolved","resolved":["104.21.57.8","172.67.157.126"],"resolved_at":"2026-11-05T14:34:47Z","dns_checked_at":"2026-11-06T15:45:00.000Z","dns_since":"2026-11-05T15:44:34.000Z","findings":[{"id":"fumzo75jcqb7gc32bqf7m","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T14:26:29.193Z","first_published":"2026-11-05T15:33:07.108Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=solmigrate.fun"},{"hostname":"solonlinecasino.com","first_observed":"2026-11-05T15:26:04.061Z","first_published":"2026-11-05T15:33:07.108Z","brands":[],"dns":"resolved","resolved":["104.21.32.247","172.67.157.14"],"resolved_at":"2026-11-05T15:31:41Z","dns_checked_at":"2026-11-06T15:45:00.000Z","dns_since":"2026-11-05T15:44:34.000Z","findings":[{"id":"ft2tolsjczrce4ivwx6am","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T15:26:04.061Z","first_published":"2026-11-05T15:33:07.108Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=solonlinecasino.com"},{"hostname":"solprocasino.com","first_observed":"2026-11-05T15:10:42.147Z","first_published":"2026-11-05T15:33:07.108Z","brands":[],"dns":"resolved","resolved":["104.21.53.88","172.67.211.9"],"resolved_at":"2026-11-05T15:19:44Z","dns_checked_at":"2026-11-06T15:45:00.000Z","dns_since":"2026-11-05T15:44:34.000Z","findings":[{"id":"fexjkzgzyldkfuqjpcehu","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T15:10:42.147Z","first_published":"2026-11-05T15:33:07.108Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=solprocasino.com"},{"hostname":"sondakikahatti.world","first_observed":"2026-11-05T14:41:08.241Z","first_published":"2026-11-05T15:33:07.108Z","brands":[],"dns":"resolved","resolved":["104.21.15.99","172.67.162.38"],"resolved_at":"2026-11-05T14:45:45Z","dns_checked_at":"2026-11-06T15:45:00.000Z","dns_since":"2026-11-05T15:44:34.000Z","findings":[{"id":"fmhpbw73eqq2dec7ap6pq","kind":"reported_domain","summary":"Listed by USOM","first_observed":"2026-11-05T14:41:08.241Z","first_published":"2026-11-05T15:33:07.108Z","source":"usom","source_name":"USOM"}],"url":"https://domainspoof.com/live?show=all&q=sondakikahatti.world"},{"hostname":"sp19ct7-surem-biz-vadek-foril.pages.dev","first_observed":"2026-11-05T15:05:31.615Z","first_published":"2026-11-05T15:33:07.108Z","brands":[],"dns":"resolved","resolved":["172.66.44.136","172.66.47.120"],"resolved_at":"2026-11-05T15:07:15Z","dns_checked_at":"2026-11-06T15:45:00.000Z","dns_since":"2026-11-05T15:44:34.000Z","findings":[{"id":"ftie5dazufuyrxxadyjcv","kind":"reported_domain","summary":"Reported by PhishTank","first_observed":"2026-11-05T15:05:31.615Z","first_published":"2026-11-05T15:33:07.108Z","source":"phishtank","source_name":"PhishTank","source_url":"https://phishtank.org/phish_detail.php?phish_id=9479605"}],"url":"https://domainspoof.com/live?show=all&q=sp19ct7-surem-biz-vadek-foril.pages.dev"},{"hostname":"sp19ct7-varel-biz-durem-sonif.pages.dev","first_observed":"2026-11-05T14:21:09.353Z","first_published":"2026-11-05T15:33:07.108Z","brands":[],"dns":"resolved","resolved":["172.66.44.243","172.66.47.13"],"resolved_at":"2026-11-05T14:21:25Z","dns_checked_at":"2026-11-06T15:45:00.000Z","dns_since":"2026-11-05T15:44:34.000Z","findings":[{"id":"fqq2pnvb5xqjpalc3cxvd","kind":"reported_domain","summary":"Reported by PhishTank","first_observed":"2026-11-05T14:21:09.353Z","first_published":"2026-11-05T15:33:07.108Z","source":"phishtank","source_name":"PhishTank","source_url":"https://phishtank.org/phish_detail.php?phish_id=9479611"}],"url":"https://domainspoof.com/live?show=all&q=sp19ct7-varel-biz-durem-sonif.pages.dev"},{"hostname":"sparkme.cc","first_observed":"2026-11-05T15:05:31.615Z","first_published":"2026-11-05T15:33:07.108Z","brands":[],"dns":"resolved","resolved":["38.47.221.31"],"resolved_at":"2026-11-05T15:07:15Z","dns_checked_at":"2026-11-06T15:45:00.000Z","dns_since":"2026-11-05T15:44:34.000Z","findings":[{"id":"f3lr5oxgwp76t3o3sejxo","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T15:05:31.615Z","first_published":"2026-11-05T15:33:07.108Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=sparkme.cc"},{"hostname":"sparkunioncapital.net","first_observed":"2026-11-05T15:05:31.615Z","first_published":"2026-11-05T15:33:07.108Z","brands":[],"dns":"resolved","resolved":["45.192.210.10","45.192.210.11"],"resolved_at":"2026-11-05T15:07:15Z","dns_checked_at":"2026-11-06T15:45:00.000Z","dns_since":"2026-11-05T15:44:34.000Z","findings":[{"id":"fdeht2k7aw5v3g6l5wgxm","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T15:05:31.615Z","first_published":"2026-11-05T15:33:07.108Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=sparkunioncapital.net"},{"hostname":"sportsvideo24.com","first_observed":"2026-11-05T14:46:20.048Z","first_published":"2026-11-05T15:33:07.108Z","brands":[],"dns":"resolved","resolved":["104.21.52.149","172.67.200.140"],"resolved_at":"2026-11-05T14:49:07Z","dns_checked_at":"2026-11-06T15:45:00.000Z","dns_since":"2026-11-05T15:44:34.000Z","findings":[{"id":"fuujegzanlcea2z5nnjxw","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T14:46:20.048Z","first_published":"2026-11-05T15:33:07.108Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=sportsvideo24.com"},{"hostname":"ssssdollldq.com","first_observed":"2026-11-05T14:46:20.048Z","first_published":"2026-11-05T15:33:07.108Z","brands":[],"dns":"resolved","resolved":["104.21.24.254","172.67.221.130"],"resolved_at":"2026-11-05T14:49:07Z","dns_checked_at":"2026-11-06T15:45:00.000Z","dns_since":"2026-11-05T15:44:34.000Z","findings":[{"id":"fzakoafs7pujspijoxleb","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T14:46:20.048Z","first_published":"2026-11-05T15:33:07.108Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=ssssdollldq.com"},{"hostname":"stabl-eth.com","first_observed":"2026-11-05T14:26:29.193Z","first_published":"2026-11-05T15:33:07.108Z","brands":[],"dns":"resolved","resolved":["216.150.1.1","216.150.16.65"],"resolved_at":"2026-11-05T14:34:47Z","dns_checked_at":"2026-11-06T15:45:00.000Z","dns_since":"2026-11-05T15:44:34.000Z","findings":[{"id":"fvlvu3j3jpalidnu2c2lu","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T14:26:29.193Z","first_published":"2026-11-05T15:33:07.108Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/stabl-eth.com/"}],"url":"https://domainspoof.com/live?show=all&q=stabl-eth.com"},{"hostname":"stahlixcore.click","first_observed":"2026-11-05T14:56:43.434Z","first_published":"2026-11-05T15:33:07.108Z","brands":[],"dns":"resolved","resolved":["185.62.57.14"],"resolved_at":"2026-11-05T14:59:56Z","dns_checked_at":"2026-11-06T15:45:00.000Z","dns_since":"2026-11-05T15:44:34.000Z","findings":[{"id":"fzgsugwmjokza4agcjyn4","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T14:56:43.434Z","first_published":"2026-11-05T15:33:07.108Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=stahlixcore.click"},{"hostname":"stellar-mist-ridge-beacon-signal-portal.pages.dev","first_observed":"2026-11-05T15:00:55.013Z","first_published":"2026-11-05T15:33:07.108Z","brands":[],"dns":"resolved","resolved":["172.66.44.191","172.66.47.65"],"resolved_at":"2026-11-05T15:03:43Z","dns_checked_at":"2026-11-06T15:45:00.000Z","dns_since":"2026-11-05T15:44:34.000Z","findings":[{"id":"fybydveedimjtifgdswof","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T15:00:55.013Z","first_published":"2026-11-05T15:33:07.108Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=stellar-mist-ridge-beacon-signal-portal.pages.dev"},{"hostname":"stuckfunds.sbs","first_observed":"2026-11-05T15:05:31.615Z","first_published":"2026-11-05T15:33:07.108Z","brands":[],"dns":"resolved","resolved":["104.21.89.45","172.67.156.114"],"resolved_at":"2026-11-05T15:07:15Z","dns_checked_at":"2026-11-06T15:45:00.000Z","dns_since":"2026-11-05T15:44:34.000Z","findings":[{"id":"fx534mbrijeihysajc2e2","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T15:05:31.615Z","first_published":"2026-11-05T15:33:07.108Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=stuckfunds.sbs"},{"hostname":"tatranium-ai.org","first_observed":"2026-11-05T14:41:08.241Z","first_published":"2026-11-05T15:33:07.108Z","brands":[],"dns":"resolved","resolved":["104.21.68.183","172.67.197.208"],"resolved_at":"2026-11-05T14:45:45Z","dns_checked_at":"2026-11-06T15:45:00.000Z","dns_since":"2026-11-05T15:44:34.000Z","findings":[{"id":"furq53hca6juoqtdsmxn2","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T14:41:08.241Z","first_published":"2026-11-05T15:33:07.108Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=tatranium-ai.org"},{"hostname":"tavexn.com","first_observed":"2026-11-05T15:16:00.479Z","first_published":"2026-11-05T15:33:07.108Z","brands":[],"dns":"resolved","resolved":["104.21.64.183","172.67.154.77"],"resolved_at":"2026-11-05T15:27:56Z","dns_checked_at":"2026-11-06T15:45:00.000Z","dns_since":"2026-11-05T15:44:34.000Z","findings":[{"id":"fnpvkvmfxus5hcciihfjv","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T15:16:00.479Z","first_published":"2026-11-05T15:33:07.108Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/tavexn.com/"}],"url":"https://domainspoof.com/live?show=all&q=tavexn.com"},{"hostname":"tbpanaadle.shop","first_observed":"2026-11-05T14:26:29.193Z","first_published":"2026-11-05T15:33:07.108Z","brands":[],"dns":"resolved","resolved":["104.21.29.126","172.67.149.2"],"resolved_at":"2026-11-05T14:34:48Z","dns_checked_at":"2026-11-06T15:45:00.000Z","dns_since":"2026-11-05T15:44:34.000Z","findings":[{"id":"frd7visekirrelf267cnr","kind":"reported_domain","summary":"Listed by NPA 165 (finance and insurance)","first_observed":"2026-11-05T14:26:29.193Z","first_published":"2026-11-05T15:33:07.108Z","source":"npa","source_name":"NPA 165","claim":{"category":"finance and insurance"}}],"url":"https://domainspoof.com/live?show=all&q=tbpanaadle.shop"},{"hostname":"tcqwfx-o463-sydi-ope8v2-rb1.pages.dev","first_observed":"2026-11-05T15:16:00.479Z","first_published":"2026-11-05T15:33:07.108Z","brands":[],"dns":"resolved","resolved":["172.66.44.95","172.66.47.161"],"resolved_at":"2026-11-05T15:27:56Z","dns_checked_at":"2026-11-06T15:45:00.000Z","dns_since":"2026-11-05T15:44:34.000Z","findings":[{"id":"fs7sajh3f3cmwx2eyfwev","kind":"reported_domain","summary":"Reported by PhishTank","first_observed":"2026-11-05T15:16:00.479Z","first_published":"2026-11-05T15:33:07.108Z","source":"phishtank","source_name":"PhishTank","source_url":"https://phishtank.org/phish_detail.php?phish_id=9479643"}],"url":"https://domainspoof.com/live?show=all&q=tcqwfx-o463-sydi-ope8v2-rb1.pages.dev"},{"hostname":"teamsinvite.com","first_observed":"2026-11-05T14:31:19.205Z","first_published":"2026-11-05T15:33:07.108Z","brands":[],"dns":"resolved","resolved":["142.93.231.168"],"resolved_at":"2026-11-05T14:42:10Z","dns_checked_at":"2026-11-06T15:45:00.000Z","dns_since":"2026-11-05T15:44:34.000Z","findings":[{"id":"fdemmi24xhaxz7bowsj2f","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T14:31:19.205Z","first_published":"2026-11-05T15:33:07.108Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=teamsinvite.com"},{"hostname":"telextxsre.click","first_observed":"2026-11-05T14:56:43.434Z","first_published":"2026-11-05T15:33:07.108Z","brands":[],"dns":"resolved","resolved":["104.21.32.221","172.67.136.213"],"resolved_at":"2026-11-05T14:59:56Z","dns_checked_at":"2026-11-06T15:45:00.000Z","dns_since":"2026-11-05T15:44:34.000Z","findings":[{"id":"fojumvet7gi2wavkcgbde","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T14:56:43.434Z","first_published":"2026-11-05T15:33:07.108Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=telextxsre.click"},{"hostname":"thalassotech.pl","first_observed":"2026-11-05T14:31:19.205Z","first_published":"2026-11-05T15:33:07.108Z","brands":[],"dns":"resolved","resolved":["46.242.247.98","212.85.96.113"],"resolved_at":"2026-11-05T14:42:10Z","dns_checked_at":"2026-11-06T15:45:00.000Z","dns_since":"2026-11-05T15:44:34.000Z","findings":[{"id":"fsy7m72sybeh6vozt4cpm","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T14:31:19.205Z","first_published":"2026-11-05T15:33:07.108Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=thalassotech.pl"},{"hostname":"trade-dex.xyz","first_observed":"2026-11-05T14:36:29.359Z","first_published":"2026-11-05T15:33:07.108Z","brands":[],"dns":"no_address","resolved":[],"resolved_at":"2026-11-05T14:37:01Z","dns_checked_at":"2026-11-06T15:45:00.000Z","dns_since":"2026-11-05T15:44:34.000Z","findings":[{"id":"fp7hsx7afgg743lwymbyf","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T14:36:29.359Z","first_published":"2026-11-05T15:33:07.108Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=trade-dex.xyz"},{"hostname":"treasury-firelight.info","first_observed":"2026-11-05T15:00:55.013Z","first_published":"2026-11-05T15:33:07.108Z","brands":[],"dns":"resolved","resolved":["104.21.77.246","172.67.213.85"],"resolved_at":"2026-11-05T15:03:43Z","dns_checked_at":"2026-11-06T15:45:00.000Z","dns_since":"2026-11-05T15:44:34.000Z","findings":[{"id":"flc3nc76kwhjmtjkpizib","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T15:00:55.013Z","first_published":"2026-11-05T15:33:07.108Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=treasury-firelight.info"},{"hostname":"trenvioneural.digital","first_observed":"2026-11-05T14:51:33.017Z","first_published":"2026-11-05T15:33:07.108Z","brands":[],"dns":"resolved","resolved":["104.21.20.234","172.67.194.194"],"resolved_at":"2026-11-05T14:53:40Z","dns_checked_at":"2026-11-06T15:45:00.000Z","dns_since":"2026-11-05T15:44:34.000Z","findings":[{"id":"fhdbnqrmlzbkmeks7czai","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T14:51:33.017Z","first_published":"2026-11-05T15:33:07.108Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=trenvioneural.digital"},{"hostname":"trezor---livelogin.pages.dev","first_observed":"2026-11-05T14:31:19.205Z","first_published":"2026-11-05T15:33:07.108Z","brands":[{"id":"trezor","name":"Trezor","url":"https://domainspoof.com/brands/trezor"}],"dns":"resolved","resolved":["172.66.45.38","172.66.46.218","2606:4700:310c::ac42:2d26","2606:4700:310c::ac42:2eda"],"resolved_at":"2026-11-05T14:42:11Z","dns_checked_at":"2026-11-06T15:45:00.000Z","dns_since":"2026-11-05T15:44:34.000Z","findings":[{"id":"fjjpdo5gdnpwwzxpix7yh","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T14:31:19.205Z","first_published":"2026-11-05T15:33:07.108Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/brands/trezor"},{"hostname":"trezsute-app.com","first_observed":"2026-11-05T14:21:09.353Z","first_published":"2026-11-05T15:33:07.108Z","brands":[],"dns":"resolved","resolved":["104.21.76.40","172.67.186.155"],"resolved_at":"2026-11-05T14:21:25Z","dns_checked_at":"2026-11-06T15:45:00.000Z","dns_since":"2026-11-05T15:44:34.000Z","findings":[{"id":"fdh3q5akduhqt65rqzyj2","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T14:21:09.353Z","first_published":"2026-11-05T15:33:07.108Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=trezsute-app.com"},{"hostname":"trrezorr-----logiin.pages.dev","first_observed":"2026-11-05T14:46:20.048Z","first_published":"2026-11-05T15:33:07.108Z","brands":[],"dns":"resolved","resolved":["172.66.44.203","172.66.47.53"],"resolved_at":"2026-11-05T14:49:08Z","dns_checked_at":"2026-11-06T15:45:00.000Z","dns_since":"2026-11-05T15:44:34.000Z","findings":[{"id":"fxapu4vfydr2qtmrfysnq","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T14:46:20.048Z","first_published":"2026-11-05T15:33:07.108Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=trrezorr-----logiin.pages.dev"},{"hostname":"truly1-ipsum33.cfd","first_observed":"2026-11-05T15:18:40.514Z","first_published":"2026-11-05T15:33:07.108Z","brands":[],"dns":"no_address","resolved":[],"resolved_at":"2026-11-05T15:20:06Z","dns_checked_at":"2026-11-06T15:45:00.000Z","dns_since":"2026-11-05T15:44:34.000Z","findings":[{"id":"f2yg6hpjn6xido7ihohlb","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T15:18:40.514Z","first_published":"2026-11-05T15:33:07.108Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=truly1-ipsum33.cfd"},{"hostname":"truly5-ipsa44.cfd","first_observed":"2026-11-05T15:18:40.514Z","first_published":"2026-11-05T15:33:07.108Z","brands":[],"dns":"no_address","resolved":[],"resolved_at":"2026-11-05T15:20:06Z","dns_checked_at":"2026-11-06T15:45:00.000Z","dns_since":"2026-11-05T15:44:34.000Z","findings":[{"id":"frjpuvq55bkz3ysvp7nsk","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T15:18:40.514Z","first_published":"2026-11-05T15:33:07.108Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=truly5-ipsa44.cfd"},{"hostname":"truly6-cupiditate24.cfd","first_observed":"2026-11-05T15:18:40.514Z","first_published":"2026-11-05T15:33:07.108Z","brands":[],"dns":"no_address","resolved":["104.21.64.152","172.67.152.34","2606:4700:3031::6815:4098","2606:4700:3037::ac43:9822"],"resolved_at":"2026-11-05T15:20:06Z","dns_checked_at":"2026-11-06T15:45:00.000Z","dns_since":"2026-11-05T15:44:34.000Z","findings":[{"id":"f4ljvozkixiaqtzy347co","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T15:18:40.514Z","first_published":"2026-11-05T15:33:07.108Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=truly6-cupiditate24.cfd"},{"hostname":"trustedtabrx.com","first_observed":"2026-11-05T14:51:33.017Z","first_published":"2026-11-05T15:33:07.108Z","brands":[],"dns":"resolved","resolved":["46.165.222.121"],"resolved_at":"2026-11-06T01:26:35Z","dns_checked_at":"2026-11-06T15:45:00.000Z","dns_since":"2026-11-05T15:44:34.000Z","findings":[{"id":"fehffgwgfz267vd4gngtf","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T14:51:33.017Z","first_published":"2026-11-05T15:33:07.108Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/trustedtabrx.com/"}],"url":"https://domainspoof.com/live?show=all&q=trustedtabrx.com"},{"hostname":"uabahnwf.nwyieims.nczpuhgbf.seyfbcuv.kvjsbyeg.emnbzdvj.uatmfwcq.gatewaylearning.ezgateway.net","first_observed":"2026-11-05T15:16:00.479Z","first_published":"2026-11-05T15:33:07.108Z","brands":[],"dns":"resolved","resolved":["15.204.116.29"],"resolved_at":"2026-11-05T15:27:56Z","dns_checked_at":"2026-11-06T15:45:00.000Z","dns_since":"2026-11-05T15:44:34.000Z","findings":[{"id":"fpsmotisv4ed7pez3vuqi","kind":"reported_domain","summary":"Under ezgateway.net, listed by USOM","first_observed":"2026-11-05T15:16:00.479Z","first_published":"2026-11-05T15:33:07.108Z","source":"usom","source_name":"USOM","under":"ezgateway.net"}],"url":"https://domainspoof.com/live?show=all&q=uabahnwf.nwyieims.nczpuhgbf.seyfbcuv.kvjsbyeg.emnbzdvj.uatmfwcq.gatewaylearning.ezgateway.net"},{"hostname":"ukashgrovepoint.com","first_observed":"2026-11-05T14:46:20.048Z","first_published":"2026-11-05T15:33:07.108Z","brands":[],"dns":"resolved","resolved":["104.21.37.20","172.67.203.68"],"resolved_at":"2026-11-05T14:49:08Z","dns_checked_at":"2026-11-06T15:45:00.000Z","dns_since":"2026-11-05T15:44:34.000Z","findings":[{"id":"fz5y3wrwti3t4yk63zfrz","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T14:46:20.048Z","first_published":"2026-11-05T15:33:07.108Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=ukashgrovepoint.com"},{"hostname":"urbane-upgrade.com","first_observed":"2026-11-05T15:05:31.615Z","first_published":"2026-11-05T15:33:07.108Z","brands":[],"dns":"resolved","resolved":["35.172.94.1","100.24.208.97"],"resolved_at":"2026-11-05T15:07:17Z","dns_checked_at":"2026-11-06T15:45:00.000Z","dns_since":"2026-11-05T15:44:34.000Z","findings":[{"id":"f72aop2ubyzxoelozan4d","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T15:05:31.615Z","first_published":"2026-11-05T15:33:07.108Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=urbane-upgrade.com"},{"hostname":"us-app--en-ledgr-live.pages.dev","first_observed":"2026-11-05T14:36:29.359Z","first_published":"2026-11-05T15:33:07.108Z","brands":[],"dns":"resolved","resolved":["172.66.44.232","172.66.47.24"],"resolved_at":"2026-11-06T00:51:46Z","dns_checked_at":"2026-11-06T15:45:00.000Z","dns_since":"2026-11-05T15:44:34.000Z","findings":[{"id":"fimcs6xvou6flrw2t7ovv","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T14:36:29.359Z","first_published":"2026-11-05T15:33:07.108Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=us-app--en-ledgr-live.pages.dev"},{"hostname":"uselesscoin.sbs","first_observed":"2026-11-05T14:46:20.048Z","first_published":"2026-11-05T15:33:07.108Z","brands":[],"dns":"resolved","resolved":["104.21.83.230","172.67.182.221"],"resolved_at":"2026-11-05T14:49:09Z","dns_checked_at":"2026-11-06T15:45:00.000Z","dns_since":"2026-11-05T15:44:34.000Z","findings":[{"id":"fxaznb3qbmmzdzbvo3cdz","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T14:46:20.048Z","first_published":"2026-11-05T15:33:07.108Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=uselesscoin.sbs"},{"hostname":"usps.83582.com","first_observed":"2026-11-05T15:19:52.696Z","first_published":"2026-11-05T15:33:07.108Z","brands":[{"id":"usps","name":"USPS","url":"https://domainspoof.com/brands/usps"}],"dns":"resolved","resolved":["208.98.43.143","208.98.43.148"],"resolved_at":"2026-11-06T15:45:00Z","dns_checked_at":"2026-11-06T15:45:00.000Z","dns_since":"2026-11-05T15:44:34.000Z","findings":[{"id":"f7w2mcjgmzrstrloexyp4","kind":"phishing_infrastructure","summary":"Resolved to 208.98.43.143, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T15:19:52.696Z","first_published":"2026-11-05T15:33:07.108Z","address":"208.98.43.143","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/usps"},{"hostname":"uvikelront-it.live","first_observed":"2026-11-05T15:05:31.615Z","first_published":"2026-11-05T15:33:07.108Z","brands":[],"dns":"resolved","resolved":["104.21.41.213","172.67.151.171"],"resolved_at":"2026-11-05T15:07:17Z","dns_checked_at":"2026-11-06T15:45:00.000Z","dns_since":"2026-11-05T15:44:34.000Z","findings":[{"id":"frzhz5kqpv7spruy4sdfc","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T15:05:31.615Z","first_published":"2026-11-05T15:33:07.108Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=uvikelront-it.live"},{"hostname":"uwaqs.asia","first_observed":"2026-11-05T14:56:43.434Z","first_published":"2026-11-05T15:33:07.108Z","brands":[],"dns":"no_address","resolved":[],"resolved_at":"2026-11-05T14:59:57Z","dns_checked_at":"2026-11-06T15:45:00.000Z","dns_since":"2026-11-05T15:44:34.000Z","findings":[{"id":"fegtwpkamppa3ucjwuc6s","kind":"reported_domain","summary":"Listed by NPA 165 (e-commerce)","first_observed":"2026-11-05T14:56:43.434Z","first_published":"2026-11-05T15:33:07.108Z","source":"npa","source_name":"NPA 165","claim":{"category":"e-commerce"}}],"url":"https://domainspoof.com/live?show=all&q=uwaqs.asia"},{"hostname":"v1.androidloading.com","first_observed":"2026-11-05T15:16:00.479Z","first_published":"2026-11-05T15:33:07.108Z","brands":[],"dns":"resolved","resolved":["185.178.208.191"],"resolved_at":"2026-11-05T15:27:57Z","dns_checked_at":"2026-11-06T15:45:00.000Z","dns_since":"2026-11-05T15:44:34.000Z","findings":[{"id":"f4a3g5xmzwqboiup3dr7e","kind":"reported_domain","summary":"Under androidloading.com, reported by PhishDestroy","first_observed":"2026-11-05T15:16:00.479Z","first_published":"2026-11-05T15:33:07.108Z","source":"phishdestroy","source_name":"PhishDestroy","under":"androidloading.com","source_url":"https://phishdestroy.io/domain/androidloading.com/"}],"url":"https://domainspoof.com/live?show=all&q=v1.androidloading.com"},{"hostname":"vacamuertainvestment-es.live","first_observed":"2026-11-05T15:16:00.479Z","first_published":"2026-11-05T15:33:07.108Z","brands":[],"dns":"resolved","resolved":["104.21.78.41","172.67.216.2"],"resolved_at":"2026-11-05T15:27:57Z","dns_checked_at":"2026-11-06T15:45:00.000Z","dns_since":"2026-11-05T15:44:34.000Z","findings":[{"id":"fjjnmblwxvw5h7emp7c6k","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T15:16:00.479Z","first_published":"2026-11-05T15:33:07.108Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=vacamuertainvestment-es.live"},{"hostname":"variaomniapp.com","first_observed":"2026-11-05T14:36:29.359Z","first_published":"2026-11-05T15:33:07.108Z","brands":[],"dns":"resolved","resolved":["104.21.25.210","172.67.134.174"],"resolved_at":"2026-11-05T14:37:02Z","dns_checked_at":"2026-11-06T15:45:00.000Z","dns_since":"2026-11-05T15:44:34.000Z","findings":[{"id":"f65bbjidfuj27wsoc5a4z","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T14:36:29.359Z","first_published":"2026-11-05T15:33:07.108Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=variaomniapp.com"},{"hostname":"vast-travels.com","first_observed":"2026-11-05T14:46:20.048Z","first_published":"2026-11-05T15:33:07.108Z","brands":[],"dns":"resolved","resolved":["104.21.82.157","172.67.158.243"],"resolved_at":"2026-11-05T14:49:09Z","dns_checked_at":"2026-11-06T15:45:00.000Z","dns_since":"2026-11-05T15:44:34.000Z","findings":[{"id":"fwhqyyopxagxm4afp4mfq","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T14:46:20.048Z","first_published":"2026-11-05T15:33:07.108Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=vast-travels.com"},{"hostname":"viniciusfrancoadvocacia.com.br","first_observed":"2026-11-05T14:31:19.205Z","first_published":"2026-11-05T15:33:07.108Z","brands":[],"dns":"resolved","resolved":["162.241.203.110"],"resolved_at":"2026-11-05T14:42:12Z","dns_checked_at":"2026-11-06T15:45:00.000Z","dns_since":"2026-11-05T15:44:34.000Z","findings":[{"id":"fgydqk3itjnpwiaew5m6x","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T14:31:19.205Z","first_published":"2026-11-05T15:33:07.108Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/viniciusfrancoadvocacia.com.br/"}],"url":"https://domainspoof.com/live?show=all&q=viniciusfrancoadvocacia.com.br"},{"hostname":"vitanovaschoolstore.com","first_observed":"2026-11-05T14:31:19.205Z","first_published":"2026-11-05T15:33:07.108Z","brands":[],"dns":"resolved","resolved":["167.172.157.72"],"resolved_at":"2026-11-05T14:42:12Z","dns_checked_at":"2026-11-06T15:45:00.000Z","dns_since":"2026-11-05T15:44:34.000Z","findings":[{"id":"fpmeuao5w75ihw2olekzj","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T14:31:19.205Z","first_published":"2026-11-05T15:33:07.108Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=vitanovaschoolstore.com"},{"hostname":"vote-megaeth.cc","first_observed":"2026-11-05T14:51:33.017Z","first_published":"2026-11-05T15:33:07.108Z","brands":[{"id":"megaeth","name":"MegaETH","url":"https://domainspoof.com/brands/megaeth"}],"dns":"resolved","resolved":["104.21.11.136","172.67.166.34","2606:4700:3032::6815:b88","2606:4700:3032::ac43:a622"],"resolved_at":"2026-11-05T14:53:41Z","dns_checked_at":"2026-11-06T15:45:00.000Z","dns_since":"2026-11-05T15:44:34.000Z","findings":[{"id":"fxd3ddqp7ls432zq5agjy","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T14:51:33.017Z","first_published":"2026-11-05T15:33:07.108Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/vote-megaeth.cc/"}],"url":"https://domainspoof.com/brands/megaeth"},{"hostname":"vrf-d7zj-oeea74-5hio-fd8pl8.pages.dev","first_observed":"2026-11-05T14:46:20.048Z","first_published":"2026-11-05T15:33:07.108Z","brands":[],"dns":"resolved","resolved":["172.66.45.29","172.66.46.227"],"resolved_at":"2026-11-05T14:49:09Z","dns_checked_at":"2026-11-06T15:45:00.000Z","dns_since":"2026-11-05T15:44:34.000Z","findings":[{"id":"fap5rf6wnv2fsszd4766s","kind":"reported_domain","summary":"Reported by PhishTank","first_observed":"2026-11-05T14:46:20.048Z","first_published":"2026-11-05T15:33:07.108Z","source":"phishtank","source_name":"PhishTank","source_url":"https://phishtank.org/phish_detail.php?phish_id=9479653"}],"url":"https://domainspoof.com/live?show=all&q=vrf-d7zj-oeea74-5hio-fd8pl8.pages.dev"},{"hostname":"vuoerbom.shop","first_observed":"2026-11-05T15:10:42.147Z","first_published":"2026-11-05T15:33:07.108Z","brands":[],"dns":"resolved","resolved":["104.21.29.166","172.67.149.134"],"resolved_at":"2026-11-05T15:19:55Z","dns_checked_at":"2026-11-06T15:45:00.000Z","dns_since":"2026-11-05T15:44:34.000Z","findings":[{"id":"f22au3rggvdqtqnhy62xl","kind":"reported_domain","summary":"Listed by NPA 165 (e-commerce)","first_observed":"2026-11-05T15:10:42.147Z","first_published":"2026-11-05T15:33:07.108Z","source":"npa","source_name":"NPA 165","claim":{"category":"e-commerce"}}],"url":"https://domainspoof.com/live?show=all&q=vuoerbom.shop"},{"hostname":"vvv711.com","first_observed":"2026-11-05T15:05:31.615Z","first_published":"2026-11-05T15:33:07.108Z","brands":[],"dns":"resolved","resolved":["162.4.84.247"],"resolved_at":"2026-11-05T15:07:20Z","dns_checked_at":"2026-11-06T15:45:00.000Z","dns_since":"2026-11-05T15:44:34.000Z","findings":[{"id":"fapbuwrdcu4pxksznu2qh","kind":"reported_domain","summary":"Listed by NPA 165 (e-commerce)","first_observed":"2026-11-05T15:05:31.615Z","first_published":"2026-11-05T15:33:07.108Z","source":"npa","source_name":"NPA 165","claim":{"category":"e-commerce"}}],"url":"https://domainspoof.com/live?show=all&q=vvv711.com"},{"hostname":"vynotracoh.site","first_observed":"2026-11-05T14:31:19.205Z","first_published":"2026-11-05T15:33:07.108Z","brands":[],"dns":"resolved","resolved":["104.21.22.157","172.67.205.129"],"resolved_at":"2026-11-06T13:31:24Z","dns_checked_at":"2026-11-06T15:45:00.000Z","dns_since":"2026-11-05T15:44:34.000Z","findings":[{"id":"fumv3wayi5uzfaciyf5f6","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T14:31:19.205Z","first_published":"2026-11-05T15:33:07.108Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=vynotracoh.site"},{"hostname":"w07.woodcraft-meb.ru","first_observed":"2026-11-05T15:05:31.615Z","first_published":"2026-11-05T15:33:07.108Z","brands":[],"dns":"resolved","resolved":["96.44.148.69"],"resolved_at":"2026-11-05T15:07:20Z","dns_checked_at":"2026-11-06T15:45:00.000Z","dns_since":"2026-11-05T15:44:34.000Z","findings":[{"id":"frlk3e3rhjvwyplmaihoo","kind":"reported_domain","summary":"Under woodcraft-meb.ru, reported by PhishDestroy","first_observed":"2026-11-05T15:05:31.615Z","first_published":"2026-11-05T15:33:07.108Z","source":"phishdestroy","source_name":"PhishDestroy","under":"woodcraft-meb.ru","source_url":"https://phishdestroy.io/domain/woodcraft-meb.ru/"}],"url":"https://domainspoof.com/live?show=all&q=w07.woodcraft-meb.ru"},{"hostname":"wandiesshop-plus.store","first_observed":"2026-11-05T14:36:29.359Z","first_published":"2026-11-05T15:33:07.108Z","brands":[],"dns":"no_address","resolved":[],"resolved_at":"2026-11-05T14:37:02Z","dns_checked_at":"2026-11-06T15:45:00.000Z","dns_since":"2026-11-05T15:44:34.000Z","findings":[{"id":"fxo6krji2m2iz6yuzrxk3","kind":"reported_domain","summary":"Listed by NPA 165 (e-commerce)","first_observed":"2026-11-05T14:36:29.359Z","first_published":"2026-11-05T15:33:07.108Z","source":"npa","source_name":"NPA 165","claim":{"category":"e-commerce"}}],"url":"https://domainspoof.com/live?show=all&q=wandiesshop-plus.store"},{"hostname":"web.indexprotraders.com","first_observed":"2026-11-05T14:36:29.359Z","first_published":"2026-11-05T15:33:07.108Z","brands":[],"dns":"resolved","resolved":["162.4.84.241"],"resolved_at":"2026-11-05T14:37:02Z","dns_checked_at":"2026-11-06T15:45:00.000Z","dns_since":"2026-11-05T15:44:34.000Z","findings":[{"id":"fpv6vydgcykvmgq5cewhp","kind":"reported_domain","summary":"Under indexprotraders.com, reported by PhishDestroy","first_observed":"2026-11-05T14:36:29.359Z","first_published":"2026-11-05T15:33:07.108Z","source":"phishdestroy","source_name":"PhishDestroy","under":"indexprotraders.com","source_url":"https://phishdestroy.io/domain/indexprotraders.com/"}],"url":"https://domainspoof.com/live?show=all&q=web.indexprotraders.com"},{"hostname":"webdisk.bitbase-miners.com","first_observed":"2026-11-05T15:00:55.013Z","first_published":"2026-11-05T15:33:07.108Z","brands":[],"dns":"resolved","resolved":["5.182.208.207"],"resolved_at":"2026-11-05T15:03:43Z","dns_checked_at":"2026-11-06T15:45:00.000Z","dns_since":"2026-11-05T15:44:34.000Z","findings":[{"id":"foawk6n5h4dm4ggcsgjer","kind":"reported_domain","summary":"Under bitbase-miners.com, reported by PhishDestroy","first_observed":"2026-11-05T15:00:55.013Z","first_published":"2026-11-05T15:33:07.108Z","source":"phishdestroy","source_name":"PhishDestroy","under":"bitbase-miners.com","source_url":"https://phishdestroy.io/domain/bitbase-miners.com/"}],"url":"https://domainspoof.com/live?show=all&q=webdisk.bitbase-miners.com"},{"hostname":"webmail.bitbase-miners.com","first_observed":"2026-11-05T15:00:55.013Z","first_published":"2026-11-05T15:33:07.108Z","brands":[],"dns":"resolved","resolved":["5.182.208.207"],"resolved_at":"2026-11-05T15:03:43Z","dns_checked_at":"2026-11-06T15:45:00.000Z","dns_since":"2026-11-05T15:44:34.000Z","findings":[{"id":"fgsbwzz2b3uk4mwbq5ooo","kind":"reported_domain","summary":"Under bitbase-miners.com, reported by PhishDestroy","first_observed":"2026-11-05T15:00:55.013Z","first_published":"2026-11-05T15:33:07.108Z","source":"phishdestroy","source_name":"PhishDestroy","under":"bitbase-miners.com","source_url":"https://phishdestroy.io/domain/bitbase-miners.com/"}],"url":"https://domainspoof.com/live?show=all&q=webmail.bitbase-miners.com"},{"hostname":"weryf-10376.eu.cc","first_observed":"2026-11-05T14:41:08.241Z","first_published":"2026-11-05T15:33:07.108Z","brands":[],"dns":"resolved","resolved":["104.21.34.232","172.67.210.22"],"resolved_at":"2026-11-05T14:45:48Z","dns_checked_at":"2026-11-06T15:45:00.000Z","dns_since":"2026-11-05T15:44:34.000Z","findings":[{"id":"fveptmx47pwyzka5ck57w","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T14:41:08.241Z","first_published":"2026-11-05T15:33:07.108Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=weryf-10376.eu.cc"},{"hostname":"wine-best.shop","first_observed":"2026-11-05T15:18:40.514Z","first_published":"2026-11-05T15:33:07.108Z","brands":[],"dns":"resolved","resolved":["104.21.47.51","172.67.144.140","2606:4700:3032::6815:2f33","2606:4700:3035::ac43:908c"],"resolved_at":"2026-11-05T15:20:06Z","dns_checked_at":"2026-11-06T15:45:01.000Z","dns_since":"2026-11-05T15:44:34.000Z","findings":[{"id":"f2ss6v3o6dcueqobemujq","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T15:18:40.514Z","first_published":"2026-11-05T15:33:07.108Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=wine-best.shop"},{"hostname":"worldcupcoin.sbs","first_observed":"2026-11-05T14:31:19.205Z","first_published":"2026-11-05T15:33:07.108Z","brands":[],"dns":"resolved","resolved":["104.21.19.244","172.67.190.130"],"resolved_at":"2026-11-05T14:42:13Z","dns_checked_at":"2026-11-06T15:45:01.000Z","dns_since":"2026-11-05T15:44:34.000Z","findings":[{"id":"fs4pg5ccqiu6zvxxznfmi","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T14:31:19.205Z","first_published":"2026-11-05T15:33:07.108Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=worldcupcoin.sbs"},{"hostname":"www.120tt.ezgateway.net","first_observed":"2026-11-05T15:26:04.061Z","first_published":"2026-11-05T15:33:07.108Z","brands":[],"dns":"resolved","resolved":["104.21.13.213"],"resolved_at":"2026-11-05T15:31:44Z","dns_checked_at":"2026-11-06T15:45:01.000Z","dns_since":"2026-11-05T15:44:34.000Z","findings":[{"id":"fkch2nivwslkcchsscasv","kind":"reported_domain","summary":"Under ezgateway.net, listed by USOM","first_observed":"2026-11-05T15:26:04.061Z","first_published":"2026-11-05T15:33:07.108Z","source":"usom","source_name":"USOM","under":"ezgateway.net"}],"url":"https://domainspoof.com/live?show=all&q=www.120tt.ezgateway.net"},{"hostname":"www.71book.ezgateway.net","first_observed":"2026-11-05T15:26:04.061Z","first_published":"2026-11-05T15:33:07.108Z","brands":[],"dns":"resolved","resolved":["104.21.13.213"],"resolved_at":"2026-11-05T15:31:44Z","dns_checked_at":"2026-11-06T15:45:01.000Z","dns_since":"2026-11-05T15:44:34.000Z","findings":[{"id":"flfckl47ll6aq67dfwbdd","kind":"reported_domain","summary":"Under ezgateway.net, listed by USOM","first_observed":"2026-11-05T15:26:04.061Z","first_published":"2026-11-05T15:33:07.108Z","source":"usom","source_name":"USOM","under":"ezgateway.net"}],"url":"https://domainspoof.com/live?show=all&q=www.71book.ezgateway.net"},{"hostname":"www.beta.zenavlico.cyou","first_observed":"2026-11-05T15:26:04.061Z","first_published":"2026-11-05T15:33:07.108Z","brands":[],"dns":"resolved","resolved":["95.85.244.13"],"resolved_at":"2026-11-05T15:31:44Z","dns_checked_at":"2026-11-06T15:45:01.000Z","dns_since":"2026-11-05T15:44:34.000Z","findings":[{"id":"flqmnz5fxqizbdjswkiqf","kind":"reported_domain","summary":"Under zenavlico.cyou, listed by CERT Polska","first_observed":"2026-11-05T15:26:04.061Z","first_published":"2026-11-05T15:33:07.108Z","source":"cert_polska","source_name":"CERT Polska","under":"zenavlico.cyou"}],"url":"https://domainspoof.com/live?show=all&q=www.beta.zenavlico.cyou"},{"hostname":"www.bitrefill.com-cs01-esim-gift.com","first_observed":"2026-11-05T15:03:44.216Z","first_published":"2026-11-05T15:33:07.108Z","brands":[{"id":"bitrefill","name":"Bitrefill","url":"https://domainspoof.com/brands/bitrefill"}],"dns":"resolved","resolved":["62.60.226.39"],"resolved_at":"2026-11-06T15:45:01Z","dns_checked_at":"2026-11-06T15:45:01.000Z","dns_since":"2026-11-05T15:44:34.000Z","findings":[{"id":"ffg7hv4nlhk3gj5ueblhk","kind":"spamhaus_drop","summary":"Resolved to 62.60.226.39 on Spamhaus DROP","first_observed":"2026-11-05T15:03:44.216Z","first_published":"2026-11-05T15:33:07.108Z","address":"62.60.226.39","list":"spamhaus_drop","list_name":"Spamhaus DROP"}],"url":"https://domainspoof.com/brands/bitrefill"},{"hostname":"www.caroutletdigital.com","first_observed":"2026-11-05T15:21:16.676Z","first_published":"2026-11-05T15:33:07.108Z","brands":[],"dns":"resolved","resolved":["210.131.239.203"],"resolved_at":"2026-11-05T15:21:59Z","dns_checked_at":"2026-11-06T15:45:01.000Z","dns_since":"2026-11-05T15:44:34.000Z","findings":[{"id":"fjqvkzf23jwnbrbdikkfd","kind":"reported_domain","summary":"Under caroutletdigital.com, listed by CERT Polska","first_observed":"2026-11-05T15:21:16.676Z","first_published":"2026-11-05T15:33:07.108Z","source":"cert_polska","source_name":"CERT Polska","under":"caroutletdigital.com"}],"url":"https://domainspoof.com/live?show=all&q=www.caroutletdigital.com"},{"hostname":"www.falcondesktop.finance","first_observed":"2026-11-05T14:46:20.048Z","first_published":"2026-11-05T15:33:07.108Z","brands":[],"dns":"resolved","resolved":["64.29.17.65","216.198.79.65"],"resolved_at":"2026-11-05T14:49:10Z","dns_checked_at":"2026-11-06T15:45:01.000Z","dns_since":"2026-11-05T15:44:34.000Z","findings":[{"id":"fun7uivjjqeuhwq7gbacd","kind":"reported_domain","summary":"Under falcondesktop.finance, reported by PhishDestroy","first_observed":"2026-11-05T14:46:20.048Z","first_published":"2026-11-05T15:33:07.108Z","source":"phishdestroy","source_name":"PhishDestroy","under":"falcondesktop.finance","source_url":"https://phishdestroy.io/domain/falcondesktop.finance/"}],"url":"https://domainspoof.com/live?show=all&q=www.falcondesktop.finance"},{"hostname":"www.gazprombank.ee","first_observed":"2026-11-05T15:11:07.212Z","first_published":"2026-11-05T15:33:07.108Z","brands":[{"id":"gazprom","name":"Gazprom","url":"https://domainspoof.com/brands/gazprom"}],"dns":"resolved","resolved":["185.31.240.240"],"resolved_at":"2026-11-06T15:45:01Z","dns_checked_at":"2026-11-06T15:45:01.000Z","dns_since":"2026-11-05T15:44:34.000Z","findings":[{"id":"fx7nwunzw56e4pocvs7ro","kind":"phishing_infrastructure","summary":"Resolved to 185.31.240.240, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T15:11:07.212Z","first_published":"2026-11-05T15:33:07.108Z","address":"185.31.240.240","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/gazprom"},{"hostname":"www.ghost.crypto-polis.org","first_observed":"2026-11-05T15:16:00.479Z","first_published":"2026-11-05T15:33:07.108Z","brands":[],"dns":"resolved","resolved":["185.178.208.132","185.178.208.182"],"resolved_at":"2026-11-05T15:27:53Z","dns_checked_at":"2026-11-06T15:45:01.000Z","dns_since":"2026-11-05T15:44:34.000Z","findings":[{"id":"f76wfbigjr6fjjc2upfqb","kind":"reported_domain","summary":"Under crypto-polis.org, reported by PhishDestroy","first_observed":"2026-11-05T15:16:00.479Z","first_published":"2026-11-05T15:33:07.108Z","source":"phishdestroy","source_name":"PhishDestroy","under":"crypto-polis.org","source_url":"https://phishdestroy.io/domain/crypto-polis.org/"}],"url":"https://domainspoof.com/live?show=all&q=www.ghost.crypto-polis.org"},{"hostname":"www.jzpme.ezgateway.net","first_observed":"2026-11-05T15:16:00.479Z","first_published":"2026-11-05T15:33:07.108Z","brands":[],"dns":"resolved","resolved":["172.67.165.35"],"resolved_at":"2026-11-05T15:27:58Z","dns_checked_at":"2026-11-06T15:45:01.000Z","dns_since":"2026-11-05T15:44:34.000Z","findings":[{"id":"frt5xmaptwjcfjnm7dy2t","kind":"reported_domain","summary":"Under ezgateway.net, listed by USOM","first_observed":"2026-11-05T15:16:00.479Z","first_published":"2026-11-05T15:33:07.108Z","source":"usom","source_name":"USOM","under":"ezgateway.net"}],"url":"https://domainspoof.com/live?show=all&q=www.jzpme.ezgateway.net"},{"hostname":"www.kalyxen.io","first_observed":"2026-11-05T14:31:19.205Z","first_published":"2026-11-05T15:33:07.108Z","brands":[],"dns":"resolved","resolved":["216.150.1.65","216.150.16.65"],"resolved_at":"2026-11-05T14:42:15Z","dns_checked_at":"2026-11-06T15:45:01.000Z","dns_since":"2026-11-05T15:44:34.000Z","findings":[{"id":"fkpz76qmvykgeovribcr6","kind":"reported_domain","summary":"Under kalyxen.io, reported by PhishDestroy","first_observed":"2026-11-05T14:31:19.205Z","first_published":"2026-11-05T15:33:07.108Z","source":"phishdestroy","source_name":"PhishDestroy","under":"kalyxen.io","source_url":"https://phishdestroy.io/domain/kalyxen.io/"}],"url":"https://domainspoof.com/live?show=all&q=www.kalyxen.io"},{"hostname":"www.liminal-money.net","first_observed":"2026-11-05T14:26:29.193Z","first_published":"2026-11-05T15:33:07.108Z","brands":[],"dns":"resolved","resolved":["104.21.45.140","172.67.215.47"],"resolved_at":"2026-11-05T14:34:56Z","dns_checked_at":"2026-11-06T15:45:01.000Z","dns_since":"2026-11-05T15:44:34.000Z","findings":[{"id":"fesyav5d7hnay3e4y4frc","kind":"reported_domain","summary":"Under liminal-money.net, listed by MetaMask","first_observed":"2026-11-05T14:26:29.193Z","first_published":"2026-11-05T15:33:07.108Z","source":"metamask","source_name":"MetaMask","under":"liminal-money.net"}],"url":"https://domainspoof.com/live?show=all&q=www.liminal-money.net"},{"hostname":"www.liminalmoney.net","first_observed":"2026-11-05T14:26:29.193Z","first_published":"2026-11-05T15:33:07.108Z","brands":[],"dns":"resolved","resolved":["104.21.55.195","172.67.172.159"],"resolved_at":"2026-11-05T14:34:56Z","dns_checked_at":"2026-11-06T15:45:01.000Z","dns_since":"2026-11-05T15:44:34.000Z","findings":[{"id":"fwu66ax6cmdwtradw2tap","kind":"reported_domain","summary":"Under liminalmoney.net, listed by MetaMask","first_observed":"2026-11-05T14:26:29.193Z","first_published":"2026-11-05T15:33:07.108Z","source":"metamask","source_name":"MetaMask","under":"liminalmoney.net"}],"url":"https://domainspoof.com/live?show=all&q=www.liminalmoney.net"},{"hostname":"www.linear.crypto-polis.org","first_observed":"2026-11-05T15:16:00.479Z","first_published":"2026-11-05T15:33:07.108Z","brands":[],"dns":"resolved","resolved":["185.178.208.132","185.178.208.182"],"resolved_at":"2026-11-05T15:27:58Z","dns_checked_at":"2026-11-06T15:45:01.000Z","dns_since":"2026-11-05T15:44:34.000Z","findings":[{"id":"f6v73fl3efphjvd3l3sec","kind":"reported_domain","summary":"Under crypto-polis.org, reported by PhishDestroy","first_observed":"2026-11-05T15:16:00.479Z","first_published":"2026-11-05T15:33:07.108Z","source":"phishdestroy","source_name":"PhishDestroy","under":"crypto-polis.org","source_url":"https://phishdestroy.io/domain/crypto-polis.org/"}],"url":"https://domainspoof.com/live?show=all&q=www.linear.crypto-polis.org"},{"hostname":"www.looping-collective.com","first_observed":"2026-11-05T14:26:29.193Z","first_published":"2026-11-05T15:33:07.108Z","brands":[],"dns":"resolved","resolved":["104.21.73.183","172.67.165.63"],"resolved_at":"2026-11-05T14:34:56Z","dns_checked_at":"2026-11-06T15:45:01.000Z","dns_since":"2026-11-05T15:44:34.000Z","findings":[{"id":"fywpxxmumnflkubqlrhuw","kind":"reported_domain","summary":"Under looping-collective.com, listed by MetaMask","first_observed":"2026-11-05T14:26:29.193Z","first_published":"2026-11-05T15:33:07.108Z","source":"metamask","source_name":"MetaMask","under":"looping-collective.com"}],"url":"https://domainspoof.com/live?show=all&q=www.looping-collective.com"},{"hostname":"www.looping-collective.net","first_observed":"2026-11-05T14:26:29.193Z","first_published":"2026-11-05T15:33:07.108Z","brands":[],"dns":"resolved","resolved":["104.21.0.139","172.67.128.15"],"resolved_at":"2026-11-05T14:34:56Z","dns_checked_at":"2026-11-06T15:45:01.000Z","dns_since":"2026-11-05T15:44:34.000Z","findings":[{"id":"f4cnd6cc45cycxfqmo47c","kind":"reported_domain","summary":"Under looping-collective.net, listed by MetaMask","first_observed":"2026-11-05T14:26:29.193Z","first_published":"2026-11-05T15:33:07.108Z","source":"metamask","source_name":"MetaMask","under":"looping-collective.net"}],"url":"https://domainspoof.com/live?show=all&q=www.looping-collective.net"},{"hostname":"www.mailpit.crypto-polis.org","first_observed":"2026-11-05T15:16:00.479Z","first_published":"2026-11-05T15:33:07.108Z","brands":[],"dns":"resolved","resolved":["185.178.208.132","185.178.208.182"],"resolved_at":"2026-11-05T15:27:58Z","dns_checked_at":"2026-11-06T15:45:01.000Z","dns_since":"2026-11-05T15:44:34.000Z","findings":[{"id":"f57cbagsd4wxbxzejicdi","kind":"reported_domain","summary":"Under crypto-polis.org, reported by PhishDestroy","first_observed":"2026-11-05T15:16:00.479Z","first_published":"2026-11-05T15:33:07.108Z","source":"phishdestroy","source_name":"PhishDestroy","under":"crypto-polis.org","source_url":"https://phishdestroy.io/domain/crypto-polis.org/"}],"url":"https://domainspoof.com/live?show=all&q=www.mailpit.crypto-polis.org"},{"hostname":"www.pay-bitrefill.com-cs01-esim-gift.com","first_observed":"2026-11-05T15:03:44.418Z","first_published":"2026-11-05T15:33:07.108Z","brands":[{"id":"bitrefill","name":"Bitrefill","url":"https://domainspoof.com/brands/bitrefill"}],"dns":"resolved","resolved":["62.60.226.39"],"resolved_at":"2026-11-06T15:45:01Z","dns_checked_at":"2026-11-06T15:45:01.000Z","dns_since":"2026-11-05T15:44:35.000Z","findings":[{"id":"fx4tovapdop7cmahtgxcn","kind":"spamhaus_drop","summary":"Resolved to 62.60.226.39 on Spamhaus DROP","first_observed":"2026-11-05T15:03:44.418Z","first_published":"2026-11-05T15:33:07.108Z","address":"62.60.226.39","list":"spamhaus_drop","list_name":"Spamhaus DROP"}],"url":"https://domainspoof.com/brands/bitrefill"},{"hostname":"www.physline.com","first_observed":"2026-11-05T15:10:42.147Z","first_published":"2026-11-05T15:33:07.108Z","brands":[],"dns":"resolved","resolved":["162.4.84.247"],"resolved_at":"2026-11-05T15:11:07Z","dns_checked_at":"2026-11-06T15:45:01.000Z","dns_since":"2026-11-05T15:44:35.000Z","findings":[{"id":"fruxqwb5dr4gwnlpq5ec4","kind":"reported_domain","summary":"Under physline.com, listed by CERT Polska","first_observed":"2026-11-05T15:10:42.147Z","first_published":"2026-11-05T15:33:07.108Z","source":"cert_polska","source_name":"CERT Polska","under":"physline.com"}],"url":"https://domainspoof.com/live?show=all&q=www.physline.com"},{"hostname":"www.prada.ee","first_observed":"2026-11-05T15:11:07.213Z","first_published":"2026-11-05T15:33:07.108Z","brands":[{"id":"prada","name":"Prada","url":"https://domainspoof.com/brands/prada"}],"dns":"resolved","resolved":["185.31.240.240"],"resolved_at":"2026-11-06T15:45:01Z","dns_checked_at":"2026-11-06T15:45:01.000Z","dns_since":"2026-11-05T15:44:35.000Z","findings":[{"id":"fwkvjrh2zx3obvu24nrfb","kind":"phishing_infrastructure","summary":"Resolved to 185.31.240.240, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T15:11:07.213Z","first_published":"2026-11-05T15:33:07.108Z","address":"185.31.240.240","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/prada"},{"hostname":"www.prjxs.net","first_observed":"2026-11-05T14:31:19.205Z","first_published":"2026-11-05T15:33:07.108Z","brands":[],"dns":"resolved","resolved":["104.21.13.253","172.67.133.146"],"resolved_at":"2026-11-05T14:42:15Z","dns_checked_at":"2026-11-06T15:45:01.000Z","dns_since":"2026-11-05T15:44:35.000Z","findings":[{"id":"f53owoa2qshay43tnbg3m","kind":"reported_domain","summary":"Under prjxs.net, listed by MetaMask","first_observed":"2026-11-05T14:31:19.205Z","first_published":"2026-11-05T15:33:07.108Z","source":"metamask","source_name":"MetaMask","under":"prjxs.net"}],"url":"https://domainspoof.com/live?show=all&q=www.prjxs.net"},{"hostname":"www.prjxx.net","first_observed":"2026-11-05T14:31:19.205Z","first_published":"2026-11-05T15:33:07.108Z","brands":[],"dns":"resolved","resolved":["104.21.48.200","172.67.187.235"],"resolved_at":"2026-11-05T14:42:15Z","dns_checked_at":"2026-11-06T15:45:01.000Z","dns_since":"2026-11-05T15:44:35.000Z","findings":[{"id":"f2jqfsvbozyyw57zi646f","kind":"reported_domain","summary":"Under prjxx.net, listed by MetaMask","first_observed":"2026-11-05T14:31:19.205Z","first_published":"2026-11-05T15:33:07.108Z","source":"metamask","source_name":"MetaMask","under":"prjxx.net"}],"url":"https://domainspoof.com/live?show=all&q=www.prjxx.net"},{"hostname":"www.qzino.io","first_observed":"2026-11-05T15:21:16.676Z","first_published":"2026-11-05T15:33:07.108Z","brands":[],"dns":"resolved","resolved":["104.20.19.232","172.66.156.97"],"resolved_at":"2026-11-05T15:21:59Z","dns_checked_at":"2026-11-06T15:45:01.000Z","dns_since":"2026-11-05T15:44:35.000Z","findings":[{"id":"fhfyns2o2nubxhhr2mtip","kind":"reported_domain","summary":"Under qzino.io, reported by PhishDestroy","first_observed":"2026-11-05T15:21:16.676Z","first_published":"2026-11-05T15:33:07.108Z","source":"phishdestroy","source_name":"PhishDestroy","under":"qzino.io","source_url":"https://phishdestroy.io/domain/qzino.io/"}],"url":"https://domainspoof.com/live?show=all&q=www.qzino.io"},{"hostname":"www.santander.co.uk.llt.vin","first_observed":"2026-11-05T14:43:31.280Z","first_published":"2026-11-05T15:33:07.108Z","brands":[{"id":"santander","name":"Santander","url":"https://domainspoof.com/brands/santander"}],"dns":"resolved","resolved":["139.180.187.142"],"resolved_at":"2026-11-06T15:45:01Z","dns_checked_at":"2026-11-06T15:45:01.000Z","dns_since":"2026-11-05T15:44:35.000Z","findings":[{"id":"fapk6oskg6wbdsxnnjzxj","kind":"phishing_infrastructure","summary":"Resolved to 139.180.187.142, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T14:43:31.280Z","first_published":"2026-11-05T15:33:07.108Z","address":"139.180.187.142","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/santander"},{"hostname":"www.setup.zenavlico.cyou","first_observed":"2026-11-05T15:21:16.676Z","first_published":"2026-11-05T15:33:07.108Z","brands":[],"dns":"resolved","resolved":["95.85.244.13"],"resolved_at":"2026-11-05T15:21:59Z","dns_checked_at":"2026-11-06T15:45:01.000Z","dns_since":"2026-11-05T15:44:35.000Z","findings":[{"id":"fbuu7ji6kqdprxxcmhqhk","kind":"reported_domain","summary":"Under zenavlico.cyou, listed by CERT Polska","first_observed":"2026-11-05T15:21:16.676Z","first_published":"2026-11-05T15:33:07.108Z","source":"cert_polska","source_name":"CERT Polska","under":"zenavlico.cyou"}],"url":"https://domainspoof.com/live?show=all&q=www.setup.zenavlico.cyou"},{"hostname":"www.sparkme.cc","first_observed":"2026-11-05T15:05:31.615Z","first_published":"2026-11-05T15:33:07.108Z","brands":[],"dns":"resolved","resolved":["38.47.221.31"],"resolved_at":"2026-11-05T15:07:22Z","dns_checked_at":"2026-11-06T15:45:01.000Z","dns_since":"2026-11-05T15:44:35.000Z","findings":[{"id":"fyk7t634zqp3ea6dcvoii","kind":"reported_domain","summary":"Under sparkme.cc, listed by MetaMask","first_observed":"2026-11-05T15:05:31.615Z","first_published":"2026-11-05T15:33:07.108Z","source":"metamask","source_name":"MetaMask","under":"sparkme.cc"}],"url":"https://domainspoof.com/live?show=all&q=www.sparkme.cc"},{"hostname":"www.sparkunioncapital.net","first_observed":"2026-11-05T15:05:31.615Z","first_published":"2026-11-05T15:33:07.108Z","brands":[],"dns":"resolved","resolved":["45.192.210.10","45.192.210.11"],"resolved_at":"2026-11-05T15:07:22Z","dns_checked_at":"2026-11-06T15:45:01.000Z","dns_since":"2026-11-05T15:44:35.000Z","findings":[{"id":"fgspgoynnbiq5jklyqaee","kind":"reported_domain","summary":"Under sparkunioncapital.net, listed by MetaMask","first_observed":"2026-11-05T15:05:31.615Z","first_published":"2026-11-05T15:33:07.108Z","source":"metamask","source_name":"MetaMask","under":"sparkunioncapital.net"}],"url":"https://domainspoof.com/live?show=all&q=www.sparkunioncapital.net"},{"hostname":"www.stage.images.crypto-polis.org","first_observed":"2026-11-05T14:56:43.434Z","first_published":"2026-11-05T15:33:07.108Z","brands":[],"dns":"resolved","resolved":["185.178.208.132","185.178.208.182"],"resolved_at":"2026-11-05T15:00:00Z","dns_checked_at":"2026-11-06T15:45:01.000Z","dns_since":"2026-11-05T15:44:35.000Z","findings":[{"id":"fcgccbfgkzi5muhfsqebu","kind":"reported_domain","summary":"Under crypto-polis.org, reported by PhishDestroy","first_observed":"2026-11-05T14:56:43.434Z","first_published":"2026-11-05T15:33:07.108Z","source":"phishdestroy","source_name":"PhishDestroy","under":"crypto-polis.org","source_url":"https://phishdestroy.io/domain/crypto-polis.org/"}],"url":"https://domainspoof.com/live?show=all&q=www.stage.images.crypto-polis.org"},{"hostname":"www.thalassotech.pl","first_observed":"2026-11-05T14:31:19.205Z","first_published":"2026-11-05T15:33:07.108Z","brands":[],"dns":"resolved","resolved":["212.85.96.113"],"resolved_at":"2026-11-05T14:42:15Z","dns_checked_at":"2026-11-06T15:45:01.000Z","dns_since":"2026-11-05T15:44:35.000Z","findings":[{"id":"f5ksxlalpwfwplkxztfu7","kind":"reported_domain","summary":"Under thalassotech.pl, listed by CERT Polska","first_observed":"2026-11-05T14:31:19.205Z","first_published":"2026-11-05T15:33:07.108Z","source":"cert_polska","source_name":"CERT Polska","under":"thalassotech.pl"}],"url":"https://domainspoof.com/live?show=all&q=www.thalassotech.pl"},{"hostname":"www.trustedtabrx.com","first_observed":"2026-11-05T14:51:33.017Z","first_published":"2026-11-05T15:33:07.108Z","brands":[],"dns":"resolved","resolved":["46.165.222.121"],"resolved_at":"2026-11-06T01:36:11Z","dns_checked_at":"2026-11-06T15:45:01.000Z","dns_since":"2026-11-05T15:44:35.000Z","findings":[{"id":"flqtfojvpxsai247h2wsr","kind":"reported_domain","summary":"Under trustedtabrx.com, reported by PhishDestroy","first_observed":"2026-11-05T14:51:33.017Z","first_published":"2026-11-05T15:33:07.108Z","source":"phishdestroy","source_name":"PhishDestroy","under":"trustedtabrx.com","source_url":"https://phishdestroy.io/domain/trustedtabrx.com/"}],"url":"https://domainspoof.com/live?show=all&q=www.trustedtabrx.com"},{"hostname":"www.uat.models.crypto-polis.org","first_observed":"2026-11-05T14:31:19.205Z","first_published":"2026-11-05T15:33:07.108Z","brands":[],"dns":"resolved","resolved":["185.178.208.132","185.178.208.182"],"resolved_at":"2026-11-05T14:42:15Z","dns_checked_at":"2026-11-06T15:45:01.000Z","dns_since":"2026-11-05T15:44:35.000Z","findings":[{"id":"fcocr6ntwfhtyc3cthwim","kind":"reported_domain","summary":"Under crypto-polis.org, reported by PhishDestroy","first_observed":"2026-11-05T14:31:19.205Z","first_published":"2026-11-05T15:33:07.108Z","source":"phishdestroy","source_name":"PhishDestroy","under":"crypto-polis.org","source_url":"https://phishdestroy.io/domain/crypto-polis.org/"}],"url":"https://domainspoof.com/live?show=all&q=www.uat.models.crypto-polis.org"},{"hostname":"www.urbane-upgrade.com","first_observed":"2026-11-05T15:05:31.615Z","first_published":"2026-11-05T15:33:07.108Z","brands":[],"dns":"resolved","resolved":["13.248.175.166","76.223.58.8"],"resolved_at":"2026-11-05T15:07:22Z","dns_checked_at":"2026-11-06T15:45:01.000Z","dns_since":"2026-11-05T15:44:35.000Z","findings":[{"id":"foqwl2yjpw2dtjsw7xhiw","kind":"reported_domain","summary":"Under urbane-upgrade.com, listed by MetaMask","first_observed":"2026-11-05T15:05:31.615Z","first_published":"2026-11-05T15:33:07.108Z","source":"metamask","source_name":"MetaMask","under":"urbane-upgrade.com"}],"url":"https://domainspoof.com/live?show=all&q=www.urbane-upgrade.com"},{"hostname":"www.usdtflashsoftware.org","first_observed":"2026-11-05T14:51:33.017Z","first_published":"2026-11-05T15:33:07.108Z","brands":[],"dns":"resolved","resolved":["169.58.254.218"],"resolved_at":"2026-11-05T14:53:44Z","dns_checked_at":"2026-11-06T15:45:01.000Z","dns_since":"2026-11-05T15:44:35.000Z","findings":[{"id":"fluvkshoa7kngsghdymuq","kind":"reported_domain","summary":"Under usdtflashsoftware.org, reported by PhishDestroy","first_observed":"2026-11-05T14:51:33.017Z","first_published":"2026-11-05T15:33:07.108Z","source":"phishdestroy","source_name":"PhishDestroy","under":"usdtflashsoftware.org","source_url":"https://phishdestroy.io/domain/usdtflashsoftware.org/"}],"url":"https://domainspoof.com/live?show=all&q=www.usdtflashsoftware.org"},{"hostname":"www.use-felix.net","first_observed":"2026-11-05T14:36:29.359Z","first_published":"2026-11-05T15:33:07.108Z","brands":[],"dns":"resolved","resolved":["104.21.76.104","172.67.193.14"],"resolved_at":"2026-11-05T14:43:31Z","dns_checked_at":"2026-11-06T15:45:01.000Z","dns_since":"2026-11-05T15:44:35.000Z","findings":[{"id":"fqqvq7qh2dq4ep4fffu7u","kind":"reported_domain","summary":"Under use-felix.net, listed by MetaMask","first_observed":"2026-11-05T14:36:29.359Z","first_published":"2026-11-05T15:33:07.108Z","source":"metamask","source_name":"MetaMask","under":"use-felix.net"}],"url":"https://domainspoof.com/live?show=all&q=www.use-felix.net"},{"hostname":"www.yuzu-money.net","first_observed":"2026-11-05T14:36:29.359Z","first_published":"2026-11-05T15:33:07.108Z","brands":[],"dns":"resolved","resolved":["104.21.18.92","172.67.181.136"],"resolved_at":"2026-11-05T14:43:32Z","dns_checked_at":"2026-11-06T15:45:01.000Z","dns_since":"2026-11-05T15:44:35.000Z","findings":[{"id":"fs3bgxbvu7rlixt2slwec","kind":"reported_domain","summary":"Under yuzu-money.net, listed by MetaMask","first_observed":"2026-11-05T14:36:29.359Z","first_published":"2026-11-05T15:33:07.108Z","source":"metamask","source_name":"MetaMask","under":"yuzu-money.net"}],"url":"https://domainspoof.com/live?show=all&q=www.yuzu-money.net"},{"hostname":"xaman-foundation.app","first_observed":"2026-11-05T14:31:19.205Z","first_published":"2026-11-05T15:33:07.108Z","brands":[{"id":"xaman","name":"Xaman","url":"https://domainspoof.com/brands/xaman"}],"dns":"resolved","resolved":["104.21.53.177","172.67.216.23","2606:4700:3036::ac43:d817","2606:4700:3037::6815:35b1"],"resolved_at":"2026-11-05T14:42:15Z","dns_checked_at":"2026-11-06T15:45:01.000Z","dns_since":"2026-11-05T15:44:35.000Z","findings":[{"id":"fazcbedmcb2fcvutsdmov","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T14:31:19.205Z","first_published":"2026-11-05T15:33:07.108Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/xaman-foundation.app/"}],"url":"https://domainspoof.com/brands/xaman"},{"hostname":"xanvurleq-netherlands.com","first_observed":"2026-11-05T14:51:33.017Z","first_published":"2026-11-05T15:33:07.108Z","brands":[],"dns":"resolved","resolved":["104.21.36.75","172.67.190.97"],"resolved_at":"2026-11-05T14:53:44Z","dns_checked_at":"2026-11-06T15:45:01.000Z","dns_since":"2026-11-05T15:44:35.000Z","findings":[{"id":"fqm354ehwcvmraffklbo3","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T14:51:33.017Z","first_published":"2026-11-05T15:33:07.108Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=xanvurleq-netherlands.com"},{"hostname":"xunchi02.shop","first_observed":"2026-11-05T14:26:29.193Z","first_published":"2026-11-05T15:33:07.108Z","brands":[],"dns":"resolved","resolved":["104.21.48.140","172.67.186.176"],"resolved_at":"2026-11-05T14:34:59Z","dns_checked_at":"2026-11-06T15:45:01.000Z","dns_since":"2026-11-05T15:44:35.000Z","findings":[{"id":"faa26xoxlya3gjisexjxd","kind":"reported_domain","summary":"Listed by NPA 165 (e-commerce)","first_observed":"2026-11-05T14:26:29.193Z","first_published":"2026-11-05T15:33:07.108Z","source":"npa","source_name":"NPA 165","claim":{"category":"e-commerce"}}],"url":"https://domainspoof.com/live?show=all&q=xunchi02.shop"},{"hostname":"xzlywpqw.tnfstyiyl.vdxelqpm.amxebohrk.npwbyidz.emnbzdvj.uatmfwcq.gatewaylearning.ezgateway.net","first_observed":"2026-11-05T15:16:00.479Z","first_published":"2026-11-05T15:33:07.108Z","brands":[],"dns":"resolved","resolved":["15.204.116.29"],"resolved_at":"2026-11-05T15:28:00Z","dns_checked_at":"2026-11-06T15:45:01.000Z","dns_since":"2026-11-05T15:44:35.000Z","findings":[{"id":"fltxgvv4ybmuhv3qdiga7","kind":"reported_domain","summary":"Under ezgateway.net, listed by USOM","first_observed":"2026-11-05T15:16:00.479Z","first_published":"2026-11-05T15:33:07.108Z","source":"usom","source_name":"USOM","under":"ezgateway.net"}],"url":"https://domainspoof.com/live?show=all&q=xzlywpqw.tnfstyiyl.vdxelqpm.amxebohrk.npwbyidz.emnbzdvj.uatmfwcq.gatewaylearning.ezgateway.net"},{"hostname":"yandex.blablacar.sberbank.12auth.cdek.rhxyvcq9vvts2ld9.r.mail.leankoala.com","first_observed":"2026-11-05T14:43:32.325Z","first_published":"2026-11-05T15:33:07.108Z","brands":[{"id":"blablacar","name":"BlaBlaCar","url":"https://domainspoof.com/brands/blablacar"},{"id":"sberbank","name":"Sberbank","url":"https://domainspoof.com/brands/sberbank"},{"id":"yandex","name":"Yandex","url":"https://domainspoof.com/brands/yandex"}],"dns":"resolved","resolved":["172.246.243.65"],"resolved_at":"2026-11-06T15:45:01Z","dns_checked_at":"2026-11-06T15:45:01.000Z","dns_since":"2026-11-05T15:44:35.000Z","findings":[{"id":"fwo5glh7jllzf5pkvea2s","kind":"phishing_infrastructure","summary":"Resolved to 172.246.243.65, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T14:43:32.325Z","first_published":"2026-11-05T15:33:07.108Z","address":"172.246.243.65","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/blablacar"},{"hostname":"yy.da-fedex.com","first_observed":"2026-11-05T15:00:01.154Z","first_published":"2026-11-05T15:33:07.108Z","brands":[{"id":"fedex","name":"FedEx","url":"https://domainspoof.com/brands/fedex"}],"dns":"resolved","resolved":["43.174.246.29","43.174.247.29"],"resolved_at":"2026-11-06T15:45:01Z","dns_checked_at":"2026-11-06T15:45:01.000Z","dns_since":"2026-11-05T15:44:35.000Z","findings":[{"id":"fyjvzvtoraar63laptmxx","kind":"phishing_infrastructure","summary":"Resolved to 43.174.246.29, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T15:00:01.154Z","first_published":"2026-11-05T15:33:07.108Z","address":"43.174.246.29","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/fedex"},{"hostname":"zelancia-fr.live","first_observed":"2026-11-05T14:41:08.241Z","first_published":"2026-11-05T15:33:07.108Z","brands":[],"dns":"resolved","resolved":["104.21.88.109","172.67.177.32"],"resolved_at":"2026-11-05T14:45:51Z","dns_checked_at":"2026-11-06T15:45:01.000Z","dns_since":"2026-11-05T15:44:35.000Z","findings":[{"id":"ffew5rndsrrooni63bhla","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T14:41:08.241Z","first_published":"2026-11-05T15:33:07.108Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=zelancia-fr.live"},{"hostname":"zenixapp.pro","first_observed":"2026-11-05T15:10:42.147Z","first_published":"2026-11-05T15:33:07.108Z","brands":[],"dns":"resolved","resolved":["104.21.93.63","172.67.206.38"],"resolved_at":"2026-11-05T15:11:07Z","dns_checked_at":"2026-11-06T15:45:01.000Z","dns_since":"2026-11-05T15:44:35.000Z","findings":[{"id":"fl33cbbwjvuwjogtqcjw3","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T15:10:42.147Z","first_published":"2026-11-05T15:33:07.108Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/zenixapp.pro/"}],"url":"https://domainspoof.com/live?show=all&q=zenixapp.pro"},{"hostname":"zeongrow-be.com","first_observed":"2026-11-05T14:51:33.017Z","first_published":"2026-11-05T15:33:07.108Z","brands":[],"dns":"resolved","resolved":["104.21.83.89","172.67.220.44"],"resolved_at":"2026-11-05T14:53:45Z","dns_checked_at":"2026-11-06T15:45:01.000Z","dns_since":"2026-11-05T15:44:35.000Z","findings":[{"id":"fi42fkfb27iprmb4ltyma","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T14:51:33.017Z","first_published":"2026-11-05T15:33:07.108Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=zeongrow-be.com"},{"hostname":"zsasaes.xyz","first_observed":"2026-11-05T15:21:16.676Z","first_published":"2026-11-05T15:33:07.108Z","brands":[],"dns":"resolved","resolved":["104.21.69.25","172.67.203.45"],"resolved_at":"2026-11-05T15:21:59Z","dns_checked_at":"2026-11-06T15:45:01.000Z","dns_since":"2026-11-05T15:44:35.000Z","findings":[{"id":"f5labanshrhoepkk3nf5l","kind":"reported_domain","summary":"Listed by NPA 165 (e-commerce)","first_observed":"2026-11-05T15:21:16.676Z","first_published":"2026-11-05T15:33:07.108Z","source":"npa","source_name":"NPA 165","claim":{"category":"e-commerce"}}],"url":"https://domainspoof.com/live?show=all&q=zsasaes.xyz"},{"hostname":"adidas.cat","first_observed":"2026-11-05T14:24:36.000Z","first_published":"2026-11-05T14:24:36.000Z","brands":[{"id":"adidas","name":"Adidas","url":"https://domainspoof.com/brands/adidas"}],"dns":"resolved","resolved":["217.160.0.225","2001:8d8:100f:f000::29e"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of adidas.com (same name, other ending), resolved to 217.160.0.225, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T14:24:36.000Z","first_published":"2026-11-05T14:24:36.000Z","of":"adidas.com","spelling":"tld","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"217.160.0.225","flagged_at":"2026-11-05T14:24:36Z"}]}],"url":"https://domainspoof.com/brands/adidas"},{"hostname":"adobe.scot","first_observed":"2026-11-05T14:24:36.000Z","first_published":"2026-11-05T14:24:36.000Z","brands":[{"id":"adobe","name":"Adobe","url":"https://domainspoof.com/brands/adobe"}],"dns":"resolved","resolved":["185.26.106.234"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of adobe.com (same name, other ending), resolved to 185.26.106.234, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T14:24:36.000Z","first_published":"2026-11-05T14:24:36.000Z","of":"adobe.com","spelling":"tld","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"185.26.106.234","flagged_at":"2026-11-05T14:24:36Z"}]}],"url":"https://domainspoof.com/brands/adobe"},{"hostname":"aircanada.one","first_observed":"2026-11-05T14:24:36.000Z","first_published":"2026-11-05T14:24:36.000Z","brands":[{"id":"air-canada","name":"Air Canada","url":"https://domainspoof.com/brands/air-canada"}],"dns":"resolved","resolved":["156.229.27.73"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of aircanada.com (same name, other ending), resolved to 156.229.27.73, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T14:24:36.000Z","first_published":"2026-11-05T14:24:36.000Z","of":"aircanada.com","spelling":"tld","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"156.229.27.73","flagged_at":"2026-11-05T14:24:36Z"}]}],"url":"https://domainspoof.com/brands/air-canada"},{"hostname":"anthropic.org.au","first_observed":"2026-11-05T14:24:36.000Z","first_published":"2026-11-05T14:24:36.000Z","brands":[{"id":"claude","name":"Claude","url":"https://domainspoof.com/brands/claude"}],"dns":"resolved","resolved":["103.67.235.120"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of anthropic.com (same name, other ending), resolved to 103.67.235.120, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T14:24:36.000Z","first_published":"2026-11-05T14:24:36.000Z","of":"anthropic.com","spelling":"tld","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"103.67.235.120","flagged_at":"2026-11-05T14:24:36Z"}]}],"url":"https://domainspoof.com/brands/claude"},{"hostname":"bancolombia.cat","first_observed":"2026-11-05T14:24:36.000Z","first_published":"2026-11-05T14:24:36.000Z","brands":[{"id":"bancolombia","name":"Bancolombia","url":"https://domainspoof.com/brands/bancolombia"}],"dns":"resolved","resolved":["81.88.48.71"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of bancolombia.com (same name, other ending), resolved to 81.88.48.71, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T14:24:36.000Z","first_published":"2026-11-05T14:24:36.000Z","of":"bancolombia.com","spelling":"tld","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"81.88.48.71","flagged_at":"2026-11-05T14:24:36Z"}]}],"url":"https://domainspoof.com/brands/bancolombia"},{"hostname":"barclays.net.au","first_observed":"2026-11-05T14:24:36.000Z","first_published":"2026-11-05T14:24:36.000Z","brands":[{"id":"barclays","name":"Barclays","url":"https://domainspoof.com/brands/barclays"}],"dns":"resolved","resolved":["103.67.235.120"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of barclays.co.uk (same name, other ending), resolved to 103.67.235.120, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T14:24:36.000Z","first_published":"2026-11-05T14:24:36.000Z","of":"barclays.co.uk","spelling":"tld","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"103.67.235.120","flagged_at":"2026-11-05T14:24:36Z"}]}],"url":"https://domainspoof.com/brands/barclays"},{"hostname":"belllsouth.net","first_observed":"2026-11-05T14:24:36.000Z","first_published":"2026-11-05T14:24:36.000Z","brands":[{"id":"at-and-t","name":"AT&T","url":"https://domainspoof.com/brands/at-and-t"}],"dns":"resolved","resolved":["45.82.67.96"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of bellsouth.net (a doubled letter), resolved to 45.82.67.96, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T14:24:36.000Z","first_published":"2026-11-05T14:24:36.000Z","of":"bellsouth.net","spelling":"repetition","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"45.82.67.96","flagged_at":"2026-11-05T14:24:36Z"}]}],"url":"https://domainspoof.com/brands/at-and-t"},{"hostname":"bitrefili.com","first_observed":"2026-11-05T14:24:36.000Z","first_published":"2026-11-05T14:24:36.000Z","brands":[{"id":"bitrefill","name":"Bitrefill","url":"https://domainspoof.com/brands/bitrefill"}],"dns":"resolved","resolved":["104.247.81.99"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of bitrefill.com (similar-looking characters), listed by MetaMask, and reported by PhishDestroy","first_observed":"2026-11-05T14:24:36.000Z","first_published":"2026-11-05T14:24:36.000Z","of":"bitrefill.com","spelling":"homoglyph","found_by":"dns_sweep","listings":[{"kind":"reported","source":"metamask","source_name":"MetaMask","host":"bitrefili.com","flagged_at":"2026-11-05T14:24:36Z"},{"kind":"reported","source":"phishdestroy","source_name":"PhishDestroy","host":"bitrefili.com","flagged_at":"2026-11-05T14:24:36Z"}]}],"url":"https://domainspoof.com/brands/bitrefill"},{"hostname":"bitrerill.com","first_observed":"2026-11-05T14:24:36.000Z","first_published":"2026-11-05T14:24:36.000Z","brands":[{"id":"bitrefill","name":"Bitrefill","url":"https://domainspoof.com/brands/bitrefill"}],"dns":"resolved","resolved":["104.247.81.99"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of bitrefill.com (a letter from a neighbouring key), listed by MetaMask","first_observed":"2026-11-05T14:24:36.000Z","first_published":"2026-11-05T14:24:36.000Z","of":"bitrefill.com","spelling":"adjacent_key","found_by":"dns_sweep","listings":[{"kind":"reported","source":"metamask","source_name":"MetaMask","host":"bitrerill.com","flagged_at":"2026-11-05T14:24:36Z"}]}],"url":"https://domainspoof.com/brands/bitrefill"},{"hostname":"blik.com.au","first_observed":"2026-11-05T14:24:36.000Z","first_published":"2026-11-05T14:24:36.000Z","brands":[{"id":"blik","name":"BLIK","url":"https://domainspoof.com/brands/blik"}],"dns":"resolved","resolved":["2.57.91.91"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of blik.com (same name, other ending), resolved to 2.57.91.91, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T14:24:36.000Z","first_published":"2026-11-05T14:24:36.000Z","of":"blik.com","spelling":"tld","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"2.57.91.91","flagged_at":"2026-11-05T14:24:36Z"}]}],"url":"https://domainspoof.com/brands/blik"},{"hostname":"bol.com.au","first_observed":"2026-11-05T14:24:36.000Z","first_published":"2026-11-05T14:24:36.000Z","brands":[{"id":"bol-com","name":"bol.com","url":"https://domainspoof.com/brands/bol-com"}],"dns":"resolved","resolved":["134.199.165.199"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of bol.com (same name, other ending), resolved to 134.199.165.199, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T14:24:36.000Z","first_published":"2026-11-05T14:24:36.000Z","of":"bol.com","spelling":"tld","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"134.199.165.199","flagged_at":"2026-11-05T14:24:36Z"}]}],"url":"https://domainspoof.com/brands/bol-com"},{"hostname":"booking.bayern","first_observed":"2026-11-05T14:24:36.000Z","first_published":"2026-11-05T14:24:36.000Z","brands":[{"id":"booking-com","name":"Booking.com","url":"https://domainspoof.com/brands/booking-com"}],"dns":"resolved","resolved":["217.160.0.254","2001:8d8:100f:f000::233"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of booking.com (same name, other ending), resolved to 217.160.0.254, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T14:24:36.000Z","first_published":"2026-11-05T14:24:36.000Z","of":"booking.com","spelling":"tld","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"217.160.0.254","flagged_at":"2026-11-05T14:24:36Z"}]}],"url":"https://domainspoof.com/brands/booking-com"},{"hostname":"britishairwasy.com","first_observed":"2026-11-05T14:24:36.000Z","first_published":"2026-11-05T14:24:36.000Z","brands":[{"id":"british-airways","name":"British Airways","url":"https://domainspoof.com/brands/british-airways"}],"dns":"resolved","resolved":["212.7.194.68"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of britishairways.com (two letters swapped), resolved to 212.7.194.68, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T14:24:36.000Z","first_published":"2026-11-05T14:24:36.000Z","of":"britishairways.com","spelling":"transposition","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"212.7.194.68","flagged_at":"2026-11-05T14:24:36Z"}]}],"url":"https://domainspoof.com/brands/british-airways"},{"hostname":"britshairways.com","first_observed":"2026-11-05T14:24:36.000Z","first_published":"2026-11-05T14:24:36.000Z","brands":[{"id":"british-airways","name":"British Airways","url":"https://domainspoof.com/brands/british-airways"}],"dns":"resolved","resolved":["199.193.114.103"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of britishairways.com (a dropped letter), resolved to 199.193.114.103, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T14:24:36.000Z","first_published":"2026-11-05T14:24:36.000Z","of":"britishairways.com","spelling":"omission","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"199.193.114.103","flagged_at":"2026-11-05T14:24:36Z"}]}],"url":"https://domainspoof.com/brands/british-airways"},{"hostname":"btcbox.one","first_observed":"2026-11-05T14:24:36.000Z","first_published":"2026-11-05T14:24:36.000Z","brands":[{"id":"btcbox","name":"BTCBOX","url":"https://domainspoof.com/brands/btcbox"}],"dns":"no_address","resolved":[],"findings":[{"kind":"lookalike","summary":"Registered lookalike of btcbox.co.jp (same name, other ending), reported by PhishDestroy","first_observed":"2026-11-05T14:24:36.000Z","first_published":"2026-11-05T14:24:36.000Z","of":"btcbox.co.jp","spelling":"tld","found_by":"dns_sweep","listings":[{"kind":"reported","source":"phishdestroy","source_name":"PhishDestroy","host":"btcbox.one","flagged_at":"2026-11-05T14:24:36Z"}]}],"url":"https://domainspoof.com/brands/btcbox"},{"hostname":"callofdutu.com","first_observed":"2026-11-05T14:24:36.000Z","first_published":"2026-11-05T14:24:36.000Z","brands":[{"id":"call-of-duty","name":"Call of Duty","url":"https://domainspoof.com/brands/call-of-duty"}],"dns":"resolved","resolved":["69.162.80.58"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of callofduty.com (a letter from a neighbouring key), resolved to 69.162.80.58, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T14:24:36.000Z","first_published":"2026-11-05T14:24:36.000Z","of":"callofduty.com","spelling":"adjacent_key","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"69.162.80.58","flagged_at":"2026-11-05T14:24:36Z"}]}],"url":"https://domainspoof.com/brands/call-of-duty"},{"hostname":"calloffuty.com","first_observed":"2026-11-05T14:24:36.000Z","first_published":"2026-11-05T14:24:36.000Z","brands":[{"id":"call-of-duty","name":"Call of Duty","url":"https://domainspoof.com/brands/call-of-duty"}],"dns":"resolved","resolved":["51.161.21.1"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of callofduty.com (a letter from a neighbouring key), resolved to 51.161.21.1, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T14:24:36.000Z","first_published":"2026-11-05T14:24:36.000Z","of":"callofduty.com","spelling":"adjacent_key","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"51.161.21.1","flagged_at":"2026-11-05T14:24:36Z"}]}],"url":"https://domainspoof.com/brands/call-of-duty"},{"hostname":"capita1one.online","first_observed":"2026-11-05T14:24:36.000Z","first_published":"2026-11-05T14:24:36.000Z","brands":[{"id":"capital-one","name":"Capital One","url":"https://domainspoof.com/brands/capital-one"}],"dns":"resolved","resolved":["213.171.195.105"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of capitalone.com (similar-looking characters), resolved to 213.171.195.105, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T14:24:36.000Z","first_published":"2026-11-05T14:24:36.000Z","of":"capitalone.com","spelling":"homoglyph","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"213.171.195.105","flagged_at":"2026-11-05T14:24:36Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/capital-one"},{"hostname":"capita1one.store","first_observed":"2026-11-05T14:24:36.000Z","first_published":"2026-11-05T14:24:36.000Z","brands":[{"id":"capital-one","name":"Capital One","url":"https://domainspoof.com/brands/capital-one"}],"dns":"resolved","resolved":["213.171.195.105"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of capitalone.com (similar-looking characters), resolved to 213.171.195.105, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T14:24:36.000Z","first_published":"2026-11-05T14:24:36.000Z","of":"capitalone.com","spelling":"homoglyph","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"213.171.195.105","flagged_at":"2026-11-05T14:24:36Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/capital-one"},{"hostname":"citibakonline.com","first_observed":"2026-11-05T14:24:36.000Z","first_published":"2026-11-05T14:24:36.000Z","brands":[{"id":"citi","name":"Citi","url":"https://domainspoof.com/brands/citi"}],"dns":"resolved","resolved":["185.150.189.166"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of citibankonline.com (a dropped letter), resolved to 185.150.189.166, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T14:24:36.000Z","first_published":"2026-11-05T14:24:36.000Z","of":"citibankonline.com","spelling":"omission","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"185.150.189.166","flagged_at":"2026-11-05T14:24:36Z"}]}],"url":"https://domainspoof.com/brands/citi"},{"hostname":"citizensbak.com","first_observed":"2026-11-05T14:24:36.000Z","first_published":"2026-11-05T14:24:36.000Z","brands":[{"id":"citizens","name":"Citizens","url":"https://domainspoof.com/brands/citizens"}],"dns":"resolved","resolved":["199.193.114.102"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of citizensbank.com (a dropped letter), resolved to 199.193.114.102, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T14:24:36.000Z","first_published":"2026-11-05T14:24:36.000Z","of":"citizensbank.com","spelling":"omission","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"199.193.114.102","flagged_at":"2026-11-05T14:24:36Z"}]}],"url":"https://domainspoof.com/brands/citizens"},{"hostname":"cocacola.cat","first_observed":"2026-11-05T14:24:36.000Z","first_published":"2026-11-05T14:24:36.000Z","brands":[{"id":"coca-cola","name":"Coca-Cola","url":"https://domainspoof.com/brands/coca-cola"}],"dns":"resolved","resolved":["217.76.128.34"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of cocacola.co.uk (same name, other ending), resolved to 217.76.128.34, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T14:24:36.000Z","first_published":"2026-11-05T14:24:36.000Z","of":"cocacola.co.uk","spelling":"tld","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"217.76.128.34","flagged_at":"2026-11-05T14:24:36Z"}]}],"url":"https://domainspoof.com/brands/coca-cola"},{"hostname":"conad.cat","first_observed":"2026-11-05T14:24:36.000Z","first_published":"2026-11-05T14:24:36.000Z","brands":[{"id":"conad","name":"CONAD","url":"https://domainspoof.com/brands/conad"}],"dns":"resolved","resolved":["217.76.128.47"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of conad.it (same name, other ending), resolved to 217.76.128.47, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T14:24:36.000Z","first_published":"2026-11-05T14:24:36.000Z","of":"conad.it","spelling":"tld","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"217.76.128.47","flagged_at":"2026-11-05T14:24:36Z"}]}],"url":"https://domainspoof.com/brands/conad"},{"hostname":"cpanel.net.co","first_observed":"2026-11-05T14:24:36.000Z","first_published":"2026-11-05T14:24:36.000Z","brands":[{"id":"cpanel","name":"cPanel","url":"https://domainspoof.com/brands/cpanel"}],"dns":"resolved","resolved":["75.102.22.59"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of cpanel.net (same name, other ending), resolved to 75.102.22.59, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T14:24:36.000Z","first_published":"2026-11-05T14:24:36.000Z","of":"cpanel.net","spelling":"tld","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"75.102.22.59","flagged_at":"2026-11-05T14:24:36Z"}]}],"url":"https://domainspoof.com/brands/cpanel"},{"hostname":"delta.com.co","first_observed":"2026-11-05T14:24:36.000Z","first_published":"2026-11-05T14:24:36.000Z","brands":[{"id":"delta-air-lines","name":"Delta Air Lines","url":"https://domainspoof.com/brands/delta-air-lines"}],"dns":"resolved","resolved":["198.251.81.49"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of delta.com (same name, other ending), resolved to 198.251.81.49, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T14:24:36.000Z","first_published":"2026-11-05T14:24:36.000Z","of":"delta.com","spelling":"tld","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"198.251.81.49","flagged_at":"2026-11-05T14:24:36Z"}]}],"url":"https://domainspoof.com/brands/delta-air-lines"},{"hostname":"delta.express","first_observed":"2026-11-05T14:24:36.000Z","first_published":"2026-11-05T14:24:36.000Z","brands":[{"id":"delta-air-lines","name":"Delta Air Lines","url":"https://domainspoof.com/brands/delta-air-lines"}],"dns":"resolved","resolved":["62.149.128.40"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of delta.com (same name, other ending), resolved to 62.149.128.40, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T14:24:36.000Z","first_published":"2026-11-05T14:24:36.000Z","of":"delta.com","spelling":"tld","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"62.149.128.40","flagged_at":"2026-11-05T14:24:36Z"}]}],"url":"https://domainspoof.com/brands/delta-air-lines"},{"hostname":"kucoin.net.au","first_observed":"2026-11-05T14:24:36.000Z","first_published":"2026-11-05T14:24:36.000Z","brands":[{"id":"kucoin","name":"KuCoin","url":"https://domainspoof.com/brands/kucoin"}],"dns":"resolved","resolved":["27.124.125.171","103.67.235.120"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of kucoin.com (same name, other ending), resolved to 103.67.235.120, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T14:24:36.000Z","first_published":"2026-11-05T14:24:36.000Z","of":"kucoin.com","spelling":"tld","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"103.67.235.120","flagged_at":"2026-11-05T14:24:36Z"}]}],"url":"https://domainspoof.com/brands/kucoin"},{"hostname":"latamairlines.us","first_observed":"2026-11-05T14:24:36.000Z","first_published":"2026-11-05T14:24:36.000Z","brands":[{"id":"latam-airlines","name":"LATAM Airlines","url":"https://domainspoof.com/brands/latam-airlines"}],"dns":"resolved","resolved":["13.248.169.48","76.223.54.146"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of latamairlines.com (same name, other ending), reported by PhishDestroy","first_observed":"2026-11-05T14:24:36.000Z","first_published":"2026-11-05T14:24:36.000Z","of":"latamairlines.com","spelling":"tld","found_by":"dns_sweep","listings":[{"kind":"reported","source":"phishdestroy","source_name":"PhishDestroy","host":"latamairlines.us","flagged_at":"2026-11-05T14:24:36Z"}]}],"url":"https://domainspoof.com/brands/latam-airlines"},{"hostname":"ledger.com.co","first_observed":"2026-11-05T14:24:36.000Z","first_published":"2026-11-05T14:24:36.000Z","brands":[{"id":"ledger","name":"Ledger","url":"https://domainspoof.com/brands/ledger"}],"dns":"resolved","resolved":["104.21.88.93","172.67.174.180","2606:4700:3037::6815:585d","2606:4700:3037::ac43:aeb4"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of ledger.com (same name, other ending), listed by MetaMask","first_observed":"2026-11-05T14:24:36.000Z","first_published":"2026-11-05T14:24:36.000Z","of":"ledger.com","spelling":"tld","found_by":"dns_sweep","listings":[{"kind":"reported","source":"metamask","source_name":"MetaMask","host":"ledger.com.co","flagged_at":"2026-11-05T14:24:36Z"}]}],"url":"https://domainspoof.com/brands/ledger"},{"hostname":"ledgerwallet.us","first_observed":"2026-11-05T14:24:36.000Z","first_published":"2026-11-05T14:24:36.000Z","brands":[{"id":"ledger","name":"Ledger","url":"https://domainspoof.com/brands/ledger"}],"dns":"resolved","resolved":["185.53.179.128"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of ledgerwallet.com (same name, other ending), listed by MetaMask","first_observed":"2026-11-05T14:24:36.000Z","first_published":"2026-11-05T14:24:36.000Z","of":"ledgerwallet.com","spelling":"tld","found_by":"dns_sweep","listings":[{"kind":"reported","source":"metamask","source_name":"MetaMask","host":"ledgerwallet.us","flagged_at":"2026-11-05T14:24:36Z"}]}],"url":"https://domainspoof.com/brands/ledger"},{"hostname":"metamask.au","first_observed":"2026-11-05T14:24:36.000Z","first_published":"2026-11-05T14:24:36.000Z","brands":[{"id":"metamask","name":"MetaMask","url":"https://domainspoof.com/brands/metamask"}],"dns":"resolved","resolved":["104.247.81.99"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of metamask.io (same name, other ending), listed by MetaMask","first_observed":"2026-11-05T14:24:36.000Z","first_published":"2026-11-05T14:24:36.000Z","of":"metamask.io","spelling":"tld","found_by":"dns_sweep","listings":[{"kind":"reported","source":"metamask","source_name":"MetaMask","host":"fund-loss-investigation.metamask.au","flagged_at":"2026-11-05T14:24:36Z"}]}],"url":"https://domainspoof.com/brands/metamask"},{"hostname":"metamask.trade","first_observed":"2026-11-05T14:24:36.000Z","first_published":"2026-11-05T14:24:36.000Z","brands":[{"id":"metamask","name":"MetaMask","url":"https://domainspoof.com/brands/metamask"}],"dns":"resolved","resolved":["207.207.210.107","207.207.210.229"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of metamask.io (same name, other ending), reported by PhishDestroy","first_observed":"2026-11-05T14:24:36.000Z","first_published":"2026-11-05T14:24:36.000Z","of":"metamask.io","spelling":"tld","found_by":"dns_sweep","listings":[{"kind":"reported","source":"phishdestroy","source_name":"PhishDestroy","host":"metamask.trade","flagged_at":"2026-11-05T14:24:36Z"}]}],"url":"https://domainspoof.com/brands/metamask"},{"hostname":"phantom.cat","first_observed":"2026-11-05T14:24:36.000Z","first_published":"2026-11-05T14:24:36.000Z","brands":[{"id":"phantom","name":"Phantom","url":"https://domainspoof.com/brands/phantom"}],"dns":"resolved","resolved":["2.57.91.91"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of phantom.com (same name, other ending), resolved to 2.57.91.91, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T14:24:36.000Z","first_published":"2026-11-05T14:24:36.000Z","of":"phantom.com","spelling":"tld","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"2.57.91.91","flagged_at":"2026-11-05T14:24:36Z"}]}],"url":"https://domainspoof.com/brands/phantom"},{"hostname":"polymarket.com.co","first_observed":"2026-11-05T14:24:36.000Z","first_published":"2026-11-05T14:24:36.000Z","brands":[{"id":"polymarket","name":"Polymarket","url":"https://domainspoof.com/brands/polymarket"}],"dns":"no_address","resolved":[],"findings":[{"kind":"lookalike","summary":"Registered lookalike of polymarket.com (same name, other ending), reported by PhishDestroy","first_observed":"2026-11-05T14:24:36.000Z","first_published":"2026-11-05T14:24:36.000Z","of":"polymarket.com","spelling":"tld","found_by":"dns_sweep","listings":[{"kind":"reported","source":"phishdestroy","source_name":"PhishDestroy","host":"polymarket.com.co","flagged_at":"2026-11-05T14:24:36Z"}]}],"url":"https://domainspoof.com/brands/polymarket"},{"hostname":"revolut.com.au","first_observed":"2026-11-05T14:24:36.000Z","first_published":"2026-11-05T14:24:36.000Z","brands":[{"id":"revolut","name":"Revolut","url":"https://domainspoof.com/brands/revolut"}],"dns":"resolved","resolved":["27.124.125.171","103.67.235.120"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of revolut.com (same name, other ending), resolved to 103.67.235.120, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T14:24:36.000Z","first_published":"2026-11-05T14:24:36.000Z","of":"revolut.com","spelling":"tld","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"103.67.235.120","flagged_at":"2026-11-05T14:24:36Z"}]}],"url":"https://domainspoof.com/brands/revolut"},{"hostname":"steamcommunity.cat","first_observed":"2026-11-05T14:24:36.000Z","first_published":"2026-11-05T14:24:36.000Z","brands":[{"id":"steam","name":"Steam","url":"https://domainspoof.com/brands/steam"}],"dns":"resolved","resolved":["2.57.91.91"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of steamcommunity.com (same name, other ending), resolved to 2.57.91.91, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T14:24:36.000Z","first_published":"2026-11-05T14:24:36.000Z","of":"steamcommunity.com","spelling":"tld","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"2.57.91.91","flagged_at":"2026-11-05T14:24:36Z"}]}],"url":"https://domainspoof.com/brands/steam"},{"hostname":"tiktokshop.com.co","first_observed":"2026-11-05T14:24:36.000Z","first_published":"2026-11-05T14:24:36.000Z","brands":[{"id":"tiktok","name":"TikTok","url":"https://domainspoof.com/brands/tiktok"}],"dns":"resolved","resolved":["23.227.38.36","2620:127:f00f:4::"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of tiktokshop.com (same name, other ending), reported by PhishDestroy","first_observed":"2026-11-05T14:24:36.000Z","first_published":"2026-11-05T14:24:36.000Z","of":"tiktokshop.com","spelling":"tld","found_by":"dns_sweep","listings":[{"kind":"reported","source":"phishdestroy","source_name":"PhishDestroy","host":"tiktokshop.com.co","flagged_at":"2026-11-05T14:24:36Z"}]}],"url":"https://domainspoof.com/brands/tiktok"},{"hostname":"tokenpocket.com.co","first_observed":"2026-11-05T14:24:36.000Z","first_published":"2026-11-05T14:24:36.000Z","brands":[{"id":"tokenpocket","name":"TokenPocket","url":"https://domainspoof.com/brands/tokenpocket"}],"dns":"resolved","resolved":["206.161.218.138"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of tokenpocket.pro (same name, other ending), resolved to 206.161.218.138, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T14:24:36.000Z","first_published":"2026-11-05T14:24:36.000Z","of":"tokenpocket.pro","spelling":"tld","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"206.161.218.138","flagged_at":"2026-11-05T14:24:36Z"}]}],"url":"https://domainspoof.com/brands/tokenpocket"},{"hostname":"tronlink.com.co","first_observed":"2026-11-05T14:24:36.000Z","first_published":"2026-11-05T14:24:36.000Z","brands":[{"id":"tronlink","name":"TronLink","url":"https://domainspoof.com/brands/tronlink"}],"dns":"resolved","resolved":["104.21.39.237","172.67.171.216","2606:4700:3035::ac43:abd8","2606:4700:3037::6815:27ed"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of tronlink.org (same name, other ending), reported by PhishDestroy","first_observed":"2026-11-05T14:24:36.000Z","first_published":"2026-11-05T14:24:36.000Z","of":"tronlink.org","spelling":"tld","found_by":"dns_sweep","listings":[{"kind":"reported","source":"phishdestroy","source_name":"PhishDestroy","host":"tronlink.com.co","flagged_at":"2026-11-05T14:24:36Z"}]}],"url":"https://domainspoof.com/brands/tronlink"},{"hostname":"uniswap.com.co","first_observed":"2026-11-05T14:24:36.000Z","first_published":"2026-11-05T14:24:36.000Z","brands":[{"id":"uniswap","name":"Uniswap","url":"https://domainspoof.com/brands/uniswap"}],"dns":"resolved","resolved":["172.105.47.42"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of uniswap.org (same name, other ending), reported by PhishDestroy, and resolved to 172.105.47.42, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T14:24:36.000Z","first_published":"2026-11-05T14:24:36.000Z","of":"uniswap.org","spelling":"tld","found_by":"dns_sweep","listings":[{"kind":"reported","source":"phishdestroy","source_name":"PhishDestroy","host":"uniswap.com.co","flagged_at":"2026-11-05T14:24:36Z"},{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"172.105.47.42","flagged_at":"2026-11-05T15:35:03Z"}]}],"url":"https://domainspoof.com/brands/uniswap"},{"hostname":"usps.international","first_observed":"2026-11-05T14:24:36.000Z","first_published":"2026-11-05T14:24:36.000Z","brands":[{"id":"usps","name":"USPS","url":"https://domainspoof.com/brands/usps"}],"dns":"resolved","resolved":["185.230.63.107","185.230.63.171","185.230.63.186"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of usps.com (same name, other ending), listed by MetaMask, and reported by PhishDestroy","first_observed":"2026-11-05T14:24:36.000Z","first_published":"2026-11-05T14:24:36.000Z","of":"usps.com","spelling":"tld","found_by":"dns_sweep","listings":[{"kind":"reported","source":"metamask","source_name":"MetaMask","host":"es.usps.international","flagged_at":"2026-11-05T14:24:36Z"},{"kind":"reported","source":"phishdestroy","source_name":"PhishDestroy","host":"es.usps.international","flagged_at":"2026-11-05T14:24:36Z"}]}],"url":"https://domainspoof.com/brands/usps"},{"hostname":"18643053.my.id","first_observed":"2026-11-05T13:21:26.667Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["104.21.15.68","172.67.161.232"],"resolved_at":"2026-11-06T02:05:44Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"fxkjz3o5jdqyvjkgruwqv","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T13:21:26.667Z","first_published":"2026-11-05T14:22:51.196Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=18643053.my.id"},{"hostname":"188yah.top","first_observed":"2026-11-05T13:56:59.803Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["104.21.40.38","172.67.175.45"],"resolved_at":"2026-11-05T13:57:08Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"freinc4mnnxoiofpot3zv","kind":"reported_domain","summary":"Listed by NPA 165 (e-commerce)","first_observed":"2026-11-05T13:56:59.803Z","first_published":"2026-11-05T14:22:51.196Z","source":"npa","source_name":"NPA 165","claim":{"category":"e-commerce"}}],"url":"https://domainspoof.com/live?show=all&q=188yah.top"},{"hostname":"1v33u-dvyulg-b6fxw3-2rg5u.pages.dev","first_observed":"2026-11-05T13:21:26.667Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["172.66.44.164","172.66.47.92"],"resolved_at":"2026-11-05T13:21:39Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"f7syjocmyho34aduozkde","kind":"reported_domain","summary":"Reported by PhishTank","first_observed":"2026-11-05T13:21:26.667Z","first_published":"2026-11-05T14:22:51.196Z","source":"phishtank","source_name":"PhishTank","source_url":"https://phishtank.org/phish_detail.php?phish_id=9479242"}],"url":"https://domainspoof.com/live?show=all&q=1v33u-dvyulg-b6fxw3-2rg5u.pages.dev"},{"hostname":"245uek.hdiv8jy.com","first_observed":"2026-11-05T14:11:05.168Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["185.53.179.136"],"resolved_at":"2026-11-05T14:11:21Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"fpzyddg7oq4s2swdn6lfd","kind":"reported_domain","summary":"Under hdiv8jy.com, listed by MetaMask","first_observed":"2026-11-05T14:11:05.168Z","first_published":"2026-11-05T14:22:51.196Z","source":"metamask","source_name":"MetaMask","under":"hdiv8jy.com"}],"url":"https://domainspoof.com/live?show=all&q=245uek.hdiv8jy.com"},{"hostname":"3kww-eqyjsd-mtqnht-zu812.pages.dev","first_observed":"2026-11-05T14:16:22.656Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["172.66.44.168","172.66.47.88"],"resolved_at":"2026-11-05T14:16:37Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"fycexryylufuhjkgtz7to","kind":"reported_domain","summary":"Reported by PhishTank","first_observed":"2026-11-05T14:16:22.656Z","first_published":"2026-11-05T14:22:51.196Z","source":"phishtank","source_name":"PhishTank","source_url":"https://phishtank.org/phish_detail.php?phish_id=9479252"}],"url":"https://domainspoof.com/live?show=all&q=3kww-eqyjsd-mtqnht-zu812.pages.dev"},{"hostname":"40-governance-zama.pages.dev","first_observed":"2026-11-05T13:56:59.803Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"not_found","resolved":["172.66.44.52","172.66.47.204"],"resolved_at":"2026-11-05T13:57:08Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"ftvluiyb5xzx6zsjtzeec","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T13:56:59.803Z","first_published":"2026-11-05T14:22:51.196Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=40-governance-zama.pages.dev"},{"hostname":"444casibom.com","first_observed":"2026-11-05T13:31:22.324Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["104.21.17.210","172.67.178.80"],"resolved_at":"2026-11-05T13:31:31Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"fpdttf2tn2jhjk7exv4vp","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T13:31:22.324Z","first_published":"2026-11-05T14:22:51.196Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/444casibom.com/"}],"url":"https://domainspoof.com/live?show=all&q=444casibom.com"},{"hostname":"510xp.com","first_observed":"2026-11-05T13:21:26.667Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["44.208.83.180","54.84.240.235"],"resolved_at":"2026-11-05T13:21:39Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"foyfwjhlk7skwceryy3lj","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T13:21:26.667Z","first_published":"2026-11-05T14:22:51.196Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=510xp.com"},{"hostname":"ablguenahnl.shop","first_observed":"2026-11-05T13:26:11.391Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["104.21.52.184","172.67.202.216"],"resolved_at":"2026-11-05T13:26:19Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"femmlebqk7mgtaggismpq","kind":"reported_domain","summary":"Listed by NPA 165 (finance and insurance)","first_observed":"2026-11-05T13:26:11.391Z","first_published":"2026-11-05T14:22:51.196Z","source":"npa","source_name":"NPA 165","claim":{"category":"finance and insurance"}}],"url":"https://domainspoof.com/live?show=all&q=ablguenahnl.shop"},{"hostname":"access.baswaredev.com","first_observed":"2026-11-05T14:05:54.172Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["104.18.30.228","104.18.31.228"],"resolved_at":"2026-11-05T14:17:13Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"f6s6pdf2k2ftltwfu6igx","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T14:05:54.172Z","first_published":"2026-11-05T14:22:51.196Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/access.baswaredev.com/"}],"url":"https://domainspoof.com/live?show=all&q=access.baswaredev.com"},{"hostname":"account.indexprotraders.com","first_observed":"2026-11-05T14:05:54.172Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["162.4.84.241"],"resolved_at":"2026-11-05T14:17:26Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"fbqnqbvgdvmlf7xe2ha64","kind":"reported_domain","summary":"Under indexprotraders.com, reported by PhishDestroy","first_observed":"2026-11-05T14:05:54.172Z","first_published":"2026-11-05T14:22:51.196Z","source":"phishdestroy","source_name":"PhishDestroy","under":"indexprotraders.com","source_url":"https://phishdestroy.io/domain/indexprotraders.com/"}],"url":"https://domainspoof.com/live?show=all&q=account.indexprotraders.com"},{"hostname":"accrudonage.live","first_observed":"2026-11-05T13:21:26.667Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["45.61.177.8"],"resolved_at":"2026-11-06T13:36:29Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"fquoql4mow54vkmigwpbi","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T13:21:26.667Z","first_published":"2026-11-05T14:22:51.196Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=accrudonage.live"},{"hostname":"adjustime.casa","first_observed":"2026-11-05T13:41:18.148Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["104.21.31.33","172.67.174.234"],"resolved_at":"2026-11-05T13:41:33Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"fwf3bir342mfn4gs7ewjj","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T13:41:18.148Z","first_published":"2026-11-05T14:22:51.196Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=adjustime.casa"},{"hostname":"admin.pcfridkc33.com","first_observed":"2026-11-05T13:21:26.667Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["103.106.191.238"],"resolved_at":"2026-11-05T13:21:43Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"f5xa6hkbx6udlnfsgikjo","kind":"reported_domain","summary":"Under pcfridkc33.com, listed by USOM","first_observed":"2026-11-05T13:21:26.667Z","first_published":"2026-11-05T14:22:51.196Z","source":"usom","source_name":"USOM","under":"pcfridkc33.com"}],"url":"https://domainspoof.com/live?show=all&q=admin.pcfridkc33.com"},{"hostname":"animshquse.shop","first_observed":"2026-11-05T13:51:49.934Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["104.21.34.187","172.67.163.188"],"resolved_at":"2026-11-05T13:52:01Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"f7sw7sc2pulo6vljoeknz","kind":"reported_domain","summary":"Listed by NPA 165 (finance and insurance)","first_observed":"2026-11-05T13:51:49.934Z","first_published":"2026-11-05T14:22:51.196Z","source":"npa","source_name":"NPA 165","claim":{"category":"finance and insurance"}}],"url":"https://domainspoof.com/live?show=all&q=animshquse.shop"},{"hostname":"api.paycard-trustwallet.com","first_observed":"2026-11-05T13:31:22.324Z","first_published":"2026-11-05T14:22:51.196Z","brands":[{"id":"trust-wallet","name":"Trust Wallet","url":"https://domainspoof.com/brands/trust-wallet"}],"dns":"resolved","resolved":["185.53.179.136"],"resolved_at":"2026-11-05T13:35:01Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"fllumg6f2bp426moxtilh","kind":"reported_domain","summary":"Under paycard-trustwallet.com, listed by MetaMask","first_observed":"2026-11-05T13:31:22.324Z","first_published":"2026-11-05T14:22:51.196Z","source":"metamask","source_name":"MetaMask","under":"paycard-trustwallet.com"}],"url":"https://domainspoof.com/brands/trust-wallet"},{"hostname":"api.pcfridkc33.com","first_observed":"2026-11-05T13:21:26.667Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["103.106.191.238"],"resolved_at":"2026-11-05T13:21:43Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"fbntx6vumonplkexflqav","kind":"reported_domain","summary":"Under pcfridkc33.com, listed by USOM","first_observed":"2026-11-05T13:21:26.667Z","first_published":"2026-11-05T14:22:51.196Z","source":"usom","source_name":"USOM","under":"pcfridkc33.com"}],"url":"https://domainspoof.com/live?show=all&q=api.pcfridkc33.com"},{"hostname":"app.worldliberty-financials.org","first_observed":"2026-11-05T13:26:11.391Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["198.251.89.220"],"resolved_at":"2026-11-05T13:32:26Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"fam4frl4uwa37afzyrun5","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T13:26:11.391Z","first_published":"2026-11-05T14:22:51.196Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/app.worldliberty-financials.org/"}],"url":"https://domainspoof.com/live?show=all&q=app.worldliberty-financials.org"},{"hostname":"apps-suite-us-home.pages.dev","first_observed":"2026-11-05T13:46:34.425Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["172.66.44.145","172.66.47.111"],"resolved_at":"2026-11-05T13:51:08Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"fpk2nd5e52bmdjujo2cu5","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T13:46:34.425Z","first_published":"2026-11-05T14:22:51.196Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=apps-suite-us-home.pages.dev"},{"hostname":"aracim360-portal.online","first_observed":"2026-11-05T14:16:16.922Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["2.28.45.63"],"resolved_at":"2026-11-06T01:15:43Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"f7ockeyltwms3ksuedjvq","kind":"reported_domain","summary":"Listed by USOM","first_observed":"2026-11-05T14:16:16.922Z","first_published":"2026-11-05T14:22:51.196Z","source":"usom","source_name":"USOM"}],"url":"https://domainspoof.com/live?show=all&q=aracim360-portal.online"},{"hostname":"arcusxyz.one","first_observed":"2026-11-05T13:36:04.823Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["104.21.62.164","172.67.137.24"],"resolved_at":"2026-11-05T13:45:34Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"fntgaj5jjfk24f54owqfk","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T13:36:04.823Z","first_published":"2026-11-05T14:22:51.196Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=arcusxyz.one"},{"hostname":"arditaconiaggenza-it.com","first_observed":"2026-11-05T13:26:11.391Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["104.21.66.49","172.67.201.29"],"resolved_at":"2026-11-05T13:32:26Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"ftgcv3zlyneo22uww7uje","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T13:26:11.391Z","first_published":"2026-11-05T14:22:51.196Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=arditaconiaggenza-it.com"},{"hostname":"ardito-maturaggio.pro","first_observed":"2026-11-05T13:41:18.148Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["104.21.58.36","172.67.199.125"],"resolved_at":"2026-11-05T13:50:20Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"f5lfgxwiyjxa3lv5d2cch","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T13:41:18.148Z","first_published":"2026-11-05T14:22:51.196Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=ardito-maturaggio.pro"},{"hostname":"artlina.net","first_observed":"2026-11-05T13:10:48.629Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["104.21.44.249","172.67.206.153"],"resolved_at":"2026-11-05T13:11:10Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"fcvduyeqtnn5mlg4s4rkc","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T13:10:48.629Z","first_published":"2026-11-05T14:22:51.196Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/artlina.net/"}],"url":"https://domainspoof.com/live?show=all&q=artlina.net"},{"hostname":"aurora-nu-invest.com","first_observed":"2026-11-05T13:10:48.629Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["104.21.4.107","172.67.131.254"],"resolved_at":"2026-11-05T13:11:11Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"f7ouwggctxb6ibno2tuh5","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T13:10:48.629Z","first_published":"2026-11-05T14:22:51.196Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=aurora-nu-invest.com"},{"hostname":"avito.pay.randomraff13d5d.cdek.rhxyvcq9vvts2ld9.r.mail.leankoala.com","first_observed":"2026-11-05T13:50:22.167Z","first_published":"2026-11-05T14:22:51.196Z","brands":[{"id":"avito","name":"Avito","url":"https://domainspoof.com/brands/avito"}],"dns":"resolved","resolved":["172.246.243.65"],"resolved_at":"2026-11-06T14:34:09Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"fjctqtlbhuccqaotg65gf","kind":"phishing_infrastructure","summary":"Resolved to 172.246.243.65, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T13:50:22.167Z","first_published":"2026-11-05T14:22:51.196Z","address":"172.246.243.65","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/avito"},{"hostname":"backend.skollwallet.com","first_observed":"2026-11-05T13:36:04.823Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["216.24.57.16","216.24.57.18"],"resolved_at":"2026-11-05T13:45:50Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"ff5gskter6p6tcwxrqwgj","kind":"reported_domain","summary":"Under skollwallet.com, reported by PhishDestroy","first_observed":"2026-11-05T13:36:04.823Z","first_published":"2026-11-05T14:22:51.196Z","source":"phishdestroy","source_name":"PhishDestroy","under":"skollwallet.com","source_url":"https://phishdestroy.io/domain/skollwallet.com/"}],"url":"https://domainspoof.com/live?show=all&q=backend.skollwallet.com"},{"hostname":"bereketinvest.sbs","first_observed":"2026-11-05T13:10:48.629Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["104.21.59.106","172.67.223.12"],"resolved_at":"2026-11-05T13:16:12Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"fjhz37n2kkhyrzdupuuxv","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T13:10:48.629Z","first_published":"2026-11-05T14:22:51.196Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=bereketinvest.sbs"},{"hostname":"betglimera.com","first_observed":"2026-11-05T13:10:48.629Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["104.21.30.7","172.67.150.43"],"resolved_at":"2026-11-06T09:51:58Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"fh44jcoxgsh62ig3gtfc7","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T13:10:48.629Z","first_published":"2026-11-05T14:22:51.196Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=betglimera.com"},{"hostname":"biminiboats.com","first_observed":"2026-11-05T13:56:59.803Z","first_published":"2026-11-05T14:22:51.196Z","brands":[{"id":"saison-card","name":"Saison Card","url":"https://domainspoof.com/brands/saison-card"}],"dns":"resolved","resolved":["13.223.25.84","54.243.117.197"],"resolved_at":"2026-11-05T13:59:30Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"fewkgdgmywmkjiao3qi5g","kind":"reported_domain","summary":"Listed by JPCERT/CC as imitating SAISON CARD","first_observed":"2026-11-05T13:56:59.803Z","first_published":"2026-11-05T14:22:51.196Z","source":"jpcert","source_name":"JPCERT/CC","claim":{"brand":"SAISON CARD"}}],"url":"https://domainspoof.com/brands/saison-card"},{"hostname":"binariumxd.com","first_observed":"2026-11-05T13:10:48.629Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["94.154.172.39"],"resolved_at":"2026-11-05T13:16:13Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"fxanwg4mdtcxxakeqm5kp","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T13:10:48.629Z","first_published":"2026-11-05T14:22:51.196Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/binariumxd.com/"}],"url":"https://domainspoof.com/live?show=all&q=binariumxd.com"},{"hostname":"birrbit.com","first_observed":"2026-11-05T13:56:59.803Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["103.224.182.250"],"resolved_at":"2026-11-05T13:59:30Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"f4xcihl2h3xqk6e4ht636","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T13:56:59.803Z","first_published":"2026-11-05T14:22:51.196Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/birrbit.com/"}],"url":"https://domainspoof.com/live?show=all&q=birrbit.com"},{"hostname":"bitnest.finance","first_observed":"2026-11-05T14:16:22.656Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["104.21.44.212","172.67.203.234"],"resolved_at":"2026-11-05T14:19:51Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"fpfws4bckbiwd3seuygrz","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T14:16:22.656Z","first_published":"2026-11-05T14:22:51.196Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=bitnest.finance"},{"hostname":"bitrefill.com-cr01-esim-gift.com","first_observed":"2026-11-05T13:06:14.324Z","first_published":"2026-11-05T14:22:51.196Z","brands":[{"id":"bitrefill","name":"Bitrefill","url":"https://domainspoof.com/brands/bitrefill"}],"dns":"resolved","resolved":["62.60.226.39"],"resolved_at":"2026-11-06T14:34:09Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"f6564p66p5rd4tk52clmx","kind":"spamhaus_drop","summary":"Resolved to 62.60.226.39 on Spamhaus DROP","first_observed":"2026-11-05T13:06:14.324Z","first_published":"2026-11-05T14:22:51.196Z","address":"62.60.226.39","list":"spamhaus_drop","list_name":"Spamhaus DROP"}],"url":"https://domainspoof.com/brands/bitrefill"},{"hostname":"blog.spybox.io","first_observed":"2026-11-05T13:31:22.324Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["216.150.1.1","216.150.16.1"],"resolved_at":"2026-11-05T13:35:26Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"f7peyofhrtopcs3ixutdy","kind":"reported_domain","summary":"Under spybox.io, reported by PhishDestroy","first_observed":"2026-11-05T13:31:22.324Z","first_published":"2026-11-05T14:22:51.196Z","source":"phishdestroy","source_name":"PhishDestroy","under":"spybox.io","source_url":"https://phishdestroy.io/domain/spybox.io/"}],"url":"https://domainspoof.com/live?show=all&q=blog.spybox.io"},{"hostname":"bold-earnings.com","first_observed":"2026-11-05T13:56:59.803Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"no_address","resolved":[],"resolved_at":"2026-11-05T13:59:30Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"fpsydmhkqeuzqkwxqwv77","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T13:56:59.803Z","first_published":"2026-11-05T14:22:51.196Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=bold-earnings.com"},{"hostname":"boostexorex-opt.com","first_observed":"2026-11-05T13:26:11.391Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["104.21.34.189","172.67.207.15"],"resolved_at":"2026-11-05T13:26:25Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"fvnopgk6yai5xzlrfttz6","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T13:26:11.391Z","first_published":"2026-11-05T14:22:51.196Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=boostexorex-opt.com"},{"hostname":"bright-loops.com","first_observed":"2026-11-05T14:05:54.172Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["104.21.91.68","172.67.211.89"],"resolved_at":"2026-11-05T14:17:49Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"fpzhhgy236oywkauz7xxt","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T14:05:54.172Z","first_published":"2026-11-05T14:22:51.196Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=bright-loops.com"},{"hostname":"bsadt.asia","first_observed":"2026-11-05T13:26:11.391Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["104.21.71.245","172.67.172.102"],"resolved_at":"2026-11-05T13:26:27Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"fl3zedizd3xctbzafsg7f","kind":"reported_domain","summary":"Listed by NPA 165 (information services)","first_observed":"2026-11-05T13:26:11.391Z","first_published":"2026-11-05T14:22:51.196Z","source":"npa","source_name":"NPA 165","claim":{"category":"information services"}}],"url":"https://domainspoof.com/live?show=all&q=bsadt.asia"},{"hostname":"btcvistrell.live","first_observed":"2026-11-05T13:21:26.667Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["104.21.35.198","172.67.179.24"],"resolved_at":"2026-11-05T13:21:51Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"fj3pjcibl2irz45phvp4m","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T13:21:26.667Z","first_published":"2026-11-05T14:22:51.196Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=btcvistrell.live"},{"hostname":"bywinoo.com","first_observed":"2026-11-05T13:26:11.391Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["162.159.140.166"],"resolved_at":"2026-11-05T13:26:29Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"fis2mxhpowujcgetozuh6","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T13:26:11.391Z","first_published":"2026-11-05T14:22:51.196Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=bywinoo.com"},{"hostname":"cadenceorvixa.net","first_observed":"2026-11-05T14:11:05.168Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["104.21.19.249","172.67.190.179"],"resolved_at":"2026-11-06T02:31:54Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"fwlydz4jqw76ue2uyieav","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T14:11:05.168Z","first_published":"2026-11-05T14:22:51.196Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=cadenceorvixa.net"},{"hostname":"calm-passages.com","first_observed":"2026-11-05T13:10:48.629Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["104.21.4.219","172.67.132.135"],"resolved_at":"2026-11-05T13:16:47Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"fbkgl4rfb4nkbntjseoni","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T13:10:48.629Z","first_published":"2026-11-05T14:22:51.196Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=calm-passages.com"},{"hostname":"candoredge.com","first_observed":"2026-11-05T13:36:04.823Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["104.21.86.68","172.67.216.91"],"resolved_at":"2026-11-05T13:45:56Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"ffnwn24w36rwx7piwzmwn","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T13:36:04.823Z","first_published":"2026-11-05T14:22:51.196Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=candoredge.com"},{"hostname":"caudalence-ai.net","first_observed":"2026-11-05T13:26:11.391Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["104.21.29.203","172.67.149.200"],"resolved_at":"2026-11-05T13:26:29Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"fkhzrdjslfgaftpy3uxp3","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T13:26:11.391Z","first_published":"2026-11-05T14:22:51.196Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=caudalence-ai.net"},{"hostname":"ccoyy.shop","first_observed":"2026-11-05T13:26:11.391Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["13.248.213.45","76.223.67.189"],"resolved_at":"2026-11-05T13:26:29Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"fmope6iccsxkctlswhaty","kind":"reported_domain","summary":"Listed by NPA 165 (e-commerce)","first_observed":"2026-11-05T13:26:11.391Z","first_published":"2026-11-05T14:22:51.196Z","source":"npa","source_name":"NPA 165","claim":{"category":"e-commerce"}}],"url":"https://domainspoof.com/live?show=all&q=ccoyy.shop"},{"hostname":"chainlink-distribution.xyz","first_observed":"2026-11-05T13:36:04.823Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["104.21.39.199","172.67.171.88"],"resolved_at":"2026-11-05T13:45:57Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"fzdw4dbvmkotblnbol3fh","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T13:36:04.823Z","first_published":"2026-11-05T14:22:51.196Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=chainlink-distribution.xyz"},{"hostname":"chapmusic.vip","first_observed":"2026-11-05T13:26:11.391Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["104.21.55.134","172.67.148.50"],"resolved_at":"2026-11-05T13:26:30Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"fghlomhqth7jqek3g7yvo","kind":"reported_domain","summary":"Listed by NPA 165 (finance and insurance)","first_observed":"2026-11-05T13:26:11.391Z","first_published":"2026-11-05T14:22:51.196Z","source":"npa","source_name":"NPA 165","claim":{"category":"finance and insurance"}}],"url":"https://domainspoof.com/live?show=all&q=chapmusic.vip"},{"hostname":"chasebankonline.net","first_observed":"2026-11-05T13:45:56.906Z","first_published":"2026-11-05T14:22:51.196Z","brands":[{"id":"chase","name":"Chase","url":"https://domainspoof.com/brands/chase"}],"dns":"resolved","resolved":["173.252.167.150"],"resolved_at":"2026-11-06T14:34:09Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"f2ll4ah6hp2yr23m2cevd","kind":"phishing_infrastructure","summary":"Resolved to 173.252.167.150, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T13:45:56.906Z","first_published":"2026-11-05T14:22:51.196Z","address":"173.252.167.150","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/chase"},{"hostname":"chatgpt-visibility.com","first_observed":"2026-11-05T14:11:37.011Z","first_published":"2026-11-05T14:22:51.196Z","brands":[{"id":"openai","name":"OpenAI","url":"https://domainspoof.com/brands/openai"}],"dns":"resolved","resolved":["2.57.91.91"],"resolved_at":"2026-11-06T14:34:09Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"f2ggwoue5uo2pbyudum7h","kind":"phishing_infrastructure","summary":"Resolved to 2.57.91.91, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T14:11:37.011Z","first_published":"2026-11-05T14:22:51.196Z","address":"2.57.91.91","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/openai"},{"hostname":"claim-axisrobotics.pages.dev","first_observed":"2026-11-05T13:15:39.201Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["172.66.44.185","172.66.47.71"],"resolved_at":"2026-11-05T13:26:01Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"fntwrkjliaafhe7uu6lpz","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T13:15:39.201Z","first_published":"2026-11-05T14:22:51.196Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=claim-axisrobotics.pages.dev"},{"hostname":"claimairdrop-standx.live","first_observed":"2026-11-05T13:10:48.629Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["104.21.64.234","172.67.137.179"],"resolved_at":"2026-11-05T13:16:51Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"fkerp6hgwr2j4d7txbaps","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T13:10:48.629Z","first_published":"2026-11-05T14:22:51.196Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=claimairdrop-standx.live"},{"hostname":"clostresoriane.com","first_observed":"2026-11-05T13:31:22.324Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["104.21.83.38","172.67.211.39"],"resolved_at":"2026-11-05T13:35:40Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"fi2wumaocymx5z7qviwzo","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T13:31:22.324Z","first_published":"2026-11-05T14:22:51.196Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=clostresoriane.com"},{"hostname":"cloud-ledgr-live-dekstop.pages.dev","first_observed":"2026-11-05T13:21:26.667Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["172.66.44.183","172.66.47.73"],"resolved_at":"2026-11-05T13:21:55Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"ffhsvkzhxoz3kjzrngsgd","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T13:21:26.667Z","first_published":"2026-11-05T14:22:51.196Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=cloud-ledgr-live-dekstop.pages.dev"},{"hostname":"cnbzmuqt.cykwpdzi.qhorxbak.fqamkeyz.warhqnuy.ijdyvoge.gatewaylearning.ezgateway.net","first_observed":"2026-11-05T14:05:54.172Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["15.204.116.29"],"resolved_at":"2026-11-05T14:18:02Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"ffw5dm4yzgzecowiib4wa","kind":"reported_domain","summary":"Under ezgateway.net, listed by USOM","first_observed":"2026-11-05T14:05:54.172Z","first_published":"2026-11-05T14:22:51.196Z","source":"usom","source_name":"USOM","under":"ezgateway.net"}],"url":"https://domainspoof.com/live?show=all&q=cnbzmuqt.cykwpdzi.qhorxbak.fqamkeyz.warhqnuy.ijdyvoge.gatewaylearning.ezgateway.net"},{"hostname":"coinledgerdesktop.pro","first_observed":"2026-11-05T14:16:22.656Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["216.198.79.1"],"resolved_at":"2026-11-05T14:20:01Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"flwm5vid5aslcxsjn47nj","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T14:16:22.656Z","first_published":"2026-11-05T14:22:51.196Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/coinledgerdesktop.pro/"}],"url":"https://domainspoof.com/live?show=all&q=coinledgerdesktop.pro"},{"hostname":"colomberendif-fr.live","first_observed":"2026-11-05T13:46:34.425Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["104.21.29.87","172.67.148.178"],"resolved_at":"2026-11-05T13:51:43Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"fxtecil33trnyz3ttvo63","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T13:46:34.425Z","first_published":"2026-11-05T14:22:51.196Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=colomberendif-fr.live"},{"hostname":"com-polybet-q15.com","first_observed":"2026-11-05T13:26:11.391Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["62.60.226.95"],"resolved_at":"2026-11-05T13:26:30Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"fgf5ktecbj4hp4thjfcwj","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T13:26:11.391Z","first_published":"2026-11-05T14:22:51.196Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=com-polybet-q15.com"},{"hostname":"community.commute-now.top","first_observed":"2026-11-05T13:46:34.425Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["176.116.0.89"],"resolved_at":"2026-11-05T13:51:43Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"faa362vxodnjk2t4kulpg","kind":"reported_domain","summary":"Listed by USOM","first_observed":"2026-11-05T13:46:34.425Z","first_published":"2026-11-05T14:22:51.196Z","source":"usom","source_name":"USOM"}],"url":"https://domainspoof.com/live?show=all&q=community.commute-now.top"},{"hostname":"connect.bayoubyte.org","first_observed":"2026-11-05T13:10:48.629Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["163.61.188.2"],"resolved_at":"2026-11-05T13:16:52Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"fj7f4al4aomebpbu5bmqc","kind":"reported_domain","summary":"Under bayoubyte.org, reported by PhishDestroy","first_observed":"2026-11-05T13:10:48.629Z","first_published":"2026-11-05T14:22:51.196Z","source":"phishdestroy","source_name":"PhishDestroy","under":"bayoubyte.org","source_url":"https://phishdestroy.io/domain/bayoubyte.org/"}],"url":"https://domainspoof.com/live?show=all&q=connect.bayoubyte.org"},{"hostname":"console.fresh-focus.pro","first_observed":"2026-11-05T13:26:11.391Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["190.115.18.13"],"resolved_at":"2026-11-05T13:26:30Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"ft27o4gai65wyczm4clyl","kind":"reported_domain","summary":"Under fresh-focus.pro, reported by PhishDestroy","first_observed":"2026-11-05T13:26:11.391Z","first_published":"2026-11-05T14:22:51.196Z","source":"phishdestroy","source_name":"PhishDestroy","under":"fresh-focus.pro","source_url":"https://phishdestroy.io/domain/fresh-focus.pro/"}],"url":"https://domainspoof.com/live?show=all&q=console.fresh-focus.pro"},{"hostname":"contentloce.shop","first_observed":"2026-11-05T13:36:04.823Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["104.21.62.196","172.67.138.192"],"resolved_at":"2026-11-05T13:45:57Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"f4mr2we2hf6cfgcl4bqra","kind":"reported_domain","summary":"Listed by NPA 165 (information services)","first_observed":"2026-11-05T13:36:04.823Z","first_published":"2026-11-05T14:22:51.196Z","source":"npa","source_name":"NPA 165","claim":{"category":"information services"}}],"url":"https://domainspoof.com/live?show=all&q=contentloce.shop"},{"hostname":"corsanfilms.com","first_observed":"2026-11-05T13:15:39.201Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["104.21.60.181","172.67.199.44"],"resolved_at":"2026-11-05T13:26:14Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"fcgzlvifbywyki77syijw","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T13:15:39.201Z","first_published":"2026-11-05T14:22:51.196Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/corsanfilms.com/"}],"url":"https://domainspoof.com/live?show=all&q=corsanfilms.com"},{"hostname":"cortex-trade.online","first_observed":"2026-11-05T13:15:39.201Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"not_found","resolved":["104.21.49.69","172.67.159.242"],"resolved_at":"2026-11-05T13:26:14Z","dns_checked_at":"2026-11-06T16:36:14.000Z","findings":[{"id":"f4kylfyk53rz36hm2iw6x","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T13:15:39.201Z","first_published":"2026-11-05T14:22:51.196Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=cortex-trade.online"},{"hostname":"coxenergaesp.com","first_observed":"2026-11-05T13:10:48.629Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["104.21.94.102","172.67.222.89"],"resolved_at":"2026-11-05T13:17:26Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"fot6impgpv4yn2xl7eiwm","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T13:10:48.629Z","first_published":"2026-11-05T14:22:51.196Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=coxenergaesp.com"},{"hostname":"cpiolnro.shop","first_observed":"2026-11-05T13:10:48.629Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["104.21.28.231","172.67.147.197"],"resolved_at":"2026-11-05T13:17:26Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"f6kl5ohxmoi7qayxzwavp","kind":"reported_domain","summary":"Listed by NPA 165 (e-commerce)","first_observed":"2026-11-05T13:10:48.629Z","first_published":"2026-11-05T14:22:51.196Z","source":"npa","source_name":"NPA 165","claim":{"category":"e-commerce"}}],"url":"https://domainspoof.com/live?show=all&q=cpiolnro.shop"},{"hostname":"cresta-patrimenza.com","first_observed":"2026-11-05T13:10:48.629Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["104.21.13.78","172.67.198.208"],"resolved_at":"2026-11-05T13:17:26Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"fxustf3rvmj37w3d2fxe2","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T13:10:48.629Z","first_published":"2026-11-05T14:22:51.196Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=cresta-patrimenza.com"},{"hostname":"cricfylive.com.in","first_observed":"2026-11-05T13:46:34.425Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["104.21.28.99","172.67.145.210"],"resolved_at":"2026-11-05T13:51:55Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"fslzddukmdg6z55twtrhg","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T13:46:34.425Z","first_published":"2026-11-05T14:22:51.196Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=cricfylive.com.in"},{"hostname":"croatech-hr.net","first_observed":"2026-11-05T13:26:11.391Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["104.21.70.138","172.67.223.210"],"resolved_at":"2026-11-05T13:26:33Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"ftqmpcrcatgsayva5lg3t","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T13:26:11.391Z","first_published":"2026-11-05T14:22:51.196Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=croatech-hr.net"},{"hostname":"cshop.sale","first_observed":"2026-11-05T13:36:04.823Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["104.21.59.142","172.67.179.73"],"resolved_at":"2026-11-05T13:46:05Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"fcr3nixi5hj33zjiut4t6","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T13:36:04.823Z","first_published":"2026-11-05T14:22:51.196Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/cshop.sale/"}],"url":"https://domainspoof.com/live?show=all&q=cshop.sale"},{"hostname":"cue639jsce093-p9nworldstun.com","first_observed":"2026-11-05T13:21:26.667Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["104.21.27.244","172.67.143.173"],"resolved_at":"2026-11-05T13:21:58Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"fhmbirkmwqawrxaphjvtc","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T13:21:26.667Z","first_published":"2026-11-05T14:22:51.196Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=cue639jsce093-p9nworldstun.com"},{"hostname":"cumbrevalimorena-es.pro","first_observed":"2026-11-05T13:21:26.667Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["104.21.64.163","172.67.152.196"],"resolved_at":"2026-11-05T13:21:58Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"fwozfbiergc2psgey32j5","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T13:21:26.667Z","first_published":"2026-11-05T14:22:51.196Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=cumbrevalimorena-es.pro"},{"hostname":"cunmopa.top","first_observed":"2026-11-05T13:36:04.823Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["104.21.8.108","172.67.188.110"],"resolved_at":"2026-11-05T13:46:05Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"fbpdm3ihdv2oxhl3zwns7","kind":"reported_domain","summary":"Listed by NPA 165 (finance and insurance)","first_observed":"2026-11-05T13:36:04.823Z","first_published":"2026-11-05T14:22:51.196Z","source":"npa","source_name":"NPA 165","claim":{"category":"finance and insurance"}}],"url":"https://domainspoof.com/live?show=all&q=cunmopa.top"},{"hostname":"cz0a4r-62o7-ivztn-igu-rnmke.pages.dev","first_observed":"2026-11-05T14:00:40.663Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["172.66.44.177","172.66.47.79"],"resolved_at":"2026-11-05T14:14:22Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"f7izx4w6lrvqbfsgxednt","kind":"reported_domain","summary":"Reported by PhishTank","first_observed":"2026-11-05T14:00:40.663Z","first_published":"2026-11-05T14:22:51.196Z","source":"phishtank","source_name":"PhishTank","source_url":"https://phishtank.org/phish_detail.php?phish_id=9479340"}],"url":"https://domainspoof.com/live?show=all&q=cz0a4r-62o7-ivztn-igu-rnmke.pages.dev"},{"hostname":"dansulbattle.net","first_observed":"2026-11-05T14:00:40.663Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["104.21.47.98","172.67.146.125"],"resolved_at":"2026-11-05T14:14:22Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"fpa47f73lg5uhp3d6e4x7","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T14:00:40.663Z","first_published":"2026-11-05T14:22:51.196Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=dansulbattle.net"},{"hostname":"darkout.cfd","first_observed":"2026-11-05T13:51:49.934Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["104.21.75.83","172.67.217.148"],"resolved_at":"2026-11-05T13:55:28Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"fdrhqrpmva4q3r4iftiy4","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T13:51:49.934Z","first_published":"2026-11-05T14:22:51.196Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/darkout.cfd/"}],"url":"https://domainspoof.com/live?show=all&q=darkout.cfd"},{"hostname":"decursanza.live","first_observed":"2026-11-05T13:21:26.667Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["104.21.48.70","172.67.181.49"],"resolved_at":"2026-11-05T13:21:58Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"f26cxt43grzvidno7hvit","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T13:21:26.667Z","first_published":"2026-11-05T14:22:51.196Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=decursanza.live"},{"hostname":"deep-yieldstead.com","first_observed":"2026-11-05T13:10:48.629Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["104.21.23.62","172.67.209.116"],"resolved_at":"2026-11-05T13:17:30Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"fc3ntombjgx3hsh427n3x","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T13:10:48.629Z","first_published":"2026-11-05T14:22:51.196Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=deep-yieldstead.com"},{"hostname":"deft-tradevoran.com","first_observed":"2026-11-05T13:10:48.629Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["104.21.1.179","172.67.129.175"],"resolved_at":"2026-11-05T13:17:30Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"ffujhpci3jhklqxvxeono","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T13:10:48.629Z","first_published":"2026-11-05T14:22:51.196Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=deft-tradevoran.com"},{"hostname":"destradeai.com","first_observed":"2026-11-05T13:10:48.629Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["104.21.43.186","172.67.184.40"],"resolved_at":"2026-11-05T13:17:30Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"f5vdqt5stvcqwujtlxcou","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T13:10:48.629Z","first_published":"2026-11-05T14:22:51.196Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=destradeai.com"},{"hostname":"deyanauto.live","first_observed":"2026-11-05T13:51:49.934Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["104.21.42.234","172.67.211.60"],"resolved_at":"2026-11-05T13:55:28Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"flmh5qelxhrkveb6lgz6y","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T13:51:49.934Z","first_published":"2026-11-05T14:22:51.196Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=deyanauto.live"},{"hostname":"dinexion.click","first_observed":"2026-11-05T13:56:59.803Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["104.21.39.250","172.67.172.122"],"resolved_at":"2026-11-05T13:59:44Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"fw2m5vilpsl76qmyvxozj","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T13:56:59.803Z","first_published":"2026-11-05T14:22:51.196Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=dinexion.click"},{"hostname":"dovizianza-it.com","first_observed":"2026-11-05T13:26:11.391Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["104.21.96.137","172.67.181.162"],"resolved_at":"2026-11-05T13:26:33Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"fehmojwaxaqawdlbbteja","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T13:26:11.391Z","first_published":"2026-11-05T14:22:51.196Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=dovizianza-it.com"},{"hostname":"dovizieria-ai.com","first_observed":"2026-11-05T13:10:48.629Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["104.21.49.204","172.67.167.25"],"resolved_at":"2026-11-05T13:17:32Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"fmlvfclobhi5ogcdwuozh","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T13:10:48.629Z","first_published":"2026-11-05T14:22:51.196Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=dovizieria-ai.com"},{"hostname":"dqkj-fq6-o46svx-qht-e3eofu.pages.dev","first_observed":"2026-11-05T13:56:59.803Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["172.66.44.129","172.66.47.127"],"resolved_at":"2026-11-05T13:59:44Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"fecypgl3er7rjqezcec7r","kind":"reported_domain","summary":"Reported by PhishTank","first_observed":"2026-11-05T13:56:59.803Z","first_published":"2026-11-05T14:22:51.196Z","source":"phishtank","source_name":"PhishTank","source_url":"https://phishtank.org/phish_detail.php?phish_id=9479348"}],"url":"https://domainspoof.com/live?show=all&q=dqkj-fq6-o46svx-qht-e3eofu.pages.dev"},{"hostname":"ducisedge.com","first_observed":"2026-11-05T13:51:49.934Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["104.21.77.8","172.67.203.18"],"resolved_at":"2026-11-05T13:55:29Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"fqt5raz2khnq3pvaulwri","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T13:51:49.934Z","first_published":"2026-11-05T14:22:51.196Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=ducisedge.com"},{"hostname":"dunypeu.com","first_observed":"2026-11-05T14:11:05.168Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["104.21.19.139","172.67.186.112"],"resolved_at":"2026-11-05T14:11:39Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"fyxvaxjvncbzibj7jh5qr","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T14:11:05.168Z","first_published":"2026-11-05T14:22:51.196Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=dunypeu.com"},{"hostname":"duru-nemaransal.net","first_observed":"2026-11-05T13:10:48.629Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["104.21.17.116","172.67.175.200"],"resolved_at":"2026-11-05T13:17:33Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"feuiy77kr5kwjlf3lpvg3","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T13:10:48.629Z","first_published":"2026-11-05T14:22:51.196Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=duru-nemaransal.net"},{"hostname":"ebony-travels.com","first_observed":"2026-11-05T13:36:04.823Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["104.21.50.168","172.67.164.102"],"resolved_at":"2026-11-05T13:46:07Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"fnmcrwln7cibjrk5q743t","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T13:36:04.823Z","first_published":"2026-11-05T14:22:51.196Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=ebony-travels.com"},{"hostname":"eclipseearnai.live","first_observed":"2026-11-05T13:46:34.425Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["104.21.82.11","172.67.167.135"],"resolved_at":"2026-11-05T13:51:57Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"fqo5xy7kafdbzn2ymtzzn","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T13:46:34.425Z","first_published":"2026-11-05T14:22:51.196Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=eclipseearnai.live"},{"hostname":"efendybungalow.site","first_observed":"2026-11-05T14:00:40.663Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["104.21.45.180","172.67.217.185"],"resolved_at":"2026-11-05T14:14:24Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"fadzfxnwnzts65clyrc2r","kind":"reported_domain","summary":"Listed by USOM","first_observed":"2026-11-05T14:00:40.663Z","first_published":"2026-11-05T14:22:51.196Z","source":"usom","source_name":"USOM"}],"url":"https://domainspoof.com/live?show=all&q=efendybungalow.site"},{"hostname":"efruni.digital","first_observed":"2026-11-05T14:11:05.168Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["104.21.19.100","172.67.185.190"],"resolved_at":"2026-11-05T14:11:39Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"fu36db4rkzdxvbusmlfuj","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T14:11:05.168Z","first_published":"2026-11-05T14:22:51.196Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/efruni.digital/"}],"url":"https://domainspoof.com/live?show=all&q=efruni.digital"},{"hostname":"eiafd-83rfv-8cicw-wgo-e5t.pages.dev","first_observed":"2026-11-05T13:10:48.629Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["172.66.44.213","172.66.47.43"],"resolved_at":"2026-11-05T13:17:35Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"fhw65w33xvjm67dxkytqj","kind":"reported_domain","summary":"Reported by PhishTank","first_observed":"2026-11-05T13:10:48.629Z","first_published":"2026-11-05T14:22:51.196Z","source":"phishtank","source_name":"PhishTank","source_url":"https://phishtank.org/phish_detail.php?phish_id=9479354"}],"url":"https://domainspoof.com/live?show=all&q=eiafd-83rfv-8cicw-wgo-e5t.pages.dev"},{"hostname":"eivisshopping.online","first_observed":"2026-11-05T13:10:48.629Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["104.21.18.224","172.67.183.217"],"resolved_at":"2026-11-05T13:17:35Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"fjtwyq5qbqynakuyckjmh","kind":"reported_domain","summary":"Listed by NPA 165 (e-commerce)","first_observed":"2026-11-05T13:10:48.629Z","first_published":"2026-11-05T14:22:51.196Z","source":"npa","source_name":"NPA 165","claim":{"category":"e-commerce"}}],"url":"https://domainspoof.com/live?show=all&q=eivisshopping.online"},{"hostname":"engjbuil.wviyzmqf.tomjzfci.tczglrpw.gatewaylearning.ezgateway.net","first_observed":"2026-11-05T14:05:54.172Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["15.204.116.29"],"resolved_at":"2026-11-05T14:18:09Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"fyyo3uo7guyypgufryce6","kind":"reported_domain","summary":"Under ezgateway.net, listed by USOM","first_observed":"2026-11-05T14:05:54.172Z","first_published":"2026-11-05T14:22:51.196Z","source":"usom","source_name":"USOM","under":"ezgateway.net"}],"url":"https://domainspoof.com/live?show=all&q=engjbuil.wviyzmqf.tomjzfci.tczglrpw.gatewaylearning.ezgateway.net"},{"hostname":"eopnuissb.shop","first_observed":"2026-11-05T13:56:59.803Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["43.154.192.95"],"resolved_at":"2026-11-06T07:33:29Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"fztvmqkb4f7rjtzsyowu3","kind":"reported_domain","summary":"Listed by NPA 165 (e-commerce)","first_observed":"2026-11-05T13:56:59.803Z","first_published":"2026-11-05T14:22:51.196Z","source":"npa","source_name":"NPA 165","claim":{"category":"e-commerce"}}],"url":"https://domainspoof.com/live?show=all&q=eopnuissb.shop"},{"hostname":"eu-tronlink.at","first_observed":"2026-11-05T13:36:04.823Z","first_published":"2026-11-05T14:22:51.196Z","brands":[{"id":"tronlink","name":"TronLink","url":"https://domainspoof.com/brands/tronlink"}],"dns":"resolved","resolved":["104.21.51.2","172.67.215.122","2606:4700:3030::ac43:d77a","2606:4700:3032::6815:3302"],"resolved_at":"2026-11-06T06:11:00Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"f57f5rfhr7gauz3mmjvqr","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T13:36:04.823Z","first_published":"2026-11-05T14:22:51.196Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/brands/tronlink"},{"hostname":"fauconplacoire-fr.live","first_observed":"2026-11-05T14:00:40.663Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["104.21.95.201","172.67.147.186"],"resolved_at":"2026-11-06T04:07:23Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"fs7ompn4fs5jfdocv2bjl","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T14:00:40.663Z","first_published":"2026-11-05T14:22:51.196Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=fauconplacoire-fr.live"},{"hostname":"fbboak.lol","first_observed":"2026-11-05T13:21:26.667Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["104.21.19.73","172.67.185.158"],"resolved_at":"2026-11-05T13:21:59Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"fplps3yv2vazh3yuch7ya","kind":"reported_domain","summary":"Listed by NPA 165 (e-commerce)","first_observed":"2026-11-05T13:21:26.667Z","first_published":"2026-11-05T14:22:51.196Z","source":"npa","source_name":"NPA 165","claim":{"category":"e-commerce"}}],"url":"https://domainspoof.com/live?show=all&q=fbboak.lol"},{"hostname":"fesyvio.pro","first_observed":"2026-11-05T14:11:05.168Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["104.21.10.92","172.67.162.194"],"resolved_at":"2026-11-05T14:11:39Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"ffv43ukk7mmusvlvozbke","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T14:11:05.168Z","first_published":"2026-11-05T14:22:51.196Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=fesyvio.pro"},{"hostname":"fibinao.com","first_observed":"2026-11-05T13:15:39.201Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["104.21.6.217","172.67.135.79"],"resolved_at":"2026-11-05T13:26:20Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"fs2erzskew7h2kaoerns4","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T13:15:39.201Z","first_published":"2026-11-05T14:22:51.196Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=fibinao.com"},{"hostname":"fidelnex.com","first_observed":"2026-11-05T13:41:18.148Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["104.21.38.56","172.67.219.136"],"resolved_at":"2026-11-05T13:41:46Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"fv6jkn2yt3ceqj7vouxve","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T13:41:18.148Z","first_published":"2026-11-05T14:22:51.196Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=fidelnex.com"},{"hostname":"firmwealthgrove.online","first_observed":"2026-11-05T13:15:39.201Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"not_found","resolved":["104.21.44.171","172.67.201.153"],"resolved_at":"2026-11-05T13:26:20Z","dns_checked_at":"2026-11-06T16:36:14.000Z","findings":[{"id":"fbbd2b6iggjfupqjregm7","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T13:15:39.201Z","first_published":"2026-11-05T14:22:51.196Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=firmwealthgrove.online"},{"hostname":"fixedfloat.top","first_observed":"2026-11-05T13:15:39.201Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["104.21.19.33","172.67.184.239"],"resolved_at":"2026-11-05T13:26:20Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"fgvym3s6sgkfcqnit7zsu","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T13:15:39.201Z","first_published":"2026-11-05T14:22:51.196Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=fixedfloat.top"},{"hostname":"flexirentarackiralama.com","first_observed":"2026-11-05T14:16:22.656Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["94.72.96.147"],"resolved_at":"2026-11-05T14:16:53Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"fwwgxijfjls4flhwlf2hi","kind":"reported_domain","summary":"Listed by USOM","first_observed":"2026-11-05T14:16:22.656Z","first_published":"2026-11-05T14:22:51.196Z","source":"usom","source_name":"USOM"}],"url":"https://domainspoof.com/live?show=all&q=flexirentarackiralama.com"},{"hostname":"flixplanet.cyou","first_observed":"2026-11-05T13:26:11.391Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["104.21.43.233","172.67.186.227"],"resolved_at":"2026-11-05T13:26:34Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"fcyscdf5wnodowjerxefy","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T13:26:11.391Z","first_published":"2026-11-05T14:22:51.196Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/flixplanet.cyou/"}],"url":"https://domainspoof.com/live?show=all&q=flixplanet.cyou"},{"hostname":"fozyniu.pro","first_observed":"2026-11-05T14:16:22.656Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["104.21.33.89","172.67.160.183"],"resolved_at":"2026-11-05T14:16:53Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"fyscofes3vmcriidtrumg","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T14:16:22.656Z","first_published":"2026-11-05T14:22:51.196Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=fozyniu.pro"},{"hostname":"freneplacencia-fr.live","first_observed":"2026-11-05T14:00:40.663Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["104.21.50.188","172.67.165.137"],"resolved_at":"2026-11-05T14:14:26Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"fbsvyjwsxq2ss4vicpttp","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T14:00:40.663Z","first_published":"2026-11-05T14:22:51.196Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=freneplacencia-fr.live"},{"hostname":"fresh-trails.com","first_observed":"2026-11-05T13:36:04.823Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["104.21.31.50","172.67.174.251"],"resolved_at":"2026-11-05T13:46:09Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"ffabmw2fls6zrd57ltgvx","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T13:36:04.823Z","first_published":"2026-11-05T14:22:51.196Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=fresh-trails.com"},{"hostname":"frugacella.pro","first_observed":"2026-11-05T13:41:18.148Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["104.21.11.243","172.67.193.31"],"resolved_at":"2026-11-05T13:41:46Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"ff2g3xy6axsjp3shtyja6","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T13:41:18.148Z","first_published":"2026-11-05T14:22:51.196Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=frugacella.pro"},{"hostname":"frugacelle-fr.com","first_observed":"2026-11-05T13:26:11.391Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["104.21.74.68","172.67.200.43"],"resolved_at":"2026-11-05T13:26:34Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"foaqfou3mzw5uevdcj5we","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T13:26:11.391Z","first_published":"2026-11-05T14:22:51.196Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=frugacelle-fr.com"},{"hostname":"fuel-burst.com","first_observed":"2026-11-05T13:31:22.324Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["104.21.50.7","172.67.198.179"],"resolved_at":"2026-11-05T13:35:57Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"fnzrdhworyakf5fje5ee2","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T13:31:22.324Z","first_published":"2026-11-05T14:22:51.196Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=fuel-burst.com"},{"hostname":"fuse-shard.com","first_observed":"2026-11-05T13:31:22.324Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["104.21.17.115","172.67.175.199"],"resolved_at":"2026-11-05T13:35:58Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"fupstddur3ajvpluy5a4i","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T13:31:22.324Z","first_published":"2026-11-05T14:22:51.196Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=fuse-shard.com"},{"hostname":"gecas.cc","first_observed":"2026-11-05T13:10:48.629Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["104.21.64.230","172.67.137.147"],"resolved_at":"2026-11-05T13:17:46Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"fldurqivgyzrm6q5mozk3","kind":"reported_domain","summary":"Listed by NPA 165 (phishing site)","first_observed":"2026-11-05T13:10:48.629Z","first_published":"2026-11-05T14:22:51.196Z","source":"npa","source_name":"NPA 165","claim":{"category":"phishing site"}}],"url":"https://domainspoof.com/live?show=all&q=gecas.cc"},{"hostname":"generalmotors.in","first_observed":"2026-11-05T13:06:33.739Z","first_published":"2026-11-05T14:22:51.196Z","brands":[{"id":"general-motors","name":"General Motors","url":"https://domainspoof.com/brands/general-motors"}],"dns":"resolved","resolved":["2.57.91.91"],"resolved_at":"2026-11-05T14:33:25Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"fmvlfm6fwny2mqdj3cqql","kind":"phishing_infrastructure","summary":"Resolved to 2.57.91.91, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T13:06:33.739Z","first_published":"2026-11-05T14:22:51.196Z","address":"2.57.91.91","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/general-motors"},{"hostname":"get-krraken-login.pages.dev","first_observed":"2026-11-05T13:46:34.425Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["172.66.45.7","172.66.46.249"],"resolved_at":"2026-11-05T13:51:59Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"fmvzk25xc3d37ifdiuqtb","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T13:46:34.425Z","first_published":"2026-11-05T14:22:51.196Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=get-krraken-login.pages.dev"},{"hostname":"girtrustlt.com","first_observed":"2026-11-05T13:10:48.629Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["104.21.32.168","172.67.153.19"],"resolved_at":"2026-11-05T13:17:46Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"fmvepdotloviaecytbwmn","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T13:10:48.629Z","first_published":"2026-11-05T14:22:51.196Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=girtrustlt.com"},{"hostname":"giyouxuantw.shop","first_observed":"2026-11-05T14:11:05.168Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["104.21.86.117","172.67.219.7"],"resolved_at":"2026-11-05T14:11:39Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"f3snddertmbxocguz37qy","kind":"reported_domain","summary":"Listed by NPA 165 (healthcare)","first_observed":"2026-11-05T14:11:05.168Z","first_published":"2026-11-05T14:22:51.196Z","source":"npa","source_name":"NPA 165","claim":{"category":"healthcare"}}],"url":"https://domainspoof.com/live?show=all&q=giyouxuantw.shop"},{"hostname":"gizaprotocol.ai","first_observed":"2026-11-05T13:51:49.934Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["76.76.21.21"],"resolved_at":"2026-11-05T13:55:31Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"fw4paamcnipi3twazv2mt","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T13:51:49.934Z","first_published":"2026-11-05T14:22:51.196Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/gizaprotocol.ai/"}],"url":"https://domainspoof.com/live?show=all&q=gizaprotocol.ai"},{"hostname":"glittering-backroads.com","first_observed":"2026-11-05T13:26:11.391Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["104.21.60.34","172.67.191.32"],"resolved_at":"2026-11-05T13:26:34Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"f46loxoem4h6s6kwdlpax","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T13:26:11.391Z","first_published":"2026-11-05T14:22:51.196Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=glittering-backroads.com"},{"hostname":"global.dotdot.ink","first_observed":"2026-11-05T13:26:11.391Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["47.246.22.221"],"resolved_at":"2026-11-05T13:26:34Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"fn6ulfa5m7w4pjdipgv3q","kind":"reported_domain","summary":"Listed by NPA 165 (finance and insurance)","first_observed":"2026-11-05T13:26:11.391Z","first_published":"2026-11-05T14:22:51.196Z","source":"npa","source_name":"NPA 165","claim":{"category":"finance and insurance"}}],"url":"https://domainspoof.com/live?show=all&q=global.dotdot.ink"},{"hostname":"goldpocket.asia","first_observed":"2026-11-05T13:21:26.667Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["104.21.7.180","172.67.137.38"],"resolved_at":"2026-11-05T13:29:46Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"fjoq5b2tw7ksqfi46isnu","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T13:21:26.667Z","first_published":"2026-11-05T14:22:51.196Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=goldpocket.asia"},{"hostname":"goodwx.com","first_observed":"2026-11-05T14:11:05.168Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["13.223.25.84","54.243.117.197"],"resolved_at":"2026-11-05T14:11:39Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"f52cizyobgvuggzdoktwf","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T14:11:05.168Z","first_published":"2026-11-05T14:22:51.196Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=goodwx.com"},{"hostname":"grenco-fondorie.com","first_observed":"2026-11-05T13:26:11.391Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["104.21.70.119","172.67.223.99"],"resolved_at":"2026-11-05T13:26:34Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"fh65vaorpooa3xp52qltq","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T13:26:11.391Z","first_published":"2026-11-05T14:22:51.196Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=grenco-fondorie.com"},{"hostname":"gro89k-cointelegraph.com","first_observed":"2026-11-05T13:26:21.678Z","first_published":"2026-11-05T14:22:51.196Z","brands":[{"id":"cointelegraph","name":"Cointelegraph","url":"https://domainspoof.com/brands/cointelegraph"}],"dns":"resolved","resolved":["192.142.10.5"],"resolved_at":"2026-11-06T14:34:09Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"fscdrfmv5qxvepuoj22fm","kind":"phishing_infrastructure","summary":"Resolved to 192.142.10.5, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T13:26:21.678Z","first_published":"2026-11-05T14:22:51.196Z","address":"192.142.10.5","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/cointelegraph"},{"hostname":"groeielatie.online","first_observed":"2026-11-05T13:15:39.201Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"not_found","resolved":["104.21.76.250","172.67.202.131"],"resolved_at":"2026-11-05T13:26:21Z","dns_checked_at":"2026-11-06T16:36:14.000Z","findings":[{"id":"fa6vr2qfxukws3eshojd4","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T13:15:39.201Z","first_published":"2026-11-05T14:22:51.196Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=groeielatie.online"},{"hostname":"grok66k-cointelegraph.com","first_observed":"2026-11-05T13:06:34.060Z","first_published":"2026-11-05T14:22:51.196Z","brands":[{"id":"cointelegraph","name":"Cointelegraph","url":"https://domainspoof.com/brands/cointelegraph"}],"dns":"resolved","resolved":["192.142.10.5"],"resolved_at":"2026-11-06T14:34:09Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"f53m5r3hrcuflka2cmldx","kind":"phishing_infrastructure","summary":"Resolved to 192.142.10.5, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T13:06:34.060Z","first_published":"2026-11-05T14:22:51.196Z","address":"192.142.10.5","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/cointelegraph"},{"hostname":"guest-info1390.com","first_observed":"2026-11-05T13:15:39.201Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["104.21.37.52","172.67.204.39"],"resolved_at":"2026-11-05T13:26:21Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"fanwhcxdpp4yl2gplrzhm","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T13:15:39.201Z","first_published":"2026-11-05T14:22:51.196Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=guest-info1390.com"},{"hostname":"gulfcoinbank.com","first_observed":"2026-11-05T13:31:22.324Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["198.251.89.220"],"resolved_at":"2026-11-05T13:35:58Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"fzraufvceadhjcgymo5xc","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T13:31:22.324Z","first_published":"2026-11-05T14:22:51.196Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/gulfcoinbank.com/"}],"url":"https://domainspoof.com/live?show=all&q=gulfcoinbank.com"},{"hostname":"gundemdunyasi.world","first_observed":"2026-11-05T14:11:05.168Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["104.21.58.34","172.67.199.123"],"resolved_at":"2026-11-05T14:11:40Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"fq2upj7m6e2lpycujwqsk","kind":"reported_domain","summary":"Listed by USOM","first_observed":"2026-11-05T14:11:05.168Z","first_published":"2026-11-05T14:22:51.196Z","source":"usom","source_name":"USOM"}],"url":"https://domainspoof.com/live?show=all&q=gundemdunyasi.world"},{"hostname":"guvezyi.pro","first_observed":"2026-11-05T13:36:04.823Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["104.21.76.114","172.67.193.212"],"resolved_at":"2026-11-05T13:46:09Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"fswc3vptlbfjw5rz55kyn","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T13:36:04.823Z","first_published":"2026-11-05T14:22:51.196Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=guvezyi.pro"},{"hostname":"happy-dividend.com","first_observed":"2026-11-05T13:56:59.803Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["104.21.77.110","172.67.207.48"],"resolved_at":"2026-11-05T13:59:45Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"fkp6w5chliezt6ar47bjh","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T13:56:59.803Z","first_published":"2026-11-05T14:22:51.196Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=happy-dividend.com"},{"hostname":"hashkeyegd.com","first_observed":"2026-11-05T13:51:49.934Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"no_address","resolved":[],"resolved_at":"2026-11-05T13:55:32Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"f76xx4c2pbxclfev4xd22","kind":"reported_domain","summary":"Listed by NPA 165 (information services)","first_observed":"2026-11-05T13:51:49.934Z","first_published":"2026-11-05T14:22:51.196Z","source":"npa","source_name":"NPA 165","claim":{"category":"information services"}}],"url":"https://domainspoof.com/live?show=all&q=hashkeyegd.com"},{"hostname":"help.freewallet.org","first_observed":"2026-11-05T13:56:59.803Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["162.159.140.147","172.66.0.145"],"resolved_at":"2026-11-05T13:59:46Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"fzhamkgiovmnilnxy6mhn","kind":"reported_domain","summary":"Under freewallet.org, reported by PhishDestroy","first_observed":"2026-11-05T13:56:59.803Z","first_published":"2026-11-05T14:22:51.196Z","source":"phishdestroy","source_name":"PhishDestroy","under":"freewallet.org","source_url":"https://phishdestroy.io/domain/freewallet.org/"}],"url":"https://domainspoof.com/live?show=all&q=help.freewallet.org"},{"hostname":"hgfjfsdkqs.monster","first_observed":"2026-11-05T13:21:26.667Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["104.21.55.97","172.67.147.74"],"resolved_at":"2026-11-05T13:29:45Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"fgsdpo77czay7xv37eatn","kind":"reported_domain","summary":"Listed by NPA 165 (e-commerce)","first_observed":"2026-11-05T13:21:26.667Z","first_published":"2026-11-05T14:22:51.196Z","source":"npa","source_name":"NPA 165","claim":{"category":"e-commerce"}}],"url":"https://domainspoof.com/live?show=all&q=hgfjfsdkqs.monster"},{"hostname":"hkxnwscj.drivcwto.jxmwrunio.ytnrizjb.nofbagcj.gecxorwd.tczglrpw.gatewaylearning.ezgateway.net","first_observed":"2026-11-05T14:05:54.172Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["15.204.116.29"],"resolved_at":"2026-11-05T14:06:06Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"fhb4ysw7xyiijpy32k63r","kind":"reported_domain","summary":"Under ezgateway.net, listed by USOM","first_observed":"2026-11-05T14:05:54.172Z","first_published":"2026-11-05T14:22:51.196Z","source":"usom","source_name":"USOM","under":"ezgateway.net"}],"url":"https://domainspoof.com/live?show=all&q=hkxnwscj.drivcwto.jxmwrunio.ytnrizjb.nofbagcj.gecxorwd.tczglrpw.gatewaylearning.ezgateway.net"},{"hostname":"hofkffe.online","first_observed":"2026-11-05T13:21:26.667Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["104.21.87.171","172.67.144.198"],"resolved_at":"2026-11-06T00:15:52Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"fbymwr6sm6y6cddmjrx7n","kind":"reported_domain","summary":"Listed by NPA 165 (e-commerce)","first_observed":"2026-11-05T13:21:26.667Z","first_published":"2026-11-05T14:22:51.196Z","source":"npa","source_name":"NPA 165","claim":{"category":"e-commerce"}}],"url":"https://domainspoof.com/live?show=all&q=hofkffe.online"},{"hostname":"hyrorevionypro-de.com","first_observed":"2026-11-05T13:10:48.629Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["104.21.71.138","172.67.145.102"],"resolved_at":"2026-11-05T13:17:49Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"fwinlrfbfyd3ju6okvspb","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T13:10:48.629Z","first_published":"2026-11-05T14:22:51.196Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=hyrorevionypro-de.com"},{"hostname":"hzlmyndsvzen.site","first_observed":"2026-11-05T14:16:16.922Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"not_found","resolved":["104.21.21.137","172.67.199.23","2606:4700:3030::ac43:c717","2606:4700:3034::6815:1589"],"resolved_at":"2026-11-05T14:21:47Z","dns_checked_at":"2026-11-06T16:36:14.000Z","findings":[{"id":"fepc6flmz64qwtwbmg4wi","kind":"reported_domain","summary":"Listed by USOM","first_observed":"2026-11-05T14:16:16.922Z","first_published":"2026-11-05T14:22:51.196Z","source":"usom","source_name":"USOM"}],"url":"https://domainspoof.com/live?show=all&q=hzlmyndsvzen.site"},{"hostname":"icantbeicantbe.com","first_observed":"2026-11-05T14:11:05.168Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["104.21.41.14","172.67.158.218"],"resolved_at":"2026-11-05T14:11:42Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"fbjxkkiugldewpex5mh6d","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T14:11:05.168Z","first_published":"2026-11-05T14:22:51.196Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/icantbeicantbe.com/"}],"url":"https://domainspoof.com/live?show=all&q=icantbeicantbe.com"},{"hostname":"imetokovnik.live","first_observed":"2026-11-05T13:41:18.148Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["104.21.84.2","172.67.184.6"],"resolved_at":"2026-11-05T13:41:47Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"fcwxker3al2b6iawwvmm2","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T13:41:18.148Z","first_published":"2026-11-05T14:22:51.196Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=imetokovnik.live"},{"hostname":"indexiplex200-fr.live","first_observed":"2026-11-05T13:46:34.425Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["104.21.78.39","172.67.215.189"],"resolved_at":"2026-11-05T13:52:01Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"f74jbthu3rthz7tnep33b","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T13:46:34.425Z","first_published":"2026-11-05T14:22:51.196Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=indexiplex200-fr.live"},{"hostname":"indexlivetrust.com","first_observed":"2026-11-05T13:31:22.324Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["198.251.84.236"],"resolved_at":"2026-11-05T13:36:02Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"fqezpwarg5o7dyza6h2ab","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T13:31:22.324Z","first_published":"2026-11-05T14:22:51.196Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/indexlivetrust.com/"}],"url":"https://domainspoof.com/live?show=all&q=indexlivetrust.com"},{"hostname":"instantprofitx5-es.live","first_observed":"2026-11-05T13:36:04.823Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["104.21.73.39","172.67.140.27"],"resolved_at":"2026-11-05T13:46:11Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"fydcckyplet4muhqllvhg","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T13:36:04.823Z","first_published":"2026-11-05T14:22:51.196Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=instantprofitx5-es.live"},{"hostname":"inter-swift.net","first_observed":"2026-11-05T13:10:48.629Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["104.21.58.210","172.67.164.173"],"resolved_at":"2026-11-05T13:17:55Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"f32tbqdkejtahrcdb76re","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T13:10:48.629Z","first_published":"2026-11-05T14:22:51.196Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=inter-swift.net"},{"hostname":"jesuo.top","first_observed":"2026-11-05T13:21:26.667Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["104.21.18.161","172.67.182.187"],"resolved_at":"2026-11-05T13:29:47Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"fthyd3zkg2q47x7jhtaro","kind":"reported_domain","summary":"Listed by MODA (one-page scam site)","first_observed":"2026-11-05T13:21:26.667Z","first_published":"2026-11-05T14:22:51.196Z","source":"moda","source_name":"MODA","claim":{"category":"one-page scam site"}}],"url":"https://domainspoof.com/live?show=all&q=jesuo.top"},{"hostname":"jiangning01.buzz","first_observed":"2026-11-05T13:36:04.823Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["104.21.85.185","172.67.209.6"],"resolved_at":"2026-11-05T13:46:11Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"fr6wbs2wsv5k35m3l32qp","kind":"reported_domain","summary":"Listed by NPA 165 (e-commerce)","first_observed":"2026-11-05T13:36:04.823Z","first_published":"2026-11-05T14:22:51.196Z","source":"npa","source_name":"NPA 165","claim":{"category":"e-commerce"}}],"url":"https://domainspoof.com/live?show=all&q=jiangning01.buzz"},{"hostname":"jinhaihotel.com","first_observed":"2026-11-05T13:21:26.667Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["44.208.83.180","54.84.240.235"],"resolved_at":"2026-11-05T13:29:47Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"f4arvalualqrjczcjowq3","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T13:21:26.667Z","first_published":"2026-11-05T14:22:51.196Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=jinhaihotel.com"},{"hostname":"jizhouqiangli.com","first_observed":"2026-11-05T13:15:39.201Z","first_published":"2026-11-05T14:22:51.196Z","brands":[{"id":"smbc-card","name":"SMBC Card","url":"https://domainspoof.com/brands/smbc-card"}],"dns":"resolved","resolved":["44.208.83.180","54.84.240.235"],"resolved_at":"2026-11-05T13:26:24Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"ftvyxf7xgozlbmoubowoe","kind":"reported_domain","summary":"Listed by JPCERT/CC as imitating 三井住友カード","first_observed":"2026-11-05T13:15:39.201Z","first_published":"2026-11-05T14:22:51.196Z","source":"jpcert","source_name":"JPCERT/CC","claim":{"brand":"三井住友カード"}}],"url":"https://domainspoof.com/brands/smbc-card"},{"hostname":"join.hookup-zone.com","first_observed":"2026-11-05T13:56:59.803Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["35.219.200.109"],"resolved_at":"2026-11-05T13:59:47Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"fdcna67f333v6uam5sxmf","kind":"reported_domain","summary":"Under hookup-zone.com, reported by PhishDestroy","first_observed":"2026-11-05T13:56:59.803Z","first_published":"2026-11-05T14:22:51.196Z","source":"phishdestroy","source_name":"PhishDestroy","under":"hookup-zone.com","source_url":"https://phishdestroy.io/domain/hookup-zone.com/"}],"url":"https://domainspoof.com/live?show=all&q=join.hookup-zone.com"},{"hostname":"katilim-paneli.online","first_observed":"2026-11-05T13:15:39.201Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["64.89.160.46"],"resolved_at":"2026-11-05T13:26:25Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"fbdkt7kwva5xc2m3jmuy2","kind":"reported_domain","summary":"Listed by USOM","first_observed":"2026-11-05T13:15:39.201Z","first_published":"2026-11-05T14:22:51.196Z","source":"usom","source_name":"USOM"}],"url":"https://domainspoof.com/live?show=all&q=katilim-paneli.online"},{"hostname":"keepo.io","first_observed":"2026-11-05T13:31:22.324Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["99.86.91.27","99.86.91.66","99.86.91.82","99.86.91.84"],"resolved_at":"2026-11-05T13:36:04Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"f7ifhmeovrqzypliqh6sf","kind":"reported_domain","summary":"Reported by PhishTank","first_observed":"2026-11-05T13:31:22.324Z","first_published":"2026-11-05T14:22:51.196Z","source":"phishtank","source_name":"PhishTank","source_url":"https://phishtank.org/phish_detail.php?phish_id=9209135"}],"url":"https://domainspoof.com/live?show=all&q=keepo.io"},{"hostname":"kfccyz.com","first_observed":"2026-11-05T13:41:18.148Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"no_address","resolved":[],"resolved_at":"2026-11-05T13:41:47Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"frsy4tfr2l2f7t2mlmhux","kind":"reported_domain","summary":"Listed by NPA 165 (finance and insurance)","first_observed":"2026-11-05T13:41:18.148Z","first_published":"2026-11-05T14:22:51.196Z","source":"npa","source_name":"NPA 165","claim":{"category":"finance and insurance"}}],"url":"https://domainspoof.com/live?show=all&q=kfccyz.com"},{"hostname":"kfcmgk.com","first_observed":"2026-11-05T14:16:22.656Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"no_address","resolved":[],"resolved_at":"2026-11-05T14:20:30Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"fdv5yyf4kzr2sphdbqjtx","kind":"reported_domain","summary":"Listed by NPA 165 (finance and insurance)","first_observed":"2026-11-05T14:16:22.656Z","first_published":"2026-11-05T14:22:51.196Z","source":"npa","source_name":"NPA 165","claim":{"category":"finance and insurance"}}],"url":"https://domainspoof.com/live?show=all&q=kfcmgk.com"},{"hostname":"krevpixelon-es.live","first_observed":"2026-11-05T13:41:18.148Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["104.21.45.3","172.67.207.9"],"resolved_at":"2026-11-05T13:41:51Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"fn2y62afgxby5axwbns2s","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T13:41:18.148Z","first_published":"2026-11-05T14:22:51.196Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=krevpixelon-es.live"},{"hostname":"ksbjhfk.net","first_observed":"2026-11-05T13:10:48.629Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["104.21.91.205","172.67.179.89"],"resolved_at":"2026-11-05T13:18:00Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"fdnqieum6nv23mz3334pr","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T13:10:48.629Z","first_published":"2026-11-05T14:22:51.196Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=ksbjhfk.net"},{"hostname":"kurtosis.live","first_observed":"2026-11-05T14:16:22.656Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["104.21.82.67","172.67.197.115"],"resolved_at":"2026-11-05T14:20:30Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"fkl5bv2fzqrzgeb7flo6r","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T14:16:22.656Z","first_published":"2026-11-05T14:22:51.196Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=kurtosis.live"},{"hostname":"kuzeytr.com","first_observed":"2026-11-05T13:10:48.629Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["104.21.3.184","172.67.131.22"],"resolved_at":"2026-11-05T13:18:00Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"fqv5ifbtgt4pkbxjzjxku","kind":"reported_domain","summary":"Listed by USOM","first_observed":"2026-11-05T13:10:48.629Z","first_published":"2026-11-05T14:22:51.196Z","source":"usom","source_name":"USOM"}],"url":"https://domainspoof.com/live?show=all&q=kuzeytr.com"},{"hostname":"ldy.pcfridkc33.com","first_observed":"2026-11-05T13:31:22.324Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["103.106.191.238"],"resolved_at":"2026-11-05T13:36:04Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"fy3lngsf3naj337ghglzx","kind":"reported_domain","summary":"Under pcfridkc33.com, listed by USOM","first_observed":"2026-11-05T13:31:22.324Z","first_published":"2026-11-05T14:22:51.196Z","source":"usom","source_name":"USOM","under":"pcfridkc33.com"}],"url":"https://domainspoof.com/live?show=all&q=ldy.pcfridkc33.com"},{"hostname":"leather-bitcoin-wallet.com","first_observed":"2026-11-05T14:16:22.656Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["207.207.210.23","207.207.210.36","207.207.210.50"],"resolved_at":"2026-11-05T14:20:30Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"ft75xp2bmdg3qc37lwyhe","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T14:16:22.656Z","first_published":"2026-11-05T14:22:51.196Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/leather-bitcoin-wallet.com/"}],"url":"https://domainspoof.com/live?show=all&q=leather-bitcoin-wallet.com"},{"hostname":"ledgerdevicescheck.com","first_observed":"2026-11-05T14:05:54.172Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["104.21.94.40","172.67.219.80"],"resolved_at":"2026-11-05T14:06:12Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"faxcu4yhfq2bqopdhrjt6","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T14:05:54.172Z","first_published":"2026-11-05T14:22:51.196Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=ledgerdevicescheck.com"},{"hostname":"lierrefondange-fr.live","first_observed":"2026-11-05T13:36:04.823Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["104.21.66.45","172.67.201.25"],"resolved_at":"2026-11-05T13:46:12Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"fyxbknihfvfu6hltc5lun","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T13:36:04.823Z","first_published":"2026-11-05T14:22:51.196Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=lierrefondange-fr.live"},{"hostname":"lucelpatriance.digital","first_observed":"2026-11-05T14:11:05.168Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["104.21.2.2","172.67.128.113"],"resolved_at":"2026-11-05T14:11:43Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"fow6voa7al2ulovm5f2ht","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T14:11:05.168Z","first_published":"2026-11-05T14:22:51.196Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=lucelpatriance.digital"},{"hostname":"lucrantai-it.net","first_observed":"2026-11-05T13:10:48.629Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["104.21.75.107","172.67.221.89"],"resolved_at":"2026-11-05T13:18:02Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"f6eheypobguzlgcpff6vm","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T13:10:48.629Z","first_published":"2026-11-05T14:22:51.196Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=lucrantai-it.net"},{"hostname":"lucrianza.digital","first_observed":"2026-11-05T14:11:05.168Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["104.21.23.7","172.67.208.65"],"resolved_at":"2026-11-05T14:11:43Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"fnxw2nia4awovlhqyikrn","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T14:11:05.168Z","first_published":"2026-11-05T14:22:51.196Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=lucrianza.digital"},{"hostname":"luohuaniuniu.cyou","first_observed":"2026-11-05T13:10:48.629Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["47.252.7.112"],"resolved_at":"2026-11-05T13:18:02Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"f36sukzcdq6mk6tcuebkw","kind":"reported_domain","summary":"Listed by NPA 165 (finance and insurance)","first_observed":"2026-11-05T13:10:48.629Z","first_published":"2026-11-05T14:22:51.196Z","source":"npa","source_name":"NPA 165","claim":{"category":"finance and insurance"}}],"url":"https://domainspoof.com/live?show=all&q=luohuaniuniu.cyou"},{"hostname":"luxury-life.live","first_observed":"2026-11-05T13:21:26.667Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["104.21.39.172","172.67.147.99"],"resolved_at":"2026-11-05T13:29:48Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"fan27zwhavvml74siscm6","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T13:21:26.667Z","first_published":"2026-11-05T14:22:51.196Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=luxury-life.live"},{"hostname":"lyganiusis-ai.cyou","first_observed":"2026-11-05T13:31:22.324Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["104.21.13.167","172.67.200.213"],"resolved_at":"2026-11-05T13:36:06Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"fvohj3wqgd4gunhybzu7x","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T13:31:22.324Z","first_published":"2026-11-05T14:22:51.196Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=lyganiusis-ai.cyou"},{"hostname":"lysformuedom.online","first_observed":"2026-11-05T13:21:26.667Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["104.21.78.99","172.67.220.52"],"resolved_at":"2026-11-05T13:29:48Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"f3vurclyrafzxizt6jgba","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T13:21:26.667Z","first_published":"2026-11-05T14:22:51.196Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=lysformuedom.online"},{"hostname":"m-obilet.info","first_observed":"2026-11-05T13:51:49.934Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["104.21.1.185","172.67.129.198"],"resolved_at":"2026-11-05T13:55:35Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"f3vmf5klit346figrzevq","kind":"reported_domain","summary":"Listed by USOM","first_observed":"2026-11-05T13:51:49.934Z","first_published":"2026-11-05T14:22:51.196Z","source":"usom","source_name":"USOM"}],"url":"https://domainspoof.com/live?show=all&q=m-obilet.info"},{"hostname":"m3cx-6de-8miepj-ek0-47m-dki.pages.dev","first_observed":"2026-11-05T13:41:18.148Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["172.66.44.178","172.66.47.78"],"resolved_at":"2026-11-05T13:41:51Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"fewhurghyn4bv6ryg4edw","kind":"reported_domain","summary":"Reported by PhishTank","first_observed":"2026-11-05T13:41:18.148Z","first_published":"2026-11-05T14:22:51.196Z","source":"phishtank","source_name":"PhishTank","source_url":"https://phishtank.org/phish_detail.php?phish_id=9479404"}],"url":"https://domainspoof.com/live?show=all&q=m3cx-6de-8miepj-ek0-47m-dki.pages.dev"},{"hostname":"mail.alisfortes.com","first_observed":"2026-11-05T13:15:39.201Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["162.4.84.247"],"resolved_at":"2026-11-05T13:26:26Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"flrr4crcr7edb4eprrdiy","kind":"reported_domain","summary":"Under alisfortes.com, reported by PhishDestroy","first_observed":"2026-11-05T13:15:39.201Z","first_published":"2026-11-05T14:22:51.196Z","source":"phishdestroy","source_name":"PhishDestroy","under":"alisfortes.com","source_url":"https://phishdestroy.io/domain/alisfortes.com/"}],"url":"https://domainspoof.com/live?show=all&q=mail.alisfortes.com"},{"hostname":"mail.uttspetrolofisi.com","first_observed":"2026-11-05T13:41:18.148Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["89.252.187.72"],"resolved_at":"2026-11-05T13:41:51Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"fke7jd3racwkdo6ympqnv","kind":"reported_domain","summary":"Under uttspetrolofisi.com, listed by USOM","first_observed":"2026-11-05T13:41:18.148Z","first_published":"2026-11-05T14:22:51.196Z","source":"usom","source_name":"USOM","under":"uttspetrolofisi.com"}],"url":"https://domainspoof.com/live?show=all&q=mail.uttspetrolofisi.com"},{"hostname":"mainnet-starknet.io","first_observed":"2026-11-05T13:36:04.823Z","first_published":"2026-11-05T14:22:51.196Z","brands":[{"id":"starknet","name":"Starknet","url":"https://domainspoof.com/brands/starknet"}],"dns":"resolved","resolved":["104.21.67.51","172.67.213.210","2606:4700:3033::ac43:d5d2","2606:4700:3037::6815:4333"],"resolved_at":"2026-11-05T13:46:13Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"fa2hr7h5dhje5znxtmvur","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T13:36:04.823Z","first_published":"2026-11-05T14:22:51.196Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/brands/starknet"},{"hostname":"majak-auriorum.pro","first_observed":"2026-11-05T13:21:26.667Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["104.21.24.90","172.67.218.26"],"resolved_at":"2026-11-05T13:29:48Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"fx22txae6yict3zosonlb","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T13:21:26.667Z","first_published":"2026-11-05T14:22:51.196Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=majak-auriorum.pro"},{"hostname":"matbet990.icu","first_observed":"2026-11-05T13:15:39.201Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["104.21.94.109","172.67.222.185"],"resolved_at":"2026-11-05T13:26:27Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"fs2ms7jhhexaysyri4lx7","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T13:15:39.201Z","first_published":"2026-11-05T14:22:51.196Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/matbet990.icu/"}],"url":"https://domainspoof.com/live?show=all&q=matbet990.icu"},{"hostname":"mathscinet.imath.kiev.ua","first_observed":"2026-11-05T13:41:18.148Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["194.44.31.54"],"resolved_at":"2026-11-05T13:41:51Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"f4ygwqgjbmpdw4xhkmowh","kind":"reported_domain","summary":"Under imath.kiev.ua, reported by PhishDestroy","first_observed":"2026-11-05T13:41:18.148Z","first_published":"2026-11-05T14:22:51.196Z","source":"phishdestroy","source_name":"PhishDestroy","under":"imath.kiev.ua","source_url":"https://phishdestroy.io/domain/imath.kiev.ua/"}],"url":"https://domainspoof.com/live?show=all&q=mathscinet.imath.kiev.ua"},{"hostname":"mcga0e.xyz","first_observed":"2026-11-05T13:51:49.934Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["104.21.95.158","172.67.145.232"],"resolved_at":"2026-11-05T13:55:35Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"fkep2wrh5o5angiyyseiu","kind":"reported_domain","summary":"Listed by NPA 165 (e-commerce)","first_observed":"2026-11-05T13:51:49.934Z","first_published":"2026-11-05T14:22:51.196Z","source":"npa","source_name":"NPA 165","claim":{"category":"e-commerce"}}],"url":"https://domainspoof.com/live?show=all&q=mcga0e.xyz"},{"hostname":"meer-equityaris.com","first_observed":"2026-11-05T13:31:22.324Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["104.21.1.198","172.67.129.225"],"resolved_at":"2026-11-05T13:36:08Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"ffoqh3p2s4vsm7jkhtvoq","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T13:31:22.324Z","first_published":"2026-11-05T14:22:51.196Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=meer-equityaris.com"},{"hostname":"menjoivrednik.com","first_observed":"2026-11-05T13:31:22.324Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["104.21.1.35","172.67.186.128"],"resolved_at":"2026-11-05T13:36:08Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"f3whv5w3c4am653sveclh","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T13:31:22.324Z","first_published":"2026-11-05T14:22:51.196Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=menjoivrednik.com"},{"hostname":"menteautonoma-it.com","first_observed":"2026-11-05T13:26:11.391Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["104.21.36.152","172.67.196.116"],"resolved_at":"2026-11-05T13:32:31Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"f4vhojudwyqpjwgh76w74","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T13:26:11.391Z","first_published":"2026-11-05T14:22:51.196Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=menteautonoma-it.com"},{"hostname":"meow.xn--jp8h.de5.net","first_observed":"2026-11-05T13:51:49.934Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["104.21.20.138","172.67.192.241"],"resolved_at":"2026-11-05T13:55:35Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"ftcgcit7uvl2bzm5zoa3v","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T13:51:49.934Z","first_published":"2026-11-05T14:22:51.196Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/meow.xn--jp8h.de5.net/"}],"url":"https://domainspoof.com/live?show=all&q=meow.xn--jp8h.de5.net"},{"hostname":"mercadopago-premios.click","first_observed":"2026-11-05T13:32:31.515Z","first_published":"2026-11-05T14:22:51.196Z","brands":[{"id":"mercado-pago","name":"Mercado Pago","url":"https://domainspoof.com/brands/mercado-pago"}],"dns":"not_found","resolved":["69.164.250.130"],"resolved_at":"2026-11-05T14:33:25Z","dns_checked_at":"2026-11-06T16:36:14.000Z","findings":[{"id":"f2zz65qkv4grsyhydjty3","kind":"phishing_infrastructure","summary":"Resolved to 69.164.250.130, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T13:32:31.515Z","first_published":"2026-11-05T14:22:51.196Z","address":"69.164.250.130","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/mercado-pago"},{"hostname":"merkezbankasi-ai.com","first_observed":"2026-11-05T14:16:16.922Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["104.21.35.211","172.67.179.225","2606:4700:3030::ac43:b3e1","2606:4700:3036::6815:23d3"],"resolved_at":"2026-11-05T14:21:47Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"fxltt3z3qub5eamf3w3yq","kind":"reported_domain","summary":"Listed by USOM","first_observed":"2026-11-05T14:16:16.922Z","first_published":"2026-11-05T14:22:51.196Z","source":"usom","source_name":"USOM"}],"url":"https://domainspoof.com/live?show=all&q=merkezbankasi-ai.com"},{"hostname":"mhrs-onlinerndvu.sbs","first_observed":"2026-11-05T14:16:22.656Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["104.21.77.187","172.67.211.41"],"resolved_at":"2026-11-05T14:20:31Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"fm3sqlzmnmsdzo7zcwlrj","kind":"reported_domain","summary":"Listed by USOM","first_observed":"2026-11-05T14:16:22.656Z","first_published":"2026-11-05T14:22:51.196Z","source":"usom","source_name":"USOM"}],"url":"https://domainspoof.com/live?show=all&q=mhrs-onlinerndvu.sbs"},{"hostname":"mhssrawga.buzz","first_observed":"2026-11-05T14:16:16.922Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["104.21.27.191","172.67.143.119","2606:4700:3030::6815:1bbf","2606:4700:3031::ac43:8f77"],"resolved_at":"2026-11-05T14:21:47Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"ft3ulj2q7gts3owninjpb","kind":"reported_domain","summary":"Listed by USOM","first_observed":"2026-11-05T14:16:16.922Z","first_published":"2026-11-05T14:22:51.196Z","source":"usom","source_name":"USOM"}],"url":"https://domainspoof.com/live?show=all&q=mhssrawga.buzz"},{"hostname":"mhssrawga.cfd","first_observed":"2026-11-05T14:16:16.922Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"no_address","resolved":[],"resolved_at":"2026-11-05T14:21:47Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"f6ed6rkky6dhqcc73fpio","kind":"reported_domain","summary":"Listed by USOM","first_observed":"2026-11-05T14:16:16.922Z","first_published":"2026-11-05T14:22:51.196Z","source":"usom","source_name":"USOM"}],"url":"https://domainspoof.com/live?show=all&q=mhssrawga.cfd"},{"hostname":"migrate-heimanetwork.live","first_observed":"2026-11-05T14:11:05.168Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["104.21.81.130","172.67.160.232"],"resolved_at":"2026-11-05T14:11:43Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"fsqh7vsaa35idylqbddpy","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T14:11:05.168Z","first_published":"2026-11-05T14:22:51.196Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=migrate-heimanetwork.live"},{"hostname":"mining-ai.digital","first_observed":"2026-11-05T14:11:05.168Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["104.21.44.217","172.67.203.239"],"resolved_at":"2026-11-05T14:11:43Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"ftbrnvarc7esl3cbb5y5e","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T14:11:05.168Z","first_published":"2026-11-05T14:22:51.196Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=mining-ai.digital"},{"hostname":"moltenevent.net","first_observed":"2026-11-05T13:41:18.148Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["104.21.90.188","172.67.159.200"],"resolved_at":"2026-11-05T13:41:51Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"f5jxccjsc6ymlrsvn2iom","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T13:41:18.148Z","first_published":"2026-11-05T14:22:51.196Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/moltenevent.net/"}],"url":"https://domainspoof.com/live?show=all&q=moltenevent.net"},{"hostname":"monad-allocations.xyz","first_observed":"2026-11-05T13:21:26.667Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["104.21.48.23","172.67.176.31"],"resolved_at":"2026-11-05T13:29:49Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"fvvjyilzcz6rlq5cd2qlw","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T13:21:26.667Z","first_published":"2026-11-05T14:22:51.196Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=monad-allocations.xyz"},{"hostname":"monitrex-ai-rs.com","first_observed":"2026-11-05T13:26:11.391Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["104.21.4.161","172.67.132.63"],"resolved_at":"2026-11-05T13:32:31Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"fiswcjgydefga5wjrnw6i","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T13:26:11.391Z","first_published":"2026-11-05T14:22:51.196Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=monitrex-ai-rs.com"},{"hostname":"moonscan.click","first_observed":"2026-11-05T14:11:05.168Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["170.75.167.42"],"resolved_at":"2026-11-05T14:11:43Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"fbr2e7k3ipxqgnhkjtmgs","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T14:11:05.168Z","first_published":"2026-11-05T14:22:51.196Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/moonscan.click/"}],"url":"https://domainspoof.com/live?show=all&q=moonscan.click"},{"hostname":"morvessalintrava.com","first_observed":"2026-11-05T13:21:26.667Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["104.21.7.27","172.67.135.169"],"resolved_at":"2026-11-05T13:29:49Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"fmqsxn7feui77rdckppwj","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T13:21:26.667Z","first_published":"2026-11-05T14:22:51.196Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/morvessalintrava.com/"}],"url":"https://domainspoof.com/live?show=all&q=morvessalintrava.com"},{"hostname":"mrmarcuspeterlascelles.sbs","first_observed":"2026-11-05T13:46:34.425Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["104.21.61.202","172.67.214.113"],"resolved_at":"2026-11-05T13:52:02Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"ffeoswsstpewhldtln7x2","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T13:46:34.425Z","first_published":"2026-11-05T14:22:51.196Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/mrmarcuspeterlascelles.sbs/"}],"url":"https://domainspoof.com/live?show=all&q=mrmarcuspeterlascelles.sbs"},{"hostname":"mshidb.shop","first_observed":"2026-11-05T14:11:05.168Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["13.248.213.45","76.223.67.189"],"resolved_at":"2026-11-05T14:11:43Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"fumkhfsv7hhdxno7urxxa","kind":"reported_domain","summary":"Listed by NPA 165 (e-commerce)","first_observed":"2026-11-05T14:11:05.168Z","first_published":"2026-11-05T14:22:51.196Z","source":"npa","source_name":"NPA 165","claim":{"category":"e-commerce"}}],"url":"https://domainspoof.com/live?show=all&q=mshidb.shop"},{"hostname":"mybemii.pro","first_observed":"2026-11-05T14:16:22.656Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["104.21.31.219","172.67.180.3"],"resolved_at":"2026-11-05T14:20:32Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"fj7mrmcp5hfbrz7houvky","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T14:16:22.656Z","first_published":"2026-11-05T14:22:51.196Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=mybemii.pro"},{"hostname":"myrentixaiapp.net","first_observed":"2026-11-05T14:16:22.656Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["104.21.81.165","172.67.145.8"],"resolved_at":"2026-11-05T14:20:32Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"f3omwpu45oph5wvsw6cjx","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T14:16:22.656Z","first_published":"2026-11-05T14:22:51.196Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=myrentixaiapp.net"},{"hostname":"mytrixhalogpt-review.net","first_observed":"2026-11-05T13:46:34.425Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["104.21.20.144","172.67.192.248"],"resolved_at":"2026-11-05T13:52:02Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"f5zll4lrpx4piswiawynk","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T13:46:34.425Z","first_published":"2026-11-05T14:22:51.196Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=mytrixhalogpt-review.net"},{"hostname":"nadhodnex-cz.com","first_observed":"2026-11-05T13:26:11.391Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["104.21.63.23","172.67.142.146"],"resolved_at":"2026-11-05T13:32:32Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"ffkvbyjrnexo2klymwyoy","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T13:26:11.391Z","first_published":"2026-11-05T14:22:51.196Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=nadhodnex-cz.com"},{"hostname":"nautilerendivo-fr.live","first_observed":"2026-11-05T13:15:39.201Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["104.21.3.221","172.67.153.158"],"resolved_at":"2026-11-05T13:26:28Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"f426qgjznxqr4lbhyou76","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T13:15:39.201Z","first_published":"2026-11-05T14:22:51.196Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=nautilerendivo-fr.live"},{"hostname":"nazvelqorn-es.live","first_observed":"2026-11-05T14:11:05.168Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["104.21.59.67","172.67.217.152"],"resolved_at":"2026-11-05T14:11:43Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"fis5fid2r77czcsovhgkd","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T14:11:05.168Z","first_published":"2026-11-05T14:22:51.196Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=nazvelqorn-es.live"},{"hostname":"nazvelqorn-pt.live","first_observed":"2026-11-05T13:56:59.803Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["104.21.52.82","172.67.196.237"],"resolved_at":"2026-11-05T13:59:49Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"fanqhithegwdmug57n5iw","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T13:56:59.803Z","first_published":"2026-11-05T14:22:51.196Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=nazvelqorn-pt.live"},{"hostname":"nembo-crescitone.live","first_observed":"2026-11-05T13:21:26.667Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["104.21.1.24","172.67.151.224"],"resolved_at":"2026-11-05T13:29:50Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"fjp6deiuic7vi64fovzrh","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T13:21:26.667Z","first_published":"2026-11-05T14:22:51.196Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=nembo-crescitone.live"},{"hostname":"net-account.org","first_observed":"2026-11-05T13:36:04.823Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["104.21.91.190","172.67.178.91"],"resolved_at":"2026-11-05T13:46:14Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"fqm3wf6cgsxujedndvr3b","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T13:36:04.823Z","first_published":"2026-11-05T14:22:51.196Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=net-account.org"},{"hostname":"nextgenerationinnovationplatform.cryptopayment.xyz","first_observed":"2026-11-05T13:51:49.934Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["143.244.211.82"],"resolved_at":"2026-11-05T13:55:35Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"ffdlr43sxwdwiwusolpyf","kind":"reported_domain","summary":"Under cryptopayment.xyz, listed by MetaMask","first_observed":"2026-11-05T13:51:49.934Z","first_published":"2026-11-05T14:22:51.196Z","source":"metamask","source_name":"MetaMask","under":"cryptopayment.xyz"}],"url":"https://domainspoof.com/live?show=all&q=nextgenerationinnovationplatform.cryptopayment.xyz"},{"hostname":"nft-og.casa","first_observed":"2026-11-05T14:16:22.656Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"no_address","resolved":[],"resolved_at":"2026-11-05T14:20:32Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"fiemqdjofwg2nvzshv57q","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T14:16:22.656Z","first_published":"2026-11-05T14:22:51.196Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=nft-og.casa"},{"hostname":"nidocapitorio.live","first_observed":"2026-11-05T13:41:18.148Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["104.21.82.230","172.67.207.236"],"resolved_at":"2026-11-05T13:41:51Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"f33iao2ze6opvb53oqbaz","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T13:41:18.148Z","first_published":"2026-11-05T14:22:51.196Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=nidocapitorio.live"},{"hostname":"nil-allocation.xyz","first_observed":"2026-11-05T13:56:59.803Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["104.21.24.44","172.67.216.199"],"resolved_at":"2026-11-05T13:59:49Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"f54hhm7xgczlt5fm7jjlt","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T13:56:59.803Z","first_published":"2026-11-05T14:22:51.196Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=nil-allocation.xyz"},{"hostname":"nitivalia-pt.com","first_observed":"2026-11-05T13:10:48.629Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["104.21.40.34","172.67.174.227"],"resolved_at":"2026-11-05T13:18:08Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"fmb4u6cdhvzt5jg6fusdr","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T13:10:48.629Z","first_published":"2026-11-05T14:22:51.196Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=nitivalia-pt.com"},{"hostname":"nobil-zestriune.com","first_observed":"2026-11-05T13:26:11.391Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["104.21.54.93","172.67.137.185"],"resolved_at":"2026-11-05T13:32:32Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"fv77l6wji7upbx7weet6w","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T13:26:11.391Z","first_published":"2026-11-05T14:22:51.196Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=nobil-zestriune.com"},{"hostname":"noiantebs.shop","first_observed":"2026-11-05T13:51:49.934Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["104.21.6.200","172.67.135.61"],"resolved_at":"2026-11-05T13:55:35Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"fl5zbeohtpbozvh2kgxgh","kind":"reported_domain","summary":"Listed by NPA 165 (finance and insurance)","first_observed":"2026-11-05T13:51:49.934Z","first_published":"2026-11-05T14:22:51.196Z","source":"npa","source_name":"NPA 165","claim":{"category":"finance and insurance"}}],"url":"https://domainspoof.com/live?show=all&q=noiantebs.shop"},{"hostname":"nordlys-ai.info","first_observed":"2026-11-05T13:21:26.667Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["104.21.79.144","172.67.146.70"],"resolved_at":"2026-11-05T13:22:02Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"ftasmojaenkbgbvib7xwb","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T13:21:26.667Z","first_published":"2026-11-05T14:22:51.196Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=nordlys-ai.info"},{"hostname":"obj.wearedevs.net","first_observed":"2026-11-05T14:16:22.656Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["104.26.6.147","104.26.7.147","172.67.71.2"],"resolved_at":"2026-11-05T14:20:32Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"fy6mnxztkzw253k7uuini","kind":"reported_domain","summary":"Under wearedevs.net, reported by PhishDestroy","first_observed":"2026-11-05T14:16:22.656Z","first_published":"2026-11-05T14:22:51.196Z","source":"phishdestroy","source_name":"PhishDestroy","under":"wearedevs.net","source_url":"https://phishdestroy.io/domain/wearedevs.net/"}],"url":"https://domainspoof.com/live?show=all&q=obj.wearedevs.net"},{"hostname":"ochaeeid.com","first_observed":"2026-11-05T14:11:05.168Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["104.21.16.8","172.67.165.165"],"resolved_at":"2026-11-05T14:11:43Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"f4zuqchnygdfc3lmkr34q","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T14:11:05.168Z","first_published":"2026-11-05T14:22:51.196Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=ochaeeid.com"},{"hostname":"odel.agndatacom.com","first_observed":"2026-11-05T13:21:26.667Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["185.53.179.136"],"resolved_at":"2026-11-05T13:22:02Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"f4szuondl6ywuonqpkk46","kind":"reported_domain","summary":"Under agndatacom.com, listed by MetaMask","first_observed":"2026-11-05T13:21:26.667Z","first_published":"2026-11-05T14:22:51.196Z","source":"metamask","source_name":"MetaMask","under":"agndatacom.com"}],"url":"https://domainspoof.com/live?show=all&q=odel.agndatacom.com"},{"hostname":"olasdelcampo.com","first_observed":"2026-11-05T13:31:22.324Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["104.21.7.106","172.67.130.30"],"resolved_at":"2026-11-05T13:36:13Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"fq2msy4dw7v3de6sxksxh","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T13:31:22.324Z","first_published":"2026-11-05T14:22:51.196Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=olasdelcampo.com"},{"hostname":"onboarding.androidloading.com","first_observed":"2026-11-05T13:41:18.148Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["185.178.208.191"],"resolved_at":"2026-11-05T13:41:51Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"fusludx22nykniqoidzor","kind":"reported_domain","summary":"Under androidloading.com, reported by PhishDestroy","first_observed":"2026-11-05T13:41:18.148Z","first_published":"2026-11-05T14:22:51.196Z","source":"phishdestroy","source_name":"PhishDestroy","under":"androidloading.com","source_url":"https://phishdestroy.io/domain/androidloading.com/"}],"url":"https://domainspoof.com/live?show=all&q=onboarding.androidloading.com"},{"hostname":"onchain-seli.com","first_observed":"2026-11-05T13:51:49.934Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["104.21.78.99","172.67.220.52"],"resolved_at":"2026-11-05T13:55:37Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"fu5xuvraeiysk3pjkbp7w","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T13:51:49.934Z","first_published":"2026-11-05T14:22:51.196Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=onchain-seli.com"},{"hostname":"ondofinance.cfd","first_observed":"2026-11-05T13:41:18.148Z","first_published":"2026-11-05T14:22:51.196Z","brands":[{"id":"ondo-finance","name":"Ondo Finance","url":"https://domainspoof.com/brands/ondo-finance"}],"dns":"resolved","resolved":["104.21.83.109","172.67.223.120","2606:4700:3031::ac43:df78","2606:4700:3032::6815:536d"],"resolved_at":"2026-11-05T13:41:51Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"fiy32dj656zh7xnlk2z2v","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T13:41:18.148Z","first_published":"2026-11-05T14:22:51.196Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/brands/ondo-finance"},{"hostname":"onlinesepet.xyz","first_observed":"2026-11-05T14:16:16.922Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["64.89.160.238"],"resolved_at":"2026-11-05T14:21:47Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"fnnmpyb3urawgmlryudq7","kind":"reported_domain","summary":"Listed by USOM","first_observed":"2026-11-05T14:16:16.922Z","first_published":"2026-11-05T14:22:51.196Z","source":"usom","source_name":"USOM"}],"url":"https://domainspoof.com/live?show=all&q=onlinesepet.xyz"},{"hostname":"orangemoti.rest","first_observed":"2026-11-05T14:16:22.656Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["104.21.73.80","172.67.189.23"],"resolved_at":"2026-11-05T14:20:32Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"f3gyyamcjxays4ibwfwhi","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T14:16:22.656Z","first_published":"2026-11-05T14:22:51.196Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=orangemoti.rest"},{"hostname":"orven-logrel.net","first_observed":"2026-11-05T13:10:48.629Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["104.21.13.107","172.67.199.214"],"resolved_at":"2026-11-05T13:18:13Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"fkza7swal6b7leadkbrnz","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T13:10:48.629Z","first_published":"2026-11-05T14:22:51.196Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=orven-logrel.net"},{"hostname":"otpuss.top","first_observed":"2026-11-05T13:21:26.667Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["43.153.72.244"],"resolved_at":"2026-11-05T13:22:02Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"fcq7gn6yqwrn6unm2cqcv","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T13:21:26.667Z","first_published":"2026-11-05T14:22:51.196Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=otpuss.top"},{"hostname":"pages.revivalpoint.com","first_observed":"2026-11-05T13:41:18.148Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["104.26.2.165","104.26.3.165","172.67.68.93"],"resolved_at":"2026-11-05T13:41:51Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"fedeyenen5gxnmt5cwq4e","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T13:41:18.148Z","first_published":"2026-11-05T14:22:51.196Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/pages.revivalpoint.com/"}],"url":"https://domainspoof.com/live?show=all&q=pages.revivalpoint.com"},{"hostname":"patrevance-fr.com","first_observed":"2026-11-05T13:10:48.629Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["104.21.91.247","172.67.182.211"],"resolved_at":"2026-11-05T13:18:13Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"f7nsysur4w363gvu5rh6r","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T13:10:48.629Z","first_published":"2026-11-05T14:22:51.196Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=patrevance-fr.com"},{"hostname":"patrijaugerie.net","first_observed":"2026-11-05T14:05:54.172Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["104.21.14.83","172.67.202.172"],"resolved_at":"2026-11-05T14:06:16Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"frzz6uwzb65z5farp5zdo","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T14:05:54.172Z","first_published":"2026-11-05T14:22:51.196Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=patrijaugerie.net"},{"hostname":"pay-bitrefill.com-cr01-esim-gift.com","first_observed":"2026-11-05T13:06:37.871Z","first_published":"2026-11-05T14:22:51.196Z","brands":[{"id":"bitrefill","name":"Bitrefill","url":"https://domainspoof.com/brands/bitrefill"}],"dns":"resolved","resolved":["62.60.226.39"],"resolved_at":"2026-11-06T14:34:09Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"ftueb5dhuekjtnas2ept6","kind":"spamhaus_drop","summary":"Resolved to 62.60.226.39 on Spamhaus DROP","first_observed":"2026-11-05T13:06:37.871Z","first_published":"2026-11-05T14:22:51.196Z","address":"62.60.226.39","list":"spamhaus_drop","list_name":"Spamhaus DROP"}],"url":"https://domainspoof.com/brands/bitrefill"},{"hostname":"pay.apexnetwork.co","first_observed":"2026-11-05T13:31:22.324Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["104.26.6.194","104.26.7.194","172.67.75.83"],"resolved_at":"2026-11-05T13:36:14Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"ffwpmubvjjcsm3c3b2sgk","kind":"reported_domain","summary":"Under apexnetwork.co, reported by PhishDestroy","first_observed":"2026-11-05T13:31:22.324Z","first_published":"2026-11-05T14:22:51.196Z","source":"phishdestroy","source_name":"PhishDestroy","under":"apexnetwork.co","source_url":"https://phishdestroy.io/domain/apexnetwork.co/"}],"url":"https://domainspoof.com/live?show=all&q=pay.apexnetwork.co"},{"hostname":"pay.pochta.13dot75.cdek.rhxyvcq9vvts2ld9.r.mail.leankoala.com","first_observed":"2026-11-05T14:06:16.479Z","first_published":"2026-11-05T14:22:51.196Z","brands":[{"id":"russian-post","name":"Russian Post","url":"https://domainspoof.com/brands/russian-post"}],"dns":"resolved","resolved":["172.246.243.65"],"resolved_at":"2026-11-06T14:34:09Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"ftmzn2h2nstxx44cz3ofi","kind":"phishing_infrastructure","summary":"Resolved to 172.246.243.65, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T14:06:16.479Z","first_published":"2026-11-05T14:22:51.196Z","address":"172.246.243.65","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/russian-post"},{"hostname":"pay.pochta.2015-12-02-150817.cdek.rhxyvcq9vvts2ld9.r.mail.leankoala.com","first_observed":"2026-11-05T14:06:16.479Z","first_published":"2026-11-05T14:22:51.196Z","brands":[{"id":"russian-post","name":"Russian Post","url":"https://domainspoof.com/brands/russian-post"}],"dns":"resolved","resolved":["172.246.243.65"],"resolved_at":"2026-11-06T14:34:09Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"fyjzgymmqstgvm3xu7vx5","kind":"phishing_infrastructure","summary":"Resolved to 172.246.243.65, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T14:06:16.479Z","first_published":"2026-11-05T14:22:51.196Z","address":"172.246.243.65","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/russian-post"},{"hostname":"pay.sberbank.backend.blablacar.cdek.rhxyvcq9vvts2ld9.r.mail.leankoala.com","first_observed":"2026-11-05T14:06:16.479Z","first_published":"2026-11-05T14:22:51.196Z","brands":[{"id":"blablacar","name":"BlaBlaCar","url":"https://domainspoof.com/brands/blablacar"},{"id":"sberbank","name":"Sberbank","url":"https://domainspoof.com/brands/sberbank"}],"dns":"resolved","resolved":["172.246.243.65"],"resolved_at":"2026-11-06T14:34:09Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"fbkbevqmxmmhyhxyrh5ti","kind":"phishing_infrastructure","summary":"Resolved to 172.246.243.65, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T14:06:16.479Z","first_published":"2026-11-05T14:22:51.196Z","address":"172.246.243.65","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/blablacar"},{"hostname":"pelkruvilanz-es.live","first_observed":"2026-11-05T13:41:18.148Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["104.21.58.148","172.67.204.127"],"resolved_at":"2026-11-05T13:41:51Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"fpdbehtfil4s4nwes7ii5","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T13:41:18.148Z","first_published":"2026-11-05T14:22:51.196Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=pelkruvilanz-es.live"},{"hostname":"photon-ai-es.net","first_observed":"2026-11-05T13:10:48.629Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["104.21.76.225","172.67.201.234"],"resolved_at":"2026-11-05T13:18:14Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"fs3qhu2wb6spu5qj3p3xg","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T13:10:48.629Z","first_published":"2026-11-05T14:22:51.196Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=photon-ai-es.net"},{"hostname":"pickquvo.com","first_observed":"2026-11-05T14:11:05.168Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"no_address","resolved":[],"resolved_at":"2026-11-05T14:11:43Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"fxdlntsb2tmgpwhuvsg2h","kind":"reported_domain","summary":"Listed by NPA 165 (e-commerce)","first_observed":"2026-11-05T14:11:05.168Z","first_published":"2026-11-05T14:22:51.196Z","source":"npa","source_name":"NPA 165","claim":{"category":"e-commerce"}}],"url":"https://domainspoof.com/live?show=all&q=pickquvo.com"},{"hostname":"pl-oferta87344537.click","first_observed":"2026-11-05T13:41:18.148Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"no_address","resolved":[],"resolved_at":"2026-11-05T13:41:51Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"frerz57fwrj2depvczk5u","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T13:41:18.148Z","first_published":"2026-11-05T14:22:51.196Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=pl-oferta87344537.click"},{"hostname":"plperhjuisusir.com","first_observed":"2026-11-05T13:51:49.934Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["104.21.4.114","172.67.132.7"],"resolved_at":"2026-11-05T13:55:37Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"fcaecewldcipyfqw7wmy6","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T13:51:49.934Z","first_published":"2026-11-05T14:22:51.196Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=plperhjuisusir.com"},{"hostname":"plperhjuisusirek.com","first_observed":"2026-11-05T13:15:39.201Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["104.21.60.43","172.67.191.117"],"resolved_at":"2026-11-05T13:26:30Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"fhl5t3746ak7ym2txcona","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T13:15:39.201Z","first_published":"2026-11-05T14:22:51.196Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=plperhjuisusirek.com"},{"hostname":"plperhjuisusirekir.com","first_observed":"2026-11-05T13:46:34.425Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["104.21.11.177","172.67.149.209"],"resolved_at":"2026-11-05T13:52:04Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"fb25geiw2lb73b6xib7uy","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T13:46:34.425Z","first_published":"2026-11-05T14:22:51.196Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=plperhjuisusirekir.com"},{"hostname":"polkavirexuno-pl.live","first_observed":"2026-11-05T13:21:26.667Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["104.21.0.208","172.67.128.72"],"resolved_at":"2026-11-05T13:22:02Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"fb4aks2ijhkftmygywmnh","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T13:21:26.667Z","first_published":"2026-11-05T14:22:51.196Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=polkavirexuno-pl.live"},{"hostname":"polymarketpredictionai.com","first_observed":"2026-11-05T13:46:34.425Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["23.153.104.17"],"resolved_at":"2026-11-05T13:52:04Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"f4pc3mrvm3dryd2d3zvds","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T13:46:34.425Z","first_published":"2026-11-05T14:22:51.196Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/polymarketpredictionai.com/"}],"url":"https://domainspoof.com/live?show=all&q=polymarketpredictionai.com"},{"hostname":"polzentraai-es.live","first_observed":"2026-11-05T14:05:54.172Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["104.21.55.25","172.67.144.35"],"resolved_at":"2026-11-05T14:06:16Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"fyzs3eeuar6humprcy34l","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T14:05:54.172Z","first_published":"2026-11-05T14:22:51.196Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=polzentraai-es.live"},{"hostname":"possamenca-pt.com","first_observed":"2026-11-05T13:26:11.391Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["104.21.33.64","172.67.159.70"],"resolved_at":"2026-11-05T13:32:33Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"flwupcf5oyiykegagphmw","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T13:26:11.391Z","first_published":"2026-11-05T14:22:51.196Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=possamenca-pt.com"},{"hostname":"possecimo-pt.pro","first_observed":"2026-11-05T13:41:18.148Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["104.21.42.97","172.67.160.175"],"resolved_at":"2026-11-05T13:41:51Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"fm7uadwownijeydiswztf","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T13:41:18.148Z","first_published":"2026-11-05T14:22:51.196Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=possecimo-pt.pro"},{"hostname":"presales-blockdag.network","first_observed":"2026-11-05T14:05:54.172Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["104.21.59.3","172.67.210.166"],"resolved_at":"2026-11-05T14:06:16Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"fri35kinpjvpp2kaf2wgj","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T14:05:54.172Z","first_published":"2026-11-05T14:22:51.196Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/presales-blockdag.network/"}],"url":"https://domainspoof.com/live?show=all&q=presales-blockdag.network"},{"hostname":"primorispeak.com","first_observed":"2026-11-05T14:05:54.172Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["104.21.53.230","172.67.219.124"],"resolved_at":"2026-11-05T14:06:16Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"fofzfp2aiid2y2r4yiwv4","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T14:05:54.172Z","first_published":"2026-11-05T14:22:51.196Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=primorispeak.com"},{"hostname":"princepsvault.com","first_observed":"2026-11-05T14:16:22.656Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["104.21.29.109","172.67.171.118"],"resolved_at":"2026-11-05T14:20:33Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"fmajv76atj3vunpxzfuz3","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T14:16:22.656Z","first_published":"2026-11-05T14:22:51.196Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=princepsvault.com"},{"hostname":"prisevance-fr.com","first_observed":"2026-11-05T13:26:11.391Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["104.21.60.151","172.67.197.204"],"resolved_at":"2026-11-05T13:32:33Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"f46iw77omsmnrs4hz4kob","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T13:26:11.391Z","first_published":"2026-11-05T14:22:51.196Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=prisevance-fr.com"},{"hostname":"prizantment-uk.com","first_observed":"2026-11-05T13:26:11.391Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["104.21.69.132","172.67.208.184"],"resolved_at":"2026-11-06T15:29:45Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"ftd4p3ptcxnz3ai3ksxbx","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T13:26:11.391Z","first_published":"2026-11-05T14:22:51.196Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=prizantment-uk.com"},{"hostname":"proposal-onbeam.com","first_observed":"2026-11-05T13:51:49.934Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["104.21.42.211","172.67.166.77"],"resolved_at":"2026-11-05T13:55:37Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"fd7d7pyzqr3ng35372m3m","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T13:51:49.934Z","first_published":"2026-11-05T14:22:51.196Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=proposal-onbeam.com"},{"hostname":"provechalvoes.com","first_observed":"2026-11-05T13:10:48.629Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["104.21.50.197","172.67.210.10"],"resolved_at":"2026-11-05T13:18:14Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"fg4ptgsihzkeaniyhsusy","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T13:10:48.629Z","first_published":"2026-11-05T14:22:51.196Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=provechalvoes.com"},{"hostname":"provestedstake.org","first_observed":"2026-11-05T14:05:54.172Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["104.21.54.28","172.67.222.229"],"resolved_at":"2026-11-05T14:06:16Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"fgk4lkcz3r6evr2gkp5je","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T14:05:54.172Z","first_published":"2026-11-05T14:22:51.196Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=provestedstake.org"},{"hostname":"pudgypengu-support.pages.dev","first_observed":"2026-11-05T13:15:39.201Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["172.66.44.249","172.66.47.7"],"resolved_at":"2026-11-05T13:26:31Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"f4vlg6ybqm3do5wijwofs","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T13:15:39.201Z","first_published":"2026-11-05T14:22:51.196Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=pudgypengu-support.pages.dev"},{"hostname":"pumpairdrop.live","first_observed":"2026-11-05T14:00:40.663Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["104.21.94.98","172.67.221.182"],"resolved_at":"2026-11-05T14:14:37Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"ff6has7hvwa2qj2wvzosw","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T14:00:40.663Z","first_published":"2026-11-05T14:22:51.196Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/pumpairdrop.live/"}],"url":"https://domainspoof.com/live?show=all&q=pumpairdrop.live"},{"hostname":"qavorunexi.org","first_observed":"2026-11-05T13:31:22.324Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["104.21.28.224","172.67.147.190"],"resolved_at":"2026-11-05T13:36:17Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"fptlz34ats22wy3vyuy47","kind":"reported_domain","summary":"Listed by USOM","first_observed":"2026-11-05T13:31:22.324Z","first_published":"2026-11-05T14:22:51.196Z","source":"usom","source_name":"USOM"}],"url":"https://domainspoof.com/live?show=all&q=qavorunexi.org"},{"hostname":"qkhc01.top","first_observed":"2026-11-05T13:26:11.391Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["104.21.81.235","172.67.165.199"],"resolved_at":"2026-11-05T13:32:34Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"fauqk62hecds4vfjepfrj","kind":"reported_domain","summary":"Listed by NPA 165 (transport and delivery)","first_observed":"2026-11-05T13:26:11.391Z","first_published":"2026-11-05T14:22:51.196Z","source":"npa","source_name":"NPA 165","claim":{"category":"transport and delivery"}}],"url":"https://domainspoof.com/live?show=all&q=qkhc01.top"},{"hostname":"quenplane31.site","first_observed":"2026-11-05T13:36:04.823Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["104.21.69.138","172.67.208.249"],"resolved_at":"2026-11-05T13:46:17Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"flksuzez6c3lq4txnjykr","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T13:36:04.823Z","first_published":"2026-11-05T14:22:51.196Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=quenplane31.site"},{"hostname":"qwervty.com","first_observed":"2026-11-05T13:26:11.391Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["104.21.30.33","172.67.150.118"],"resolved_at":"2026-11-05T13:32:34Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"fiigsxeml4u45vgez6r63","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T13:26:11.391Z","first_published":"2026-11-05T14:22:51.196Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/qwervty.com/"}],"url":"https://domainspoof.com/live?show=all&q=qwervty.com"},{"hostname":"rainbet-jeu.ca","first_observed":"2026-11-05T14:00:40.663Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["104.21.25.33","172.67.222.74"],"resolved_at":"2026-11-05T14:14:37Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"fl4xhvqcese6eyg3a3mlw","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T14:00:40.663Z","first_published":"2026-11-05T14:22:51.196Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=rainbet-jeu.ca"},{"hostname":"rainbet-nederland.nl","first_observed":"2026-11-05T13:26:11.391Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["104.21.56.90","172.67.183.52"],"resolved_at":"2026-11-05T13:32:35Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"f4zfzipdkwdlgcvwd3fvo","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T13:26:11.391Z","first_published":"2026-11-05T14:22:51.196Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=rainbet-nederland.nl"},{"hostname":"rainbet-online.it","first_observed":"2026-11-05T13:21:26.667Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["104.21.0.126","172.67.150.245"],"resolved_at":"2026-11-05T13:22:02Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"fm2s2wavzq5yiboqc52mz","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T13:21:26.667Z","first_published":"2026-11-05T14:22:51.196Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=rainbet-online.it"},{"hostname":"rainbet.rs","first_observed":"2026-11-05T13:31:22.324Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["104.21.52.37","172.67.194.202"],"resolved_at":"2026-11-05T13:36:18Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"ficjjhgbafkjbpyamc4mm","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T13:31:22.324Z","first_published":"2026-11-05T14:22:51.196Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=rainbet.rs"},{"hostname":"rainbett.com","first_observed":"2026-11-05T14:11:05.168Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["170.106.159.67"],"resolved_at":"2026-11-05T14:11:49Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"fbhf2p55gz3hqbu7rwzkc","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T14:11:05.168Z","first_published":"2026-11-05T14:22:51.196Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=rainbett.com"},{"hostname":"refundlostfuns.online","first_observed":"2026-11-05T13:36:04.823Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["23.153.104.17"],"resolved_at":"2026-11-05T13:46:17Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"fqlqdaiqkbiifwsaa5sgq","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T13:36:04.823Z","first_published":"2026-11-05T14:22:51.196Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/refundlostfuns.online/"}],"url":"https://domainspoof.com/live?show=all&q=refundlostfuns.online"},{"hostname":"rege-reifungswerk.online","first_observed":"2026-11-05T13:15:39.201Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["104.21.95.47","172.67.143.2"],"resolved_at":"2026-11-05T13:26:32Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"froli2wgocuow5fbdjzpw","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T13:15:39.201Z","first_published":"2026-11-05T14:22:51.196Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=rege-reifungswerk.online"},{"hostname":"rehinlesim-tr.com","first_observed":"2026-11-05T13:26:11.391Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["104.21.20.232","172.67.194.192"],"resolved_at":"2026-11-05T13:32:35Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"fjveuutlzjjnx2maa6t7h","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T13:26:11.391Z","first_published":"2026-11-05T14:22:51.196Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=rehinlesim-tr.com"},{"hostname":"reklam-kurasi.online","first_observed":"2026-11-05T13:10:48.629Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["64.89.160.46"],"resolved_at":"2026-11-05T13:18:16Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"fi2udnyzbgzykrkqkzzdm","kind":"reported_domain","summary":"Listed by USOM","first_observed":"2026-11-05T13:10:48.629Z","first_published":"2026-11-05T14:22:51.196Z","source":"usom","source_name":"USOM"}],"url":"https://domainspoof.com/live?show=all&q=reklam-kurasi.online"},{"hostname":"report-wallet.com","first_observed":"2026-11-05T13:56:59.803Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["104.21.63.92","172.67.145.27"],"resolved_at":"2026-11-05T13:59:50Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"f3fz5vztkvzp3gvdz6wos","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T13:56:59.803Z","first_published":"2026-11-05T14:22:51.196Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/report-wallet.com/"}],"url":"https://domainspoof.com/live?show=all&q=report-wallet.com"},{"hostname":"research.polar-tensor.com","first_observed":"2026-11-05T13:26:11.391Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["5.189.134.86","57.128.187.75","57.129.49.179","193.242.211.59"],"resolved_at":"2026-11-05T13:32:35Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"fwrvngbyq5lu2ni4nw3yp","kind":"reported_domain","summary":"Under polar-tensor.com, listed by MetaMask","first_observed":"2026-11-05T13:26:11.391Z","first_published":"2026-11-05T14:22:51.196Z","source":"metamask","source_name":"MetaMask","under":"polar-tensor.com"}],"url":"https://domainspoof.com/live?show=all&q=research.polar-tensor.com"},{"hostname":"rewadcxa.xyz","first_observed":"2026-11-05T13:10:48.629Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["104.21.91.31","172.67.165.93"],"resolved_at":"2026-11-06T04:32:29Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"flyrldmrjbolv47fbtzbi","kind":"reported_domain","summary":"Listed by NPA 165 (information services)","first_observed":"2026-11-05T13:10:48.629Z","first_published":"2026-11-05T14:22:51.196Z","source":"npa","source_name":"NPA 165","claim":{"category":"information services"}}],"url":"https://domainspoof.com/live?show=all&q=rewadcxa.xyz"},{"hostname":"rijpelheid-be.com","first_observed":"2026-11-05T13:26:11.391Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["104.21.12.210","172.67.132.106"],"resolved_at":"2026-11-05T13:32:35Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"fcrjketja5y37vuv2caix","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T13:26:11.391Z","first_published":"2026-11-05T14:22:51.196Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=rijpelheid-be.com"},{"hostname":"riquecelaspain.live","first_observed":"2026-11-05T13:21:26.667Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["104.21.64.4","172.67.173.183"],"resolved_at":"2026-11-05T13:22:02Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"fxfdymkwwc6vg5xquulth","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T13:21:26.667Z","first_published":"2026-11-05T14:22:51.196Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=riquecelaspain.live"},{"hostname":"rnnkbeo.shop","first_observed":"2026-11-05T13:26:11.391Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["104.21.41.132","172.67.147.95"],"resolved_at":"2026-11-05T13:32:36Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"fy7mljm2cv3lclooleife","kind":"reported_domain","summary":"Listed by NPA 165 (finance and insurance)","first_observed":"2026-11-05T13:26:11.391Z","first_published":"2026-11-05T14:22:51.196Z","source":"npa","source_name":"NPA 165","claim":{"category":"finance and insurance"}}],"url":"https://domainspoof.com/live?show=all&q=rnnkbeo.shop"},{"hostname":"rwyrtc.shop","first_observed":"2026-11-05T13:36:04.823Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["104.21.57.45","172.67.189.34"],"resolved_at":"2026-11-05T13:46:18Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"feah5yawa3tsxquxsikob","kind":"reported_domain","summary":"Listed by NPA 165 (finance and insurance)","first_observed":"2026-11-05T13:36:04.823Z","first_published":"2026-11-05T14:22:51.196Z","source":"npa","source_name":"NPA 165","claim":{"category":"finance and insurance"}}],"url":"https://domainspoof.com/live?show=all&q=rwyrtc.shop"},{"hostname":"s-aglkrhbrlr.cfd","first_observed":"2026-11-05T14:16:16.922Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["104.21.22.172","172.67.205.243","2606:4700:3033::6815:16ac","2606:4700:3037::ac43:cdf3"],"resolved_at":"2026-11-05T14:21:47Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"frb3aho4yhcfm2emnkrxt","kind":"reported_domain","summary":"Listed by USOM","first_observed":"2026-11-05T14:16:16.922Z","first_published":"2026-11-05T14:22:51.196Z","source":"usom","source_name":"USOM"}],"url":"https://domainspoof.com/live?show=all&q=s-aglkrhbrlr.cfd"},{"hostname":"savryn-pulseai.net","first_observed":"2026-11-05T13:31:22.324Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["104.21.35.200","172.67.179.26"],"resolved_at":"2026-11-05T13:36:20Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"faafu5pc5cqjvi63fcpga","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T13:31:22.324Z","first_published":"2026-11-05T14:22:51.196Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=savryn-pulseai.net"},{"hostname":"scellerance-ch.com","first_observed":"2026-11-05T13:10:48.629Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["104.21.52.92","172.67.197.144"],"resolved_at":"2026-11-05T13:18:19Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"fpdi5mabmst3ymusiursr","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T13:10:48.629Z","first_published":"2026-11-05T14:22:51.196Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=scellerance-ch.com"},{"hostname":"sdfadsff1231sfdsaf.cfd","first_observed":"2026-11-05T14:16:16.922Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["142.93.170.24"],"resolved_at":"2026-11-05T14:21:47Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"fjbt7ghawkf3uxzc5eh42","kind":"reported_domain","summary":"Listed by USOM","first_observed":"2026-11-05T14:16:16.922Z","first_published":"2026-11-05T14:22:51.196Z","source":"usom","source_name":"USOM"}],"url":"https://domainspoof.com/live?show=all&q=sdfadsff1231sfdsaf.cfd"},{"hostname":"sepetimburada.xyz","first_observed":"2026-11-05T14:16:16.922Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["64.89.160.238"],"resolved_at":"2026-11-05T14:21:47Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"fmls6pxkfu6kzdari7jxj","kind":"reported_domain","summary":"Listed by USOM","first_observed":"2026-11-05T14:16:16.922Z","first_published":"2026-11-05T14:22:51.196Z","source":"usom","source_name":"USOM"}],"url":"https://domainspoof.com/live?show=all&q=sepetimburada.xyz"},{"hostname":"setup.zenavlico.cyou","first_observed":"2026-11-05T13:56:59.803Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["95.85.244.13"],"resolved_at":"2026-11-05T13:59:52Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"fr34uw6a7bgml6qzrg33u","kind":"reported_domain","summary":"Under zenavlico.cyou, listed by CERT Polska","first_observed":"2026-11-05T13:56:59.803Z","first_published":"2026-11-05T14:22:51.196Z","source":"cert_polska","source_name":"CERT Polska","under":"zenavlico.cyou"}],"url":"https://domainspoof.com/live?show=all&q=setup.zenavlico.cyou"},{"hostname":"sevcukolina.com","first_observed":"2026-11-05T13:31:22.324Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["104.21.26.247","172.67.139.174"],"resolved_at":"2026-11-05T13:36:24Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"f6rauvc6iw4lo5tsdifqp","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T13:31:22.324Z","first_published":"2026-11-05T14:22:51.196Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=sevcukolina.com"},{"hostname":"sharestead-ai.com","first_observed":"2026-11-05T13:10:48.629Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["104.21.89.130","172.67.189.72"],"resolved_at":"2026-11-05T13:18:21Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"fvtglmb6frd7pcxc25vpr","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T13:10:48.629Z","first_published":"2026-11-05T14:22:51.196Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=sharestead-ai.com"},{"hostname":"silent-pathway.com","first_observed":"2026-11-05T13:56:59.803Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["104.21.86.176","172.67.223.75"],"resolved_at":"2026-11-05T13:59:52Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"fad5megbrwk5ttmmk6n3m","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T13:56:59.803Z","first_published":"2026-11-05T14:22:51.196Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=silent-pathway.com"},{"hostname":"silnkapitrend.live","first_observed":"2026-11-05T14:16:22.656Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["104.21.50.175","172.67.164.182"],"resolved_at":"2026-11-05T14:16:59Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"fk5yardbzf7ifvpln2sda","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T14:16:22.656Z","first_published":"2026-11-05T14:22:51.196Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=silnkapitrend.live"},{"hostname":"sitemvgu4nlkkybe.xyz","first_observed":"2026-11-05T13:36:04.823Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["104.21.32.244","172.67.188.79"],"resolved_at":"2026-11-05T13:46:19Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"f3ebn6lce74bwhl2jburs","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T13:36:04.823Z","first_published":"2026-11-05T14:22:51.196Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=sitemvgu4nlkkybe.xyz"},{"hostname":"slovaraix.pro","first_observed":"2026-11-05T13:21:26.667Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["104.21.69.242","172.67.215.205"],"resolved_at":"2026-11-05T13:22:03Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"f4dp6jmptf3u3knn4vpzg","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T13:21:26.667Z","first_published":"2026-11-05T14:22:51.196Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=slovaraix.pro"},{"hostname":"sobrecosta.com","first_observed":"2026-11-05T13:41:18.148Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["104.21.25.104","172.67.134.3"],"resolved_at":"2026-11-05T13:41:53Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"fyxtyroynlckqwlrgetvt","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T13:41:18.148Z","first_published":"2026-11-05T14:22:51.196Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=sobrecosta.com"},{"hostname":"socoteluraro.com","first_observed":"2026-11-05T13:26:11.391Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["104.21.50.157","172.67.164.33"],"resolved_at":"2026-11-05T13:32:39Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"fuomujdqfaqkwvajok6sq","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T13:26:11.391Z","first_published":"2026-11-05T14:22:51.196Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=socoteluraro.com"},{"hostname":"sol-bonus-site.com","first_observed":"2026-11-05T13:26:11.391Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["104.21.44.245","172.67.205.225"],"resolved_at":"2026-11-05T13:32:39Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"fhg2bcisjarxgvjzdecaw","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T13:26:11.391Z","first_published":"2026-11-05T14:22:51.196Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=sol-bonus-site.com"},{"hostname":"sol-official-casino.com","first_observed":"2026-11-05T14:16:22.656Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["104.21.38.211","172.67.168.124"],"resolved_at":"2026-11-05T14:16:59Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"fyr272q2wcspydru3nopp","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T14:16:22.656Z","first_published":"2026-11-05T14:22:51.196Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=sol-official-casino.com"},{"hostname":"sol-spin.com","first_observed":"2026-11-05T13:21:26.667Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["104.21.76.221","172.67.201.122"],"resolved_at":"2026-11-05T13:22:08Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"fixxu5m2mc2dvcu3otxfg","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T13:21:26.667Z","first_published":"2026-11-05T14:22:51.196Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=sol-spin.com"},{"hostname":"sp19ct7-furev-biz-kalen-doris.pages.dev","first_observed":"2026-11-05T13:41:18.148Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["172.66.44.244","172.66.47.12"],"resolved_at":"2026-11-05T13:41:53Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"fumcnilfkutldi5luu5x4","kind":"reported_domain","summary":"Reported by PhishTank","first_observed":"2026-11-05T13:41:18.148Z","first_published":"2026-11-05T14:22:51.196Z","source":"phishtank","source_name":"PhishTank","source_url":"https://phishtank.org/phish_detail.php?phish_id=9479504"}],"url":"https://domainspoof.com/live?show=all&q=sp19ct7-furev-biz-kalen-doris.pages.dev"},{"hostname":"sp19ct7-furex-biz-kalem-voris.pages.dev","first_observed":"2026-11-05T13:15:39.201Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["172.66.44.131","172.66.47.125"],"resolved_at":"2026-11-05T13:26:34Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"fqho7dctpxlvye42fuckw","kind":"reported_domain","summary":"Reported by PhishTank","first_observed":"2026-11-05T13:15:39.201Z","first_published":"2026-11-05T14:22:51.196Z","source":"phishtank","source_name":"PhishTank","source_url":"https://phishtank.org/phish_detail.php?phish_id=9479506"}],"url":"https://domainspoof.com/live?show=all&q=sp19ct7-furex-biz-kalem-voris.pages.dev"},{"hostname":"sp19ct7-kuref-biz-vasem-doril.pages.dev","first_observed":"2026-11-05T13:46:34.425Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["172.66.44.104","172.66.47.152"],"resolved_at":"2026-11-05T13:46:56Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"fnq72gb5bvtfevfua4n5k","kind":"reported_domain","summary":"Reported by PhishTank","first_observed":"2026-11-05T13:46:34.425Z","first_published":"2026-11-05T14:22:51.196Z","source":"phishtank","source_name":"PhishTank","source_url":"https://phishtank.org/phish_detail.php?phish_id=9479525"}],"url":"https://domainspoof.com/live?show=all&q=sp19ct7-kuref-biz-vasem-doril.pages.dev"},{"hostname":"sp19ct7-lurex-biz-marek-dofis.pages.dev","first_observed":"2026-11-05T13:51:49.934Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["172.66.44.144","172.66.47.112"],"resolved_at":"2026-11-05T13:55:40Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"fhkwqv5yjp2dadzuejk6w","kind":"reported_domain","summary":"Reported by PhishTank","first_observed":"2026-11-05T13:51:49.934Z","first_published":"2026-11-05T14:22:51.196Z","source":"phishtank","source_name":"PhishTank","source_url":"https://phishtank.org/phish_detail.php?phish_id=9479567"}],"url":"https://domainspoof.com/live?show=all&q=sp19ct7-lurex-biz-marek-dofis.pages.dev"},{"hostname":"sparelsik-se.com","first_observed":"2026-11-05T13:10:48.629Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["104.21.61.125","172.67.210.131"],"resolved_at":"2026-11-05T13:18:21Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"flruquhs4ootzfxexzki5","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T13:10:48.629Z","first_published":"2026-11-05T14:22:51.196Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=sparelsik-se.com"},{"hostname":"sscalping.vip","first_observed":"2026-11-05T13:10:48.629Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["102.204.222.8"],"resolved_at":"2026-11-05T13:18:21Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"far3tcpm252huzmo332ia","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T13:10:48.629Z","first_published":"2026-11-05T14:22:51.196Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/sscalping.vip/"}],"url":"https://domainspoof.com/live?show=all&q=sscalping.vip"},{"hostname":"sso-ndex-login-us.pages.dev","first_observed":"2026-11-05T13:51:49.934Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["172.66.45.34","172.66.46.222"],"resolved_at":"2026-11-05T13:55:40Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"fix2eala5vzj53datovwu","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T13:51:49.934Z","first_published":"2026-11-05T14:22:51.196Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=sso-ndex-login-us.pages.dev"},{"hostname":"stabilonwallet.eu","first_observed":"2026-11-05T13:21:26.667Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["104.21.8.48","172.67.156.216"],"resolved_at":"2026-11-05T13:22:08Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"f7vsojbfgg6bsombhkbf4","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T13:21:26.667Z","first_published":"2026-11-05T14:22:51.196Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=stabilonwallet.eu"},{"hostname":"staerkvaekstelse.net","first_observed":"2026-11-05T13:10:48.629Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["104.21.67.72","172.67.217.130"],"resolved_at":"2026-11-05T13:18:21Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"fssnlt53fvi3wyx65dwtn","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T13:10:48.629Z","first_published":"2026-11-05T14:22:51.196Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=staerkvaekstelse.net"},{"hostname":"stats.socialvisor.ru","first_observed":"2026-11-05T13:10:48.629Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["91.215.41.91"],"resolved_at":"2026-11-05T13:18:22Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"fzmk2tneaielmlw257byo","kind":"reported_domain","summary":"Under socialvisor.ru, reported by PhishDestroy","first_observed":"2026-11-05T13:10:48.629Z","first_published":"2026-11-05T14:22:51.196Z","source":"phishdestroy","source_name":"PhishDestroy","under":"socialvisor.ru","source_url":"https://phishdestroy.io/domain/socialvisor.ru/"}],"url":"https://domainspoof.com/live?show=all&q=stats.socialvisor.ru"},{"hostname":"steady-currency.com","first_observed":"2026-11-05T13:21:26.667Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["104.21.51.72","172.67.176.243"],"resolved_at":"2026-11-05T13:22:08Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"f5ouhubows4izawe52kw4","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T13:21:26.667Z","first_published":"2026-11-05T14:22:51.196Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=steady-currency.com"},{"hostname":"steg-sparvurtum.online","first_observed":"2026-11-05T13:31:22.324Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["104.21.59.91","172.67.221.220"],"resolved_at":"2026-11-05T13:36:25Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"fgeqlktaqfug6yolppr6i","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T13:31:22.324Z","first_published":"2026-11-05T14:22:51.196Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=steg-sparvurtum.online"},{"hostname":"steuruck-holdings-de.com","first_observed":"2026-11-05T13:10:48.629Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["104.21.37.60","172.67.205.2"],"resolved_at":"2026-11-05T13:18:22Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"fwubsroijkax6dln2ypek","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T13:10:48.629Z","first_published":"2026-11-05T14:22:51.196Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=steuruck-holdings-de.com"},{"hostname":"stratisventures.com","first_observed":"2026-11-05T14:05:54.172Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["52.201.53.166","98.82.42.139"],"resolved_at":"2026-11-05T14:06:16Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"fa5ovfdxniilnyt2b7vfk","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T14:05:54.172Z","first_published":"2026-11-05T14:22:51.196Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/stratisventures.com/"}],"url":"https://domainspoof.com/live?show=all&q=stratisventures.com"},{"hostname":"streamevista-ai.pro","first_observed":"2026-11-05T13:41:18.148Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["104.21.33.114","172.67.161.229"],"resolved_at":"2026-11-05T13:41:53Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"ff72xgbcvu67mkimwy5mq","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T13:41:18.148Z","first_published":"2026-11-05T14:22:51.196Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=streamevista-ai.pro"},{"hostname":"sushiswap.me","first_observed":"2026-11-05T13:10:48.629Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["104.21.56.208","172.67.136.178"],"resolved_at":"2026-11-05T13:18:22Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"fh2erigbsmll3aseazcjy","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T13:10:48.629Z","first_published":"2026-11-05T14:22:51.196Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/sushiswap.me/"}],"url":"https://domainspoof.com/live?show=all&q=sushiswap.me"},{"hostname":"svetlykapitek-cz.com","first_observed":"2026-11-05T13:31:22.324Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["104.21.38.184","172.67.137.91"],"resolved_at":"2026-11-05T13:36:25Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"far5nqstjfzuozjysm7xb","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T13:31:22.324Z","first_published":"2026-11-05T14:22:51.196Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=svetlykapitek-cz.com"},{"hostname":"swaptaire-fr.live","first_observed":"2026-11-05T13:41:18.148Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["104.21.35.59","172.67.214.83"],"resolved_at":"2026-11-05T13:41:53Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"fdill6u2iedkwfuyfjf4p","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T13:41:18.148Z","first_published":"2026-11-05T14:22:51.196Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=swaptaire-fr.live"},{"hostname":"switowinzyskarnia.live","first_observed":"2026-11-05T13:21:26.667Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["104.21.2.40","172.67.128.176"],"resolved_at":"2026-11-05T13:22:08Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"fzkxtn7aa4fcjbgjqihmo","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T13:21:26.667Z","first_published":"2026-11-05T14:22:51.196Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=switowinzyskarnia.live"},{"hostname":"taiwanxunxi.shop","first_observed":"2026-11-05T13:21:26.667Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["104.21.89.3","172.67.155.53"],"resolved_at":"2026-11-05T13:22:08Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"fguhinmigcpkmnqq4ootk","kind":"reported_domain","summary":"Listed by NPA 165 (finance and insurance)","first_observed":"2026-11-05T13:21:26.667Z","first_published":"2026-11-05T14:22:51.196Z","source":"npa","source_name":"NPA 165","claim":{"category":"finance and insurance"}}],"url":"https://domainspoof.com/live?show=all&q=taiwanxunxi.shop"},{"hostname":"tarmyonlf.blogdns.com","first_observed":"2026-11-05T14:16:16.922Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["13.63.158.187"],"resolved_at":"2026-11-05T14:21:47Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"fgg35p4bwfyeev6fo2a2x","kind":"reported_domain","summary":"Listed by USOM","first_observed":"2026-11-05T14:16:16.922Z","first_published":"2026-11-05T14:22:51.196Z","source":"usom","source_name":"USOM"}],"url":"https://domainspoof.com/live?show=all&q=tarmyonlf.blogdns.com"},{"hostname":"tejeedgecent.wiki","first_observed":"2026-11-05T13:21:26.667Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["104.21.17.111","172.67.175.195"],"resolved_at":"2026-11-05T13:22:08Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"fdmxwign2bspbjhdfhhn2","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T13:21:26.667Z","first_published":"2026-11-05T14:22:51.196Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=tejeedgecent.wiki"},{"hostname":"telernxove.help","first_observed":"2026-11-05T13:56:59.803Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["104.21.69.202","172.67.213.18"],"resolved_at":"2026-11-05T13:59:52Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"fz3uvzyaxymixr7scyymj","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T13:56:59.803Z","first_published":"2026-11-05T14:22:51.196Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=telernxove.help"},{"hostname":"testwallet.info","first_observed":"2026-11-05T13:46:34.425Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["104.21.25.102","172.67.134.1"],"resolved_at":"2026-11-06T03:36:13Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"f6j5w4anwzsmrjgbcrq4s","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T13:46:34.425Z","first_published":"2026-11-05T14:22:51.196Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=testwallet.info"},{"hostname":"texefmzqxl.club","first_observed":"2026-11-05T13:15:39.201Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["104.21.21.167","172.67.199.161"],"resolved_at":"2026-11-05T13:26:35Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"fta24jl7ggsx2vj5mvrka","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T13:15:39.201Z","first_published":"2026-11-05T14:22:51.196Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=texefmzqxl.club"},{"hostname":"tintextr.forum","first_observed":"2026-11-05T14:16:22.656Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["104.21.24.217","172.67.220.217"],"resolved_at":"2026-11-05T14:16:59Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"fti474bzzqp2brkwjpjqz","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T14:16:22.656Z","first_published":"2026-11-05T14:22:51.196Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=tintextr.forum"},{"hostname":"titrelisure-ch.com","first_observed":"2026-11-05T13:10:48.629Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["104.21.40.111","172.67.150.190"],"resolved_at":"2026-11-05T13:18:23Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"f5zt7saryjafwqx7wiaah","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T13:10:48.629Z","first_published":"2026-11-05T14:22:51.196Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=titrelisure-ch.com"},{"hostname":"tivirox.com","first_observed":"2026-11-05T13:31:22.324Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["104.18.15.59"],"resolved_at":"2026-11-05T13:36:27Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"fu7b5pjsvro3lojmau3t3","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T13:31:22.324Z","first_published":"2026-11-05T14:22:51.196Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=tivirox.com"},{"hostname":"tkg-tap-randvznsz.online","first_observed":"2026-11-05T14:16:16.922Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["104.21.83.31","172.67.167.128","2606:4700:3036::6815:531f","2606:4700:3037::ac43:a780"],"resolved_at":"2026-11-05T14:21:47Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"fu2i5dr4qb3oml5lozed4","kind":"reported_domain","summary":"Listed by USOM","first_observed":"2026-11-05T14:16:16.922Z","first_published":"2026-11-05T14:22:51.196Z","source":"usom","source_name":"USOM"}],"url":"https://domainspoof.com/live?show=all&q=tkg-tap-randvznsz.online"},{"hostname":"tomitie.pro","first_observed":"2026-11-05T13:51:49.934Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["104.21.79.89","172.67.169.109"],"resolved_at":"2026-11-05T13:55:41Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"f7izbtnrl2g637iarfnw2","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T13:51:49.934Z","first_published":"2026-11-05T14:22:51.196Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=tomitie.pro"},{"hostname":"toquenaro.net","first_observed":"2026-11-05T13:10:48.629Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["104.21.75.45","172.67.213.193"],"resolved_at":"2026-11-05T13:18:24Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"fto3bhlzunggu7yji7j3d","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T13:10:48.629Z","first_published":"2026-11-05T14:22:51.196Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=toquenaro.net"},{"hostname":"traldo-capitanza.com","first_observed":"2026-11-05T13:10:48.629Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["104.21.34.122","172.67.204.198"],"resolved_at":"2026-11-05T13:18:24Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"fpog6kobrh6zbmd4w3wup","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T13:10:48.629Z","first_published":"2026-11-05T14:22:51.196Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=traldo-capitanza.com"},{"hostname":"tralvovalorance-be.com","first_observed":"2026-11-05T13:26:11.391Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["104.21.73.158","172.67.163.216"],"resolved_at":"2026-11-05T13:32:42Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"f3qnrzysvmk4x5dw2kopw","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T13:26:11.391Z","first_published":"2026-11-05T14:22:51.196Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=tralvovalorance-be.com"},{"hostname":"trezzo-suitesg.pages.dev","first_observed":"2026-11-05T13:51:49.934Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["172.66.44.129","172.66.47.127"],"resolved_at":"2026-11-05T13:55:41Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"fcnuolqqlwq6o2mt33op5","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T13:51:49.934Z","first_published":"2026-11-05T14:22:51.196Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=trezzo-suitesg.pages.dev"},{"hostname":"trocadaria-pt.com","first_observed":"2026-11-05T13:10:48.629Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["104.21.74.155","172.67.159.216"],"resolved_at":"2026-11-05T13:18:24Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"fs5d5n7vmnluybsjbfvxg","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T13:10:48.629Z","first_published":"2026-11-05T14:22:51.196Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=trocadaria-pt.com"},{"hostname":"turbo-hiberixai.live","first_observed":"2026-11-05T13:21:26.667Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["104.21.76.111","172.67.193.96"],"resolved_at":"2026-11-05T13:22:08Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"fwyvipio6l7qcavhdyqji","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T13:21:26.667Z","first_published":"2026-11-05T14:22:51.196Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=turbo-hiberixai.live"},{"hostname":"turboaihiberix.live","first_observed":"2026-11-05T13:21:26.667Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["104.21.13.140","172.67.132.226"],"resolved_at":"2026-11-05T13:22:08Z","dns_checked_at":"2026-11-06T14:34:09.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"fdmqjowb5lpjsyv4bhfir","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T13:21:26.667Z","first_published":"2026-11-05T14:22:51.196Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=turboaihiberix.live"},{"hostname":"turotnba.shop","first_observed":"2026-11-05T13:15:39.201Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["104.21.76.108","172.67.193.93"],"resolved_at":"2026-11-05T13:26:37Z","dns_checked_at":"2026-11-06T14:34:10.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"fcr6ssgqf26wo6qdbrqso","kind":"reported_domain","summary":"Listed by NPA 165 (e-commerce)","first_observed":"2026-11-05T13:15:39.201Z","first_published":"2026-11-05T14:22:51.196Z","source":"npa","source_name":"NPA 165","claim":{"category":"e-commerce"}}],"url":"https://domainspoof.com/live?show=all&q=turotnba.shop"},{"hostname":"twalet-card.digital","first_observed":"2026-11-05T13:46:34.425Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["104.21.82.73","172.67.154.130"],"resolved_at":"2026-11-05T13:46:56Z","dns_checked_at":"2026-11-06T14:34:10.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"fvwnewl4lqh6v5r6g5dp6","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T13:46:34.425Z","first_published":"2026-11-05T14:22:51.196Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=twalet-card.digital"},{"hostname":"twxunxi.shop","first_observed":"2026-11-05T13:41:18.148Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["104.21.74.180","172.67.160.238"],"resolved_at":"2026-11-05T13:41:53Z","dns_checked_at":"2026-11-06T14:34:10.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"fsafqoippvo5a4rb2hkb5","kind":"reported_domain","summary":"Listed by NPA 165 (finance and insurance)","first_observed":"2026-11-05T13:41:18.148Z","first_published":"2026-11-05T14:22:51.196Z","source":"npa","source_name":"NPA 165","claim":{"category":"finance and insurance"}}],"url":"https://domainspoof.com/live?show=all&q=twxunxi.shop"},{"hostname":"ukcedargrovepoint.com","first_observed":"2026-11-05T13:36:04.823Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["104.21.86.195","172.67.136.88"],"resolved_at":"2026-11-05T13:46:21Z","dns_checked_at":"2026-11-06T14:34:10.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"fqt74jaz6i63wbbftbxye","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T13:36:04.823Z","first_published":"2026-11-05T14:22:51.196Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=ukcedargrovepoint.com"},{"hostname":"ukmapleridgehub.com","first_observed":"2026-11-05T13:36:04.823Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["104.21.31.71","172.67.175.65"],"resolved_at":"2026-11-05T13:46:21Z","dns_checked_at":"2026-11-06T14:34:10.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"fwun4i2ihnngk27mganpf","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T13:36:04.823Z","first_published":"2026-11-05T14:22:51.196Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=ukmapleridgehub.com"},{"hostname":"ultra-rercal.com","first_observed":"2026-11-05T13:15:39.201Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"no_address","resolved":[],"resolved_at":"2026-11-05T13:26:37Z","dns_checked_at":"2026-11-06T14:34:10.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"fzsm36p5luoetuotonklu","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T13:15:39.201Z","first_published":"2026-11-05T14:22:51.196Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=ultra-rercal.com"},{"hostname":"urbanselvia.com","first_observed":"2026-11-05T13:46:34.425Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["104.18.15.59"],"resolved_at":"2026-11-05T13:46:56Z","dns_checked_at":"2026-11-06T14:34:10.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"flrpehodom2lzn7qyp4iq","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T13:46:34.425Z","first_published":"2026-11-05T14:22:51.196Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=urbanselvia.com"},{"hostname":"uttspetrolofisi.com","first_observed":"2026-11-05T13:41:18.148Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["89.252.187.72"],"resolved_at":"2026-11-05T13:41:53Z","dns_checked_at":"2026-11-06T14:34:10.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"f3xt6t2xyzvctvzzbav4h","kind":"reported_domain","summary":"Listed by USOM","first_observed":"2026-11-05T13:41:18.148Z","first_published":"2026-11-05T14:22:51.196Z","source":"usom","source_name":"USOM"}],"url":"https://domainspoof.com/live?show=all&q=uttspetrolofisi.com"},{"hostname":"valimorica-es.com","first_observed":"2026-11-05T13:10:48.629Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["104.21.6.181","172.67.135.26"],"resolved_at":"2026-11-05T13:18:26Z","dns_checked_at":"2026-11-06T14:34:10.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"ft2um7ildhebpxmtsdvo3","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T13:10:48.629Z","first_published":"2026-11-05T14:22:51.196Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=valimorica-es.com"},{"hostname":"vandre-avkastnes.online","first_observed":"2026-11-05T13:31:22.324Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["104.21.44.180","172.67.202.99"],"resolved_at":"2026-11-05T13:36:33Z","dns_checked_at":"2026-11-06T14:34:10.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"fpdiwlu4mb5h456ckmbci","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T13:31:22.324Z","first_published":"2026-11-05T14:22:51.196Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=vandre-avkastnes.online"},{"hostname":"vantera-oxilan-mx.com","first_observed":"2026-11-05T13:10:48.629Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["104.21.35.87","172.67.216.57"],"resolved_at":"2026-11-05T13:18:26Z","dns_checked_at":"2026-11-06T14:34:10.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"f2th3uyvohsxfp5gtldqg","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T13:10:48.629Z","first_published":"2026-11-05T14:22:51.196Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=vantera-oxilan-mx.com"},{"hostname":"varialtional.co","first_observed":"2026-11-05T13:21:26.667Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"no_address","resolved":[],"resolved_at":"2026-11-05T13:22:08Z","dns_checked_at":"2026-11-06T14:34:10.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"fcsfl3jeeem7245ca5nxc","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T13:21:26.667Z","first_published":"2026-11-05T14:22:51.196Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=varialtional.co"},{"hostname":"verimdas-tr.com","first_observed":"2026-11-05T13:26:11.391Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["104.21.87.86","172.67.142.135"],"resolved_at":"2026-11-05T13:32:43Z","dns_checked_at":"2026-11-06T14:34:10.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"ff64ze3vvdbltbppjx2vn","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T13:26:11.391Z","first_published":"2026-11-05T14:22:51.196Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=verimdas-tr.com"},{"hostname":"vestagioren-gb.com","first_observed":"2026-11-05T13:10:48.629Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["104.21.24.209","172.67.220.205"],"resolved_at":"2026-11-05T13:18:26Z","dns_checked_at":"2026-11-06T14:34:10.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"f6l6ej7menosifyzggyhs","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T13:10:48.629Z","first_published":"2026-11-05T14:22:51.196Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=vestagioren-gb.com"},{"hostname":"vestodigitalplatform.net","first_observed":"2026-11-05T13:10:48.629Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["104.21.9.231","172.67.161.99"],"resolved_at":"2026-11-05T13:18:26Z","dns_checked_at":"2026-11-06T14:34:10.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"fue3vvhgw64kmkb7w5cfa","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T13:10:48.629Z","first_published":"2026-11-05T14:22:51.196Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=vestodigitalplatform.net"},{"hostname":"vexaluniqo.gifts","first_observed":"2026-11-05T13:15:39.201Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["104.21.10.134","172.67.131.123"],"resolved_at":"2026-11-05T13:26:39Z","dns_checked_at":"2026-11-06T14:34:10.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"fpceon7fu4baixgkgcr72","kind":"reported_domain","summary":"Listed by USOM","first_observed":"2026-11-05T13:15:39.201Z","first_published":"2026-11-05T14:22:51.196Z","source":"usom","source_name":"USOM"}],"url":"https://domainspoof.com/live?show=all&q=vexaluniqo.gifts"},{"hostname":"vientoclaro.com","first_observed":"2026-11-05T13:31:22.324Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["104.21.22.195","172.67.206.225"],"resolved_at":"2026-11-05T13:36:33Z","dns_checked_at":"2026-11-06T14:34:10.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"fys2wvpkgghohhjvp7e66","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T13:31:22.324Z","first_published":"2026-11-05T14:22:51.196Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=vientoclaro.com"},{"hostname":"vitaltick.space","first_observed":"2026-11-05T13:36:04.823Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["104.21.89.201","172.67.146.252"],"resolved_at":"2026-11-05T13:46:22Z","dns_checked_at":"2026-11-06T14:34:10.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"fsfojaa4glbcioe4tth27","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T13:36:04.823Z","first_published":"2026-11-05T14:22:51.196Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=vitaltick.space"},{"hostname":"vobymoy.pro","first_observed":"2026-11-05T13:51:49.934Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["104.21.59.184","172.67.182.110"],"resolved_at":"2026-11-05T13:55:42Z","dns_checked_at":"2026-11-06T14:34:10.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"f4fpsuttu6saapu6wwmbj","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T13:51:49.934Z","first_published":"2026-11-05T14:22:51.196Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=vobymoy.pro"},{"hostname":"vogataa.pro","first_observed":"2026-11-05T13:51:49.934Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["104.21.39.197","172.67.171.86"],"resolved_at":"2026-11-05T13:55:42Z","dns_checked_at":"2026-11-06T14:34:10.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"fq66rojwy3epx62k4kgxh","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T13:51:49.934Z","first_published":"2026-11-05T14:22:51.196Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=vogataa.pro"},{"hostname":"voltapizzi.online","first_observed":"2026-11-05T13:31:22.324Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"no_address","resolved":[],"resolved_at":"2026-11-05T13:36:34Z","dns_checked_at":"2026-11-06T14:34:10.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"fwie7imqfad5bfldvyms5","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T13:31:22.324Z","first_published":"2026-11-05T14:22:51.196Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=voltapizzi.online"},{"hostname":"voreclano-it.com","first_observed":"2026-11-05T13:10:48.629Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["104.21.39.138","172.67.146.24"],"resolved_at":"2026-11-05T13:18:27Z","dns_checked_at":"2026-11-06T14:34:10.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"frdadvydw4hwwlicrm4le","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T13:10:48.629Z","first_published":"2026-11-05T14:22:51.196Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=voreclano-it.com"},{"hostname":"vote-moonshot.net","first_observed":"2026-11-05T13:36:04.823Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["104.21.67.211","172.67.181.34"],"resolved_at":"2026-11-05T13:46:22Z","dns_checked_at":"2026-11-06T14:34:10.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"f3kd3l4gat32kklklqeb6","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T13:36:04.823Z","first_published":"2026-11-05T14:22:51.196Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/vote-moonshot.net/"}],"url":"https://domainspoof.com/live?show=all&q=vote-moonshot.net"},{"hostname":"vpn.rainbetgermany.de","first_observed":"2026-11-05T13:26:11.391Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["185.53.179.136"],"resolved_at":"2026-11-05T13:32:43Z","dns_checked_at":"2026-11-06T14:34:10.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"fpbwc7bsdpntqtzykcupt","kind":"reported_domain","summary":"Under rainbetgermany.de, listed by MetaMask","first_observed":"2026-11-05T13:26:11.391Z","first_published":"2026-11-05T14:22:51.196Z","source":"metamask","source_name":"MetaMask","under":"rainbetgermany.de"}],"url":"https://domainspoof.com/live?show=all&q=vpn.rainbetgermany.de"},{"hostname":"w3-online-m-v-m-o-n-l-i-n-e26-belpp-adm.workingafrica.co.za","first_observed":"2026-11-05T13:26:11.391Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["165.73.86.88"],"resolved_at":"2026-11-05T13:32:43Z","dns_checked_at":"2026-11-06T14:34:10.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"fn2k3ojpdvdg4ugghnm3w","kind":"reported_domain","summary":"Under workingafrica.co.za, reported by PhishDestroy","first_observed":"2026-11-05T13:26:11.391Z","first_published":"2026-11-05T14:22:51.196Z","source":"phishdestroy","source_name":"PhishDestroy","under":"workingafrica.co.za","source_url":"https://phishdestroy.io/domain/workingafrica.co.za/"}],"url":"https://domainspoof.com/live?show=all&q=w3-online-m-v-m-o-n-l-i-n-e26-belpp-adm.workingafrica.co.za"},{"hostname":"walletexo-eng.pages.dev","first_observed":"2026-11-05T13:56:59.803Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["172.66.44.245","172.66.47.11"],"resolved_at":"2026-11-05T13:59:54Z","dns_checked_at":"2026-11-06T14:34:10.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"flj6xpdbqbzyjckfpwimf","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T13:56:59.803Z","first_published":"2026-11-05T14:22:51.196Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=walletexo-eng.pages.dev"},{"hostname":"wandering-pines.com","first_observed":"2026-11-05T14:11:05.168Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["104.21.29.202","172.67.149.199"],"resolved_at":"2026-11-05T14:11:51Z","dns_checked_at":"2026-11-06T14:34:10.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"f2l3win67xgovtpvrknvw","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T14:11:05.168Z","first_published":"2026-11-05T14:22:51.196Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=wandering-pines.com"},{"hostname":"wavestatix-nl.com","first_observed":"2026-11-05T13:10:48.629Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["104.21.26.83","172.67.135.183"],"resolved_at":"2026-11-05T13:18:27Z","dns_checked_at":"2026-11-06T14:34:10.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"fpdl7zbsv6ubk3t4irhdn","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T13:10:48.629Z","first_published":"2026-11-05T14:22:51.196Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=wavestatix-nl.com"},{"hostname":"web3-staking.top","first_observed":"2026-11-05T13:15:39.201Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["104.21.73.220","172.67.150.86"],"resolved_at":"2026-11-05T13:26:39Z","dns_checked_at":"2026-11-06T14:34:10.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"fajgxputr3pcbxx6navpi","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T13:15:39.201Z","first_published":"2026-11-05T14:22:51.196Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/web3-staking.top/"}],"url":"https://domainspoof.com/live?show=all&q=web3-staking.top"},{"hostname":"web3pulse.top","first_observed":"2026-11-05T14:16:22.656Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["104.21.87.81","172.67.142.130"],"resolved_at":"2026-11-05T14:17:00Z","dns_checked_at":"2026-11-06T14:34:10.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"fsggbi3n3axfe3leopjxb","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T14:16:22.656Z","first_published":"2026-11-05T14:22:51.196Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=web3pulse.top"},{"hostname":"web3verselab.top","first_observed":"2026-11-05T13:15:39.201Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["104.21.16.39","172.67.166.22"],"resolved_at":"2026-11-05T13:26:39Z","dns_checked_at":"2026-11-06T14:34:10.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"fdjeydugvzkuuqw6ih62w","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T13:15:39.201Z","first_published":"2026-11-05T14:22:51.196Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=web3verselab.top"},{"hostname":"werkly.org","first_observed":"2026-11-05T13:10:48.629Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["104.21.95.248","172.67.171.228"],"resolved_at":"2026-11-05T13:18:27Z","dns_checked_at":"2026-11-06T14:34:10.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"fqdmcmurywjbfvt25ars3","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T13:10:48.629Z","first_published":"2026-11-05T14:22:51.196Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=werkly.org"},{"hostname":"wirecoreunit.com","first_observed":"2026-11-05T13:51:49.934Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["104.21.22.249","172.67.207.229"],"resolved_at":"2026-11-05T13:55:43Z","dns_checked_at":"2026-11-06T14:34:10.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"fftciyf6hikkhcivxzc5t","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T13:51:49.934Z","first_published":"2026-11-05T14:22:51.196Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=wirecoreunit.com"},{"hostname":"worame.digital","first_observed":"2026-11-05T13:41:18.148Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["104.21.84.142","172.67.193.207"],"resolved_at":"2026-11-05T13:41:53Z","dns_checked_at":"2026-11-06T14:34:10.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"ftey5723otnl3xhp4o3v6","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T13:41:18.148Z","first_published":"2026-11-05T14:22:51.196Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=worame.digital"},{"hostname":"wrightsure-liverpool.co.uk","first_observed":"2026-11-05T13:59:54.797Z","first_published":"2026-11-05T14:22:51.196Z","brands":[{"id":"liverpool","name":"Liverpool","url":"https://domainspoof.com/brands/liverpool"}],"dns":"resolved","resolved":["5.78.156.59","5.161.47.86","5.161.230.87","46.62.237.138","195.201.128.179"],"resolved_at":"2026-11-06T14:34:10Z","dns_checked_at":"2026-11-06T14:34:10.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"fbtfzufb6jt33yqfyccgn","kind":"phishing_infrastructure","summary":"Resolved to 5.78.156.59, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T13:59:54.797Z","first_published":"2026-11-05T14:22:51.196Z","address":"5.78.156.59","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/liverpool"},{"hostname":"wrostum-pl.pro","first_observed":"2026-11-05T13:21:26.667Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["104.21.7.148","172.67.136.111"],"resolved_at":"2026-11-05T13:22:09Z","dns_checked_at":"2026-11-06T14:34:10.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"fg34gpz5f47gqjcdpz47i","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T13:21:26.667Z","first_published":"2026-11-05T14:22:51.196Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=wrostum-pl.pro"},{"hostname":"ww38.ronal.click","first_observed":"2026-11-05T13:46:34.425Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["185.53.179.200"],"resolved_at":"2026-11-05T13:46:56Z","dns_checked_at":"2026-11-06T14:34:10.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"flxfbvqlop2g5swx7qprh","kind":"reported_domain","summary":"Under ronal.click, reported by PhishDestroy","first_observed":"2026-11-05T13:46:34.425Z","first_published":"2026-11-05T14:22:51.196Z","source":"phishdestroy","source_name":"PhishDestroy","under":"ronal.click","source_url":"https://phishdestroy.io/domain/ronal.click/"}],"url":"https://domainspoof.com/live?show=all&q=ww38.ronal.click"},{"hostname":"www.anthropic-ads-marketing.com","first_observed":"2026-11-05T13:56:59.803Z","first_published":"2026-11-05T14:22:51.196Z","brands":[{"id":"claude","name":"Claude","url":"https://domainspoof.com/brands/claude"}],"dns":"resolved","resolved":["216.150.1.193","216.150.16.193"],"resolved_at":"2026-11-05T13:59:55Z","dns_checked_at":"2026-11-06T14:34:10.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"fjnddisjfxgmwslb7gtp7","kind":"reported_domain","summary":"Under anthropic-ads-marketing.com, listed by USOM","first_observed":"2026-11-05T13:56:59.803Z","first_published":"2026-11-05T14:22:51.196Z","source":"usom","source_name":"USOM","under":"anthropic-ads-marketing.com"}],"url":"https://domainspoof.com/brands/claude"},{"hostname":"www.app.worldliberty-financials.org","first_observed":"2026-11-05T13:26:11.391Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["198.251.89.220"],"resolved_at":"2026-11-05T13:32:44Z","dns_checked_at":"2026-11-06T14:34:10.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"fxxpe5ta4jzk3v63mbwrs","kind":"reported_domain","summary":"Under app.worldliberty-financials.org, reported by PhishDestroy","first_observed":"2026-11-05T13:26:11.391Z","first_published":"2026-11-05T14:22:51.196Z","source":"phishdestroy","source_name":"PhishDestroy","under":"app.worldliberty-financials.org","source_url":"https://phishdestroy.io/domain/app.worldliberty-financials.org/"}],"url":"https://domainspoof.com/live?show=all&q=www.app.worldliberty-financials.org"},{"hostname":"www.argo.zenavlico.cyou","first_observed":"2026-11-05T13:15:39.201Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["95.85.244.13"],"resolved_at":"2026-11-05T13:26:40Z","dns_checked_at":"2026-11-06T14:34:10.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"fwqbhvyirhtm42trhdwzc","kind":"reported_domain","summary":"Under zenavlico.cyou, listed by CERT Polska","first_observed":"2026-11-05T13:15:39.201Z","first_published":"2026-11-05T14:22:51.196Z","source":"cert_polska","source_name":"CERT Polska","under":"zenavlico.cyou"}],"url":"https://domainspoof.com/live?show=all&q=www.argo.zenavlico.cyou"},{"hostname":"www.bitmcx.com","first_observed":"2026-11-05T13:10:48.629Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["134.122.200.26"],"resolved_at":"2026-11-05T13:18:30Z","dns_checked_at":"2026-11-06T14:34:10.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"fzguuodalwpfo4kuljjkq","kind":"reported_domain","summary":"Under bitmcx.com, listed by MetaMask","first_observed":"2026-11-05T13:10:48.629Z","first_published":"2026-11-05T14:22:51.196Z","source":"metamask","source_name":"MetaMask","under":"bitmcx.com"}],"url":"https://domainspoof.com/live?show=all&q=www.bitmcx.com"},{"hostname":"www.bitrefill.com-cr01-esim-gift.com","first_observed":"2026-11-05T13:06:42.670Z","first_published":"2026-11-05T14:22:51.196Z","brands":[{"id":"bitrefill","name":"Bitrefill","url":"https://domainspoof.com/brands/bitrefill"}],"dns":"resolved","resolved":["62.60.226.39"],"resolved_at":"2026-11-06T14:34:10Z","dns_checked_at":"2026-11-06T14:34:10.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"fo2zdlnu6xzfrlzjcjkil","kind":"spamhaus_drop","summary":"Resolved to 62.60.226.39 on Spamhaus DROP","first_observed":"2026-11-05T13:06:42.670Z","first_published":"2026-11-05T14:22:51.196Z","address":"62.60.226.39","list":"spamhaus_drop","list_name":"Spamhaus DROP"}],"url":"https://domainspoof.com/brands/bitrefill"},{"hostname":"www.blog.spybox.io","first_observed":"2026-11-05T13:31:22.324Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["216.150.1.1","216.150.16.1"],"resolved_at":"2026-11-05T13:36:36Z","dns_checked_at":"2026-11-06T14:34:10.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"f6cytyygpbwn4hsy3cxxq","kind":"reported_domain","summary":"Under spybox.io, reported by PhishDestroy","first_observed":"2026-11-05T13:31:22.324Z","first_published":"2026-11-05T14:22:51.196Z","source":"phishdestroy","source_name":"PhishDestroy","under":"spybox.io","source_url":"https://phishdestroy.io/domain/spybox.io/"}],"url":"https://domainspoof.com/live?show=all&q=www.blog.spybox.io"},{"hostname":"www.catshoes-hu.shop","first_observed":"2026-11-05T13:41:18.148Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["104.17.246.119","104.17.247.119"],"resolved_at":"2026-11-05T13:41:56Z","dns_checked_at":"2026-11-06T14:34:10.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"fnqlqjy72pe6udydir2nr","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T13:41:18.148Z","first_published":"2026-11-05T14:22:51.196Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=www.catshoes-hu.shop"},{"hostname":"www.chatgpt-visibility.com","first_observed":"2026-11-05T14:11:51.586Z","first_published":"2026-11-05T14:22:51.196Z","brands":[{"id":"openai","name":"OpenAI","url":"https://domainspoof.com/brands/openai"}],"dns":"resolved","resolved":["2.57.91.91"],"resolved_at":"2026-11-06T14:34:10Z","dns_checked_at":"2026-11-06T14:34:10.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"fzoijww7j7prinyh2q6sh","kind":"phishing_infrastructure","summary":"Resolved to 2.57.91.91, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T14:11:51.586Z","first_published":"2026-11-05T14:22:51.196Z","address":"2.57.91.91","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/openai"},{"hostname":"www.connect.bayoubyte.org","first_observed":"2026-11-05T13:10:48.629Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["163.61.188.2"],"resolved_at":"2026-11-05T13:18:30Z","dns_checked_at":"2026-11-06T14:34:10.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"fm2r3gn5rvlcec5orzva6","kind":"reported_domain","summary":"Under bayoubyte.org, reported by PhishDestroy","first_observed":"2026-11-05T13:10:48.629Z","first_published":"2026-11-05T14:22:51.196Z","source":"phishdestroy","source_name":"PhishDestroy","under":"bayoubyte.org","source_url":"https://phishdestroy.io/domain/bayoubyte.org/"}],"url":"https://domainspoof.com/live?show=all&q=www.connect.bayoubyte.org"},{"hostname":"www.demo.shop.staging.crypto-polis.org","first_observed":"2026-11-05T14:11:05.168Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["185.178.208.132","185.178.208.182"],"resolved_at":"2026-11-05T14:11:51Z","dns_checked_at":"2026-11-06T14:34:10.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"fbork55hijzgfkjxmn6c3","kind":"reported_domain","summary":"Under crypto-polis.org, reported by PhishDestroy","first_observed":"2026-11-05T14:11:05.168Z","first_published":"2026-11-05T14:22:51.196Z","source":"phishdestroy","source_name":"PhishDestroy","under":"crypto-polis.org","source_url":"https://phishdestroy.io/domain/crypto-polis.org/"}],"url":"https://domainspoof.com/live?show=all&q=www.demo.shop.staging.crypto-polis.org"},{"hostname":"www.dluxury.at","first_observed":"2026-11-05T14:11:05.168Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["199.36.158.100"],"resolved_at":"2026-11-05T14:11:51Z","dns_checked_at":"2026-11-06T14:34:10.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"fv2omf43th7ve3zpqei6g","kind":"reported_domain","summary":"Under dluxury.at, reported by PhishDestroy","first_observed":"2026-11-05T14:11:05.168Z","first_published":"2026-11-05T14:22:51.196Z","source":"phishdestroy","source_name":"PhishDestroy","under":"dluxury.at","source_url":"https://phishdestroy.io/domain/dluxury.at/"}],"url":"https://domainspoof.com/live?show=all&q=www.dluxury.at"},{"hostname":"www.flexirentarackiralama.com","first_observed":"2026-11-05T14:16:22.656Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["94.72.96.147"],"resolved_at":"2026-11-05T14:17:01Z","dns_checked_at":"2026-11-06T14:34:10.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"fbadithc5u4zaubrdgc24","kind":"reported_domain","summary":"Under flexirentarackiralama.com, listed by USOM","first_observed":"2026-11-05T14:16:22.656Z","first_published":"2026-11-05T14:22:51.196Z","source":"usom","source_name":"USOM","under":"flexirentarackiralama.com"}],"url":"https://domainspoof.com/live?show=all&q=www.flexirentarackiralama.com"},{"hostname":"www.fortraders.capital","first_observed":"2026-11-05T14:16:22.656Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["162.4.84.247"],"resolved_at":"2026-11-05T14:17:01Z","dns_checked_at":"2026-11-06T14:34:10.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"fb2eg3siyqdxzsumc6mew","kind":"reported_domain","summary":"Under fortraders.capital, reported by PhishDestroy","first_observed":"2026-11-05T14:16:22.656Z","first_published":"2026-11-05T14:22:51.196Z","source":"phishdestroy","source_name":"PhishDestroy","under":"fortraders.capital","source_url":"https://phishdestroy.io/domain/fortraders.capital/"}],"url":"https://domainspoof.com/live?show=all&q=www.fortraders.capital"},{"hostname":"www.generalmotors.in","first_observed":"2026-11-05T13:06:43.493Z","first_published":"2026-11-05T14:22:51.196Z","brands":[{"id":"general-motors","name":"General Motors","url":"https://domainspoof.com/brands/general-motors"}],"dns":"resolved","resolved":["2.57.91.91"],"resolved_at":"2026-11-05T14:33:25Z","dns_checked_at":"2026-11-06T14:34:10.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"fskoae3ynrwtlxko3ep2d","kind":"phishing_infrastructure","summary":"Resolved to 2.57.91.91, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T13:06:43.493Z","first_published":"2026-11-05T14:22:51.196Z","address":"2.57.91.91","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/general-motors"},{"hostname":"www.ichvk.ezgateway.net","first_observed":"2026-11-05T13:10:48.629Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["172.67.165.35"],"resolved_at":"2026-11-05T13:18:32Z","dns_checked_at":"2026-11-06T14:34:10.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"fuxe5g3k3lrsitxoyhjnq","kind":"reported_domain","summary":"Under ezgateway.net, listed by USOM","first_observed":"2026-11-05T13:10:48.629Z","first_published":"2026-11-05T14:22:51.196Z","source":"usom","source_name":"USOM","under":"ezgateway.net"}],"url":"https://domainspoof.com/live?show=all&q=www.ichvk.ezgateway.net"},{"hostname":"www.koltools.io","first_observed":"2026-11-05T13:26:11.391Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["64.29.17.1","64.29.17.65"],"resolved_at":"2026-11-05T13:26:37Z","dns_checked_at":"2026-11-06T14:34:10.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"f43jn6yf4mx3f5qpevnrw","kind":"reported_domain","summary":"Under koltools.io, listed by MetaMask","first_observed":"2026-11-05T13:26:11.391Z","first_published":"2026-11-05T14:22:51.196Z","source":"metamask","source_name":"MetaMask","under":"koltools.io"}],"url":"https://domainspoof.com/live?show=all&q=www.koltools.io"},{"hostname":"www.marketsmindmomentum.com.zurifinance.org","first_observed":"2026-11-05T13:10:48.629Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["198.251.83.106"],"resolved_at":"2026-11-05T13:18:33Z","dns_checked_at":"2026-11-06T14:34:10.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"fxltrh2yga75af44k3fbl","kind":"reported_domain","summary":"Under zurifinance.org, reported by PhishDestroy","first_observed":"2026-11-05T13:10:48.629Z","first_published":"2026-11-05T14:22:51.196Z","source":"phishdestroy","source_name":"PhishDestroy","under":"zurifinance.org","source_url":"https://phishdestroy.io/domain/zurifinance.org/"}],"url":"https://domainspoof.com/live?show=all&q=www.marketsmindmomentum.com.zurifinance.org"},{"hostname":"www.mortician.ezgateway.net","first_observed":"2026-11-05T13:26:11.391Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["172.67.165.35"],"resolved_at":"2026-11-05T13:26:37Z","dns_checked_at":"2026-11-06T14:34:10.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"fqt4fes4rlvqbbhzed47u","kind":"reported_domain","summary":"Under ezgateway.net, listed by USOM","first_observed":"2026-11-05T13:26:11.391Z","first_published":"2026-11-05T14:22:51.196Z","source":"usom","source_name":"USOM","under":"ezgateway.net"}],"url":"https://domainspoof.com/live?show=all&q=www.mortician.ezgateway.net"},{"hostname":"www.pay-bitrefill.com-cr01-esim-gift.com","first_observed":"2026-11-05T13:06:43.935Z","first_published":"2026-11-05T14:22:51.196Z","brands":[{"id":"bitrefill","name":"Bitrefill","url":"https://domainspoof.com/brands/bitrefill"}],"dns":"resolved","resolved":["62.60.226.39"],"resolved_at":"2026-11-06T14:34:10Z","dns_checked_at":"2026-11-06T14:34:10.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"fug52sngy6mhcrqtci7rr","kind":"spamhaus_drop","summary":"Resolved to 62.60.226.39 on Spamhaus DROP","first_observed":"2026-11-05T13:06:43.935Z","first_published":"2026-11-05T14:22:51.196Z","address":"62.60.226.39","list":"spamhaus_drop","list_name":"Spamhaus DROP"}],"url":"https://domainspoof.com/brands/bitrefill"},{"hostname":"www.pay.apexnetwork.co","first_observed":"2026-11-05T13:31:22.324Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["104.26.6.194","104.26.7.194","172.67.75.83"],"resolved_at":"2026-11-05T13:31:35Z","dns_checked_at":"2026-11-06T14:34:10.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"fo4wyuxtp5ant5srwarfe","kind":"reported_domain","summary":"Under apexnetwork.co, reported by PhishDestroy","first_observed":"2026-11-05T13:31:22.324Z","first_published":"2026-11-05T14:22:51.196Z","source":"phishdestroy","source_name":"PhishDestroy","under":"apexnetwork.co","source_url":"https://phishdestroy.io/domain/apexnetwork.co/"}],"url":"https://domainspoof.com/live?show=all&q=www.pay.apexnetwork.co"},{"hostname":"www.pumpairdrop.live","first_observed":"2026-11-05T14:00:40.663Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["104.21.94.98","172.67.221.182"],"resolved_at":"2026-11-05T14:14:50Z","dns_checked_at":"2026-11-06T14:34:10.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"fsquucsnlt752nzuww7nb","kind":"reported_domain","summary":"Under pumpairdrop.live, reported by PhishDestroy","first_observed":"2026-11-05T14:00:40.663Z","first_published":"2026-11-05T14:22:51.196Z","source":"phishdestroy","source_name":"PhishDestroy","under":"pumpairdrop.live","source_url":"https://phishdestroy.io/domain/pumpairdrop.live/"}],"url":"https://domainspoof.com/live?show=all&q=www.pumpairdrop.live"},{"hostname":"www.rainbet-nederland.nl","first_observed":"2026-11-05T13:26:11.391Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["104.21.56.90","172.67.183.52"],"resolved_at":"2026-11-05T13:26:37Z","dns_checked_at":"2026-11-06T14:34:10.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"fzs5mucsho5qkrbsjnefl","kind":"reported_domain","summary":"Under rainbet-nederland.nl, listed by MetaMask","first_observed":"2026-11-05T13:26:11.391Z","first_published":"2026-11-05T14:22:51.196Z","source":"metamask","source_name":"MetaMask","under":"rainbet-nederland.nl"}],"url":"https://domainspoof.com/live?show=all&q=www.rainbet-nederland.nl"},{"hostname":"www.rainbett.com","first_observed":"2026-11-05T14:11:05.168Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["170.106.159.67"],"resolved_at":"2026-11-05T14:11:51Z","dns_checked_at":"2026-11-06T14:34:10.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"fpz2cvj5pyicxj6s6hzy6","kind":"reported_domain","summary":"Under rainbett.com, listed by MetaMask","first_observed":"2026-11-05T14:11:05.168Z","first_published":"2026-11-05T14:22:51.196Z","source":"metamask","source_name":"MetaMask","under":"rainbett.com"}],"url":"https://domainspoof.com/live?show=all&q=www.rainbett.com"},{"hostname":"www.reebokshoe.shop","first_observed":"2026-11-05T13:26:11.391Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["104.18.71.116"],"resolved_at":"2026-11-05T13:26:37Z","dns_checked_at":"2026-11-06T14:34:10.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"fwwaay2uwrmeram32jb2a","kind":"reported_domain","summary":"Under reebokshoe.shop, listed by CERT Polska","first_observed":"2026-11-05T13:26:11.391Z","first_published":"2026-11-05T14:22:51.196Z","source":"cert_polska","source_name":"CERT Polska","under":"reebokshoe.shop"}],"url":"https://domainspoof.com/live?show=all&q=www.reebokshoe.shop"},{"hostname":"www.tf-tw.com","first_observed":"2026-11-05T14:05:54.172Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["104.21.95.218","172.67.148.170"],"resolved_at":"2026-11-05T14:17:11Z","dns_checked_at":"2026-11-06T14:34:10.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"fdsshicyqt6qqtarklkbi","kind":"reported_domain","summary":"Under tf-tw.com, listed by MODA (one-page scam site)","first_observed":"2026-11-05T14:05:54.172Z","first_published":"2026-11-05T14:22:51.196Z","source":"moda","source_name":"MODA","under":"tf-tw.com","claim":{"category":"one-page scam site"}}],"url":"https://domainspoof.com/live?show=all&q=www.tf-tw.com"},{"hostname":"www.uat.zenavlico.cyou","first_observed":"2026-11-05T13:21:26.667Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["95.85.244.13"],"resolved_at":"2026-11-05T13:22:09Z","dns_checked_at":"2026-11-06T14:34:10.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"fmqusdyl7kzda4koyesxv","kind":"reported_domain","summary":"Under zenavlico.cyou, listed by CERT Polska","first_observed":"2026-11-05T13:21:26.667Z","first_published":"2026-11-05T14:22:51.196Z","source":"cert_polska","source_name":"CERT Polska","under":"zenavlico.cyou"}],"url":"https://domainspoof.com/live?show=all&q=www.uat.zenavlico.cyou"},{"hostname":"www.uttspetrolofisi.com","first_observed":"2026-11-05T13:41:18.148Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["89.252.187.72"],"resolved_at":"2026-11-05T13:41:56Z","dns_checked_at":"2026-11-06T14:34:10.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"ffysivoewjnsgow53z5ea","kind":"reported_domain","summary":"Under uttspetrolofisi.com, listed by USOM","first_observed":"2026-11-05T13:41:18.148Z","first_published":"2026-11-05T14:22:51.196Z","source":"usom","source_name":"USOM","under":"uttspetrolofisi.com"}],"url":"https://domainspoof.com/live?show=all&q=www.uttspetrolofisi.com"},{"hostname":"www.w3-online-m-v-m-o-n-l-i-n-e26-belpp-adm.workingafrica.co.za","first_observed":"2026-11-05T13:26:11.391Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["165.73.86.88"],"resolved_at":"2026-11-05T13:26:37Z","dns_checked_at":"2026-11-06T14:34:10.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"fozjl6yovjsjuuajtfts6","kind":"reported_domain","summary":"Under workingafrica.co.za, reported by PhishDestroy","first_observed":"2026-11-05T13:26:11.391Z","first_published":"2026-11-05T14:22:51.196Z","source":"phishdestroy","source_name":"PhishDestroy","under":"workingafrica.co.za","source_url":"https://phishdestroy.io/domain/workingafrica.co.za/"}],"url":"https://domainspoof.com/live?show=all&q=www.w3-online-m-v-m-o-n-l-i-n-e26-belpp-adm.workingafrica.co.za"},{"hostname":"x-messs.com","first_observed":"2026-11-05T13:46:34.425Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"no_address","resolved":[],"resolved_at":"2026-11-05T13:46:56Z","dns_checked_at":"2026-11-06T14:34:10.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"fkqu6tqlh4wc4wcj53kpp","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T13:46:34.425Z","first_published":"2026-11-05T14:22:51.196Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=x-messs.com"},{"hostname":"xenmubeaa.shop","first_observed":"2026-11-05T13:36:04.823Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["104.21.67.190","172.67.179.196"],"resolved_at":"2026-11-05T13:36:22Z","dns_checked_at":"2026-11-06T14:34:10.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"fbtm3ea4sks2os7lrfags","kind":"reported_domain","summary":"Listed by NPA 165 (information services)","first_observed":"2026-11-05T13:36:04.823Z","first_published":"2026-11-05T14:22:51.196Z","source":"npa","source_name":"NPA 165","claim":{"category":"information services"}}],"url":"https://domainspoof.com/live?show=all&q=xenmubeaa.shop"},{"hostname":"xeprk.xyz","first_observed":"2026-11-05T13:56:59.803Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["104.21.93.9","172.67.201.222"],"resolved_at":"2026-11-05T13:59:56Z","dns_checked_at":"2026-11-06T14:34:10.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"ft7cborux7tyywn7jkaay","kind":"reported_domain","summary":"Listed by NPA 165 (information services)","first_observed":"2026-11-05T13:56:59.803Z","first_published":"2026-11-05T14:22:51.196Z","source":"npa","source_name":"NPA 165","claim":{"category":"information services"}}],"url":"https://domainspoof.com/live?show=all&q=xeprk.xyz"},{"hostname":"xnnntee.shop","first_observed":"2026-11-05T14:05:54.172Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["104.21.43.143","172.67.180.55"],"resolved_at":"2026-11-05T14:06:20Z","dns_checked_at":"2026-11-06T14:34:10.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"faimf66j7a5e6pyyy3ca7","kind":"reported_domain","summary":"Listed by NPA 165 (information services)","first_observed":"2026-11-05T14:05:54.172Z","first_published":"2026-11-05T14:22:51.196Z","source":"npa","source_name":"NPA 165","claim":{"category":"information services"}}],"url":"https://domainspoof.com/live?show=all&q=xnnntee.shop"},{"hostname":"xunchi01.buzz","first_observed":"2026-11-05T13:10:48.629Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["104.21.46.117","172.67.138.76"],"resolved_at":"2026-11-05T13:18:36Z","dns_checked_at":"2026-11-06T14:34:10.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"fh3vhkdmno7rnlcirukpf","kind":"reported_domain","summary":"Listed by NPA 165 (e-commerce)","first_observed":"2026-11-05T13:10:48.629Z","first_published":"2026-11-05T14:22:51.196Z","source":"npa","source_name":"NPA 165","claim":{"category":"e-commerce"}}],"url":"https://domainspoof.com/live?show=all&q=xunchi01.buzz"},{"hostname":"y711tw25.store","first_observed":"2026-11-05T13:56:59.803Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["104.21.78.182","172.67.168.83"],"resolved_at":"2026-11-05T13:59:56Z","dns_checked_at":"2026-11-06T14:34:10.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"fzfqqnczenvljhqotv7qe","kind":"reported_domain","summary":"Listed by NPA 165 (e-commerce)","first_observed":"2026-11-05T13:56:59.803Z","first_published":"2026-11-05T14:22:51.196Z","source":"npa","source_name":"NPA 165","claim":{"category":"e-commerce"}}],"url":"https://domainspoof.com/live?show=all&q=y711tw25.store"},{"hostname":"yandex.avito.pay.sbermarket.youla.sberbank.sber.prod2.hawkinswoodshop.com","first_observed":"2026-11-05T13:26:37.733Z","first_published":"2026-11-05T14:22:51.196Z","brands":[{"id":"avito","name":"Avito","url":"https://domainspoof.com/brands/avito"},{"id":"sberbank","name":"Sberbank","url":"https://domainspoof.com/brands/sberbank"},{"id":"yandex","name":"Yandex","url":"https://domainspoof.com/brands/yandex"},{"id":"youla","name":"Youla","url":"https://domainspoof.com/brands/youla"}],"dns":"resolved","resolved":["45.77.75.133","45.77.92.157","207.246.78.75"],"resolved_at":"2026-11-06T14:34:10Z","dns_checked_at":"2026-11-06T14:34:10.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"flz3l6jn7dvgcu7spu5ho","kind":"phishing_infrastructure","summary":"Resolved to 45.77.75.133, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T13:26:37.733Z","first_published":"2026-11-05T14:22:51.196Z","address":"45.77.75.133","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/avito"},{"hostname":"yativorastium.info","first_observed":"2026-11-05T13:41:18.148Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["104.21.79.29","172.67.141.53"],"resolved_at":"2026-11-05T13:41:56Z","dns_checked_at":"2026-11-06T14:34:10.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"fq6kstb5lcq6s7squ5y3x","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T13:41:18.148Z","first_published":"2026-11-05T14:22:51.196Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=yativorastium.info"},{"hostname":"yuce-mizandanim.com","first_observed":"2026-11-05T13:10:48.629Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["104.21.11.155","172.67.166.97"],"resolved_at":"2026-11-05T13:18:37Z","dns_checked_at":"2026-11-06T14:34:10.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"f4y57wmooovu7tgzarkdb","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T13:10:48.629Z","first_published":"2026-11-05T14:22:51.196Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=yuce-mizandanim.com"},{"hostname":"zenithglobalfinance.co","first_observed":"2026-11-05T13:51:49.934Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["104.21.25.12","172.67.221.141"],"resolved_at":"2026-11-05T13:55:46Z","dns_checked_at":"2026-11-06T14:34:10.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"f236uzy5s2jbg2s3xwcbe","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T13:51:49.934Z","first_published":"2026-11-05T14:22:51.196Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/zenithglobalfinance.co/"}],"url":"https://domainspoof.com/live?show=all&q=zenithglobalfinance.co"},{"hostname":"zephyrrendif-fr.live","first_observed":"2026-11-05T13:26:11.391Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["104.21.12.239","172.67.153.238"],"resolved_at":"2026-11-05T13:26:37Z","dns_checked_at":"2026-11-06T14:34:10.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"ff32ckndbnwn5tkzorsxr","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T13:26:11.391Z","first_published":"2026-11-05T14:22:51.196Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=zephyrrendif-fr.live"},{"hostname":"zervanero-es.com","first_observed":"2026-11-05T13:10:48.629Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["104.21.89.133","172.67.189.75"],"resolved_at":"2026-11-05T13:18:37Z","dns_checked_at":"2026-11-06T14:34:10.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"fkxmoervrbs5jyzvb7iy4","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T13:10:48.629Z","first_published":"2026-11-05T14:22:51.196Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=zervanero-es.com"},{"hostname":"zg.mkiu.ezgateway.net","first_observed":"2026-11-05T14:11:05.168Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["172.66.44.252","172.66.47.4"],"resolved_at":"2026-11-05T14:11:52Z","dns_checked_at":"2026-11-06T14:34:10.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"fepluakcdksfcvmzh5qc6","kind":"reported_domain","summary":"Under ezgateway.net, listed by USOM","first_observed":"2026-11-05T14:11:05.168Z","first_published":"2026-11-05T14:22:51.196Z","source":"usom","source_name":"USOM","under":"ezgateway.net"}],"url":"https://domainspoof.com/live?show=all&q=zg.mkiu.ezgateway.net"},{"hostname":"ziteq.asia","first_observed":"2026-11-05T14:00:40.663Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["104.21.89.88","172.67.157.99"],"resolved_at":"2026-11-05T14:14:53Z","dns_checked_at":"2026-11-06T14:34:10.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"fc6z3ed3blnxauk3yadre","kind":"reported_domain","summary":"Listed by NPA 165 (information services)","first_observed":"2026-11-05T14:00:40.663Z","first_published":"2026-11-05T14:22:51.196Z","source":"npa","source_name":"NPA 165","claim":{"category":"information services"}}],"url":"https://domainspoof.com/live?show=all&q=ziteq.asia"},{"hostname":"zju3-qckln-mw1e-e4p2-24zw.pages.dev","first_observed":"2026-11-05T13:10:48.629Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["172.66.44.58","172.66.47.198"],"resolved_at":"2026-11-05T13:18:37Z","dns_checked_at":"2026-11-06T14:34:10.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"f64xnyot3iziq5m4s7xrs","kind":"reported_domain","summary":"Reported by PhishTank","first_observed":"2026-11-05T13:10:48.629Z","first_published":"2026-11-05T14:22:51.196Z","source":"phishtank","source_name":"PhishTank","source_url":"https://phishtank.org/phish_detail.php?phish_id=9479699"}],"url":"https://domainspoof.com/live?show=all&q=zju3-qckln-mw1e-e4p2-24zw.pages.dev"},{"hostname":"zralojantar-cz.net","first_observed":"2026-11-05T13:26:11.391Z","first_published":"2026-11-05T14:22:51.196Z","brands":[],"dns":"resolved","resolved":["104.21.41.59","172.67.189.119"],"resolved_at":"2026-11-05T13:26:37Z","dns_checked_at":"2026-11-06T14:34:10.000Z","dns_since":"2026-11-05T14:33:25.000Z","findings":[{"id":"fxghm4q2xktach5x5yeqp","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T13:26:11.391Z","first_published":"2026-11-05T14:22:51.196Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=zralojantar-cz.net"},{"hostname":"1incn.com","first_observed":"2026-11-05T13:16:21.000Z","first_published":"2026-11-05T13:16:21.000Z","brands":[{"id":"1inch","name":"1inch","url":"https://domainspoof.com/brands/1inch"}],"dns":"resolved","resolved":["185.53.179.128"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of 1inch.com (a letter from a neighbouring key), listed by MetaMask, and reported by PhishDestroy","first_observed":"2026-11-05T13:16:21.000Z","first_published":"2026-11-05T13:16:21.000Z","of":"1inch.com","spelling":"adjacent_key","found_by":"dns_sweep","listings":[{"kind":"reported","source":"metamask","source_name":"MetaMask","host":"1incn.com","flagged_at":"2026-11-05T13:16:21Z"},{"kind":"reported","source":"phishdestroy","source_name":"PhishDestroy","host":"1incn.com","flagged_at":"2026-11-05T13:16:21Z"}]}],"url":"https://domainspoof.com/brands/1inch"},{"hostname":"adac.live","first_observed":"2026-11-05T13:16:21.000Z","first_published":"2026-11-05T13:16:21.000Z","brands":[{"id":"adac","name":"ADAC","url":"https://domainspoof.com/brands/adac"}],"dns":"resolved","resolved":["78.157.209.173"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of adac.de (same name, other ending), resolved to 78.157.209.173, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T13:16:21.000Z","first_published":"2026-11-05T13:16:21.000Z","of":"adac.de","spelling":"tld","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"78.157.209.173","flagged_at":"2026-11-05T13:16:21Z"}]}],"url":"https://domainspoof.com/brands/adac"},{"hostname":"agda.si","first_observed":"2026-11-05T13:16:21.000Z","first_published":"2026-11-05T13:16:21.000Z","brands":[{"id":"agoda","name":"Agoda","url":"https://domainspoof.com/brands/agoda"}],"dns":"resolved","resolved":["2.57.91.91"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of agoda.com (a dropped letter), resolved to 2.57.91.91, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T13:16:21.000Z","first_published":"2026-11-05T13:16:21.000Z","of":"agoda.com","spelling":"omission","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"2.57.91.91","flagged_at":"2026-11-05T13:16:21Z"}]}],"url":"https://domainspoof.com/brands/agoda"},{"hostname":"aldo.es","first_observed":"2026-11-05T13:16:21.000Z","first_published":"2026-11-05T13:16:21.000Z","brands":[{"id":"aldi","name":"ALDI","url":"https://domainspoof.com/brands/aldi"}],"dns":"resolved","resolved":["217.76.128.47"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of aldi.com (a letter from a neighbouring key), resolved to 217.76.128.47, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T13:16:21.000Z","first_published":"2026-11-05T13:16:21.000Z","of":"aldi.com","spelling":"adjacent_key","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"217.76.128.47","flagged_at":"2026-11-05T13:16:21Z"}]}],"url":"https://domainspoof.com/brands/aldi"},{"hostname":"aliespress.us","first_observed":"2026-11-05T13:16:21.000Z","first_published":"2026-11-05T13:16:21.000Z","brands":[{"id":"aliexpress","name":"AliExpress","url":"https://domainspoof.com/brands/aliexpress"}],"dns":"resolved","resolved":["216.245.197.42"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of aliexpress.com (a letter from a neighbouring key), resolved to 216.245.197.42, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T13:16:21.000Z","first_published":"2026-11-05T13:16:21.000Z","of":"aliexpress.com","spelling":"adjacent_key","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"216.245.197.42","flagged_at":"2026-11-05T13:16:21Z"}]}],"url":"https://domainspoof.com/brands/aliexpress"},{"hostname":"aliexpess.us","first_observed":"2026-11-05T13:16:21.000Z","first_published":"2026-11-05T13:16:21.000Z","brands":[{"id":"aliexpress","name":"AliExpress","url":"https://domainspoof.com/brands/aliexpress"}],"dns":"resolved","resolved":["216.245.213.75"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of aliexpress.com (a dropped letter), resolved to 216.245.213.75, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T13:16:21.000Z","first_published":"2026-11-05T13:16:21.000Z","of":"aliexpress.com","spelling":"omission","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"216.245.213.75","flagged_at":"2026-11-05T13:16:21Z"}]}],"url":"https://domainspoof.com/brands/aliexpress"},{"hostname":"aviyo.ru","first_observed":"2026-11-05T13:16:21.000Z","first_published":"2026-11-05T13:16:21.000Z","brands":[{"id":"avito","name":"Avito","url":"https://domainspoof.com/brands/avito"}],"dns":"resolved","resolved":["91.199.149.151"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of avito.ru (a letter from a neighbouring key), resolved to 91.199.149.151, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T13:16:21.000Z","first_published":"2026-11-05T13:16:21.000Z","of":"avito.ru","spelling":"adjacent_key","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"91.199.149.151","flagged_at":"2026-11-05T13:16:21Z"}]}],"url":"https://domainspoof.com/brands/avito"},{"hostname":"dacc.co","first_observed":"2026-11-05T13:16:21.000Z","first_published":"2026-11-05T13:16:21.000Z","brands":[{"id":"hong-kong-police-force","name":"Hong Kong Police Force","url":"https://domainspoof.com/brands/hong-kong-police-force"}],"dns":"resolved","resolved":["78.157.209.174"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of adcc.gov.hk (two letters swapped), resolved to 78.157.209.174, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T13:16:21.000Z","first_published":"2026-11-05T13:16:21.000Z","of":"adcc.gov.hk","spelling":"transposition","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"78.157.209.174","flagged_at":"2026-11-05T13:16:21Z"}]}],"url":"https://domainspoof.com/brands/hong-kong-police-force"},{"hostname":"dexscreener.pl","first_observed":"2026-11-05T13:16:21.000Z","first_published":"2026-11-05T13:16:21.000Z","brands":[{"id":"dex-screener","name":"DEX Screener","url":"https://domainspoof.com/brands/dex-screener"}],"dns":"resolved","resolved":["185.253.212.22"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of dexscreener.com (same name, other ending), resolved to 185.253.212.22, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T13:16:21.000Z","first_published":"2026-11-05T13:16:21.000Z","of":"dexscreener.com","spelling":"tld","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"185.253.212.22","flagged_at":"2026-11-05T13:16:21Z"}]}],"url":"https://domainspoof.com/brands/dex-screener"},{"hostname":"navyfederal-en.org","first_observed":"2026-11-05T13:16:21.000Z","first_published":"2026-11-05T13:16:21.000Z","brands":[{"id":"navy-federal-credit-union","name":"Navy Federal Credit Union","url":"https://domainspoof.com/brands/navy-federal-credit-union"}],"dns":"resolved","resolved":["154.86.119.115"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “navyfederal”, a name we match for Navy Federal Credit Union, resolved to 154.86.119.115, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T13:16:21.000Z","first_published":"2026-11-05T13:16:21.000Z","of":"navyfederal.org","spelling":"combo","match":"name","token":"navyfederal","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"154.86.119.115","flagged_at":"2026-11-05T13:16:21Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/navy-federal-credit-union"},{"hostname":"polymarket.org.pl","first_observed":"2026-11-05T13:16:21.000Z","first_published":"2026-11-05T13:16:21.000Z","brands":[{"id":"polymarket","name":"Polymarket","url":"https://domainspoof.com/brands/polymarket"}],"dns":"no_address","resolved":[],"findings":[{"kind":"lookalike","summary":"Registered lookalike of polymarket.com (same name, other ending), listed by MetaMask, and reported by PhishDestroy","first_observed":"2026-11-05T13:16:21.000Z","first_published":"2026-11-05T13:16:21.000Z","of":"polymarket.com","spelling":"tld","found_by":"dns_sweep","listings":[{"kind":"reported","source":"metamask","source_name":"MetaMask","host":"polymarket.org.pl","flagged_at":"2026-11-05T13:16:21Z"},{"kind":"reported","source":"phishdestroy","source_name":"PhishDestroy","host":"polymarket.org.pl","flagged_at":"2026-11-05T13:16:21Z"}]}],"url":"https://domainspoof.com/brands/polymarket"},{"hostname":"us-navyfederal.org","first_observed":"2026-11-05T13:16:21.000Z","first_published":"2026-11-05T13:16:21.000Z","brands":[{"id":"navy-federal-credit-union","name":"Navy Federal Credit Union","url":"https://domainspoof.com/brands/navy-federal-credit-union"}],"dns":"resolved","resolved":["154.86.119.115"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “navyfederal”, a name we match for Navy Federal Credit Union, resolved to 154.86.119.115, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T13:16:21.000Z","first_published":"2026-11-05T13:16:21.000Z","of":"navyfederal.org","spelling":"combo","match":"name","token":"navyfederal","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"154.86.119.115","flagged_at":"2026-11-05T13:16:21Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/navy-federal-credit-union"},{"hostname":"582949-ledger.com","first_observed":"2026-11-05T13:05:40.093Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"resolved","resolved":["104.21.46.245","172.67.169.135"],"resolved_at":"2026-11-05T13:05:46Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:33.000Z","findings":[{"id":"flr3iny6oenho4z37uc4m","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T13:05:40.093Z","first_published":"2026-11-05T13:14:47.841Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=582949-ledger.com"},{"hostname":"8688.one","first_observed":"2026-11-05T12:51:35.088Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"resolved","resolved":["104.21.17.63","172.67.222.253"],"resolved_at":"2026-11-05T12:51:45Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:33.000Z","findings":[{"id":"fna4cbb2azbsn32aslbwg","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T12:51:35.088Z","first_published":"2026-11-05T13:14:47.841Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=8688.one"},{"hostname":"98529-kucoin.com","first_observed":"2026-11-05T12:36:02.938Z","first_published":"2026-11-05T13:14:47.841Z","brands":[{"id":"kucoin","name":"KuCoin","url":"https://domainspoof.com/brands/kucoin"}],"dns":"resolved","resolved":["104.21.83.180","172.67.180.123","2606:4700:3033::ac43:b47b","2606:4700:3035::6815:53b4"],"resolved_at":"2026-11-05T12:36:09Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:33.000Z","findings":[{"id":"fp4kgev3gtkz3nc5hrigm","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T12:36:02.938Z","first_published":"2026-11-05T13:14:47.841Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/brands/kucoin"},{"hostname":"9syep2-9ni-in08-5djx-sqppab.pages.dev","first_observed":"2026-11-05T12:16:20.779Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"resolved","resolved":["172.66.44.105","172.66.47.151"],"resolved_at":"2026-11-05T12:16:32Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:33.000Z","findings":[{"id":"fmtvmfm7dmcxt6kxu6isd","kind":"reported_domain","summary":"Reported by PhishTank","first_observed":"2026-11-05T12:16:20.779Z","first_published":"2026-11-05T13:14:47.841Z","source":"phishtank","source_name":"PhishTank","source_url":"https://phishtank.org/phish_detail.php?phish_id=9479298"}],"url":"https://domainspoof.com/live?show=all&q=9syep2-9ni-in08-5djx-sqppab.pages.dev"},{"hostname":"aavepools.xyz","first_observed":"2026-11-05T13:05:40.093Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"resolved","resolved":["104.21.45.58","172.67.210.105"],"resolved_at":"2026-11-05T13:05:46Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:33.000Z","findings":[{"id":"fx5feckskul4p63sa2v5r","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T13:05:40.093Z","first_published":"2026-11-05T13:14:47.841Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/aavepools.xyz/"}],"url":"https://domainspoof.com/live?show=all&q=aavepools.xyz"},{"hostname":"academytest.keylines.net.in","first_observed":"2026-11-05T12:46:52.080Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"resolved","resolved":["157.15.130.67"],"resolved_at":"2026-11-05T12:47:03Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:33.000Z","findings":[{"id":"ffrde6ivoylt2gfdhwaau","kind":"reported_domain","summary":"Under keylines.net.in, listed by CERT Polska","first_observed":"2026-11-05T12:46:52.080Z","first_published":"2026-11-05T13:14:47.841Z","source":"cert_polska","source_name":"CERT Polska","under":"keylines.net.in"}],"url":"https://domainspoof.com/live?show=all&q=academytest.keylines.net.in"},{"hostname":"acey.win","first_observed":"2026-11-05T13:00:32.749Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"resolved","resolved":["104.21.82.158","172.67.158.244"],"resolved_at":"2026-11-05T13:00:39Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:33.000Z","findings":[{"id":"fs4r3mmb4wutip6rjf6hb","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T13:00:32.749Z","first_published":"2026-11-05T13:14:47.841Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/acey.win/"}],"url":"https://domainspoof.com/live?show=all&q=acey.win"},{"hostname":"actob.top","first_observed":"2026-11-05T13:05:40.093Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"resolved","resolved":["104.21.16.91","172.67.167.47"],"resolved_at":"2026-11-05T13:05:52Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:33.000Z","findings":[{"id":"fnlnavwymn5ahhehrxpru","kind":"reported_domain","summary":"Listed by MODA (one-page scam site)","first_observed":"2026-11-05T13:05:40.093Z","first_published":"2026-11-05T13:14:47.841Z","source":"moda","source_name":"MODA","claim":{"category":"one-page scam site"}}],"url":"https://domainspoof.com/live?show=all&q=actob.top"},{"hostname":"adfs.socialvisor.ru","first_observed":"2026-11-05T12:41:10.480Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"resolved","resolved":["91.215.41.91"],"resolved_at":"2026-11-05T12:43:48Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:33.000Z","findings":[{"id":"f2zjrmz3jyxrbq5j3h5bq","kind":"reported_domain","summary":"Under socialvisor.ru, reported by PhishDestroy","first_observed":"2026-11-05T12:41:10.480Z","first_published":"2026-11-05T13:14:47.841Z","source":"phishdestroy","source_name":"PhishDestroy","under":"socialvisor.ru","source_url":"https://phishdestroy.io/domain/socialvisor.ru/"}],"url":"https://domainspoof.com/live?show=all&q=adfs.socialvisor.ru"},{"hostname":"admin.stantexcapital.com","first_observed":"2026-11-05T13:00:32.749Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"resolved","resolved":["192.142.53.230"],"resolved_at":"2026-11-05T13:00:39Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:33.000Z","findings":[{"id":"fesxzstbwl2ndrdmquumg","kind":"reported_domain","summary":"Under stantexcapital.com, reported by PhishDestroy","first_observed":"2026-11-05T13:00:32.749Z","first_published":"2026-11-05T13:14:47.841Z","source":"phishdestroy","source_name":"PhishDestroy","under":"stantexcapital.com","source_url":"https://phishdestroy.io/domain/stantexcapital.com/"}],"url":"https://domainspoof.com/live?show=all&q=admin.stantexcapital.com"},{"hostname":"alertmanager.test.io-int.se","first_observed":"2026-11-05T12:46:52.080Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"resolved","resolved":["46.246.48.153"],"resolved_at":"2026-11-05T12:47:11Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:33.000Z","findings":[{"id":"fbns6cw26g4lveibswy23","kind":"reported_domain","summary":"Under io-int.se, listed by MetaMask","first_observed":"2026-11-05T12:46:52.080Z","first_published":"2026-11-05T13:14:47.841Z","source":"metamask","source_name":"MetaMask","under":"io-int.se"}],"url":"https://domainspoof.com/live?show=all&q=alertmanager.test.io-int.se"},{"hostname":"allianz-fuer-hiddenseer.de","first_observed":"2026-11-05T12:16:36.756Z","first_published":"2026-11-05T13:14:47.841Z","brands":[{"id":"allianz","name":"Allianz","url":"https://domainspoof.com/brands/allianz"}],"dns":"resolved","resolved":["81.169.145.75"],"resolved_at":"2026-11-06T13:23:04Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:33.000Z","findings":[{"id":"f3pucfh4zm3ykgcwxmcrw","kind":"phishing_infrastructure","summary":"Resolved to 81.169.145.75, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T12:16:36.756Z","first_published":"2026-11-05T13:14:47.841Z","address":"81.169.145.75","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/allianz"},{"hostname":"alpha-aml.com","first_observed":"2026-11-05T12:05:52.666Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"resolved","resolved":["104.21.30.139","172.67.172.248"],"resolved_at":"2026-11-05T12:06:11Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:33.000Z","findings":[{"id":"fut3xwy3xpfpz6uvybhz3","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T12:05:52.666Z","first_published":"2026-11-05T13:14:47.841Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/alpha-aml.com/"}],"url":"https://domainspoof.com/live?show=all&q=alpha-aml.com"},{"hostname":"amtclassaction.com","first_observed":"2026-11-05T12:46:52.080Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"resolved","resolved":["104.21.37.143","172.67.209.43"],"resolved_at":"2026-11-05T12:47:11Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:33.000Z","findings":[{"id":"foxxggt56mg3fadt7ggyt","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T12:46:52.080Z","first_published":"2026-11-05T13:14:47.841Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=amtclassaction.com"},{"hostname":"api.traderlexiprosolution-com.financecryptoworld.com","first_observed":"2026-11-05T12:10:36.424Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"resolved","resolved":["104.21.10.130","172.67.131.121"],"resolved_at":"2026-11-05T12:10:53Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:33.000Z","findings":[{"id":"f2nxcmgw36hahrvom6ofr","kind":"reported_domain","summary":"Under financecryptoworld.com, listed by CERT Polska","first_observed":"2026-11-05T12:10:36.424Z","first_published":"2026-11-05T13:14:47.841Z","source":"cert_polska","source_name":"CERT Polska","under":"financecryptoworld.com"}],"url":"https://domainspoof.com/live?show=all&q=api.traderlexiprosolution-com.financecryptoworld.com"},{"hostname":"app-pr-2758.keeperhub.com","first_observed":"2026-11-05T12:46:52.080Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"no_address","resolved":["104.26.12.47","104.26.13.47","172.67.74.127"],"resolved_at":"2026-11-05T12:47:11Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:33.000Z","findings":[{"id":"fkq672rmgccrdebrnq6jo","kind":"reported_domain","summary":"Under keeperhub.com, reported by PhishDestroy","first_observed":"2026-11-05T12:46:52.080Z","first_published":"2026-11-05T13:14:47.841Z","source":"phishdestroy","source_name":"PhishDestroy","under":"keeperhub.com","source_url":"https://phishdestroy.io/domain/keeperhub.com/"}],"url":"https://domainspoof.com/live?show=all&q=app-pr-2758.keeperhub.com"},{"hostname":"app-trezor-com.pro","first_observed":"2026-11-05T12:36:02.938Z","first_published":"2026-11-05T13:14:47.841Z","brands":[{"id":"trezor","name":"Trezor","url":"https://domainspoof.com/brands/trezor"}],"dns":"resolved","resolved":["104.21.35.240","172.67.181.121","2606:4700:3030::6815:23f0","2606:4700:3030::ac43:b579"],"resolved_at":"2026-11-05T12:36:14Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:33.000Z","findings":[{"id":"fxjxe763y7dg6syfswosw","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T12:36:02.938Z","first_published":"2026-11-05T13:14:47.841Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/app-trezor-com.pro/"}],"url":"https://domainspoof.com/brands/trezor"},{"hostname":"app.legders-lives.net","first_observed":"2026-11-05T12:36:02.938Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"resolved","resolved":["104.21.20.120","172.67.192.168"],"resolved_at":"2026-11-05T12:36:14Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:33.000Z","findings":[{"id":"flbxcsb4zzhs7hs6nvhi7","kind":"reported_domain","summary":"Under legders-lives.net, listed by MetaMask","first_observed":"2026-11-05T12:36:02.938Z","first_published":"2026-11-05T13:14:47.841Z","source":"metamask","source_name":"MetaMask","under":"legders-lives.net"}],"url":"https://domainspoof.com/live?show=all&q=app.legders-lives.net"},{"hostname":"app.swiftship.pro","first_observed":"2026-11-05T12:46:52.080Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"resolved","resolved":["103.224.212.142"],"resolved_at":"2026-11-05T12:47:11Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:33.000Z","findings":[{"id":"fb5rzhxd4b32zb6lmwr6t","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T12:46:52.080Z","first_published":"2026-11-05T13:14:47.841Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/app.swiftship.pro/"}],"url":"https://domainspoof.com/live?show=all&q=app.swiftship.pro"},{"hostname":"artificialdoge.xyz","first_observed":"2026-11-05T12:21:03.555Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"resolved","resolved":["104.18.26.246"],"resolved_at":"2026-11-05T12:26:59Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:33.000Z","findings":[{"id":"frcssottbdtvt5377z3dc","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T12:21:03.555Z","first_published":"2026-11-05T13:14:47.841Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/artificialdoge.xyz/"}],"url":"https://domainspoof.com/live?show=all&q=artificialdoge.xyz"},{"hostname":"assethelp.co","first_observed":"2026-11-05T12:26:14.407Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"resolved","resolved":["216.198.79.1"],"resolved_at":"2026-11-05T12:28:38Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:33.000Z","findings":[{"id":"fjs3sbohnsunlnm7jc66n","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T12:26:14.407Z","first_published":"2026-11-05T13:14:47.841Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/assethelp.co/"}],"url":"https://domainspoof.com/live?show=all&q=assethelp.co"},{"hostname":"ataturkai.pro","first_observed":"2026-11-05T12:19:19.542Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"resolved","resolved":["104.21.56.4","172.67.175.30","2606:4700:3032::ac43:af1e","2606:4700:3033::6815:3804"],"resolved_at":"2026-11-05T12:19:47Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:33.000Z","findings":[{"id":"fey6u5eui2nicxebqin5b","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T12:19:19.542Z","first_published":"2026-11-05T13:14:47.841Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=ataturkai.pro"},{"hostname":"aurora.telegram-premiuma.com","first_observed":"2026-11-05T12:56:48.099Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"resolved","resolved":["78.153.139.88"],"resolved_at":"2026-11-05T12:57:06Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:33.000Z","findings":[{"id":"flnuceer4h5biq6hmqfdw","kind":"reported_domain","summary":"Under telegram-premiuma.com, reported by PhishDestroy","first_observed":"2026-11-05T12:56:48.099Z","first_published":"2026-11-05T13:14:47.841Z","source":"phishdestroy","source_name":"PhishDestroy","under":"telegram-premiuma.com","source_url":"https://phishdestroy.io/domain/telegram-premiuma.com/"}],"url":"https://domainspoof.com/live?show=all&q=aurora.telegram-premiuma.com"},{"hostname":"auth-ledger-live-dyc.pages.dev","first_observed":"2026-11-05T12:51:35.088Z","first_published":"2026-11-05T13:14:47.841Z","brands":[{"id":"ledger","name":"Ledger","url":"https://domainspoof.com/brands/ledger"}],"dns":"resolved","resolved":["172.66.44.75","172.66.47.181","2606:4700:310c::ac42:2c4b","2606:4700:310c::ac42:2fb5"],"resolved_at":"2026-11-05T12:51:49Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:33.000Z","findings":[{"id":"fh52dpfpw3afjmakssm4f","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T12:51:35.088Z","first_published":"2026-11-05T13:14:47.841Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/brands/ledger"},{"hostname":"auth-ledger-live-home.pages.dev","first_observed":"2026-11-05T12:46:52.080Z","first_published":"2026-11-05T13:14:47.841Z","brands":[{"id":"ledger","name":"Ledger","url":"https://domainspoof.com/brands/ledger"}],"dns":"resolved","resolved":["172.66.45.18","172.66.46.238","2606:4700:310c::ac42:2d12","2606:4700:310c::ac42:2eee"],"resolved_at":"2026-11-05T12:47:11Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:33.000Z","findings":[{"id":"fvs5mawjjzk3nhtxsobhi","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T12:46:52.080Z","first_published":"2026-11-05T13:14:47.841Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/brands/ledger"},{"hostname":"auth-ledger-livee.pages.dev","first_observed":"2026-11-05T13:05:40.093Z","first_published":"2026-11-05T13:14:47.841Z","brands":[{"id":"ledger","name":"Ledger","url":"https://domainspoof.com/brands/ledger"}],"dns":"resolved","resolved":["172.66.44.153","172.66.47.103","2606:4700:310c::ac42:2c99","2606:4700:310c::ac42:2f67"],"resolved_at":"2026-11-05T13:05:51Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:33.000Z","findings":[{"id":"fbqr5ic7hn5vt43nrol5g","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T13:05:40.093Z","first_published":"2026-11-05T13:14:47.841Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/brands/ledger"},{"hostname":"autoconfig.getbfinexorg.com","first_observed":"2026-11-05T12:26:14.407Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"resolved","resolved":["94.23.160.246"],"resolved_at":"2026-11-05T12:28:39Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:33.000Z","findings":[{"id":"f5xehw2qh5fvyksnrxfpc","kind":"reported_domain","summary":"Under getbfinexorg.com, reported by PhishDestroy","first_observed":"2026-11-05T12:26:14.407Z","first_published":"2026-11-05T13:14:47.841Z","source":"phishdestroy","source_name":"PhishDestroy","under":"getbfinexorg.com","source_url":"https://phishdestroy.io/domain/getbfinexorg.com/"}],"url":"https://domainspoof.com/live?show=all&q=autoconfig.getbfinexorg.com"},{"hostname":"autodiscover.getbfinexorg.com","first_observed":"2026-11-05T12:26:14.407Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"resolved","resolved":["94.23.160.246"],"resolved_at":"2026-11-05T12:28:39Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:33.000Z","findings":[{"id":"fgszvq2wshlygpqhvzbp5","kind":"reported_domain","summary":"Under getbfinexorg.com, reported by PhishDestroy","first_observed":"2026-11-05T12:26:14.407Z","first_published":"2026-11-05T13:14:47.841Z","source":"phishdestroy","source_name":"PhishDestroy","under":"getbfinexorg.com","source_url":"https://phishdestroy.io/domain/getbfinexorg.com/"}],"url":"https://domainspoof.com/live?show=all&q=autodiscover.getbfinexorg.com"},{"hostname":"avvenriamm.store","first_observed":"2026-11-05T12:19:19.542Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"not_found","resolved":["104.21.9.242","172.67.161.198","2606:4700:3036::ac43:a1c6","2606:4700:3037::6815:9f2"],"resolved_at":"2026-11-05T12:19:47Z","dns_checked_at":"2026-11-06T15:25:47.000Z","findings":[{"id":"fs4szpjs45r24xt2mabtk","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T12:19:19.542Z","first_published":"2026-11-05T13:14:47.841Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=avvenriamm.store"},{"hostname":"ayetelkursi.net","first_observed":"2026-11-05T12:46:52.080Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"resolved","resolved":["94.199.205.234"],"resolved_at":"2026-11-05T12:47:11Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:33.000Z","findings":[{"id":"fhmin4h3wnwmaphcknnvl","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T12:46:52.080Z","first_published":"2026-11-05T13:14:47.841Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=ayetelkursi.net"},{"hostname":"basejci.com","first_observed":"2026-11-05T13:05:40.093Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"resolved","resolved":["104.21.53.176","172.67.215.213"],"resolved_at":"2026-11-05T13:06:14Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:33.000Z","findings":[{"id":"fsnpkkd4se4ixujvbabty","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T13:05:40.093Z","first_published":"2026-11-05T13:14:47.841Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=basejci.com"},{"hostname":"beansbet-app.com","first_observed":"2026-11-05T12:26:14.407Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"resolved","resolved":["13.248.169.48","76.223.54.146"],"resolved_at":"2026-11-05T12:28:48Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:33.000Z","findings":[{"id":"ftvpyf57sjmf4puwvxlai","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T12:26:14.407Z","first_published":"2026-11-05T13:14:47.841Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/beansbet-app.com/"}],"url":"https://domainspoof.com/live?show=all&q=beansbet-app.com"},{"hostname":"binanceclub.com.cn","first_observed":"2026-11-05T13:05:40.093Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"resolved","resolved":["43.239.165.12"],"resolved_at":"2026-11-05T13:06:14Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:33.000Z","findings":[{"id":"fdbybogzdt7goc5ymcanw","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T13:05:40.093Z","first_published":"2026-11-05T13:14:47.841Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=binanceclub.com.cn"},{"hostname":"bintflw.com","first_observed":"2026-11-05T12:51:35.088Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"resolved","resolved":["104.21.37.62","172.67.205.6"],"resolved_at":"2026-11-05T12:51:55Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:33.000Z","findings":[{"id":"fzsseyhrl3gc7xr5wqzcl","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T12:51:35.088Z","first_published":"2026-11-05T13:14:47.841Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=bintflw.com"},{"hostname":"bixprofixsystem.pro","first_observed":"2026-11-05T12:56:48.099Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"resolved","resolved":["104.21.70.38","172.67.219.111"],"resolved_at":"2026-11-06T04:00:49Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:33.000Z","findings":[{"id":"f57jaoechsir5ubomzzug","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T12:56:48.099Z","first_published":"2026-11-05T13:14:47.841Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=bixprofixsystem.pro"},{"hostname":"bluefen.org","first_observed":"2026-11-05T13:05:40.093Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"resolved","resolved":["104.21.82.81","172.67.155.58"],"resolved_at":"2026-11-05T13:06:14Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:33.000Z","findings":[{"id":"feyzxyucdpmicsij7foos","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T13:05:40.093Z","first_published":"2026-11-05T13:14:47.841Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=bluefen.org"},{"hostname":"bright-yieldenance.info","first_observed":"2026-11-05T12:19:19.542Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"resolved","resolved":["104.21.2.243","172.67.129.214"],"resolved_at":"2026-11-05T13:21:51Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:33.000Z","findings":[{"id":"fffhkv5r4zmagj2fqzjwh","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T12:19:19.542Z","first_published":"2026-11-05T13:14:47.841Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=bright-yieldenance.info"},{"hostname":"bsc-test-2025.slerf.tools","first_observed":"2026-11-05T13:00:32.749Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"resolved","resolved":["104.20.36.108","172.66.151.250"],"resolved_at":"2026-11-05T13:04:23Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:33.000Z","findings":[{"id":"f3zikduyuziw3ru3zhw3g","kind":"reported_domain","summary":"Under slerf.tools, reported by PhishDestroy","first_observed":"2026-11-05T13:00:32.749Z","first_published":"2026-11-05T13:14:47.841Z","source":"phishdestroy","source_name":"PhishDestroy","under":"slerf.tools","source_url":"https://phishdestroy.io/domain/slerf.tools/"}],"url":"https://domainspoof.com/live?show=all&q=bsc-test-2025.slerf.tools"},{"hostname":"canary.aml.legal","first_observed":"2026-11-05T12:56:48.099Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"resolved","resolved":["186.2.175.179"],"resolved_at":"2026-11-05T13:02:27Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:33.000Z","findings":[{"id":"fftyellru5axzdaxy7qc6","kind":"reported_domain","summary":"Under aml.legal, reported by PhishDestroy","first_observed":"2026-11-05T12:56:48.099Z","first_published":"2026-11-05T13:14:47.841Z","source":"phishdestroy","source_name":"PhishDestroy","under":"aml.legal","source_url":"https://phishdestroy.io/domain/aml.legal/"}],"url":"https://domainspoof.com/live?show=all&q=canary.aml.legal"},{"hostname":"capitalequity-markets.com","first_observed":"2026-11-05T12:41:10.480Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"resolved","resolved":["104.21.27.10","172.67.140.75"],"resolved_at":"2026-11-05T12:44:44Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:33.000Z","findings":[{"id":"ftfxokwsyexmczyxhvhis","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T12:41:10.480Z","first_published":"2026-11-05T13:14:47.841Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/capitalequity-markets.com/"}],"url":"https://domainspoof.com/live?show=all&q=capitalequity-markets.com"},{"hostname":"ccceu-shoes.shop","first_observed":"2026-11-05T12:36:02.938Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"resolved","resolved":["104.18.3.225"],"resolved_at":"2026-11-06T00:06:09Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:33.000Z","findings":[{"id":"fgzrtmsro2pn6m43u5gta","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T12:36:02.938Z","first_published":"2026-11-05T13:14:47.841Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=ccceu-shoes.shop"},{"hostname":"cepteteb-com-tr-emekli-ozel.my-homeip.de","first_observed":"2026-11-05T12:45:35.168Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"not_found","resolved":["3.67.168.154"],"resolved_at":"2026-11-05T12:45:36Z","dns_checked_at":"2026-11-06T15:25:47.000Z","findings":[{"id":"fvzacba3kopj6ii2roqtl","kind":"reported_domain","summary":"Listed by USOM","first_observed":"2026-11-05T12:45:35.168Z","first_published":"2026-11-05T13:14:47.841Z","source":"usom","source_name":"USOM"}],"url":"https://domainspoof.com/live?show=all&q=cepteteb-com-tr-emekli-ozel.my-homeip.de"},{"hostname":"chainlink-test-web.pages.dev","first_observed":"2026-11-05T12:36:02.938Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"resolved","resolved":["172.66.45.11","172.66.46.245"],"resolved_at":"2026-11-05T12:36:14Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:33.000Z","findings":[{"id":"f6p4dyoxfyezkmhbpkknx","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T12:36:02.938Z","first_published":"2026-11-05T13:14:47.841Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=chainlink-test-web.pages.dev"},{"hostname":"claim-pepe.app","first_observed":"2026-11-05T12:16:20.779Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"resolved","resolved":["104.21.40.27","172.67.174.153"],"resolved_at":"2026-11-05T12:25:07Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:33.000Z","findings":[{"id":"fm55owyo4kmetsydfnrh7","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T12:16:20.779Z","first_published":"2026-11-05T13:14:47.841Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/claim-pepe.app/"}],"url":"https://domainspoof.com/live?show=all&q=claim-pepe.app"},{"hostname":"claimrewards-robinhood.live","first_observed":"2026-11-05T12:51:35.088Z","first_published":"2026-11-05T13:14:47.841Z","brands":[{"id":"robinhood","name":"Robinhood","url":"https://domainspoof.com/brands/robinhood"}],"dns":"resolved","resolved":["104.21.41.176","172.67.149.19","2606:4700:3035::6815:29b0","2606:4700:3037::ac43:9513"],"resolved_at":"2026-11-05T12:51:58Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:33.000Z","findings":[{"id":"fu56pslsc7c4psqxwfq7l","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T12:51:35.088Z","first_published":"2026-11-05T13:14:47.841Z","source":"metamask","source_name":"MetaMask"},{"kind":"lookalike","summary":"Registered lookalike of robinhood.com (the name with an added word), listed by MetaMask","first_observed":"2026-11-05T17:53:28.000Z","first_published":"2026-11-05T17:53:28.000Z","of":"robinhood.com","spelling":"combo","found_by":"zone_file","listings":[{"kind":"reported","source":"metamask","source_name":"MetaMask","host":"claimrewards-robinhood.live","flagged_at":"2026-11-05T17:53:28Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/robinhood"},{"hostname":"claimtether.sbs","first_observed":"2026-11-05T13:00:32.749Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"resolved","resolved":["104.21.68.165","172.67.196.228"],"resolved_at":"2026-11-05T13:04:27Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:33.000Z","findings":[{"id":"fvy7vci7kuwvl6ztibg32","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T13:00:32.749Z","first_published":"2026-11-05T13:14:47.841Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/claimtether.sbs/"}],"url":"https://domainspoof.com/live?show=all&q=claimtether.sbs"},{"hostname":"coarl.pro","first_observed":"2026-11-05T12:16:20.779Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"resolved","resolved":["104.21.60.93","172.67.195.127"],"resolved_at":"2026-11-05T12:25:07Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:33.000Z","findings":[{"id":"f2wzzn6l2bu3zifn3vp7p","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T12:16:20.779Z","first_published":"2026-11-05T13:14:47.841Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=coarl.pro"},{"hostname":"coin-spike.com","first_observed":"2026-11-05T12:16:20.779Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"resolved","resolved":["104.21.20.233","172.67.194.193"],"resolved_at":"2026-11-05T12:25:07Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:33.000Z","findings":[{"id":"f2ukiwqbsqpu3eod5tutk","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T12:16:20.779Z","first_published":"2026-11-05T13:14:47.841Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/coin-spike.com/"}],"url":"https://domainspoof.com/live?show=all&q=coin-spike.com"},{"hostname":"coniazzura.live","first_observed":"2026-11-05T12:19:19.542Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"resolved","resolved":["104.21.91.19","172.67.208.50","2606:4700:3030::6815:5b13","2606:4700:3033::ac43:d032"],"resolved_at":"2026-11-05T12:19:47Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:33.000Z","findings":[{"id":"fjgmhmeq6qnciyxoohehy","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T12:19:19.542Z","first_published":"2026-11-05T13:14:47.841Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=coniazzura.live"},{"hostname":"console.aml.legal","first_observed":"2026-11-05T12:56:48.099Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"resolved","resolved":["186.2.175.179"],"resolved_at":"2026-11-05T13:02:28Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:33.000Z","findings":[{"id":"ftsyv57khit2wdwnrcuj2","kind":"reported_domain","summary":"Under aml.legal, reported by PhishDestroy","first_observed":"2026-11-05T12:56:48.099Z","first_published":"2026-11-05T13:14:47.841Z","source":"phishdestroy","source_name":"PhishDestroy","under":"aml.legal","source_url":"https://phishdestroy.io/domain/aml.legal/"}],"url":"https://domainspoof.com/live?show=all&q=console.aml.legal"},{"hostname":"copper.sberbankmobile.ru","first_observed":"2026-11-05T12:45:08.143Z","first_published":"2026-11-05T13:14:47.841Z","brands":[{"id":"sberbank","name":"Sberbank","url":"https://domainspoof.com/brands/sberbank"}],"dns":"resolved","resolved":["87.242.79.60"],"resolved_at":"2026-11-06T13:23:04Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:33.000Z","findings":[{"id":"fdsqyskxj3xlqckstm2bz","kind":"phishing_infrastructure","summary":"Resolved to 87.242.79.60, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T12:45:08.143Z","first_published":"2026-11-05T13:14:47.841Z","address":"87.242.79.60","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/sberbank"},{"hostname":"corelith.vip","first_observed":"2026-11-05T12:05:52.666Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"resolved","resolved":["104.21.62.219","172.67.139.153"],"resolved_at":"2026-11-05T12:17:11Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:33.000Z","findings":[{"id":"fkr7uijbddck3smhx4trr","kind":"reported_domain","summary":"Listed by USOM","first_observed":"2026-11-05T12:05:52.666Z","first_published":"2026-11-05T13:14:47.841Z","source":"usom","source_name":"USOM"}],"url":"https://domainspoof.com/live?show=all&q=corelith.vip"},{"hostname":"covriposte.store","first_observed":"2026-11-05T12:19:19.542Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"not_found","resolved":["104.21.5.83","172.67.133.53","2606:4700:3034::6815:553","2606:4700:3036::ac43:8535"],"resolved_at":"2026-11-05T12:19:47Z","dns_checked_at":"2026-11-06T15:25:47.000Z","findings":[{"id":"fasjgvqke6ipz47nx57xq","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T12:19:19.542Z","first_published":"2026-11-05T13:14:47.841Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=covriposte.store"},{"hostname":"cpanel.getbfinexorg.com","first_observed":"2026-11-05T12:26:14.407Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"resolved","resolved":["94.23.160.246"],"resolved_at":"2026-11-05T12:28:58Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:33.000Z","findings":[{"id":"fmf5m7ijb2k3ht4r5zqwc","kind":"reported_domain","summary":"Under getbfinexorg.com, reported by PhishDestroy","first_observed":"2026-11-05T12:26:14.407Z","first_published":"2026-11-05T13:14:47.841Z","source":"phishdestroy","source_name":"PhishDestroy","under":"getbfinexorg.com","source_url":"https://phishdestroy.io/domain/getbfinexorg.com/"}],"url":"https://domainspoof.com/live?show=all&q=cpanel.getbfinexorg.com"},{"hostname":"cpanel.unitedconcordinvestment.com","first_observed":"2026-11-05T12:36:02.938Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"resolved","resolved":["159.100.6.5"],"resolved_at":"2026-11-05T12:36:25Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:33.000Z","findings":[{"id":"f4c7j6fdnvxg6wz4b7hti","kind":"reported_domain","summary":"Under unitedconcordinvestment.com, reported by PhishDestroy","first_observed":"2026-11-05T12:36:02.938Z","first_published":"2026-11-05T13:14:47.841Z","source":"phishdestroy","source_name":"PhishDestroy","under":"unitedconcordinvestment.com","source_url":"https://phishdestroy.io/domain/unitedconcordinvestment.com/"}],"url":"https://domainspoof.com/live?show=all&q=cpanel.unitedconcordinvestment.com"},{"hostname":"cpcalendars.getbfinexorg.com","first_observed":"2026-11-05T12:26:14.407Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"resolved","resolved":["94.23.160.246"],"resolved_at":"2026-11-05T12:28:58Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:33.000Z","findings":[{"id":"fcynvgowys6tdd4x57i4m","kind":"reported_domain","summary":"Under getbfinexorg.com, reported by PhishDestroy","first_observed":"2026-11-05T12:26:14.407Z","first_published":"2026-11-05T13:14:47.841Z","source":"phishdestroy","source_name":"PhishDestroy","under":"getbfinexorg.com","source_url":"https://phishdestroy.io/domain/getbfinexorg.com/"}],"url":"https://domainspoof.com/live?show=all&q=cpcalendars.getbfinexorg.com"},{"hostname":"cpcalendars.unitedconcordinvestment.com","first_observed":"2026-11-05T12:36:02.938Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"resolved","resolved":["159.100.6.5"],"resolved_at":"2026-11-05T12:36:25Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:33.000Z","findings":[{"id":"fsj2lpwtf445xiob2qm6u","kind":"reported_domain","summary":"Under unitedconcordinvestment.com, reported by PhishDestroy","first_observed":"2026-11-05T12:36:02.938Z","first_published":"2026-11-05T13:14:47.841Z","source":"phishdestroy","source_name":"PhishDestroy","under":"unitedconcordinvestment.com","source_url":"https://phishdestroy.io/domain/unitedconcordinvestment.com/"}],"url":"https://domainspoof.com/live?show=all&q=cpcalendars.unitedconcordinvestment.com"},{"hostname":"cpcontacts.getbfinexorg.com","first_observed":"2026-11-05T12:26:14.407Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"resolved","resolved":["94.23.160.246"],"resolved_at":"2026-11-05T12:28:58Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:33.000Z","findings":[{"id":"f44k2gbj7pv3owdmh65l4","kind":"reported_domain","summary":"Under getbfinexorg.com, reported by PhishDestroy","first_observed":"2026-11-05T12:26:14.407Z","first_published":"2026-11-05T13:14:47.841Z","source":"phishdestroy","source_name":"PhishDestroy","under":"getbfinexorg.com","source_url":"https://phishdestroy.io/domain/getbfinexorg.com/"}],"url":"https://domainspoof.com/live?show=all&q=cpcontacts.getbfinexorg.com"},{"hostname":"cpcontacts.unitedconcordinvestment.com","first_observed":"2026-11-05T12:36:02.938Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"resolved","resolved":["159.100.6.5"],"resolved_at":"2026-11-05T12:36:25Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:33.000Z","findings":[{"id":"frp2cmmeqwi4nwqwcbm5h","kind":"reported_domain","summary":"Under unitedconcordinvestment.com, reported by PhishDestroy","first_observed":"2026-11-05T12:36:02.938Z","first_published":"2026-11-05T13:14:47.841Z","source":"phishdestroy","source_name":"PhishDestroy","under":"unitedconcordinvestment.com","source_url":"https://phishdestroy.io/domain/unitedconcordinvestment.com/"}],"url":"https://domainspoof.com/live?show=all&q=cpcontacts.unitedconcordinvestment.com"},{"hostname":"crimson-tours.com","first_observed":"2026-11-05T12:21:03.555Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"resolved","resolved":["104.21.10.235","172.67.164.206"],"resolved_at":"2026-11-05T12:21:22Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:33.000Z","findings":[{"id":"fxqvexh7qdorzbslkmydb","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T12:21:03.555Z","first_published":"2026-11-05T13:14:47.841Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=crimson-tours.com"},{"hostname":"cunebosb.shop","first_observed":"2026-11-05T12:26:14.407Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"resolved","resolved":["104.21.66.70","172.67.168.15"],"resolved_at":"2026-11-05T12:28:58Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:33.000Z","findings":[{"id":"fnpucfrd5bire32tx643r","kind":"reported_domain","summary":"Listed by NPA 165 (e-commerce)","first_observed":"2026-11-05T12:26:14.407Z","first_published":"2026-11-05T13:14:47.841Z","source":"npa","source_name":"NPA 165","claim":{"category":"e-commerce"}}],"url":"https://domainspoof.com/live?show=all&q=cunebosb.shop"},{"hostname":"d8si-gy2uy-jvgx-jhq4z-er6p.pages.dev","first_observed":"2026-11-05T12:36:02.938Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"resolved","resolved":["172.66.45.8","172.66.46.248"],"resolved_at":"2026-11-05T12:36:26Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:33.000Z","findings":[{"id":"f42x7bv6gnyzfsbwvrztp","kind":"reported_domain","summary":"Reported by PhishTank","first_observed":"2026-11-05T12:36:02.938Z","first_published":"2026-11-05T13:14:47.841Z","source":"phishtank","source_name":"PhishTank","source_url":"https://phishtank.org/phish_detail.php?phish_id=9479341"}],"url":"https://domainspoof.com/live?show=all&q=d8si-gy2uy-jvgx-jhq4z-er6p.pages.dev"},{"hostname":"darknetmarket.store","first_observed":"2026-11-05T12:10:36.424Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"resolved","resolved":["104.21.54.36","172.67.223.30"],"resolved_at":"2026-11-05T12:11:10Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:33.000Z","findings":[{"id":"f626kqwpjb7m7zfliqhob","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T12:10:36.424Z","first_published":"2026-11-05T13:14:47.841Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/darknetmarket.store/"}],"url":"https://domainspoof.com/live?show=all&q=darknetmarket.store"},{"hostname":"dashboard.test.io-int.se","first_observed":"2026-11-05T12:46:52.080Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"resolved","resolved":["46.246.48.153"],"resolved_at":"2026-11-05T12:57:24Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:33.000Z","findings":[{"id":"fkene2v5rxwf2ov7kwldd","kind":"reported_domain","summary":"Under io-int.se, listed by MetaMask","first_observed":"2026-11-05T12:46:52.080Z","first_published":"2026-11-05T13:14:47.841Z","source":"metamask","source_name":"MetaMask","under":"io-int.se"}],"url":"https://domainspoof.com/live?show=all&q=dashboard.test.io-int.se"},{"hostname":"de.stanlay1913.com","first_observed":"2026-11-05T12:16:20.779Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"resolved","resolved":["104.21.24.161","172.67.219.152"],"resolved_at":"2026-11-05T12:25:18Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:33.000Z","findings":[{"id":"fmybw5otw2o5vrnlvm6xh","kind":"reported_domain","summary":"Under stanlay1913.com, listed by CERT Polska","first_observed":"2026-11-05T12:16:20.779Z","first_published":"2026-11-05T13:14:47.841Z","source":"cert_polska","source_name":"CERT Polska","under":"stanlay1913.com"}],"url":"https://domainspoof.com/live?show=all&q=de.stanlay1913.com"},{"hostname":"deal-account.org","first_observed":"2026-11-05T12:56:48.099Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"resolved","resolved":["104.21.14.211","172.67.160.147"],"resolved_at":"2026-11-05T13:02:33Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:33.000Z","findings":[{"id":"fblcilfuc6mbqqvwppnj7","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T12:56:48.099Z","first_published":"2026-11-05T13:14:47.841Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=deal-account.org"},{"hostname":"dev2.aml.legal","first_observed":"2026-11-05T12:56:48.099Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"resolved","resolved":["186.2.175.179"],"resolved_at":"2026-11-05T13:02:33Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:33.000Z","findings":[{"id":"fa32okx3qrllm3z5xsuyz","kind":"reported_domain","summary":"Under aml.legal, reported by PhishDestroy","first_observed":"2026-11-05T12:56:48.099Z","first_published":"2026-11-05T13:14:47.841Z","source":"phishdestroy","source_name":"PhishDestroy","under":"aml.legal","source_url":"https://phishdestroy.io/domain/aml.legal/"}],"url":"https://domainspoof.com/live?show=all&q=dev2.aml.legal"},{"hostname":"dhsddt.com","first_observed":"2026-11-05T12:36:02.938Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"resolved","resolved":["183.136.138.170"],"resolved_at":"2026-11-05T12:36:26Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:33.000Z","findings":[{"id":"fluxpha3idqb4aba2ml3q","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T12:36:02.938Z","first_published":"2026-11-05T13:14:47.841Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=dhsddt.com"},{"hostname":"dify.floydldevine.com","first_observed":"2026-11-05T12:05:52.666Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"resolved","resolved":["109.238.86.5"],"resolved_at":"2026-11-05T12:17:14Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:33.000Z","findings":[{"id":"fwhebowdeejbgjfszod63","kind":"reported_domain","summary":"Under floydldevine.com, listed by CERT Polska","first_observed":"2026-11-05T12:05:52.666Z","first_published":"2026-11-05T13:14:47.841Z","source":"cert_polska","source_name":"CERT Polska","under":"floydldevine.com"}],"url":"https://domainspoof.com/live?show=all&q=dify.floydldevine.com"},{"hostname":"doc-exodur-web.pages.dev","first_observed":"2026-11-05T13:00:32.749Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"resolved","resolved":["172.66.44.146","172.66.47.110"],"resolved_at":"2026-11-05T13:04:32Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:33.000Z","findings":[{"id":"f4kjn44qjbabvvrkhu6lw","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T13:00:32.749Z","first_published":"2026-11-05T13:14:47.841Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=doc-exodur-web.pages.dev"},{"hostname":"e-ledger.solutions","first_observed":"2026-11-05T12:56:48.099Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"resolved","resolved":["104.21.96.109","172.67.177.23"],"resolved_at":"2026-11-05T13:02:34Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:33.000Z","findings":[{"id":"f6ecv5ijc64kxve4bnycf","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T12:56:48.099Z","first_published":"2026-11-05T13:14:47.841Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=e-ledger.solutions"},{"hostname":"echallan-gov.win","first_observed":"2026-11-05T12:31:22.583Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"no_address","resolved":[],"resolved_at":"2026-11-05T12:31:38Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:33.000Z","findings":[{"id":"f6jqn3og6j5ggyqnqv7ch","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T12:31:22.583Z","first_published":"2026-11-05T13:14:47.841Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/echallan-gov.win/"}],"url":"https://domainspoof.com/live?show=all&q=echallan-gov.win"},{"hostname":"ecnea.top","first_observed":"2026-11-05T12:51:35.088Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"resolved","resolved":["104.21.15.79","172.67.161.244"],"resolved_at":"2026-11-05T12:52:03Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:33.000Z","findings":[{"id":"fjkaqllh46wge5fndpdws","kind":"reported_domain","summary":"Listed by MODA (one-page scam site)","first_observed":"2026-11-05T12:51:35.088Z","first_published":"2026-11-05T13:14:47.841Z","source":"moda","source_name":"MODA","claim":{"category":"one-page scam site"}}],"url":"https://domainspoof.com/live?show=all&q=ecnea.top"},{"hostname":"edhurpns.shop","first_observed":"2026-11-05T12:46:52.080Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"resolved","resolved":["104.21.31.88","172.67.175.194"],"resolved_at":"2026-11-05T12:57:26Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:33.000Z","findings":[{"id":"f5j5n3i2f4wic2d3fct74","kind":"reported_domain","summary":"Listed by NPA 165 (e-commerce)","first_observed":"2026-11-05T12:46:52.080Z","first_published":"2026-11-05T13:14:47.841Z","source":"npa","source_name":"NPA 165","claim":{"category":"e-commerce"}}],"url":"https://domainspoof.com/live?show=all&q=edhurpns.shop"},{"hostname":"elektroniczna-bankowosc.com","first_observed":"2026-11-05T12:19:19.542Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"resolved","resolved":["145.9.149.107"],"resolved_at":"2026-11-05T12:19:47Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:33.000Z","findings":[{"id":"ficjrplbpqxjbd434acwb","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T12:19:19.542Z","first_published":"2026-11-05T13:14:47.841Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=elektroniczna-bankowosc.com"},{"hostname":"elektroniczna-bankowosc.net","first_observed":"2026-11-05T12:19:19.542Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"resolved","resolved":["104.21.58.109","172.67.203.147","2606:4700:3030::6815:3a6d","2606:4700:3037::ac43:cb93"],"resolved_at":"2026-11-05T12:19:47Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:33.000Z","findings":[{"id":"f4bdn2duo6stoyqp4atxv","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T12:19:19.542Z","first_published":"2026-11-05T13:14:47.841Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=elektroniczna-bankowosc.net"},{"hostname":"emiao896.com","first_observed":"2026-11-05T12:56:48.099Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"resolved","resolved":["104.21.51.40","172.67.220.180"],"resolved_at":"2026-11-05T13:02:34Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:33.000Z","findings":[{"id":"finbpxqbkkinsd723rkhg","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T12:56:48.099Z","first_published":"2026-11-05T13:14:47.841Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=emiao896.com"},{"hostname":"emlzrd.com","first_observed":"2026-11-05T12:36:02.938Z","first_published":"2026-11-05T13:14:47.841Z","brands":[{"id":"jcb","name":"JCB","url":"https://domainspoof.com/brands/jcb"}],"dns":"resolved","resolved":["183.136.138.170"],"resolved_at":"2026-11-05T12:36:28Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:33.000Z","findings":[{"id":"ftcakf5wfw42re4mva6gl","kind":"reported_domain","summary":"Listed by JPCERT/CC as imitating JCB","first_observed":"2026-11-05T12:36:02.938Z","first_published":"2026-11-05T13:14:47.841Z","source":"jpcert","source_name":"JPCERT/CC","claim":{"brand":"JCB"}}],"url":"https://domainspoof.com/brands/jcb"},{"hostname":"ensou.software","first_observed":"2026-11-05T12:05:52.666Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"no_address","resolved":[],"resolved_at":"2026-11-05T12:17:16Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:33.000Z","findings":[{"id":"fkdubjvude5svykgakeml","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T12:05:52.666Z","first_published":"2026-11-05T13:14:47.841Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=ensou.software"},{"hostname":"eoxhebdoa.shop","first_observed":"2026-11-05T13:05:40.093Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"resolved","resolved":["43.154.192.95"],"resolved_at":"2026-11-06T07:33:29Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:33.000Z","findings":[{"id":"fdwdn63hbc3dfhtllqlml","kind":"reported_domain","summary":"Listed by NPA 165 (e-commerce)","first_observed":"2026-11-05T13:05:40.093Z","first_published":"2026-11-05T13:14:47.841Z","source":"npa","source_name":"NPA 165","claim":{"category":"e-commerce"}}],"url":"https://domainspoof.com/live?show=all&q=eoxhebdoa.shop"},{"hostname":"eplus.mobi","first_observed":"2026-11-05T12:17:16.420Z","first_published":"2026-11-05T13:14:47.841Z","brands":[{"id":"e-plus","name":"e+ (eplus)","url":"https://domainspoof.com/brands/e-plus"}],"dns":"resolved","resolved":["5.78.156.59","5.161.47.86","5.161.230.87","46.62.237.138","195.201.128.179"],"resolved_at":"2026-11-06T13:23:04Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:33.000Z","findings":[{"id":"fvd23qwfwjrhivmagjpwr","kind":"phishing_infrastructure","summary":"Resolved to 5.78.156.59, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T12:17:16.420Z","first_published":"2026-11-05T13:14:47.841Z","address":"5.78.156.59","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/e-plus"},{"hostname":"escorsporc.store","first_observed":"2026-11-05T12:19:19.542Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"not_found","resolved":["104.21.34.147","172.67.162.17","2606:4700:3030::6815:2293","2606:4700:3037::ac43:a211"],"resolved_at":"2026-11-05T12:19:47Z","dns_checked_at":"2026-11-06T15:25:47.000Z","findings":[{"id":"fpunrddd6vvqdnljhcf4w","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T12:19:19.542Z","first_published":"2026-11-05T13:14:47.841Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=escorsporc.store"},{"hostname":"ethenafiapp-vote.today","first_observed":"2026-11-05T12:51:35.088Z","first_published":"2026-11-05T13:14:47.841Z","brands":[{"id":"ethena","name":"Ethena","url":"https://domainspoof.com/brands/ethena"}],"dns":"resolved","resolved":["104.21.57.54","172.67.159.142","2606:4700:3030::6815:3936","2606:4700:3031::ac43:9f8e"],"resolved_at":"2026-11-05T12:52:03Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:33.000Z","findings":[{"id":"fmkbe57dj4rclu3nuyk3v","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T12:51:35.088Z","first_published":"2026-11-05T13:14:47.841Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/brands/ethena"},{"hostname":"ethereum-airdrop.live","first_observed":"2026-11-05T12:41:10.480Z","first_published":"2026-11-05T13:14:47.841Z","brands":[{"id":"ethereum","name":"Ethereum","url":"https://domainspoof.com/brands/ethereum"}],"dns":"not_found","resolved":[],"resolved_at":"2026-11-06T12:45:43Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:33.000Z","findings":[{"id":"fbs3tvwmwoesllmwl6vh5","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T12:41:10.480Z","first_published":"2026-11-05T13:14:47.841Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/ethereum-airdrop.live/"}],"url":"https://domainspoof.com/brands/ethereum"},{"hostname":"ethreg.xyz","first_observed":"2026-11-05T12:10:36.424Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"resolved","resolved":["104.21.50.233","172.67.213.142"],"resolved_at":"2026-11-05T12:11:10Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:33.000Z","findings":[{"id":"f465la55gznh2o5uak6y2","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T12:10:36.424Z","first_published":"2026-11-05T13:14:47.841Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=ethreg.xyz"},{"hostname":"eunosbfus.shop","first_observed":"2026-11-05T13:00:32.749Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"resolved","resolved":["104.21.39.251","172.67.172.123"],"resolved_at":"2026-11-05T13:04:32Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:33.000Z","findings":[{"id":"ff3yygiofr5kdki4qlzx2","kind":"reported_domain","summary":"Listed by NPA 165 (information services)","first_observed":"2026-11-05T13:00:32.749Z","first_published":"2026-11-05T13:14:47.841Z","source":"npa","source_name":"NPA 165","claim":{"category":"information services"}}],"url":"https://domainspoof.com/live?show=all&q=eunosbfus.shop"},{"hostname":"fabled-getaways.com","first_observed":"2026-11-05T12:46:52.080Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"resolved","resolved":["104.21.24.37","172.67.216.192"],"resolved_at":"2026-11-05T12:57:28Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:33.000Z","findings":[{"id":"ftqbaux6yqlsq2rbixemy","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T12:46:52.080Z","first_published":"2026-11-05T13:14:47.841Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=fabled-getaways.com"},{"hostname":"fastrenteskapet.live","first_observed":"2026-11-05T12:19:19.542Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"resolved","resolved":["172.86.84.78"],"resolved_at":"2026-11-05T13:41:46Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:33.000Z","findings":[{"id":"f4q7xockpvb5tibj3q6ce","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T12:19:19.542Z","first_published":"2026-11-05T13:14:47.841Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=fastrenteskapet.live"},{"hostname":"fejix.com","first_observed":"2026-11-05T13:05:40.093Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"resolved","resolved":["44.208.83.180","54.84.240.235"],"resolved_at":"2026-11-05T13:06:33Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:33.000Z","findings":[{"id":"f5tay3qp6fs2v6fxi4zyq","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T13:05:40.093Z","first_published":"2026-11-05T13:14:47.841Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/fejix.com/"}],"url":"https://domainspoof.com/live?show=all&q=fejix.com"},{"hostname":"fengshuimars.group","first_observed":"2026-11-05T12:31:22.583Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"resolved","resolved":["172.236.104.43","172.236.104.157","172.238.172.122"],"resolved_at":"2026-11-06T00:10:23Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:33.000Z","findings":[{"id":"foyd6nia7ar2ne5miscya","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T12:31:22.583Z","first_published":"2026-11-05T13:14:47.841Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=fengshuimars.group"},{"hostname":"ferrumfin.com","first_observed":"2026-11-05T12:51:35.088Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"resolved","resolved":["104.21.86.216","172.67.137.59"],"resolved_at":"2026-11-05T12:52:04Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:33.000Z","findings":[{"id":"f6akpl5yxnrljegu6zkyw","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T12:51:35.088Z","first_published":"2026-11-05T13:14:47.841Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=ferrumfin.com"},{"hostname":"finartex.ltd","first_observed":"2026-11-05T12:36:02.938Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"resolved","resolved":["77.37.83.149","91.108.98.108"],"resolved_at":"2026-11-05T12:36:29Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:33.000Z","findings":[{"id":"fxw3wetyxf5g5dorta37n","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T12:36:02.938Z","first_published":"2026-11-05T13:14:47.841Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/finartex.ltd/"}],"url":"https://domainspoof.com/live?show=all&q=finartex.ltd"},{"hostname":"flippingishardwiki.wiki","first_observed":"2026-11-05T12:16:20.779Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"resolved","resolved":["104.21.5.148","172.67.154.183"],"resolved_at":"2026-11-05T12:25:21Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:33.000Z","findings":[{"id":"fl4kem4tnnmf2yehhkfkv","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T12:16:20.779Z","first_published":"2026-11-05T13:14:47.841Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=flippingishardwiki.wiki"},{"hostname":"floreoarc.com","first_observed":"2026-11-05T13:00:32.749Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"resolved","resolved":["104.21.90.3","172.67.150.128"],"resolved_at":"2026-11-05T13:04:33Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:33.000Z","findings":[{"id":"fsnc6zpoawp7sjpylkviy","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T13:00:32.749Z","first_published":"2026-11-05T13:14:47.841Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=floreoarc.com"},{"hostname":"flowfoundex-nl.com","first_observed":"2026-11-05T12:19:19.542Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"resolved","resolved":["185.95.156.233"],"resolved_at":"2026-11-05T13:26:34Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:33.000Z","findings":[{"id":"fq2mori6r7y5auagkcwy5","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T12:19:19.542Z","first_published":"2026-11-05T13:14:47.841Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=flowfoundex-nl.com"},{"hostname":"flowise-hotfix.kingdom-dmc.com","first_observed":"2026-11-05T12:51:35.088Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"resolved","resolved":["185.215.4.42"],"resolved_at":"2026-11-05T12:52:04Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:33.000Z","findings":[{"id":"fvv3cjbfyyjetmeo22fja","kind":"reported_domain","summary":"Under kingdom-dmc.com, listed by MetaMask","first_observed":"2026-11-05T12:51:35.088Z","first_published":"2026-11-05T13:14:47.841Z","source":"metamask","source_name":"MetaMask","under":"kingdom-dmc.com"}],"url":"https://domainspoof.com/live?show=all&q=flowise-hotfix.kingdom-dmc.com"},{"hostname":"floxyra.info","first_observed":"2026-11-05T13:00:32.749Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"resolved","resolved":["104.21.2.18","172.67.128.149"],"resolved_at":"2026-11-05T13:04:33Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:33.000Z","findings":[{"id":"fb2b6awbyknp5npzn3adv","kind":"reported_domain","summary":"Listed by USOM","first_observed":"2026-11-05T13:00:32.749Z","first_published":"2026-11-05T13:14:47.841Z","source":"usom","source_name":"USOM"}],"url":"https://domainspoof.com/live?show=all&q=floxyra.info"},{"hostname":"flux-brick.com","first_observed":"2026-11-05T12:31:22.583Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"resolved","resolved":["104.21.52.254","172.67.206.77"],"resolved_at":"2026-11-05T12:31:40Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:33.000Z","findings":[{"id":"ftnmzik4luwgbslwmfrap","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T12:31:22.583Z","first_published":"2026-11-05T13:14:47.841Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=flux-brick.com"},{"hostname":"fplot.courses","first_observed":"2026-11-05T12:51:35.088Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"resolved","resolved":["104.21.26.240","172.67.168.156"],"resolved_at":"2026-11-05T12:52:04Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:33.000Z","findings":[{"id":"feqanvg3dntyvetfeuaso","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T12:51:35.088Z","first_published":"2026-11-05T13:14:47.841Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=fplot.courses"},{"hostname":"frene-patrimat.com","first_observed":"2026-11-05T12:19:19.542Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"resolved","resolved":["104.21.35.155","172.67.177.3"],"resolved_at":"2026-11-05T12:45:15Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:33.000Z","findings":[{"id":"fykgou5ja5gavvisbmxpq","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T12:19:19.542Z","first_published":"2026-11-05T13:14:47.841Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=frene-patrimat.com"},{"hostname":"ftp.nisantasidonercisi.com","first_observed":"2026-11-05T12:41:10.480Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"resolved","resolved":["77.245.159.230"],"resolved_at":"2026-11-05T12:45:16Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:33.000Z","findings":[{"id":"firshjqtohshjuuzhqce2","kind":"reported_domain","summary":"Under nisantasidonercisi.com, listed by CERT Polska","first_observed":"2026-11-05T12:41:10.480Z","first_published":"2026-11-05T13:14:47.841Z","source":"cert_polska","source_name":"CERT Polska","under":"nisantasidonercisi.com"}],"url":"https://domainspoof.com/live?show=all&q=ftp.nisantasidonercisi.com"},{"hostname":"fuse-tower.com","first_observed":"2026-11-05T13:05:40.093Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"resolved","resolved":["104.21.60.203","172.67.201.71"],"resolved_at":"2026-11-05T13:06:33Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:33.000Z","findings":[{"id":"fzchu5qaveknj4alcjk4q","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T13:05:40.093Z","first_published":"2026-11-05T13:14:47.841Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=fuse-tower.com"},{"hostname":"fuzzy-landings.com","first_observed":"2026-11-05T12:21:03.555Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"resolved","resolved":["104.21.86.15","172.67.214.9"],"resolved_at":"2026-11-05T12:21:22Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:33.000Z","findings":[{"id":"fqiutw7ccnpvmgrlri7lw","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T12:21:03.555Z","first_published":"2026-11-05T13:14:47.841Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=fuzzy-landings.com"},{"hostname":"getbfinexorg.com","first_observed":"2026-11-05T12:26:14.407Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"resolved","resolved":["94.23.160.246"],"resolved_at":"2026-11-05T12:29:01Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:33.000Z","findings":[{"id":"fja5nsdfeb3s3csn3akhv","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T12:26:14.407Z","first_published":"2026-11-05T13:14:47.841Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/getbfinexorg.com/"}],"url":"https://domainspoof.com/live?show=all&q=getbfinexorg.com"},{"hostname":"giris-mobil.icu","first_observed":"2026-11-05T12:51:35.088Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"resolved","resolved":["104.21.49.226","172.67.153.2"],"resolved_at":"2026-11-05T12:52:04Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:33.000Z","findings":[{"id":"fvuwkmdh6p7q3oknd4pt7","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T12:51:35.088Z","first_published":"2026-11-05T13:14:47.841Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/giris-mobil.icu/"}],"url":"https://domainspoof.com/live?show=all&q=giris-mobil.icu"},{"hostname":"glidewavenet.com","first_observed":"2026-11-05T12:36:02.938Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"resolved","resolved":["104.21.21.53","172.67.196.124"],"resolved_at":"2026-11-05T12:36:29Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:33.000Z","findings":[{"id":"fvs5hv6gmjrbzmgz3dhd4","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T12:36:02.938Z","first_published":"2026-11-05T13:14:47.841Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=glidewavenet.com"},{"hostname":"goldbet4.shop","first_observed":"2026-11-05T12:21:03.555Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"resolved","resolved":["104.21.5.61","172.67.133.8"],"resolved_at":"2026-11-05T12:21:22Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:33.000Z","findings":[{"id":"fxun3mj56uhykdb43fj3k","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T12:21:03.555Z","first_published":"2026-11-05T13:14:47.841Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=goldbet4.shop"},{"hostname":"golden-orda.biz","first_observed":"2026-11-05T12:41:10.480Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"resolved","resolved":[],"resolved_at":"2026-11-05T12:45:17Z","dns_checked_at":"2026-11-06T13:23:04.000Z","findings":[{"id":"fnstamgodnywonuc6sogl","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T12:41:10.480Z","first_published":"2026-11-05T13:14:47.841Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/golden-orda.biz/"}],"url":"https://domainspoof.com/live?show=all&q=golden-orda.biz"},{"hostname":"grafana.test.io-int.se","first_observed":"2026-11-05T12:46:52.080Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"resolved","resolved":["46.246.48.153"],"resolved_at":"2026-11-05T12:57:30Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:33.000Z","findings":[{"id":"fj6aldlbufmj3jmfd6oy4","kind":"reported_domain","summary":"Under io-int.se, listed by MetaMask","first_observed":"2026-11-05T12:46:52.080Z","first_published":"2026-11-05T13:14:47.841Z","source":"metamask","source_name":"MetaMask","under":"io-int.se"}],"url":"https://domainspoof.com/live?show=all&q=grafana.test.io-int.se"},{"hostname":"gray-budget.com","first_observed":"2026-11-05T12:16:20.779Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"resolved","resolved":["104.21.21.244","172.67.201.113"],"resolved_at":"2026-11-05T12:25:22Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:33.000Z","findings":[{"id":"f6o74t2vpxbql2dqs4vaf","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T12:16:20.779Z","first_published":"2026-11-05T13:14:47.841Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=gray-budget.com"},{"hostname":"gsecurespace.com","first_observed":"2026-11-05T12:19:19.542Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"resolved","resolved":["104.21.53.252","172.67.221.164","2606:4700:3030::6815:35fc","2606:4700:3030::ac43:dda4"],"resolved_at":"2026-11-05T12:19:47Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:33.000Z","findings":[{"id":"fnwgxc5dyye2ezno2heow","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T12:19:19.542Z","first_published":"2026-11-05T13:14:47.841Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=gsecurespace.com"},{"hostname":"gtcfx-forex.one","first_observed":"2026-11-05T12:51:35.088Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"resolved","resolved":["104.21.84.201","172.67.196.151"],"resolved_at":"2026-11-05T12:52:04Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:33.000Z","findings":[{"id":"flbdg5a7rdjwdahjhww7o","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T12:51:35.088Z","first_published":"2026-11-05T13:14:47.841Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=gtcfx-forex.one"},{"hostname":"gtcfx.exchange","first_observed":"2026-11-05T12:21:03.555Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"resolved","resolved":["104.21.28.218","172.67.147.182"],"resolved_at":"2026-11-05T12:21:24Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:33.000Z","findings":[{"id":"fvdstpnfbljlxjvq2ojg4","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T12:21:03.555Z","first_published":"2026-11-05T13:14:47.841Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=gtcfx.exchange"},{"hostname":"gumburgumburdom.com","first_observed":"2026-11-05T12:45:35.168Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"resolved","resolved":["64.89.160.238"],"resolved_at":"2026-11-05T12:45:36Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:33.000Z","findings":[{"id":"fahqpnypnlhgxzfhkezdm","kind":"reported_domain","summary":"Listed by USOM","first_observed":"2026-11-05T12:45:35.168Z","first_published":"2026-11-05T13:14:47.841Z","source":"usom","source_name":"USOM"}],"url":"https://domainspoof.com/live?show=all&q=gumburgumburdom.com"},{"hostname":"guncelses.world","first_observed":"2026-11-05T12:41:10.480Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"resolved","resolved":["104.21.94.224","172.67.140.219"],"resolved_at":"2026-11-05T12:45:16Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:33.000Z","findings":[{"id":"fhymm3ddandc5ej3nzfvt","kind":"reported_domain","summary":"Listed by USOM","first_observed":"2026-11-05T12:41:10.480Z","first_published":"2026-11-05T13:14:47.841Z","source":"usom","source_name":"USOM"}],"url":"https://domainspoof.com/live?show=all&q=guncelses.world"},{"hostname":"gurl.pro","first_observed":"2026-11-05T12:21:03.555Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"resolved","resolved":["64.29.17.1","216.198.79.1"],"resolved_at":"2026-11-05T12:21:24Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:33.000Z","findings":[{"id":"f62coisvhjzphqpser7tf","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T12:21:03.555Z","first_published":"2026-11-05T13:14:47.841Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/gurl.pro/"}],"url":"https://domainspoof.com/live?show=all&q=gurl.pro"},{"hostname":"havan-investimentos-sa.pro","first_observed":"2026-11-05T13:05:40.093Z","first_published":"2026-11-05T13:14:47.841Z","brands":[{"id":"havan","name":"Havan","url":"https://domainspoof.com/brands/havan"}],"dns":"resolved","resolved":["185.62.58.179"],"resolved_at":"2026-11-06T13:23:04Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:33.000Z","findings":[{"id":"fm4mnqgjzai5hqonk5qsu","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T13:05:40.093Z","first_published":"2026-11-05T13:14:47.841Z","source":"cert_polska","source_name":"CERT Polska"},{"id":"fdtbwdybygbr7weocf7cg","kind":"phishing_infrastructure","summary":"Resolved to 185.62.58.179, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T13:06:34.278Z","first_published":"2026-11-05T14:22:51.196Z","address":"185.62.58.179","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/havan"},{"hostname":"hljhrly.com","first_observed":"2026-11-05T12:05:52.666Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"resolved","resolved":["107.163.230.34"],"resolved_at":"2026-11-05T12:17:23Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:33.000Z","findings":[{"id":"fvsw6npvzfgzzptom2hbe","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T12:05:52.666Z","first_published":"2026-11-05T13:14:47.841Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=hljhrly.com"},{"hostname":"hoodstockers.xyz","first_observed":"2026-11-05T13:00:32.749Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"resolved","resolved":["64.29.17.1","64.29.17.65"],"resolved_at":"2026-11-05T13:04:33Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:33.000Z","findings":[{"id":"fpagvvhnxitncgh7a4pho","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T13:00:32.749Z","first_published":"2026-11-05T13:14:47.841Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/hoodstockers.xyz/"}],"url":"https://domainspoof.com/live?show=all&q=hoodstockers.xyz"},{"hostname":"hsdfa.cc","first_observed":"2026-11-05T12:16:20.779Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"resolved","resolved":["104.21.93.196","172.67.214.50"],"resolved_at":"2026-11-05T12:25:22Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:33.000Z","findings":[{"id":"fhblpjt6nencwwnscoiu5","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T12:16:20.779Z","first_published":"2026-11-05T13:14:47.841Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/hsdfa.cc/"}],"url":"https://domainspoof.com/live?show=all&q=hsdfa.cc"},{"hostname":"ht888.xinweb.xyz","first_observed":"2026-11-05T12:36:02.938Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"resolved","resolved":["104.21.13.182","172.67.132.236"],"resolved_at":"2026-11-05T12:36:30Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:33.000Z","findings":[{"id":"ffneqeqxaynyjhuu5ofdz","kind":"reported_domain","summary":"Under xinweb.xyz, listed by MetaMask","first_observed":"2026-11-05T12:36:02.938Z","first_published":"2026-11-05T13:14:47.841Z","source":"metamask","source_name":"MetaMask","under":"xinweb.xyz"}],"url":"https://domainspoof.com/live?show=all&q=ht888.xinweb.xyz"},{"hostname":"huasu02.buzz","first_observed":"2026-11-05T12:51:35.088Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"resolved","resolved":["104.21.85.124","172.67.205.182"],"resolved_at":"2026-11-05T12:52:04Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:33.000Z","findings":[{"id":"fnmiv24nk5e3tnykiqfib","kind":"reported_domain","summary":"Listed by NPA 165 (e-commerce)","first_observed":"2026-11-05T12:51:35.088Z","first_published":"2026-11-05T13:14:47.841Z","source":"npa","source_name":"NPA 165","claim":{"category":"e-commerce"}}],"url":"https://domainspoof.com/live?show=all&q=huasu02.buzz"},{"hostname":"hubs-ethena.com","first_observed":"2026-11-05T12:21:03.555Z","first_published":"2026-11-05T13:14:47.841Z","brands":[{"id":"ethena","name":"Ethena","url":"https://domainspoof.com/brands/ethena"}],"dns":"resolved","resolved":["104.21.61.96","172.67.208.151","2606:4700:3032::ac43:d097","2606:4700:3035::6815:3d60"],"resolved_at":"2026-11-05T12:21:24Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:33.000Z","findings":[{"id":"fgwwwj2dvfebqmjtbk4qm","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T12:21:03.555Z","first_published":"2026-11-05T13:14:47.841Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/brands/ethena"},{"hostname":"idp.aml.legal","first_observed":"2026-11-05T12:56:48.099Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"resolved","resolved":["186.2.175.179"],"resolved_at":"2026-11-05T13:02:36Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:33.000Z","findings":[{"id":"fie7vvbjpwfuwgbhz3tzt","kind":"reported_domain","summary":"Under aml.legal, reported by PhishDestroy","first_observed":"2026-11-05T12:56:48.099Z","first_published":"2026-11-05T13:14:47.841Z","source":"phishdestroy","source_name":"PhishDestroy","under":"aml.legal","source_url":"https://phishdestroy.io/domain/aml.legal/"}],"url":"https://domainspoof.com/live?show=all&q=idp.aml.legal"},{"hostname":"ihere.biz","first_observed":"2026-11-05T12:56:48.099Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"resolved","resolved":["104.21.18.253","172.67.184.73"],"resolved_at":"2026-11-05T13:02:36Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:33.000Z","findings":[{"id":"fgw4ahtno4cd7vyeghdqn","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T12:56:48.099Z","first_published":"2026-11-05T13:14:47.841Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/ihere.biz/"}],"url":"https://domainspoof.com/live?show=all&q=ihere.biz"},{"hostname":"indolcrapo.store","first_observed":"2026-11-05T12:19:19.542Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"resolved","resolved":["104.21.81.9","172.67.136.152","2606:4700:3032::6815:5109","2606:4700:3035::ac43:8898"],"resolved_at":"2026-11-05T12:19:47Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:33.000Z","findings":[{"id":"fy6utavqoarwq2fcrzkyb","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T12:19:19.542Z","first_published":"2026-11-05T13:14:47.841Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=indolcrapo.store"},{"hostname":"integriorb.com","first_observed":"2026-11-05T13:05:40.093Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"resolved","resolved":["104.21.58.15","172.67.197.51"],"resolved_at":"2026-11-05T13:06:34Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:33.000Z","findings":[{"id":"fdowo7ezoeydqyaz5pnff","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T13:05:40.093Z","first_published":"2026-11-05T13:14:47.841Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=integriorb.com"},{"hostname":"iopenmallsegw.com","first_observed":"2026-11-05T12:56:48.099Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"no_address","resolved":[],"resolved_at":"2026-11-05T13:02:36Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:33.000Z","findings":[{"id":"fl4rycdqa3cfwlwexnshs","kind":"reported_domain","summary":"Listed by NPA 165 (finance and insurance)","first_observed":"2026-11-05T12:56:48.099Z","first_published":"2026-11-05T13:14:47.841Z","source":"npa","source_name":"NPA 165","claim":{"category":"finance and insurance"}}],"url":"https://domainspoof.com/live?show=all&q=iopenmallsegw.com"},{"hostname":"ipkuf.asia","first_observed":"2026-11-05T12:41:10.480Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"resolved","resolved":["104.21.14.78","172.67.202.166"],"resolved_at":"2026-11-05T12:45:23Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:33.000Z","findings":[{"id":"faltv3tq32p4x2oro7yk3","kind":"reported_domain","summary":"Listed by NPA 165 (information services)","first_observed":"2026-11-05T12:41:10.480Z","first_published":"2026-11-05T13:14:47.841Z","source":"npa","source_name":"NPA 165","claim":{"category":"information services"}}],"url":"https://domainspoof.com/live?show=all&q=ipkuf.asia"},{"hostname":"irqkategoria32342341.sbs","first_observed":"2026-11-05T12:19:19.542Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"resolved","resolved":["104.21.52.216","172.67.204.30","2606:4700:3033::6815:34d8","2606:4700:3034::ac43:cc1e"],"resolved_at":"2026-11-05T12:19:46Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:33.000Z","findings":[{"id":"flu6zcwxmuldv6jbkisth","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T12:19:19.542Z","first_published":"2026-11-05T13:14:47.841Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=irqkategoria32342341.sbs"},{"hostname":"iskrownia.cyou","first_observed":"2026-11-05T12:19:19.542Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"resolved","resolved":["104.21.92.2","172.67.183.111","2606:4700:3031::ac43:b76f","2606:4700:3036::6815:5c02"],"resolved_at":"2026-11-05T12:19:46Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:33.000Z","findings":[{"id":"foznbnilc2qqjcbbydeam","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T12:19:19.542Z","first_published":"2026-11-05T13:14:47.841Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=iskrownia.cyou"},{"hostname":"iwww.pay.comyoula.pochtabank.0update.yandex.sber.prod2.hawkinswoodshop.com","first_observed":"2026-11-05T12:45:23.124Z","first_published":"2026-11-05T13:14:47.841Z","brands":[{"id":"yandex","name":"Yandex","url":"https://domainspoof.com/brands/yandex"}],"dns":"resolved","resolved":["45.77.75.133","45.77.92.157","207.246.78.75"],"resolved_at":"2026-11-06T13:23:04Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:33.000Z","findings":[{"id":"flqtlbprureiw2viwr4hj","kind":"phishing_infrastructure","summary":"Resolved to 45.77.75.133, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T12:45:23.124Z","first_published":"2026-11-05T13:14:47.841Z","address":"45.77.75.133","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/yandex"},{"hostname":"jiangning02.shop","first_observed":"2026-11-05T12:31:22.583Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"resolved","resolved":["104.21.8.237","172.67.188.212"],"resolved_at":"2026-11-05T12:31:41Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:33.000Z","findings":[{"id":"fjmpg6kdmadpsrb2deiir","kind":"reported_domain","summary":"Listed by NPA 165 (e-commerce)","first_observed":"2026-11-05T12:31:22.583Z","first_published":"2026-11-05T13:14:47.841Z","source":"npa","source_name":"NPA 165","claim":{"category":"e-commerce"}}],"url":"https://domainspoof.com/live?show=all&q=jiangning02.shop"},{"hostname":"kacsa-peru.com","first_observed":"2026-11-05T12:19:19.542Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"resolved","resolved":["196.251.122.156"],"resolved_at":"2026-11-05T12:19:46Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:33.000Z","findings":[{"id":"fal7nj2qiyxevgusks5rs","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T12:19:19.542Z","first_published":"2026-11-05T13:14:47.841Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=kacsa-peru.com"},{"hostname":"kaio.lat","first_observed":"2026-11-05T13:05:40.093Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"resolved","resolved":["104.21.88.254","172.67.155.51"],"resolved_at":"2026-11-05T13:06:36Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:33.000Z","findings":[{"id":"fd7itpctbtimalipv6aic","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T13:05:40.093Z","first_published":"2026-11-05T13:14:47.841Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=kaio.lat"},{"hostname":"kazancsal.net","first_observed":"2026-11-05T12:21:03.555Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"resolved","resolved":["104.21.7.18","172.67.155.98"],"resolved_at":"2026-11-05T12:21:24Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:33.000Z","findings":[{"id":"fvvscoajjmsyp5zlpfq3g","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T12:21:03.555Z","first_published":"2026-11-05T13:14:47.841Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=kazancsal.net"},{"hostname":"kgmostrgov.sbs","first_observed":"2026-11-05T12:56:48.099Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"no_address","resolved":[],"resolved_at":"2026-11-05T13:02:36Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:33.000Z","findings":[{"id":"fjummdgnwqiiyx23qgi4q","kind":"reported_domain","summary":"Listed by USOM","first_observed":"2026-11-05T12:56:48.099Z","first_published":"2026-11-05T13:14:47.841Z","source":"usom","source_name":"USOM"}],"url":"https://domainspoof.com/live?show=all&q=kgmostrgov.sbs"},{"hostname":"kissvan.com","first_observed":"2026-11-05T12:56:48.099Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"resolved","resolved":["104.21.15.244","172.67.209.58"],"resolved_at":"2026-11-05T13:02:36Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:33.000Z","findings":[{"id":"fklazxds5rehracamkoa4","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T12:56:48.099Z","first_published":"2026-11-05T13:14:47.841Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=kissvan.com"},{"hostname":"kredlqs.de","first_observed":"2026-11-05T12:13:04.358Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"resolved","resolved":["104.21.20.41","172.67.191.82","2606:4700:3032::6815:1429","2606:4700:3034::ac43:bf52"],"resolved_at":"2026-11-05T12:14:27Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:33.000Z","findings":[{"id":"fa3j4x64glg66fk42q4gr","kind":"reported_domain","summary":"Listed by BaFin as imitating KRED.IQs Immobiliardarlehensvermittlung GmbH (identity misuse)","first_observed":"2026-11-05T12:13:04.358Z","first_published":"2026-11-05T13:14:47.841Z","source":"bafin","source_name":"BaFin","claim":{"brand":"KRED.IQs Immobiliardarlehensvermittlung GmbH","category":"identity misuse"}}],"url":"https://domainspoof.com/live?show=all&q=kredlqs.de"},{"hostname":"kryptozantor.live","first_observed":"2026-11-05T13:05:40.093Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"resolved","resolved":["104.21.1.180","172.67.129.176"],"resolved_at":"2026-11-05T13:06:35Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:33.000Z","findings":[{"id":"fxdpdw2muacw4xuuqp3zh","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T13:05:40.093Z","first_published":"2026-11-05T13:14:47.841Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=kryptozantor.live"},{"hostname":"lawpartnerss.com","first_observed":"2026-11-05T12:26:14.407Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"resolved","resolved":["104.21.16.35","172.67.166.18"],"resolved_at":"2026-11-05T12:29:03Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:33.000Z","findings":[{"id":"fimk5u3wb36vxhhacoagt","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T12:26:14.407Z","first_published":"2026-11-05T13:14:47.841Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/lawpartnerss.com/"}],"url":"https://domainspoof.com/live?show=all&q=lawpartnerss.com"},{"hostname":"lciecamnh.shop","first_observed":"2026-11-05T13:05:40.093Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"resolved","resolved":["104.21.40.29","172.67.174.222"],"resolved_at":"2026-11-05T13:06:36Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:33.000Z","findings":[{"id":"fp7bpakky5qghccubhqib","kind":"reported_domain","summary":"Listed by NPA 165 (finance and insurance)","first_observed":"2026-11-05T13:05:40.093Z","first_published":"2026-11-05T13:14:47.841Z","source":"npa","source_name":"NPA 165","claim":{"category":"finance and insurance"}}],"url":"https://domainspoof.com/live?show=all&q=lciecamnh.shop"},{"hostname":"ledger-get-live.pages.dev","first_observed":"2026-11-05T12:56:48.099Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"resolved","resolved":["172.66.44.161","172.66.47.95"],"resolved_at":"2026-11-05T13:02:37Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:33.000Z","findings":[{"id":"f72h5y5faphpzlxwtpb44","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T12:56:48.099Z","first_published":"2026-11-05T13:14:47.841Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=ledger-get-live.pages.dev"},{"hostname":"letssendit.fun","first_observed":"2026-11-05T12:31:22.583Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"resolved","resolved":["66.241.125.237","2a09:8280:1::c1:bb5f:0"],"resolved_at":"2026-11-05T12:31:41Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:34.000Z","findings":[{"id":"frdigw453ujvpmdlpomhm","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T12:31:22.583Z","first_published":"2026-11-05T13:14:47.841Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/letssendit.fun/"}],"url":"https://domainspoof.com/live?show=all&q=letssendit.fun"},{"hostname":"lgmcorp.com","first_observed":"2026-11-05T12:05:52.666Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"resolved","resolved":["104.21.14.162","172.67.160.9"],"resolved_at":"2026-11-05T12:17:33Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:34.000Z","findings":[{"id":"fldjbaso74f56ovz6ktyj","kind":"reported_domain","summary":"Listed by FSMA (fraudulent online trading platform)","first_observed":"2026-11-05T12:05:52.666Z","first_published":"2026-11-05T13:14:47.841Z","source":"fsma","source_name":"FSMA","claim":{"category":"fraudulent online trading platform"}}],"url":"https://domainspoof.com/live?show=all&q=lgmcorp.com"},{"hostname":"lidlrabatt.com","first_observed":"2026-11-05T12:05:52.666Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"resolved","resolved":["104.16.211.68"],"resolved_at":"2026-11-05T12:17:33Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:34.000Z","findings":[{"id":"f4jpmd252pal6gzlomnoo","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T12:05:52.666Z","first_published":"2026-11-05T13:14:47.841Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=lidlrabatt.com"},{"hostname":"lubristraf.store","first_observed":"2026-11-05T12:19:19.542Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"resolved","resolved":["104.21.7.138","172.67.135.248","2606:4700:3032::ac43:87f8","2606:4700:3037::6815:78a"],"resolved_at":"2026-11-05T12:19:46Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:34.000Z","findings":[{"id":"fbmsdkhyp4ovg7x3ghxoq","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T12:19:19.542Z","first_published":"2026-11-05T13:14:47.841Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=lubristraf.store"},{"hostname":"lumenoingrid.digital","first_observed":"2026-11-05T12:51:35.088Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"resolved","resolved":["158.94.208.122"],"resolved_at":"2026-11-05T12:52:06Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:34.000Z","findings":[{"id":"fjs2fna5ys3ax5ncu5gg2","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T12:51:35.088Z","first_published":"2026-11-05T13:14:47.841Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/lumenoingrid.digital/"}],"url":"https://domainspoof.com/live?show=all&q=lumenoingrid.digital"},{"hostname":"m.dhsddt.com","first_observed":"2026-11-05T12:36:02.938Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"resolved","resolved":["183.136.138.170"],"resolved_at":"2026-11-05T12:36:36Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:34.000Z","findings":[{"id":"fapfcewtfu2b4dhuiluy5","kind":"reported_domain","summary":"Under dhsddt.com, listed by MetaMask","first_observed":"2026-11-05T12:36:02.938Z","first_published":"2026-11-05T13:14:47.841Z","source":"metamask","source_name":"MetaMask","under":"dhsddt.com"}],"url":"https://domainspoof.com/live?show=all&q=m.dhsddt.com"},{"hostname":"m.hljhrly.com","first_observed":"2026-11-05T12:05:52.666Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"resolved","resolved":["107.163.230.34"],"resolved_at":"2026-11-05T12:17:35Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:34.000Z","findings":[{"id":"fs5t663f2cf5bur53j5om","kind":"reported_domain","summary":"Under hljhrly.com, listed by CERT Polska","first_observed":"2026-11-05T12:05:52.666Z","first_published":"2026-11-05T13:14:47.841Z","source":"cert_polska","source_name":"CERT Polska","under":"hljhrly.com"}],"url":"https://domainspoof.com/live?show=all&q=m.hljhrly.com"},{"hostname":"mail.getbfinexorg.com","first_observed":"2026-11-05T12:26:14.407Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"resolved","resolved":["94.23.160.246"],"resolved_at":"2026-11-05T12:29:03Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:34.000Z","findings":[{"id":"fwvuckxcyln3sak3exhgn","kind":"reported_domain","summary":"Under getbfinexorg.com, reported by PhishDestroy","first_observed":"2026-11-05T12:26:14.407Z","first_published":"2026-11-05T13:14:47.841Z","source":"phishdestroy","source_name":"PhishDestroy","under":"getbfinexorg.com","source_url":"https://phishdestroy.io/domain/getbfinexorg.com/"}],"url":"https://domainspoof.com/live?show=all&q=mail.getbfinexorg.com"},{"hostname":"mail.nisantasidonercisi.com","first_observed":"2026-11-05T12:41:10.480Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"resolved","resolved":["77.245.159.230"],"resolved_at":"2026-11-05T12:45:25Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:34.000Z","findings":[{"id":"f2jgvus6bkldp3eqnlvwz","kind":"reported_domain","summary":"Under nisantasidonercisi.com, listed by CERT Polska","first_observed":"2026-11-05T12:41:10.480Z","first_published":"2026-11-05T13:14:47.841Z","source":"cert_polska","source_name":"CERT Polska","under":"nisantasidonercisi.com"}],"url":"https://domainspoof.com/live?show=all&q=mail.nisantasidonercisi.com"},{"hostname":"mail.stantexcapital.com","first_observed":"2026-11-05T13:00:32.749Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"resolved","resolved":["192.142.53.230"],"resolved_at":"2026-11-05T13:04:34Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:34.000Z","findings":[{"id":"femqdy3dkwjbwkvkgruia","kind":"reported_domain","summary":"Under stantexcapital.com, reported by PhishDestroy","first_observed":"2026-11-05T13:00:32.749Z","first_published":"2026-11-05T13:14:47.841Z","source":"phishdestroy","source_name":"PhishDestroy","under":"stantexcapital.com","source_url":"https://phishdestroy.io/domain/stantexcapital.com/"}],"url":"https://domainspoof.com/live?show=all&q=mail.stantexcapital.com"},{"hostname":"mail.unitedconcordinvestment.com","first_observed":"2026-11-05T12:36:02.938Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"resolved","resolved":["159.100.6.5"],"resolved_at":"2026-11-05T12:36:36Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:34.000Z","findings":[{"id":"fwai6nyoi6mwjuschgqtf","kind":"reported_domain","summary":"Under unitedconcordinvestment.com, reported by PhishDestroy","first_observed":"2026-11-05T12:36:02.938Z","first_published":"2026-11-05T13:14:47.841Z","source":"phishdestroy","source_name":"PhishDestroy","under":"unitedconcordinvestment.com","source_url":"https://phishdestroy.io/domain/unitedconcordinvestment.com/"}],"url":"https://domainspoof.com/live?show=all&q=mail.unitedconcordinvestment.com"},{"hostname":"malidosya.org","first_observed":"2026-11-05T13:05:40.093Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"resolved","resolved":["104.21.7.127","172.67.155.120"],"resolved_at":"2026-11-05T13:06:36Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:34.000Z","findings":[{"id":"fuwcroviji7mdncc2foas","kind":"reported_domain","summary":"Listed by USOM","first_observed":"2026-11-05T13:05:40.093Z","first_published":"2026-11-05T13:14:47.841Z","source":"usom","source_name":"USOM"}],"url":"https://domainspoof.com/live?show=all&q=malidosya.org"},{"hostname":"manegsmiti.store","first_observed":"2026-11-05T12:19:19.542Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"resolved","resolved":["104.21.45.127","172.67.214.76","2606:4700:3030::6815:2d7f","2606:4700:3030::ac43:d64c"],"resolved_at":"2026-11-05T12:19:46Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:34.000Z","findings":[{"id":"fjvy62xsruqrnzjnp5ci2","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T12:19:19.542Z","first_published":"2026-11-05T13:14:47.841Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=manegsmiti.store"},{"hostname":"maributik.com","first_observed":"2026-11-05T12:19:19.542Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"resolved","resolved":["104.21.75.67","172.67.215.254","2606:4700:3030::ac43:d7fe","2606:4700:3031::6815:4b43"],"resolved_at":"2026-11-05T12:19:46Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:34.000Z","findings":[{"id":"fch4njvjkv3c5xlmwfaew","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T12:19:19.542Z","first_published":"2026-11-05T13:14:47.841Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=maributik.com"},{"hostname":"matomo.aml.legal","first_observed":"2026-11-05T12:56:48.099Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"resolved","resolved":["186.2.175.179"],"resolved_at":"2026-11-05T13:02:37Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:34.000Z","findings":[{"id":"fl2f54b2v7bgeakznsn2w","kind":"reported_domain","summary":"Under aml.legal, reported by PhishDestroy","first_observed":"2026-11-05T12:56:48.099Z","first_published":"2026-11-05T13:14:47.841Z","source":"phishdestroy","source_name":"PhishDestroy","under":"aml.legal","source_url":"https://phishdestroy.io/domain/aml.legal/"}],"url":"https://domainspoof.com/live?show=all&q=matomo.aml.legal"},{"hostname":"mdsghsadg.art","first_observed":"2026-11-05T12:45:35.168Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"resolved","resolved":["31.56.209.3"],"resolved_at":"2026-11-05T12:45:36Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:34.000Z","findings":[{"id":"fn25cqj2escxogzmrvur2","kind":"reported_domain","summary":"Listed by USOM","first_observed":"2026-11-05T12:45:35.168Z","first_published":"2026-11-05T13:14:47.841Z","source":"usom","source_name":"USOM"}],"url":"https://domainspoof.com/live?show=all&q=mdsghsadg.art"},{"hostname":"meimj.asia","first_observed":"2026-11-05T12:46:52.080Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"resolved","resolved":["104.21.9.200","172.67.189.141"],"resolved_at":"2026-11-05T12:57:37Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:34.000Z","findings":[{"id":"f57k2v7umnryf7q2dr5hs","kind":"reported_domain","summary":"Listed by NPA 165 (information services)","first_observed":"2026-11-05T12:46:52.080Z","first_published":"2026-11-05T13:14:47.841Z","source":"npa","source_name":"NPA 165","claim":{"category":"information services"}}],"url":"https://domainspoof.com/live?show=all&q=meimj.asia"},{"hostname":"menkulkiymetlerosmanli.com","first_observed":"2026-11-05T12:45:35.168Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"no_address","resolved":["107.189.19.254"],"resolved_at":"2026-11-05T12:45:36Z","dns_checked_at":"2026-11-06T15:25:47.000Z","findings":[{"id":"fuhws5kdr2wvl4gow6kqv","kind":"reported_domain","summary":"Listed by USOM","first_observed":"2026-11-05T12:45:35.168Z","first_published":"2026-11-05T13:14:47.841Z","source":"usom","source_name":"USOM"}],"url":"https://domainspoof.com/live?show=all&q=menkulkiymetlerosmanli.com"},{"hostname":"microlibya.net","first_observed":"2026-11-05T12:56:48.099Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"resolved","resolved":["104.21.19.234","172.67.190.119"],"resolved_at":"2026-11-05T13:02:37Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:34.000Z","findings":[{"id":"ftl5nlkydoz5w4zijzkri","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T12:56:48.099Z","first_published":"2026-11-05T13:14:47.841Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=microlibya.net"},{"hostname":"mnlpt-86y5f-8e2m-f01-olqu4d.pages.dev","first_observed":"2026-11-05T12:51:35.088Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"resolved","resolved":["172.66.45.4","172.66.46.252"],"resolved_at":"2026-11-05T12:52:06Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:34.000Z","findings":[{"id":"f3fhqtedfdn36dq46bab4","kind":"reported_domain","summary":"Reported by PhishTank","first_observed":"2026-11-05T12:51:35.088Z","first_published":"2026-11-05T13:14:47.841Z","source":"phishtank","source_name":"PhishTank","source_url":"https://phishtank.org/phish_detail.php?phish_id=9479416"}],"url":"https://domainspoof.com/live?show=all&q=mnlpt-86y5f-8e2m-f01-olqu4d.pages.dev"},{"hostname":"mobil-vip.icu","first_observed":"2026-11-05T13:05:40.093Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"resolved","resolved":["104.21.55.129","172.67.148.45"],"resolved_at":"2026-11-05T13:06:36Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:34.000Z","findings":[{"id":"f46pwa5rlougrvzmxamyv","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T13:05:40.093Z","first_published":"2026-11-05T13:14:47.841Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/mobil-vip.icu/"}],"url":"https://domainspoof.com/live?show=all&q=mobil-vip.icu"},{"hostname":"moonakama.com","first_observed":"2026-11-05T12:19:19.542Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"resolved","resolved":["104.21.34.57","172.67.155.31","2606:4700:3035::6815:2239","2606:4700:3037::ac43:9b1f"],"resolved_at":"2026-11-05T12:19:46Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:34.000Z","findings":[{"id":"fiv6gyajzqbvdnwrxy2yb","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T12:19:19.542Z","first_published":"2026-11-05T13:14:47.841Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=moonakama.com"},{"hostname":"msengenhariaconsultiva.com.br","first_observed":"2026-11-05T13:05:40.093Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"resolved","resolved":["104.21.89.235","172.67.148.237"],"resolved_at":"2026-11-05T13:06:36Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:34.000Z","findings":[{"id":"fpwk3bsws3kpbofrnjhzg","kind":"reported_domain","summary":"Reported by PhishTank","first_observed":"2026-11-05T13:05:40.093Z","first_published":"2026-11-05T13:14:47.841Z","source":"phishtank","source_name":"PhishTank","source_url":"https://phishtank.org/phish_detail.php?phish_id=9270505"}],"url":"https://domainspoof.com/live?show=all&q=msengenhariaconsultiva.com.br"},{"hostname":"munk-rendiskar.info","first_observed":"2026-11-05T12:19:19.542Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"resolved","resolved":["185.95.156.230"],"resolved_at":"2026-11-05T13:41:51Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:34.000Z","findings":[{"id":"fkzeschhajvptnazdwm7m","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T12:19:19.542Z","first_published":"2026-11-05T13:14:47.841Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=munk-rendiskar.info"},{"hostname":"musicplaylistmanager.info","first_observed":"2026-11-05T12:19:19.542Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"resolved","resolved":["5.255.109.32"],"resolved_at":"2026-11-05T12:19:46Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:34.000Z","findings":[{"id":"fpqjd5ftydxgovj2pif6q","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T12:19:19.542Z","first_published":"2026-11-05T13:14:47.841Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=musicplaylistmanager.info"},{"hostname":"mymonero.digital","first_observed":"2026-11-05T12:10:36.424Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"resolved","resolved":["104.21.64.61","172.67.176.170"],"resolved_at":"2026-11-05T12:11:14Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:34.000Z","findings":[{"id":"fvm35j7o6ctjou3xajfmx","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T12:10:36.424Z","first_published":"2026-11-05T13:14:47.841Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=mymonero.digital"},{"hostname":"mymusicplaylistmanager.info","first_observed":"2026-11-05T12:19:19.542Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"resolved","resolved":["104.21.76.61","172.67.190.85","2606:4700:3031::6815:4c3d","2606:4700:3035::ac43:be55"],"resolved_at":"2026-11-05T12:19:46Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:34.000Z","findings":[{"id":"f2wxpydg4uksizijnlvri","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T12:19:19.542Z","first_published":"2026-11-05T13:14:47.841Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=mymusicplaylistmanager.info"},{"hostname":"nacqoixz.shop","first_observed":"2026-11-05T12:31:22.583Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"resolved","resolved":["104.17.231.54"],"resolved_at":"2026-11-05T12:31:41Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:34.000Z","findings":[{"id":"fhyyveosuorqmdaega5fc","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T12:31:22.583Z","first_published":"2026-11-05T13:14:47.841Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=nacqoixz.shop"},{"hostname":"newsy5-illum15.cfd","first_observed":"2026-11-05T12:19:19.542Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"no_address","resolved":["104.21.29.138","172.67.149.58","2606:4700:3034::6815:1d8a","2606:4700:3034::ac43:953a"],"resolved_at":"2026-11-05T12:19:46Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:34.000Z","findings":[{"id":"fyvlnrjejzgprjfeoo5ws","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T12:19:19.542Z","first_published":"2026-11-05T13:14:47.841Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=newsy5-illum15.cfd"},{"hostname":"newsy9-eligendi4.cfd","first_observed":"2026-11-05T12:19:19.542Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"no_address","resolved":[],"resolved_at":"2026-11-05T12:19:46Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:34.000Z","findings":[{"id":"fgcpei4rhqzvyrzji2zit","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T12:19:19.542Z","first_published":"2026-11-05T13:14:47.841Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=newsy9-eligendi4.cfd"},{"hostname":"nexus.globalfx.pl","first_observed":"2026-11-05T12:05:52.666Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"resolved","resolved":["149.255.62.152"],"resolved_at":"2026-11-05T12:17:39Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:34.000Z","findings":[{"id":"fqcjwlwyfq5pz6uoubegy","kind":"reported_domain","summary":"Under globalfx.pl, listed by CERT Polska","first_observed":"2026-11-05T12:05:52.666Z","first_published":"2026-11-05T13:14:47.841Z","source":"cert_polska","source_name":"CERT Polska","under":"globalfx.pl"}],"url":"https://domainspoof.com/live?show=all&q=nexus.globalfx.pl"},{"hostname":"nonpert.shop","first_observed":"2026-11-05T12:05:52.666Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"resolved","resolved":["104.21.52.9","172.67.192.200"],"resolved_at":"2026-11-05T12:17:39Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:34.000Z","findings":[{"id":"fljv3yvwzjuryngqfjjij","kind":"reported_domain","summary":"Listed by NPA 165 (finance and insurance)","first_observed":"2026-11-05T12:05:52.666Z","first_published":"2026-11-05T13:14:47.841Z","source":"npa","source_name":"NPA 165","claim":{"category":"finance and insurance"}}],"url":"https://domainspoof.com/live?show=all&q=nonpert.shop"},{"hostname":"noraqay.io","first_observed":"2026-11-05T12:41:10.480Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"resolved","resolved":["104.21.6.33","172.67.154.198"],"resolved_at":"2026-11-05T12:45:27Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:34.000Z","findings":[{"id":"fng3yxe6cd6vdq4hn6rwp","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T12:41:10.480Z","first_published":"2026-11-05T13:14:47.841Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/noraqay.io/"}],"url":"https://domainspoof.com/live?show=all&q=noraqay.io"},{"hostname":"norway-ledger.pages.dev","first_observed":"2026-11-05T12:51:35.088Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"resolved","resolved":["172.66.44.214","172.66.47.42"],"resolved_at":"2026-11-05T12:52:06Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:34.000Z","findings":[{"id":"fyz6tug6nimqjgsyr45m2","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T12:51:35.088Z","first_published":"2026-11-05T13:14:47.841Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=norway-ledger.pages.dev"},{"hostname":"notify.wirexdigitalwallet.com","first_observed":"2026-11-05T12:46:52.080Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"no_address","resolved":[],"resolved_at":"2026-11-05T12:57:39Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:34.000Z","findings":[{"id":"f4ustvobghbtkd2umqoyf","kind":"reported_domain","summary":"Under wirexdigitalwallet.com, listed by MetaMask","first_observed":"2026-11-05T12:46:52.080Z","first_published":"2026-11-05T13:14:47.841Z","source":"metamask","source_name":"MetaMask","under":"wirexdigitalwallet.com"}],"url":"https://domainspoof.com/live?show=all&q=notify.wirexdigitalwallet.com"},{"hostname":"nwudg-dav1r-cvc-fxiqo-14lyaw.pages.dev","first_observed":"2026-11-05T12:56:48.099Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"resolved","resolved":["172.66.44.229","172.66.47.27"],"resolved_at":"2026-11-05T13:02:38Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:34.000Z","findings":[{"id":"fsdswf3ajyyr5yqmp7kcf","kind":"reported_domain","summary":"Reported by PhishTank","first_observed":"2026-11-05T12:56:48.099Z","first_published":"2026-11-05T13:14:47.841Z","source":"phishtank","source_name":"PhishTank","source_url":"https://phishtank.org/phish_detail.php?phish_id=9479427"}],"url":"https://domainspoof.com/live?show=all&q=nwudg-dav1r-cvc-fxiqo-14lyaw.pages.dev"},{"hostname":"oefsanebasladi.sbs","first_observed":"2026-11-05T12:45:35.168Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"resolved","resolved":["132.243.166.22"],"resolved_at":"2026-11-05T12:45:36Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:34.000Z","findings":[{"id":"fnluvdgitafolqm3vz4co","kind":"reported_domain","summary":"Listed by USOM","first_observed":"2026-11-05T12:45:35.168Z","first_published":"2026-11-05T13:14:47.841Z","source":"usom","source_name":"USOM"}],"url":"https://domainspoof.com/live?show=all&q=oefsanebasladi.sbs"},{"hostname":"ogloszeni302914.sbs","first_observed":"2026-11-05T12:19:19.542Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"resolved","resolved":["104.21.25.178","172.67.134.112","2606:4700:3033::ac43:8670","2606:4700:3035::6815:19b2"],"resolved_at":"2026-11-05T12:19:46Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:34.000Z","findings":[{"id":"f33xrkse7xqgmvxz5o2cp","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T12:19:19.542Z","first_published":"2026-11-05T13:14:47.841Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=ogloszeni302914.sbs"},{"hostname":"okx-cn.club","first_observed":"2026-11-05T13:05:40.093Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"resolved","resolved":["43.239.166.13"],"resolved_at":"2026-11-05T13:06:37Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:34.000Z","findings":[{"id":"fcctlzqt2ws4gqd7l5hzb","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T13:05:40.093Z","first_published":"2026-11-05T13:14:47.841Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=okx-cn.club"},{"hostname":"okx-com.club","first_observed":"2026-11-05T13:05:40.093Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"resolved","resolved":["45.122.135.229"],"resolved_at":"2026-11-05T13:06:37Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:34.000Z","findings":[{"id":"fueoji7iasplagdcznhmj","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T13:05:40.093Z","first_published":"2026-11-05T13:14:47.841Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=okx-com.club"},{"hostname":"okx-okx.club","first_observed":"2026-11-05T13:05:40.093Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"resolved","resolved":["45.122.135.235"],"resolved_at":"2026-11-05T13:06:37Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:34.000Z","findings":[{"id":"fuqg3ka2l4rw6mw7uq5fc","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T13:05:40.093Z","first_published":"2026-11-05T13:14:47.841Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=okx-okx.club"},{"hostname":"olirian.net","first_observed":"2026-11-05T12:19:19.542Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"resolved","resolved":["104.21.58.61","172.67.168.10","2606:4700:3033::ac43:a80a","2606:4700:3034::6815:3a3d"],"resolved_at":"2026-11-05T12:19:47Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:34.000Z","findings":[{"id":"f6ssryriqdetvwoz4wtts","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T12:19:19.542Z","first_published":"2026-11-05T13:14:47.841Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=olirian.net"},{"hostname":"olympus-invite.com","first_observed":"2026-11-05T12:05:52.666Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"resolved","resolved":["104.21.55.84","172.67.146.89"],"resolved_at":"2026-11-05T12:17:46Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:34.000Z","findings":[{"id":"fhle2xnhgodzc32uvcbji","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T12:05:52.666Z","first_published":"2026-11-05T13:14:47.841Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/olympus-invite.com/"}],"url":"https://domainspoof.com/live?show=all&q=olympus-invite.com"},{"hostname":"palmai.luxe","first_observed":"2026-11-05T12:21:03.555Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"no_address","resolved":[],"resolved_at":"2026-11-05T12:21:25Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:34.000Z","findings":[{"id":"fjtod2rvu6swxjve63xer","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T12:21:03.555Z","first_published":"2026-11-05T13:14:47.841Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=palmai.luxe"},{"hostname":"paper-foundation.xyz","first_observed":"2026-11-05T12:16:20.779Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"resolved","resolved":["104.21.18.4","172.67.178.249"],"resolved_at":"2026-11-06T09:19:04Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:34.000Z","findings":[{"id":"fvoqczlatl4pn42432vkk","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T12:16:20.779Z","first_published":"2026-11-05T13:14:47.841Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=paper-foundation.xyz"},{"hostname":"parimatch.to","first_observed":"2026-11-05T12:31:22.583Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"resolved","resolved":["31.76.87.121"],"resolved_at":"2026-11-05T12:31:41Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:34.000Z","findings":[{"id":"fi5ccxnkxnkpc2ckptrs3","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T12:31:22.583Z","first_published":"2026-11-05T13:14:47.841Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=parimatch.to"},{"hostname":"paywardtrading.net","first_observed":"2026-11-05T12:36:02.938Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"resolved","resolved":["104.21.69.203","172.67.213.19"],"resolved_at":"2026-11-05T12:36:40Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:34.000Z","findings":[{"id":"f5f5u42cvn7iuxploeox7","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T12:36:02.938Z","first_published":"2026-11-05T13:14:47.841Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/paywardtrading.net/"}],"url":"https://domainspoof.com/live?show=all&q=paywardtrading.net"},{"hostname":"pcoonline-ro.shop","first_observed":"2026-11-05T12:26:14.407Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"resolved","resolved":["104.16.211.68"],"resolved_at":"2026-11-05T12:26:21Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:34.000Z","findings":[{"id":"f73acumhpge7lhxxz6zdn","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T12:26:14.407Z","first_published":"2026-11-05T13:14:47.841Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=pcoonline-ro.shop"},{"hostname":"philoantis.store","first_observed":"2026-11-05T12:19:19.542Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"resolved","resolved":["104.21.65.62","172.67.158.200","2606:4700:3030::ac43:9ec8","2606:4700:3031::6815:413e"],"resolved_at":"2026-11-05T12:19:46Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:34.000Z","findings":[{"id":"fooo34hkpwp5k7wnfiptb","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T12:19:19.542Z","first_published":"2026-11-05T13:14:47.841Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=philoantis.store"},{"hostname":"pka-kai7k5-xp60lf-nzip-4y7ipr.pages.dev","first_observed":"2026-11-05T12:31:22.583Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"resolved","resolved":["172.66.45.7","172.66.46.249"],"resolved_at":"2026-11-05T12:31:42Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:34.000Z","findings":[{"id":"fip6pjoklgvbhpy7wk5bq","kind":"reported_domain","summary":"Reported by PhishTank","first_observed":"2026-11-05T12:31:22.583Z","first_published":"2026-11-05T13:14:47.841Z","source":"phishtank","source_name":"PhishTank","source_url":"https://phishtank.org/phish_detail.php?phish_id=9479441"}],"url":"https://domainspoof.com/live?show=all&q=pka-kai7k5-xp60lf-nzip-4y7ipr.pages.dev"},{"hostname":"pl-erste.support-auth.my","first_observed":"2026-11-05T12:19:19.542Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"resolved","resolved":["104.21.33.238","172.67.151.175","2606:4700:3030::6815:21ee","2606:4700:3032::ac43:97af"],"resolved_at":"2026-11-05T12:19:46Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:34.000Z","findings":[{"id":"fsbmwdxsa65ucvq2hcic4","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T12:19:19.542Z","first_published":"2026-11-05T13:14:47.841Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=pl-erste.support-auth.my"},{"hostname":"playreha.com","first_observed":"2026-11-05T12:05:52.666Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"resolved","resolved":["195.191.148.176"],"resolved_at":"2026-11-05T12:17:47Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:34.000Z","findings":[{"id":"fbe3btvhwcmr5rjzcrj3f","kind":"reported_domain","summary":"Reported by PhishTank","first_observed":"2026-11-05T12:05:52.666Z","first_published":"2026-11-05T13:14:47.841Z","source":"phishtank","source_name":"PhishTank","source_url":"https://phishtank.org/phish_detail.php?phish_id=8957672"}],"url":"https://domainspoof.com/live?show=all&q=playreha.com"},{"hostname":"pomuneb.shop","first_observed":"2026-11-05T12:51:35.088Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"resolved","resolved":["104.21.31.156","172.67.178.59"],"resolved_at":"2026-11-05T12:52:06Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:34.000Z","findings":[{"id":"fdelnnt5mkvfwxjjlxn3e","kind":"reported_domain","summary":"Listed by NPA 165 (e-commerce)","first_observed":"2026-11-05T12:51:35.088Z","first_published":"2026-11-05T13:14:47.841Z","source":"npa","source_name":"NPA 165","claim":{"category":"e-commerce"}}],"url":"https://domainspoof.com/live?show=all&q=pomuneb.shop"},{"hostname":"pop.nisantasidonercisi.com","first_observed":"2026-11-05T12:41:10.480Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"resolved","resolved":["77.245.159.230"],"resolved_at":"2026-11-05T12:45:30Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:34.000Z","findings":[{"id":"fgd3bedepjxcdkhtxfpom","kind":"reported_domain","summary":"Under nisantasidonercisi.com, listed by CERT Polska","first_observed":"2026-11-05T12:41:10.480Z","first_published":"2026-11-05T13:14:47.841Z","source":"cert_polska","source_name":"CERT Polska","under":"nisantasidonercisi.com"}],"url":"https://domainspoof.com/live?show=all&q=pop.nisantasidonercisi.com"},{"hostname":"portal-equium.xyz","first_observed":"2026-11-05T12:10:36.424Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"resolved","resolved":["104.21.59.196","172.67.182.241"],"resolved_at":"2026-11-05T12:11:14Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:34.000Z","findings":[{"id":"fzzifo6qxt6cfwzjc5dlk","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T12:10:36.424Z","first_published":"2026-11-05T13:14:47.841Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=portal-equium.xyz"},{"hostname":"postfinexus-ai.com","first_observed":"2026-11-05T12:31:22.583Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"resolved","resolved":["104.21.20.123","172.67.192.218"],"resolved_at":"2026-11-05T12:31:42Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:34.000Z","findings":[{"id":"fv5w5gjgds2e6gamka6u6","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T12:31:22.583Z","first_published":"2026-11-05T13:14:47.841Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=postfinexus-ai.com"},{"hostname":"povmall.shop","first_observed":"2026-11-05T12:10:36.424Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"no_address","resolved":[],"resolved_at":"2026-11-05T12:11:14Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:34.000Z","findings":[{"id":"fvn7smfd7qrrfuix5tah2","kind":"reported_domain","summary":"Listed by NPA 165 (e-commerce)","first_observed":"2026-11-05T12:10:36.424Z","first_published":"2026-11-05T13:14:47.841Z","source":"npa","source_name":"NPA 165","claim":{"category":"e-commerce"}}],"url":"https://domainspoof.com/live?show=all&q=povmall.shop"},{"hostname":"precis-bitdex-fr.online","first_observed":"2026-11-05T12:19:19.542Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"resolved","resolved":["85.11.190.157"],"resolved_at":"2026-11-05T12:19:46Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:34.000Z","findings":[{"id":"fkofrzz7quuriv6nka7ea","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T12:19:19.542Z","first_published":"2026-11-05T13:14:47.841Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=precis-bitdex-fr.online"},{"hostname":"princepsedge.com","first_observed":"2026-11-05T12:05:52.666Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"resolved","resolved":["104.21.28.96","172.67.145.81"],"resolved_at":"2026-11-05T12:17:48Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:34.000Z","findings":[{"id":"fj75wvxf4ehaarc4tiwr5","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T12:05:52.666Z","first_published":"2026-11-05T13:14:47.841Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=princepsedge.com"},{"hostname":"promarket-ai.com","first_observed":"2026-11-05T12:10:36.424Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"resolved","resolved":["216.150.1.65","216.150.16.1"],"resolved_at":"2026-11-05T12:11:14Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:34.000Z","findings":[{"id":"ftgqwn7wt6o75gr6npc4e","kind":"reported_domain","summary":"Listed by FSMA (fraudulent online trading platform)","first_observed":"2026-11-05T12:10:36.424Z","first_published":"2026-11-05T13:14:47.841Z","source":"fsma","source_name":"FSMA","claim":{"category":"fraudulent online trading platform"}}],"url":"https://domainspoof.com/live?show=all&q=promarket-ai.com"},{"hostname":"prometheus.test.io-int.se","first_observed":"2026-11-05T12:46:52.080Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"resolved","resolved":["46.246.48.153"],"resolved_at":"2026-11-05T12:57:41Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:34.000Z","findings":[{"id":"fb7ngyqwh4pfljeuxzsds","kind":"reported_domain","summary":"Under io-int.se, listed by MetaMask","first_observed":"2026-11-05T12:46:52.080Z","first_published":"2026-11-05T13:14:47.841Z","source":"metamask","source_name":"MetaMask","under":"io-int.se"}],"url":"https://domainspoof.com/live?show=all&q=prometheus.test.io-int.se"},{"hostname":"prontachainovia-fr.live","first_observed":"2026-11-05T13:05:40.093Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"resolved","resolved":["104.21.32.248","172.67.157.15"],"resolved_at":"2026-11-05T13:06:38Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:34.000Z","findings":[{"id":"fwsebfwvg6cgkh4wghoik","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T13:05:40.093Z","first_published":"2026-11-05T13:14:47.841Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=prontachainovia-fr.live"},{"hostname":"propertiesbyxcel.com","first_observed":"2026-11-05T12:19:19.542Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"resolved","resolved":["127.0.0.1"],"resolved_at":"2026-11-06T11:32:11Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:34.000Z","findings":[{"id":"fkdfuzsg2ct5sqzld3wkj","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T12:19:19.542Z","first_published":"2026-11-05T13:14:47.841Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=propertiesbyxcel.com"},{"hostname":"public.myprepaidscenter.com","first_observed":"2026-11-05T12:51:35.088Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"resolved","resolved":["185.53.179.136"],"resolved_at":"2026-11-05T12:52:06Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:34.000Z","findings":[{"id":"f3bcnyksyb3mzhmc37fks","kind":"reported_domain","summary":"Under myprepaidscenter.com, listed by MetaMask","first_observed":"2026-11-05T12:51:35.088Z","first_published":"2026-11-05T13:14:47.841Z","source":"metamask","source_name":"MetaMask","under":"myprepaidscenter.com"}],"url":"https://domainspoof.com/live?show=all&q=public.myprepaidscenter.com"},{"hostname":"puromercovia.live","first_observed":"2026-11-05T12:56:48.099Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"resolved","resolved":["104.21.74.172","172.67.160.85"],"resolved_at":"2026-11-05T13:02:38Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:34.000Z","findings":[{"id":"fmsl2jzwpinm7kfuy5vaj","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T12:56:48.099Z","first_published":"2026-11-05T13:14:47.841Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=puromercovia.live"},{"hostname":"qoeigkf.shop","first_observed":"2026-11-05T12:56:48.099Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"resolved","resolved":["104.21.57.158","172.67.191.30"],"resolved_at":"2026-11-05T13:02:38Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:34.000Z","findings":[{"id":"fknhbfknp7lxw5s2dggur","kind":"reported_domain","summary":"Listed by NPA 165 (e-commerce)","first_observed":"2026-11-05T12:56:48.099Z","first_published":"2026-11-05T13:14:47.841Z","source":"npa","source_name":"NPA 165","claim":{"category":"e-commerce"}}],"url":"https://domainspoof.com/live?show=all&q=qoeigkf.shop"},{"hostname":"qxabv.asia","first_observed":"2026-11-05T12:36:02.938Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"resolved","resolved":["104.21.94.149","172.67.137.57"],"resolved_at":"2026-11-05T12:36:41Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:34.000Z","findings":[{"id":"fhh4dxitwz4thrq6bimgf","kind":"reported_domain","summary":"Listed by NPA 165 (information services)","first_observed":"2026-11-05T12:36:02.938Z","first_published":"2026-11-05T13:14:47.841Z","source":"npa","source_name":"NPA 165","claim":{"category":"information services"}}],"url":"https://domainspoof.com/live?show=all&q=qxabv.asia"},{"hostname":"rainbetcassino.com","first_observed":"2026-11-05T12:56:48.099Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"resolved","resolved":["104.21.59.229","172.67.184.212"],"resolved_at":"2026-11-05T13:02:38Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:34.000Z","findings":[{"id":"ffwedkxmanbnocfchsinp","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T12:56:48.099Z","first_published":"2026-11-05T13:14:47.841Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=rainbetcassino.com"},{"hostname":"randomdragongames.com","first_observed":"2026-11-05T12:36:02.938Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"resolved","resolved":["104.21.82.144","172.67.202.185"],"resolved_at":"2026-11-05T12:36:41Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:34.000Z","findings":[{"id":"fxelekvnuv3nkaubjlswp","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T12:36:02.938Z","first_published":"2026-11-05T13:14:47.841Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/randomdragongames.com/"}],"url":"https://domainspoof.com/live?show=all&q=randomdragongames.com"},{"hostname":"redkittencrew.live","first_observed":"2026-11-05T12:05:52.666Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"resolved","resolved":["104.21.37.155","172.67.210.81"],"resolved_at":"2026-11-05T12:17:51Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:34.000Z","findings":[{"id":"f46c5yphgd2ikxqd35zwd","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T12:05:52.666Z","first_published":"2026-11-05T13:14:47.841Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=redkittencrew.live"},{"hostname":"regattas.shop","first_observed":"2026-11-05T12:19:19.542Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"resolved","resolved":["104.18.20.248"],"resolved_at":"2026-11-05T12:19:47Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:34.000Z","findings":[{"id":"fdlk4ykvkkwwjucxcl4da","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T12:19:19.542Z","first_published":"2026-11-05T13:14:47.841Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=regattas.shop"},{"hostname":"renwenshuyuan.com","first_observed":"2026-11-05T12:19:19.542Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"resolved","resolved":["104.21.52.209","172.67.203.231","2606:4700:3031::6815:34d1","2606:4700:3035::ac43:cbe7"],"resolved_at":"2026-11-05T12:19:46Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:34.000Z","findings":[{"id":"fdotakvydl7x3liaeocrz","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T12:19:19.542Z","first_published":"2026-11-05T13:14:47.841Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=renwenshuyuan.com"},{"hostname":"reviewrules-x.com","first_observed":"2026-11-05T12:05:52.666Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"no_address","resolved":[],"resolved_at":"2026-11-05T12:17:52Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:34.000Z","findings":[{"id":"ffilfrqnheenerjgon2zb","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T12:05:52.666Z","first_published":"2026-11-05T13:14:47.841Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=reviewrules-x.com"},{"hostname":"richeimpom.store","first_observed":"2026-11-05T12:19:19.542Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"resolved","resolved":["104.21.77.104","172.67.206.181","2606:4700:3032::ac43:ceb5","2606:4700:3034::6815:4d68"],"resolved_at":"2026-11-05T12:19:46Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:34.000Z","findings":[{"id":"fajzaoeujlqe4adydjoga","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T12:19:19.542Z","first_published":"2026-11-05T13:14:47.841Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=richeimpom.store"},{"hostname":"rimbaimpop.store","first_observed":"2026-11-05T12:16:20.779Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"no_address","resolved":[],"resolved_at":"2026-11-05T12:25:28Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:34.000Z","findings":[{"id":"fcilrl4dwz7eo4bp7crmb","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T12:16:20.779Z","first_published":"2026-11-05T13:14:47.841Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=rimbaimpop.store"},{"hostname":"risparmella-it.com","first_observed":"2026-11-05T12:19:19.542Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"resolved","resolved":["104.21.18.12","172.67.179.40"],"resolved_at":"2026-11-05T13:18:17Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:34.000Z","findings":[{"id":"fppf5x3n4isqamiwv3urz","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T12:19:19.542Z","first_published":"2026-11-05T13:14:47.841Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=risparmella-it.com"},{"hostname":"roblox.com.ee","first_observed":"2026-11-05T12:26:21.052Z","first_published":"2026-11-05T13:14:47.841Z","brands":[{"id":"roblox","name":"Roblox","url":"https://domainspoof.com/brands/roblox"}],"dns":"resolved","resolved":["202.170.75.200"],"resolved_at":"2026-11-06T13:23:04Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:34.000Z","findings":[{"id":"fclbu7vvtheoxcqmnbhbz","kind":"phishing_infrastructure","summary":"Resolved to 202.170.75.200, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T12:26:21.052Z","first_published":"2026-11-05T13:14:47.841Z","address":"202.170.75.200","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"},{"id":"fnvutp7wxqduhlobf6mu2","kind":"spamhaus_drop","summary":"Resolved to 202.170.75.200 on Spamhaus DROP","first_observed":"2026-11-05T12:26:21.052Z","first_published":"2026-11-05T13:14:47.841Z","address":"202.170.75.200","list":"spamhaus_drop","list_name":"Spamhaus DROP"}],"url":"https://domainspoof.com/brands/roblox"},{"hostname":"rocketchat.floydldevine.com","first_observed":"2026-11-05T13:00:32.749Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"resolved","resolved":["109.238.86.5"],"resolved_at":"2026-11-05T13:04:34Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:34.000Z","findings":[{"id":"fezucfrzv5yk5m3apbo4w","kind":"reported_domain","summary":"Under floydldevine.com, listed by CERT Polska","first_observed":"2026-11-05T13:00:32.749Z","first_published":"2026-11-05T13:14:47.841Z","source":"cert_polska","source_name":"CERT Polska","under":"floydldevine.com"}],"url":"https://domainspoof.com/live?show=all&q=rocketchat.floydldevine.com"},{"hostname":"sdfadsff1241sfdsaf.cfd","first_observed":"2026-11-05T12:45:35.168Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"resolved","resolved":["102.220.161.58"],"resolved_at":"2026-11-05T12:45:36Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:34.000Z","findings":[{"id":"fthrn5cudl6yia26b43rd","kind":"reported_domain","summary":"Listed by USOM","first_observed":"2026-11-05T12:45:35.168Z","first_published":"2026-11-05T13:14:47.841Z","source":"usom","source_name":"USOM"}],"url":"https://domainspoof.com/live?show=all&q=sdfadsff1241sfdsaf.cfd"},{"hostname":"sevmemeyeyeminetmistim.sbs","first_observed":"2026-11-05T12:45:35.168Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"resolved","resolved":["207.241.172.137"],"resolved_at":"2026-11-05T12:45:36Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:34.000Z","findings":[{"id":"f5bn24znsrnsnzcim3b3q","kind":"reported_domain","summary":"Listed by USOM","first_observed":"2026-11-05T12:45:35.168Z","first_published":"2026-11-05T13:14:47.841Z","source":"usom","source_name":"USOM"}],"url":"https://domainspoof.com/live?show=all&q=sevmemeyeyeminetmistim.sbs"},{"hostname":"sharp-fund.com","first_observed":"2026-11-05T12:31:22.583Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"resolved","resolved":["104.21.66.227","172.67.208.182"],"resolved_at":"2026-11-05T12:31:44Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:34.000Z","findings":[{"id":"fwlfc3ncvg2xfwys5v2bp","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T12:31:22.583Z","first_published":"2026-11-05T13:14:47.841Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=sharp-fund.com"},{"hostname":"shining-returns.com","first_observed":"2026-11-05T12:21:03.555Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"resolved","resolved":["104.21.68.52","172.67.186.222"],"resolved_at":"2026-11-05T12:21:26Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:34.000Z","findings":[{"id":"fjrnudkshc34364rgihvt","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T12:21:03.555Z","first_published":"2026-11-05T13:14:47.841Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=shining-returns.com"},{"hostname":"slon-avto.ru","first_observed":"2026-11-05T12:10:36.424Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"resolved","resolved":["193.107.236.86"],"resolved_at":"2026-11-05T12:11:16Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:34.000Z","findings":[{"id":"fmt6rp3ruqu2stawczehw","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T12:10:36.424Z","first_published":"2026-11-05T13:14:47.841Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/slon-avto.ru/"}],"url":"https://domainspoof.com/live?show=all&q=slon-avto.ru"},{"hostname":"smtp.nisantasidonercisi.com","first_observed":"2026-11-05T12:41:10.480Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"resolved","resolved":["77.245.159.230"],"resolved_at":"2026-11-05T12:45:46Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:34.000Z","findings":[{"id":"fhinxeuwgmov7hrhakotj","kind":"reported_domain","summary":"Under nisantasidonercisi.com, listed by CERT Polska","first_observed":"2026-11-05T12:41:10.480Z","first_published":"2026-11-05T13:14:47.841Z","source":"cert_polska","source_name":"CERT Polska","under":"nisantasidonercisi.com"}],"url":"https://domainspoof.com/live?show=all&q=smtp.nisantasidonercisi.com"},{"hostname":"sol-online-bet.com","first_observed":"2026-11-05T12:36:02.938Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"resolved","resolved":["104.21.51.116","172.67.180.40"],"resolved_at":"2026-11-05T12:36:44Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:34.000Z","findings":[{"id":"fqx7b7m7f7cqwoz3uvlut","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T12:36:02.938Z","first_published":"2026-11-05T13:14:47.841Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=sol-online-bet.com"},{"hostname":"sol-reclaim.com","first_observed":"2026-11-05T12:51:35.088Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"no_address","resolved":[],"resolved_at":"2026-11-05T12:52:07Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:34.000Z","findings":[{"id":"fbgoyyktzwk67dah2msrr","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T12:51:35.088Z","first_published":"2026-11-05T13:14:47.841Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=sol-reclaim.com"},{"hostname":"solchaindapps.com","first_observed":"2026-11-05T12:56:48.099Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"resolved","resolved":["104.21.8.38","172.67.156.198"],"resolved_at":"2026-11-05T13:02:39Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:34.000Z","findings":[{"id":"fut7io4tjhg5gvsdtqesh","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T12:56:48.099Z","first_published":"2026-11-05T13:14:47.841Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=solchaindapps.com"},{"hostname":"solvipcasino.com","first_observed":"2026-11-05T13:05:40.093Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"resolved","resolved":["104.21.9.159","172.67.160.70"],"resolved_at":"2026-11-05T13:06:39Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:34.000Z","findings":[{"id":"fvjous64azavirfokfzy2","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T13:05:40.093Z","first_published":"2026-11-05T13:14:47.841Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=solvipcasino.com"},{"hostname":"sp19ct7-dafem-biz-kurex-loris.pages.dev","first_observed":"2026-11-05T12:51:35.088Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"resolved","resolved":["172.66.44.184","172.66.47.72"],"resolved_at":"2026-11-05T12:52:07Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:34.000Z","findings":[{"id":"fitqkrlzrqrgkr44gx4ri","kind":"reported_domain","summary":"Reported by PhishTank","first_observed":"2026-11-05T12:51:35.088Z","first_published":"2026-11-05T13:14:47.841Z","source":"phishtank","source_name":"PhishTank","source_url":"https://phishtank.org/phish_detail.php?phish_id=9479470"}],"url":"https://domainspoof.com/live?show=all&q=sp19ct7-dafem-biz-kurex-loris.pages.dev"},{"hostname":"sp19ct7-duref-biz-koren-lamis.pages.dev","first_observed":"2026-11-05T12:05:52.666Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"resolved","resolved":["172.66.45.36","172.66.46.220"],"resolved_at":"2026-11-05T12:17:57Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:34.000Z","findings":[{"id":"fkz2gslckjobvvkkx7ysa","kind":"reported_domain","summary":"Reported by PhishTank","first_observed":"2026-11-05T12:05:52.666Z","first_published":"2026-11-05T13:14:47.841Z","source":"phishtank","source_name":"PhishTank","source_url":"https://phishtank.org/phish_detail.php?phish_id=9479475"}],"url":"https://domainspoof.com/live?show=all&q=sp19ct7-duref-biz-koren-lamis.pages.dev"},{"hostname":"sp19ct7-vurem-biz-fadek-solin.pages.dev","first_observed":"2026-11-05T12:05:52.666Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"resolved","resolved":["172.66.44.91","172.66.47.165"],"resolved_at":"2026-11-05T12:17:57Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:34.000Z","findings":[{"id":"f7ralm7dipqwouara22me","kind":"reported_domain","summary":"Reported by PhishTank","first_observed":"2026-11-05T12:05:52.666Z","first_published":"2026-11-05T13:14:47.841Z","source":"phishtank","source_name":"PhishTank","source_url":"https://phishtank.org/phish_detail.php?phish_id=9479624"}],"url":"https://domainspoof.com/live?show=all&q=sp19ct7-vurem-biz-fadek-solin.pages.dev"},{"hostname":"srv7438182726.metamask-recover.help","first_observed":"2026-11-05T12:10:36.424Z","first_published":"2026-11-05T13:14:47.841Z","brands":[{"id":"metamask","name":"MetaMask","url":"https://domainspoof.com/brands/metamask"}],"dns":"resolved","resolved":["202.133.89.169"],"resolved_at":"2026-11-05T12:11:16Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:34.000Z","findings":[{"id":"f6fuea2ja5yl2bnjgx2pq","kind":"reported_domain","summary":"Under metamask-recover.help, listed by MetaMask","first_observed":"2026-11-05T12:10:36.424Z","first_published":"2026-11-05T13:14:47.841Z","source":"metamask","source_name":"MetaMask","under":"metamask-recover.help"}],"url":"https://domainspoof.com/brands/metamask"},{"hostname":"sso-login-kucoin.pages.dev","first_observed":"2026-11-05T12:16:20.779Z","first_published":"2026-11-05T13:14:47.841Z","brands":[{"id":"kucoin","name":"KuCoin","url":"https://domainspoof.com/brands/kucoin"}],"dns":"resolved","resolved":["172.66.44.53","172.66.47.203","2606:4700:310c::ac42:2c35","2606:4700:310c::ac42:2fcb"],"resolved_at":"2026-11-05T12:25:31Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:34.000Z","findings":[{"id":"f6muzupzhx6agj2dqulyz","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T12:16:20.779Z","first_published":"2026-11-05T13:14:47.841Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/brands/kucoin"},{"hostname":"staging.aml.legal","first_observed":"2026-11-05T12:56:48.099Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"resolved","resolved":["186.2.175.179"],"resolved_at":"2026-11-05T13:02:39Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:34.000Z","findings":[{"id":"f5mrllxuuixmg6h6th6ac","kind":"reported_domain","summary":"Under aml.legal, reported by PhishDestroy","first_observed":"2026-11-05T12:56:48.099Z","first_published":"2026-11-05T13:14:47.841Z","source":"phishdestroy","source_name":"PhishDestroy","under":"aml.legal","source_url":"https://phishdestroy.io/domain/aml.legal/"}],"url":"https://domainspoof.com/live?show=all&q=staging.aml.legal"},{"hostname":"stantexcapital.com","first_observed":"2026-11-05T13:00:32.749Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"resolved","resolved":["192.142.53.230"],"resolved_at":"2026-11-05T13:04:35Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:34.000Z","findings":[{"id":"fny73gcw5nrfpnwqwokqw","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T13:00:32.749Z","first_published":"2026-11-05T13:14:47.841Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/stantexcapital.com/"}],"url":"https://domainspoof.com/live?show=all&q=stantexcapital.com"},{"hostname":"steady-income.com","first_observed":"2026-11-05T12:41:10.480Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"resolved","resolved":["104.21.38.241","172.67.168.213"],"resolved_at":"2026-11-05T12:45:46Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:34.000Z","findings":[{"id":"fyhbfk5cpdj7lpajs2way","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T12:41:10.480Z","first_published":"2026-11-05T13:14:47.841Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=steady-income.com"},{"hostname":"store.aml.legal","first_observed":"2026-11-05T12:56:48.099Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"resolved","resolved":["186.2.175.179"],"resolved_at":"2026-11-05T13:02:39Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:34.000Z","findings":[{"id":"f5u7yaavnup2yhp2lgncw","kind":"reported_domain","summary":"Under aml.legal, reported by PhishDestroy","first_observed":"2026-11-05T12:56:48.099Z","first_published":"2026-11-05T13:14:47.841Z","source":"phishdestroy","source_name":"PhishDestroy","under":"aml.legal","source_url":"https://phishdestroy.io/domain/aml.legal/"}],"url":"https://domainspoof.com/live?show=all&q=store.aml.legal"},{"hostname":"swagger.aml.legal","first_observed":"2026-11-05T12:56:48.099Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"resolved","resolved":["186.2.175.179"],"resolved_at":"2026-11-05T13:02:39Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:34.000Z","findings":[{"id":"fc2kzbvbn4enshzdobwbw","kind":"reported_domain","summary":"Under aml.legal, reported by PhishDestroy","first_observed":"2026-11-05T12:56:48.099Z","first_published":"2026-11-05T13:14:47.841Z","source":"phishdestroy","source_name":"PhishDestroy","under":"aml.legal","source_url":"https://phishdestroy.io/domain/aml.legal/"}],"url":"https://domainspoof.com/live?show=all&q=swagger.aml.legal"},{"hostname":"synbeauty.by","first_observed":"2026-11-05T12:46:52.080Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"resolved","resolved":["45.155.60.8"],"resolved_at":"2026-11-05T12:57:47Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:34.000Z","findings":[{"id":"fkcyg7dcgblsx4tw5e3hk","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T12:46:52.080Z","first_published":"2026-11-05T13:14:47.841Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/synbeauty.by/"}],"url":"https://domainspoof.com/live?show=all&q=synbeauty.by"},{"hostname":"telexgfxlx.click","first_observed":"2026-11-05T12:51:35.088Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"resolved","resolved":["104.21.63.83","172.67.144.84"],"resolved_at":"2026-11-05T12:52:07Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:34.000Z","findings":[{"id":"fukly6pzfrnhbbzrzf5dz","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T12:51:35.088Z","first_published":"2026-11-05T13:14:47.841Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=telexgfxlx.click"},{"hostname":"tf-tw.com","first_observed":"2026-11-05T13:00:32.749Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"resolved","resolved":["192.188.88.182"],"resolved_at":"2026-11-05T13:00:45Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:34.000Z","findings":[{"id":"fn2g7ymo7vamralz3ouqi","kind":"reported_domain","summary":"Listed by MODA (one-page scam site)","first_observed":"2026-11-05T13:00:32.749Z","first_published":"2026-11-05T13:14:47.841Z","source":"moda","source_name":"MODA","claim":{"category":"one-page scam site"}}],"url":"https://domainspoof.com/live?show=all&q=tf-tw.com"},{"hostname":"theplaylistmanager.info","first_observed":"2026-11-05T12:19:19.542Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"resolved","resolved":["5.255.101.192"],"resolved_at":"2026-11-05T12:19:46Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:34.000Z","findings":[{"id":"fh2tnuhsutgy4fv747ibr","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T12:19:19.542Z","first_published":"2026-11-05T13:14:47.841Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=theplaylistmanager.info"},{"hostname":"tradex-es.com","first_observed":"2026-11-05T12:19:19.542Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"resolved","resolved":["104.21.91.10","172.67.164.66"],"resolved_at":"2026-11-05T13:36:31Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:34.000Z","findings":[{"id":"fuav4pdj3girdoui4cunf","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T12:19:19.542Z","first_published":"2026-11-05T13:14:47.841Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=tradex-es.com"},{"hostname":"trazor-login.pages.dev","first_observed":"2026-11-05T12:36:02.938Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"resolved","resolved":["172.66.45.16","172.66.46.240"],"resolved_at":"2026-11-05T12:36:46Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:34.000Z","findings":[{"id":"fpn6ye74psq7j5s5uogpy","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T12:36:02.938Z","first_published":"2026-11-05T13:14:47.841Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=trazor-login.pages.dev"},{"hostname":"treasury-wiew.space","first_observed":"2026-11-05T12:56:48.099Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"resolved","resolved":["104.21.30.29","172.67.150.114"],"resolved_at":"2026-11-05T13:02:40Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:34.000Z","findings":[{"id":"f6tm74ffui2vghng4ubcc","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T12:56:48.099Z","first_published":"2026-11-05T13:14:47.841Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=treasury-wiew.space"},{"hostname":"truebloodbullterriers.com","first_observed":"2026-11-05T12:10:36.424Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"resolved","resolved":["104.21.68.158","172.67.196.169"],"resolved_at":"2026-11-05T12:11:16Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:34.000Z","findings":[{"id":"fb6han5bzrnrm3m2hjjdr","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T12:10:36.424Z","first_published":"2026-11-05T13:14:47.841Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/truebloodbullterriers.com/"}],"url":"https://domainspoof.com/live?show=all&q=truebloodbullterriers.com"},{"hostname":"truly1-recusandae89.cfd","first_observed":"2026-11-05T12:19:19.542Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"no_address","resolved":["104.21.15.89","172.67.162.1","2606:4700:3035::6815:f59","2606:4700:3036::ac43:a201"],"resolved_at":"2026-11-05T12:19:46Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:34.000Z","findings":[{"id":"fybdproy4lu2fq7obyzbo","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T12:19:19.542Z","first_published":"2026-11-05T13:14:47.841Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=truly1-recusandae89.cfd"},{"hostname":"truly6-odio48.cfd","first_observed":"2026-11-05T12:19:19.542Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"no_address","resolved":[],"resolved_at":"2026-11-05T12:19:46Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:34.000Z","findings":[{"id":"fa2lewlcloqqeytgfrgxw","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T12:19:19.542Z","first_published":"2026-11-05T13:14:47.841Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=truly6-odio48.cfd"},{"hostname":"truly7-sapiente30.cfd","first_observed":"2026-11-05T12:19:19.542Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"no_address","resolved":[],"resolved_at":"2026-11-05T12:19:46Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:34.000Z","findings":[{"id":"f5oa6jvq6cfza7f5so5to","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T12:19:19.542Z","first_published":"2026-11-05T13:14:47.841Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=truly7-sapiente30.cfd"},{"hostname":"ttrtrf.oofttdd.ezgateway.net","first_observed":"2026-11-05T12:05:52.666Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"resolved","resolved":["172.66.45.22","172.66.46.234"],"resolved_at":"2026-11-05T12:18:02Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:34.000Z","findings":[{"id":"frj2cvwthgw4ed7m6wtfu","kind":"reported_domain","summary":"Under ezgateway.net, listed by USOM","first_observed":"2026-11-05T12:05:52.666Z","first_published":"2026-11-05T13:14:47.841Z","source":"usom","source_name":"USOM","under":"ezgateway.net"}],"url":"https://domainspoof.com/live?show=all&q=ttrtrf.oofttdd.ezgateway.net"},{"hostname":"tulong-grow-pl.com","first_observed":"2026-11-05T12:56:48.099Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"resolved","resolved":["104.21.85.229","172.67.211.225"],"resolved_at":"2026-11-05T13:02:40Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:34.000Z","findings":[{"id":"fa4l4ogxnjowehvkpr3vm","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T12:56:48.099Z","first_published":"2026-11-05T13:14:47.841Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=tulong-grow-pl.com"},{"hostname":"turistrucu.store","first_observed":"2026-11-05T12:19:19.542Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"resolved","resolved":["104.21.29.154","172.67.149.108","2606:4700:3035::ac43:956c","2606:4700:3037::6815:1d9a"],"resolved_at":"2026-11-05T12:19:46Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:34.000Z","findings":[{"id":"f45fcidq3zefu4fc2m6o4","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T12:19:19.542Z","first_published":"2026-11-05T13:14:47.841Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=turistrucu.store"},{"hostname":"twcaibo.shop","first_observed":"2026-11-05T12:21:03.555Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"resolved","resolved":["104.21.9.31","172.67.141.50"],"resolved_at":"2026-11-05T12:21:27Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:34.000Z","findings":[{"id":"fvgpekmojyhb7bvqxz7jh","kind":"reported_domain","summary":"Listed by NPA 165 (finance and insurance)","first_observed":"2026-11-05T12:21:03.555Z","first_published":"2026-11-05T13:14:47.841Z","source":"npa","source_name":"NPA 165","claim":{"category":"finance and insurance"}}],"url":"https://domainspoof.com/live?show=all&q=twcaibo.shop"},{"hostname":"ufbewnfs.monster","first_observed":"2026-11-05T12:26:14.407Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"resolved","resolved":["104.21.94.111","172.67.222.188"],"resolved_at":"2026-11-05T12:28:26Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:34.000Z","findings":[{"id":"fcfsksrddq2syj5ejury7","kind":"reported_domain","summary":"Listed by NPA 165 (e-commerce)","first_observed":"2026-11-05T12:26:14.407Z","first_published":"2026-11-05T13:14:47.841Z","source":"npa","source_name":"NPA 165","claim":{"category":"e-commerce"}}],"url":"https://domainspoof.com/live?show=all&q=ufbewnfs.monster"},{"hostname":"uhycxgb.cn","first_observed":"2026-11-05T12:10:36.424Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"resolved","resolved":["103.112.96.21","103.112.96.39","118.107.19.44","192.253.235.202"],"resolved_at":"2026-11-05T12:11:16Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:34.000Z","findings":[{"id":"frshaueyhuxhsmv2w3zlw","kind":"reported_domain","summary":"Listed by NPA 165 (e-commerce)","first_observed":"2026-11-05T12:10:36.424Z","first_published":"2026-11-05T13:14:47.841Z","source":"npa","source_name":"NPA 165","claim":{"category":"e-commerce"}}],"url":"https://domainspoof.com/live?show=all&q=uhycxgb.cn"},{"hostname":"ukcedarpointway.com","first_observed":"2026-11-05T12:36:02.938Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"resolved","resolved":["104.21.21.64","172.67.196.204"],"resolved_at":"2026-11-05T12:36:47Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:34.000Z","findings":[{"id":"fjm4yok3og4d6mgjtcotp","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T12:36:02.938Z","first_published":"2026-11-05T13:14:47.841Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=ukcedarpointway.com"},{"hostname":"unbaiscope.store","first_observed":"2026-11-05T12:51:35.088Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"no_address","resolved":[],"resolved_at":"2026-11-05T12:52:08Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:34.000Z","findings":[{"id":"fglt2i5ptqkbgn5szu4vp","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T12:51:35.088Z","first_published":"2026-11-05T13:14:47.841Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=unbaiscope.store"},{"hostname":"unitedconcordinvestment.com","first_observed":"2026-11-05T12:36:02.938Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"resolved","resolved":["159.100.6.5"],"resolved_at":"2026-11-05T12:36:47Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:34.000Z","findings":[{"id":"fs2hpwl6louy6lw54brdw","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T12:36:02.938Z","first_published":"2026-11-05T13:14:47.841Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/unitedconcordinvestment.com/"}],"url":"https://domainspoof.com/live?show=all&q=unitedconcordinvestment.com"},{"hostname":"uolbit-fundix.digital","first_observed":"2026-11-05T12:26:14.407Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"resolved","resolved":["104.21.59.108","172.67.223.132"],"resolved_at":"2026-11-06T07:14:46Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:34.000Z","findings":[{"id":"fu3rjdgupv4jarjsyfv5i","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T12:26:14.407Z","first_published":"2026-11-05T13:14:47.841Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=uolbit-fundix.digital"},{"hostname":"usdcflow.cyou","first_observed":"2026-11-05T12:51:35.088Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"resolved","resolved":["104.21.78.219","172.67.137.166"],"resolved_at":"2026-11-05T12:52:08Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:34.000Z","findings":[{"id":"fdt43k3rnuj2ik24ypp3h","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T12:51:35.088Z","first_published":"2026-11-05T13:14:47.841Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/usdcflow.cyou/"}],"url":"https://domainspoof.com/live?show=all&q=usdcflow.cyou"},{"hostname":"usdcflow.org","first_observed":"2026-11-05T12:26:14.407Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"resolved","resolved":["104.21.71.126","172.67.145.83"],"resolved_at":"2026-11-05T12:28:26Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:34.000Z","findings":[{"id":"fhfsulshcv2lmljnx35pe","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T12:26:14.407Z","first_published":"2026-11-05T13:14:47.841Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/usdcflow.org/"}],"url":"https://domainspoof.com/live?show=all&q=usdcflow.org"},{"hostname":"usx-tfh83-wpjiy-ac0qn0-07vde.pages.dev","first_observed":"2026-11-05T12:21:03.555Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"resolved","resolved":["172.66.44.128","172.66.47.128"],"resolved_at":"2026-11-05T12:21:33Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:34.000Z","findings":[{"id":"fld7z4xvd4euun5fi4nse","kind":"reported_domain","summary":"Reported by PhishTank","first_observed":"2026-11-05T12:21:03.555Z","first_published":"2026-11-05T13:14:47.841Z","source":"phishtank","source_name":"PhishTank","source_url":"https://phishtank.org/phish_detail.php?phish_id=9479648"}],"url":"https://domainspoof.com/live?show=all&q=usx-tfh83-wpjiy-ac0qn0-07vde.pages.dev"},{"hostname":"vator.shop","first_observed":"2026-11-05T12:51:35.088Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"resolved","resolved":["104.21.8.38","172.67.156.198"],"resolved_at":"2026-11-05T12:52:08Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:34.000Z","findings":[{"id":"fbxu47wyfsy62scwsrbb5","kind":"reported_domain","summary":"Listed by NPA 165 (information services)","first_observed":"2026-11-05T12:51:35.088Z","first_published":"2026-11-05T13:14:47.841Z","source":"npa","source_name":"NPA 165","claim":{"category":"information services"}}],"url":"https://domainspoof.com/live?show=all&q=vator.shop"},{"hostname":"vcpiui.daunt.link","first_observed":"2026-11-05T12:46:52.080Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"resolved","resolved":["185.149.120.195"],"resolved_at":"2026-11-05T12:57:52Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:34.000Z","findings":[{"id":"folfi7bxwixcgbzpf2jla","kind":"reported_domain","summary":"Under daunt.link, reported by PhishDestroy","first_observed":"2026-11-05T12:46:52.080Z","first_published":"2026-11-05T13:14:47.841Z","source":"phishdestroy","source_name":"PhishDestroy","under":"daunt.link","source_url":"https://phishdestroy.io/domain/daunt.link/"}],"url":"https://domainspoof.com/live?show=all&q=vcpiui.daunt.link"},{"hostname":"verdune-04.pages.dev","first_observed":"2026-11-05T12:19:19.542Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"not_found","resolved":["172.66.44.185","172.66.47.71","2606:4700:310c::ac42:2cb9","2606:4700:310c::ac42:2f47"],"resolved_at":"2026-11-05T12:19:46Z","dns_checked_at":"2026-11-06T15:25:47.000Z","findings":[{"id":"fblkop7pdthkxoajmogby","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T12:19:19.542Z","first_published":"2026-11-05T13:14:47.841Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=verdune-04.pages.dev"},{"hostname":"verify-account.me","first_observed":"2026-11-05T12:19:19.542Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"resolved","resolved":["31.210.55.42"],"resolved_at":"2026-11-05T12:19:47Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:34.000Z","findings":[{"id":"f4f4ih3cjxnxomt2xosop","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T12:19:19.542Z","first_published":"2026-11-05T13:14:47.841Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=verify-account.me"},{"hostname":"vermilion.sanx.cloud","first_observed":"2026-11-05T12:21:03.555Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"resolved","resolved":["104.21.85.27","172.67.201.57"],"resolved_at":"2026-11-05T12:21:33Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:34.000Z","findings":[{"id":"fzqckji5xbrfgjyhy3uoz","kind":"reported_domain","summary":"Under sanx.cloud, listed by MetaMask","first_observed":"2026-11-05T12:21:03.555Z","first_published":"2026-11-05T13:14:47.841Z","source":"metamask","source_name":"MetaMask","under":"sanx.cloud"}],"url":"https://domainspoof.com/live?show=all&q=vermilion.sanx.cloud"},{"hostname":"verokit.trade","first_observed":"2026-11-05T12:31:22.583Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"resolved","resolved":["216.150.1.193","216.150.16.129"],"resolved_at":"2026-11-05T12:31:46Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:34.000Z","findings":[{"id":"fhtzqusecwywpioicdwsm","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T12:31:22.583Z","first_published":"2026-11-05T13:14:47.841Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=verokit.trade"},{"hostname":"vibs.sdimpacific.com","first_observed":"2026-11-05T12:41:10.480Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"resolved","resolved":["170.64.192.92"],"resolved_at":"2026-11-05T12:45:58Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:34.000Z","findings":[{"id":"fmvqemj2x5s22k4ylmasy","kind":"reported_domain","summary":"Under sdimpacific.com, reported by PhishDestroy","first_observed":"2026-11-05T12:41:10.480Z","first_published":"2026-11-05T13:14:47.841Z","source":"phishdestroy","source_name":"PhishDestroy","under":"sdimpacific.com","source_url":"https://phishdestroy.io/domain/sdimpacific.com/"}],"url":"https://domainspoof.com/live?show=all&q=vibs.sdimpacific.com"},{"hostname":"vote-ethenafi.com","first_observed":"2026-11-05T13:05:40.093Z","first_published":"2026-11-05T13:14:47.841Z","brands":[{"id":"ethena","name":"Ethena","url":"https://domainspoof.com/brands/ethena"}],"dns":"resolved","resolved":["104.21.83.226","172.67.182.100","2606:4700:3037::6815:53e2","2606:4700:3037::ac43:b664"],"resolved_at":"2026-11-05T13:06:42Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:34.000Z","findings":[{"id":"fr4aojbxsv77t33bqvcui","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T13:05:40.093Z","first_published":"2026-11-05T13:14:47.841Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/brands/ethena"},{"hostname":"vz2jqk.asia","first_observed":"2026-11-05T13:05:40.093Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"resolved","resolved":["104.21.68.75","172.67.191.173"],"resolved_at":"2026-11-05T13:06:42Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:34.000Z","findings":[{"id":"fvgvxwnhgrnejjcpz4wnj","kind":"reported_domain","summary":"Listed by NPA 165 (e-commerce)","first_observed":"2026-11-05T13:05:40.093Z","first_published":"2026-11-05T13:14:47.841Z","source":"npa","source_name":"NPA 165","claim":{"category":"e-commerce"}}],"url":"https://domainspoof.com/live?show=all&q=vz2jqk.asia"},{"hostname":"wap.hljhrly.com","first_observed":"2026-11-05T12:05:52.666Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"resolved","resolved":["107.163.230.34"],"resolved_at":"2026-11-05T12:18:08Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:34.000Z","findings":[{"id":"fthlumjevzfhf2yaqqxps","kind":"reported_domain","summary":"Under hljhrly.com, listed by CERT Polska","first_observed":"2026-11-05T12:05:52.666Z","first_published":"2026-11-05T13:14:47.841Z","source":"cert_polska","source_name":"CERT Polska","under":"hljhrly.com"}],"url":"https://domainspoof.com/live?show=all&q=wap.hljhrly.com"},{"hostname":"wapomua.pro","first_observed":"2026-11-05T12:51:35.088Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"resolved","resolved":["104.21.55.105","172.67.147.121"],"resolved_at":"2026-11-05T12:52:08Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:34.000Z","findings":[{"id":"fujo46lggql2eccsoptrj","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T12:51:35.088Z","first_published":"2026-11-05T13:14:47.841Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=wapomua.pro"},{"hostname":"wardirendi.store","first_observed":"2026-11-05T12:16:20.779Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"no_address","resolved":[],"resolved_at":"2026-11-05T12:25:37Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:34.000Z","findings":[{"id":"fenqcvlamzw2u6f6pdlnl","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T12:16:20.779Z","first_published":"2026-11-05T13:14:47.841Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=wardirendi.store"},{"hostname":"wcc-plug.cm","first_observed":"2026-11-05T12:31:22.583Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"resolved","resolved":["104.21.94.62","172.67.220.81"],"resolved_at":"2026-11-05T12:31:46Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:34.000Z","findings":[{"id":"fsuvrwqe5t7i2f3uzb3dn","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T12:31:22.583Z","first_published":"2026-11-05T13:14:47.841Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/wcc-plug.cm/"}],"url":"https://domainspoof.com/live?show=all&q=wcc-plug.cm"},{"hostname":"web3-gateway.com","first_observed":"2026-11-05T13:05:40.093Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"no_address","resolved":[],"resolved_at":"2026-11-05T13:06:42Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:34.000Z","findings":[{"id":"f2fljacowiiwwxwp25d5x","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T13:05:40.093Z","first_published":"2026-11-05T13:14:47.841Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=web3-gateway.com"},{"hostname":"webdisk.getbfinexorg.com","first_observed":"2026-11-05T12:26:14.407Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"resolved","resolved":["94.23.160.246"],"resolved_at":"2026-11-05T12:28:26Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:34.000Z","findings":[{"id":"fdssvwlfmh5xa22pjo237","kind":"reported_domain","summary":"Under getbfinexorg.com, reported by PhishDestroy","first_observed":"2026-11-05T12:26:14.407Z","first_published":"2026-11-05T13:14:47.841Z","source":"phishdestroy","source_name":"PhishDestroy","under":"getbfinexorg.com","source_url":"https://phishdestroy.io/domain/getbfinexorg.com/"}],"url":"https://domainspoof.com/live?show=all&q=webdisk.getbfinexorg.com"},{"hostname":"webdisk.unitedconcordinvestment.com","first_observed":"2026-11-05T12:36:02.938Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"resolved","resolved":["159.100.6.5"],"resolved_at":"2026-11-05T12:36:48Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:34.000Z","findings":[{"id":"fajrzciqc2tksosftttxu","kind":"reported_domain","summary":"Under unitedconcordinvestment.com, reported by PhishDestroy","first_observed":"2026-11-05T12:36:02.938Z","first_published":"2026-11-05T13:14:47.841Z","source":"phishdestroy","source_name":"PhishDestroy","under":"unitedconcordinvestment.com","source_url":"https://phishdestroy.io/domain/unitedconcordinvestment.com/"}],"url":"https://domainspoof.com/live?show=all&q=webdisk.unitedconcordinvestment.com"},{"hostname":"webhook.aml.legal","first_observed":"2026-11-05T12:56:48.099Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"resolved","resolved":["186.2.175.179"],"resolved_at":"2026-11-05T13:02:41Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:34.000Z","findings":[{"id":"fhmma3hkz3q4mklxt7enl","kind":"reported_domain","summary":"Under aml.legal, reported by PhishDestroy","first_observed":"2026-11-05T12:56:48.099Z","first_published":"2026-11-05T13:14:47.841Z","source":"phishdestroy","source_name":"PhishDestroy","under":"aml.legal","source_url":"https://phishdestroy.io/domain/aml.legal/"}],"url":"https://domainspoof.com/live?show=all&q=webhook.aml.legal"},{"hostname":"webmail.getbfinexorg.com","first_observed":"2026-11-05T12:26:14.407Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"resolved","resolved":["94.23.160.246"],"resolved_at":"2026-11-05T12:28:26Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:34.000Z","findings":[{"id":"f6zry36ncozgohux46onn","kind":"reported_domain","summary":"Under getbfinexorg.com, reported by PhishDestroy","first_observed":"2026-11-05T12:26:14.407Z","first_published":"2026-11-05T13:14:47.841Z","source":"phishdestroy","source_name":"PhishDestroy","under":"getbfinexorg.com","source_url":"https://phishdestroy.io/domain/getbfinexorg.com/"}],"url":"https://domainspoof.com/live?show=all&q=webmail.getbfinexorg.com"},{"hostname":"webmail.stantexcapital.com","first_observed":"2026-11-05T13:00:32.749Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"resolved","resolved":["192.142.53.230"],"resolved_at":"2026-11-05T13:00:45Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:34.000Z","findings":[{"id":"f6ksfxetms7m75jckkv33","kind":"reported_domain","summary":"Under stantexcapital.com, reported by PhishDestroy","first_observed":"2026-11-05T13:00:32.749Z","first_published":"2026-11-05T13:14:47.841Z","source":"phishdestroy","source_name":"PhishDestroy","under":"stantexcapital.com","source_url":"https://phishdestroy.io/domain/stantexcapital.com/"}],"url":"https://domainspoof.com/live?show=all&q=webmail.stantexcapital.com"},{"hostname":"webmail.unitedconcordinvestment.com","first_observed":"2026-11-05T12:36:02.938Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"resolved","resolved":["159.100.6.5"],"resolved_at":"2026-11-05T12:36:48Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:34.000Z","findings":[{"id":"fu6wbwzjgjvfldijrlciq","kind":"reported_domain","summary":"Under unitedconcordinvestment.com, reported by PhishDestroy","first_observed":"2026-11-05T12:36:02.938Z","first_published":"2026-11-05T13:14:47.841Z","source":"phishdestroy","source_name":"PhishDestroy","under":"unitedconcordinvestment.com","source_url":"https://phishdestroy.io/domain/unitedconcordinvestment.com/"}],"url":"https://domainspoof.com/live?show=all&q=webmail.unitedconcordinvestment.com"},{"hostname":"weryfid-92661.eu.cc","first_observed":"2026-11-05T12:56:48.099Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"resolved","resolved":["104.21.60.38","172.67.191.112"],"resolved_at":"2026-11-05T13:02:40Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:34.000Z","findings":[{"id":"fxvqq4lkvrl2mmmasswlv","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T12:56:48.099Z","first_published":"2026-11-05T13:14:47.841Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=weryfid-92661.eu.cc"},{"hostname":"weryflkuje-27642.eu.cc","first_observed":"2026-11-05T12:31:22.583Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"resolved","resolved":["104.21.52.194","172.67.203.56"],"resolved_at":"2026-11-05T12:31:46Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:34.000Z","findings":[{"id":"f7a26pjw3d4onc3imwm54","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T12:31:22.583Z","first_published":"2026-11-05T13:14:47.841Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=weryflkuje-27642.eu.cc"},{"hostname":"witty-wallet.com","first_observed":"2026-11-05T12:41:10.480Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"resolved","resolved":["104.21.92.240","172.67.200.32"],"resolved_at":"2026-11-05T12:46:01Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:34.000Z","findings":[{"id":"f5kccyglulivvlce7r6i4","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T12:41:10.480Z","first_published":"2026-11-05T13:14:47.841Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=witty-wallet.com"},{"hostname":"ws-stoore.com","first_observed":"2026-11-05T12:19:19.542Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"resolved","resolved":["104.21.79.241","172.67.172.5","2606:4700:3036::ac43:ac05","2606:4700:3037::6815:4ff1"],"resolved_at":"2026-11-05T12:19:46Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:34.000Z","findings":[{"id":"f6qsnfhu6o63yuh6i5kqt","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T12:19:19.542Z","first_published":"2026-11-05T13:14:47.841Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=ws-stoore.com"},{"hostname":"www.91590---12342893.com","first_observed":"2026-11-05T12:26:14.407Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"resolved","resolved":["13.70.4.78","191.223.42.96","191.223.42.198"],"resolved_at":"2026-11-05T12:28:26Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:34.000Z","findings":[{"id":"fmwu5l5wvuq75mpdsjtpj","kind":"reported_domain","summary":"Under 91590---12342893.com, reported by PhishDestroy","first_observed":"2026-11-05T12:26:14.407Z","first_published":"2026-11-05T13:14:47.841Z","source":"phishdestroy","source_name":"PhishDestroy","under":"91590---12342893.com","source_url":"https://phishdestroy.io/domain/91590---12342893.com/"}],"url":"https://domainspoof.com/live?show=all&q=www.91590---12342893.com"},{"hostname":"www.academytest.keylines.net.in","first_observed":"2026-11-05T12:46:52.080Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"resolved","resolved":["157.15.130.67"],"resolved_at":"2026-11-05T12:57:54Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:34.000Z","findings":[{"id":"fdqtgb4krzuuqydxna6a3","kind":"reported_domain","summary":"Under keylines.net.in, listed by CERT Polska","first_observed":"2026-11-05T12:46:52.080Z","first_published":"2026-11-05T13:14:47.841Z","source":"cert_polska","source_name":"CERT Polska","under":"keylines.net.in"}],"url":"https://domainspoof.com/live?show=all&q=www.academytest.keylines.net.in"},{"hostname":"www.alibaba.gift","first_observed":"2026-11-05T12:18:10.718Z","first_published":"2026-11-05T13:14:47.841Z","brands":[{"id":"alibaba","name":"Alibaba","url":"https://domainspoof.com/brands/alibaba"}],"dns":"resolved","resolved":["138.226.237.242"],"resolved_at":"2026-11-06T13:23:04Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:34.000Z","findings":[{"id":"fyzuji5jktklpe5wvqzt6","kind":"spamhaus_drop","summary":"Resolved to 138.226.237.242 on Spamhaus DROP","first_observed":"2026-11-05T12:18:10.718Z","first_published":"2026-11-05T13:14:47.841Z","address":"138.226.237.242","list":"spamhaus_drop","list_name":"Spamhaus DROP"}],"url":"https://domainspoof.com/brands/alibaba"},{"hostname":"www.allianz-fuer-hiddenseer.de","first_observed":"2026-11-05T12:16:37.669Z","first_published":"2026-11-05T13:14:47.841Z","brands":[{"id":"allianz","name":"Allianz","url":"https://domainspoof.com/brands/allianz"}],"dns":"resolved","resolved":["81.169.145.75"],"resolved_at":"2026-11-06T13:23:04Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:34.000Z","findings":[{"id":"f6iswouukxocmjtktdbyi","kind":"phishing_infrastructure","summary":"Resolved to 81.169.145.75, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T12:16:37.669Z","first_published":"2026-11-05T13:14:47.841Z","address":"81.169.145.75","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/allianz"},{"hostname":"www.app.legders-lives.net","first_observed":"2026-11-05T12:36:02.938Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"resolved","resolved":["104.21.20.120","172.67.192.168"],"resolved_at":"2026-11-05T12:36:50Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:34.000Z","findings":[{"id":"f2o6uagsniig5dyazimr6","kind":"reported_domain","summary":"Under legders-lives.net, listed by MetaMask","first_observed":"2026-11-05T12:36:02.938Z","first_published":"2026-11-05T13:14:47.841Z","source":"metamask","source_name":"MetaMask","under":"legders-lives.net"}],"url":"https://domainspoof.com/live?show=all&q=www.app.legders-lives.net"},{"hostname":"www.appendage.ezgateway.net","first_observed":"2026-11-05T12:21:03.555Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"resolved","resolved":["172.67.165.35"],"resolved_at":"2026-11-05T12:21:33Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:34.000Z","findings":[{"id":"fyqpzdwf6kkkimwcmgdkk","kind":"reported_domain","summary":"Under ezgateway.net, listed by USOM","first_observed":"2026-11-05T12:21:03.555Z","first_published":"2026-11-05T13:14:47.841Z","source":"usom","source_name":"USOM","under":"ezgateway.net"}],"url":"https://domainspoof.com/live?show=all&q=www.appendage.ezgateway.net"},{"hostname":"www.bywinoo.com","first_observed":"2026-11-05T12:36:02.938Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"resolved","resolved":["104.18.35.90","172.64.152.166"],"resolved_at":"2026-11-05T12:36:50Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:34.000Z","findings":[{"id":"fucofth4bcop3dmbg2dy4","kind":"reported_domain","summary":"Under bywinoo.com, listed by CERT Polska","first_observed":"2026-11-05T12:36:02.938Z","first_published":"2026-11-05T13:14:47.841Z","source":"cert_polska","source_name":"CERT Polska","under":"bywinoo.com"}],"url":"https://domainspoof.com/live?show=all&q=www.bywinoo.com"},{"hostname":"www.cursos.ataloa.com","first_observed":"2026-11-05T12:56:48.099Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"resolved","resolved":["185.149.120.183"],"resolved_at":"2026-11-05T13:02:40Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:34.000Z","findings":[{"id":"fzo4lbooymm2qroogbacn","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T12:56:48.099Z","first_published":"2026-11-05T13:14:47.841Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/www.cursos.ataloa.com/"}],"url":"https://domainspoof.com/live?show=all&q=www.cursos.ataloa.com"},{"hostname":"www.dariomiceli.com","first_observed":"2026-11-05T12:36:02.938Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"resolved","resolved":["199.36.158.100"],"resolved_at":"2026-11-05T12:36:50Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:34.000Z","findings":[{"id":"fug6nehrkdsu4eyxp53fq","kind":"reported_domain","summary":"Under dariomiceli.com, reported by PhishDestroy","first_observed":"2026-11-05T12:36:02.938Z","first_published":"2026-11-05T13:14:47.841Z","source":"phishdestroy","source_name":"PhishDestroy","under":"dariomiceli.com","source_url":"https://phishdestroy.io/domain/dariomiceli.com/"}],"url":"https://domainspoof.com/live?show=all&q=www.dariomiceli.com"},{"hostname":"www.dhsddt.com","first_observed":"2026-11-05T12:36:02.938Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"resolved","resolved":["183.136.138.170"],"resolved_at":"2026-11-05T12:36:50Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:34.000Z","findings":[{"id":"fflsrerx6e3yc3mhnfhts","kind":"reported_domain","summary":"Under dhsddt.com, listed by MetaMask","first_observed":"2026-11-05T12:36:02.938Z","first_published":"2026-11-05T13:14:47.841Z","source":"metamask","source_name":"MetaMask","under":"dhsddt.com"}],"url":"https://domainspoof.com/live?show=all&q=www.dhsddt.com"},{"hostname":"www.ellise.ai","first_observed":"2026-11-05T12:36:02.938Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"resolved","resolved":["199.36.158.100"],"resolved_at":"2026-11-05T12:36:50Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:34.000Z","findings":[{"id":"fxgolhuqpqocj3roeti4g","kind":"reported_domain","summary":"Under ellise.ai, reported by PhishDestroy","first_observed":"2026-11-05T12:36:02.938Z","first_published":"2026-11-05T13:14:47.841Z","source":"phishdestroy","source_name":"PhishDestroy","under":"ellise.ai","source_url":"https://phishdestroy.io/domain/ellise.ai/"}],"url":"https://domainspoof.com/live?show=all&q=www.ellise.ai"},{"hostname":"www.finartex.ltd","first_observed":"2026-11-05T12:36:02.938Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"resolved","resolved":["91.108.98.164","93.127.179.151"],"resolved_at":"2026-11-05T12:36:50Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:35.000Z","findings":[{"id":"fmars5vhs3ddb4qgyjbnj","kind":"reported_domain","summary":"Under finartex.ltd, reported by PhishDestroy","first_observed":"2026-11-05T12:36:02.938Z","first_published":"2026-11-05T13:14:47.841Z","source":"phishdestroy","source_name":"PhishDestroy","under":"finartex.ltd","source_url":"https://phishdestroy.io/domain/finartex.ltd/"}],"url":"https://domainspoof.com/live?show=all&q=www.finartex.ltd"},{"hostname":"www.getbfinexorg.com","first_observed":"2026-11-05T12:26:14.407Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"resolved","resolved":["94.23.160.246"],"resolved_at":"2026-11-05T12:28:26Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:35.000Z","findings":[{"id":"f3zpqjmgkwg4asfu6pzjw","kind":"reported_domain","summary":"Under getbfinexorg.com, reported by PhishDestroy","first_observed":"2026-11-05T12:26:14.407Z","first_published":"2026-11-05T13:14:47.841Z","source":"phishdestroy","source_name":"PhishDestroy","under":"getbfinexorg.com","source_url":"https://phishdestroy.io/domain/getbfinexorg.com/"}],"url":"https://domainspoof.com/live?show=all&q=www.getbfinexorg.com"},{"hostname":"www.hldjzremoteaccess.patiobydesign.com","first_observed":"2026-11-05T13:05:40.093Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"resolved","resolved":["185.149.120.183"],"resolved_at":"2026-11-05T13:06:43Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:35.000Z","findings":[{"id":"f76yavwawmor35inbl564","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T13:05:40.093Z","first_published":"2026-11-05T13:14:47.841Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/www.hldjzremoteaccess.patiobydesign.com/"}],"url":"https://domainspoof.com/live?show=all&q=www.hldjzremoteaccess.patiobydesign.com"},{"hostname":"www.hljhrly.com","first_observed":"2026-11-05T12:05:52.666Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"resolved","resolved":["107.163.230.34"],"resolved_at":"2026-11-05T12:18:12Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:35.000Z","findings":[{"id":"fcrv3lkjvg3ig3z63pvso","kind":"reported_domain","summary":"Under hljhrly.com, listed by CERT Polska","first_observed":"2026-11-05T12:05:52.666Z","first_published":"2026-11-05T13:14:47.841Z","source":"cert_polska","source_name":"CERT Polska","under":"hljhrly.com"}],"url":"https://domainspoof.com/live?show=all&q=www.hljhrly.com"},{"hostname":"www.home.patiobydesign.com","first_observed":"2026-11-05T13:05:40.093Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"resolved","resolved":["185.149.120.183"],"resolved_at":"2026-11-05T13:06:43Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:35.000Z","findings":[{"id":"fiyuloxenwri6ut5q7g37","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T13:05:40.093Z","first_published":"2026-11-05T13:14:47.841Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/www.home.patiobydesign.com/"}],"url":"https://domainspoof.com/live?show=all&q=www.home.patiobydesign.com"},{"hostname":"www.letssendit.fun","first_observed":"2026-11-05T12:46:52.080Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"resolved","resolved":["66.241.125.237","2a09:8280:1::c1:bb5f:0"],"resolved_at":"2026-11-05T12:57:55Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:35.000Z","findings":[{"id":"fcpe33eedsxo7m3vlxfs4","kind":"reported_domain","summary":"Under letssendit.fun, reported by PhishDestroy","first_observed":"2026-11-05T12:46:52.080Z","first_published":"2026-11-05T13:14:47.841Z","source":"phishdestroy","source_name":"PhishDestroy","under":"letssendit.fun","source_url":"https://phishdestroy.io/domain/letssendit.fun/"}],"url":"https://domainspoof.com/live?show=all&q=www.letssendit.fun"},{"hostname":"www.lyuhhsecureaccess.patiobydesign.com","first_observed":"2026-11-05T13:05:40.093Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"resolved","resolved":["185.149.120.183"],"resolved_at":"2026-11-05T13:06:43Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:35.000Z","findings":[{"id":"fzdmrtoerdysy5w6pgzgi","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T13:05:40.093Z","first_published":"2026-11-05T13:14:47.841Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/www.lyuhhsecureaccess.patiobydesign.com/"}],"url":"https://domainspoof.com/live?show=all&q=www.lyuhhsecureaccess.patiobydesign.com"},{"hostname":"www.m.professorflapjacks.com","first_observed":"2026-11-05T12:56:48.099Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"resolved","resolved":["185.149.120.183"],"resolved_at":"2026-11-05T13:02:41Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:35.000Z","findings":[{"id":"fea2n7m7edzgdrviljczu","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T12:56:48.099Z","first_published":"2026-11-05T13:14:47.841Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/www.m.professorflapjacks.com/"}],"url":"https://domainspoof.com/live?show=all&q=www.m.professorflapjacks.com"},{"hostname":"www.netflix-dashboard-login.172-246-243-65.plesk.page","first_observed":"2026-11-05T12:16:38.254Z","first_published":"2026-11-05T13:14:47.841Z","brands":[{"id":"netflix","name":"Netflix","url":"https://domainspoof.com/brands/netflix"}],"dns":"resolved","resolved":["172.246.243.65"],"resolved_at":"2026-11-06T13:23:04Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:35.000Z","findings":[{"id":"fnlywr7tiso52ldteksjf","kind":"phishing_infrastructure","summary":"Resolved to 172.246.243.65, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T12:16:38.254Z","first_published":"2026-11-05T13:14:47.841Z","address":"172.246.243.65","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/netflix"},{"hostname":"www.nexus.globalfx.pl","first_observed":"2026-11-05T12:05:52.666Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"resolved","resolved":["149.255.62.152"],"resolved_at":"2026-11-05T12:18:13Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:35.000Z","findings":[{"id":"fwxvjxh2il6wq7ab6nhbr","kind":"reported_domain","summary":"Under globalfx.pl, listed by CERT Polska","first_observed":"2026-11-05T12:05:52.666Z","first_published":"2026-11-05T13:14:47.841Z","source":"cert_polska","source_name":"CERT Polska","under":"globalfx.pl"}],"url":"https://domainspoof.com/live?show=all&q=www.nexus.globalfx.pl"},{"hostname":"www.se.me","first_observed":"2026-11-05T12:41:10.480Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"resolved","resolved":["159.89.90.207"],"resolved_at":"2026-11-05T12:46:07Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:35.000Z","findings":[{"id":"fxk6dscsig4cur4qpmkm2","kind":"reported_domain","summary":"Under se.me, reported by PhishDestroy","first_observed":"2026-11-05T12:41:10.480Z","first_published":"2026-11-05T13:14:47.841Z","source":"phishdestroy","source_name":"PhishDestroy","under":"se.me","source_url":"https://phishdestroy.io/domain/se.me/"}],"url":"https://domainspoof.com/live?show=all&q=www.se.me"},{"hostname":"www.slon-avto.ru","first_observed":"2026-11-05T12:10:36.424Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"resolved","resolved":["193.107.236.86"],"resolved_at":"2026-11-05T12:11:17Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:35.000Z","findings":[{"id":"f7j2wouklwbks4fvv2s2n","kind":"reported_domain","summary":"Under slon-avto.ru, reported by PhishDestroy","first_observed":"2026-11-05T12:10:36.424Z","first_published":"2026-11-05T13:14:47.841Z","source":"phishdestroy","source_name":"PhishDestroy","under":"slon-avto.ru","source_url":"https://phishdestroy.io/domain/slon-avto.ru/"}],"url":"https://domainspoof.com/live?show=all&q=www.slon-avto.ru"},{"hostname":"www.stantexcapital.com","first_observed":"2026-11-05T13:00:32.749Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"resolved","resolved":["192.142.53.230"],"resolved_at":"2026-11-05T13:00:45Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:35.000Z","findings":[{"id":"f5xvoplfln2b457y4oq4p","kind":"reported_domain","summary":"Under stantexcapital.com, reported by PhishDestroy","first_observed":"2026-11-05T13:00:32.749Z","first_published":"2026-11-05T13:14:47.841Z","source":"phishdestroy","source_name":"PhishDestroy","under":"stantexcapital.com","source_url":"https://phishdestroy.io/domain/stantexcapital.com/"}],"url":"https://domainspoof.com/live?show=all&q=www.stantexcapital.com"},{"hostname":"www.synbeauty.by","first_observed":"2026-11-05T12:46:52.080Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"resolved","resolved":["45.155.60.8"],"resolved_at":"2026-11-05T12:57:56Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:35.000Z","findings":[{"id":"fdz3yks3mxcptjoe5addw","kind":"reported_domain","summary":"Under synbeauty.by, reported by PhishDestroy","first_observed":"2026-11-05T12:46:52.080Z","first_published":"2026-11-05T13:14:47.841Z","source":"phishdestroy","source_name":"PhishDestroy","under":"synbeauty.by","source_url":"https://phishdestroy.io/domain/synbeauty.by/"}],"url":"https://domainspoof.com/live?show=all&q=www.synbeauty.by"},{"hostname":"www.unitedconcordinvestment.com","first_observed":"2026-11-05T12:36:02.938Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"resolved","resolved":["159.100.6.5"],"resolved_at":"2026-11-05T12:36:51Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:35.000Z","findings":[{"id":"fub3haqve7da4l7q67jtw","kind":"reported_domain","summary":"Under unitedconcordinvestment.com, reported by PhishDestroy","first_observed":"2026-11-05T12:36:02.938Z","first_published":"2026-11-05T13:14:47.841Z","source":"phishdestroy","source_name":"PhishDestroy","under":"unitedconcordinvestment.com","source_url":"https://phishdestroy.io/domain/unitedconcordinvestment.com/"}],"url":"https://domainspoof.com/live?show=all&q=www.unitedconcordinvestment.com"},{"hostname":"www.vibs.sdimpacific.com","first_observed":"2026-11-05T12:41:10.480Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"resolved","resolved":["170.64.192.92"],"resolved_at":"2026-11-05T12:46:07Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:35.000Z","findings":[{"id":"ff4abrbvslf7wx5be7ag6","kind":"reported_domain","summary":"Under sdimpacific.com, reported by PhishDestroy","first_observed":"2026-11-05T12:41:10.480Z","first_published":"2026-11-05T13:14:47.841Z","source":"phishdestroy","source_name":"PhishDestroy","under":"sdimpacific.com","source_url":"https://phishdestroy.io/domain/sdimpacific.com/"}],"url":"https://domainspoof.com/live?show=all&q=www.vibs.sdimpacific.com"},{"hostname":"www.vpn.pearson367.com","first_observed":"2026-11-05T12:56:48.099Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"resolved","resolved":["185.149.120.183"],"resolved_at":"2026-11-05T13:02:41Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:35.000Z","findings":[{"id":"f4xnb4ry3msutu6t5vp7p","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T12:56:48.099Z","first_published":"2026-11-05T13:14:47.841Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/www.vpn.pearson367.com/"}],"url":"https://domainspoof.com/live?show=all&q=www.vpn.pearson367.com"},{"hostname":"www.westacecasinologin.com","first_observed":"2026-11-05T12:41:10.480Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"resolved","resolved":["104.21.43.101","172.67.178.5"],"resolved_at":"2026-11-05T12:46:08Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:35.000Z","findings":[{"id":"fhnxnyoe7nwkfxogbm336","kind":"reported_domain","summary":"Under westacecasinologin.com, listed by MetaMask","first_observed":"2026-11-05T12:41:10.480Z","first_published":"2026-11-05T13:14:47.841Z","source":"metamask","source_name":"MetaMask","under":"westacecasinologin.com"}],"url":"https://domainspoof.com/live?show=all&q=www.westacecasinologin.com"},{"hostname":"www.xinweb.xyz","first_observed":"2026-11-05T12:36:02.938Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"resolved","resolved":["104.21.13.182","172.67.132.236"],"resolved_at":"2026-11-05T12:36:52Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:35.000Z","findings":[{"id":"fkbjrl4qprwbjgaat2rfj","kind":"reported_domain","summary":"Under xinweb.xyz, listed by MetaMask","first_observed":"2026-11-05T12:36:02.938Z","first_published":"2026-11-05T13:14:47.841Z","source":"metamask","source_name":"MetaMask","under":"xinweb.xyz"}],"url":"https://domainspoof.com/live?show=all&q=www.xinweb.xyz"},{"hostname":"www.zyviz.ezgateway.net","first_observed":"2026-11-05T12:36:02.938Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"resolved","resolved":["172.67.165.35"],"resolved_at":"2026-11-05T12:36:52Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:35.000Z","findings":[{"id":"fukb7imlp2x7mclttcr2r","kind":"reported_domain","summary":"Under ezgateway.net, listed by USOM","first_observed":"2026-11-05T12:36:02.938Z","first_published":"2026-11-05T13:14:47.841Z","source":"usom","source_name":"USOM","under":"ezgateway.net"}],"url":"https://domainspoof.com/live?show=all&q=www.zyviz.ezgateway.net"},{"hostname":"x-coins.io","first_observed":"2026-11-05T12:26:14.407Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"no_address","resolved":[],"resolved_at":"2026-11-05T12:28:26Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:35.000Z","findings":[{"id":"frpi36bekem236uis45iy","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T12:26:14.407Z","first_published":"2026-11-05T13:14:47.841Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=x-coins.io"},{"hostname":"xbitbase.com","first_observed":"2026-11-05T12:05:52.666Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"resolved","resolved":["152.89.61.96"],"resolved_at":"2026-11-05T12:18:16Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:35.000Z","findings":[{"id":"fixcdojlemzimrmtunagb","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T12:05:52.666Z","first_published":"2026-11-05T13:14:47.841Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/xbitbase.com/"}],"url":"https://domainspoof.com/live?show=all&q=xbitbase.com"},{"hostname":"xkajsvdjkdsd.asia","first_observed":"2026-11-05T12:46:52.080Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"resolved","resolved":["52.222.177.8","52.222.177.18","52.222.177.33","52.222.177.117"],"resolved_at":"2026-11-05T12:57:58Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:35.000Z","findings":[{"id":"fwqqhpobrnqy37nit6p2e","kind":"reported_domain","summary":"Listed by NPA 165 (finance and insurance)","first_observed":"2026-11-05T12:46:52.080Z","first_published":"2026-11-05T13:14:47.841Z","source":"npa","source_name":"NPA 165","claim":{"category":"finance and insurance"}}],"url":"https://domainspoof.com/live?show=all&q=xkajsvdjkdsd.asia"},{"hostname":"xrpswipe.live","first_observed":"2026-11-05T12:05:52.666Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"resolved","resolved":["104.21.23.244","172.67.214.180"],"resolved_at":"2026-11-05T12:18:17Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:35.000Z","findings":[{"id":"f2rvpdmk22dut2vf7wok2","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T12:05:52.666Z","first_published":"2026-11-05T13:14:47.841Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=xrpswipe.live"},{"hostname":"xueboneba.shop","first_observed":"2026-11-05T13:00:32.749Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"resolved","resolved":["104.21.70.97","172.67.222.124"],"resolved_at":"2026-11-05T13:00:45Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:35.000Z","findings":[{"id":"f3rvu4srodqj7zgqtpdb6","kind":"reported_domain","summary":"Listed by NPA 165 (information services)","first_observed":"2026-11-05T13:00:32.749Z","first_published":"2026-11-05T13:14:47.841Z","source":"npa","source_name":"NPA 165","claim":{"category":"information services"}}],"url":"https://domainspoof.com/live?show=all&q=xueboneba.shop"},{"hostname":"yohya.xyz","first_observed":"2026-11-05T12:36:02.938Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"resolved","resolved":["104.21.19.225","172.67.190.109"],"resolved_at":"2026-11-05T12:36:53Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:35.000Z","findings":[{"id":"fz5wjym7k4qi6t3nlqzt2","kind":"reported_domain","summary":"Listed by NPA 165 (e-commerce)","first_observed":"2026-11-05T12:36:02.938Z","first_published":"2026-11-05T13:14:47.841Z","source":"npa","source_name":"NPA 165","claim":{"category":"e-commerce"}}],"url":"https://domainspoof.com/live?show=all&q=yohya.xyz"},{"hostname":"zebec-xlm-production.pages.dev","first_observed":"2026-11-05T13:05:40.093Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"resolved","resolved":["172.66.44.169","172.66.47.87"],"resolved_at":"2026-11-05T13:06:44Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:35.000Z","findings":[{"id":"f2mai33av52owrftgbnl5","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T13:05:40.093Z","first_published":"2026-11-05T13:14:47.841Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=zebec-xlm-production.pages.dev"},{"hostname":"zentech-blaze.com","first_observed":"2026-11-05T12:41:10.480Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"resolved","resolved":["104.21.58.198","172.67.207.58"],"resolved_at":"2026-11-05T12:46:12Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:35.000Z","findings":[{"id":"filzlxtrfvck425sh7x6n","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T12:41:10.480Z","first_published":"2026-11-05T13:14:47.841Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=zentech-blaze.com"},{"hostname":"zuveraldo.com","first_observed":"2026-11-05T12:19:19.542Z","first_published":"2026-11-05T13:14:47.841Z","brands":[],"dns":"resolved","resolved":["104.21.10.210","172.67.164.133"],"resolved_at":"2026-11-05T13:18:38Z","dns_checked_at":"2026-11-06T13:23:04.000Z","dns_since":"2026-11-05T13:22:35.000Z","findings":[{"id":"flhazntvvrvsx7vduhx2f","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T12:19:19.542Z","first_published":"2026-11-05T13:14:47.841Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=zuveraldo.com"},{"hostname":"account-recovery-coinbase.info","first_observed":"2026-11-05T12:08:03.000Z","first_published":"2026-11-05T12:08:03.000Z","brands":[{"id":"coinbase","name":"Coinbase","url":"https://domainspoof.com/brands/coinbase"}],"dns":"resolved","resolved":["104.21.71.62","172.67.169.254","2606:4700:3030::ac43:a9fe","2606:4700:3034::6815:473e"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of coinbase.com (the name with an added word), listed by MetaMask","first_observed":"2026-11-05T12:08:03.000Z","first_published":"2026-11-05T12:08:03.000Z","of":"coinbase.com","spelling":"combo","found_by":"zone_file","listings":[{"kind":"reported","source":"metamask","source_name":"MetaMask","host":"account-recovery-coinbase.info","flagged_at":"2026-11-05T12:08:03Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/coinbase"},{"hostname":"bankofchina.us","first_observed":"2026-11-05T12:08:03.000Z","first_published":"2026-11-05T12:08:03.000Z","brands":[{"id":"bank-of-china","name":"Bank of China","url":"https://domainspoof.com/brands/bank-of-china"}],"dns":"resolved","resolved":["104.143.9.210"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of bankofchina.com (same name, other ending), resolved to 104.143.9.210, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T12:08:03.000Z","first_published":"2026-11-05T12:08:03.000Z","of":"bankofchina.com","spelling":"tld","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"104.143.9.210","flagged_at":"2026-11-05T12:08:03Z"}]}],"url":"https://domainspoof.com/brands/bank-of-china"},{"hostname":"bell.compare","first_observed":"2026-11-05T12:08:03.000Z","first_published":"2026-11-05T12:08:03.000Z","brands":[{"id":"bell","name":"Bell","url":"https://domainspoof.com/brands/bell"}],"dns":"resolved","resolved":["85.233.160.22"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of bell.ca (same name, other ending), resolved to 85.233.160.22, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T12:08:03.000Z","first_published":"2026-11-05T12:08:03.000Z","of":"bell.ca","spelling":"tld","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"85.233.160.22","flagged_at":"2026-11-05T12:08:03Z"}]}],"url":"https://domainspoof.com/brands/bell"},{"hostname":"hyperliquid.ink","first_observed":"2026-11-05T12:08:03.000Z","first_published":"2026-11-05T12:08:03.000Z","brands":[{"id":"hyperliquid","name":"Hyperliquid","url":"https://domainspoof.com/brands/hyperliquid"}],"dns":"resolved","resolved":["207.207.210.107","207.207.210.229"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of hyperliquid.xyz (same name, other ending), listed by MetaMask","first_observed":"2026-11-05T12:08:03.000Z","first_published":"2026-11-05T12:08:03.000Z","of":"hyperliquid.xyz","spelling":"tld","found_by":"dns_sweep","listings":[{"kind":"reported","source":"metamask","source_name":"MetaMask","host":"hyperliquid.ink","flagged_at":"2026-11-05T12:08:03Z"}]}],"url":"https://domainspoof.com/brands/hyperliquid"},{"hostname":"pancakeswap.trade","first_observed":"2026-11-05T12:08:03.000Z","first_published":"2026-11-05T12:08:03.000Z","brands":[{"id":"pancakeswap","name":"PancakeSwap","url":"https://domainspoof.com/brands/pancakeswap"}],"dns":"resolved","resolved":["217.70.184.38"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of pancakeswap.finance (same name, other ending), listed by MetaMask","first_observed":"2026-11-05T12:08:03.000Z","first_published":"2026-11-05T12:08:03.000Z","of":"pancakeswap.finance","spelling":"tld","found_by":"dns_sweep","listings":[{"kind":"reported","source":"metamask","source_name":"MetaMask","host":"pancakeswap.trade","flagged_at":"2026-11-05T12:08:03Z"}]}],"url":"https://domainspoof.com/brands/pancakeswap"},{"hostname":"pkobp.com.pl","first_observed":"2026-11-05T12:08:03.000Z","first_published":"2026-11-05T12:08:03.000Z","brands":[{"id":"pko-bp","name":"PKO BP","url":"https://domainspoof.com/brands/pko-bp"}],"dns":"resolved","resolved":["185.253.212.22"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of pkobp.pl (same name, other ending), resolved to 185.253.212.22, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T12:08:03.000Z","first_published":"2026-11-05T12:08:03.000Z","of":"pkobp.pl","spelling":"tld","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"185.253.212.22","flagged_at":"2026-11-05T12:08:03Z"}]}],"url":"https://domainspoof.com/brands/pko-bp"},{"hostname":"polymarket.trade","first_observed":"2026-11-05T12:08:03.000Z","first_published":"2026-11-05T12:08:03.000Z","brands":[{"id":"polymarket","name":"Polymarket","url":"https://domainspoof.com/brands/polymarket"}],"dns":"resolved","resolved":["104.21.74.132","172.67.203.36","2606:4700:3032::6815:4a84","2606:4700:3034::ac43:cb24"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of polymarket.com (same name, other ending), reported by PhishDestroy","first_observed":"2026-11-05T12:08:03.000Z","first_published":"2026-11-05T12:08:03.000Z","of":"polymarket.com","spelling":"tld","found_by":"dns_sweep","listings":[{"kind":"reported","source":"phishdestroy","source_name":"PhishDestroy","host":"polymarket.trade","flagged_at":"2026-11-05T12:08:03Z"}]}],"url":"https://domainspoof.com/brands/polymarket"},{"hostname":"proximus.one","first_observed":"2026-11-05T12:08:03.000Z","first_published":"2026-11-05T12:08:03.000Z","brands":[{"id":"proximus","name":"Proximus","url":"https://domainspoof.com/brands/proximus"}],"dns":"resolved","resolved":["2.59.170.20","104.219.250.37"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of proximus.be (same name, other ending), resolved to 2.59.170.20, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T12:08:03.000Z","first_published":"2026-11-05T12:08:03.000Z","of":"proximus.be","spelling":"tld","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"2.59.170.20","flagged_at":"2026-11-05T12:08:03Z"}]}],"url":"https://domainspoof.com/brands/proximus"},{"hostname":"shopee.finance","first_observed":"2026-11-05T12:08:03.000Z","first_published":"2026-11-05T12:08:03.000Z","brands":[{"id":"shopee","name":"Shopee","url":"https://domainspoof.com/brands/shopee"}],"dns":"resolved","resolved":["5.78.156.59","5.161.47.86","5.161.230.87","46.62.237.138","76.223.91.20","195.201.128.179","2406:da1e:214:c901:3a5:448f:b7b7:82e7","2600:1f1c:6db:8801:6f53:9fde:4d81:d192","2a05:d014:179b:c400:a327:40ee:24cc:6180","2a05:d014:179b:c402:11c0:1340:8110:9807","2a05:d014:179b:c402:3531:28cc:15f7:ab92","2a05:d014:179b:c403:5a52:d8f9:5563:e594","2a05:d014:179b:c403:d818:28ff:4c9d:340e","2a05:d014:179b:c403:e762:6447:6bc:4551"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of shopee.com.br (same name, other ending), resolved to 195.201.128.179, where reported phishing was found in the 48 hours before, and resolved to 46.62.237.138, where reported phishing was found in the 48 hours before, and resolved to 5.161.230.87, where reported phishing was found in the 48 hours before, and resolved to 5.161.47.86, where reported phishing was found in the 48 hours before, and resolved to 5.78.156.59, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T12:08:03.000Z","first_published":"2026-11-05T12:08:03.000Z","of":"shopee.com.br","spelling":"tld","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"195.201.128.179","flagged_at":"2026-11-05T12:08:03Z"},{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"46.62.237.138","flagged_at":"2026-11-05T12:08:03Z"},{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"5.161.230.87","flagged_at":"2026-11-05T12:08:03Z"},{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"5.161.47.86","flagged_at":"2026-11-05T12:08:03Z"},{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"5.78.156.59","flagged_at":"2026-11-05T12:08:03Z"}]}],"url":"https://domainspoof.com/brands/shopee"},{"hostname":"square.us","first_observed":"2026-11-05T12:08:03.000Z","first_published":"2026-11-05T12:08:03.000Z","brands":[{"id":"square","name":"Square","url":"https://domainspoof.com/brands/square"}],"dns":"resolved","resolved":["144.76.59.138"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of square.com (same name, other ending), resolved to 144.76.59.138, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T12:08:03.000Z","first_published":"2026-11-05T12:08:03.000Z","of":"square.com","spelling":"tld","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"144.76.59.138","flagged_at":"2026-11-05T12:08:03Z"}]}],"url":"https://domainspoof.com/brands/square"},{"hostname":"tokenpocket.wiki","first_observed":"2026-11-05T12:08:03.000Z","first_published":"2026-11-05T12:08:03.000Z","brands":[{"id":"tokenpocket","name":"TokenPocket","url":"https://domainspoof.com/brands/tokenpocket"}],"dns":"resolved","resolved":["154.206.171.232"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of tokenpocket.pro (same name, other ending), listed by MetaMask","first_observed":"2026-11-05T12:08:03.000Z","first_published":"2026-11-05T12:08:03.000Z","of":"tokenpocket.pro","spelling":"tld","found_by":"dns_sweep","listings":[{"kind":"reported","source":"metamask","source_name":"MetaMask","host":"tokenpocket.wiki","flagged_at":"2026-11-05T12:08:03Z"}]}],"url":"https://domainspoof.com/brands/tokenpocket"},{"hostname":"zoom-call.live","first_observed":"2026-11-05T12:08:03.000Z","first_published":"2026-11-05T12:08:03.000Z","brands":[{"id":"zoom","name":"Zoom","url":"https://domainspoof.com/brands/zoom"}],"dns":"resolved","resolved":["54.144.38.219"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “zoom”, a name we match for Zoom, listed by MetaMask","first_observed":"2026-11-05T12:08:03.000Z","first_published":"2026-11-05T12:08:03.000Z","of":"zoom.us","spelling":"combo","match":"name","token":"zoom","found_by":"zone_file","listings":[{"kind":"reported","source":"metamask","source_name":"MetaMask","host":"zoom-call.live","flagged_at":"2026-11-05T12:08:03Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/zoom"},{"hostname":"1-blokyz.pages.dev","first_observed":"2026-11-05T11:52:48.076Z","first_published":"2026-11-05T12:06:38.708Z","brands":[],"dns":"not_found","resolved":["172.66.44.127","172.66.47.129","2606:4700:310c::ac42:2c7f","2606:4700:310c::ac42:2f81"],"resolved_at":"2026-11-05T11:53:44Z","dns_checked_at":"2026-11-06T16:13:32.000Z","findings":[{"id":"fy6zzybfek7fqyqqmj6k3","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T11:52:48.076Z","first_published":"2026-11-05T12:06:38.708Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=1-blokyz.pages.dev"},{"hostname":"1-governance-ptahtrade.pages.dev","first_observed":"2026-11-05T11:52:48.076Z","first_published":"2026-11-05T12:06:38.708Z","brands":[],"dns":"not_found","resolved":["172.66.44.134","172.66.47.122","2606:4700:310c::ac42:2c86","2606:4700:310c::ac42:2f7a"],"resolved_at":"2026-11-05T11:53:44Z","dns_checked_at":"2026-11-06T16:13:32.000Z","findings":[{"id":"fxgwl6rtpuhfcyavato2x","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T11:52:48.076Z","first_published":"2026-11-05T12:06:38.708Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=1-governance-ptahtrade.pages.dev"},{"hostname":"1-stonkbroker.pages.dev","first_observed":"2026-11-05T11:52:48.076Z","first_published":"2026-11-05T12:06:38.708Z","brands":[],"dns":"resolved","resolved":["172.66.44.94","172.66.47.162","2606:4700:310c::ac42:2c5e","2606:4700:310c::ac42:2fa2"],"resolved_at":"2026-11-05T11:53:44Z","dns_checked_at":"2026-11-06T12:10:13.000Z","dns_since":"2026-11-05T12:09:42.000Z","findings":[{"id":"fz3ndmzdnlglhofhtx6ms","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T11:52:48.076Z","first_published":"2026-11-05T12:06:38.708Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=1-stonkbroker.pages.dev"},{"hostname":"10-governance-zama.pages.dev","first_observed":"2026-11-05T11:26:06.906Z","first_published":"2026-11-05T12:06:38.708Z","brands":[],"dns":"not_found","resolved":["172.66.44.152","172.66.47.104"],"resolved_at":"2026-11-05T11:26:16Z","dns_checked_at":"2026-11-06T12:10:13.000Z","dns_since":"2026-11-05T12:09:42.000Z","findings":[{"id":"fb34fmmsexjfqa4abw2hk","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T11:26:06.906Z","first_published":"2026-11-05T12:06:38.708Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=10-governance-zama.pages.dev"},{"hostname":"11-governance-zama.pages.dev","first_observed":"2026-11-05T11:31:18.024Z","first_published":"2026-11-05T12:06:38.708Z","brands":[],"dns":"not_found","resolved":["172.66.44.146","172.66.47.110"],"resolved_at":"2026-11-05T11:31:24Z","dns_checked_at":"2026-11-06T12:10:13.000Z","dns_since":"2026-11-05T12:09:42.000Z","findings":[{"id":"fucx464fbxttxzraddxf6","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T11:31:18.024Z","first_published":"2026-11-05T12:06:38.708Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=11-governance-zama.pages.dev"},{"hostname":"12-governance-zama.pages.dev","first_observed":"2026-11-05T11:36:56.621Z","first_published":"2026-11-05T12:06:38.708Z","brands":[],"dns":"not_found","resolved":["172.66.44.80","172.66.47.176"],"resolved_at":"2026-11-05T11:37:02Z","dns_checked_at":"2026-11-06T12:10:13.000Z","dns_since":"2026-11-05T12:09:42.000Z","findings":[{"id":"fgvnaqavxkumsj7zvats5","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T11:36:56.621Z","first_published":"2026-11-05T12:06:38.708Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=12-governance-zama.pages.dev"},{"hostname":"13-governance-zama.pages.dev","first_observed":"2026-11-05T11:41:33.767Z","first_published":"2026-11-05T12:06:38.708Z","brands":[],"dns":"not_found","resolved":["172.66.44.141","172.66.47.115"],"resolved_at":"2026-11-05T11:45:26Z","dns_checked_at":"2026-11-06T12:10:13.000Z","dns_since":"2026-11-05T12:09:42.000Z","findings":[{"id":"for6n427f5ct2njywhoha","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T11:41:33.767Z","first_published":"2026-11-05T12:06:38.708Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=13-governance-zama.pages.dev"},{"hostname":"14-governance-zama.pages.dev","first_observed":"2026-11-05T11:46:43.299Z","first_published":"2026-11-05T12:06:38.708Z","brands":[],"dns":"not_found","resolved":["172.66.44.201","172.66.47.55"],"resolved_at":"2026-11-05T11:46:51Z","dns_checked_at":"2026-11-06T12:10:13.000Z","dns_since":"2026-11-05T12:09:42.000Z","findings":[{"id":"fy57wjfarmu5wtzvygc3h","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T11:46:43.299Z","first_published":"2026-11-05T12:06:38.708Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=14-governance-zama.pages.dev"},{"hostname":"15-governance-zama.pages.dev","first_observed":"2026-11-05T11:51:52.845Z","first_published":"2026-11-05T12:06:38.708Z","brands":[],"dns":"not_found","resolved":["172.66.44.217","172.66.47.39"],"resolved_at":"2026-11-05T11:52:02Z","dns_checked_at":"2026-11-06T12:10:13.000Z","dns_since":"2026-11-05T12:09:42.000Z","findings":[{"id":"fdj26hzs273rw3yolncj5","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T11:51:52.845Z","first_published":"2026-11-05T12:06:38.708Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=15-governance-zama.pages.dev"},{"hostname":"15-vote-netnetcapital.pages.dev","first_observed":"2026-11-05T11:52:48.076Z","first_published":"2026-11-05T12:06:38.708Z","brands":[],"dns":"not_found","resolved":["172.66.45.4","172.66.46.252"],"resolved_at":"2026-11-06T09:51:49Z","dns_checked_at":"2026-11-06T12:10:13.000Z","dns_since":"2026-11-05T12:09:42.000Z","findings":[{"id":"fgmoelfuv3rdqtcc2v2d6","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T11:52:48.076Z","first_published":"2026-11-05T12:06:38.708Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=15-vote-netnetcapital.pages.dev"},{"hostname":"16-governance-zama.pages.dev","first_observed":"2026-11-05T11:57:04.671Z","first_published":"2026-11-05T12:06:38.708Z","brands":[],"dns":"not_found","resolved":["172.66.44.141","172.66.47.115"],"resolved_at":"2026-11-05T11:57:13Z","dns_checked_at":"2026-11-06T12:10:13.000Z","dns_since":"2026-11-05T12:09:42.000Z","findings":[{"id":"fbjpbtbejv6lkworrxi4u","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T11:57:04.671Z","first_published":"2026-11-05T12:06:38.708Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=16-governance-zama.pages.dev"},{"hostname":"16-vote-netnetcapital.pages.dev","first_observed":"2026-11-05T11:52:48.076Z","first_published":"2026-11-05T12:06:38.708Z","brands":[],"dns":"not_found","resolved":["172.66.44.174","172.66.47.82"],"resolved_at":"2026-11-06T09:56:59Z","dns_checked_at":"2026-11-06T16:13:32.000Z","findings":[{"id":"fjxcbujhrpgf4sjex5552","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T11:52:48.076Z","first_published":"2026-11-05T12:06:38.708Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=16-vote-netnetcapital.pages.dev"},{"hostname":"17-governance-zama.pages.dev","first_observed":"2026-11-05T12:00:44.858Z","first_published":"2026-11-05T12:06:38.708Z","brands":[],"dns":"not_found","resolved":["172.66.44.99","172.66.47.157"],"resolved_at":"2026-11-05T12:00:54Z","dns_checked_at":"2026-11-06T12:10:13.000Z","dns_since":"2026-11-05T12:09:42.000Z","findings":[{"id":"f5at42g2dj3towi2il7i4","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T12:00:44.858Z","first_published":"2026-11-05T12:06:38.708Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=17-governance-zama.pages.dev"},{"hostname":"2-cashmere-eco.pages.dev","first_observed":"2026-11-05T11:52:48.076Z","first_published":"2026-11-05T12:06:38.708Z","brands":[],"dns":"not_found","resolved":["172.66.44.166","172.66.47.90","2606:4700:310c::ac42:2ca6","2606:4700:310c::ac42:2f5a"],"resolved_at":"2026-11-05T11:53:44Z","dns_checked_at":"2026-11-06T16:13:32.000Z","findings":[{"id":"fouzuysmymfasbl2d7v6k","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T11:52:48.076Z","first_published":"2026-11-05T12:06:38.708Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=2-cashmere-eco.pages.dev"},{"hostname":"2-derivegovernance.pages.dev","first_observed":"2026-11-05T11:52:48.076Z","first_published":"2026-11-05T12:06:38.708Z","brands":[],"dns":"not_found","resolved":["172.66.44.253","172.66.47.3","2606:4700:310c::ac42:2cfd","2606:4700:310c::ac42:2f03"],"resolved_at":"2026-11-05T11:53:44Z","dns_checked_at":"2026-11-06T16:13:32.000Z","findings":[{"id":"fdokc3rnmu3n752bs5cja","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T11:52:48.076Z","first_published":"2026-11-05T12:06:38.708Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=2-derivegovernance.pages.dev"},{"hostname":"2-ethenagov.pages.dev","first_observed":"2026-11-05T11:52:48.076Z","first_published":"2026-11-05T12:06:38.708Z","brands":[{"id":"ethena","name":"Ethena","url":"https://domainspoof.com/brands/ethena"}],"dns":"not_found","resolved":[],"resolved_at":"2026-11-05T11:53:44Z","dns_checked_at":"2026-11-06T12:10:13.000Z","dns_since":"2026-11-05T12:09:42.000Z","findings":[{"id":"fx6fmfj3myll4kdjpy6rf","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T11:52:48.076Z","first_published":"2026-11-05T12:06:38.708Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/brands/ethena"},{"hostname":"2-gov-ramseseco.pages.dev","first_observed":"2026-11-05T11:52:48.076Z","first_published":"2026-11-05T12:06:38.708Z","brands":[],"dns":"resolved","resolved":["172.66.44.69","172.66.47.187","2606:4700:310c::ac42:2c45","2606:4700:310c::ac42:2fbb"],"resolved_at":"2026-11-05T11:53:44Z","dns_checked_at":"2026-11-06T12:10:13.000Z","dns_since":"2026-11-05T12:09:42.000Z","findings":[{"id":"fk2ryc6ns3i5dgfpsaaqc","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T11:52:48.076Z","first_published":"2026-11-05T12:06:38.708Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=2-gov-ramseseco.pages.dev"},{"hostname":"2-katananetwork.pages.dev","first_observed":"2026-11-05T11:52:48.076Z","first_published":"2026-11-05T12:06:38.708Z","brands":[],"dns":"not_found","resolved":["172.66.45.48","172.66.46.208","2606:4700:310c::ac42:2d30","2606:4700:310c::ac42:2ed0"],"resolved_at":"2026-11-05T11:53:44Z","dns_checked_at":"2026-11-06T16:13:32.000Z","findings":[{"id":"fgwqv7y7u6zztjq6uniwc","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T11:52:48.076Z","first_published":"2026-11-05T12:06:38.708Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=2-katananetwork.pages.dev"},{"hostname":"2-peaqxyz.pages.dev","first_observed":"2026-11-05T11:52:48.076Z","first_published":"2026-11-05T12:06:38.708Z","brands":[],"dns":"not_found","resolved":["172.66.44.152","172.66.47.104","2606:4700:310c::ac42:2c98","2606:4700:310c::ac42:2f68"],"resolved_at":"2026-11-05T11:53:44Z","dns_checked_at":"2026-11-06T16:13:32.000Z","findings":[{"id":"fbq6s7k7fxnr6pflhleg6","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T11:52:48.076Z","first_published":"2026-11-05T12:06:38.708Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=2-peaqxyz.pages.dev"},{"hostname":"2-policy-hyperliquidgov.pages.dev","first_observed":"2026-11-05T11:52:48.076Z","first_published":"2026-11-05T12:06:38.708Z","brands":[{"id":"hyperliquid","name":"Hyperliquid","url":"https://domainspoof.com/brands/hyperliquid"}],"dns":"not_found","resolved":["172.66.44.215","172.66.47.41","2606:4700:310c::ac42:2cd7","2606:4700:310c::ac42:2f29"],"resolved_at":"2026-11-05T11:53:44Z","dns_checked_at":"2026-11-06T16:13:32.000Z","findings":[{"id":"fuvh3lvojlryv6cnupwc5","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T11:52:48.076Z","first_published":"2026-11-05T12:06:38.708Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/brands/hyperliquid"},{"hostname":"208648coinbase.com","first_observed":"2026-11-05T11:52:48.076Z","first_published":"2026-11-05T12:06:38.708Z","brands":[],"dns":"not_found","resolved":["104.21.37.237","172.67.215.55","2606:4700:3034::6815:25ed","2606:4700:3037::ac43:d737"],"resolved_at":"2026-11-05T11:53:44Z","dns_checked_at":"2026-11-06T16:13:32.000Z","findings":[{"id":"fvsaxl724yiipkidmjuin","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T11:52:48.076Z","first_published":"2026-11-05T12:06:38.708Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=208648coinbase.com"},{"hostname":"3-ethenagov.pages.dev","first_observed":"2026-11-05T11:52:48.076Z","first_published":"2026-11-05T12:06:38.708Z","brands":[{"id":"ethena","name":"Ethena","url":"https://domainspoof.com/brands/ethena"}],"dns":"not_found","resolved":["172.66.44.60","172.66.47.196","2606:4700:310c::ac42:2c3c","2606:4700:310c::ac42:2fc4"],"resolved_at":"2026-11-05T11:53:44Z","dns_checked_at":"2026-11-06T16:13:32.000Z","findings":[{"id":"f7wrlhhysaeo2o2xehks2","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T11:52:48.076Z","first_published":"2026-11-05T12:06:38.708Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/brands/ethena"},{"hostname":"3-ethosnetwork.pages.dev","first_observed":"2026-11-05T11:52:48.076Z","first_published":"2026-11-05T12:06:38.708Z","brands":[],"dns":"not_found","resolved":["172.66.44.169","172.66.47.87","2606:4700:310c::ac42:2ca9","2606:4700:310c::ac42:2f57"],"resolved_at":"2026-11-05T11:53:44Z","dns_checked_at":"2026-11-06T16:13:32.000Z","findings":[{"id":"fsqf43xsestt47tq5cc4a","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T11:52:48.076Z","first_published":"2026-11-05T12:06:38.708Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=3-ethosnetwork.pages.dev"},{"hostname":"3-fraxfinance.pages.dev","first_observed":"2026-11-05T11:52:48.076Z","first_published":"2026-11-05T12:06:38.708Z","brands":[],"dns":"not_found","resolved":["172.66.44.168","172.66.47.88","2606:4700:310c::ac42:2ca8","2606:4700:310c::ac42:2f58"],"resolved_at":"2026-11-05T11:53:44Z","dns_checked_at":"2026-11-06T16:13:32.000Z","findings":[{"id":"fllnaytpyi3cgbzkiwond","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T11:52:48.076Z","first_published":"2026-11-05T12:06:38.708Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=3-fraxfinance.pages.dev"},{"hostname":"3-governance-fungolabs.pages.dev","first_observed":"2026-11-05T11:52:48.076Z","first_published":"2026-11-05T12:06:38.708Z","brands":[],"dns":"not_found","resolved":["172.66.44.148","172.66.47.108"],"resolved_at":"2026-11-05T19:16:57Z","dns_checked_at":"2026-11-06T16:13:32.000Z","findings":[{"id":"fl5mxj6fyznr3yfox4dis","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T11:52:48.076Z","first_published":"2026-11-05T12:06:38.708Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=3-governance-fungolabs.pages.dev"},{"hostname":"3-hub-zamaecosystem.pages.dev","first_observed":"2026-11-05T11:52:48.076Z","first_published":"2026-11-05T12:06:38.708Z","brands":[],"dns":"not_found","resolved":[],"resolved_at":"2026-11-05T11:53:44Z","dns_checked_at":"2026-11-06T12:10:13.000Z","dns_since":"2026-11-05T12:09:42.000Z","findings":[{"id":"fw6prhvsyez22ihulp6xt","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T11:52:48.076Z","first_published":"2026-11-05T12:06:38.708Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=3-hub-zamaecosystem.pages.dev"},{"hostname":"3-orbioeco.pages.dev","first_observed":"2026-11-05T11:52:48.076Z","first_published":"2026-11-05T12:06:38.708Z","brands":[],"dns":"not_found","resolved":[],"resolved_at":"2026-11-05T11:53:44Z","dns_checked_at":"2026-11-06T12:10:13.000Z","dns_since":"2026-11-05T12:09:42.000Z","findings":[{"id":"fhk5xd7vjw4yu4eushl4k","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T11:52:48.076Z","first_published":"2026-11-05T12:06:38.708Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=3-orbioeco.pages.dev"},{"hostname":"3-torchpadgov.pages.dev","first_observed":"2026-11-05T11:52:48.076Z","first_published":"2026-11-05T12:06:38.708Z","brands":[],"dns":"not_found","resolved":[],"resolved_at":"2026-11-05T11:53:44Z","dns_checked_at":"2026-11-06T12:10:13.000Z","dns_since":"2026-11-05T12:09:42.000Z","findings":[{"id":"fa46qtqleiyatvqohdsbx","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T11:52:48.076Z","first_published":"2026-11-05T12:06:38.708Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=3-torchpadgov.pages.dev"},{"hostname":"3-vote-zesteco.pages.dev","first_observed":"2026-11-05T11:52:48.076Z","first_published":"2026-11-05T12:06:38.708Z","brands":[],"dns":"not_found","resolved":["172.66.44.166","172.66.47.90","2606:4700:310c::ac42:2ca6","2606:4700:310c::ac42:2f5a"],"resolved_at":"2026-11-05T11:53:44Z","dns_checked_at":"2026-11-06T16:13:32.000Z","findings":[{"id":"fwsindufidierxe2mkeec","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T11:52:48.076Z","first_published":"2026-11-05T12:06:38.708Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=3-vote-zesteco.pages.dev"},{"hostname":"35-governance-aero.pages.dev","first_observed":"2026-11-05T11:52:48.076Z","first_published":"2026-11-05T12:06:38.708Z","brands":[],"dns":"not_found","resolved":["172.66.45.40","172.66.46.216","2606:4700:310c::ac42:2d28","2606:4700:310c::ac42:2ed8"],"resolved_at":"2026-11-05T11:53:44Z","dns_checked_at":"2026-11-06T16:13:32.000Z","findings":[{"id":"ftzejwrpia4vs4borr7ey","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T11:52:48.076Z","first_published":"2026-11-05T12:06:38.708Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=35-governance-aero.pages.dev"},{"hostname":"4-governance-entropyio.pages.dev","first_observed":"2026-11-05T11:52:48.076Z","first_published":"2026-11-05T12:06:38.708Z","brands":[],"dns":"resolved","resolved":["172.66.44.98","172.66.47.158","2606:4700:310c::ac42:2c62","2606:4700:310c::ac42:2f9e"],"resolved_at":"2026-11-05T11:53:44Z","dns_checked_at":"2026-11-06T12:10:13.000Z","dns_since":"2026-11-05T12:09:42.000Z","findings":[{"id":"fgstydic7zviru6obz3v4","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T11:52:48.076Z","first_published":"2026-11-05T12:06:38.708Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=4-governance-entropyio.pages.dev"},{"hostname":"4-governance-ryskeco.pages.dev","first_observed":"2026-11-05T11:52:48.076Z","first_published":"2026-11-05T12:06:38.708Z","brands":[],"dns":"resolved","resolved":["172.66.45.9","172.66.46.247","2606:4700:310c::ac42:2d09","2606:4700:310c::ac42:2ef7"],"resolved_at":"2026-11-05T11:53:44Z","dns_checked_at":"2026-11-06T12:10:13.000Z","dns_since":"2026-11-05T12:09:42.000Z","findings":[{"id":"fzjjqpdcjabz3kijepjh4","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T11:52:48.076Z","first_published":"2026-11-05T12:06:38.708Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=4-governance-ryskeco.pages.dev"},{"hostname":"4-governance-zama.pages.dev","first_observed":"2026-11-05T10:56:54.006Z","first_published":"2026-11-05T12:06:38.708Z","brands":[],"dns":"not_found","resolved":["172.66.44.216","172.66.47.40"],"resolved_at":"2026-11-05T10:57:04Z","dns_checked_at":"2026-11-06T12:10:13.000Z","dns_since":"2026-11-05T12:09:42.000Z","findings":[{"id":"feim3c5g4uly4svtzhzge","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T10:56:54.006Z","first_published":"2026-11-05T12:06:38.708Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=4-governance-zama.pages.dev"},{"hostname":"4-hub-zamaecosystem.pages.dev","first_observed":"2026-11-05T11:52:48.076Z","first_published":"2026-11-05T12:06:38.708Z","brands":[],"dns":"not_found","resolved":["172.66.44.194","172.66.47.62","2606:4700:310c::ac42:2cc2","2606:4700:310c::ac42:2f3e"],"resolved_at":"2026-11-05T11:53:44Z","dns_checked_at":"2026-11-06T16:13:32.000Z","findings":[{"id":"faicxiretaxwjpihaigyv","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T11:52:48.076Z","first_published":"2026-11-05T12:06:38.708Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=4-hub-zamaecosystem.pages.dev"},{"hostname":"4-mainnet-elysium.pages.dev","first_observed":"2026-11-05T11:52:48.076Z","first_published":"2026-11-05T12:06:38.708Z","brands":[],"dns":"not_found","resolved":["172.66.44.85","172.66.47.171","2606:4700:310c::ac42:2c55","2606:4700:310c::ac42:2fab"],"resolved_at":"2026-11-05T11:53:44Z","dns_checked_at":"2026-11-06T16:13:32.000Z","findings":[{"id":"fddngtdiye27aqh2q7tww","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T11:52:48.076Z","first_published":"2026-11-05T12:06:38.708Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=4-mainnet-elysium.pages.dev"},{"hostname":"4-marketsgov.pages.dev","first_observed":"2026-11-05T11:52:48.076Z","first_published":"2026-11-05T12:06:38.708Z","brands":[],"dns":"not_found","resolved":["172.66.45.6","172.66.46.250","2606:4700:310c::ac42:2d06","2606:4700:310c::ac42:2efa"],"resolved_at":"2026-11-05T11:53:44Z","dns_checked_at":"2026-11-06T16:13:32.000Z","findings":[{"id":"fbyxso6gc5aqnwawuszoz","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T11:52:48.076Z","first_published":"2026-11-05T12:06:38.708Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=4-marketsgov.pages.dev"},{"hostname":"4-orbioeco.pages.dev","first_observed":"2026-11-05T11:52:48.076Z","first_published":"2026-11-05T12:06:38.708Z","brands":[],"dns":"not_found","resolved":["172.66.44.165","172.66.47.91","2606:4700:310c::ac42:2ca5","2606:4700:310c::ac42:2f5b"],"resolved_at":"2026-11-05T11:53:44Z","dns_checked_at":"2026-11-06T16:13:32.000Z","findings":[{"id":"fcizdolcmgdo67t7h7t5u","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T11:52:48.076Z","first_published":"2026-11-05T12:06:38.708Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=4-orbioeco.pages.dev"},{"hostname":"4-stonkbrokers.pages.dev","first_observed":"2026-11-05T11:52:48.076Z","first_published":"2026-11-05T12:06:38.708Z","brands":[],"dns":"not_found","resolved":["172.66.44.111","172.66.47.145","2606:4700:310c::ac42:2c6f","2606:4700:310c::ac42:2f91"],"resolved_at":"2026-11-05T11:53:44Z","dns_checked_at":"2026-11-06T16:13:32.000Z","findings":[{"id":"fbxqm5vom4rmcvg6i4ii4","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T11:52:48.076Z","first_published":"2026-11-05T12:06:38.708Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=4-stonkbrokers.pages.dev"},{"hostname":"4-torchpadgov.pages.dev","first_observed":"2026-11-05T11:52:48.076Z","first_published":"2026-11-05T12:06:38.708Z","brands":[],"dns":"not_found","resolved":["172.66.44.103","172.66.47.153","2606:4700:310c::ac42:2c67","2606:4700:310c::ac42:2f99"],"resolved_at":"2026-11-05T11:53:44Z","dns_checked_at":"2026-11-06T16:13:32.000Z","findings":[{"id":"f3y7podbqdukdxily7wsx","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T11:52:48.076Z","first_published":"2026-11-05T12:06:38.708Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=4-torchpadgov.pages.dev"},{"hostname":"5-gliderfi.pages.dev","first_observed":"2026-11-05T11:52:48.076Z","first_published":"2026-11-05T12:06:38.708Z","brands":[],"dns":"not_found","resolved":[],"resolved_at":"2026-11-05T11:53:44Z","dns_checked_at":"2026-11-06T12:10:13.000Z","dns_since":"2026-11-05T12:09:43.000Z","findings":[{"id":"fgjtevpb6ntzvhbiybzfy","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T11:52:48.076Z","first_published":"2026-11-05T12:06:38.708Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=5-gliderfi.pages.dev"},{"hostname":"5-governance-zama.pages.dev","first_observed":"2026-11-05T11:00:36.388Z","first_published":"2026-11-05T12:06:38.708Z","brands":[],"dns":"not_found","resolved":["172.66.44.185","172.66.47.71"],"resolved_at":"2026-11-05T11:00:48Z","dns_checked_at":"2026-11-06T12:10:13.000Z","dns_since":"2026-11-05T12:09:43.000Z","findings":[{"id":"fceci7xm2vempji6requn","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T11:00:36.388Z","first_published":"2026-11-05T12:06:38.708Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=5-governance-zama.pages.dev"},{"hostname":"5dcqlq-1a7z2-lrklni-lf676f.pages.dev","first_observed":"2026-11-05T12:00:44.858Z","first_published":"2026-11-05T12:06:38.708Z","brands":[],"dns":"resolved","resolved":["172.66.45.6","172.66.46.250"],"resolved_at":"2026-11-05T12:00:54Z","dns_checked_at":"2026-11-06T12:10:13.000Z","dns_since":"2026-11-05T12:09:43.000Z","findings":[{"id":"fwnqqigfb5ayjyfrq4fkz","kind":"reported_domain","summary":"Reported by PhishTank","first_observed":"2026-11-05T12:00:44.858Z","first_published":"2026-11-05T12:06:38.708Z","source":"phishtank","source_name":"PhishTank","source_url":"https://phishtank.org/phish_detail.php?phish_id=9479267"}],"url":"https://domainspoof.com/live?show=all&q=5dcqlq-1a7z2-lrklni-lf676f.pages.dev"},{"hostname":"6-governance-zama.pages.dev","first_observed":"2026-11-05T11:05:50.653Z","first_published":"2026-11-05T12:06:38.708Z","brands":[],"dns":"not_found","resolved":["172.66.45.32","172.66.46.224"],"resolved_at":"2026-11-05T11:06:02Z","dns_checked_at":"2026-11-06T12:10:13.000Z","dns_since":"2026-11-05T12:09:43.000Z","findings":[{"id":"fqnki3r22smyualewwced","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T11:05:50.653Z","first_published":"2026-11-05T12:06:38.708Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=6-governance-zama.pages.dev"},{"hostname":"6-hyperlendeco.pages.dev","first_observed":"2026-11-05T11:52:48.076Z","first_published":"2026-11-05T12:06:38.708Z","brands":[],"dns":"not_found","resolved":["172.66.44.253","172.66.47.3","2606:4700:310c::ac42:2cfd","2606:4700:310c::ac42:2f03"],"resolved_at":"2026-11-05T11:53:44Z","dns_checked_at":"2026-11-06T16:13:32.000Z","findings":[{"id":"f44wau7tc6r2dw6guqnwy","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T11:52:48.076Z","first_published":"2026-11-05T12:06:38.708Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=6-hyperlendeco.pages.dev"},{"hostname":"60-governance-orbio.pages.dev","first_observed":"2026-11-05T11:26:06.906Z","first_published":"2026-11-05T12:06:38.708Z","brands":[],"dns":"not_found","resolved":["172.66.44.178","172.66.47.78"],"resolved_at":"2026-11-05T11:26:17Z","dns_checked_at":"2026-11-06T12:10:13.000Z","dns_since":"2026-11-05T12:09:43.000Z","findings":[{"id":"fme2fhwzw5em7olbyz6zh","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T11:26:06.906Z","first_published":"2026-11-05T12:06:38.708Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=60-governance-orbio.pages.dev"},{"hostname":"7-governance-zama.pages.dev","first_observed":"2026-11-05T11:10:32.891Z","first_published":"2026-11-05T12:06:38.708Z","brands":[],"dns":"not_found","resolved":["172.66.44.181","172.66.47.75"],"resolved_at":"2026-11-05T11:10:48Z","dns_checked_at":"2026-11-06T12:10:13.000Z","dns_since":"2026-11-05T12:09:43.000Z","findings":[{"id":"flabuwnr7nr6v6xhp2jgg","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T11:10:32.891Z","first_published":"2026-11-05T12:06:38.708Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=7-governance-zama.pages.dev"},{"hostname":"8-governance-zama.pages.dev","first_observed":"2026-11-05T11:16:15.432Z","first_published":"2026-11-05T12:06:38.708Z","brands":[],"dns":"not_found","resolved":["172.66.44.187","172.66.47.69"],"resolved_at":"2026-11-05T11:16:24Z","dns_checked_at":"2026-11-06T12:10:13.000Z","dns_since":"2026-11-05T12:09:43.000Z","findings":[{"id":"fqzzwkmnp6howjfqtknul","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T11:16:15.432Z","first_published":"2026-11-05T12:06:38.708Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=8-governance-zama.pages.dev"},{"hostname":"8-hookrfun.pages.dev","first_observed":"2026-11-05T11:52:48.076Z","first_published":"2026-11-05T12:06:38.708Z","brands":[],"dns":"not_found","resolved":[],"resolved_at":"2026-11-06T15:16:00Z","dns_checked_at":"2026-11-06T16:13:32.000Z","findings":[{"id":"fibpbsnvkgphknrgor4ot","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T11:52:48.076Z","first_published":"2026-11-05T12:06:38.708Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=8-hookrfun.pages.dev"},{"hostname":"803719-crypto.com","first_observed":"2026-11-05T11:52:48.076Z","first_published":"2026-11-05T12:06:38.708Z","brands":[{"id":"crypto-com","name":"Crypto.com","url":"https://domainspoof.com/brands/crypto-com"}],"dns":"resolved","resolved":["185.53.179.149"],"resolved_at":"2026-11-05T11:53:44Z","dns_checked_at":"2026-11-06T12:10:13.000Z","dns_since":"2026-11-05T12:09:43.000Z","findings":[{"id":"fkubzmrtcfdzo7r7qsaps","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T11:52:48.076Z","first_published":"2026-11-05T12:06:38.708Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/brands/crypto-com"},{"hostname":"9-governance-zama.pages.dev","first_observed":"2026-11-05T11:21:26.576Z","first_published":"2026-11-05T12:06:38.708Z","brands":[],"dns":"not_found","resolved":["172.66.44.151","172.66.47.105"],"resolved_at":"2026-11-05T11:21:36Z","dns_checked_at":"2026-11-06T12:10:13.000Z","dns_since":"2026-11-05T12:09:43.000Z","findings":[{"id":"fxe2eiarp5ansgml3v5wx","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T11:21:26.576Z","first_published":"2026-11-05T12:06:38.708Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=9-governance-zama.pages.dev"},{"hostname":"95835-robinhood.com","first_observed":"2026-11-05T11:05:50.653Z","first_published":"2026-11-05T12:06:38.708Z","brands":[{"id":"robinhood","name":"Robinhood","url":"https://domainspoof.com/brands/robinhood"}],"dns":"not_found","resolved":[],"resolved_at":"2026-11-06T11:09:42Z","dns_checked_at":"2026-11-06T12:10:13.000Z","findings":[{"id":"fqorx5zvursjdeynhjta3","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T11:05:50.653Z","first_published":"2026-11-05T12:06:38.708Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/brands/robinhood"},{"hostname":"9vs-4g4jmc-xojn-j6cbby-d62.pages.dev","first_observed":"2026-11-05T11:46:43.299Z","first_published":"2026-11-05T12:06:38.708Z","brands":[],"dns":"resolved","resolved":["172.66.44.240","172.66.47.16"],"resolved_at":"2026-11-06T00:56:43Z","dns_checked_at":"2026-11-06T12:10:13.000Z","dns_since":"2026-11-05T12:09:43.000Z","findings":[{"id":"fin4b6noo3zots4radwnq","kind":"reported_domain","summary":"Reported by PhishTank","first_observed":"2026-11-05T11:46:43.299Z","first_published":"2026-11-05T12:06:38.708Z","source":"phishtank","source_name":"PhishTank","source_url":"https://phishtank.org/phish_detail.php?phish_id=9479300"}],"url":"https://domainspoof.com/live?show=all&q=9vs-4g4jmc-xojn-j6cbby-d62.pages.dev"},{"hostname":"abariripes.store","first_observed":"2026-11-05T11:00:36.388Z","first_published":"2026-11-05T12:06:38.708Z","brands":[],"dns":"resolved","resolved":["104.21.74.90","172.67.201.10"],"resolved_at":"2026-11-05T11:00:48Z","dns_checked_at":"2026-11-06T12:10:13.000Z","dns_since":"2026-11-05T12:09:43.000Z","findings":[{"id":"fhxl5bydiaczhrxy4chll","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T11:00:36.388Z","first_published":"2026-11-05T12:06:38.708Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=abariripes.store"},{"hostname":"akoagro.com","first_observed":"2026-11-05T11:51:52.845Z","first_published":"2026-11-05T12:06:38.708Z","brands":[],"dns":"resolved","resolved":["91.108.98.7","93.127.179.100"],"resolved_at":"2026-11-05T11:57:41Z","dns_checked_at":"2026-11-06T12:10:13.000Z","dns_since":"2026-11-05T12:09:43.000Z","findings":[{"id":"ftxusnfbhvpdma3dwpp6q","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T11:51:52.845Z","first_published":"2026-11-05T12:06:38.708Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/akoagro.com/"}],"url":"https://domainspoof.com/live?show=all&q=akoagro.com"},{"hostname":"allegro.marketpl.shop","first_observed":"2026-11-05T11:31:18.024Z","first_published":"2026-11-05T12:06:38.708Z","brands":[],"dns":"resolved","resolved":["104.21.14.164","172.67.160.15"],"resolved_at":"2026-11-05T11:31:28Z","dns_checked_at":"2026-11-06T12:10:13.000Z","dns_since":"2026-11-05T12:09:43.000Z","findings":[{"id":"ftolzpo4qq2ox2uw6ntse","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T11:31:18.024Z","first_published":"2026-11-05T12:06:38.708Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=allegro.marketpl.shop"},{"hostname":"allowlist-stonkbrokers.pages.dev","first_observed":"2026-11-05T11:52:48.076Z","first_published":"2026-11-05T12:06:38.708Z","brands":[],"dns":"resolved","resolved":["172.66.44.186","172.66.47.70","2606:4700:310c::ac42:2cba","2606:4700:310c::ac42:2f46"],"resolved_at":"2026-11-05T11:53:44Z","dns_checked_at":"2026-11-06T12:10:13.000Z","dns_since":"2026-11-05T12:09:43.000Z","findings":[{"id":"fwyy7im3bzjm4gzmjfbeb","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T11:52:48.076Z","first_published":"2026-11-05T12:06:38.708Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=allowlist-stonkbrokers.pages.dev"},{"hostname":"allowlist-stonkbrokers.xyz","first_observed":"2026-11-05T11:52:48.076Z","first_published":"2026-11-05T12:06:38.708Z","brands":[],"dns":"not_found","resolved":["104.21.74.80","172.67.200.119","2606:4700:3031::ac43:c877","2606:4700:3033::6815:4a50"],"resolved_at":"2026-11-05T11:53:44Z","dns_checked_at":"2026-11-06T16:13:32.000Z","findings":[{"id":"fwxoasvrzuh3plu3rrdpb","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T11:52:48.076Z","first_published":"2026-11-05T12:06:38.708Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=allowlist-stonkbrokers.xyz"},{"hostname":"altexchain.net","first_observed":"2026-11-05T11:26:06.906Z","first_published":"2026-11-05T12:06:38.708Z","brands":[],"dns":"resolved","resolved":["104.21.81.138","172.67.189.158"],"resolved_at":"2026-11-05T11:26:21Z","dns_checked_at":"2026-11-06T12:10:13.000Z","dns_since":"2026-11-05T12:09:43.000Z","findings":[{"id":"fo4up246aibp5jd4vxhqm","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T11:26:06.906Z","first_published":"2026-11-05T12:06:38.708Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/altexchain.net/"}],"url":"https://domainspoof.com/live?show=all&q=altexchain.net"},{"hostname":"api.betepg-kraken.systems","first_observed":"2026-11-05T11:26:06.906Z","first_published":"2026-11-05T12:06:38.708Z","brands":[],"dns":"resolved","resolved":["3.170.19.27","3.170.19.46","3.170.19.76","3.170.19.128"],"resolved_at":"2026-11-05T11:26:21Z","dns_checked_at":"2026-11-06T12:10:13.000Z","dns_since":"2026-11-05T12:09:43.000Z","findings":[{"id":"fchc5nbu5hetxim2rtj3m","kind":"reported_domain","summary":"Under betepg-kraken.systems, listed by MetaMask","first_observed":"2026-11-05T11:26:06.906Z","first_published":"2026-11-05T12:06:38.708Z","source":"metamask","source_name":"MetaMask","under":"betepg-kraken.systems"}],"url":"https://domainspoof.com/live?show=all&q=api.betepg-kraken.systems"},{"hostname":"app.easycardapp.com","first_observed":"2026-11-05T11:10:32.891Z","first_published":"2026-11-05T12:06:38.708Z","brands":[],"dns":"resolved","resolved":["104.21.68.245","172.67.200.129"],"resolved_at":"2026-11-05T11:14:26Z","dns_checked_at":"2026-11-06T12:10:13.000Z","dns_since":"2026-11-05T12:09:43.000Z","findings":[{"id":"fx6jewuz43rlghivjygkn","kind":"reported_domain","summary":"Under easycardapp.com, reported by PhishDestroy","first_observed":"2026-11-05T11:10:32.891Z","first_published":"2026-11-05T12:06:38.708Z","source":"phishdestroy","source_name":"PhishDestroy","under":"easycardapp.com","source_url":"https://phishdestroy.io/domain/easycardapp.com/"}],"url":"https://domainspoof.com/live?show=all&q=app.easycardapp.com"},{"hostname":"arcade-flash.com","first_observed":"2026-11-05T11:41:33.767Z","first_published":"2026-11-05T12:06:38.708Z","brands":[],"dns":"resolved","resolved":["104.21.0.101","172.67.150.221"],"resolved_at":"2026-11-05T11:45:38Z","dns_checked_at":"2026-11-06T12:10:13.000Z","dns_since":"2026-11-05T12:09:43.000Z","findings":[{"id":"fcx642es6ifwxsnmaf7js","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T11:41:33.767Z","first_published":"2026-11-05T12:06:38.708Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=arcade-flash.com"},{"hostname":"arcnetwork.digital","first_observed":"2026-11-05T11:31:18.024Z","first_published":"2026-11-05T12:06:38.708Z","brands":[],"dns":"resolved","resolved":["104.21.57.199","172.67.192.45"],"resolved_at":"2026-11-05T11:31:28Z","dns_checked_at":"2026-11-06T12:10:13.000Z","dns_since":"2026-11-05T12:09:43.000Z","findings":[{"id":"f6fgp4amfuwcor2efgkxt","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T11:31:18.024Z","first_published":"2026-11-05T12:06:38.708Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=arcnetwork.digital"},{"hostname":"artificial-vote.top","first_observed":"2026-11-05T11:52:48.076Z","first_published":"2026-11-05T12:06:38.708Z","brands":[],"dns":"resolved","resolved":["104.21.49.176","172.67.191.130","2606:4700:3032::6815:31b0","2606:4700:3035::ac43:bf82"],"resolved_at":"2026-11-05T11:53:44Z","dns_checked_at":"2026-11-06T12:10:13.000Z","dns_since":"2026-11-05T12:09:43.000Z","findings":[{"id":"fmyhzr5jqiglwq3whyout","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T11:52:48.076Z","first_published":"2026-11-05T12:06:38.708Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=artificial-vote.top"},{"hostname":"arvdentn.shop","first_observed":"2026-11-05T11:16:15.432Z","first_published":"2026-11-05T12:06:38.708Z","brands":[],"dns":"resolved","resolved":["104.21.31.66","172.67.175.60"],"resolved_at":"2026-11-05T11:16:28Z","dns_checked_at":"2026-11-06T12:10:13.000Z","dns_since":"2026-11-05T12:09:43.000Z","findings":[{"id":"fgpf5p4ubvi3vm6bwzp5t","kind":"reported_domain","summary":"Listed by NPA 165 (finance and insurance)","first_observed":"2026-11-05T11:16:15.432Z","first_published":"2026-11-05T12:06:38.708Z","source":"npa","source_name":"NPA 165","claim":{"category":"finance and insurance"}}],"url":"https://domainspoof.com/live?show=all&q=arvdentn.shop"},{"hostname":"auth.betepg-kraken.systems","first_observed":"2026-11-05T11:26:06.906Z","first_published":"2026-11-05T12:06:38.708Z","brands":[],"dns":"resolved","resolved":["108.138.64.10","108.138.64.48","108.138.64.53","108.138.64.72"],"resolved_at":"2026-11-05T11:26:21Z","dns_checked_at":"2026-11-06T12:10:13.000Z","dns_since":"2026-11-05T12:09:43.000Z","findings":[{"id":"ftk4dgzjkohdoz45hqyc4","kind":"reported_domain","summary":"Under betepg-kraken.systems, listed by MetaMask","first_observed":"2026-11-05T11:26:06.906Z","first_published":"2026-11-05T12:06:38.708Z","source":"metamask","source_name":"MetaMask","under":"betepg-kraken.systems"}],"url":"https://domainspoof.com/live?show=all&q=auth.betepg-kraken.systems"},{"hostname":"bgunf.com","first_observed":"2026-11-05T11:10:32.891Z","first_published":"2026-11-05T12:06:38.708Z","brands":[],"dns":"resolved","resolved":["104.21.94.96","172.67.221.180"],"resolved_at":"2026-11-05T11:10:54Z","dns_checked_at":"2026-11-06T12:10:13.000Z","dns_since":"2026-11-05T12:09:43.000Z","findings":[{"id":"fy6ojxr2umkbady7vr5rb","kind":"reported_domain","summary":"Listed by NPA 165 (finance and insurance)","first_observed":"2026-11-05T11:10:32.891Z","first_published":"2026-11-05T12:06:38.708Z","source":"npa","source_name":"NPA 165","claim":{"category":"finance and insurance"}}],"url":"https://domainspoof.com/live?show=all&q=bgunf.com"},{"hostname":"binance-inc.com","first_observed":"2026-11-05T11:41:32.336Z","first_published":"2026-11-05T12:06:38.708Z","brands":[{"id":"binance","name":"Binance","url":"https://domainspoof.com/brands/binance"}],"dns":"resolved","resolved":["2.57.91.91"],"resolved_at":"2026-11-05T12:09:43Z","dns_checked_at":"2026-11-06T12:10:13.000Z","dns_since":"2026-11-05T12:09:43.000Z","findings":[{"id":"fuc7lnrnzfxlevvkn27wu","kind":"phishing_infrastructure","summary":"Resolved to 2.57.91.91, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T11:41:32.336Z","first_published":"2026-11-05T12:06:38.708Z","address":"2.57.91.91","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/binance"},{"hostname":"binance.login.dagmaar.com","first_observed":"2026-11-05T11:41:33.767Z","first_published":"2026-11-05T12:06:38.708Z","brands":[{"id":"binance","name":"Binance","url":"https://domainspoof.com/brands/binance"}],"dns":"resolved","resolved":["158.247.212.172"],"resolved_at":"2026-11-05T11:45:59Z","dns_checked_at":"2026-11-06T12:10:13.000Z","dns_since":"2026-11-05T12:09:43.000Z","findings":[{"id":"f4wi4xib5gd3uo2l4wv6a","kind":"reported_domain","summary":"Under dagmaar.com, listed by MetaMask","first_observed":"2026-11-05T11:41:33.767Z","first_published":"2026-11-05T12:06:38.708Z","source":"metamask","source_name":"MetaMask","under":"dagmaar.com"}],"url":"https://domainspoof.com/brands/binance"},{"hostname":"bitrefill.com-co01-esim-gift.com","first_observed":"2026-11-05T11:06:14.121Z","first_published":"2026-11-05T12:06:38.708Z","brands":[{"id":"bitrefill","name":"Bitrefill","url":"https://domainspoof.com/brands/bitrefill"}],"dns":"resolved","resolved":["62.60.226.39"],"resolved_at":"2026-11-06T12:10:13Z","dns_checked_at":"2026-11-06T12:10:13.000Z","dns_since":"2026-11-05T12:09:43.000Z","findings":[{"id":"fxi465asw4mv7bvldzdai","kind":"spamhaus_drop","summary":"Resolved to 62.60.226.39 on Spamhaus DROP","first_observed":"2026-11-05T11:06:14.121Z","first_published":"2026-11-05T12:06:38.708Z","address":"62.60.226.39","list":"spamhaus_drop","list_name":"Spamhaus DROP"}],"url":"https://domainspoof.com/brands/bitrefill"},{"hostname":"bitrefill.com-cq01-esim-gift.com","first_observed":"2026-11-05T11:46:00.025Z","first_published":"2026-11-05T12:06:38.708Z","brands":[{"id":"bitrefill","name":"Bitrefill","url":"https://domainspoof.com/brands/bitrefill"}],"dns":"resolved","resolved":["62.60.226.39"],"resolved_at":"2026-11-06T12:10:13Z","dns_checked_at":"2026-11-06T12:10:13.000Z","dns_since":"2026-11-05T12:09:43.000Z","findings":[{"id":"farsodokk5hnplxrlmtkm","kind":"spamhaus_drop","summary":"Resolved to 62.60.226.39 on Spamhaus DROP","first_observed":"2026-11-05T11:46:00.025Z","first_published":"2026-11-05T12:06:38.708Z","address":"62.60.226.39","list":"spamhaus_drop","list_name":"Spamhaus DROP"}],"url":"https://domainspoof.com/brands/bitrefill"},{"hostname":"blackbull-sol.xyz","first_observed":"2026-11-05T10:56:54.006Z","first_published":"2026-11-05T12:06:38.708Z","brands":[],"dns":"resolved","resolved":["104.21.26.57","172.67.168.57"],"resolved_at":"2026-11-05T11:04:19Z","dns_checked_at":"2026-11-06T12:10:13.000Z","dns_since":"2026-11-05T12:09:43.000Z","findings":[{"id":"fmxsralhmekznk2g7xwqd","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T10:56:54.006Z","first_published":"2026-11-05T12:06:38.708Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=blackbull-sol.xyz"},{"hostname":"boostaxid2u.net","first_observed":"2026-11-05T11:51:52.845Z","first_published":"2026-11-05T12:06:38.708Z","brands":[],"dns":"resolved","resolved":["104.21.3.210","172.67.131.51"],"resolved_at":"2026-11-05T11:58:44Z","dns_checked_at":"2026-11-06T12:10:13.000Z","dns_since":"2026-11-05T12:09:43.000Z","findings":[{"id":"f3344mrqukdoyawr5g34o","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T11:51:52.845Z","first_published":"2026-11-05T12:06:38.708Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=boostaxid2u.net"},{"hostname":"bossbytexai.net","first_observed":"2026-11-05T11:51:52.845Z","first_published":"2026-11-05T12:06:38.708Z","brands":[],"dns":"resolved","resolved":["104.21.6.71","172.67.134.150"],"resolved_at":"2026-11-05T11:58:44Z","dns_checked_at":"2026-11-06T12:10:13.000Z","dns_since":"2026-11-05T12:09:43.000Z","findings":[{"id":"fih7d5qk62n46e6yjczz5","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T11:51:52.845Z","first_published":"2026-11-05T12:06:38.708Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/bossbytexai.net/"}],"url":"https://domainspoof.com/live?show=all&q=bossbytexai.net"},{"hostname":"brandoutlets-pl.shop","first_observed":"2026-11-05T11:21:26.576Z","first_published":"2026-11-05T12:06:38.708Z","brands":[],"dns":"resolved","resolved":["104.18.22.122"],"resolved_at":"2026-11-05T11:30:37Z","dns_checked_at":"2026-11-06T12:10:13.000Z","dns_since":"2026-11-05T12:09:43.000Z","findings":[{"id":"f6a2o6rfrqehpskmvujbc","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T11:21:26.576Z","first_published":"2026-11-05T12:06:38.708Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=brandoutlets-pl.shop"},{"hostname":"brisk-excursions.com","first_observed":"2026-11-05T11:16:15.432Z","first_published":"2026-11-05T12:06:38.708Z","brands":[],"dns":"resolved","resolved":["104.21.73.230","172.67.192.176"],"resolved_at":"2026-11-05T11:19:30Z","dns_checked_at":"2026-11-06T12:10:13.000Z","dns_since":"2026-11-05T12:09:43.000Z","findings":[{"id":"fywi2tf6qibhsa2fiq44l","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T11:16:15.432Z","first_published":"2026-11-05T12:06:38.708Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=brisk-excursions.com"},{"hostname":"brulvaxen-virgin.com","first_observed":"2026-11-05T11:51:52.845Z","first_published":"2026-11-05T12:06:38.708Z","brands":[],"dns":"resolved","resolved":["104.21.89.252","172.67.166.190"],"resolved_at":"2026-11-05T11:58:44Z","dns_checked_at":"2026-11-06T12:10:13.000Z","dns_since":"2026-11-05T12:09:43.000Z","findings":[{"id":"fhjvdedtzs33zmslqv6f4","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T11:51:52.845Z","first_published":"2026-11-05T12:06:38.708Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=brulvaxen-virgin.com"},{"hostname":"bursailetisimoto.com","first_observed":"2026-11-05T11:46:43.299Z","first_published":"2026-11-05T12:06:38.708Z","brands":[],"dns":"resolved","resolved":["104.21.65.111","172.67.162.246"],"resolved_at":"2026-11-05T11:49:59Z","dns_checked_at":"2026-11-06T12:10:13.000Z","dns_since":"2026-11-05T12:09:43.000Z","findings":[{"id":"fgtmlxgsxheppxgxkclyk","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T11:46:43.299Z","first_published":"2026-11-05T12:06:38.708Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=bursailetisimoto.com"},{"hostname":"bwinargentina.com","first_observed":"2026-11-05T11:36:56.621Z","first_published":"2026-11-05T12:06:38.708Z","brands":[],"dns":"resolved","resolved":["104.21.30.28","172.67.150.113"],"resolved_at":"2026-11-05T11:41:38Z","dns_checked_at":"2026-11-06T12:10:13.000Z","dns_since":"2026-11-05T12:09:43.000Z","findings":[{"id":"fc2abtr7szpkf3l4gob5c","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T11:36:56.621Z","first_published":"2026-11-05T12:06:38.708Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/bwinargentina.com/"}],"url":"https://domainspoof.com/live?show=all&q=bwinargentina.com"},{"hostname":"byextw3.com","first_observed":"2026-11-05T11:10:32.891Z","first_published":"2026-11-05T12:06:38.708Z","brands":[],"dns":"resolved","resolved":["104.21.51.46","172.67.221.101"],"resolved_at":"2026-11-05T11:10:56Z","dns_checked_at":"2026-11-06T12:10:13.000Z","dns_since":"2026-11-05T12:09:43.000Z","findings":[{"id":"fve73rzlqet572hlvurxl","kind":"reported_domain","summary":"Listed by NPA 165 (finance and insurance)","first_observed":"2026-11-05T11:10:32.891Z","first_published":"2026-11-05T12:06:38.708Z","source":"npa","source_name":"NPA 165","claim":{"category":"finance and insurance"}}],"url":"https://domainspoof.com/live?show=all&q=byextw3.com"},{"hostname":"c-casibomqiris.info","first_observed":"2026-11-05T11:16:15.432Z","first_published":"2026-11-05T12:06:38.708Z","brands":[],"dns":"resolved","resolved":["104.21.2.29","172.67.128.164"],"resolved_at":"2026-11-05T11:19:58Z","dns_checked_at":"2026-11-06T12:10:13.000Z","dns_since":"2026-11-05T12:09:43.000Z","findings":[{"id":"fsxvvl4mwhcy55dsb53lt","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T11:16:15.432Z","first_published":"2026-11-05T12:06:38.708Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/c-casibomqiris.info/"}],"url":"https://domainspoof.com/live?show=all&q=c-casibomqiris.info"},{"hostname":"caixuntaiwan.shop","first_observed":"2026-11-05T11:57:04.671Z","first_published":"2026-11-05T12:06:38.708Z","brands":[],"dns":"resolved","resolved":["104.21.32.138","172.67.152.94"],"resolved_at":"2026-11-05T12:09:23Z","dns_checked_at":"2026-11-06T12:10:13.000Z","dns_since":"2026-11-05T12:09:43.000Z","findings":[{"id":"f26r2urkokoptxakea6i2","kind":"reported_domain","summary":"Listed by NPA 165 (finance and insurance)","first_observed":"2026-11-05T11:57:04.671Z","first_published":"2026-11-05T12:06:38.708Z","source":"npa","source_name":"NPA 165","claim":{"category":"finance and insurance"}}],"url":"https://domainspoof.com/live?show=all&q=caixuntaiwan.shop"},{"hostname":"cdn-origin-api.betepg-kraken.systems","first_observed":"2026-11-05T11:26:06.906Z","first_published":"2026-11-05T12:06:38.708Z","brands":[],"dns":"not_found","resolved":[],"resolved_at":"2026-11-05T11:37:34Z","dns_checked_at":"2026-11-06T12:10:13.000Z","dns_since":"2026-11-05T12:09:43.000Z","findings":[{"id":"f5hyzzt7xjygqvkitwaxc","kind":"reported_domain","summary":"Under betepg-kraken.systems, listed by MetaMask","first_observed":"2026-11-05T11:26:06.906Z","first_published":"2026-11-05T12:06:38.708Z","source":"metamask","source_name":"MetaMask","under":"betepg-kraken.systems"}],"url":"https://domainspoof.com/live?show=all&q=cdn-origin-api.betepg-kraken.systems"},{"hostname":"cdn-origin-auth.betepg-kraken.systems","first_observed":"2026-11-05T11:26:06.906Z","first_published":"2026-11-05T12:06:38.708Z","brands":[],"dns":"not_found","resolved":[],"resolved_at":"2026-11-05T11:37:34Z","dns_checked_at":"2026-11-06T12:10:13.000Z","dns_since":"2026-11-05T12:09:43.000Z","findings":[{"id":"fjzyjobhfw5n2ytgq77r3","kind":"reported_domain","summary":"Under betepg-kraken.systems, listed by MetaMask","first_observed":"2026-11-05T11:26:06.906Z","first_published":"2026-11-05T12:06:38.708Z","source":"metamask","source_name":"MetaMask","under":"betepg-kraken.systems"}],"url":"https://domainspoof.com/live?show=all&q=cdn-origin-auth.betepg-kraken.systems"},{"hostname":"cdn-origin-docs.betepg-kraken.systems","first_observed":"2026-11-05T11:26:06.906Z","first_published":"2026-11-05T12:06:38.708Z","brands":[],"dns":"not_found","resolved":[],"resolved_at":"2026-11-05T11:37:34Z","dns_checked_at":"2026-11-06T12:10:13.000Z","dns_since":"2026-11-05T12:09:43.000Z","findings":[{"id":"f2g5n6tup5elqqsy4bi5v","kind":"reported_domain","summary":"Under betepg-kraken.systems, listed by MetaMask","first_observed":"2026-11-05T11:26:06.906Z","first_published":"2026-11-05T12:06:38.708Z","source":"metamask","source_name":"MetaMask","under":"betepg-kraken.systems"}],"url":"https://domainspoof.com/live?show=all&q=cdn-origin-docs.betepg-kraken.systems"},{"hostname":"cdn-origin-webhooks.betepg-kraken.systems","first_observed":"2026-11-05T11:26:06.906Z","first_published":"2026-11-05T12:06:38.708Z","brands":[],"dns":"not_found","resolved":[],"resolved_at":"2026-11-05T11:37:34Z","dns_checked_at":"2026-11-06T12:10:13.000Z","dns_since":"2026-11-05T12:09:43.000Z","findings":[{"id":"fop2gdroh5snebm4ljt35","kind":"reported_domain","summary":"Under betepg-kraken.systems, listed by MetaMask","first_observed":"2026-11-05T11:26:06.906Z","first_published":"2026-11-05T12:06:38.708Z","source":"metamask","source_name":"MetaMask","under":"betepg-kraken.systems"}],"url":"https://domainspoof.com/live?show=all&q=cdn-origin-webhooks.betepg-kraken.systems"},{"hostname":"coingoat.io","first_observed":"2026-11-05T11:26:06.906Z","first_published":"2026-11-05T12:06:38.708Z","brands":[],"dns":"resolved","resolved":["50.87.253.188"],"resolved_at":"2026-11-05T11:37:35Z","dns_checked_at":"2026-11-06T12:10:13.000Z","dns_since":"2026-11-05T12:09:43.000Z","findings":[{"id":"f3cphznihzozzmumshsee","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T11:26:06.906Z","first_published":"2026-11-05T12:06:38.708Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/coingoat.io/"}],"url":"https://domainspoof.com/live?show=all&q=coingoat.io"},{"hostname":"coinsmartprotocol.pages.dev","first_observed":"2026-11-05T11:26:06.906Z","first_published":"2026-11-05T12:06:38.708Z","brands":[],"dns":"resolved","resolved":["172.66.45.42","172.66.46.214"],"resolved_at":"2026-11-05T11:37:35Z","dns_checked_at":"2026-11-06T12:10:13.000Z","dns_since":"2026-11-05T12:09:43.000Z","findings":[{"id":"f5dygp2vqsi7b5yc4sdzv","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T11:26:06.906Z","first_published":"2026-11-05T12:06:38.708Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=coinsmartprotocol.pages.dev"},{"hostname":"coja.life","first_observed":"2026-11-05T11:00:36.388Z","first_published":"2026-11-05T12:06:38.708Z","brands":[],"dns":"resolved","resolved":["34.76.205.124"],"resolved_at":"2026-11-05T11:12:57Z","dns_checked_at":"2026-11-06T12:10:13.000Z","dns_since":"2026-11-05T12:09:43.000Z","findings":[{"id":"fnhxhmodgu2egf3llwt7s","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T11:00:36.388Z","first_published":"2026-11-05T12:06:38.708Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/coja.life/"}],"url":"https://domainspoof.com/live?show=all&q=coja.life"},{"hostname":"community-finance.net","first_observed":"2026-11-05T11:52:48.076Z","first_published":"2026-11-05T12:06:38.708Z","brands":[],"dns":"resolved","resolved":["91.210.146.59"],"resolved_at":"2026-11-05T11:53:44Z","dns_checked_at":"2026-11-06T12:10:14.000Z","dns_since":"2026-11-05T12:09:43.000Z","findings":[{"id":"fjvnke2nwy6obj4hkxzqo","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T11:52:48.076Z","first_published":"2026-11-05T12:06:38.708Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=community-finance.net"},{"hostname":"compass.lfca.ngo","first_observed":"2026-11-05T11:36:56.621Z","first_published":"2026-11-05T12:06:38.708Z","brands":[],"dns":"resolved","resolved":["199.36.158.100"],"resolved_at":"2026-11-05T11:41:40Z","dns_checked_at":"2026-11-06T12:10:14.000Z","dns_since":"2026-11-05T12:09:43.000Z","findings":[{"id":"fewtgm6h3ntj6luizl5nf","kind":"reported_domain","summary":"Under lfca.ngo, reported by PhishDestroy","first_observed":"2026-11-05T11:36:56.621Z","first_published":"2026-11-05T12:06:38.708Z","source":"phishdestroy","source_name":"PhishDestroy","under":"lfca.ngo","source_url":"https://phishdestroy.io/domain/lfca.ngo/"}],"url":"https://domainspoof.com/live?show=all&q=compass.lfca.ngo"},{"hostname":"cpcontacts.wloveme.shop","first_observed":"2026-11-05T12:00:44.858Z","first_published":"2026-11-05T12:06:38.708Z","brands":[],"dns":"resolved","resolved":["162.4.84.255"],"resolved_at":"2026-11-05T12:01:11Z","dns_checked_at":"2026-11-06T12:10:14.000Z","dns_since":"2026-11-05T12:09:44.000Z","findings":[{"id":"f3fgbwzigpqpx2z6j2yp7","kind":"reported_domain","summary":"Under wloveme.shop, listed by CERT Polska","first_observed":"2026-11-05T12:00:44.858Z","first_published":"2026-11-05T12:06:38.708Z","source":"cert_polska","source_name":"CERT Polska","under":"wloveme.shop"}],"url":"https://domainspoof.com/live?show=all&q=cpcontacts.wloveme.shop"},{"hostname":"cresconex.com","first_observed":"2026-11-05T11:21:26.576Z","first_published":"2026-11-05T12:06:38.708Z","brands":[],"dns":"resolved","resolved":["104.21.82.18","172.67.193.109"],"resolved_at":"2026-11-05T11:31:20Z","dns_checked_at":"2026-11-06T12:10:14.000Z","dns_since":"2026-11-05T12:09:44.000Z","findings":[{"id":"fpp54tixru6ephmzvpy63","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T11:21:26.576Z","first_published":"2026-11-05T12:06:38.708Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=cresconex.com"},{"hostname":"dambayan.com","first_observed":"2026-11-05T10:56:54.006Z","first_published":"2026-11-05T12:06:38.708Z","brands":[],"dns":"resolved","resolved":["173.214.175.66"],"resolved_at":"2026-11-05T11:04:55Z","dns_checked_at":"2026-11-06T12:10:14.000Z","dns_since":"2026-11-05T12:09:44.000Z","findings":[{"id":"frqo7kob4irgrtzkiaiwr","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T10:56:54.006Z","first_published":"2026-11-05T12:06:38.708Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/dambayan.com/"}],"url":"https://domainspoof.com/live?show=all&q=dambayan.com"},{"hostname":"decentralised-exodes.pages.dev","first_observed":"2026-11-05T11:52:48.076Z","first_published":"2026-11-05T12:06:38.708Z","brands":[],"dns":"resolved","resolved":["172.66.44.155","172.66.47.101","2606:4700:310c::ac42:2c9b","2606:4700:310c::ac42:2f65"],"resolved_at":"2026-11-05T11:53:44Z","dns_checked_at":"2026-11-06T12:10:14.000Z","dns_since":"2026-11-05T12:09:44.000Z","findings":[{"id":"fk3jkfel7bov3lajqsvpa","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T11:52:48.076Z","first_published":"2026-11-05T12:06:38.708Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=decentralised-exodes.pages.dev"},{"hostname":"deepsnitch-ai.live","first_observed":"2026-11-05T11:00:36.388Z","first_published":"2026-11-05T12:06:38.708Z","brands":[],"dns":"resolved","resolved":["104.21.83.89","172.67.220.44"],"resolved_at":"2026-11-05T11:13:02Z","dns_checked_at":"2026-11-06T12:10:14.000Z","dns_since":"2026-11-05T12:09:44.000Z","findings":[{"id":"fa7wlfvvgivjjnlj7v6er","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T11:00:36.388Z","first_published":"2026-11-05T12:06:38.708Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/deepsnitch-ai.live/"}],"url":"https://domainspoof.com/live?show=all&q=deepsnitch-ai.live"},{"hostname":"direct.socialvisor.ru","first_observed":"2026-11-05T11:16:15.432Z","first_published":"2026-11-05T12:06:38.708Z","brands":[],"dns":"resolved","resolved":["91.215.41.91"],"resolved_at":"2026-11-05T11:20:37Z","dns_checked_at":"2026-11-06T12:10:14.000Z","dns_since":"2026-11-05T12:09:44.000Z","findings":[{"id":"fvkhsfpv7buxndnticnpe","kind":"reported_domain","summary":"Under socialvisor.ru, reported by PhishDestroy","first_observed":"2026-11-05T11:16:15.432Z","first_published":"2026-11-05T12:06:38.708Z","source":"phishdestroy","source_name":"PhishDestroy","under":"socialvisor.ru","source_url":"https://phishdestroy.io/domain/socialvisor.ru/"}],"url":"https://domainspoof.com/live?show=all&q=direct.socialvisor.ru"},{"hostname":"dl.capcut.gg","first_observed":"2026-11-05T11:41:33.767Z","first_published":"2026-11-05T12:06:38.708Z","brands":[],"dns":"resolved","resolved":["104.21.36.71","172.67.188.134"],"resolved_at":"2026-11-05T11:46:20Z","dns_checked_at":"2026-11-06T12:10:14.000Z","dns_since":"2026-11-05T12:09:44.000Z","findings":[{"id":"f64zxm3ozwl7ezvjqzgbh","kind":"reported_domain","summary":"Under capcut.gg, listed by MetaMask","first_observed":"2026-11-05T11:41:33.767Z","first_published":"2026-11-05T12:06:38.708Z","source":"metamask","source_name":"MetaMask","under":"capcut.gg"}],"url":"https://domainspoof.com/live?show=all&q=dl.capcut.gg"},{"hostname":"dl.iranass.com","first_observed":"2026-11-05T11:05:50.653Z","first_published":"2026-11-05T12:06:38.708Z","brands":[],"dns":"resolved","resolved":["103.224.182.251"],"resolved_at":"2026-11-05T11:06:29Z","dns_checked_at":"2026-11-06T12:10:14.000Z","dns_since":"2026-11-05T12:09:44.000Z","findings":[{"id":"fdf5ynjnxnih7nlb3azj7","kind":"reported_domain","summary":"Under iranass.com, reported by PhishDestroy","first_observed":"2026-11-05T11:05:50.653Z","first_published":"2026-11-05T12:06:38.708Z","source":"phishdestroy","source_name":"PhishDestroy","under":"iranass.com","source_url":"https://phishdestroy.io/domain/iranass.com/"}],"url":"https://domainspoof.com/live?show=all&q=dl.iranass.com"},{"hostname":"docs.betepg-kraken.systems","first_observed":"2026-11-05T11:26:06.906Z","first_published":"2026-11-05T12:06:38.708Z","brands":[],"dns":"resolved","resolved":["143.204.194.4","143.204.194.76","143.204.194.79","143.204.194.108"],"resolved_at":"2026-11-05T11:37:46Z","dns_checked_at":"2026-11-06T12:10:14.000Z","dns_since":"2026-11-05T12:09:44.000Z","findings":[{"id":"fyx6ecskbssestns23njv","kind":"reported_domain","summary":"Under betepg-kraken.systems, listed by MetaMask","first_observed":"2026-11-05T11:26:06.906Z","first_published":"2026-11-05T12:06:38.708Z","source":"metamask","source_name":"MetaMask","under":"betepg-kraken.systems"}],"url":"https://domainspoof.com/live?show=all&q=docs.betepg-kraken.systems"},{"hostname":"e.mounttips.com","first_observed":"2026-11-05T11:36:56.621Z","first_published":"2026-11-05T12:06:38.708Z","brands":[],"dns":"resolved","resolved":["157.250.199.67"],"resolved_at":"2026-11-05T11:41:56Z","dns_checked_at":"2026-11-06T12:10:14.000Z","dns_since":"2026-11-05T12:09:44.000Z","findings":[{"id":"ffqrqvdwo7rqpvooy5h34","kind":"reported_domain","summary":"Under mounttips.com, listed by MetaMask","first_observed":"2026-11-05T11:36:56.621Z","first_published":"2026-11-05T12:06:38.708Z","source":"metamask","source_name":"MetaMask","under":"mounttips.com"}],"url":"https://domainspoof.com/live?show=all&q=e.mounttips.com"},{"hostname":"en.spacextrade.site","first_observed":"2026-11-05T11:41:58.422Z","first_published":"2026-11-05T12:06:38.708Z","brands":[{"id":"spacex","name":"SpaceX","url":"https://domainspoof.com/brands/spacex"}],"dns":"resolved","resolved":["198.251.89.232"],"resolved_at":"2026-11-06T12:10:14Z","dns_checked_at":"2026-11-06T12:10:14.000Z","dns_since":"2026-11-05T12:09:44.000Z","findings":[{"id":"fec2ah5kjuo6crekw2mbk","kind":"phishing_infrastructure","summary":"Resolved to 198.251.89.232, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T11:41:58.422Z","first_published":"2026-11-05T12:06:38.708Z","address":"198.251.89.232","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/spacex"},{"hostname":"ensou.download","first_observed":"2026-11-05T11:05:50.653Z","first_published":"2026-11-05T12:06:38.708Z","brands":[],"dns":"no_address","resolved":[],"resolved_at":"2026-11-05T11:06:29Z","dns_checked_at":"2026-11-06T12:10:14.000Z","dns_since":"2026-11-05T12:09:44.000Z","findings":[{"id":"fgpy5uyeprufo6meuyckr","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T11:05:50.653Z","first_published":"2026-11-05T12:06:38.708Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=ensou.download"},{"hostname":"eonline-sbm.org","first_observed":"2026-11-05T11:21:26.576Z","first_published":"2026-11-05T12:06:38.708Z","brands":[],"dns":"resolved","resolved":["104.21.15.103","172.67.162.42"],"resolved_at":"2026-11-05T11:31:25Z","dns_checked_at":"2026-11-06T12:10:14.000Z","dns_since":"2026-11-05T12:09:44.000Z","findings":[{"id":"fmt666payptylh2hite7t","kind":"reported_domain","summary":"Listed by USOM","first_observed":"2026-11-05T11:21:26.576Z","first_published":"2026-11-05T12:06:38.708Z","source":"usom","source_name":"USOM"}],"url":"https://domainspoof.com/live?show=all&q=eonline-sbm.org"},{"hostname":"erneuerungsbereich.info","first_observed":"2026-11-05T11:31:18.024Z","first_published":"2026-11-05T12:06:38.708Z","brands":[],"dns":"resolved","resolved":["104.21.71.61","172.67.169.253"],"resolved_at":"2026-11-05T11:31:34Z","dns_checked_at":"2026-11-06T12:10:14.000Z","dns_since":"2026-11-05T12:09:44.000Z","findings":[{"id":"f2gftr5oohagbtcjkdnmp","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T11:31:18.024Z","first_published":"2026-11-05T12:06:38.708Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/erneuerungsbereich.info/"}],"url":"https://domainspoof.com/live?show=all&q=erneuerungsbereich.info"},{"hostname":"erp.zenavlico.cyou","first_observed":"2026-11-05T11:00:36.388Z","first_published":"2026-11-05T12:06:38.708Z","brands":[],"dns":"resolved","resolved":["95.85.244.13"],"resolved_at":"2026-11-05T11:13:03Z","dns_checked_at":"2026-11-06T12:10:14.000Z","dns_since":"2026-11-05T12:09:44.000Z","findings":[{"id":"feauhers7wbh3kqish5qk","kind":"reported_domain","summary":"Under zenavlico.cyou, listed by CERT Polska","first_observed":"2026-11-05T11:00:36.388Z","first_published":"2026-11-05T12:06:38.708Z","source":"cert_polska","source_name":"CERT Polska","under":"zenavlico.cyou"}],"url":"https://domainspoof.com/live?show=all&q=erp.zenavlico.cyou"},{"hostname":"esnewsot.com","first_observed":"2026-11-05T11:14:17.119Z","first_published":"2026-11-05T12:06:38.708Z","brands":[],"dns":"resolved","resolved":["104.21.81.179","172.67.145.139","2606:4700:3031::6815:51b3","2606:4700:3032::ac43:918b"],"resolved_at":"2026-11-05T11:17:16Z","dns_checked_at":"2026-11-06T12:10:14.000Z","dns_since":"2026-11-05T12:09:44.000Z","findings":[{"id":"fnxftaikgm2rppknlr75k","kind":"reported_domain","summary":"Listed by USOM","first_observed":"2026-11-05T11:14:17.119Z","first_published":"2026-11-05T12:06:38.708Z","source":"usom","source_name":"USOM"}],"url":"https://domainspoof.com/live?show=all&q=esnewsot.com"},{"hostname":"estate-ledger-staging.pages.dev","first_observed":"2026-11-05T10:56:54.006Z","first_published":"2026-11-05T12:06:38.708Z","brands":[],"dns":"resolved","resolved":["172.66.44.140","172.66.47.116"],"resolved_at":"2026-11-05T11:04:57Z","dns_checked_at":"2026-11-06T12:10:14.000Z","dns_since":"2026-11-05T12:09:44.000Z","findings":[{"id":"flwakxsfb3u5ccuzdy3rs","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T10:56:54.006Z","first_published":"2026-11-05T12:06:38.708Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=estate-ledger-staging.pages.dev"},{"hostname":"ethfi-allocations.xyz","first_observed":"2026-11-05T11:57:04.671Z","first_published":"2026-11-05T12:06:38.708Z","brands":[{"id":"ether-fi","name":"ether.fi","url":"https://domainspoof.com/brands/ether-fi"}],"dns":"resolved","resolved":["104.21.85.223","172.67.211.194","2606:4700:3032::ac43:d3c2","2606:4700:3035::6815:55df"],"resolved_at":"2026-11-05T12:09:43Z","dns_checked_at":"2026-11-06T12:10:14.000Z","dns_since":"2026-11-05T12:09:44.000Z","findings":[{"id":"f3lvgm6gstqyrrbqlanq2","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T11:57:04.671Z","first_published":"2026-11-05T12:06:38.708Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/brands/ether-fi"},{"hostname":"euenastutsq.shop","first_observed":"2026-11-05T11:21:26.576Z","first_published":"2026-11-05T12:06:38.708Z","brands":[],"dns":"resolved","resolved":["104.21.81.9","172.67.136.152"],"resolved_at":"2026-11-05T11:31:25Z","dns_checked_at":"2026-11-06T12:10:14.000Z","dns_since":"2026-11-05T12:09:44.000Z","findings":[{"id":"fpwvuoqnu7xjeq3cdktvk","kind":"reported_domain","summary":"Listed by NPA 165 (finance and insurance)","first_observed":"2026-11-05T11:21:26.576Z","first_published":"2026-11-05T12:06:38.708Z","source":"npa","source_name":"NPA 165","claim":{"category":"finance and insurance"}}],"url":"https://domainspoof.com/live?show=all&q=euenastutsq.shop"},{"hostname":"fastxpressdeliveryservice.online","first_observed":"2026-11-05T11:41:33.767Z","first_published":"2026-11-05T12:06:38.708Z","brands":[],"dns":"resolved","resolved":["51.91.254.250"],"resolved_at":"2026-11-05T11:46:23Z","dns_checked_at":"2026-11-06T12:10:14.000Z","dns_since":"2026-11-05T12:09:44.000Z","findings":[{"id":"frgcymj3ckvg2vj26ieso","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T11:41:33.767Z","first_published":"2026-11-05T12:06:38.708Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/fastxpressdeliveryservice.online/"}],"url":"https://domainspoof.com/live?show=all&q=fastxpressdeliveryservice.online"},{"hostname":"ffrsnngy.shop","first_observed":"2026-11-05T11:46:43.299Z","first_published":"2026-11-05T12:06:38.708Z","brands":[],"dns":"resolved","resolved":["104.17.231.54"],"resolved_at":"2026-11-05T11:50:13Z","dns_checked_at":"2026-11-06T12:10:14.000Z","dns_since":"2026-11-05T12:09:44.000Z","findings":[{"id":"fnoddalb75ddqsyxtgi2y","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T11:46:43.299Z","first_published":"2026-11-05T12:06:38.708Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=ffrsnngy.shop"},{"hostname":"finance-allocations.xyz","first_observed":"2026-11-05T11:52:48.076Z","first_published":"2026-11-05T12:06:38.708Z","brands":[],"dns":"resolved","resolved":["104.21.8.24","172.67.138.66","2606:4700:3033::ac43:8a42","2606:4700:3037::6815:818"],"resolved_at":"2026-11-05T11:53:44Z","dns_checked_at":"2026-11-06T12:10:14.000Z","dns_since":"2026-11-05T12:09:44.000Z","findings":[{"id":"fol5wotsertpj5gaf5pbf","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T11:52:48.076Z","first_published":"2026-11-05T12:06:38.708Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=finance-allocations.xyz"},{"hostname":"finance-rewards-proposal.top","first_observed":"2026-11-05T11:52:48.076Z","first_published":"2026-11-05T12:06:38.708Z","brands":[],"dns":"resolved","resolved":["104.21.81.44","172.67.138.28","2606:4700:3034::ac43:8a1c","2606:4700:3035::6815:512c"],"resolved_at":"2026-11-05T11:53:44Z","dns_checked_at":"2026-11-06T12:10:14.000Z","dns_since":"2026-11-05T12:09:44.000Z","findings":[{"id":"f74ku5piiptucrmslgddj","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T11:52:48.076Z","first_published":"2026-11-05T12:06:38.708Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=finance-rewards-proposal.top"},{"hostname":"fission-haze.com","first_observed":"2026-11-05T11:36:56.621Z","first_published":"2026-11-05T12:06:38.708Z","brands":[],"dns":"resolved","resolved":["104.21.59.106","172.67.223.12"],"resolved_at":"2026-11-05T11:42:01Z","dns_checked_at":"2026-11-06T12:10:14.000Z","dns_since":"2026-11-05T12:09:44.000Z","findings":[{"id":"f2npp4ucj44wwzgppu5vk","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T11:36:56.621Z","first_published":"2026-11-05T12:06:38.708Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=fission-haze.com"},{"hostname":"fomo-allocation.com","first_observed":"2026-11-05T11:52:48.076Z","first_published":"2026-11-05T12:06:38.708Z","brands":[],"dns":"resolved","resolved":["104.21.80.143","172.67.150.170","2606:4700:3033::ac43:96aa","2606:4700:3034::6815:508f"],"resolved_at":"2026-11-05T11:53:44Z","dns_checked_at":"2026-11-06T12:10:14.000Z","dns_since":"2026-11-05T12:09:44.000Z","findings":[{"id":"ficac3wiquzw2v6jmpyun","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T11:52:48.076Z","first_published":"2026-11-05T12:06:38.708Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=fomo-allocation.com"},{"hostname":"gceub.com","first_observed":"2026-11-05T11:10:32.891Z","first_published":"2026-11-05T12:06:38.708Z","brands":[],"dns":"resolved","resolved":["104.21.75.23","172.67.210.63"],"resolved_at":"2026-11-05T11:11:06Z","dns_checked_at":"2026-11-06T12:10:14.000Z","dns_since":"2026-11-05T12:09:44.000Z","findings":[{"id":"fl5txl6uwv3l4icbdlqiz","kind":"reported_domain","summary":"Listed by NPA 165 (finance and insurance)","first_observed":"2026-11-05T11:10:32.891Z","first_published":"2026-11-05T12:06:38.708Z","source":"npa","source_name":"NPA 165","claim":{"category":"finance and insurance"}}],"url":"https://domainspoof.com/live?show=all&q=gceub.com"},{"hostname":"getipaios.com","first_observed":"2026-11-05T11:00:36.388Z","first_published":"2026-11-05T12:06:38.708Z","brands":[],"dns":"resolved","resolved":["91.108.98.84","93.127.179.122"],"resolved_at":"2026-11-05T11:13:04Z","dns_checked_at":"2026-11-06T12:10:14.000Z","dns_since":"2026-11-05T12:09:44.000Z","findings":[{"id":"fswxsuk2tgf5whofj5sze","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T11:00:36.388Z","first_published":"2026-11-05T12:06:38.708Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/getipaios.com/"}],"url":"https://domainspoof.com/live?show=all&q=getipaios.com"},{"hostname":"ghost.socialvisor.ru","first_observed":"2026-11-05T11:16:15.432Z","first_published":"2026-11-05T12:06:38.708Z","brands":[],"dns":"resolved","resolved":["91.215.41.91"],"resolved_at":"2026-11-05T11:20:44Z","dns_checked_at":"2026-11-06T12:10:14.000Z","dns_since":"2026-11-05T12:09:44.000Z","findings":[{"id":"fmplma7jkgdw4gmi422ga","kind":"reported_domain","summary":"Under socialvisor.ru, reported by PhishDestroy","first_observed":"2026-11-05T11:16:15.432Z","first_published":"2026-11-05T12:06:38.708Z","source":"phishdestroy","source_name":"PhishDestroy","under":"socialvisor.ru","source_url":"https://phishdestroy.io/domain/socialvisor.ru/"}],"url":"https://domainspoof.com/live?show=all&q=ghost.socialvisor.ru"},{"hostname":"glacat.com","first_observed":"2026-11-05T11:36:56.621Z","first_published":"2026-11-05T12:06:38.708Z","brands":[],"dns":"resolved","resolved":["104.21.87.163","172.67.144.171"],"resolved_at":"2026-11-05T11:42:02Z","dns_checked_at":"2026-11-06T12:10:14.000Z","dns_since":"2026-11-05T12:09:44.000Z","findings":[{"id":"flu3ipzoqvb3uewlvyy6z","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T11:36:56.621Z","first_published":"2026-11-05T12:06:38.708Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=glacat.com"},{"hostname":"gleaming-budget.com","first_observed":"2026-11-05T11:31:18.024Z","first_published":"2026-11-05T12:06:38.708Z","brands":[],"dns":"resolved","resolved":["104.21.94.93","172.67.221.153"],"resolved_at":"2026-11-05T11:31:36Z","dns_checked_at":"2026-11-06T12:10:14.000Z","dns_since":"2026-11-05T12:09:44.000Z","findings":[{"id":"fpgq227uzq6gryfqeul7p","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T11:31:18.024Z","first_published":"2026-11-05T12:06:38.708Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=gleaming-budget.com"},{"hostname":"globera-fx.com","first_observed":"2026-11-05T11:26:06.906Z","first_published":"2026-11-05T12:06:38.708Z","brands":[],"dns":"resolved","resolved":["185.53.179.149"],"resolved_at":"2026-11-05T11:37:50Z","dns_checked_at":"2026-11-06T12:10:14.000Z","dns_since":"2026-11-05T12:09:44.000Z","findings":[{"id":"f326elp4tjypo23qyrpvt","kind":"reported_domain","summary":"Listed by FSMA (fraudulent online trading platform)","first_observed":"2026-11-05T11:26:06.906Z","first_published":"2026-11-05T12:06:38.708Z","source":"fsma","source_name":"FSMA","claim":{"category":"fraudulent online trading platform"}}],"url":"https://domainspoof.com/live?show=all&q=globera-fx.com"},{"hostname":"go.musicx.live","first_observed":"2026-11-05T11:26:06.906Z","first_published":"2026-11-05T12:06:38.708Z","brands":[],"dns":"resolved","resolved":["52.72.49.79"],"resolved_at":"2026-11-05T11:37:50Z","dns_checked_at":"2026-11-06T12:10:14.000Z","dns_since":"2026-11-05T12:09:44.000Z","findings":[{"id":"ffscprwra7xzm3qhgpem7","kind":"reported_domain","summary":"Under musicx.live, reported by PhishDestroy","first_observed":"2026-11-05T11:26:06.906Z","first_published":"2026-11-05T12:06:38.708Z","source":"phishdestroy","source_name":"PhishDestroy","under":"musicx.live","source_url":"https://phishdestroy.io/domain/musicx.live/"}],"url":"https://domainspoof.com/live?show=all&q=go.musicx.live"},{"hostname":"gooqlesmeet-live.com","first_observed":"2026-11-05T11:52:48.076Z","first_published":"2026-11-05T12:06:38.708Z","brands":[],"dns":"not_found","resolved":[],"resolved_at":"2026-11-05T11:53:44Z","dns_checked_at":"2026-11-06T12:10:14.000Z","dns_since":"2026-11-05T12:09:44.000Z","findings":[{"id":"fixqba5776xaur6hlagg2","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T11:52:48.076Z","first_published":"2026-11-05T12:06:38.708Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=gooqlesmeet-live.com"},{"hostname":"governance-euler.com","first_observed":"2026-11-05T11:05:50.653Z","first_published":"2026-11-05T12:06:38.708Z","brands":[],"dns":"resolved","resolved":["104.21.19.22","172.67.184.186"],"resolved_at":"2026-11-05T11:06:29Z","dns_checked_at":"2026-11-06T12:10:14.000Z","dns_since":"2026-11-05T12:09:44.000Z","findings":[{"id":"frad6io6kiwjfbnkulg2n","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T11:05:50.653Z","first_published":"2026-11-05T12:06:38.708Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=governance-euler.com"},{"hostname":"governance-fobo.xyz","first_observed":"2026-11-05T11:52:48.076Z","first_published":"2026-11-05T12:06:38.708Z","brands":[],"dns":"resolved","resolved":["104.21.92.160","172.67.195.109","2606:4700:3032::ac43:c36d","2606:4700:3037::6815:5ca0"],"resolved_at":"2026-11-05T11:53:44Z","dns_checked_at":"2026-11-06T12:10:14.000Z","dns_since":"2026-11-05T12:09:44.000Z","findings":[{"id":"ffrqrz65m6o5gismqhct5","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T11:52:48.076Z","first_published":"2026-11-05T12:06:38.708Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=governance-fobo.xyz"},{"hostname":"governance-ubikgold.xyz","first_observed":"2026-11-05T11:52:48.076Z","first_published":"2026-11-05T12:06:38.708Z","brands":[],"dns":"resolved","resolved":["104.21.86.57","172.67.215.90","2606:4700:3030::6815:5639","2606:4700:3035::ac43:d75a"],"resolved_at":"2026-11-05T11:53:44Z","dns_checked_at":"2026-11-06T12:10:14.000Z","dns_since":"2026-11-05T12:09:44.000Z","findings":[{"id":"fp4c4hyb6dvfpcy52to3e","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T11:52:48.076Z","first_published":"2026-11-05T12:06:38.708Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=governance-ubikgold.xyz"},{"hostname":"governance-unipegv4.app","first_observed":"2026-11-05T11:05:50.653Z","first_published":"2026-11-05T12:06:38.708Z","brands":[],"dns":"resolved","resolved":["104.21.39.91","172.67.144.4"],"resolved_at":"2026-11-05T11:06:29Z","dns_checked_at":"2026-11-06T12:10:14.000Z","dns_since":"2026-11-05T12:09:44.000Z","findings":[{"id":"f5vxbg7nsefzewvcckd53","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T11:05:50.653Z","first_published":"2026-11-05T12:06:38.708Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=governance-unipegv4.app"},{"hostname":"grandhoreb.com","first_observed":"2026-11-05T10:56:54.006Z","first_published":"2026-11-05T12:06:38.708Z","brands":[],"dns":"resolved","resolved":["104.21.41.158","172.67.148.54"],"resolved_at":"2026-11-05T11:04:59Z","dns_checked_at":"2026-11-06T12:10:14.000Z","dns_since":"2026-11-05T12:09:44.000Z","findings":[{"id":"f6efqhcznsvu3kk2ar6lb","kind":"reported_domain","summary":"Reported by PhishTank","first_observed":"2026-11-05T10:56:54.006Z","first_published":"2026-11-05T12:06:38.708Z","source":"phishtank","source_name":"PhishTank","source_url":"https://phishtank.org/phish_detail.php?phish_id=9501622"}],"url":"https://domainspoof.com/live?show=all&q=grandhoreb.com"},{"hostname":"gtccfds.com","first_observed":"2026-11-05T11:00:36.388Z","first_published":"2026-11-05T12:06:38.708Z","brands":[],"dns":"resolved","resolved":["104.21.47.246","172.67.174.145"],"resolved_at":"2026-11-05T11:13:04Z","dns_checked_at":"2026-11-06T12:10:14.000Z","dns_since":"2026-11-05T12:09:44.000Z","findings":[{"id":"fgj2r2t4njgtd2xykulqb","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T11:00:36.388Z","first_published":"2026-11-05T12:06:38.708Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=gtccfds.com"},{"hostname":"gtcfxapp.com","first_observed":"2026-11-05T11:26:06.906Z","first_published":"2026-11-05T12:06:38.708Z","brands":[],"dns":"resolved","resolved":["104.21.62.10","172.67.217.169"],"resolved_at":"2026-11-05T11:37:50Z","dns_checked_at":"2026-11-06T12:10:14.000Z","dns_since":"2026-11-05T12:09:44.000Z","findings":[{"id":"fjfvdko4kau5nsu5vud7k","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T11:26:06.906Z","first_published":"2026-11-05T12:06:38.708Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=gtcfxapp.com"},{"hostname":"guide-xaman.app","first_observed":"2026-11-05T11:52:48.076Z","first_published":"2026-11-05T12:06:38.708Z","brands":[{"id":"xaman","name":"Xaman","url":"https://domainspoof.com/brands/xaman"}],"dns":"resolved","resolved":["104.21.52.15","172.67.193.238","2606:4700:3030::6815:340f","2606:4700:3035::ac43:c1ee"],"resolved_at":"2026-11-05T11:53:44Z","dns_checked_at":"2026-11-06T12:10:14.000Z","dns_since":"2026-11-05T12:09:44.000Z","findings":[{"id":"ffmi2nurwelcxg7azixoo","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T11:52:48.076Z","first_published":"2026-11-05T12:06:38.708Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/brands/xaman"},{"hostname":"h533s7256445e35l.eth64.de","first_observed":"2026-11-05T11:14:17.119Z","first_published":"2026-11-05T12:06:38.708Z","brands":[],"dns":"resolved","resolved":["159.100.19.243"],"resolved_at":"2026-11-05T11:17:16Z","dns_checked_at":"2026-11-06T12:10:14.000Z","dns_since":"2026-11-05T12:09:44.000Z","findings":[{"id":"fpihqhj6ltvru5iyhfju6","kind":"reported_domain","summary":"Listed by USOM","first_observed":"2026-11-05T11:14:17.119Z","first_published":"2026-11-05T12:06:38.708Z","source":"usom","source_name":"USOM"}],"url":"https://domainspoof.com/live?show=all&q=h533s7256445e35l.eth64.de"},{"hostname":"helius-api2.slerf.tools","first_observed":"2026-11-05T11:00:36.388Z","first_published":"2026-11-05T12:06:38.708Z","brands":[],"dns":"resolved","resolved":["104.20.36.108","172.66.151.250"],"resolved_at":"2026-11-05T11:13:04Z","dns_checked_at":"2026-11-06T12:10:14.000Z","dns_since":"2026-11-05T12:09:44.000Z","findings":[{"id":"fdemw54yjooypnrz66u7h","kind":"reported_domain","summary":"Under slerf.tools, reported by PhishDestroy","first_observed":"2026-11-05T11:00:36.388Z","first_published":"2026-11-05T12:06:38.708Z","source":"phishdestroy","source_name":"PhishDestroy","under":"slerf.tools","source_url":"https://phishdestroy.io/domain/slerf.tools/"}],"url":"https://domainspoof.com/live?show=all&q=helius-api2.slerf.tools"},{"hostname":"heritage-ledger.com","first_observed":"2026-11-05T11:05:50.653Z","first_published":"2026-11-05T12:06:38.708Z","brands":[],"dns":"resolved","resolved":["198.49.23.144","198.49.23.145","198.185.159.144","198.185.159.145"],"resolved_at":"2026-11-05T11:06:30Z","dns_checked_at":"2026-11-06T12:10:14.000Z","dns_since":"2026-11-05T12:09:44.000Z","findings":[{"id":"fmffnw5ysontyw2w5n5hz","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T11:05:50.653Z","first_published":"2026-11-05T12:06:38.708Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=heritage-ledger.com"},{"hostname":"homenestauralab.com","first_observed":"2026-11-05T11:46:43.299Z","first_published":"2026-11-05T12:06:38.708Z","brands":[],"dns":"resolved","resolved":["104.18.15.59"],"resolved_at":"2026-11-05T11:50:14Z","dns_checked_at":"2026-11-06T12:10:14.000Z","dns_since":"2026-11-05T12:09:44.000Z","findings":[{"id":"frmzf2sx7o3eilagjpr5v","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T11:46:43.299Z","first_published":"2026-11-05T12:06:38.708Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=homenestauralab.com"},{"hostname":"hoodflip.xyz","first_observed":"2026-11-05T11:46:43.299Z","first_published":"2026-11-05T12:06:38.708Z","brands":[],"dns":"resolved","resolved":["104.21.6.254","172.67.135.137"],"resolved_at":"2026-11-05T11:50:14Z","dns_checked_at":"2026-11-06T12:10:14.000Z","dns_since":"2026-11-05T12:09:44.000Z","findings":[{"id":"fubwawv3gwr5rbjh5k35n","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T11:46:43.299Z","first_published":"2026-11-05T12:06:38.708Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/hoodflip.xyz/"}],"url":"https://domainspoof.com/live?show=all&q=hoodflip.xyz"},{"hostname":"hut.hubcert.com.br","first_observed":"2026-11-05T12:00:44.858Z","first_published":"2026-11-05T12:06:38.708Z","brands":[],"dns":"resolved","resolved":["162.240.108.214"],"resolved_at":"2026-11-05T12:01:12Z","dns_checked_at":"2026-11-06T12:10:14.000Z","dns_since":"2026-11-05T12:09:44.000Z","findings":[{"id":"fu6pllac7deelya75oiow","kind":"reported_domain","summary":"Under hubcert.com.br, reported by PhishDestroy","first_observed":"2026-11-05T12:00:44.858Z","first_published":"2026-11-05T12:06:38.708Z","source":"phishdestroy","source_name":"PhishDestroy","under":"hubcert.com.br","source_url":"https://phishdestroy.io/domain/hubcert.com.br/"}],"url":"https://domainspoof.com/live?show=all&q=hut.hubcert.com.br"},{"hostname":"hygicare.co","first_observed":"2026-11-05T11:16:15.432Z","first_published":"2026-11-05T12:06:38.708Z","brands":[],"dns":"no_address","resolved":[],"resolved_at":"2026-11-05T11:20:46Z","dns_checked_at":"2026-11-06T12:10:14.000Z","dns_since":"2026-11-05T12:09:44.000Z","findings":[{"id":"fointrsdmlgq6s34asper","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T11:16:15.432Z","first_published":"2026-11-05T12:06:38.708Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=hygicare.co"},{"hostname":"hyperliquid-eligibility.xyz","first_observed":"2026-11-05T11:00:36.388Z","first_published":"2026-11-05T12:06:38.708Z","brands":[{"id":"hyperliquid","name":"Hyperliquid","url":"https://domainspoof.com/brands/hyperliquid"}],"dns":"resolved","resolved":["104.21.27.177","172.67.143.106","2606:4700:3030::6815:1bb1","2606:4700:3030::ac43:8f6a"],"resolved_at":"2026-11-05T11:13:05Z","dns_checked_at":"2026-11-06T12:10:14.000Z","dns_since":"2026-11-05T12:09:44.000Z","findings":[{"id":"fq73vjyhbjue6by2ikuk2","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T11:00:36.388Z","first_published":"2026-11-05T12:06:38.708Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/brands/hyperliquid"},{"hostname":"iialctrhons.shop","first_observed":"2026-11-05T11:21:26.576Z","first_published":"2026-11-05T12:06:38.708Z","brands":[],"dns":"resolved","resolved":["104.21.35.88","172.67.216.58"],"resolved_at":"2026-11-05T11:31:45Z","dns_checked_at":"2026-11-06T12:10:14.000Z","dns_since":"2026-11-05T12:09:44.000Z","findings":[{"id":"f5dccc3ch6byzqhm4qin5","kind":"reported_domain","summary":"Listed by NPA 165 (information services)","first_observed":"2026-11-05T11:21:26.576Z","first_published":"2026-11-05T12:06:38.708Z","source":"npa","source_name":"NPA 165","claim":{"category":"information services"}}],"url":"https://domainspoof.com/live?show=all&q=iialctrhons.shop"},{"hostname":"img.em.goldberg-cap.com","first_observed":"2026-11-05T11:05:50.653Z","first_published":"2026-11-05T12:06:38.708Z","brands":[],"dns":"resolved","resolved":["104.17.155.243","104.17.156.243","104.17.157.243","104.17.158.243","104.17.159.243"],"resolved_at":"2026-11-05T11:06:30Z","dns_checked_at":"2026-11-06T12:10:14.000Z","dns_since":"2026-11-05T12:09:44.000Z","findings":[{"id":"fry556se575wex4t33omk","kind":"reported_domain","summary":"Under goldberg-cap.com, listed by BaFin (unauthorised financial business)","first_observed":"2026-11-05T11:05:50.653Z","first_published":"2026-11-05T12:06:38.708Z","source":"bafin","source_name":"BaFin","under":"goldberg-cap.com","claim":{"category":"unauthorised financial business"}}],"url":"https://domainspoof.com/live?show=all&q=img.em.goldberg-cap.com"},{"hostname":"informs-x.com","first_observed":"2026-11-05T11:41:33.767Z","first_published":"2026-11-05T12:06:38.708Z","brands":[],"dns":"resolved","resolved":["104.21.77.163","172.67.209.243"],"resolved_at":"2026-11-05T11:46:27Z","dns_checked_at":"2026-11-06T12:10:14.000Z","dns_since":"2026-11-05T12:09:44.000Z","findings":[{"id":"fqp3uizocq3l25rs4qrq4","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T11:41:33.767Z","first_published":"2026-11-05T12:06:38.708Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=informs-x.com"},{"hostname":"instagram.williamzshih.com","first_observed":"2026-11-05T11:10:32.891Z","first_published":"2026-11-05T12:06:38.708Z","brands":[{"id":"instagram","name":"Instagram","url":"https://domainspoof.com/brands/instagram"}],"dns":"resolved","resolved":["64.29.17.65","216.198.79.65"],"resolved_at":"2026-11-05T11:11:06Z","dns_checked_at":"2026-11-06T12:10:14.000Z","dns_since":"2026-11-05T12:09:44.000Z","findings":[{"id":"f2exdofat5npbcdh43pgf","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T11:10:32.891Z","first_published":"2026-11-05T12:06:38.708Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/instagram.williamzshih.com/"}],"url":"https://domainspoof.com/brands/instagram"},{"hostname":"internal-api.fresh-focus.pro","first_observed":"2026-11-05T11:16:15.432Z","first_published":"2026-11-05T12:06:38.708Z","brands":[],"dns":"resolved","resolved":["190.115.18.13"],"resolved_at":"2026-11-05T11:20:50Z","dns_checked_at":"2026-11-06T12:10:14.000Z","dns_since":"2026-11-05T12:09:44.000Z","findings":[{"id":"fv45k522d5fiu25zspyxw","kind":"reported_domain","summary":"Under fresh-focus.pro, reported by PhishDestroy","first_observed":"2026-11-05T11:16:15.432Z","first_published":"2026-11-05T12:06:38.708Z","source":"phishdestroy","source_name":"PhishDestroy","under":"fresh-focus.pro","source_url":"https://phishdestroy.io/domain/fresh-focus.pro/"}],"url":"https://domainspoof.com/live?show=all&q=internal-api.fresh-focus.pro"},{"hostname":"inviggnre.shop","first_observed":"2026-11-05T11:21:26.576Z","first_published":"2026-11-05T12:06:38.708Z","brands":[],"dns":"resolved","resolved":["104.21.80.47","172.67.174.86"],"resolved_at":"2026-11-05T11:31:45Z","dns_checked_at":"2026-11-06T12:10:14.000Z","dns_since":"2026-11-05T12:09:44.000Z","findings":[{"id":"fnbch6k4ih3unsilmkkbv","kind":"reported_domain","summary":"Listed by NPA 165 (information services)","first_observed":"2026-11-05T11:21:26.576Z","first_published":"2026-11-05T12:06:38.708Z","source":"npa","source_name":"NPA 165","claim":{"category":"information services"}}],"url":"https://domainspoof.com/live?show=all&q=inviggnre.shop"},{"hostname":"io-search-d-opensea-btc-rvn-chrome-ob-utf-8.com","first_observed":"2026-11-05T11:16:15.432Z","first_published":"2026-11-05T12:06:38.708Z","brands":[{"id":"opensea","name":"OpenSea","url":"https://domainspoof.com/brands/opensea"}],"dns":"resolved","resolved":["104.21.28.150","172.67.170.226","2606:4700:3031::6815:1c96","2606:4700:3031::ac43:aae2"],"resolved_at":"2026-11-05T11:20:50Z","dns_checked_at":"2026-11-06T12:10:14.000Z","dns_since":"2026-11-05T12:09:44.000Z","findings":[{"id":"fuqenfaagmhfcos6kf37b","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T11:16:15.432Z","first_published":"2026-11-05T12:06:38.708Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/brands/opensea"},{"hostname":"iranass.com","first_observed":"2026-11-05T11:05:50.653Z","first_published":"2026-11-05T12:06:38.708Z","brands":[],"dns":"resolved","resolved":["103.224.182.251"],"resolved_at":"2026-11-05T11:06:30Z","dns_checked_at":"2026-11-06T12:10:14.000Z","dns_since":"2026-11-05T12:09:44.000Z","findings":[{"id":"f3a44dwihn5kh6c7belce","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T11:05:50.653Z","first_published":"2026-11-05T12:06:38.708Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/iranass.com/"}],"url":"https://domainspoof.com/live?show=all&q=iranass.com"},{"hostname":"ironpeakedgeai.com","first_observed":"2026-11-05T11:26:06.906Z","first_published":"2026-11-05T12:06:38.708Z","brands":[],"dns":"resolved","resolved":["104.21.56.222","172.67.156.33"],"resolved_at":"2026-11-05T11:37:52Z","dns_checked_at":"2026-11-06T12:10:14.000Z","dns_since":"2026-11-05T12:09:44.000Z","findings":[{"id":"fwmya7xiu65c43k2x2zde","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T11:26:06.906Z","first_published":"2026-11-05T12:06:38.708Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/ironpeakedgeai.com/"}],"url":"https://domainspoof.com/live?show=all&q=ironpeakedgeai.com"},{"hostname":"jawawin.jordanibk.com","first_observed":"2026-11-05T12:00:44.858Z","first_published":"2026-11-05T12:06:38.708Z","brands":[],"dns":"resolved","resolved":["109.123.234.185"],"resolved_at":"2026-11-05T12:01:12Z","dns_checked_at":"2026-11-06T12:10:14.000Z","dns_since":"2026-11-05T12:09:44.000Z","findings":[{"id":"fisqk73drkz2i7jsfpzkg","kind":"reported_domain","summary":"Under jordanibk.com, reported by PhishDestroy","first_observed":"2026-11-05T12:00:44.858Z","first_published":"2026-11-05T12:06:38.708Z","source":"phishdestroy","source_name":"PhishDestroy","under":"jordanibk.com","source_url":"https://phishdestroy.io/domain/jordanibk.com/"}],"url":"https://domainspoof.com/live?show=all&q=jawawin.jordanibk.com"},{"hostname":"jordanibk.com","first_observed":"2026-11-05T12:00:44.858Z","first_published":"2026-11-05T12:06:38.708Z","brands":[],"dns":"resolved","resolved":["109.123.234.185"],"resolved_at":"2026-11-05T12:01:12Z","dns_checked_at":"2026-11-06T12:10:14.000Z","dns_since":"2026-11-05T12:09:44.000Z","findings":[{"id":"fd3zao7pb2n44bq5xl2kh","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T12:00:44.858Z","first_published":"2026-11-05T12:06:38.708Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/jordanibk.com/"}],"url":"https://domainspoof.com/live?show=all&q=jordanibk.com"},{"hostname":"joxywin.pro","first_observed":"2026-11-05T11:46:43.299Z","first_published":"2026-11-05T12:06:38.708Z","brands":[],"dns":"resolved","resolved":["104.21.89.245","172.67.166.44"],"resolved_at":"2026-11-05T11:50:15Z","dns_checked_at":"2026-11-06T12:10:14.000Z","dns_since":"2026-11-05T12:09:44.000Z","findings":[{"id":"fspwpj6tfgczad3kdqc72","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T11:46:43.299Z","first_published":"2026-11-05T12:06:38.708Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/joxywin.pro/"}],"url":"https://domainspoof.com/live?show=all&q=joxywin.pro"},{"hostname":"jup-foundations.pages.dev","first_observed":"2026-11-05T11:52:48.076Z","first_published":"2026-11-05T12:06:38.708Z","brands":[],"dns":"not_found","resolved":[],"resolved_at":"2026-11-05T11:53:44Z","dns_checked_at":"2026-11-06T12:10:14.000Z","dns_since":"2026-11-05T12:09:44.000Z","findings":[{"id":"fyf62h6tnugovbod4pzuv","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T11:52:48.076Z","first_published":"2026-11-05T12:06:38.708Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=jup-foundations.pages.dev"},{"hostname":"k6y85l.hdiv8jy.com","first_observed":"2026-11-05T11:05:50.653Z","first_published":"2026-11-05T12:06:38.708Z","brands":[],"dns":"resolved","resolved":["185.53.179.136"],"resolved_at":"2026-11-05T11:06:30Z","dns_checked_at":"2026-11-06T12:10:14.000Z","dns_since":"2026-11-05T12:09:44.000Z","findings":[{"id":"fhjiyefwvmzqij3gm6cek","kind":"reported_domain","summary":"Under hdiv8jy.com, listed by MetaMask","first_observed":"2026-11-05T11:05:50.653Z","first_published":"2026-11-05T12:06:38.708Z","source":"metamask","source_name":"MetaMask","under":"hdiv8jy.com"}],"url":"https://domainspoof.com/live?show=all&q=k6y85l.hdiv8jy.com"},{"hostname":"kbonqvpy.csuwtnrg.ptgsxzo0wi87qbv2.gatewaylearning.ezgateway.net","first_observed":"2026-11-05T11:57:04.671Z","first_published":"2026-11-05T12:06:38.708Z","brands":[],"dns":"resolved","resolved":["15.204.116.29"],"resolved_at":"2026-11-05T12:09:51Z","dns_checked_at":"2026-11-06T12:10:14.000Z","dns_since":"2026-11-05T12:09:44.000Z","findings":[{"id":"fk6uwfzhfhrurl7njlfre","kind":"reported_domain","summary":"Under ezgateway.net, listed by USOM","first_observed":"2026-11-05T11:57:04.671Z","first_published":"2026-11-05T12:06:38.708Z","source":"usom","source_name":"USOM","under":"ezgateway.net"}],"url":"https://domainspoof.com/live?show=all&q=kbonqvpy.csuwtnrg.ptgsxzo0wi87qbv2.gatewaylearning.ezgateway.net"},{"hostname":"kinteckpota.com","first_observed":"2026-11-05T11:10:32.891Z","first_published":"2026-11-05T12:06:38.708Z","brands":[],"dns":"resolved","resolved":["102.212.246.83"],"resolved_at":"2026-11-05T11:11:06Z","dns_checked_at":"2026-11-06T12:10:14.000Z","dns_since":"2026-11-05T12:09:44.000Z","findings":[{"id":"fjaxnn3r6dp4e6vnqmyft","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T11:10:32.891Z","first_published":"2026-11-05T12:06:38.708Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/kinteckpota.com/"}],"url":"https://domainspoof.com/live?show=all&q=kinteckpota.com"},{"hostname":"kmpnyaabasvurrpsmynn478596.info","first_observed":"2026-11-05T11:00:36.388Z","first_published":"2026-11-05T12:06:38.708Z","brands":[],"dns":"resolved","resolved":["34.76.205.124"],"resolved_at":"2026-11-05T11:13:05Z","dns_checked_at":"2026-11-06T12:10:14.000Z","dns_since":"2026-11-05T12:09:44.000Z","findings":[{"id":"f5gpfammi275iykyiklbi","kind":"reported_domain","summary":"Listed by USOM","first_observed":"2026-11-05T11:00:36.388Z","first_published":"2026-11-05T12:06:38.708Z","source":"usom","source_name":"USOM"}],"url":"https://domainspoof.com/live?show=all&q=kmpnyaabasvurrpsmynn478596.info"},{"hostname":"kmpnyaabsvrrprmsnynnsnfrstlarr.pro","first_observed":"2026-11-05T11:00:36.388Z","first_published":"2026-11-05T12:06:38.708Z","brands":[],"dns":"resolved","resolved":["34.76.205.124"],"resolved_at":"2026-11-05T11:13:05Z","dns_checked_at":"2026-11-06T12:10:14.000Z","dns_since":"2026-11-05T12:09:44.000Z","findings":[{"id":"fzqrfffs7cu7vkbhnxair","kind":"reported_domain","summary":"Listed by USOM","first_observed":"2026-11-05T11:00:36.388Z","first_published":"2026-11-05T12:06:38.708Z","source":"usom","source_name":"USOM"}],"url":"https://domainspoof.com/live?show=all&q=kmpnyaabsvrrprmsnynnsnfrstlarr.pro"},{"hostname":"koltools.io","first_observed":"2026-11-05T11:05:50.653Z","first_published":"2026-11-05T12:06:38.708Z","brands":[],"dns":"resolved","resolved":["64.29.17.1","216.198.79.1"],"resolved_at":"2026-11-05T11:06:30Z","dns_checked_at":"2026-11-06T12:10:14.000Z","dns_since":"2026-11-05T12:09:44.000Z","findings":[{"id":"fecaqaqwq4xv4neh2vkm2","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T11:05:50.653Z","first_published":"2026-11-05T12:06:38.708Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=koltools.io"},{"hostname":"labshotnew.company","first_observed":"2026-11-05T11:05:50.653Z","first_published":"2026-11-05T12:06:38.708Z","brands":[],"dns":"resolved","resolved":["104.21.34.114","172.67.160.122"],"resolved_at":"2026-11-05T11:06:30Z","dns_checked_at":"2026-11-06T12:10:14.000Z","dns_since":"2026-11-05T12:09:44.000Z","findings":[{"id":"fvrv4goxgett2bttspfmh","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T11:05:50.653Z","first_published":"2026-11-05T12:06:38.708Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=labshotnew.company"},{"hostname":"labsnew.company","first_observed":"2026-11-05T11:10:32.891Z","first_published":"2026-11-05T12:06:38.708Z","brands":[],"dns":"resolved","resolved":["104.21.54.150","172.67.139.229"],"resolved_at":"2026-11-05T11:11:06Z","dns_checked_at":"2026-11-06T12:10:14.000Z","dns_since":"2026-11-05T12:09:44.000Z","findings":[{"id":"fcjwbqhbe3xjkycjykxmc","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T11:10:32.891Z","first_published":"2026-11-05T12:06:38.708Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=labsnew.company"},{"hostname":"ledger-srt-us.pages.dev","first_observed":"2026-11-05T11:00:36.388Z","first_published":"2026-11-05T12:06:38.708Z","brands":[],"dns":"resolved","resolved":["172.66.44.55","172.66.47.201"],"resolved_at":"2026-11-05T11:13:06Z","dns_checked_at":"2026-11-06T12:10:14.000Z","dns_since":"2026-11-05T12:09:44.000Z","findings":[{"id":"ftw4sahhttxvnh6nme3ua","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T11:00:36.388Z","first_published":"2026-11-05T12:06:38.708Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=ledger-srt-us.pages.dev"},{"hostname":"lgstd.net","first_observed":"2026-11-05T11:57:04.671Z","first_published":"2026-11-05T12:06:38.708Z","brands":[],"dns":"resolved","resolved":["45.227.255.221"],"resolved_at":"2026-11-05T12:09:52Z","dns_checked_at":"2026-11-06T12:10:14.000Z","dns_since":"2026-11-05T12:09:45.000Z","findings":[{"id":"fxuxen676nce3nocyi5qd","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T11:57:04.671Z","first_published":"2026-11-05T12:06:38.708Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/lgstd.net/"}],"url":"https://domainspoof.com/live?show=all&q=lgstd.net"},{"hostname":"lillydrogeie.fluchos.win","first_observed":"2026-11-05T11:10:32.891Z","first_published":"2026-11-05T12:06:38.708Z","brands":[],"dns":"resolved","resolved":["104.21.47.91","172.67.146.21"],"resolved_at":"2026-11-05T11:11:06Z","dns_checked_at":"2026-11-06T12:10:14.000Z","dns_since":"2026-11-05T12:09:45.000Z","findings":[{"id":"fxzcplc3hjzvochajtbi2","kind":"reported_domain","summary":"Under fluchos.win, listed by CERT Polska","first_observed":"2026-11-05T11:10:32.891Z","first_published":"2026-11-05T12:06:38.708Z","source":"cert_polska","source_name":"CERT Polska","under":"fluchos.win"}],"url":"https://domainspoof.com/live?show=all&q=lillydrogeie.fluchos.win"},{"hostname":"lives-eng-ledgre.pages.dev","first_observed":"2026-11-05T11:41:33.767Z","first_published":"2026-11-05T12:06:38.708Z","brands":[],"dns":"resolved","resolved":["172.66.44.131","172.66.47.125"],"resolved_at":"2026-11-05T11:46:28Z","dns_checked_at":"2026-11-06T12:10:14.000Z","dns_since":"2026-11-05T12:09:45.000Z","findings":[{"id":"fodsjj3hkrevzonlu6jow","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T11:41:33.767Z","first_published":"2026-11-05T12:06:38.708Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=lives-eng-ledgre.pages.dev"},{"hostname":"logn-ledgr-us.pages.dev","first_observed":"2026-11-05T11:05:50.653Z","first_published":"2026-11-05T12:06:38.708Z","brands":[],"dns":"resolved","resolved":["172.66.44.107","172.66.47.149"],"resolved_at":"2026-11-05T11:06:30Z","dns_checked_at":"2026-11-06T12:10:14.000Z","dns_since":"2026-11-05T12:09:45.000Z","findings":[{"id":"fxqw6fdy52wri25yadtk4","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T11:05:50.653Z","first_published":"2026-11-05T12:06:38.708Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=logn-ledgr-us.pages.dev"},{"hostname":"m.iqtkt.com","first_observed":"2026-11-05T11:16:15.432Z","first_published":"2026-11-05T12:06:38.708Z","brands":[],"dns":"resolved","resolved":["104.21.71.73","172.67.143.228"],"resolved_at":"2026-11-05T11:20:55Z","dns_checked_at":"2026-11-06T12:10:14.000Z","dns_since":"2026-11-05T12:09:45.000Z","findings":[{"id":"f7tfvngi22qyespujxbu2","kind":"reported_domain","summary":"Under iqtkt.com, reported by PhishDestroy","first_observed":"2026-11-05T11:16:15.432Z","first_published":"2026-11-05T12:06:38.708Z","source":"phishdestroy","source_name":"PhishDestroy","under":"iqtkt.com","source_url":"https://phishdestroy.io/domain/iqtkt.com/"}],"url":"https://domainspoof.com/live?show=all&q=m.iqtkt.com"},{"hostname":"matomo.crypto-polis.org","first_observed":"2026-11-05T10:56:54.006Z","first_published":"2026-11-05T12:06:38.708Z","brands":[],"dns":"resolved","resolved":["185.178.208.132","185.178.208.182"],"resolved_at":"2026-11-05T11:05:07Z","dns_checked_at":"2026-11-06T12:10:14.000Z","dns_since":"2026-11-05T12:09:45.000Z","findings":[{"id":"fgu4lze2szzazpstndyzp","kind":"reported_domain","summary":"Under crypto-polis.org, reported by PhishDestroy","first_observed":"2026-11-05T10:56:54.006Z","first_published":"2026-11-05T12:06:38.708Z","source":"phishdestroy","source_name":"PhishDestroy","under":"crypto-polis.org","source_url":"https://phishdestroy.io/domain/crypto-polis.org/"}],"url":"https://domainspoof.com/live?show=all&q=matomo.crypto-polis.org"},{"hostname":"media.xloudflare.com","first_observed":"2026-11-05T11:26:06.906Z","first_published":"2026-11-05T12:06:38.708Z","brands":[],"dns":"resolved","resolved":["45.10.243.43"],"resolved_at":"2026-11-05T11:37:55Z","dns_checked_at":"2026-11-06T12:10:14.000Z","dns_since":"2026-11-05T12:09:45.000Z","findings":[{"id":"ffuvhhur3zkyumj6utcik","kind":"reported_domain","summary":"Under xloudflare.com, listed by MetaMask","first_observed":"2026-11-05T11:26:06.906Z","first_published":"2026-11-05T12:06:38.708Z","source":"metamask","source_name":"MetaMask","under":"xloudflare.com"}],"url":"https://domainspoof.com/live?show=all&q=media.xloudflare.com"},{"hostname":"mediafire.net","first_observed":"2026-11-05T10:55:20.120Z","first_published":"2026-11-05T12:06:38.708Z","brands":[{"id":"mediafire","name":"MediaFire","url":"https://domainspoof.com/brands/mediafire"}],"dns":"resolved","resolved":["64.176.195.8"],"resolved_at":"2026-11-06T12:10:14Z","dns_checked_at":"2026-11-06T12:10:14.000Z","dns_since":"2026-11-05T12:09:45.000Z","findings":[{"id":"f3lhg4yxivqym5qwrlwbm","kind":"phishing_infrastructure","summary":"Resolved to 64.176.195.8, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T10:55:20.120Z","first_published":"2026-11-05T12:06:38.708Z","address":"64.176.195.8","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/mediafire"},{"hostname":"mega-introverseapp.pages.dev","first_observed":"2026-11-05T11:26:06.906Z","first_published":"2026-11-05T12:06:38.708Z","brands":[],"dns":"resolved","resolved":["172.66.44.146","172.66.47.110"],"resolved_at":"2026-11-05T11:37:55Z","dns_checked_at":"2026-11-06T12:10:14.000Z","dns_since":"2026-11-05T12:09:45.000Z","findings":[{"id":"fu7y36472ucmbhyrr66bo","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T11:26:06.906Z","first_published":"2026-11-05T12:06:38.708Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=mega-introverseapp.pages.dev"},{"hostname":"memecoin-drop.live","first_observed":"2026-11-05T11:00:36.388Z","first_published":"2026-11-05T12:06:38.708Z","brands":[],"dns":"resolved","resolved":["104.21.77.70","172.67.205.92"],"resolved_at":"2026-11-05T11:13:06Z","dns_checked_at":"2026-11-06T12:10:14.000Z","dns_since":"2026-11-05T12:09:45.000Z","findings":[{"id":"fwb5rrbr7jwfumtrd35df","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T11:00:36.388Z","first_published":"2026-11-05T12:06:38.708Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=memecoin-drop.live"},{"hostname":"meteora-treasury.pages.dev","first_observed":"2026-11-05T11:52:48.076Z","first_published":"2026-11-05T12:06:38.708Z","brands":[],"dns":"not_found","resolved":[],"resolved_at":"2026-11-05T11:53:44Z","dns_checked_at":"2026-11-06T12:10:14.000Z","dns_since":"2026-11-05T12:09:45.000Z","findings":[{"id":"f5t3r3eru2p7alii4iyce","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T11:52:48.076Z","first_published":"2026-11-05T12:06:38.708Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=meteora-treasury.pages.dev"},{"hostname":"meteorag.cc","first_observed":"2026-11-05T11:05:50.653Z","first_published":"2026-11-05T12:06:38.708Z","brands":[],"dns":"resolved","resolved":["104.21.1.5","172.67.186.114"],"resolved_at":"2026-11-05T11:06:31Z","dns_checked_at":"2026-11-06T12:10:14.000Z","dns_since":"2026-11-05T12:09:45.000Z","findings":[{"id":"f3nhy7leirjo7zh4wrrm7","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T11:05:50.653Z","first_published":"2026-11-05T12:06:38.708Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=meteorag.cc"},{"hostname":"midas-app.pro","first_observed":"2026-11-05T11:51:52.845Z","first_published":"2026-11-05T12:06:38.708Z","brands":[],"dns":"resolved","resolved":["104.21.93.180","172.67.213.178"],"resolved_at":"2026-11-05T11:59:33Z","dns_checked_at":"2026-11-06T12:10:14.000Z","dns_since":"2026-11-05T12:09:45.000Z","findings":[{"id":"f4xjln7ryimkwqsir5e5s","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T11:51:52.845Z","first_published":"2026-11-05T12:06:38.708Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/midas-app.pro/"}],"url":"https://domainspoof.com/live?show=all&q=midas-app.pro"},{"hostname":"multiroblox.net","first_observed":"2026-11-05T11:31:18.024Z","first_published":"2026-11-05T12:06:38.708Z","brands":[],"dns":"resolved","resolved":["104.21.15.65","172.67.161.196","2606:4700:3033::ac43:a1c4","2606:4700:3035::6815:f41"],"resolved_at":"2026-11-05T11:31:37Z","dns_checked_at":"2026-11-06T12:10:15.000Z","dns_since":"2026-11-05T12:09:45.000Z","findings":[{"id":"fbttqupcteghxqilveux6","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T11:31:18.024Z","first_published":"2026-11-05T12:06:38.708Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/multiroblox.net/"}],"url":"https://domainspoof.com/live?show=all&q=multiroblox.net"},{"hostname":"munebao.shop","first_observed":"2026-11-05T11:41:33.767Z","first_published":"2026-11-05T12:06:38.708Z","brands":[],"dns":"resolved","resolved":["104.21.52.34","172.67.194.199"],"resolved_at":"2026-11-05T11:46:28Z","dns_checked_at":"2026-11-06T12:10:15.000Z","dns_since":"2026-11-05T12:09:45.000Z","findings":[{"id":"fsdvpqhglonup6muymrlf","kind":"reported_domain","summary":"Listed by NPA 165 (e-commerce)","first_observed":"2026-11-05T11:41:33.767Z","first_published":"2026-11-05T12:06:38.708Z","source":"npa","source_name":"NPA 165","claim":{"category":"e-commerce"}}],"url":"https://domainspoof.com/live?show=all&q=munebao.shop"},{"hostname":"mx.iranass.com","first_observed":"2026-11-05T11:05:50.653Z","first_published":"2026-11-05T12:06:38.708Z","brands":[],"dns":"resolved","resolved":["103.224.182.251"],"resolved_at":"2026-11-05T11:06:31Z","dns_checked_at":"2026-11-06T12:10:15.000Z","dns_since":"2026-11-05T12:09:45.000Z","findings":[{"id":"fevj67sz5smmvihmcvbgz","kind":"reported_domain","summary":"Under iranass.com, reported by PhishDestroy","first_observed":"2026-11-05T11:05:50.653Z","first_published":"2026-11-05T12:06:38.708Z","source":"phishdestroy","source_name":"PhishDestroy","under":"iranass.com","source_url":"https://phishdestroy.io/domain/iranass.com/"}],"url":"https://domainspoof.com/live?show=all&q=mx.iranass.com"},{"hostname":"mybex.info","first_observed":"2026-11-05T12:00:44.858Z","first_published":"2026-11-05T12:06:38.708Z","brands":[],"dns":"resolved","resolved":["104.21.55.118","172.67.147.254"],"resolved_at":"2026-11-05T12:01:12Z","dns_checked_at":"2026-11-06T12:10:15.000Z","dns_since":"2026-11-05T12:09:45.000Z","findings":[{"id":"fkajxgwezdgkpkewciuw2","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T12:00:44.858Z","first_published":"2026-11-05T12:06:38.708Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/mybex.info/"}],"url":"https://domainspoof.com/live?show=all&q=mybex.info"},{"hostname":"natreicn.shop","first_observed":"2026-11-05T11:21:26.576Z","first_published":"2026-11-05T12:06:38.708Z","brands":[],"dns":"resolved","resolved":["104.21.73.8","172.67.136.232"],"resolved_at":"2026-11-05T11:31:54Z","dns_checked_at":"2026-11-06T12:10:15.000Z","dns_since":"2026-11-05T12:09:45.000Z","findings":[{"id":"fthfabvlgykllahdy7f44","kind":"reported_domain","summary":"Listed by NPA 165 (finance and insurance)","first_observed":"2026-11-05T11:21:26.576Z","first_published":"2026-11-05T12:06:38.708Z","source":"npa","source_name":"NPA 165","claim":{"category":"finance and insurance"}}],"url":"https://domainspoof.com/live?show=all&q=natreicn.shop"},{"hostname":"nillion-voting.pages.dev","first_observed":"2026-11-05T11:52:48.076Z","first_published":"2026-11-05T12:06:38.708Z","brands":[],"dns":"resolved","resolved":["172.66.44.96","172.66.47.160","2606:4700:310c::ac42:2c60","2606:4700:310c::ac42:2fa0"],"resolved_at":"2026-11-05T11:53:44Z","dns_checked_at":"2026-11-06T12:10:15.000Z","dns_since":"2026-11-05T12:09:45.000Z","findings":[{"id":"f5cupphu3vtn6olfidxfj","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T11:52:48.076Z","first_published":"2026-11-05T12:06:38.708Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=nillion-voting.pages.dev"},{"hostname":"nnnrftglaa.shop","first_observed":"2026-11-05T11:36:56.621Z","first_published":"2026-11-05T12:06:38.708Z","brands":[],"dns":"resolved","resolved":["104.21.34.130","172.67.161.67"],"resolved_at":"2026-11-05T11:42:09Z","dns_checked_at":"2026-11-06T12:10:15.000Z","dns_since":"2026-11-05T12:09:45.000Z","findings":[{"id":"ff5i7vhmb7w6qj2pbzlv3","kind":"reported_domain","summary":"Listed by NPA 165 (finance and insurance)","first_observed":"2026-11-05T11:36:56.621Z","first_published":"2026-11-05T12:06:38.708Z","source":"npa","source_name":"NPA 165","claim":{"category":"finance and insurance"}}],"url":"https://domainspoof.com/live?show=all&q=nnnrftglaa.shop"},{"hostname":"nojiagdnni.shop","first_observed":"2026-11-05T11:00:36.388Z","first_published":"2026-11-05T12:06:38.708Z","brands":[],"dns":"resolved","resolved":["104.21.16.39","172.67.166.22"],"resolved_at":"2026-11-05T11:13:06Z","dns_checked_at":"2026-11-06T12:10:15.000Z","dns_since":"2026-11-05T12:09:45.000Z","findings":[{"id":"fldmehawzjkoje2y56j4i","kind":"reported_domain","summary":"Listed by NPA 165 (finance and insurance)","first_observed":"2026-11-05T11:00:36.388Z","first_published":"2026-11-05T12:06:38.708Z","source":"npa","source_name":"NPA 165","claim":{"category":"finance and insurance"}}],"url":"https://domainspoof.com/live?show=all&q=nojiagdnni.shop"},{"hostname":"ondoperpetuals.digital","first_observed":"2026-11-05T11:51:52.845Z","first_published":"2026-11-05T12:06:38.708Z","brands":[],"dns":"resolved","resolved":["104.21.37.169","172.67.210.195"],"resolved_at":"2026-11-05T11:59:36Z","dns_checked_at":"2026-11-06T12:10:15.000Z","dns_since":"2026-11-05T12:09:45.000Z","findings":[{"id":"fpbbi7zsnrj6cbqtsae5y","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T11:51:52.845Z","first_published":"2026-11-05T12:06:38.708Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=ondoperpetuals.digital"},{"hostname":"onedriive.es","first_observed":"2026-11-05T11:41:33.767Z","first_published":"2026-11-05T12:06:38.708Z","brands":[],"dns":"resolved","resolved":["104.21.25.179","172.67.134.113"],"resolved_at":"2026-11-05T11:46:30Z","dns_checked_at":"2026-11-06T12:10:15.000Z","dns_since":"2026-11-05T12:09:45.000Z","findings":[{"id":"fjtz66ubdvi2lel5lau3x","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T11:41:33.767Z","first_published":"2026-11-05T12:06:38.708Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=onedriive.es"},{"hostname":"ontpnnos.shop","first_observed":"2026-11-05T11:21:26.576Z","first_published":"2026-11-05T12:06:38.708Z","brands":[],"dns":"resolved","resolved":["104.21.76.189","172.67.199.113"],"resolved_at":"2026-11-05T11:31:58Z","dns_checked_at":"2026-11-06T12:10:15.000Z","dns_since":"2026-11-05T12:09:45.000Z","findings":[{"id":"faku4o3jzksjzkhv6wqo5","kind":"reported_domain","summary":"Listed by NPA 165 (finance and insurance)","first_observed":"2026-11-05T11:21:26.576Z","first_published":"2026-11-05T12:06:38.708Z","source":"npa","source_name":"NPA 165","claim":{"category":"finance and insurance"}}],"url":"https://domainspoof.com/live?show=all&q=ontpnnos.shop"},{"hostname":"opm521.bitead.com","first_observed":"2026-11-05T11:26:06.906Z","first_published":"2026-11-05T12:06:38.708Z","brands":[],"dns":"resolved","resolved":["135.148.166.115"],"resolved_at":"2026-11-05T11:37:57Z","dns_checked_at":"2026-11-06T12:10:15.000Z","dns_since":"2026-11-05T12:09:45.000Z","findings":[{"id":"f2hskxhip7u5paneetbtw","kind":"reported_domain","summary":"Under bitead.com, listed by MetaMask","first_observed":"2026-11-05T11:26:06.906Z","first_published":"2026-11-05T12:06:38.708Z","source":"metamask","source_name":"MetaMask","under":"bitead.com"}],"url":"https://domainspoof.com/live?show=all&q=opm521.bitead.com"},{"hostname":"os.md","first_observed":"2026-11-05T11:36:56.621Z","first_published":"2026-11-05T12:06:38.708Z","brands":[],"dns":"resolved","resolved":["104.21.18.192","172.67.183.38"],"resolved_at":"2026-11-05T11:42:12Z","dns_checked_at":"2026-11-06T12:10:15.000Z","dns_since":"2026-11-05T12:09:45.000Z","findings":[{"id":"fpiavnids6abmij24qh6g","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T11:36:56.621Z","first_published":"2026-11-05T12:06:38.708Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/os.md/"}],"url":"https://domainspoof.com/live?show=all&q=os.md"},{"hostname":"outbound-4.egress.tatto.li","first_observed":"2026-11-05T11:05:50.653Z","first_published":"2026-11-05T12:06:38.708Z","brands":[],"dns":"resolved","resolved":["51.38.208.96"],"resolved_at":"2026-11-05T11:06:32Z","dns_checked_at":"2026-11-06T12:10:15.000Z","dns_since":"2026-11-05T12:09:45.000Z","findings":[{"id":"f6ln3wwtrltbxwqzgm2ht","kind":"reported_domain","summary":"Under tatto.li, listed by MetaMask","first_observed":"2026-11-05T11:05:50.653Z","first_published":"2026-11-05T12:06:38.708Z","source":"metamask","source_name":"MetaMask","under":"tatto.li"}],"url":"https://domainspoof.com/live?show=all&q=outbound-4.egress.tatto.li"},{"hostname":"pakete-myhermes.com","first_observed":"2026-11-05T11:50:18.114Z","first_published":"2026-11-05T12:06:38.708Z","brands":[{"id":"hermes","name":"Hermes","url":"https://domainspoof.com/brands/hermes"}],"dns":"resolved","resolved":["180.178.180.53"],"resolved_at":"2026-11-06T12:10:15Z","dns_checked_at":"2026-11-06T12:10:15.000Z","dns_since":"2026-11-05T12:09:45.000Z","findings":[{"id":"f6cdtxhh7ksexjf4dusr2","kind":"phishing_infrastructure","summary":"Resolved to 180.178.180.53, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T11:50:18.114Z","first_published":"2026-11-05T12:06:38.708Z","address":"180.178.180.53","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"},{"id":"fups6g3bn5nvdex22jmfr","kind":"spamhaus_drop","summary":"Resolved to 180.178.180.53 on Spamhaus DROP","first_observed":"2026-11-05T11:50:18.114Z","first_published":"2026-11-05T12:06:38.708Z","address":"180.178.180.53","list":"spamhaus_drop","list_name":"Spamhaus DROP"}],"url":"https://domainspoof.com/brands/hermes"},{"hostname":"papersemih.store","first_observed":"2026-11-05T11:31:18.024Z","first_published":"2026-11-05T12:06:38.708Z","brands":[],"dns":"resolved","resolved":["104.21.52.35","172.67.194.200"],"resolved_at":"2026-11-05T11:31:38Z","dns_checked_at":"2026-11-06T12:10:15.000Z","dns_since":"2026-11-05T12:09:45.000Z","findings":[{"id":"fklkn3yy5jc4iyogrxxlt","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T11:31:18.024Z","first_published":"2026-11-05T12:06:38.708Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=papersemih.store"},{"hostname":"partner.topwealthtrading.com","first_observed":"2026-11-05T11:10:32.891Z","first_published":"2026-11-05T12:06:38.708Z","brands":[],"dns":"resolved","resolved":["104.21.59.115","172.67.175.161","2606:4700:3030::ac43:afa1","2606:4700:3033::6815:3b73"],"resolved_at":"2026-11-05T11:11:10Z","dns_checked_at":"2026-11-06T12:10:15.000Z","dns_since":"2026-11-05T12:09:45.000Z","findings":[{"id":"fpqexy6ezddehegdmu7ul","kind":"reported_domain","summary":"Under topwealthtrading.com, reported by PhishDestroy","first_observed":"2026-11-05T11:10:32.891Z","first_published":"2026-11-05T12:06:38.708Z","source":"phishdestroy","source_name":"PhishDestroy","under":"topwealthtrading.com","source_url":"https://phishdestroy.io/domain/topwealthtrading.com/"}],"url":"https://domainspoof.com/live?show=all&q=partner.topwealthtrading.com"},{"hostname":"pay-bitrefill.com-co01-esim-gift.com","first_observed":"2026-11-05T11:06:32.407Z","first_published":"2026-11-05T12:06:38.708Z","brands":[{"id":"bitrefill","name":"Bitrefill","url":"https://domainspoof.com/brands/bitrefill"}],"dns":"resolved","resolved":["62.60.226.39"],"resolved_at":"2026-11-06T06:35:27Z","dns_checked_at":"2026-11-06T06:35:27.000Z","dns_since":"2026-11-05T12:09:45.000Z","findings":[{"id":"fbe224s7anr2uvpkkfruu","kind":"spamhaus_drop","summary":"Resolved to 62.60.226.39 on Spamhaus DROP","first_observed":"2026-11-05T11:06:32.407Z","first_published":"2026-11-05T12:06:38.708Z","address":"62.60.226.39","list":"spamhaus_drop","list_name":"Spamhaus DROP"}],"url":"https://domainspoof.com/brands/bitrefill"},{"hostname":"pay-bitrefill.com-cq01-esim-gift.com","first_observed":"2026-11-05T11:46:31.366Z","first_published":"2026-11-05T12:06:38.708Z","brands":[{"id":"bitrefill","name":"Bitrefill","url":"https://domainspoof.com/brands/bitrefill"}],"dns":"resolved","resolved":["62.60.226.39"],"resolved_at":"2026-11-06T06:35:27Z","dns_checked_at":"2026-11-06T06:35:27.000Z","dns_since":"2026-11-05T12:09:45.000Z","findings":[{"id":"fk7sazdooxtgusgepapgh","kind":"spamhaus_drop","summary":"Resolved to 62.60.226.39 on Spamhaus DROP","first_observed":"2026-11-05T11:46:31.366Z","first_published":"2026-11-05T12:06:38.708Z","address":"62.60.226.39","list":"spamhaus_drop","list_name":"Spamhaus DROP"}],"url":"https://domainspoof.com/brands/bitrefill"},{"hostname":"phantom-voyages.com","first_observed":"2026-11-05T11:16:15.432Z","first_published":"2026-11-05T12:06:38.708Z","brands":[],"dns":"resolved","resolved":["104.21.88.51","172.67.173.9"],"resolved_at":"2026-11-05T11:21:01Z","dns_checked_at":"2026-11-06T12:10:15.000Z","dns_since":"2026-11-05T12:09:45.000Z","findings":[{"id":"fupejo2iqf2edaacwijan","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T11:16:15.432Z","first_published":"2026-11-05T12:06:38.708Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=phantom-voyages.com"},{"hostname":"pikashow-apk.org.in","first_observed":"2026-11-05T11:41:33.767Z","first_published":"2026-11-05T12:06:38.708Z","brands":[],"dns":"resolved","resolved":["104.21.4.122","172.67.132.17"],"resolved_at":"2026-11-05T11:46:31Z","dns_checked_at":"2026-11-06T12:10:15.000Z","dns_since":"2026-11-05T12:09:45.000Z","findings":[{"id":"fytumw3m26vfy2o2xpcpw","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T11:41:33.767Z","first_published":"2026-11-05T12:06:38.708Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=pikashow-apk.org.in"},{"hostname":"pissei2026vip.com","first_observed":"2026-11-05T11:10:32.891Z","first_published":"2026-11-05T12:06:38.708Z","brands":[],"dns":"resolved","resolved":["104.17.177.238"],"resolved_at":"2026-11-05T11:11:10Z","dns_checked_at":"2026-11-06T12:10:15.000Z","dns_since":"2026-11-05T12:09:45.000Z","findings":[{"id":"fpib2iskp7qspqnjsbiwj","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T11:10:32.891Z","first_published":"2026-11-05T12:06:38.708Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=pissei2026vip.com"},{"hostname":"plumenetwork-rewards.xyz","first_observed":"2026-11-05T11:21:26.576Z","first_published":"2026-11-05T12:06:38.708Z","brands":[],"dns":"resolved","resolved":["104.21.21.196","172.67.200.18"],"resolved_at":"2026-11-05T11:32:00Z","dns_checked_at":"2026-11-06T12:10:15.000Z","dns_since":"2026-11-05T12:09:45.000Z","findings":[{"id":"fbhxrru4tblh27xzcyuzz","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T11:21:26.576Z","first_published":"2026-11-05T12:06:38.708Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=plumenetwork-rewards.xyz"},{"hostname":"polariscapital.online","first_observed":"2026-11-05T11:57:04.671Z","first_published":"2026-11-05T12:06:38.708Z","brands":[],"dns":"resolved","resolved":["104.21.10.148","172.67.163.154"],"resolved_at":"2026-11-05T12:09:57Z","dns_checked_at":"2026-11-06T12:10:15.000Z","dns_since":"2026-11-05T12:09:45.000Z","findings":[{"id":"fewddyc7gzqfkl6ed627y","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T11:57:04.671Z","first_published":"2026-11-05T12:06:38.708Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/polariscapital.online/"}],"url":"https://domainspoof.com/live?show=all&q=polariscapital.online"},{"hostname":"polecenia-google.pl","first_observed":"2026-11-05T11:51:52.845Z","first_published":"2026-11-05T12:06:38.708Z","brands":[{"id":"google","name":"Google","url":"https://domainspoof.com/brands/google"}],"dns":"resolved","resolved":["104.21.64.227","172.67.156.43","2606:4700:3031::ac43:9c2b","2606:4700:3035::6815:40e3"],"resolved_at":"2026-11-05T11:59:37Z","dns_checked_at":"2026-11-06T12:10:15.000Z","dns_since":"2026-11-05T12:09:45.000Z","findings":[{"id":"fk7qp23k7qudxknflz2h4","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T11:51:52.845Z","first_published":"2026-11-05T12:06:38.708Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/brands/google"},{"hostname":"polexbot.online","first_observed":"2026-11-05T11:52:48.076Z","first_published":"2026-11-05T12:06:38.708Z","brands":[],"dns":"resolved","resolved":["18.165.83.71","18.165.83.103","18.165.83.106","18.165.83.111"],"resolved_at":"2026-11-05T11:53:44Z","dns_checked_at":"2026-11-06T12:10:15.000Z","dns_since":"2026-11-05T12:09:45.000Z","findings":[{"id":"fr2momxhtvttqdx6iwgfo","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T11:52:48.076Z","first_published":"2026-11-05T12:06:38.708Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=polexbot.online"},{"hostname":"polymarket-guru.pages.dev","first_observed":"2026-11-05T11:52:48.076Z","first_published":"2026-11-05T12:06:38.708Z","brands":[{"id":"polymarket","name":"Polymarket","url":"https://domainspoof.com/brands/polymarket"}],"dns":"resolved","resolved":["172.66.44.56","172.66.47.200","2606:4700:310c::ac42:2c38","2606:4700:310c::ac42:2fc8"],"resolved_at":"2026-11-05T11:53:44Z","dns_checked_at":"2026-11-06T12:10:15.000Z","dns_since":"2026-11-05T12:09:45.000Z","findings":[{"id":"fjgbcc4kybc4bblragvtq","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T11:52:48.076Z","first_published":"2026-11-05T12:06:38.708Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/brands/polymarket"},{"hostname":"polymarketpulse.app","first_observed":"2026-11-05T11:52:48.076Z","first_published":"2026-11-05T12:06:38.708Z","brands":[],"dns":"resolved","resolved":["104.21.54.25","172.67.222.225","2606:4700:3032::ac43:dee1","2606:4700:3035::6815:3619"],"resolved_at":"2026-11-05T11:53:44Z","dns_checked_at":"2026-11-06T12:10:15.000Z","dns_since":"2026-11-05T12:09:45.000Z","findings":[{"id":"fd2aflxytbkcmmm32iitc","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T11:52:48.076Z","first_published":"2026-11-05T12:06:38.708Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=polymarketpulse.app"},{"hostname":"prafferelect.us","first_observed":"2026-11-05T11:00:36.388Z","first_published":"2026-11-05T12:06:38.708Z","brands":[],"dns":"no_address","resolved":[],"resolved_at":"2026-11-05T11:13:07Z","dns_checked_at":"2026-11-06T12:10:15.000Z","dns_since":"2026-11-05T12:09:45.000Z","findings":[{"id":"f5vuoxzle7af6fysqjkcx","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T11:00:36.388Z","first_published":"2026-11-05T12:06:38.708Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=prafferelect.us"},{"hostname":"primorishub.com","first_observed":"2026-11-05T11:26:06.906Z","first_published":"2026-11-05T12:06:38.708Z","brands":[],"dns":"resolved","resolved":["104.21.76.45","172.67.187.173"],"resolved_at":"2026-11-05T11:37:57Z","dns_checked_at":"2026-11-06T12:10:15.000Z","dns_since":"2026-11-05T12:09:45.000Z","findings":[{"id":"fppup5wicnulcharnxfhq","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T11:26:06.906Z","first_published":"2026-11-05T12:06:38.708Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=primorishub.com"},{"hostname":"princepshub.com","first_observed":"2026-11-05T10:56:54.006Z","first_published":"2026-11-05T12:06:38.708Z","brands":[],"dns":"resolved","resolved":["104.21.88.206","172.67.187.16"],"resolved_at":"2026-11-05T11:05:11Z","dns_checked_at":"2026-11-06T12:10:15.000Z","dns_since":"2026-11-05T12:09:45.000Z","findings":[{"id":"ffw2o4qnsqth2kkvpzgmm","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T10:56:54.006Z","first_published":"2026-11-05T12:06:38.708Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=princepshub.com"},{"hostname":"proposals-etherfi.com","first_observed":"2026-11-05T11:57:04.671Z","first_published":"2026-11-05T12:06:38.708Z","brands":[{"id":"ether-fi","name":"ether.fi","url":"https://domainspoof.com/brands/ether-fi"}],"dns":"resolved","resolved":["104.21.74.230","172.67.164.79","2606:4700:3030::6815:4ae6","2606:4700:3036::ac43:a44f"],"resolved_at":"2026-11-05T12:09:58Z","dns_checked_at":"2026-11-06T12:10:15.000Z","dns_since":"2026-11-05T12:09:45.000Z","findings":[{"id":"f7qc7yliu22difzs73fl3","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T11:57:04.671Z","first_published":"2026-11-05T12:06:38.708Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/brands/ether-fi"},{"hostname":"protocol-allocations.top","first_observed":"2026-11-05T11:52:48.076Z","first_published":"2026-11-05T12:06:38.708Z","brands":[],"dns":"resolved","resolved":["104.21.12.74","172.67.193.192","2606:4700:3036::6815:c4a","2606:4700:3037::ac43:c1c0"],"resolved_at":"2026-11-05T11:53:44Z","dns_checked_at":"2026-11-06T12:10:15.000Z","dns_since":"2026-11-05T12:09:45.000Z","findings":[{"id":"fszbzn6qwq57qucfxvlas","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T11:52:48.076Z","first_published":"2026-11-05T12:06:38.708Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=protocol-allocations.top"},{"hostname":"qmsmfehs.monster","first_observed":"2026-11-05T11:51:52.845Z","first_published":"2026-11-05T12:06:38.708Z","brands":[],"dns":"resolved","resolved":["104.21.62.179","172.67.137.233"],"resolved_at":"2026-11-05T11:59:38Z","dns_checked_at":"2026-11-06T12:10:15.000Z","dns_since":"2026-11-05T12:09:45.000Z","findings":[{"id":"fzwv3rebl77mbuysobmdd","kind":"reported_domain","summary":"Listed by NPA 165 (e-commerce)","first_observed":"2026-11-05T11:51:52.845Z","first_published":"2026-11-05T12:06:38.708Z","source":"npa","source_name":"NPA 165","claim":{"category":"e-commerce"}}],"url":"https://domainspoof.com/live?show=all&q=qmsmfehs.monster"},{"hostname":"qubeticss.info","first_observed":"2026-11-05T11:51:52.845Z","first_published":"2026-11-05T12:06:38.708Z","brands":[],"dns":"resolved","resolved":["104.21.72.51","172.67.175.164"],"resolved_at":"2026-11-05T11:59:38Z","dns_checked_at":"2026-11-06T12:10:15.000Z","dns_since":"2026-11-05T12:09:45.000Z","findings":[{"id":"f4t7n4l3fwbtplw32l6pw","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T11:51:52.845Z","first_published":"2026-11-05T12:06:38.708Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/qubeticss.info/"}],"url":"https://domainspoof.com/live?show=all&q=qubeticss.info"},{"hostname":"r.mail.polymarketrefunds.com","first_observed":"2026-11-05T11:00:36.388Z","first_published":"2026-11-05T12:06:38.708Z","brands":[],"dns":"resolved","resolved":["172.246.243.65"],"resolved_at":"2026-11-05T11:13:07Z","dns_checked_at":"2026-11-06T12:10:15.000Z","dns_since":"2026-11-05T12:09:45.000Z","findings":[{"id":"fjgpyf2yquwz63abgwwum","kind":"reported_domain","summary":"Under polymarketrefunds.com, listed by MetaMask","first_observed":"2026-11-05T11:00:36.388Z","first_published":"2026-11-05T12:06:38.708Z","source":"metamask","source_name":"MetaMask","under":"polymarketrefunds.com"}],"url":"https://domainspoof.com/live?show=all&q=r.mail.polymarketrefunds.com"},{"hostname":"ramseseco.xyz","first_observed":"2026-11-05T11:52:48.076Z","first_published":"2026-11-05T12:06:38.708Z","brands":[],"dns":"resolved","resolved":["104.21.90.83","172.67.197.175","2606:4700:3031::6815:5a53","2606:4700:3031::ac43:c5af"],"resolved_at":"2026-11-05T11:53:44Z","dns_checked_at":"2026-11-06T12:10:15.000Z","dns_since":"2026-11-05T12:09:45.000Z","findings":[{"id":"fmn62efyqtf4se6crcmju","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T11:52:48.076Z","first_published":"2026-11-05T12:06:38.708Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=ramseseco.xyz"},{"hostname":"reebokshoe.shop","first_observed":"2026-11-05T11:21:26.576Z","first_published":"2026-11-05T12:06:38.708Z","brands":[],"dns":"resolved","resolved":["104.18.71.116"],"resolved_at":"2026-11-05T11:32:03Z","dns_checked_at":"2026-11-06T12:10:15.000Z","dns_since":"2026-11-05T12:09:45.000Z","findings":[{"id":"fv7zzgtuz7faaxn6zr5ih","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T11:21:26.576Z","first_published":"2026-11-05T12:06:38.708Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=reebokshoe.shop"},{"hostname":"rischzigan.store","first_observed":"2026-11-05T11:36:56.621Z","first_published":"2026-11-05T12:06:38.708Z","brands":[],"dns":"no_address","resolved":[],"resolved_at":"2026-11-05T11:37:04Z","dns_checked_at":"2026-11-06T12:10:15.000Z","dns_since":"2026-11-05T12:09:45.000Z","findings":[{"id":"f3z6wsba56uovcwxlnbq2","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T11:36:56.621Z","first_published":"2026-11-05T12:06:38.708Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=rischzigan.store"},{"hostname":"ruhsuzpanel4458.world","first_observed":"2026-11-05T11:10:32.891Z","first_published":"2026-11-05T12:06:38.708Z","brands":[],"dns":"resolved","resolved":["104.21.14.141","172.67.159.171"],"resolved_at":"2026-11-06T00:06:24Z","dns_checked_at":"2026-11-06T12:10:15.000Z","dns_since":"2026-11-05T12:09:45.000Z","findings":[{"id":"fak3oml75wjlgtccdntt3","kind":"reported_domain","summary":"Listed by USOM","first_observed":"2026-11-05T11:10:32.891Z","first_published":"2026-11-05T12:06:38.708Z","source":"usom","source_name":"USOM"}],"url":"https://domainspoof.com/live?show=all&q=ruhsuzpanel4458.world"},{"hostname":"savrynpulse-ai.net","first_observed":"2026-11-05T11:51:52.845Z","first_published":"2026-11-05T12:06:38.708Z","brands":[],"dns":"resolved","resolved":["104.21.24.84","172.67.218.19"],"resolved_at":"2026-11-05T11:59:39Z","dns_checked_at":"2026-11-06T12:10:15.000Z","dns_since":"2026-11-05T12:09:45.000Z","findings":[{"id":"frgkh5lr4v4bbdxoukqj7","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T11:51:52.845Z","first_published":"2026-11-05T12:06:38.708Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=savrynpulse-ai.net"},{"hostname":"server.glacat.com","first_observed":"2026-11-05T11:36:56.621Z","first_published":"2026-11-05T12:06:38.708Z","brands":[],"dns":"no_address","resolved":[],"resolved_at":"2026-11-05T11:37:04Z","dns_checked_at":"2026-11-06T12:10:15.000Z","dns_since":"2026-11-05T12:09:45.000Z","findings":[{"id":"fwgmnu6pd6tdgykw4n4e2","kind":"reported_domain","summary":"Under glacat.com, listed by MetaMask","first_observed":"2026-11-05T11:36:56.621Z","first_published":"2026-11-05T12:06:38.708Z","source":"metamask","source_name":"MetaMask","under":"glacat.com"}],"url":"https://domainspoof.com/live?show=all&q=server.glacat.com"},{"hostname":"service.zenavlico.cyou","first_observed":"2026-11-05T11:36:56.621Z","first_published":"2026-11-05T12:06:38.708Z","brands":[],"dns":"resolved","resolved":["95.85.244.13"],"resolved_at":"2026-11-05T11:37:04Z","dns_checked_at":"2026-11-06T12:10:15.000Z","dns_since":"2026-11-05T12:09:45.000Z","findings":[{"id":"frasickelmgpiwocyazyp","kind":"reported_domain","summary":"Under zenavlico.cyou, listed by CERT Polska","first_observed":"2026-11-05T11:36:56.621Z","first_published":"2026-11-05T12:06:38.708Z","source":"cert_polska","source_name":"CERT Polska","under":"zenavlico.cyou"}],"url":"https://domainspoof.com/live?show=all&q=service.zenavlico.cyou"},{"hostname":"share.easycardapp.com","first_observed":"2026-11-05T11:05:50.653Z","first_published":"2026-11-05T12:06:38.708Z","brands":[],"dns":"resolved","resolved":["104.21.68.245","172.67.200.129"],"resolved_at":"2026-11-05T11:14:07Z","dns_checked_at":"2026-11-06T12:10:15.000Z","dns_since":"2026-11-05T12:09:45.000Z","findings":[{"id":"fwjcee6ofcsd33brewjzd","kind":"reported_domain","summary":"Under easycardapp.com, reported by PhishDestroy","first_observed":"2026-11-05T11:05:50.653Z","first_published":"2026-11-05T12:06:38.708Z","source":"phishdestroy","source_name":"PhishDestroy","under":"easycardapp.com","source_url":"https://phishdestroy.io/domain/easycardapp.com/"}],"url":"https://domainspoof.com/live?show=all&q=share.easycardapp.com"},{"hostname":"sitemw37f2cay2gs.xyz","first_observed":"2026-11-05T11:52:48.076Z","first_published":"2026-11-05T12:06:38.708Z","brands":[],"dns":"resolved","resolved":["104.21.88.177","172.67.151.189","2606:4700:3032::ac43:97bd","2606:4700:3035::6815:58b1"],"resolved_at":"2026-11-05T11:53:44Z","dns_checked_at":"2026-11-06T12:10:15.000Z","dns_since":"2026-11-05T12:09:45.000Z","findings":[{"id":"f6ql5csran7xacinwksmj","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T11:52:48.076Z","first_published":"2026-11-05T12:06:38.708Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=sitemw37f2cay2gs.xyz"},{"hostname":"sizler.icin.hizmetler.ebebsitemizsizlere.click","first_observed":"2026-11-05T11:31:18.024Z","first_published":"2026-11-05T12:06:38.708Z","brands":[],"dns":"resolved","resolved":["64.89.160.238"],"resolved_at":"2026-11-05T11:31:39Z","dns_checked_at":"2026-11-06T12:10:15.000Z","dns_since":"2026-11-05T12:09:45.000Z","findings":[{"id":"f73ghufbmnsanl2anjxcz","kind":"reported_domain","summary":"Under ebebsitemizsizlere.click, listed by USOM","first_observed":"2026-11-05T11:31:18.024Z","first_published":"2026-11-05T12:06:38.708Z","source":"usom","source_name":"USOM","under":"ebebsitemizsizlere.click"}],"url":"https://domainspoof.com/live?show=all&q=sizler.icin.hizmetler.ebebsitemizsizlere.click"},{"hostname":"smeiansv.shop","first_observed":"2026-11-05T11:10:32.891Z","first_published":"2026-11-05T12:06:38.708Z","brands":[],"dns":"resolved","resolved":["104.21.58.34","172.67.199.123"],"resolved_at":"2026-11-06T03:57:29Z","dns_checked_at":"2026-11-06T12:10:15.000Z","dns_since":"2026-11-05T12:09:45.000Z","findings":[{"id":"f3qkhmbtifur2lxgturgb","kind":"reported_domain","summary":"Listed by NPA 165 (finance and insurance)","first_observed":"2026-11-05T11:10:32.891Z","first_published":"2026-11-05T12:06:38.708Z","source":"npa","source_name":"NPA 165","claim":{"category":"finance and insurance"}}],"url":"https://domainspoof.com/live?show=all&q=smeiansv.shop"},{"hostname":"sp19ct7-kuren-biz-lasem-dovik.pages.dev","first_observed":"2026-11-05T11:46:43.299Z","first_published":"2026-11-05T12:06:38.708Z","brands":[],"dns":"resolved","resolved":["172.66.44.101","172.66.47.155"],"resolved_at":"2026-11-05T11:50:21Z","dns_checked_at":"2026-11-06T12:10:15.000Z","dns_since":"2026-11-05T12:09:45.000Z","findings":[{"id":"f3wvdv2w7kugbzqqoygb3","kind":"reported_domain","summary":"Reported by PhishTank","first_observed":"2026-11-05T11:46:43.299Z","first_published":"2026-11-05T12:06:38.708Z","source":"phishtank","source_name":"PhishTank","source_url":"https://phishtank.org/phish_detail.php?phish_id=9479537"}],"url":"https://domainspoof.com/live?show=all&q=sp19ct7-kuren-biz-lasem-dovik.pages.dev"},{"hostname":"sp19ct7-sarek-biz-lurem-fodis.pages.dev","first_observed":"2026-11-05T11:16:15.432Z","first_published":"2026-11-05T12:06:38.708Z","brands":[],"dns":"resolved","resolved":["172.66.44.95","172.66.47.161"],"resolved_at":"2026-11-05T11:21:11Z","dns_checked_at":"2026-11-06T12:10:15.000Z","dns_since":"2026-11-05T12:09:45.000Z","findings":[{"id":"fdli4cq4ue7puhwqsg3hh","kind":"reported_domain","summary":"Reported by PhishTank","first_observed":"2026-11-05T11:16:15.432Z","first_published":"2026-11-05T12:06:38.708Z","source":"phishtank","source_name":"PhishTank","source_url":"https://phishtank.org/phish_detail.php?phish_id=9479588"}],"url":"https://domainspoof.com/live?show=all&q=sp19ct7-sarek-biz-lurem-fodis.pages.dev"},{"hostname":"stahlixcore.live","first_observed":"2026-11-05T11:05:50.653Z","first_published":"2026-11-05T12:06:38.708Z","brands":[],"dns":"resolved","resolved":["104.21.60.89","172.67.195.1"],"resolved_at":"2026-11-05T11:14:08Z","dns_checked_at":"2026-11-06T12:10:15.000Z","dns_since":"2026-11-05T12:09:45.000Z","findings":[{"id":"fj25i2o7gpkax67nprezb","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T11:05:50.653Z","first_published":"2026-11-05T12:06:38.708Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=stahlixcore.live"},{"hostname":"starknet-allocation.app","first_observed":"2026-11-05T11:16:15.432Z","first_published":"2026-11-05T12:06:38.708Z","brands":[{"id":"starknet","name":"Starknet","url":"https://domainspoof.com/brands/starknet"}],"dns":"resolved","resolved":["104.21.61.176","172.67.212.152","2606:4700:3036::ac43:d498","2606:4700:3037::6815:3db0"],"resolved_at":"2026-11-05T11:21:11Z","dns_checked_at":"2026-11-06T12:10:15.000Z","dns_since":"2026-11-05T12:09:45.000Z","findings":[{"id":"fvhrq44y6bduhnebusukb","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T11:16:15.432Z","first_published":"2026-11-05T12:06:38.708Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/brands/starknet"},{"hostname":"staysafu.fun","first_observed":"2026-11-05T11:41:33.767Z","first_published":"2026-11-05T12:06:38.708Z","brands":[],"dns":"resolved","resolved":["104.21.27.127","172.67.142.153"],"resolved_at":"2026-11-05T11:46:35Z","dns_checked_at":"2026-11-06T12:10:15.000Z","dns_since":"2026-11-05T12:09:45.000Z","findings":[{"id":"fvha5jov2my3rixc6xhut","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T11:41:33.767Z","first_published":"2026-11-05T12:06:38.708Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/staysafu.fun/"}],"url":"https://domainspoof.com/live?show=all&q=staysafu.fun"},{"hostname":"stonkbroker.lat","first_observed":"2026-11-05T11:52:48.076Z","first_published":"2026-11-05T12:06:38.708Z","brands":[],"dns":"not_found","resolved":["104.21.12.196","172.67.195.162","2606:4700:3030::ac43:c3a2","2606:4700:3035::6815:cc4"],"resolved_at":"2026-11-05T11:53:44Z","dns_checked_at":"2026-11-06T16:13:32.000Z","findings":[{"id":"fdktkfgtkbktpxscgexy4","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T11:52:48.076Z","first_published":"2026-11-05T12:06:38.708Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=stonkbroker.lat"},{"hostname":"sumariqualto.com","first_observed":"2026-11-05T11:57:04.671Z","first_published":"2026-11-05T12:06:38.708Z","brands":[],"dns":"resolved","resolved":["104.21.63.19","172.67.142.105"],"resolved_at":"2026-11-05T12:10:04Z","dns_checked_at":"2026-11-06T12:10:15.000Z","dns_since":"2026-11-05T12:09:45.000Z","findings":[{"id":"fekyxzjzrsxy5ksxahzhz","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T11:57:04.671Z","first_published":"2026-11-05T12:06:38.708Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=sumariqualto.com"},{"hostname":"tanaoirmc.shop","first_observed":"2026-11-05T11:05:50.653Z","first_published":"2026-11-05T12:06:38.708Z","brands":[],"dns":"resolved","resolved":["104.21.19.101","172.67.185.191"],"resolved_at":"2026-11-05T11:14:08Z","dns_checked_at":"2026-11-06T12:10:15.000Z","dns_since":"2026-11-05T12:09:45.000Z","findings":[{"id":"ftjgpd3j4aghbjptwdiot","kind":"reported_domain","summary":"Listed by NPA 165 (e-commerce)","first_observed":"2026-11-05T11:05:50.653Z","first_published":"2026-11-05T12:06:38.708Z","source":"npa","source_name":"NPA 165","claim":{"category":"e-commerce"}}],"url":"https://domainspoof.com/live?show=all&q=tanaoirmc.shop"},{"hostname":"tdhxchd.xyz","first_observed":"2026-11-05T11:21:26.576Z","first_published":"2026-11-05T12:06:38.708Z","brands":[],"dns":"resolved","resolved":["104.21.16.70","172.67.166.227"],"resolved_at":"2026-11-05T11:32:19Z","dns_checked_at":"2026-11-06T12:10:15.000Z","dns_since":"2026-11-05T12:09:45.000Z","findings":[{"id":"fcojww7vu2nxbhpf3a6xa","kind":"reported_domain","summary":"Listed by NPA 165 (e-commerce)","first_observed":"2026-11-05T11:21:26.576Z","first_published":"2026-11-05T12:06:38.708Z","source":"npa","source_name":"NPA 165","claim":{"category":"e-commerce"}}],"url":"https://domainspoof.com/live?show=all&q=tdhxchd.xyz"},{"hostname":"teleionoxs.love","first_observed":"2026-11-05T11:36:56.621Z","first_published":"2026-11-05T12:06:38.708Z","brands":[],"dns":"resolved","resolved":["104.21.88.168","172.67.151.108"],"resolved_at":"2026-11-05T11:37:04Z","dns_checked_at":"2026-11-06T12:10:15.000Z","dns_since":"2026-11-05T12:09:45.000Z","findings":[{"id":"fevbqohzd5cru5g4vkiwj","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T11:36:56.621Z","first_published":"2026-11-05T12:06:38.708Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=teleionoxs.love"},{"hostname":"teleonxkxs.help","first_observed":"2026-11-05T10:56:54.006Z","first_published":"2026-11-05T12:06:38.708Z","brands":[],"dns":"resolved","resolved":["104.21.36.180","172.67.198.66"],"resolved_at":"2026-11-05T11:05:17Z","dns_checked_at":"2026-11-06T12:10:15.000Z","dns_since":"2026-11-05T12:09:45.000Z","findings":[{"id":"fb63xuwbvgi537bu7hzue","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T10:56:54.006Z","first_published":"2026-11-05T12:06:38.708Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=teleonxkxs.help"},{"hostname":"tnonter.shop","first_observed":"2026-11-05T11:05:50.653Z","first_published":"2026-11-05T12:06:38.708Z","brands":[],"dns":"resolved","resolved":["104.21.8.20","172.67.156.180"],"resolved_at":"2026-11-05T11:06:37Z","dns_checked_at":"2026-11-06T12:10:15.000Z","dns_since":"2026-11-05T12:09:45.000Z","findings":[{"id":"fdawfenfkk26ghgegk32k","kind":"reported_domain","summary":"Listed by NPA 165 (finance and insurance)","first_observed":"2026-11-05T11:05:50.653Z","first_published":"2026-11-05T12:06:38.708Z","source":"npa","source_name":"NPA 165","claim":{"category":"finance and insurance"}}],"url":"https://domainspoof.com/live?show=all&q=tnonter.shop"},{"hostname":"tnwtlt26.trkini-my.online","first_observed":"2026-11-05T11:46:43.299Z","first_published":"2026-11-05T12:06:38.708Z","brands":[],"dns":"resolved","resolved":["104.21.78.230","172.67.137.245"],"resolved_at":"2026-11-05T11:50:21Z","dns_checked_at":"2026-11-06T12:10:15.000Z","dns_since":"2026-11-05T12:09:45.000Z","findings":[{"id":"f5omyxiba57xjh4brhftb","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T11:46:43.299Z","first_published":"2026-11-05T12:06:38.708Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/tnwtlt26.trkini-my.online/"}],"url":"https://domainspoof.com/live?show=all&q=tnwtlt26.trkini-my.online"},{"hostname":"tqimendunjia.com","first_observed":"2026-11-05T11:00:36.388Z","first_published":"2026-11-05T12:06:38.708Z","brands":[],"dns":"no_address","resolved":[],"resolved_at":"2026-11-05T11:13:10Z","dns_checked_at":"2026-11-06T12:10:15.000Z","dns_since":"2026-11-05T12:09:45.000Z","findings":[{"id":"f5e6n6pot2pkimbvep73o","kind":"reported_domain","summary":"Listed by NPA 165 (finance and insurance)","first_observed":"2026-11-05T11:00:36.388Z","first_published":"2026-11-05T12:06:38.708Z","source":"npa","source_name":"NPA 165","claim":{"category":"finance and insurance"}}],"url":"https://domainspoof.com/live?show=all&q=tqimendunjia.com"},{"hostname":"treasury-jup.pages.dev","first_observed":"2026-11-05T11:52:48.076Z","first_published":"2026-11-05T12:06:38.708Z","brands":[],"dns":"not_found","resolved":[],"resolved_at":"2026-11-05T11:53:44Z","dns_checked_at":"2026-11-06T12:10:15.000Z","dns_since":"2026-11-05T12:09:45.000Z","findings":[{"id":"fcsh4spwos6nrid3pjqsy","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T11:52:48.076Z","first_published":"2026-11-05T12:06:38.708Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=treasury-jup.pages.dev"},{"hostname":"treasury-meteora.pages.dev","first_observed":"2026-11-05T11:52:48.076Z","first_published":"2026-11-05T12:06:38.708Z","brands":[],"dns":"not_found","resolved":[],"resolved_at":"2026-11-05T11:53:44Z","dns_checked_at":"2026-11-06T12:10:15.000Z","dns_since":"2026-11-05T12:09:45.000Z","findings":[{"id":"fa3hi2qa4agxp6mrhy3mu","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T11:52:48.076Z","first_published":"2026-11-05T12:06:38.708Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=treasury-meteora.pages.dev"},{"hostname":"trezer-suite-guide.pages.dev","first_observed":"2026-11-05T12:00:44.858Z","first_published":"2026-11-05T12:06:38.708Z","brands":[],"dns":"resolved","resolved":["172.66.44.119","172.66.47.137"],"resolved_at":"2026-11-05T12:01:14Z","dns_checked_at":"2026-11-06T12:10:15.000Z","dns_since":"2026-11-05T12:09:45.000Z","findings":[{"id":"f44hge6gcfmtaiirdrfio","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T12:00:44.858Z","first_published":"2026-11-05T12:06:38.708Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=trezer-suite-guide.pages.dev"},{"hostname":"trustwallet.cl","first_observed":"2026-11-05T11:11:10.794Z","first_published":"2026-11-05T12:06:38.708Z","brands":[{"id":"trust-wallet","name":"Trust Wallet","url":"https://domainspoof.com/brands/trust-wallet"}],"dns":"resolved","resolved":["2.57.91.91"],"resolved_at":"2026-11-06T12:10:15Z","dns_checked_at":"2026-11-06T12:10:15.000Z","dns_since":"2026-11-05T12:09:45.000Z","findings":[{"id":"fxem3fxyntbsclsk3qqtu","kind":"phishing_infrastructure","summary":"Resolved to 2.57.91.91, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T11:11:10.794Z","first_published":"2026-11-05T12:06:38.708Z","address":"2.57.91.91","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/trust-wallet"},{"hostname":"trustwalletzrewards.com","first_observed":"2026-11-05T11:57:04.671Z","first_published":"2026-11-05T12:06:38.708Z","brands":[],"dns":"resolved","resolved":[],"resolved_at":"2026-11-05T12:10:07Z","dns_checked_at":"2026-11-06T12:10:15.000Z","dns_since":"2026-11-05T16:13:03.000Z","findings":[{"id":"fctkktumqcoo3jlrzgzey","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T11:57:04.671Z","first_published":"2026-11-05T12:06:38.708Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=trustwalletzrewards.com"},{"hostname":"try-daas.com","first_observed":"2026-11-05T11:21:26.576Z","first_published":"2026-11-05T12:06:38.708Z","brands":[],"dns":"no_address","resolved":[],"resolved_at":"2026-11-05T11:32:28Z","dns_checked_at":"2026-11-06T12:10:15.000Z","dns_since":"2026-11-05T12:09:45.000Z","findings":[{"id":"f3lcbixb3daun37hgr2f7","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T11:21:26.576Z","first_published":"2026-11-05T12:06:38.708Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=try-daas.com"},{"hostname":"trydaas.com","first_observed":"2026-11-05T11:16:15.432Z","first_published":"2026-11-05T12:06:38.708Z","brands":[],"dns":"no_address","resolved":[],"resolved_at":"2026-11-05T11:21:15Z","dns_checked_at":"2026-11-06T12:10:15.000Z","dns_since":"2026-11-05T12:09:45.000Z","findings":[{"id":"faq7n4dfmg6il7vzhkdqu","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T11:16:15.432Z","first_published":"2026-11-05T12:06:38.708Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=trydaas.com"},{"hostname":"tv8pba.hdiv8jy.com","first_observed":"2026-11-05T11:10:32.891Z","first_published":"2026-11-05T12:06:38.708Z","brands":[],"dns":"resolved","resolved":["185.53.179.136"],"resolved_at":"2026-11-05T11:11:10Z","dns_checked_at":"2026-11-06T12:10:15.000Z","dns_since":"2026-11-05T12:09:45.000Z","findings":[{"id":"fhqfwxnjmjyipccfguglr","kind":"reported_domain","summary":"Under hdiv8jy.com, listed by MetaMask","first_observed":"2026-11-05T11:10:32.891Z","first_published":"2026-11-05T12:06:38.708Z","source":"metamask","source_name":"MetaMask","under":"hdiv8jy.com"}],"url":"https://domainspoof.com/live?show=all&q=tv8pba.hdiv8jy.com"},{"hostname":"uj5wqa.hdiv8jy.com","first_observed":"2026-11-05T11:05:50.653Z","first_published":"2026-11-05T12:06:38.708Z","brands":[],"dns":"resolved","resolved":["185.53.179.136"],"resolved_at":"2026-11-05T11:06:37Z","dns_checked_at":"2026-11-06T12:10:15.000Z","dns_since":"2026-11-05T12:09:45.000Z","findings":[{"id":"fe6lcqvutgmgipg7257vw","kind":"reported_domain","summary":"Under hdiv8jy.com, listed by MetaMask","first_observed":"2026-11-05T11:05:50.653Z","first_published":"2026-11-05T12:06:38.708Z","source":"metamask","source_name":"MetaMask","under":"hdiv8jy.com"}],"url":"https://domainspoof.com/live?show=all&q=uj5wqa.hdiv8jy.com"},{"hostname":"updates-xaman.app","first_observed":"2026-11-05T11:52:48.076Z","first_published":"2026-11-05T12:06:38.708Z","brands":[{"id":"xaman","name":"Xaman","url":"https://domainspoof.com/brands/xaman"}],"dns":"resolved","resolved":["104.21.47.167","172.67.171.174","2606:4700:3032::6815:2fa7","2606:4700:3036::ac43:abae"],"resolved_at":"2026-11-05T11:53:44Z","dns_checked_at":"2026-11-06T12:10:15.000Z","dns_since":"2026-11-05T12:09:45.000Z","findings":[{"id":"fd2x3genpezgetdok3vyu","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T11:52:48.076Z","first_published":"2026-11-05T12:06:38.708Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/brands/xaman"},{"hostname":"us04webb-zoom.online","first_observed":"2026-11-05T11:21:26.576Z","first_published":"2026-11-05T12:06:38.708Z","brands":[],"dns":"resolved","resolved":["18.226.21.118"],"resolved_at":"2026-11-05T11:21:43Z","dns_checked_at":"2026-11-06T12:10:15.000Z","dns_since":"2026-11-05T12:09:45.000Z","findings":[{"id":"fjiyrlkvfjdv2sn55fwco","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T11:21:26.576Z","first_published":"2026-11-05T12:06:38.708Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=us04webb-zoom.online"},{"hostname":"usdtmixerlab.com","first_observed":"2026-11-05T12:00:44.858Z","first_published":"2026-11-05T12:06:38.708Z","brands":[],"dns":"resolved","resolved":["104.21.39.144","172.67.170.205"],"resolved_at":"2026-11-05T12:01:14Z","dns_checked_at":"2026-11-06T12:10:15.000Z","dns_since":"2026-11-05T12:09:45.000Z","findings":[{"id":"f75ek3sjdkccjkubfu3u6","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T12:00:44.858Z","first_published":"2026-11-05T12:06:38.708Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/usdtmixerlab.com/"}],"url":"https://domainspoof.com/live?show=all&q=usdtmixerlab.com"},{"hostname":"use-daas.com","first_observed":"2026-11-05T11:21:26.576Z","first_published":"2026-11-05T12:06:38.708Z","brands":[],"dns":"resolved","resolved":["104.21.8.226","172.67.158.21"],"resolved_at":"2026-11-05T11:21:43Z","dns_checked_at":"2026-11-06T12:10:15.000Z","dns_since":"2026-11-05T12:09:45.000Z","findings":[{"id":"f7kdxikkiosswzk2xwtur","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T11:21:26.576Z","first_published":"2026-11-05T12:06:38.708Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=use-daas.com"},{"hostname":"v.iranass.com","first_observed":"2026-11-05T11:05:50.653Z","first_published":"2026-11-05T12:06:38.708Z","brands":[],"dns":"resolved","resolved":["103.224.182.251"],"resolved_at":"2026-11-05T11:06:37Z","dns_checked_at":"2026-11-06T12:10:15.000Z","dns_since":"2026-11-05T12:09:45.000Z","findings":[{"id":"fak7uamr2fbff6uzpuxiu","kind":"reported_domain","summary":"Under iranass.com, reported by PhishDestroy","first_observed":"2026-11-05T11:05:50.653Z","first_published":"2026-11-05T12:06:38.708Z","source":"phishdestroy","source_name":"PhishDestroy","under":"iranass.com","source_url":"https://phishdestroy.io/domain/iranass.com/"}],"url":"https://domainspoof.com/live?show=all&q=v.iranass.com"},{"hostname":"viraltruewealth.com","first_observed":"2026-11-05T11:51:52.845Z","first_published":"2026-11-05T12:06:38.708Z","brands":[],"dns":"resolved","resolved":["104.21.50.188","172.67.165.137"],"resolved_at":"2026-11-05T11:59:43Z","dns_checked_at":"2026-11-06T12:10:15.000Z","dns_since":"2026-11-05T12:09:45.000Z","findings":[{"id":"fpyozmzdiij6cmc72cbbv","kind":"reported_domain","summary":"Listed by USOM","first_observed":"2026-11-05T11:51:52.845Z","first_published":"2026-11-05T12:06:38.708Z","source":"usom","source_name":"USOM"}],"url":"https://domainspoof.com/live?show=all&q=viraltruewealth.com"},{"hostname":"vote-runhalo.xyz","first_observed":"2026-11-05T11:16:15.432Z","first_published":"2026-11-05T12:06:38.708Z","brands":[],"dns":"resolved","resolved":["104.21.3.98","172.67.153.126"],"resolved_at":"2026-11-05T11:21:20Z","dns_checked_at":"2026-11-06T12:10:15.000Z","dns_since":"2026-11-05T12:09:45.000Z","findings":[{"id":"fmb4iercyuxtusejtzq3k","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T11:16:15.432Z","first_published":"2026-11-05T12:06:38.708Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=vote-runhalo.xyz"},{"hostname":"vpn.adsmicrosoift.com","first_observed":"2026-11-05T11:31:18.024Z","first_published":"2026-11-05T12:06:38.708Z","brands":[],"dns":"resolved","resolved":["185.53.179.136"],"resolved_at":"2026-11-05T11:31:40Z","dns_checked_at":"2026-11-06T12:10:15.000Z","dns_since":"2026-11-05T12:09:45.000Z","findings":[{"id":"ftncajyfzwowh3qdqvs6d","kind":"reported_domain","summary":"Under adsmicrosoift.com, listed by MetaMask","first_observed":"2026-11-05T11:31:18.024Z","first_published":"2026-11-05T12:06:38.708Z","source":"metamask","source_name":"MetaMask","under":"adsmicrosoift.com"}],"url":"https://domainspoof.com/live?show=all&q=vpn.adsmicrosoift.com"},{"hostname":"weberp.gainup.in","first_observed":"2026-11-05T11:51:52.845Z","first_published":"2026-11-05T12:06:38.708Z","brands":[],"dns":"resolved","resolved":["203.101.97.26"],"resolved_at":"2026-11-05T11:59:43Z","dns_checked_at":"2026-11-06T12:10:15.000Z","dns_since":"2026-11-05T12:09:45.000Z","findings":[{"id":"fen7zuzhc5xcvk2utbvrt","kind":"reported_domain","summary":"Under gainup.in, reported by PhishDestroy","first_observed":"2026-11-05T11:51:52.845Z","first_published":"2026-11-05T12:06:38.708Z","source":"phishdestroy","source_name":"PhishDestroy","under":"gainup.in","source_url":"https://phishdestroy.io/domain/gainup.in/"}],"url":"https://domainspoof.com/live?show=all&q=weberp.gainup.in"},{"hostname":"webhooks.betepg-kraken.systems","first_observed":"2026-11-05T11:26:06.906Z","first_published":"2026-11-05T12:06:38.708Z","brands":[],"dns":"resolved","resolved":["52.222.201.7","52.222.201.43","52.222.201.73","52.222.201.89"],"resolved_at":"2026-11-05T11:38:06Z","dns_checked_at":"2026-11-06T12:10:15.000Z","dns_since":"2026-11-05T12:09:45.000Z","findings":[{"id":"fnp5rrjtoebsyrzfvtpy4","kind":"reported_domain","summary":"Under betepg-kraken.systems, listed by MetaMask","first_observed":"2026-11-05T11:26:06.906Z","first_published":"2026-11-05T12:06:38.708Z","source":"metamask","source_name":"MetaMask","under":"betepg-kraken.systems"}],"url":"https://domainspoof.com/live?show=all&q=webhooks.betepg-kraken.systems"},{"hostname":"weryfid-8291.eu.cc","first_observed":"2026-11-05T11:46:43.299Z","first_published":"2026-11-05T12:06:38.708Z","brands":[],"dns":"resolved","resolved":["104.21.92.242","172.67.200.248"],"resolved_at":"2026-11-05T11:50:23Z","dns_checked_at":"2026-11-06T12:10:15.000Z","dns_since":"2026-11-05T12:09:45.000Z","findings":[{"id":"fjyh6igecgkf62c4vcqvx","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T11:46:43.299Z","first_published":"2026-11-05T12:06:38.708Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=weryfid-8291.eu.cc"},{"hostname":"wildcard.wildcard.wildcard.www.www.wildcard.chatgpt-wasmer-app-deployments.wasmer.app","first_observed":"2026-11-05T11:06:37.259Z","first_published":"2026-11-05T12:06:38.708Z","brands":[{"id":"openai","name":"OpenAI","url":"https://domainspoof.com/brands/openai"}],"dns":"resolved","resolved":["5.161.23.223"],"resolved_at":"2026-11-06T12:10:15Z","dns_checked_at":"2026-11-06T12:10:15.000Z","dns_since":"2026-11-05T12:09:45.000Z","findings":[{"id":"fmije6vrm6buuoed2o24j","kind":"phishing_infrastructure","summary":"Resolved to 5.161.23.223, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T11:06:37.259Z","first_published":"2026-11-05T12:06:38.708Z","address":"5.161.23.223","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/openai"},{"hostname":"windstable.company","first_observed":"2026-11-05T11:05:50.653Z","first_published":"2026-11-05T12:06:38.708Z","brands":[],"dns":"resolved","resolved":["104.21.73.56","172.67.158.68"],"resolved_at":"2026-11-05T11:06:37Z","dns_checked_at":"2026-11-06T12:10:15.000Z","dns_since":"2026-11-05T12:09:45.000Z","findings":[{"id":"fhqgg2wxw7pylovsvkid2","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T11:05:50.653Z","first_published":"2026-11-05T12:06:38.708Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=windstable.company"},{"hostname":"wordpress-sh6kr.wasmer.app","first_observed":"2026-11-05T11:06:37.259Z","first_published":"2026-11-05T12:06:38.708Z","brands":[{"id":"wordpress","name":"WordPress","url":"https://domainspoof.com/brands/wordpress"}],"dns":"resolved","resolved":["5.161.23.223"],"resolved_at":"2026-11-06T12:10:15Z","dns_checked_at":"2026-11-06T12:10:15.000Z","dns_since":"2026-11-05T12:09:45.000Z","findings":[{"id":"ffygzkqk74ymfqkk6jixq","kind":"phishing_infrastructure","summary":"Resolved to 5.161.23.223, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T11:06:37.259Z","first_published":"2026-11-05T12:06:38.708Z","address":"5.161.23.223","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/wordpress"},{"hostname":"world-allocations.top","first_observed":"2026-11-05T11:52:48.076Z","first_published":"2026-11-05T12:06:38.708Z","brands":[],"dns":"resolved","resolved":["104.21.44.79","172.67.197.147","2606:4700:3031::ac43:c593","2606:4700:3032::6815:2c4f"],"resolved_at":"2026-11-05T11:53:44Z","dns_checked_at":"2026-11-06T12:10:15.000Z","dns_since":"2026-11-05T12:09:45.000Z","findings":[{"id":"fljlkjqh34mgfzrquapyq","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T11:52:48.076Z","first_published":"2026-11-05T12:06:38.708Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=world-allocations.top"},{"hostname":"wsdsaxa.xyz","first_observed":"2026-11-05T11:51:52.845Z","first_published":"2026-11-05T12:06:38.708Z","brands":[],"dns":"resolved","resolved":["104.21.50.69","172.67.158.117"],"resolved_at":"2026-11-05T11:59:44Z","dns_checked_at":"2026-11-06T12:10:15.000Z","dns_since":"2026-11-05T12:09:45.000Z","findings":[{"id":"f6xh6gfvimdskvogmsobf","kind":"reported_domain","summary":"Listed by NPA 165 (e-commerce)","first_observed":"2026-11-05T11:51:52.845Z","first_published":"2026-11-05T12:06:38.708Z","source":"npa","source_name":"NPA 165","claim":{"category":"e-commerce"}}],"url":"https://domainspoof.com/live?show=all&q=wsdsaxa.xyz"},{"hostname":"ww17.iranass.com","first_observed":"2026-11-05T11:05:50.653Z","first_published":"2026-11-05T12:06:38.708Z","brands":[],"dns":"resolved","resolved":["199.191.50.97"],"resolved_at":"2026-11-05T11:06:37Z","dns_checked_at":"2026-11-06T12:10:15.000Z","dns_since":"2026-11-05T12:09:45.000Z","findings":[{"id":"fxgt6umcvhxlvbhlvtphr","kind":"reported_domain","summary":"Under iranass.com, reported by PhishDestroy","first_observed":"2026-11-05T11:05:50.653Z","first_published":"2026-11-05T12:06:38.708Z","source":"phishdestroy","source_name":"PhishDestroy","under":"iranass.com","source_url":"https://phishdestroy.io/domain/iranass.com/"}],"url":"https://domainspoof.com/live?show=all&q=ww17.iranass.com"},{"hostname":"www.41663tt.com","first_observed":"2026-11-05T11:41:33.767Z","first_published":"2026-11-05T12:06:38.708Z","brands":[],"dns":"resolved","resolved":["3.33.130.190","15.197.148.33"],"resolved_at":"2026-11-05T11:46:40Z","dns_checked_at":"2026-11-06T12:10:15.000Z","dns_since":"2026-11-05T12:09:45.000Z","findings":[{"id":"flkvxw7qekx4p5mqaejv5","kind":"reported_domain","summary":"Under 41663tt.com, reported by PhishDestroy","first_observed":"2026-11-05T11:41:33.767Z","first_published":"2026-11-05T12:06:38.708Z","source":"phishdestroy","source_name":"PhishDestroy","under":"41663tt.com","source_url":"https://phishdestroy.io/domain/41663tt.com/"}],"url":"https://domainspoof.com/live?show=all&q=www.41663tt.com"},{"hostname":"www.akoagro.com","first_observed":"2026-11-05T11:51:52.845Z","first_published":"2026-11-05T12:06:38.708Z","brands":[],"dns":"resolved","resolved":["77.37.53.98","91.108.98.89"],"resolved_at":"2026-11-05T11:59:44Z","dns_checked_at":"2026-11-06T12:10:15.000Z","dns_since":"2026-11-05T12:09:45.000Z","findings":[{"id":"fatnnp4vclcfcdd35x5qn","kind":"reported_domain","summary":"Under akoagro.com, reported by PhishDestroy","first_observed":"2026-11-05T11:51:52.845Z","first_published":"2026-11-05T12:06:38.708Z","source":"phishdestroy","source_name":"PhishDestroy","under":"akoagro.com","source_url":"https://phishdestroy.io/domain/akoagro.com/"}],"url":"https://domainspoof.com/live?show=all&q=www.akoagro.com"},{"hostname":"www.amazon-signin-update-payment-secure-billing-mainapp.172-246-243-65.cpanel.site","first_observed":"2026-11-05T11:31:40.685Z","first_published":"2026-11-05T12:06:38.708Z","brands":[{"id":"amazon","name":"Amazon","url":"https://domainspoof.com/brands/amazon"}],"dns":"resolved","resolved":["172.246.243.65"],"resolved_at":"2026-11-06T12:10:15Z","dns_checked_at":"2026-11-06T12:10:15.000Z","dns_since":"2026-11-05T12:09:45.000Z","findings":[{"id":"fvrao2exvldmvjy5hf5wn","kind":"phishing_infrastructure","summary":"Resolved to 172.246.243.65, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T11:31:40.685Z","first_published":"2026-11-05T12:06:38.708Z","address":"172.246.243.65","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/amazon"},{"hostname":"www.binance-inc.com","first_observed":"2026-11-05T11:37:05.885Z","first_published":"2026-11-05T12:06:38.708Z","brands":[{"id":"binance","name":"Binance","url":"https://domainspoof.com/brands/binance"}],"dns":"resolved","resolved":["2.57.91.91"],"resolved_at":"2026-11-05T12:09:45Z","dns_checked_at":"2026-11-06T12:10:15.000Z","dns_since":"2026-11-05T12:09:45.000Z","findings":[{"id":"f5vhkqtpoi2l3a2yfcrie","kind":"phishing_infrastructure","summary":"Resolved to 2.57.91.91, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T11:37:05.885Z","first_published":"2026-11-05T12:06:38.708Z","address":"2.57.91.91","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/binance"},{"hostname":"www.bitcoinforcorporations.com","first_observed":"2026-11-05T12:00:44.858Z","first_published":"2026-11-05T12:06:38.708Z","brands":[],"dns":"resolved","resolved":["104.21.21.184","172.67.199.203"],"resolved_at":"2026-11-05T12:12:51Z","dns_checked_at":"2026-11-06T12:10:15.000Z","dns_since":"2026-11-05T12:09:45.000Z","findings":[{"id":"fxd5or36hmdiuzfo3aczo","kind":"reported_domain","summary":"Under bitcoinforcorporations.com, reported by PhishDestroy","first_observed":"2026-11-05T12:00:44.858Z","first_published":"2026-11-05T12:06:38.708Z","source":"phishdestroy","source_name":"PhishDestroy","under":"bitcoinforcorporations.com","source_url":"https://phishdestroy.io/domain/bitcoinforcorporations.com/"}],"url":"https://domainspoof.com/live?show=all&q=www.bitcoinforcorporations.com"},{"hostname":"www.bitrefill.com-co01-esim-gift.com","first_observed":"2026-11-05T11:06:37.264Z","first_published":"2026-11-05T12:06:38.708Z","brands":[{"id":"bitrefill","name":"Bitrefill","url":"https://domainspoof.com/brands/bitrefill"}],"dns":"resolved","resolved":["62.60.226.39"],"resolved_at":"2026-11-06T12:10:15Z","dns_checked_at":"2026-11-06T12:10:15.000Z","dns_since":"2026-11-05T12:09:45.000Z","findings":[{"id":"fy5p526mv5mrqkjpjds36","kind":"spamhaus_drop","summary":"Resolved to 62.60.226.39 on Spamhaus DROP","first_observed":"2026-11-05T11:06:37.264Z","first_published":"2026-11-05T12:06:38.708Z","address":"62.60.226.39","list":"spamhaus_drop","list_name":"Spamhaus DROP"}],"url":"https://domainspoof.com/brands/bitrefill"},{"hostname":"www.bitrefill.com-cq01-esim-gift.com","first_observed":"2026-11-05T11:46:39.873Z","first_published":"2026-11-05T12:06:38.708Z","brands":[{"id":"bitrefill","name":"Bitrefill","url":"https://domainspoof.com/brands/bitrefill"}],"dns":"resolved","resolved":["62.60.226.39"],"resolved_at":"2026-11-06T12:10:15Z","dns_checked_at":"2026-11-06T12:10:15.000Z","dns_since":"2026-11-05T12:09:45.000Z","findings":[{"id":"fgi63v7qjrqlcqajsfttc","kind":"spamhaus_drop","summary":"Resolved to 62.60.226.39 on Spamhaus DROP","first_observed":"2026-11-05T11:46:39.873Z","first_published":"2026-11-05T12:06:38.708Z","address":"62.60.226.39","list":"spamhaus_drop","list_name":"Spamhaus DROP"}],"url":"https://domainspoof.com/brands/bitrefill"},{"hostname":"www.dambayan.com","first_observed":"2026-11-05T10:56:54.006Z","first_published":"2026-11-05T12:06:38.708Z","brands":[],"dns":"resolved","resolved":["173.214.175.66"],"resolved_at":"2026-11-05T11:05:23Z","dns_checked_at":"2026-11-06T12:10:16.000Z","dns_since":"2026-11-05T12:09:45.000Z","findings":[{"id":"fwdadkhihul35se3vstnj","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T10:56:54.006Z","first_published":"2026-11-05T12:06:38.708Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/www.dambayan.com/"}],"url":"https://domainspoof.com/live?show=all&q=www.dambayan.com"},{"hostname":"www.e.mounttips.com","first_observed":"2026-11-05T11:36:56.621Z","first_published":"2026-11-05T12:06:38.708Z","brands":[],"dns":"resolved","resolved":["157.250.199.67"],"resolved_at":"2026-11-05T11:37:05Z","dns_checked_at":"2026-11-06T12:10:16.000Z","dns_since":"2026-11-05T12:09:45.000Z","findings":[{"id":"fh52rwakehnf7spxutsp3","kind":"reported_domain","summary":"Under mounttips.com, listed by MetaMask","first_observed":"2026-11-05T11:36:56.621Z","first_published":"2026-11-05T12:06:38.708Z","source":"metamask","source_name":"MetaMask","under":"mounttips.com"}],"url":"https://domainspoof.com/live?show=all&q=www.e.mounttips.com"},{"hostname":"www.equi-ledger.dev","first_observed":"2026-11-05T11:57:04.671Z","first_published":"2026-11-05T12:06:38.708Z","brands":[],"dns":"resolved","resolved":["3.33.130.190","15.197.148.33"],"resolved_at":"2026-11-05T12:10:11Z","dns_checked_at":"2026-11-06T12:10:16.000Z","dns_since":"2026-11-05T12:09:45.000Z","findings":[{"id":"f5xqni74jz3ioxb3to4va","kind":"reported_domain","summary":"Under equi-ledger.dev, listed by MetaMask","first_observed":"2026-11-05T11:57:04.671Z","first_published":"2026-11-05T12:06:38.708Z","source":"metamask","source_name":"MetaMask","under":"equi-ledger.dev"}],"url":"https://domainspoof.com/live?show=all&q=www.equi-ledger.dev"},{"hostname":"www.getipaios.com","first_observed":"2026-11-05T11:00:36.388Z","first_published":"2026-11-05T12:06:38.708Z","brands":[],"dns":"resolved","resolved":["77.37.83.106","91.108.98.211"],"resolved_at":"2026-11-05T11:13:11Z","dns_checked_at":"2026-11-06T12:10:16.000Z","dns_since":"2026-11-05T12:09:46.000Z","findings":[{"id":"ft4i5dcd2tqaymnf3ds7m","kind":"reported_domain","summary":"Under getipaios.com, reported by PhishDestroy","first_observed":"2026-11-05T11:00:36.388Z","first_published":"2026-11-05T12:06:38.708Z","source":"phishdestroy","source_name":"PhishDestroy","under":"getipaios.com","source_url":"https://phishdestroy.io/domain/getipaios.com/"}],"url":"https://domainspoof.com/live?show=all&q=www.getipaios.com"},{"hostname":"www.gtgrb.ezgateway.net","first_observed":"2026-11-05T11:36:56.621Z","first_published":"2026-11-05T12:06:38.708Z","brands":[],"dns":"resolved","resolved":["172.67.165.35"],"resolved_at":"2026-11-05T11:37:05Z","dns_checked_at":"2026-11-06T12:10:16.000Z","dns_since":"2026-11-05T12:09:46.000Z","findings":[{"id":"f5hk5hfkrpk46qi4jnyku","kind":"reported_domain","summary":"Under ezgateway.net, listed by USOM","first_observed":"2026-11-05T11:36:56.621Z","first_published":"2026-11-05T12:06:38.708Z","source":"usom","source_name":"USOM","under":"ezgateway.net"}],"url":"https://domainspoof.com/live?show=all&q=www.gtgrb.ezgateway.net"},{"hostname":"www.hoodstockers.xyz","first_observed":"2026-11-05T11:31:18.024Z","first_published":"2026-11-05T12:06:38.708Z","brands":[],"dns":"resolved","resolved":["64.29.17.1","64.29.17.65"],"resolved_at":"2026-11-05T11:31:40Z","dns_checked_at":"2026-11-06T12:10:16.000Z","dns_since":"2026-11-05T12:09:46.000Z","findings":[{"id":"fh7cprcrzla7fco5wut5q","kind":"reported_domain","summary":"Under hoodstockers.xyz, reported by PhishDestroy","first_observed":"2026-11-05T11:31:18.024Z","first_published":"2026-11-05T12:06:38.708Z","source":"phishdestroy","source_name":"PhishDestroy","under":"hoodstockers.xyz","source_url":"https://phishdestroy.io/domain/hoodstockers.xyz/"}],"url":"https://domainspoof.com/live?show=all&q=www.hoodstockers.xyz"},{"hostname":"www.hut.hubcert.com.br","first_observed":"2026-11-05T12:00:44.858Z","first_published":"2026-11-05T12:06:38.708Z","brands":[],"dns":"resolved","resolved":["162.240.108.214"],"resolved_at":"2026-11-05T12:12:51Z","dns_checked_at":"2026-11-06T12:10:16.000Z","dns_since":"2026-11-05T12:09:46.000Z","findings":[{"id":"f6ceuvnqn7sfdad5k7zrw","kind":"reported_domain","summary":"Under hubcert.com.br, reported by PhishDestroy","first_observed":"2026-11-05T12:00:44.858Z","first_published":"2026-11-05T12:06:38.708Z","source":"phishdestroy","source_name":"PhishDestroy","under":"hubcert.com.br","source_url":"https://phishdestroy.io/domain/hubcert.com.br/"}],"url":"https://domainspoof.com/live?show=all&q=www.hut.hubcert.com.br"},{"hostname":"www.inbank.ro","first_observed":"2026-11-05T11:05:24.299Z","first_published":"2026-11-05T12:06:38.708Z","brands":[{"id":"inbank","name":"Inbank","url":"https://domainspoof.com/brands/inbank"}],"dns":"resolved","resolved":["185.31.240.240"],"resolved_at":"2026-11-06T12:10:16Z","dns_checked_at":"2026-11-06T12:10:16.000Z","dns_since":"2026-11-05T12:09:46.000Z","findings":[{"id":"fdn7eu34xvblgs7dtlx6f","kind":"phishing_infrastructure","summary":"Resolved to 185.31.240.240, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T11:05:24.299Z","first_published":"2026-11-05T12:06:38.708Z","address":"185.31.240.240","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/inbank"},{"hostname":"www.kuveytumre.online","first_observed":"2026-11-05T11:21:26.576Z","first_published":"2026-11-05T12:06:38.708Z","brands":[],"dns":"resolved","resolved":["185.158.133.1"],"resolved_at":"2026-11-05T11:21:43Z","dns_checked_at":"2026-11-06T12:10:16.000Z","dns_since":"2026-11-05T12:09:46.000Z","findings":[{"id":"fbhb55mokk4dr2bt5vhmg","kind":"reported_domain","summary":"Under kuveytumre.online, listed by USOM","first_observed":"2026-11-05T11:21:26.576Z","first_published":"2026-11-05T12:06:38.708Z","source":"usom","source_name":"USOM","under":"kuveytumre.online"}],"url":"https://domainspoof.com/live?show=all&q=www.kuveytumre.online"},{"hostname":"www.learningcrypto.com","first_observed":"2026-11-05T10:56:54.006Z","first_published":"2026-11-05T12:06:38.708Z","brands":[],"dns":"resolved","resolved":["216.150.1.193","216.150.16.193"],"resolved_at":"2026-11-05T11:05:24Z","dns_checked_at":"2026-11-06T12:10:16.000Z","dns_since":"2026-11-05T12:09:46.000Z","findings":[{"id":"ff7zhnje3twnmlszm5457","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T10:56:54.006Z","first_published":"2026-11-05T12:06:38.708Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/www.learningcrypto.com/"}],"url":"https://domainspoof.com/live?show=all&q=www.learningcrypto.com"},{"hostname":"www.lgstd.net","first_observed":"2026-11-05T11:57:04.671Z","first_published":"2026-11-05T12:06:38.708Z","brands":[],"dns":"resolved","resolved":["45.227.255.221"],"resolved_at":"2026-11-05T12:10:11Z","dns_checked_at":"2026-11-06T12:10:16.000Z","dns_since":"2026-11-05T12:09:46.000Z","findings":[{"id":"fwbn76awdinpsakrybrtw","kind":"reported_domain","summary":"Under lgstd.net, reported by PhishDestroy","first_observed":"2026-11-05T11:57:04.671Z","first_published":"2026-11-05T12:06:38.708Z","source":"phishdestroy","source_name":"PhishDestroy","under":"lgstd.net","source_url":"https://phishdestroy.io/domain/lgstd.net/"}],"url":"https://domainspoof.com/live?show=all&q=www.lgstd.net"},{"hostname":"www.lionsgatevaults.com.londoncrestbank.com","first_observed":"2026-11-05T11:16:15.432Z","first_published":"2026-11-05T12:06:38.708Z","brands":[],"dns":"resolved","resolved":["23.153.104.2"],"resolved_at":"2026-11-05T11:21:26Z","dns_checked_at":"2026-11-06T12:10:16.000Z","dns_since":"2026-11-05T12:09:46.000Z","findings":[{"id":"fxzedy3hidbm2f3r63zfw","kind":"reported_domain","summary":"Under londoncrestbank.com, reported by PhishDestroy","first_observed":"2026-11-05T11:16:15.432Z","first_published":"2026-11-05T12:06:38.708Z","source":"phishdestroy","source_name":"PhishDestroy","under":"londoncrestbank.com","source_url":"https://phishdestroy.io/domain/londoncrestbank.com/"}],"url":"https://domainspoof.com/live?show=all&q=www.lionsgatevaults.com.londoncrestbank.com"},{"hostname":"www.oen-okx.com.cn","first_observed":"2026-11-05T11:10:32.891Z","first_published":"2026-11-05T12:06:38.708Z","brands":[],"dns":"resolved","resolved":["177.4.10.59"],"resolved_at":"2026-11-05T11:11:12Z","dns_checked_at":"2026-11-06T12:10:16.000Z","dns_since":"2026-11-05T12:09:46.000Z","findings":[{"id":"ffw3rwolwqxs5cutvjw24","kind":"reported_domain","summary":"Under oen-okx.com.cn, listed by MetaMask","first_observed":"2026-11-05T11:10:32.891Z","first_published":"2026-11-05T12:06:38.708Z","source":"metamask","source_name":"MetaMask","under":"oen-okx.com.cn"}],"url":"https://domainspoof.com/live?show=all&q=www.oen-okx.com.cn"},{"hostname":"www.pay-bitrefill.com-co01-esim-gift.com","first_observed":"2026-11-05T11:06:37.345Z","first_published":"2026-11-05T12:06:38.708Z","brands":[{"id":"bitrefill","name":"Bitrefill","url":"https://domainspoof.com/brands/bitrefill"}],"dns":"resolved","resolved":["62.60.226.39"],"resolved_at":"2026-11-06T12:10:16Z","dns_checked_at":"2026-11-06T12:10:16.000Z","dns_since":"2026-11-05T12:09:46.000Z","findings":[{"id":"fd6yvnhorov6fhz7dytuk","kind":"spamhaus_drop","summary":"Resolved to 62.60.226.39 on Spamhaus DROP","first_observed":"2026-11-05T11:06:37.345Z","first_published":"2026-11-05T12:06:38.708Z","address":"62.60.226.39","list":"spamhaus_drop","list_name":"Spamhaus DROP"}],"url":"https://domainspoof.com/brands/bitrefill"},{"hostname":"www.pay-bitrefill.com-cq01-esim-gift.com","first_observed":"2026-11-05T11:46:40.358Z","first_published":"2026-11-05T12:06:38.708Z","brands":[{"id":"bitrefill","name":"Bitrefill","url":"https://domainspoof.com/brands/bitrefill"}],"dns":"resolved","resolved":["62.60.226.39"],"resolved_at":"2026-11-06T12:10:16Z","dns_checked_at":"2026-11-06T12:10:16.000Z","dns_since":"2026-11-05T12:09:46.000Z","findings":[{"id":"fud74vwcom5vmca5p6p6h","kind":"spamhaus_drop","summary":"Resolved to 62.60.226.39 on Spamhaus DROP","first_observed":"2026-11-05T11:46:40.358Z","first_published":"2026-11-05T12:06:38.708Z","address":"62.60.226.39","list":"spamhaus_drop","list_name":"Spamhaus DROP"}],"url":"https://domainspoof.com/brands/bitrefill"},{"hostname":"www.pikashow-apk.org.in","first_observed":"2026-11-05T11:41:33.767Z","first_published":"2026-11-05T12:06:38.708Z","brands":[],"dns":"resolved","resolved":["104.21.4.122","172.67.132.17"],"resolved_at":"2026-11-05T11:46:40Z","dns_checked_at":"2026-11-06T12:10:16.000Z","dns_since":"2026-11-05T12:09:46.000Z","findings":[{"id":"fvapepdax57obuvzj4c26","kind":"reported_domain","summary":"Under pikashow-apk.org.in, listed by MetaMask","first_observed":"2026-11-05T11:41:33.767Z","first_published":"2026-11-05T12:06:38.708Z","source":"metamask","source_name":"MetaMask","under":"pikashow-apk.org.in"}],"url":"https://domainspoof.com/live?show=all&q=www.pikashow-apk.org.in"},{"hostname":"www.rainbetcasino-se.online","first_observed":"2026-11-05T11:21:26.576Z","first_published":"2026-11-05T12:06:38.708Z","brands":[],"dns":"resolved","resolved":["104.21.5.8","172.67.132.180"],"resolved_at":"2026-11-05T11:21:43Z","dns_checked_at":"2026-11-06T12:10:16.000Z","dns_since":"2026-11-05T12:09:46.000Z","findings":[{"id":"fu2ab7npw2o5y7pwrna7r","kind":"reported_domain","summary":"Under rainbetcasino-se.online, listed by MetaMask","first_observed":"2026-11-05T11:21:26.576Z","first_published":"2026-11-05T12:06:38.708Z","source":"metamask","source_name":"MetaMask","under":"rainbetcasino-se.online"}],"url":"https://domainspoof.com/live?show=all&q=www.rainbetcasino-se.online"},{"hostname":"www.trustwallet.cl","first_observed":"2026-11-05T11:11:12.616Z","first_published":"2026-11-05T12:06:38.708Z","brands":[{"id":"trust-wallet","name":"Trust Wallet","url":"https://domainspoof.com/brands/trust-wallet"}],"dns":"resolved","resolved":["2.57.91.91"],"resolved_at":"2026-11-06T12:10:16Z","dns_checked_at":"2026-11-06T12:10:16.000Z","dns_since":"2026-11-05T12:09:46.000Z","findings":[{"id":"fbzob2f6q4r2vkblmqb36","kind":"phishing_infrastructure","summary":"Resolved to 2.57.91.91, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T11:11:12.616Z","first_published":"2026-11-05T12:06:38.708Z","address":"2.57.91.91","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/trust-wallet"},{"hostname":"www.zenithcapitalbank.com.londoncrestbank.com","first_observed":"2026-11-05T11:16:15.432Z","first_published":"2026-11-05T12:06:38.708Z","brands":[],"dns":"resolved","resolved":["23.153.104.2"],"resolved_at":"2026-11-05T11:21:28Z","dns_checked_at":"2026-11-06T12:10:16.000Z","dns_since":"2026-11-05T12:09:46.000Z","findings":[{"id":"fs2vlilxpnlq2y4i3rq27","kind":"reported_domain","summary":"Under londoncrestbank.com, reported by PhishDestroy","first_observed":"2026-11-05T11:16:15.432Z","first_published":"2026-11-05T12:06:38.708Z","source":"phishdestroy","source_name":"PhishDestroy","under":"londoncrestbank.com","source_url":"https://phishdestroy.io/domain/londoncrestbank.com/"}],"url":"https://domainspoof.com/live?show=all&q=www.zenithcapitalbank.com.londoncrestbank.com"},{"hostname":"x44k-vwzh-0bzb21-mtki-alkn.pages.dev","first_observed":"2026-11-05T11:46:43.299Z","first_published":"2026-11-05T12:06:38.708Z","brands":[],"dns":"resolved","resolved":["172.66.44.229","172.66.47.27"],"resolved_at":"2026-11-05T11:50:24Z","dns_checked_at":"2026-11-06T12:10:16.000Z","dns_since":"2026-11-05T12:09:46.000Z","findings":[{"id":"feou2ff2leeyagjhw2uq2","kind":"reported_domain","summary":"Reported by PhishTank","first_observed":"2026-11-05T11:46:43.299Z","first_published":"2026-11-05T12:06:38.708Z","source":"phishtank","source_name":"PhishTank","source_url":"https://phishtank.org/phish_detail.php?phish_id=9479671"}],"url":"https://domainspoof.com/live?show=all&q=x44k-vwzh-0bzb21-mtki-alkn.pages.dev"},{"hostname":"xrnd7f3qa.coja.life","first_observed":"2026-11-05T11:00:36.388Z","first_published":"2026-11-05T12:06:38.708Z","brands":[],"dns":"resolved","resolved":["34.76.205.124"],"resolved_at":"2026-11-05T11:13:12Z","dns_checked_at":"2026-11-06T12:10:16.000Z","dns_since":"2026-11-05T12:09:46.000Z","findings":[{"id":"f4j7sp3lawvffucnh7wnk","kind":"reported_domain","summary":"Under coja.life, reported by PhishDestroy","first_observed":"2026-11-05T11:00:36.388Z","first_published":"2026-11-05T12:06:38.708Z","source":"phishdestroy","source_name":"PhishDestroy","under":"coja.life","source_url":"https://phishdestroy.io/domain/coja.life/"}],"url":"https://domainspoof.com/live?show=all&q=xrnd7f3qa.coja.life"},{"hostname":"ydd79xwu9hjik7w7.eitzalnf.fiyuqwnl.zawxnbgv.wzvtlhbj.ijdyvoge.gatewaylearning.ezgateway.net","first_observed":"2026-11-05T11:57:04.671Z","first_published":"2026-11-05T12:06:38.708Z","brands":[],"dns":"resolved","resolved":["15.204.116.29"],"resolved_at":"2026-11-05T12:10:14Z","dns_checked_at":"2026-11-06T12:10:16.000Z","dns_since":"2026-11-05T12:09:46.000Z","findings":[{"id":"frzssomc5lnnucc4cph4p","kind":"reported_domain","summary":"Under ezgateway.net, listed by USOM","first_observed":"2026-11-05T11:57:04.671Z","first_published":"2026-11-05T12:06:38.708Z","source":"usom","source_name":"USOM","under":"ezgateway.net"}],"url":"https://domainspoof.com/live?show=all&q=ydd79xwu9hjik7w7.eitzalnf.fiyuqwnl.zawxnbgv.wzvtlhbj.ijdyvoge.gatewaylearning.ezgateway.net"},{"hostname":"yengiriiz2026.com","first_observed":"2026-11-05T11:00:36.388Z","first_published":"2026-11-05T12:06:38.708Z","brands":[],"dns":"resolved","resolved":["104.21.63.58","172.67.143.220"],"resolved_at":"2026-11-05T11:13:12Z","dns_checked_at":"2026-11-06T12:10:16.000Z","dns_since":"2026-11-05T12:09:46.000Z","findings":[{"id":"fxo64a5skbvwltzhndfhk","kind":"reported_domain","summary":"Listed by USOM","first_observed":"2026-11-05T11:00:36.388Z","first_published":"2026-11-05T12:06:38.708Z","source":"usom","source_name":"USOM"}],"url":"https://domainspoof.com/live?show=all&q=yengiriiz2026.com"},{"hostname":"yottarock.com","first_observed":"2026-11-05T11:31:18.024Z","first_published":"2026-11-05T12:06:38.708Z","brands":[],"dns":"resolved","resolved":["104.21.33.65","172.67.159.71"],"resolved_at":"2026-11-05T11:40:17Z","dns_checked_at":"2026-11-06T12:10:16.000Z","dns_since":"2026-11-05T12:09:46.000Z","findings":[{"id":"fi2vj55mlrru2x7c4wxan","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T11:31:18.024Z","first_published":"2026-11-05T12:06:38.708Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=yottarock.com"},{"hostname":"zoom-com.top","first_observed":"2026-11-05T11:52:48.076Z","first_published":"2026-11-05T12:06:38.708Z","brands":[],"dns":"resolved","resolved":["66.29.148.152"],"resolved_at":"2026-11-05T11:53:44Z","dns_checked_at":"2026-11-06T12:10:16.000Z","dns_since":"2026-11-05T12:09:46.000Z","findings":[{"id":"fhvvk4nls6x56f65rkqht","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T11:52:48.076Z","first_published":"2026-11-05T12:06:38.708Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=zoom-com.top"},{"hostname":"acrobat.pl","first_observed":"2026-11-05T11:01:01.000Z","first_published":"2026-11-05T11:01:01.000Z","brands":[{"id":"adobe","name":"Adobe","url":"https://domainspoof.com/brands/adobe"}],"dns":"resolved","resolved":["185.253.212.22"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of acrobat.com (same name, other ending), resolved to 185.253.212.22, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T11:01:01.000Z","first_published":"2026-11-05T11:01:01.000Z","of":"acrobat.com","spelling":"tld","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"185.253.212.22","flagged_at":"2026-11-05T11:01:01Z"}]}],"url":"https://domainspoof.com/brands/adobe"},{"hostname":"gls-group.store","first_observed":"2026-11-05T11:01:01.000Z","first_published":"2026-11-05T11:01:01.000Z","brands":[{"id":"gls","name":"GLS","url":"https://domainspoof.com/brands/gls"}],"dns":"resolved","resolved":["49.51.141.35"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of gls-group.com (same name, other ending), resolved to 49.51.141.35, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T11:01:01.000Z","first_published":"2026-11-05T11:01:01.000Z","of":"gls-group.com","spelling":"tld","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"49.51.141.35","flagged_at":"2026-11-05T11:01:01Z"}]}],"url":"https://domainspoof.com/brands/gls"},{"hostname":"nexi.finance","first_observed":"2026-11-05T11:01:01.000Z","first_published":"2026-11-05T11:01:01.000Z","brands":[{"id":"nexi","name":"Nexi","url":"https://domainspoof.com/brands/nexi"}],"dns":"resolved","resolved":["195.110.124.133"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of nexi.it (same name, other ending), resolved to 195.110.124.133, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T11:01:01.000Z","first_published":"2026-11-05T11:01:01.000Z","of":"nexi.it","spelling":"tld","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"195.110.124.133","flagged_at":"2026-11-05T11:01:01Z"}]}],"url":"https://domainspoof.com/brands/nexi"},{"hostname":"nikeoutlet.org","first_observed":"2026-11-05T11:01:01.000Z","first_published":"2026-11-05T11:01:01.000Z","brands":[{"id":"nike","name":"Nike","url":"https://domainspoof.com/brands/nike"}],"dns":"resolved","resolved":["185.27.134.153"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “nike”, a name we match for Nike, resolved to 185.27.134.153, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T11:01:01.000Z","first_published":"2026-11-05T11:01:01.000Z","of":"nike.com","spelling":"combo","match":"name","token":"nike","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"185.27.134.153","flagged_at":"2026-11-05T11:01:01Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/nike"},{"hostname":"polymarket.net.pl","first_observed":"2026-11-05T11:01:01.000Z","first_published":"2026-11-05T11:01:01.000Z","brands":[{"id":"polymarket","name":"Polymarket","url":"https://domainspoof.com/brands/polymarket"}],"dns":"no_address","resolved":[],"findings":[{"kind":"lookalike","summary":"Registered lookalike of polymarket.com (same name, other ending), listed by MetaMask, and reported by PhishDestroy","first_observed":"2026-11-05T11:01:01.000Z","first_published":"2026-11-05T11:01:01.000Z","of":"polymarket.com","spelling":"tld","found_by":"dns_sweep","listings":[{"kind":"reported","source":"metamask","source_name":"MetaMask","host":"polymarket.net.pl","flagged_at":"2026-11-05T11:01:01Z"},{"kind":"reported","source":"phishdestroy","source_name":"PhishDestroy","host":"polymarket.net.pl","flagged_at":"2026-11-05T11:01:01Z"}]}],"url":"https://domainspoof.com/brands/polymarket"},{"hostname":"autostrade-it.xyz","first_observed":"2026-10-29T14:06:36.178Z","first_published":"2026-11-05T11:00:21.203Z","brands":[{"id":"autostrade-per-l-italia","name":"Autostrade per l'Italia","url":"https://domainspoof.com/brands/autostrade-per-l-italia"}],"dns":"resolved","resolved":["43.165.5.116"],"resolved_at":"2026-11-06T11:09:11Z","dns_checked_at":"2026-11-06T11:09:11.000Z","dns_since":"2026-11-05T11:08:54.000Z","findings":[{"id":"favv2kw23ks6nmir47osj","kind":"phishing_infrastructure","summary":"Resolved to 43.165.5.116, where reported phishing was found in the 48 hours before","first_observed":"2026-10-29T14:06:36.178Z","first_published":"2026-11-05T11:00:21.203Z","address":"43.165.5.116","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"},{"kind":"lookalike","summary":"Registered domain containing “autostrade”, a name we match for Autostrade per l'Italia, resolved to 43.165.5.116, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T23:31:07.000Z","first_published":"2026-11-05T23:31:07.000Z","of":"autostrade.it","spelling":"combo","match":"name","token":"autostrade","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"43.165.5.116","flagged_at":"2026-11-05T23:31:07Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/autostrade-per-l-italia"},{"hostname":"pagopa.xyz","first_observed":"2026-10-30T11:16:04.804Z","first_published":"2026-11-05T11:00:21.203Z","brands":[{"id":"pagopa","name":"PagoPA","url":"https://domainspoof.com/brands/pagopa"}],"dns":"resolved","resolved":["43.165.5.116"],"resolved_at":"2026-11-06T11:09:12Z","dns_checked_at":"2026-11-06T11:09:12.000Z","dns_since":"2026-11-05T11:08:55.000Z","findings":[{"id":"fic5euhpnbtj67qxf3ctk","kind":"phishing_infrastructure","summary":"Resolved to 43.165.5.116, where reported phishing was found in the 48 hours before","first_observed":"2026-10-30T11:16:04.804Z","first_published":"2026-11-05T11:00:21.203Z","address":"43.165.5.116","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"},{"kind":"lookalike","summary":"Registered lookalike of pagopa.gov.it (same name, other ending), resolved to 43.165.5.116, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T11:01:01.000Z","first_published":"2026-11-05T11:01:01.000Z","of":"pagopa.gov.it","spelling":"tld","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"43.165.5.116","flagged_at":"2026-11-05T11:01:01Z"}]}],"url":"https://domainspoof.com/brands/pagopa"},{"hostname":"1-governance-zama.pages.dev","first_observed":"2026-11-05T10:41:23.987Z","first_published":"2026-11-05T11:00:02.717Z","brands":[],"dns":"not_found","resolved":["172.66.44.54","172.66.47.202"],"resolved_at":"2026-11-05T10:41:34Z","dns_checked_at":"2026-11-06T11:09:10.000Z","dns_since":"2026-11-05T11:08:54.000Z","findings":[{"id":"friabksuq2qtyn55uikw3","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T10:41:23.987Z","first_published":"2026-11-05T11:00:02.717Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=1-governance-zama.pages.dev"},{"hostname":"1258perabet.com","first_observed":"2026-11-05T10:05:40.883Z","first_published":"2026-11-05T11:00:02.717Z","brands":[],"dns":"resolved","resolved":["104.21.80.33","172.67.173.170"],"resolved_at":"2026-11-05T10:05:49Z","dns_checked_at":"2026-11-06T11:09:10.000Z","dns_since":"2026-11-05T11:08:54.000Z","findings":[{"id":"fuasqqx77ttsfvdgccfch","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T10:05:40.883Z","first_published":"2026-11-05T11:00:02.717Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/1258perabet.com/"}],"url":"https://domainspoof.com/live?show=all&q=1258perabet.com"},{"hostname":"17.8y1y.com","first_observed":"2026-11-05T10:05:40.883Z","first_published":"2026-11-05T11:00:02.717Z","brands":[],"dns":"resolved","resolved":["103.224.212.101"],"resolved_at":"2026-11-05T10:05:49Z","dns_checked_at":"2026-11-06T11:09:10.000Z","dns_since":"2026-11-05T11:08:54.000Z","findings":[{"id":"fvxwkwyiq2uw5ex6pcqar","kind":"reported_domain","summary":"Under 8y1y.com, listed by MetaMask","first_observed":"2026-11-05T10:05:40.883Z","first_published":"2026-11-05T11:00:02.717Z","source":"metamask","source_name":"MetaMask","under":"8y1y.com"}],"url":"https://domainspoof.com/live?show=all&q=17.8y1y.com"},{"hostname":"2-governance-zama.pages.dev","first_observed":"2026-11-05T10:46:36.104Z","first_published":"2026-11-05T11:00:02.717Z","brands":[],"dns":"not_found","resolved":["172.66.44.171","172.66.47.85"],"resolved_at":"2026-11-05T10:46:44Z","dns_checked_at":"2026-11-06T11:09:10.000Z","dns_since":"2026-11-05T11:08:54.000Z","findings":[{"id":"frwnv27zxtapsw5poxgqq","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T10:46:36.104Z","first_published":"2026-11-05T11:00:02.717Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=2-governance-zama.pages.dev"},{"hostname":"282845-coinspot.com","first_observed":"2026-11-05T10:36:17.594Z","first_published":"2026-11-05T11:00:02.717Z","brands":[{"id":"coinspot","name":"CoinSpot","url":"https://domainspoof.com/brands/coinspot"}],"dns":"resolved","resolved":["104.21.27.144","172.67.142.237","2606:4700:3034::ac43:8eed","2606:4700:3035::6815:1b90"],"resolved_at":"2026-11-05T10:36:21Z","dns_checked_at":"2026-11-06T11:09:10.000Z","dns_since":"2026-11-05T11:08:54.000Z","findings":[{"id":"fm7xgrwjinbit3ieevnna","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T10:36:17.594Z","first_published":"2026-11-05T11:00:02.717Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/brands/coinspot"},{"hostname":"3-governance-zama.pages.dev","first_observed":"2026-11-05T10:51:45.629Z","first_published":"2026-11-05T11:00:02.717Z","brands":[],"dns":"not_found","resolved":["172.66.44.220","172.66.47.36"],"resolved_at":"2026-11-05T10:54:21Z","dns_checked_at":"2026-11-06T11:09:10.000Z","dns_since":"2026-11-05T11:08:54.000Z","findings":[{"id":"f2prwf2pnkd4o6lfx2idv","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T10:51:45.629Z","first_published":"2026-11-05T11:00:02.717Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=3-governance-zama.pages.dev"},{"hostname":"40-governance-orbio.pages.dev","first_observed":"2026-11-05T09:46:00.953Z","first_published":"2026-11-05T11:00:02.717Z","brands":[],"dns":"not_found","resolved":["172.66.44.90","172.66.47.166"],"resolved_at":"2026-11-05T09:46:11Z","dns_checked_at":"2026-11-06T11:09:11.000Z","dns_since":"2026-11-05T11:08:54.000Z","findings":[{"id":"fkdn6hdptgzae7eltafki","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T09:46:00.953Z","first_published":"2026-11-05T11:00:02.717Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=40-governance-orbio.pages.dev"},{"hostname":"41-governance-orbio.pages.dev","first_observed":"2026-11-05T09:51:13.601Z","first_published":"2026-11-05T11:00:02.717Z","brands":[],"dns":"not_found","resolved":["172.66.44.110","172.66.47.146"],"resolved_at":"2026-11-05T09:51:22Z","dns_checked_at":"2026-11-06T11:09:11.000Z","dns_since":"2026-11-05T11:08:54.000Z","findings":[{"id":"fifiuczyaxms5isvtiuou","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T09:51:13.601Z","first_published":"2026-11-05T11:00:02.717Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=41-governance-orbio.pages.dev"},{"hostname":"42-governance-orbio.pages.dev","first_observed":"2026-11-05T09:56:24.566Z","first_published":"2026-11-05T11:00:02.717Z","brands":[],"dns":"not_found","resolved":["172.66.44.204","172.66.47.52"],"resolved_at":"2026-11-05T09:56:32Z","dns_checked_at":"2026-11-06T11:09:11.000Z","dns_since":"2026-11-05T11:08:54.000Z","findings":[{"id":"fyy6smp3njfj6sahsnqfm","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T09:56:24.566Z","first_published":"2026-11-05T11:00:02.717Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=42-governance-orbio.pages.dev"},{"hostname":"43-governance-orbio.pages.dev","first_observed":"2026-11-05T10:00:34.574Z","first_published":"2026-11-05T11:00:02.717Z","brands":[],"dns":"not_found","resolved":["172.66.45.13","172.66.46.243"],"resolved_at":"2026-11-05T10:00:39Z","dns_checked_at":"2026-11-06T11:09:11.000Z","dns_since":"2026-11-05T11:08:54.000Z","findings":[{"id":"fyb6nnzoqjhhbfgwxvmk3","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T10:00:34.574Z","first_published":"2026-11-05T11:00:02.717Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=43-governance-orbio.pages.dev"},{"hostname":"6r15-3aoj4h-wdhw7t-a3b-0dn.pages.dev","first_observed":"2026-11-05T10:31:06.562Z","first_published":"2026-11-05T11:00:02.717Z","brands":[],"dns":"resolved","resolved":["172.66.44.123","172.66.47.133"],"resolved_at":"2026-11-05T10:31:15Z","dns_checked_at":"2026-11-06T11:09:11.000Z","dns_since":"2026-11-05T11:08:54.000Z","findings":[{"id":"fhthitjmd4l4af3atjbci","kind":"reported_domain","summary":"Reported by PhishTank","first_observed":"2026-11-05T10:31:06.562Z","first_published":"2026-11-05T11:00:02.717Z","source":"phishtank","source_name":"PhishTank","source_url":"https://phishtank.org/phish_detail.php?phish_id=9479278"}],"url":"https://domainspoof.com/live?show=all&q=6r15-3aoj4h-wdhw7t-a3b-0dn.pages.dev"},{"hostname":"8y1y.com","first_observed":"2026-11-05T10:05:40.883Z","first_published":"2026-11-05T11:00:02.717Z","brands":[],"dns":"resolved","resolved":["103.224.212.101"],"resolved_at":"2026-11-05T10:14:27Z","dns_checked_at":"2026-11-06T11:09:11.000Z","dns_since":"2026-11-05T11:08:54.000Z","findings":[{"id":"f6kfdnqkihod5tijhw6cf","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T10:05:40.883Z","first_published":"2026-11-05T11:00:02.717Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=8y1y.com"},{"hostname":"9gi5jvhbjhmlm.xn--trustwallt-76a.com","first_observed":"2026-11-05T10:31:06.562Z","first_published":"2026-11-05T11:00:02.717Z","brands":[],"dns":"resolved","resolved":["185.53.179.136"],"resolved_at":"2026-11-05T10:37:36Z","dns_checked_at":"2026-11-06T11:09:11.000Z","dns_since":"2026-11-05T11:08:54.000Z","findings":[{"id":"fp2uubk65sdv46b2dyt7i","kind":"reported_domain","summary":"Under xn--trustwallt-76a.com, listed by MetaMask","first_observed":"2026-11-05T10:31:06.562Z","first_published":"2026-11-05T11:00:02.717Z","source":"metamask","source_name":"MetaMask","under":"xn--trustwallt-76a.com"}],"url":"https://domainspoof.com/live?show=all&q=9gi5jvhbjhmlm.xn--trustwallt-76a.com"},{"hostname":"admin.login-cashapp.com","first_observed":"2026-11-05T10:00:30.680Z","first_published":"2026-11-05T11:00:02.717Z","brands":[{"id":"cash-app","name":"Cash App","url":"https://domainspoof.com/brands/cash-app"}],"dns":"resolved","resolved":["198.251.89.161"],"resolved_at":"2026-11-06T11:09:11Z","dns_checked_at":"2026-11-06T11:09:11.000Z","dns_since":"2026-11-05T11:08:54.000Z","findings":[{"id":"fmpmwzosluamh7hcsiwzl","kind":"phishing_infrastructure","summary":"Resolved to 198.251.89.161, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T10:00:30.680Z","first_published":"2026-11-05T11:00:02.717Z","address":"198.251.89.161","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/cash-app"},{"hostname":"aequitaspeak.com","first_observed":"2026-11-05T10:46:36.104Z","first_published":"2026-11-05T11:00:02.717Z","brands":[],"dns":"resolved","resolved":["104.21.94.114","172.67.222.191"],"resolved_at":"2026-11-05T10:46:49Z","dns_checked_at":"2026-11-06T11:09:11.000Z","dns_since":"2026-11-05T11:08:54.000Z","findings":[{"id":"fvdawghjkzw7bbbxjnimr","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T10:46:36.104Z","first_published":"2026-11-05T11:00:02.717Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=aequitaspeak.com"},{"hostname":"afterpay-account.com","first_observed":"2026-11-05T09:47:42.720Z","first_published":"2026-11-05T11:00:02.717Z","brands":[],"dns":"not_found","resolved":["101.1.16.12"],"resolved_at":"2026-11-05T09:54:02Z","dns_checked_at":"2026-11-06T15:10:37.000Z","findings":[{"id":"fw6ndt2hmvad3iiiy6csy","kind":"reported_domain","summary":"Reported by PhishTank","first_observed":"2026-11-05T09:47:42.720Z","first_published":"2026-11-05T11:00:02.717Z","source":"phishtank","source_name":"PhishTank","source_url":"https://phishtank.org/phish_detail.php?phish_id=9555187"}],"url":"https://domainspoof.com/live?show=all&q=afterpay-account.com"},{"hostname":"agencypads.xyz","first_observed":"2026-11-05T10:41:23.987Z","first_published":"2026-11-05T11:00:02.717Z","brands":[],"dns":"resolved","resolved":["104.21.84.44","172.67.186.61"],"resolved_at":"2026-11-05T10:41:38Z","dns_checked_at":"2026-11-06T11:09:11.000Z","dns_since":"2026-11-05T11:08:54.000Z","findings":[{"id":"fmtjeqmlnj4bk5a4r7rxg","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T10:41:23.987Z","first_published":"2026-11-05T11:00:02.717Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=agencypads.xyz"},{"hostname":"ai.wwwbyte.cn","first_observed":"2026-11-05T10:26:24.168Z","first_published":"2026-11-05T11:00:02.717Z","brands":[],"dns":"resolved","resolved":["8.148.27.141"],"resolved_at":"2026-11-05T10:26:38Z","dns_checked_at":"2026-11-06T11:09:11.000Z","dns_since":"2026-11-05T11:08:54.000Z","findings":[{"id":"fgw25yzwy5nzhj4prgx5d","kind":"reported_domain","summary":"Under wwwbyte.cn, listed by MetaMask","first_observed":"2026-11-05T10:26:24.168Z","first_published":"2026-11-05T11:00:02.717Z","source":"metamask","source_name":"MetaMask","under":"wwwbyte.cn"}],"url":"https://domainspoof.com/live?show=all&q=ai.wwwbyte.cn"},{"hostname":"allegro.kirill.icu","first_observed":"2026-11-05T09:47:42.720Z","first_published":"2026-11-05T11:00:02.717Z","brands":[{"id":"allegro","name":"Allegro","url":"https://domainspoof.com/brands/allegro"}],"dns":"not_found","resolved":["79.184.176.16"],"resolved_at":"2026-11-05T09:54:02Z","dns_checked_at":"2026-11-06T11:09:11.000Z","dns_since":"2026-11-05T11:08:54.000Z","findings":[{"id":"fbpio4pmbpuk52ge3qme2","kind":"reported_domain","summary":"Reported by PhishTank as imitating Allegro","first_observed":"2026-11-05T09:47:42.720Z","first_published":"2026-11-05T11:00:02.717Z","source":"phishtank","source_name":"PhishTank","claim":{"brand":"Allegro"},"source_url":"https://phishtank.org/phish_detail.php?phish_id=9554966"}],"url":"https://domainspoof.com/brands/allegro"},{"hostname":"alokathepeacedog.world","first_observed":"2026-11-05T10:36:17.594Z","first_published":"2026-11-05T11:00:02.717Z","brands":[],"dns":"resolved","resolved":["216.150.1.1"],"resolved_at":"2026-11-05T10:44:50Z","dns_checked_at":"2026-11-06T11:09:11.000Z","dns_since":"2026-11-05T11:08:54.000Z","findings":[{"id":"fmei5jwz4nrof373siwbt","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T10:36:17.594Z","first_published":"2026-11-05T11:00:02.717Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/alokathepeacedog.world/"}],"url":"https://domainspoof.com/live?show=all&q=alokathepeacedog.world"},{"hostname":"amlsystem.org","first_observed":"2026-11-05T10:46:36.104Z","first_published":"2026-11-05T11:00:02.717Z","brands":[],"dns":"resolved","resolved":["104.21.61.154","172.67.211.136"],"resolved_at":"2026-11-05T10:46:49Z","dns_checked_at":"2026-11-06T11:09:11.000Z","dns_since":"2026-11-05T11:08:54.000Z","findings":[{"id":"frlh7qr4d4e6bns2scs4z","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T10:46:36.104Z","first_published":"2026-11-05T11:00:02.717Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/amlsystem.org/"}],"url":"https://domainspoof.com/live?show=all&q=amlsystem.org"},{"hostname":"anlikbakis.net","first_observed":"2026-11-05T09:51:13.601Z","first_published":"2026-11-05T11:00:02.717Z","brands":[],"dns":"resolved","resolved":["104.21.80.53","172.67.174.92"],"resolved_at":"2026-11-05T10:00:31Z","dns_checked_at":"2026-11-06T11:09:11.000Z","dns_since":"2026-11-05T11:08:54.000Z","findings":[{"id":"f7rminccwciokgw3nt4ac","kind":"reported_domain","summary":"Listed by USOM","first_observed":"2026-11-05T09:51:13.601Z","first_published":"2026-11-05T11:00:02.717Z","source":"usom","source_name":"USOM"}],"url":"https://domainspoof.com/live?show=all&q=anlikbakis.net"},{"hostname":"anlikhavale.site","first_observed":"2026-11-05T10:16:02.124Z","first_published":"2026-11-05T11:00:02.717Z","brands":[],"dns":"resolved","resolved":["104.21.38.233","172.67.140.197"],"resolved_at":"2026-11-06T03:14:03Z","dns_checked_at":"2026-11-06T11:09:11.000Z","dns_since":"2026-11-05T11:08:54.000Z","findings":[{"id":"f2qkp4ubrcab3jm33qb6j","kind":"reported_domain","summary":"Listed by USOM","first_observed":"2026-11-05T10:16:02.124Z","first_published":"2026-11-05T11:00:02.717Z","source":"usom","source_name":"USOM"}],"url":"https://domainspoof.com/live?show=all&q=anlikhavale.site"},{"hostname":"api-htx.com.cn","first_observed":"2026-11-05T09:56:24.566Z","first_published":"2026-11-05T11:00:02.717Z","brands":[],"dns":"resolved","resolved":["104.21.21.158","172.67.199.87"],"resolved_at":"2026-11-05T10:08:08Z","dns_checked_at":"2026-11-06T11:09:11.000Z","dns_since":"2026-11-05T11:08:54.000Z","findings":[{"id":"fa5ogrv5in2maogoy55p5","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T09:56:24.566Z","first_published":"2026-11-05T11:00:02.717Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=api-htx.com.cn"},{"hostname":"api.check.alpha-aml.com","first_observed":"2026-11-05T10:16:02.124Z","first_published":"2026-11-05T11:00:02.717Z","brands":[],"dns":"resolved","resolved":["46.225.134.140"],"resolved_at":"2026-11-05T10:20:15Z","dns_checked_at":"2026-11-06T11:09:11.000Z","dns_since":"2026-11-05T11:08:54.000Z","findings":[{"id":"f7kthvnpomldmf3kl53uf","kind":"reported_domain","summary":"Under alpha-aml.com, reported by PhishDestroy","first_observed":"2026-11-05T10:16:02.124Z","first_published":"2026-11-05T11:00:02.717Z","source":"phishdestroy","source_name":"PhishDestroy","under":"alpha-aml.com","source_url":"https://phishdestroy.io/domain/alpha-aml.com/"}],"url":"https://domainspoof.com/live?show=all&q=api.check.alpha-aml.com"},{"hostname":"app.alpha-aml.com","first_observed":"2026-11-05T10:21:11.832Z","first_published":"2026-11-05T11:00:02.717Z","brands":[],"dns":"resolved","resolved":["104.21.30.139","172.67.172.248"],"resolved_at":"2026-11-05T10:24:41Z","dns_checked_at":"2026-11-06T11:09:11.000Z","dns_since":"2026-11-05T11:08:54.000Z","findings":[{"id":"fcguxvaghougomuyhmzyq","kind":"reported_domain","summary":"Under alpha-aml.com, reported by PhishDestroy","first_observed":"2026-11-05T10:21:11.832Z","first_published":"2026-11-05T11:00:02.717Z","source":"phishdestroy","source_name":"PhishDestroy","under":"alpha-aml.com","source_url":"https://phishdestroy.io/domain/alpha-aml.com/"}],"url":"https://domainspoof.com/live?show=all&q=app.alpha-aml.com"},{"hostname":"arbitrage-enginepro.com","first_observed":"2026-11-05T10:16:02.124Z","first_published":"2026-11-05T11:00:02.717Z","brands":[],"dns":"resolved","resolved":["185.62.56.63"],"resolved_at":"2026-11-05T10:20:15Z","dns_checked_at":"2026-11-06T11:09:11.000Z","dns_since":"2026-11-05T11:08:54.000Z","findings":[{"id":"fchwitc3w4bz53o7aaehx","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T10:16:02.124Z","first_published":"2026-11-05T11:00:02.717Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=arbitrage-enginepro.com"},{"hostname":"arbswap.trading","first_observed":"2026-11-05T10:36:17.594Z","first_published":"2026-11-05T11:00:02.717Z","brands":[],"dns":"resolved","resolved":["104.21.17.217","172.67.178.87"],"resolved_at":"2026-11-05T10:44:50Z","dns_checked_at":"2026-11-06T11:09:11.000Z","dns_since":"2026-11-05T11:08:54.000Z","findings":[{"id":"f272q5iqpibfbz2zkb3vi","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T10:36:17.594Z","first_published":"2026-11-05T11:00:02.717Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=arbswap.trading"},{"hostname":"aresmanagement.apps.cloudflafe.net","first_observed":"2026-11-05T10:10:52.552Z","first_published":"2026-11-05T11:00:02.717Z","brands":[],"dns":"resolved","resolved":["45.10.243.43"],"resolved_at":"2026-11-05T10:11:03Z","dns_checked_at":"2026-11-06T11:09:11.000Z","dns_since":"2026-11-05T11:08:54.000Z","findings":[{"id":"ffiv7brzoz3tpwa2ifqdw","kind":"reported_domain","summary":"Under cloudflafe.net, listed by MetaMask","first_observed":"2026-11-05T10:10:52.552Z","first_published":"2026-11-05T11:00:02.717Z","source":"metamask","source_name":"MetaMask","under":"cloudflafe.net"}],"url":"https://domainspoof.com/live?show=all&q=aresmanagement.apps.cloudflafe.net"},{"hostname":"arztasmtwas.com","first_observed":"2026-11-05T09:45:22.347Z","first_published":"2026-11-05T11:00:02.717Z","brands":[],"dns":"not_found","resolved":["45.13.237.71"],"resolved_at":"2026-11-05T09:54:02Z","dns_checked_at":"2026-11-06T15:10:37.000Z","findings":[{"id":"f45pzxpaigebg5iitwsga","kind":"reported_domain","summary":"Listed by USOM","first_observed":"2026-11-05T09:45:22.347Z","first_published":"2026-11-05T11:00:02.717Z","source":"usom","source_name":"USOM"}],"url":"https://domainspoof.com/live?show=all&q=arztasmtwas.com"},{"hostname":"asset-account.org","first_observed":"2026-11-05T10:36:17.594Z","first_published":"2026-11-05T11:00:02.717Z","brands":[],"dns":"resolved","resolved":["104.21.81.139","172.67.189.159"],"resolved_at":"2026-11-05T10:44:51Z","dns_checked_at":"2026-11-06T11:09:11.000Z","dns_since":"2026-11-05T11:08:54.000Z","findings":[{"id":"fk3zh6hm2zt7khyrwdedp","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T10:36:17.594Z","first_published":"2026-11-05T11:00:02.717Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=asset-account.org"},{"hostname":"assurmaladie-sante.com","first_observed":"2026-11-05T09:47:42.720Z","first_published":"2026-11-05T11:00:02.717Z","brands":[],"dns":"resolved","resolved":["101.1.16.10"],"resolved_at":"2026-11-05T09:54:02Z","dns_checked_at":"2026-11-06T11:09:11.000Z","dns_since":"2026-11-05T11:08:54.000Z","findings":[{"id":"fuom5poj2chvo3hlmxhi5","kind":"reported_domain","summary":"Reported by PhishTank","first_observed":"2026-11-05T09:47:42.720Z","first_published":"2026-11-05T11:00:02.717Z","source":"phishtank","source_name":"PhishTank","source_url":"https://phishtank.org/phish_detail.php?phish_id=9555163"}],"url":"https://domainspoof.com/live?show=all&q=assurmaladie-sante.com"},{"hostname":"atlaxchazebanking.com","first_observed":"2026-11-05T10:36:17.594Z","first_published":"2026-11-05T11:00:02.717Z","brands":[],"dns":"resolved","resolved":["104.21.45.142","172.67.215.49"],"resolved_at":"2026-11-05T10:44:51Z","dns_checked_at":"2026-11-06T11:09:11.000Z","dns_since":"2026-11-05T11:08:54.000Z","findings":[{"id":"fsbrfxd4nlrmkdhebvs2l","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T10:36:17.594Z","first_published":"2026-11-05T11:00:02.717Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/atlaxchazebanking.com/"}],"url":"https://domainspoof.com/live?show=all&q=atlaxchazebanking.com"},{"hostname":"auctorarc.com","first_observed":"2026-11-05T10:51:45.629Z","first_published":"2026-11-05T11:00:02.717Z","brands":[],"dns":"resolved","resolved":["104.21.65.148","172.67.164.28"],"resolved_at":"2026-11-05T10:54:28Z","dns_checked_at":"2026-11-06T11:09:11.000Z","dns_since":"2026-11-05T11:08:54.000Z","findings":[{"id":"fnwkrurgxpkan7q4tuck7","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T10:51:45.629Z","first_published":"2026-11-05T11:00:02.717Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=auctorarc.com"},{"hostname":"auctornex.com","first_observed":"2026-11-05T10:51:45.629Z","first_published":"2026-11-05T11:00:02.717Z","brands":[],"dns":"resolved","resolved":["104.21.73.228","172.67.167.95"],"resolved_at":"2026-11-05T10:54:28Z","dns_checked_at":"2026-11-06T11:09:11.000Z","dns_since":"2026-11-05T11:08:54.000Z","findings":[{"id":"fpdwxeaodtlbqspkruyh6","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T10:51:45.629Z","first_published":"2026-11-05T11:00:02.717Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=auctornex.com"},{"hostname":"auctuscore.com","first_observed":"2026-11-05T10:51:45.629Z","first_published":"2026-11-05T11:00:02.717Z","brands":[],"dns":"resolved","resolved":["104.21.47.242","172.67.174.141"],"resolved_at":"2026-11-05T10:54:28Z","dns_checked_at":"2026-11-06T11:09:11.000Z","dns_since":"2026-11-05T11:08:54.000Z","findings":[{"id":"fv2sogt5s3tpeint3qnyc","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T10:51:45.629Z","first_published":"2026-11-05T11:00:02.717Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=auctuscore.com"},{"hostname":"autoconfig.atlaxchazebanking.com","first_observed":"2026-11-05T10:36:17.594Z","first_published":"2026-11-05T11:00:02.717Z","brands":[],"dns":"resolved","resolved":["104.21.45.142","172.67.215.49"],"resolved_at":"2026-11-05T10:44:53Z","dns_checked_at":"2026-11-06T11:09:11.000Z","dns_since":"2026-11-05T11:08:54.000Z","findings":[{"id":"fvofn5h3gfrecbgdxly45","kind":"reported_domain","summary":"Under atlaxchazebanking.com, reported by PhishDestroy","first_observed":"2026-11-05T10:36:17.594Z","first_published":"2026-11-05T11:00:02.717Z","source":"phishdestroy","source_name":"PhishDestroy","under":"atlaxchazebanking.com","source_url":"https://phishdestroy.io/domain/atlaxchazebanking.com/"}],"url":"https://domainspoof.com/live?show=all&q=autoconfig.atlaxchazebanking.com"},{"hostname":"autoconfig.multicoin-invest.com","first_observed":"2026-11-05T10:26:24.168Z","first_published":"2026-11-05T11:00:02.717Z","brands":[],"dns":"resolved","resolved":["151.246.1.103"],"resolved_at":"2026-11-05T10:26:40Z","dns_checked_at":"2026-11-06T11:09:11.000Z","dns_since":"2026-11-05T11:08:54.000Z","findings":[{"id":"f7ywz7mpqqarsldthrgjf","kind":"reported_domain","summary":"Under multicoin-invest.com, reported by PhishDestroy","first_observed":"2026-11-05T10:26:24.168Z","first_published":"2026-11-05T11:00:02.717Z","source":"phishdestroy","source_name":"PhishDestroy","under":"multicoin-invest.com","source_url":"https://phishdestroy.io/domain/multicoin-invest.com/"}],"url":"https://domainspoof.com/live?show=all&q=autoconfig.multicoin-invest.com"},{"hostname":"autodiscover.atlaxchazebanking.com","first_observed":"2026-11-05T10:36:17.594Z","first_published":"2026-11-05T11:00:02.717Z","brands":[],"dns":"resolved","resolved":["104.21.45.142","172.67.215.49"],"resolved_at":"2026-11-05T10:44:53Z","dns_checked_at":"2026-11-06T11:09:11.000Z","dns_since":"2026-11-05T11:08:54.000Z","findings":[{"id":"flp25tcshkyolugi3szwb","kind":"reported_domain","summary":"Under atlaxchazebanking.com, reported by PhishDestroy","first_observed":"2026-11-05T10:36:17.594Z","first_published":"2026-11-05T11:00:02.717Z","source":"phishdestroy","source_name":"PhishDestroy","under":"atlaxchazebanking.com","source_url":"https://phishdestroy.io/domain/atlaxchazebanking.com/"}],"url":"https://domainspoof.com/live?show=all&q=autodiscover.atlaxchazebanking.com"},{"hostname":"autodiscover.geckotristate.com","first_observed":"2026-11-05T10:00:34.574Z","first_published":"2026-11-05T11:00:02.717Z","brands":[],"dns":"resolved","resolved":["68.66.226.89"],"resolved_at":"2026-11-05T10:00:43Z","dns_checked_at":"2026-11-06T11:09:11.000Z","dns_since":"2026-11-05T11:08:54.000Z","findings":[{"id":"faiezxhlntjqu2tgzhyam","kind":"reported_domain","summary":"Under geckotristate.com, reported by PhishDestroy","first_observed":"2026-11-05T10:00:34.574Z","first_published":"2026-11-05T11:00:02.717Z","source":"phishdestroy","source_name":"PhishDestroy","under":"geckotristate.com","source_url":"https://phishdestroy.io/domain/geckotristate.com/"}],"url":"https://domainspoof.com/live?show=all&q=autodiscover.geckotristate.com"},{"hostname":"autodiscover.multicoin-invest.com","first_observed":"2026-11-05T10:26:24.168Z","first_published":"2026-11-05T11:00:02.717Z","brands":[],"dns":"resolved","resolved":["151.246.1.103"],"resolved_at":"2026-11-05T10:26:40Z","dns_checked_at":"2026-11-06T11:09:11.000Z","dns_since":"2026-11-05T11:08:54.000Z","findings":[{"id":"ffzdlrwcm5irmuskiu5qd","kind":"reported_domain","summary":"Under multicoin-invest.com, reported by PhishDestroy","first_observed":"2026-11-05T10:26:24.168Z","first_published":"2026-11-05T11:00:02.717Z","source":"phishdestroy","source_name":"PhishDestroy","under":"multicoin-invest.com","source_url":"https://phishdestroy.io/domain/multicoin-invest.com/"}],"url":"https://domainspoof.com/live?show=all&q=autodiscover.multicoin-invest.com"},{"hostname":"avproks.digital","first_observed":"2026-11-05T10:00:34.574Z","first_published":"2026-11-05T11:00:02.717Z","brands":[],"dns":"resolved","resolved":["104.21.63.154","172.67.147.36"],"resolved_at":"2026-11-05T10:00:43Z","dns_checked_at":"2026-11-06T11:09:11.000Z","dns_since":"2026-11-05T11:08:54.000Z","findings":[{"id":"frf5wtm4o7jpkg72r52ik","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T10:00:34.574Z","first_published":"2026-11-05T11:00:02.717Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=avproks.digital"},{"hostname":"barvico.online","first_observed":"2026-11-05T10:10:52.552Z","first_published":"2026-11-05T11:00:02.717Z","brands":[],"dns":"resolved","resolved":["104.21.11.25","172.67.165.19"],"resolved_at":"2026-11-05T10:11:13Z","dns_checked_at":"2026-11-06T11:09:11.000Z","dns_since":"2026-11-05T11:08:54.000Z","findings":[{"id":"fgzqjhcowpqkjfzc67oij","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T10:10:52.552Z","first_published":"2026-11-05T11:00:02.717Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/barvico.online/"}],"url":"https://domainspoof.com/live?show=all&q=barvico.online"},{"hostname":"bbxfruyy.suncoastb.dev","first_observed":"2026-11-05T10:46:36.104Z","first_published":"2026-11-05T11:00:02.717Z","brands":[],"dns":"resolved","resolved":["185.53.179.136"],"resolved_at":"2026-11-05T10:49:53Z","dns_checked_at":"2026-11-06T11:09:11.000Z","dns_since":"2026-11-05T11:08:54.000Z","findings":[{"id":"fhifhxybd456ve22e6lk6","kind":"reported_domain","summary":"Under suncoastb.dev, listed by MetaMask","first_observed":"2026-11-05T10:46:36.104Z","first_published":"2026-11-05T11:00:02.717Z","source":"metamask","source_name":"MetaMask","under":"suncoastb.dev"}],"url":"https://domainspoof.com/live?show=all&q=bbxfruyy.suncoastb.dev"},{"hostname":"bigbasket.pk","first_observed":"2026-11-05T09:46:00.953Z","first_published":"2026-11-05T11:00:02.717Z","brands":[],"dns":"resolved","resolved":["77.37.53.161","77.37.83.14"],"resolved_at":"2026-11-05T09:46:41Z","dns_checked_at":"2026-11-06T11:09:11.000Z","dns_since":"2026-11-05T11:08:54.000Z","findings":[{"id":"fwwuv6pl2jttwag75ukrm","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T09:46:00.953Z","first_published":"2026-11-05T11:00:02.717Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/bigbasket.pk/"}],"url":"https://domainspoof.com/live?show=all&q=bigbasket.pk"},{"hostname":"bintfdk.com","first_observed":"2026-11-05T10:00:34.574Z","first_published":"2026-11-05T11:00:02.717Z","brands":[],"dns":"no_address","resolved":[],"resolved_at":"2026-11-05T10:00:51Z","dns_checked_at":"2026-11-06T11:09:11.000Z","dns_since":"2026-11-05T11:08:54.000Z","findings":[{"id":"fxxw6dm6he4xqew6ua26i","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T10:00:34.574Z","first_published":"2026-11-05T11:00:02.717Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=bintfdk.com"},{"hostname":"bitcoinforcorporations.com","first_observed":"2026-11-05T10:31:06.562Z","first_published":"2026-11-05T11:00:02.717Z","brands":[],"dns":"resolved","resolved":["104.21.21.184","172.67.199.203"],"resolved_at":"2026-11-05T10:38:38Z","dns_checked_at":"2026-11-06T11:09:11.000Z","dns_since":"2026-11-05T11:08:54.000Z","findings":[{"id":"fgjtazpd4wuwoyrjulkuq","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T10:31:06.562Z","first_published":"2026-11-05T11:00:02.717Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/bitcoinforcorporations.com/"}],"url":"https://domainspoof.com/live?show=all&q=bitcoinforcorporations.com"},{"hostname":"bitrefill.com-cn01-esim-gift.com","first_observed":"2026-11-05T10:24:55.788Z","first_published":"2026-11-05T11:00:02.717Z","brands":[{"id":"bitrefill","name":"Bitrefill","url":"https://domainspoof.com/brands/bitrefill"}],"dns":"resolved","resolved":["62.60.226.39"],"resolved_at":"2026-11-06T11:09:11Z","dns_checked_at":"2026-11-06T11:09:11.000Z","dns_since":"2026-11-05T11:08:54.000Z","findings":[{"id":"fxjirkqmhao6cq3olxjcn","kind":"spamhaus_drop","summary":"Resolved to 62.60.226.39 on Spamhaus DROP","first_observed":"2026-11-05T10:24:55.788Z","first_published":"2026-11-05T11:00:02.717Z","address":"62.60.226.39","list":"spamhaus_drop","list_name":"Spamhaus DROP"}],"url":"https://domainspoof.com/brands/bitrefill"},{"hostname":"bitrgifts.com","first_observed":"2026-11-05T10:00:34.574Z","first_published":"2026-11-05T11:00:02.717Z","brands":[],"dns":"resolved","resolved":["62.60.226.163"],"resolved_at":"2026-11-05T10:00:51Z","dns_checked_at":"2026-11-06T11:09:11.000Z","dns_since":"2026-11-05T11:08:54.000Z","findings":[{"id":"f4fgitsz4x7qmvg2gsiqh","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T10:00:34.574Z","first_published":"2026-11-05T11:00:02.717Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=bitrgifts.com"},{"hostname":"bobqwgoi.internal-api.zenavlico.cyou","first_observed":"2026-11-05T10:46:36.104Z","first_published":"2026-11-05T11:00:02.717Z","brands":[],"dns":"resolved","resolved":["95.85.244.13"],"resolved_at":"2026-11-05T10:49:53Z","dns_checked_at":"2026-11-06T11:09:11.000Z","dns_since":"2026-11-05T11:08:54.000Z","findings":[{"id":"fqjm3fzfsgm5gzcggne22","kind":"reported_domain","summary":"Under zenavlico.cyou, listed by CERT Polska","first_observed":"2026-11-05T10:46:36.104Z","first_published":"2026-11-05T11:00:02.717Z","source":"cert_polska","source_name":"CERT Polska","under":"zenavlico.cyou"}],"url":"https://domainspoof.com/live?show=all&q=bobqwgoi.internal-api.zenavlico.cyou"},{"hostname":"botdeuac.internal-api.zenavlico.cyou","first_observed":"2026-11-05T10:46:36.104Z","first_published":"2026-11-05T11:00:02.717Z","brands":[],"dns":"resolved","resolved":["95.85.244.13"],"resolved_at":"2026-11-05T10:49:53Z","dns_checked_at":"2026-11-06T11:09:11.000Z","dns_since":"2026-11-05T11:08:54.000Z","findings":[{"id":"fbmwygxnbtlanhduax7m7","kind":"reported_domain","summary":"Under zenavlico.cyou, listed by CERT Polska","first_observed":"2026-11-05T10:46:36.104Z","first_published":"2026-11-05T11:00:02.717Z","source":"cert_polska","source_name":"CERT Polska","under":"zenavlico.cyou"}],"url":"https://domainspoof.com/live?show=all&q=botdeuac.internal-api.zenavlico.cyou"},{"hostname":"bromley-wilson-secureaccess.com","first_observed":"2026-11-05T10:31:06.562Z","first_published":"2026-11-05T11:00:02.717Z","brands":[],"dns":"resolved","resolved":["38.46.220.132"],"resolved_at":"2026-11-05T10:38:38Z","dns_checked_at":"2026-11-06T11:09:11.000Z","dns_since":"2026-11-05T11:08:54.000Z","findings":[{"id":"f6cixel7gkfutd3wv43kp","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T10:31:06.562Z","first_published":"2026-11-05T11:00:02.717Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/bromley-wilson-secureaccess.com/"}],"url":"https://domainspoof.com/live?show=all&q=bromley-wilson-secureaccess.com"},{"hostname":"brulvaxen.org","first_observed":"2026-11-05T10:16:02.124Z","first_published":"2026-11-05T11:00:02.717Z","brands":[],"dns":"resolved","resolved":["104.21.48.137","172.67.152.39"],"resolved_at":"2026-11-05T10:20:42Z","dns_checked_at":"2026-11-06T11:09:11.000Z","dns_since":"2026-11-05T11:08:54.000Z","findings":[{"id":"fsbenx6vvce4nijbufsge","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T10:16:02.124Z","first_published":"2026-11-05T11:00:02.717Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=brulvaxen.org"},{"hostname":"bugunburda.online","first_observed":"2026-11-05T09:46:00.953Z","first_published":"2026-11-05T11:00:02.717Z","brands":[],"dns":"resolved","resolved":["104.21.58.120","172.67.159.109"],"resolved_at":"2026-11-05T09:46:49Z","dns_checked_at":"2026-11-06T11:09:11.000Z","dns_since":"2026-11-05T11:08:54.000Z","findings":[{"id":"fq45y7ktke2h3ioa4tscb","kind":"reported_domain","summary":"Listed by USOM","first_observed":"2026-11-05T09:46:00.953Z","first_published":"2026-11-05T11:00:02.717Z","source":"usom","source_name":"USOM"}],"url":"https://domainspoof.com/live?show=all&q=bugunburda.online"},{"hostname":"burax.top","first_observed":"2026-11-05T10:00:34.574Z","first_published":"2026-11-05T11:00:02.717Z","brands":[],"dns":"resolved","resolved":["104.21.83.12","172.67.166.196"],"resolved_at":"2026-11-05T10:00:53Z","dns_checked_at":"2026-11-06T11:09:11.000Z","dns_since":"2026-11-05T11:08:54.000Z","findings":[{"id":"fskf775u3ozao5whlxt4k","kind":"reported_domain","summary":"Listed by MODA (one-page scam site)","first_observed":"2026-11-05T10:00:34.574Z","first_published":"2026-11-05T11:00:02.717Z","source":"moda","source_name":"MODA","claim":{"category":"one-page scam site"}}],"url":"https://domainspoof.com/live?show=all&q=burax.top"},{"hostname":"cgg-allocation.com","first_observed":"2026-11-05T09:51:13.601Z","first_published":"2026-11-05T11:00:02.717Z","brands":[],"dns":"resolved","resolved":["198.49.23.144","198.49.23.145","198.185.159.144","198.185.159.145"],"resolved_at":"2026-11-05T10:01:06Z","dns_checked_at":"2026-11-06T11:09:11.000Z","dns_since":"2026-11-05T11:08:54.000Z","findings":[{"id":"fuzsfoadeeiwvflfp43ud","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T09:51:13.601Z","first_published":"2026-11-05T11:00:02.717Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=cgg-allocation.com"},{"hostname":"citrea.digital","first_observed":"2026-11-05T10:16:02.124Z","first_published":"2026-11-05T11:00:02.717Z","brands":[],"dns":"resolved","resolved":["104.21.63.153","172.67.147.35"],"resolved_at":"2026-11-05T10:21:02Z","dns_checked_at":"2026-11-06T11:09:11.000Z","dns_since":"2026-11-05T11:08:54.000Z","findings":[{"id":"fq7xrvxlbmmoyiccjoutg","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T10:16:02.124Z","first_published":"2026-11-05T11:00:02.717Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=citrea.digital"},{"hostname":"claimhyperliquid.org","first_observed":"2026-11-05T10:36:17.594Z","first_published":"2026-11-05T11:00:02.717Z","brands":[{"id":"hyperliquid","name":"Hyperliquid","url":"https://domainspoof.com/brands/hyperliquid"}],"dns":"resolved","resolved":["104.21.34.213","172.67.165.148","2606:4700:3033::6815:22d5","2606:4700:3035::ac43:a594"],"resolved_at":"2026-11-05T10:45:09Z","dns_checked_at":"2026-11-06T11:09:11.000Z","dns_since":"2026-11-05T11:08:54.000Z","findings":[{"id":"fvevuykkbshhtptrxfhiv","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T10:36:17.594Z","first_published":"2026-11-05T11:00:02.717Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/claimhyperliquid.org/"}],"url":"https://domainspoof.com/brands/hyperliquid"},{"hostname":"claro-rewardsn.top","first_observed":"2026-11-05T09:46:00.953Z","first_published":"2026-11-05T11:00:02.717Z","brands":[],"dns":"resolved","resolved":["104.21.6.9","172.67.134.34"],"resolved_at":"2026-11-05T09:46:51Z","dns_checked_at":"2026-11-06T11:09:11.000Z","dns_since":"2026-11-05T11:08:54.000Z","findings":[{"id":"fd7olfu7x4sn4idowhfct","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T09:46:00.953Z","first_published":"2026-11-05T11:00:02.717Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=claro-rewardsn.top"},{"hostname":"clarovento.com","first_observed":"2026-11-05T09:46:00.953Z","first_published":"2026-11-05T11:00:02.717Z","brands":[],"dns":"resolved","resolved":["104.21.8.116","172.67.130.111"],"resolved_at":"2026-11-05T09:46:51Z","dns_checked_at":"2026-11-06T11:09:11.000Z","dns_since":"2026-11-05T11:08:54.000Z","findings":[{"id":"fl2xiyq7y6olhdpa6vd3q","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T09:46:00.953Z","first_published":"2026-11-05T11:00:02.717Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=clarovento.com"},{"hostname":"coinbasellcus.com","first_observed":"2026-11-05T10:41:23.987Z","first_published":"2026-11-05T11:00:02.717Z","brands":[],"dns":"resolved","resolved":["198.49.23.144","198.49.23.145","198.185.159.144","198.185.159.145"],"resolved_at":"2026-11-05T10:48:07Z","dns_checked_at":"2026-11-06T11:09:11.000Z","dns_since":"2026-11-05T11:08:54.000Z","findings":[{"id":"fbakm762xagzmeqcza3mt","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T10:41:23.987Z","first_published":"2026-11-05T11:00:02.717Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=coinbasellcus.com"},{"hostname":"coinbse-pro-login.pages.dev","first_observed":"2026-11-05T10:16:02.124Z","first_published":"2026-11-05T11:00:02.717Z","brands":[],"dns":"resolved","resolved":["172.66.44.156","172.66.47.100"],"resolved_at":"2026-11-05T10:21:03Z","dns_checked_at":"2026-11-06T11:09:11.000Z","dns_since":"2026-11-05T11:08:54.000Z","findings":[{"id":"fkxbu3ixjvk4rjutnju6w","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T10:16:02.124Z","first_published":"2026-11-05T11:00:02.717Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=coinbse-pro-login.pages.dev"},{"hostname":"coins-chainrain.xyz","first_observed":"2026-11-05T10:51:45.629Z","first_published":"2026-11-05T11:00:02.717Z","brands":[],"dns":"resolved","resolved":["104.21.2.78","172.67.128.230"],"resolved_at":"2026-11-05T10:55:03Z","dns_checked_at":"2026-11-06T11:09:11.000Z","dns_since":"2026-11-05T11:08:54.000Z","findings":[{"id":"fysahe46rblphlerdjgb6","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T10:51:45.629Z","first_published":"2026-11-05T11:00:02.717Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=coins-chainrain.xyz"},{"hostname":"comwww.8y1y.com","first_observed":"2026-11-05T10:05:40.883Z","first_published":"2026-11-05T11:00:02.717Z","brands":[],"dns":"resolved","resolved":["103.224.212.101"],"resolved_at":"2026-11-05T10:14:58Z","dns_checked_at":"2026-11-06T11:09:11.000Z","dns_since":"2026-11-05T11:08:54.000Z","findings":[{"id":"fpnwoegfijpkq44ku5e4o","kind":"reported_domain","summary":"Under 8y1y.com, listed by MetaMask","first_observed":"2026-11-05T10:05:40.883Z","first_published":"2026-11-05T11:00:02.717Z","source":"metamask","source_name":"MetaMask","under":"8y1y.com"}],"url":"https://domainspoof.com/live?show=all&q=comwww.8y1y.com"},{"hostname":"cosajyo.com","first_observed":"2026-11-05T10:05:40.883Z","first_published":"2026-11-05T11:00:02.717Z","brands":[],"dns":"resolved","resolved":["104.21.51.218","172.67.187.197"],"resolved_at":"2026-11-05T10:15:04Z","dns_checked_at":"2026-11-06T11:09:11.000Z","dns_since":"2026-11-05T11:08:54.000Z","findings":[{"id":"f5wuf5c6useusnfjq5wcf","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T10:05:40.883Z","first_published":"2026-11-05T11:00:02.717Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=cosajyo.com"},{"hostname":"cpanel.atlaxchazebanking.com","first_observed":"2026-11-05T10:36:17.594Z","first_published":"2026-11-05T11:00:02.717Z","brands":[],"dns":"resolved","resolved":["104.21.45.142","172.67.215.49"],"resolved_at":"2026-11-05T10:45:16Z","dns_checked_at":"2026-11-06T11:09:11.000Z","dns_since":"2026-11-05T11:08:54.000Z","findings":[{"id":"fvuiegzpunj4xrstezx42","kind":"reported_domain","summary":"Under atlaxchazebanking.com, reported by PhishDestroy","first_observed":"2026-11-05T10:36:17.594Z","first_published":"2026-11-05T11:00:02.717Z","source":"phishdestroy","source_name":"PhishDestroy","under":"atlaxchazebanking.com","source_url":"https://phishdestroy.io/domain/atlaxchazebanking.com/"}],"url":"https://domainspoof.com/live?show=all&q=cpanel.atlaxchazebanking.com"},{"hostname":"cpanel.geckotristate.com","first_observed":"2026-11-05T10:00:34.574Z","first_published":"2026-11-05T11:00:02.717Z","brands":[],"dns":"resolved","resolved":["68.66.226.89"],"resolved_at":"2026-11-05T10:00:55Z","dns_checked_at":"2026-11-06T11:09:11.000Z","dns_since":"2026-11-05T11:08:54.000Z","findings":[{"id":"fnvqkwm5bmctz23smfnwa","kind":"reported_domain","summary":"Under geckotristate.com, reported by PhishDestroy","first_observed":"2026-11-05T10:00:34.574Z","first_published":"2026-11-05T11:00:02.717Z","source":"phishdestroy","source_name":"PhishDestroy","under":"geckotristate.com","source_url":"https://phishdestroy.io/domain/geckotristate.com/"}],"url":"https://domainspoof.com/live?show=all&q=cpanel.geckotristate.com"},{"hostname":"cpanel.multicoin-invest.com","first_observed":"2026-11-05T10:26:24.168Z","first_published":"2026-11-05T11:00:02.717Z","brands":[],"dns":"resolved","resolved":["151.246.1.103"],"resolved_at":"2026-11-05T10:30:07Z","dns_checked_at":"2026-11-06T11:09:11.000Z","dns_since":"2026-11-05T11:08:54.000Z","findings":[{"id":"fp755rg7pnuum7dnhu7ji","kind":"reported_domain","summary":"Under multicoin-invest.com, reported by PhishDestroy","first_observed":"2026-11-05T10:26:24.168Z","first_published":"2026-11-05T11:00:02.717Z","source":"phishdestroy","source_name":"PhishDestroy","under":"multicoin-invest.com","source_url":"https://phishdestroy.io/domain/multicoin-invest.com/"}],"url":"https://domainspoof.com/live?show=all&q=cpanel.multicoin-invest.com"},{"hostname":"cpcalendars.atlaxchazebanking.com","first_observed":"2026-11-05T10:36:17.594Z","first_published":"2026-11-05T11:00:02.717Z","brands":[],"dns":"resolved","resolved":["104.21.45.142","172.67.215.49"],"resolved_at":"2026-11-05T10:45:16Z","dns_checked_at":"2026-11-06T11:09:11.000Z","dns_since":"2026-11-05T11:08:54.000Z","findings":[{"id":"f3t4w7cx3gz6mrmbs5g7g","kind":"reported_domain","summary":"Under atlaxchazebanking.com, reported by PhishDestroy","first_observed":"2026-11-05T10:36:17.594Z","first_published":"2026-11-05T11:00:02.717Z","source":"phishdestroy","source_name":"PhishDestroy","under":"atlaxchazebanking.com","source_url":"https://phishdestroy.io/domain/atlaxchazebanking.com/"}],"url":"https://domainspoof.com/live?show=all&q=cpcalendars.atlaxchazebanking.com"},{"hostname":"cpcalendars.geckotristate.com","first_observed":"2026-11-05T10:00:34.574Z","first_published":"2026-11-05T11:00:02.717Z","brands":[],"dns":"resolved","resolved":["68.66.226.89"],"resolved_at":"2026-11-05T10:00:55Z","dns_checked_at":"2026-11-06T11:09:11.000Z","dns_since":"2026-11-05T11:08:54.000Z","findings":[{"id":"fhgoqbaspeumhalwby5el","kind":"reported_domain","summary":"Under geckotristate.com, reported by PhishDestroy","first_observed":"2026-11-05T10:00:34.574Z","first_published":"2026-11-05T11:00:02.717Z","source":"phishdestroy","source_name":"PhishDestroy","under":"geckotristate.com","source_url":"https://phishdestroy.io/domain/geckotristate.com/"}],"url":"https://domainspoof.com/live?show=all&q=cpcalendars.geckotristate.com"},{"hostname":"cpcalendars.multicoin-invest.com","first_observed":"2026-11-05T10:26:24.168Z","first_published":"2026-11-05T11:00:02.717Z","brands":[],"dns":"resolved","resolved":["151.246.1.103"],"resolved_at":"2026-11-05T10:30:07Z","dns_checked_at":"2026-11-06T11:09:11.000Z","dns_since":"2026-11-05T11:08:54.000Z","findings":[{"id":"fwnclltacyky3cjoy6xw7","kind":"reported_domain","summary":"Under multicoin-invest.com, reported by PhishDestroy","first_observed":"2026-11-05T10:26:24.168Z","first_published":"2026-11-05T11:00:02.717Z","source":"phishdestroy","source_name":"PhishDestroy","under":"multicoin-invest.com","source_url":"https://phishdestroy.io/domain/multicoin-invest.com/"}],"url":"https://domainspoof.com/live?show=all&q=cpcalendars.multicoin-invest.com"},{"hostname":"cpcontacts.atlaxchazebanking.com","first_observed":"2026-11-05T10:36:17.594Z","first_published":"2026-11-05T11:00:02.717Z","brands":[],"dns":"resolved","resolved":["104.21.45.142","172.67.215.49"],"resolved_at":"2026-11-05T10:45:16Z","dns_checked_at":"2026-11-06T11:09:11.000Z","dns_since":"2026-11-05T11:08:54.000Z","findings":[{"id":"fnc33ak6rlrbewwcc2jiu","kind":"reported_domain","summary":"Under atlaxchazebanking.com, reported by PhishDestroy","first_observed":"2026-11-05T10:36:17.594Z","first_published":"2026-11-05T11:00:02.717Z","source":"phishdestroy","source_name":"PhishDestroy","under":"atlaxchazebanking.com","source_url":"https://phishdestroy.io/domain/atlaxchazebanking.com/"}],"url":"https://domainspoof.com/live?show=all&q=cpcontacts.atlaxchazebanking.com"},{"hostname":"cpcontacts.geckotristate.com","first_observed":"2026-11-05T10:00:34.574Z","first_published":"2026-11-05T11:00:02.717Z","brands":[],"dns":"resolved","resolved":["68.66.226.89"],"resolved_at":"2026-11-05T10:00:55Z","dns_checked_at":"2026-11-06T11:09:11.000Z","dns_since":"2026-11-05T11:08:54.000Z","findings":[{"id":"fwfvyxbsijy7cau4xvbau","kind":"reported_domain","summary":"Under geckotristate.com, reported by PhishDestroy","first_observed":"2026-11-05T10:00:34.574Z","first_published":"2026-11-05T11:00:02.717Z","source":"phishdestroy","source_name":"PhishDestroy","under":"geckotristate.com","source_url":"https://phishdestroy.io/domain/geckotristate.com/"}],"url":"https://domainspoof.com/live?show=all&q=cpcontacts.geckotristate.com"},{"hostname":"cpcontacts.multicoin-invest.com","first_observed":"2026-11-05T10:26:24.168Z","first_published":"2026-11-05T11:00:02.717Z","brands":[],"dns":"resolved","resolved":["151.246.1.103"],"resolved_at":"2026-11-05T10:30:07Z","dns_checked_at":"2026-11-06T11:09:11.000Z","dns_since":"2026-11-05T11:08:54.000Z","findings":[{"id":"fd24ft2txnq2hhhhyq4zm","kind":"reported_domain","summary":"Under multicoin-invest.com, reported by PhishDestroy","first_observed":"2026-11-05T10:26:24.168Z","first_published":"2026-11-05T11:00:02.717Z","source":"phishdestroy","source_name":"PhishDestroy","under":"multicoin-invest.com","source_url":"https://phishdestroy.io/domain/multicoin-invest.com/"}],"url":"https://domainspoof.com/live?show=all&q=cpcontacts.multicoin-invest.com"},{"hostname":"dbportfoy.com","first_observed":"2026-11-05T09:45:22.347Z","first_published":"2026-11-05T11:00:02.717Z","brands":[],"dns":"resolved","resolved":["104.21.49.64","172.67.142.80","2606:4700:3032::ac43:8e50","2606:4700:3035::6815:3140"],"resolved_at":"2026-11-05T09:54:02Z","dns_checked_at":"2026-11-06T11:09:11.000Z","dns_since":"2026-11-05T11:08:54.000Z","findings":[{"id":"fflvikaces5q2n5khreju","kind":"reported_domain","summary":"Listed by USOM","first_observed":"2026-11-05T09:45:22.347Z","first_published":"2026-11-05T11:00:02.717Z","source":"usom","source_name":"USOM"}],"url":"https://domainspoof.com/live?show=all&q=dbportfoy.com"},{"hostname":"dbpp.agndatacom.com","first_observed":"2026-11-05T09:56:24.566Z","first_published":"2026-11-05T11:00:02.717Z","brands":[],"dns":"resolved","resolved":["185.53.179.136"],"resolved_at":"2026-11-05T10:09:20Z","dns_checked_at":"2026-11-06T11:09:11.000Z","dns_since":"2026-11-05T11:08:54.000Z","findings":[{"id":"f7xhlsc3fubxi4gi2kluy","kind":"reported_domain","summary":"Under agndatacom.com, listed by MetaMask","first_observed":"2026-11-05T09:56:24.566Z","first_published":"2026-11-05T11:00:02.717Z","source":"metamask","source_name":"MetaMask","under":"agndatacom.com"}],"url":"https://domainspoof.com/live?show=all&q=dbpp.agndatacom.com"},{"hostname":"dci-ledger-test197.pages.dev","first_observed":"2026-11-05T10:10:52.552Z","first_published":"2026-11-05T11:00:02.717Z","brands":[],"dns":"resolved","resolved":["172.66.44.242","172.66.47.14"],"resolved_at":"2026-11-05T10:11:18Z","dns_checked_at":"2026-11-06T11:09:11.000Z","dns_since":"2026-11-05T11:08:54.000Z","findings":[{"id":"f6andp6kihcnnv6vn6s4t","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T10:10:52.552Z","first_published":"2026-11-05T11:00:02.717Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=dci-ledger-test197.pages.dev"},{"hostname":"deltacardiffvfc.com","first_observed":"2026-11-05T10:10:52.552Z","first_published":"2026-11-05T11:00:02.717Z","brands":[],"dns":"resolved","resolved":["104.21.73.15","172.67.137.69"],"resolved_at":"2026-11-05T10:11:18Z","dns_checked_at":"2026-11-06T11:09:11.000Z","dns_since":"2026-11-05T11:08:54.000Z","findings":[{"id":"fnxaiudklaickhmfd42mw","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T10:10:52.552Z","first_published":"2026-11-05T11:00:02.717Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=deltacardiffvfc.com"},{"hostname":"denizbankdestek.com","first_observed":"2026-11-05T09:45:22.347Z","first_published":"2026-11-05T11:00:02.717Z","brands":[],"dns":"no_address","resolved":["185.53.179.149"],"resolved_at":"2026-11-05T09:54:02Z","dns_checked_at":"2026-11-06T15:10:37.000Z","findings":[{"id":"fpt4gpmn6igfj7tjvrroj","kind":"reported_domain","summary":"Listed by USOM","first_observed":"2026-11-05T09:45:22.347Z","first_published":"2026-11-05T11:00:02.717Z","source":"usom","source_name":"USOM"}],"url":"https://domainspoof.com/live?show=all&q=denizbankdestek.com"},{"hostname":"digitalinadresiyapi.xyz","first_observed":"2026-11-05T09:45:22.347Z","first_published":"2026-11-05T11:00:02.717Z","brands":[],"dns":"resolved","resolved":["45.135.194.117","102.220.160.163"],"resolved_at":"2026-11-05T09:54:02Z","dns_checked_at":"2026-11-06T11:09:11.000Z","dns_since":"2026-11-05T11:08:54.000Z","findings":[{"id":"fe3ptczscnk2peeganhl4","kind":"reported_domain","summary":"Listed by USOM","first_observed":"2026-11-05T09:45:22.347Z","first_published":"2026-11-05T11:00:02.717Z","source":"usom","source_name":"USOM"}],"url":"https://domainspoof.com/live?show=all&q=digitalinadresiyapi.xyz"},{"hostname":"digitalreport.fibabanka.com","first_observed":"2026-11-05T10:21:11.832Z","first_published":"2026-11-05T11:00:02.717Z","brands":[],"dns":"resolved","resolved":["195.39.224.185"],"resolved_at":"2026-11-05T10:24:40Z","dns_checked_at":"2026-11-06T11:09:11.000Z","dns_since":"2026-11-05T11:08:54.000Z","findings":[{"id":"fsmjkk6njspnnxodtgfry","kind":"reported_domain","summary":"Under fibabanka.com, reported by PhishDestroy","first_observed":"2026-11-05T10:21:11.832Z","first_published":"2026-11-05T11:00:02.717Z","source":"phishdestroy","source_name":"PhishDestroy","under":"fibabanka.com","source_url":"https://phishdestroy.io/domain/fibabanka.com/"}],"url":"https://domainspoof.com/live?show=all&q=digitalreport.fibabanka.com"},{"hostname":"dogecoin20-connect.pages.dev","first_observed":"2026-11-05T10:10:52.552Z","first_published":"2026-11-05T11:00:02.717Z","brands":[],"dns":"resolved","resolved":["172.66.44.154","172.66.47.102"],"resolved_at":"2026-11-05T10:11:18Z","dns_checked_at":"2026-11-06T11:09:11.000Z","dns_since":"2026-11-05T11:08:54.000Z","findings":[{"id":"fkw5asqcciqekloexcbai","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T10:10:52.552Z","first_published":"2026-11-05T11:00:02.717Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=dogecoin20-connect.pages.dev"},{"hostname":"dornrendthal.live","first_observed":"2026-11-05T09:56:24.566Z","first_published":"2026-11-05T11:00:02.717Z","brands":[],"dns":"resolved","resolved":["104.21.66.238","172.67.165.221"],"resolved_at":"2026-11-05T10:09:22Z","dns_checked_at":"2026-11-06T11:09:11.000Z","dns_since":"2026-11-05T11:08:54.000Z","findings":[{"id":"ft664jbgmriwmsc7wlafw","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T09:56:24.566Z","first_published":"2026-11-05T11:00:02.717Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=dornrendthal.live"},{"hostname":"dosta24ppl.eu.cc","first_observed":"2026-11-05T10:36:17.594Z","first_published":"2026-11-05T11:00:02.717Z","brands":[],"dns":"resolved","resolved":["104.21.61.209","172.67.215.35"],"resolved_at":"2026-11-05T10:45:16Z","dns_checked_at":"2026-11-06T11:09:11.000Z","dns_since":"2026-11-05T11:08:54.000Z","findings":[{"id":"fz5btvhyzj6j6r3dtidfy","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T10:36:17.594Z","first_published":"2026-11-05T11:00:02.717Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=dosta24ppl.eu.cc"},{"hostname":"doyeffsd.online","first_observed":"2026-11-05T10:26:24.168Z","first_published":"2026-11-05T11:00:02.717Z","brands":[],"dns":"resolved","resolved":["13.248.213.45","76.223.67.189"],"resolved_at":"2026-11-06T06:45:30Z","dns_checked_at":"2026-11-06T11:09:11.000Z","dns_since":"2026-11-05T11:08:54.000Z","findings":[{"id":"fdng3sowgpn4bcl5ho3lk","kind":"reported_domain","summary":"Listed by NPA 165 (e-commerce)","first_observed":"2026-11-05T10:26:24.168Z","first_published":"2026-11-05T11:00:02.717Z","source":"npa","source_name":"NPA 165","claim":{"category":"e-commerce"}}],"url":"https://domainspoof.com/live?show=all&q=doyeffsd.online"},{"hostname":"dpyvxnxg.internal-api.zenavlico.cyou","first_observed":"2026-11-05T10:46:36.104Z","first_published":"2026-11-05T11:00:02.717Z","brands":[],"dns":"resolved","resolved":["95.85.244.13"],"resolved_at":"2026-11-05T10:50:15Z","dns_checked_at":"2026-11-06T11:09:11.000Z","dns_since":"2026-11-05T11:08:54.000Z","findings":[{"id":"fzhyn7z6ly4ukql2bsovk","kind":"reported_domain","summary":"Under zenavlico.cyou, listed by CERT Polska","first_observed":"2026-11-05T10:46:36.104Z","first_published":"2026-11-05T11:00:02.717Z","source":"cert_polska","source_name":"CERT Polska","under":"zenavlico.cyou"}],"url":"https://domainspoof.com/live?show=all&q=dpyvxnxg.internal-api.zenavlico.cyou"},{"hostname":"dragoncs2.com","first_observed":"2026-11-05T10:36:17.594Z","first_published":"2026-11-05T11:00:02.717Z","brands":[],"dns":"resolved","resolved":["153.75.249.14"],"resolved_at":"2026-11-05T10:45:16Z","dns_checked_at":"2026-11-06T11:09:11.000Z","dns_since":"2026-11-05T11:08:54.000Z","findings":[{"id":"fg3nhbvnnofcksq3szon4","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T10:36:17.594Z","first_published":"2026-11-05T11:00:02.717Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/dragoncs2.com/"}],"url":"https://domainspoof.com/live?show=all&q=dragoncs2.com"},{"hostname":"draymintgroup.com","first_observed":"2026-11-05T10:21:11.832Z","first_published":"2026-11-05T11:00:02.717Z","brands":[],"dns":"resolved","resolved":["104.21.42.134","172.67.206.25"],"resolved_at":"2026-11-05T10:24:53Z","dns_checked_at":"2026-11-06T11:09:11.000Z","dns_since":"2026-11-05T11:08:54.000Z","findings":[{"id":"f7ivjwiadsuzifru4esya","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T10:21:11.832Z","first_published":"2026-11-05T11:00:02.717Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=draymintgroup.com"},{"hostname":"ducisaxis.com","first_observed":"2026-11-05T10:51:45.629Z","first_published":"2026-11-05T11:00:02.717Z","brands":[],"dns":"resolved","resolved":["104.21.93.45","172.67.204.106"],"resolved_at":"2026-11-05T10:55:14Z","dns_checked_at":"2026-11-06T11:09:11.000Z","dns_since":"2026-11-05T11:08:54.000Z","findings":[{"id":"f2tzipakbk33agsuvlxqc","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T10:51:45.629Z","first_published":"2026-11-05T11:00:02.717Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=ducisaxis.com"},{"hostname":"duciscore.com","first_observed":"2026-11-05T10:51:45.629Z","first_published":"2026-11-05T11:00:02.717Z","brands":[],"dns":"resolved","resolved":["104.21.69.248","172.67.216.20"],"resolved_at":"2026-11-05T10:55:14Z","dns_checked_at":"2026-11-06T11:09:11.000Z","dns_since":"2026-11-05T11:08:54.000Z","findings":[{"id":"fjwhvwzwqpbwzvjwxtohv","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T10:51:45.629Z","first_published":"2026-11-05T11:00:02.717Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=duciscore.com"},{"hostname":"evh8s0wx.usdtbnbcheck.com","first_observed":"2026-11-05T10:16:02.124Z","first_published":"2026-11-05T11:00:02.717Z","brands":[],"dns":"resolved","resolved":["185.53.179.136"],"resolved_at":"2026-11-05T10:16:19Z","dns_checked_at":"2026-11-06T11:09:11.000Z","dns_since":"2026-11-05T11:08:54.000Z","findings":[{"id":"ft4t7m4u4dig5eewagp3e","kind":"reported_domain","summary":"Under usdtbnbcheck.com, reported by PhishDestroy","first_observed":"2026-11-05T10:16:02.124Z","first_published":"2026-11-05T11:00:02.717Z","source":"phishdestroy","source_name":"PhishDestroy","under":"usdtbnbcheck.com","source_url":"https://phishdestroy.io/domain/usdtbnbcheck.com/"}],"url":"https://domainspoof.com/live?show=all&q=evh8s0wx.usdtbnbcheck.com"},{"hostname":"ffrrce.com","first_observed":"2026-11-05T10:36:17.594Z","first_published":"2026-11-05T11:00:02.717Z","brands":[],"dns":"resolved","resolved":["104.21.30.183","172.67.173.131"],"resolved_at":"2026-11-05T10:45:17Z","dns_checked_at":"2026-11-06T11:09:11.000Z","dns_since":"2026-11-05T11:08:54.000Z","findings":[{"id":"fryp3ulxi5sjrtrzcisv7","kind":"reported_domain","summary":"Listed by NPA 165 (finance and insurance)","first_observed":"2026-11-05T10:36:17.594Z","first_published":"2026-11-05T11:00:02.717Z","source":"npa","source_name":"NPA 165","claim":{"category":"finance and insurance"}}],"url":"https://domainspoof.com/live?show=all&q=ffrrce.com"},{"hostname":"fgm-clinic.com","first_observed":"2026-11-05T10:21:11.832Z","first_published":"2026-11-05T11:00:02.717Z","brands":[],"dns":"resolved","resolved":["177.211.118.185"],"resolved_at":"2026-11-05T10:25:12Z","dns_checked_at":"2026-11-06T11:09:11.000Z","dns_since":"2026-11-05T11:08:54.000Z","findings":[{"id":"ffxefmx7rt2lcaeu7zkol","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T10:21:11.832Z","first_published":"2026-11-05T11:00:02.717Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/fgm-clinic.com/"}],"url":"https://domainspoof.com/live?show=all&q=fgm-clinic.com"},{"hostname":"fibabanka.com","first_observed":"2026-11-05T10:21:11.832Z","first_published":"2026-11-05T11:00:02.717Z","brands":[],"dns":"resolved","resolved":["195.39.224.120"],"resolved_at":"2026-11-05T10:25:12Z","dns_checked_at":"2026-11-06T11:09:11.000Z","dns_since":"2026-11-05T11:08:54.000Z","findings":[{"id":"fg74no4jnhit7o6bag2ej","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T10:21:11.832Z","first_published":"2026-11-05T11:00:02.717Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/fibabanka.com/"}],"url":"https://domainspoof.com/live?show=all&q=fibabanka.com"},{"hostname":"firsttexaco.direct-trust.com","first_observed":"2026-11-05T10:41:23.987Z","first_published":"2026-11-05T11:00:02.717Z","brands":[],"dns":"resolved","resolved":["51.68.55.111"],"resolved_at":"2026-11-05T10:41:43Z","dns_checked_at":"2026-11-06T11:09:11.000Z","dns_since":"2026-11-05T11:08:54.000Z","findings":[{"id":"fsbnh7luepearzigpmayx","kind":"reported_domain","summary":"Under direct-trust.com, listed by MetaMask","first_observed":"2026-11-05T10:41:23.987Z","first_published":"2026-11-05T11:00:02.717Z","source":"metamask","source_name":"MetaMask","under":"direct-trust.com"}],"url":"https://domainspoof.com/live?show=all&q=firsttexaco.direct-trust.com"},{"hostname":"fleetshose.shop","first_observed":"2026-11-05T09:56:24.566Z","first_published":"2026-11-05T11:00:02.717Z","brands":[],"dns":"resolved","resolved":["23.227.38.65"],"resolved_at":"2026-11-05T10:09:28Z","dns_checked_at":"2026-11-06T11:09:11.000Z","dns_since":"2026-11-05T11:08:54.000Z","findings":[{"id":"ffmkebmc2vsg6bsezb4ys","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T09:56:24.566Z","first_published":"2026-11-05T11:00:02.717Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=fleetshose.shop"},{"hostname":"flowacrossnovex.com","first_observed":"2026-11-05T10:05:40.883Z","first_published":"2026-11-05T11:00:02.717Z","brands":[],"dns":"resolved","resolved":["178.16.52.57"],"resolved_at":"2026-11-05T10:15:07Z","dns_checked_at":"2026-11-06T11:09:11.000Z","dns_since":"2026-11-05T11:08:54.000Z","findings":[{"id":"f2uhkxmxywntfzda7iogp","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T10:05:40.883Z","first_published":"2026-11-05T11:00:02.717Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=flowacrossnovex.com"},{"hostname":"garantibvvaonline.com","first_observed":"2026-11-05T09:45:22.347Z","first_published":"2026-11-05T11:00:02.717Z","brands":[],"dns":"no_address","resolved":["185.53.179.149"],"resolved_at":"2026-11-05T09:54:02Z","dns_checked_at":"2026-11-06T15:10:37.000Z","findings":[{"id":"fciktbvm73e7j5nkni46h","kind":"reported_domain","summary":"Listed by USOM","first_observed":"2026-11-05T09:45:22.347Z","first_published":"2026-11-05T11:00:02.717Z","source":"usom","source_name":"USOM"}],"url":"https://domainspoof.com/live?show=all&q=garantibvvaonline.com"},{"hostname":"gawibay.com","first_observed":"2026-11-05T10:46:36.104Z","first_published":"2026-11-05T11:00:02.717Z","brands":[],"dns":"resolved","resolved":["104.21.54.254","172.67.170.4"],"resolved_at":"2026-11-05T10:50:16Z","dns_checked_at":"2026-11-06T11:09:11.000Z","dns_since":"2026-11-05T11:08:54.000Z","findings":[{"id":"fjeaivwxag2zcuatddqjl","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T10:46:36.104Z","first_published":"2026-11-05T11:00:02.717Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=gawibay.com"},{"hostname":"geckotristate.com","first_observed":"2026-11-05T10:00:34.574Z","first_published":"2026-11-05T11:00:02.717Z","brands":[],"dns":"resolved","resolved":["68.66.226.89"],"resolved_at":"2026-11-05T10:00:56Z","dns_checked_at":"2026-11-06T11:09:11.000Z","dns_since":"2026-11-05T11:08:54.000Z","findings":[{"id":"f3kgdggfwwlylywd2io6l","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T10:00:34.574Z","first_published":"2026-11-05T11:00:02.717Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/geckotristate.com/"}],"url":"https://domainspoof.com/live?show=all&q=geckotristate.com"},{"hostname":"gemxworld.com","first_observed":"2026-11-05T10:31:06.562Z","first_published":"2026-11-05T11:00:02.717Z","brands":[],"dns":"no_address","resolved":[],"resolved_at":"2026-11-05T10:39:15Z","dns_checked_at":"2026-11-06T11:09:11.000Z","dns_since":"2026-11-05T11:08:54.000Z","findings":[{"id":"fag6nge4ubilip6hbjfpl","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T10:31:06.562Z","first_published":"2026-11-05T11:00:02.717Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=gemxworld.com"},{"hostname":"gexusd.xyz","first_observed":"2026-11-05T09:51:13.601Z","first_published":"2026-11-05T11:00:02.717Z","brands":[],"dns":"no_address","resolved":[],"resolved_at":"2026-11-05T10:01:19Z","dns_checked_at":"2026-11-06T11:09:11.000Z","dns_since":"2026-11-05T11:08:54.000Z","findings":[{"id":"fyzuobdblolxwe6lxxxmi","kind":"reported_domain","summary":"Listed by NPA 165 (finance and insurance)","first_observed":"2026-11-05T09:51:13.601Z","first_published":"2026-11-05T11:00:02.717Z","source":"npa","source_name":"NPA 165","claim":{"category":"finance and insurance"}}],"url":"https://domainspoof.com/live?show=all&q=gexusd.xyz"},{"hostname":"gkfjds.shop","first_observed":"2026-11-05T09:46:00.953Z","first_published":"2026-11-05T11:00:02.717Z","brands":[],"dns":"resolved","resolved":["104.21.11.194","172.67.150.57"],"resolved_at":"2026-11-05T09:47:04Z","dns_checked_at":"2026-11-06T11:09:11.000Z","dns_since":"2026-11-05T11:08:54.000Z","findings":[{"id":"fsiksc6uyakbo3fvwxwub","kind":"reported_domain","summary":"Listed by NPA 165 (e-commerce)","first_observed":"2026-11-05T09:46:00.953Z","first_published":"2026-11-05T11:00:02.717Z","source":"npa","source_name":"NPA 165","claim":{"category":"e-commerce"}}],"url":"https://domainspoof.com/live?show=all&q=gkfjds.shop"},{"hostname":"globalminersinvest.com","first_observed":"2026-11-05T10:16:02.124Z","first_published":"2026-11-05T11:00:02.717Z","brands":[],"dns":"resolved","resolved":["216.24.57.1"],"resolved_at":"2026-11-05T10:16:19Z","dns_checked_at":"2026-11-06T11:09:11.000Z","dns_since":"2026-11-05T11:08:54.000Z","findings":[{"id":"fqwz4ehgx3kjmdfmzkr6z","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T10:16:02.124Z","first_published":"2026-11-05T11:00:02.717Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/globalminersinvest.com/"}],"url":"https://domainspoof.com/live?show=all&q=globalminersinvest.com"},{"hostname":"globaltutors.me.cdn.cloydflare.net","first_observed":"2026-11-05T10:05:40.883Z","first_published":"2026-11-05T11:00:02.717Z","brands":[],"dns":"resolved","resolved":["45.10.243.43"],"resolved_at":"2026-11-05T10:15:08Z","dns_checked_at":"2026-11-06T11:09:11.000Z","dns_since":"2026-11-05T11:08:54.000Z","findings":[{"id":"ffabwbvupofjkhbldz6kg","kind":"reported_domain","summary":"Under cloydflare.net, listed by MetaMask","first_observed":"2026-11-05T10:05:40.883Z","first_published":"2026-11-05T11:00:02.717Z","source":"metamask","source_name":"MetaMask","under":"cloydflare.net"}],"url":"https://domainspoof.com/live?show=all&q=globaltutors.me.cdn.cloydflare.net"},{"hostname":"gls-groupptp.cyou","first_observed":"2026-11-05T09:47:42.720Z","first_published":"2026-11-05T11:00:02.717Z","brands":[],"dns":"resolved","resolved":["49.51.141.35"],"resolved_at":"2026-11-05T09:54:02Z","dns_checked_at":"2026-11-06T11:09:11.000Z","dns_since":"2026-11-05T11:08:54.000Z","findings":[{"id":"fgf6j3owkolfgqcndmxr4","kind":"reported_domain","summary":"Reported by PhishTank","first_observed":"2026-11-05T09:47:42.720Z","first_published":"2026-11-05T11:00:02.717Z","source":"phishtank","source_name":"PhishTank","source_url":"https://phishtank.org/phish_detail.php?phish_id=9554861"}],"url":"https://domainspoof.com/live?show=all&q=gls-groupptp.cyou"},{"hostname":"gov-tr.cfd","first_observed":"2026-11-05T10:16:02.124Z","first_published":"2026-11-05T11:00:02.717Z","brands":[],"dns":"resolved","resolved":["104.21.94.100","172.67.221.184"],"resolved_at":"2026-11-06T03:14:26Z","dns_checked_at":"2026-11-06T11:09:12.000Z","dns_since":"2026-11-05T11:08:54.000Z","findings":[{"id":"fws5w2gxm3z2m4bez2ctt","kind":"reported_domain","summary":"Listed by USOM","first_observed":"2026-11-05T10:16:02.124Z","first_published":"2026-11-05T11:00:02.717Z","source":"usom","source_name":"USOM"}],"url":"https://domainspoof.com/live?show=all&q=gov-tr.cfd"},{"hostname":"governance-virtuals.com","first_observed":"2026-11-05T10:51:45.629Z","first_published":"2026-11-05T11:00:02.717Z","brands":[{"id":"virtuals-protocol","name":"Virtuals Protocol","url":"https://domainspoof.com/brands/virtuals-protocol"}],"dns":"resolved","resolved":["104.21.79.44","172.67.141.238"],"resolved_at":"2026-11-05T10:55:16Z","dns_checked_at":"2026-11-06T11:09:12.000Z","dns_since":"2026-11-05T11:08:54.000Z","findings":[{"id":"fvfqkwp3cwxd6gnbtsiyn","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T10:51:45.629Z","first_published":"2026-11-05T11:00:02.717Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/brands/virtuals-protocol"},{"hostname":"governance-zama.pages.dev","first_observed":"2026-11-05T10:36:17.594Z","first_published":"2026-11-05T11:00:02.717Z","brands":[],"dns":"not_found","resolved":[],"resolved_at":"2026-11-05T10:45:18Z","dns_checked_at":"2026-11-06T11:09:12.000Z","dns_since":"2026-11-05T11:08:54.000Z","findings":[{"id":"fztf2bl23hcjc7q262qd6","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T10:36:17.594Z","first_published":"2026-11-05T11:00:02.717Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=governance-zama.pages.dev"},{"hostname":"gtcfx.capital","first_observed":"2026-11-05T09:46:00.953Z","first_published":"2026-11-05T11:00:02.717Z","brands":[],"dns":"resolved","resolved":["104.21.21.115","172.67.198.77"],"resolved_at":"2026-11-05T09:47:05Z","dns_checked_at":"2026-11-06T11:09:12.000Z","dns_since":"2026-11-05T11:08:54.000Z","findings":[{"id":"fsk3f6pcr2u44tfeykkc5","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T09:46:00.953Z","first_published":"2026-11-05T11:00:02.717Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=gtcfx.capital"},{"hostname":"guus5w7eu8x.usdtbnbcheck.com","first_observed":"2026-11-05T10:21:11.832Z","first_published":"2026-11-05T11:00:02.717Z","brands":[],"dns":"resolved","resolved":["185.53.179.136"],"resolved_at":"2026-11-05T10:25:12Z","dns_checked_at":"2026-11-06T11:09:12.000Z","dns_since":"2026-11-05T11:08:54.000Z","findings":[{"id":"fcvzoaxcsuh6gjcmocj6y","kind":"reported_domain","summary":"Under usdtbnbcheck.com, reported by PhishDestroy","first_observed":"2026-11-05T10:21:11.832Z","first_published":"2026-11-05T11:00:02.717Z","source":"phishdestroy","source_name":"PhishDestroy","under":"usdtbnbcheck.com","source_url":"https://phishdestroy.io/domain/usdtbnbcheck.com/"}],"url":"https://domainspoof.com/live?show=all&q=guus5w7eu8x.usdtbnbcheck.com"},{"hostname":"halkbankonlinedestek.com","first_observed":"2026-11-05T09:45:22.347Z","first_published":"2026-11-05T11:00:02.717Z","brands":[],"dns":"no_address","resolved":["185.53.179.149"],"resolved_at":"2026-11-05T09:54:02Z","dns_checked_at":"2026-11-06T15:10:37.000Z","findings":[{"id":"fosziagzzhetto65wfrbu","kind":"reported_domain","summary":"Listed by USOM","first_observed":"2026-11-05T09:45:22.347Z","first_published":"2026-11-05T11:00:02.717Z","source":"usom","source_name":"USOM"}],"url":"https://domainspoof.com/live?show=all&q=halkbankonlinedestek.com"},{"hostname":"hashwood.digital","first_observed":"2026-11-05T09:46:00.953Z","first_published":"2026-11-05T11:00:02.717Z","brands":[],"dns":"resolved","resolved":["104.21.69.118","172.67.208.1"],"resolved_at":"2026-11-05T09:47:05Z","dns_checked_at":"2026-11-06T11:09:12.000Z","dns_since":"2026-11-05T11:08:54.000Z","findings":[{"id":"fsi2g7rdl6kvnln63ubzi","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T09:46:00.953Z","first_published":"2026-11-05T11:00:02.717Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=hashwood.digital"},{"hostname":"holiganbet102.icu","first_observed":"2026-11-05T09:46:00.953Z","first_published":"2026-11-05T11:00:02.717Z","brands":[],"dns":"resolved","resolved":["104.21.61.17","172.67.204.225"],"resolved_at":"2026-11-05T09:47:05Z","dns_checked_at":"2026-11-06T11:09:12.000Z","dns_since":"2026-11-05T11:08:54.000Z","findings":[{"id":"ffergksntmwki56ai35so","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T09:46:00.953Z","first_published":"2026-11-05T11:00:02.717Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/holiganbet102.icu/"}],"url":"https://domainspoof.com/live?show=all&q=holiganbet102.icu"},{"hostname":"houlihane.com","first_observed":"2026-11-05T10:21:11.832Z","first_published":"2026-11-05T11:00:02.717Z","brands":[],"dns":"resolved","resolved":["104.21.28.48","172.67.144.62"],"resolved_at":"2026-11-05T10:25:13Z","dns_checked_at":"2026-11-06T11:09:12.000Z","dns_since":"2026-11-05T11:08:54.000Z","findings":[{"id":"frx4oz4yqoetkeobatcmn","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T10:21:11.832Z","first_published":"2026-11-05T11:00:02.717Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=houlihane.com"},{"hostname":"icebliy.shop","first_observed":"2026-11-05T10:41:23.987Z","first_published":"2026-11-05T11:00:02.717Z","brands":[],"dns":"resolved","resolved":["104.21.7.59","172.67.187.130"],"resolved_at":"2026-11-05T10:41:44Z","dns_checked_at":"2026-11-06T11:09:12.000Z","dns_since":"2026-11-05T11:08:54.000Z","findings":[{"id":"fv4qq2wdzhz6v5y2oakwo","kind":"reported_domain","summary":"Listed by NPA 165 (information services)","first_observed":"2026-11-05T10:41:23.987Z","first_published":"2026-11-05T11:00:02.717Z","source":"npa","source_name":"NPA 165","claim":{"category":"information services"}}],"url":"https://domainspoof.com/live?show=all&q=icebliy.shop"},{"hostname":"impulsogainvex.net","first_observed":"2026-11-05T10:36:17.594Z","first_published":"2026-11-05T11:00:02.717Z","brands":[],"dns":"resolved","resolved":["104.21.67.89","172.67.219.35"],"resolved_at":"2026-11-05T10:45:19Z","dns_checked_at":"2026-11-06T11:09:12.000Z","dns_since":"2026-11-05T11:08:55.000Z","findings":[{"id":"fba5ud7v73eqmpvtcm2px","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T10:36:17.594Z","first_published":"2026-11-05T11:00:02.717Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=impulsogainvex.net"},{"hostname":"info-ledgerlive.pages.dev","first_observed":"2026-11-05T10:41:23.987Z","first_published":"2026-11-05T11:00:02.717Z","brands":[{"id":"ledger","name":"Ledger","url":"https://domainspoof.com/brands/ledger"}],"dns":"resolved","resolved":["172.66.45.29","172.66.46.227","2606:4700:310c::ac42:2d1d","2606:4700:310c::ac42:2ee3"],"resolved_at":"2026-11-05T10:41:44Z","dns_checked_at":"2026-11-06T11:09:12.000Z","dns_since":"2026-11-05T11:08:55.000Z","findings":[{"id":"fikdnet6ccqhf6vthnfsy","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T10:41:23.987Z","first_published":"2026-11-05T11:00:02.717Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/brands/ledger"},{"hostname":"infodestek.xyz","first_observed":"2026-11-05T09:45:22.347Z","first_published":"2026-11-05T11:00:02.717Z","brands":[],"dns":"not_found","resolved":["102.220.160.163"],"resolved_at":"2026-11-05T09:54:02Z","dns_checked_at":"2026-11-06T15:10:37.000Z","findings":[{"id":"fuftlx6rp75l7fsbctkvm","kind":"reported_domain","summary":"Listed by USOM","first_observed":"2026-11-05T09:45:22.347Z","first_published":"2026-11-05T11:00:02.717Z","source":"usom","source_name":"USOM"}],"url":"https://domainspoof.com/live?show=all&q=infodestek.xyz"},{"hostname":"instagr.eu","first_observed":"2026-11-05T10:05:51.994Z","first_published":"2026-11-05T11:00:02.717Z","brands":[{"id":"instagram","name":"Instagram","url":"https://domainspoof.com/brands/instagram"}],"dns":"resolved","resolved":["2.57.91.91"],"resolved_at":"2026-11-06T11:09:12Z","dns_checked_at":"2026-11-06T11:09:12.000Z","dns_since":"2026-11-05T11:08:55.000Z","findings":[{"id":"f4ezyw2qi3n7z6jshfhyr","kind":"phishing_infrastructure","summary":"Resolved to 2.57.91.91, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T10:05:51.994Z","first_published":"2026-11-05T11:00:02.717Z","address":"2.57.91.91","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/instagram"},{"hostname":"internal-api.zenavlico.cyou","first_observed":"2026-11-05T10:46:36.104Z","first_published":"2026-11-05T11:00:02.717Z","brands":[],"dns":"resolved","resolved":["95.85.244.13"],"resolved_at":"2026-11-05T10:50:18Z","dns_checked_at":"2026-11-06T11:09:12.000Z","dns_since":"2026-11-05T11:08:55.000Z","findings":[{"id":"fabeu7yc6yxp4klwvim24","kind":"reported_domain","summary":"Under zenavlico.cyou, listed by CERT Polska","first_observed":"2026-11-05T10:46:36.104Z","first_published":"2026-11-05T11:00:02.717Z","source":"cert_polska","source_name":"CERT Polska","under":"zenavlico.cyou"}],"url":"https://domainspoof.com/live?show=all&q=internal-api.zenavlico.cyou"},{"hostname":"invescorumplataforma-es.live","first_observed":"2026-11-05T10:16:02.124Z","first_published":"2026-11-05T11:00:02.717Z","brands":[],"dns":"resolved","resolved":["104.21.56.33","172.67.176.103"],"resolved_at":"2026-11-05T10:16:21Z","dns_checked_at":"2026-11-06T11:09:12.000Z","dns_since":"2026-11-05T11:08:55.000Z","findings":[{"id":"ftd7lgjbfjshjm2qbla66","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T10:16:02.124Z","first_published":"2026-11-05T11:00:02.717Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=invescorumplataforma-es.live"},{"hostname":"io-exchange.cloud","first_observed":"2026-11-05T10:46:36.104Z","first_published":"2026-11-05T11:00:02.717Z","brands":[],"dns":"resolved","resolved":["104.21.2.198","172.67.129.154"],"resolved_at":"2026-11-05T10:50:18Z","dns_checked_at":"2026-11-06T11:09:12.000Z","dns_since":"2026-11-05T11:08:55.000Z","findings":[{"id":"f5kqmadet7l3f6iwge42j","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T10:46:36.104Z","first_published":"2026-11-05T11:00:02.717Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=io-exchange.cloud"},{"hostname":"isbankonlinedestek.com","first_observed":"2026-11-05T09:45:22.347Z","first_published":"2026-11-05T11:00:02.717Z","brands":[],"dns":"no_address","resolved":["185.53.179.149"],"resolved_at":"2026-11-05T09:54:02Z","dns_checked_at":"2026-11-06T15:10:37.000Z","findings":[{"id":"fqcl24xk7hvznhtnddify","kind":"reported_domain","summary":"Listed by USOM","first_observed":"2026-11-05T09:45:22.347Z","first_published":"2026-11-05T11:00:02.717Z","source":"usom","source_name":"USOM"}],"url":"https://domainspoof.com/live?show=all&q=isbankonlinedestek.com"},{"hostname":"jiangning03.skin","first_observed":"2026-11-05T10:36:17.594Z","first_published":"2026-11-05T11:00:02.717Z","brands":[],"dns":"resolved","resolved":["104.21.23.185","172.67.212.189"],"resolved_at":"2026-11-05T10:45:19Z","dns_checked_at":"2026-11-06T11:09:12.000Z","dns_since":"2026-11-05T11:08:55.000Z","findings":[{"id":"f3cbbj5xd5zthm2wvci6t","kind":"reported_domain","summary":"Listed by NPA 165 (e-commerce)","first_observed":"2026-11-05T10:36:17.594Z","first_published":"2026-11-05T11:00:02.717Z","source":"npa","source_name":"NPA 165","claim":{"category":"e-commerce"}}],"url":"https://domainspoof.com/live?show=all&q=jiangning03.skin"},{"hostname":"jonahost.com","first_observed":"2026-11-05T10:05:40.883Z","first_published":"2026-11-05T11:00:02.717Z","brands":[{"id":"amazon","name":"Amazon","url":"https://domainspoof.com/brands/amazon"}],"dns":"resolved","resolved":["185.53.179.149"],"resolved_at":"2026-11-05T10:05:51Z","dns_checked_at":"2026-11-06T11:09:12.000Z","dns_since":"2026-11-05T11:08:55.000Z","findings":[{"id":"fhrceuz7ecjxvwr5ydr3z","kind":"reported_domain","summary":"Reported by PhishTank as imitating Amazon.com","first_observed":"2026-11-05T10:05:40.883Z","first_published":"2026-11-05T11:00:02.717Z","source":"phishtank","source_name":"PhishTank","claim":{"brand":"Amazon.com"},"source_url":"https://phishtank.org/phish_detail.php?phish_id=9495922"}],"url":"https://domainspoof.com/brands/amazon"},{"hostname":"keenreckonvault.net","first_observed":"2026-11-05T10:10:52.552Z","first_published":"2026-11-05T11:00:02.717Z","brands":[],"dns":"resolved","resolved":["104.21.91.58","172.67.167.121"],"resolved_at":"2026-11-05T10:11:22Z","dns_checked_at":"2026-11-06T11:09:12.000Z","dns_since":"2026-11-05T11:08:55.000Z","findings":[{"id":"fy6spynqevify7oaofjle","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T10:10:52.552Z","first_published":"2026-11-05T11:00:02.717Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=keenreckonvault.net"},{"hostname":"kklzsfj.cn","first_observed":"2026-11-05T10:46:36.104Z","first_published":"2026-11-05T11:00:02.717Z","brands":[],"dns":"resolved","resolved":["104.21.7.81","172.67.135.228"],"resolved_at":"2026-11-05T10:50:19Z","dns_checked_at":"2026-11-06T11:09:12.000Z","dns_since":"2026-11-05T11:08:55.000Z","findings":[{"id":"fka7mqhqligj5qrkxm27n","kind":"reported_domain","summary":"Listed by NPA 165 (e-commerce)","first_observed":"2026-11-05T10:46:36.104Z","first_published":"2026-11-05T11:00:02.717Z","source":"npa","source_name":"NPA 165","claim":{"category":"e-commerce"}}],"url":"https://domainspoof.com/live?show=all&q=kklzsfj.cn"},{"hostname":"ledgr-star-en.pages.dev","first_observed":"2026-11-05T09:46:00.953Z","first_published":"2026-11-05T11:00:02.717Z","brands":[],"dns":"resolved","resolved":["172.66.45.9","172.66.46.247"],"resolved_at":"2026-11-05T09:47:08Z","dns_checked_at":"2026-11-06T11:09:12.000Z","dns_since":"2026-11-05T11:08:55.000Z","findings":[{"id":"fpz2enb6l2dzmmznnwbzr","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T09:46:00.953Z","first_published":"2026-11-05T11:00:02.717Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=ledgr-star-en.pages.dev"},{"hostname":"ledgrapp-live---hub.pages.dev","first_observed":"2026-11-05T10:51:45.629Z","first_published":"2026-11-05T11:00:02.717Z","brands":[],"dns":"resolved","resolved":["172.66.44.203","172.66.47.53"],"resolved_at":"2026-11-05T10:55:19Z","dns_checked_at":"2026-11-06T11:09:12.000Z","dns_since":"2026-11-05T11:08:55.000Z","findings":[{"id":"f2xtv5pl23pqducx74my7","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T10:51:45.629Z","first_published":"2026-11-05T11:00:02.717Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=ledgrapp-live---hub.pages.dev"},{"hostname":"lermoxgentapp-digital.pages.dev","first_observed":"2026-11-05T10:31:06.562Z","first_published":"2026-11-05T11:00:02.717Z","brands":[],"dns":"resolved","resolved":["172.66.44.108","172.66.47.148"],"resolved_at":"2026-11-05T10:39:22Z","dns_checked_at":"2026-11-06T11:09:12.000Z","dns_since":"2026-11-05T11:08:55.000Z","findings":[{"id":"fcsdbuob75lna4gi72ic5","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T10:31:06.562Z","first_published":"2026-11-05T11:00:02.717Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=lermoxgentapp-digital.pages.dev"},{"hostname":"libreprofitance.live","first_observed":"2026-11-05T09:51:13.601Z","first_published":"2026-11-05T11:00:02.717Z","brands":[],"dns":"resolved","resolved":["104.21.72.104","172.67.181.168"],"resolved_at":"2026-11-05T10:01:21Z","dns_checked_at":"2026-11-06T11:09:12.000Z","dns_since":"2026-11-05T11:08:55.000Z","findings":[{"id":"f6tgycxineij5x246z2nc","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T09:51:13.601Z","first_published":"2026-11-05T11:00:02.717Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=libreprofitance.live"},{"hostname":"liverpool.money","first_observed":"2026-11-05T10:16:21.450Z","first_published":"2026-11-05T11:00:02.717Z","brands":[{"id":"liverpool","name":"Liverpool","url":"https://domainspoof.com/brands/liverpool"}],"dns":"resolved","resolved":["195.201.128.179","46.62.237.138","5.78.156.59","5.161.47.86"],"resolved_at":"2026-11-06T11:09:12Z","dns_checked_at":"2026-11-06T11:09:12.000Z","dns_since":"2026-11-05T11:08:55.000Z","findings":[{"id":"fj5fbx5fguiqwbke2aba5","kind":"phishing_infrastructure","summary":"Resolved to 195.201.128.179, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T10:16:21.450Z","first_published":"2026-11-05T11:00:02.717Z","address":"195.201.128.179","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/liverpool"},{"hostname":"login-robinhood-user.pages.dev","first_observed":"2026-11-05T10:46:36.104Z","first_published":"2026-11-05T11:00:02.717Z","brands":[{"id":"robinhood","name":"Robinhood","url":"https://domainspoof.com/brands/robinhood"}],"dns":"resolved","resolved":["172.66.44.216","172.66.47.40","2606:4700:310c::ac42:2cd8","2606:4700:310c::ac42:2f28"],"resolved_at":"2026-11-05T10:50:19Z","dns_checked_at":"2026-11-06T11:09:12.000Z","dns_since":"2026-11-05T11:08:55.000Z","findings":[{"id":"frrik72uuz4qksixqfjuc","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T10:46:36.104Z","first_published":"2026-11-05T11:00:02.717Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/brands/robinhood"},{"hostname":"m.fgm-clinic.com","first_observed":"2026-11-05T10:21:11.832Z","first_published":"2026-11-05T11:00:02.717Z","brands":[],"dns":"resolved","resolved":["177.211.118.185"],"resolved_at":"2026-11-05T10:25:16Z","dns_checked_at":"2026-11-06T11:09:12.000Z","dns_since":"2026-11-05T11:08:55.000Z","findings":[{"id":"fknp2ruqlexncy6vnklt3","kind":"reported_domain","summary":"Under fgm-clinic.com, reported by PhishDestroy","first_observed":"2026-11-05T10:21:11.832Z","first_published":"2026-11-05T11:00:02.717Z","source":"phishdestroy","source_name":"PhishDestroy","under":"fgm-clinic.com","source_url":"https://phishdestroy.io/domain/fgm-clinic.com/"}],"url":"https://domainspoof.com/live?show=all&q=m.fgm-clinic.com"},{"hostname":"macoline.keylines.net.in","first_observed":"2026-11-05T09:46:00.953Z","first_published":"2026-11-05T11:00:02.717Z","brands":[],"dns":"resolved","resolved":["157.15.130.67"],"resolved_at":"2026-11-05T09:47:08Z","dns_checked_at":"2026-11-06T11:09:12.000Z","dns_since":"2026-11-05T11:08:55.000Z","findings":[{"id":"fzgjybx4vr4ie5lijqbxo","kind":"reported_domain","summary":"Under keylines.net.in, listed by CERT Polska","first_observed":"2026-11-05T09:46:00.953Z","first_published":"2026-11-05T11:00:02.717Z","source":"cert_polska","source_name":"CERT Polska","under":"keylines.net.in"}],"url":"https://domainspoof.com/live?show=all&q=macoline.keylines.net.in"},{"hostname":"mail.atlaxchazebanking.com","first_observed":"2026-11-05T10:36:17.594Z","first_published":"2026-11-05T11:00:02.717Z","brands":[],"dns":"resolved","resolved":["104.21.45.142","172.67.215.49"],"resolved_at":"2026-11-05T10:45:20Z","dns_checked_at":"2026-11-06T11:09:12.000Z","dns_since":"2026-11-05T11:08:55.000Z","findings":[{"id":"fdqgic3evcsyrkldwvpj7","kind":"reported_domain","summary":"Under atlaxchazebanking.com, reported by PhishDestroy","first_observed":"2026-11-05T10:36:17.594Z","first_published":"2026-11-05T11:00:02.717Z","source":"phishdestroy","source_name":"PhishDestroy","under":"atlaxchazebanking.com","source_url":"https://phishdestroy.io/domain/atlaxchazebanking.com/"}],"url":"https://domainspoof.com/live?show=all&q=mail.atlaxchazebanking.com"},{"hostname":"mail.geckotristate.com","first_observed":"2026-11-05T10:00:34.574Z","first_published":"2026-11-05T11:00:02.717Z","brands":[],"dns":"resolved","resolved":["68.66.226.89"],"resolved_at":"2026-11-05T10:00:59Z","dns_checked_at":"2026-11-06T11:09:12.000Z","dns_since":"2026-11-05T11:08:55.000Z","findings":[{"id":"fyhac3kvcjiiaeoj5sryu","kind":"reported_domain","summary":"Under geckotristate.com, reported by PhishDestroy","first_observed":"2026-11-05T10:00:34.574Z","first_published":"2026-11-05T11:00:02.717Z","source":"phishdestroy","source_name":"PhishDestroy","under":"geckotristate.com","source_url":"https://phishdestroy.io/domain/geckotristate.com/"}],"url":"https://domainspoof.com/live?show=all&q=mail.geckotristate.com"},{"hostname":"mail.multicoin-invest.com","first_observed":"2026-11-05T10:26:24.168Z","first_published":"2026-11-05T11:00:02.717Z","brands":[],"dns":"resolved","resolved":["151.246.1.103"],"resolved_at":"2026-11-05T10:30:15Z","dns_checked_at":"2026-11-06T11:09:12.000Z","dns_since":"2026-11-05T11:08:55.000Z","findings":[{"id":"ficquik233c6z7dfxz5av","kind":"reported_domain","summary":"Under multicoin-invest.com, reported by PhishDestroy","first_observed":"2026-11-05T10:26:24.168Z","first_published":"2026-11-05T11:00:02.717Z","source":"phishdestroy","source_name":"PhishDestroy","under":"multicoin-invest.com","source_url":"https://phishdestroy.io/domain/multicoin-invest.com/"}],"url":"https://domainspoof.com/live?show=all&q=mail.multicoin-invest.com"},{"hostname":"maliyehazine.org","first_observed":"2026-11-05T10:36:17.594Z","first_published":"2026-11-05T11:00:02.717Z","brands":[],"dns":"resolved","resolved":["104.21.47.99","172.67.146.126"],"resolved_at":"2026-11-05T10:45:20Z","dns_checked_at":"2026-11-06T11:09:12.000Z","dns_since":"2026-11-05T11:08:55.000Z","findings":[{"id":"fup326pcqjjg2p5sypy6b","kind":"reported_domain","summary":"Listed by USOM","first_observed":"2026-11-05T10:36:17.594Z","first_published":"2026-11-05T11:00:02.717Z","source":"usom","source_name":"USOM"}],"url":"https://domainspoof.com/live?show=all&q=maliyehazine.org"},{"hostname":"management.ellectrum.com","first_observed":"2026-11-05T10:51:45.629Z","first_published":"2026-11-05T11:00:02.717Z","brands":[],"dns":"resolved","resolved":["185.53.179.136"],"resolved_at":"2026-11-05T10:55:20Z","dns_checked_at":"2026-11-06T11:09:12.000Z","dns_since":"2026-11-05T11:08:55.000Z","findings":[{"id":"febwbbpyusskc7dgvoptv","kind":"reported_domain","summary":"Under ellectrum.com, listed by MetaMask","first_observed":"2026-11-05T10:51:45.629Z","first_published":"2026-11-05T11:00:02.717Z","source":"metamask","source_name":"MetaMask","under":"ellectrum.com"}],"url":"https://domainspoof.com/live?show=all&q=management.ellectrum.com"},{"hostname":"maple-fi.xyz-buildonv3.sbs","first_observed":"2026-11-05T10:46:36.104Z","first_published":"2026-11-05T11:00:02.717Z","brands":[],"dns":"resolved","resolved":["104.21.47.52","172.67.144.141"],"resolved_at":"2026-11-05T10:50:19Z","dns_checked_at":"2026-11-06T11:09:12.000Z","dns_since":"2026-11-05T11:08:55.000Z","findings":[{"id":"fdvps7c37dvo4recylj7m","kind":"reported_domain","summary":"Under xyz-buildonv3.sbs, listed by MetaMask","first_observed":"2026-11-05T10:46:36.104Z","first_published":"2026-11-05T11:00:02.717Z","source":"metamask","source_name":"MetaMask","under":"xyz-buildonv3.sbs"}],"url":"https://domainspoof.com/live?show=all&q=maple-fi.xyz-buildonv3.sbs"},{"hostname":"mat-chain.app","first_observed":"2026-11-05T09:51:13.601Z","first_published":"2026-11-05T11:00:02.717Z","brands":[],"dns":"resolved","resolved":["104.21.62.226","172.67.139.231"],"resolved_at":"2026-11-05T10:01:21Z","dns_checked_at":"2026-11-06T11:09:12.000Z","dns_since":"2026-11-05T11:08:55.000Z","findings":[{"id":"fhqxanjsdd43piyo2v2kx","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T09:51:13.601Z","first_published":"2026-11-05T11:00:02.717Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/mat-chain.app/"}],"url":"https://domainspoof.com/live?show=all&q=mat-chain.app"},{"hostname":"maxis-ss.biz.id","first_observed":"2026-11-05T09:47:42.720Z","first_published":"2026-11-05T11:00:02.717Z","brands":[{"id":"maxis","name":"Maxis","url":"https://domainspoof.com/brands/maxis"}],"dns":"not_found","resolved":["104.21.77.208","172.67.211.133","2606:4700:3030::6815:4dd0","2606:4700:3035::ac43:d385"],"resolved_at":"2026-11-05T09:54:02Z","dns_checked_at":"2026-11-06T15:10:37.000Z","findings":[{"id":"fk3bosum4sn5uz6fiojib","kind":"reported_domain","summary":"Reported by PhishTank","first_observed":"2026-11-05T09:47:42.720Z","first_published":"2026-11-05T11:00:02.717Z","source":"phishtank","source_name":"PhishTank","source_url":"https://phishtank.org/phish_detail.php?phish_id=9555154"}],"url":"https://domainspoof.com/brands/maxis"},{"hostname":"maxis-ss.web.id","first_observed":"2026-11-05T09:47:42.720Z","first_published":"2026-11-05T11:00:02.717Z","brands":[{"id":"maxis","name":"Maxis","url":"https://domainspoof.com/brands/maxis"}],"dns":"not_found","resolved":["104.21.16.207","172.67.215.236","2606:4700:3035::6815:10cf","2606:4700:3036::ac43:d7ec"],"resolved_at":"2026-11-05T09:54:02Z","dns_checked_at":"2026-11-06T15:10:37.000Z","findings":[{"id":"fhgefzzfhaw2rgddccdbn","kind":"reported_domain","summary":"Reported by PhishTank","first_observed":"2026-11-05T09:47:42.720Z","first_published":"2026-11-05T11:00:02.717Z","source":"phishtank","source_name":"PhishTank","source_url":"https://phishtank.org/phish_detail.php?phish_id=9555155"}],"url":"https://domainspoof.com/brands/maxis"},{"hostname":"meson-galicia.de","first_observed":"2026-11-05T10:11:22.611Z","first_published":"2026-11-05T11:00:02.717Z","brands":[{"id":"banco-galicia","name":"Banco Galicia","url":"https://domainspoof.com/brands/banco-galicia"}],"dns":"resolved","resolved":["81.169.145.74"],"resolved_at":"2026-11-06T11:09:12Z","dns_checked_at":"2026-11-06T11:09:12.000Z","dns_since":"2026-11-05T11:08:55.000Z","findings":[{"id":"fdxuf4tyum4paplwqln5x","kind":"phishing_infrastructure","summary":"Resolved to 81.169.145.74, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T10:11:22.611Z","first_published":"2026-11-05T11:00:02.717Z","address":"81.169.145.74","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/banco-galicia"},{"hostname":"mgc6ae.asia","first_observed":"2026-11-05T10:16:02.124Z","first_published":"2026-11-05T11:00:02.717Z","brands":[],"dns":"resolved","resolved":["104.21.29.168","172.67.149.136"],"resolved_at":"2026-11-05T10:16:21Z","dns_checked_at":"2026-11-06T11:09:12.000Z","dns_since":"2026-11-05T11:08:55.000Z","findings":[{"id":"fe4uxykhiqsgwhy3zu4au","kind":"reported_domain","summary":"Listed by NPA 165 (e-commerce)","first_observed":"2026-11-05T10:16:02.124Z","first_published":"2026-11-05T11:00:02.717Z","source":"npa","source_name":"NPA 165","claim":{"category":"e-commerce"}}],"url":"https://domainspoof.com/live?show=all&q=mgc6ae.asia"},{"hostname":"microsoftup.top","first_observed":"2026-11-05T10:10:52.552Z","first_published":"2026-11-05T11:00:02.717Z","brands":[],"dns":"resolved","resolved":["66.179.31.71","172.232.24.161","172.234.25.42"],"resolved_at":"2026-11-05T10:11:22Z","dns_checked_at":"2026-11-06T11:09:12.000Z","dns_since":"2026-11-05T11:08:55.000Z","findings":[{"id":"fpye27fttx3e3g7uqqjtb","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T10:10:52.552Z","first_published":"2026-11-05T11:00:02.717Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=microsoftup.top"},{"hostname":"milkywayad.com","first_observed":"2026-11-05T09:46:00.953Z","first_published":"2026-11-05T11:00:02.717Z","brands":[],"dns":"resolved","resolved":["104.21.89.211","172.67.147.90"],"resolved_at":"2026-11-05T09:47:08Z","dns_checked_at":"2026-11-06T11:09:12.000Z","dns_since":"2026-11-05T11:08:55.000Z","findings":[{"id":"fl4q7n3adalrw2qkxowin","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T09:46:00.953Z","first_published":"2026-11-05T11:00:02.717Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=milkywayad.com"},{"hostname":"minv-sk-soc.biz","first_observed":"2026-11-05T09:47:42.720Z","first_published":"2026-11-05T11:00:02.717Z","brands":[],"dns":"not_found","resolved":[],"resolved_at":"2026-11-05T09:54:02Z","dns_checked_at":"2026-11-06T11:09:12.000Z","dns_since":"2026-11-05T11:08:55.000Z","findings":[{"id":"faqkrqih7spujep2foqmm","kind":"reported_domain","summary":"Reported by PhishTank","first_observed":"2026-11-05T09:47:42.720Z","first_published":"2026-11-05T11:00:02.717Z","source":"phishtank","source_name":"PhishTank","source_url":"https://phishtank.org/phish_detail.php?phish_id=9555150"}],"url":"https://domainspoof.com/live?show=all&q=minv-sk-soc.biz"},{"hostname":"mmllr.shop","first_observed":"2026-11-05T10:51:45.629Z","first_published":"2026-11-05T11:00:02.717Z","brands":[],"dns":"resolved","resolved":["13.248.213.45","76.223.67.189"],"resolved_at":"2026-11-05T10:55:20Z","dns_checked_at":"2026-11-06T11:09:12.000Z","dns_since":"2026-11-05T11:08:55.000Z","findings":[{"id":"fcbyfl4oj2odjer7m4ab2","kind":"reported_domain","summary":"Listed by MODA (one-page scam site)","first_observed":"2026-11-05T10:51:45.629Z","first_published":"2026-11-05T11:00:02.717Z","source":"moda","source_name":"MODA","claim":{"category":"one-page scam site"}}],"url":"https://domainspoof.com/live?show=all&q=mmllr.shop"},{"hostname":"montecarlosimulation.live","first_observed":"2026-11-05T10:36:17.594Z","first_published":"2026-11-05T11:00:02.717Z","brands":[],"dns":"resolved","resolved":["104.21.26.130","172.67.168.73"],"resolved_at":"2026-11-05T10:45:21Z","dns_checked_at":"2026-11-06T11:09:12.000Z","dns_since":"2026-11-05T11:08:55.000Z","findings":[{"id":"fzdxt7zrwjl3vp627x7la","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T10:36:17.594Z","first_published":"2026-11-05T11:00:02.717Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=montecarlosimulation.live"},{"hostname":"msftloginpage.com","first_observed":"2026-11-05T09:47:42.720Z","first_published":"2026-11-05T11:00:02.717Z","brands":[{"id":"microsoft","name":"Microsoft","url":"https://domainspoof.com/brands/microsoft"}],"dns":"resolved","resolved":["104.21.83.207","172.67.181.78","2606:4700:3031::ac43:b54e","2606:4700:3035::6815:53cf"],"resolved_at":"2026-11-05T09:54:02Z","dns_checked_at":"2026-11-06T11:09:12.000Z","dns_since":"2026-11-05T11:08:55.000Z","findings":[{"id":"fosg2ua6iqf654vdgzfdh","kind":"reported_domain","summary":"Reported by PhishTank as imitating Microsoft","first_observed":"2026-11-05T09:47:42.720Z","first_published":"2026-11-05T11:00:02.717Z","source":"phishtank","source_name":"PhishTank","claim":{"brand":"Microsoft"},"source_url":"https://phishtank.org/phish_detail.php?phish_id=9555041"}],"url":"https://domainspoof.com/brands/microsoft"},{"hostname":"multicoin-invest.com","first_observed":"2026-11-05T10:26:24.168Z","first_published":"2026-11-05T11:00:02.717Z","brands":[],"dns":"resolved","resolved":["151.246.1.103"],"resolved_at":"2026-11-05T10:30:16Z","dns_checked_at":"2026-11-06T11:09:12.000Z","dns_since":"2026-11-05T11:08:55.000Z","findings":[{"id":"fqahmd3ot7kz2ixs5ap27","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T10:26:24.168Z","first_published":"2026-11-05T11:00:02.717Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/multicoin-invest.com/"}],"url":"https://domainspoof.com/live?show=all&q=multicoin-invest.com"},{"hostname":"netfiix-profil.com","first_observed":"2026-11-05T09:47:42.720Z","first_published":"2026-11-05T11:00:02.717Z","brands":[{"id":"netflix","name":"Netflix","url":"https://domainspoof.com/brands/netflix"}],"dns":"resolved","resolved":["101.1.16.10"],"resolved_at":"2026-11-05T09:54:02Z","dns_checked_at":"2026-11-06T11:09:12.000Z","dns_since":"2026-11-05T11:08:55.000Z","findings":[{"id":"ffebb643bkoar4sbrm5eg","kind":"reported_domain","summary":"Reported by PhishTank as imitating Netflix","first_observed":"2026-11-05T09:47:42.720Z","first_published":"2026-11-05T11:00:02.717Z","source":"phishtank","source_name":"PhishTank","claim":{"brand":"Netflix"},"source_url":"https://phishtank.org/phish_detail.php?phish_id=9555168"}],"url":"https://domainspoof.com/brands/netflix"},{"hostname":"nezertronixprosoft.com","first_observed":"2026-11-05T09:51:13.601Z","first_published":"2026-11-05T11:00:02.717Z","brands":[],"dns":"resolved","resolved":["104.21.7.174","172.67.137.17"],"resolved_at":"2026-11-05T10:01:22Z","dns_checked_at":"2026-11-06T11:09:12.000Z","dns_since":"2026-11-05T11:08:55.000Z","findings":[{"id":"fhnu6jqrlgohucy2v4bdh","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T09:51:13.601Z","first_published":"2026-11-05T11:00:02.717Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=nezertronixprosoft.com"},{"hostname":"nooksignal.com","first_observed":"2026-11-05T09:46:00.953Z","first_published":"2026-11-05T11:00:02.717Z","brands":[],"dns":"resolved","resolved":["147.124.214.22"],"resolved_at":"2026-11-05T09:47:09Z","dns_checked_at":"2026-11-06T11:09:12.000Z","dns_since":"2026-11-05T11:08:55.000Z","findings":[{"id":"fdsxxpcrbwkq3wayw6ztu","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T09:46:00.953Z","first_published":"2026-11-05T11:00:02.717Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/nooksignal.com/"}],"url":"https://domainspoof.com/live?show=all&q=nooksignal.com"},{"hostname":"november-it.xyz","first_observed":"2026-11-05T09:47:42.720Z","first_published":"2026-11-05T11:00:02.717Z","brands":[],"dns":"resolved","resolved":["43.165.5.116"],"resolved_at":"2026-11-05T09:54:02Z","dns_checked_at":"2026-11-06T11:09:12.000Z","dns_since":"2026-11-05T11:08:55.000Z","findings":[{"id":"fo7bl2kftfatedaig7wyh","kind":"reported_domain","summary":"Reported by PhishTank","first_observed":"2026-11-05T09:47:42.720Z","first_published":"2026-11-05T11:00:02.717Z","source":"phishtank","source_name":"PhishTank","source_url":"https://phishtank.org/phish_detail.php?phish_id=9555151"}],"url":"https://domainspoof.com/live?show=all&q=november-it.xyz"},{"hostname":"oa2.lol","first_observed":"2026-11-05T09:51:13.601Z","first_published":"2026-11-05T11:00:02.717Z","brands":[],"dns":"resolved","resolved":["104.21.56.214","172.67.156.7"],"resolved_at":"2026-11-05T10:01:22Z","dns_checked_at":"2026-11-06T11:09:12.000Z","dns_since":"2026-11-05T11:08:55.000Z","findings":[{"id":"fh5mpnssj2cn224v22wfm","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T09:51:13.601Z","first_published":"2026-11-05T11:00:02.717Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/oa2.lol/"}],"url":"https://domainspoof.com/live?show=all&q=oa2.lol"},{"hostname":"obewlu-now-ji1cw-4y1-hdb.pages.dev","first_observed":"2026-11-05T10:51:45.629Z","first_published":"2026-11-05T11:00:02.717Z","brands":[],"dns":"resolved","resolved":["172.66.44.229","172.66.47.27"],"resolved_at":"2026-11-05T10:55:21Z","dns_checked_at":"2026-11-06T11:09:12.000Z","dns_since":"2026-11-05T11:08:55.000Z","findings":[{"id":"f25a4nve4oscflqdg5czu","kind":"reported_domain","summary":"Reported by PhishTank","first_observed":"2026-11-05T10:51:45.629Z","first_published":"2026-11-05T11:00:02.717Z","source":"phishtank","source_name":"PhishTank","source_url":"https://phishtank.org/phish_detail.php?phish_id=9479433"}],"url":"https://domainspoof.com/live?show=all&q=obewlu-now-ji1cw-4y1-hdb.pages.dev"},{"hostname":"onlinekidsgames.net","first_observed":"2026-11-05T09:51:13.601Z","first_published":"2026-11-05T11:00:02.717Z","brands":[],"dns":"resolved","resolved":["104.21.50.121","172.67.163.5"],"resolved_at":"2026-11-05T10:01:23Z","dns_checked_at":"2026-11-06T11:09:12.000Z","dns_since":"2026-11-05T11:08:55.000Z","findings":[{"id":"fkq4dhyl33wnh3xvmtn4b","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T09:51:13.601Z","first_published":"2026-11-05T11:00:02.717Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=onlinekidsgames.net"},{"hostname":"orangeox.com","first_observed":"2026-11-05T09:46:00.953Z","first_published":"2026-11-05T11:00:02.717Z","brands":[],"dns":"resolved","resolved":["192.185.147.224"],"resolved_at":"2026-11-05T09:47:10Z","dns_checked_at":"2026-11-06T11:09:12.000Z","dns_since":"2026-11-05T11:08:55.000Z","findings":[{"id":"f3ofvtdiypynax6lm4wdm","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T09:46:00.953Z","first_published":"2026-11-05T11:00:02.717Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/orangeox.com/"}],"url":"https://domainspoof.com/live?show=all&q=orangeox.com"},{"hostname":"oseapp.cc","first_observed":"2026-11-05T09:46:00.953Z","first_published":"2026-11-05T11:00:02.717Z","brands":[],"dns":"resolved","resolved":["104.21.54.135","172.67.138.241"],"resolved_at":"2026-11-05T09:47:10Z","dns_checked_at":"2026-11-06T11:09:12.000Z","dns_since":"2026-11-05T11:08:55.000Z","findings":[{"id":"f5nkad4qbdjvgxowov4vt","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T09:46:00.953Z","first_published":"2026-11-05T11:00:02.717Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=oseapp.cc"},{"hostname":"owqldq.com","first_observed":"2026-11-05T10:51:45.629Z","first_published":"2026-11-05T11:00:02.717Z","brands":[],"dns":"resolved","resolved":["104.21.8.36","172.67.130.93"],"resolved_at":"2026-11-05T10:55:22Z","dns_checked_at":"2026-11-06T11:09:12.000Z","dns_since":"2026-11-05T11:08:55.000Z","findings":[{"id":"f3huryfdrwetra4mdv63g","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T10:51:45.629Z","first_published":"2026-11-05T11:00:02.717Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=owqldq.com"},{"hostname":"paczzkaa763238.click","first_observed":"2026-11-05T10:00:34.574Z","first_published":"2026-11-05T11:00:02.717Z","brands":[],"dns":"resolved","resolved":["104.21.41.48","172.67.159.248"],"resolved_at":"2026-11-05T10:00:59Z","dns_checked_at":"2026-11-06T11:09:12.000Z","dns_since":"2026-11-05T11:08:55.000Z","findings":[{"id":"fsblqzbbazszw7vpxilbc","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T10:00:34.574Z","first_published":"2026-11-05T11:00:02.717Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=paczzkaa763238.click"},{"hostname":"pago-mercadopago.com","first_observed":"2026-11-05T10:01:23.395Z","first_published":"2026-11-05T11:00:02.717Z","brands":[{"id":"mercado-pago","name":"Mercado Pago","url":"https://domainspoof.com/brands/mercado-pago"}],"dns":"resolved","resolved":["45.87.42.74"],"resolved_at":"2026-11-06T11:09:12Z","dns_checked_at":"2026-11-06T11:09:12.000Z","dns_since":"2026-11-05T11:08:55.000Z","findings":[{"id":"fuydsvwmdtet7jwaotimp","kind":"phishing_infrastructure","summary":"Resolved to 45.87.42.74, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T10:01:23.395Z","first_published":"2026-11-05T11:00:02.717Z","address":"45.87.42.74","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/mercado-pago"},{"hostname":"pay-bitrefill.com-cn01-esim-gift.com","first_observed":"2026-11-05T10:25:18.114Z","first_published":"2026-11-05T11:00:02.717Z","brands":[{"id":"bitrefill","name":"Bitrefill","url":"https://domainspoof.com/brands/bitrefill"}],"dns":"resolved","resolved":["62.60.226.39"],"resolved_at":"2026-11-06T06:35:27Z","dns_checked_at":"2026-11-06T06:35:27.000Z","dns_since":"2026-11-05T11:08:55.000Z","findings":[{"id":"fui4ajilxhekohk3j25ln","kind":"spamhaus_drop","summary":"Resolved to 62.60.226.39 on Spamhaus DROP","first_observed":"2026-11-05T10:25:18.114Z","first_published":"2026-11-05T11:00:02.717Z","address":"62.60.226.39","list":"spamhaus_drop","list_name":"Spamhaus DROP"}],"url":"https://domainspoof.com/brands/bitrefill"},{"hostname":"pay.sberbank.6yvxjs0sbermarket.sber.d8od8fqpwrhbe4p7.rosieandtom.com","first_observed":"2026-11-05T10:16:23.813Z","first_published":"2026-11-05T11:00:02.717Z","brands":[{"id":"sberbank","name":"Sberbank","url":"https://domainspoof.com/brands/sberbank"}],"dns":"resolved","resolved":["5.161.23.223"],"resolved_at":"2026-11-06T11:09:12Z","dns_checked_at":"2026-11-06T11:09:12.000Z","dns_since":"2026-11-05T11:08:55.000Z","findings":[{"id":"ffofzpg3ckumghxnduucy","kind":"phishing_infrastructure","summary":"Resolved to 5.161.23.223, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T10:16:23.813Z","first_published":"2026-11-05T11:00:02.717Z","address":"5.161.23.223","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/sberbank"},{"hostname":"plperhjuisusi.com","first_observed":"2026-11-05T10:36:17.594Z","first_published":"2026-11-05T11:00:02.717Z","brands":[],"dns":"resolved","resolved":["104.21.15.237","172.67.208.160"],"resolved_at":"2026-11-05T10:45:23Z","dns_checked_at":"2026-11-06T11:09:12.000Z","dns_since":"2026-11-05T11:08:55.000Z","findings":[{"id":"fr4cy7ieycgdmtxcbre46","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T10:36:17.594Z","first_published":"2026-11-05T11:00:02.717Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=plperhjuisusi.com"},{"hostname":"plperhjuisusire.com","first_observed":"2026-11-05T10:21:11.832Z","first_published":"2026-11-05T11:00:02.717Z","brands":[],"dns":"resolved","resolved":["104.21.2.99","172.67.129.16"],"resolved_at":"2026-11-05T10:25:18Z","dns_checked_at":"2026-11-06T11:09:12.000Z","dns_since":"2026-11-05T11:08:55.000Z","findings":[{"id":"ftsfw2li5z4i7ig3ioeko","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T10:21:11.832Z","first_published":"2026-11-05T11:00:02.717Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=plperhjuisusire.com"},{"hostname":"pochta.sbermarket.fblablacar.pochtabank.0update.yandex.sber.prod2.hawkinswoodshop.com","first_observed":"2026-11-05T10:00:59.771Z","first_published":"2026-11-05T11:00:02.717Z","brands":[{"id":"russian-post","name":"Russian Post","url":"https://domainspoof.com/brands/russian-post"},{"id":"yandex","name":"Yandex","url":"https://domainspoof.com/brands/yandex"}],"dns":"resolved","resolved":["45.77.75.133","45.77.92.157","207.246.78.75"],"resolved_at":"2026-11-06T11:09:12Z","dns_checked_at":"2026-11-06T11:09:12.000Z","dns_since":"2026-11-05T11:08:55.000Z","findings":[{"id":"f4izb56xqrlukds6m3tlj","kind":"phishing_infrastructure","summary":"Resolved to 45.77.75.133, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T10:00:59.771Z","first_published":"2026-11-05T11:00:02.717Z","address":"45.77.75.133","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/russian-post"},{"hostname":"probitahub.com","first_observed":"2026-11-05T10:51:45.629Z","first_published":"2026-11-05T11:00:02.717Z","brands":[],"dns":"resolved","resolved":["104.21.62.169","172.67.137.141"],"resolved_at":"2026-11-05T10:55:22Z","dns_checked_at":"2026-11-06T11:09:12.000Z","dns_since":"2026-11-05T11:08:55.000Z","findings":[{"id":"fb2yi43cln33r4lykq7cm","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T10:51:45.629Z","first_published":"2026-11-05T11:00:02.717Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=probitahub.com"},{"hostname":"pulsesun.com","first_observed":"2026-11-05T10:05:40.883Z","first_published":"2026-11-05T11:00:02.717Z","brands":[],"dns":"resolved","resolved":["13.248.169.48","76.223.54.146"],"resolved_at":"2026-11-06T08:47:43Z","dns_checked_at":"2026-11-06T11:09:12.000Z","dns_since":"2026-11-05T11:08:55.000Z","findings":[{"id":"fmwqnvkvvljyor5oh53g3","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T10:05:40.883Z","first_published":"2026-11-05T11:00:02.717Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/pulsesun.com/"}],"url":"https://domainspoof.com/live?show=all&q=pulsesun.com"},{"hostname":"pusulaportfoyyonetimitr.com","first_observed":"2026-11-05T10:21:11.832Z","first_published":"2026-11-05T11:00:02.717Z","brands":[],"dns":"resolved","resolved":["80.251.153.97"],"resolved_at":"2026-11-05T10:25:18Z","dns_checked_at":"2026-11-06T11:09:12.000Z","dns_since":"2026-11-05T11:08:55.000Z","findings":[{"id":"fyrxpuncfnsd3piag5jee","kind":"reported_domain","summary":"Listed by USOM","first_observed":"2026-11-05T10:21:11.832Z","first_published":"2026-11-05T11:00:02.717Z","source":"usom","source_name":"USOM"}],"url":"https://domainspoof.com/live?show=all&q=pusulaportfoyyonetimitr.com"},{"hostname":"pyanswers.com","first_observed":"2026-11-05T09:46:00.953Z","first_published":"2026-11-05T11:00:02.717Z","brands":[],"dns":"resolved","resolved":["15.197.172.60"],"resolved_at":"2026-11-05T09:47:11Z","dns_checked_at":"2026-11-06T11:09:12.000Z","dns_since":"2026-11-05T11:08:55.000Z","findings":[{"id":"fvlkbzmfijkrrqvysnp6b","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T09:46:00.953Z","first_published":"2026-11-05T11:00:02.717Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=pyanswers.com"},{"hostname":"qnbfinansbankonline.com","first_observed":"2026-11-05T09:45:22.347Z","first_published":"2026-11-05T11:00:02.717Z","brands":[{"id":"qnb-turkiye","name":"QNB Türkiye","url":"https://domainspoof.com/brands/qnb-turkiye"}],"dns":"no_address","resolved":["185.53.179.149"],"resolved_at":"2026-11-05T09:54:02Z","dns_checked_at":"2026-11-06T15:14:37.000Z","findings":[{"id":"fjjs7xejaqmvm2rfo5ljw","kind":"reported_domain","summary":"Listed by USOM","first_observed":"2026-11-05T09:45:22.347Z","first_published":"2026-11-05T11:00:02.717Z","source":"usom","source_name":"USOM"}],"url":"https://domainspoof.com/brands/qnb-turkiye"},{"hostname":"qql-pass.com","first_observed":"2026-11-05T09:46:00.953Z","first_published":"2026-11-05T11:00:02.717Z","brands":[],"dns":"resolved","resolved":["104.21.60.115","172.67.196.33"],"resolved_at":"2026-11-05T09:47:11Z","dns_checked_at":"2026-11-06T11:09:12.000Z","dns_since":"2026-11-05T11:08:55.000Z","findings":[{"id":"fsvsfycstuqxetkwbfm7c","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T09:46:00.953Z","first_published":"2026-11-05T11:00:02.717Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=qql-pass.com"},{"hostname":"quia-voluptatibus-aliquid.com","first_observed":"2026-11-05T10:21:11.832Z","first_published":"2026-11-05T11:00:02.717Z","brands":[],"dns":"resolved","resolved":["104.21.29.231","172.67.149.245"],"resolved_at":"2026-11-05T10:25:18Z","dns_checked_at":"2026-11-06T11:09:12.000Z","dns_since":"2026-11-05T11:08:55.000Z","findings":[{"id":"fxyaqoie2vinkxqenx2zy","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T10:21:11.832Z","first_published":"2026-11-05T11:00:02.717Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=quia-voluptatibus-aliquid.com"},{"hostname":"r.mail.talent-github.com","first_observed":"2026-11-05T10:05:52.982Z","first_published":"2026-11-05T11:00:02.717Z","brands":[{"id":"github","name":"GitHub","url":"https://domainspoof.com/brands/github"}],"dns":"resolved","resolved":["172.246.243.65"],"resolved_at":"2026-11-06T11:09:12Z","dns_checked_at":"2026-11-06T11:09:12.000Z","dns_since":"2026-11-05T11:08:55.000Z","findings":[{"id":"ffoejeowizr65y6ghvmsx","kind":"phishing_infrastructure","summary":"Resolved to 172.246.243.65, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T10:05:52.982Z","first_published":"2026-11-05T11:00:02.717Z","address":"172.246.243.65","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/github"},{"hostname":"rappjkt.spy77go2.com","first_observed":"2026-11-05T10:46:36.104Z","first_published":"2026-11-05T11:00:02.717Z","brands":[],"dns":"resolved","resolved":["104.21.26.87","172.67.168.64"],"resolved_at":"2026-11-05T10:50:22Z","dns_checked_at":"2026-11-06T11:09:12.000Z","dns_since":"2026-11-05T11:08:55.000Z","findings":[{"id":"fun5dojlaa5sthes2cur5","kind":"reported_domain","summary":"Under spy77go2.com, listed by MetaMask","first_observed":"2026-11-05T10:46:36.104Z","first_published":"2026-11-05T11:00:02.717Z","source":"metamask","source_name":"MetaMask","under":"spy77go2.com"}],"url":"https://domainspoof.com/live?show=all&q=rappjkt.spy77go2.com"},{"hostname":"recuperation-de-donnees-iphone.com","first_observed":"2026-11-05T10:39:30.528Z","first_published":"2026-11-05T11:00:02.717Z","brands":[{"id":"apple","name":"Apple","url":"https://domainspoof.com/brands/apple"}],"dns":"resolved","resolved":["51.91.236.255"],"resolved_at":"2026-11-06T11:09:12Z","dns_checked_at":"2026-11-06T11:09:12.000Z","dns_since":"2026-11-05T11:08:55.000Z","findings":[{"id":"frpspb3zir3xv3o2ycwcw","kind":"phishing_infrastructure","summary":"Resolved to 51.91.236.255, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T10:39:30.528Z","first_published":"2026-11-05T11:00:02.717Z","address":"51.91.236.255","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/apple"},{"hostname":"refund-altura.com","first_observed":"2026-11-05T10:16:02.124Z","first_published":"2026-11-05T11:00:02.717Z","brands":[],"dns":"resolved","resolved":["104.21.4.166","172.67.132.69"],"resolved_at":"2026-11-05T10:16:24Z","dns_checked_at":"2026-11-06T11:09:12.000Z","dns_since":"2026-11-05T11:08:55.000Z","findings":[{"id":"foqzrcwhw7koewwzbqvxs","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T10:16:02.124Z","first_published":"2026-11-05T11:00:02.717Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=refund-altura.com"},{"hostname":"rhonevne.live","first_observed":"2026-11-05T09:46:00.953Z","first_published":"2026-11-05T11:00:02.717Z","brands":[],"dns":"resolved","resolved":["104.21.16.205","172.67.215.234"],"resolved_at":"2026-11-05T09:47:12Z","dns_checked_at":"2026-11-06T11:09:12.000Z","dns_since":"2026-11-05T11:08:55.000Z","findings":[{"id":"f6bdhj3qcaqcsui37zwxb","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T09:46:00.953Z","first_published":"2026-11-05T11:00:02.717Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=rhonevne.live"},{"hostname":"saglkrhberlri.cfd","first_observed":"2026-11-05T09:45:22.347Z","first_published":"2026-11-05T11:00:02.717Z","brands":[],"dns":"resolved","resolved":["31.56.209.3","104.21.9.138","172.67.160.129","2606:4700:3030::6815:98a","2606:4700:3037::ac43:a081"],"resolved_at":"2026-11-05T09:54:02Z","dns_checked_at":"2026-11-06T11:09:12.000Z","dns_since":"2026-11-05T11:08:55.000Z","findings":[{"id":"ftl55httxuupd7t2luf3t","kind":"reported_domain","summary":"Listed by USOM","first_observed":"2026-11-05T09:45:22.347Z","first_published":"2026-11-05T11:00:02.717Z","source":"usom","source_name":"USOM"}],"url":"https://domainspoof.com/live?show=all&q=saglkrhberlri.cfd"},{"hostname":"sandbox.zenavlico.cyou","first_observed":"2026-11-05T10:05:40.883Z","first_published":"2026-11-05T11:00:02.717Z","brands":[],"dns":"resolved","resolved":["95.85.244.13"],"resolved_at":"2026-11-05T10:05:53Z","dns_checked_at":"2026-11-06T11:09:12.000Z","dns_since":"2026-11-05T11:08:55.000Z","findings":[{"id":"fgtdqw35c5ctrtg6dtjfb","kind":"reported_domain","summary":"Under zenavlico.cyou, listed by CERT Polska","first_observed":"2026-11-05T10:05:40.883Z","first_published":"2026-11-05T11:00:02.717Z","source":"cert_polska","source_name":"CERT Polska","under":"zenavlico.cyou"}],"url":"https://domainspoof.com/live?show=all&q=sandbox.zenavlico.cyou"},{"hostname":"savrynpulseai.com","first_observed":"2026-11-05T09:51:13.601Z","first_published":"2026-11-05T11:00:02.717Z","brands":[],"dns":"resolved","resolved":["104.21.58.220","172.67.209.17"],"resolved_at":"2026-11-05T10:01:27Z","dns_checked_at":"2026-11-06T11:09:12.000Z","dns_since":"2026-11-05T11:08:55.000Z","findings":[{"id":"fulrpv6mxu7mpaqhytu7e","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T09:51:13.601Z","first_published":"2026-11-05T11:00:02.717Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=savrynpulseai.com"},{"hostname":"savrynpulseai.org","first_observed":"2026-11-05T10:51:45.629Z","first_published":"2026-11-05T11:00:02.717Z","brands":[],"dns":"resolved","resolved":["104.21.22.130","172.67.205.19"],"resolved_at":"2026-11-05T10:55:24Z","dns_checked_at":"2026-11-06T11:09:12.000Z","dns_since":"2026-11-05T11:08:55.000Z","findings":[{"id":"faowefwvyftsuc6ibiy6k","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T10:51:45.629Z","first_published":"2026-11-05T11:00:02.717Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=savrynpulseai.org"},{"hostname":"seafile.zenavlico.cyou","first_observed":"2026-11-05T10:46:36.104Z","first_published":"2026-11-05T11:00:02.717Z","brands":[],"dns":"resolved","resolved":["95.85.244.13"],"resolved_at":"2026-11-05T10:50:23Z","dns_checked_at":"2026-11-06T11:09:12.000Z","dns_since":"2026-11-05T11:08:55.000Z","findings":[{"id":"fad6mjd5zpgogv3njx6zw","kind":"reported_domain","summary":"Under zenavlico.cyou, listed by CERT Polska","first_observed":"2026-11-05T10:46:36.104Z","first_published":"2026-11-05T11:00:02.717Z","source":"cert_polska","source_name":"CERT Polska","under":"zenavlico.cyou"}],"url":"https://domainspoof.com/live?show=all&q=seafile.zenavlico.cyou"},{"hostname":"seeyould6432.eu.cc","first_observed":"2026-11-05T09:46:00.953Z","first_published":"2026-11-05T11:00:02.717Z","brands":[],"dns":"resolved","resolved":["104.21.23.47","172.67.209.47"],"resolved_at":"2026-11-05T09:47:13Z","dns_checked_at":"2026-11-06T11:09:12.000Z","dns_since":"2026-11-05T11:08:55.000Z","findings":[{"id":"fp4tcr4hdaecbmeyosuz2","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T09:46:00.953Z","first_published":"2026-11-05T11:00:02.717Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=seeyould6432.eu.cc"},{"hostname":"sociquo.com","first_observed":"2026-11-05T09:51:13.601Z","first_published":"2026-11-05T11:00:02.717Z","brands":[],"dns":"resolved","resolved":["104.21.54.197","172.67.141.94"],"resolved_at":"2026-11-05T10:01:27Z","dns_checked_at":"2026-11-06T11:09:12.000Z","dns_since":"2026-11-05T11:08:55.000Z","findings":[{"id":"f5rbuyiiuipgstikra5ko","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T09:51:13.601Z","first_published":"2026-11-05T11:00:02.717Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=sociquo.com"},{"hostname":"sola.digi4our.dev","first_observed":"2026-11-05T10:16:02.124Z","first_published":"2026-11-05T11:00:02.717Z","brands":[],"dns":"resolved","resolved":["69.161.221.116"],"resolved_at":"2026-11-05T10:16:25Z","dns_checked_at":"2026-11-06T11:09:12.000Z","dns_since":"2026-11-05T11:08:55.000Z","findings":[{"id":"fzvaztnyfwxeguiomkyki","kind":"reported_domain","summary":"Under digi4our.dev, listed by MetaMask","first_observed":"2026-11-05T10:16:02.124Z","first_published":"2026-11-05T11:00:02.717Z","source":"metamask","source_name":"MetaMask","under":"digi4our.dev"}],"url":"https://domainspoof.com/live?show=all&q=sola.digi4our.dev"},{"hostname":"solaxy-tokens.pages.dev","first_observed":"2026-11-05T09:46:00.953Z","first_published":"2026-11-05T11:00:02.717Z","brands":[],"dns":"resolved","resolved":["172.66.45.4","172.66.46.252"],"resolved_at":"2026-11-05T09:47:13Z","dns_checked_at":"2026-11-06T11:09:12.000Z","dns_since":"2026-11-05T11:08:55.000Z","findings":[{"id":"fwfvejslf75g5gpw5hygy","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T09:46:00.953Z","first_published":"2026-11-05T11:00:02.717Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=solaxy-tokens.pages.dev"},{"hostname":"solomon-ledger.top","first_observed":"2026-11-05T10:10:52.552Z","first_published":"2026-11-05T11:00:02.717Z","brands":[],"dns":"resolved","resolved":["182.92.134.50"],"resolved_at":"2026-11-05T10:11:24Z","dns_checked_at":"2026-11-06T11:09:12.000Z","dns_since":"2026-11-05T11:08:55.000Z","findings":[{"id":"f4qu4uefnqzm7m4crtjya","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T10:10:52.552Z","first_published":"2026-11-05T11:00:02.717Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=solomon-ledger.top"},{"hostname":"sopharmacy.outletpl.com","first_observed":"2026-11-05T09:56:24.566Z","first_published":"2026-11-05T11:00:02.717Z","brands":[],"dns":"resolved","resolved":["104.21.33.225","172.67.151.23"],"resolved_at":"2026-11-05T10:09:55Z","dns_checked_at":"2026-11-06T11:09:12.000Z","dns_since":"2026-11-05T11:08:55.000Z","findings":[{"id":"fmibm5i3jznmbpsguoozm","kind":"reported_domain","summary":"Under outletpl.com, listed by CERT Polska","first_observed":"2026-11-05T09:56:24.566Z","first_published":"2026-11-05T11:00:02.717Z","source":"cert_polska","source_name":"CERT Polska","under":"outletpl.com"}],"url":"https://domainspoof.com/live?show=all&q=sopharmacy.outletpl.com"},{"hostname":"sp19ct7-lurem-biz-vadex-kafis.pages.dev","first_observed":"2026-11-05T10:10:52.552Z","first_published":"2026-11-05T11:00:02.717Z","brands":[],"dns":"resolved","resolved":["172.66.45.42","172.66.46.214"],"resolved_at":"2026-11-05T10:11:24Z","dns_checked_at":"2026-11-06T11:09:12.000Z","dns_since":"2026-11-05T11:08:55.000Z","findings":[{"id":"foqbsziw6sxt67kelgthl","kind":"reported_domain","summary":"Reported by PhishTank","first_observed":"2026-11-05T10:10:52.552Z","first_published":"2026-11-05T11:00:02.717Z","source":"phishtank","source_name":"PhishTank","source_url":"https://phishtank.org/phish_detail.php?phish_id=9479563"}],"url":"https://domainspoof.com/live?show=all&q=sp19ct7-lurem-biz-vadex-kafis.pages.dev"},{"hostname":"sp19ct7-safem-biz-lurex-donik.pages.dev","first_observed":"2026-11-05T10:46:36.104Z","first_published":"2026-11-05T11:00:02.717Z","brands":[],"dns":"resolved","resolved":["172.66.44.57","172.66.47.199"],"resolved_at":"2026-11-05T10:50:23Z","dns_checked_at":"2026-11-06T11:09:12.000Z","dns_since":"2026-11-05T11:08:55.000Z","findings":[{"id":"fbc56hlp7bauhu56ebjaw","kind":"reported_domain","summary":"Reported by PhishTank","first_observed":"2026-11-05T10:46:36.104Z","first_published":"2026-11-05T11:00:02.717Z","source":"phishtank","source_name":"PhishTank","source_url":"https://phishtank.org/phish_detail.php?phish_id=9479585"}],"url":"https://domainspoof.com/live?show=all&q=sp19ct7-safem-biz-lurex-donik.pages.dev"},{"hostname":"sp19ct7-soren-biz-lurek-dafim.pages.dev","first_observed":"2026-11-05T10:31:06.562Z","first_published":"2026-11-05T11:00:02.717Z","brands":[],"dns":"resolved","resolved":["172.66.44.187","172.66.47.69"],"resolved_at":"2026-11-05T10:39:34Z","dns_checked_at":"2026-11-06T11:09:12.000Z","dns_since":"2026-11-05T11:08:55.000Z","findings":[{"id":"f3jj3wxiay2g3x2konlmd","kind":"reported_domain","summary":"Reported by PhishTank","first_observed":"2026-11-05T10:31:06.562Z","first_published":"2026-11-05T11:00:02.717Z","source":"phishtank","source_name":"PhishTank","source_url":"https://phishtank.org/phish_detail.php?phish_id=9479592"}],"url":"https://domainspoof.com/live?show=all&q=sp19ct7-soren-biz-lurek-dafim.pages.dev"},{"hostname":"srotomasti.store","first_observed":"2026-11-05T10:31:06.562Z","first_published":"2026-11-05T11:00:02.717Z","brands":[],"dns":"resolved","resolved":["104.21.56.228","172.67.137.170"],"resolved_at":"2026-11-05T10:39:34Z","dns_checked_at":"2026-11-06T11:09:12.000Z","dns_since":"2026-11-05T11:08:55.000Z","findings":[{"id":"fv6fdp63dxq5n3om4zm3l","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T10:31:06.562Z","first_published":"2026-11-05T11:00:02.717Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=srotomasti.store"},{"hostname":"staging.eventlogicinc.com","first_observed":"2026-11-05T10:10:52.552Z","first_published":"2026-11-05T11:00:02.717Z","brands":[],"dns":"resolved","resolved":["162.4.84.215"],"resolved_at":"2026-11-05T10:11:25Z","dns_checked_at":"2026-11-06T11:09:12.000Z","dns_since":"2026-11-05T11:08:55.000Z","findings":[{"id":"fwrdzkla5clk7qoc4j2y2","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T10:10:52.552Z","first_published":"2026-11-05T11:00:02.717Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/staging.eventlogicinc.com/"}],"url":"https://domainspoof.com/live?show=all&q=staging.eventlogicinc.com"},{"hostname":"startrekoutpostsunknownwiki.wiki","first_observed":"2026-11-05T10:36:17.594Z","first_published":"2026-11-05T11:00:02.717Z","brands":[],"dns":"resolved","resolved":["104.21.37.157","172.67.210.83"],"resolved_at":"2026-11-06T03:31:42Z","dns_checked_at":"2026-11-06T11:09:12.000Z","dns_since":"2026-11-05T11:08:55.000Z","findings":[{"id":"fps36hpsvbrdn3rin4jew","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T10:36:17.594Z","first_published":"2026-11-05T11:00:02.717Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=startrekoutpostsunknownwiki.wiki"},{"hostname":"strombitpuls.com","first_observed":"2026-11-05T09:51:13.601Z","first_published":"2026-11-05T11:00:02.717Z","brands":[],"dns":"resolved","resolved":["185.62.57.48"],"resolved_at":"2026-11-05T10:01:27Z","dns_checked_at":"2026-11-06T11:09:12.000Z","dns_since":"2026-11-05T11:08:55.000Z","findings":[{"id":"fwf47jtzd6dovrn7dx7yt","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T09:51:13.601Z","first_published":"2026-11-05T11:00:02.717Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=strombitpuls.com"},{"hostname":"sumx.transforbsc.org","first_observed":"2026-11-05T10:51:45.629Z","first_published":"2026-11-05T11:00:02.717Z","brands":[],"dns":"resolved","resolved":["91.229.239.28"],"resolved_at":"2026-11-05T10:55:25Z","dns_checked_at":"2026-11-06T11:09:12.000Z","dns_since":"2026-11-05T11:08:55.000Z","findings":[{"id":"fsb4bmjjd3lxrt4qpnimm","kind":"reported_domain","summary":"Under transforbsc.org, reported by PhishDestroy","first_observed":"2026-11-05T10:51:45.629Z","first_published":"2026-11-05T11:00:02.717Z","source":"phishdestroy","source_name":"PhishDestroy","under":"transforbsc.org","source_url":"https://phishdestroy.io/domain/transforbsc.org/"}],"url":"https://domainspoof.com/live?show=all&q=sumx.transforbsc.org"},{"hostname":"telecturna.shop","first_observed":"2026-11-05T10:21:11.832Z","first_published":"2026-11-05T11:00:02.717Z","brands":[],"dns":"resolved","resolved":["104.21.23.118","172.67.210.213"],"resolved_at":"2026-11-05T10:25:22Z","dns_checked_at":"2026-11-06T11:09:12.000Z","dns_since":"2026-11-05T11:08:55.000Z","findings":[{"id":"fosrqrb3xio5nnhmjskcw","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T10:21:11.832Z","first_published":"2026-11-05T11:00:02.717Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=telecturna.shop"},{"hostname":"teleotepro.club","first_observed":"2026-11-05T10:51:45.629Z","first_published":"2026-11-05T11:00:02.717Z","brands":[],"dns":"resolved","resolved":["104.21.70.47","172.67.219.251"],"resolved_at":"2026-11-05T10:55:26Z","dns_checked_at":"2026-11-06T11:09:12.000Z","dns_since":"2026-11-05T11:08:55.000Z","findings":[{"id":"fbhn3pj6xsjn3gvvykfta","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T10:51:45.629Z","first_published":"2026-11-05T11:00:02.717Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=teleotepro.club"},{"hostname":"teletxvelf.help","first_observed":"2026-11-05T10:51:45.629Z","first_published":"2026-11-05T11:00:02.717Z","brands":[],"dns":"resolved","resolved":["104.21.79.75","172.67.169.87"],"resolved_at":"2026-11-05T10:55:26Z","dns_checked_at":"2026-11-06T11:09:12.000Z","dns_since":"2026-11-05T11:08:55.000Z","findings":[{"id":"fg7p7irgq6p4fjqsot4cg","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T10:51:45.629Z","first_published":"2026-11-05T11:00:02.717Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=teletxvelf.help"},{"hostname":"tesoromercivura.live","first_observed":"2026-11-05T10:36:17.594Z","first_published":"2026-11-05T11:00:02.717Z","brands":[],"dns":"resolved","resolved":["104.21.26.240","172.67.168.156"],"resolved_at":"2026-11-05T10:45:25Z","dns_checked_at":"2026-11-06T11:09:12.000Z","dns_since":"2026-11-05T11:08:55.000Z","findings":[{"id":"fi2puqtbz4e7memvykr35","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T10:36:17.594Z","first_published":"2026-11-05T11:00:02.717Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=tesoromercivura.live"},{"hostname":"the-kronpeakai.com","first_observed":"2026-11-05T10:41:23.987Z","first_published":"2026-11-05T11:00:02.717Z","brands":[],"dns":"resolved","resolved":["104.21.59.190","172.67.182.117"],"resolved_at":"2026-11-06T09:21:32Z","dns_checked_at":"2026-11-06T11:09:12.000Z","dns_since":"2026-11-05T11:08:55.000Z","findings":[{"id":"fc4lg2f2dq37c5qnmx3g4","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T10:41:23.987Z","first_published":"2026-11-05T11:00:02.717Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=the-kronpeakai.com"},{"hostname":"the-rheinnexusgpt.com","first_observed":"2026-11-05T10:51:45.629Z","first_published":"2026-11-05T11:00:02.717Z","brands":[],"dns":"resolved","resolved":["104.21.52.158","172.67.201.37"],"resolved_at":"2026-11-05T10:55:26Z","dns_checked_at":"2026-11-06T11:09:12.000Z","dns_since":"2026-11-05T11:08:55.000Z","findings":[{"id":"fnokqrvueee5wh7his6mb","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T10:51:45.629Z","first_published":"2026-11-05T11:00:02.717Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=the-rheinnexusgpt.com"},{"hostname":"tisinfhedwj.monster","first_observed":"2026-11-05T09:51:13.601Z","first_published":"2026-11-05T11:00:02.717Z","brands":[],"dns":"resolved","resolved":["104.21.34.243","172.67.210.26"],"resolved_at":"2026-11-05T10:01:27Z","dns_checked_at":"2026-11-06T11:09:12.000Z","dns_since":"2026-11-05T11:08:55.000Z","findings":[{"id":"f7ui5j4fhd42kpe6rmwaz","kind":"reported_domain","summary":"Listed by NPA 165 (information services)","first_observed":"2026-11-05T09:51:13.601Z","first_published":"2026-11-05T11:00:02.717Z","source":"npa","source_name":"NPA 165","claim":{"category":"information services"}}],"url":"https://domainspoof.com/live?show=all&q=tisinfhedwj.monster"},{"hostname":"tkg-tap-randvznsz.com","first_observed":"2026-11-05T09:45:22.347Z","first_published":"2026-11-05T11:00:02.717Z","brands":[],"dns":"resolved","resolved":["104.21.28.251","172.67.147.238","2606:4700:3032::ac43:93ee","2606:4700:3037::6815:1cfb"],"resolved_at":"2026-11-05T09:54:02Z","dns_checked_at":"2026-11-06T11:09:12.000Z","dns_since":"2026-11-05T11:08:55.000Z","findings":[{"id":"fnbna6ferx5jabek7n4yg","kind":"reported_domain","summary":"Listed by USOM","first_observed":"2026-11-05T09:45:22.347Z","first_published":"2026-11-05T11:00:02.717Z","source":"usom","source_name":"USOM"}],"url":"https://domainspoof.com/live?show=all&q=tkg-tap-randvznsz.com"},{"hostname":"tovagovopo.store","first_observed":"2026-11-05T10:51:45.629Z","first_published":"2026-11-05T11:00:02.717Z","brands":[],"dns":"no_address","resolved":[],"resolved_at":"2026-11-05T10:51:51Z","dns_checked_at":"2026-11-06T11:09:12.000Z","dns_since":"2026-11-05T11:08:55.000Z","findings":[{"id":"fmjuxjmh6h6iosun4q63x","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T10:51:45.629Z","first_published":"2026-11-05T11:00:02.717Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=tovagovopo.store"},{"hostname":"track.highstreetpharma.net","first_observed":"2026-11-05T10:51:45.629Z","first_published":"2026-11-05T11:00:02.717Z","brands":[],"dns":"resolved","resolved":["104.21.11.211","172.67.192.166"],"resolved_at":"2026-11-05T10:51:51Z","dns_checked_at":"2026-11-06T11:09:12.000Z","dns_since":"2026-11-05T11:08:55.000Z","findings":[{"id":"fqiblbozjlcpcyweohryn","kind":"reported_domain","summary":"Under highstreetpharma.net, reported by PhishDestroy","first_observed":"2026-11-05T10:51:45.629Z","first_published":"2026-11-05T11:00:02.717Z","source":"phishdestroy","source_name":"PhishDestroy","under":"highstreetpharma.net","source_url":"https://phishdestroy.io/domain/highstreetpharma.net/"}],"url":"https://domainspoof.com/live?show=all&q=track.highstreetpharma.net"},{"hostname":"traderproai-software-com.financecryptoworld.com","first_observed":"2026-11-05T10:31:06.562Z","first_published":"2026-11-05T11:00:02.717Z","brands":[],"dns":"resolved","resolved":["104.21.10.130","172.67.131.121"],"resolved_at":"2026-11-05T10:31:18Z","dns_checked_at":"2026-11-06T11:09:12.000Z","dns_since":"2026-11-05T11:08:55.000Z","findings":[{"id":"f5ucvgfm5oqcbxps22hbh","kind":"reported_domain","summary":"Under financecryptoworld.com, listed by CERT Polska","first_observed":"2026-11-05T10:31:06.562Z","first_published":"2026-11-05T11:00:02.717Z","source":"cert_polska","source_name":"CERT Polska","under":"financecryptoworld.com"}],"url":"https://domainspoof.com/live?show=all&q=traderproai-software-com.financecryptoworld.com"},{"hostname":"treasury-flare.finance","first_observed":"2026-11-05T10:21:11.832Z","first_published":"2026-11-05T11:00:02.717Z","brands":[],"dns":"resolved","resolved":["104.21.79.233","172.67.149.236"],"resolved_at":"2026-11-05T10:25:24Z","dns_checked_at":"2026-11-06T11:09:12.000Z","dns_since":"2026-11-05T11:08:55.000Z","findings":[{"id":"fezszmtgxxi7nqflkw6vb","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T10:21:11.832Z","first_published":"2026-11-05T11:00:02.717Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=treasury-flare.finance"},{"hostname":"tria-airdrop.click","first_observed":"2026-11-05T10:16:02.124Z","first_published":"2026-11-05T11:00:02.717Z","brands":[],"dns":"resolved","resolved":["104.21.49.146","172.67.163.171"],"resolved_at":"2026-11-05T10:16:27Z","dns_checked_at":"2026-11-06T11:09:12.000Z","dns_since":"2026-11-05T11:08:55.000Z","findings":[{"id":"fubghhffuc6u5c6kldcoy","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T10:16:02.124Z","first_published":"2026-11-05T11:00:02.717Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=tria-airdrop.click"},{"hostname":"trustwalletcardpre.com","first_observed":"2026-11-05T10:36:17.594Z","first_published":"2026-11-05T11:00:02.717Z","brands":[],"dns":"resolved","resolved":["104.21.15.32","172.67.161.73"],"resolved_at":"2026-11-05T10:45:26Z","dns_checked_at":"2026-11-06T11:09:12.000Z","dns_since":"2026-11-05T11:08:55.000Z","findings":[{"id":"fm3ghb6zoyma5uz53645q","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T10:36:17.594Z","first_published":"2026-11-05T11:00:02.717Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=trustwalletcardpre.com"},{"hostname":"turkcellpasajmagazm.store","first_observed":"2026-11-05T09:45:22.347Z","first_published":"2026-11-05T11:00:02.717Z","brands":[],"dns":"resolved","resolved":["172.236.104.43","172.236.104.157","172.238.172.122"],"resolved_at":"2026-11-05T09:54:03Z","dns_checked_at":"2026-11-06T11:09:12.000Z","dns_since":"2026-11-05T11:08:55.000Z","findings":[{"id":"fqexomjcs4jlvywr3ok64","kind":"reported_domain","summary":"Listed by USOM","first_observed":"2026-11-05T09:45:22.347Z","first_published":"2026-11-05T11:00:02.717Z","source":"usom","source_name":"USOM"}],"url":"https://domainspoof.com/live?show=all&q=turkcellpasajmagazm.store"},{"hostname":"ukoakviewcentral.com","first_observed":"2026-11-05T10:26:24.168Z","first_published":"2026-11-05T11:00:02.717Z","brands":[],"dns":"resolved","resolved":["104.21.47.145","172.67.148.114"],"resolved_at":"2026-11-05T10:30:25Z","dns_checked_at":"2026-11-06T11:09:12.000Z","dns_since":"2026-11-05T11:08:55.000Z","findings":[{"id":"fy6v23sfksaumb3g5dlfs","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T10:26:24.168Z","first_published":"2026-11-05T11:00:02.717Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=ukoakviewcentral.com"},{"hostname":"unstableotc.com","first_observed":"2026-11-05T10:51:45.629Z","first_published":"2026-11-05T11:00:02.717Z","brands":[],"dns":"resolved","resolved":["216.150.1.1","216.150.16.1"],"resolved_at":"2026-11-05T10:51:52Z","dns_checked_at":"2026-11-06T11:09:12.000Z","dns_since":"2026-11-05T11:08:55.000Z","findings":[{"id":"ftylgkenrv4feetve5vjb","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T10:51:45.629Z","first_published":"2026-11-05T11:00:02.717Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=unstableotc.com"},{"hostname":"vd.ibc.ezgateway.net","first_observed":"2026-11-05T09:46:00.953Z","first_published":"2026-11-05T11:00:02.717Z","brands":[],"dns":"resolved","resolved":["172.66.44.194","172.66.47.62"],"resolved_at":"2026-11-05T09:47:15Z","dns_checked_at":"2026-11-06T11:09:13.000Z","dns_since":"2026-11-05T11:08:55.000Z","findings":[{"id":"ft7tou3isuerpfbhzhfvs","kind":"reported_domain","summary":"Under ezgateway.net, listed by USOM","first_observed":"2026-11-05T09:46:00.953Z","first_published":"2026-11-05T11:00:02.717Z","source":"usom","source_name":"USOM","under":"ezgateway.net"}],"url":"https://domainspoof.com/live?show=all&q=vd.ibc.ezgateway.net"},{"hostname":"venture-coinbase.com","first_observed":"2026-11-05T10:45:26.740Z","first_published":"2026-11-05T11:00:02.717Z","brands":[{"id":"coinbase","name":"Coinbase","url":"https://domainspoof.com/brands/coinbase"}],"dns":"not_found","resolved":["45.83.179.203"],"resolved_at":"2026-11-05T23:55:23Z","dns_checked_at":"2026-11-06T12:59:11.000Z","findings":[{"id":"ff3773iomm454zkvlxfku","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","source":"metamask","source_name":"MetaMask"},{"id":"f6ym6vgo72se5ui64pe4l","kind":"phishing_infrastructure","summary":"Resolved to 45.83.179.203, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T10:45:26.740Z","first_published":"2026-11-05T11:00:02.717Z","address":"45.83.179.203","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/coinbase"},{"hostname":"voting-hash256.org","first_observed":"2026-11-05T10:16:02.124Z","first_published":"2026-11-05T11:00:02.717Z","brands":[],"dns":"resolved","resolved":["104.21.64.133","172.67.151.11"],"resolved_at":"2026-11-05T10:16:27Z","dns_checked_at":"2026-11-06T11:09:13.000Z","dns_since":"2026-11-05T11:08:55.000Z","findings":[{"id":"ft3xsxvll7qndqwzipaja","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T10:16:02.124Z","first_published":"2026-11-05T11:00:02.717Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=voting-hash256.org"},{"hostname":"web3apex.top","first_observed":"2026-11-05T09:46:00.953Z","first_published":"2026-11-05T11:00:02.717Z","brands":[],"dns":"resolved","resolved":["104.21.40.90","172.67.183.70"],"resolved_at":"2026-11-05T09:47:15Z","dns_checked_at":"2026-11-06T11:09:13.000Z","dns_since":"2026-11-05T11:08:55.000Z","findings":[{"id":"fzpjx2p2pbrrclj5ux74d","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T09:46:00.953Z","first_published":"2026-11-05T11:00:02.717Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=web3apex.top"},{"hostname":"webdisk.atlaxchazebanking.com","first_observed":"2026-11-05T10:36:17.594Z","first_published":"2026-11-05T11:00:02.717Z","brands":[],"dns":"resolved","resolved":["104.21.45.142","172.67.215.49"],"resolved_at":"2026-11-05T10:45:27Z","dns_checked_at":"2026-11-06T11:09:13.000Z","dns_since":"2026-11-05T11:08:55.000Z","findings":[{"id":"fwxljl6324t6yyf7h2uzh","kind":"reported_domain","summary":"Under atlaxchazebanking.com, reported by PhishDestroy","first_observed":"2026-11-05T10:36:17.594Z","first_published":"2026-11-05T11:00:02.717Z","source":"phishdestroy","source_name":"PhishDestroy","under":"atlaxchazebanking.com","source_url":"https://phishdestroy.io/domain/atlaxchazebanking.com/"}],"url":"https://domainspoof.com/live?show=all&q=webdisk.atlaxchazebanking.com"},{"hostname":"webdisk.geckotristate.com","first_observed":"2026-11-05T10:00:34.574Z","first_published":"2026-11-05T11:00:02.717Z","brands":[],"dns":"resolved","resolved":["68.66.226.89"],"resolved_at":"2026-11-05T10:01:01Z","dns_checked_at":"2026-11-06T11:09:13.000Z","dns_since":"2026-11-05T11:08:55.000Z","findings":[{"id":"fslltia4qx75perygxghm","kind":"reported_domain","summary":"Under geckotristate.com, reported by PhishDestroy","first_observed":"2026-11-05T10:00:34.574Z","first_published":"2026-11-05T11:00:02.717Z","source":"phishdestroy","source_name":"PhishDestroy","under":"geckotristate.com","source_url":"https://phishdestroy.io/domain/geckotristate.com/"}],"url":"https://domainspoof.com/live?show=all&q=webdisk.geckotristate.com"},{"hostname":"webdisk.multicoin-invest.com","first_observed":"2026-11-05T10:26:24.168Z","first_published":"2026-11-05T11:00:02.717Z","brands":[],"dns":"resolved","resolved":["151.246.1.103"],"resolved_at":"2026-11-05T10:30:25Z","dns_checked_at":"2026-11-06T11:09:13.000Z","dns_since":"2026-11-05T11:08:55.000Z","findings":[{"id":"f3m4bsyeubash7okrpem7","kind":"reported_domain","summary":"Under multicoin-invest.com, reported by PhishDestroy","first_observed":"2026-11-05T10:26:24.168Z","first_published":"2026-11-05T11:00:02.717Z","source":"phishdestroy","source_name":"PhishDestroy","under":"multicoin-invest.com","source_url":"https://phishdestroy.io/domain/multicoin-invest.com/"}],"url":"https://domainspoof.com/live?show=all&q=webdisk.multicoin-invest.com"},{"hostname":"webmail.atlaxchazebanking.com","first_observed":"2026-11-05T10:36:17.594Z","first_published":"2026-11-05T11:00:02.717Z","brands":[],"dns":"resolved","resolved":["104.21.45.142","172.67.215.49"],"resolved_at":"2026-11-05T10:45:27Z","dns_checked_at":"2026-11-06T11:09:13.000Z","dns_since":"2026-11-05T11:08:55.000Z","findings":[{"id":"fps7jwrmd26qzt2atgsfr","kind":"reported_domain","summary":"Under atlaxchazebanking.com, reported by PhishDestroy","first_observed":"2026-11-05T10:36:17.594Z","first_published":"2026-11-05T11:00:02.717Z","source":"phishdestroy","source_name":"PhishDestroy","under":"atlaxchazebanking.com","source_url":"https://phishdestroy.io/domain/atlaxchazebanking.com/"}],"url":"https://domainspoof.com/live?show=all&q=webmail.atlaxchazebanking.com"},{"hostname":"webmail.geckotristate.com","first_observed":"2026-11-05T10:00:34.574Z","first_published":"2026-11-05T11:00:02.717Z","brands":[],"dns":"resolved","resolved":["68.66.226.89"],"resolved_at":"2026-11-05T10:01:01Z","dns_checked_at":"2026-11-06T11:09:13.000Z","dns_since":"2026-11-05T11:08:55.000Z","findings":[{"id":"figyjimfp7fsgncndbjta","kind":"reported_domain","summary":"Under geckotristate.com, reported by PhishDestroy","first_observed":"2026-11-05T10:00:34.574Z","first_published":"2026-11-05T11:00:02.717Z","source":"phishdestroy","source_name":"PhishDestroy","under":"geckotristate.com","source_url":"https://phishdestroy.io/domain/geckotristate.com/"}],"url":"https://domainspoof.com/live?show=all&q=webmail.geckotristate.com"},{"hostname":"webmail.multicoin-invest.com","first_observed":"2026-11-05T10:26:24.168Z","first_published":"2026-11-05T11:00:02.717Z","brands":[],"dns":"resolved","resolved":["151.246.1.103"],"resolved_at":"2026-11-05T10:30:25Z","dns_checked_at":"2026-11-06T11:09:13.000Z","dns_since":"2026-11-05T11:08:55.000Z","findings":[{"id":"fqxpnfwyv37jluw2csxei","kind":"reported_domain","summary":"Under multicoin-invest.com, reported by PhishDestroy","first_observed":"2026-11-05T10:26:24.168Z","first_published":"2026-11-05T11:00:02.717Z","source":"phishdestroy","source_name":"PhishDestroy","under":"multicoin-invest.com","source_url":"https://phishdestroy.io/domain/multicoin-invest.com/"}],"url":"https://domainspoof.com/live?show=all&q=webmail.multicoin-invest.com"},{"hostname":"werkly.xyz","first_observed":"2026-11-05T10:26:24.168Z","first_published":"2026-11-05T11:00:02.717Z","brands":[],"dns":"resolved","resolved":["104.21.20.27","172.67.190.252"],"resolved_at":"2026-11-05T10:30:25Z","dns_checked_at":"2026-11-06T11:09:13.000Z","dns_since":"2026-11-05T11:08:55.000Z","findings":[{"id":"fam5xs36bv6d5665qar4s","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T10:26:24.168Z","first_published":"2026-11-05T11:00:02.717Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=werkly.xyz"},{"hostname":"weryfl-nr82643.eu.cc","first_observed":"2026-11-05T09:56:24.566Z","first_published":"2026-11-05T11:00:02.717Z","brands":[],"dns":"resolved","resolved":["104.21.52.42","172.67.195.17"],"resolved_at":"2026-11-05T10:09:59Z","dns_checked_at":"2026-11-06T11:09:13.000Z","dns_since":"2026-11-05T11:08:55.000Z","findings":[{"id":"fp62pdpvk5jupxepzvl4j","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T09:56:24.566Z","first_published":"2026-11-05T11:00:02.717Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=weryfl-nr82643.eu.cc"},{"hostname":"workshopskinforge.com","first_observed":"2026-11-05T10:21:11.832Z","first_published":"2026-11-05T11:00:02.717Z","brands":[],"dns":"resolved","resolved":["104.21.71.8","172.67.141.68"],"resolved_at":"2026-11-05T10:25:25Z","dns_checked_at":"2026-11-06T11:09:13.000Z","dns_since":"2026-11-05T11:08:55.000Z","findings":[{"id":"fcys6bfoh3ljgqgnolqdn","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T10:21:11.832Z","first_published":"2026-11-05T11:00:02.717Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/workshopskinforge.com/"}],"url":"https://domainspoof.com/live?show=all&q=workshopskinforge.com"},{"hostname":"wrencapstead.digital","first_observed":"2026-11-05T09:46:00.953Z","first_published":"2026-11-05T11:00:02.717Z","brands":[],"dns":"resolved","resolved":["104.21.83.145","172.67.177.113"],"resolved_at":"2026-11-05T09:47:16Z","dns_checked_at":"2026-11-06T11:09:13.000Z","dns_since":"2026-11-05T11:08:55.000Z","findings":[{"id":"f5qzqczojd2qinm3mnw2n","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T09:46:00.953Z","first_published":"2026-11-05T11:00:02.717Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=wrencapstead.digital"},{"hostname":"www-git-proj-pl-bph.pages.dev","first_observed":"2026-11-05T09:51:13.601Z","first_published":"2026-11-05T11:00:02.717Z","brands":[],"dns":"resolved","resolved":["172.66.44.157","172.66.47.99"],"resolved_at":"2026-11-05T10:01:30Z","dns_checked_at":"2026-11-06T11:09:13.000Z","dns_since":"2026-11-05T11:08:55.000Z","findings":[{"id":"fuo6qqkrn2gzm2jf6qa7l","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T09:51:13.601Z","first_published":"2026-11-05T11:00:02.717Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=www-git-proj-pl-bph.pages.dev"},{"hostname":"www.admin.login-cashapp.com","first_observed":"2026-11-05T10:01:30.322Z","first_published":"2026-11-05T11:00:02.717Z","brands":[{"id":"cash-app","name":"Cash App","url":"https://domainspoof.com/brands/cash-app"}],"dns":"resolved","resolved":["198.251.89.161"],"resolved_at":"2026-11-06T11:09:13Z","dns_checked_at":"2026-11-06T11:09:13.000Z","dns_since":"2026-11-05T11:08:55.000Z","findings":[{"id":"f5jq663yem6adhsdgvsfg","kind":"phishing_infrastructure","summary":"Resolved to 198.251.89.161, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T10:01:30.322Z","first_published":"2026-11-05T11:00:02.717Z","address":"198.251.89.161","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/cash-app"},{"hostname":"www.atlaxchazebanking.com","first_observed":"2026-11-05T10:36:17.594Z","first_published":"2026-11-05T11:00:02.717Z","brands":[],"dns":"resolved","resolved":["104.21.45.142","172.67.215.49"],"resolved_at":"2026-11-05T10:45:27Z","dns_checked_at":"2026-11-06T11:09:13.000Z","dns_since":"2026-11-05T11:08:55.000Z","findings":[{"id":"fzc5i4jm7lnlrh25htc2x","kind":"reported_domain","summary":"Under atlaxchazebanking.com, reported by PhishDestroy","first_observed":"2026-11-05T10:36:17.594Z","first_published":"2026-11-05T11:00:02.717Z","source":"phishdestroy","source_name":"PhishDestroy","under":"atlaxchazebanking.com","source_url":"https://phishdestroy.io/domain/atlaxchazebanking.com/"}],"url":"https://domainspoof.com/live?show=all&q=www.atlaxchazebanking.com"},{"hostname":"www.bigbasket.pk","first_observed":"2026-11-05T09:46:00.953Z","first_published":"2026-11-05T11:00:02.717Z","brands":[],"dns":"resolved","resolved":["91.108.98.109","93.127.179.175"],"resolved_at":"2026-11-05T09:47:16Z","dns_checked_at":"2026-11-06T11:09:13.000Z","dns_since":"2026-11-05T11:08:55.000Z","findings":[{"id":"fazviwgye35bp6afywzab","kind":"reported_domain","summary":"Under bigbasket.pk, reported by PhishDestroy","first_observed":"2026-11-05T09:46:00.953Z","first_published":"2026-11-05T11:00:02.717Z","source":"phishdestroy","source_name":"PhishDestroy","under":"bigbasket.pk","source_url":"https://phishdestroy.io/domain/bigbasket.pk/"}],"url":"https://domainspoof.com/live?show=all&q=www.bigbasket.pk"},{"hostname":"www.bitrefill.com-cn01-esim-gift.com","first_observed":"2026-11-05T10:25:25.888Z","first_published":"2026-11-05T11:00:02.717Z","brands":[{"id":"bitrefill","name":"Bitrefill","url":"https://domainspoof.com/brands/bitrefill"}],"dns":"resolved","resolved":["62.60.226.39"],"resolved_at":"2026-11-06T11:09:13Z","dns_checked_at":"2026-11-06T11:09:13.000Z","dns_since":"2026-11-05T11:08:55.000Z","findings":[{"id":"fqe56ci52bfnqvarxapbw","kind":"spamhaus_drop","summary":"Resolved to 62.60.226.39 on Spamhaus DROP","first_observed":"2026-11-05T10:25:25.888Z","first_published":"2026-11-05T11:00:02.717Z","address":"62.60.226.39","list":"spamhaus_drop","list_name":"Spamhaus DROP"}],"url":"https://domainspoof.com/brands/bitrefill"},{"hostname":"www.cielointelligence.com","first_observed":"2026-11-05T09:46:00.953Z","first_published":"2026-11-05T11:00:02.717Z","brands":[],"dns":"resolved","resolved":["104.18.22.186","104.18.23.186"],"resolved_at":"2026-11-05T09:47:16Z","dns_checked_at":"2026-11-06T11:09:13.000Z","dns_since":"2026-11-05T11:08:55.000Z","findings":[{"id":"f5fnw2t24o2vtixai65u4","kind":"reported_domain","summary":"Under cielointelligence.com, reported by PhishDestroy","first_observed":"2026-11-05T09:46:00.953Z","first_published":"2026-11-05T11:00:02.717Z","source":"phishdestroy","source_name":"PhishDestroy","under":"cielointelligence.com","source_url":"https://phishdestroy.io/domain/cielointelligence.com/"}],"url":"https://domainspoof.com/live?show=all&q=www.cielointelligence.com"},{"hostname":"www.coinbasellcus.com","first_observed":"2026-11-05T10:46:36.104Z","first_published":"2026-11-05T11:00:02.717Z","brands":[],"dns":"resolved","resolved":["198.49.23.144","198.49.23.145","198.185.159.144","198.185.159.145"],"resolved_at":"2026-11-05T10:50:26Z","dns_checked_at":"2026-11-06T11:09:13.000Z","dns_since":"2026-11-05T11:08:55.000Z","findings":[{"id":"feuu6j2ogtjqukx3dk67c","kind":"reported_domain","summary":"Under coinbasellcus.com, listed by MetaMask","first_observed":"2026-11-05T10:46:36.104Z","first_published":"2026-11-05T11:00:02.717Z","source":"metamask","source_name":"MetaMask","under":"coinbasellcus.com"}],"url":"https://domainspoof.com/live?show=all&q=www.coinbasellcus.com"},{"hostname":"www.deproecom.it","first_observed":"2026-11-05T10:31:06.562Z","first_published":"2026-11-05T11:00:02.717Z","brands":[],"dns":"resolved","resolved":["23.227.38.74"],"resolved_at":"2026-11-05T10:31:18Z","dns_checked_at":"2026-11-06T11:09:13.000Z","dns_since":"2026-11-05T11:08:55.000Z","findings":[{"id":"fxeacudjtlt4vhhn25qu5","kind":"reported_domain","summary":"Under deproecom.it, reported by PhishDestroy","first_observed":"2026-11-05T10:31:06.562Z","first_published":"2026-11-05T11:00:02.717Z","source":"phishdestroy","source_name":"PhishDestroy","under":"deproecom.it","source_url":"https://phishdestroy.io/domain/deproecom.it/"}],"url":"https://domainspoof.com/live?show=all&q=www.deproecom.it"},{"hostname":"www.fgm-clinic.com","first_observed":"2026-11-05T10:21:11.832Z","first_published":"2026-11-05T11:00:02.717Z","brands":[],"dns":"resolved","resolved":["177.211.118.185"],"resolved_at":"2026-11-05T10:25:26Z","dns_checked_at":"2026-11-06T11:09:13.000Z","dns_since":"2026-11-05T11:08:55.000Z","findings":[{"id":"f4bhzdt4uidmyodxojky2","kind":"reported_domain","summary":"Under fgm-clinic.com, reported by PhishDestroy","first_observed":"2026-11-05T10:21:11.832Z","first_published":"2026-11-05T11:00:02.717Z","source":"phishdestroy","source_name":"PhishDestroy","under":"fgm-clinic.com","source_url":"https://phishdestroy.io/domain/fgm-clinic.com/"}],"url":"https://domainspoof.com/live?show=all&q=www.fgm-clinic.com"},{"hostname":"www.fibabanka.com","first_observed":"2026-11-05T10:21:11.832Z","first_published":"2026-11-05T11:00:02.717Z","brands":[],"dns":"not_found","resolved":[],"resolved_at":"2026-11-05T10:25:26Z","dns_checked_at":"2026-11-06T11:09:13.000Z","dns_since":"2026-11-05T11:08:55.000Z","findings":[{"id":"f3onxysbkyidn46cbnh4y","kind":"reported_domain","summary":"Under fibabanka.com, reported by PhishDestroy","first_observed":"2026-11-05T10:21:11.832Z","first_published":"2026-11-05T11:00:02.717Z","source":"phishdestroy","source_name":"PhishDestroy","under":"fibabanka.com","source_url":"https://phishdestroy.io/domain/fibabanka.com/"}],"url":"https://domainspoof.com/live?show=all&q=www.fibabanka.com"},{"hostname":"www.firsttexaco.direct-trust.com","first_observed":"2026-11-05T10:41:23.987Z","first_published":"2026-11-05T11:00:02.717Z","brands":[],"dns":"resolved","resolved":["51.68.55.111"],"resolved_at":"2026-11-05T10:41:48Z","dns_checked_at":"2026-11-06T11:09:13.000Z","dns_since":"2026-11-05T11:08:55.000Z","findings":[{"id":"f7j7h5s45cp34yufubx6k","kind":"reported_domain","summary":"Under direct-trust.com, listed by MetaMask","first_observed":"2026-11-05T10:41:23.987Z","first_published":"2026-11-05T11:00:02.717Z","source":"metamask","source_name":"MetaMask","under":"direct-trust.com"}],"url":"https://domainspoof.com/live?show=all&q=www.firsttexaco.direct-trust.com"},{"hostname":"www.fleetshose.shop","first_observed":"2026-11-05T10:10:52.552Z","first_published":"2026-11-05T11:00:02.717Z","brands":[],"dns":"resolved","resolved":["23.227.38.74"],"resolved_at":"2026-11-05T10:11:26Z","dns_checked_at":"2026-11-06T11:09:13.000Z","dns_since":"2026-11-05T11:08:55.000Z","findings":[{"id":"fj5oy7rvas737q4sxvyix","kind":"reported_domain","summary":"Under fleetshose.shop, listed by CERT Polska","first_observed":"2026-11-05T10:10:52.552Z","first_published":"2026-11-05T11:00:02.717Z","source":"cert_polska","source_name":"CERT Polska","under":"fleetshose.shop"}],"url":"https://domainspoof.com/live?show=all&q=www.fleetshose.shop"},{"hostname":"www.geckotristate.com","first_observed":"2026-11-05T10:00:34.574Z","first_published":"2026-11-05T11:00:02.717Z","brands":[],"dns":"resolved","resolved":["68.66.226.89"],"resolved_at":"2026-11-05T10:01:02Z","dns_checked_at":"2026-11-06T11:09:13.000Z","dns_since":"2026-11-05T11:08:55.000Z","findings":[{"id":"frjk4v5ldizwpsj4nmrhy","kind":"reported_domain","summary":"Under geckotristate.com, reported by PhishDestroy","first_observed":"2026-11-05T10:00:34.574Z","first_published":"2026-11-05T11:00:02.717Z","source":"phishdestroy","source_name":"PhishDestroy","under":"geckotristate.com","source_url":"https://phishdestroy.io/domain/geckotristate.com/"}],"url":"https://domainspoof.com/live?show=all&q=www.geckotristate.com"},{"hostname":"www.instagr.eu","first_observed":"2026-11-05T10:05:56.208Z","first_published":"2026-11-05T11:00:02.717Z","brands":[{"id":"instagram","name":"Instagram","url":"https://domainspoof.com/brands/instagram"}],"dns":"resolved","resolved":["2.57.91.91"],"resolved_at":"2026-11-06T11:09:13Z","dns_checked_at":"2026-11-06T11:09:13.000Z","dns_since":"2026-11-05T11:08:55.000Z","findings":[{"id":"fhjflqzi6wpvnf3ev2yzx","kind":"phishing_infrastructure","summary":"Resolved to 2.57.91.91, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T10:05:56.208Z","first_published":"2026-11-05T11:00:02.717Z","address":"2.57.91.91","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/instagram"},{"hostname":"www.learnblocksmart.com","first_observed":"2026-11-05T10:31:06.562Z","first_published":"2026-11-05T11:00:02.717Z","brands":[],"dns":"resolved","resolved":["52.223.13.41"],"resolved_at":"2026-11-05T10:31:18Z","dns_checked_at":"2026-11-06T11:09:13.000Z","dns_since":"2026-11-05T11:08:55.000Z","findings":[{"id":"fqaiixo4jfk47i4cep64q","kind":"reported_domain","summary":"Under learnblocksmart.com, reported by PhishDestroy","first_observed":"2026-11-05T10:31:06.562Z","first_published":"2026-11-05T11:00:02.717Z","source":"phishdestroy","source_name":"PhishDestroy","under":"learnblocksmart.com","source_url":"https://phishdestroy.io/domain/learnblocksmart.com/"}],"url":"https://domainspoof.com/live?show=all&q=www.learnblocksmart.com"},{"hostname":"www.linshuop.shop","first_observed":"2026-11-05T10:26:24.168Z","first_published":"2026-11-05T11:00:02.717Z","brands":[],"dns":"resolved","resolved":["104.17.246.119","104.17.247.119"],"resolved_at":"2026-11-05T10:30:26Z","dns_checked_at":"2026-11-06T11:09:13.000Z","dns_since":"2026-11-05T11:08:55.000Z","findings":[{"id":"f5hqzfar2jamdn6b2nf4e","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T10:26:24.168Z","first_published":"2026-11-05T11:00:02.717Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=www.linshuop.shop"},{"hostname":"www.macoline.keylines.net.in","first_observed":"2026-11-05T09:46:00.953Z","first_published":"2026-11-05T11:00:02.717Z","brands":[],"dns":"resolved","resolved":["157.15.130.67"],"resolved_at":"2026-11-05T09:47:17Z","dns_checked_at":"2026-11-06T11:09:13.000Z","dns_since":"2026-11-05T11:08:55.000Z","findings":[{"id":"fsabatsys2jt7qw3ezyld","kind":"reported_domain","summary":"Under keylines.net.in, listed by CERT Polska","first_observed":"2026-11-05T09:46:00.953Z","first_published":"2026-11-05T11:00:02.717Z","source":"cert_polska","source_name":"CERT Polska","under":"keylines.net.in"}],"url":"https://domainspoof.com/live?show=all&q=www.macoline.keylines.net.in"},{"hostname":"www.meson-galicia.de","first_observed":"2026-11-05T10:11:26.930Z","first_published":"2026-11-05T11:00:02.717Z","brands":[{"id":"banco-galicia","name":"Banco Galicia","url":"https://domainspoof.com/brands/banco-galicia"}],"dns":"resolved","resolved":["81.169.145.74"],"resolved_at":"2026-11-06T11:09:13Z","dns_checked_at":"2026-11-06T11:09:13.000Z","dns_since":"2026-11-05T11:08:55.000Z","findings":[{"id":"fqr56ygugeex4vxwdbkpr","kind":"phishing_infrastructure","summary":"Resolved to 81.169.145.74, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T10:11:26.930Z","first_published":"2026-11-05T11:00:02.717Z","address":"81.169.145.74","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/banco-galicia"},{"hostname":"www.migrantsofthemed.com","first_observed":"2026-11-05T10:21:11.832Z","first_published":"2026-11-05T11:00:02.717Z","brands":[],"dns":"resolved","resolved":["198.49.23.144","198.49.23.145","198.185.159.144","198.185.159.145"],"resolved_at":"2026-11-05T10:25:26Z","dns_checked_at":"2026-11-06T11:09:13.000Z","dns_since":"2026-11-05T11:08:55.000Z","findings":[{"id":"fm7xgrm7paqx4m7w6yba3","kind":"reported_domain","summary":"Under migrantsofthemed.com, listed by MetaMask","first_observed":"2026-11-05T10:21:11.832Z","first_published":"2026-11-05T11:00:02.717Z","source":"metamask","source_name":"MetaMask","under":"migrantsofthemed.com"}],"url":"https://domainspoof.com/live?show=all&q=www.migrantsofthemed.com"},{"hostname":"www.multicoin-invest.com","first_observed":"2026-11-05T10:26:24.168Z","first_published":"2026-11-05T11:00:02.717Z","brands":[],"dns":"resolved","resolved":["151.246.1.103"],"resolved_at":"2026-11-05T10:30:26Z","dns_checked_at":"2026-11-06T11:09:13.000Z","dns_since":"2026-11-05T11:08:55.000Z","findings":[{"id":"f4ixywwyjwgla3mn22bok","kind":"reported_domain","summary":"Under multicoin-invest.com, reported by PhishDestroy","first_observed":"2026-11-05T10:26:24.168Z","first_published":"2026-11-05T11:00:02.717Z","source":"phishdestroy","source_name":"PhishDestroy","under":"multicoin-invest.com","source_url":"https://phishdestroy.io/domain/multicoin-invest.com/"}],"url":"https://domainspoof.com/live?show=all&q=www.multicoin-invest.com"},{"hostname":"www.my-trezorsuite.co.com","first_observed":"2026-11-05T10:31:06.562Z","first_published":"2026-11-05T11:00:02.717Z","brands":[],"dns":"resolved","resolved":["185.53.179.136"],"resolved_at":"2026-11-05T10:31:18Z","dns_checked_at":"2026-11-06T11:09:13.000Z","dns_since":"2026-11-05T11:08:55.000Z","findings":[{"id":"fdu4bobijej7wag6xp4wl","kind":"reported_domain","summary":"Under my-trezorsuite.co.com, listed by MetaMask","first_observed":"2026-11-05T10:31:06.562Z","first_published":"2026-11-05T11:00:02.717Z","source":"metamask","source_name":"MetaMask","under":"my-trezorsuite.co.com"}],"url":"https://domainspoof.com/live?show=all&q=www.my-trezorsuite.co.com"},{"hostname":"www.openai888.site","first_observed":"2026-11-05T10:16:28.168Z","first_published":"2026-11-05T11:00:02.717Z","brands":[{"id":"openai","name":"OpenAI","url":"https://domainspoof.com/brands/openai"}],"dns":"resolved","resolved":["47.246.22.197","47.246.22.248"],"resolved_at":"2026-11-05T11:08:55Z","dns_checked_at":"2026-11-06T11:09:13.000Z","dns_since":"2026-11-05T11:08:55.000Z","findings":[{"id":"febjcvmzh3ezflhtqjcm4","kind":"phishing_infrastructure","summary":"Resolved to 47.246.22.197, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T10:16:28.168Z","first_published":"2026-11-05T11:00:02.717Z","address":"47.246.22.197","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/openai"},{"hostname":"www.orangeox.com","first_observed":"2026-11-05T09:46:00.953Z","first_published":"2026-11-05T11:00:02.717Z","brands":[],"dns":"resolved","resolved":["192.185.147.224"],"resolved_at":"2026-11-05T09:47:17Z","dns_checked_at":"2026-11-06T11:09:13.000Z","dns_since":"2026-11-05T11:08:55.000Z","findings":[{"id":"f4upg6lczilaobhbfc3us","kind":"reported_domain","summary":"Under orangeox.com, reported by PhishDestroy","first_observed":"2026-11-05T09:46:00.953Z","first_published":"2026-11-05T11:00:02.717Z","source":"phishdestroy","source_name":"PhishDestroy","under":"orangeox.com","source_url":"https://phishdestroy.io/domain/orangeox.com/"}],"url":"https://domainspoof.com/live?show=all&q=www.orangeox.com"},{"hostname":"www.pay-bitrefill.com-cn01-esim-gift.com","first_observed":"2026-11-05T10:25:26.432Z","first_published":"2026-11-05T11:00:02.717Z","brands":[{"id":"bitrefill","name":"Bitrefill","url":"https://domainspoof.com/brands/bitrefill"}],"dns":"resolved","resolved":["62.60.226.39"],"resolved_at":"2026-11-06T11:09:13Z","dns_checked_at":"2026-11-06T11:09:13.000Z","dns_since":"2026-11-05T11:08:55.000Z","findings":[{"id":"fo7q6onz7o7bhmgbbijfk","kind":"spamhaus_drop","summary":"Resolved to 62.60.226.39 on Spamhaus DROP","first_observed":"2026-11-05T10:25:26.432Z","first_published":"2026-11-05T11:00:02.717Z","address":"62.60.226.39","list":"spamhaus_drop","list_name":"Spamhaus DROP"}],"url":"https://domainspoof.com/brands/bitrefill"},{"hostname":"www.retikchain.live","first_observed":"2026-11-05T10:51:45.629Z","first_published":"2026-11-05T11:00:02.717Z","brands":[],"dns":"resolved","resolved":["64.29.17.65","216.198.79.65"],"resolved_at":"2026-11-05T10:51:52Z","dns_checked_at":"2026-11-06T11:09:13.000Z","dns_since":"2026-11-05T11:08:56.000Z","findings":[{"id":"f5lshjkw2pw6oqfov5mxr","kind":"reported_domain","summary":"Under retikchain.live, listed by MetaMask","first_observed":"2026-11-05T10:51:45.629Z","first_published":"2026-11-05T11:00:02.717Z","source":"metamask","source_name":"MetaMask","under":"retikchain.live"}],"url":"https://domainspoof.com/live?show=all&q=www.retikchain.live"},{"hostname":"www.romero-mx.shop","first_observed":"2026-11-05T09:46:00.953Z","first_published":"2026-11-05T11:00:02.717Z","brands":[],"dns":"resolved","resolved":["13.248.213.45","76.223.67.189"],"resolved_at":"2026-11-05T09:47:17Z","dns_checked_at":"2026-11-06T11:09:13.000Z","dns_since":"2026-11-05T11:08:56.000Z","findings":[{"id":"fmidz4auf4ao7eyr5mywi","kind":"reported_domain","summary":"Under romero-mx.shop, listed by CERT Polska","first_observed":"2026-11-05T09:46:00.953Z","first_published":"2026-11-05T11:00:02.717Z","source":"cert_polska","source_name":"CERT Polska","under":"romero-mx.shop"}],"url":"https://domainspoof.com/live?show=all&q=www.romero-mx.shop"},{"hostname":"www.tw-support.com.es","first_observed":"2026-11-05T10:51:45.629Z","first_published":"2026-11-05T11:00:02.717Z","brands":[],"dns":"resolved","resolved":["185.53.179.136"],"resolved_at":"2026-11-05T10:51:52Z","dns_checked_at":"2026-11-06T11:09:13.000Z","dns_since":"2026-11-05T11:08:56.000Z","findings":[{"id":"fqjnkkiileyrncxvb37c6","kind":"reported_domain","summary":"Under tw-support.com.es, listed by MetaMask","first_observed":"2026-11-05T10:51:45.629Z","first_published":"2026-11-05T11:00:02.717Z","source":"metamask","source_name":"MetaMask","under":"tw-support.com.es"}],"url":"https://domainspoof.com/live?show=all&q=www.tw-support.com.es"},{"hostname":"www.venture-coinbase.com","first_observed":"2026-11-05T10:45:28.022Z","first_published":"2026-11-05T11:00:02.717Z","brands":[{"id":"coinbase","name":"Coinbase","url":"https://domainspoof.com/brands/coinbase"}],"dns":"not_found","resolved":["45.83.179.203"],"resolved_at":"2026-11-05T11:08:56Z","dns_checked_at":"2026-11-06T15:14:37.000Z","findings":[{"id":"fy6jpmrraor2fgeefbkhc","kind":"phishing_infrastructure","summary":"Resolved to 45.83.179.203, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T10:45:28.022Z","first_published":"2026-11-05T11:00:02.717Z","address":"45.83.179.203","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/coinbase"},{"hostname":"www.vuestrasvoces.com","first_observed":"2026-11-05T10:36:17.594Z","first_published":"2026-11-05T11:00:02.717Z","brands":[],"dns":"resolved","resolved":["178.211.133.36"],"resolved_at":"2026-11-05T10:45:28Z","dns_checked_at":"2026-11-06T11:09:13.000Z","dns_since":"2026-11-05T11:08:56.000Z","findings":[{"id":"fdl7qclofvgewu4qtw6h3","kind":"reported_domain","summary":"Under vuestrasvoces.com, listed by CERT Polska","first_observed":"2026-11-05T10:36:17.594Z","first_published":"2026-11-05T11:00:02.717Z","source":"cert_polska","source_name":"CERT Polska","under":"vuestrasvoces.com"}],"url":"https://domainspoof.com/live?show=all&q=www.vuestrasvoces.com"},{"hostname":"www.your-adventure.net","first_observed":"2026-11-05T10:51:45.629Z","first_published":"2026-11-05T11:00:02.717Z","brands":[],"dns":"resolved","resolved":["83.133.245.157","2001:7f0:3000:512::514:157"],"resolved_at":"2026-11-05T10:51:53Z","dns_checked_at":"2026-11-06T11:09:13.000Z","dns_since":"2026-11-05T11:08:56.000Z","findings":[{"id":"flrrbcafpud6vn73byaqw","kind":"reported_domain","summary":"Reported by PhishTank","first_observed":"2026-11-05T10:51:45.629Z","first_published":"2026-11-05T11:00:02.717Z","source":"phishtank","source_name":"PhishTank","source_url":"https://phishtank.org/phish_detail.php?phish_id=8234557"}],"url":"https://domainspoof.com/live?show=all&q=www.your-adventure.net"},{"hostname":"xlpebnvk.jnvupmyq.pztcoqlu.ixyhmceu.tomjzfci.tczglrpw.gatewaylearning.ezgateway.net","first_observed":"2026-11-05T09:46:00.953Z","first_published":"2026-11-05T11:00:02.717Z","brands":[],"dns":"resolved","resolved":["15.204.116.29"],"resolved_at":"2026-11-05T09:47:17Z","dns_checked_at":"2026-11-06T11:09:13.000Z","dns_since":"2026-11-05T11:08:56.000Z","findings":[{"id":"fmiifpzwxrgxpjtteiyyl","kind":"reported_domain","summary":"Under ezgateway.net, listed by USOM","first_observed":"2026-11-05T09:46:00.953Z","first_published":"2026-11-05T11:00:02.717Z","source":"usom","source_name":"USOM","under":"ezgateway.net"}],"url":"https://domainspoof.com/live?show=all&q=xlpebnvk.jnvupmyq.pztcoqlu.ixyhmceu.tomjzfci.tczglrpw.gatewaylearning.ezgateway.net"},{"hostname":"xumm.co.com","first_observed":"2026-11-05T10:31:06.562Z","first_published":"2026-11-05T11:00:02.717Z","brands":[],"dns":"resolved","resolved":["104.21.86.50","172.67.215.21"],"resolved_at":"2026-11-05T10:31:18Z","dns_checked_at":"2026-11-06T11:09:13.000Z","dns_since":"2026-11-05T11:08:56.000Z","findings":[{"id":"fo773ouzqovbdwak62b6m","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T10:31:06.562Z","first_published":"2026-11-05T11:00:02.717Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=xumm.co.com"},{"hostname":"xyzverse-io.app","first_observed":"2026-11-05T09:46:00.953Z","first_published":"2026-11-05T11:00:02.717Z","brands":[],"dns":"resolved","resolved":["104.21.68.41","172.67.186.84"],"resolved_at":"2026-11-05T09:47:18Z","dns_checked_at":"2026-11-06T11:09:13.000Z","dns_since":"2026-11-05T11:08:56.000Z","findings":[{"id":"flaxlfpyfvhlugvxfed6f","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T09:46:00.953Z","first_published":"2026-11-05T11:00:02.717Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/xyzverse-io.app/"}],"url":"https://domainspoof.com/live?show=all&q=xyzverse-io.app"},{"hostname":"yoibpwtm.ezvmqnlh.zawxnbgv.wzvtlhbj.ijdyvoge.www.gatewaylearning.ezgateway.net","first_observed":"2026-11-05T10:16:02.124Z","first_published":"2026-11-05T11:00:02.717Z","brands":[],"dns":"resolved","resolved":["15.204.116.29"],"resolved_at":"2026-11-05T10:16:28Z","dns_checked_at":"2026-11-06T11:09:13.000Z","dns_since":"2026-11-05T11:08:56.000Z","findings":[{"id":"f5aq52ozcgocpmxfnzuxn","kind":"reported_domain","summary":"Under ezgateway.net, listed by USOM","first_observed":"2026-11-05T10:16:02.124Z","first_published":"2026-11-05T11:00:02.717Z","source":"usom","source_name":"USOM","under":"ezgateway.net"}],"url":"https://domainspoof.com/live?show=all&q=yoibpwtm.ezvmqnlh.zawxnbgv.wzvtlhbj.ijdyvoge.www.gatewaylearning.ezgateway.net"},{"hostname":"zetachain.test.api.nodeshub.online","first_observed":"2026-11-05T09:46:00.953Z","first_published":"2026-11-05T11:00:02.717Z","brands":[],"dns":"resolved","resolved":["104.26.6.49","104.26.7.49","172.67.68.84"],"resolved_at":"2026-11-05T09:47:18Z","dns_checked_at":"2026-11-06T11:09:13.000Z","dns_since":"2026-11-05T11:08:56.000Z","findings":[{"id":"f75zopekemsiev526dnhk","kind":"reported_domain","summary":"Under nodeshub.online, reported by PhishDestroy","first_observed":"2026-11-05T09:46:00.953Z","first_published":"2026-11-05T11:00:02.717Z","source":"phishdestroy","source_name":"PhishDestroy","under":"nodeshub.online","source_url":"https://phishdestroy.io/domain/nodeshub.online/"}],"url":"https://domainspoof.com/live?show=all&q=zetachain.test.api.nodeshub.online"},{"hostname":"zetachain.test.evm.nodeshub.online","first_observed":"2026-11-05T09:46:00.953Z","first_published":"2026-11-05T11:00:02.717Z","brands":[],"dns":"resolved","resolved":["104.26.6.49","104.26.7.49","172.67.68.84"],"resolved_at":"2026-11-05T09:47:18Z","dns_checked_at":"2026-11-06T11:09:13.000Z","dns_since":"2026-11-05T11:08:56.000Z","findings":[{"id":"fr5tunabvebybubtfzk6q","kind":"reported_domain","summary":"Under nodeshub.online, reported by PhishDestroy","first_observed":"2026-11-05T09:46:00.953Z","first_published":"2026-11-05T11:00:02.717Z","source":"phishdestroy","source_name":"PhishDestroy","under":"nodeshub.online","source_url":"https://phishdestroy.io/domain/nodeshub.online/"}],"url":"https://domainspoof.com/live?show=all&q=zetachain.test.evm.nodeshub.online"},{"hostname":"zetachain.test.rpc.nodeshub.online","first_observed":"2026-11-05T10:26:24.168Z","first_published":"2026-11-05T11:00:02.717Z","brands":[],"dns":"resolved","resolved":["104.26.6.49","104.26.7.49","172.67.68.84"],"resolved_at":"2026-11-05T10:30:28Z","dns_checked_at":"2026-11-06T11:09:13.000Z","dns_since":"2026-11-05T11:08:56.000Z","findings":[{"id":"foou7tf55qcajrhnc34xf","kind":"reported_domain","summary":"Under nodeshub.online, reported by PhishDestroy","first_observed":"2026-11-05T10:26:24.168Z","first_published":"2026-11-05T11:00:02.717Z","source":"phishdestroy","source_name":"PhishDestroy","under":"nodeshub.online","source_url":"https://phishdestroy.io/domain/nodeshub.online/"}],"url":"https://domainspoof.com/live?show=all&q=zetachain.test.rpc.nodeshub.online"},{"hostname":"zu9elpohl1z5.usdtbnbcheck.com","first_observed":"2026-11-05T10:16:02.124Z","first_published":"2026-11-05T11:00:02.717Z","brands":[],"dns":"resolved","resolved":["185.53.179.136"],"resolved_at":"2026-11-05T10:16:28Z","dns_checked_at":"2026-11-06T11:09:13.000Z","dns_since":"2026-11-05T11:08:56.000Z","findings":[{"id":"fjmfzpyxm5v5wkoiiz6fq","kind":"reported_domain","summary":"Under usdtbnbcheck.com, reported by PhishDestroy","first_observed":"2026-11-05T10:16:02.124Z","first_published":"2026-11-05T11:00:02.717Z","source":"phishdestroy","source_name":"PhishDestroy","under":"usdtbnbcheck.com","source_url":"https://phishdestroy.io/domain/usdtbnbcheck.com/"}],"url":"https://domainspoof.com/live?show=all&q=zu9elpohl1z5.usdtbnbcheck.com"},{"hostname":"anthropic.pl","first_observed":"2026-11-05T09:52:12.000Z","first_published":"2026-11-05T09:52:12.000Z","brands":[{"id":"claude","name":"Claude","url":"https://domainspoof.com/brands/claude"}],"dns":"resolved","resolved":["185.253.212.22"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of anthropic.com (same name, other ending), resolved to 185.253.212.22, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T09:52:12.000Z","first_published":"2026-11-05T09:52:12.000Z","of":"anthropic.com","spelling":"tld","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"185.253.212.22","flagged_at":"2026-11-05T09:52:12Z"}]}],"url":"https://domainspoof.com/brands/claude"},{"hostname":"cdiscount.ink","first_observed":"2026-11-05T09:52:12.000Z","first_published":"2026-11-05T09:52:12.000Z","brands":[{"id":"cdiscount","name":"Cdiscount","url":"https://domainspoof.com/brands/cdiscount"}],"dns":"resolved","resolved":["204.12.227.254","213.134.2.107"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of cdiscount.com (same name, other ending), resolved to 204.12.227.254, where reported phishing was found in the 48 hours before, and resolved to 213.134.2.107, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T09:52:12.000Z","first_published":"2026-11-05T09:52:12.000Z","of":"cdiscount.com","spelling":"tld","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"204.12.227.254","flagged_at":"2026-11-05T09:52:12Z"},{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"213.134.2.107","flagged_at":"2026-11-05T09:52:12Z"}]}],"url":"https://domainspoof.com/brands/cdiscount"},{"hostname":"kinetiq.exchange","first_observed":"2026-11-05T09:52:12.000Z","first_published":"2026-11-05T09:52:12.000Z","brands":[{"id":"kinetiq","name":"Kinetiq","url":"https://domainspoof.com/brands/kinetiq"}],"dns":"resolved","resolved":["104.21.23.254","172.67.214.191","2606:4700:3032::6815:17fe","2606:4700:3032::ac43:d6bf"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of kinetiq.xyz (same name, other ending), reported by PhishDestroy","first_observed":"2026-11-05T09:52:12.000Z","first_published":"2026-11-05T09:52:12.000Z","of":"kinetiq.xyz","spelling":"tld","found_by":"dns_sweep","listings":[{"kind":"reported","source":"phishdestroy","source_name":"PhishDestroy","host":"kinetiq.exchange","flagged_at":"2026-11-05T09:52:12Z"}]}],"url":"https://domainspoof.com/brands/kinetiq"},{"hostname":"twitter.one","first_observed":"2026-11-05T09:52:12.000Z","first_published":"2026-11-05T09:52:12.000Z","brands":[{"id":"x","name":"X (Twitter)","url":"https://domainspoof.com/brands/x"}],"dns":"resolved","resolved":["89.31.143.90"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of twitter.com (same name, other ending), resolved to 89.31.143.90, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T09:52:12.000Z","first_published":"2026-11-05T09:52:12.000Z","of":"twitter.com","spelling":"tld","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"89.31.143.90","flagged_at":"2026-11-05T09:52:12Z"}]}],"url":"https://domainspoof.com/brands/x"},{"hostname":"usps.pl","first_observed":"2026-11-05T09:52:12.000Z","first_published":"2026-11-05T09:52:12.000Z","brands":[{"id":"usps","name":"USPS","url":"https://domainspoof.com/brands/usps"}],"dns":"resolved","resolved":["185.253.212.22"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of usps.com (same name, other ending), resolved to 185.253.212.22, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T09:52:12.000Z","first_published":"2026-11-05T09:52:12.000Z","of":"usps.com","spelling":"tld","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"185.253.212.22","flagged_at":"2026-11-05T09:52:12Z"}]}],"url":"https://domainspoof.com/brands/usps"},{"hostname":"27-governance-orbio.pages.dev","first_observed":"2026-11-05T08:41:03.613Z","first_published":"2026-11-05T09:50:27.766Z","brands":[],"dns":"not_found","resolved":[],"resolved_at":"2026-11-05T08:51:06Z","dns_checked_at":"2026-11-06T09:57:45.000Z","dns_since":"2026-11-05T09:57:42.000Z","findings":[{"id":"fbx5gbtal2zutpy3u7cfy","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T08:41:03.613Z","first_published":"2026-11-05T09:50:27.766Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=27-governance-orbio.pages.dev"},{"hostname":"29-governance-orbio.pages.dev","first_observed":"2026-11-05T08:51:54.108Z","first_published":"2026-11-05T09:50:27.766Z","brands":[],"dns":"not_found","resolved":["172.66.44.106","172.66.47.150"],"resolved_at":"2026-11-05T08:51:59Z","dns_checked_at":"2026-11-06T09:57:45.000Z","dns_since":"2026-11-05T09:57:42.000Z","findings":[{"id":"fznxgan5qgsfo56o4xdvj","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T08:51:54.108Z","first_published":"2026-11-05T09:50:27.766Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=29-governance-orbio.pages.dev"},{"hostname":"30-governance-orbio.pages.dev","first_observed":"2026-11-05T08:57:00.499Z","first_published":"2026-11-05T09:50:27.766Z","brands":[],"dns":"not_found","resolved":["172.66.44.174","172.66.47.82"],"resolved_at":"2026-11-05T08:57:05Z","dns_checked_at":"2026-11-06T09:57:45.000Z","dns_since":"2026-11-05T09:57:42.000Z","findings":[{"id":"frcmxs2s5dethf6yjpwn4","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T08:57:00.499Z","first_published":"2026-11-05T09:50:27.766Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=30-governance-orbio.pages.dev"},{"hostname":"31-76-94-61.rdns.vpspay.net","first_observed":"2026-11-05T09:31:04.544Z","first_published":"2026-11-05T09:50:27.766Z","brands":[],"dns":"resolved","resolved":["31.76.94.61"],"resolved_at":"2026-11-05T09:31:08Z","dns_checked_at":"2026-11-06T09:57:45.000Z","dns_since":"2026-11-05T09:57:42.000Z","findings":[{"id":"f37wxckoog2phv26ifn4p","kind":"reported_domain","summary":"Under vpspay.net, reported by PhishDestroy","first_observed":"2026-11-05T09:31:04.544Z","first_published":"2026-11-05T09:50:27.766Z","source":"phishdestroy","source_name":"PhishDestroy","under":"vpspay.net","source_url":"https://phishdestroy.io/domain/vpspay.net/"}],"url":"https://domainspoof.com/live?show=all&q=31-76-94-61.rdns.vpspay.net"},{"hostname":"31-governance-orbio.pages.dev","first_observed":"2026-11-05T09:00:36.557Z","first_published":"2026-11-05T09:50:27.766Z","brands":[],"dns":"not_found","resolved":["172.66.44.124","172.66.47.132"],"resolved_at":"2026-11-05T09:00:41Z","dns_checked_at":"2026-11-06T09:57:45.000Z","dns_since":"2026-11-05T09:57:42.000Z","findings":[{"id":"fdmhrqm37jxyyqdey2462","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T09:00:36.557Z","first_published":"2026-11-05T09:50:27.766Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=31-governance-orbio.pages.dev"},{"hostname":"32-governance-orbio.pages.dev","first_observed":"2026-11-05T09:05:42.435Z","first_published":"2026-11-05T09:50:27.766Z","brands":[],"dns":"not_found","resolved":["172.66.44.92","172.66.47.164"],"resolved_at":"2026-11-05T09:05:49Z","dns_checked_at":"2026-11-06T09:57:45.000Z","dns_since":"2026-11-05T09:57:42.000Z","findings":[{"id":"fqvfxnxpydr5u6ytu2ppq","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T09:05:42.435Z","first_published":"2026-11-05T09:50:27.766Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=32-governance-orbio.pages.dev"},{"hostname":"33-governance-orbio.pages.dev","first_observed":"2026-11-05T09:10:52.041Z","first_published":"2026-11-05T09:50:27.766Z","brands":[],"dns":"not_found","resolved":["172.66.44.139","172.66.47.117"],"resolved_at":"2026-11-05T09:11:04Z","dns_checked_at":"2026-11-06T09:57:45.000Z","dns_since":"2026-11-05T09:57:42.000Z","findings":[{"id":"fz2xieqozucevaeqig6dc","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T09:10:52.041Z","first_published":"2026-11-05T09:50:27.766Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=33-governance-orbio.pages.dev"},{"hostname":"34-governance-orbio.pages.dev","first_observed":"2026-11-05T09:16:04.617Z","first_published":"2026-11-05T09:50:27.766Z","brands":[],"dns":"not_found","resolved":["172.66.45.21","172.66.46.235"],"resolved_at":"2026-11-05T09:16:11Z","dns_checked_at":"2026-11-06T09:57:45.000Z","dns_since":"2026-11-05T09:57:42.000Z","findings":[{"id":"ffspgohp3egyulkorjd44","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T09:16:04.617Z","first_published":"2026-11-05T09:50:27.766Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=34-governance-orbio.pages.dev"},{"hostname":"35-governance-orbio.pages.dev","first_observed":"2026-11-05T09:21:13.732Z","first_published":"2026-11-05T09:50:27.766Z","brands":[],"dns":"not_found","resolved":["172.66.44.106","172.66.47.150"],"resolved_at":"2026-11-05T09:21:22Z","dns_checked_at":"2026-11-06T09:57:45.000Z","dns_since":"2026-11-05T09:57:42.000Z","findings":[{"id":"fxokau4hnntmvmkybevlq","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T09:21:13.732Z","first_published":"2026-11-05T09:50:27.766Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=35-governance-orbio.pages.dev"},{"hostname":"36-governance-orbio.pages.dev","first_observed":"2026-11-05T09:26:25.293Z","first_published":"2026-11-05T09:50:27.766Z","brands":[],"dns":"not_found","resolved":["172.66.44.226","172.66.47.30"],"resolved_at":"2026-11-05T09:26:32Z","dns_checked_at":"2026-11-06T09:57:45.000Z","dns_since":"2026-11-05T09:57:42.000Z","findings":[{"id":"fsmbmcku4odzmxdyuzz5w","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T09:26:25.293Z","first_published":"2026-11-05T09:50:27.766Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=36-governance-orbio.pages.dev"},{"hostname":"38-governance-orbio.pages.dev","first_observed":"2026-11-05T09:36:12.068Z","first_published":"2026-11-05T09:50:27.766Z","brands":[],"dns":"not_found","resolved":["172.66.44.108","172.66.47.148"],"resolved_at":"2026-11-05T09:36:18Z","dns_checked_at":"2026-11-06T09:57:45.000Z","dns_since":"2026-11-05T09:57:42.000Z","findings":[{"id":"fpsske3u26fnt4tn3kevj","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T09:36:12.068Z","first_published":"2026-11-05T09:50:27.766Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=38-governance-orbio.pages.dev"},{"hostname":"4slon5-cc.ru","first_observed":"2026-11-05T09:16:04.617Z","first_published":"2026-11-05T09:50:27.766Z","brands":[],"dns":"resolved","resolved":["45.134.174.147"],"resolved_at":"2026-11-05T09:16:11Z","dns_checked_at":"2026-11-06T09:57:45.000Z","dns_since":"2026-11-05T09:57:42.000Z","findings":[{"id":"f3n2lqwzlbsfr2pqyggpg","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T09:16:04.617Z","first_published":"2026-11-05T09:50:27.766Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/4slon5-cc.ru/"}],"url":"https://domainspoof.com/live?show=all&q=4slon5-cc.ru"},{"hostname":"ackermann.saldiora.com","first_observed":"2026-11-05T08:57:00.499Z","first_published":"2026-11-05T09:50:27.766Z","brands":[],"dns":"resolved","resolved":["104.21.58.184","172.67.206.62"],"resolved_at":"2026-11-05T08:57:11Z","dns_checked_at":"2026-11-06T09:57:45.000Z","dns_since":"2026-11-05T09:57:42.000Z","findings":[{"id":"fn6c6mpg2ydzsf67d4j4n","kind":"reported_domain","summary":"Under saldiora.com, listed by CERT Polska","first_observed":"2026-11-05T08:57:00.499Z","first_published":"2026-11-05T09:50:27.766Z","source":"cert_polska","source_name":"CERT Polska","under":"saldiora.com"}],"url":"https://domainspoof.com/live?show=all&q=ackermann.saldiora.com"},{"hostname":"aegetjjk.com","first_observed":"2026-11-05T09:00:36.557Z","first_published":"2026-11-05T09:50:27.766Z","brands":[],"dns":"no_address","resolved":[],"resolved_at":"2026-11-05T09:05:09Z","dns_checked_at":"2026-11-06T09:57:45.000Z","dns_since":"2026-11-05T09:57:42.000Z","findings":[{"id":"fskmamno2vjtrt5bzqpzf","kind":"reported_domain","summary":"Listed by NPA 165 (information services)","first_observed":"2026-11-05T09:00:36.557Z","first_published":"2026-11-05T09:50:27.766Z","source":"npa","source_name":"NPA 165","claim":{"category":"information services"}}],"url":"https://domainspoof.com/live?show=all&q=aegetjjk.com"},{"hostname":"aerosky.gostratsicof.com","first_observed":"2026-11-05T08:51:54.108Z","first_published":"2026-11-05T09:50:27.766Z","brands":[],"dns":"resolved","resolved":["77.37.53.47","93.127.179.246"],"resolved_at":"2026-11-05T08:58:43Z","dns_checked_at":"2026-11-06T09:57:45.000Z","dns_since":"2026-11-05T09:57:42.000Z","findings":[{"id":"fgyfc7vfhycpcb5g63ztd","kind":"reported_domain","summary":"Under gostratsicof.com, listed by CERT Polska","first_observed":"2026-11-05T08:51:54.108Z","first_published":"2026-11-05T09:50:27.766Z","source":"cert_polska","source_name":"CERT Polska","under":"gostratsicof.com"}],"url":"https://domainspoof.com/live?show=all&q=aerosky.gostratsicof.com"},{"hostname":"agilitetrade.com","first_observed":"2026-11-05T08:46:43.679Z","first_published":"2026-11-05T09:50:27.766Z","brands":[],"dns":"resolved","resolved":["159.195.226.154"],"resolved_at":"2026-11-05T08:46:58Z","dns_checked_at":"2026-11-06T09:57:45.000Z","dns_since":"2026-11-05T09:57:42.000Z","findings":[{"id":"f7ajs4c3tqo4a7at2upoo","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T08:46:43.679Z","first_published":"2026-11-05T09:50:27.766Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/agilitetrade.com/"}],"url":"https://domainspoof.com/live?show=all&q=agilitetrade.com"},{"hostname":"api.www.m.professorflapjacks.com","first_observed":"2026-11-05T09:41:19.995Z","first_published":"2026-11-05T09:50:27.766Z","brands":[],"dns":"resolved","resolved":["185.149.120.183"],"resolved_at":"2026-11-05T09:41:32Z","dns_checked_at":"2026-11-06T09:57:45.000Z","dns_since":"2026-11-05T09:57:42.000Z","findings":[{"id":"fpnasoelasj5lytevoaob","kind":"reported_domain","summary":"Under www.m.professorflapjacks.com, reported by PhishDestroy","first_observed":"2026-11-05T09:41:19.995Z","first_published":"2026-11-05T09:50:27.766Z","source":"phishdestroy","source_name":"PhishDestroy","under":"www.m.professorflapjacks.com","source_url":"https://phishdestroy.io/domain/www.m.professorflapjacks.com/"}],"url":"https://domainspoof.com/live?show=all&q=api.www.m.professorflapjacks.com"},{"hostname":"app-eulerfinance.com","first_observed":"2026-11-05T08:57:00.499Z","first_published":"2026-11-05T09:50:27.766Z","brands":[],"dns":"resolved","resolved":["104.21.8.68","172.67.138.163"],"resolved_at":"2026-11-05T08:57:11Z","dns_checked_at":"2026-11-06T09:57:45.000Z","dns_since":"2026-11-05T09:57:42.000Z","findings":[{"id":"fet4a6i4h6cpx5au7yd54","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T08:57:00.499Z","first_published":"2026-11-05T09:50:27.766Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=app-eulerfinance.com"},{"hostname":"app-pr-2756.keeperhub.com","first_observed":"2026-11-05T09:10:52.041Z","first_published":"2026-11-05T09:50:27.766Z","brands":[],"dns":"no_address","resolved":["104.26.12.47","104.26.13.47","172.67.74.127"],"resolved_at":"2026-11-05T09:11:08Z","dns_checked_at":"2026-11-06T14:02:28.000Z","findings":[{"id":"fssgpi4ex3kygzppdrnig","kind":"reported_domain","summary":"Under keeperhub.com, reported by PhishDestroy","first_observed":"2026-11-05T09:10:52.041Z","first_published":"2026-11-05T09:50:27.766Z","source":"phishdestroy","source_name":"PhishDestroy","under":"keeperhub.com","source_url":"https://phishdestroy.io/domain/keeperhub.com/"}],"url":"https://domainspoof.com/live?show=all&q=app-pr-2756.keeperhub.com"},{"hostname":"app-sparkdex.org","first_observed":"2026-11-05T09:05:42.435Z","first_published":"2026-11-05T09:50:27.766Z","brands":[],"dns":"resolved","resolved":["104.21.68.16","172.67.184.220"],"resolved_at":"2026-11-05T09:05:54Z","dns_checked_at":"2026-11-06T09:57:45.000Z","dns_since":"2026-11-05T09:57:42.000Z","findings":[{"id":"fkg5c2mxwxv3erekbwtya","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T09:05:42.435Z","first_published":"2026-11-05T09:50:27.766Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=app-sparkdex.org"},{"hostname":"app.xtb-international.com","first_observed":"2026-11-05T09:21:13.732Z","first_published":"2026-11-05T09:50:27.766Z","brands":[],"dns":"resolved","resolved":["68.65.120.205"],"resolved_at":"2026-11-05T09:21:25Z","dns_checked_at":"2026-11-06T09:57:45.000Z","dns_since":"2026-11-05T09:57:42.000Z","findings":[{"id":"fjzrs7c7tmu4xv2pspkd2","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T09:21:13.732Z","first_published":"2026-11-05T09:50:27.766Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=app.xtb-international.com"},{"hostname":"arcinvestor.xyz","first_observed":"2026-11-05T09:36:12.068Z","first_published":"2026-11-05T09:50:27.766Z","brands":[],"dns":"resolved","resolved":["104.21.73.168","172.67.146.74"],"resolved_at":"2026-11-05T09:39:51Z","dns_checked_at":"2026-11-06T09:57:45.000Z","dns_since":"2026-11-05T09:57:42.000Z","findings":[{"id":"f75bpxmheausc77xkbuno","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T09:36:12.068Z","first_published":"2026-11-05T09:50:27.766Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/arcinvestor.xyz/"}],"url":"https://domainspoof.com/live?show=all&q=arcinvestor.xyz"},{"hostname":"armsandassociates.com","first_observed":"2026-11-05T09:31:04.544Z","first_published":"2026-11-05T09:50:27.766Z","brands":[],"dns":"resolved","resolved":["147.79.71.214","2a02:4780:12:edfa::1"],"resolved_at":"2026-11-05T09:31:12Z","dns_checked_at":"2026-11-06T09:57:45.000Z","dns_since":"2026-11-05T09:57:42.000Z","findings":[{"id":"fhfrler6dac4xty3p2ubh","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T09:31:04.544Z","first_published":"2026-11-05T09:50:27.766Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/armsandassociates.com/"}],"url":"https://domainspoof.com/live?show=all&q=armsandassociates.com"},{"hostname":"authorization-press-enter.info","first_observed":"2026-11-05T09:41:19.995Z","first_published":"2026-11-05T09:50:27.766Z","brands":[],"dns":"resolved","resolved":["178.16.52.101"],"resolved_at":"2026-11-05T09:41:32Z","dns_checked_at":"2026-11-06T09:57:45.000Z","dns_since":"2026-11-05T09:57:42.000Z","findings":[{"id":"fhszwaotkremtkkzhfi3p","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T09:41:19.995Z","first_published":"2026-11-05T09:50:27.766Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=authorization-press-enter.info"},{"hostname":"autoconfig.namahkishan.com","first_observed":"2026-11-05T09:00:36.557Z","first_published":"2026-11-05T09:50:27.766Z","brands":[],"dns":"no_address","resolved":["65.21.197.85"],"resolved_at":"2026-11-05T09:05:14Z","dns_checked_at":"2026-11-06T14:02:28.000Z","findings":[{"id":"f7iowtinymafas42votaz","kind":"reported_domain","summary":"Under namahkishan.com, reported by PhishDestroy","first_observed":"2026-11-05T09:00:36.557Z","first_published":"2026-11-05T09:50:27.766Z","source":"phishdestroy","source_name":"PhishDestroy","under":"namahkishan.com","source_url":"https://phishdestroy.io/domain/namahkishan.com/"}],"url":"https://domainspoof.com/live?show=all&q=autoconfig.namahkishan.com"},{"hostname":"autoconfig.orientalmining.com","first_observed":"2026-11-05T08:41:03.613Z","first_published":"2026-11-05T09:50:27.766Z","brands":[],"dns":"resolved","resolved":["65.181.124.4"],"resolved_at":"2026-11-05T08:51:05Z","dns_checked_at":"2026-11-06T09:57:45.000Z","dns_since":"2026-11-05T09:57:42.000Z","findings":[{"id":"fhujamp7ig2lonru4xlro","kind":"reported_domain","summary":"Under orientalmining.com, listed by CERT Polska","first_observed":"2026-11-05T08:41:03.613Z","first_published":"2026-11-05T09:50:27.766Z","source":"cert_polska","source_name":"CERT Polska","under":"orientalmining.com"}],"url":"https://domainspoof.com/live?show=all&q=autoconfig.orientalmining.com"},{"hostname":"autodiscover.orientalmining.com","first_observed":"2026-11-05T08:41:03.613Z","first_published":"2026-11-05T09:50:27.766Z","brands":[],"dns":"resolved","resolved":["65.181.124.4"],"resolved_at":"2026-11-05T08:51:19Z","dns_checked_at":"2026-11-06T09:57:45.000Z","dns_since":"2026-11-05T09:57:42.000Z","findings":[{"id":"ff7cqsffio7bli4yhqz5l","kind":"reported_domain","summary":"Under orientalmining.com, listed by CERT Polska","first_observed":"2026-11-05T08:41:03.613Z","first_published":"2026-11-05T09:50:27.766Z","source":"cert_polska","source_name":"CERT Polska","under":"orientalmining.com"}],"url":"https://domainspoof.com/live?show=all&q=autodiscover.orientalmining.com"},{"hostname":"avito.pay.fblablacar.pochtabank.0update.yandex.sber.prod2.hawkinswoodshop.com","first_observed":"2026-11-05T08:46:58.380Z","first_published":"2026-11-05T09:50:27.766Z","brands":[{"id":"avito","name":"Avito","url":"https://domainspoof.com/brands/avito"},{"id":"yandex","name":"Yandex","url":"https://domainspoof.com/brands/yandex"}],"dns":"resolved","resolved":["45.77.75.133","45.77.92.157","207.246.78.75"],"resolved_at":"2026-11-06T09:57:45Z","dns_checked_at":"2026-11-06T09:57:45.000Z","dns_since":"2026-11-05T09:57:42.000Z","findings":[{"id":"fua74dm5cyb6fo22nmgdg","kind":"phishing_infrastructure","summary":"Resolved to 45.77.75.133, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T08:46:58.380Z","first_published":"2026-11-05T09:50:27.766Z","address":"45.77.75.133","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/avito"},{"hostname":"awaworld.shop","first_observed":"2026-11-05T09:00:36.557Z","first_published":"2026-11-05T09:50:27.766Z","brands":[],"dns":"resolved","resolved":["104.21.49.52","172.67.141.141"],"resolved_at":"2026-11-05T09:05:15Z","dns_checked_at":"2026-11-06T09:57:45.000Z","dns_since":"2026-11-05T09:57:42.000Z","findings":[{"id":"fx2q3v5t2kfrdqbdtv7mt","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T09:00:36.557Z","first_published":"2026-11-05T09:50:27.766Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=awaworld.shop"},{"hostname":"axelionai.net","first_observed":"2026-11-05T09:19:06.197Z","first_published":"2026-11-05T09:50:27.766Z","brands":[],"dns":"resolved","resolved":["104.21.74.179","172.67.160.237","2606:4700:3030::ac43:a0ed","2606:4700:3033::6815:4ab3"],"resolved_at":"2026-11-05T09:20:24Z","dns_checked_at":"2026-11-06T09:57:46.000Z","dns_since":"2026-11-05T09:57:42.000Z","findings":[{"id":"ficjgm62kcftoxrldso7x","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T09:19:06.197Z","first_published":"2026-11-05T09:50:27.766Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=axelionai.net"},{"hostname":"basekif.com","first_observed":"2026-11-05T09:31:04.544Z","first_published":"2026-11-05T09:50:27.766Z","brands":[],"dns":"resolved","resolved":["104.21.9.195","172.67.189.138"],"resolved_at":"2026-11-05T09:38:10Z","dns_checked_at":"2026-11-06T09:57:46.000Z","dns_since":"2026-11-05T09:57:42.000Z","findings":[{"id":"feiz25g2h3nlqd6tzig3z","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T09:31:04.544Z","first_published":"2026-11-05T09:50:27.766Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=basekif.com"},{"hostname":"beautw.com","first_observed":"2026-11-05T08:46:43.679Z","first_published":"2026-11-05T09:50:27.766Z","brands":[],"dns":"no_address","resolved":["104.21.39.117","172.67.145.44"],"resolved_at":"2026-11-05T08:55:42Z","dns_checked_at":"2026-11-06T14:02:28.000Z","findings":[{"id":"fc6vtsxtmt5zvvljyl6iv","kind":"reported_domain","summary":"Listed by NPA 165 (finance and insurance)","first_observed":"2026-11-05T08:46:43.679Z","first_published":"2026-11-05T09:50:27.766Z","source":"npa","source_name":"NPA 165","claim":{"category":"finance and insurance"}}],"url":"https://domainspoof.com/live?show=all&q=beautw.com"},{"hostname":"binance-verification-support.com","first_observed":"2026-11-05T09:13:27.959Z","first_published":"2026-11-05T09:50:27.766Z","brands":[{"id":"binance","name":"Binance","url":"https://domainspoof.com/brands/binance"}],"dns":"resolved","resolved":["2.57.91.91"],"resolved_at":"2026-11-06T09:57:46Z","dns_checked_at":"2026-11-06T09:57:46.000Z","dns_since":"2026-11-05T09:57:42.000Z","findings":[{"id":"faazj65vrwgrq4zdjujm7","kind":"phishing_infrastructure","summary":"Resolved to 2.57.91.91, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T09:13:27.959Z","first_published":"2026-11-05T09:50:27.766Z","address":"2.57.91.91","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/binance"},{"hostname":"binance-verificationsupport.com","first_observed":"2026-11-05T09:13:27.966Z","first_published":"2026-11-05T09:50:27.766Z","brands":[{"id":"binance","name":"Binance","url":"https://domainspoof.com/brands/binance"}],"dns":"resolved","resolved":["2.57.91.91"],"resolved_at":"2026-11-06T09:57:46Z","dns_checked_at":"2026-11-06T09:57:46.000Z","dns_since":"2026-11-05T09:57:42.000Z","findings":[{"id":"fab5ovape2kidpgbomp47","kind":"phishing_infrastructure","summary":"Resolved to 2.57.91.91, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T09:13:27.966Z","first_published":"2026-11-05T09:50:27.766Z","address":"2.57.91.91","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/binance"},{"hostname":"bitbryone.net","first_observed":"2026-11-05T09:16:04.617Z","first_published":"2026-11-05T09:50:27.766Z","brands":[],"dns":"resolved","resolved":["104.21.29.5","172.67.171.55"],"resolved_at":"2026-11-05T09:22:14Z","dns_checked_at":"2026-11-06T09:57:46.000Z","dns_since":"2026-11-05T09:57:42.000Z","findings":[{"id":"fe5dxkmmyrz5q7j2wsbe5","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T09:16:04.617Z","first_published":"2026-11-05T09:50:27.766Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=bitbryone.net"},{"hostname":"bitrefill.com-cp01-esim-gift.com","first_observed":"2026-11-05T09:00:46.219Z","first_published":"2026-11-05T09:50:27.766Z","brands":[{"id":"bitrefill","name":"Bitrefill","url":"https://domainspoof.com/brands/bitrefill"}],"dns":"resolved","resolved":["62.60.226.39"],"resolved_at":"2026-11-06T09:57:46Z","dns_checked_at":"2026-11-06T09:57:46.000Z","dns_since":"2026-11-05T09:57:42.000Z","findings":[{"id":"fqcjjdgcj66fgchjdfrhn","kind":"spamhaus_drop","summary":"Resolved to 62.60.226.39 on Spamhaus DROP","first_observed":"2026-11-05T09:00:46.219Z","first_published":"2026-11-05T09:50:27.766Z","address":"62.60.226.39","list":"spamhaus_drop","list_name":"Spamhaus DROP"}],"url":"https://domainspoof.com/brands/bitrefill"},{"hostname":"blender.com.cn","first_observed":"2026-11-05T09:21:13.732Z","first_published":"2026-11-05T09:50:27.766Z","brands":[],"dns":"resolved","resolved":["104.21.69.199","172.67.212.205"],"resolved_at":"2026-11-05T09:21:33Z","dns_checked_at":"2026-11-06T09:57:46.000Z","dns_since":"2026-11-05T09:57:42.000Z","findings":[{"id":"fuxlz2jbgkw6zv3t5b54t","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T09:21:13.732Z","first_published":"2026-11-05T09:50:27.766Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=blender.com.cn"},{"hostname":"board.aml.legal","first_observed":"2026-11-05T09:36:12.068Z","first_published":"2026-11-05T09:50:27.766Z","brands":[],"dns":"resolved","resolved":["186.2.175.179"],"resolved_at":"2026-11-05T09:39:59Z","dns_checked_at":"2026-11-06T09:57:46.000Z","dns_since":"2026-11-05T09:57:42.000Z","findings":[{"id":"ftxcxn3gwq37do6d5b3ac","kind":"reported_domain","summary":"Under aml.legal, reported by PhishDestroy","first_observed":"2026-11-05T09:36:12.068Z","first_published":"2026-11-05T09:50:27.766Z","source":"phishdestroy","source_name":"PhishDestroy","under":"aml.legal","source_url":"https://phishdestroy.io/domain/aml.legal/"}],"url":"https://domainspoof.com/live?show=all&q=board.aml.legal"},{"hostname":"borealiswood-04.pages.dev","first_observed":"2026-11-05T09:19:06.197Z","first_published":"2026-11-05T09:50:27.766Z","brands":[],"dns":"not_found","resolved":["172.66.44.230","172.66.47.26","2606:4700:310c::ac42:2ce6","2606:4700:310c::ac42:2f1a"],"resolved_at":"2026-11-05T09:20:24Z","dns_checked_at":"2026-11-06T14:02:28.000Z","findings":[{"id":"f5i4cg2onxm3byhjlivlq","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T09:19:06.197Z","first_published":"2026-11-05T09:50:27.766Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=borealiswood-04.pages.dev"},{"hostname":"brulvaxen-spain.com","first_observed":"2026-11-05T09:26:25.293Z","first_published":"2026-11-05T09:50:27.766Z","brands":[],"dns":"resolved","resolved":["104.21.60.175","172.67.198.237"],"resolved_at":"2026-11-05T09:32:21Z","dns_checked_at":"2026-11-06T09:57:46.000Z","dns_since":"2026-11-05T09:57:42.000Z","findings":[{"id":"fd2rcmtqlfuxkyvy4ghez","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T09:26:25.293Z","first_published":"2026-11-05T09:50:27.766Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=brulvaxen-spain.com"},{"hostname":"btc-alturan-v34.pro","first_observed":"2026-11-05T09:41:19.995Z","first_published":"2026-11-05T09:50:27.766Z","brands":[],"dns":"resolved","resolved":["104.21.61.41","172.67.205.253"],"resolved_at":"2026-11-05T09:43:19Z","dns_checked_at":"2026-11-06T09:57:46.000Z","dns_since":"2026-11-05T09:57:42.000Z","findings":[{"id":"fwk43yoiewessp4xuc3kh","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T09:41:19.995Z","first_published":"2026-11-05T09:50:27.766Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=btc-alturan-v34.pro"},{"hostname":"cactuslandco.com","first_observed":"2026-11-05T09:31:04.544Z","first_published":"2026-11-05T09:50:27.766Z","brands":[],"dns":"resolved","resolved":["192.124.249.56"],"resolved_at":"2026-11-05T09:38:16Z","dns_checked_at":"2026-11-06T09:57:46.000Z","dns_since":"2026-11-05T09:57:42.000Z","findings":[{"id":"fl3d5oruj5kllryvc4amm","kind":"reported_domain","summary":"Reported by PhishTank","first_observed":"2026-11-05T09:31:04.544Z","first_published":"2026-11-05T09:50:27.766Z","source":"phishtank","source_name":"PhishTank","source_url":"https://phishtank.org/phish_detail.php?phish_id=8830183"}],"url":"https://domainspoof.com/live?show=all&q=cactuslandco.com"},{"hostname":"cashcatt.xyz","first_observed":"2026-11-05T09:05:42.435Z","first_published":"2026-11-05T09:50:27.766Z","brands":[],"dns":"resolved","resolved":["104.21.6.198","172.67.135.59"],"resolved_at":"2026-11-05T09:13:45Z","dns_checked_at":"2026-11-06T09:57:46.000Z","dns_since":"2026-11-05T09:57:42.000Z","findings":[{"id":"fyr3xjrl3xpa6rmt6a44b","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T09:05:42.435Z","first_published":"2026-11-05T09:50:27.766Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=cashcatt.xyz"},{"hostname":"catlly.shop","first_observed":"2026-11-05T09:41:19.995Z","first_published":"2026-11-05T09:50:27.766Z","brands":[],"dns":"resolved","resolved":["104.21.29.245","172.67.150.4"],"resolved_at":"2026-11-05T09:43:23Z","dns_checked_at":"2026-11-06T09:57:46.000Z","dns_since":"2026-11-05T09:57:42.000Z","findings":[{"id":"fb2l7zlawuafsktcx5s3v","kind":"reported_domain","summary":"Listed by NPA 165 (information services)","first_observed":"2026-11-05T09:41:19.995Z","first_published":"2026-11-05T09:50:27.766Z","source":"npa","source_name":"NPA 165","claim":{"category":"information services"}}],"url":"https://domainspoof.com/live?show=all&q=catlly.shop"},{"hostname":"cattoguara.store","first_observed":"2026-11-05T09:19:06.197Z","first_published":"2026-11-05T09:50:27.766Z","brands":[],"dns":"not_found","resolved":["104.21.58.13","172.67.153.226","2606:4700:3035::ac43:99e2","2606:4700:3037::6815:3a0d"],"resolved_at":"2026-11-05T09:20:24Z","dns_checked_at":"2026-11-06T14:02:28.000Z","findings":[{"id":"f4a72w6qqqsee3k5aemr6","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T09:19:06.197Z","first_published":"2026-11-05T09:50:27.766Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=cattoguara.store"},{"hostname":"cedsk.top","first_observed":"2026-11-05T09:26:25.293Z","first_published":"2026-11-05T09:50:27.766Z","brands":[],"dns":"resolved","resolved":["104.21.48.188","172.67.136.201"],"resolved_at":"2026-11-05T09:32:57Z","dns_checked_at":"2026-11-06T09:57:46.000Z","dns_since":"2026-11-05T09:57:42.000Z","findings":[{"id":"f7qyitcgruvczxzjerv6b","kind":"reported_domain","summary":"Listed by MODA (one-page scam site)","first_observed":"2026-11-05T09:26:25.293Z","first_published":"2026-11-05T09:50:27.766Z","source":"moda","source_name":"MODA","claim":{"category":"one-page scam site"}}],"url":"https://domainspoof.com/live?show=all&q=cedsk.top"},{"hostname":"cielointelligence.com","first_observed":"2026-11-05T09:05:42.435Z","first_published":"2026-11-05T09:50:27.766Z","brands":[],"dns":"resolved","resolved":["162.159.143.30","172.66.3.26"],"resolved_at":"2026-11-05T09:13:46Z","dns_checked_at":"2026-11-06T09:57:46.000Z","dns_since":"2026-11-05T09:57:42.000Z","findings":[{"id":"fgntnm6n4sb2mwknmvnk2","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T09:05:42.435Z","first_published":"2026-11-05T09:50:27.766Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/cielointelligence.com/"}],"url":"https://domainspoof.com/live?show=all&q=cielointelligence.com"},{"hostname":"coinbaze-pro-login.pages.dev","first_observed":"2026-11-05T09:16:04.617Z","first_published":"2026-11-05T09:50:27.766Z","brands":[],"dns":"resolved","resolved":["172.66.44.53","172.66.47.203"],"resolved_at":"2026-11-05T09:22:30Z","dns_checked_at":"2026-11-06T09:57:46.000Z","dns_since":"2026-11-05T09:57:42.000Z","findings":[{"id":"fgradchiljr4wai7jknay","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T09:16:04.617Z","first_published":"2026-11-05T09:50:27.766Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=coinbaze-pro-login.pages.dev"},{"hostname":"com-polybet-q21.com","first_observed":"2026-11-05T09:36:12.068Z","first_published":"2026-11-05T09:50:27.766Z","brands":[],"dns":"resolved","resolved":["62.60.226.95"],"resolved_at":"2026-11-05T09:40:06Z","dns_checked_at":"2026-11-06T09:57:46.000Z","dns_since":"2026-11-05T09:57:42.000Z","findings":[{"id":"fawfrvewq2oaxzt2e2sf4","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T09:36:12.068Z","first_published":"2026-11-05T09:50:27.766Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=com-polybet-q21.com"},{"hostname":"correio.digiedlab.com","first_observed":"2026-11-05T09:31:04.544Z","first_published":"2026-11-05T09:50:27.766Z","brands":[],"dns":"resolved","resolved":["109.238.86.5"],"resolved_at":"2026-11-05T09:38:21Z","dns_checked_at":"2026-11-06T09:57:46.000Z","dns_since":"2026-11-05T09:57:42.000Z","findings":[{"id":"f5j4lfj44srt6k5hfgqkj","kind":"reported_domain","summary":"Under digiedlab.com, listed by CERT Polska","first_observed":"2026-11-05T09:31:04.544Z","first_published":"2026-11-05T09:50:27.766Z","source":"cert_polska","source_name":"CERT Polska","under":"digiedlab.com"}],"url":"https://domainspoof.com/live?show=all&q=correio.digiedlab.com"},{"hostname":"correios.digiedlab.com","first_observed":"2026-11-05T09:31:04.544Z","first_published":"2026-11-05T09:50:27.766Z","brands":[],"dns":"resolved","resolved":["109.238.86.5"],"resolved_at":"2026-11-05T09:38:21Z","dns_checked_at":"2026-11-06T09:57:46.000Z","dns_since":"2026-11-05T09:57:42.000Z","findings":[{"id":"fzufva5hxmnzyygijzn7s","kind":"reported_domain","summary":"Under digiedlab.com, listed by CERT Polska","first_observed":"2026-11-05T09:31:04.544Z","first_published":"2026-11-05T09:50:27.766Z","source":"cert_polska","source_name":"CERT Polska","under":"digiedlab.com"}],"url":"https://domainspoof.com/live?show=all&q=correios.digiedlab.com"},{"hostname":"correo.digiedlab.com","first_observed":"2026-11-05T09:31:04.544Z","first_published":"2026-11-05T09:50:27.766Z","brands":[],"dns":"resolved","resolved":["109.238.86.5"],"resolved_at":"2026-11-05T09:38:21Z","dns_checked_at":"2026-11-06T09:57:46.000Z","dns_since":"2026-11-05T09:57:42.000Z","findings":[{"id":"fixaofbgcitqirh6aypbn","kind":"reported_domain","summary":"Under digiedlab.com, listed by CERT Polska","first_observed":"2026-11-05T09:31:04.544Z","first_published":"2026-11-05T09:50:27.766Z","source":"cert_polska","source_name":"CERT Polska","under":"digiedlab.com"}],"url":"https://domainspoof.com/live?show=all&q=correo.digiedlab.com"},{"hostname":"courrier.digiedlab.com","first_observed":"2026-11-05T09:31:04.544Z","first_published":"2026-11-05T09:50:27.766Z","brands":[],"dns":"resolved","resolved":["109.238.86.5"],"resolved_at":"2026-11-05T09:38:21Z","dns_checked_at":"2026-11-06T09:57:46.000Z","dns_since":"2026-11-05T09:57:42.000Z","findings":[{"id":"flqxsy6psguyh5twsuqzb","kind":"reported_domain","summary":"Under digiedlab.com, listed by CERT Polska","first_observed":"2026-11-05T09:31:04.544Z","first_published":"2026-11-05T09:50:27.766Z","source":"cert_polska","source_name":"CERT Polska","under":"digiedlab.com"}],"url":"https://domainspoof.com/live?show=all&q=courrier.digiedlab.com"},{"hostname":"covert-migration.xyz","first_observed":"2026-11-05T09:31:04.544Z","first_published":"2026-11-05T09:50:27.766Z","brands":[],"dns":"resolved","resolved":["104.21.2.201","172.67.129.157"],"resolved_at":"2026-11-05T09:38:21Z","dns_checked_at":"2026-11-06T09:57:46.000Z","dns_since":"2026-11-05T09:57:42.000Z","findings":[{"id":"flqs3d6qlhpmm5s5zujes","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T09:31:04.544Z","first_published":"2026-11-05T09:50:27.766Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/covert-migration.xyz/"}],"url":"https://domainspoof.com/live?show=all&q=covert-migration.xyz"},{"hostname":"cpanel.jtkmetalcraft.com.au","first_observed":"2026-11-05T09:26:25.293Z","first_published":"2026-11-05T09:50:27.766Z","brands":[],"dns":"resolved","resolved":["163.47.74.193","2404:8280:a222:bbbb:bba1:79:ffff:ffff"],"resolved_at":"2026-11-05T09:33:18Z","dns_checked_at":"2026-11-06T09:57:46.000Z","dns_since":"2026-11-05T09:57:42.000Z","findings":[{"id":"fmmzlgdrrmb4nrjcsmvec","kind":"reported_domain","summary":"Under jtkmetalcraft.com.au, reported by PhishDestroy","first_observed":"2026-11-05T09:26:25.293Z","first_published":"2026-11-05T09:50:27.766Z","source":"phishdestroy","source_name":"PhishDestroy","under":"jtkmetalcraft.com.au","source_url":"https://phishdestroy.io/domain/jtkmetalcraft.com.au/"}],"url":"https://domainspoof.com/live?show=all&q=cpanel.jtkmetalcraft.com.au"},{"hostname":"cpanel.orientalmining.com","first_observed":"2026-11-05T08:41:03.613Z","first_published":"2026-11-05T09:50:27.766Z","brands":[],"dns":"resolved","resolved":["65.181.124.4"],"resolved_at":"2026-11-05T08:52:12Z","dns_checked_at":"2026-11-06T09:57:46.000Z","dns_since":"2026-11-05T09:57:42.000Z","findings":[{"id":"f7gkm6gehw32t2dis67vn","kind":"reported_domain","summary":"Under orientalmining.com, listed by CERT Polska","first_observed":"2026-11-05T08:41:03.613Z","first_published":"2026-11-05T09:50:27.766Z","source":"cert_polska","source_name":"CERT Polska","under":"orientalmining.com"}],"url":"https://domainspoof.com/live?show=all&q=cpanel.orientalmining.com"},{"hostname":"cpcalendars.jtkmetalcraft.com.au","first_observed":"2026-11-05T09:26:25.293Z","first_published":"2026-11-05T09:50:27.766Z","brands":[],"dns":"resolved","resolved":["163.47.74.193","2404:8280:a222:bbbb:bba1:79:ffff:ffff"],"resolved_at":"2026-11-05T09:33:18Z","dns_checked_at":"2026-11-06T09:57:46.000Z","dns_since":"2026-11-05T09:57:42.000Z","findings":[{"id":"fwnauvyvf5s36rjncaopx","kind":"reported_domain","summary":"Under jtkmetalcraft.com.au, reported by PhishDestroy","first_observed":"2026-11-05T09:26:25.293Z","first_published":"2026-11-05T09:50:27.766Z","source":"phishdestroy","source_name":"PhishDestroy","under":"jtkmetalcraft.com.au","source_url":"https://phishdestroy.io/domain/jtkmetalcraft.com.au/"}],"url":"https://domainspoof.com/live?show=all&q=cpcalendars.jtkmetalcraft.com.au"},{"hostname":"cpcalendars.orientalmining.com","first_observed":"2026-11-05T08:41:03.613Z","first_published":"2026-11-05T09:50:27.766Z","brands":[],"dns":"resolved","resolved":["65.181.124.4"],"resolved_at":"2026-11-05T08:52:13Z","dns_checked_at":"2026-11-06T09:57:46.000Z","dns_since":"2026-11-05T09:57:42.000Z","findings":[{"id":"f2qz3u43lcjh3tja2xl65","kind":"reported_domain","summary":"Under orientalmining.com, listed by CERT Polska","first_observed":"2026-11-05T08:41:03.613Z","first_published":"2026-11-05T09:50:27.766Z","source":"cert_polska","source_name":"CERT Polska","under":"orientalmining.com"}],"url":"https://domainspoof.com/live?show=all&q=cpcalendars.orientalmining.com"},{"hostname":"cpcontacts.jtkmetalcraft.com.au","first_observed":"2026-11-05T09:26:25.293Z","first_published":"2026-11-05T09:50:27.766Z","brands":[],"dns":"resolved","resolved":["163.47.74.193","2404:8280:a222:bbbb:bba1:79:ffff:ffff"],"resolved_at":"2026-11-05T09:33:18Z","dns_checked_at":"2026-11-06T09:57:46.000Z","dns_since":"2026-11-05T09:57:42.000Z","findings":[{"id":"f3fp2agwhvv2s4g24ysiy","kind":"reported_domain","summary":"Under jtkmetalcraft.com.au, reported by PhishDestroy","first_observed":"2026-11-05T09:26:25.293Z","first_published":"2026-11-05T09:50:27.766Z","source":"phishdestroy","source_name":"PhishDestroy","under":"jtkmetalcraft.com.au","source_url":"https://phishdestroy.io/domain/jtkmetalcraft.com.au/"}],"url":"https://domainspoof.com/live?show=all&q=cpcontacts.jtkmetalcraft.com.au"},{"hostname":"cpcontacts.orientalmining.com","first_observed":"2026-11-05T08:41:03.613Z","first_published":"2026-11-05T09:50:27.766Z","brands":[],"dns":"resolved","resolved":["65.181.124.4"],"resolved_at":"2026-11-05T08:52:13Z","dns_checked_at":"2026-11-06T09:57:46.000Z","dns_since":"2026-11-05T09:57:42.000Z","findings":[{"id":"fxuqogvk56dpzvzv535ts","kind":"reported_domain","summary":"Under orientalmining.com, listed by CERT Polska","first_observed":"2026-11-05T08:41:03.613Z","first_published":"2026-11-05T09:50:27.766Z","source":"cert_polska","source_name":"CERT Polska","under":"orientalmining.com"}],"url":"https://domainspoof.com/live?show=all&q=cpcontacts.orientalmining.com"},{"hostname":"crionexis-valur.click","first_observed":"2026-11-05T09:31:04.544Z","first_published":"2026-11-05T09:50:27.766Z","brands":[],"dns":"resolved","resolved":["104.21.55.132","172.67.148.48"],"resolved_at":"2026-11-05T09:38:21Z","dns_checked_at":"2026-11-06T09:57:46.000Z","dns_since":"2026-11-05T09:57:42.000Z","findings":[{"id":"fkc5r6nngxynwmbuu3xge","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T09:31:04.544Z","first_published":"2026-11-05T09:50:27.766Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=crionexis-valur.click"},{"hostname":"cropsurname.com","first_observed":"2026-11-05T09:21:13.732Z","first_published":"2026-11-05T09:50:27.766Z","brands":[],"dns":"resolved","resolved":["104.21.80.117","172.67.180.131"],"resolved_at":"2026-11-05T09:26:48Z","dns_checked_at":"2026-11-06T09:57:46.000Z","dns_since":"2026-11-05T09:57:42.000Z","findings":[{"id":"fyhpikwayknww2pl63bs4","kind":"reported_domain","summary":"Listed by USOM","first_observed":"2026-11-05T09:21:13.732Z","first_published":"2026-11-05T09:50:27.766Z","source":"usom","source_name":"USOM"}],"url":"https://domainspoof.com/live?show=all&q=cropsurname.com"},{"hostname":"crypto-2.pornworks.app","first_observed":"2026-11-05T09:26:25.293Z","first_published":"2026-11-05T09:50:27.766Z","brands":[],"dns":"resolved","resolved":["185.225.203.52"],"resolved_at":"2026-11-05T09:33:18Z","dns_checked_at":"2026-11-06T09:57:46.000Z","dns_since":"2026-11-05T09:57:42.000Z","findings":[{"id":"fw34wzm5iownsghsv27uj","kind":"reported_domain","summary":"Under pornworks.app, reported by PhishDestroy","first_observed":"2026-11-05T09:26:25.293Z","first_published":"2026-11-05T09:50:27.766Z","source":"phishdestroy","source_name":"PhishDestroy","under":"pornworks.app","source_url":"https://phishdestroy.io/domain/pornworks.app/"}],"url":"https://domainspoof.com/live?show=all&q=crypto-2.pornworks.app"},{"hostname":"ctelcom.gostratsicof.com","first_observed":"2026-11-05T08:51:54.108Z","first_published":"2026-11-05T09:50:27.766Z","brands":[],"dns":"resolved","resolved":["77.37.53.79","91.108.98.67"],"resolved_at":"2026-11-05T08:59:35Z","dns_checked_at":"2026-11-06T09:57:46.000Z","dns_since":"2026-11-05T09:57:42.000Z","findings":[{"id":"f2omtkzzecocdeuzfxmb7","kind":"reported_domain","summary":"Under gostratsicof.com, listed by CERT Polska","first_observed":"2026-11-05T08:51:54.108Z","first_published":"2026-11-05T09:50:27.766Z","source":"cert_polska","source_name":"CERT Polska","under":"gostratsicof.com"}],"url":"https://domainspoof.com/live?show=all&q=ctelcom.gostratsicof.com"},{"hostname":"curve.fan","first_observed":"2026-11-05T09:16:04.617Z","first_published":"2026-11-05T09:50:27.766Z","brands":[],"dns":"resolved","resolved":["216.150.1.1"],"resolved_at":"2026-11-05T09:22:40Z","dns_checked_at":"2026-11-06T09:57:46.000Z","dns_since":"2026-11-05T09:57:42.000Z","findings":[{"id":"fuhntoeottruuenxbadrq","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T09:16:04.617Z","first_published":"2026-11-05T09:50:27.766Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/curve.fan/"}],"url":"https://domainspoof.com/live?show=all&q=curve.fan"},{"hostname":"cyberstoke.com","first_observed":"2026-11-05T09:05:42.435Z","first_published":"2026-11-05T09:50:27.766Z","brands":[],"dns":"resolved","resolved":["104.21.37.215","172.67.213.151"],"resolved_at":"2026-11-05T09:14:03Z","dns_checked_at":"2026-11-06T09:57:46.000Z","dns_since":"2026-11-05T09:57:42.000Z","findings":[{"id":"f72wjbdw7hgpnvuktszay","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T09:05:42.435Z","first_published":"2026-11-05T09:50:27.766Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/cyberstoke.com/"}],"url":"https://domainspoof.com/live?show=all&q=cyberstoke.com"},{"hostname":"cyhyvei.pro","first_observed":"2026-11-05T09:41:19.995Z","first_published":"2026-11-05T09:50:27.766Z","brands":[],"dns":"resolved","resolved":["104.21.74.149","172.67.159.100"],"resolved_at":"2026-11-05T09:43:28Z","dns_checked_at":"2026-11-06T09:57:46.000Z","dns_since":"2026-11-05T09:57:42.000Z","findings":[{"id":"f3ekzwdsst7azbt2rixpe","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T09:41:19.995Z","first_published":"2026-11-05T09:50:27.766Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=cyhyvei.pro"},{"hostname":"deretscalm.store","first_observed":"2026-11-05T09:19:06.197Z","first_published":"2026-11-05T09:50:27.766Z","brands":[],"dns":"not_found","resolved":["104.21.38.91","172.67.220.251","2606:4700:3033::6815:265b","2606:4700:3033::ac43:dcfb"],"resolved_at":"2026-11-05T09:20:24Z","dns_checked_at":"2026-11-06T14:02:28.000Z","findings":[{"id":"fam4qbulmqbcv3ihfrl6p","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T09:19:06.197Z","first_published":"2026-11-05T09:50:27.766Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=deretscalm.store"},{"hostname":"desktop-ledgr-live-us.pages.dev","first_observed":"2026-11-05T09:36:12.068Z","first_published":"2026-11-05T09:50:27.766Z","brands":[],"dns":"resolved","resolved":["172.66.44.143","172.66.47.113"],"resolved_at":"2026-11-05T09:40:13Z","dns_checked_at":"2026-11-06T09:57:46.000Z","dns_since":"2026-11-05T09:57:42.000Z","findings":[{"id":"frfwvxvcuplmqak4lqoyh","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T09:36:12.068Z","first_published":"2026-11-05T09:50:27.766Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=desktop-ledgr-live-us.pages.dev"},{"hostname":"docker.ni-electrical.com","first_observed":"2026-11-05T09:00:36.557Z","first_published":"2026-11-05T09:50:27.766Z","brands":[],"dns":"resolved","resolved":["109.238.86.5"],"resolved_at":"2026-11-05T09:00:50Z","dns_checked_at":"2026-11-06T09:57:46.000Z","dns_since":"2026-11-05T09:57:42.000Z","findings":[{"id":"fqo5sdj7fh4q3gh7veszl","kind":"reported_domain","summary":"Under ni-electrical.com, listed by CERT Polska","first_observed":"2026-11-05T09:00:36.557Z","first_published":"2026-11-05T09:50:27.766Z","source":"cert_polska","source_name":"CERT Polska","under":"ni-electrical.com"}],"url":"https://domainspoof.com/live?show=all&q=docker.ni-electrical.com"},{"hostname":"drive.zenavlico.cyou","first_observed":"2026-11-05T09:41:19.995Z","first_published":"2026-11-05T09:50:27.766Z","brands":[],"dns":"resolved","resolved":["95.85.244.13"],"resolved_at":"2026-11-05T09:43:29Z","dns_checked_at":"2026-11-06T09:57:46.000Z","dns_since":"2026-11-05T09:57:42.000Z","findings":[{"id":"f64vdlnkqb5afq4wgqd6o","kind":"reported_domain","summary":"Under zenavlico.cyou, listed by CERT Polska","first_observed":"2026-11-05T09:41:19.995Z","first_published":"2026-11-05T09:50:27.766Z","source":"cert_polska","source_name":"CERT Polska","under":"zenavlico.cyou"}],"url":"https://domainspoof.com/live?show=all&q=drive.zenavlico.cyou"},{"hostname":"drone.tor.taxi","first_observed":"2026-11-05T09:21:13.732Z","first_published":"2026-11-05T09:50:27.766Z","brands":[],"dns":"resolved","resolved":["185.129.100.227"],"resolved_at":"2026-11-05T09:26:48Z","dns_checked_at":"2026-11-06T09:57:46.000Z","dns_since":"2026-11-05T09:57:42.000Z","findings":[{"id":"flal3gzx63jwdwjxil6ie","kind":"reported_domain","summary":"Under tor.taxi, reported by PhishDestroy","first_observed":"2026-11-05T09:21:13.732Z","first_published":"2026-11-05T09:50:27.766Z","source":"phishdestroy","source_name":"PhishDestroy","under":"tor.taxi","source_url":"https://phishdestroy.io/domain/tor.taxi/"}],"url":"https://domainspoof.com/live?show=all&q=drone.tor.taxi"},{"hostname":"dupadommain.eu.cc","first_observed":"2026-11-05T09:31:04.544Z","first_published":"2026-11-05T09:50:27.766Z","brands":[],"dns":"resolved","resolved":["104.21.23.138","172.67.211.82"],"resolved_at":"2026-11-05T09:38:22Z","dns_checked_at":"2026-11-06T09:57:46.000Z","dns_since":"2026-11-05T09:57:42.000Z","findings":[{"id":"fwol5mabsqjl76ivluhe5","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T09:31:04.544Z","first_published":"2026-11-05T09:50:27.766Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=dupadommain.eu.cc"},{"hostname":"elink15c.news.diamondsdobetter.com","first_observed":"2026-11-05T09:10:52.041Z","first_published":"2026-11-05T09:50:27.766Z","brands":[],"dns":"resolved","resolved":["104.16.23.120","104.16.24.120"],"resolved_at":"2026-11-05T09:11:18Z","dns_checked_at":"2026-11-06T09:57:46.000Z","dns_since":"2026-11-05T09:57:42.000Z","findings":[{"id":"fo7z3zwvnrg4slvvpbhkp","kind":"reported_domain","summary":"Under diamondsdobetter.com, listed by CERT Polska","first_observed":"2026-11-05T09:10:52.041Z","first_published":"2026-11-05T09:50:27.766Z","source":"cert_polska","source_name":"CERT Polska","under":"diamondsdobetter.com"}],"url":"https://domainspoof.com/live?show=all&q=elink15c.news.diamondsdobetter.com"},{"hostname":"emyouxuantw.shop","first_observed":"2026-11-05T09:16:04.617Z","first_published":"2026-11-05T09:50:27.766Z","brands":[],"dns":"resolved","resolved":["104.21.45.183","172.67.218.29"],"resolved_at":"2026-11-05T09:22:42Z","dns_checked_at":"2026-11-06T09:57:46.000Z","dns_since":"2026-11-05T09:57:42.000Z","findings":[{"id":"fb2b7atrmxorcu4pyxmmz","kind":"reported_domain","summary":"Listed by NPA 165 (information services)","first_observed":"2026-11-05T09:16:04.617Z","first_published":"2026-11-05T09:50:27.766Z","source":"npa","source_name":"NPA 165","claim":{"category":"information services"}}],"url":"https://domainspoof.com/live?show=all&q=emyouxuantw.shop"},{"hostname":"en-quickbooks.com","first_observed":"2026-11-05T09:40:13.684Z","first_published":"2026-11-05T09:50:27.766Z","brands":[{"id":"intuit","name":"Intuit","url":"https://domainspoof.com/brands/intuit"}],"dns":"resolved","resolved":["185.146.167.204"],"resolved_at":"2026-11-06T09:57:46Z","dns_checked_at":"2026-11-06T09:57:46.000Z","dns_since":"2026-11-05T09:57:42.000Z","findings":[{"id":"frwtxlzvirngsl5uqu3th","kind":"phishing_infrastructure","summary":"Resolved to 185.146.167.204, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T09:40:13.684Z","first_published":"2026-11-05T09:50:27.766Z","address":"185.146.167.204","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/intuit"},{"hostname":"epost.digiedlab.com","first_observed":"2026-11-05T09:31:04.544Z","first_published":"2026-11-05T09:50:27.766Z","brands":[],"dns":"resolved","resolved":["109.238.86.5"],"resolved_at":"2026-11-05T09:38:23Z","dns_checked_at":"2026-11-06T09:57:46.000Z","dns_since":"2026-11-05T09:57:42.000Z","findings":[{"id":"fh2cyzkukgdbhugwucpp5","kind":"reported_domain","summary":"Under digiedlab.com, listed by CERT Polska","first_observed":"2026-11-05T09:31:04.544Z","first_published":"2026-11-05T09:50:27.766Z","source":"cert_polska","source_name":"CERT Polska","under":"digiedlab.com"}],"url":"https://domainspoof.com/live?show=all&q=epost.digiedlab.com"},{"hostname":"erp.digitap.app","first_observed":"2026-11-05T09:31:04.544Z","first_published":"2026-11-05T09:50:27.766Z","brands":[],"dns":"resolved","resolved":["216.150.1.65","216.150.16.65"],"resolved_at":"2026-11-05T09:38:23Z","dns_checked_at":"2026-11-06T09:57:46.000Z","dns_since":"2026-11-05T09:57:42.000Z","findings":[{"id":"fn5trkbysab6ovyfm6yrl","kind":"reported_domain","summary":"Under digitap.app, reported by PhishDestroy","first_observed":"2026-11-05T09:31:04.544Z","first_published":"2026-11-05T09:50:27.766Z","source":"phishdestroy","source_name":"PhishDestroy","under":"digitap.app","source_url":"https://phishdestroy.io/domain/digitap.app/"}],"url":"https://domainspoof.com/live?show=all&q=erp.digitap.app"},{"hostname":"ethfi-s5-allocations.xyz","first_observed":"2026-11-05T09:21:13.732Z","first_published":"2026-11-05T09:50:27.766Z","brands":[{"id":"ether-fi","name":"ether.fi","url":"https://domainspoof.com/brands/ether-fi"}],"dns":"resolved","resolved":["104.21.0.153","172.67.186.40","2606:4700:3031::ac43:ba28","2606:4700:3037::6815:99"],"resolved_at":"2026-11-05T09:26:49Z","dns_checked_at":"2026-11-06T09:57:46.000Z","dns_since":"2026-11-05T09:57:42.000Z","findings":[{"id":"f3jm6go4fa75p5ndzcgyn","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T09:21:13.732Z","first_published":"2026-11-05T09:50:27.766Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/brands/ether-fi"},{"hostname":"exclusives.gostratsicof.com","first_observed":"2026-11-05T08:51:54.108Z","first_published":"2026-11-05T09:50:27.766Z","brands":[],"dns":"resolved","resolved":["195.35.60.91","212.1.212.225"],"resolved_at":"2026-11-05T08:52:04Z","dns_checked_at":"2026-11-06T09:57:46.000Z","dns_since":"2026-11-05T09:57:42.000Z","findings":[{"id":"fjxnppyhaeorhqfl7jgod","kind":"reported_domain","summary":"Under gostratsicof.com, listed by CERT Polska","first_observed":"2026-11-05T08:51:54.108Z","first_published":"2026-11-05T09:50:27.766Z","source":"cert_polska","source_name":"CERT Polska","under":"gostratsicof.com"}],"url":"https://domainspoof.com/live?show=all&q=exclusives.gostratsicof.com"},{"hostname":"exclusivetest.gostratsicof.com","first_observed":"2026-11-05T08:51:54.108Z","first_published":"2026-11-05T09:50:27.766Z","brands":[],"dns":"resolved","resolved":["191.101.104.249","212.1.212.197"],"resolved_at":"2026-11-05T08:52:04Z","dns_checked_at":"2026-11-06T09:57:46.000Z","dns_since":"2026-11-05T09:57:42.000Z","findings":[{"id":"f6p324j5fveh6n3jfcgqt","kind":"reported_domain","summary":"Under gostratsicof.com, listed by CERT Polska","first_observed":"2026-11-05T08:51:54.108Z","first_published":"2026-11-05T09:50:27.766Z","source":"cert_polska","source_name":"CERT Polska","under":"gostratsicof.com"}],"url":"https://domainspoof.com/live?show=all&q=exclusivetest.gostratsicof.com"},{"hostname":"fastbit.tech","first_observed":"2026-11-05T09:36:12.068Z","first_published":"2026-11-05T09:50:27.766Z","brands":[],"dns":"resolved","resolved":["104.21.76.210","172.67.201.15"],"resolved_at":"2026-11-05T09:40:14Z","dns_checked_at":"2026-11-06T09:57:46.000Z","dns_since":"2026-11-05T09:57:42.000Z","findings":[{"id":"fzh2amokledrbho7kc5lb","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T09:36:12.068Z","first_published":"2026-11-05T09:50:27.766Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/fastbit.tech/"}],"url":"https://domainspoof.com/live?show=all&q=fastbit.tech"},{"hostname":"fazuboe.pro","first_observed":"2026-11-05T08:41:03.613Z","first_published":"2026-11-05T09:50:27.766Z","brands":[],"dns":"resolved","resolved":["104.21.92.139","172.67.194.137"],"resolved_at":"2026-11-05T08:52:20Z","dns_checked_at":"2026-11-06T09:57:46.000Z","dns_since":"2026-11-05T09:57:42.000Z","findings":[{"id":"fjxghei5u3eq5gr5ouxnn","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T08:41:03.613Z","first_published":"2026-11-05T09:50:27.766Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=fazuboe.pro"},{"hostname":"fengshuimars.com","first_observed":"2026-11-05T08:46:43.679Z","first_published":"2026-11-05T09:50:27.766Z","brands":[],"dns":"resolved","resolved":["172.232.29.171","172.234.220.168","172.239.193.234"],"resolved_at":"2026-11-05T08:47:10Z","dns_checked_at":"2026-11-06T09:57:46.000Z","dns_since":"2026-11-05T09:57:42.000Z","findings":[{"id":"fikdqsqx4jni3aprjbc4g","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T08:46:43.679Z","first_published":"2026-11-05T09:50:27.766Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=fengshuimars.com"},{"hostname":"finshit.ddfddf23.tech","first_observed":"2026-11-05T09:16:04.617Z","first_published":"2026-11-05T09:50:27.766Z","brands":[],"dns":"resolved","resolved":["152.234.212.153"],"resolved_at":"2026-11-05T09:22:44Z","dns_checked_at":"2026-11-06T09:57:46.000Z","dns_since":"2026-11-05T09:57:42.000Z","findings":[{"id":"fotviqgcobhkbkvxlyo7c","kind":"reported_domain","summary":"Under ddfddf23.tech, listed by MetaMask","first_observed":"2026-11-05T09:16:04.617Z","first_published":"2026-11-05T09:50:27.766Z","source":"metamask","source_name":"MetaMask","under":"ddfddf23.tech"}],"url":"https://domainspoof.com/live?show=all&q=finshit.ddfddf23.tech"},{"hostname":"freeflowlife.org","first_observed":"2026-11-05T09:05:42.435Z","first_published":"2026-11-05T09:50:27.766Z","brands":[],"dns":"resolved","resolved":["185.199.108.153","185.199.109.153","185.199.110.153","185.199.111.153"],"resolved_at":"2026-11-05T09:14:06Z","dns_checked_at":"2026-11-06T09:57:46.000Z","dns_since":"2026-11-05T09:57:42.000Z","findings":[{"id":"frkro2zhhckhj3ocyxbxt","kind":"reported_domain","summary":"Listed by NPA 165 (finance and insurance)","first_observed":"2026-11-05T09:05:42.435Z","first_published":"2026-11-05T09:50:27.766Z","source":"npa","source_name":"NPA 165","claim":{"category":"finance and insurance"}}],"url":"https://domainspoof.com/live?show=all&q=freeflowlife.org"},{"hostname":"furniture-sale.shop","first_observed":"2026-11-05T09:10:52.041Z","first_published":"2026-11-05T09:50:27.766Z","brands":[],"dns":"resolved","resolved":["104.18.13.234"],"resolved_at":"2026-11-05T09:11:19Z","dns_checked_at":"2026-11-06T09:57:46.000Z","dns_since":"2026-11-05T09:57:42.000Z","findings":[{"id":"f43o6jeffnd7mvwkwlfso","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T09:10:52.041Z","first_published":"2026-11-05T09:50:27.766Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=furniture-sale.shop"},{"hostname":"gameliver.gofixedapp.com","first_observed":"2026-11-05T09:00:36.557Z","first_published":"2026-11-05T09:50:27.766Z","brands":[],"dns":"resolved","resolved":["35.213.155.32"],"resolved_at":"2026-11-05T09:00:50Z","dns_checked_at":"2026-11-06T09:57:46.000Z","dns_since":"2026-11-05T09:57:42.000Z","findings":[{"id":"f35h3xfowmaoo3vljn3mv","kind":"reported_domain","summary":"Under gofixedapp.com, listed by MetaMask","first_observed":"2026-11-05T09:00:36.557Z","first_published":"2026-11-05T09:50:27.766Z","source":"metamask","source_name":"MetaMask","under":"gofixedapp.com"}],"url":"https://domainspoof.com/live?show=all&q=gameliver.gofixedapp.com"},{"hostname":"genesismix.cc","first_observed":"2026-11-05T09:26:25.293Z","first_published":"2026-11-05T09:50:27.766Z","brands":[],"dns":"resolved","resolved":["104.21.91.204","172.67.179.87"],"resolved_at":"2026-11-05T09:33:23Z","dns_checked_at":"2026-11-06T09:57:46.000Z","dns_since":"2026-11-05T09:57:42.000Z","findings":[{"id":"f4ssrefzomjrypybya4bw","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T09:26:25.293Z","first_published":"2026-11-05T09:50:27.766Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/genesismix.cc/"}],"url":"https://domainspoof.com/live?show=all&q=genesismix.cc"},{"hostname":"gerwaldkronberg.net","first_observed":"2026-11-05T09:31:04.544Z","first_published":"2026-11-05T09:50:27.766Z","brands":[],"dns":"resolved","resolved":["104.21.54.19","172.67.222.130"],"resolved_at":"2026-11-06T02:41:54Z","dns_checked_at":"2026-11-06T09:57:46.000Z","dns_since":"2026-11-05T09:57:42.000Z","findings":[{"id":"fg76d2tjshytjyw5uww55","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T09:31:04.544Z","first_published":"2026-11-05T09:50:27.766Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=gerwaldkronberg.net"},{"hostname":"gimp.org.cn","first_observed":"2026-11-05T09:00:36.557Z","first_published":"2026-11-05T09:50:27.766Z","brands":[],"dns":"resolved","resolved":["62.146.173.132"],"resolved_at":"2026-11-05T09:00:50Z","dns_checked_at":"2026-11-06T09:57:46.000Z","dns_since":"2026-11-05T09:57:42.000Z","findings":[{"id":"ftetk37vw5uad3tgtx2ym","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T09:00:36.557Z","first_published":"2026-11-05T09:50:27.766Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=gimp.org.cn"},{"hostname":"git.www.stg.airflow.kingdom-dmc.com","first_observed":"2026-11-05T09:26:25.293Z","first_published":"2026-11-05T09:50:27.766Z","brands":[],"dns":"resolved","resolved":["185.215.4.42"],"resolved_at":"2026-11-05T09:33:24Z","dns_checked_at":"2026-11-06T09:57:46.000Z","dns_since":"2026-11-05T09:57:42.000Z","findings":[{"id":"f3lpf4z7eatktdnidzab3","kind":"reported_domain","summary":"Under kingdom-dmc.com, listed by MetaMask","first_observed":"2026-11-05T09:26:25.293Z","first_published":"2026-11-05T09:50:27.766Z","source":"metamask","source_name":"MetaMask","under":"kingdom-dmc.com"}],"url":"https://domainspoof.com/live?show=all&q=git.www.stg.airflow.kingdom-dmc.com"},{"hostname":"gjzzzzag.shop","first_observed":"2026-11-05T09:36:12.068Z","first_published":"2026-11-05T09:50:27.766Z","brands":[],"dns":"resolved","resolved":["104.17.177.238"],"resolved_at":"2026-11-05T09:40:15Z","dns_checked_at":"2026-11-06T09:57:46.000Z","dns_since":"2026-11-05T09:57:42.000Z","findings":[{"id":"fs42hslotq6ox4ojxzlqi","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T09:36:12.068Z","first_published":"2026-11-05T09:50:27.766Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=gjzzzzag.shop"},{"hostname":"godlike-withdrawal.com","first_observed":"2026-11-05T09:31:04.544Z","first_published":"2026-11-05T09:50:27.766Z","brands":[],"dns":"resolved","resolved":["104.21.5.12","172.67.132.184"],"resolved_at":"2026-11-05T09:38:24Z","dns_checked_at":"2026-11-06T09:57:46.000Z","dns_since":"2026-11-05T09:57:42.000Z","findings":[{"id":"fcfnvmetdj43ba2o2arcm","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T09:31:04.544Z","first_published":"2026-11-05T09:50:27.766Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=godlike-withdrawal.com"},{"hostname":"gostratsicof.com","first_observed":"2026-11-05T08:41:03.613Z","first_published":"2026-11-05T09:50:27.766Z","brands":[],"dns":"resolved","resolved":["77.37.53.168","93.127.179.127"],"resolved_at":"2026-11-05T08:52:22Z","dns_checked_at":"2026-11-06T09:57:46.000Z","dns_since":"2026-11-05T09:57:42.000Z","findings":[{"id":"fxek5ybw7jsabhpov7dof","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T08:41:03.613Z","first_published":"2026-11-05T09:50:27.766Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=gostratsicof.com"},{"hostname":"governance-hyperlink.xyz","first_observed":"2026-11-05T09:31:04.544Z","first_published":"2026-11-05T09:50:27.766Z","brands":[],"dns":"resolved","resolved":["104.21.39.7","172.67.141.206"],"resolved_at":"2026-11-05T09:38:24Z","dns_checked_at":"2026-11-06T09:57:46.000Z","dns_since":"2026-11-05T09:57:42.000Z","findings":[{"id":"f27wg7q6t5ckqsux6vktp","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T09:31:04.544Z","first_published":"2026-11-05T09:50:27.766Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=governance-hyperlink.xyz"},{"hostname":"governance-mancer.icu","first_observed":"2026-11-05T08:46:43.679Z","first_published":"2026-11-05T09:50:27.766Z","brands":[],"dns":"resolved","resolved":["104.21.82.231","172.67.208.132"],"resolved_at":"2026-11-05T08:47:11Z","dns_checked_at":"2026-11-06T09:57:46.000Z","dns_since":"2026-11-05T09:57:42.000Z","findings":[{"id":"foxehttgzzypbendggjwt","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T08:46:43.679Z","first_published":"2026-11-05T09:50:27.766Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=governance-mancer.icu"},{"hostname":"governance-usenest.xyz","first_observed":"2026-11-05T09:05:42.435Z","first_published":"2026-11-05T09:50:27.766Z","brands":[],"dns":"resolved","resolved":["104.21.68.155","172.67.196.166"],"resolved_at":"2026-11-05T09:14:07Z","dns_checked_at":"2026-11-06T09:57:46.000Z","dns_since":"2026-11-05T09:57:42.000Z","findings":[{"id":"fyvtjapdoinjmoz7bevqu","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T09:05:42.435Z","first_published":"2026-11-05T09:50:27.766Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=governance-usenest.xyz"},{"hostname":"graphql.aml.legal","first_observed":"2026-11-05T09:36:12.068Z","first_published":"2026-11-05T09:50:27.766Z","brands":[],"dns":"resolved","resolved":["186.2.175.179"],"resolved_at":"2026-11-05T09:40:16Z","dns_checked_at":"2026-11-06T09:57:46.000Z","dns_since":"2026-11-05T09:57:42.000Z","findings":[{"id":"fjrbkwebxymp54xual4ua","kind":"reported_domain","summary":"Under aml.legal, reported by PhishDestroy","first_observed":"2026-11-05T09:36:12.068Z","first_published":"2026-11-05T09:50:27.766Z","source":"phishdestroy","source_name":"PhishDestroy","under":"aml.legal","source_url":"https://phishdestroy.io/domain/aml.legal/"}],"url":"https://domainspoof.com/live?show=all&q=graphql.aml.legal"},{"hostname":"gt-cfx.com","first_observed":"2026-11-05T08:46:43.679Z","first_published":"2026-11-05T09:50:27.766Z","brands":[],"dns":"resolved","resolved":["104.21.6.233","172.67.135.114"],"resolved_at":"2026-11-05T08:47:11Z","dns_checked_at":"2026-11-06T09:57:46.000Z","dns_since":"2026-11-05T09:57:42.000Z","findings":[{"id":"fgxlc535ggz3vdpwixkmu","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T08:46:43.679Z","first_published":"2026-11-05T09:50:27.766Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=gt-cfx.com"},{"hostname":"gtcfx-pro.com","first_observed":"2026-11-05T08:46:43.679Z","first_published":"2026-11-05T09:50:27.766Z","brands":[],"dns":"resolved","resolved":["104.21.63.229","172.67.172.94"],"resolved_at":"2026-11-05T08:47:11Z","dns_checked_at":"2026-11-06T09:57:46.000Z","dns_since":"2026-11-05T09:57:42.000Z","findings":[{"id":"fwsm6eyny574htfsvk75f","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T08:46:43.679Z","first_published":"2026-11-05T09:50:27.766Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=gtcfx-pro.com"},{"hostname":"gtcfxdirect.com","first_observed":"2026-11-05T08:46:43.679Z","first_published":"2026-11-05T09:50:27.766Z","brands":[],"dns":"resolved","resolved":["104.21.42.95","172.67.204.187"],"resolved_at":"2026-11-05T08:47:11Z","dns_checked_at":"2026-11-06T09:57:46.000Z","dns_since":"2026-11-05T09:57:42.000Z","findings":[{"id":"f3n6xr6fry6i35uoj5zm2","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T08:46:43.679Z","first_published":"2026-11-05T09:50:27.766Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=gtcfxdirect.com"},{"hostname":"gtcfxfx.com","first_observed":"2026-11-05T08:41:03.613Z","first_published":"2026-11-05T09:50:27.766Z","brands":[],"dns":"resolved","resolved":["104.21.45.73","172.67.211.18"],"resolved_at":"2026-11-05T08:52:23Z","dns_checked_at":"2026-11-06T09:57:46.000Z","dns_since":"2026-11-05T09:57:42.000Z","findings":[{"id":"f2q4i3cgznqslcvi5ef4t","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T08:41:03.613Z","first_published":"2026-11-05T09:50:27.766Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=gtcfxfx.com"},{"hostname":"gtcfxvip.com","first_observed":"2026-11-05T08:41:03.613Z","first_published":"2026-11-05T09:50:27.766Z","brands":[],"dns":"resolved","resolved":["80.94.92.69"],"resolved_at":"2026-11-05T08:52:22Z","dns_checked_at":"2026-11-06T09:57:46.000Z","dns_since":"2026-11-05T09:57:42.000Z","findings":[{"id":"fejkqyuc2hqliet6uonbz","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T08:41:03.613Z","first_published":"2026-11-05T09:50:27.766Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=gtcfxvip.com"},{"hostname":"gundemnokta.world","first_observed":"2026-11-05T08:41:03.613Z","first_published":"2026-11-05T09:50:27.766Z","brands":[],"dns":"resolved","resolved":["104.21.66.151","172.67.205.54"],"resolved_at":"2026-11-05T08:52:23Z","dns_checked_at":"2026-11-06T09:57:46.000Z","dns_since":"2026-11-05T09:57:42.000Z","findings":[{"id":"fiutdc4ssiekufteg2ccx","kind":"reported_domain","summary":"Listed by USOM","first_observed":"2026-11-05T08:41:03.613Z","first_published":"2026-11-05T09:50:27.766Z","source":"usom","source_name":"USOM"}],"url":"https://domainspoof.com/live?show=all&q=gundemnokta.world"},{"hostname":"haloeth.com","first_observed":"2026-11-05T09:41:19.995Z","first_published":"2026-11-05T09:50:27.766Z","brands":[],"dns":"resolved","resolved":["104.21.65.31","172.67.188.188"],"resolved_at":"2026-11-05T09:43:29Z","dns_checked_at":"2026-11-06T09:57:46.000Z","dns_since":"2026-11-05T09:57:42.000Z","findings":[{"id":"fhlqry5kdzlqtk4iidewv","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T09:41:19.995Z","first_published":"2026-11-05T09:50:27.766Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=haloeth.com"},{"hostname":"hgty5657.com","first_observed":"2026-11-05T09:31:04.544Z","first_published":"2026-11-05T09:50:27.766Z","brands":[],"dns":"resolved","resolved":["95.40.160.2"],"resolved_at":"2026-11-05T09:38:25Z","dns_checked_at":"2026-11-06T09:57:46.000Z","dns_since":"2026-11-05T09:57:42.000Z","findings":[{"id":"fwfxxj73btqdsh6xahe2q","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T09:31:04.544Z","first_published":"2026-11-05T09:50:27.766Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/hgty5657.com/"}],"url":"https://domainspoof.com/live?show=all&q=hgty5657.com"},{"hostname":"huasu01.shop","first_observed":"2026-11-05T08:57:00.499Z","first_published":"2026-11-05T09:50:27.766Z","brands":[],"dns":"resolved","resolved":["104.21.50.5","172.67.198.177"],"resolved_at":"2026-11-05T09:02:23Z","dns_checked_at":"2026-11-06T09:57:46.000Z","dns_since":"2026-11-05T09:57:42.000Z","findings":[{"id":"fxfgc35p2vm7hsgk5mkoy","kind":"reported_domain","summary":"Listed by NPA 165 (e-commerce)","first_observed":"2026-11-05T08:57:00.499Z","first_published":"2026-11-05T09:50:27.766Z","source":"npa","source_name":"NPA 165","claim":{"category":"e-commerce"}}],"url":"https://domainspoof.com/live?show=all&q=huasu01.shop"},{"hostname":"hyper-lend.net","first_observed":"2026-11-05T08:57:00.499Z","first_published":"2026-11-05T09:50:27.766Z","brands":[],"dns":"resolved","resolved":["104.21.71.226","172.67.150.100"],"resolved_at":"2026-11-05T09:02:23Z","dns_checked_at":"2026-11-06T09:57:46.000Z","dns_since":"2026-11-05T09:57:42.000Z","findings":[{"id":"fk5iefyk3grbsnn34ayui","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T08:57:00.499Z","first_published":"2026-11-05T09:50:27.766Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=hyper-lend.net"},{"hostname":"hyperkykai.live","first_observed":"2026-11-05T09:00:36.557Z","first_published":"2026-11-05T09:50:27.766Z","brands":[],"dns":"resolved","resolved":["104.21.93.121","172.67.209.213"],"resolved_at":"2026-11-05T09:00:51Z","dns_checked_at":"2026-11-06T09:57:46.000Z","dns_since":"2026-11-05T09:57:42.000Z","findings":[{"id":"fbw4wumni3sii4qy6lme3","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T09:00:36.557Z","first_published":"2026-11-05T09:50:27.766Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=hyperkykai.live"},{"hostname":"hzlnsdanismanlk.com","first_observed":"2026-11-05T08:41:03.613Z","first_published":"2026-11-05T09:50:27.766Z","brands":[],"dns":"resolved","resolved":["104.21.6.103","172.67.134.183"],"resolved_at":"2026-11-05T08:52:23Z","dns_checked_at":"2026-11-06T09:57:46.000Z","dns_since":"2026-11-05T09:57:42.000Z","findings":[{"id":"fdabxkrz3opjbgqbfa5dl","kind":"reported_domain","summary":"Listed by USOM","first_observed":"2026-11-05T08:41:03.613Z","first_published":"2026-11-05T09:50:27.766Z","source":"usom","source_name":"USOM"}],"url":"https://domainspoof.com/live?show=all&q=hzlnsdanismanlk.com"},{"hostname":"intro-binance.com.cn","first_observed":"2026-11-05T08:51:54.108Z","first_published":"2026-11-05T09:50:27.766Z","brands":[{"id":"binance","name":"Binance","url":"https://domainspoof.com/brands/binance"}],"dns":"resolved","resolved":["104.21.66.136","172.67.160.102","2606:4700:3033::ac43:a066","2606:4700:3036::6815:4288"],"resolved_at":"2026-11-06T02:26:31Z","dns_checked_at":"2026-11-06T09:57:46.000Z","dns_since":"2026-11-05T09:57:42.000Z","findings":[{"id":"filcvuuz2kejttkf5kxxk","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T08:51:54.108Z","first_published":"2026-11-05T09:50:27.766Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/brands/binance"},{"hostname":"ipaddress.gostratsicof.com","first_observed":"2026-11-05T08:51:54.108Z","first_published":"2026-11-05T09:50:27.766Z","brands":[],"dns":"resolved","resolved":["191.101.104.239","195.35.60.207"],"resolved_at":"2026-11-05T08:52:04Z","dns_checked_at":"2026-11-06T09:57:46.000Z","dns_since":"2026-11-05T09:57:42.000Z","findings":[{"id":"fz5gau6bzpaisx356esjq","kind":"reported_domain","summary":"Under gostratsicof.com, listed by CERT Polska","first_observed":"2026-11-05T08:51:54.108Z","first_published":"2026-11-05T09:50:27.766Z","source":"cert_polska","source_name":"CERT Polska","under":"gostratsicof.com"}],"url":"https://domainspoof.com/live?show=all&q=ipaddress.gostratsicof.com"},{"hostname":"ipv6.jtkmetalcraft.com.au","first_observed":"2026-11-05T09:26:25.293Z","first_published":"2026-11-05T09:50:27.766Z","brands":[],"dns":"resolved","resolved":["2404:8280:a222:bbbb:bba1:79:ffff:ffff"],"resolved_at":"2026-11-05T09:33:28Z","dns_checked_at":"2026-11-06T09:57:46.000Z","dns_since":"2026-11-05T09:57:42.000Z","findings":[{"id":"f5c4uwl7q35b37bqlbxfp","kind":"reported_domain","summary":"Under jtkmetalcraft.com.au, reported by PhishDestroy","first_observed":"2026-11-05T09:26:25.293Z","first_published":"2026-11-05T09:50:27.766Z","source":"phishdestroy","source_name":"PhishDestroy","under":"jtkmetalcraft.com.au","source_url":"https://phishdestroy.io/domain/jtkmetalcraft.com.au/"}],"url":"https://domainspoof.com/live?show=all&q=ipv6.jtkmetalcraft.com.au"},{"hostname":"jasnafondownia.live","first_observed":"2026-11-05T09:26:25.293Z","first_published":"2026-11-05T09:50:27.766Z","brands":[],"dns":"resolved","resolved":["104.21.24.109","172.67.218.87"],"resolved_at":"2026-11-05T09:33:28Z","dns_checked_at":"2026-11-06T09:57:46.000Z","dns_since":"2026-11-05T09:57:42.000Z","findings":[{"id":"fplkgpl67urpscguq5vql","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T09:26:25.293Z","first_published":"2026-11-05T09:50:27.766Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=jasnafondownia.live"},{"hostname":"jkrimlock.com","first_observed":"2026-11-05T09:19:06.197Z","first_published":"2026-11-05T09:50:27.766Z","brands":[],"dns":"resolved","resolved":["104.21.28.78","172.67.144.227","2606:4700:3033::ac43:90e3","2606:4700:3035::6815:1c4e"],"resolved_at":"2026-11-05T09:20:24Z","dns_checked_at":"2026-11-06T09:57:46.000Z","dns_since":"2026-11-05T09:57:42.000Z","findings":[{"id":"fiz4walgzuyhvpxc7jsya","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T09:19:06.197Z","first_published":"2026-11-05T09:50:27.766Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=jkrimlock.com"},{"hostname":"jrh94.cn","first_observed":"2026-11-05T09:16:04.617Z","first_published":"2026-11-05T09:50:27.766Z","brands":[],"dns":"no_address","resolved":[],"resolved_at":"2026-11-05T09:22:48Z","dns_checked_at":"2026-11-06T09:57:46.000Z","dns_since":"2026-11-05T09:57:42.000Z","findings":[{"id":"f6wickuj7pfutnks47ob5","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T09:16:04.617Z","first_published":"2026-11-05T09:50:27.766Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=jrh94.cn"},{"hostname":"jtkmetalcraft.com.au","first_observed":"2026-11-05T09:26:25.293Z","first_published":"2026-11-05T09:50:27.766Z","brands":[],"dns":"resolved","resolved":["163.47.74.193","2404:8280:a222:bbbb:bba1:79:ffff:ffff"],"resolved_at":"2026-11-05T09:33:29Z","dns_checked_at":"2026-11-06T09:57:46.000Z","dns_since":"2026-11-05T09:57:42.000Z","findings":[{"id":"fgnxswew4cvoellzq4kad","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T09:26:25.293Z","first_published":"2026-11-05T09:50:27.766Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/jtkmetalcraft.com.au/"}],"url":"https://domainspoof.com/live?show=all&q=jtkmetalcraft.com.au"},{"hostname":"juancitosports.com","first_observed":"2026-11-05T09:00:36.557Z","first_published":"2026-11-05T09:50:27.766Z","brands":[],"dns":"resolved","resolved":["104.21.55.161","172.67.149.49"],"resolved_at":"2026-11-05T09:00:51Z","dns_checked_at":"2026-11-06T09:57:46.000Z","dns_since":"2026-11-05T09:57:42.000Z","findings":[{"id":"f5hblv33gcepslx2gyiyq","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T09:00:36.557Z","first_published":"2026-11-05T09:50:27.766Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=juancitosports.com"},{"hostname":"junetmall.com","first_observed":"2026-11-05T08:51:54.108Z","first_published":"2026-11-05T09:50:27.766Z","brands":[],"dns":"resolved","resolved":["180.178.38.186"],"resolved_at":"2026-11-05T08:52:04Z","dns_checked_at":"2026-11-06T09:57:46.000Z","dns_since":"2026-11-05T09:57:42.000Z","findings":[{"id":"fatkjl5yr32xhxydqwxkp","kind":"reported_domain","summary":"Listed by NPA 165 (e-commerce)","first_observed":"2026-11-05T08:51:54.108Z","first_published":"2026-11-05T09:50:27.766Z","source":"npa","source_name":"NPA 165","claim":{"category":"e-commerce"}}],"url":"https://domainspoof.com/live?show=all&q=junetmall.com"},{"hostname":"k3-capital.net","first_observed":"2026-11-05T08:57:00.499Z","first_published":"2026-11-05T09:50:27.766Z","brands":[],"dns":"resolved","resolved":["104.21.77.40","172.67.204.70"],"resolved_at":"2026-11-05T09:02:24Z","dns_checked_at":"2026-11-06T09:57:46.000Z","dns_since":"2026-11-05T09:57:42.000Z","findings":[{"id":"fiv5upldomujrsx7gxhua","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T08:57:00.499Z","first_published":"2026-11-05T09:50:27.766Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/k3-capital.net/"}],"url":"https://domainspoof.com/live?show=all&q=k3-capital.net"},{"hostname":"kaxotira.com","first_observed":"2026-11-05T09:16:04.617Z","first_published":"2026-11-05T09:50:27.766Z","brands":[],"dns":"no_address","resolved":[],"resolved_at":"2026-11-05T09:22:48Z","dns_checked_at":"2026-11-06T09:57:46.000Z","dns_since":"2026-11-05T09:57:42.000Z","findings":[{"id":"fvtuygpsgffnihlwswijt","kind":"reported_domain","summary":"Listed by NPA 165 (e-commerce)","first_observed":"2026-11-05T09:16:04.617Z","first_published":"2026-11-05T09:50:27.766Z","source":"npa","source_name":"NPA 165","claim":{"category":"e-commerce"}}],"url":"https://domainspoof.com/live?show=all&q=kaxotira.com"},{"hostname":"kfcxuu.com","first_observed":"2026-11-05T09:05:42.435Z","first_published":"2026-11-05T09:50:27.766Z","brands":[],"dns":"no_address","resolved":[],"resolved_at":"2026-11-05T09:14:11Z","dns_checked_at":"2026-11-06T09:57:46.000Z","dns_since":"2026-11-05T09:57:42.000Z","findings":[{"id":"fpofmgg4m2kdx4catuct3","kind":"reported_domain","summary":"Listed by NPA 165 (finance and insurance)","first_observed":"2026-11-05T09:05:42.435Z","first_published":"2026-11-05T09:50:27.766Z","source":"npa","source_name":"NPA 165","claim":{"category":"finance and insurance"}}],"url":"https://domainspoof.com/live?show=all&q=kfcxuu.com"},{"hostname":"kws1.telegram-premiuma.com","first_observed":"2026-11-05T09:26:25.293Z","first_published":"2026-11-05T09:50:27.766Z","brands":[],"dns":"resolved","resolved":["78.153.139.88"],"resolved_at":"2026-11-05T09:33:29Z","dns_checked_at":"2026-11-06T09:57:46.000Z","dns_since":"2026-11-05T09:57:42.000Z","findings":[{"id":"f5rcfxrgrlgfss3vuengw","kind":"reported_domain","summary":"Under telegram-premiuma.com, reported by PhishDestroy","first_observed":"2026-11-05T09:26:25.293Z","first_published":"2026-11-05T09:50:27.766Z","source":"phishdestroy","source_name":"PhishDestroy","under":"telegram-premiuma.com","source_url":"https://phishdestroy.io/domain/telegram-premiuma.com/"}],"url":"https://domainspoof.com/live?show=all&q=kws1.telegram-premiuma.com"},{"hostname":"kws3.telegram-premiuma.com","first_observed":"2026-11-05T08:51:54.108Z","first_published":"2026-11-05T09:50:27.766Z","brands":[],"dns":"resolved","resolved":["78.153.139.88"],"resolved_at":"2026-11-05T08:52:05Z","dns_checked_at":"2026-11-06T09:57:46.000Z","dns_since":"2026-11-05T09:57:42.000Z","findings":[{"id":"fg2wbsrstypwlkjpjloni","kind":"reported_domain","summary":"Under telegram-premiuma.com, reported by PhishDestroy","first_observed":"2026-11-05T08:51:54.108Z","first_published":"2026-11-05T09:50:27.766Z","source":"phishdestroy","source_name":"PhishDestroy","under":"telegram-premiuma.com","source_url":"https://phishdestroy.io/domain/telegram-premiuma.com/"}],"url":"https://domainspoof.com/live?show=all&q=kws3.telegram-premiuma.com"},{"hostname":"landingpage.gostratsicof.com","first_observed":"2026-11-05T08:51:54.108Z","first_published":"2026-11-05T09:50:27.766Z","brands":[],"dns":"resolved","resolved":["191.101.104.114","195.35.60.177"],"resolved_at":"2026-11-05T08:52:05Z","dns_checked_at":"2026-11-06T09:57:46.000Z","dns_since":"2026-11-05T09:57:42.000Z","findings":[{"id":"fj3jh3eos3zopg4fhhhfp","kind":"reported_domain","summary":"Under gostratsicof.com, listed by CERT Polska","first_observed":"2026-11-05T08:51:54.108Z","first_published":"2026-11-05T09:50:27.766Z","source":"cert_polska","source_name":"CERT Polska","under":"gostratsicof.com"}],"url":"https://domainspoof.com/live?show=all&q=landingpage.gostratsicof.com"},{"hostname":"lawsonlee.com","first_observed":"2026-11-05T09:16:04.617Z","first_published":"2026-11-05T09:50:27.766Z","brands":[],"dns":"resolved","resolved":["173.231.228.129"],"resolved_at":"2026-11-05T09:22:49Z","dns_checked_at":"2026-11-06T09:57:46.000Z","dns_since":"2026-11-05T09:57:42.000Z","findings":[{"id":"fft224bzpuaxj6afm2hbu","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T09:16:04.617Z","first_published":"2026-11-05T09:50:27.766Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/lawsonlee.com/"}],"url":"https://domainspoof.com/live?show=all&q=lawsonlee.com"},{"hostname":"layerzeropdf.site","first_observed":"2026-11-05T09:31:04.544Z","first_published":"2026-11-05T09:50:27.766Z","brands":[],"dns":"resolved","resolved":["104.21.74.66","172.67.199.238"],"resolved_at":"2026-11-05T09:38:27Z","dns_checked_at":"2026-11-06T09:57:46.000Z","dns_since":"2026-11-05T09:57:42.000Z","findings":[{"id":"fsydpvwyvtncfbtxjbavl","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T09:31:04.544Z","first_published":"2026-11-05T09:50:27.766Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=layerzeropdf.site"},{"hostname":"levomex.com","first_observed":"2026-11-05T09:26:25.293Z","first_published":"2026-11-05T09:50:27.766Z","brands":[],"dns":"resolved","resolved":["104.21.24.8","172.67.215.69"],"resolved_at":"2026-11-05T09:33:30Z","dns_checked_at":"2026-11-06T09:57:46.000Z","dns_since":"2026-11-05T09:57:42.000Z","findings":[{"id":"faezpp2iuzot6tv53vb5f","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T09:26:25.293Z","first_published":"2026-11-05T09:50:27.766Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/levomex.com/"}],"url":"https://domainspoof.com/live?show=all&q=levomex.com"},{"hostname":"lis-skims.com","first_observed":"2026-11-05T09:21:13.732Z","first_published":"2026-11-05T09:50:27.766Z","brands":[],"dns":"resolved","resolved":["104.21.42.112","172.67.161.165"],"resolved_at":"2026-11-05T09:26:56Z","dns_checked_at":"2026-11-06T09:57:46.000Z","dns_since":"2026-11-05T09:57:42.000Z","findings":[{"id":"fqmxuhqz7d4ytaedtasic","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T09:21:13.732Z","first_published":"2026-11-05T09:50:27.766Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/lis-skims.com/"}],"url":"https://domainspoof.com/live?show=all&q=lis-skims.com"},{"hostname":"lmplatformsoftware.com","first_observed":"2026-11-05T09:10:52.041Z","first_published":"2026-11-05T09:50:27.766Z","brands":[],"dns":"resolved","resolved":["104.21.12.204","172.67.153.65"],"resolved_at":"2026-11-05T09:11:21Z","dns_checked_at":"2026-11-06T09:57:46.000Z","dns_since":"2026-11-05T09:57:42.000Z","findings":[{"id":"fzpkyku5lnk4hzbe3dd4l","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T09:10:52.041Z","first_published":"2026-11-05T09:50:27.766Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=lmplatformsoftware.com"},{"hostname":"mail.jtkmetalcraft.com.au","first_observed":"2026-11-05T09:26:25.293Z","first_published":"2026-11-05T09:50:27.766Z","brands":[],"dns":"resolved","resolved":["163.47.74.193","2404:8280:a222:bbbb:bba1:79:ffff:ffff"],"resolved_at":"2026-11-05T09:33:31Z","dns_checked_at":"2026-11-06T09:57:46.000Z","dns_since":"2026-11-05T09:57:42.000Z","findings":[{"id":"fbtpiih6xjd6pfxuxu2uq","kind":"reported_domain","summary":"Under jtkmetalcraft.com.au, reported by PhishDestroy","first_observed":"2026-11-05T09:26:25.293Z","first_published":"2026-11-05T09:50:27.766Z","source":"phishdestroy","source_name":"PhishDestroy","under":"jtkmetalcraft.com.au","source_url":"https://phishdestroy.io/domain/jtkmetalcraft.com.au/"}],"url":"https://domainspoof.com/live?show=all&q=mail.jtkmetalcraft.com.au"},{"hostname":"mail.lawsonlee.com","first_observed":"2026-11-05T09:16:04.617Z","first_published":"2026-11-05T09:50:27.766Z","brands":[],"dns":"resolved","resolved":["173.231.228.129"],"resolved_at":"2026-11-05T09:22:50Z","dns_checked_at":"2026-11-06T09:57:46.000Z","dns_since":"2026-11-05T09:57:42.000Z","findings":[{"id":"frximw7hjzp2mtev2fcc4","kind":"reported_domain","summary":"Under lawsonlee.com, reported by PhishDestroy","first_observed":"2026-11-05T09:16:04.617Z","first_published":"2026-11-05T09:50:27.766Z","source":"phishdestroy","source_name":"PhishDestroy","under":"lawsonlee.com","source_url":"https://phishdestroy.io/domain/lawsonlee.com/"}],"url":"https://domainspoof.com/live?show=all&q=mail.lawsonlee.com"},{"hostname":"mail.orientalmining.com","first_observed":"2026-11-05T08:41:03.613Z","first_published":"2026-11-05T09:50:27.766Z","brands":[],"dns":"resolved","resolved":["65.181.124.4"],"resolved_at":"2026-11-05T08:52:33Z","dns_checked_at":"2026-11-06T09:57:46.000Z","dns_since":"2026-11-05T09:57:42.000Z","findings":[{"id":"fgs3kbvvyew6btgzlbpfn","kind":"reported_domain","summary":"Under orientalmining.com, listed by CERT Polska","first_observed":"2026-11-05T08:41:03.613Z","first_published":"2026-11-05T09:50:27.766Z","source":"cert_polska","source_name":"CERT Polska","under":"orientalmining.com"}],"url":"https://domainspoof.com/live?show=all&q=mail.orientalmining.com"},{"hostname":"maxdental.top","first_observed":"2026-11-05T09:19:06.197Z","first_published":"2026-11-05T09:50:27.766Z","brands":[],"dns":"resolved","resolved":["104.21.18.122","172.67.181.209","2606:4700:3030::6815:127a","2606:4700:3032::ac43:b5d1"],"resolved_at":"2026-11-05T09:20:24Z","dns_checked_at":"2026-11-06T09:57:46.000Z","dns_since":"2026-11-05T09:57:42.000Z","findings":[{"id":"frvsoc4cy3qxi5xr5cdnq","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T09:19:06.197Z","first_published":"2026-11-05T09:50:27.766Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=maxdental.top"},{"hostname":"mellow-protocol.com","first_observed":"2026-11-05T08:57:00.499Z","first_published":"2026-11-05T09:50:27.766Z","brands":[],"dns":"resolved","resolved":["104.21.34.125","172.67.205.14"],"resolved_at":"2026-11-05T09:02:25Z","dns_checked_at":"2026-11-06T09:57:46.000Z","dns_since":"2026-11-05T09:57:42.000Z","findings":[{"id":"flpz2hidc722d7turf3ch","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T08:57:00.499Z","first_published":"2026-11-05T09:50:27.766Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=mellow-protocol.com"},{"hostname":"messagerie.digiedlab.com","first_observed":"2026-11-05T09:31:04.544Z","first_published":"2026-11-05T09:50:27.766Z","brands":[],"dns":"resolved","resolved":["109.238.86.5"],"resolved_at":"2026-11-05T09:38:28Z","dns_checked_at":"2026-11-06T09:57:46.000Z","dns_since":"2026-11-05T09:57:42.000Z","findings":[{"id":"fe3xjptljscornv53stso","kind":"reported_domain","summary":"Under digiedlab.com, listed by CERT Polska","first_observed":"2026-11-05T09:31:04.544Z","first_published":"2026-11-05T09:50:27.766Z","source":"cert_polska","source_name":"CERT Polska","under":"digiedlab.com"}],"url":"https://domainspoof.com/live?show=all&q=messagerie.digiedlab.com"},{"hostname":"metabase.aml.legal","first_observed":"2026-11-05T09:36:12.068Z","first_published":"2026-11-05T09:50:27.766Z","brands":[],"dns":"resolved","resolved":["186.2.175.179"],"resolved_at":"2026-11-05T09:40:18Z","dns_checked_at":"2026-11-06T09:57:46.000Z","dns_since":"2026-11-05T09:57:42.000Z","findings":[{"id":"fna7smgaemygbidkanfu4","kind":"reported_domain","summary":"Under aml.legal, reported by PhishDestroy","first_observed":"2026-11-05T09:36:12.068Z","first_published":"2026-11-05T09:50:27.766Z","source":"phishdestroy","source_name":"PhishDestroy","under":"aml.legal","source_url":"https://phishdestroy.io/domain/aml.legal/"}],"url":"https://domainspoof.com/live?show=all&q=metabase.aml.legal"},{"hostname":"midnignt.com","first_observed":"2026-11-05T08:46:43.679Z","first_published":"2026-11-05T09:50:27.766Z","brands":[],"dns":"resolved","resolved":["104.21.36.233","172.67.200.205"],"resolved_at":"2026-11-05T08:47:12Z","dns_checked_at":"2026-11-06T09:57:46.000Z","dns_since":"2026-11-05T09:57:42.000Z","findings":[{"id":"fganjc3o5s3c7o4xnmiwk","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T08:46:43.679Z","first_published":"2026-11-05T09:50:27.766Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=midnignt.com"},{"hostname":"mkaffiliateinc.com","first_observed":"2026-11-05T09:19:06.197Z","first_published":"2026-11-05T09:50:27.766Z","brands":[],"dns":"resolved","resolved":["196.251.122.156"],"resolved_at":"2026-11-05T09:20:24Z","dns_checked_at":"2026-11-06T09:57:46.000Z","dns_since":"2026-11-05T09:57:42.000Z","findings":[{"id":"fykqyrhicialgn747ilp2","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T09:19:06.197Z","first_published":"2026-11-05T09:50:27.766Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=mkaffiliateinc.com"},{"hostname":"mklkp.online","first_observed":"2026-11-05T09:00:36.557Z","first_published":"2026-11-05T09:50:27.766Z","brands":[],"dns":"resolved","resolved":["104.21.43.119","172.67.179.14"],"resolved_at":"2026-11-05T09:00:53Z","dns_checked_at":"2026-11-06T09:57:46.000Z","dns_since":"2026-11-05T09:57:42.000Z","findings":[{"id":"flpt5b7w2pdpkejb4ukbc","kind":"reported_domain","summary":"Listed by NPA 165 (finance and insurance)","first_observed":"2026-11-05T09:00:36.557Z","first_published":"2026-11-05T09:50:27.766Z","source":"npa","source_name":"NPA 165","claim":{"category":"finance and insurance"}}],"url":"https://domainspoof.com/live?show=all&q=mklkp.online"},{"hostname":"myrentixaiapp.com","first_observed":"2026-11-05T09:26:25.293Z","first_published":"2026-11-05T09:50:27.766Z","brands":[],"dns":"resolved","resolved":["104.21.21.101","172.67.197.239"],"resolved_at":"2026-11-05T09:33:32Z","dns_checked_at":"2026-11-06T09:57:46.000Z","dns_since":"2026-11-05T09:57:42.000Z","findings":[{"id":"fmainjrzjzbxonkyqch7v","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T09:26:25.293Z","first_published":"2026-11-05T09:50:27.766Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=myrentixaiapp.com"},{"hostname":"mytrixhalogpt-review.org","first_observed":"2026-11-05T09:21:13.732Z","first_published":"2026-11-05T09:50:27.766Z","brands":[],"dns":"resolved","resolved":["104.21.41.227","172.67.195.150"],"resolved_at":"2026-11-05T09:26:59Z","dns_checked_at":"2026-11-06T09:57:46.000Z","dns_since":"2026-11-05T09:57:42.000Z","findings":[{"id":"fjr345sksmqmd2jqspcqx","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T09:21:13.732Z","first_published":"2026-11-05T09:50:27.766Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=mytrixhalogpt-review.org"},{"hostname":"nanovitalabs-allocations.xyz","first_observed":"2026-11-05T09:21:13.732Z","first_published":"2026-11-05T09:50:27.766Z","brands":[],"dns":"resolved","resolved":["104.21.67.242","172.67.183.43"],"resolved_at":"2026-11-05T09:26:59Z","dns_checked_at":"2026-11-06T09:57:46.000Z","dns_since":"2026-11-05T09:57:42.000Z","findings":[{"id":"fovtseyzikasmoyzzihhz","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T09:21:13.732Z","first_published":"2026-11-05T09:50:27.766Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=nanovitalabs-allocations.xyz"},{"hostname":"nanovitalabs-rewards.xyz","first_observed":"2026-11-05T08:57:00.499Z","first_published":"2026-11-05T09:50:27.766Z","brands":[],"dns":"resolved","resolved":["104.21.63.30","172.67.142.171"],"resolved_at":"2026-11-05T09:02:24Z","dns_checked_at":"2026-11-06T09:57:46.000Z","dns_since":"2026-11-05T09:57:42.000Z","findings":[{"id":"fulkefef7oplmo5egirvg","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T08:57:00.499Z","first_published":"2026-11-05T09:50:27.766Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=nanovitalabs-rewards.xyz"},{"hostname":"nesthavenstudio.site","first_observed":"2026-11-05T08:46:43.679Z","first_published":"2026-11-05T09:50:27.766Z","brands":[],"dns":"resolved","resolved":["104.21.74.48","172.67.155.61"],"resolved_at":"2026-11-05T08:47:12Z","dns_checked_at":"2026-11-06T09:57:46.000Z","dns_since":"2026-11-05T09:57:42.000Z","findings":[{"id":"f47cosg6ig6dpbjpzjpxv","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T08:46:43.679Z","first_published":"2026-11-05T09:50:27.766Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=nesthavenstudio.site"},{"hostname":"neurotrade-ai.live","first_observed":"2026-11-05T08:51:54.108Z","first_published":"2026-11-05T09:50:27.766Z","brands":[],"dns":"resolved","resolved":["104.21.60.220","172.67.201.240"],"resolved_at":"2026-11-05T08:52:05Z","dns_checked_at":"2026-11-06T09:57:46.000Z","dns_since":"2026-11-05T09:57:42.000Z","findings":[{"id":"fz4wqopbl4ipvj5m74ckm","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T08:51:54.108Z","first_published":"2026-11-05T09:50:27.766Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=neurotrade-ai.live"},{"hostname":"nintendo-fr.com","first_observed":"2026-11-05T09:14:14.225Z","first_published":"2026-11-05T09:50:27.766Z","brands":[{"id":"nintendo","name":"Nintendo","url":"https://domainspoof.com/brands/nintendo"}],"dns":"resolved","resolved":["2.57.91.91"],"resolved_at":"2026-11-06T09:57:46Z","dns_checked_at":"2026-11-06T09:57:46.000Z","dns_since":"2026-11-05T09:57:42.000Z","findings":[{"id":"f4olf5jphzba5lg52t4bl","kind":"phishing_infrastructure","summary":"Resolved to 2.57.91.91, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T09:14:14.225Z","first_published":"2026-11-05T09:50:27.766Z","address":"2.57.91.91","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/nintendo"},{"hostname":"noblecoreviax.live","first_observed":"2026-11-05T09:00:36.557Z","first_published":"2026-11-05T09:50:27.766Z","brands":[],"dns":"resolved","resolved":["104.21.21.251","172.67.201.165"],"resolved_at":"2026-11-05T09:00:53Z","dns_checked_at":"2026-11-06T09:57:46.000Z","dns_since":"2026-11-05T09:57:42.000Z","findings":[{"id":"ffcqfu4tx5vdd2hpacrau","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T09:00:36.557Z","first_published":"2026-11-05T09:50:27.766Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=noblecoreviax.live"},{"hostname":"norvelpoint.com","first_observed":"2026-11-05T08:57:00.499Z","first_published":"2026-11-05T09:50:27.766Z","brands":[],"dns":"resolved","resolved":["104.18.2.225"],"resolved_at":"2026-11-05T09:02:24Z","dns_checked_at":"2026-11-06T09:57:46.000Z","dns_since":"2026-11-05T09:57:42.000Z","findings":[{"id":"file7jxczuzvdrqsnsmz3","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T08:57:00.499Z","first_published":"2026-11-05T09:50:27.766Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=norvelpoint.com"},{"hostname":"notexistscpcalendars.kingdom-dmc.com","first_observed":"2026-11-05T09:26:25.293Z","first_published":"2026-11-05T09:50:27.766Z","brands":[],"dns":"resolved","resolved":["185.215.4.42"],"resolved_at":"2026-11-05T09:33:33Z","dns_checked_at":"2026-11-06T09:57:46.000Z","dns_since":"2026-11-05T09:57:42.000Z","findings":[{"id":"f77fy3oaugiwlsja4xked","kind":"reported_domain","summary":"Under kingdom-dmc.com, listed by MetaMask","first_observed":"2026-11-05T09:26:25.293Z","first_published":"2026-11-05T09:50:27.766Z","source":"metamask","source_name":"MetaMask","under":"kingdom-dmc.com"}],"url":"https://domainspoof.com/live?show=all&q=notexistscpcalendars.kingdom-dmc.com"},{"hostname":"opm773.sendreward.com","first_observed":"2026-11-05T08:51:54.108Z","first_published":"2026-11-05T09:50:27.766Z","brands":[],"dns":"resolved","resolved":["135.148.166.115"],"resolved_at":"2026-11-05T08:52:05Z","dns_checked_at":"2026-11-06T09:57:46.000Z","dns_since":"2026-11-05T09:57:42.000Z","findings":[{"id":"fduqkpif54k47bbaulffs","kind":"reported_domain","summary":"Under sendreward.com, listed by USOM","first_observed":"2026-11-05T08:51:54.108Z","first_published":"2026-11-05T09:50:27.766Z","source":"usom","source_name":"USOM","under":"sendreward.com"}],"url":"https://domainspoof.com/live?show=all&q=opm773.sendreward.com"},{"hostname":"orientalmining.com","first_observed":"2026-11-05T08:41:03.613Z","first_published":"2026-11-05T09:50:27.766Z","brands":[],"dns":"resolved","resolved":["65.181.124.4"],"resolved_at":"2026-11-05T08:52:38Z","dns_checked_at":"2026-11-06T09:57:46.000Z","dns_since":"2026-11-05T09:57:42.000Z","findings":[{"id":"fdorqnuj3z6vs6wxheaqy","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T08:41:03.613Z","first_published":"2026-11-05T09:50:27.766Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=orientalmining.com"},{"hostname":"pager.qfxbackup.com","first_observed":"2026-11-05T08:46:43.679Z","first_published":"2026-11-05T09:50:27.766Z","brands":[],"dns":"resolved","resolved":["102.212.246.67"],"resolved_at":"2026-11-05T08:47:12Z","dns_checked_at":"2026-11-06T09:57:46.000Z","dns_since":"2026-11-05T09:57:42.000Z","findings":[{"id":"fva4gbx3ugksyq3iaiqzx","kind":"reported_domain","summary":"Under qfxbackup.com, reported by PhishDestroy","first_observed":"2026-11-05T08:46:43.679Z","first_published":"2026-11-05T09:50:27.766Z","source":"phishdestroy","source_name":"PhishDestroy","under":"qfxbackup.com","source_url":"https://phishdestroy.io/domain/qfxbackup.com/"}],"url":"https://domainspoof.com/live?show=all&q=pager.qfxbackup.com"},{"hostname":"pastomicre.store","first_observed":"2026-11-05T09:19:06.197Z","first_published":"2026-11-05T09:50:27.766Z","brands":[],"dns":"resolved","resolved":["104.21.26.228","172.67.139.127","2606:4700:3031::6815:1ae4","2606:4700:3034::ac43:8b7f"],"resolved_at":"2026-11-05T09:20:24Z","dns_checked_at":"2026-11-06T09:57:46.000Z","dns_since":"2026-11-05T09:57:42.000Z","findings":[{"id":"fdhftf7pfdcnf7dswwmyx","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T09:19:06.197Z","first_published":"2026-11-05T09:50:27.766Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=pastomicre.store"},{"hostname":"pay-bitrefill.com-cp01-esim-gift.com","first_observed":"2026-11-05T09:00:53.879Z","first_published":"2026-11-05T09:50:27.766Z","brands":[{"id":"bitrefill","name":"Bitrefill","url":"https://domainspoof.com/brands/bitrefill"}],"dns":"resolved","resolved":["62.60.226.39"],"resolved_at":"2026-11-06T06:35:27Z","dns_checked_at":"2026-11-06T06:35:27.000Z","dns_since":"2026-11-05T09:57:42.000Z","findings":[{"id":"fpgc4mny3rze6dydrtbr7","kind":"spamhaus_drop","summary":"Resolved to 62.60.226.39 on Spamhaus DROP","first_observed":"2026-11-05T09:00:53.879Z","first_published":"2026-11-05T09:50:27.766Z","address":"62.60.226.39","list":"spamhaus_drop","list_name":"Spamhaus DROP"}],"url":"https://domainspoof.com/brands/bitrefill"},{"hostname":"persedineu.store","first_observed":"2026-11-05T09:19:06.197Z","first_published":"2026-11-05T09:50:27.766Z","brands":[],"dns":"resolved","resolved":["104.21.21.227","172.67.200.239","2606:4700:3034::6815:15e3","2606:4700:3036::ac43:c8ef"],"resolved_at":"2026-11-05T09:20:24Z","dns_checked_at":"2026-11-06T09:57:46.000Z","dns_since":"2026-11-05T09:57:42.000Z","findings":[{"id":"f3ngqfppf5kwxerjb66ie","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T09:19:06.197Z","first_published":"2026-11-05T09:50:27.766Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=persedineu.store"},{"hostname":"play.topstrike.io","first_observed":"2026-11-05T09:31:04.544Z","first_published":"2026-11-05T09:50:27.766Z","brands":[],"dns":"resolved","resolved":["216.150.1.65","216.150.16.65"],"resolved_at":"2026-11-05T09:38:29Z","dns_checked_at":"2026-11-06T09:57:46.000Z","dns_since":"2026-11-05T09:57:42.000Z","findings":[{"id":"f4zhl7txovrgozqelpqc2","kind":"reported_domain","summary":"Under topstrike.io, reported by PhishDestroy","first_observed":"2026-11-05T09:31:04.544Z","first_published":"2026-11-05T09:50:27.766Z","source":"phishdestroy","source_name":"PhishDestroy","under":"topstrike.io","source_url":"https://phishdestroy.io/domain/topstrike.io/"}],"url":"https://domainspoof.com/live?show=all&q=play.topstrike.io"},{"hostname":"pochta.digiedlab.com","first_observed":"2026-11-05T09:31:04.544Z","first_published":"2026-11-05T09:50:27.766Z","brands":[],"dns":"resolved","resolved":["109.238.86.5"],"resolved_at":"2026-11-05T09:38:30Z","dns_checked_at":"2026-11-06T09:57:46.000Z","dns_since":"2026-11-05T09:57:42.000Z","findings":[{"id":"fgcbzqhqsjdt6vjqazx2i","kind":"reported_domain","summary":"Under digiedlab.com, listed by CERT Polska","first_observed":"2026-11-05T09:31:04.544Z","first_published":"2026-11-05T09:50:27.766Z","source":"cert_polska","source_name":"CERT Polska","under":"digiedlab.com"}],"url":"https://domainspoof.com/live?show=all&q=pochta.digiedlab.com"},{"hostname":"poczta.digiedlab.com","first_observed":"2026-11-05T09:31:04.544Z","first_published":"2026-11-05T09:50:27.766Z","brands":[],"dns":"resolved","resolved":["109.238.86.5"],"resolved_at":"2026-11-05T09:38:30Z","dns_checked_at":"2026-11-06T09:57:46.000Z","dns_since":"2026-11-05T09:57:42.000Z","findings":[{"id":"fo6tzzoxrxc7fczuipb5c","kind":"reported_domain","summary":"Under digiedlab.com, listed by CERT Polska","first_observed":"2026-11-05T09:31:04.544Z","first_published":"2026-11-05T09:50:27.766Z","source":"cert_polska","source_name":"CERT Polska","under":"digiedlab.com"}],"url":"https://domainspoof.com/live?show=all&q=poczta.digiedlab.com"},{"hostname":"port.gostratsicof.com","first_observed":"2026-11-05T08:51:54.108Z","first_published":"2026-11-05T09:50:27.766Z","brands":[],"dns":"resolved","resolved":["191.96.144.124","195.35.60.132"],"resolved_at":"2026-11-05T08:52:06Z","dns_checked_at":"2026-11-06T09:57:46.000Z","dns_since":"2026-11-05T09:57:42.000Z","findings":[{"id":"fjzsep4gv64gd3j67qab6","kind":"reported_domain","summary":"Under gostratsicof.com, listed by CERT Polska","first_observed":"2026-11-05T08:51:54.108Z","first_published":"2026-11-05T09:50:27.766Z","source":"cert_polska","source_name":"CERT Polska","under":"gostratsicof.com"}],"url":"https://domainspoof.com/live?show=all&q=port.gostratsicof.com"},{"hostname":"portal-ether.xyz","first_observed":"2026-11-05T08:51:54.108Z","first_published":"2026-11-05T09:50:27.766Z","brands":[],"dns":"resolved","resolved":["104.21.84.127","172.67.193.6"],"resolved_at":"2026-11-05T08:52:06Z","dns_checked_at":"2026-11-06T09:57:46.000Z","dns_since":"2026-11-05T09:57:42.000Z","findings":[{"id":"fislro6ekzvkzmzwzdcoi","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T08:51:54.108Z","first_published":"2026-11-05T09:50:27.766Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/portal-ether.xyz/"}],"url":"https://domainspoof.com/live?show=all&q=portal-ether.xyz"},{"hostname":"portbc.gostratsicof.com","first_observed":"2026-11-05T08:51:54.108Z","first_published":"2026-11-05T09:50:27.766Z","brands":[],"dns":"resolved","resolved":["191.101.104.146","195.35.60.196"],"resolved_at":"2026-11-05T08:52:06Z","dns_checked_at":"2026-11-06T09:57:46.000Z","dns_since":"2026-11-05T09:57:42.000Z","findings":[{"id":"fanckjguiqluso6wi42pt","kind":"reported_domain","summary":"Under gostratsicof.com, listed by CERT Polska","first_observed":"2026-11-05T08:51:54.108Z","first_published":"2026-11-05T09:50:27.766Z","source":"cert_polska","source_name":"CERT Polska","under":"gostratsicof.com"}],"url":"https://domainspoof.com/live?show=all&q=portbc.gostratsicof.com"},{"hostname":"portdvk.gostratsicof.com","first_observed":"2026-11-05T08:51:54.108Z","first_published":"2026-11-05T09:50:27.766Z","brands":[],"dns":"resolved","resolved":["191.96.144.54","195.35.60.137"],"resolved_at":"2026-11-05T08:52:06Z","dns_checked_at":"2026-11-06T09:57:46.000Z","dns_since":"2026-11-05T09:57:42.000Z","findings":[{"id":"f2aplvrtlishvm57uhhrq","kind":"reported_domain","summary":"Under gostratsicof.com, listed by CERT Polska","first_observed":"2026-11-05T08:51:54.108Z","first_published":"2026-11-05T09:50:27.766Z","source":"cert_polska","source_name":"CERT Polska","under":"gostratsicof.com"}],"url":"https://domainspoof.com/live?show=all&q=portdvk.gostratsicof.com"},{"hostname":"post.digiedlab.com","first_observed":"2026-11-05T09:31:04.544Z","first_published":"2026-11-05T09:50:27.766Z","brands":[],"dns":"resolved","resolved":["109.238.86.5"],"resolved_at":"2026-11-05T09:38:30Z","dns_checked_at":"2026-11-06T09:57:46.000Z","dns_since":"2026-11-05T09:57:42.000Z","findings":[{"id":"fdof4xnwelgljmsvzpbgy","kind":"reported_domain","summary":"Under digiedlab.com, listed by CERT Polska","first_observed":"2026-11-05T09:31:04.544Z","first_published":"2026-11-05T09:50:27.766Z","source":"cert_polska","source_name":"CERT Polska","under":"digiedlab.com"}],"url":"https://domainspoof.com/live?show=all&q=post.digiedlab.com"},{"hostname":"posta.digiedlab.com","first_observed":"2026-11-05T09:31:04.544Z","first_published":"2026-11-05T09:50:27.766Z","brands":[],"dns":"resolved","resolved":["109.238.86.5"],"resolved_at":"2026-11-05T09:38:30Z","dns_checked_at":"2026-11-06T09:57:46.000Z","dns_since":"2026-11-05T09:57:42.000Z","findings":[{"id":"fsbkdqz36vr3rtqvglrdt","kind":"reported_domain","summary":"Under digiedlab.com, listed by CERT Polska","first_observed":"2026-11-05T09:31:04.544Z","first_published":"2026-11-05T09:50:27.766Z","source":"cert_polska","source_name":"CERT Polska","under":"digiedlab.com"}],"url":"https://domainspoof.com/live?show=all&q=posta.digiedlab.com"},{"hostname":"prefivelat.store","first_observed":"2026-11-05T09:19:06.197Z","first_published":"2026-11-05T09:50:27.766Z","brands":[],"dns":"resolved","resolved":["104.21.28.185","172.67.147.23","2606:4700:3034::6815:1cb9","2606:4700:3036::ac43:9317"],"resolved_at":"2026-11-05T09:20:24Z","dns_checked_at":"2026-11-06T09:57:46.000Z","dns_since":"2026-11-05T09:57:42.000Z","findings":[{"id":"fhfsiizvijobt5hhf5qud","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T09:19:06.197Z","first_published":"2026-11-05T09:50:27.766Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=prefivelat.store"},{"hostname":"preview.staging.supertrader.me","first_observed":"2026-11-05T08:41:03.613Z","first_published":"2026-11-05T09:50:27.766Z","brands":[],"dns":"resolved","resolved":["108.138.233.27","108.138.233.64","108.138.233.82","108.138.233.127"],"resolved_at":"2026-11-05T08:52:41Z","dns_checked_at":"2026-11-06T09:57:46.000Z","dns_since":"2026-11-05T09:57:42.000Z","findings":[{"id":"f7vv2x6r6rwmhzzwix6cm","kind":"reported_domain","summary":"Under supertrader.me, listed by CERT Polska","first_observed":"2026-11-05T08:41:03.613Z","first_published":"2026-11-05T09:50:27.766Z","source":"cert_polska","source_name":"CERT Polska","under":"supertrader.me"}],"url":"https://domainspoof.com/live?show=all&q=preview.staging.supertrader.me"},{"hostname":"primestradefx.com","first_observed":"2026-11-05T09:05:42.435Z","first_published":"2026-11-05T09:50:27.766Z","brands":[],"dns":"resolved","resolved":["198.251.83.106"],"resolved_at":"2026-11-05T09:14:17Z","dns_checked_at":"2026-11-06T09:57:46.000Z","dns_since":"2026-11-05T09:57:42.000Z","findings":[{"id":"fa5s7nindqqs5rtx5ie4j","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T09:05:42.435Z","first_published":"2026-11-05T09:50:27.766Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=primestradefx.com"},{"hostname":"proposal-hyperlink.xyz","first_observed":"2026-11-05T09:26:25.293Z","first_published":"2026-11-05T09:50:27.766Z","brands":[],"dns":"resolved","resolved":["104.21.53.236","172.67.219.237"],"resolved_at":"2026-11-05T09:33:35Z","dns_checked_at":"2026-11-06T09:57:46.000Z","dns_since":"2026-11-05T09:57:42.000Z","findings":[{"id":"fnwlfipcc2y6swui7x5rm","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T09:26:25.293Z","first_published":"2026-11-05T09:50:27.766Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=proposal-hyperlink.xyz"},{"hostname":"proposal-saturncredit.live","first_observed":"2026-11-05T09:36:12.068Z","first_published":"2026-11-05T09:50:27.766Z","brands":[],"dns":"resolved","resolved":["104.21.18.160","172.67.182.185"],"resolved_at":"2026-11-05T09:40:21Z","dns_checked_at":"2026-11-06T09:57:46.000Z","dns_since":"2026-11-05T09:57:42.000Z","findings":[{"id":"f4lb4uvhznly6k3uf4dgq","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T09:36:12.068Z","first_published":"2026-11-05T09:50:27.766Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=proposal-saturncredit.live"},{"hostname":"qchmphk.cn","first_observed":"2026-11-05T09:21:13.732Z","first_published":"2026-11-05T09:50:27.766Z","brands":[],"dns":"resolved","resolved":["103.112.96.21","103.112.96.39","118.107.19.44","192.253.235.202"],"resolved_at":"2026-11-05T09:27:04Z","dns_checked_at":"2026-11-06T09:57:46.000Z","dns_since":"2026-11-05T09:57:42.000Z","findings":[{"id":"fgjbmse6jyjfgxm42wucv","kind":"reported_domain","summary":"Listed by NPA 165 (e-commerce)","first_observed":"2026-11-05T09:21:13.732Z","first_published":"2026-11-05T09:50:27.766Z","source":"npa","source_name":"NPA 165","claim":{"category":"e-commerce"}}],"url":"https://domainspoof.com/live?show=all&q=qchmphk.cn"},{"hostname":"randvshzksimerts.store","first_observed":"2026-11-05T09:10:52.041Z","first_published":"2026-11-05T09:50:27.766Z","brands":[],"dns":"resolved","resolved":["104.21.25.247","172.67.134.240"],"resolved_at":"2026-11-05T09:11:22Z","dns_checked_at":"2026-11-06T09:57:46.000Z","dns_since":"2026-11-05T09:57:42.000Z","findings":[{"id":"flel7edkvymxy6wvkv7ej","kind":"reported_domain","summary":"Listed by USOM","first_observed":"2026-11-05T09:10:52.041Z","first_published":"2026-11-05T09:50:27.766Z","source":"usom","source_name":"USOM"}],"url":"https://domainspoof.com/live?show=all&q=randvshzksimerts.store"},{"hostname":"registry.floydldevine.com","first_observed":"2026-11-05T09:31:04.544Z","first_published":"2026-11-05T09:50:27.766Z","brands":[],"dns":"resolved","resolved":["109.238.86.5"],"resolved_at":"2026-11-05T09:38:30Z","dns_checked_at":"2026-11-06T09:57:46.000Z","dns_since":"2026-11-05T09:57:42.000Z","findings":[{"id":"frktezq3sefvjzuvuwjlm","kind":"reported_domain","summary":"Under floydldevine.com, listed by CERT Polska","first_observed":"2026-11-05T09:31:04.544Z","first_published":"2026-11-05T09:50:27.766Z","source":"cert_polska","source_name":"CERT Polska","under":"floydldevine.com"}],"url":"https://domainspoof.com/live?show=all&q=registry.floydldevine.com"},{"hostname":"restro.gostratsicof.com","first_observed":"2026-11-05T08:51:54.108Z","first_published":"2026-11-05T09:50:27.766Z","brands":[],"dns":"resolved","resolved":["191.101.104.29","212.1.212.194"],"resolved_at":"2026-11-05T08:52:06Z","dns_checked_at":"2026-11-06T09:57:46.000Z","dns_since":"2026-11-05T09:57:42.000Z","findings":[{"id":"fka4kpzxdxtwpomxcqvbs","kind":"reported_domain","summary":"Under gostratsicof.com, listed by CERT Polska","first_observed":"2026-11-05T08:51:54.108Z","first_published":"2026-11-05T09:50:27.766Z","source":"cert_polska","source_name":"CERT Polska","under":"gostratsicof.com"}],"url":"https://domainspoof.com/live?show=all&q=restro.gostratsicof.com"},{"hostname":"reverttdom.eu.cc","first_observed":"2026-11-05T09:26:25.293Z","first_published":"2026-11-05T09:50:27.766Z","brands":[],"dns":"resolved","resolved":["104.21.75.107","172.67.221.89"],"resolved_at":"2026-11-05T09:33:36Z","dns_checked_at":"2026-11-06T09:57:46.000Z","dns_since":"2026-11-05T09:57:42.000Z","findings":[{"id":"fe27r7qxyakbyrzeofsno","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T09:26:25.293Z","first_published":"2026-11-05T09:50:27.766Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=reverttdom.eu.cc"},{"hostname":"rinfrbronc.store","first_observed":"2026-11-05T09:19:06.197Z","first_published":"2026-11-05T09:50:27.766Z","brands":[],"dns":"resolved","resolved":["104.21.3.228","172.67.153.190","2606:4700:3031::6815:3e4","2606:4700:3035::ac43:99be"],"resolved_at":"2026-11-05T09:20:24Z","dns_checked_at":"2026-11-06T09:57:46.000Z","dns_since":"2026-11-05T09:57:42.000Z","findings":[{"id":"fhis4ical3ngxdomjps7s","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T09:19:06.197Z","first_published":"2026-11-05T09:50:27.766Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=rinfrbronc.store"},{"hostname":"riseupengine.digital","first_observed":"2026-11-05T08:57:00.499Z","first_published":"2026-11-05T09:50:27.766Z","brands":[],"dns":"resolved","resolved":["104.21.19.148","172.67.186.132"],"resolved_at":"2026-11-05T09:02:26Z","dns_checked_at":"2026-11-06T09:57:46.000Z","dns_since":"2026-11-05T09:57:42.000Z","findings":[{"id":"foeiorm6uh6wy5g7bjenz","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T08:57:00.499Z","first_published":"2026-11-05T09:50:27.766Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=riseupengine.digital"},{"hostname":"rkcrefund.com","first_observed":"2026-11-05T09:41:19.995Z","first_published":"2026-11-05T09:50:27.766Z","brands":[],"dns":"resolved","resolved":["104.21.37.6","172.67.202.40"],"resolved_at":"2026-11-05T09:43:35Z","dns_checked_at":"2026-11-06T09:57:46.000Z","dns_since":"2026-11-05T09:57:42.000Z","findings":[{"id":"fvngoyyvdeu36fmk4pkou","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T09:41:19.995Z","first_published":"2026-11-05T09:50:27.766Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=rkcrefund.com"},{"hostname":"rpeglvd.space","first_observed":"2026-11-05T09:36:12.068Z","first_published":"2026-11-05T09:50:27.766Z","brands":[],"dns":"resolved","resolved":["104.21.44.217","172.67.203.239"],"resolved_at":"2026-11-05T09:40:22Z","dns_checked_at":"2026-11-06T09:57:46.000Z","dns_since":"2026-11-05T09:57:42.000Z","findings":[{"id":"fmpu2cqjhxzsxwbvztb7i","kind":"reported_domain","summary":"Listed by NPA 165 (information services)","first_observed":"2026-11-05T09:36:12.068Z","first_published":"2026-11-05T09:50:27.766Z","source":"npa","source_name":"NPA 165","claim":{"category":"information services"}}],"url":"https://domainspoof.com/live?show=all&q=rpeglvd.space"},{"hostname":"saq31.cn","first_observed":"2026-11-05T09:16:04.617Z","first_published":"2026-11-05T09:50:27.766Z","brands":[],"dns":"no_address","resolved":[],"resolved_at":"2026-11-05T09:22:55Z","dns_checked_at":"2026-11-06T09:57:46.000Z","dns_since":"2026-11-05T09:57:42.000Z","findings":[{"id":"f5tmwvh7f6re2sxos3bjp","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T09:16:04.617Z","first_published":"2026-11-05T09:50:27.766Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=saq31.cn"},{"hostname":"savrynpulseai.net","first_observed":"2026-11-05T09:36:12.068Z","first_published":"2026-11-05T09:50:27.766Z","brands":[],"dns":"resolved","resolved":["104.21.53.116","172.67.212.159"],"resolved_at":"2026-11-05T09:40:22Z","dns_checked_at":"2026-11-06T09:57:46.000Z","dns_since":"2026-11-05T09:57:42.000Z","findings":[{"id":"fdnjnqfvrhphaqwt45cux","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T09:36:12.068Z","first_published":"2026-11-05T09:50:27.766Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=savrynpulseai.net"},{"hostname":"sgximmzqmqi.top","first_observed":"2026-11-05T09:26:25.293Z","first_published":"2026-11-05T09:50:27.766Z","brands":[],"dns":"no_address","resolved":[],"resolved_at":"2026-11-05T09:33:40Z","dns_checked_at":"2026-11-06T09:57:46.000Z","dns_since":"2026-11-05T09:57:42.000Z","findings":[{"id":"f7xa2hi4bsrfiej7xtmuw","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T09:26:25.293Z","first_published":"2026-11-05T09:50:27.766Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/sgximmzqmqi.top/"}],"url":"https://domainspoof.com/live?show=all&q=sgximmzqmqi.top"},{"hostname":"shoesme-nl.deal-vera.com","first_observed":"2026-11-05T08:46:43.679Z","first_published":"2026-11-05T09:50:27.766Z","brands":[],"dns":"resolved","resolved":["104.18.13.234"],"resolved_at":"2026-11-05T08:47:14Z","dns_checked_at":"2026-11-06T09:57:46.000Z","dns_since":"2026-11-05T09:57:42.000Z","findings":[{"id":"ff6bky7w3tdybtgve5sqa","kind":"reported_domain","summary":"Under deal-vera.com, listed by CERT Polska","first_observed":"2026-11-05T08:46:43.679Z","first_published":"2026-11-05T09:50:27.766Z","source":"cert_polska","source_name":"CERT Polska","under":"deal-vera.com"}],"url":"https://domainspoof.com/live?show=all&q=shoesme-nl.deal-vera.com"},{"hostname":"sidersport.store","first_observed":"2026-11-05T09:19:06.197Z","first_published":"2026-11-05T09:50:27.766Z","brands":[],"dns":"resolved","resolved":["104.21.8.135","172.67.188.120","2606:4700:3034::6815:887","2606:4700:3034::ac43:bc78"],"resolved_at":"2026-11-05T09:20:24Z","dns_checked_at":"2026-11-06T09:57:46.000Z","dns_since":"2026-11-05T09:57:42.000Z","findings":[{"id":"fhvjbjl6jnfnzniurdjgg","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T09:19:06.197Z","first_published":"2026-11-05T09:50:27.766Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=sidersport.store"},{"hostname":"signalatera.com","first_observed":"2026-11-05T08:57:00.499Z","first_published":"2026-11-05T09:50:27.766Z","brands":[],"dns":"resolved","resolved":["104.21.47.77","172.67.170.196"],"resolved_at":"2026-11-05T09:02:27Z","dns_checked_at":"2026-11-06T09:57:46.000Z","dns_since":"2026-11-05T09:57:42.000Z","findings":[{"id":"f4sziownxpdxrr3axzafl","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T08:57:00.499Z","first_published":"2026-11-05T09:50:27.766Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/signalatera.com/"}],"url":"https://domainspoof.com/live?show=all&q=signalatera.com"},{"hostname":"sokig.online","first_observed":"2026-11-05T08:46:43.679Z","first_published":"2026-11-05T09:50:27.766Z","brands":[],"dns":"resolved","resolved":["104.21.91.101","172.67.215.154"],"resolved_at":"2026-11-05T08:47:14Z","dns_checked_at":"2026-11-06T09:57:46.000Z","dns_since":"2026-11-05T09:57:42.000Z","findings":[{"id":"f4mmlvahouskzrxxnae3h","kind":"reported_domain","summary":"Listed by NPA 165 (e-commerce)","first_observed":"2026-11-05T08:46:43.679Z","first_published":"2026-11-05T09:50:27.766Z","source":"npa","source_name":"NPA 165","claim":{"category":"e-commerce"}}],"url":"https://domainspoof.com/live?show=all&q=sokig.online"},{"hostname":"sparkdex.co.com","first_observed":"2026-11-05T09:21:13.732Z","first_published":"2026-11-05T09:50:27.766Z","brands":[],"dns":"resolved","resolved":["104.21.39.233","172.67.171.212"],"resolved_at":"2026-11-05T09:27:11Z","dns_checked_at":"2026-11-06T09:57:46.000Z","dns_since":"2026-11-05T09:57:42.000Z","findings":[{"id":"fp27jnbh6toecuivvp2ee","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T09:21:13.732Z","first_published":"2026-11-05T09:50:27.766Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=sparkdex.co.com"},{"hostname":"spend-lab.com","first_observed":"2026-11-05T09:36:12.068Z","first_published":"2026-11-05T09:50:27.766Z","brands":[],"dns":"resolved","resolved":["104.21.39.208","172.67.148.126"],"resolved_at":"2026-11-05T09:40:23Z","dns_checked_at":"2026-11-06T09:57:46.000Z","dns_since":"2026-11-05T09:57:42.000Z","findings":[{"id":"fi5phd7iqqtbr26eoczzl","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T09:36:12.068Z","first_published":"2026-11-05T09:50:27.766Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=spend-lab.com"},{"hostname":"spotifull.com","first_observed":"2026-11-05T09:31:04.544Z","first_published":"2026-11-05T09:50:27.766Z","brands":[],"dns":"resolved","resolved":["104.21.44.242","172.67.205.70"],"resolved_at":"2026-11-05T09:38:32Z","dns_checked_at":"2026-11-06T09:57:46.000Z","dns_since":"2026-11-05T09:57:42.000Z","findings":[{"id":"fmw5to3fratj3ucrjmi2t","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T09:31:04.544Z","first_published":"2026-11-05T09:50:27.766Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/spotifull.com/"}],"url":"https://domainspoof.com/live?show=all&q=spotifull.com"},{"hostname":"spx88k.icu","first_observed":"2026-11-05T09:26:25.293Z","first_published":"2026-11-05T09:50:27.766Z","brands":[],"dns":"resolved","resolved":["104.21.21.114","172.67.198.76"],"resolved_at":"2026-11-05T09:33:41Z","dns_checked_at":"2026-11-06T09:57:46.000Z","dns_since":"2026-11-05T09:57:42.000Z","findings":[{"id":"fad6u7lydregqnemcfea3","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T09:26:25.293Z","first_published":"2026-11-05T09:50:27.766Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/spx88k.icu/"}],"url":"https://domainspoof.com/live?show=all&q=spx88k.icu"},{"hostname":"staging.supertrader.me","first_observed":"2026-11-05T08:41:03.613Z","first_published":"2026-11-05T09:50:27.766Z","brands":[],"dns":"resolved","resolved":["3.170.42.10","3.170.42.14","3.170.42.85","3.170.42.93"],"resolved_at":"2026-11-05T08:41:13Z","dns_checked_at":"2026-11-06T09:57:46.000Z","dns_since":"2026-11-05T09:57:42.000Z","findings":[{"id":"fsmurhjpsi7jumnbkyd7v","kind":"reported_domain","summary":"Under supertrader.me, listed by CERT Polska","first_observed":"2026-11-05T08:41:03.613Z","first_published":"2026-11-05T09:50:27.766Z","source":"cert_polska","source_name":"CERT Polska","under":"supertrader.me"}],"url":"https://domainspoof.com/live?show=all&q=staging.supertrader.me"},{"hostname":"started-ledger-live-download-eng.pages.dev","first_observed":"2026-11-05T08:57:00.499Z","first_published":"2026-11-05T09:50:27.766Z","brands":[{"id":"ledger","name":"Ledger","url":"https://domainspoof.com/brands/ledger"}],"dns":"resolved","resolved":["172.66.45.38","172.66.46.218","2606:4700:310c::ac42:2d26","2606:4700:310c::ac42:2eda"],"resolved_at":"2026-11-05T09:02:27Z","dns_checked_at":"2026-11-06T09:57:46.000Z","dns_since":"2026-11-05T09:57:42.000Z","findings":[{"id":"fdee33t2mchh7h7g2fjcw","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T08:57:00.499Z","first_published":"2026-11-05T09:50:27.766Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/brands/ledger"},{"hostname":"strombitpuls-com.pages.dev","first_observed":"2026-11-05T08:51:54.108Z","first_published":"2026-11-05T09:50:27.766Z","brands":[],"dns":"resolved","resolved":["172.66.45.8","172.66.46.248"],"resolved_at":"2026-11-05T08:52:07Z","dns_checked_at":"2026-11-06T09:57:46.000Z","dns_since":"2026-11-05T09:57:42.000Z","findings":[{"id":"fdlkauoqmhsybaxi2neft","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T08:51:54.108Z","first_published":"2026-11-05T09:50:27.766Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=strombitpuls-com.pages.dev"},{"hostname":"swellnetwork.net","first_observed":"2026-11-05T08:57:00.499Z","first_published":"2026-11-05T09:50:27.766Z","brands":[],"dns":"resolved","resolved":["104.21.55.50","172.67.144.210"],"resolved_at":"2026-11-05T09:02:27Z","dns_checked_at":"2026-11-06T09:57:46.000Z","dns_since":"2026-11-05T09:57:42.000Z","findings":[{"id":"fgbtpxlbgxrhvpgsz4lyt","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T08:57:00.499Z","first_published":"2026-11-05T09:50:27.766Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=swellnetwork.net"},{"hostname":"telnetx-ai.com","first_observed":"2026-11-05T09:19:06.197Z","first_published":"2026-11-05T09:50:27.766Z","brands":[],"dns":"resolved","resolved":["185.7.214.147"],"resolved_at":"2026-11-06T00:51:46Z","dns_checked_at":"2026-11-06T09:57:46.000Z","dns_since":"2026-11-05T09:57:42.000Z","findings":[{"id":"fjq4utxhf73p5cgpvfqku","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T09:19:06.197Z","first_published":"2026-11-05T09:50:27.766Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=telnetx-ai.com"},{"hostname":"trendyol0.xyz","first_observed":"2026-11-05T08:46:43.679Z","first_published":"2026-11-05T09:50:27.766Z","brands":[{"id":"trendyol","name":"Trendyol","url":"https://domainspoof.com/brands/trendyol"}],"dns":"resolved","resolved":["104.21.36.176","172.67.197.237","2606:4700:3031::ac43:c5ed","2606:4700:3032::6815:24b0"],"resolved_at":"2026-11-05T08:47:14Z","dns_checked_at":"2026-11-06T09:57:46.000Z","dns_since":"2026-11-05T09:57:42.000Z","findings":[{"id":"fiqn3bzdiffksdvbml765","kind":"reported_domain","summary":"Listed by USOM","first_observed":"2026-11-05T08:46:43.679Z","first_published":"2026-11-05T09:50:27.766Z","source":"usom","source_name":"USOM"}],"url":"https://domainspoof.com/brands/trendyol"},{"hostname":"trezo-io-brdge.pages.dev","first_observed":"2026-11-05T09:10:52.041Z","first_published":"2026-11-05T09:50:27.766Z","brands":[],"dns":"resolved","resolved":["172.66.44.159","172.66.47.97"],"resolved_at":"2026-11-05T09:11:23Z","dns_checked_at":"2026-11-06T09:57:46.000Z","dns_since":"2026-11-05T09:57:42.000Z","findings":[{"id":"fhccrck5vfxgozsec4s47","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T09:10:52.041Z","first_published":"2026-11-05T09:50:27.766Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=trezo-io-brdge.pages.dev"},{"hostname":"truly1-deleniti60.cfd","first_observed":"2026-11-05T09:19:06.197Z","first_published":"2026-11-05T09:50:27.766Z","brands":[],"dns":"no_address","resolved":[],"resolved_at":"2026-11-05T09:20:24Z","dns_checked_at":"2026-11-06T09:57:46.000Z","dns_since":"2026-11-05T09:57:42.000Z","findings":[{"id":"fsq55thq6oo66g5f5w74w","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T09:19:06.197Z","first_published":"2026-11-05T09:50:27.766Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=truly1-deleniti60.cfd"},{"hostname":"truly2-laboriosam7.cfd","first_observed":"2026-11-05T09:19:06.197Z","first_published":"2026-11-05T09:50:27.766Z","brands":[],"dns":"no_address","resolved":[],"resolved_at":"2026-11-05T09:20:24Z","dns_checked_at":"2026-11-06T09:57:46.000Z","dns_since":"2026-11-05T09:57:42.000Z","findings":[{"id":"fa24kvna4hpmjgxxgwahh","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T09:19:06.197Z","first_published":"2026-11-05T09:50:27.766Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=truly2-laboriosam7.cfd"},{"hostname":"truly5-itaque9.cfd","first_observed":"2026-11-05T09:19:06.197Z","first_published":"2026-11-05T09:50:27.766Z","brands":[],"dns":"no_address","resolved":["104.21.89.59","172.67.138.23","2606:4700:3032::ac43:8a17","2606:4700:3035::6815:593b"],"resolved_at":"2026-11-05T09:20:24Z","dns_checked_at":"2026-11-06T09:57:46.000Z","dns_since":"2026-11-05T09:57:42.000Z","findings":[{"id":"fvr65okbagj47g5own2f2","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T09:19:06.197Z","first_published":"2026-11-05T09:50:27.766Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=truly5-itaque9.cfd"},{"hostname":"ukpinebrooklane.com","first_observed":"2026-11-05T09:16:04.617Z","first_published":"2026-11-05T09:50:27.766Z","brands":[],"dns":"resolved","resolved":["104.21.22.173","172.67.205.245"],"resolved_at":"2026-11-05T09:22:59Z","dns_checked_at":"2026-11-06T09:57:46.000Z","dns_since":"2026-11-05T09:57:42.000Z","findings":[{"id":"fuj5zcfvl6a5l27mntw54","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T09:16:04.617Z","first_published":"2026-11-05T09:50:27.766Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=ukpinebrooklane.com"},{"hostname":"uncx-network.net","first_observed":"2026-11-05T08:57:00.499Z","first_published":"2026-11-05T09:50:27.766Z","brands":[],"dns":"resolved","resolved":["104.21.43.79","172.67.175.185"],"resolved_at":"2026-11-05T09:02:28Z","dns_checked_at":"2026-11-06T09:57:46.000Z","dns_since":"2026-11-05T09:57:42.000Z","findings":[{"id":"fbf4ohy6ntqn3t7w6qggj","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T08:57:00.499Z","first_published":"2026-11-05T09:50:27.766Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=uncx-network.net"},{"hostname":"unicredlt.com","first_observed":"2026-11-05T08:39:57.487Z","first_published":"2026-11-05T09:50:27.766Z","brands":[{"id":"unicredit","name":"UniCredit","url":"https://domainspoof.com/brands/unicredit"}],"dns":"resolved","resolved":["195.201.128.179","5.161.230.87","5.78.156.59","5.161.47.86","46.62.237.138","76.223.91.20","2406:da1e:214:c901:3a5:448f:b7b7:82e7","2600:1f1c:6db:8801:268f:6a6d:cd28:6208","2a05:d014:179b:c400:5131:66d1:dcfb:6ae9","2a05:d014:179b:c400:a327:40ee:24cc:6180","2a05:d014:179b:c402:796a:5979:8cae:ea4","2a05:d014:179b:c403:577e:c54a:24fd:1c39","2a05:d014:179b:c403:7ca2:c788:41b0:7d26","2a05:d018:1d22:801:a216:a799:8c87:df21"],"resolved_at":"2026-11-06T09:57:46Z","dns_checked_at":"2026-11-06T09:57:46.000Z","dns_since":"2026-11-05T09:57:42.000Z","findings":[{"id":"fn5b4bi4iejst5sy6czz3","kind":"phishing_infrastructure","summary":"Resolved to 195.201.128.179, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T08:39:57.487Z","first_published":"2026-11-05T09:50:27.766Z","address":"195.201.128.179","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"},{"kind":"lookalike","summary":"Registered lookalike of unicredit.it (similar-looking characters), resolved to 195.201.128.179, where reported phishing was found in the 48 hours before, and resolved to 46.62.237.138, where reported phishing was found in the 48 hours before, and resolved to 5.161.230.87, where reported phishing was found in the 48 hours before, and resolved to 5.161.47.86, where reported phishing was found in the 48 hours before, and resolved to 5.78.156.59, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T22:18:30.000Z","first_published":"2026-11-05T22:18:30.000Z","of":"unicredit.it","spelling":"homoglyph","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"195.201.128.179","flagged_at":"2026-11-05T22:18:30Z"},{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"46.62.237.138","flagged_at":"2026-11-05T22:18:30Z"},{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"5.161.230.87","flagged_at":"2026-11-05T22:18:30Z"},{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"5.161.47.86","flagged_at":"2026-11-05T22:18:30Z"},{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"5.78.156.59","flagged_at":"2026-11-05T22:18:30Z"}]}],"url":"https://domainspoof.com/brands/unicredit"},{"hostname":"united-exporters.com","first_observed":"2026-11-05T09:16:04.617Z","first_published":"2026-11-05T09:50:27.766Z","brands":[],"dns":"resolved","resolved":["104.21.81.222","172.67.165.98"],"resolved_at":"2026-11-05T09:22:59Z","dns_checked_at":"2026-11-06T09:57:46.000Z","dns_since":"2026-11-05T09:57:42.000Z","findings":[{"id":"fo7xgy3ke3f2dnndk26ku","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T09:16:04.617Z","first_published":"2026-11-05T09:50:27.766Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/united-exporters.com/"}],"url":"https://domainspoof.com/live?show=all&q=united-exporters.com"},{"hostname":"usdcmillion.cyou","first_observed":"2026-11-05T09:05:42.435Z","first_published":"2026-11-05T09:50:27.766Z","brands":[],"dns":"resolved","resolved":["104.21.94.51","172.67.219.209"],"resolved_at":"2026-11-05T09:14:24Z","dns_checked_at":"2026-11-06T09:57:46.000Z","dns_since":"2026-11-05T09:57:42.000Z","findings":[{"id":"ftwetrqjrubebqapsigk2","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T09:05:42.435Z","first_published":"2026-11-05T09:50:27.766Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/usdcmillion.cyou/"}],"url":"https://domainspoof.com/live?show=all&q=usdcmillion.cyou"},{"hostname":"uwelonex.live","first_observed":"2026-11-05T09:05:42.435Z","first_published":"2026-11-05T09:50:27.766Z","brands":[],"dns":"resolved","resolved":["104.21.7.64","172.67.187.135"],"resolved_at":"2026-11-05T09:14:24Z","dns_checked_at":"2026-11-06T09:57:46.000Z","dns_since":"2026-11-05T09:57:42.000Z","findings":[{"id":"fn76nvvmuusr4upoqpscg","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T09:05:42.435Z","first_published":"2026-11-05T09:50:27.766Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=uwelonex.live"},{"hostname":"vaadava7hl.com","first_observed":"2026-11-05T09:16:04.617Z","first_published":"2026-11-05T09:50:27.766Z","brands":[],"dns":"resolved","resolved":["34.116.251.53"],"resolved_at":"2026-11-05T09:23:00Z","dns_checked_at":"2026-11-06T09:57:46.000Z","dns_since":"2026-11-05T09:57:42.000Z","findings":[{"id":"feswnigguxyymo2iaiamy","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T09:16:04.617Z","first_published":"2026-11-05T09:50:27.766Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=vaadava7hl.com"},{"hostname":"valuentice.net","first_observed":"2026-11-05T08:41:03.613Z","first_published":"2026-11-05T09:50:27.766Z","brands":[],"dns":"resolved","resolved":["104.21.4.231","172.67.132.149"],"resolved_at":"2026-11-05T08:41:13Z","dns_checked_at":"2026-11-06T09:57:46.000Z","dns_since":"2026-11-05T09:57:42.000Z","findings":[{"id":"fkph3n7peq434jdn3p7ui","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T08:41:03.613Z","first_published":"2026-11-05T09:50:27.766Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=valuentice.net"},{"hostname":"vcsaleeu.click","first_observed":"2026-11-05T09:00:36.557Z","first_published":"2026-11-05T09:50:27.766Z","brands":[],"dns":"resolved","resolved":["104.21.79.208","172.67.148.112"],"resolved_at":"2026-11-05T09:05:59Z","dns_checked_at":"2026-11-06T09:57:46.000Z","dns_since":"2026-11-05T09:57:42.000Z","findings":[{"id":"f3nutfruc4sm4ecojrt47","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T09:00:36.557Z","first_published":"2026-11-05T09:50:27.766Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=vcsaleeu.click"},{"hostname":"velo-distribution.xyz","first_observed":"2026-11-05T09:05:42.435Z","first_published":"2026-11-05T09:50:27.766Z","brands":[],"dns":"resolved","resolved":["104.21.14.28","172.67.157.169"],"resolved_at":"2026-11-05T09:14:25Z","dns_checked_at":"2026-11-06T09:57:46.000Z","dns_since":"2026-11-05T09:57:42.000Z","findings":[{"id":"fxba5bwudsx3ta5tuparu","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T09:05:42.435Z","first_published":"2026-11-05T09:50:27.766Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=velo-distribution.xyz"},{"hostname":"violationcontent-x.com","first_observed":"2026-11-05T08:51:54.108Z","first_published":"2026-11-05T09:50:27.766Z","brands":[],"dns":"no_address","resolved":[],"resolved_at":"2026-11-05T08:52:07Z","dns_checked_at":"2026-11-06T09:57:46.000Z","dns_since":"2026-11-05T09:57:42.000Z","findings":[{"id":"fbx3vogsdtav6yoqrnmrk","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T08:51:54.108Z","first_published":"2026-11-05T09:50:27.766Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=violationcontent-x.com"},{"hostname":"vote-prjx.com","first_observed":"2026-11-05T09:16:04.617Z","first_published":"2026-11-05T09:50:27.766Z","brands":[],"dns":"resolved","resolved":["104.21.56.246","172.67.157.56"],"resolved_at":"2026-11-06T12:21:40Z","dns_checked_at":"2026-11-06T09:57:46.000Z","dns_since":"2026-11-05T09:57:42.000Z","findings":[{"id":"figioztu5s3ro7rkixcuj","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T09:16:04.617Z","first_published":"2026-11-05T09:50:27.766Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=vote-prjx.com"},{"hostname":"wangshongse.com","first_observed":"2026-11-05T09:31:04.544Z","first_published":"2026-11-05T09:50:27.766Z","brands":[{"id":"e-plus","name":"e+ (eplus)","url":"https://domainspoof.com/brands/e-plus"}],"dns":"resolved","resolved":["183.136.138.174"],"resolved_at":"2026-11-05T09:38:34Z","dns_checked_at":"2026-11-06T09:57:46.000Z","dns_since":"2026-11-05T09:57:42.000Z","findings":[{"id":"fd53ajpghqjddcuwobjpu","kind":"reported_domain","summary":"Listed by JPCERT/CC as imitating イープラス","first_observed":"2026-11-05T09:31:04.544Z","first_published":"2026-11-05T09:50:27.766Z","source":"jpcert","source_name":"JPCERT/CC","claim":{"brand":"イープラス"}}],"url":"https://domainspoof.com/brands/e-plus"},{"hostname":"webdisk.jtkmetalcraft.com.au","first_observed":"2026-11-05T09:26:25.293Z","first_published":"2026-11-05T09:50:27.766Z","brands":[],"dns":"resolved","resolved":["163.47.74.193","2404:8280:a222:bbbb:bba1:79:ffff:ffff"],"resolved_at":"2026-11-05T09:33:46Z","dns_checked_at":"2026-11-06T09:57:46.000Z","dns_since":"2026-11-05T09:57:42.000Z","findings":[{"id":"fq36nplfkjsbf5gtew7sz","kind":"reported_domain","summary":"Under jtkmetalcraft.com.au, reported by PhishDestroy","first_observed":"2026-11-05T09:26:25.293Z","first_published":"2026-11-05T09:50:27.766Z","source":"phishdestroy","source_name":"PhishDestroy","under":"jtkmetalcraft.com.au","source_url":"https://phishdestroy.io/domain/jtkmetalcraft.com.au/"}],"url":"https://domainspoof.com/live?show=all&q=webdisk.jtkmetalcraft.com.au"},{"hostname":"webdisk.orientalmining.com","first_observed":"2026-11-05T08:41:03.613Z","first_published":"2026-11-05T09:50:27.766Z","brands":[],"dns":"resolved","resolved":["65.181.124.4"],"resolved_at":"2026-11-05T08:41:13Z","dns_checked_at":"2026-11-06T09:57:46.000Z","dns_since":"2026-11-05T09:57:42.000Z","findings":[{"id":"fc6yn7fd4bncdp7jly2dy","kind":"reported_domain","summary":"Under orientalmining.com, listed by CERT Polska","first_observed":"2026-11-05T08:41:03.613Z","first_published":"2026-11-05T09:50:27.766Z","source":"cert_polska","source_name":"CERT Polska","under":"orientalmining.com"}],"url":"https://domainspoof.com/live?show=all&q=webdisk.orientalmining.com"},{"hostname":"webmail.jtkmetalcraft.com.au","first_observed":"2026-11-05T09:26:25.293Z","first_published":"2026-11-05T09:50:27.766Z","brands":[],"dns":"resolved","resolved":["163.47.74.193","2404:8280:a222:bbbb:bba1:79:ffff:ffff"],"resolved_at":"2026-11-05T09:33:46Z","dns_checked_at":"2026-11-06T09:57:46.000Z","dns_since":"2026-11-05T09:57:42.000Z","findings":[{"id":"f6m3unesi46bwpulzbcya","kind":"reported_domain","summary":"Under jtkmetalcraft.com.au, reported by PhishDestroy","first_observed":"2026-11-05T09:26:25.293Z","first_published":"2026-11-05T09:50:27.766Z","source":"phishdestroy","source_name":"PhishDestroy","under":"jtkmetalcraft.com.au","source_url":"https://phishdestroy.io/domain/jtkmetalcraft.com.au/"}],"url":"https://domainspoof.com/live?show=all&q=webmail.jtkmetalcraft.com.au"},{"hostname":"webmail.orientalmining.com","first_observed":"2026-11-05T08:41:03.613Z","first_published":"2026-11-05T09:50:27.766Z","brands":[],"dns":"resolved","resolved":["65.181.124.4"],"resolved_at":"2026-11-05T08:41:13Z","dns_checked_at":"2026-11-06T09:57:46.000Z","dns_since":"2026-11-05T09:57:42.000Z","findings":[{"id":"fd7mb3jxz4e4ylc2lag6g","kind":"reported_domain","summary":"Under orientalmining.com, listed by CERT Polska","first_observed":"2026-11-05T08:41:03.613Z","first_published":"2026-11-05T09:50:27.766Z","source":"cert_polska","source_name":"CERT Polska","under":"orientalmining.com"}],"url":"https://domainspoof.com/live?show=all&q=webmail.orientalmining.com"},{"hostname":"weryfi-nr7293.eu.cc","first_observed":"2026-11-05T09:21:13.732Z","first_published":"2026-11-05T09:50:27.766Z","brands":[],"dns":"resolved","resolved":["104.21.16.105","172.67.167.63"],"resolved_at":"2026-11-05T09:27:19Z","dns_checked_at":"2026-11-06T09:57:46.000Z","dns_since":"2026-11-05T09:57:42.000Z","findings":[{"id":"f4ix2mfvfkwt5yiaxcx32","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T09:21:13.732Z","first_published":"2026-11-05T09:50:27.766Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=weryfi-nr7293.eu.cc"},{"hostname":"weryfld3762.eu.cc","first_observed":"2026-11-05T09:41:19.995Z","first_published":"2026-11-05T09:50:27.766Z","brands":[],"dns":"resolved","resolved":["104.21.92.16","172.67.184.190"],"resolved_at":"2026-11-05T09:43:38Z","dns_checked_at":"2026-11-06T09:57:46.000Z","dns_since":"2026-11-05T09:57:42.000Z","findings":[{"id":"fdhdbbcn4fh5xidcmahnn","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T09:41:19.995Z","first_published":"2026-11-05T09:50:27.766Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=weryfld3762.eu.cc"},{"hostname":"whm.drughublink.top","first_observed":"2026-11-05T08:41:03.613Z","first_published":"2026-11-05T09:50:27.766Z","brands":[],"dns":"resolved","resolved":["45.147.197.100"],"resolved_at":"2026-11-05T08:41:13Z","dns_checked_at":"2026-11-06T09:57:46.000Z","dns_since":"2026-11-05T09:57:42.000Z","findings":[{"id":"f5hnocro2hypo2fbbubbo","kind":"reported_domain","summary":"Under drughublink.top, reported by PhishDestroy","first_observed":"2026-11-05T08:41:03.613Z","first_published":"2026-11-05T09:50:27.766Z","source":"phishdestroy","source_name":"PhishDestroy","under":"drughublink.top","source_url":"https://phishdestroy.io/domain/drughublink.top/"}],"url":"https://domainspoof.com/live?show=all&q=whm.drughublink.top"},{"hostname":"wild-galicia.org","first_observed":"2026-11-05T08:41:13.445Z","first_published":"2026-11-05T09:50:27.766Z","brands":[{"id":"banco-galicia","name":"Banco Galicia","url":"https://domainspoof.com/brands/banco-galicia"}],"dns":"resolved","resolved":["217.160.0.244"],"resolved_at":"2026-11-06T09:57:46Z","dns_checked_at":"2026-11-06T09:57:46.000Z","dns_since":"2026-11-05T09:57:42.000Z","findings":[{"id":"fogydzdf7zwnlvyp6ilq2","kind":"phishing_infrastructure","summary":"Resolved to 217.160.0.244, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T08:41:13.445Z","first_published":"2026-11-05T09:50:27.766Z","address":"217.160.0.244","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/banco-galicia"},{"hostname":"workspace.sberbankmobile.ru","first_observed":"2026-11-05T08:47:16.232Z","first_published":"2026-11-05T09:50:27.766Z","brands":[{"id":"sberbank","name":"Sberbank","url":"https://domainspoof.com/brands/sberbank"}],"dns":"resolved","resolved":["87.242.79.60"],"resolved_at":"2026-11-06T09:57:46Z","dns_checked_at":"2026-11-06T09:57:46.000Z","dns_since":"2026-11-05T09:57:42.000Z","findings":[{"id":"f5kzfy53mga77jnu7wypd","kind":"phishing_infrastructure","summary":"Resolved to 87.242.79.60, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T08:47:16.232Z","first_published":"2026-11-05T09:50:27.766Z","address":"87.242.79.60","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/sberbank"},{"hostname":"www.alokathepeacedog.world","first_observed":"2026-11-05T09:26:25.293Z","first_published":"2026-11-05T09:50:27.766Z","brands":[],"dns":"resolved","resolved":["216.150.1.1","216.150.16.1"],"resolved_at":"2026-11-05T09:33:47Z","dns_checked_at":"2026-11-06T09:57:46.000Z","dns_since":"2026-11-05T09:57:42.000Z","findings":[{"id":"f6jr6x4vult27skmkqdbd","kind":"reported_domain","summary":"Under alokathepeacedog.world, reported by PhishDestroy","first_observed":"2026-11-05T09:26:25.293Z","first_published":"2026-11-05T09:50:27.766Z","source":"phishdestroy","source_name":"PhishDestroy","under":"alokathepeacedog.world","source_url":"https://phishdestroy.io/domain/alokathepeacedog.world/"}],"url":"https://domainspoof.com/live?show=all&q=www.alokathepeacedog.world"},{"hostname":"www.app.xtb-international.com","first_observed":"2026-11-05T09:21:13.732Z","first_published":"2026-11-05T09:50:27.766Z","brands":[],"dns":"resolved","resolved":["68.65.120.205"],"resolved_at":"2026-11-05T09:27:20Z","dns_checked_at":"2026-11-06T09:57:46.000Z","dns_since":"2026-11-05T09:57:42.000Z","findings":[{"id":"fostkyeqqgfhrp5vthbqs","kind":"reported_domain","summary":"Under app.xtb-international.com, listed by CERT Polska","first_observed":"2026-11-05T09:21:13.732Z","first_published":"2026-11-05T09:50:27.766Z","source":"cert_polska","source_name":"CERT Polska","under":"app.xtb-international.com"}],"url":"https://domainspoof.com/live?show=all&q=www.app.xtb-international.com"},{"hostname":"www.binance-verification-support.com","first_observed":"2026-11-05T09:14:27.633Z","first_published":"2026-11-05T09:50:27.766Z","brands":[{"id":"binance","name":"Binance","url":"https://domainspoof.com/brands/binance"}],"dns":"resolved","resolved":["2.57.91.91"],"resolved_at":"2026-11-06T09:57:46Z","dns_checked_at":"2026-11-06T09:57:46.000Z","dns_since":"2026-11-05T09:57:42.000Z","findings":[{"id":"fdyvnv5splyokwi3ra676","kind":"phishing_infrastructure","summary":"Resolved to 2.57.91.91, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T09:14:27.633Z","first_published":"2026-11-05T09:50:27.766Z","address":"2.57.91.91","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/binance"},{"hostname":"www.binance-verificationsupport.com","first_observed":"2026-11-05T09:14:27.635Z","first_published":"2026-11-05T09:50:27.766Z","brands":[{"id":"binance","name":"Binance","url":"https://domainspoof.com/brands/binance"}],"dns":"resolved","resolved":["2.57.91.91"],"resolved_at":"2026-11-06T09:57:46Z","dns_checked_at":"2026-11-06T09:57:46.000Z","dns_since":"2026-11-05T09:57:42.000Z","findings":[{"id":"ftkdzxew5djp2m6gwl6wq","kind":"phishing_infrastructure","summary":"Resolved to 2.57.91.91, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T09:14:27.635Z","first_published":"2026-11-05T09:50:27.766Z","address":"2.57.91.91","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/binance"},{"hostname":"www.bitbryone.net","first_observed":"2026-11-05T09:16:04.617Z","first_published":"2026-11-05T09:50:27.766Z","brands":[],"dns":"resolved","resolved":["104.21.29.5","172.67.171.55"],"resolved_at":"2026-11-05T09:23:01Z","dns_checked_at":"2026-11-06T09:57:46.000Z","dns_since":"2026-11-05T09:57:42.000Z","findings":[{"id":"fs2s2xytlencbp2m3kknp","kind":"reported_domain","summary":"Under bitbryone.net, listed by MetaMask","first_observed":"2026-11-05T09:16:04.617Z","first_published":"2026-11-05T09:50:27.766Z","source":"metamask","source_name":"MetaMask","under":"bitbryone.net"}],"url":"https://domainspoof.com/live?show=all&q=www.bitbryone.net"},{"hostname":"www.bitrefill.com-cp01-esim-gift.com","first_observed":"2026-11-05T09:06:03.589Z","first_published":"2026-11-05T09:50:27.766Z","brands":[{"id":"bitrefill","name":"Bitrefill","url":"https://domainspoof.com/brands/bitrefill"}],"dns":"resolved","resolved":["62.60.226.39"],"resolved_at":"2026-11-06T09:57:46Z","dns_checked_at":"2026-11-06T09:57:46.000Z","dns_since":"2026-11-05T09:57:42.000Z","findings":[{"id":"f727kk3zl3ujekplaqapd","kind":"spamhaus_drop","summary":"Resolved to 62.60.226.39 on Spamhaus DROP","first_observed":"2026-11-05T09:06:03.589Z","first_published":"2026-11-05T09:50:27.766Z","address":"62.60.226.39","list":"spamhaus_drop","list_name":"Spamhaus DROP"}],"url":"https://domainspoof.com/brands/bitrefill"},{"hostname":"www.exodus.phonhom.com","first_observed":"2026-11-05T09:36:12.068Z","first_published":"2026-11-05T09:50:27.766Z","brands":[],"dns":"resolved","resolved":["185.149.120.183"],"resolved_at":"2026-11-05T09:40:26Z","dns_checked_at":"2026-11-06T09:57:46.000Z","dns_since":"2026-11-05T09:57:42.000Z","findings":[{"id":"fp5d27x6oqo2qs2ggpkbr","kind":"reported_domain","summary":"Under exodus.phonhom.com, listed by MetaMask","first_observed":"2026-11-05T09:36:12.068Z","first_published":"2026-11-05T09:50:27.766Z","source":"metamask","source_name":"MetaMask","under":"exodus.phonhom.com"}],"url":"https://domainspoof.com/live?show=all&q=www.exodus.phonhom.com"},{"hostname":"www.fastbit.tech","first_observed":"2026-11-05T09:36:12.068Z","first_published":"2026-11-05T09:50:27.766Z","brands":[],"dns":"resolved","resolved":["104.21.76.210","172.67.201.15"],"resolved_at":"2026-11-05T09:40:26Z","dns_checked_at":"2026-11-06T09:57:46.000Z","dns_since":"2026-11-05T09:57:42.000Z","findings":[{"id":"f5pat67xlqxbdbdvnknpt","kind":"reported_domain","summary":"Under fastbit.tech, reported by PhishDestroy","first_observed":"2026-11-05T09:36:12.068Z","first_published":"2026-11-05T09:50:27.766Z","source":"phishdestroy","source_name":"PhishDestroy","under":"fastbit.tech","source_url":"https://phishdestroy.io/domain/fastbit.tech/"}],"url":"https://domainspoof.com/live?show=all&q=www.fastbit.tech"},{"hostname":"www.festnow.com.br","first_observed":"2026-11-05T08:41:03.613Z","first_published":"2026-11-05T09:50:27.766Z","brands":[],"dns":"resolved","resolved":["199.36.158.100"],"resolved_at":"2026-11-05T08:41:13Z","dns_checked_at":"2026-11-06T09:57:46.000Z","dns_since":"2026-11-05T09:57:42.000Z","findings":[{"id":"f6novmoiv3t2ki7okcoap","kind":"reported_domain","summary":"Under festnow.com.br, reported by PhishDestroy","first_observed":"2026-11-05T08:41:03.613Z","first_published":"2026-11-05T09:50:27.766Z","source":"phishdestroy","source_name":"PhishDestroy","under":"festnow.com.br","source_url":"https://phishdestroy.io/domain/festnow.com.br/"}],"url":"https://domainspoof.com/live?show=all&q=www.festnow.com.br"},{"hostname":"www.gjzzzzag.shop","first_observed":"2026-11-05T08:51:54.108Z","first_published":"2026-11-05T09:50:27.766Z","brands":[],"dns":"resolved","resolved":["104.17.177.238"],"resolved_at":"2026-11-05T08:52:08Z","dns_checked_at":"2026-11-06T09:57:46.000Z","dns_since":"2026-11-05T09:57:42.000Z","findings":[{"id":"fy5uwkqi7syq7u7gbm4ms","kind":"reported_domain","summary":"Under gjzzzzag.shop, listed by CERT Polska","first_observed":"2026-11-05T08:51:54.108Z","first_published":"2026-11-05T09:50:27.766Z","source":"cert_polska","source_name":"CERT Polska","under":"gjzzzzag.shop"}],"url":"https://domainspoof.com/live?show=all&q=www.gjzzzzag.shop"},{"hostname":"www.gostratsicof.com","first_observed":"2026-11-05T08:41:03.613Z","first_published":"2026-11-05T09:50:27.766Z","brands":[],"dns":"resolved","resolved":["191.96.144.147","195.35.60.246"],"resolved_at":"2026-11-05T08:41:13Z","dns_checked_at":"2026-11-06T09:57:46.000Z","dns_since":"2026-11-05T09:57:42.000Z","findings":[{"id":"ftbs3diydok7g3vh4dpzy","kind":"reported_domain","summary":"Under gostratsicof.com, listed by CERT Polska","first_observed":"2026-11-05T08:41:03.613Z","first_published":"2026-11-05T09:50:27.766Z","source":"cert_polska","source_name":"CERT Polska","under":"gostratsicof.com"}],"url":"https://domainspoof.com/live?show=all&q=www.gostratsicof.com"},{"hostname":"www.icloud-map.co","first_observed":"2026-11-05T08:39:59.094Z","first_published":"2026-11-05T09:50:27.766Z","brands":[{"id":"apple","name":"Apple","url":"https://domainspoof.com/brands/apple"}],"dns":"resolved","resolved":["172.232.24.161","172.232.24.235","172.234.25.42"],"resolved_at":"2026-11-06T09:57:46Z","dns_checked_at":"2026-11-06T09:57:46.000Z","dns_since":"2026-11-05T09:57:42.000Z","findings":[{"id":"fxpraqpeaqpvfw3wwdv5g","kind":"phishing_infrastructure","summary":"Resolved to 172.232.24.161, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T08:39:59.094Z","first_published":"2026-11-05T09:50:27.766Z","address":"172.232.24.161","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/apple"},{"hostname":"www.jtkmetalcraft.com.au","first_observed":"2026-11-05T09:26:25.293Z","first_published":"2026-11-05T09:50:27.766Z","brands":[],"dns":"resolved","resolved":["163.47.74.193","2404:8280:a222:bbbb:bba1:79:ffff:ffff"],"resolved_at":"2026-11-05T09:33:48Z","dns_checked_at":"2026-11-06T09:57:46.000Z","dns_since":"2026-11-05T09:57:42.000Z","findings":[{"id":"fl3jfvybm4xyu5ykw6ezz","kind":"reported_domain","summary":"Under jtkmetalcraft.com.au, reported by PhishDestroy","first_observed":"2026-11-05T09:26:25.293Z","first_published":"2026-11-05T09:50:27.766Z","source":"phishdestroy","source_name":"PhishDestroy","under":"jtkmetalcraft.com.au","source_url":"https://phishdestroy.io/domain/jtkmetalcraft.com.au/"}],"url":"https://domainspoof.com/live?show=all&q=www.jtkmetalcraft.com.au"},{"hostname":"www.juancitosports.com","first_observed":"2026-11-05T09:00:36.557Z","first_published":"2026-11-05T09:50:27.766Z","brands":[],"dns":"resolved","resolved":["104.21.55.161","172.67.149.49"],"resolved_at":"2026-11-05T09:06:05Z","dns_checked_at":"2026-11-06T09:57:46.000Z","dns_since":"2026-11-05T09:57:42.000Z","findings":[{"id":"fneu4tvdikc42vmq6472f","kind":"reported_domain","summary":"Under juancitosports.com, listed by MetaMask","first_observed":"2026-11-05T09:00:36.557Z","first_published":"2026-11-05T09:50:27.766Z","source":"metamask","source_name":"MetaMask","under":"juancitosports.com"}],"url":"https://domainspoof.com/live?show=all&q=www.juancitosports.com"},{"hostname":"www.keighleyoptician.es","first_observed":"2026-11-05T09:16:04.617Z","first_published":"2026-11-05T09:50:27.766Z","brands":[],"dns":"resolved","resolved":["185.53.179.136"],"resolved_at":"2026-11-05T09:23:02Z","dns_checked_at":"2026-11-06T09:57:47.000Z","dns_since":"2026-11-05T09:57:42.000Z","findings":[{"id":"f5iil62s6jblqjligcwqv","kind":"reported_domain","summary":"Under keighleyoptician.es, reported by PhishDestroy","first_observed":"2026-11-05T09:16:04.617Z","first_published":"2026-11-05T09:50:27.766Z","source":"phishdestroy","source_name":"PhishDestroy","under":"keighleyoptician.es","source_url":"https://phishdestroy.io/domain/keighleyoptician.es/"}],"url":"https://domainspoof.com/live?show=all&q=www.keighleyoptician.es"},{"hostname":"www.lawsonlee.com","first_observed":"2026-11-05T09:16:04.617Z","first_published":"2026-11-05T09:50:27.766Z","brands":[],"dns":"resolved","resolved":["173.231.228.129"],"resolved_at":"2026-11-05T09:23:02Z","dns_checked_at":"2026-11-06T09:57:47.000Z","dns_since":"2026-11-05T09:57:42.000Z","findings":[{"id":"fr45g3rh4zcnen3wh4f67","kind":"reported_domain","summary":"Under lawsonlee.com, reported by PhishDestroy","first_observed":"2026-11-05T09:16:04.617Z","first_published":"2026-11-05T09:50:27.766Z","source":"phishdestroy","source_name":"PhishDestroy","under":"lawsonlee.com","source_url":"https://phishdestroy.io/domain/lawsonlee.com/"}],"url":"https://domainspoof.com/live?show=all&q=www.lawsonlee.com"},{"hostname":"www.meuboria.com","first_observed":"2026-11-05T09:36:12.068Z","first_published":"2026-11-05T09:50:27.766Z","brands":[],"dns":"resolved","resolved":["104.21.56.193","172.67.155.208"],"resolved_at":"2026-11-05T09:40:27Z","dns_checked_at":"2026-11-06T09:57:47.000Z","dns_since":"2026-11-05T09:57:42.000Z","findings":[{"id":"fcemnhpzcag557fwbegnf","kind":"reported_domain","summary":"Under meuboria.com, listed by CERT Polska","first_observed":"2026-11-05T09:36:12.068Z","first_published":"2026-11-05T09:50:27.766Z","source":"cert_polska","source_name":"CERT Polska","under":"meuboria.com"}],"url":"https://domainspoof.com/live?show=all&q=www.meuboria.com"},{"hostname":"www.nintendo-fr.com","first_observed":"2026-11-05T09:14:28.035Z","first_published":"2026-11-05T09:50:27.766Z","brands":[{"id":"nintendo","name":"Nintendo","url":"https://domainspoof.com/brands/nintendo"}],"dns":"resolved","resolved":["2.57.91.91"],"resolved_at":"2026-11-06T09:57:47Z","dns_checked_at":"2026-11-06T09:57:47.000Z","dns_since":"2026-11-05T09:57:42.000Z","findings":[{"id":"f5mwcnoqk2im3grkokdgl","kind":"phishing_infrastructure","summary":"Resolved to 2.57.91.91, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T09:14:28.035Z","first_published":"2026-11-05T09:50:27.766Z","address":"2.57.91.91","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/nintendo"},{"hostname":"www.norvelpoint.com","first_observed":"2026-11-05T09:00:36.557Z","first_published":"2026-11-05T09:50:27.766Z","brands":[],"dns":"resolved","resolved":["104.18.2.225"],"resolved_at":"2026-11-05T09:06:05Z","dns_checked_at":"2026-11-06T09:57:47.000Z","dns_since":"2026-11-05T09:57:42.000Z","findings":[{"id":"fvvdy3vjwhesplaf3v7ry","kind":"reported_domain","summary":"Under norvelpoint.com, listed by CERT Polska","first_observed":"2026-11-05T09:00:36.557Z","first_published":"2026-11-05T09:50:27.766Z","source":"cert_polska","source_name":"CERT Polska","under":"norvelpoint.com"}],"url":"https://domainspoof.com/live?show=all&q=www.norvelpoint.com"},{"hostname":"www.orientalmining.com","first_observed":"2026-11-05T08:41:03.613Z","first_published":"2026-11-05T09:50:27.766Z","brands":[],"dns":"resolved","resolved":["65.181.124.4"],"resolved_at":"2026-11-05T08:41:13Z","dns_checked_at":"2026-11-06T09:57:47.000Z","dns_since":"2026-11-05T09:57:42.000Z","findings":[{"id":"fchwyeip4stqmhggbsaes","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T08:41:03.613Z","first_published":"2026-11-05T09:50:27.766Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=www.orientalmining.com"},{"hostname":"www.pager.qfxbackup.com","first_observed":"2026-11-05T08:46:43.679Z","first_published":"2026-11-05T09:50:27.766Z","brands":[],"dns":"resolved","resolved":["102.212.246.67"],"resolved_at":"2026-11-05T08:47:16Z","dns_checked_at":"2026-11-06T09:57:47.000Z","dns_since":"2026-11-05T09:57:42.000Z","findings":[{"id":"forui42xd5h3abkwzfzo7","kind":"reported_domain","summary":"Under qfxbackup.com, reported by PhishDestroy","first_observed":"2026-11-05T08:46:43.679Z","first_published":"2026-11-05T09:50:27.766Z","source":"phishdestroy","source_name":"PhishDestroy","under":"qfxbackup.com","source_url":"https://phishdestroy.io/domain/qfxbackup.com/"}],"url":"https://domainspoof.com/live?show=all&q=www.pager.qfxbackup.com"},{"hostname":"www.pay-bitrefill.com-cp01-esim-gift.com","first_observed":"2026-11-05T09:06:06.644Z","first_published":"2026-11-05T09:50:27.766Z","brands":[{"id":"bitrefill","name":"Bitrefill","url":"https://domainspoof.com/brands/bitrefill"}],"dns":"resolved","resolved":["62.60.226.39"],"resolved_at":"2026-11-06T09:57:47Z","dns_checked_at":"2026-11-06T09:57:47.000Z","dns_since":"2026-11-05T09:57:42.000Z","findings":[{"id":"fwl4tqu5kngbqmbzll4wf","kind":"spamhaus_drop","summary":"Resolved to 62.60.226.39 on Spamhaus DROP","first_observed":"2026-11-05T09:06:06.644Z","first_published":"2026-11-05T09:50:27.766Z","address":"62.60.226.39","list":"spamhaus_drop","list_name":"Spamhaus DROP"}],"url":"https://domainspoof.com/brands/bitrefill"},{"hostname":"www.pulse-bridge.com","first_observed":"2026-11-05T09:36:12.068Z","first_published":"2026-11-05T09:50:27.766Z","brands":[],"dns":"resolved","resolved":["104.21.81.148","172.67.162.60"],"resolved_at":"2026-11-05T09:40:27Z","dns_checked_at":"2026-11-06T09:57:47.000Z","dns_since":"2026-11-05T09:57:42.000Z","findings":[{"id":"fmq3qyiyv7maiyr5bmuuj","kind":"reported_domain","summary":"Under pulse-bridge.com, reported by PhishDestroy","first_observed":"2026-11-05T09:36:12.068Z","first_published":"2026-11-05T09:50:27.766Z","source":"phishdestroy","source_name":"PhishDestroy","under":"pulse-bridge.com","source_url":"https://phishdestroy.io/domain/pulse-bridge.com/"}],"url":"https://domainspoof.com/live?show=all&q=www.pulse-bridge.com"},{"hostname":"www.rds.professorflapjacks.com","first_observed":"2026-11-05T09:41:19.995Z","first_published":"2026-11-05T09:50:27.766Z","brands":[],"dns":"resolved","resolved":["185.149.120.183"],"resolved_at":"2026-11-05T09:43:39Z","dns_checked_at":"2026-11-06T09:57:47.000Z","dns_since":"2026-11-05T09:57:42.000Z","findings":[{"id":"fjucmbhfpm5vjvzxnj6yr","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T09:41:19.995Z","first_published":"2026-11-05T09:50:27.766Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/www.rds.professorflapjacks.com/"}],"url":"https://domainspoof.com/live?show=all&q=www.rds.professorflapjacks.com"},{"hostname":"www.staging.admin.islamhorizon.com","first_observed":"2026-11-05T09:41:19.995Z","first_published":"2026-11-05T09:50:27.766Z","brands":[],"dns":"resolved","resolved":["185.149.120.183"],"resolved_at":"2026-11-05T09:43:39Z","dns_checked_at":"2026-11-06T09:57:47.000Z","dns_since":"2026-11-05T09:57:42.000Z","findings":[{"id":"fxszkbguakagahux2nnas","kind":"reported_domain","summary":"Under staging.admin.islamhorizon.com, reported by PhishDestroy","first_observed":"2026-11-05T09:41:19.995Z","first_published":"2026-11-05T09:50:27.766Z","source":"phishdestroy","source_name":"PhishDestroy","under":"staging.admin.islamhorizon.com","source_url":"https://phishdestroy.io/domain/staging.admin.islamhorizon.com/"}],"url":"https://domainspoof.com/live?show=all&q=www.staging.admin.islamhorizon.com"},{"hostname":"www.taobao-alibabainfo.com","first_observed":"2026-11-05T09:11:24.582Z","first_published":"2026-11-05T09:50:27.766Z","brands":[{"id":"alibaba","name":"Alibaba","url":"https://domainspoof.com/brands/alibaba"}],"dns":"resolved","resolved":["202.61.139.85","27.124.5.22"],"resolved_at":"2026-11-06T09:57:47Z","dns_checked_at":"2026-11-06T09:57:47.000Z","findings":[{"id":"fonv6v4kbtwteggdjeacr","kind":"spamhaus_drop","summary":"Resolved to 202.61.139.85 on Spamhaus DROP","first_observed":"2026-11-05T09:11:24.582Z","first_published":"2026-11-05T09:50:27.766Z","address":"202.61.139.85","list":"spamhaus_drop","list_name":"Spamhaus DROP"}],"url":"https://domainspoof.com/brands/alibaba"},{"hostname":"www.vpn1.professorflapjacks.com","first_observed":"2026-11-05T09:41:19.995Z","first_published":"2026-11-05T09:50:27.766Z","brands":[],"dns":"resolved","resolved":["185.149.120.183"],"resolved_at":"2026-11-05T09:43:39Z","dns_checked_at":"2026-11-06T09:57:47.000Z","dns_since":"2026-11-05T09:57:42.000Z","findings":[{"id":"fkjxetreoecoayhic6ocn","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T09:41:19.995Z","first_published":"2026-11-05T09:50:27.766Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/www.vpn1.professorflapjacks.com/"}],"url":"https://domainspoof.com/live?show=all&q=www.vpn1.professorflapjacks.com"},{"hostname":"xinkizythex.com","first_observed":"2026-11-05T09:21:13.732Z","first_published":"2026-11-05T09:50:27.766Z","brands":[],"dns":"resolved","resolved":["104.21.87.208","172.67.146.112"],"resolved_at":"2026-11-05T09:27:23Z","dns_checked_at":"2026-11-06T09:57:47.000Z","dns_since":"2026-11-05T09:57:42.000Z","findings":[{"id":"foeowwj6lnvzlmhoph7qf","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T09:21:13.732Z","first_published":"2026-11-05T09:50:27.766Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=xinkizythex.com"},{"hostname":"xmrblockchain.com","first_observed":"2026-11-05T09:16:04.617Z","first_published":"2026-11-05T09:50:27.766Z","brands":[],"dns":"resolved","resolved":["34.111.179.208"],"resolved_at":"2026-11-05T09:23:03Z","dns_checked_at":"2026-11-06T09:57:47.000Z","dns_since":"2026-11-05T09:57:42.000Z","findings":[{"id":"f7vo43bjsrjut2qp7tq4l","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T09:16:04.617Z","first_published":"2026-11-05T09:50:27.766Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/xmrblockchain.com/"}],"url":"https://domainspoof.com/live?show=all&q=xmrblockchain.com"},{"hostname":"ybhkodm.com","first_observed":"2026-11-05T09:36:12.068Z","first_published":"2026-11-05T09:50:27.766Z","brands":[{"id":"apple","name":"Apple","url":"https://domainspoof.com/brands/apple"}],"dns":"resolved","resolved":["183.136.138.174"],"resolved_at":"2026-11-05T09:40:29Z","dns_checked_at":"2026-11-06T09:57:47.000Z","dns_since":"2026-11-05T09:57:42.000Z","findings":[{"id":"f75rkzkputdp5uyrrx5zk","kind":"reported_domain","summary":"Listed by JPCERT/CC as imitating Apple Account","first_observed":"2026-11-05T09:36:12.068Z","first_published":"2026-11-05T09:50:27.766Z","source":"jpcert","source_name":"JPCERT/CC","claim":{"brand":"Apple Account"}}],"url":"https://domainspoof.com/brands/apple"},{"hostname":"zarareb.com","first_observed":"2026-11-05T09:16:04.617Z","first_published":"2026-11-05T09:50:27.766Z","brands":[],"dns":"resolved","resolved":["52.223.13.41"],"resolved_at":"2026-11-05T09:23:04Z","dns_checked_at":"2026-11-06T09:57:47.000Z","dns_since":"2026-11-05T09:57:42.000Z","findings":[{"id":"ffrc3x6kqnfogbbqlmr5c","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T09:16:04.617Z","first_published":"2026-11-05T09:50:27.766Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=zarareb.com"},{"hostname":"zenlaunch.app","first_observed":"2026-11-05T08:51:54.108Z","first_published":"2026-11-05T09:50:27.766Z","brands":[],"dns":"resolved","resolved":["104.21.30.96","172.67.172.183"],"resolved_at":"2026-11-05T08:52:09Z","dns_checked_at":"2026-11-06T09:57:47.000Z","dns_since":"2026-11-05T09:57:42.000Z","findings":[{"id":"fazkrhytcby7xogc3mrcc","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T08:51:54.108Z","first_published":"2026-11-05T09:50:27.766Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/zenlaunch.app/"}],"url":"https://domainspoof.com/live?show=all&q=zenlaunch.app"},{"hostname":"audi.com.pl","first_observed":"2026-11-05T08:43:18.000Z","first_published":"2026-11-05T08:43:18.000Z","brands":[{"id":"audi","name":"Audi","url":"https://domainspoof.com/brands/audi"}],"dns":"resolved","resolved":["185.253.212.22"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of audi.com.au (same name, other ending), resolved to 185.253.212.22, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T08:43:18.000Z","first_published":"2026-11-05T08:43:18.000Z","of":"audi.com.au","spelling":"tld","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"185.253.212.22","flagged_at":"2026-11-05T08:43:18Z"}]}],"url":"https://domainspoof.com/brands/audi"},{"hostname":"barclays.com.pl","first_observed":"2026-11-05T08:43:18.000Z","first_published":"2026-11-05T08:43:18.000Z","brands":[{"id":"barclays","name":"Barclays","url":"https://domainspoof.com/brands/barclays"}],"dns":"resolved","resolved":["2.57.91.91"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of barclays.co.uk (same name, other ending), resolved to 2.57.91.91, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T08:43:18.000Z","first_published":"2026-11-05T08:43:18.000Z","of":"barclays.co.uk","spelling":"tld","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"2.57.91.91","flagged_at":"2026-11-05T08:43:18Z"}]}],"url":"https://domainspoof.com/brands/barclays"},{"hostname":"spid.studio","first_observed":"2026-11-05T08:43:18.000Z","first_published":"2026-11-05T08:43:18.000Z","brands":[{"id":"spid","name":"SPID","url":"https://domainspoof.com/brands/spid"}],"dns":"resolved","resolved":["195.110.124.133"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of spid.gov.it (same name, other ending), resolved to 195.110.124.133, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T08:43:18.000Z","first_published":"2026-11-05T08:43:18.000Z","of":"spid.gov.it","spelling":"tld","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"195.110.124.133","flagged_at":"2026-11-05T08:43:18Z"}]}],"url":"https://domainspoof.com/brands/spid"},{"hostname":"trustwallet.cards","first_observed":"2026-11-05T08:43:18.000Z","first_published":"2026-11-05T08:43:18.000Z","brands":[{"id":"trust-wallet","name":"Trust Wallet","url":"https://domainspoof.com/brands/trust-wallet"}],"dns":"no_address","resolved":[],"findings":[{"kind":"lookalike","summary":"Registered lookalike of trustwallet.com (same name, other ending), listed by MetaMask","first_observed":"2026-11-05T08:43:18.000Z","first_published":"2026-11-05T08:43:18.000Z","of":"trustwallet.com","spelling":"tld","found_by":"zone_file","listings":[{"kind":"reported","source":"metamask","source_name":"MetaMask","host":"trustwallet.cards","flagged_at":"2026-11-05T08:43:18Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/trust-wallet"},{"hostname":"trustwallet.com.sb","first_observed":"2026-11-05T08:43:18.000Z","first_published":"2026-11-05T08:43:18.000Z","brands":[{"id":"trust-wallet","name":"Trust Wallet","url":"https://domainspoof.com/brands/trust-wallet"}],"dns":"resolved","resolved":["127.0.0.1"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of trustwallet.com (same name, other ending), listed by MetaMask","first_observed":"2026-11-05T08:43:18.000Z","first_published":"2026-11-05T08:43:18.000Z","of":"trustwallet.com","spelling":"tld","found_by":"dns_sweep","listings":[{"kind":"reported","source":"metamask","source_name":"MetaMask","host":"trustwallet.com.sb","flagged_at":"2026-11-05T08:43:18Z"}]}],"url":"https://domainspoof.com/brands/trust-wallet"},{"hostname":"13-governance-orbio.pages.dev","first_observed":"2026-11-05T07:31:10.076Z","first_published":"2026-11-05T08:42:24.679Z","brands":[],"dns":"not_found","resolved":["172.66.45.13","172.66.46.243"],"resolved_at":"2026-11-05T07:31:18Z","dns_checked_at":"2026-11-06T08:45:34.000Z","dns_since":"2026-11-05T08:45:05.000Z","findings":[{"id":"fjlolj55knruwmtvznevx","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T07:31:10.076Z","first_published":"2026-11-05T08:42:24.679Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=13-governance-orbio.pages.dev"},{"hostname":"14-governance-orbio.pages.dev","first_observed":"2026-11-05T07:36:20.749Z","first_published":"2026-11-05T08:42:24.679Z","brands":[],"dns":"not_found","resolved":["172.66.44.63","172.66.47.193"],"resolved_at":"2026-11-05T07:36:29Z","dns_checked_at":"2026-11-06T08:45:34.000Z","dns_since":"2026-11-05T08:45:05.000Z","findings":[{"id":"fmiuirvcl5h3lr2kt7q3v","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T07:36:20.749Z","first_published":"2026-11-05T08:42:24.679Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=14-governance-orbio.pages.dev"},{"hostname":"15-governance-orbio.pages.dev","first_observed":"2026-11-05T07:41:00.909Z","first_published":"2026-11-05T08:42:24.679Z","brands":[],"dns":"not_found","resolved":["172.66.44.179","172.66.47.77"],"resolved_at":"2026-11-05T07:41:06Z","dns_checked_at":"2026-11-06T08:45:34.000Z","dns_since":"2026-11-05T08:45:05.000Z","findings":[{"id":"fk63lxyaftn36sz5wewe6","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T07:41:00.909Z","first_published":"2026-11-05T08:42:24.679Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=15-governance-orbio.pages.dev"},{"hostname":"16-governance-orbio.pages.dev","first_observed":"2026-11-05T07:46:08.429Z","first_published":"2026-11-05T08:42:24.679Z","brands":[],"dns":"not_found","resolved":["172.66.44.117","172.66.47.139"],"resolved_at":"2026-11-05T07:46:12Z","dns_checked_at":"2026-11-06T08:45:34.000Z","dns_since":"2026-11-05T08:45:05.000Z","findings":[{"id":"fz2n4lqqwkill7j7z7nts","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T07:46:08.429Z","first_published":"2026-11-05T08:42:24.679Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=16-governance-orbio.pages.dev"},{"hostname":"17-governance-orbio.pages.dev","first_observed":"2026-11-05T07:51:14.197Z","first_published":"2026-11-05T08:42:24.679Z","brands":[],"dns":"not_found","resolved":["172.66.44.157","172.66.47.99"],"resolved_at":"2026-11-05T07:51:20Z","dns_checked_at":"2026-11-06T08:45:34.000Z","dns_since":"2026-11-05T08:45:05.000Z","findings":[{"id":"f76gsyfjzvbnmspec63w2","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T07:51:14.197Z","first_published":"2026-11-05T08:42:24.679Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=17-governance-orbio.pages.dev"},{"hostname":"18-governance-orbio.pages.dev","first_observed":"2026-11-05T07:56:22.026Z","first_published":"2026-11-05T08:42:24.679Z","brands":[],"dns":"not_found","resolved":["172.66.45.10","172.66.46.246"],"resolved_at":"2026-11-05T07:56:29Z","dns_checked_at":"2026-11-06T08:45:34.000Z","dns_since":"2026-11-05T08:45:05.000Z","findings":[{"id":"f5r4cenh7ls35wyobldl6","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T07:56:22.026Z","first_published":"2026-11-05T08:42:24.679Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=18-governance-orbio.pages.dev"},{"hostname":"19-governance-orbio.pages.dev","first_observed":"2026-11-05T08:00:58.346Z","first_published":"2026-11-05T08:42:24.679Z","brands":[],"dns":"not_found","resolved":["172.66.44.87","172.66.47.169"],"resolved_at":"2026-11-05T08:01:03Z","dns_checked_at":"2026-11-06T08:45:34.000Z","dns_since":"2026-11-05T08:45:05.000Z","findings":[{"id":"fka2vc4fa6hbieuvkzbyl","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T08:00:58.346Z","first_published":"2026-11-05T08:42:24.679Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=19-governance-orbio.pages.dev"},{"hostname":"20-governance-orbio.pages.dev","first_observed":"2026-11-05T08:05:35.267Z","first_published":"2026-11-05T08:42:24.679Z","brands":[],"dns":"not_found","resolved":[],"resolved_at":"2026-11-05T08:11:28Z","dns_checked_at":"2026-11-06T08:45:34.000Z","dns_since":"2026-11-05T08:45:05.000Z","findings":[{"id":"fg6h7xaog2znxvprskmb4","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T08:05:35.267Z","first_published":"2026-11-05T08:42:24.679Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=20-governance-orbio.pages.dev"},{"hostname":"21-governance-orbio.pages.dev","first_observed":"2026-11-05T08:10:43.722Z","first_published":"2026-11-05T08:42:24.679Z","brands":[],"dns":"not_found","resolved":["172.66.44.92","172.66.47.164"],"resolved_at":"2026-11-05T08:10:50Z","dns_checked_at":"2026-11-06T08:45:34.000Z","dns_since":"2026-11-05T08:45:05.000Z","findings":[{"id":"f6mrylq3gdxdv7ijejjiv","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T08:10:43.722Z","first_published":"2026-11-05T08:42:24.679Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=21-governance-orbio.pages.dev"},{"hostname":"22-governance-orbio.pages.dev","first_observed":"2026-11-05T08:15:51.469Z","first_published":"2026-11-05T08:42:24.679Z","brands":[],"dns":"not_found","resolved":["172.66.45.26","172.66.46.230"],"resolved_at":"2026-11-05T08:15:57Z","dns_checked_at":"2026-11-06T08:45:34.000Z","dns_since":"2026-11-05T08:45:05.000Z","findings":[{"id":"fppll55pwdbutkcdlsfg6","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T08:15:51.469Z","first_published":"2026-11-05T08:42:24.679Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=22-governance-orbio.pages.dev"},{"hostname":"23-governance-orbio.pages.dev","first_observed":"2026-11-05T08:21:00.540Z","first_published":"2026-11-05T08:42:24.679Z","brands":[],"dns":"not_found","resolved":["172.66.44.139","172.66.47.117"],"resolved_at":"2026-11-05T08:21:08Z","dns_checked_at":"2026-11-06T08:45:34.000Z","dns_since":"2026-11-05T08:45:05.000Z","findings":[{"id":"fg2hyh6yhph75hklc4mds","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T08:21:00.540Z","first_published":"2026-11-05T08:42:24.679Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=23-governance-orbio.pages.dev"},{"hostname":"24-governance-orbio.pages.dev","first_observed":"2026-11-05T08:26:09.868Z","first_published":"2026-11-05T08:42:24.679Z","brands":[],"dns":"not_found","resolved":["172.66.44.92","172.66.47.164"],"resolved_at":"2026-11-05T08:26:20Z","dns_checked_at":"2026-11-06T08:45:34.000Z","dns_since":"2026-11-05T08:45:05.000Z","findings":[{"id":"fkfojxodzr23dxw6gaw7e","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T08:26:09.868Z","first_published":"2026-11-05T08:42:24.679Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=24-governance-orbio.pages.dev"},{"hostname":"25-governance-orbio.pages.dev","first_observed":"2026-11-05T08:31:20.384Z","first_published":"2026-11-05T08:42:24.679Z","brands":[],"dns":"not_found","resolved":["172.66.44.93","172.66.47.163"],"resolved_at":"2026-11-05T08:31:26Z","dns_checked_at":"2026-11-06T08:45:34.000Z","dns_since":"2026-11-05T08:45:05.000Z","findings":[{"id":"fpc6fqvokz465htfbgzlr","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T08:31:20.384Z","first_published":"2026-11-05T08:42:24.679Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=25-governance-orbio.pages.dev"},{"hostname":"26-governance-orbio.pages.dev","first_observed":"2026-11-05T08:36:27.026Z","first_published":"2026-11-05T08:42:24.679Z","brands":[],"dns":"not_found","resolved":[],"resolved_at":"2026-11-05T08:41:49Z","dns_checked_at":"2026-11-06T08:45:34.000Z","dns_since":"2026-11-05T08:45:05.000Z","findings":[{"id":"fl7jaegbk3lrympobefid","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T08:36:27.026Z","first_published":"2026-11-05T08:42:24.679Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=26-governance-orbio.pages.dev"},{"hostname":"91cj8yy.cyou","first_observed":"2026-11-05T08:16:48.887Z","first_published":"2026-11-05T08:42:24.679Z","brands":[],"dns":"resolved","resolved":["43.165.171.210"],"resolved_at":"2026-11-05T08:20:07Z","dns_checked_at":"2026-11-06T08:45:34.000Z","dns_since":"2026-11-05T08:45:05.000Z","findings":[{"id":"flgfazhyvdpsygqj2yeui","kind":"reported_domain","summary":"Reported by PhishTank","first_observed":"2026-11-05T08:16:48.887Z","first_published":"2026-11-05T08:42:24.679Z","source":"phishtank","source_name":"PhishTank","source_url":"https://phishtank.org/phish_detail.php?phish_id=9554745"}],"url":"https://domainspoof.com/live?show=all&q=91cj8yy.cyou"},{"hostname":"actulabhd73.wasmer.app","first_observed":"2026-11-05T08:16:48.887Z","first_published":"2026-11-05T08:42:24.679Z","brands":[],"dns":"resolved","resolved":["23.136.196.24","23.136.196.25","2602:f6ac:400::1","2602:f6ac:400::2"],"resolved_at":"2026-11-05T08:20:07Z","dns_checked_at":"2026-11-06T08:45:34.000Z","dns_since":"2026-11-05T08:45:05.000Z","findings":[{"id":"fzbcmtoaosrczmhi3yhgy","kind":"reported_domain","summary":"Reported by PhishTank","first_observed":"2026-11-05T08:16:48.887Z","first_published":"2026-11-05T08:42:24.679Z","source":"phishtank","source_name":"PhishTank","source_url":"https://phishtank.org/phish_detail.php?phish_id=9554815"}],"url":"https://domainspoof.com/live?show=all&q=actulabhd73.wasmer.app"},{"hostname":"admin.eainbet.com","first_observed":"2026-11-05T08:21:00.540Z","first_published":"2026-11-05T08:42:24.679Z","brands":[],"dns":"resolved","resolved":["185.53.179.136"],"resolved_at":"2026-11-05T08:21:11Z","dns_checked_at":"2026-11-06T08:45:34.000Z","dns_since":"2026-11-05T08:45:05.000Z","findings":[{"id":"fv7mns2vx33w5x7qmma63","kind":"reported_domain","summary":"Under eainbet.com, listed by MetaMask","first_observed":"2026-11-05T08:21:00.540Z","first_published":"2026-11-05T08:42:24.679Z","source":"metamask","source_name":"MetaMask","under":"eainbet.com"}],"url":"https://domainspoof.com/live?show=all&q=admin.eainbet.com"},{"hostname":"aizo.eu.cc","first_observed":"2026-11-05T08:31:20.384Z","first_published":"2026-11-05T08:42:24.679Z","brands":[],"dns":"resolved","resolved":["104.21.48.20","172.67.176.5"],"resolved_at":"2026-11-05T08:39:11Z","dns_checked_at":"2026-11-06T08:45:34.000Z","dns_since":"2026-11-05T08:45:05.000Z","findings":[{"id":"ffnu7ykr5crhtiesapdua","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T08:31:20.384Z","first_published":"2026-11-05T08:42:24.679Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=aizo.eu.cc"},{"hostname":"alexistogel-x-dorahoki-040.eliaruizwork.com","first_observed":"2026-11-05T07:31:10.076Z","first_published":"2026-11-05T08:42:24.679Z","brands":[],"dns":"resolved","resolved":["104.21.13.225","172.67.133.81"],"resolved_at":"2026-11-05T07:31:21Z","dns_checked_at":"2026-11-06T08:45:34.000Z","dns_since":"2026-11-05T08:45:05.000Z","findings":[{"id":"ftqdlyz6uvrmsvyvrzoep","kind":"reported_domain","summary":"Under eliaruizwork.com, reported by PhishDestroy","first_observed":"2026-11-05T07:31:10.076Z","first_published":"2026-11-05T08:42:24.679Z","source":"phishdestroy","source_name":"PhishDestroy","under":"eliaruizwork.com","source_url":"https://phishdestroy.io/domain/eliaruizwork.com/"}],"url":"https://domainspoof.com/live?show=all&q=alexistogel-x-dorahoki-040.eliaruizwork.com"},{"hostname":"algolux.net","first_observed":"2026-11-05T08:26:09.868Z","first_published":"2026-11-05T08:42:24.679Z","brands":[],"dns":"resolved","resolved":["104.21.53.6","172.67.206.202"],"resolved_at":"2026-11-05T08:31:49Z","dns_checked_at":"2026-11-06T08:45:34.000Z","dns_since":"2026-11-05T08:45:05.000Z","findings":[{"id":"fm2rqbb3qgmkm2qhz6wfk","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T08:26:09.868Z","first_published":"2026-11-05T08:42:24.679Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=algolux.net"},{"hostname":"alpha.tryliquid.app","first_observed":"2026-11-05T07:56:22.026Z","first_published":"2026-11-05T08:42:24.679Z","brands":[],"dns":"resolved","resolved":["104.21.62.131","172.67.136.42"],"resolved_at":"2026-11-05T07:56:32Z","dns_checked_at":"2026-11-06T08:45:34.000Z","dns_since":"2026-11-05T08:45:05.000Z","findings":[{"id":"fenhzlt566k7w7prnci4b","kind":"reported_domain","summary":"Under tryliquid.app, reported by PhishDestroy","first_observed":"2026-11-05T07:56:22.026Z","first_published":"2026-11-05T08:42:24.679Z","source":"phishdestroy","source_name":"PhishDestroy","under":"tryliquid.app","source_url":"https://phishdestroy.io/domain/tryliquid.app/"}],"url":"https://domainspoof.com/live?show=all&q=alpha.tryliquid.app"},{"hostname":"ankama-compte.com","first_observed":"2026-11-05T07:56:31.488Z","first_published":"2026-11-05T08:42:24.679Z","brands":[{"id":"ankama","name":"Ankama","url":"https://domainspoof.com/brands/ankama"}],"dns":"resolved","resolved":["79.133.41.203"],"resolved_at":"2026-11-06T08:45:34Z","dns_checked_at":"2026-11-06T08:45:34.000Z","dns_since":"2026-11-05T08:45:05.000Z","findings":[{"id":"fyhw62pgupafurzlltqsn","kind":"phishing_infrastructure","summary":"Resolved to 79.133.41.203, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T07:56:31.488Z","first_published":"2026-11-05T08:42:24.679Z","address":"79.133.41.203","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/ankama"},{"hostname":"api.olympex.io","first_observed":"2026-11-05T08:05:35.267Z","first_published":"2026-11-05T08:42:24.679Z","brands":[],"dns":"resolved","resolved":["34.235.83.22","54.197.227.32"],"resolved_at":"2026-11-05T08:11:45Z","dns_checked_at":"2026-11-06T08:45:34.000Z","dns_since":"2026-11-05T08:45:05.000Z","findings":[{"id":"fbz3qefvin2vnxpaoiekb","kind":"reported_domain","summary":"Under olympex.io, listed by MetaMask","first_observed":"2026-11-05T08:05:35.267Z","first_published":"2026-11-05T08:42:24.679Z","source":"metamask","source_name":"MetaMask","under":"olympex.io"}],"url":"https://domainspoof.com/live?show=all&q=api.olympex.io"},{"hostname":"api.truenorthtradingplatform-com.financecryptoworld.com","first_observed":"2026-11-05T08:21:00.540Z","first_published":"2026-11-05T08:42:24.679Z","brands":[],"dns":"resolved","resolved":["104.21.10.130","172.67.131.121"],"resolved_at":"2026-11-05T08:21:11Z","dns_checked_at":"2026-11-06T08:45:34.000Z","dns_since":"2026-11-05T08:45:05.000Z","findings":[{"id":"fw7e6734fgweq7lhsb72t","kind":"reported_domain","summary":"Under financecryptoworld.com, listed by CERT Polska","first_observed":"2026-11-05T08:21:00.540Z","first_published":"2026-11-05T08:42:24.679Z","source":"cert_polska","source_name":"CERT Polska","under":"financecryptoworld.com"}],"url":"https://domainspoof.com/live?show=all&q=api.truenorthtradingplatform-com.financecryptoworld.com"},{"hostname":"app-spectrafinance.com","first_observed":"2026-11-05T08:36:27.026Z","first_published":"2026-11-05T08:42:24.679Z","brands":[],"dns":"resolved","resolved":["104.21.73.110","172.67.161.209"],"resolved_at":"2026-11-05T08:42:09Z","dns_checked_at":"2026-11-06T08:45:34.000Z","dns_since":"2026-11-05T08:45:05.000Z","findings":[{"id":"fg6cwwld2bu36g3xkbls2","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T08:36:27.026Z","first_published":"2026-11-05T08:42:24.679Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=app-spectrafinance.com"},{"hostname":"arvenoluxe-ai.com","first_observed":"2026-11-05T08:31:20.384Z","first_published":"2026-11-05T08:42:24.679Z","brands":[],"dns":"resolved","resolved":["104.21.63.75","172.67.170.69"],"resolved_at":"2026-11-05T08:39:11Z","dns_checked_at":"2026-11-06T08:45:34.000Z","dns_since":"2026-11-05T08:45:05.000Z","findings":[{"id":"fevnloh3nxofvnnoapb6w","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T08:31:20.384Z","first_published":"2026-11-05T08:42:24.679Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=arvenoluxe-ai.com"},{"hostname":"assets-ledger.com","first_observed":"2026-11-05T08:31:20.384Z","first_published":"2026-11-05T08:42:24.679Z","brands":[],"dns":"resolved","resolved":["104.21.8.70","172.67.156.232"],"resolved_at":"2026-11-05T08:39:11Z","dns_checked_at":"2026-11-06T08:45:34.000Z","dns_since":"2026-11-05T08:45:05.000Z","findings":[{"id":"fyd7pj7tar2jlims736w7","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T08:31:20.384Z","first_published":"2026-11-05T08:42:24.679Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=assets-ledger.com"},{"hostname":"audius.cc","first_observed":"2026-11-05T07:51:14.197Z","first_published":"2026-11-05T08:42:24.679Z","brands":[],"dns":"resolved","resolved":["104.21.85.119","172.67.205.151"],"resolved_at":"2026-11-05T07:51:23Z","dns_checked_at":"2026-11-06T08:45:34.000Z","dns_since":"2026-11-05T08:45:05.000Z","findings":[{"id":"frmlfp6vtfdqmeravgfmi","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T07:51:14.197Z","first_published":"2026-11-05T08:42:24.679Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/audius.cc/"}],"url":"https://domainspoof.com/live?show=all&q=audius.cc"},{"hostname":"aurilux-syncv11.live","first_observed":"2026-11-05T07:46:08.429Z","first_published":"2026-11-05T08:42:24.679Z","brands":[],"dns":"resolved","resolved":["104.21.34.152","172.67.162.22"],"resolved_at":"2026-11-05T07:56:32Z","dns_checked_at":"2026-11-06T08:45:34.000Z","dns_since":"2026-11-05T08:45:05.000Z","findings":[{"id":"fu7jj7f77dl3svt3hqeip","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T07:46:08.429Z","first_published":"2026-11-05T08:42:24.679Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=aurilux-syncv11.live"},{"hostname":"auroracapital.live","first_observed":"2026-11-05T07:31:10.076Z","first_published":"2026-11-05T08:42:24.679Z","brands":[],"dns":"resolved","resolved":["104.21.37.14","172.67.202.104"],"resolved_at":"2026-11-05T07:31:22Z","dns_checked_at":"2026-11-06T08:45:34.000Z","dns_since":"2026-11-05T08:45:05.000Z","findings":[{"id":"f7fh56frjaxcfnhm6mxsg","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T07:31:10.076Z","first_published":"2026-11-05T08:42:24.679Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=auroracapital.live"},{"hostname":"ausiwfz.art","first_observed":"2026-11-05T08:16:48.887Z","first_published":"2026-11-05T08:42:24.679Z","brands":[],"dns":"not_found","resolved":["43.153.167.40"],"resolved_at":"2026-11-05T08:20:07Z","dns_checked_at":"2026-11-06T08:45:34.000Z","dns_since":"2026-11-05T08:45:05.000Z","findings":[{"id":"fm7qpaiw27neblgc3ppfd","kind":"reported_domain","summary":"Reported by PhishTank","first_observed":"2026-11-05T08:16:48.887Z","first_published":"2026-11-05T08:42:24.679Z","source":"phishtank","source_name":"PhishTank","source_url":"https://phishtank.org/phish_detail.php?phish_id=9554757"}],"url":"https://domainspoof.com/live?show=all&q=ausiwfz.art"},{"hostname":"autoconfig.ankama-compte.com","first_observed":"2026-11-05T07:56:38.806Z","first_published":"2026-11-05T08:42:24.679Z","brands":[{"id":"ankama","name":"Ankama","url":"https://domainspoof.com/brands/ankama"}],"dns":"resolved","resolved":["79.133.41.203"],"resolved_at":"2026-11-06T08:45:34Z","dns_checked_at":"2026-11-06T08:45:34.000Z","dns_since":"2026-11-05T08:45:05.000Z","findings":[{"id":"f2e7sectqvr4ilv25ghzi","kind":"phishing_infrastructure","summary":"Resolved to 79.133.41.203, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T07:56:38.806Z","first_published":"2026-11-05T08:42:24.679Z","address":"79.133.41.203","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/ankama"},{"hostname":"autodiscover.ankama-compte.com","first_observed":"2026-11-05T07:56:38.856Z","first_published":"2026-11-05T08:42:24.679Z","brands":[{"id":"ankama","name":"Ankama","url":"https://domainspoof.com/brands/ankama"}],"dns":"resolved","resolved":["79.133.41.203"],"resolved_at":"2026-11-06T08:45:34Z","dns_checked_at":"2026-11-06T08:45:34.000Z","dns_since":"2026-11-05T08:45:05.000Z","findings":[{"id":"fq5rhkdpyuhggm7ar3te4","kind":"phishing_infrastructure","summary":"Resolved to 79.133.41.203, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T07:56:38.856Z","first_published":"2026-11-05T08:42:24.679Z","address":"79.133.41.203","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/ankama"},{"hostname":"autodiscover.streijl.eu","first_observed":"2026-11-05T07:46:08.429Z","first_published":"2026-11-05T08:42:24.679Z","brands":[],"dns":"resolved","resolved":["185.87.187.239","2a00:f10:305:0:1c00:c9ff:fe00:527"],"resolved_at":"2026-11-05T07:56:38Z","dns_checked_at":"2026-11-06T08:45:34.000Z","dns_since":"2026-11-05T08:45:05.000Z","findings":[{"id":"f7x4haynv7rtsjqeyk5ss","kind":"reported_domain","summary":"Under streijl.eu, reported by PhishDestroy","first_observed":"2026-11-05T07:46:08.429Z","first_published":"2026-11-05T08:42:24.679Z","source":"phishdestroy","source_name":"PhishDestroy","under":"streijl.eu","source_url":"https://phishdestroy.io/domain/streijl.eu/"}],"url":"https://domainspoof.com/live?show=all&q=autodiscover.streijl.eu"},{"hostname":"axihre.com","first_observed":"2026-11-05T08:05:35.267Z","first_published":"2026-11-05T08:42:24.679Z","brands":[],"dns":"no_address","resolved":[],"resolved_at":"2026-11-05T08:11:49Z","dns_checked_at":"2026-11-06T08:45:34.000Z","dns_since":"2026-11-05T08:45:05.000Z","findings":[{"id":"fkcouu6da2h33u2bqx67k","kind":"reported_domain","summary":"Listed by NPA 165 (finance and insurance)","first_observed":"2026-11-05T08:05:35.267Z","first_published":"2026-11-05T08:42:24.679Z","source":"npa","source_name":"NPA 165","claim":{"category":"finance and insurance"}}],"url":"https://domainspoof.com/live?show=all&q=axihre.com"},{"hostname":"backend.indexprotraders.com","first_observed":"2026-11-05T08:00:58.346Z","first_published":"2026-11-05T08:42:24.679Z","brands":[],"dns":"resolved","resolved":["162.4.84.241"],"resolved_at":"2026-11-05T08:09:31Z","dns_checked_at":"2026-11-06T08:45:34.000Z","dns_since":"2026-11-05T08:45:05.000Z","findings":[{"id":"fu74kxivys2rxvghy47ig","kind":"reported_domain","summary":"Under indexprotraders.com, reported by PhishDestroy","first_observed":"2026-11-05T08:00:58.346Z","first_published":"2026-11-05T08:42:24.679Z","source":"phishdestroy","source_name":"PhishDestroy","under":"indexprotraders.com","source_url":"https://phishdestroy.io/domain/indexprotraders.com/"}],"url":"https://domainspoof.com/live?show=all&q=backend.indexprotraders.com"},{"hostname":"badak178-x-gasing777-036.eliaruizwork.com","first_observed":"2026-11-05T07:31:10.076Z","first_published":"2026-11-05T08:42:24.679Z","brands":[],"dns":"resolved","resolved":["104.21.13.225","172.67.133.81"],"resolved_at":"2026-11-05T07:31:22Z","dns_checked_at":"2026-11-06T08:45:34.000Z","dns_since":"2026-11-05T08:45:05.000Z","findings":[{"id":"fjuzrrfbn5t46ndtoo7j4","kind":"reported_domain","summary":"Under eliaruizwork.com, reported by PhishDestroy","first_observed":"2026-11-05T07:31:10.076Z","first_published":"2026-11-05T08:42:24.679Z","source":"phishdestroy","source_name":"PhishDestroy","under":"eliaruizwork.com","source_url":"https://phishdestroy.io/domain/eliaruizwork.com/"}],"url":"https://domainspoof.com/live?show=all&q=badak178-x-gasing777-036.eliaruizwork.com"},{"hostname":"bademadamnerede.xyz","first_observed":"2026-11-05T08:14:35.332Z","first_published":"2026-11-05T08:42:24.679Z","brands":[],"dns":"resolved","resolved":["68.183.211.249"],"resolved_at":"2026-11-05T08:14:56Z","dns_checked_at":"2026-11-06T08:45:34.000Z","dns_since":"2026-11-05T08:45:05.000Z","findings":[{"id":"fbsyd4oadzyvudxfaw2gr","kind":"reported_domain","summary":"Listed by USOM","first_observed":"2026-11-05T08:14:35.332Z","first_published":"2026-11-05T08:42:24.679Z","source":"usom","source_name":"USOM"}],"url":"https://domainspoof.com/live?show=all&q=bademadamnerede.xyz"},{"hostname":"belmont-btc365.live","first_observed":"2026-11-05T08:31:20.384Z","first_published":"2026-11-05T08:42:24.679Z","brands":[],"dns":"resolved","resolved":["104.21.61.59","172.67.206.185"],"resolved_at":"2026-11-05T08:39:30Z","dns_checked_at":"2026-11-06T08:45:34.000Z","dns_since":"2026-11-05T08:45:05.000Z","findings":[{"id":"fswebr2jilbfxoclmjd3l","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T08:31:20.384Z","first_published":"2026-11-05T08:42:24.679Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=belmont-btc365.live"},{"hostname":"beta.tryliquid.app","first_observed":"2026-11-05T07:56:22.026Z","first_published":"2026-11-05T08:42:24.679Z","brands":[],"dns":"resolved","resolved":["104.21.62.131","172.67.136.42"],"resolved_at":"2026-11-05T08:03:36Z","dns_checked_at":"2026-11-06T08:45:34.000Z","dns_since":"2026-11-05T08:45:05.000Z","findings":[{"id":"fc5zpzjnsibszhfba5niz","kind":"reported_domain","summary":"Under tryliquid.app, reported by PhishDestroy","first_observed":"2026-11-05T07:56:22.026Z","first_published":"2026-11-05T08:42:24.679Z","source":"phishdestroy","source_name":"PhishDestroy","under":"tryliquid.app","source_url":"https://phishdestroy.io/domain/tryliquid.app/"}],"url":"https://domainspoof.com/live?show=all&q=beta.tryliquid.app"},{"hostname":"binanceus.cc","first_observed":"2026-11-05T08:26:09.868Z","first_published":"2026-11-05T08:42:24.679Z","brands":[{"id":"binance","name":"Binance","url":"https://domainspoof.com/brands/binance"}],"dns":"resolved","resolved":["102.204.222.8"],"resolved_at":"2026-11-06T08:45:34Z","dns_checked_at":"2026-11-06T08:45:34.000Z","dns_since":"2026-11-05T08:45:05.000Z","findings":[{"id":"fj5o7chz5cg3uzajlypxq","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T08:26:09.868Z","first_published":"2026-11-05T08:42:24.679Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/binanceus.cc/"},{"id":"f36e3fmgqbkyvqbkblsqi","kind":"phishing_infrastructure","summary":"Resolved to 102.204.222.8, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T08:32:53.658Z","first_published":"2026-11-05T08:42:24.679Z","address":"102.204.222.8","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/binance"},{"hostname":"biovanciaengine.com","first_observed":"2026-11-05T07:36:20.749Z","first_published":"2026-11-05T08:42:24.679Z","brands":[],"dns":"resolved","resolved":["104.21.76.199","172.67.200.47"],"resolved_at":"2026-11-05T07:36:32Z","dns_checked_at":"2026-11-06T08:45:34.000Z","dns_since":"2026-11-05T08:45:05.000Z","findings":[{"id":"fpgsv2hnns2kovbplhmui","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T07:36:20.749Z","first_published":"2026-11-05T08:42:24.679Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=biovanciaengine.com"},{"hostname":"bitcharinc.vip","first_observed":"2026-11-05T07:36:20.749Z","first_published":"2026-11-05T08:42:24.679Z","brands":[],"dns":"resolved","resolved":["104.21.38.51","172.67.219.57"],"resolved_at":"2026-11-05T07:36:32Z","dns_checked_at":"2026-11-06T08:45:34.000Z","dns_since":"2026-11-05T08:45:05.000Z","findings":[{"id":"fazorqdmz6rslenolzjim","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T07:36:20.749Z","first_published":"2026-11-05T08:42:24.679Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=bitcharinc.vip"},{"hostname":"bobatoto-x-surya777-038.eliaruizwork.com","first_observed":"2026-11-05T07:31:10.076Z","first_published":"2026-11-05T08:42:24.679Z","brands":[],"dns":"resolved","resolved":["104.21.13.225","172.67.133.81"],"resolved_at":"2026-11-05T07:31:22Z","dns_checked_at":"2026-11-06T08:45:34.000Z","dns_since":"2026-11-05T08:45:05.000Z","findings":[{"id":"fvttt7sbvwvptga7aaxwj","kind":"reported_domain","summary":"Under eliaruizwork.com, reported by PhishDestroy","first_observed":"2026-11-05T07:31:10.076Z","first_published":"2026-11-05T08:42:24.679Z","source":"phishdestroy","source_name":"PhishDestroy","under":"eliaruizwork.com","source_url":"https://phishdestroy.io/domain/eliaruizwork.com/"}],"url":"https://domainspoof.com/live?show=all&q=bobatoto-x-surya777-038.eliaruizwork.com"},{"hostname":"bqn481.com","first_observed":"2026-11-05T07:51:14.197Z","first_published":"2026-11-05T08:42:24.679Z","brands":[],"dns":"resolved","resolved":["104.21.63.17","172.67.142.103"],"resolved_at":"2026-11-06T00:15:43Z","dns_checked_at":"2026-11-06T08:45:34.000Z","dns_since":"2026-11-05T08:45:05.000Z","findings":[{"id":"fkveh7s75syhbftpnwmp4","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T07:51:14.197Z","first_published":"2026-11-05T08:42:24.679Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=bqn481.com"},{"hostname":"bravesto.shop","first_observed":"2026-11-05T08:26:09.868Z","first_published":"2026-11-05T08:42:24.679Z","brands":[],"dns":"resolved","resolved":["104.18.20.248"],"resolved_at":"2026-11-05T08:32:54Z","dns_checked_at":"2026-11-06T08:45:34.000Z","dns_since":"2026-11-05T08:45:05.000Z","findings":[{"id":"fa43gylmj5yb4ckblk6uy","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T08:26:09.868Z","first_published":"2026-11-05T08:42:24.679Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=bravesto.shop"},{"hostname":"btc-adreton923.live","first_observed":"2026-11-05T07:46:08.429Z","first_published":"2026-11-05T08:42:24.679Z","brands":[],"dns":"resolved","resolved":["104.21.12.116","172.67.152.71"],"resolved_at":"2026-11-05T07:57:01Z","dns_checked_at":"2026-11-06T08:45:34.000Z","dns_since":"2026-11-05T08:45:05.000Z","findings":[{"id":"fm3xecaecnwfnnw44btns","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T07:46:08.429Z","first_published":"2026-11-05T08:42:24.679Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=btc-adreton923.live"},{"hostname":"buildernode.org","first_observed":"2026-11-05T07:41:00.909Z","first_published":"2026-11-05T08:42:24.679Z","brands":[],"dns":"resolved","resolved":["185.73.8.100"],"resolved_at":"2026-11-05T07:41:22Z","dns_checked_at":"2026-11-06T08:45:34.000Z","dns_since":"2026-11-05T08:45:05.000Z","findings":[{"id":"fkgsp3oybkizrkh4su5i4","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T07:41:00.909Z","first_published":"2026-11-05T08:42:24.679Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/buildernode.org/"}],"url":"https://domainspoof.com/live?show=all&q=buildernode.org"},{"hostname":"buinv.rest","first_observed":"2026-11-05T08:26:09.868Z","first_published":"2026-11-05T08:42:24.679Z","brands":[],"dns":"resolved","resolved":["3.33.251.168","15.197.225.128"],"resolved_at":"2026-11-05T08:33:14Z","dns_checked_at":"2026-11-06T08:45:34.000Z","dns_since":"2026-11-05T08:45:05.000Z","findings":[{"id":"f5fx6dlkx2zcnzmvyaq4e","kind":"reported_domain","summary":"Listed by NPA 165 (e-commerce)","first_observed":"2026-11-05T08:26:09.868Z","first_published":"2026-11-05T08:42:24.679Z","source":"npa","source_name":"NPA 165","claim":{"category":"e-commerce"}}],"url":"https://domainspoof.com/live?show=all&q=buinv.rest"},{"hostname":"caps.scdunionbk.info","first_observed":"2026-11-05T07:56:22.026Z","first_published":"2026-11-05T08:42:24.679Z","brands":[],"dns":"resolved","resolved":["163.61.188.5"],"resolved_at":"2026-11-05T08:03:53Z","dns_checked_at":"2026-11-06T08:45:34.000Z","dns_since":"2026-11-05T08:45:05.000Z","findings":[{"id":"ft3znvxnct2gumdmhg5ia","kind":"reported_domain","summary":"Under scdunionbk.info, reported by PhishDestroy","first_observed":"2026-11-05T07:56:22.026Z","first_published":"2026-11-05T08:42:24.679Z","source":"phishdestroy","source_name":"PhishDestroy","under":"scdunionbk.info","source_url":"https://phishdestroy.io/domain/scdunionbk.info/"}],"url":"https://domainspoof.com/live?show=all&q=caps.scdunionbk.info"},{"hostname":"chatgpt123.cloud","first_observed":"2026-11-05T08:12:53.129Z","first_published":"2026-11-05T08:42:24.679Z","brands":[{"id":"openai","name":"OpenAI","url":"https://domainspoof.com/brands/openai"}],"dns":"resolved","resolved":["2.57.91.91"],"resolved_at":"2026-11-06T08:45:34Z","dns_checked_at":"2026-11-06T08:45:34.000Z","dns_since":"2026-11-05T08:45:05.000Z","findings":[{"id":"f4bflsearvx37ffyxaeyj","kind":"phishing_infrastructure","summary":"Resolved to 2.57.91.91, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T08:12:53.129Z","first_published":"2026-11-05T08:42:24.679Z","address":"2.57.91.91","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/openai"},{"hostname":"cndh.zoomtech-platform.com","first_observed":"2026-11-05T08:26:09.868Z","first_published":"2026-11-05T08:42:24.679Z","brands":[],"dns":"resolved","resolved":["109.234.166.86"],"resolved_at":"2026-11-05T08:33:17Z","dns_checked_at":"2026-11-06T08:45:34.000Z","dns_since":"2026-11-05T08:45:05.000Z","findings":[{"id":"fbwf3v53mvi5fty4qujdm","kind":"reported_domain","summary":"Under zoomtech-platform.com, listed by MetaMask","first_observed":"2026-11-05T08:26:09.868Z","first_published":"2026-11-05T08:42:24.679Z","source":"metamask","source_name":"MetaMask","under":"zoomtech-platform.com"}],"url":"https://domainspoof.com/live?show=all&q=cndh.zoomtech-platform.com"},{"hostname":"cnhauwr.casa","first_observed":"2026-11-05T08:16:48.887Z","first_published":"2026-11-05T08:42:24.679Z","brands":[],"dns":"not_found","resolved":["43.153.167.40"],"resolved_at":"2026-11-05T08:20:07Z","dns_checked_at":"2026-11-06T08:45:34.000Z","dns_since":"2026-11-05T08:45:05.000Z","findings":[{"id":"fco3vkamzpnzftq22hgz4","kind":"reported_domain","summary":"Reported by PhishTank","first_observed":"2026-11-05T08:16:48.887Z","first_published":"2026-11-05T08:42:24.679Z","source":"phishtank","source_name":"PhishTank","source_url":"https://phishtank.org/phish_detail.php?phish_id=9554751"}],"url":"https://domainspoof.com/live?show=all&q=cnhauwr.casa"},{"hostname":"coagde.website","first_observed":"2026-11-05T08:21:00.540Z","first_published":"2026-11-05T08:42:24.679Z","brands":[],"dns":"resolved","resolved":["129.212.237.21"],"resolved_at":"2026-11-05T08:21:25Z","dns_checked_at":"2026-11-06T08:45:34.000Z","dns_since":"2026-11-05T08:45:05.000Z","findings":[{"id":"fbws4rqbjrixlo3nmluxy","kind":"reported_domain","summary":"Listed by NPA 165 (information services)","first_observed":"2026-11-05T08:21:00.540Z","first_published":"2026-11-05T08:42:24.679Z","source":"npa","source_name":"NPA 165","claim":{"category":"information services"}}],"url":"https://domainspoof.com/live?show=all&q=coagde.website"},{"hostname":"coin-base-support-crypto.live","first_observed":"2026-11-05T08:25:03.161Z","first_published":"2026-11-05T08:42:24.679Z","brands":[{"id":"coinbase","name":"Coinbase","url":"https://domainspoof.com/brands/coinbase"}],"dns":"resolved","resolved":["2.57.91.91"],"resolved_at":"2026-11-06T08:45:34Z","dns_checked_at":"2026-11-06T08:45:34.000Z","dns_since":"2026-11-05T08:45:05.000Z","findings":[{"id":"fl4mxxdz6n6molcdpqyuv","kind":"phishing_infrastructure","summary":"Resolved to 2.57.91.91, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T08:25:03.161Z","first_published":"2026-11-05T08:42:24.679Z","address":"2.57.91.91","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/coinbase"},{"hostname":"coinbasewallet.com.cn","first_observed":"2026-11-05T08:12:54.150Z","first_published":"2026-11-05T08:42:24.679Z","brands":[{"id":"coinbase","name":"Coinbase","url":"https://domainspoof.com/brands/coinbase"}],"dns":"resolved","resolved":["206.161.218.138"],"resolved_at":"2026-11-06T08:45:34Z","dns_checked_at":"2026-11-06T08:45:34.000Z","dns_since":"2026-11-05T08:45:05.000Z","findings":[{"id":"fhnfvkkyicxij6tng5ecf","kind":"phishing_infrastructure","summary":"Resolved to 206.161.218.138, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T08:12:54.150Z","first_published":"2026-11-05T08:42:24.679Z","address":"206.161.218.138","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/coinbase"},{"hostname":"coinexes.us","first_observed":"2026-11-05T08:31:20.384Z","first_published":"2026-11-05T08:42:24.679Z","brands":[],"dns":"resolved","resolved":["104.21.38.47","172.67.219.53"],"resolved_at":"2026-11-05T08:39:36Z","dns_checked_at":"2026-11-06T08:45:34.000Z","dns_since":"2026-11-05T08:45:05.000Z","findings":[{"id":"fngrlt6lydezrrj2rcrht","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T08:31:20.384Z","first_published":"2026-11-05T08:42:24.679Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=coinexes.us"},{"hostname":"comfe.space","first_observed":"2026-11-05T08:26:09.868Z","first_published":"2026-11-05T08:42:24.679Z","brands":[],"dns":"resolved","resolved":["129.212.237.21"],"resolved_at":"2026-11-05T08:33:18Z","dns_checked_at":"2026-11-06T08:45:34.000Z","dns_since":"2026-11-05T08:45:05.000Z","findings":[{"id":"f3nc3w3kim3oxgil4w7sb","kind":"reported_domain","summary":"Listed by MODA (one-page scam site)","first_observed":"2026-11-05T08:26:09.868Z","first_published":"2026-11-05T08:42:24.679Z","source":"moda","source_name":"MODA","claim":{"category":"one-page scam site"}}],"url":"https://domainspoof.com/live?show=all&q=comfe.space"},{"hostname":"comfe.website","first_observed":"2026-11-05T08:26:09.868Z","first_published":"2026-11-05T08:42:24.679Z","brands":[],"dns":"resolved","resolved":["129.212.237.21"],"resolved_at":"2026-11-05T08:33:18Z","dns_checked_at":"2026-11-06T08:45:34.000Z","dns_since":"2026-11-05T08:45:05.000Z","findings":[{"id":"fweyhriubkbcabeqthheq","kind":"reported_domain","summary":"Listed by MODA (one-page scam site)","first_observed":"2026-11-05T08:26:09.868Z","first_published":"2026-11-05T08:42:24.679Z","source":"moda","source_name":"MODA","claim":{"category":"one-page scam site"}}],"url":"https://domainspoof.com/live?show=all&q=comfe.website"},{"hostname":"comfe.xyz","first_observed":"2026-11-05T08:26:09.868Z","first_published":"2026-11-05T08:42:24.679Z","brands":[],"dns":"resolved","resolved":["129.212.237.21"],"resolved_at":"2026-11-05T08:33:18Z","dns_checked_at":"2026-11-06T08:45:34.000Z","dns_since":"2026-11-05T08:45:05.000Z","findings":[{"id":"fp52neztqfim4vxd5xtsx","kind":"reported_domain","summary":"Listed by MODA (one-page scam site)","first_observed":"2026-11-05T08:26:09.868Z","first_published":"2026-11-05T08:42:24.679Z","source":"moda","source_name":"MODA","claim":{"category":"one-page scam site"}}],"url":"https://domainspoof.com/live?show=all&q=comfe.xyz"},{"hostname":"cpanel.ankama-compte.com","first_observed":"2026-11-05T07:57:23.164Z","first_published":"2026-11-05T08:42:24.679Z","brands":[{"id":"ankama","name":"Ankama","url":"https://domainspoof.com/brands/ankama"}],"dns":"resolved","resolved":["79.133.41.203"],"resolved_at":"2026-11-06T08:45:34Z","dns_checked_at":"2026-11-06T08:45:34.000Z","dns_since":"2026-11-05T08:45:05.000Z","findings":[{"id":"fxtmbiyds2x43uuihr66g","kind":"phishing_infrastructure","summary":"Resolved to 79.133.41.203, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T07:57:23.164Z","first_published":"2026-11-05T08:42:24.679Z","address":"79.133.41.203","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/ankama"},{"hostname":"cpanel.streijl.eu","first_observed":"2026-11-05T07:46:08.429Z","first_published":"2026-11-05T08:42:24.679Z","brands":[],"dns":"resolved","resolved":["185.87.187.239","2a00:f10:305:0:1c00:c9ff:fe00:527"],"resolved_at":"2026-11-05T07:57:23Z","dns_checked_at":"2026-11-06T08:45:34.000Z","dns_since":"2026-11-05T08:45:05.000Z","findings":[{"id":"f2ftjz2axkzyw6hmoz5vm","kind":"reported_domain","summary":"Under streijl.eu, reported by PhishDestroy","first_observed":"2026-11-05T07:46:08.429Z","first_published":"2026-11-05T08:42:24.679Z","source":"phishdestroy","source_name":"PhishDestroy","under":"streijl.eu","source_url":"https://phishdestroy.io/domain/streijl.eu/"}],"url":"https://domainspoof.com/live?show=all&q=cpanel.streijl.eu"},{"hostname":"cpanel.torzon.homes","first_observed":"2026-11-05T08:31:20.384Z","first_published":"2026-11-05T08:42:24.679Z","brands":[],"dns":"resolved","resolved":["45.147.197.100"],"resolved_at":"2026-11-05T08:39:42Z","dns_checked_at":"2026-11-06T08:45:34.000Z","dns_since":"2026-11-05T08:45:05.000Z","findings":[{"id":"faxa4wbowxqxyer3j2swc","kind":"reported_domain","summary":"Under torzon.homes, reported by PhishDestroy","first_observed":"2026-11-05T08:31:20.384Z","first_published":"2026-11-05T08:42:24.679Z","source":"phishdestroy","source_name":"PhishDestroy","under":"torzon.homes","source_url":"https://phishdestroy.io/domain/torzon.homes/"}],"url":"https://domainspoof.com/live?show=all&q=cpanel.torzon.homes"},{"hostname":"cpcalendars.ankama-compte.com","first_observed":"2026-11-05T07:57:23.211Z","first_published":"2026-11-05T08:42:24.679Z","brands":[{"id":"ankama","name":"Ankama","url":"https://domainspoof.com/brands/ankama"}],"dns":"resolved","resolved":["79.133.41.203"],"resolved_at":"2026-11-06T08:45:34Z","dns_checked_at":"2026-11-06T08:45:34.000Z","dns_since":"2026-11-05T08:45:05.000Z","findings":[{"id":"fwnl3z4z3y2m3o37zhxlw","kind":"phishing_infrastructure","summary":"Resolved to 79.133.41.203, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T07:57:23.211Z","first_published":"2026-11-05T08:42:24.679Z","address":"79.133.41.203","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/ankama"},{"hostname":"cpcalendars.streijl.eu","first_observed":"2026-11-05T07:46:08.429Z","first_published":"2026-11-05T08:42:24.679Z","brands":[],"dns":"resolved","resolved":["185.87.187.239","2a00:f10:305:0:1c00:c9ff:fe00:527"],"resolved_at":"2026-11-05T07:57:23Z","dns_checked_at":"2026-11-06T08:45:34.000Z","dns_since":"2026-11-05T08:45:05.000Z","findings":[{"id":"fsdlxpkdcnqwg2fljthei","kind":"reported_domain","summary":"Under streijl.eu, reported by PhishDestroy","first_observed":"2026-11-05T07:46:08.429Z","first_published":"2026-11-05T08:42:24.679Z","source":"phishdestroy","source_name":"PhishDestroy","under":"streijl.eu","source_url":"https://phishdestroy.io/domain/streijl.eu/"}],"url":"https://domainspoof.com/live?show=all&q=cpcalendars.streijl.eu"},{"hostname":"cpcontacts.ankama-compte.com","first_observed":"2026-11-05T07:57:23.260Z","first_published":"2026-11-05T08:42:24.679Z","brands":[{"id":"ankama","name":"Ankama","url":"https://domainspoof.com/brands/ankama"}],"dns":"resolved","resolved":["79.133.41.203"],"resolved_at":"2026-11-06T08:45:34Z","dns_checked_at":"2026-11-06T08:45:34.000Z","dns_since":"2026-11-05T08:45:05.000Z","findings":[{"id":"f42uapohcuwtxh32huf3n","kind":"phishing_infrastructure","summary":"Resolved to 79.133.41.203, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T07:57:23.260Z","first_published":"2026-11-05T08:42:24.679Z","address":"79.133.41.203","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/ankama"},{"hostname":"cpcontacts.streijl.eu","first_observed":"2026-11-05T07:46:08.429Z","first_published":"2026-11-05T08:42:24.679Z","brands":[],"dns":"resolved","resolved":["185.87.187.239","2a00:f10:305:0:1c00:c9ff:fe00:527"],"resolved_at":"2026-11-05T07:57:23Z","dns_checked_at":"2026-11-06T08:45:34.000Z","dns_since":"2026-11-05T08:45:05.000Z","findings":[{"id":"f4crzuafengjcgiscismm","kind":"reported_domain","summary":"Under streijl.eu, reported by PhishDestroy","first_observed":"2026-11-05T07:46:08.429Z","first_published":"2026-11-05T08:42:24.679Z","source":"phishdestroy","source_name":"PhishDestroy","under":"streijl.eu","source_url":"https://phishdestroy.io/domain/streijl.eu/"}],"url":"https://domainspoof.com/live?show=all&q=cpcontacts.streijl.eu"},{"hostname":"crosocs.cc","first_observed":"2026-11-05T08:26:09.868Z","first_published":"2026-11-05T08:42:24.679Z","brands":[],"dns":"resolved","resolved":["104.19.221.20"],"resolved_at":"2026-11-06T02:26:23Z","dns_checked_at":"2026-11-06T08:45:34.000Z","dns_since":"2026-11-05T08:45:05.000Z","findings":[{"id":"fuauvdy7wwtxh3ibsrmee","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T08:26:09.868Z","first_published":"2026-11-05T08:42:24.679Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=crosocs.cc"},{"hostname":"daisywardrobe-digital.shop","first_observed":"2026-11-05T08:21:00.540Z","first_published":"2026-11-05T08:42:24.679Z","brands":[],"dns":"no_address","resolved":[],"resolved_at":"2026-11-05T08:21:28Z","dns_checked_at":"2026-11-06T08:45:34.000Z","dns_since":"2026-11-05T08:45:05.000Z","findings":[{"id":"fvbqwvidpxmanaodcbf55","kind":"reported_domain","summary":"Listed by NPA 165 (finance and insurance)","first_observed":"2026-11-05T08:21:00.540Z","first_published":"2026-11-05T08:42:24.679Z","source":"npa","source_name":"NPA 165","claim":{"category":"finance and insurance"}}],"url":"https://domainspoof.com/live?show=all&q=daisywardrobe-digital.shop"},{"hostname":"direct.floydldevine.com","first_observed":"2026-11-05T07:51:14.197Z","first_published":"2026-11-05T08:42:24.679Z","brands":[],"dns":"resolved","resolved":["109.238.86.5"],"resolved_at":"2026-11-05T07:51:45Z","dns_checked_at":"2026-11-06T08:45:34.000Z","dns_since":"2026-11-05T08:45:05.000Z","findings":[{"id":"f5tubyiwc4wzrnoiw23fn","kind":"reported_domain","summary":"Under floydldevine.com, listed by CERT Polska","first_observed":"2026-11-05T07:51:14.197Z","first_published":"2026-11-05T08:42:24.679Z","source":"cert_polska","source_name":"CERT Polska","under":"floydldevine.com"}],"url":"https://domainspoof.com/live?show=all&q=direct.floydldevine.com"},{"hostname":"diskcacambasdetroit.com.br","first_observed":"2026-11-05T07:56:22.026Z","first_published":"2026-11-05T08:42:24.679Z","brands":[],"dns":"resolved","resolved":["104.21.22.227","172.67.207.141"],"resolved_at":"2026-11-05T08:04:06Z","dns_checked_at":"2026-11-06T08:45:34.000Z","dns_since":"2026-11-05T08:45:05.000Z","findings":[{"id":"fbubrnsy64ocev4dma2ao","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T07:56:22.026Z","first_published":"2026-11-05T08:42:24.679Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/diskcacambasdetroit.com.br/"}],"url":"https://domainspoof.com/live?show=all&q=diskcacambasdetroit.com.br"},{"hostname":"dolbo-job-ai.com","first_observed":"2026-11-05T08:05:35.267Z","first_published":"2026-11-05T08:42:24.679Z","brands":[],"dns":"resolved","resolved":["104.21.36.149","172.67.195.31"],"resolved_at":"2026-11-05T08:13:08Z","dns_checked_at":"2026-11-06T08:45:34.000Z","dns_since":"2026-11-05T08:45:05.000Z","findings":[{"id":"ffgdxnluwtueufznytbnn","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T08:05:35.267Z","first_published":"2026-11-05T08:42:24.679Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=dolbo-job-ai.com"},{"hostname":"dorahoki-x-pisang123-032.eliaruizwork.com","first_observed":"2026-11-05T07:31:10.076Z","first_published":"2026-11-05T08:42:24.679Z","brands":[],"dns":"resolved","resolved":["104.21.13.225","172.67.133.81"],"resolved_at":"2026-11-05T07:31:28Z","dns_checked_at":"2026-11-06T08:45:34.000Z","dns_since":"2026-11-05T08:45:05.000Z","findings":[{"id":"favsvbkqvlbvfw333troq","kind":"reported_domain","summary":"Under eliaruizwork.com, reported by PhishDestroy","first_observed":"2026-11-05T07:31:10.076Z","first_published":"2026-11-05T08:42:24.679Z","source":"phishdestroy","source_name":"PhishDestroy","under":"eliaruizwork.com","source_url":"https://phishdestroy.io/domain/eliaruizwork.com/"}],"url":"https://domainspoof.com/live?show=all&q=dorahoki-x-pisang123-032.eliaruizwork.com"},{"hostname":"edenautoecole.fr","first_observed":"2026-11-05T08:10:43.722Z","first_published":"2026-11-05T08:42:24.679Z","brands":[],"dns":"resolved","resolved":["104.21.9.114","172.67.159.197"],"resolved_at":"2026-11-05T08:21:32Z","dns_checked_at":"2026-11-06T08:45:34.000Z","dns_since":"2026-11-05T08:45:05.000Z","findings":[{"id":"fvzt4q3cc3ml67tlaoen3","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T08:10:43.722Z","first_published":"2026-11-05T08:42:24.679Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/edenautoecole.fr/"}],"url":"https://domainspoof.com/live?show=all&q=edenautoecole.fr"},{"hostname":"empire88-x-suster123-031.eliaruizwork.com","first_observed":"2026-11-05T07:31:10.076Z","first_published":"2026-11-05T08:42:24.679Z","brands":[],"dns":"resolved","resolved":["104.21.13.225","172.67.133.81"],"resolved_at":"2026-11-05T07:31:28Z","dns_checked_at":"2026-11-06T08:45:34.000Z","dns_since":"2026-11-05T08:45:05.000Z","findings":[{"id":"fuvro6wym3mxqivhthsyw","kind":"reported_domain","summary":"Under eliaruizwork.com, reported by PhishDestroy","first_observed":"2026-11-05T07:31:10.076Z","first_published":"2026-11-05T08:42:24.679Z","source":"phishdestroy","source_name":"PhishDestroy","under":"eliaruizwork.com","source_url":"https://phishdestroy.io/domain/eliaruizwork.com/"}],"url":"https://domainspoof.com/live?show=all&q=empire88-x-suster123-031.eliaruizwork.com"},{"hostname":"en-download-ledgrr.pages.dev","first_observed":"2026-11-05T08:31:20.384Z","first_published":"2026-11-05T08:42:24.679Z","brands":[],"dns":"resolved","resolved":["172.66.44.173","172.66.47.83"],"resolved_at":"2026-11-05T08:39:45Z","dns_checked_at":"2026-11-06T08:45:34.000Z","dns_since":"2026-11-05T08:45:05.000Z","findings":[{"id":"flqlaobnj4ksivmaxd3t2","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T08:31:20.384Z","first_published":"2026-11-05T08:42:24.679Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=en-download-ledgrr.pages.dev"},{"hostname":"ensou.network","first_observed":"2026-11-05T07:41:00.909Z","first_published":"2026-11-05T08:42:24.679Z","brands":[],"dns":"no_address","resolved":[],"resolved_at":"2026-11-05T07:41:26Z","dns_checked_at":"2026-11-06T08:45:34.000Z","dns_since":"2026-11-05T08:45:05.000Z","findings":[{"id":"fmjru34is46bwwljvx5x4","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T07:41:00.909Z","first_published":"2026-11-05T08:42:24.679Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=ensou.network"},{"hostname":"eobuwie-sportshoes.shop","first_observed":"2026-11-05T08:36:27.026Z","first_published":"2026-11-05T08:42:24.679Z","brands":[{"id":"eobuwie","name":"eobuwie","url":"https://domainspoof.com/brands/eobuwie"}],"dns":"resolved","resolved":["104.16.211.68"],"resolved_at":"2026-11-05T08:44:33Z","dns_checked_at":"2026-11-06T08:45:34.000Z","dns_since":"2026-11-05T08:45:05.000Z","findings":[{"id":"fpstlprdipd43blrtbu6k","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T08:36:27.026Z","first_published":"2026-11-05T08:42:24.679Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/brands/eobuwie"},{"hostname":"equium.claims","first_observed":"2026-11-05T07:36:20.749Z","first_published":"2026-11-05T08:42:24.679Z","brands":[],"dns":"resolved","resolved":["104.21.33.65","172.67.159.71"],"resolved_at":"2026-11-05T07:36:43Z","dns_checked_at":"2026-11-06T08:45:34.000Z","dns_since":"2026-11-05T08:45:05.000Z","findings":[{"id":"f2zbjz4sqzchgyyjiupz2","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T07:36:20.749Z","first_published":"2026-11-05T08:42:24.679Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=equium.claims"},{"hostname":"euconldz.fmvrxzcy.gvuolhky.emnbzdvj.uatmfwcq.gatewaylearning.ezgateway.net","first_observed":"2026-11-05T08:00:58.346Z","first_published":"2026-11-05T08:42:24.679Z","brands":[],"dns":"resolved","resolved":["15.204.116.29"],"resolved_at":"2026-11-05T08:09:44Z","dns_checked_at":"2026-11-06T08:45:34.000Z","dns_since":"2026-11-05T08:45:05.000Z","findings":[{"id":"fhtyla7qrbnzrag2yqdor","kind":"reported_domain","summary":"Under ezgateway.net, listed by USOM","first_observed":"2026-11-05T08:00:58.346Z","first_published":"2026-11-05T08:42:24.679Z","source":"usom","source_name":"USOM","under":"ezgateway.net"}],"url":"https://domainspoof.com/live?show=all&q=euconldz.fmvrxzcy.gvuolhky.emnbzdvj.uatmfwcq.gatewaylearning.ezgateway.net"},{"hostname":"fabdesign30.fr","first_observed":"2026-11-05T08:31:20.384Z","first_published":"2026-11-05T08:42:24.679Z","brands":[],"dns":"resolved","resolved":["104.21.93.18","172.67.202.181"],"resolved_at":"2026-11-05T08:39:45Z","dns_checked_at":"2026-11-06T08:45:34.000Z","dns_since":"2026-11-05T08:45:05.000Z","findings":[{"id":"fqyhe5atbg3ihiy37zbt6","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T08:31:20.384Z","first_published":"2026-11-05T08:42:24.679Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/fabdesign30.fr/"}],"url":"https://domainspoof.com/live?show=all&q=fabdesign30.fr"},{"hostname":"farmfreshhubs.com","first_observed":"2026-11-05T07:56:22.026Z","first_published":"2026-11-05T08:42:24.679Z","brands":[],"dns":"resolved","resolved":["163.61.188.5"],"resolved_at":"2026-11-05T08:04:09Z","dns_checked_at":"2026-11-06T08:45:34.000Z","dns_since":"2026-11-05T08:45:05.000Z","findings":[{"id":"fhuyihfswlxbrmapmaxuu","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T07:56:22.026Z","first_published":"2026-11-05T08:42:24.679Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/farmfreshhubs.com/"}],"url":"https://domainspoof.com/live?show=all&q=farmfreshhubs.com"},{"hostname":"fastsmsverify.com.ng","first_observed":"2026-11-05T07:31:10.076Z","first_published":"2026-11-05T08:42:24.679Z","brands":[],"dns":"resolved","resolved":["163.61.188.7"],"resolved_at":"2026-11-05T07:31:28Z","dns_checked_at":"2026-11-06T08:45:34.000Z","dns_since":"2026-11-05T08:45:05.000Z","findings":[{"id":"f3pvkkedr4f5uiffbff6k","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T07:31:10.076Z","first_published":"2026-11-05T08:42:24.679Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/fastsmsverify.com.ng/"}],"url":"https://domainspoof.com/live?show=all&q=fastsmsverify.com.ng"},{"hostname":"fengshuionmars.org","first_observed":"2026-11-05T08:31:20.384Z","first_published":"2026-11-05T08:42:24.679Z","brands":[],"dns":"resolved","resolved":["172.236.104.43","172.236.104.157","172.238.172.122"],"resolved_at":"2026-11-05T08:39:46Z","dns_checked_at":"2026-11-06T08:45:34.000Z","dns_since":"2026-11-05T08:45:05.000Z","findings":[{"id":"fhgmafpntorkk3joe7wli","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T08:31:20.384Z","first_published":"2026-11-05T08:42:24.679Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=fengshuionmars.org"},{"hostname":"fideluxfintrivarpro.com","first_observed":"2026-11-05T07:56:22.026Z","first_published":"2026-11-05T08:42:24.679Z","brands":[],"dns":"resolved","resolved":["104.21.71.180","172.67.147.247"],"resolved_at":"2026-11-05T08:04:10Z","dns_checked_at":"2026-11-06T08:45:34.000Z","dns_since":"2026-11-05T08:45:05.000Z","findings":[{"id":"fctcpdddo5duoqaj3ahhf","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T07:56:22.026Z","first_published":"2026-11-05T08:42:24.679Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=fideluxfintrivarpro.com"},{"hostname":"forexcapitals18.com","first_observed":"2026-11-05T07:46:08.429Z","first_published":"2026-11-05T08:42:24.679Z","brands":[],"dns":"resolved","resolved":["104.21.69.146","172.67.209.90"],"resolved_at":"2026-11-05T07:57:25Z","dns_checked_at":"2026-11-06T08:45:34.000Z","dns_since":"2026-11-05T08:45:05.000Z","findings":[{"id":"fifayk456hjqvpom5fz66","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T07:46:08.429Z","first_published":"2026-11-05T08:42:24.679Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=forexcapitals18.com"},{"hostname":"fra-4f9e5a.wb-cdn-global.com","first_observed":"2026-11-05T08:36:27.026Z","first_published":"2026-11-05T08:42:24.679Z","brands":[],"dns":"resolved","resolved":["145.63.132.182"],"resolved_at":"2026-11-05T08:44:37Z","dns_checked_at":"2026-11-06T08:45:34.000Z","dns_since":"2026-11-05T08:45:05.000Z","findings":[{"id":"fg7slxorwcyrdjjgy7iod","kind":"reported_domain","summary":"Under wb-cdn-global.com, listed by MetaMask","first_observed":"2026-11-05T08:36:27.026Z","first_published":"2026-11-05T08:42:24.679Z","source":"metamask","source_name":"MetaMask","under":"wb-cdn-global.com"}],"url":"https://domainspoof.com/live?show=all&q=fra-4f9e5a.wb-cdn-global.com"},{"hostname":"fra-8917c9.wb-cdn-global.com","first_observed":"2026-11-05T08:31:20.384Z","first_published":"2026-11-05T08:42:24.679Z","brands":[],"dns":"resolved","resolved":["145.63.131.153"],"resolved_at":"2026-11-05T08:39:46Z","dns_checked_at":"2026-11-06T08:45:34.000Z","dns_since":"2026-11-05T08:45:05.000Z","findings":[{"id":"fgxs2itn6mguqc4yzvajy","kind":"reported_domain","summary":"Under wb-cdn-global.com, listed by MetaMask","first_observed":"2026-11-05T08:31:20.384Z","first_published":"2026-11-05T08:42:24.679Z","source":"metamask","source_name":"MetaMask","under":"wb-cdn-global.com"}],"url":"https://domainspoof.com/live?show=all&q=fra-8917c9.wb-cdn-global.com"},{"hostname":"frequently.codeified.info","first_observed":"2026-11-05T07:46:08.429Z","first_published":"2026-11-05T08:42:24.679Z","brands":[],"dns":"resolved","resolved":["162.4.84.247"],"resolved_at":"2026-11-05T07:57:25Z","dns_checked_at":"2026-11-06T08:45:34.000Z","dns_since":"2026-11-05T08:45:05.000Z","findings":[{"id":"fl3al7gfge622dgltpd4g","kind":"reported_domain","summary":"Under codeified.info, listed by CERT Polska","first_observed":"2026-11-05T07:46:08.429Z","first_published":"2026-11-05T08:42:24.679Z","source":"cert_polska","source_name":"CERT Polska","under":"codeified.info"}],"url":"https://domainspoof.com/live?show=all&q=frequently.codeified.info"},{"hostname":"fsekr.shop","first_observed":"2026-11-05T07:36:20.749Z","first_published":"2026-11-05T08:42:24.679Z","brands":[],"dns":"resolved","resolved":["13.248.213.45","76.223.67.189"],"resolved_at":"2026-11-05T07:36:44Z","dns_checked_at":"2026-11-06T08:45:34.000Z","dns_since":"2026-11-05T08:45:05.000Z","findings":[{"id":"fnblkircjaozynatzfg3f","kind":"reported_domain","summary":"Listed by NPA 165 (e-commerce)","first_observed":"2026-11-05T07:36:20.749Z","first_published":"2026-11-05T08:42:24.679Z","source":"npa","source_name":"NPA 165","claim":{"category":"e-commerce"}}],"url":"https://domainspoof.com/live?show=all&q=fsekr.shop"},{"hostname":"fsocietymart-nest.store","first_observed":"2026-11-05T08:15:51.469Z","first_published":"2026-11-05T08:42:24.679Z","brands":[],"dns":"no_address","resolved":[],"resolved_at":"2026-11-05T08:25:14Z","dns_checked_at":"2026-11-06T08:45:34.000Z","dns_since":"2026-11-05T08:45:05.000Z","findings":[{"id":"f5kljyflq6ggspgg3hpgt","kind":"reported_domain","summary":"Listed by NPA 165 (e-commerce)","first_observed":"2026-11-05T08:15:51.469Z","first_published":"2026-11-05T08:42:24.679Z","source":"npa","source_name":"NPA 165","claim":{"category":"e-commerce"}}],"url":"https://domainspoof.com/live?show=all&q=fsocietymart-nest.store"},{"hostname":"glasschneider.koeln","first_observed":"2026-11-05T07:31:10.076Z","first_published":"2026-11-05T08:42:24.679Z","brands":[],"dns":"resolved","resolved":["82.165.166.165"],"resolved_at":"2026-11-05T07:31:29Z","dns_checked_at":"2026-11-06T08:45:34.000Z","dns_since":"2026-11-05T08:45:05.000Z","findings":[{"id":"f3vpnbfhojkj6kkdpio6u","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T07:31:10.076Z","first_published":"2026-11-05T08:42:24.679Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/glasschneider.koeln/"}],"url":"https://domainspoof.com/live?show=all&q=glasschneider.koeln"},{"hostname":"goongrove.com","first_observed":"2026-11-05T08:00:58.346Z","first_published":"2026-11-05T08:42:24.679Z","brands":[],"dns":"no_address","resolved":[],"resolved_at":"2026-11-05T08:09:45Z","dns_checked_at":"2026-11-06T08:45:34.000Z","dns_since":"2026-11-05T08:45:05.000Z","findings":[{"id":"fsvqgw2ni4rhcaismgorn","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T08:00:58.346Z","first_published":"2026-11-05T08:42:24.679Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=goongrove.com"},{"hostname":"grassfoundations.io","first_observed":"2026-11-05T08:26:09.868Z","first_published":"2026-11-05T08:42:24.679Z","brands":[],"dns":"resolved","resolved":["104.21.90.197","172.67.160.219"],"resolved_at":"2026-11-05T08:33:46Z","dns_checked_at":"2026-11-06T08:45:34.000Z","dns_since":"2026-11-05T08:45:05.000Z","findings":[{"id":"fc7uatyoxaiwgsogl322s","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T08:26:09.868Z","first_published":"2026-11-05T08:42:24.679Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=grassfoundations.io"},{"hostname":"gtcmarketus.cc","first_observed":"2026-11-05T07:41:00.909Z","first_published":"2026-11-05T08:42:24.679Z","brands":[],"dns":"resolved","resolved":["104.21.77.251","172.67.214.16"],"resolved_at":"2026-11-05T07:47:40Z","dns_checked_at":"2026-11-06T08:45:34.000Z","dns_since":"2026-11-05T08:45:05.000Z","findings":[{"id":"fs6zneunez6vxeqhiqfu2","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T07:41:00.909Z","first_published":"2026-11-05T08:42:24.679Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/gtcmarketus.cc/"}],"url":"https://domainspoof.com/live?show=all&q=gtcmarketus.cc"},{"hostname":"helpdesk.crushxp.com","first_observed":"2026-11-05T07:46:08.429Z","first_published":"2026-11-05T08:42:24.679Z","brands":[],"dns":"resolved","resolved":["109.238.86.5"],"resolved_at":"2026-11-05T07:57:25Z","dns_checked_at":"2026-11-06T08:45:34.000Z","dns_since":"2026-11-05T08:45:05.000Z","findings":[{"id":"fz6f7d2dd7xlhwrp6u27b","kind":"reported_domain","summary":"Under crushxp.com, listed by CERT Polska","first_observed":"2026-11-05T07:46:08.429Z","first_published":"2026-11-05T08:42:24.679Z","source":"cert_polska","source_name":"CERT Polska","under":"crushxp.com"}],"url":"https://domainspoof.com/live?show=all&q=helpdesk.crushxp.com"},{"hostname":"hepcc.online","first_observed":"2026-11-05T08:26:09.868Z","first_published":"2026-11-05T08:42:24.679Z","brands":[],"dns":"resolved","resolved":["104.21.37.152","172.67.209.189"],"resolved_at":"2026-11-05T08:33:47Z","dns_checked_at":"2026-11-06T08:45:34.000Z","dns_since":"2026-11-05T08:45:05.000Z","findings":[{"id":"frozbric2okekwbdznsi2","kind":"reported_domain","summary":"Listed by NPA 165 (e-commerce)","first_observed":"2026-11-05T08:26:09.868Z","first_published":"2026-11-05T08:42:24.679Z","source":"npa","source_name":"NPA 165","claim":{"category":"e-commerce"}}],"url":"https://domainspoof.com/live?show=all&q=hepcc.online"},{"hostname":"hfekjqwmf.monster","first_observed":"2026-11-05T08:36:27.026Z","first_published":"2026-11-05T08:42:24.679Z","brands":[],"dns":"resolved","resolved":["104.21.15.186","172.67.163.197"],"resolved_at":"2026-11-05T08:44:40Z","dns_checked_at":"2026-11-06T08:45:34.000Z","dns_since":"2026-11-05T08:45:05.000Z","findings":[{"id":"f4t7ft4dcd4dwgeacciln","kind":"reported_domain","summary":"Listed by NPA 165 (e-commerce)","first_observed":"2026-11-05T08:36:27.026Z","first_published":"2026-11-05T08:42:24.679Z","source":"npa","source_name":"NPA 165","claim":{"category":"e-commerce"}}],"url":"https://domainspoof.com/live?show=all&q=hfekjqwmf.monster"},{"hostname":"hh1565.com","first_observed":"2026-11-05T08:36:27.026Z","first_published":"2026-11-05T08:42:24.679Z","brands":[],"dns":"resolved","resolved":["23.145.152.202"],"resolved_at":"2026-11-05T08:44:40Z","dns_checked_at":"2026-11-06T08:45:34.000Z","dns_since":"2026-11-05T08:45:05.000Z","findings":[{"id":"fs6jhwbcsbon6nelt5ae2","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T08:36:27.026Z","first_published":"2026-11-05T08:42:24.679Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/hh1565.com/"}],"url":"https://domainspoof.com/live?show=all&q=hh1565.com"},{"hostname":"hits440.com","first_observed":"2026-11-05T08:31:20.384Z","first_published":"2026-11-05T08:42:24.679Z","brands":[],"dns":"resolved","resolved":["199.36.158.100"],"resolved_at":"2026-11-05T08:39:47Z","dns_checked_at":"2026-11-06T08:45:34.000Z","dns_since":"2026-11-05T08:45:05.000Z","findings":[{"id":"fvw5ip4lfr2or5calfrk2","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T08:31:20.384Z","first_published":"2026-11-05T08:42:24.679Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=hits440.com"},{"hostname":"hvpqjlkt.zbxafwno.wiolmzup.ipmwsqbc.jqaygvpe.wzvtlhbj.ijdyvoge.gatewaylearning.ezgateway.net","first_observed":"2026-11-05T08:31:20.384Z","first_published":"2026-11-05T08:42:24.679Z","brands":[],"dns":"resolved","resolved":["15.204.116.29"],"resolved_at":"2026-11-05T08:39:48Z","dns_checked_at":"2026-11-06T08:45:34.000Z","dns_since":"2026-11-05T08:45:05.000Z","findings":[{"id":"f7syel5lkw6o2cwta6gwm","kind":"reported_domain","summary":"Under ezgateway.net, listed by USOM","first_observed":"2026-11-05T08:31:20.384Z","first_published":"2026-11-05T08:42:24.679Z","source":"usom","source_name":"USOM","under":"ezgateway.net"}],"url":"https://domainspoof.com/live?show=all&q=hvpqjlkt.zbxafwno.wiolmzup.ipmwsqbc.jqaygvpe.wzvtlhbj.ijdyvoge.gatewaylearning.ezgateway.net"},{"hostname":"ifnbenwns.monster","first_observed":"2026-11-05T08:36:27.026Z","first_published":"2026-11-05T08:42:24.679Z","brands":[],"dns":"resolved","resolved":["104.21.13.68","172.67.154.240"],"resolved_at":"2026-11-05T08:44:50Z","dns_checked_at":"2026-11-06T08:45:34.000Z","dns_since":"2026-11-05T08:45:05.000Z","findings":[{"id":"fob4wsf7jhocgtmmsyed4","kind":"reported_domain","summary":"Listed by NPA 165 (information services)","first_observed":"2026-11-05T08:36:27.026Z","first_published":"2026-11-05T08:42:24.679Z","source":"npa","source_name":"NPA 165","claim":{"category":"information services"}}],"url":"https://domainspoof.com/live?show=all&q=ifnbenwns.monster"},{"hostname":"immediate-granimator.digital","first_observed":"2026-11-05T07:31:10.076Z","first_published":"2026-11-05T08:42:24.679Z","brands":[],"dns":"resolved","resolved":["185.62.57.28"],"resolved_at":"2026-11-05T07:31:30Z","dns_checked_at":"2026-11-06T08:45:34.000Z","dns_since":"2026-11-05T08:45:05.000Z","findings":[{"id":"fz52s32v47mv6j2xg4665","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T07:31:10.076Z","first_published":"2026-11-05T08:42:24.679Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=immediate-granimator.digital"},{"hostname":"ipv6.streijl.eu","first_observed":"2026-11-05T07:46:08.429Z","first_published":"2026-11-05T08:42:24.679Z","brands":[],"dns":"resolved","resolved":["185.87.187.239","2a00:f10:305:0:1c00:c9ff:fe00:527"],"resolved_at":"2026-11-05T07:57:27Z","dns_checked_at":"2026-11-06T08:45:34.000Z","dns_since":"2026-11-05T08:45:05.000Z","findings":[{"id":"fwfjoz54k7bmjfvkgerhy","kind":"reported_domain","summary":"Under streijl.eu, reported by PhishDestroy","first_observed":"2026-11-05T07:46:08.429Z","first_published":"2026-11-05T08:42:24.679Z","source":"phishdestroy","source_name":"PhishDestroy","under":"streijl.eu","source_url":"https://phishdestroy.io/domain/streijl.eu/"}],"url":"https://domainspoof.com/live?show=all&q=ipv6.streijl.eu"},{"hostname":"jenkins.zenavlico.cyou","first_observed":"2026-11-05T07:41:00.909Z","first_published":"2026-11-05T08:42:24.679Z","brands":[],"dns":"resolved","resolved":["95.85.244.13"],"resolved_at":"2026-11-05T07:47:41Z","dns_checked_at":"2026-11-06T08:45:34.000Z","dns_since":"2026-11-05T08:45:05.000Z","findings":[{"id":"fzylbgo3m55aana62djpl","kind":"reported_domain","summary":"Under zenavlico.cyou, listed by CERT Polska","first_observed":"2026-11-05T07:41:00.909Z","first_published":"2026-11-05T08:42:24.679Z","source":"cert_polska","source_name":"CERT Polska","under":"zenavlico.cyou"}],"url":"https://domainspoof.com/live?show=all&q=jenkins.zenavlico.cyou"},{"hostname":"jiexiangfan.com","first_observed":"2026-11-05T08:36:27.026Z","first_published":"2026-11-05T08:42:24.679Z","brands":[],"dns":"resolved","resolved":["199.36.158.100"],"resolved_at":"2026-11-05T08:44:52Z","dns_checked_at":"2026-11-06T08:45:34.000Z","dns_since":"2026-11-05T08:45:05.000Z","findings":[{"id":"ftduftyvg3hcdjiwjluid","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T08:36:27.026Z","first_published":"2026-11-05T08:42:24.679Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/jiexiangfan.com/"}],"url":"https://domainspoof.com/live?show=all&q=jiexiangfan.com"},{"hostname":"kupikod2.com","first_observed":"2026-11-05T08:36:27.026Z","first_published":"2026-11-05T08:42:24.679Z","brands":[],"dns":"resolved","resolved":["104.21.18.87","172.67.181.131"],"resolved_at":"2026-11-05T08:44:54Z","dns_checked_at":"2026-11-06T08:45:34.000Z","dns_since":"2026-11-05T08:45:05.000Z","findings":[{"id":"f6kva4zzh5wrpjw26tqjc","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T08:36:27.026Z","first_published":"2026-11-05T08:42:24.679Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/kupikod2.com/"}],"url":"https://domainspoof.com/live?show=all&q=kupikod2.com"},{"hostname":"lebiretatoru.com","first_observed":"2026-11-05T08:26:09.868Z","first_published":"2026-11-05T08:42:24.679Z","brands":[],"dns":"resolved","resolved":["104.21.77.67","172.67.205.36"],"resolved_at":"2026-11-05T08:33:54Z","dns_checked_at":"2026-11-06T08:45:34.000Z","dns_since":"2026-11-05T08:45:05.000Z","findings":[{"id":"fjuksb7y7iamog3sizmgf","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T08:26:09.868Z","first_published":"2026-11-05T08:42:24.679Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=lebiretatoru.com"},{"hostname":"ledger-live-loginn-io.pages.dev","first_observed":"2026-11-05T08:00:58.346Z","first_published":"2026-11-05T08:42:24.679Z","brands":[{"id":"ledger","name":"Ledger","url":"https://domainspoof.com/brands/ledger"}],"dns":"resolved","resolved":["172.66.44.83","172.66.47.173","2606:4700:310c::ac42:2c53","2606:4700:310c::ac42:2fad"],"resolved_at":"2026-11-05T08:09:48Z","dns_checked_at":"2026-11-06T08:45:34.000Z","dns_since":"2026-11-05T08:45:05.000Z","findings":[{"id":"fex3xbi4iakxape74av5l","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T08:00:58.346Z","first_published":"2026-11-05T08:42:24.679Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/brands/ledger"},{"hostname":"login-gmx.net","first_observed":"2026-11-05T08:25:22.361Z","first_published":"2026-11-05T08:42:24.679Z","brands":[{"id":"gmx","name":"GMX","url":"https://domainspoof.com/brands/gmx"}],"dns":"resolved","resolved":["217.72.199.107","217.72.199.108"],"resolved_at":"2026-11-06T08:45:34Z","dns_checked_at":"2026-11-06T08:45:34.000Z","dns_since":"2026-11-05T08:45:05.000Z","findings":[{"id":"fmmqmy2rmz2ccqgxevkm4","kind":"phishing_infrastructure","summary":"Resolved to 217.72.199.107, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T08:25:22.361Z","first_published":"2026-11-05T08:42:24.679Z","address":"217.72.199.107","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/gmx"},{"hostname":"logn-teerzr-io-eng.pages.dev","first_observed":"2026-11-05T08:05:35.267Z","first_published":"2026-11-05T08:42:24.679Z","brands":[],"dns":"resolved","resolved":["172.66.44.60","172.66.47.196"],"resolved_at":"2026-11-05T08:13:17Z","dns_checked_at":"2026-11-06T08:45:34.000Z","dns_since":"2026-11-05T08:45:05.000Z","findings":[{"id":"f4nhsna57mtxnjicx2ok5","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T08:05:35.267Z","first_published":"2026-11-05T08:42:24.679Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=logn-teerzr-io-eng.pages.dev"},{"hostname":"mail.ankama-compte.com","first_observed":"2026-11-05T07:57:28.998Z","first_published":"2026-11-05T08:42:24.679Z","brands":[{"id":"ankama","name":"Ankama","url":"https://domainspoof.com/brands/ankama"}],"dns":"resolved","resolved":["79.133.41.203"],"resolved_at":"2026-11-06T08:45:34Z","dns_checked_at":"2026-11-06T08:45:34.000Z","dns_since":"2026-11-05T08:45:05.000Z","findings":[{"id":"frc2rsu5ggjyqyzsavwcc","kind":"phishing_infrastructure","summary":"Resolved to 79.133.41.203, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T07:57:28.998Z","first_published":"2026-11-05T08:42:24.679Z","address":"79.133.41.203","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/ankama"},{"hostname":"mail.fastsmsverify.com.ng","first_observed":"2026-11-05T07:31:10.076Z","first_published":"2026-11-05T08:42:24.679Z","brands":[],"dns":"resolved","resolved":["163.61.188.7"],"resolved_at":"2026-11-05T07:31:31Z","dns_checked_at":"2026-11-06T08:45:34.000Z","dns_since":"2026-11-05T08:45:05.000Z","findings":[{"id":"fm7nv4ey6cqcfpug6zqfa","kind":"reported_domain","summary":"Under fastsmsverify.com.ng, reported by PhishDestroy","first_observed":"2026-11-05T07:31:10.076Z","first_published":"2026-11-05T08:42:24.679Z","source":"phishdestroy","source_name":"PhishDestroy","under":"fastsmsverify.com.ng","source_url":"https://phishdestroy.io/domain/fastsmsverify.com.ng/"}],"url":"https://domainspoof.com/live?show=all&q=mail.fastsmsverify.com.ng"},{"hostname":"mail.streijl.eu","first_observed":"2026-11-05T07:46:08.429Z","first_published":"2026-11-05T08:42:24.679Z","brands":[],"dns":"resolved","resolved":["185.87.187.239","2a00:f10:305:0:1c00:c9ff:fe00:527"],"resolved_at":"2026-11-05T07:57:28Z","dns_checked_at":"2026-11-06T08:45:34.000Z","dns_since":"2026-11-05T08:45:05.000Z","findings":[{"id":"fiqa6j2m5u2x7v4v53lcb","kind":"reported_domain","summary":"Under streijl.eu, reported by PhishDestroy","first_observed":"2026-11-05T07:46:08.429Z","first_published":"2026-11-05T08:42:24.679Z","source":"phishdestroy","source_name":"PhishDestroy","under":"streijl.eu","source_url":"https://phishdestroy.io/domain/streijl.eu/"}],"url":"https://domainspoof.com/live?show=all&q=mail.streijl.eu"},{"hostname":"mailer.dispatch.bitead.com","first_observed":"2026-11-05T08:05:35.267Z","first_published":"2026-11-05T08:42:24.679Z","brands":[],"dns":"resolved","resolved":["51.38.13.155"],"resolved_at":"2026-11-05T08:13:18Z","dns_checked_at":"2026-11-06T08:45:34.000Z","dns_since":"2026-11-05T08:45:05.000Z","findings":[{"id":"fu3y5r6hxaellb5rzartq","kind":"reported_domain","summary":"Under bitead.com, listed by MetaMask","first_observed":"2026-11-05T08:05:35.267Z","first_published":"2026-11-05T08:42:24.679Z","source":"metamask","source_name":"MetaMask","under":"bitead.com"}],"url":"https://domainspoof.com/live?show=all&q=mailer.dispatch.bitead.com"},{"hostname":"malivraison-mondial-be.com","first_observed":"2026-11-05T08:16:48.887Z","first_published":"2026-11-05T08:42:24.679Z","brands":[],"dns":"not_found","resolved":["101.1.16.9"],"resolved_at":"2026-11-05T08:20:08Z","dns_checked_at":"2026-11-06T12:48:08.000Z","findings":[{"id":"fkmhc65tsebayhhi6nqwz","kind":"reported_domain","summary":"Reported by PhishTank","first_observed":"2026-11-05T08:16:48.887Z","first_published":"2026-11-05T08:42:24.679Z","source":"phishtank","source_name":"PhishTank","source_url":"https://phishtank.org/phish_detail.php?phish_id=9554726"}],"url":"https://domainspoof.com/live?show=all&q=malivraison-mondial-be.com"},{"hostname":"mantra88-x-jagoledak-033.eliaruizwork.com","first_observed":"2026-11-05T07:31:10.076Z","first_published":"2026-11-05T08:42:24.679Z","brands":[],"dns":"resolved","resolved":["104.21.13.225","172.67.133.81"],"resolved_at":"2026-11-05T07:31:31Z","dns_checked_at":"2026-11-06T08:45:34.000Z","dns_since":"2026-11-05T08:45:05.000Z","findings":[{"id":"f6lnbn7grvnv5x67gqazn","kind":"reported_domain","summary":"Under eliaruizwork.com, reported by PhishDestroy","first_observed":"2026-11-05T07:31:10.076Z","first_published":"2026-11-05T08:42:24.679Z","source":"phishdestroy","source_name":"PhishDestroy","under":"eliaruizwork.com","source_url":"https://phishdestroy.io/domain/eliaruizwork.com/"}],"url":"https://domainspoof.com/live?show=all&q=mantra88-x-jagoledak-033.eliaruizwork.com"},{"hostname":"marketplace.lifeyield.finance","first_observed":"2026-11-05T08:05:35.267Z","first_published":"2026-11-05T08:42:24.679Z","brands":[],"dns":"resolved","resolved":["104.18.22.186","104.18.23.186"],"resolved_at":"2026-11-05T08:13:19Z","dns_checked_at":"2026-11-06T08:45:34.000Z","dns_since":"2026-11-05T08:45:05.000Z","findings":[{"id":"fpkrmtbegtdjhr5q4bajp","kind":"reported_domain","summary":"Under lifeyield.finance, listed by MetaMask","first_observed":"2026-11-05T08:05:35.267Z","first_published":"2026-11-05T08:42:24.679Z","source":"metamask","source_name":"MetaMask","under":"lifeyield.finance"}],"url":"https://domainspoof.com/live?show=all&q=marketplace.lifeyield.finance"},{"hostname":"matbet756.icu","first_observed":"2026-11-05T08:15:51.469Z","first_published":"2026-11-05T08:42:24.679Z","brands":[],"dns":"resolved","resolved":["104.21.54.145","172.67.139.102"],"resolved_at":"2026-11-05T08:25:22Z","dns_checked_at":"2026-11-06T08:45:34.000Z","dns_since":"2026-11-05T08:45:05.000Z","findings":[{"id":"fngbigicic4vylshix3wp","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T08:15:51.469Z","first_published":"2026-11-05T08:42:24.679Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/matbet756.icu/"}],"url":"https://domainspoof.com/live?show=all&q=matbet756.icu"},{"hostname":"mavi-bet-erisim34.icu","first_observed":"2026-11-05T07:46:08.429Z","first_published":"2026-11-05T08:42:24.679Z","brands":[],"dns":"resolved","resolved":["104.21.51.34","172.67.220.120"],"resolved_at":"2026-11-05T07:57:28Z","dns_checked_at":"2026-11-06T08:45:34.000Z","dns_since":"2026-11-05T08:45:05.000Z","findings":[{"id":"f6yzk2aggqln53a6v4gcs","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T07:46:08.429Z","first_published":"2026-11-05T08:42:24.679Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/mavi-bet-erisim34.icu/"}],"url":"https://domainspoof.com/live?show=all&q=mavi-bet-erisim34.icu"},{"hostname":"mcc.mstblockchain.com","first_observed":"2026-11-05T08:31:20.384Z","first_published":"2026-11-05T08:42:24.679Z","brands":[],"dns":"resolved","resolved":["45.198.13.235"],"resolved_at":"2026-11-05T08:39:52Z","dns_checked_at":"2026-11-06T08:45:34.000Z","dns_since":"2026-11-05T08:45:05.000Z","findings":[{"id":"ftum5upyfyklbpiyxxgew","kind":"reported_domain","summary":"Under mstblockchain.com, reported by PhishDestroy","first_observed":"2026-11-05T08:31:20.384Z","first_published":"2026-11-05T08:42:24.679Z","source":"phishdestroy","source_name":"PhishDestroy","under":"mstblockchain.com","source_url":"https://phishdestroy.io/domain/mstblockchain.com/"}],"url":"https://domainspoof.com/live?show=all&q=mcc.mstblockchain.com"},{"hostname":"michaelkors-ua.online","first_observed":"2026-11-05T08:04:20.242Z","first_published":"2026-11-05T08:42:24.679Z","brands":[{"id":"michael-kors","name":"Michael Kors","url":"https://domainspoof.com/brands/michael-kors"}],"dns":"resolved","resolved":["185.104.45.89","185.104.45.189"],"resolved_at":"2026-11-06T08:45:34Z","dns_checked_at":"2026-11-06T08:45:34.000Z","dns_since":"2026-11-05T08:45:05.000Z","findings":[{"id":"f43abbd6lbvbay6ddq5wu","kind":"phishing_infrastructure","summary":"Resolved to 185.104.45.89, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T08:04:20.242Z","first_published":"2026-11-05T08:42:24.679Z","address":"185.104.45.89","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/michael-kors"},{"hostname":"michaelkors.org.ua","first_observed":"2026-11-05T08:04:20.261Z","first_published":"2026-11-05T08:42:24.679Z","brands":[{"id":"michael-kors","name":"Michael Kors","url":"https://domainspoof.com/brands/michael-kors"}],"dns":"resolved","resolved":["185.104.45.89","185.104.45.189"],"resolved_at":"2026-11-06T08:45:34Z","dns_checked_at":"2026-11-06T08:45:34.000Z","dns_since":"2026-11-05T08:45:05.000Z","findings":[{"id":"fv6lea5o4v3lzbfdxv2y2","kind":"phishing_infrastructure","summary":"Resolved to 185.104.45.89, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T08:04:20.261Z","first_published":"2026-11-05T08:42:24.679Z","address":"185.104.45.89","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/michael-kors"},{"hostname":"mindnetwork-xyz.pages.dev","first_observed":"2026-11-05T08:31:20.384Z","first_published":"2026-11-05T08:42:24.679Z","brands":[],"dns":"resolved","resolved":["172.66.44.113","172.66.47.143"],"resolved_at":"2026-11-05T08:39:52Z","dns_checked_at":"2026-11-06T08:45:34.000Z","dns_since":"2026-11-05T08:45:05.000Z","findings":[{"id":"ffp5zotmgegzmdgovcuir","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T08:31:20.384Z","first_published":"2026-11-05T08:42:24.679Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=mindnetwork-xyz.pages.dev"},{"hostname":"monadvisian.com","first_observed":"2026-11-05T08:00:58.346Z","first_published":"2026-11-05T08:42:24.679Z","brands":[],"dns":"resolved","resolved":["104.21.18.122","172.67.181.209"],"resolved_at":"2026-11-05T08:09:48Z","dns_checked_at":"2026-11-06T08:45:34.000Z","dns_since":"2026-11-05T08:45:05.000Z","findings":[{"id":"f2z6znggfvd7lqmgw7qfr","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T08:00:58.346Z","first_published":"2026-11-05T08:42:24.679Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=monadvisian.com"},{"hostname":"mondial-malivraison-be.com","first_observed":"2026-11-05T08:16:48.887Z","first_published":"2026-11-05T08:42:24.679Z","brands":[],"dns":"resolved","resolved":["101.1.16.9"],"resolved_at":"2026-11-05T08:20:08Z","dns_checked_at":"2026-11-06T08:45:34.000Z","dns_since":"2026-11-05T08:45:05.000Z","findings":[{"id":"f4zrdrtkk5juxcxzn3mwc","kind":"reported_domain","summary":"Reported by PhishTank","first_observed":"2026-11-05T08:16:48.887Z","first_published":"2026-11-05T08:42:24.679Z","source":"phishtank","source_name":"PhishTank","source_url":"https://phishtank.org/phish_detail.php?phish_id=9554742"}],"url":"https://domainspoof.com/live?show=all&q=mondial-malivraison-be.com"},{"hostname":"monerai.io","first_observed":"2026-11-05T07:56:22.026Z","first_published":"2026-11-05T08:42:24.679Z","brands":[],"dns":"resolved","resolved":["104.21.15.25","172.67.161.14"],"resolved_at":"2026-11-05T08:04:21Z","dns_checked_at":"2026-11-06T08:45:34.000Z","dns_since":"2026-11-05T08:45:05.000Z","findings":[{"id":"f4z2kdfa2washiqfpghyo","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T07:56:22.026Z","first_published":"2026-11-05T08:42:24.679Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=monerai.io"},{"hostname":"mtlwqued.jzigfqra.yprhugne.gvuolhky.emnbzdvj.uatmfwcq.gatewaylearning.ezgateway.net","first_observed":"2026-11-05T08:31:20.384Z","first_published":"2026-11-05T08:42:24.679Z","brands":[],"dns":"resolved","resolved":["15.204.116.29"],"resolved_at":"2026-11-05T08:39:52Z","dns_checked_at":"2026-11-06T08:45:34.000Z","dns_since":"2026-11-05T08:45:05.000Z","findings":[{"id":"fovkdi2wnpbfyqn54xtab","kind":"reported_domain","summary":"Under ezgateway.net, listed by USOM","first_observed":"2026-11-05T08:31:20.384Z","first_published":"2026-11-05T08:42:24.679Z","source":"usom","source_name":"USOM","under":"ezgateway.net"}],"url":"https://domainspoof.com/live?show=all&q=mtlwqued.jzigfqra.yprhugne.gvuolhky.emnbzdvj.uatmfwcq.gatewaylearning.ezgateway.net"},{"hostname":"mytrixhalogpt.com","first_observed":"2026-11-05T08:31:20.384Z","first_published":"2026-11-05T08:42:24.679Z","brands":[],"dns":"resolved","resolved":["104.21.42.203","172.67.210.15"],"resolved_at":"2026-11-05T08:39:52Z","dns_checked_at":"2026-11-06T08:45:34.000Z","dns_since":"2026-11-05T08:45:05.000Z","findings":[{"id":"flcjwrc2ux7uknk4veoxp","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T08:31:20.384Z","first_published":"2026-11-05T08:42:24.679Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=mytrixhalogpt.com"},{"hostname":"nbvcmndsw.monster","first_observed":"2026-11-05T08:05:35.267Z","first_published":"2026-11-05T08:42:24.679Z","brands":[],"dns":"resolved","resolved":["104.21.93.24","172.67.203.6"],"resolved_at":"2026-11-05T08:13:20Z","dns_checked_at":"2026-11-06T08:45:34.000Z","dns_since":"2026-11-05T08:45:05.000Z","findings":[{"id":"flnhuszraaonposacgq2b","kind":"reported_domain","summary":"Listed by NPA 165 (e-commerce)","first_observed":"2026-11-05T08:05:35.267Z","first_published":"2026-11-05T08:42:24.679Z","source":"npa","source_name":"NPA 165","claim":{"category":"e-commerce"}}],"url":"https://domainspoof.com/live?show=all&q=nbvcmndsw.monster"},{"hostname":"neng4d-x-sontogel-037.eliaruizwork.com","first_observed":"2026-11-05T07:31:10.076Z","first_published":"2026-11-05T08:42:24.679Z","brands":[],"dns":"resolved","resolved":["104.21.13.225","172.67.133.81"],"resolved_at":"2026-11-05T07:31:31Z","dns_checked_at":"2026-11-06T08:45:34.000Z","dns_since":"2026-11-05T08:45:05.000Z","findings":[{"id":"f37wpn2yco4smcdlk4cb4","kind":"reported_domain","summary":"Under eliaruizwork.com, reported by PhishDestroy","first_observed":"2026-11-05T07:31:10.076Z","first_published":"2026-11-05T08:42:24.679Z","source":"phishdestroy","source_name":"PhishDestroy","under":"eliaruizwork.com","source_url":"https://phishdestroy.io/domain/eliaruizwork.com/"}],"url":"https://domainspoof.com/live?show=all&q=neng4d-x-sontogel-037.eliaruizwork.com"},{"hostname":"neu.flvwdialog.de","first_observed":"2026-11-05T08:00:58.346Z","first_published":"2026-11-05T08:42:24.679Z","brands":[],"dns":"resolved","resolved":["83.138.93.15"],"resolved_at":"2026-11-05T08:09:49Z","dns_checked_at":"2026-11-06T08:45:34.000Z","dns_since":"2026-11-05T08:45:05.000Z","findings":[{"id":"fsylhxfvvmrwxq6bjrjbd","kind":"reported_domain","summary":"Under flvwdialog.de, reported by PhishDestroy","first_observed":"2026-11-05T08:00:58.346Z","first_published":"2026-11-05T08:42:24.679Z","source":"phishdestroy","source_name":"PhishDestroy","under":"flvwdialog.de","source_url":"https://phishdestroy.io/domain/flvwdialog.de/"}],"url":"https://domainspoof.com/live?show=all&q=neu.flvwdialog.de"},{"hostname":"new-alexistogel-x-dorahoki-040.eliaruizwork.com","first_observed":"2026-11-05T07:31:10.076Z","first_published":"2026-11-05T08:42:24.679Z","brands":[],"dns":"resolved","resolved":["104.21.13.225","172.67.133.81"],"resolved_at":"2026-11-05T07:31:32Z","dns_checked_at":"2026-11-06T08:45:34.000Z","dns_since":"2026-11-05T08:45:05.000Z","findings":[{"id":"fks4qb5ttknjlliepeq23","kind":"reported_domain","summary":"Under eliaruizwork.com, reported by PhishDestroy","first_observed":"2026-11-05T07:31:10.076Z","first_published":"2026-11-05T08:42:24.679Z","source":"phishdestroy","source_name":"PhishDestroy","under":"eliaruizwork.com","source_url":"https://phishdestroy.io/domain/eliaruizwork.com/"}],"url":"https://domainspoof.com/live?show=all&q=new-alexistogel-x-dorahoki-040.eliaruizwork.com"},{"hostname":"new-badak178-x-gasing777-036.eliaruizwork.com","first_observed":"2026-11-05T07:31:10.076Z","first_published":"2026-11-05T08:42:24.679Z","brands":[],"dns":"resolved","resolved":["104.21.13.225","172.67.133.81"],"resolved_at":"2026-11-05T07:31:32Z","dns_checked_at":"2026-11-06T08:45:34.000Z","dns_since":"2026-11-05T08:45:05.000Z","findings":[{"id":"f7n4i7lvor5tk5v6ta6k3","kind":"reported_domain","summary":"Under eliaruizwork.com, reported by PhishDestroy","first_observed":"2026-11-05T07:31:10.076Z","first_published":"2026-11-05T08:42:24.679Z","source":"phishdestroy","source_name":"PhishDestroy","under":"eliaruizwork.com","source_url":"https://phishdestroy.io/domain/eliaruizwork.com/"}],"url":"https://domainspoof.com/live?show=all&q=new-badak178-x-gasing777-036.eliaruizwork.com"},{"hostname":"new-bobatoto-x-surya777-038.eliaruizwork.com","first_observed":"2026-11-05T07:31:10.076Z","first_published":"2026-11-05T08:42:24.679Z","brands":[],"dns":"resolved","resolved":["104.21.13.225","172.67.133.81"],"resolved_at":"2026-11-05T07:31:32Z","dns_checked_at":"2026-11-06T08:45:34.000Z","dns_since":"2026-11-05T08:45:05.000Z","findings":[{"id":"fa56hslefofe63wkfji4q","kind":"reported_domain","summary":"Under eliaruizwork.com, reported by PhishDestroy","first_observed":"2026-11-05T07:31:10.076Z","first_published":"2026-11-05T08:42:24.679Z","source":"phishdestroy","source_name":"PhishDestroy","under":"eliaruizwork.com","source_url":"https://phishdestroy.io/domain/eliaruizwork.com/"}],"url":"https://domainspoof.com/live?show=all&q=new-bobatoto-x-surya777-038.eliaruizwork.com"},{"hostname":"new-dorahoki-x-pisang123-032.eliaruizwork.com","first_observed":"2026-11-05T07:31:10.076Z","first_published":"2026-11-05T08:42:24.679Z","brands":[],"dns":"resolved","resolved":["104.21.13.225","172.67.133.81"],"resolved_at":"2026-11-05T07:31:32Z","dns_checked_at":"2026-11-06T08:45:34.000Z","dns_since":"2026-11-05T08:45:05.000Z","findings":[{"id":"ftoqhpu2duucxq3fb7p3o","kind":"reported_domain","summary":"Under eliaruizwork.com, reported by PhishDestroy","first_observed":"2026-11-05T07:31:10.076Z","first_published":"2026-11-05T08:42:24.679Z","source":"phishdestroy","source_name":"PhishDestroy","under":"eliaruizwork.com","source_url":"https://phishdestroy.io/domain/eliaruizwork.com/"}],"url":"https://domainspoof.com/live?show=all&q=new-dorahoki-x-pisang123-032.eliaruizwork.com"},{"hostname":"new-empire88-x-suster123-031.eliaruizwork.com","first_observed":"2026-11-05T07:31:10.076Z","first_published":"2026-11-05T08:42:24.679Z","brands":[],"dns":"resolved","resolved":["104.21.13.225","172.67.133.81"],"resolved_at":"2026-11-05T07:31:32Z","dns_checked_at":"2026-11-06T08:45:34.000Z","dns_since":"2026-11-05T08:45:05.000Z","findings":[{"id":"fgnbf6wzygu5un4v3qv5u","kind":"reported_domain","summary":"Under eliaruizwork.com, reported by PhishDestroy","first_observed":"2026-11-05T07:31:10.076Z","first_published":"2026-11-05T08:42:24.679Z","source":"phishdestroy","source_name":"PhishDestroy","under":"eliaruizwork.com","source_url":"https://phishdestroy.io/domain/eliaruizwork.com/"}],"url":"https://domainspoof.com/live?show=all&q=new-empire88-x-suster123-031.eliaruizwork.com"},{"hostname":"new-mantra88-x-jagoledak-033.eliaruizwork.com","first_observed":"2026-11-05T07:31:10.076Z","first_published":"2026-11-05T08:42:24.679Z","brands":[],"dns":"resolved","resolved":["104.21.13.225","172.67.133.81"],"resolved_at":"2026-11-05T07:31:32Z","dns_checked_at":"2026-11-06T08:45:34.000Z","dns_since":"2026-11-05T08:45:05.000Z","findings":[{"id":"fxiestvrne7ffw6zwwm3t","kind":"reported_domain","summary":"Under eliaruizwork.com, reported by PhishDestroy","first_observed":"2026-11-05T07:31:10.076Z","first_published":"2026-11-05T08:42:24.679Z","source":"phishdestroy","source_name":"PhishDestroy","under":"eliaruizwork.com","source_url":"https://phishdestroy.io/domain/eliaruizwork.com/"}],"url":"https://domainspoof.com/live?show=all&q=new-mantra88-x-jagoledak-033.eliaruizwork.com"},{"hostname":"new-neng4d-x-sontogel-037.eliaruizwork.com","first_observed":"2026-11-05T07:31:10.076Z","first_published":"2026-11-05T08:42:24.679Z","brands":[],"dns":"resolved","resolved":["104.21.13.225","172.67.133.81"],"resolved_at":"2026-11-05T07:31:32Z","dns_checked_at":"2026-11-06T08:45:34.000Z","dns_since":"2026-11-05T08:45:05.000Z","findings":[{"id":"ft56heepiiy7h4tvwftfa","kind":"reported_domain","summary":"Under eliaruizwork.com, reported by PhishDestroy","first_observed":"2026-11-05T07:31:10.076Z","first_published":"2026-11-05T08:42:24.679Z","source":"phishdestroy","source_name":"PhishDestroy","under":"eliaruizwork.com","source_url":"https://phishdestroy.io/domain/eliaruizwork.com/"}],"url":"https://domainspoof.com/live?show=all&q=new-neng4d-x-sontogel-037.eliaruizwork.com"},{"hostname":"new-pisang123-x-gasing777-039.eliaruizwork.com","first_observed":"2026-11-05T07:31:10.076Z","first_published":"2026-11-05T08:42:24.679Z","brands":[],"dns":"resolved","resolved":["104.21.13.225","172.67.133.81"],"resolved_at":"2026-11-05T07:31:32Z","dns_checked_at":"2026-11-06T08:45:34.000Z","dns_since":"2026-11-05T08:45:05.000Z","findings":[{"id":"fs3h7ta23r33bcchcrhgf","kind":"reported_domain","summary":"Under eliaruizwork.com, reported by PhishDestroy","first_observed":"2026-11-05T07:31:10.076Z","first_published":"2026-11-05T08:42:24.679Z","source":"phishdestroy","source_name":"PhishDestroy","under":"eliaruizwork.com","source_url":"https://phishdestroy.io/domain/eliaruizwork.com/"}],"url":"https://domainspoof.com/live?show=all&q=new-pisang123-x-gasing777-039.eliaruizwork.com"},{"hostname":"new-pos4d-x-bobatoto-034.eliaruizwork.com","first_observed":"2026-11-05T07:31:10.076Z","first_published":"2026-11-05T08:42:24.679Z","brands":[],"dns":"resolved","resolved":["104.21.13.225","172.67.133.81"],"resolved_at":"2026-11-05T07:31:32Z","dns_checked_at":"2026-11-06T08:45:34.000Z","dns_since":"2026-11-05T08:45:05.000Z","findings":[{"id":"fw7rrkdbstocej3fqvbug","kind":"reported_domain","summary":"Under eliaruizwork.com, reported by PhishDestroy","first_observed":"2026-11-05T07:31:10.076Z","first_published":"2026-11-05T08:42:24.679Z","source":"phishdestroy","source_name":"PhishDestroy","under":"eliaruizwork.com","source_url":"https://phishdestroy.io/domain/eliaruizwork.com/"}],"url":"https://domainspoof.com/live?show=all&q=new-pos4d-x-bobatoto-034.eliaruizwork.com"},{"hostname":"new-toto88-x-gasing777-035.eliaruizwork.com","first_observed":"2026-11-05T07:31:10.076Z","first_published":"2026-11-05T08:42:24.679Z","brands":[],"dns":"resolved","resolved":["104.21.13.225","172.67.133.81"],"resolved_at":"2026-11-05T07:31:32Z","dns_checked_at":"2026-11-06T08:45:34.000Z","dns_since":"2026-11-05T08:45:05.000Z","findings":[{"id":"f5x3atwyrk3nzyk5zxm77","kind":"reported_domain","summary":"Under eliaruizwork.com, reported by PhishDestroy","first_observed":"2026-11-05T07:31:10.076Z","first_published":"2026-11-05T08:42:24.679Z","source":"phishdestroy","source_name":"PhishDestroy","under":"eliaruizwork.com","source_url":"https://phishdestroy.io/domain/eliaruizwork.com/"}],"url":"https://domainspoof.com/live?show=all&q=new-toto88-x-gasing777-035.eliaruizwork.com"},{"hostname":"news.bityt.com","first_observed":"2026-11-05T07:36:20.749Z","first_published":"2026-11-05T08:42:24.679Z","brands":[],"dns":"resolved","resolved":["104.21.16.22","172.67.165.248"],"resolved_at":"2026-11-05T07:36:48Z","dns_checked_at":"2026-11-06T08:45:34.000Z","dns_since":"2026-11-05T08:45:05.000Z","findings":[{"id":"fxecns3xkf5yucmyeggtm","kind":"reported_domain","summary":"Under bityt.com, listed by MetaMask","first_observed":"2026-11-05T07:36:20.749Z","first_published":"2026-11-05T08:42:24.679Z","source":"metamask","source_name":"MetaMask","under":"bityt.com"}],"url":"https://domainspoof.com/live?show=all&q=news.bityt.com"},{"hostname":"niaonzm.casa","first_observed":"2026-11-05T08:16:48.887Z","first_published":"2026-11-05T08:42:24.679Z","brands":[],"dns":"not_found","resolved":[],"resolved_at":"2026-11-05T08:20:07Z","dns_checked_at":"2026-11-06T08:45:34.000Z","dns_since":"2026-11-05T08:45:05.000Z","findings":[{"id":"fkejfpv6gwvrsoigg7u3t","kind":"reported_domain","summary":"Reported by PhishTank","first_observed":"2026-11-05T08:16:48.887Z","first_published":"2026-11-05T08:42:24.679Z","source":"phishtank","source_name":"PhishTank","source_url":"https://phishtank.org/phish_detail.php?phish_id=9554752"}],"url":"https://domainspoof.com/live?show=all&q=niaonzm.casa"},{"hostname":"nihayakssa.com","first_observed":"2026-11-05T08:31:20.384Z","first_published":"2026-11-05T08:42:24.679Z","brands":[],"dns":"resolved","resolved":["103.214.6.202","2a06:5b82:2070:8300::11","2a06:5b82:2070:8300::12"],"resolved_at":"2026-11-05T08:39:53Z","dns_checked_at":"2026-11-06T08:45:34.000Z","dns_since":"2026-11-05T08:45:05.000Z","findings":[{"id":"fqwzjunhhz5vpccgtta4a","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T08:31:20.384Z","first_published":"2026-11-05T08:42:24.679Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/nihayakssa.com/"}],"url":"https://domainspoof.com/live?show=all&q=nihayakssa.com"},{"hostname":"novoacesso.sbs","first_observed":"2026-11-05T08:16:48.887Z","first_published":"2026-11-05T08:42:24.679Z","brands":[],"dns":"resolved","resolved":["94.156.152.36"],"resolved_at":"2026-11-05T08:20:07Z","dns_checked_at":"2026-11-06T08:45:34.000Z","dns_since":"2026-11-05T08:45:05.000Z","findings":[{"id":"fhaoyrpym6ptyhlcnjuju","kind":"reported_domain","summary":"Reported by PhishTank","first_observed":"2026-11-05T08:16:48.887Z","first_published":"2026-11-05T08:42:24.679Z","source":"phishtank","source_name":"PhishTank","source_url":"https://phishtank.org/phish_detail.php?phish_id=9554782"}],"url":"https://domainspoof.com/live?show=all&q=novoacesso.sbs"},{"hostname":"ntf.postinode.com","first_observed":"2026-11-05T08:15:51.469Z","first_published":"2026-11-05T08:42:24.679Z","brands":[],"dns":"resolved","resolved":["65.109.30.165"],"resolved_at":"2026-11-05T08:25:24Z","dns_checked_at":"2026-11-06T08:45:34.000Z","dns_since":"2026-11-05T08:45:05.000Z","findings":[{"id":"fkh4iuadnpcsprm6xuivs","kind":"reported_domain","summary":"Under postinode.com, reported by PhishDestroy","first_observed":"2026-11-05T08:15:51.469Z","first_published":"2026-11-05T08:42:24.679Z","source":"phishdestroy","source_name":"PhishDestroy","under":"postinode.com","source_url":"https://phishdestroy.io/domain/postinode.com/"}],"url":"https://domainspoof.com/live?show=all&q=ntf.postinode.com"},{"hostname":"ntkpsims.onepay-systemserrorcheck.com","first_observed":"2026-11-05T08:05:35.267Z","first_published":"2026-11-05T08:42:24.679Z","brands":[],"dns":"resolved","resolved":["185.53.179.136"],"resolved_at":"2026-11-05T08:13:20Z","dns_checked_at":"2026-11-06T08:45:34.000Z","dns_since":"2026-11-05T08:45:05.000Z","findings":[{"id":"f3r7yzpirs3uyzom4dyui","kind":"reported_domain","summary":"Under onepay-systemserrorcheck.com, reported by PhishDestroy","first_observed":"2026-11-05T08:05:35.267Z","first_published":"2026-11-05T08:42:24.679Z","source":"phishdestroy","source_name":"PhishDestroy","under":"onepay-systemserrorcheck.com","source_url":"https://phishdestroy.io/domain/onepay-systemserrorcheck.com/"}],"url":"https://domainspoof.com/live?show=all&q=ntkpsims.onepay-systemserrorcheck.com"},{"hostname":"nxlejwct.pubxdtgi.68o6prls9m8lftn9.gatewaylearning.ezgateway.net","first_observed":"2026-11-05T08:31:20.384Z","first_published":"2026-11-05T08:42:24.679Z","brands":[],"dns":"resolved","resolved":["15.204.116.29"],"resolved_at":"2026-11-05T08:39:53Z","dns_checked_at":"2026-11-06T08:45:34.000Z","dns_since":"2026-11-05T08:45:05.000Z","findings":[{"id":"fkwfwioorh7stb7epwg7r","kind":"reported_domain","summary":"Under ezgateway.net, listed by USOM","first_observed":"2026-11-05T08:31:20.384Z","first_published":"2026-11-05T08:42:24.679Z","source":"usom","source_name":"USOM","under":"ezgateway.net"}],"url":"https://domainspoof.com/live?show=all&q=nxlejwct.pubxdtgi.68o6prls9m8lftn9.gatewaylearning.ezgateway.net"},{"hostname":"online.rbizz.com.au","first_observed":"2026-11-05T08:10:43.722Z","first_published":"2026-11-05T08:42:24.679Z","brands":[],"dns":"resolved","resolved":["13.248.148.104","76.223.20.46"],"resolved_at":"2026-11-05T08:21:42Z","dns_checked_at":"2026-11-06T08:45:34.000Z","dns_since":"2026-11-05T08:45:05.000Z","findings":[{"id":"fqsyy5emdnehccfzd3pht","kind":"reported_domain","summary":"Under rbizz.com.au, listed by MetaMask","first_observed":"2026-11-05T08:10:43.722Z","first_published":"2026-11-05T08:42:24.679Z","source":"metamask","source_name":"MetaMask","under":"rbizz.com.au"}],"url":"https://domainspoof.com/live?show=all&q=online.rbizz.com.au"},{"hostname":"opdndsa.xyz","first_observed":"2026-11-05T08:05:35.267Z","first_published":"2026-11-05T08:42:24.679Z","brands":[],"dns":"resolved","resolved":["104.21.59.146","172.67.179.77"],"resolved_at":"2026-11-05T08:13:22Z","dns_checked_at":"2026-11-06T08:45:34.000Z","dns_since":"2026-11-05T08:45:05.000Z","findings":[{"id":"fyew36hej3lwickfy6sjo","kind":"reported_domain","summary":"Listed by NPA 165 (e-commerce)","first_observed":"2026-11-05T08:05:35.267Z","first_published":"2026-11-05T08:42:24.679Z","source":"npa","source_name":"NPA 165","claim":{"category":"e-commerce"}}],"url":"https://domainspoof.com/live?show=all&q=opdndsa.xyz"},{"hostname":"oss.aio0o.top","first_observed":"2026-11-05T08:05:35.267Z","first_published":"2026-11-05T08:42:24.679Z","brands":[],"dns":"resolved","resolved":["118.183.246.102"],"resolved_at":"2026-11-05T08:13:22Z","dns_checked_at":"2026-11-06T08:45:34.000Z","dns_since":"2026-11-05T08:45:05.000Z","findings":[{"id":"fhtdugrhuruuiprwm4si5","kind":"reported_domain","summary":"Under aio0o.top, listed by MetaMask","first_observed":"2026-11-05T08:05:35.267Z","first_published":"2026-11-05T08:42:24.679Z","source":"metamask","source_name":"MetaMask","under":"aio0o.top"}],"url":"https://domainspoof.com/live?show=all&q=oss.aio0o.top"},{"hostname":"owxpilbn.nabyfkgv.wqxpitde.kvjsbyeg.emnbzdvj.uatmfwcq.gatewaylearning.ezgateway.net","first_observed":"2026-11-05T08:31:20.384Z","first_published":"2026-11-05T08:42:24.679Z","brands":[],"dns":"resolved","resolved":["15.204.116.29"],"resolved_at":"2026-11-05T08:39:53Z","dns_checked_at":"2026-11-06T08:45:34.000Z","dns_since":"2026-11-05T08:45:05.000Z","findings":[{"id":"f3qu5cnhlpits4mlbfqev","kind":"reported_domain","summary":"Under ezgateway.net, listed by USOM","first_observed":"2026-11-05T08:31:20.384Z","first_published":"2026-11-05T08:42:24.679Z","source":"usom","source_name":"USOM","under":"ezgateway.net"}],"url":"https://domainspoof.com/live?show=all&q=owxpilbn.nabyfkgv.wqxpitde.kvjsbyeg.emnbzdvj.uatmfwcq.gatewaylearning.ezgateway.net"},{"hostname":"panel.fresh-focus.pro","first_observed":"2026-11-05T07:36:20.749Z","first_published":"2026-11-05T08:42:24.679Z","brands":[],"dns":"resolved","resolved":["190.115.18.13"],"resolved_at":"2026-11-05T07:36:50Z","dns_checked_at":"2026-11-06T08:45:34.000Z","dns_since":"2026-11-05T08:45:05.000Z","findings":[{"id":"fprylwq5mkz5bsnmjp4bj","kind":"reported_domain","summary":"Under fresh-focus.pro, reported by PhishDestroy","first_observed":"2026-11-05T07:36:20.749Z","first_published":"2026-11-05T08:42:24.679Z","source":"phishdestroy","source_name":"PhishDestroy","under":"fresh-focus.pro","source_url":"https://phishdestroy.io/domain/fresh-focus.pro/"}],"url":"https://domainspoof.com/live?show=all&q=panel.fresh-focus.pro"},{"hostname":"pilot.dolcegabbana.jp.cdn.cloudfalre.net","first_observed":"2026-11-05T07:41:00.909Z","first_published":"2026-11-05T08:42:24.679Z","brands":[],"dns":"resolved","resolved":["45.10.243.43"],"resolved_at":"2026-11-05T07:47:44Z","dns_checked_at":"2026-11-06T08:45:34.000Z","dns_since":"2026-11-05T08:45:05.000Z","findings":[{"id":"fr6p252simfnhanehorpl","kind":"reported_domain","summary":"Under cloudfalre.net, listed by MetaMask","first_observed":"2026-11-05T07:41:00.909Z","first_published":"2026-11-05T08:42:24.679Z","source":"metamask","source_name":"MetaMask","under":"cloudfalre.net"}],"url":"https://domainspoof.com/live?show=all&q=pilot.dolcegabbana.jp.cdn.cloudfalre.net"},{"hostname":"pisang123-x-gasing777-039.eliaruizwork.com","first_observed":"2026-11-05T07:31:10.076Z","first_published":"2026-11-05T08:42:24.679Z","brands":[],"dns":"resolved","resolved":["104.21.13.225","172.67.133.81"],"resolved_at":"2026-11-05T07:31:32Z","dns_checked_at":"2026-11-06T08:45:34.000Z","dns_since":"2026-11-05T08:45:05.000Z","findings":[{"id":"fdjojlyv4hfd64szf6fle","kind":"reported_domain","summary":"Under eliaruizwork.com, reported by PhishDestroy","first_observed":"2026-11-05T07:31:10.076Z","first_published":"2026-11-05T08:42:24.679Z","source":"phishdestroy","source_name":"PhishDestroy","under":"eliaruizwork.com","source_url":"https://phishdestroy.io/domain/eliaruizwork.com/"}],"url":"https://domainspoof.com/live?show=all&q=pisang123-x-gasing777-039.eliaruizwork.com"},{"hostname":"pollygon.digital","first_observed":"2026-11-05T08:10:43.722Z","first_published":"2026-11-05T08:42:24.679Z","brands":[],"dns":"resolved","resolved":["104.21.23.112","172.67.210.207"],"resolved_at":"2026-11-05T08:21:44Z","dns_checked_at":"2026-11-06T08:45:34.000Z","dns_since":"2026-11-05T08:45:05.000Z","findings":[{"id":"fa7ygg4d6wznvsx5fu5t2","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T08:10:43.722Z","first_published":"2026-11-05T08:42:24.679Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=pollygon.digital"},{"hostname":"pos4d-x-bobatoto-034.eliaruizwork.com","first_observed":"2026-11-05T07:31:10.076Z","first_published":"2026-11-05T08:42:24.679Z","brands":[],"dns":"resolved","resolved":["104.21.13.225","172.67.133.81"],"resolved_at":"2026-11-05T07:31:32Z","dns_checked_at":"2026-11-06T08:45:34.000Z","dns_since":"2026-11-05T08:45:05.000Z","findings":[{"id":"fibg5f3nwmocptjabnwih","kind":"reported_domain","summary":"Under eliaruizwork.com, reported by PhishDestroy","first_observed":"2026-11-05T07:31:10.076Z","first_published":"2026-11-05T08:42:24.679Z","source":"phishdestroy","source_name":"PhishDestroy","under":"eliaruizwork.com","source_url":"https://phishdestroy.io/domain/eliaruizwork.com/"}],"url":"https://domainspoof.com/live?show=all&q=pos4d-x-bobatoto-034.eliaruizwork.com"},{"hostname":"prefect.ni-electrical.com","first_observed":"2026-11-05T08:31:20.384Z","first_published":"2026-11-05T08:42:24.679Z","brands":[],"dns":"resolved","resolved":["109.238.86.5"],"resolved_at":"2026-11-05T08:39:53Z","dns_checked_at":"2026-11-06T08:45:34.000Z","dns_since":"2026-11-05T08:45:05.000Z","findings":[{"id":"fdclv7xkdtlj5ill7n3r2","kind":"reported_domain","summary":"Under ni-electrical.com, listed by CERT Polska","first_observed":"2026-11-05T08:31:20.384Z","first_published":"2026-11-05T08:42:24.679Z","source":"cert_polska","source_name":"CERT Polska","under":"ni-electrical.com"}],"url":"https://domainspoof.com/live?show=all&q=prefect.ni-electrical.com"},{"hostname":"preview-alb.zenledger.dev","first_observed":"2026-11-05T08:00:58.346Z","first_published":"2026-11-05T08:42:24.679Z","brands":[],"dns":"resolved","resolved":["104.20.28.62","172.66.164.119"],"resolved_at":"2026-11-05T08:09:49Z","dns_checked_at":"2026-11-06T08:45:34.000Z","dns_since":"2026-11-05T08:45:05.000Z","findings":[{"id":"f4szefwg5bdllghtc7kc6","kind":"reported_domain","summary":"Under zenledger.dev, reported by PhishDestroy","first_observed":"2026-11-05T08:00:58.346Z","first_published":"2026-11-05T08:42:24.679Z","source":"phishdestroy","source_name":"PhishDestroy","under":"zenledger.dev","source_url":"https://phishdestroy.io/domain/zenledger.dev/"}],"url":"https://domainspoof.com/live?show=all&q=preview-alb.zenledger.dev"},{"hostname":"project-ledgrcm-en.pages.dev","first_observed":"2026-11-05T07:41:00.909Z","first_published":"2026-11-05T08:42:24.679Z","brands":[],"dns":"resolved","resolved":["172.66.44.235","172.66.47.21"],"resolved_at":"2026-11-05T07:47:45Z","dns_checked_at":"2026-11-06T08:45:34.000Z","dns_since":"2026-11-05T08:45:05.000Z","findings":[{"id":"f5tyr6hp5rotirofopqrt","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T07:41:00.909Z","first_published":"2026-11-05T08:42:24.679Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=project-ledgrcm-en.pages.dev"},{"hostname":"qhdjaz.online","first_observed":"2026-11-05T08:21:00.540Z","first_published":"2026-11-05T08:42:24.679Z","brands":[],"dns":"resolved","resolved":["104.21.36.76","172.67.190.98"],"resolved_at":"2026-11-05T08:21:34Z","dns_checked_at":"2026-11-06T08:45:34.000Z","dns_since":"2026-11-05T08:45:05.000Z","findings":[{"id":"fkykpjqarj6n5b6zsuzm5","kind":"reported_domain","summary":"Listed by NPA 165 (information services)","first_observed":"2026-11-05T08:21:00.540Z","first_published":"2026-11-05T08:42:24.679Z","source":"npa","source_name":"NPA 165","claim":{"category":"information services"}}],"url":"https://domainspoof.com/live?show=all&q=qhdjaz.online"},{"hostname":"qkyy01.xyz","first_observed":"2026-11-05T07:51:14.197Z","first_published":"2026-11-05T08:42:24.679Z","brands":[],"dns":"resolved","resolved":["104.21.62.88","172.67.222.38"],"resolved_at":"2026-11-05T07:51:48Z","dns_checked_at":"2026-11-06T08:45:34.000Z","dns_since":"2026-11-05T08:45:05.000Z","findings":[{"id":"fvtzuu2spoexomx37a4mc","kind":"reported_domain","summary":"Listed by NPA 165 (transport and delivery)","first_observed":"2026-11-05T07:51:14.197Z","first_published":"2026-11-05T08:42:24.679Z","source":"npa","source_name":"NPA 165","claim":{"category":"transport and delivery"}}],"url":"https://domainspoof.com/live?show=all&q=qkyy01.xyz"},{"hostname":"rainbetcasino.se","first_observed":"2026-11-05T08:05:35.267Z","first_published":"2026-11-05T08:42:24.679Z","brands":[],"dns":"resolved","resolved":["104.21.24.200","172.67.220.125"],"resolved_at":"2026-11-05T08:05:43Z","dns_checked_at":"2026-11-06T08:45:34.000Z","dns_since":"2026-11-05T08:45:05.000Z","findings":[{"id":"fryap2yue33dryev65ijy","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T08:05:35.267Z","first_published":"2026-11-05T08:42:24.679Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=rainbetcasino.se"},{"hostname":"redkittencrew.sbs","first_observed":"2026-11-05T07:51:14.197Z","first_published":"2026-11-05T08:42:24.679Z","brands":[],"dns":"resolved","resolved":["104.21.66.13","172.67.198.42"],"resolved_at":"2026-11-05T07:51:48Z","dns_checked_at":"2026-11-06T08:45:34.000Z","dns_since":"2026-11-05T08:45:05.000Z","findings":[{"id":"fhx22paxmspl74pgpq7ce","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T07:51:14.197Z","first_published":"2026-11-05T08:42:24.679Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=redkittencrew.sbs"},{"hostname":"relaysan.com","first_observed":"2026-11-05T08:36:27.026Z","first_published":"2026-11-05T08:42:24.679Z","brands":[],"dns":"resolved","resolved":["104.21.41.161","172.67.148.57"],"resolved_at":"2026-11-05T08:36:32Z","dns_checked_at":"2026-11-06T08:45:34.000Z","dns_since":"2026-11-05T08:45:05.000Z","findings":[{"id":"fryrfvu42wq7cex7joz4m","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T08:36:27.026Z","first_published":"2026-11-05T08:42:24.679Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/relaysan.com/"}],"url":"https://domainspoof.com/live?show=all&q=relaysan.com"},{"hostname":"roollxwin.com","first_observed":"2026-11-05T08:31:20.384Z","first_published":"2026-11-05T08:42:24.679Z","brands":[],"dns":"resolved","resolved":["104.21.2.112","172.67.129.30"],"resolved_at":"2026-11-05T08:39:54Z","dns_checked_at":"2026-11-06T08:45:34.000Z","dns_since":"2026-11-05T08:45:05.000Z","findings":[{"id":"fdyquwybqkbsfycoagubp","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T08:31:20.384Z","first_published":"2026-11-05T08:42:24.679Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/roollxwin.com/"}],"url":"https://domainspoof.com/live?show=all&q=roollxwin.com"},{"hostname":"rustore.androidloading.com","first_observed":"2026-11-05T07:36:20.749Z","first_published":"2026-11-05T08:42:24.679Z","brands":[],"dns":"resolved","resolved":["185.178.208.191"],"resolved_at":"2026-11-05T07:36:51Z","dns_checked_at":"2026-11-06T08:45:34.000Z","dns_since":"2026-11-05T08:45:05.000Z","findings":[{"id":"fe5pnoronihcysq45a5gn","kind":"reported_domain","summary":"Under androidloading.com, reported by PhishDestroy","first_observed":"2026-11-05T07:36:20.749Z","first_published":"2026-11-05T08:42:24.679Z","source":"phishdestroy","source_name":"PhishDestroy","under":"androidloading.com","source_url":"https://phishdestroy.io/domain/androidloading.com/"}],"url":"https://domainspoof.com/live?show=all&q=rustore.androidloading.com"},{"hostname":"rxlumfyh.rgwqefpa.rdgznsfc.tomjzfci.tczglrpw.gatewaylearning.ezgateway.net","first_observed":"2026-11-05T08:31:20.384Z","first_published":"2026-11-05T08:42:24.679Z","brands":[],"dns":"resolved","resolved":["15.204.116.29"],"resolved_at":"2026-11-05T08:39:54Z","dns_checked_at":"2026-11-06T08:45:34.000Z","dns_since":"2026-11-05T08:45:05.000Z","findings":[{"id":"fuyflgnbo5r2nyl4scahy","kind":"reported_domain","summary":"Under ezgateway.net, listed by USOM","first_observed":"2026-11-05T08:31:20.384Z","first_published":"2026-11-05T08:42:24.679Z","source":"usom","source_name":"USOM","under":"ezgateway.net"}],"url":"https://domainspoof.com/live?show=all&q=rxlumfyh.rgwqefpa.rdgznsfc.tomjzfci.tczglrpw.gatewaylearning.ezgateway.net"},{"hostname":"salesforce.com.mor-ralf.r.mail.leankoala.com","first_observed":"2026-11-05T07:51:48.448Z","first_published":"2026-11-05T08:42:24.679Z","brands":[{"id":"salesforce","name":"Salesforce","url":"https://domainspoof.com/brands/salesforce"}],"dns":"resolved","resolved":["172.246.243.65"],"resolved_at":"2026-11-06T08:45:34Z","dns_checked_at":"2026-11-06T08:45:34.000Z","dns_since":"2026-11-05T08:45:05.000Z","findings":[{"id":"fiucd735tp6qtp75qyraf","kind":"phishing_infrastructure","summary":"Resolved to 172.246.243.65, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T07:51:48.448Z","first_published":"2026-11-05T08:42:24.679Z","address":"172.246.243.65","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/salesforce"},{"hostname":"sblocsigil.store","first_observed":"2026-11-05T08:21:00.540Z","first_published":"2026-11-05T08:42:24.679Z","brands":[],"dns":"no_address","resolved":[],"resolved_at":"2026-11-05T08:21:34Z","dns_checked_at":"2026-11-06T08:45:34.000Z","dns_since":"2026-11-05T08:45:05.000Z","findings":[{"id":"filheza3k6s7s6foddcri","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T08:21:00.540Z","first_published":"2026-11-05T08:42:24.679Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=sblocsigil.store"},{"hostname":"secure-policy-update.net","first_observed":"2026-11-05T07:46:08.429Z","first_published":"2026-11-05T08:42:24.679Z","brands":[],"dns":"resolved","resolved":["109.199.114.172"],"resolved_at":"2026-11-05T07:57:32Z","dns_checked_at":"2026-11-06T08:45:34.000Z","dns_since":"2026-11-05T08:45:05.000Z","findings":[{"id":"fzcduqepsiq4ldwcidjey","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T07:46:08.429Z","first_published":"2026-11-05T08:42:24.679Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=secure-policy-update.net"},{"hostname":"send.tor.taxi","first_observed":"2026-11-05T07:31:10.076Z","first_published":"2026-11-05T08:42:24.679Z","brands":[],"dns":"resolved","resolved":["185.129.100.227"],"resolved_at":"2026-11-05T07:31:33Z","dns_checked_at":"2026-11-06T08:45:34.000Z","dns_since":"2026-11-05T08:45:05.000Z","findings":[{"id":"fk4yzrkmtihhbnxwyrddj","kind":"reported_domain","summary":"Under tor.taxi, reported by PhishDestroy","first_observed":"2026-11-05T07:31:10.076Z","first_published":"2026-11-05T08:42:24.679Z","source":"phishdestroy","source_name":"PhishDestroy","under":"tor.taxi","source_url":"https://phishdestroy.io/domain/tor.taxi/"}],"url":"https://domainspoof.com/live?show=all&q=send.tor.taxi"},{"hostname":"setup.aml.legal","first_observed":"2026-11-05T07:56:22.026Z","first_published":"2026-11-05T08:42:24.679Z","brands":[],"dns":"resolved","resolved":["186.2.175.179"],"resolved_at":"2026-11-05T08:04:33Z","dns_checked_at":"2026-11-06T08:45:34.000Z","dns_since":"2026-11-05T08:45:05.000Z","findings":[{"id":"fsjw52rd4evracur4hroe","kind":"reported_domain","summary":"Under aml.legal, reported by PhishDestroy","first_observed":"2026-11-05T07:56:22.026Z","first_published":"2026-11-05T08:42:24.679Z","source":"phishdestroy","source_name":"PhishDestroy","under":"aml.legal","source_url":"https://phishdestroy.io/domain/aml.legal/"}],"url":"https://domainspoof.com/live?show=all&q=setup.aml.legal"},{"hostname":"shift-acrosslattice.digital","first_observed":"2026-11-05T07:31:10.076Z","first_published":"2026-11-05T08:42:24.679Z","brands":[],"dns":"resolved","resolved":["77.90.185.214"],"resolved_at":"2026-11-05T07:31:33Z","dns_checked_at":"2026-11-06T08:45:34.000Z","dns_since":"2026-11-05T08:45:05.000Z","findings":[{"id":"fudqbtgkvptkvivpockpt","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T07:31:10.076Z","first_published":"2026-11-05T08:42:24.679Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/shift-acrosslattice.digital/"}],"url":"https://domainspoof.com/live?show=all&q=shift-acrosslattice.digital"},{"hostname":"slon-zerkalo-kraken.ru","first_observed":"2026-11-05T08:21:00.540Z","first_published":"2026-11-05T08:42:24.679Z","brands":[],"dns":"resolved","resolved":["104.21.7.114","172.67.130.51"],"resolved_at":"2026-11-05T08:21:36Z","dns_checked_at":"2026-11-06T08:45:34.000Z","dns_since":"2026-11-05T08:45:05.000Z","findings":[{"id":"ffysq7qniqwyv5jt5fhg5","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T08:21:00.540Z","first_published":"2026-11-05T08:42:24.679Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/slon-zerkalo-kraken.ru/"}],"url":"https://domainspoof.com/live?show=all&q=slon-zerkalo-kraken.ru"},{"hostname":"sovereignyieldex.com","first_observed":"2026-11-05T08:26:09.868Z","first_published":"2026-11-05T08:42:24.679Z","brands":[],"dns":"resolved","resolved":["104.21.69.45","172.67.204.85"],"resolved_at":"2026-11-05T08:34:05Z","dns_checked_at":"2026-11-06T08:45:34.000Z","dns_since":"2026-11-05T08:45:05.000Z","findings":[{"id":"f55hxfpdqeyt2a7d7m3vq","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T08:26:09.868Z","first_published":"2026-11-05T08:42:24.679Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=sovereignyieldex.com"},{"hostname":"sowagg.com","first_observed":"2026-11-05T07:51:14.197Z","first_published":"2026-11-05T08:42:24.679Z","brands":[],"dns":"resolved","resolved":["104.21.74.97","172.67.201.194"],"resolved_at":"2026-11-05T07:51:48Z","dns_checked_at":"2026-11-06T08:45:34.000Z","dns_since":"2026-11-05T08:45:05.000Z","findings":[{"id":"fprhrvt5khctovzrlbm24","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T07:51:14.197Z","first_published":"2026-11-05T08:42:24.679Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/sowagg.com/"}],"url":"https://domainspoof.com/live?show=all&q=sowagg.com"},{"hostname":"sp19ct7-muref-biz-sarek-dovil.pages.dev","first_observed":"2026-11-05T08:26:09.868Z","first_published":"2026-11-05T08:42:24.679Z","brands":[],"dns":"resolved","resolved":["172.66.44.78","172.66.47.178"],"resolved_at":"2026-11-05T08:34:05Z","dns_checked_at":"2026-11-06T08:45:34.000Z","dns_since":"2026-11-05T08:45:05.000Z","findings":[{"id":"f54z4ia2x5umbdorlh74h","kind":"reported_domain","summary":"Reported by PhishTank","first_observed":"2026-11-05T08:26:09.868Z","first_published":"2026-11-05T08:42:24.679Z","source":"phishtank","source_name":"PhishTank","source_url":"https://phishtank.org/phish_detail.php?phish_id=9479578"}],"url":"https://domainspoof.com/live?show=all&q=sp19ct7-muref-biz-sarek-dovil.pages.dev"},{"hostname":"sp19ct7-murem-biz-dafek-lonis.pages.dev","first_observed":"2026-11-05T08:31:20.384Z","first_published":"2026-11-05T08:42:24.679Z","brands":[],"dns":"resolved","resolved":["172.66.44.103","172.66.47.153"],"resolved_at":"2026-11-05T08:39:56Z","dns_checked_at":"2026-11-06T08:45:34.000Z","dns_since":"2026-11-05T08:45:05.000Z","findings":[{"id":"fv3jd7f43utxroknqd2ie","kind":"reported_domain","summary":"Reported by PhishTank","first_observed":"2026-11-05T08:31:20.384Z","first_published":"2026-11-05T08:42:24.679Z","source":"phishtank","source_name":"PhishTank","source_url":"https://phishtank.org/phish_detail.php?phish_id=9479580"}],"url":"https://domainspoof.com/live?show=all&q=sp19ct7-murem-biz-dafek-lonis.pages.dev"},{"hostname":"spakaspipstrade.gnvmt.com","first_observed":"2026-11-05T08:36:27.026Z","first_published":"2026-11-05T08:42:24.679Z","brands":[],"dns":"resolved","resolved":["102.130.123.45"],"resolved_at":"2026-11-05T08:36:33Z","dns_checked_at":"2026-11-06T08:45:34.000Z","dns_since":"2026-11-05T08:45:05.000Z","findings":[{"id":"fq67puqd7r4lxr3zwn2r4","kind":"reported_domain","summary":"Under gnvmt.com, listed by MetaMask","first_observed":"2026-11-05T08:36:27.026Z","first_published":"2026-11-05T08:42:24.679Z","source":"metamask","source_name":"MetaMask","under":"gnvmt.com"}],"url":"https://domainspoof.com/live?show=all&q=spakaspipstrade.gnvmt.com"},{"hostname":"sponsorcekilisi.online","first_observed":"2026-11-05T08:31:20.384Z","first_published":"2026-11-05T08:42:24.679Z","brands":[],"dns":"resolved","resolved":["64.89.160.49"],"resolved_at":"2026-11-05T08:39:56Z","dns_checked_at":"2026-11-06T08:45:34.000Z","dns_since":"2026-11-05T08:45:05.000Z","findings":[{"id":"fnvf3hbzcemprlbs4oabv","kind":"reported_domain","summary":"Listed by USOM","first_observed":"2026-11-05T08:31:20.384Z","first_published":"2026-11-05T08:42:24.679Z","source":"usom","source_name":"USOM"}],"url":"https://domainspoof.com/live?show=all&q=sponsorcekilisi.online"},{"hostname":"stage.aml.legal","first_observed":"2026-11-05T08:31:20.384Z","first_published":"2026-11-05T08:42:24.679Z","brands":[],"dns":"resolved","resolved":["186.2.175.179"],"resolved_at":"2026-11-05T08:39:56Z","dns_checked_at":"2026-11-06T08:45:34.000Z","dns_since":"2026-11-05T08:45:05.000Z","findings":[{"id":"fznqswx3acyh47m3jzm77","kind":"reported_domain","summary":"Under aml.legal, reported by PhishDestroy","first_observed":"2026-11-05T08:31:20.384Z","first_published":"2026-11-05T08:42:24.679Z","source":"phishdestroy","source_name":"PhishDestroy","under":"aml.legal","source_url":"https://phishdestroy.io/domain/aml.legal/"}],"url":"https://domainspoof.com/live?show=all&q=stage.aml.legal"},{"hostname":"stakovip.link","first_observed":"2026-11-05T08:00:58.346Z","first_published":"2026-11-05T08:42:24.679Z","brands":[],"dns":"resolved","resolved":["104.21.70.169","172.67.137.235"],"resolved_at":"2026-11-06T02:00:58Z","dns_checked_at":"2026-11-06T08:45:34.000Z","dns_since":"2026-11-05T08:45:05.000Z","findings":[{"id":"fw7dnjttzw4v2a3n7agiq","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T08:00:58.346Z","first_published":"2026-11-05T08:42:24.679Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=stakovip.link"},{"hostname":"steones.com","first_observed":"2026-11-05T07:36:20.749Z","first_published":"2026-11-05T08:42:24.679Z","brands":[],"dns":"resolved","resolved":["66.198.225.39"],"resolved_at":"2026-11-05T07:36:53Z","dns_checked_at":"2026-11-06T08:45:34.000Z","dns_since":"2026-11-05T08:45:05.000Z","findings":[{"id":"fo7gqnzmxtcr2ddsi4ttl","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T07:36:20.749Z","first_published":"2026-11-05T08:42:24.679Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=steones.com"},{"hostname":"strapi.aml.legal","first_observed":"2026-11-05T08:21:00.540Z","first_published":"2026-11-05T08:42:24.679Z","brands":[],"dns":"resolved","resolved":["186.2.175.179"],"resolved_at":"2026-11-05T08:21:36Z","dns_checked_at":"2026-11-06T08:45:34.000Z","dns_since":"2026-11-05T08:45:05.000Z","findings":[{"id":"f4sncstpfdb5lkuy4z7uw","kind":"reported_domain","summary":"Under aml.legal, reported by PhishDestroy","first_observed":"2026-11-05T08:21:00.540Z","first_published":"2026-11-05T08:42:24.679Z","source":"phishdestroy","source_name":"PhishDestroy","under":"aml.legal","source_url":"https://phishdestroy.io/domain/aml.legal/"}],"url":"https://domainspoof.com/live?show=all&q=strapi.aml.legal"},{"hostname":"streijl.eu","first_observed":"2026-11-05T07:46:08.429Z","first_published":"2026-11-05T08:42:24.679Z","brands":[],"dns":"resolved","resolved":["185.87.187.239","2a00:f10:305:0:1c00:c9ff:fe00:527"],"resolved_at":"2026-11-05T07:57:33Z","dns_checked_at":"2026-11-06T08:45:34.000Z","dns_since":"2026-11-05T08:45:05.000Z","findings":[{"id":"fnufb2z2e345dl4bdy45c","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T07:46:08.429Z","first_published":"2026-11-05T08:42:24.679Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/streijl.eu/"}],"url":"https://domainspoof.com/live?show=all&q=streijl.eu"},{"hostname":"stx-eu.shop","first_observed":"2026-11-05T07:41:00.909Z","first_published":"2026-11-05T08:42:24.679Z","brands":[],"dns":"resolved","resolved":["34.160.74.17"],"resolved_at":"2026-11-05T07:47:57Z","dns_checked_at":"2026-11-06T08:45:34.000Z","dns_since":"2026-11-05T08:45:05.000Z","findings":[{"id":"fqvxvehhkvjayw6t5aqif","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T07:41:00.909Z","first_published":"2026-11-05T08:42:24.679Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=stx-eu.shop"},{"hostname":"swap.alphapepe.io","first_observed":"2026-11-05T08:10:43.722Z","first_published":"2026-11-05T08:42:24.679Z","brands":[],"dns":"resolved","resolved":["104.21.16.215","172.67.215.244"],"resolved_at":"2026-11-05T08:21:52Z","dns_checked_at":"2026-11-06T08:45:34.000Z","dns_since":"2026-11-05T08:45:05.000Z","findings":[{"id":"f5pudan54g3usmvmm7m2e","kind":"reported_domain","summary":"Under alphapepe.io, reported by PhishDestroy","first_observed":"2026-11-05T08:10:43.722Z","first_published":"2026-11-05T08:42:24.679Z","source":"phishdestroy","source_name":"PhishDestroy","under":"alphapepe.io","source_url":"https://phishdestroy.io/domain/alphapepe.io/"}],"url":"https://domainspoof.com/live?show=all&q=swap.alphapepe.io"},{"hostname":"tazpa.store","first_observed":"2026-11-05T08:26:09.868Z","first_published":"2026-11-05T08:42:24.679Z","brands":[],"dns":"no_address","resolved":[],"resolved_at":"2026-11-05T08:34:04Z","dns_checked_at":"2026-11-06T08:45:34.000Z","dns_since":"2026-11-05T08:45:05.000Z","findings":[{"id":"fj35t6lum2gvw7n26cmec","kind":"reported_domain","summary":"Listed by NPA 165 (finance and insurance)","first_observed":"2026-11-05T08:26:09.868Z","first_published":"2026-11-05T08:42:24.679Z","source":"npa","source_name":"NPA 165","claim":{"category":"finance and insurance"}}],"url":"https://domainspoof.com/live?show=all&q=tazpa.store"},{"hostname":"test-afzone.ascsonoway.com","first_observed":"2026-11-05T08:10:43.722Z","first_published":"2026-11-05T08:42:24.679Z","brands":[],"dns":"resolved","resolved":["64.227.208.248"],"resolved_at":"2026-11-05T08:21:52Z","dns_checked_at":"2026-11-06T08:45:34.000Z","dns_since":"2026-11-05T08:45:05.000Z","findings":[{"id":"fnooif2bzdxcdmc6m6usx","kind":"reported_domain","summary":"Under ascsonoway.com, listed by MetaMask","first_observed":"2026-11-05T08:10:43.722Z","first_published":"2026-11-05T08:42:24.679Z","source":"metamask","source_name":"MetaMask","under":"ascsonoway.com"}],"url":"https://domainspoof.com/live?show=all&q=test-afzone.ascsonoway.com"},{"hostname":"tf-hk.com","first_observed":"2026-11-05T08:26:09.868Z","first_published":"2026-11-05T08:42:24.679Z","brands":[],"dns":"resolved","resolved":["104.21.38.76","172.67.220.21"],"resolved_at":"2026-11-05T08:26:23Z","dns_checked_at":"2026-11-06T08:45:34.000Z","dns_since":"2026-11-05T08:45:05.000Z","findings":[{"id":"f2bykak72xjouhnbnzavy","kind":"reported_domain","summary":"Listed by NPA 165 (e-commerce)","first_observed":"2026-11-05T08:26:09.868Z","first_published":"2026-11-05T08:42:24.679Z","source":"npa","source_name":"NPA 165","claim":{"category":"e-commerce"}}],"url":"https://domainspoof.com/live?show=all&q=tf-hk.com"},{"hostname":"the-bergsignalgpt.com","first_observed":"2026-11-05T08:15:51.469Z","first_published":"2026-11-05T08:42:24.679Z","brands":[],"dns":"resolved","resolved":["104.21.8.139","172.67.139.132"],"resolved_at":"2026-11-06T09:01:06Z","dns_checked_at":"2026-11-06T08:45:34.000Z","dns_since":"2026-11-05T08:45:05.000Z","findings":[{"id":"ffwmcphlabdyoj2rpeyz2","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T08:15:51.469Z","first_published":"2026-11-05T08:42:24.679Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=the-bergsignalgpt.com"},{"hostname":"the-rheinnexusgpt.org","first_observed":"2026-11-05T07:36:20.749Z","first_published":"2026-11-05T08:42:24.679Z","brands":[],"dns":"resolved","resolved":["104.21.81.37","172.67.188.40"],"resolved_at":"2026-11-05T07:36:53Z","dns_checked_at":"2026-11-06T08:45:34.000Z","dns_since":"2026-11-05T08:45:05.000Z","findings":[{"id":"fywt7qzh2frds3t3uu73o","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T07:36:20.749Z","first_published":"2026-11-05T08:42:24.679Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=the-rheinnexusgpt.org"},{"hostname":"thetrenqorforgeapp.com","first_observed":"2026-11-05T07:36:20.749Z","first_published":"2026-11-05T08:42:24.679Z","brands":[],"dns":"resolved","resolved":["104.21.93.228","172.67.216.84"],"resolved_at":"2026-11-05T07:36:53Z","dns_checked_at":"2026-11-06T08:45:34.000Z","dns_since":"2026-11-05T08:45:05.000Z","findings":[{"id":"fgterf4fc7xo3er7lsgek","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T07:36:20.749Z","first_published":"2026-11-05T08:42:24.679Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=thetrenqorforgeapp.com"},{"hostname":"toto88-x-gasing777-035.eliaruizwork.com","first_observed":"2026-11-05T07:31:10.076Z","first_published":"2026-11-05T08:42:24.679Z","brands":[],"dns":"resolved","resolved":["104.21.13.225","172.67.133.81"],"resolved_at":"2026-11-05T07:31:35Z","dns_checked_at":"2026-11-06T08:45:34.000Z","dns_since":"2026-11-05T08:45:05.000Z","findings":[{"id":"fuuitvrmxneq2akszpm4v","kind":"reported_domain","summary":"Under eliaruizwork.com, reported by PhishDestroy","first_observed":"2026-11-05T07:31:10.076Z","first_published":"2026-11-05T08:42:24.679Z","source":"phishdestroy","source_name":"PhishDestroy","under":"eliaruizwork.com","source_url":"https://phishdestroy.io/domain/eliaruizwork.com/"}],"url":"https://domainspoof.com/live?show=all&q=toto88-x-gasing777-035.eliaruizwork.com"},{"hostname":"trade-web3.vip","first_observed":"2026-11-05T07:31:10.076Z","first_published":"2026-11-05T08:42:24.679Z","brands":[],"dns":"no_address","resolved":[],"resolved_at":"2026-11-05T07:31:35Z","dns_checked_at":"2026-11-06T08:45:34.000Z","dns_since":"2026-11-05T08:45:05.000Z","findings":[{"id":"fjs4wkd5h7pr5hnzevcig","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T07:31:10.076Z","first_published":"2026-11-05T08:42:24.679Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=trade-web3.vip"},{"hostname":"tronsecurevalidator.com","first_observed":"2026-11-05T08:05:35.267Z","first_published":"2026-11-05T08:42:24.679Z","brands":[],"dns":"resolved","resolved":["104.21.82.14","172.67.150.169"],"resolved_at":"2026-11-05T08:05:43Z","dns_checked_at":"2026-11-06T08:45:34.000Z","dns_since":"2026-11-05T08:45:05.000Z","findings":[{"id":"fnir4lkisf5qy5iws3kli","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T08:05:35.267Z","first_published":"2026-11-05T08:42:24.679Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/tronsecurevalidator.com/"}],"url":"https://domainspoof.com/live?show=all&q=tronsecurevalidator.com"},{"hostname":"uiuiw.com","first_observed":"2026-11-05T07:41:00.909Z","first_published":"2026-11-05T08:42:24.679Z","brands":[],"dns":"resolved","resolved":["104.17.232.29"],"resolved_at":"2026-11-05T07:48:04Z","dns_checked_at":"2026-11-06T08:45:34.000Z","dns_since":"2026-11-05T08:45:05.000Z","findings":[{"id":"fjqjj3ynhgkpyyjlpoawy","kind":"reported_domain","summary":"Listed by NPA 165 (finance and insurance)","first_observed":"2026-11-05T07:41:00.909Z","first_published":"2026-11-05T08:42:24.679Z","source":"npa","source_name":"NPA 165","claim":{"category":"finance and insurance"}}],"url":"https://domainspoof.com/live?show=all&q=uiuiw.com"},{"hostname":"ukwillowfieldhub.com","first_observed":"2026-11-05T08:31:20.384Z","first_published":"2026-11-05T08:42:24.679Z","brands":[],"dns":"resolved","resolved":["104.21.67.45","172.67.212.206"],"resolved_at":"2026-11-05T08:39:57Z","dns_checked_at":"2026-11-06T08:45:34.000Z","dns_since":"2026-11-05T08:45:05.000Z","findings":[{"id":"frteuwupjuj6q4u2zibv6","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T08:31:20.384Z","first_published":"2026-11-05T08:42:24.679Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=ukwillowfieldhub.com"},{"hostname":"usdt-eth99.com","first_observed":"2026-11-05T08:15:51.469Z","first_published":"2026-11-05T08:42:24.679Z","brands":[],"dns":"resolved","resolved":["104.21.84.7","172.67.184.132"],"resolved_at":"2026-11-05T08:16:04Z","dns_checked_at":"2026-11-06T08:45:34.000Z","dns_since":"2026-11-05T08:45:05.000Z","findings":[{"id":"fa6au2cq6a4adwoyf6l2k","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T08:15:51.469Z","first_published":"2026-11-05T08:42:24.679Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/usdt-eth99.com/"}],"url":"https://domainspoof.com/live?show=all&q=usdt-eth99.com"},{"hostname":"usgwblfq.jflnoycaz.ybzdflux.xsmqjplf.gecxorwd.tczglrpw.gatewaylearning.ezgateway.net","first_observed":"2026-11-05T08:00:58.346Z","first_published":"2026-11-05T08:42:24.679Z","brands":[],"dns":"resolved","resolved":["15.204.116.29"],"resolved_at":"2026-11-05T08:01:13Z","dns_checked_at":"2026-11-06T08:45:34.000Z","dns_since":"2026-11-05T08:45:05.000Z","findings":[{"id":"fpsx5pf72rkpoumbl5zzq","kind":"reported_domain","summary":"Under ezgateway.net, listed by USOM","first_observed":"2026-11-05T08:00:58.346Z","first_published":"2026-11-05T08:42:24.679Z","source":"usom","source_name":"USOM","under":"ezgateway.net"}],"url":"https://domainspoof.com/live?show=all&q=usgwblfq.jflnoycaz.ybzdflux.xsmqjplf.gecxorwd.tczglrpw.gatewaylearning.ezgateway.net"},{"hostname":"vbucksis.com","first_observed":"2026-11-05T08:15:51.469Z","first_published":"2026-11-05T08:42:24.679Z","brands":[],"dns":"resolved","resolved":["104.21.42.109","172.67.161.162"],"resolved_at":"2026-11-05T08:16:04Z","dns_checked_at":"2026-11-06T08:45:34.000Z","dns_since":"2026-11-05T08:45:05.000Z","findings":[{"id":"fmtkf6j3ftuearjk3jorz","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T08:15:51.469Z","first_published":"2026-11-05T08:42:24.679Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=vbucksis.com"},{"hostname":"vdtmklsp.yjahpkrn.cbvuxylq.fuyndtoc.nirfhjym.uatmfwcq.gatewaylearning.ezgateway.net","first_observed":"2026-11-05T08:10:43.722Z","first_published":"2026-11-05T08:42:24.679Z","brands":[],"dns":"resolved","resolved":["15.204.116.29"],"resolved_at":"2026-11-05T08:21:57Z","dns_checked_at":"2026-11-06T08:45:34.000Z","dns_since":"2026-11-05T08:45:05.000Z","findings":[{"id":"fwbqtekbhsx6pjn2bffpv","kind":"reported_domain","summary":"Under ezgateway.net, listed by USOM","first_observed":"2026-11-05T08:10:43.722Z","first_published":"2026-11-05T08:42:24.679Z","source":"usom","source_name":"USOM","under":"ezgateway.net"}],"url":"https://domainspoof.com/live?show=all&q=vdtmklsp.yjahpkrn.cbvuxylq.fuyndtoc.nirfhjym.uatmfwcq.gatewaylearning.ezgateway.net"},{"hostname":"vhod-na-kraken.click","first_observed":"2026-11-05T07:41:00.909Z","first_published":"2026-11-05T08:42:24.679Z","brands":[],"dns":"resolved","resolved":["104.21.36.39","172.67.184.183"],"resolved_at":"2026-11-05T07:48:07Z","dns_checked_at":"2026-11-06T08:45:34.000Z","dns_since":"2026-11-05T08:45:05.000Z","findings":[{"id":"fk7hotebs54afdt63iyn5","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T07:41:00.909Z","first_published":"2026-11-05T08:42:24.679Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/vhod-na-kraken.click/"}],"url":"https://domainspoof.com/live?show=all&q=vhod-na-kraken.click"},{"hostname":"vidmateold.net","first_observed":"2026-11-05T07:36:20.749Z","first_published":"2026-11-05T08:42:24.679Z","brands":[],"dns":"resolved","resolved":["104.18.51.158","104.18.52.59"],"resolved_at":"2026-11-05T07:36:55Z","dns_checked_at":"2026-11-06T08:45:34.000Z","dns_since":"2026-11-05T08:45:05.000Z","findings":[{"id":"f3bz3nvelarn6n7jnumoo","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T07:36:20.749Z","first_published":"2026-11-05T08:42:24.679Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=vidmateold.net"},{"hostname":"votes-hyperecosystem.xyz","first_observed":"2026-11-05T08:36:27.026Z","first_published":"2026-11-05T08:42:24.679Z","brands":[],"dns":"resolved","resolved":["104.21.23.104","172.67.210.126"],"resolved_at":"2026-11-05T08:36:35Z","dns_checked_at":"2026-11-06T08:45:34.000Z","dns_since":"2026-11-05T08:45:05.000Z","findings":[{"id":"ft4hokiuoie7u3lytozm2","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T08:36:27.026Z","first_published":"2026-11-05T08:42:24.679Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=votes-hyperecosystem.xyz"},{"hostname":"vrtn.eu.cc","first_observed":"2026-11-05T08:31:20.384Z","first_published":"2026-11-05T08:42:24.679Z","brands":[],"dns":"resolved","resolved":["104.21.79.69","172.67.169.61"],"resolved_at":"2026-11-05T08:39:58Z","dns_checked_at":"2026-11-06T08:45:34.000Z","dns_since":"2026-11-05T08:45:05.000Z","findings":[{"id":"fwrivohinx73roed7fpe2","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T08:31:20.384Z","first_published":"2026-11-05T08:42:24.679Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=vrtn.eu.cc"},{"hostname":"walletadapter-cdn-cloud.com","first_observed":"2026-11-05T08:26:09.868Z","first_published":"2026-11-05T08:42:24.679Z","brands":[],"dns":"resolved","resolved":["199.91.220.41"],"resolved_at":"2026-11-05T08:26:24Z","dns_checked_at":"2026-11-06T08:45:34.000Z","dns_since":"2026-11-05T08:45:05.000Z","findings":[{"id":"fqyme527rx37vtpv6j7ex","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T08:26:09.868Z","first_published":"2026-11-05T08:42:24.679Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=walletadapter-cdn-cloud.com"},{"hostname":"webdisk.ankama-compte.com","first_observed":"2026-11-05T07:57:36.236Z","first_published":"2026-11-05T08:42:24.679Z","brands":[{"id":"ankama","name":"Ankama","url":"https://domainspoof.com/brands/ankama"}],"dns":"resolved","resolved":["79.133.41.203"],"resolved_at":"2026-11-06T08:45:34Z","dns_checked_at":"2026-11-06T08:45:34.000Z","dns_since":"2026-11-05T08:45:05.000Z","findings":[{"id":"fzz54mschcbg4dmql5asi","kind":"phishing_infrastructure","summary":"Resolved to 79.133.41.203, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T07:57:36.236Z","first_published":"2026-11-05T08:42:24.679Z","address":"79.133.41.203","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/ankama"},{"hostname":"webdisk.streijl.eu","first_observed":"2026-11-05T07:46:08.429Z","first_published":"2026-11-05T08:42:24.679Z","brands":[],"dns":"resolved","resolved":["185.87.187.239","2a00:f10:305:0:1c00:c9ff:fe00:527"],"resolved_at":"2026-11-05T07:57:36Z","dns_checked_at":"2026-11-06T08:45:34.000Z","dns_since":"2026-11-05T08:45:05.000Z","findings":[{"id":"f5bbnom2i5hudf5z2wjyj","kind":"reported_domain","summary":"Under streijl.eu, reported by PhishDestroy","first_observed":"2026-11-05T07:46:08.429Z","first_published":"2026-11-05T08:42:24.679Z","source":"phishdestroy","source_name":"PhishDestroy","under":"streijl.eu","source_url":"https://phishdestroy.io/domain/streijl.eu/"}],"url":"https://domainspoof.com/live?show=all&q=webdisk.streijl.eu"},{"hostname":"webmail.ankama-compte.com","first_observed":"2026-11-05T07:57:36.286Z","first_published":"2026-11-05T08:42:24.679Z","brands":[{"id":"ankama","name":"Ankama","url":"https://domainspoof.com/brands/ankama"}],"dns":"resolved","resolved":["79.133.41.203"],"resolved_at":"2026-11-06T08:45:34Z","dns_checked_at":"2026-11-06T08:45:34.000Z","dns_since":"2026-11-05T08:45:05.000Z","findings":[{"id":"fouqkx6dgligs2ilhnkhs","kind":"phishing_infrastructure","summary":"Resolved to 79.133.41.203, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T07:57:36.286Z","first_published":"2026-11-05T08:42:24.679Z","address":"79.133.41.203","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/ankama"},{"hostname":"webmail.cloudflera.com","first_observed":"2026-11-05T07:51:14.197Z","first_published":"2026-11-05T08:42:24.679Z","brands":[],"dns":"resolved","resolved":["45.10.243.43"],"resolved_at":"2026-11-05T07:51:49Z","dns_checked_at":"2026-11-06T08:45:34.000Z","dns_since":"2026-11-05T08:45:05.000Z","findings":[{"id":"fu4nyt2ew5v2xfxjwtalh","kind":"reported_domain","summary":"Under cloudflera.com, listed by MetaMask","first_observed":"2026-11-05T07:51:14.197Z","first_published":"2026-11-05T08:42:24.679Z","source":"metamask","source_name":"MetaMask","under":"cloudflera.com"}],"url":"https://domainspoof.com/live?show=all&q=webmail.cloudflera.com"},{"hostname":"webmail.streijl.eu","first_observed":"2026-11-05T07:46:08.429Z","first_published":"2026-11-05T08:42:24.679Z","brands":[],"dns":"resolved","resolved":["185.87.187.239","2a00:f10:305:0:1c00:c9ff:fe00:527"],"resolved_at":"2026-11-05T07:57:36Z","dns_checked_at":"2026-11-06T08:45:34.000Z","dns_since":"2026-11-05T08:45:05.000Z","findings":[{"id":"fvrvifygltih3xg5tusch","kind":"reported_domain","summary":"Under streijl.eu, reported by PhishDestroy","first_observed":"2026-11-05T07:46:08.429Z","first_published":"2026-11-05T08:42:24.679Z","source":"phishdestroy","source_name":"PhishDestroy","under":"streijl.eu","source_url":"https://phishdestroy.io/domain/streijl.eu/"}],"url":"https://domainspoof.com/live?show=all&q=webmail.streijl.eu"},{"hostname":"wevachiparteks.com","first_observed":"2026-11-05T07:56:22.026Z","first_published":"2026-11-05T08:42:24.679Z","brands":[],"dns":"resolved","resolved":["104.21.84.50","172.67.186.145"],"resolved_at":"2026-11-05T07:56:35Z","dns_checked_at":"2026-11-06T08:45:34.000Z","dns_since":"2026-11-05T08:45:05.000Z","findings":[{"id":"fjpkbahb36sdguydoug4d","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T07:56:22.026Z","first_published":"2026-11-05T08:42:24.679Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=wevachiparteks.com"},{"hostname":"wiki.hydranode.net","first_observed":"2026-11-05T08:21:00.540Z","first_published":"2026-11-05T08:42:24.679Z","brands":[],"dns":"resolved","resolved":["91.228.45.237"],"resolved_at":"2026-11-05T08:21:37Z","dns_checked_at":"2026-11-06T08:45:34.000Z","dns_since":"2026-11-05T08:45:05.000Z","findings":[{"id":"fikbddhxczhrwygc2qedp","kind":"reported_domain","summary":"Under hydranode.net, reported by PhishDestroy","first_observed":"2026-11-05T08:21:00.540Z","first_published":"2026-11-05T08:42:24.679Z","source":"phishdestroy","source_name":"PhishDestroy","under":"hydranode.net","source_url":"https://phishdestroy.io/domain/hydranode.net/"}],"url":"https://domainspoof.com/live?show=all&q=wiki.hydranode.net"},{"hostname":"wildcard.wildcard.secure-bridge-trezor.wasmer.app","first_observed":"2026-11-05T07:56:35.404Z","first_published":"2026-11-05T08:42:24.679Z","brands":[{"id":"trezor","name":"Trezor","url":"https://domainspoof.com/brands/trezor"}],"dns":"resolved","resolved":["5.161.23.223"],"resolved_at":"2026-11-06T08:45:34Z","dns_checked_at":"2026-11-06T08:45:34.000Z","dns_since":"2026-11-05T08:45:05.000Z","findings":[{"id":"fbzrrbdxm6fpnobhr5eub","kind":"phishing_infrastructure","summary":"Resolved to 5.161.23.223, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T07:56:35.404Z","first_published":"2026-11-05T08:42:24.679Z","address":"5.161.23.223","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/trezor"},{"hostname":"www.ankama-compte.com","first_observed":"2026-11-05T07:57:36.995Z","first_published":"2026-11-05T08:42:24.679Z","brands":[{"id":"ankama","name":"Ankama","url":"https://domainspoof.com/brands/ankama"}],"dns":"resolved","resolved":["79.133.41.203"],"resolved_at":"2026-11-06T08:45:34Z","dns_checked_at":"2026-11-06T08:45:34.000Z","dns_since":"2026-11-05T08:45:05.000Z","findings":[{"id":"fnns72qcvczuhuwb5p65o","kind":"phishing_infrastructure","summary":"Resolved to 79.133.41.203, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T07:57:36.995Z","first_published":"2026-11-05T08:42:24.679Z","address":"79.133.41.203","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/ankama"},{"hostname":"www.apkmod.com.co","first_observed":"2026-11-05T07:46:08.429Z","first_published":"2026-11-05T08:42:24.679Z","brands":[],"dns":"resolved","resolved":["185.53.179.136"],"resolved_at":"2026-11-05T07:57:37Z","dns_checked_at":"2026-11-06T08:45:34.000Z","dns_since":"2026-11-05T08:45:05.000Z","findings":[{"id":"fi7dasjg4vzyaeg5y5kot","kind":"reported_domain","summary":"Under apkmod.com.co, reported by PhishDestroy","first_observed":"2026-11-05T07:46:08.429Z","first_published":"2026-11-05T08:42:24.679Z","source":"phishdestroy","source_name":"PhishDestroy","under":"apkmod.com.co","source_url":"https://phishdestroy.io/domain/apkmod.com.co/"}],"url":"https://domainspoof.com/live?show=all&q=www.apkmod.com.co"},{"hostname":"www.apps.lcloud.com.in","first_observed":"2026-11-05T07:31:10.076Z","first_published":"2026-11-05T08:42:24.679Z","brands":[],"dns":"resolved","resolved":["172.236.104.43","172.236.104.157","172.238.172.122"],"resolved_at":"2026-11-05T07:31:35Z","dns_checked_at":"2026-11-06T08:45:34.000Z","dns_since":"2026-11-05T08:45:05.000Z","findings":[{"id":"fmnfj2censzlhegoqzjm4","kind":"reported_domain","summary":"Under apps.lcloud.com.in, listed by CERT Polska","first_observed":"2026-11-05T07:31:10.076Z","first_published":"2026-11-05T08:42:24.679Z","source":"cert_polska","source_name":"CERT Polska","under":"apps.lcloud.com.in"}],"url":"https://domainspoof.com/live?show=all&q=www.apps.lcloud.com.in"},{"hostname":"www.arcinvestor.xyz","first_observed":"2026-11-05T08:15:51.469Z","first_published":"2026-11-05T08:42:24.679Z","brands":[],"dns":"resolved","resolved":["104.21.73.168","172.67.146.74"],"resolved_at":"2026-11-05T08:16:04Z","dns_checked_at":"2026-11-06T08:45:34.000Z","dns_since":"2026-11-05T08:45:05.000Z","findings":[{"id":"fqeaticplurcmkpjperbg","kind":"reported_domain","summary":"Under arcinvestor.xyz, reported by PhishDestroy","first_observed":"2026-11-05T08:15:51.469Z","first_published":"2026-11-05T08:42:24.679Z","source":"phishdestroy","source_name":"PhishDestroy","under":"arcinvestor.xyz","source_url":"https://phishdestroy.io/domain/arcinvestor.xyz/"}],"url":"https://domainspoof.com/live?show=all&q=www.arcinvestor.xyz"},{"hostname":"www.auth.androidloading.com","first_observed":"2026-11-05T08:36:27.026Z","first_published":"2026-11-05T08:42:24.679Z","brands":[],"dns":"resolved","resolved":["185.178.208.191"],"resolved_at":"2026-11-05T08:36:35Z","dns_checked_at":"2026-11-06T08:45:34.000Z","dns_since":"2026-11-05T08:45:05.000Z","findings":[{"id":"f6sxkwzejgdvpjbcwjcgq","kind":"reported_domain","summary":"Under androidloading.com, reported by PhishDestroy","first_observed":"2026-11-05T08:36:27.026Z","first_published":"2026-11-05T08:42:24.679Z","source":"phishdestroy","source_name":"PhishDestroy","under":"androidloading.com","source_url":"https://phishdestroy.io/domain/androidloading.com/"}],"url":"https://domainspoof.com/live?show=all&q=www.auth.androidloading.com"},{"hostname":"www.autorefixsystem.com","first_observed":"2026-11-05T07:36:20.749Z","first_published":"2026-11-05T08:42:24.679Z","brands":[],"dns":"resolved","resolved":["13.248.169.48","76.223.54.146"],"resolved_at":"2026-11-05T07:36:55Z","dns_checked_at":"2026-11-06T08:45:34.000Z","dns_since":"2026-11-05T08:45:05.000Z","findings":[{"id":"f2fjllpr7fl5udm4ddb77","kind":"reported_domain","summary":"Under autorefixsystem.com, reported by PhishDestroy","first_observed":"2026-11-05T07:36:20.749Z","first_published":"2026-11-05T08:42:24.679Z","source":"phishdestroy","source_name":"PhishDestroy","under":"autorefixsystem.com","source_url":"https://phishdestroy.io/domain/autorefixsystem.com/"}],"url":"https://domainspoof.com/live?show=all&q=www.autorefixsystem.com"},{"hostname":"www.blazeswaps.net","first_observed":"2026-11-05T08:00:58.346Z","first_published":"2026-11-05T08:42:24.679Z","brands":[],"dns":"resolved","resolved":["104.21.40.129","172.67.151.240"],"resolved_at":"2026-11-05T08:01:13Z","dns_checked_at":"2026-11-06T08:45:34.000Z","dns_since":"2026-11-05T08:45:05.000Z","findings":[{"id":"fwqjac62togqswbovossb","kind":"reported_domain","summary":"Under blazeswaps.net, listed by MetaMask","first_observed":"2026-11-05T08:00:58.346Z","first_published":"2026-11-05T08:42:24.679Z","source":"metamask","source_name":"MetaMask","under":"blazeswaps.net"}],"url":"https://domainspoof.com/live?show=all&q=www.blazeswaps.net"},{"hostname":"www.bounceblt.com","first_observed":"2026-11-05T08:00:58.346Z","first_published":"2026-11-05T08:42:24.679Z","brands":[],"dns":"resolved","resolved":["104.21.39.73","172.67.143.167"],"resolved_at":"2026-11-05T08:01:13Z","dns_checked_at":"2026-11-06T08:45:34.000Z","dns_since":"2026-11-05T08:45:05.000Z","findings":[{"id":"farbnmqvrz7ywyywfjqqp","kind":"reported_domain","summary":"Under bounceblt.com, listed by MetaMask","first_observed":"2026-11-05T08:00:58.346Z","first_published":"2026-11-05T08:42:24.679Z","source":"metamask","source_name":"MetaMask","under":"bounceblt.com"}],"url":"https://domainspoof.com/live?show=all&q=www.bounceblt.com"},{"hostname":"www.caps.scdunionbk.info","first_observed":"2026-11-05T07:56:22.026Z","first_published":"2026-11-05T08:42:24.679Z","brands":[],"dns":"resolved","resolved":["163.61.188.5"],"resolved_at":"2026-11-05T07:56:35Z","dns_checked_at":"2026-11-06T08:45:34.000Z","dns_since":"2026-11-05T08:45:05.000Z","findings":[{"id":"foras5z2ljt75y73s6qes","kind":"reported_domain","summary":"Under scdunionbk.info, reported by PhishDestroy","first_observed":"2026-11-05T07:56:22.026Z","first_published":"2026-11-05T08:42:24.679Z","source":"phishdestroy","source_name":"PhishDestroy","under":"scdunionbk.info","source_url":"https://phishdestroy.io/domain/scdunionbk.info/"}],"url":"https://domainspoof.com/live?show=all&q=www.caps.scdunionbk.info"},{"hostname":"www.chatgpt123.cloud","first_observed":"2026-11-05T08:05:44.261Z","first_published":"2026-11-05T08:42:24.679Z","brands":[{"id":"openai","name":"OpenAI","url":"https://domainspoof.com/brands/openai"}],"dns":"resolved","resolved":["2.57.91.91"],"resolved_at":"2026-11-06T08:45:34Z","dns_checked_at":"2026-11-06T08:45:34.000Z","dns_since":"2026-11-05T08:45:05.000Z","findings":[{"id":"fqoru6koatn4xfqmhonuu","kind":"phishing_infrastructure","summary":"Resolved to 2.57.91.91, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T08:05:44.261Z","first_published":"2026-11-05T08:42:24.679Z","address":"2.57.91.91","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/openai"},{"hostname":"www.cndh.zoomtech-platform.com","first_observed":"2026-11-05T08:26:09.868Z","first_published":"2026-11-05T08:42:24.679Z","brands":[],"dns":"resolved","resolved":["109.234.166.86"],"resolved_at":"2026-11-05T08:26:25Z","dns_checked_at":"2026-11-06T08:45:34.000Z","dns_since":"2026-11-05T08:45:05.000Z","findings":[{"id":"fh2u2uzekswa6hsq2fvgw","kind":"reported_domain","summary":"Under zoomtech-platform.com, listed by MetaMask","first_observed":"2026-11-05T08:26:09.868Z","first_published":"2026-11-05T08:42:24.679Z","source":"metamask","source_name":"MetaMask","under":"zoomtech-platform.com"}],"url":"https://domainspoof.com/live?show=all&q=www.cndh.zoomtech-platform.com"},{"hostname":"www.coin-base-support-crypto.live","first_observed":"2026-11-05T08:16:04.812Z","first_published":"2026-11-05T08:42:24.679Z","brands":[{"id":"coinbase","name":"Coinbase","url":"https://domainspoof.com/brands/coinbase"}],"dns":"resolved","resolved":["2.57.91.91"],"resolved_at":"2026-11-06T08:45:34Z","dns_checked_at":"2026-11-06T08:45:34.000Z","dns_since":"2026-11-05T08:45:05.000Z","findings":[{"id":"fktjvlmoynfjuolobwql2","kind":"phishing_infrastructure","summary":"Resolved to 2.57.91.91, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T08:16:04.812Z","first_published":"2026-11-05T08:42:24.679Z","address":"2.57.91.91","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/coinbase"},{"hostname":"www.coinbasewallet.com.cn","first_observed":"2026-11-05T08:05:44.269Z","first_published":"2026-11-05T08:42:24.679Z","brands":[{"id":"coinbase","name":"Coinbase","url":"https://domainspoof.com/brands/coinbase"}],"dns":"resolved","resolved":["206.161.218.138"],"resolved_at":"2026-11-06T08:45:34Z","dns_checked_at":"2026-11-06T08:45:34.000Z","dns_since":"2026-11-05T08:45:05.000Z","findings":[{"id":"fd264wn3vfde6dcaw7fs3","kind":"phishing_infrastructure","summary":"Resolved to 206.161.218.138, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T08:05:44.269Z","first_published":"2026-11-05T08:42:24.679Z","address":"206.161.218.138","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/coinbase"},{"hostname":"www.eliaruizwork.com","first_observed":"2026-11-05T07:31:10.076Z","first_published":"2026-11-05T08:42:24.679Z","brands":[],"dns":"resolved","resolved":["104.21.13.225","172.67.133.81"],"resolved_at":"2026-11-05T07:31:35Z","dns_checked_at":"2026-11-06T08:45:34.000Z","dns_since":"2026-11-05T08:45:05.000Z","findings":[{"id":"fspcgjr5no6fwvmnvumv5","kind":"reported_domain","summary":"Under eliaruizwork.com, reported by PhishDestroy","first_observed":"2026-11-05T07:31:10.076Z","first_published":"2026-11-05T08:42:24.679Z","source":"phishdestroy","source_name":"PhishDestroy","under":"eliaruizwork.com","source_url":"https://phishdestroy.io/domain/eliaruizwork.com/"}],"url":"https://domainspoof.com/live?show=all&q=www.eliaruizwork.com"},{"hostname":"www.fastsmsverify.com.ng","first_observed":"2026-11-05T07:31:10.076Z","first_published":"2026-11-05T08:42:24.679Z","brands":[],"dns":"resolved","resolved":["163.61.188.7"],"resolved_at":"2026-11-05T07:31:36Z","dns_checked_at":"2026-11-06T08:45:34.000Z","dns_since":"2026-11-05T08:45:05.000Z","findings":[{"id":"fcefqdjikwi3cvgishiea","kind":"reported_domain","summary":"Under fastsmsverify.com.ng, reported by PhishDestroy","first_observed":"2026-11-05T07:31:10.076Z","first_published":"2026-11-05T08:42:24.679Z","source":"phishdestroy","source_name":"PhishDestroy","under":"fastsmsverify.com.ng","source_url":"https://phishdestroy.io/domain/fastsmsverify.com.ng/"}],"url":"https://domainspoof.com/live?show=all&q=www.fastsmsverify.com.ng"},{"hostname":"www.ferro-protocol.net","first_observed":"2026-11-05T08:05:35.267Z","first_published":"2026-11-05T08:42:24.679Z","brands":[],"dns":"resolved","resolved":["104.21.95.234","172.67.149.15"],"resolved_at":"2026-11-05T08:05:44Z","dns_checked_at":"2026-11-06T08:45:34.000Z","dns_since":"2026-11-05T08:45:05.000Z","findings":[{"id":"fyk6bmleqe7yao56yghbh","kind":"reported_domain","summary":"Under ferro-protocol.net, listed by MetaMask","first_observed":"2026-11-05T08:05:35.267Z","first_published":"2026-11-05T08:42:24.679Z","source":"metamask","source_name":"MetaMask","under":"ferro-protocol.net"}],"url":"https://domainspoof.com/live?show=all&q=www.ferro-protocol.net"},{"hostname":"www.glasschneider.koeln","first_observed":"2026-11-05T07:31:10.076Z","first_published":"2026-11-05T08:42:24.679Z","brands":[],"dns":"resolved","resolved":["82.165.166.165"],"resolved_at":"2026-11-05T07:31:36Z","dns_checked_at":"2026-11-06T08:45:34.000Z","dns_since":"2026-11-05T08:45:05.000Z","findings":[{"id":"fiftsxfkp5i2vjbwjelfw","kind":"reported_domain","summary":"Under glasschneider.koeln, reported by PhishDestroy","first_observed":"2026-11-05T07:31:10.076Z","first_published":"2026-11-05T08:42:24.679Z","source":"phishdestroy","source_name":"PhishDestroy","under":"glasschneider.koeln","source_url":"https://phishdestroy.io/domain/glasschneider.koeln/"}],"url":"https://domainspoof.com/live?show=all&q=www.glasschneider.koeln"},{"hostname":"www.information-trustwallet.com","first_observed":"2026-11-05T07:36:55.355Z","first_published":"2026-11-05T08:42:24.679Z","brands":[{"id":"trust-wallet","name":"Trust Wallet","url":"https://domainspoof.com/brands/trust-wallet"}],"dns":"resolved","resolved":["172.232.24.161","172.232.24.235","172.234.25.42"],"resolved_at":"2026-11-06T08:45:34Z","dns_checked_at":"2026-11-06T08:45:34.000Z","dns_since":"2026-11-05T08:45:05.000Z","findings":[{"id":"f2zqnekykxtkzpxdq4fdx","kind":"phishing_infrastructure","summary":"Resolved to 172.232.24.161, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T07:36:55.355Z","first_published":"2026-11-05T08:42:24.679Z","address":"172.232.24.161","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/trust-wallet"},{"hostname":"www.kenhoward.com","first_observed":"2026-11-05T08:26:09.868Z","first_published":"2026-11-05T08:42:24.679Z","brands":[],"dns":"resolved","resolved":["198.49.23.144","198.49.23.145","198.185.159.144","198.185.159.145"],"resolved_at":"2026-11-05T08:26:25Z","dns_checked_at":"2026-11-06T08:45:34.000Z","dns_since":"2026-11-05T08:45:05.000Z","findings":[{"id":"fp7fy72z475tidcct5hzz","kind":"reported_domain","summary":"Under kenhoward.com, reported by PhishDestroy","first_observed":"2026-11-05T08:26:09.868Z","first_published":"2026-11-05T08:42:24.679Z","source":"phishdestroy","source_name":"PhishDestroy","under":"kenhoward.com","source_url":"https://phishdestroy.io/domain/kenhoward.com/"}],"url":"https://domainspoof.com/live?show=all&q=www.kenhoward.com"},{"hostname":"www.kineticmarket.net","first_observed":"2026-11-05T08:05:35.267Z","first_published":"2026-11-05T08:42:24.679Z","brands":[],"dns":"resolved","resolved":["104.21.62.174","172.67.137.228"],"resolved_at":"2026-11-05T08:05:44Z","dns_checked_at":"2026-11-06T08:45:34.000Z","dns_since":"2026-11-05T08:45:05.000Z","findings":[{"id":"fphkff6wzdphzoztz7sfq","kind":"reported_domain","summary":"Under kineticmarket.net, listed by MetaMask","first_observed":"2026-11-05T08:05:35.267Z","first_published":"2026-11-05T08:42:24.679Z","source":"metamask","source_name":"MetaMask","under":"kineticmarket.net"}],"url":"https://domainspoof.com/live?show=all&q=www.kineticmarket.net"},{"hostname":"www.layer-bank.net","first_observed":"2026-11-05T08:10:43.722Z","first_published":"2026-11-05T08:42:24.679Z","brands":[],"dns":"resolved","resolved":["104.21.95.31","172.67.142.162"],"resolved_at":"2026-11-05T08:22:01Z","dns_checked_at":"2026-11-06T08:45:34.000Z","dns_since":"2026-11-05T08:45:05.000Z","findings":[{"id":"fxpmppzsolyomceaivdwn","kind":"reported_domain","summary":"Under layer-bank.net, listed by MetaMask","first_observed":"2026-11-05T08:10:43.722Z","first_published":"2026-11-05T08:42:24.679Z","source":"metamask","source_name":"MetaMask","under":"layer-bank.net"}],"url":"https://domainspoof.com/live?show=all&q=www.layer-bank.net"},{"hostname":"www.mantle-bridge.org","first_observed":"2026-11-05T08:10:43.722Z","first_published":"2026-11-05T08:42:24.679Z","brands":[],"dns":"resolved","resolved":["104.21.75.16","172.67.166.122"],"resolved_at":"2026-11-05T08:22:01Z","dns_checked_at":"2026-11-06T08:45:34.000Z","dns_since":"2026-11-05T08:45:05.000Z","findings":[{"id":"feobdv2ccpxdlsymqyhzr","kind":"reported_domain","summary":"Under mantle-bridge.org, listed by MetaMask","first_observed":"2026-11-05T08:10:43.722Z","first_published":"2026-11-05T08:42:24.679Z","source":"metamask","source_name":"MetaMask","under":"mantle-bridge.org"}],"url":"https://domainspoof.com/live?show=all&q=www.mantle-bridge.org"},{"hostname":"www.merchant-moe.com","first_observed":"2026-11-05T08:10:43.722Z","first_published":"2026-11-05T08:42:24.679Z","brands":[],"dns":"resolved","resolved":["104.21.82.239","172.67.209.74"],"resolved_at":"2026-11-05T08:22:01Z","dns_checked_at":"2026-11-06T08:45:34.000Z","dns_since":"2026-11-05T08:45:05.000Z","findings":[{"id":"fmylb2ksnute4ebq3g5f5","kind":"reported_domain","summary":"Under merchant-moe.com, listed by MetaMask","first_observed":"2026-11-05T08:10:43.722Z","first_published":"2026-11-05T08:42:24.679Z","source":"metamask","source_name":"MetaMask","under":"merchant-moe.com"}],"url":"https://domainspoof.com/live?show=all&q=www.merchant-moe.com"},{"hostname":"www.michaelkors-ua.online","first_observed":"2026-11-05T07:56:35.789Z","first_published":"2026-11-05T08:42:24.679Z","brands":[{"id":"michael-kors","name":"Michael Kors","url":"https://domainspoof.com/brands/michael-kors"}],"dns":"resolved","resolved":["185.104.45.89","185.104.45.189"],"resolved_at":"2026-11-06T08:45:34Z","dns_checked_at":"2026-11-06T08:45:34.000Z","dns_since":"2026-11-05T08:45:05.000Z","findings":[{"id":"fwrxcnvontpiirz2lwwy4","kind":"phishing_infrastructure","summary":"Resolved to 185.104.45.89, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T07:56:35.789Z","first_published":"2026-11-05T08:42:24.679Z","address":"185.104.45.89","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/michael-kors"},{"hostname":"www.michaelkors.org.ua","first_observed":"2026-11-05T07:56:35.804Z","first_published":"2026-11-05T08:42:24.679Z","brands":[{"id":"michael-kors","name":"Michael Kors","url":"https://domainspoof.com/brands/michael-kors"}],"dns":"resolved","resolved":["185.104.45.89","185.104.45.189"],"resolved_at":"2026-11-06T08:45:34Z","dns_checked_at":"2026-11-06T08:45:34.000Z","dns_since":"2026-11-05T08:45:05.000Z","findings":[{"id":"fk4mnvzdba65rr7v7e7xz","kind":"phishing_infrastructure","summary":"Resolved to 185.104.45.89, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T07:56:35.804Z","first_published":"2026-11-05T08:42:24.679Z","address":"185.104.45.89","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/michael-kors"},{"hostname":"www.olympusdao-v2.net","first_observed":"2026-11-05T08:10:43.722Z","first_published":"2026-11-05T08:42:24.679Z","brands":[],"dns":"resolved","resolved":["104.21.68.6","172.67.184.29"],"resolved_at":"2026-11-05T08:22:01Z","dns_checked_at":"2026-11-06T08:45:34.000Z","dns_since":"2026-11-05T08:45:05.000Z","findings":[{"id":"frs57fey3o2ns5kzuvdvp","kind":"reported_domain","summary":"Under olympusdao-v2.net, listed by MetaMask","first_observed":"2026-11-05T08:10:43.722Z","first_published":"2026-11-05T08:42:24.679Z","source":"metamask","source_name":"MetaMask","under":"olympusdao-v2.net"}],"url":"https://domainspoof.com/live?show=all&q=www.olympusdao-v2.net"},{"hostname":"www.oss.aio0o.top","first_observed":"2026-11-05T08:05:35.267Z","first_published":"2026-11-05T08:42:24.679Z","brands":[],"dns":"not_found","resolved":[],"resolved_at":"2026-11-05T08:05:44Z","dns_checked_at":"2026-11-06T08:45:34.000Z","dns_since":"2026-11-05T08:45:05.000Z","findings":[{"id":"f4bds4zs3x3henw23sutt","kind":"reported_domain","summary":"Under aio0o.top, listed by MetaMask","first_observed":"2026-11-05T08:05:35.267Z","first_published":"2026-11-05T08:42:24.679Z","source":"metamask","source_name":"MetaMask","under":"aio0o.top"}],"url":"https://domainspoof.com/live?show=all&q=www.oss.aio0o.top"},{"hostname":"www.rheafinance.net","first_observed":"2026-11-05T08:10:43.722Z","first_published":"2026-11-05T08:42:24.679Z","brands":[],"dns":"resolved","resolved":["104.21.36.130","172.67.194.96"],"resolved_at":"2026-11-05T08:22:01Z","dns_checked_at":"2026-11-06T08:45:34.000Z","dns_since":"2026-11-05T08:45:05.000Z","findings":[{"id":"fyhjr5oyeu7spe22ncuur","kind":"reported_domain","summary":"Under rheafinance.net, listed by MetaMask","first_observed":"2026-11-05T08:10:43.722Z","first_published":"2026-11-05T08:42:24.679Z","source":"metamask","source_name":"MetaMask","under":"rheafinance.net"}],"url":"https://domainspoof.com/live?show=all&q=www.rheafinance.net"},{"hostname":"www.secure-policy-update.net","first_observed":"2026-11-05T07:46:08.429Z","first_published":"2026-11-05T08:42:24.679Z","brands":[],"dns":"resolved","resolved":["109.199.114.172"],"resolved_at":"2026-11-05T07:57:37Z","dns_checked_at":"2026-11-06T08:45:34.000Z","dns_since":"2026-11-05T08:45:05.000Z","findings":[{"id":"fmvck4ztd64lel634yvvj","kind":"reported_domain","summary":"Under secure-policy-update.net, listed by MetaMask","first_observed":"2026-11-05T07:46:08.429Z","first_published":"2026-11-05T08:42:24.679Z","source":"metamask","source_name":"MetaMask","under":"secure-policy-update.net"}],"url":"https://domainspoof.com/live?show=all&q=www.secure-policy-update.net"},{"hostname":"www.security-mcc.com","first_observed":"2026-11-05T07:46:08.429Z","first_published":"2026-11-05T08:42:24.679Z","brands":[],"dns":"resolved","resolved":["216.150.1.1","216.150.16.1"],"resolved_at":"2026-11-05T07:57:37Z","dns_checked_at":"2026-11-06T08:45:34.000Z","dns_since":"2026-11-05T08:45:05.000Z","findings":[{"id":"freq63orwlygbjabdotdz","kind":"reported_domain","summary":"Under security-mcc.com, listed by USOM","first_observed":"2026-11-05T07:46:08.429Z","first_published":"2026-11-05T08:42:24.679Z","source":"usom","source_name":"USOM","under":"security-mcc.com"}],"url":"https://domainspoof.com/live?show=all&q=www.security-mcc.com"},{"hostname":"www.sonichecks.com","first_observed":"2026-11-05T08:21:00.540Z","first_published":"2026-11-05T08:42:24.679Z","brands":[],"dns":"resolved","resolved":["64.29.17.65","216.198.79.65"],"resolved_at":"2026-11-05T08:21:37Z","dns_checked_at":"2026-11-06T08:45:34.000Z","dns_since":"2026-11-05T08:45:05.000Z","findings":[{"id":"fhq5v7zitmbw3mfdttuuu","kind":"reported_domain","summary":"Under sonichecks.com, listed by MetaMask","first_observed":"2026-11-05T08:21:00.540Z","first_published":"2026-11-05T08:42:24.679Z","source":"metamask","source_name":"MetaMask","under":"sonichecks.com"}],"url":"https://domainspoof.com/live?show=all&q=www.sonichecks.com"},{"hostname":"www.spakaspipstrade.gnvmt.com","first_observed":"2026-11-05T08:36:27.026Z","first_published":"2026-11-05T08:42:24.679Z","brands":[],"dns":"resolved","resolved":["102.130.123.45"],"resolved_at":"2026-11-05T08:36:36Z","dns_checked_at":"2026-11-06T08:45:34.000Z","dns_since":"2026-11-05T08:45:05.000Z","findings":[{"id":"fphua62zcfvesrryuhj73","kind":"reported_domain","summary":"Under gnvmt.com, listed by MetaMask","first_observed":"2026-11-05T08:36:27.026Z","first_published":"2026-11-05T08:42:24.679Z","source":"metamask","source_name":"MetaMask","under":"gnvmt.com"}],"url":"https://domainspoof.com/live?show=all&q=www.spakaspipstrade.gnvmt.com"},{"hostname":"www.sparkdexapp.net","first_observed":"2026-11-05T08:15:51.469Z","first_published":"2026-11-05T08:42:24.679Z","brands":[],"dns":"resolved","resolved":["104.21.73.120","172.67.162.72"],"resolved_at":"2026-11-05T08:16:07Z","dns_checked_at":"2026-11-06T08:45:34.000Z","dns_since":"2026-11-05T08:45:05.000Z","findings":[{"id":"fbx4rlu4odcnwohgr4btj","kind":"reported_domain","summary":"Under sparkdexapp.net, listed by MetaMask","first_observed":"2026-11-05T08:15:51.469Z","first_published":"2026-11-05T08:42:24.679Z","source":"metamask","source_name":"MetaMask","under":"sparkdexapp.net"}],"url":"https://domainspoof.com/live?show=all&q=www.sparkdexapp.net"},{"hostname":"www.streijl.eu","first_observed":"2026-11-05T07:46:08.429Z","first_published":"2026-11-05T08:42:24.679Z","brands":[],"dns":"resolved","resolved":["185.87.187.239","2a00:f10:305:0:1c00:c9ff:fe00:527"],"resolved_at":"2026-11-05T07:57:38Z","dns_checked_at":"2026-11-06T08:45:34.000Z","dns_since":"2026-11-05T08:45:05.000Z","findings":[{"id":"fbjdfq7quxy54fhhgnrxv","kind":"reported_domain","summary":"Under streijl.eu, reported by PhishDestroy","first_observed":"2026-11-05T07:46:08.429Z","first_published":"2026-11-05T08:42:24.679Z","source":"phishdestroy","source_name":"PhishDestroy","under":"streijl.eu","source_url":"https://phishdestroy.io/domain/streijl.eu/"}],"url":"https://domainspoof.com/live?show=all&q=www.streijl.eu"},{"hostname":"www.stx-eu.shop","first_observed":"2026-11-05T07:41:00.909Z","first_published":"2026-11-05T08:42:24.679Z","brands":[],"dns":"resolved","resolved":["34.160.74.17"],"resolved_at":"2026-11-05T07:48:15Z","dns_checked_at":"2026-11-06T08:45:34.000Z","dns_since":"2026-11-05T08:45:05.000Z","findings":[{"id":"fx7b2f7mhw6lnb2zippfm","kind":"reported_domain","summary":"Under stx-eu.shop, listed by CERT Polska","first_observed":"2026-11-05T07:41:00.909Z","first_published":"2026-11-05T08:42:24.679Z","source":"cert_polska","source_name":"CERT Polska","under":"stx-eu.shop"}],"url":"https://domainspoof.com/live?show=all&q=www.stx-eu.shop"},{"hostname":"www.summer-fi.net","first_observed":"2026-11-05T08:15:51.469Z","first_published":"2026-11-05T08:42:24.679Z","brands":[],"dns":"resolved","resolved":["104.21.46.24","172.67.222.160"],"resolved_at":"2026-11-05T08:16:07Z","dns_checked_at":"2026-11-06T08:45:34.000Z","dns_since":"2026-11-05T08:45:05.000Z","findings":[{"id":"f3supvcweytvq7ptpr6mk","kind":"reported_domain","summary":"Under summer-fi.net, listed by MetaMask","first_observed":"2026-11-05T08:15:51.469Z","first_published":"2026-11-05T08:42:24.679Z","source":"metamask","source_name":"MetaMask","under":"summer-fi.net"}],"url":"https://domainspoof.com/live?show=all&q=www.summer-fi.net"},{"hostname":"www.superbridge-app.net","first_observed":"2026-11-05T08:15:51.469Z","first_published":"2026-11-05T08:42:24.679Z","brands":[],"dns":"resolved","resolved":["104.21.40.220","172.67.157.37"],"resolved_at":"2026-11-05T08:16:07Z","dns_checked_at":"2026-11-06T08:45:34.000Z","dns_since":"2026-11-05T08:45:05.000Z","findings":[{"id":"fbqyapnmor57nq4ujz647","kind":"reported_domain","summary":"Under superbridge-app.net, listed by MetaMask","first_observed":"2026-11-05T08:15:51.469Z","first_published":"2026-11-05T08:42:24.679Z","source":"metamask","source_name":"MetaMask","under":"superbridge-app.net"}],"url":"https://domainspoof.com/live?show=all&q=www.superbridge-app.net"},{"hostname":"www.team-finance.org","first_observed":"2026-11-05T08:15:51.469Z","first_published":"2026-11-05T08:42:24.679Z","brands":[],"dns":"resolved","resolved":["104.21.83.215","172.67.182.47"],"resolved_at":"2026-11-05T08:16:07Z","dns_checked_at":"2026-11-06T08:45:34.000Z","dns_since":"2026-11-05T08:45:05.000Z","findings":[{"id":"f44azlnugpzshpxasvqaz","kind":"reported_domain","summary":"Under team-finance.org, listed by MetaMask","first_observed":"2026-11-05T08:15:51.469Z","first_published":"2026-11-05T08:42:24.679Z","source":"metamask","source_name":"MetaMask","under":"team-finance.org"}],"url":"https://domainspoof.com/live?show=all&q=www.team-finance.org"},{"hostname":"www.tectonicfinance.net","first_observed":"2026-11-05T08:21:00.540Z","first_published":"2026-11-05T08:42:24.679Z","brands":[],"dns":"resolved","resolved":["104.21.16.59","172.67.166.167"],"resolved_at":"2026-11-05T08:21:37Z","dns_checked_at":"2026-11-06T08:45:34.000Z","dns_since":"2026-11-05T08:45:05.000Z","findings":[{"id":"ffadw6armfixjeehcsabg","kind":"reported_domain","summary":"Under tectonicfinance.net, listed by MetaMask","first_observed":"2026-11-05T08:21:00.540Z","first_published":"2026-11-05T08:42:24.679Z","source":"metamask","source_name":"MetaMask","under":"tectonicfinance.net"}],"url":"https://domainspoof.com/live?show=all&q=www.tectonicfinance.net"},{"hostname":"www.termmax.org","first_observed":"2026-11-05T08:21:00.540Z","first_published":"2026-11-05T08:42:24.679Z","brands":[],"dns":"resolved","resolved":["104.21.18.163","172.67.182.189"],"resolved_at":"2026-11-05T08:21:37Z","dns_checked_at":"2026-11-06T08:45:34.000Z","dns_since":"2026-11-05T08:45:05.000Z","findings":[{"id":"ftuwyyhbw7oop7rhtlpcd","kind":"reported_domain","summary":"Under termmax.org, listed by MetaMask","first_observed":"2026-11-05T08:21:00.540Z","first_published":"2026-11-05T08:42:24.679Z","source":"metamask","source_name":"MetaMask","under":"termmax.org"}],"url":"https://domainspoof.com/live?show=all&q=www.termmax.org"},{"hostname":"www.veno-finance.net","first_observed":"2026-11-05T08:21:00.540Z","first_published":"2026-11-05T08:42:24.679Z","brands":[],"dns":"resolved","resolved":["104.21.69.113","172.67.207.190"],"resolved_at":"2026-11-05T08:21:37Z","dns_checked_at":"2026-11-06T08:45:34.000Z","dns_since":"2026-11-05T08:45:05.000Z","findings":[{"id":"fbp6awzegsafmxstvvrlb","kind":"reported_domain","summary":"Under veno-finance.net, listed by MetaMask","first_observed":"2026-11-05T08:21:00.540Z","first_published":"2026-11-05T08:42:24.679Z","source":"metamask","source_name":"MetaMask","under":"veno-finance.net"}],"url":"https://domainspoof.com/live?show=all&q=www.veno-finance.net"},{"hostname":"www.vesper-finance.com","first_observed":"2026-11-05T08:21:00.540Z","first_published":"2026-11-05T08:42:24.679Z","brands":[],"dns":"resolved","resolved":["104.21.53.45","172.67.208.253"],"resolved_at":"2026-11-05T08:21:37Z","dns_checked_at":"2026-11-06T08:45:34.000Z","dns_since":"2026-11-05T08:45:05.000Z","findings":[{"id":"fay7wjwdl2idwedwby366","kind":"reported_domain","summary":"Under vesper-finance.com, listed by MetaMask","first_observed":"2026-11-05T08:21:00.540Z","first_published":"2026-11-05T08:42:24.679Z","source":"metamask","source_name":"MetaMask","under":"vesper-finance.com"}],"url":"https://domainspoof.com/live?show=all&q=www.vesper-finance.com"},{"hostname":"www.vhod-na-kraken.click","first_observed":"2026-11-05T07:46:08.429Z","first_published":"2026-11-05T08:42:24.679Z","brands":[],"dns":"resolved","resolved":["104.21.36.39","172.67.184.183"],"resolved_at":"2026-11-05T07:57:38Z","dns_checked_at":"2026-11-06T08:45:34.000Z","dns_since":"2026-11-05T08:45:05.000Z","findings":[{"id":"fry7ztnlipcmm563pkowj","kind":"reported_domain","summary":"Under vhod-na-kraken.click, reported by PhishDestroy","first_observed":"2026-11-05T07:46:08.429Z","first_published":"2026-11-05T08:42:24.679Z","source":"phishdestroy","source_name":"PhishDestroy","under":"vhod-na-kraken.click","source_url":"https://phishdestroy.io/domain/vhod-na-kraken.click/"}],"url":"https://domainspoof.com/live?show=all&q=www.vhod-na-kraken.click"},{"hostname":"xn--monshot-mmb.com","first_observed":"2026-11-05T07:51:14.197Z","first_published":"2026-11-05T08:42:24.679Z","brands":[],"dns":"resolved","resolved":["104.21.1.38","172.67.152.40"],"resolved_at":"2026-11-05T07:51:52Z","dns_checked_at":"2026-11-06T08:45:34.000Z","dns_since":"2026-11-05T08:45:05.000Z","findings":[{"id":"fme4zqptvlq2b6ntah2qf","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T07:51:14.197Z","first_published":"2026-11-05T08:42:24.679Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/xn--monshot-mmb.com/"}],"url":"https://domainspoof.com/live?show=all&q=xn--monshot-mmb.com"},{"hostname":"yankebivac.store","first_observed":"2026-11-05T07:36:20.749Z","first_published":"2026-11-05T08:42:24.679Z","brands":[],"dns":"no_address","resolved":[],"resolved_at":"2026-11-05T07:36:56Z","dns_checked_at":"2026-11-06T08:45:34.000Z","dns_since":"2026-11-05T08:45:05.000Z","findings":[{"id":"ftngxqix7ikn3xadhb552","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T07:36:20.749Z","first_published":"2026-11-05T08:42:24.679Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=yankebivac.store"},{"hostname":"ykmprm.shop","first_observed":"2026-11-05T08:15:51.469Z","first_published":"2026-11-05T08:42:24.679Z","brands":[],"dns":"resolved","resolved":["104.21.31.137","172.67.176.217"],"resolved_at":"2026-11-05T08:16:07Z","dns_checked_at":"2026-11-06T08:45:34.000Z","dns_since":"2026-11-05T08:45:05.000Z","findings":[{"id":"f3iop2tyzuq74a6vj7sr3","kind":"reported_domain","summary":"Listed by NPA 165 (information services)","first_observed":"2026-11-05T08:15:51.469Z","first_published":"2026-11-05T08:42:24.679Z","source":"npa","source_name":"NPA 165","claim":{"category":"information services"}}],"url":"https://domainspoof.com/live?show=all&q=ykmprm.shop"},{"hostname":"acrobat.casa","first_observed":"2026-11-05T07:34:30.000Z","first_published":"2026-11-05T07:34:30.000Z","brands":[{"id":"adobe","name":"Adobe","url":"https://domainspoof.com/brands/adobe"}],"dns":"resolved","resolved":["2.59.170.20","104.219.250.37"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of acrobat.com (same name, other ending), resolved to 2.59.170.20, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T07:34:30.000Z","first_published":"2026-11-05T07:34:30.000Z","of":"acrobat.com","spelling":"tld","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"2.59.170.20","flagged_at":"2026-11-05T07:34:30Z"}]}],"url":"https://domainspoof.com/brands/adobe"},{"hostname":"aircanada.us","first_observed":"2026-11-05T07:34:30.000Z","first_published":"2026-11-05T07:34:30.000Z","brands":[{"id":"air-canada","name":"Air Canada","url":"https://domainspoof.com/brands/air-canada"}],"dns":"resolved","resolved":["216.245.197.41"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of aircanada.com (same name, other ending), resolved to 216.245.197.41, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T07:34:30.000Z","first_published":"2026-11-05T07:34:30.000Z","of":"aircanada.com","spelling":"tld","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"216.245.197.41","flagged_at":"2026-11-05T07:34:30Z"}]}],"url":"https://domainspoof.com/brands/air-canada"},{"hostname":"bitpanda.com.pl","first_observed":"2026-11-05T07:34:30.000Z","first_published":"2026-11-05T07:34:30.000Z","brands":[{"id":"bitpanda","name":"Bitpanda","url":"https://domainspoof.com/brands/bitpanda"}],"dns":"resolved","resolved":["185.253.212.22"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of bitpanda.com (same name, other ending), resolved to 185.253.212.22, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T07:34:30.000Z","first_published":"2026-11-05T07:34:30.000Z","of":"bitpanda.com","spelling":"tld","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"185.253.212.22","flagged_at":"2026-11-05T07:34:30Z"}]}],"url":"https://domainspoof.com/brands/bitpanda"},{"hostname":"bitpay.com.pl","first_observed":"2026-11-05T07:34:30.000Z","first_published":"2026-11-05T07:34:30.000Z","brands":[{"id":"bit","name":"bit","url":"https://domainspoof.com/brands/bit"}],"dns":"resolved","resolved":["185.253.212.22"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of bitpay.co.il (same name, other ending), resolved to 185.253.212.22, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T07:34:30.000Z","first_published":"2026-11-05T07:34:30.000Z","of":"bitpay.co.il","spelling":"tld","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"185.253.212.22","flagged_at":"2026-11-05T07:34:30Z"}]}],"url":"https://domainspoof.com/brands/bit"},{"hostname":"bybit.garden","first_observed":"2026-11-05T07:34:30.000Z","first_published":"2026-11-05T07:34:30.000Z","brands":[{"id":"bybit","name":"Bybit","url":"https://domainspoof.com/brands/bybit"}],"dns":"resolved","resolved":["43.152.182.137","43.168.117.41","43.175.36.11","43.175.171.84"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of bybit.com (same name, other ending), resolved to 43.152.182.137, where reported phishing was found in the 48 hours before, and resolved to 43.168.117.41, where reported phishing was found in the 48 hours before, and resolved to 43.175.171.84, where reported phishing was found in the 48 hours before, and resolved to 43.175.36.11, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T07:34:30.000Z","first_published":"2026-11-05T07:34:30.000Z","of":"bybit.com","spelling":"tld","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"43.152.182.137","flagged_at":"2026-11-05T07:34:30Z"},{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"43.168.117.41","flagged_at":"2026-11-05T07:34:30Z"},{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"43.175.171.84","flagged_at":"2026-11-05T07:34:30Z"},{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"43.175.36.11","flagged_at":"2026-11-05T07:34:30Z"}]}],"url":"https://domainspoof.com/brands/bybit"},{"hostname":"chase.trade","first_observed":"2026-11-05T07:34:30.000Z","first_published":"2026-11-05T07:34:30.000Z","brands":[{"id":"chase","name":"Chase","url":"https://domainspoof.com/brands/chase"}],"dns":"resolved","resolved":["165.22.123.139"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of chase.com (same name, other ending), resolved to 165.22.123.139, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T07:34:30.000Z","first_published":"2026-11-05T07:34:30.000Z","of":"chase.com","spelling":"tld","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"165.22.123.139","flagged_at":"2026-11-05T07:34:30Z"}]}],"url":"https://domainspoof.com/brands/chase"},{"hostname":"docomo.network","first_observed":"2026-11-05T07:34:30.000Z","first_published":"2026-11-05T07:34:30.000Z","brands":[{"id":"ntt-docomo","name":"NTT docomo","url":"https://domainspoof.com/brands/ntt-docomo"}],"dns":"resolved","resolved":["64.68.200.44"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of docomo.ne.jp (same name, other ending), resolved to 64.68.200.44, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T07:34:30.000Z","first_published":"2026-11-05T07:34:30.000Z","of":"docomo.ne.jp","spelling":"tld","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"64.68.200.44","flagged_at":"2026-11-05T07:34:30Z"}]}],"url":"https://domainspoof.com/brands/ntt-docomo"},{"hostname":"dopa.cat","first_observed":"2026-11-05T07:34:30.000Z","first_published":"2026-11-05T07:34:30.000Z","brands":[{"id":"department-of-provincial-administration","name":"Department of Provincial Administration (Thailand)","url":"https://domainspoof.com/brands/department-of-provincial-administration"}],"dns":"resolved","resolved":["2.57.91.91"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of dopa.go.th (same name, other ending), resolved to 2.57.91.91, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T07:34:30.000Z","first_published":"2026-11-05T07:34:30.000Z","of":"dopa.go.th","spelling":"tld","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"2.57.91.91","flagged_at":"2026-11-05T07:34:30Z"}]}],"url":"https://domainspoof.com/brands/department-of-provincial-administration"},{"hostname":"hyperliquid.one","first_observed":"2026-11-05T07:34:30.000Z","first_published":"2026-11-05T07:34:30.000Z","brands":[{"id":"hyperliquid","name":"Hyperliquid","url":"https://domainspoof.com/brands/hyperliquid"}],"dns":"resolved","resolved":["165.22.123.139"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of hyperliquid.xyz (same name, other ending), resolved to 165.22.123.139, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T07:34:30.000Z","first_published":"2026-11-05T07:34:30.000Z","of":"hyperliquid.xyz","spelling":"tld","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"165.22.123.139","flagged_at":"2026-11-05T07:34:30Z"}]}],"url":"https://domainspoof.com/brands/hyperliquid"},{"hostname":"metamask.claims","first_observed":"2026-11-05T07:34:30.000Z","first_published":"2026-11-05T07:34:30.000Z","brands":[{"id":"metamask","name":"MetaMask","url":"https://domainspoof.com/brands/metamask"}],"dns":"resolved","resolved":["127.0.0.127"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of metamask.io (same name, other ending), listed by MetaMask","first_observed":"2026-11-05T07:34:30.000Z","first_published":"2026-11-05T07:34:30.000Z","of":"metamask.io","spelling":"tld","found_by":"dns_sweep","listings":[{"kind":"reported","source":"metamask","source_name":"MetaMask","host":"metamask.claims","flagged_at":"2026-11-05T07:34:30Z"}]}],"url":"https://domainspoof.com/brands/metamask"},{"hostname":"phantom.trade","first_observed":"2026-11-05T07:34:30.000Z","first_published":"2026-11-05T07:34:30.000Z","brands":[{"id":"phantom","name":"Phantom","url":"https://domainspoof.com/brands/phantom"}],"dns":"resolved","resolved":["165.22.123.139"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of phantom.com (same name, other ending), resolved to 165.22.123.139, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T07:34:30.000Z","first_published":"2026-11-05T07:34:30.000Z","of":"phantom.com","spelling":"tld","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"165.22.123.139","flagged_at":"2026-11-05T07:34:30Z"}]}],"url":"https://domainspoof.com/brands/phantom"},{"hostname":"trezor.com.es","first_observed":"2026-11-05T07:34:30.000Z","first_published":"2026-11-05T07:34:30.000Z","brands":[{"id":"trezor","name":"Trezor","url":"https://domainspoof.com/brands/trezor"}],"dns":"resolved","resolved":["185.53.179.136"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of trezor.io (same name, other ending), reported by PhishDestroy","first_observed":"2026-11-05T07:34:30.000Z","first_published":"2026-11-05T07:34:30.000Z","of":"trezor.io","spelling":"tld","found_by":"dns_sweep","listings":[{"kind":"reported","source":"phishdestroy","source_name":"PhishDestroy","host":"trezor.com.es","flagged_at":"2026-11-05T07:34:30Z"}]}],"url":"https://domainspoof.com/brands/trezor"},{"hostname":"twitter.asia","first_observed":"2026-11-05T07:34:30.000Z","first_published":"2026-11-05T07:34:30.000Z","brands":[{"id":"x","name":"X (Twitter)","url":"https://domainspoof.com/brands/x"}],"dns":"resolved","resolved":["150.95.255.38"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of twitter.com (same name, other ending), resolved to 150.95.255.38, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T07:34:30.000Z","first_published":"2026-11-05T07:34:30.000Z","of":"twitter.com","spelling":"tld","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"150.95.255.38","flagged_at":"2026-11-05T07:34:30Z"}]}],"url":"https://domainspoof.com/brands/x"},{"hostname":"twitter.wine","first_observed":"2026-11-05T07:34:30.000Z","first_published":"2026-11-05T07:34:30.000Z","brands":[{"id":"x","name":"X (Twitter)","url":"https://domainspoof.com/brands/x"}],"dns":"resolved","resolved":["150.95.255.38"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of twitter.com (same name, other ending), resolved to 150.95.255.38, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T07:34:30.000Z","first_published":"2026-11-05T07:34:30.000Z","of":"twitter.com","spelling":"tld","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"150.95.255.38","flagged_at":"2026-11-05T07:34:30Z"}]}],"url":"https://domainspoof.com/brands/x"},{"hostname":"zoom.fun","first_observed":"2026-11-05T07:34:30.000Z","first_published":"2026-11-05T07:34:30.000Z","brands":[{"id":"zoom","name":"Zoom","url":"https://domainspoof.com/brands/zoom"}],"dns":"resolved","resolved":["2.59.170.20","104.219.250.37"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of zoom.us (same name, other ending), resolved to 2.59.170.20, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T07:34:30.000Z","first_published":"2026-11-05T07:34:30.000Z","of":"zoom.us","spelling":"tld","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"2.59.170.20","flagged_at":"2026-11-05T07:34:30Z"}]}],"url":"https://domainspoof.com/brands/zoom"},{"hostname":"zoom.trade","first_observed":"2026-11-05T07:34:30.000Z","first_published":"2026-11-05T07:34:30.000Z","brands":[{"id":"zoom","name":"Zoom","url":"https://domainspoof.com/brands/zoom"}],"dns":"resolved","resolved":["165.22.123.139"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of zoom.us (same name, other ending), resolved to 165.22.123.139, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T07:34:30.000Z","first_published":"2026-11-05T07:34:30.000Z","of":"zoom.us","spelling":"tld","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"165.22.123.139","flagged_at":"2026-11-05T07:34:30Z"}]}],"url":"https://domainspoof.com/brands/zoom"},{"hostname":"ekspert-grohe.pl","first_observed":"2026-11-02T05:46:51.480Z","first_published":"2026-11-05T07:33:40.111Z","brands":[{"id":"grohe","name":"Grohe","url":"https://domainspoof.com/brands/grohe"}],"dns":"resolved","resolved":["45.32.183.112"],"resolved_at":"2026-11-06T07:45:17Z","dns_checked_at":"2026-11-06T07:45:17.000Z","dns_since":"2026-11-05T07:44:43.000Z","findings":[{"id":"fgedcwpes7qyfm35tfynn","kind":"phishing_infrastructure","summary":"Resolved to 45.32.183.112, where reported phishing was found in the 48 hours before","first_observed":"2026-11-02T05:46:51.480Z","first_published":"2026-11-05T07:33:40.111Z","address":"45.32.183.112","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/grohe"},{"hostname":"1-governance-orbio.pages.dev","first_observed":"2026-11-05T06:31:20.800Z","first_published":"2026-11-05T07:32:58.446Z","brands":[],"dns":"not_found","resolved":["172.66.44.113","172.66.47.143"],"resolved_at":"2026-11-05T06:31:27Z","dns_checked_at":"2026-11-06T07:45:17.000Z","dns_since":"2026-11-05T07:44:43.000Z","findings":[{"id":"fo3weyammgvejl4wb6ouc","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T06:31:20.800Z","first_published":"2026-11-05T07:32:58.446Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=1-governance-orbio.pages.dev"},{"hostname":"10-governance-orbio.pages.dev","first_observed":"2026-11-05T07:15:49.227Z","first_published":"2026-11-05T07:32:58.446Z","brands":[],"dns":"not_found","resolved":["172.66.44.63","172.66.47.193"],"resolved_at":"2026-11-05T07:15:53Z","dns_checked_at":"2026-11-06T07:45:17.000Z","dns_since":"2026-11-05T07:44:43.000Z","findings":[{"id":"flinq43p4xaqr6rret2ri","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T07:15:49.227Z","first_published":"2026-11-05T07:32:58.446Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=10-governance-orbio.pages.dev"},{"hostname":"11-governance-orbio.pages.dev","first_observed":"2026-11-05T07:20:55.702Z","first_published":"2026-11-05T07:32:58.446Z","brands":[],"dns":"not_found","resolved":["172.66.44.77","172.66.47.179"],"resolved_at":"2026-11-05T07:21:00Z","dns_checked_at":"2026-11-06T07:45:17.000Z","dns_since":"2026-11-05T07:44:43.000Z","findings":[{"id":"fm3ipi6liuqgr4efifkvy","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T07:20:55.702Z","first_published":"2026-11-05T07:32:58.446Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=11-governance-orbio.pages.dev"},{"hostname":"12-governance-orbio.pages.dev","first_observed":"2026-11-05T07:26:02.064Z","first_published":"2026-11-05T07:32:58.446Z","brands":[],"dns":"not_found","resolved":["172.66.44.186","172.66.47.70"],"resolved_at":"2026-11-05T07:26:07Z","dns_checked_at":"2026-11-06T07:45:17.000Z","dns_since":"2026-11-05T07:44:43.000Z","findings":[{"id":"fzmxhjisce3vhmuuequiy","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T07:26:02.064Z","first_published":"2026-11-05T07:32:58.446Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=12-governance-orbio.pages.dev"},{"hostname":"12-vote-netnetcapital.pages.dev","first_observed":"2026-11-05T07:20:55.702Z","first_published":"2026-11-05T07:32:58.446Z","brands":[],"dns":"not_found","resolved":["172.66.44.108","172.66.47.148"],"resolved_at":"2026-11-06T09:26:37Z","dns_checked_at":"2026-11-06T07:45:17.000Z","dns_since":"2026-11-05T07:44:43.000Z","findings":[{"id":"fttqiep6cvlvwro43uoub","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T07:20:55.702Z","first_published":"2026-11-05T07:32:58.446Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=12-vote-netnetcapital.pages.dev"},{"hostname":"2-governance-orbio.pages.dev","first_observed":"2026-11-05T06:36:28.363Z","first_published":"2026-11-05T07:32:58.446Z","brands":[],"dns":"not_found","resolved":["172.66.44.174","172.66.47.82"],"resolved_at":"2026-11-05T06:36:31Z","dns_checked_at":"2026-11-06T07:45:17.000Z","dns_since":"2026-11-05T07:44:43.000Z","findings":[{"id":"fvu4f7mf2xaw56cqytbhq","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T06:36:28.363Z","first_published":"2026-11-05T07:32:58.446Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=2-governance-orbio.pages.dev"},{"hostname":"21145542224555546668988294.xyz","first_observed":"2026-11-05T07:26:02.064Z","first_published":"2026-11-05T07:32:58.446Z","brands":[],"dns":"not_found","resolved":["64.89.160.238"],"resolved_at":"2026-11-05T07:26:07Z","dns_checked_at":"2026-11-06T15:52:26.000Z","findings":[{"id":"ftmebuqmrf725xdi4key2","kind":"reported_domain","summary":"Listed by USOM","first_observed":"2026-11-05T07:26:02.064Z","first_published":"2026-11-05T07:32:58.446Z","source":"usom","source_name":"USOM"}],"url":"https://domainspoof.com/live?show=all&q=21145542224555546668988294.xyz"},{"hostname":"2c8b3f19-0325-4acc-a3dd-31a918e4dbf5.random.curvedao.xyz","first_observed":"2026-11-05T06:36:28.363Z","first_published":"2026-11-05T07:32:58.446Z","brands":[],"dns":"resolved","resolved":["162.4.84.215"],"resolved_at":"2026-11-05T06:36:31Z","dns_checked_at":"2026-11-06T07:45:17.000Z","dns_since":"2026-11-05T07:44:43.000Z","findings":[{"id":"fclyp3qofkg7kv2fuskov","kind":"reported_domain","summary":"Under curvedao.xyz, listed by MetaMask","first_observed":"2026-11-05T06:36:28.363Z","first_published":"2026-11-05T07:32:58.446Z","source":"metamask","source_name":"MetaMask","under":"curvedao.xyz"}],"url":"https://domainspoof.com/live?show=all&q=2c8b3f19-0325-4acc-a3dd-31a918e4dbf5.random.curvedao.xyz"},{"hostname":"3-governance-orbio.pages.dev","first_observed":"2026-11-05T06:41:03.894Z","first_published":"2026-11-05T07:32:58.446Z","brands":[],"dns":"not_found","resolved":["172.66.44.193","172.66.47.63"],"resolved_at":"2026-11-05T06:41:08Z","dns_checked_at":"2026-11-06T07:45:17.000Z","dns_since":"2026-11-05T07:44:43.000Z","findings":[{"id":"f6n4pwikp4zlathdivcq3","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T06:41:03.894Z","first_published":"2026-11-05T07:32:58.446Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=3-governance-orbio.pages.dev"},{"hostname":"3g3741b6icp.robloxf.com.es","first_observed":"2026-11-05T07:00:58.367Z","first_published":"2026-11-05T07:32:58.446Z","brands":[],"dns":"resolved","resolved":["185.53.179.200"],"resolved_at":"2026-11-05T07:01:02Z","dns_checked_at":"2026-11-06T07:45:17.000Z","dns_since":"2026-11-05T07:44:43.000Z","findings":[{"id":"f6wwi5gdldpt4inlo3sxw","kind":"reported_domain","summary":"Under robloxf.com.es, reported by PhishDestroy","first_observed":"2026-11-05T07:00:58.367Z","first_published":"2026-11-05T07:32:58.446Z","source":"phishdestroy","source_name":"PhishDestroy","under":"robloxf.com.es","source_url":"https://phishdestroy.io/domain/robloxf.com.es/"}],"url":"https://domainspoof.com/live?show=all&q=3g3741b6icp.robloxf.com.es"},{"hostname":"4-governance-orbio.pages.dev","first_observed":"2026-11-05T06:46:10.294Z","first_published":"2026-11-05T07:32:58.446Z","brands":[],"dns":"not_found","resolved":["172.66.45.42","172.66.46.214"],"resolved_at":"2026-11-05T06:46:15Z","dns_checked_at":"2026-11-06T07:45:17.000Z","dns_since":"2026-11-05T07:44:43.000Z","findings":[{"id":"fry632i7xnpptbgouutbx","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T06:46:10.294Z","first_published":"2026-11-05T07:32:58.446Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=4-governance-orbio.pages.dev"},{"hostname":"40851ce3-5d65-4730-9935-63161e8a4495.curvedao.xyz","first_observed":"2026-11-05T06:36:28.363Z","first_published":"2026-11-05T07:32:58.446Z","brands":[],"dns":"resolved","resolved":["162.4.84.215"],"resolved_at":"2026-11-05T06:36:31Z","dns_checked_at":"2026-11-06T07:45:17.000Z","dns_since":"2026-11-05T07:44:43.000Z","findings":[{"id":"fiwgeu43wizfdulhv2527","kind":"reported_domain","summary":"Under curvedao.xyz, listed by MetaMask","first_observed":"2026-11-05T06:36:28.363Z","first_published":"2026-11-05T07:32:58.446Z","source":"metamask","source_name":"MetaMask","under":"curvedao.xyz"}],"url":"https://domainspoof.com/live?show=all&q=40851ce3-5d65-4730-9935-63161e8a4495.curvedao.xyz"},{"hostname":"442094-kucoin.com","first_observed":"2026-11-05T06:56:52.654Z","first_published":"2026-11-05T07:32:58.446Z","brands":[{"id":"kucoin","name":"KuCoin","url":"https://domainspoof.com/brands/kucoin"}],"dns":"resolved","resolved":["104.21.36.86","172.67.190.176","2606:4700:3030::ac43:beb0","2606:4700:3031::6815:2456"],"resolved_at":"2026-11-05T06:56:56Z","dns_checked_at":"2026-11-06T07:45:17.000Z","dns_since":"2026-11-05T07:44:43.000Z","findings":[{"id":"f6gofr5qgi5fxmzwhht3v","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T06:56:52.654Z","first_published":"2026-11-05T07:32:58.446Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/brands/kucoin"},{"hostname":"5-governance-orbio.pages.dev","first_observed":"2026-11-05T06:51:46.838Z","first_published":"2026-11-05T07:32:58.446Z","brands":[],"dns":"not_found","resolved":["172.66.44.67","172.66.47.189"],"resolved_at":"2026-11-05T06:51:51Z","dns_checked_at":"2026-11-06T07:45:17.000Z","dns_since":"2026-11-05T07:44:43.000Z","findings":[{"id":"fllilfdz2wvjelq7jgbbz","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T06:51:46.838Z","first_published":"2026-11-05T07:32:58.446Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=5-governance-orbio.pages.dev"},{"hostname":"6-governance-orbio.pages.dev","first_observed":"2026-11-05T06:56:52.654Z","first_published":"2026-11-05T07:32:58.446Z","brands":[],"dns":"not_found","resolved":["172.66.45.11","172.66.46.245"],"resolved_at":"2026-11-05T06:56:56Z","dns_checked_at":"2026-11-06T07:45:17.000Z","dns_since":"2026-11-05T07:44:43.000Z","findings":[{"id":"fogj4gw2ej3qkpj4pni6g","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T06:56:52.654Z","first_published":"2026-11-05T07:32:58.446Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=6-governance-orbio.pages.dev"},{"hostname":"7-governance-orbio.pages.dev","first_observed":"2026-11-05T07:00:58.367Z","first_published":"2026-11-05T07:32:58.446Z","brands":[],"dns":"not_found","resolved":["172.66.44.87","172.66.47.169"],"resolved_at":"2026-11-05T07:01:02Z","dns_checked_at":"2026-11-06T07:45:17.000Z","dns_since":"2026-11-05T07:44:43.000Z","findings":[{"id":"frjavsbhk7wi7zoslcllb","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T07:00:58.367Z","first_published":"2026-11-05T07:32:58.446Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=7-governance-orbio.pages.dev"},{"hostname":"7aln2f.hdiv8jy.com","first_observed":"2026-11-05T07:10:42.285Z","first_published":"2026-11-05T07:32:58.446Z","brands":[],"dns":"resolved","resolved":["185.53.179.136"],"resolved_at":"2026-11-05T07:10:47Z","dns_checked_at":"2026-11-06T07:45:17.000Z","dns_since":"2026-11-05T07:44:43.000Z","findings":[{"id":"fwudkcrd6x65alrpmt7va","kind":"reported_domain","summary":"Under hdiv8jy.com, listed by MetaMask","first_observed":"2026-11-05T07:10:42.285Z","first_published":"2026-11-05T07:32:58.446Z","source":"metamask","source_name":"MetaMask","under":"hdiv8jy.com"}],"url":"https://domainspoof.com/live?show=all&q=7aln2f.hdiv8jy.com"},{"hostname":"8-governance-orbio.pages.dev","first_observed":"2026-11-05T07:05:34.225Z","first_published":"2026-11-05T07:32:58.446Z","brands":[],"dns":"not_found","resolved":[],"resolved_at":"2026-11-05T07:12:15Z","dns_checked_at":"2026-11-06T07:45:17.000Z","dns_since":"2026-11-05T07:44:43.000Z","findings":[{"id":"fln7vvsbo4wfmboujmlw2","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T07:05:34.225Z","first_published":"2026-11-05T07:32:58.446Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=8-governance-orbio.pages.dev"},{"hostname":"9-governance-orbio.pages.dev","first_observed":"2026-11-05T07:10:42.285Z","first_published":"2026-11-05T07:32:58.446Z","brands":[],"dns":"not_found","resolved":["172.66.44.151","172.66.47.105"],"resolved_at":"2026-11-05T07:10:47Z","dns_checked_at":"2026-11-06T07:45:17.000Z","dns_since":"2026-11-05T07:44:43.000Z","findings":[{"id":"fk25eyk5ka6jahmb366n6","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T07:10:42.285Z","first_published":"2026-11-05T07:32:58.446Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=9-governance-orbio.pages.dev"},{"hostname":"a101onlines.com","first_observed":"2026-11-05T06:44:15.212Z","first_published":"2026-11-05T07:32:58.446Z","brands":[],"dns":"not_found","resolved":["64.89.160.238"],"resolved_at":"2026-11-05T06:49:16Z","dns_checked_at":"2026-11-06T07:45:17.000Z","dns_since":"2026-11-05T07:44:43.000Z","findings":[{"id":"fo7pd227crlate546p4oj","kind":"reported_domain","summary":"Listed by USOM","first_observed":"2026-11-05T06:44:15.212Z","first_published":"2026-11-05T07:32:58.446Z","source":"usom","source_name":"USOM"}],"url":"https://domainspoof.com/live?show=all&q=a101onlines.com"},{"hostname":"abigail.wadevirgil.ezgateway.net","first_observed":"2026-11-05T07:20:55.702Z","first_published":"2026-11-05T07:32:58.446Z","brands":[],"dns":"resolved","resolved":["172.66.44.158","172.66.47.98"],"resolved_at":"2026-11-05T07:21:01Z","dns_checked_at":"2026-11-06T07:45:17.000Z","dns_since":"2026-11-05T07:44:43.000Z","findings":[{"id":"f6orjqc7dloakmqmbc6sq","kind":"reported_domain","summary":"Under ezgateway.net, listed by USOM","first_observed":"2026-11-05T07:20:55.702Z","first_published":"2026-11-05T07:32:58.446Z","source":"usom","source_name":"USOM","under":"ezgateway.net"}],"url":"https://domainspoof.com/live?show=all&q=abigail.wadevirgil.ezgateway.net"},{"hostname":"alysashopping.store","first_observed":"2026-11-05T06:41:03.894Z","first_published":"2026-11-05T07:32:58.446Z","brands":[],"dns":"no_address","resolved":[],"resolved_at":"2026-11-05T06:51:41Z","dns_checked_at":"2026-11-06T07:45:17.000Z","dns_since":"2026-11-05T07:44:43.000Z","findings":[{"id":"fgauom6r7tpqz33twc2wp","kind":"reported_domain","summary":"Listed by NPA 165 (e-commerce)","first_observed":"2026-11-05T06:41:03.894Z","first_published":"2026-11-05T07:32:58.446Z","source":"npa","source_name":"NPA 165","claim":{"category":"e-commerce"}}],"url":"https://domainspoof.com/live?show=all&q=alysashopping.store"},{"hostname":"app-firelight.co","first_observed":"2026-11-05T06:21:30.781Z","first_published":"2026-11-05T07:32:58.446Z","brands":[],"dns":"resolved","resolved":["104.21.10.51","172.67.162.46"],"resolved_at":"2026-11-05T06:21:36Z","dns_checked_at":"2026-11-06T07:45:17.000Z","dns_since":"2026-11-05T07:44:43.000Z","findings":[{"id":"fkhoixuqbimkdjvt5bona","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T06:21:30.781Z","first_published":"2026-11-05T07:32:58.446Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=app-firelight.co"},{"hostname":"app.clockpoint.com.br","first_observed":"2026-11-05T07:15:49.227Z","first_published":"2026-11-05T07:32:58.446Z","brands":[],"dns":"resolved","resolved":["89.167.115.93"],"resolved_at":"2026-11-05T07:15:58Z","dns_checked_at":"2026-11-06T07:45:17.000Z","dns_since":"2026-11-05T07:44:43.000Z","findings":[{"id":"ffq2nhenche2exwiqfih7","kind":"reported_domain","summary":"Under clockpoint.com.br, reported by PhishDestroy","first_observed":"2026-11-05T07:15:49.227Z","first_published":"2026-11-05T07:32:58.446Z","source":"phishdestroy","source_name":"PhishDestroy","under":"clockpoint.com.br","source_url":"https://phishdestroy.io/domain/clockpoint.com.br/"}],"url":"https://domainspoof.com/live?show=all&q=app.clockpoint.com.br"},{"hostname":"ariashopping.store","first_observed":"2026-11-05T07:05:34.225Z","first_published":"2026-11-05T07:32:58.446Z","brands":[],"dns":"no_address","resolved":[],"resolved_at":"2026-11-05T07:12:21Z","dns_checked_at":"2026-11-06T07:45:17.000Z","dns_since":"2026-11-05T07:44:43.000Z","findings":[{"id":"fzxmbrli6va24llahxene","kind":"reported_domain","summary":"Listed by NPA 165 (information services)","first_observed":"2026-11-05T07:05:34.225Z","first_published":"2026-11-05T07:32:58.446Z","source":"npa","source_name":"NPA 165","claim":{"category":"information services"}}],"url":"https://domainspoof.com/live?show=all&q=ariashopping.store"},{"hostname":"arzumsseninlew.com","first_observed":"2026-11-05T06:44:15.212Z","first_published":"2026-11-05T07:32:58.446Z","brands":[],"dns":"not_found","resolved":["45.13.237.71"],"resolved_at":"2026-11-05T06:49:16Z","dns_checked_at":"2026-11-06T15:52:26.000Z","findings":[{"id":"fuxep3z3abdrrelnf2by5","kind":"reported_domain","summary":"Listed by USOM","first_observed":"2026-11-05T06:44:15.212Z","first_published":"2026-11-05T07:32:58.446Z","source":"usom","source_name":"USOM"}],"url":"https://domainspoof.com/live?show=all&q=arzumsseninlew.com"},{"hostname":"autoconfig.mapsa.com.pe","first_observed":"2026-11-05T06:56:52.654Z","first_published":"2026-11-05T07:32:58.446Z","brands":[],"dns":"resolved","resolved":["190.92.172.215"],"resolved_at":"2026-11-05T06:57:00Z","dns_checked_at":"2026-11-06T07:45:17.000Z","dns_since":"2026-11-05T07:44:43.000Z","findings":[{"id":"f6cjmpaboo5faqdgkluu7","kind":"reported_domain","summary":"Under mapsa.com.pe, reported by PhishDestroy","first_observed":"2026-11-05T06:56:52.654Z","first_published":"2026-11-05T07:32:58.446Z","source":"phishdestroy","source_name":"PhishDestroy","under":"mapsa.com.pe","source_url":"https://phishdestroy.io/domain/mapsa.com.pe/"}],"url":"https://domainspoof.com/live?show=all&q=autoconfig.mapsa.com.pe"},{"hostname":"autodiscover.mapsa.com.pe","first_observed":"2026-11-05T06:56:52.654Z","first_published":"2026-11-05T07:32:58.446Z","brands":[],"dns":"resolved","resolved":["190.92.172.215"],"resolved_at":"2026-11-05T06:57:00Z","dns_checked_at":"2026-11-06T07:45:17.000Z","dns_since":"2026-11-05T07:44:43.000Z","findings":[{"id":"fycbuuortau2hegdlwabm","kind":"reported_domain","summary":"Under mapsa.com.pe, reported by PhishDestroy","first_observed":"2026-11-05T06:56:52.654Z","first_published":"2026-11-05T07:32:58.446Z","source":"phishdestroy","source_name":"PhishDestroy","under":"mapsa.com.pe","source_url":"https://phishdestroy.io/domain/mapsa.com.pe/"}],"url":"https://domainspoof.com/live?show=all&q=autodiscover.mapsa.com.pe"},{"hostname":"avenproks.digital","first_observed":"2026-11-05T06:36:28.363Z","first_published":"2026-11-05T07:32:58.446Z","brands":[],"dns":"resolved","resolved":["104.21.18.181","172.67.183.26"],"resolved_at":"2026-11-05T06:45:21Z","dns_checked_at":"2026-11-06T07:45:17.000Z","dns_since":"2026-11-05T07:44:43.000Z","findings":[{"id":"fq33kc7suskargpbznmtt","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T06:36:28.363Z","first_published":"2026-11-05T07:32:58.446Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=avenproks.digital"},{"hostname":"basebeauty.org","first_observed":"2026-11-05T06:21:30.781Z","first_published":"2026-11-05T07:32:58.446Z","brands":[],"dns":"resolved","resolved":["104.21.58.72","172.67.157.122"],"resolved_at":"2026-11-05T06:21:39Z","dns_checked_at":"2026-11-06T07:45:17.000Z","dns_since":"2026-11-05T07:44:43.000Z","findings":[{"id":"f76rpvi7dz4xcw2ufesia","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T06:21:30.781Z","first_published":"2026-11-05T07:32:58.446Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/basebeauty.org/"}],"url":"https://domainspoof.com/live?show=all&q=basebeauty.org"},{"hostname":"bitget-hub.cn","first_observed":"2026-11-04T12:20:14.743Z","first_published":"2026-11-05T07:32:58.446Z","brands":[{"id":"bitget","name":"Bitget","url":"https://domainspoof.com/brands/bitget"}],"dns":"resolved","resolved":["177.211.118.185"],"resolved_at":"2026-11-06T07:45:17Z","dns_checked_at":"2026-11-06T07:45:17.000Z","dns_since":"2026-11-05T07:44:43.000Z","findings":[{"id":"flcg5gi4edwocrmnr7fwi","kind":"phishing_infrastructure","summary":"Resolved to 177.211.118.185, where reported phishing was found in the 48 hours before","first_observed":"2026-11-04T12:20:14.743Z","first_published":"2026-11-05T07:32:58.446Z","address":"177.211.118.185","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/bitget"},{"hostname":"bitgetsupport.site","first_observed":"2026-11-05T07:12:35.428Z","first_published":"2026-11-05T07:32:58.446Z","brands":[{"id":"bitget","name":"Bitget","url":"https://domainspoof.com/brands/bitget"}],"dns":"resolved","resolved":["2.57.91.91"],"resolved_at":"2026-11-06T07:45:17Z","dns_checked_at":"2026-11-06T07:45:17.000Z","dns_since":"2026-11-05T07:44:43.000Z","findings":[{"id":"fxpfypyqlsue5wzrk3466","kind":"phishing_infrastructure","summary":"Resolved to 2.57.91.91, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T07:12:35.428Z","first_published":"2026-11-05T07:32:58.446Z","address":"2.57.91.91","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/bitget"},{"hostname":"bitrefill.com-cm01-esim-gift.com","first_observed":"2026-11-05T06:26:18.183Z","first_published":"2026-11-05T07:32:58.446Z","brands":[{"id":"bitrefill","name":"Bitrefill","url":"https://domainspoof.com/brands/bitrefill"}],"dns":"resolved","resolved":["62.60.226.39"],"resolved_at":"2026-11-06T07:45:17Z","dns_checked_at":"2026-11-06T07:45:17.000Z","dns_since":"2026-11-05T07:44:43.000Z","findings":[{"id":"fyzkov73h2phbdlkfzolf","kind":"spamhaus_drop","summary":"Resolved to 62.60.226.39 on Spamhaus DROP","first_observed":"2026-11-05T06:26:18.183Z","first_published":"2026-11-05T07:32:58.446Z","address":"62.60.226.39","list":"spamhaus_drop","list_name":"Spamhaus DROP"}],"url":"https://domainspoof.com/brands/bitrefill"},{"hostname":"boost-equium.app","first_observed":"2026-11-05T07:00:58.367Z","first_published":"2026-11-05T07:32:58.446Z","brands":[],"dns":"resolved","resolved":["104.21.67.67","172.67.216.35"],"resolved_at":"2026-11-05T07:01:15Z","dns_checked_at":"2026-11-06T07:45:17.000Z","dns_since":"2026-11-05T07:44:43.000Z","findings":[{"id":"fyuoyx4cptx4krndrgj3c","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T07:00:58.367Z","first_published":"2026-11-05T07:32:58.446Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=boost-equium.app"},{"hostname":"bridge.octra.org","first_observed":"2026-11-05T07:20:55.702Z","first_published":"2026-11-05T07:32:58.446Z","brands":[],"dns":"resolved","resolved":["104.26.14.236","104.26.15.236","172.67.73.170"],"resolved_at":"2026-11-05T07:21:02Z","dns_checked_at":"2026-11-06T07:45:17.000Z","dns_since":"2026-11-05T07:44:43.000Z","findings":[{"id":"fmocbzn67bxvpgzr35j6y","kind":"reported_domain","summary":"Under octra.org, reported by PhishDestroy","first_observed":"2026-11-05T07:20:55.702Z","first_published":"2026-11-05T07:32:58.446Z","source":"phishdestroy","source_name":"PhishDestroy","under":"octra.org","source_url":"https://phishdestroy.io/domain/octra.org/"}],"url":"https://domainspoof.com/live?show=all&q=bridge.octra.org"},{"hostname":"bxvhag96g.asia","first_observed":"2026-11-05T06:56:52.654Z","first_published":"2026-11-05T07:32:58.446Z","brands":[],"dns":"resolved","resolved":["108.156.46.18","108.156.46.32","108.156.46.55","108.156.46.65"],"resolved_at":"2026-11-05T07:05:09Z","dns_checked_at":"2026-11-06T07:45:17.000Z","dns_since":"2026-11-05T07:44:43.000Z","findings":[{"id":"follsorzcfubownmemrjj","kind":"reported_domain","summary":"Listed by NPA 165 (finance and insurance)","first_observed":"2026-11-05T06:56:52.654Z","first_published":"2026-11-05T07:32:58.446Z","source":"npa","source_name":"NPA 165","claim":{"category":"finance and insurance"}}],"url":"https://domainspoof.com/live?show=all&q=bxvhag96g.asia"},{"hostname":"c-casibomquncel.info","first_observed":"2026-11-05T07:15:49.227Z","first_published":"2026-11-05T07:32:58.446Z","brands":[],"dns":"resolved","resolved":["104.21.2.41","172.67.128.177"],"resolved_at":"2026-11-05T07:16:10Z","dns_checked_at":"2026-11-06T07:45:17.000Z","dns_since":"2026-11-05T07:44:43.000Z","findings":[{"id":"fwu3z6jnxgxic2j7qlyxe","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T07:15:49.227Z","first_published":"2026-11-05T07:32:58.446Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/c-casibomquncel.info/"}],"url":"https://domainspoof.com/live?show=all&q=c-casibomquncel.info"},{"hostname":"caeser.pro","first_observed":"2026-11-05T06:31:20.800Z","first_published":"2026-11-05T07:32:58.446Z","brands":[],"dns":"resolved","resolved":["89.124.251.220"],"resolved_at":"2026-11-05T06:31:34Z","dns_checked_at":"2026-11-06T07:45:17.000Z","dns_since":"2026-11-05T07:44:43.000Z","findings":[{"id":"fpm2exj3cktqdrgqvrgif","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T06:31:20.800Z","first_published":"2026-11-05T07:32:58.446Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/caeser.pro/"}],"url":"https://domainspoof.com/live?show=all&q=caeser.pro"},{"hostname":"campsite.bio","first_observed":"2026-11-05T06:21:30.781Z","first_published":"2026-11-05T07:32:58.446Z","brands":[{"id":"facebook","name":"Facebook","url":"https://domainspoof.com/brands/facebook"}],"dns":"resolved","resolved":["3.173.161.10","3.173.161.57","3.173.161.83","3.173.161.107"],"resolved_at":"2026-11-05T06:21:42Z","dns_checked_at":"2026-11-06T07:45:17.000Z","dns_since":"2026-11-05T07:44:43.000Z","findings":[{"id":"fnng2genn6wvgqswr6pcw","kind":"reported_domain","summary":"Reported by PhishTank as imitating Facebook","first_observed":"2026-11-05T06:21:30.781Z","first_published":"2026-11-05T07:32:58.446Z","source":"phishtank","source_name":"PhishTank","claim":{"brand":"Facebook"},"source_url":"https://phishtank.org/phish_detail.php?phish_id=9308104"}],"url":"https://domainspoof.com/brands/facebook"},{"hostname":"casibomyeni1.info","first_observed":"2026-11-05T07:10:42.285Z","first_published":"2026-11-05T07:32:58.446Z","brands":[],"dns":"resolved","resolved":["104.21.49.219","172.67.195.14"],"resolved_at":"2026-11-05T07:13:54Z","dns_checked_at":"2026-11-06T07:45:17.000Z","dns_since":"2026-11-05T07:44:43.000Z","findings":[{"id":"fbnkz53z5bzmi4i2owyrd","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T07:10:42.285Z","first_published":"2026-11-05T07:32:58.446Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/casibomyeni1.info/"}],"url":"https://domainspoof.com/live?show=all&q=casibomyeni1.info"},{"hostname":"casino-stake.ca","first_observed":"2026-11-05T06:31:20.800Z","first_published":"2026-11-05T07:32:58.446Z","brands":[],"dns":"resolved","resolved":["104.21.61.123","172.67.210.73"],"resolved_at":"2026-11-05T06:31:34Z","dns_checked_at":"2026-11-06T07:45:17.000Z","dns_since":"2026-11-05T07:44:43.000Z","findings":[{"id":"fm75ygtgxym46n2xqf2d3","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T06:31:20.800Z","first_published":"2026-11-05T07:32:58.446Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=casino-stake.ca"},{"hostname":"cdn.caeser.pro","first_observed":"2026-11-05T06:31:20.800Z","first_published":"2026-11-05T07:32:58.446Z","brands":[],"dns":"resolved","resolved":["89.124.251.220"],"resolved_at":"2026-11-05T06:31:34Z","dns_checked_at":"2026-11-06T07:45:17.000Z","dns_since":"2026-11-05T07:44:43.000Z","findings":[{"id":"f2fhtihouoktd2cchsl7f","kind":"reported_domain","summary":"Under caeser.pro, reported by PhishDestroy","first_observed":"2026-11-05T06:31:20.800Z","first_published":"2026-11-05T07:32:58.446Z","source":"phishdestroy","source_name":"PhishDestroy","under":"caeser.pro","source_url":"https://phishdestroy.io/domain/caeser.pro/"}],"url":"https://domainspoof.com/live?show=all&q=cdn.caeser.pro"},{"hostname":"cdn.defactovoting.io","first_observed":"2026-11-05T06:31:20.800Z","first_published":"2026-11-05T07:32:58.446Z","brands":[],"dns":"resolved","resolved":["104.21.31.32","172.67.174.233"],"resolved_at":"2026-11-05T06:31:34Z","dns_checked_at":"2026-11-06T07:45:17.000Z","dns_since":"2026-11-05T07:44:43.000Z","findings":[{"id":"fhnmiuh3mcjuz6uguemwx","kind":"reported_domain","summary":"Under defactovoting.io, reported by PhishDestroy","first_observed":"2026-11-05T06:31:20.800Z","first_published":"2026-11-05T07:32:58.446Z","source":"phishdestroy","source_name":"PhishDestroy","under":"defactovoting.io","source_url":"https://phishdestroy.io/domain/defactovoting.io/"}],"url":"https://domainspoof.com/live?show=all&q=cdn.defactovoting.io"},{"hostname":"cdn.yandex.vkroom-service-protect.online","first_observed":"2026-11-05T06:51:54.704Z","first_published":"2026-11-05T07:32:58.446Z","brands":[{"id":"yandex","name":"Yandex","url":"https://domainspoof.com/brands/yandex"}],"dns":"resolved","resolved":["188.72.112.1"],"resolved_at":"2026-11-06T07:45:17Z","dns_checked_at":"2026-11-06T07:45:17.000Z","dns_since":"2026-11-05T07:44:43.000Z","findings":[{"id":"fej5if7tk3ayeatx275eu","kind":"phishing_infrastructure","summary":"Resolved to 188.72.112.1, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T06:51:54.704Z","first_published":"2026-11-05T07:32:58.446Z","address":"188.72.112.1","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/yandex"},{"hostname":"claim-pengu.trade","first_observed":"2026-11-05T06:51:46.838Z","first_published":"2026-11-05T07:32:58.446Z","brands":[],"dns":"resolved","resolved":["104.21.49.213","172.67.193.143"],"resolved_at":"2026-11-05T06:59:11Z","dns_checked_at":"2026-11-06T07:45:17.000Z","dns_since":"2026-11-05T07:44:43.000Z","findings":[{"id":"fxh5lu6n3cwol5rtcoyoq","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T06:51:46.838Z","first_published":"2026-11-05T07:32:58.446Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=claim-pengu.trade"},{"hostname":"clockpoint.com.br","first_observed":"2026-11-05T07:15:49.227Z","first_published":"2026-11-05T07:32:58.446Z","brands":[],"dns":"resolved","resolved":["89.167.115.93"],"resolved_at":"2026-11-05T07:16:10Z","dns_checked_at":"2026-11-06T07:45:17.000Z","dns_since":"2026-11-05T07:44:43.000Z","findings":[{"id":"fyzm5yyechuqwn3uhwl7t","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T07:15:49.227Z","first_published":"2026-11-05T07:32:58.446Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/clockpoint.com.br/"}],"url":"https://domainspoof.com/live?show=all&q=clockpoint.com.br"},{"hostname":"coin-htx.com.cn","first_observed":"2026-11-05T06:26:12.359Z","first_published":"2026-11-05T07:32:58.446Z","brands":[],"dns":"resolved","resolved":["104.21.55.194","172.67.172.110"],"resolved_at":"2026-11-05T06:26:19Z","dns_checked_at":"2026-11-06T07:45:17.000Z","dns_since":"2026-11-05T07:44:43.000Z","findings":[{"id":"f4k5ycv2ygkffzwperidm","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T06:26:12.359Z","first_published":"2026-11-05T07:32:58.446Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=coin-htx.com.cn"},{"hostname":"coinexes.vip","first_observed":"2026-11-05T07:15:49.227Z","first_published":"2026-11-05T07:32:58.446Z","brands":[],"dns":"resolved","resolved":["104.21.93.79","172.67.207.77"],"resolved_at":"2026-11-05T07:16:10Z","dns_checked_at":"2026-11-06T07:45:17.000Z","dns_since":"2026-11-05T07:44:43.000Z","findings":[{"id":"frmlxfotiiyns2fvi5l6x","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T07:15:49.227Z","first_published":"2026-11-05T07:32:58.446Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=coinexes.vip"},{"hostname":"coinlistieo.com","first_observed":"2026-11-05T06:36:28.363Z","first_published":"2026-11-05T07:32:58.446Z","brands":[],"dns":"resolved","resolved":["104.21.21.94","172.67.197.160"],"resolved_at":"2026-11-05T06:45:56Z","dns_checked_at":"2026-11-06T07:45:17.000Z","dns_since":"2026-11-05T07:44:43.000Z","findings":[{"id":"fmruhkhaqzvkz44bwhv4p","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T06:36:28.363Z","first_published":"2026-11-05T07:32:58.446Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/coinlistieo.com/"}],"url":"https://domainspoof.com/live?show=all&q=coinlistieo.com"},{"hostname":"connect-ledgrwalite.pages.dev","first_observed":"2026-11-05T07:20:55.702Z","first_published":"2026-11-05T07:32:58.446Z","brands":[],"dns":"resolved","resolved":["172.66.44.234","172.66.47.22"],"resolved_at":"2026-11-05T07:21:04Z","dns_checked_at":"2026-11-06T07:45:17.000Z","dns_since":"2026-11-05T07:44:43.000Z","findings":[{"id":"f42ngxof5ysxwkfkhfkez","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T07:20:55.702Z","first_published":"2026-11-05T07:32:58.446Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=connect-ledgrwalite.pages.dev"},{"hostname":"coralsunmarine.com","first_observed":"2026-11-05T06:41:03.894Z","first_published":"2026-11-05T07:32:58.446Z","brands":[],"dns":"resolved","resolved":["23.111.133.162"],"resolved_at":"2026-11-05T06:52:01Z","dns_checked_at":"2026-11-06T07:45:17.000Z","dns_since":"2026-11-05T07:44:43.000Z","findings":[{"id":"fzrskaonq773j75rsouic","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T06:41:03.894Z","first_published":"2026-11-05T07:32:58.446Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/coralsunmarine.com/"}],"url":"https://domainspoof.com/live?show=all&q=coralsunmarine.com"},{"hostname":"coxwexprox.com","first_observed":"2026-11-05T06:21:30.781Z","first_published":"2026-11-05T07:32:58.446Z","brands":[],"dns":"resolved","resolved":["51.68.132.246"],"resolved_at":"2026-11-05T06:21:44Z","dns_checked_at":"2026-11-06T07:45:17.000Z","dns_since":"2026-11-05T07:44:43.000Z","findings":[{"id":"f6kuxrenaog7xawwicayg","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T06:21:30.781Z","first_published":"2026-11-05T07:32:58.446Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/coxwexprox.com/"}],"url":"https://domainspoof.com/live?show=all&q=coxwexprox.com"},{"hostname":"cpanel.alisfortes.com","first_observed":"2026-11-05T06:41:03.894Z","first_published":"2026-11-05T07:32:58.446Z","brands":[],"dns":"resolved","resolved":["162.4.84.247"],"resolved_at":"2026-11-05T06:52:01Z","dns_checked_at":"2026-11-06T07:45:17.000Z","dns_since":"2026-11-05T07:44:43.000Z","findings":[{"id":"ff72h427x5kz3xfg64swg","kind":"reported_domain","summary":"Under alisfortes.com, reported by PhishDestroy","first_observed":"2026-11-05T06:41:03.894Z","first_published":"2026-11-05T07:32:58.446Z","source":"phishdestroy","source_name":"PhishDestroy","under":"alisfortes.com","source_url":"https://phishdestroy.io/domain/alisfortes.com/"}],"url":"https://domainspoof.com/live?show=all&q=cpanel.alisfortes.com"},{"hostname":"cpanel.mapsa.com.pe","first_observed":"2026-11-05T06:56:52.654Z","first_published":"2026-11-05T07:32:58.446Z","brands":[],"dns":"resolved","resolved":["190.92.172.215"],"resolved_at":"2026-11-05T07:05:36Z","dns_checked_at":"2026-11-06T07:45:17.000Z","dns_since":"2026-11-05T07:44:43.000Z","findings":[{"id":"fl5yd4vp7pdpzm5x46mvx","kind":"reported_domain","summary":"Under mapsa.com.pe, reported by PhishDestroy","first_observed":"2026-11-05T06:56:52.654Z","first_published":"2026-11-05T07:32:58.446Z","source":"phishdestroy","source_name":"PhishDestroy","under":"mapsa.com.pe","source_url":"https://phishdestroy.io/domain/mapsa.com.pe/"}],"url":"https://domainspoof.com/live?show=all&q=cpanel.mapsa.com.pe"},{"hostname":"cpcalendars.mapsa.com.pe","first_observed":"2026-11-05T06:56:52.654Z","first_published":"2026-11-05T07:32:58.446Z","brands":[],"dns":"resolved","resolved":["190.92.172.215"],"resolved_at":"2026-11-05T07:05:36Z","dns_checked_at":"2026-11-06T07:45:17.000Z","dns_since":"2026-11-05T07:44:43.000Z","findings":[{"id":"fqpyjecasmdqgag5euw4e","kind":"reported_domain","summary":"Under mapsa.com.pe, reported by PhishDestroy","first_observed":"2026-11-05T06:56:52.654Z","first_published":"2026-11-05T07:32:58.446Z","source":"phishdestroy","source_name":"PhishDestroy","under":"mapsa.com.pe","source_url":"https://phishdestroy.io/domain/mapsa.com.pe/"}],"url":"https://domainspoof.com/live?show=all&q=cpcalendars.mapsa.com.pe"},{"hostname":"cpcontacts.mapsa.com.pe","first_observed":"2026-11-05T06:56:52.654Z","first_published":"2026-11-05T07:32:58.446Z","brands":[],"dns":"resolved","resolved":["190.92.172.215"],"resolved_at":"2026-11-05T07:05:36Z","dns_checked_at":"2026-11-06T07:45:17.000Z","dns_since":"2026-11-05T07:44:43.000Z","findings":[{"id":"fy32dkz3depz37wztp4x6","kind":"reported_domain","summary":"Under mapsa.com.pe, reported by PhishDestroy","first_observed":"2026-11-05T06:56:52.654Z","first_published":"2026-11-05T07:32:58.446Z","source":"phishdestroy","source_name":"PhishDestroy","under":"mapsa.com.pe","source_url":"https://phishdestroy.io/domain/mapsa.com.pe/"}],"url":"https://domainspoof.com/live?show=all&q=cpcontacts.mapsa.com.pe"},{"hostname":"cqyzh88.com","first_observed":"2026-11-05T06:21:30.781Z","first_published":"2026-11-05T07:32:58.446Z","brands":[],"dns":"resolved","resolved":["104.21.67.205","172.67.180.150"],"resolved_at":"2026-11-05T06:21:44Z","dns_checked_at":"2026-11-06T07:45:17.000Z","dns_since":"2026-11-05T07:44:43.000Z","findings":[{"id":"fjq6wf4oyrusefbixlipd","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T06:21:30.781Z","first_published":"2026-11-05T07:32:58.446Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=cqyzh88.com"},{"hostname":"cripippy.cryptopayment.xyz","first_observed":"2026-11-05T06:56:52.654Z","first_published":"2026-11-05T07:32:58.446Z","brands":[],"dns":"resolved","resolved":["143.244.211.82"],"resolved_at":"2026-11-05T07:05:36Z","dns_checked_at":"2026-11-06T07:45:17.000Z","dns_since":"2026-11-05T07:44:43.000Z","findings":[{"id":"f2dhwfbdlfpwbwqxj3wf6","kind":"reported_domain","summary":"Under cryptopayment.xyz, listed by MetaMask","first_observed":"2026-11-05T06:56:52.654Z","first_published":"2026-11-05T07:32:58.446Z","source":"metamask","source_name":"MetaMask","under":"cryptopayment.xyz"}],"url":"https://domainspoof.com/live?show=all&q=cripippy.cryptopayment.xyz"},{"hostname":"curbacowsku.com","first_observed":"2026-11-05T06:26:12.359Z","first_published":"2026-11-05T07:32:58.446Z","brands":[],"dns":"resolved","resolved":["104.21.5.208","172.67.133.215"],"resolved_at":"2026-11-05T06:26:22Z","dns_checked_at":"2026-11-06T07:45:17.000Z","dns_since":"2026-11-05T07:44:43.000Z","findings":[{"id":"f6fichx337eolkhw5seq6","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T06:26:12.359Z","first_published":"2026-11-05T07:32:58.446Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=curbacowsku.com"},{"hostname":"d.curvedao.xyz","first_observed":"2026-11-05T06:36:28.363Z","first_published":"2026-11-05T07:32:58.446Z","brands":[],"dns":"resolved","resolved":["162.4.84.255"],"resolved_at":"2026-11-05T06:46:11Z","dns_checked_at":"2026-11-06T07:45:17.000Z","dns_since":"2026-11-05T07:44:43.000Z","findings":[{"id":"fzlswxy6smbgvytkschgr","kind":"reported_domain","summary":"Under curvedao.xyz, listed by MetaMask","first_observed":"2026-11-05T06:36:28.363Z","first_published":"2026-11-05T07:32:58.446Z","source":"metamask","source_name":"MetaMask","under":"curvedao.xyz"}],"url":"https://domainspoof.com/live?show=all&q=d.curvedao.xyz"},{"hostname":"darknetmarketplace.online","first_observed":"2026-11-05T06:46:10.294Z","first_published":"2026-11-05T07:32:58.446Z","brands":[],"dns":"resolved","resolved":["104.21.48.144","172.67.186.180"],"resolved_at":"2026-11-05T06:46:34Z","dns_checked_at":"2026-11-06T07:45:17.000Z","dns_since":"2026-11-05T07:44:43.000Z","findings":[{"id":"fuv4tozlzb2icqee3tqbq","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T06:46:10.294Z","first_published":"2026-11-05T07:32:58.446Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/darknetmarketplace.online/"}],"url":"https://domainspoof.com/live?show=all&q=darknetmarketplace.online"},{"hostname":"deionaa21.top","first_observed":"2026-11-05T06:46:10.294Z","first_published":"2026-11-05T07:32:58.446Z","brands":[],"dns":"resolved","resolved":["45.78.49.198"],"resolved_at":"2026-11-05T06:46:37Z","dns_checked_at":"2026-11-06T07:45:17.000Z","dns_since":"2026-11-05T07:44:43.000Z","findings":[{"id":"fhxylmntzawscafs6ebpy","kind":"reported_domain","summary":"Listed by NPA 165 (finance and insurance)","first_observed":"2026-11-05T06:46:10.294Z","first_published":"2026-11-05T07:32:58.446Z","source":"npa","source_name":"NPA 165","claim":{"category":"finance and insurance"}}],"url":"https://domainspoof.com/live?show=all&q=deionaa21.top"},{"hostname":"desk-xrp.app","first_observed":"2026-11-05T06:36:28.363Z","first_published":"2026-11-05T07:32:58.446Z","brands":[],"dns":"resolved","resolved":["104.21.35.186","172.67.178.151"],"resolved_at":"2026-11-05T06:46:11Z","dns_checked_at":"2026-11-06T07:45:17.000Z","dns_since":"2026-11-05T07:44:43.000Z","findings":[{"id":"fr5ltviey34mew5vtpodk","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T06:36:28.363Z","first_published":"2026-11-05T07:32:58.446Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=desk-xrp.app"},{"hostname":"dev.api.deebcorealestate.com","first_observed":"2026-11-05T06:21:30.781Z","first_published":"2026-11-05T07:32:58.446Z","brands":[],"dns":"resolved","resolved":["185.149.120.183"],"resolved_at":"2026-11-05T06:21:45Z","dns_checked_at":"2026-11-06T07:45:17.000Z","dns_since":"2026-11-05T07:44:43.000Z","findings":[{"id":"fmnidxomr5cnoojbctche","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T06:21:30.781Z","first_published":"2026-11-05T07:32:58.446Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/dev.api.deebcorealestate.com/"}],"url":"https://domainspoof.com/live?show=all&q=dev.api.deebcorealestate.com"},{"hostname":"dev.bi-staging.pearson367.com","first_observed":"2026-11-05T06:21:30.781Z","first_published":"2026-11-05T07:32:58.446Z","brands":[],"dns":"resolved","resolved":["185.149.120.183"],"resolved_at":"2026-11-05T06:21:45Z","dns_checked_at":"2026-11-06T07:45:17.000Z","dns_since":"2026-11-05T07:44:43.000Z","findings":[{"id":"fagt6extbv2nbbwu6vt7p","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T06:21:30.781Z","first_published":"2026-11-05T07:32:58.446Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/dev.bi-staging.pearson367.com/"}],"url":"https://domainspoof.com/live?show=all&q=dev.bi-staging.pearson367.com"},{"hostname":"dev.d.curvedao.xyz","first_observed":"2026-11-05T06:31:20.800Z","first_published":"2026-11-05T07:32:58.446Z","brands":[],"dns":"resolved","resolved":["162.4.84.255"],"resolved_at":"2026-11-05T06:31:42Z","dns_checked_at":"2026-11-06T07:45:17.000Z","dns_since":"2026-11-05T07:44:43.000Z","findings":[{"id":"fsuqvhyolikwf653zqnqg","kind":"reported_domain","summary":"Under curvedao.xyz, listed by MetaMask","first_observed":"2026-11-05T06:31:20.800Z","first_published":"2026-11-05T07:32:58.446Z","source":"metamask","source_name":"MetaMask","under":"curvedao.xyz"}],"url":"https://domainspoof.com/live?show=all&q=dev.d.curvedao.xyz"},{"hostname":"dev.shiva.pearson367.com","first_observed":"2026-11-05T06:21:30.781Z","first_published":"2026-11-05T07:32:58.446Z","brands":[],"dns":"resolved","resolved":["185.149.120.183"],"resolved_at":"2026-11-05T06:21:45Z","dns_checked_at":"2026-11-06T07:45:17.000Z","dns_since":"2026-11-05T07:44:43.000Z","findings":[{"id":"frqqg4sdvoo2seevegvvz","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T06:21:30.781Z","first_published":"2026-11-05T07:32:58.446Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/dev.shiva.pearson367.com/"}],"url":"https://domainspoof.com/live?show=all&q=dev.shiva.pearson367.com"},{"hostname":"digitalmarketingmastery.celestinebodi.com","first_observed":"2026-11-05T06:31:20.800Z","first_published":"2026-11-05T07:32:58.446Z","brands":[],"dns":"resolved","resolved":["18.239.83.5","18.239.83.56","18.239.83.110","18.239.83.127"],"resolved_at":"2026-11-05T06:31:42Z","dns_checked_at":"2026-11-06T07:45:17.000Z","dns_since":"2026-11-05T07:44:43.000Z","findings":[{"id":"forqp7dnvaua5moxglnzv","kind":"reported_domain","summary":"Under celestinebodi.com, reported by PhishDestroy","first_observed":"2026-11-05T06:31:20.800Z","first_published":"2026-11-05T07:32:58.446Z","source":"phishdestroy","source_name":"PhishDestroy","under":"celestinebodi.com","source_url":"https://phishdestroy.io/domain/celestinebodi.com/"}],"url":"https://domainspoof.com/live?show=all&q=digitalmarketingmastery.celestinebodi.com"},{"hostname":"efkj.agndatacom.com","first_observed":"2026-11-05T06:36:28.363Z","first_published":"2026-11-05T07:32:58.446Z","brands":[],"dns":"resolved","resolved":["185.53.179.136"],"resolved_at":"2026-11-05T06:46:13Z","dns_checked_at":"2026-11-06T07:45:17.000Z","dns_since":"2026-11-05T07:44:43.000Z","findings":[{"id":"fhhaokkrc73bcdbfirenz","kind":"reported_domain","summary":"Under agndatacom.com, listed by MetaMask","first_observed":"2026-11-05T06:36:28.363Z","first_published":"2026-11-05T07:32:58.446Z","source":"metamask","source_name":"MetaMask","under":"agndatacom.com"}],"url":"https://domainspoof.com/live?show=all&q=efkj.agndatacom.com"},{"hostname":"eiuveicu.com","first_observed":"2026-11-05T06:21:30.781Z","first_published":"2026-11-05T07:32:58.446Z","brands":[],"dns":"no_address","resolved":[],"resolved_at":"2026-11-05T06:21:44Z","dns_checked_at":"2026-11-06T07:45:17.000Z","dns_since":"2026-11-05T07:44:43.000Z","findings":[{"id":"ffe3ntm4zjglafqwj7f4q","kind":"reported_domain","summary":"Listed by NPA 165 (government and state-owned enterprises)","first_observed":"2026-11-05T06:21:30.781Z","first_published":"2026-11-05T07:32:58.446Z","source":"npa","source_name":"NPA 165","claim":{"category":"government and state-owned enterprises"}}],"url":"https://domainspoof.com/live?show=all&q=eiuveicu.com"},{"hostname":"ensou.build","first_observed":"2026-11-05T07:26:02.064Z","first_published":"2026-11-05T07:32:58.446Z","brands":[],"dns":"no_address","resolved":[],"resolved_at":"2026-11-05T07:26:16Z","dns_checked_at":"2026-11-06T07:45:17.000Z","dns_since":"2026-11-05T07:44:43.000Z","findings":[{"id":"flraukcje5uhsuiyczcl3","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T07:26:02.064Z","first_published":"2026-11-05T07:32:58.446Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=ensou.build"},{"hostname":"ensou.link","first_observed":"2026-11-05T07:20:55.702Z","first_published":"2026-11-05T07:32:58.446Z","brands":[],"dns":"no_address","resolved":[],"resolved_at":"2026-11-05T07:21:09Z","dns_checked_at":"2026-11-06T07:45:17.000Z","dns_since":"2026-11-05T07:44:43.000Z","findings":[{"id":"fxxv627h3qc4jz3c4iix7","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T07:20:55.702Z","first_published":"2026-11-05T07:32:58.446Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=ensou.link"},{"hostname":"ensou.run","first_observed":"2026-11-05T07:26:02.064Z","first_published":"2026-11-05T07:32:58.446Z","brands":[],"dns":"no_address","resolved":[],"resolved_at":"2026-11-05T07:26:16Z","dns_checked_at":"2026-11-06T07:45:17.000Z","dns_since":"2026-11-05T07:44:43.000Z","findings":[{"id":"fhqssd5ukk6fcoqq2f4ep","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T07:26:02.064Z","first_published":"2026-11-05T07:32:58.446Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=ensou.run"},{"hostname":"ensou.tools","first_observed":"2026-11-05T07:15:49.227Z","first_published":"2026-11-05T07:32:58.446Z","brands":[],"dns":"no_address","resolved":[],"resolved_at":"2026-11-05T07:16:55Z","dns_checked_at":"2026-11-06T07:45:17.000Z","dns_since":"2026-11-05T07:44:43.000Z","findings":[{"id":"frdecer6p3aw3bpz3fr7u","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T07:15:49.227Z","first_published":"2026-11-05T07:32:58.446Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=ensou.tools"},{"hostname":"eodkslw.site","first_observed":"2026-11-05T06:26:12.359Z","first_published":"2026-11-05T07:32:58.446Z","brands":[],"dns":"resolved","resolved":["104.21.65.249","172.67.195.209"],"resolved_at":"2026-11-05T06:26:23Z","dns_checked_at":"2026-11-06T07:45:17.000Z","dns_since":"2026-11-05T07:44:43.000Z","findings":[{"id":"fr2u6bj3brlik6dkylqmp","kind":"reported_domain","summary":"Listed by NPA 165 (e-commerce)","first_observed":"2026-11-05T06:26:12.359Z","first_published":"2026-11-05T07:32:58.446Z","source":"npa","source_name":"NPA 165","claim":{"category":"e-commerce"}}],"url":"https://domainspoof.com/live?show=all&q=eodkslw.site"},{"hostname":"eusahnsa.online","first_observed":"2026-11-05T07:00:58.367Z","first_published":"2026-11-05T07:32:58.446Z","brands":[],"dns":"resolved","resolved":["104.21.3.12","172.67.130.3"],"resolved_at":"2026-11-05T07:01:23Z","dns_checked_at":"2026-11-06T07:45:17.000Z","dns_since":"2026-11-05T07:44:43.000Z","findings":[{"id":"ffvaxvda4mmwhkwn2auge","kind":"reported_domain","summary":"Listed by NPA 165 (e-commerce)","first_observed":"2026-11-05T07:00:58.367Z","first_published":"2026-11-05T07:32:58.446Z","source":"npa","source_name":"NPA 165","claim":{"category":"e-commerce"}}],"url":"https://domainspoof.com/live?show=all&q=eusahnsa.online"},{"hostname":"fake-trade-bot.slerf.tools","first_observed":"2026-11-05T07:20:55.702Z","first_published":"2026-11-05T07:32:58.446Z","brands":[],"dns":"resolved","resolved":["104.20.36.108","172.66.151.250"],"resolved_at":"2026-11-05T07:21:09Z","dns_checked_at":"2026-11-06T07:45:17.000Z","dns_since":"2026-11-05T07:44:43.000Z","findings":[{"id":"funbm3gqnrzpp37atutzy","kind":"reported_domain","summary":"Under slerf.tools, reported by PhishDestroy","first_observed":"2026-11-05T07:20:55.702Z","first_published":"2026-11-05T07:32:58.446Z","source":"phishdestroy","source_name":"PhishDestroy","under":"slerf.tools","source_url":"https://phishdestroy.io/domain/slerf.tools/"}],"url":"https://domainspoof.com/live?show=all&q=fake-trade-bot.slerf.tools"},{"hostname":"farixus.com","first_observed":"2026-11-05T06:44:15.212Z","first_published":"2026-11-05T07:32:58.446Z","brands":[],"dns":"resolved","resolved":["104.21.90.210","172.67.161.104","2606:4700:3033::6815:5ad2","2606:4700:3034::ac43:a168"],"resolved_at":"2026-11-05T06:49:16Z","dns_checked_at":"2026-11-06T07:45:17.000Z","dns_since":"2026-11-05T07:44:43.000Z","findings":[{"id":"fgbeqf6p7a2i322dp7sfv","kind":"reported_domain","summary":"Listed by USOM","first_observed":"2026-11-05T06:44:15.212Z","first_published":"2026-11-05T07:32:58.446Z","source":"usom","source_name":"USOM"}],"url":"https://domainspoof.com/live?show=all&q=farixus.com"},{"hostname":"fashionandfriends.panmaterac.sbs","first_observed":"2026-11-05T06:26:12.359Z","first_published":"2026-11-05T07:32:58.446Z","brands":[],"dns":"resolved","resolved":["104.21.15.23","172.67.161.12"],"resolved_at":"2026-11-05T06:26:23Z","dns_checked_at":"2026-11-06T07:45:17.000Z","dns_since":"2026-11-05T07:44:43.000Z","findings":[{"id":"fpkpbaj6jeg3qzbtqlfjm","kind":"reported_domain","summary":"Under panmaterac.sbs, listed by CERT Polska","first_observed":"2026-11-05T06:26:12.359Z","first_published":"2026-11-05T07:32:58.446Z","source":"cert_polska","source_name":"CERT Polska","under":"panmaterac.sbs"}],"url":"https://domainspoof.com/live?show=all&q=fashionandfriends.panmaterac.sbs"},{"hostname":"freliy.shop","first_observed":"2026-11-05T07:05:34.225Z","first_published":"2026-11-05T07:32:58.446Z","brands":[],"dns":"resolved","resolved":["104.21.49.98","172.67.161.155"],"resolved_at":"2026-11-05T07:05:41Z","dns_checked_at":"2026-11-06T07:45:17.000Z","dns_since":"2026-11-05T07:44:43.000Z","findings":[{"id":"frurnmipy2bt2yufrilqj","kind":"reported_domain","summary":"Listed by NPA 165 (e-commerce)","first_observed":"2026-11-05T07:05:34.225Z","first_published":"2026-11-05T07:32:58.446Z","source":"npa","source_name":"NPA 165","claim":{"category":"e-commerce"}}],"url":"https://domainspoof.com/live?show=all&q=freliy.shop"},{"hostname":"fxmarkebard.ltd","first_observed":"2026-11-05T07:26:02.064Z","first_published":"2026-11-05T07:32:58.446Z","brands":[],"dns":"resolved","resolved":["77.37.83.180","93.127.179.77"],"resolved_at":"2026-11-05T07:26:16Z","dns_checked_at":"2026-11-06T07:45:17.000Z","dns_since":"2026-11-05T07:44:43.000Z","findings":[{"id":"fqapv3zajzyrqd63rek4s","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T07:26:02.064Z","first_published":"2026-11-05T07:32:58.446Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/fxmarkebard.ltd/"}],"url":"https://domainspoof.com/live?show=all&q=fxmarkebard.ltd"},{"hostname":"g82348234.com","first_observed":"2026-11-05T06:31:20.800Z","first_published":"2026-11-05T07:32:58.446Z","brands":[],"dns":"not_found","resolved":[],"resolved_at":"2026-11-05T06:31:44Z","dns_checked_at":"2026-11-06T07:45:17.000Z","dns_since":"2026-11-05T07:44:43.000Z","findings":[{"id":"fthz2gcy6kwy7gmacugn7","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T06:31:20.800Z","first_published":"2026-11-05T07:32:58.446Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=g82348234.com"},{"hostname":"gaxutoe.com","first_observed":"2026-11-05T06:21:30.781Z","first_published":"2026-11-05T07:32:58.446Z","brands":[],"dns":"resolved","resolved":["104.21.55.60","172.67.145.90"],"resolved_at":"2026-11-05T06:21:45Z","dns_checked_at":"2026-11-06T07:45:17.000Z","dns_since":"2026-11-05T07:44:43.000Z","findings":[{"id":"ftxxprzfrocn5sbmsyxnx","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T06:21:30.781Z","first_published":"2026-11-05T07:32:58.446Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=gaxutoe.com"},{"hostname":"glowwnest.com","first_observed":"2026-11-05T06:41:03.894Z","first_published":"2026-11-05T07:32:58.446Z","brands":[],"dns":"resolved","resolved":["18.239.105.16","18.239.105.92","18.239.105.98","18.239.105.121"],"resolved_at":"2026-11-05T06:52:03Z","dns_checked_at":"2026-11-06T07:45:17.000Z","dns_since":"2026-11-05T07:44:43.000Z","findings":[{"id":"fei4iilekcmcaosrzufdm","kind":"reported_domain","summary":"Listed by NPA 165 (e-commerce)","first_observed":"2026-11-05T06:41:03.894Z","first_published":"2026-11-05T07:32:58.446Z","source":"npa","source_name":"NPA 165","claim":{"category":"e-commerce"}}],"url":"https://domainspoof.com/live?show=all&q=glowwnest.com"},{"hostname":"goodyearhousecleaning.com","first_observed":"2026-11-05T06:41:03.894Z","first_published":"2026-11-05T07:32:58.446Z","brands":[],"dns":"no_address","resolved":[],"resolved_at":"2026-11-05T06:52:03Z","dns_checked_at":"2026-11-06T07:45:17.000Z","dns_since":"2026-11-05T07:44:43.000Z","findings":[{"id":"ftnu2xtiqscpod3tbnkah","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T06:41:03.894Z","first_published":"2026-11-05T07:32:58.446Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=goodyearhousecleaning.com"},{"hostname":"governance-orbio.pages.dev","first_observed":"2026-11-05T06:31:20.800Z","first_published":"2026-11-05T07:32:58.446Z","brands":[],"dns":"not_found","resolved":[],"resolved_at":"2026-11-05T06:31:44Z","dns_checked_at":"2026-11-06T07:45:17.000Z","dns_since":"2026-11-05T07:44:43.000Z","findings":[{"id":"ftpas75fvknxaqho3fcjt","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T06:31:20.800Z","first_published":"2026-11-05T07:32:58.446Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=governance-orbio.pages.dev"},{"hostname":"greyvynpropvale.live","first_observed":"2026-11-05T06:46:10.294Z","first_published":"2026-11-05T07:32:58.446Z","brands":[],"dns":"resolved","resolved":["104.21.16.130","172.67.212.183"],"resolved_at":"2026-11-05T06:46:37Z","dns_checked_at":"2026-11-06T07:45:17.000Z","dns_since":"2026-11-05T07:44:43.000Z","findings":[{"id":"fpozibwhbwaac2d2e5rnc","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T06:46:10.294Z","first_published":"2026-11-05T07:32:58.446Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=greyvynpropvale.live"},{"hostname":"harbor.authnewauth.com","first_observed":"2026-11-05T06:36:28.363Z","first_published":"2026-11-05T07:32:58.446Z","brands":[],"dns":"resolved","resolved":["95.129.233.97"],"resolved_at":"2026-11-05T06:46:16Z","dns_checked_at":"2026-11-06T07:45:17.000Z","dns_since":"2026-11-05T07:44:43.000Z","findings":[{"id":"ficj6dcyffezt6s2bm7ke","kind":"reported_domain","summary":"Under authnewauth.com, listed by MetaMask","first_observed":"2026-11-05T06:36:28.363Z","first_published":"2026-11-05T07:32:58.446Z","source":"metamask","source_name":"MetaMask","under":"authnewauth.com"}],"url":"https://domainspoof.com/live?show=all&q=harbor.authnewauth.com"},{"hostname":"home.web-binance.sh.cn","first_observed":"2026-11-05T07:05:45.926Z","first_published":"2026-11-05T07:32:58.446Z","brands":[{"id":"binance","name":"Binance","url":"https://domainspoof.com/brands/binance"}],"dns":"resolved","resolved":["179.61.182.70"],"resolved_at":"2026-11-06T07:45:17Z","dns_checked_at":"2026-11-06T07:45:17.000Z","dns_since":"2026-11-05T07:44:43.000Z","findings":[{"id":"fwt4y7wbmruhso4gmdyby","kind":"phishing_infrastructure","summary":"Resolved to 179.61.182.70, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T07:05:45.926Z","first_published":"2026-11-05T07:32:58.446Z","address":"179.61.182.70","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/binance"},{"hostname":"hotmailcom.eu","first_observed":"2026-11-05T06:52:03.728Z","first_published":"2026-11-05T07:32:58.446Z","brands":[{"id":"microsoft","name":"Microsoft","url":"https://domainspoof.com/brands/microsoft"}],"dns":"resolved","resolved":["185.31.240.240"],"resolved_at":"2026-11-06T07:45:17Z","dns_checked_at":"2026-11-06T07:45:17.000Z","dns_since":"2026-11-05T07:44:43.000Z","findings":[{"id":"fazmwgcgknfx44uijnbkt","kind":"phishing_infrastructure","summary":"Resolved to 185.31.240.240, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T06:52:03.728Z","first_published":"2026-11-05T07:32:58.446Z","address":"185.31.240.240","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/microsoft"},{"hostname":"hugo-boss.com.ua","first_observed":"2026-11-05T06:16:40.631Z","first_published":"2026-11-05T07:32:58.446Z","brands":[{"id":"hugo-boss","name":"Hugo Boss","url":"https://domainspoof.com/brands/hugo-boss"}],"dns":"resolved","resolved":["185.104.45.89","185.104.45.189"],"resolved_at":"2026-11-06T07:45:17Z","dns_checked_at":"2026-11-06T07:45:17.000Z","dns_since":"2026-11-05T07:44:43.000Z","findings":[{"id":"fvwnuwho2yej6vc65wrvn","kind":"phishing_infrastructure","summary":"Resolved to 185.104.45.89, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T06:16:40.631Z","first_published":"2026-11-05T07:32:58.446Z","address":"185.104.45.89","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/hugo-boss"},{"hostname":"ibizapulseradio.com","first_observed":"2026-11-05T06:51:46.838Z","first_published":"2026-11-05T07:32:58.446Z","brands":[],"dns":"resolved","resolved":["13.248.213.45","76.223.67.189"],"resolved_at":"2026-11-05T06:59:25Z","dns_checked_at":"2026-11-06T07:45:17.000Z","dns_since":"2026-11-05T07:44:43.000Z","findings":[{"id":"fgom5cm27glqp47dtxoct","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T06:51:46.838Z","first_published":"2026-11-05T07:32:58.446Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=ibizapulseradio.com"},{"hostname":"ikimsliyeniadres.sbs","first_observed":"2026-11-05T06:41:03.894Z","first_published":"2026-11-05T07:32:58.446Z","brands":[],"dns":"resolved","resolved":["104.21.17.145","172.67.176.215"],"resolved_at":"2026-11-05T06:52:04Z","dns_checked_at":"2026-11-06T07:45:17.000Z","dns_since":"2026-11-05T07:44:43.000Z","findings":[{"id":"fqa6ceptvvxynusgbkbla","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T06:41:03.894Z","first_published":"2026-11-05T07:32:58.446Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/ikimsliyeniadres.sbs/"}],"url":"https://domainspoof.com/live?show=all&q=ikimsliyeniadres.sbs"},{"hostname":"information-trustwallet.com","first_observed":"2026-11-05T07:16:57.072Z","first_published":"2026-11-05T07:32:58.446Z","brands":[{"id":"trust-wallet","name":"Trust Wallet","url":"https://domainspoof.com/brands/trust-wallet"}],"dns":"resolved","resolved":["172.232.24.161","172.232.24.235","172.234.25.42"],"resolved_at":"2026-11-06T07:45:17Z","dns_checked_at":"2026-11-06T07:45:17.000Z","dns_since":"2026-11-05T07:44:43.000Z","findings":[{"id":"fdeljfh7g2zxpda5uq3ox","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","source":"metamask","source_name":"MetaMask"},{"id":"fclzume3n26smo2asugzw","kind":"phishing_infrastructure","summary":"Resolved to 172.232.24.161, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T07:16:57.072Z","first_published":"2026-11-05T07:32:58.446Z","address":"172.232.24.161","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/trust-wallet"},{"hostname":"isjahlwmall.shop","first_observed":"2026-11-05T07:05:34.225Z","first_published":"2026-11-05T07:32:58.446Z","brands":[],"dns":"no_address","resolved":[],"resolved_at":"2026-11-05T07:05:42Z","dns_checked_at":"2026-11-06T07:45:17.000Z","dns_since":"2026-11-05T07:44:43.000Z","findings":[{"id":"f2j5jwviztj7k6ulupldr","kind":"reported_domain","summary":"Listed by NPA 165 (e-commerce)","first_observed":"2026-11-05T07:05:34.225Z","first_published":"2026-11-05T07:32:58.446Z","source":"npa","source_name":"NPA 165","claim":{"category":"e-commerce"}}],"url":"https://domainspoof.com/live?show=all&q=isjahlwmall.shop"},{"hostname":"jodelkdi.click","first_observed":"2026-11-05T06:51:46.838Z","first_published":"2026-11-05T07:32:58.446Z","brands":[],"dns":"resolved","resolved":["186.246.53.244"],"resolved_at":"2026-11-05T06:59:26Z","dns_checked_at":"2026-11-06T07:45:17.000Z","dns_since":"2026-11-05T07:44:43.000Z","findings":[{"id":"f3v6usrohqkcwwfvxwvg6","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T06:51:46.838Z","first_published":"2026-11-05T07:32:58.446Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=jodelkdi.click"},{"hostname":"js.home-binance.net","first_observed":"2026-11-05T06:31:46.867Z","first_published":"2026-11-05T07:32:58.446Z","brands":[{"id":"binance","name":"Binance","url":"https://domainspoof.com/brands/binance"}],"dns":"resolved","resolved":["118.139.164.57"],"resolved_at":"2026-11-06T07:45:17Z","dns_checked_at":"2026-11-06T07:45:17.000Z","dns_since":"2026-11-05T07:44:43.000Z","findings":[{"id":"fmy3dqgqvmhwpaklchucn","kind":"phishing_infrastructure","summary":"Resolved to 118.139.164.57, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T06:31:46.867Z","first_published":"2026-11-05T07:32:58.446Z","address":"118.139.164.57","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/binance"},{"hostname":"jupyter.aml.legal","first_observed":"2026-11-05T07:05:34.225Z","first_published":"2026-11-05T07:32:58.446Z","brands":[],"dns":"resolved","resolved":["186.2.175.179"],"resolved_at":"2026-11-05T07:05:42Z","dns_checked_at":"2026-11-06T07:45:17.000Z","dns_since":"2026-11-05T07:44:43.000Z","findings":[{"id":"fjvo62kbnxzvek4vuhph2","kind":"reported_domain","summary":"Under aml.legal, reported by PhishDestroy","first_observed":"2026-11-05T07:05:34.225Z","first_published":"2026-11-05T07:32:58.446Z","source":"phishdestroy","source_name":"PhishDestroy","under":"aml.legal","source_url":"https://phishdestroy.io/domain/aml.legal/"}],"url":"https://domainspoof.com/live?show=all&q=jupyter.aml.legal"},{"hostname":"jysxbr.hdiv8jy.com","first_observed":"2026-11-05T07:26:02.064Z","first_published":"2026-11-05T07:32:58.446Z","brands":[],"dns":"resolved","resolved":["185.53.179.136"],"resolved_at":"2026-11-05T07:26:17Z","dns_checked_at":"2026-11-06T07:45:17.000Z","dns_since":"2026-11-05T07:44:43.000Z","findings":[{"id":"fyqgxsdxlthcb72ddlmyh","kind":"reported_domain","summary":"Under hdiv8jy.com, listed by MetaMask","first_observed":"2026-11-05T07:26:02.064Z","first_published":"2026-11-05T07:32:58.446Z","source":"metamask","source_name":"MetaMask","under":"hdiv8jy.com"}],"url":"https://domainspoof.com/live?show=all&q=jysxbr.hdiv8jy.com"},{"hostname":"karsmurel.com","first_observed":"2026-11-05T07:15:49.227Z","first_published":"2026-11-05T07:32:58.446Z","brands":[],"dns":"resolved","resolved":["198.13.158.16"],"resolved_at":"2026-11-05T07:16:57Z","dns_checked_at":"2026-11-06T07:45:17.000Z","dns_since":"2026-11-05T07:44:43.000Z","findings":[{"id":"fmptceuqwc26rfjxxrbh6","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T07:15:49.227Z","first_published":"2026-11-05T07:32:58.446Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=karsmurel.com"},{"hostname":"katanafdn.click","first_observed":"2026-11-05T07:20:55.702Z","first_published":"2026-11-05T07:32:58.446Z","brands":[],"dns":"resolved","resolved":["104.21.1.28","172.67.151.228"],"resolved_at":"2026-11-05T07:21:12Z","dns_checked_at":"2026-11-06T07:45:17.000Z","dns_since":"2026-11-05T07:44:43.000Z","findings":[{"id":"fy2o6ptqo3dgmzdtgudkb","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T07:20:55.702Z","first_published":"2026-11-05T07:32:58.446Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=katanafdn.click"},{"hostname":"kraken.hilde.one","first_observed":"2026-11-05T07:15:49.227Z","first_published":"2026-11-05T07:32:58.446Z","brands":[],"dns":"resolved","resolved":["159.195.79.236"],"resolved_at":"2026-11-05T07:16:57Z","dns_checked_at":"2026-11-06T07:45:17.000Z","dns_since":"2026-11-05T07:44:43.000Z","findings":[{"id":"fdvlukkz3zftn7pqo2rxq","kind":"reported_domain","summary":"Under hilde.one, listed by MetaMask","first_observed":"2026-11-05T07:15:49.227Z","first_published":"2026-11-05T07:32:58.446Z","source":"metamask","source_name":"MetaMask","under":"hilde.one"}],"url":"https://domainspoof.com/live?show=all&q=kraken.hilde.one"},{"hostname":"krakendarknet.net","first_observed":"2026-11-05T06:46:10.294Z","first_published":"2026-11-05T07:32:58.446Z","brands":[],"dns":"resolved","resolved":["104.21.41.65","172.67.189.195"],"resolved_at":"2026-11-05T06:46:38Z","dns_checked_at":"2026-11-06T07:45:17.000Z","dns_since":"2026-11-05T07:44:43.000Z","findings":[{"id":"fk2g4afdcxqtrvz2obpfq","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T06:46:10.294Z","first_published":"2026-11-05T07:32:58.446Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/krakendarknet.net/"}],"url":"https://domainspoof.com/live?show=all&q=krakendarknet.net"},{"hostname":"kuplkod.com","first_observed":"2026-11-05T06:31:20.800Z","first_published":"2026-11-05T07:32:58.446Z","brands":[],"dns":"resolved","resolved":["104.21.73.149","172.67.163.101"],"resolved_at":"2026-11-05T06:31:47Z","dns_checked_at":"2026-11-06T07:45:17.000Z","dns_since":"2026-11-05T07:44:43.000Z","findings":[{"id":"fspvkft5zigo2ojcje42z","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T06:31:20.800Z","first_published":"2026-11-05T07:32:58.446Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/kuplkod.com/"}],"url":"https://domainspoof.com/live?show=all&q=kuplkod.com"},{"hostname":"lab.waaako.space","first_observed":"2026-11-05T07:26:02.064Z","first_published":"2026-11-05T07:32:58.446Z","brands":[],"dns":"resolved","resolved":["45.151.106.221"],"resolved_at":"2026-11-05T07:26:17Z","dns_checked_at":"2026-11-06T07:45:17.000Z","dns_since":"2026-11-05T07:44:43.000Z","findings":[{"id":"fyuekby55tgmaadsy63kf","kind":"reported_domain","summary":"Under waaako.space, listed by MetaMask","first_observed":"2026-11-05T07:26:02.064Z","first_published":"2026-11-05T07:32:58.446Z","source":"metamask","source_name":"MetaMask","under":"waaako.space"}],"url":"https://domainspoof.com/live?show=all&q=lab.waaako.space"},{"hostname":"laslobit.cc","first_observed":"2026-11-05T07:26:02.064Z","first_published":"2026-11-05T07:32:58.446Z","brands":[],"dns":"resolved","resolved":["186.2.163.187"],"resolved_at":"2026-11-05T07:26:17Z","dns_checked_at":"2026-11-06T07:45:17.000Z","dns_since":"2026-11-05T07:44:43.000Z","findings":[{"id":"f236yr4tk2bjdursj22xy","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T07:26:02.064Z","first_published":"2026-11-05T07:32:58.446Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/laslobit.cc/"}],"url":"https://domainspoof.com/live?show=all&q=laslobit.cc"},{"hostname":"ledgerliivedownload.pages.dev","first_observed":"2026-11-05T07:00:58.367Z","first_published":"2026-11-05T07:32:58.446Z","brands":[],"dns":"resolved","resolved":["172.66.44.61","172.66.47.195"],"resolved_at":"2026-11-05T07:01:25Z","dns_checked_at":"2026-11-06T07:45:17.000Z","dns_since":"2026-11-05T07:44:43.000Z","findings":[{"id":"fldwnsjwxkwst73qpcm3x","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T07:00:58.367Z","first_published":"2026-11-05T07:32:58.446Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=ledgerliivedownload.pages.dev"},{"hostname":"ledgr-start-div.pages.dev","first_observed":"2026-11-05T07:20:55.702Z","first_published":"2026-11-05T07:32:58.446Z","brands":[],"dns":"resolved","resolved":["172.66.45.9","172.66.46.247"],"resolved_at":"2026-11-05T07:21:12Z","dns_checked_at":"2026-11-06T07:45:17.000Z","dns_since":"2026-11-05T07:44:43.000Z","findings":[{"id":"fgmkjlkzrxxrxuptgvvg4","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T07:20:55.702Z","first_published":"2026-11-05T07:32:58.446Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=ledgr-start-div.pages.dev"},{"hostname":"ledgrs-i-es.pages.dev","first_observed":"2026-11-05T06:51:46.838Z","first_published":"2026-11-05T07:32:58.446Z","brands":[],"dns":"resolved","resolved":["172.66.44.253","172.66.47.3"],"resolved_at":"2026-11-05T06:59:26Z","dns_checked_at":"2026-11-06T07:45:17.000Z","dns_since":"2026-11-05T07:44:43.000Z","findings":[{"id":"frb54usuwh7uh3qkf5cud","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T06:51:46.838Z","first_published":"2026-11-05T07:32:58.446Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=ledgrs-i-es.pages.dev"},{"hostname":"lifebase.rodeo","first_observed":"2026-11-05T06:56:52.654Z","first_published":"2026-11-05T07:32:58.446Z","brands":[],"dns":"resolved","resolved":["104.21.8.126","172.67.157.90"],"resolved_at":"2026-11-05T07:05:57Z","dns_checked_at":"2026-11-06T07:45:17.000Z","dns_since":"2026-11-05T07:44:43.000Z","findings":[{"id":"fii3yezqucf3axl275piz","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T06:56:52.654Z","first_published":"2026-11-05T07:32:58.446Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=lifebase.rodeo"},{"hostname":"lighter-pass.com","first_observed":"2026-11-05T06:51:46.838Z","first_published":"2026-11-05T07:32:58.446Z","brands":[],"dns":"resolved","resolved":["104.21.62.86","172.67.222.34"],"resolved_at":"2026-11-05T06:59:26Z","dns_checked_at":"2026-11-06T07:45:17.000Z","dns_since":"2026-11-05T07:44:43.000Z","findings":[{"id":"fxebbslq63c3qx6h3vvty","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T06:51:46.838Z","first_published":"2026-11-05T07:32:58.446Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/lighter-pass.com/"}],"url":"https://domainspoof.com/live?show=all&q=lighter-pass.com"},{"hostname":"lougchenpstore.com","first_observed":"2026-11-05T07:26:02.064Z","first_published":"2026-11-05T07:32:58.446Z","brands":[],"dns":"resolved","resolved":["104.18.2.225"],"resolved_at":"2026-11-05T07:26:18Z","dns_checked_at":"2026-11-06T07:45:17.000Z","dns_since":"2026-11-05T07:44:43.000Z","findings":[{"id":"fugejzoyutd7bc6kft7vk","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T07:26:02.064Z","first_published":"2026-11-05T07:32:58.446Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=lougchenpstore.com"},{"hostname":"lp.noom.kz","first_observed":"2026-11-05T06:26:12.359Z","first_published":"2026-11-05T07:32:58.446Z","brands":[],"dns":"resolved","resolved":["194.110.54.162"],"resolved_at":"2026-11-05T06:26:24Z","dns_checked_at":"2026-11-06T07:45:17.000Z","dns_since":"2026-11-05T07:44:43.000Z","findings":[{"id":"ffcljmyc6icc3hr5mp4ee","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T06:26:12.359Z","first_published":"2026-11-05T07:32:58.446Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/lp.noom.kz/"}],"url":"https://domainspoof.com/live?show=all&q=lp.noom.kz"},{"hostname":"lundi111-recor.com","first_observed":"2026-11-05T06:51:46.838Z","first_published":"2026-11-05T07:32:58.446Z","brands":[],"dns":"resolved","resolved":["104.21.22.81","172.67.203.120"],"resolved_at":"2026-11-05T06:59:26Z","dns_checked_at":"2026-11-06T07:45:17.000Z","dns_since":"2026-11-05T07:44:43.000Z","findings":[{"id":"ffsri3ctano6wac6isryi","kind":"reported_domain","summary":"Reported by PhishTank","first_observed":"2026-11-05T06:51:46.838Z","first_published":"2026-11-05T07:32:58.446Z","source":"phishtank","source_name":"PhishTank","source_url":"https://phishtank.org/phish_detail.php?phish_id=9506487"}],"url":"https://domainspoof.com/live?show=all&q=lundi111-recor.com"},{"hostname":"m.bitget-hub.cn","first_observed":"2026-11-04T12:20:55.024Z","first_published":"2026-11-05T07:32:58.446Z","brands":[{"id":"bitget","name":"Bitget","url":"https://domainspoof.com/brands/bitget"}],"dns":"resolved","resolved":["177.211.118.185"],"resolved_at":"2026-11-06T07:45:17Z","dns_checked_at":"2026-11-06T07:45:17.000Z","dns_since":"2026-11-05T07:44:43.000Z","findings":[{"id":"f5amo242l2n5roco5ei5d","kind":"phishing_infrastructure","summary":"Resolved to 177.211.118.185, where reported phishing was found in the 48 hours before","first_observed":"2026-11-04T12:20:55.024Z","first_published":"2026-11-05T07:32:58.446Z","address":"177.211.118.185","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/bitget"},{"hostname":"m.d.curvedao.xyz","first_observed":"2026-11-05T06:36:28.363Z","first_published":"2026-11-05T07:32:58.446Z","brands":[],"dns":"resolved","resolved":["162.4.84.255"],"resolved_at":"2026-11-05T06:46:24Z","dns_checked_at":"2026-11-06T07:45:17.000Z","dns_since":"2026-11-05T07:44:43.000Z","findings":[{"id":"fjsd6oovet7uvyguvir4y","kind":"reported_domain","summary":"Under curvedao.xyz, listed by MetaMask","first_observed":"2026-11-05T06:36:28.363Z","first_published":"2026-11-05T07:32:58.446Z","source":"metamask","source_name":"MetaMask","under":"curvedao.xyz"}],"url":"https://domainspoof.com/live?show=all&q=m.d.curvedao.xyz"},{"hostname":"m07apu.hdiv8jy.com","first_observed":"2026-11-05T07:26:02.064Z","first_published":"2026-11-05T07:32:58.446Z","brands":[],"dns":"resolved","resolved":["185.53.179.136"],"resolved_at":"2026-11-05T07:26:18Z","dns_checked_at":"2026-11-06T07:45:17.000Z","dns_since":"2026-11-05T07:44:43.000Z","findings":[{"id":"f5obhe4nbqjw7p23jxbuq","kind":"reported_domain","summary":"Under hdiv8jy.com, listed by MetaMask","first_observed":"2026-11-05T07:26:02.064Z","first_published":"2026-11-05T07:32:58.446Z","source":"metamask","source_name":"MetaMask","under":"hdiv8jy.com"}],"url":"https://domainspoof.com/live?show=all&q=m07apu.hdiv8jy.com"},{"hostname":"mail.mapsa.com.pe","first_observed":"2026-11-05T06:56:52.654Z","first_published":"2026-11-05T07:32:58.446Z","brands":[],"dns":"resolved","resolved":["190.92.172.215"],"resolved_at":"2026-11-05T07:05:58Z","dns_checked_at":"2026-11-06T07:45:17.000Z","dns_since":"2026-11-05T07:44:43.000Z","findings":[{"id":"fyzwi6xltpv3lc4pmhu2e","kind":"reported_domain","summary":"Under mapsa.com.pe, reported by PhishDestroy","first_observed":"2026-11-05T06:56:52.654Z","first_published":"2026-11-05T07:32:58.446Z","source":"phishdestroy","source_name":"PhishDestroy","under":"mapsa.com.pe","source_url":"https://phishdestroy.io/domain/mapsa.com.pe/"}],"url":"https://domainspoof.com/live?show=all&q=mail.mapsa.com.pe"},{"hostname":"mapsa.com.pe","first_observed":"2026-11-05T06:56:52.654Z","first_published":"2026-11-05T07:32:58.446Z","brands":[],"dns":"resolved","resolved":["190.92.172.215"],"resolved_at":"2026-11-05T07:05:59Z","dns_checked_at":"2026-11-06T07:45:17.000Z","dns_since":"2026-11-05T07:44:43.000Z","findings":[{"id":"fntqjrmss5qbrdis5paba","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T06:56:52.654Z","first_published":"2026-11-05T07:32:58.446Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/mapsa.com.pe/"}],"url":"https://domainspoof.com/live?show=all&q=mapsa.com.pe"},{"hostname":"mea-firindan-ayni-gun-teslim.cfd","first_observed":"2026-11-05T06:44:15.212Z","first_published":"2026-11-05T07:32:58.446Z","brands":[],"dns":"resolved","resolved":["102.220.161.58"],"resolved_at":"2026-11-05T06:49:16Z","dns_checked_at":"2026-11-06T07:45:17.000Z","dns_since":"2026-11-05T07:44:43.000Z","findings":[{"id":"flntrn3squzo4k5o6d3rm","kind":"reported_domain","summary":"Listed by USOM","first_observed":"2026-11-05T06:44:15.212Z","first_published":"2026-11-05T07:32:58.446Z","source":"usom","source_name":"USOM"}],"url":"https://domainspoof.com/live?show=all&q=mea-firindan-ayni-gun-teslim.cfd"},{"hostname":"mea-firindan.cfd","first_observed":"2026-11-05T06:44:15.212Z","first_published":"2026-11-05T07:32:58.446Z","brands":[],"dns":"resolved","resolved":["142.93.170.24"],"resolved_at":"2026-11-05T06:49:16Z","dns_checked_at":"2026-11-06T07:45:17.000Z","dns_since":"2026-11-05T07:44:43.000Z","findings":[{"id":"fp5gflp47w6b63yytaboz","kind":"reported_domain","summary":"Listed by USOM","first_observed":"2026-11-05T06:44:15.212Z","first_published":"2026-11-05T07:32:58.446Z","source":"usom","source_name":"USOM"}],"url":"https://domainspoof.com/live?show=all&q=mea-firindan.cfd"},{"hostname":"meta-mask-wallet-912.pages.dev","first_observed":"2026-11-05T07:20:55.702Z","first_published":"2026-11-05T07:32:58.446Z","brands":[{"id":"metamask","name":"MetaMask","url":"https://domainspoof.com/brands/metamask"}],"dns":"resolved","resolved":["172.66.45.36","172.66.46.220","2606:4700:310c::ac42:2d24","2606:4700:310c::ac42:2edc"],"resolved_at":"2026-11-05T07:21:13Z","dns_checked_at":"2026-11-06T07:45:17.000Z","dns_since":"2026-11-05T07:44:43.000Z","findings":[{"id":"fmlert35pcedbpevrs6fw","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T07:20:55.702Z","first_published":"2026-11-05T07:32:58.446Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/brands/metamask"},{"hostname":"mistmere.com","first_observed":"2026-11-05T06:51:46.838Z","first_published":"2026-11-05T07:32:58.446Z","brands":[],"dns":"resolved","resolved":["104.18.15.59"],"resolved_at":"2026-11-05T06:59:27Z","dns_checked_at":"2026-11-06T07:45:17.000Z","dns_since":"2026-11-05T07:44:43.000Z","findings":[{"id":"fyxtx6oc5o5y22r3rjyvi","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T06:51:46.838Z","first_published":"2026-11-05T07:32:58.446Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=mistmere.com"},{"hostname":"mmqd.cloud","first_observed":"2026-11-05T06:36:28.363Z","first_published":"2026-11-05T07:32:58.446Z","brands":[],"dns":"resolved","resolved":["104.21.18.183","172.67.183.28"],"resolved_at":"2026-11-05T06:46:25Z","dns_checked_at":"2026-11-06T07:45:17.000Z","dns_since":"2026-11-05T07:44:43.000Z","findings":[{"id":"fffzjxpuncjytwebdg6zt","kind":"reported_domain","summary":"Listed by NPA 165 (e-commerce)","first_observed":"2026-11-05T06:36:28.363Z","first_published":"2026-11-05T07:32:58.446Z","source":"npa","source_name":"NPA 165","claim":{"category":"e-commerce"}}],"url":"https://domainspoof.com/live?show=all&q=mmqd.cloud"},{"hostname":"moonshots-ratings.com","first_observed":"2026-11-05T07:26:02.064Z","first_published":"2026-11-05T07:32:58.446Z","brands":[],"dns":"resolved","resolved":["104.21.4.109","172.67.132.2"],"resolved_at":"2026-11-05T07:26:18Z","dns_checked_at":"2026-11-06T07:45:17.000Z","dns_since":"2026-11-05T07:44:43.000Z","findings":[{"id":"fjlnavg7ygibxf2dmwybn","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T07:26:02.064Z","first_published":"2026-11-05T07:32:58.446Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/moonshots-ratings.com/"}],"url":"https://domainspoof.com/live?show=all&q=moonshots-ratings.com"},{"hostname":"moonwell-fi.club","first_observed":"2026-11-05T07:15:49.227Z","first_published":"2026-11-05T07:32:58.446Z","brands":[],"dns":"resolved","resolved":["104.21.44.250","172.67.206.211"],"resolved_at":"2026-11-05T07:16:58Z","dns_checked_at":"2026-11-06T07:45:17.000Z","dns_since":"2026-11-05T07:44:43.000Z","findings":[{"id":"fdnyfhuwucxjs6cpyai2b","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T07:15:49.227Z","first_published":"2026-11-05T07:32:58.446Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=moonwell-fi.club"},{"hostname":"mounebas.shop","first_observed":"2026-11-05T07:00:58.367Z","first_published":"2026-11-05T07:32:58.446Z","brands":[],"dns":"resolved","resolved":["104.21.59.10","172.67.167.101"],"resolved_at":"2026-11-05T07:01:25Z","dns_checked_at":"2026-11-06T07:45:17.000Z","dns_since":"2026-11-05T07:44:43.000Z","findings":[{"id":"f7bvdvhtq34unrpnv4kgx","kind":"reported_domain","summary":"Listed by NPA 165 (e-commerce)","first_observed":"2026-11-05T07:00:58.367Z","first_published":"2026-11-05T07:32:58.446Z","source":"npa","source_name":"NPA 165","claim":{"category":"e-commerce"}}],"url":"https://domainspoof.com/live?show=all&q=mounebas.shop"},{"hostname":"myzdy.com","first_observed":"2026-11-05T06:56:52.654Z","first_published":"2026-11-05T07:32:58.446Z","brands":[],"dns":"resolved","resolved":["104.233.158.212"],"resolved_at":"2026-11-05T07:06:00Z","dns_checked_at":"2026-11-06T07:45:17.000Z","dns_since":"2026-11-05T07:44:43.000Z","findings":[{"id":"fjxzqqmg466lunhfrnmkl","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T06:56:52.654Z","first_published":"2026-11-05T07:32:58.446Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/myzdy.com/"}],"url":"https://domainspoof.com/live?show=all&q=myzdy.com"},{"hostname":"nas.aml.legal","first_observed":"2026-11-05T07:26:02.064Z","first_published":"2026-11-05T07:32:58.446Z","brands":[],"dns":"resolved","resolved":["186.2.175.179"],"resolved_at":"2026-11-05T07:26:18Z","dns_checked_at":"2026-11-06T07:45:17.000Z","dns_since":"2026-11-05T07:44:43.000Z","findings":[{"id":"fgr3i32qq5g72kqgdjexo","kind":"reported_domain","summary":"Under aml.legal, reported by PhishDestroy","first_observed":"2026-11-05T07:26:02.064Z","first_published":"2026-11-05T07:32:58.446Z","source":"phishdestroy","source_name":"PhishDestroy","under":"aml.legal","source_url":"https://phishdestroy.io/domain/aml.legal/"}],"url":"https://domainspoof.com/live?show=all&q=nas.aml.legal"},{"hostname":"nestauraprobloom.com","first_observed":"2026-11-05T07:26:02.064Z","first_published":"2026-11-05T07:32:58.446Z","brands":[],"dns":"resolved","resolved":["104.18.15.59"],"resolved_at":"2026-11-05T07:26:18Z","dns_checked_at":"2026-11-06T07:45:17.000Z","dns_since":"2026-11-05T07:44:43.000Z","findings":[{"id":"fnmlq4crxyvs5gek2n5cj","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T07:26:02.064Z","first_published":"2026-11-05T07:32:58.446Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=nestauraprobloom.com"},{"hostname":"neuraltrade.trade","first_observed":"2026-11-05T06:51:46.838Z","first_published":"2026-11-05T07:32:58.446Z","brands":[],"dns":"resolved","resolved":["216.198.79.1"],"resolved_at":"2026-11-05T06:59:27Z","dns_checked_at":"2026-11-06T07:45:17.000Z","dns_since":"2026-11-05T07:44:43.000Z","findings":[{"id":"flaxaqzcjfviwe6d2tikz","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T06:51:46.838Z","first_published":"2026-11-05T07:32:58.446Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/neuraltrade.trade/"}],"url":"https://domainspoof.com/live?show=all&q=neuraltrade.trade"},{"hostname":"nexaaitrading.com","first_observed":"2026-11-05T06:51:46.838Z","first_published":"2026-11-05T07:32:58.446Z","brands":[],"dns":"resolved","resolved":["104.21.19.65","172.67.185.149"],"resolved_at":"2026-11-06T08:05:59Z","dns_checked_at":"2026-11-06T07:45:17.000Z","dns_since":"2026-11-05T07:44:43.000Z","findings":[{"id":"fanpltxzqlaeq2blb64al","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T06:51:46.838Z","first_published":"2026-11-05T07:32:58.446Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=nexaaitrading.com"},{"hostname":"nikfrostmusic.com","first_observed":"2026-11-05T06:36:28.363Z","first_published":"2026-11-05T07:32:58.446Z","brands":[],"dns":"resolved","resolved":["192.254.234.5"],"resolved_at":"2026-11-05T06:46:26Z","dns_checked_at":"2026-11-06T07:45:17.000Z","dns_since":"2026-11-05T07:44:43.000Z","findings":[{"id":"fbhxfgg2g3zbotjrckvwk","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T06:36:28.363Z","first_published":"2026-11-05T07:32:58.446Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/nikfrostmusic.com/"}],"url":"https://domainspoof.com/live?show=all&q=nikfrostmusic.com"},{"hostname":"notexist.blablacar.pochta.12auth.cdek.rhxyvcq9vvts2ld9.r.mail.leankoala.com","first_observed":"2026-11-05T06:31:49.028Z","first_published":"2026-11-05T07:32:58.446Z","brands":[{"id":"blablacar","name":"BlaBlaCar","url":"https://domainspoof.com/brands/blablacar"},{"id":"russian-post","name":"Russian Post","url":"https://domainspoof.com/brands/russian-post"}],"dns":"resolved","resolved":["172.246.243.65"],"resolved_at":"2026-11-06T07:45:17Z","dns_checked_at":"2026-11-06T07:45:17.000Z","dns_since":"2026-11-05T07:44:43.000Z","findings":[{"id":"f22bhclaclsiiaxmpp7hf","kind":"phishing_infrastructure","summary":"Resolved to 172.246.243.65, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T06:31:49.028Z","first_published":"2026-11-05T07:32:58.446Z","address":"172.246.243.65","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/blablacar"},{"hostname":"odoo.floydldevine.com","first_observed":"2026-11-05T06:51:46.838Z","first_published":"2026-11-05T07:32:58.446Z","brands":[],"dns":"resolved","resolved":["109.238.86.5"],"resolved_at":"2026-11-05T06:59:27Z","dns_checked_at":"2026-11-06T07:45:17.000Z","dns_since":"2026-11-05T07:44:43.000Z","findings":[{"id":"fewnmjcng2m4m5mg345rm","kind":"reported_domain","summary":"Under floydldevine.com, listed by CERT Polska","first_observed":"2026-11-05T06:51:46.838Z","first_published":"2026-11-05T07:32:58.446Z","source":"cert_polska","source_name":"CERT Polska","under":"floydldevine.com"}],"url":"https://domainspoof.com/live?show=all&q=odoo.floydldevine.com"},{"hostname":"onlineshoppings.site","first_observed":"2026-11-05T06:44:15.212Z","first_published":"2026-11-05T07:32:58.446Z","brands":[],"dns":"not_found","resolved":["64.89.160.238"],"resolved_at":"2026-11-05T06:49:16Z","dns_checked_at":"2026-11-06T07:45:17.000Z","dns_since":"2026-11-05T07:44:43.000Z","findings":[{"id":"feujmf7zj7kaiual2klt4","kind":"reported_domain","summary":"Listed by USOM","first_observed":"2026-11-05T06:44:15.212Z","first_published":"2026-11-05T07:32:58.446Z","source":"usom","source_name":"USOM"}],"url":"https://domainspoof.com/live?show=all&q=onlineshoppings.site"},{"hostname":"orlen-official.org","first_observed":"2026-11-05T06:41:03.894Z","first_published":"2026-11-05T07:32:58.446Z","brands":[{"id":"orlen","name":"Orlen","url":"https://domainspoof.com/brands/orlen"}],"dns":"resolved","resolved":["104.21.18.129","172.67.181.217","2606:4700:3034::6815:1281","2606:4700:3036::ac43:b5d9"],"resolved_at":"2026-11-05T06:52:08Z","dns_checked_at":"2026-11-06T07:45:17.000Z","dns_since":"2026-11-05T07:44:43.000Z","findings":[{"id":"fhjottqupxvhi427bxctp","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T06:41:03.894Z","first_published":"2026-11-05T07:32:58.446Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/brands/orlen"},{"hostname":"orlen.click","first_observed":"2026-11-05T06:51:46.838Z","first_published":"2026-11-05T07:32:58.446Z","brands":[{"id":"orlen","name":"Orlen","url":"https://domainspoof.com/brands/orlen"}],"dns":"resolved","resolved":["104.21.16.128","172.67.212.181","2606:4700:3035::6815:1080","2606:4700:3037::ac43:d4b5"],"resolved_at":"2026-11-05T06:59:27Z","dns_checked_at":"2026-11-06T07:45:17.000Z","dns_since":"2026-11-05T07:44:43.000Z","findings":[{"id":"f4r4entbxhwncclwtjoe2","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T06:51:46.838Z","first_published":"2026-11-05T07:32:58.446Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/brands/orlen"},{"hostname":"pageliy.shop","first_observed":"2026-11-05T07:20:55.702Z","first_published":"2026-11-05T07:32:58.446Z","brands":[],"dns":"resolved","resolved":["104.21.43.16","172.67.215.216"],"resolved_at":"2026-11-05T07:21:14Z","dns_checked_at":"2026-11-06T07:45:17.000Z","dns_since":"2026-11-05T07:44:43.000Z","findings":[{"id":"ffsfz3dd3etgaaf4ymjnc","kind":"reported_domain","summary":"Listed by NPA 165 (information services)","first_observed":"2026-11-05T07:20:55.702Z","first_published":"2026-11-05T07:32:58.446Z","source":"npa","source_name":"NPA 165","claim":{"category":"information services"}}],"url":"https://domainspoof.com/live?show=all&q=pageliy.shop"},{"hostname":"pay-bitrefill.com-cm01-esim-gift.com","first_observed":"2026-11-05T06:26:24.650Z","first_published":"2026-11-05T07:32:58.446Z","brands":[{"id":"bitrefill","name":"Bitrefill","url":"https://domainspoof.com/brands/bitrefill"}],"dns":"resolved","resolved":["62.60.226.39"],"resolved_at":"2026-11-06T06:35:27Z","dns_checked_at":"2026-11-06T06:35:27.000Z","dns_since":"2026-11-05T07:44:43.000Z","findings":[{"id":"fyi5oan5547nl6uqyap4j","kind":"spamhaus_drop","summary":"Resolved to 62.60.226.39 on Spamhaus DROP","first_observed":"2026-11-05T06:26:24.650Z","first_published":"2026-11-05T07:32:58.446Z","address":"62.60.226.39","list":"spamhaus_drop","list_name":"Spamhaus DROP"}],"url":"https://domainspoof.com/brands/bitrefill"},{"hostname":"pay.blablacar.backend-blablacar.cdek.rhxyvcq9vvts2ld9.r.mail.leankoala.com","first_observed":"2026-11-05T06:52:09.013Z","first_published":"2026-11-05T07:32:58.446Z","brands":[{"id":"blablacar","name":"BlaBlaCar","url":"https://domainspoof.com/brands/blablacar"}],"dns":"resolved","resolved":["172.246.243.65"],"resolved_at":"2026-11-06T07:45:17Z","dns_checked_at":"2026-11-06T07:45:17.000Z","dns_since":"2026-11-05T07:44:43.000Z","findings":[{"id":"fze3qo6usfz4vatscrbp6","kind":"phishing_infrastructure","summary":"Resolved to 172.246.243.65, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T06:52:09.013Z","first_published":"2026-11-05T07:32:58.446Z","address":"172.246.243.65","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/blablacar"},{"hostname":"pc.home-binance.cn","first_observed":"2026-11-05T06:31:49.888Z","first_published":"2026-11-05T07:32:58.446Z","brands":[{"id":"binance","name":"Binance","url":"https://domainspoof.com/brands/binance"}],"dns":"resolved","resolved":["118.139.164.57"],"resolved_at":"2026-11-06T07:45:17Z","dns_checked_at":"2026-11-06T07:45:17.000Z","dns_since":"2026-11-05T07:44:43.000Z","findings":[{"id":"fbpapecos4byo7hbcqapv","kind":"phishing_infrastructure","summary":"Resolved to 118.139.164.57, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T06:31:49.888Z","first_published":"2026-11-05T07:32:58.446Z","address":"118.139.164.57","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/binance"},{"hostname":"peverholl.net","first_observed":"2026-11-05T07:00:58.367Z","first_published":"2026-11-05T07:32:58.446Z","brands":[],"dns":"resolved","resolved":["104.21.24.173","172.67.219.197"],"resolved_at":"2026-11-05T07:01:26Z","dns_checked_at":"2026-11-06T07:45:17.000Z","dns_since":"2026-11-05T07:44:43.000Z","findings":[{"id":"frtmfggeass2drlmpoluq","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T07:00:58.367Z","first_published":"2026-11-05T07:32:58.446Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=peverholl.net"},{"hostname":"pixelcorenet.com","first_observed":"2026-11-05T06:31:20.800Z","first_published":"2026-11-05T07:32:58.446Z","brands":[],"dns":"resolved","resolved":["104.21.21.157","172.67.199.86"],"resolved_at":"2026-11-05T06:31:50Z","dns_checked_at":"2026-11-06T07:45:17.000Z","dns_since":"2026-11-05T07:44:43.000Z","findings":[{"id":"fsqhc4ms7hyzctjnyccfg","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T06:31:20.800Z","first_published":"2026-11-05T07:32:58.446Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=pixelcorenet.com"},{"hostname":"pluto.telegram-premiuma.com","first_observed":"2026-11-05T06:36:28.363Z","first_published":"2026-11-05T07:32:58.446Z","brands":[],"dns":"resolved","resolved":["78.153.139.88"],"resolved_at":"2026-11-05T06:46:31Z","dns_checked_at":"2026-11-06T07:45:17.000Z","dns_since":"2026-11-05T07:44:43.000Z","findings":[{"id":"fn6ueayiihr2um67z7ueo","kind":"reported_domain","summary":"Under telegram-premiuma.com, reported by PhishDestroy","first_observed":"2026-11-05T06:36:28.363Z","first_published":"2026-11-05T07:32:58.446Z","source":"phishdestroy","source_name":"PhishDestroy","under":"telegram-premiuma.com","source_url":"https://phishdestroy.io/domain/telegram-premiuma.com/"}],"url":"https://domainspoof.com/live?show=all&q=pluto.telegram-premiuma.com"},{"hostname":"portfolio.webauth.com","first_observed":"2026-11-05T06:51:46.838Z","first_published":"2026-11-05T07:32:58.446Z","brands":[],"dns":"resolved","resolved":["104.18.26.51","104.18.27.51"],"resolved_at":"2026-11-05T06:59:28Z","dns_checked_at":"2026-11-06T07:45:17.000Z","dns_since":"2026-11-05T07:44:43.000Z","findings":[{"id":"faxeyedu4fpcoryazlyq6","kind":"reported_domain","summary":"Under webauth.com, reported by PhishDestroy","first_observed":"2026-11-05T06:51:46.838Z","first_published":"2026-11-05T07:32:58.446Z","source":"phishdestroy","source_name":"PhishDestroy","under":"webauth.com","source_url":"https://phishdestroy.io/domain/webauth.com/"}],"url":"https://domainspoof.com/live?show=all&q=portfolio.webauth.com"},{"hostname":"profitshare.club","first_observed":"2026-11-05T06:26:12.359Z","first_published":"2026-11-05T07:32:58.446Z","brands":[],"dns":"resolved","resolved":["216.239.32.21","216.239.34.21","216.239.36.21","216.239.38.21"],"resolved_at":"2026-11-05T06:26:24Z","dns_checked_at":"2026-11-06T07:45:17.000Z","dns_since":"2026-11-05T07:44:43.000Z","findings":[{"id":"fw3hum4lqbfwu3nc5noz7","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T06:26:12.359Z","first_published":"2026-11-05T07:32:58.446Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=profitshare.club"},{"hostname":"proposal-arrowfinance.info","first_observed":"2026-11-05T06:46:10.294Z","first_published":"2026-11-05T07:32:58.446Z","brands":[],"dns":"resolved","resolved":["104.21.35.239","172.67.181.52"],"resolved_at":"2026-11-05T06:46:39Z","dns_checked_at":"2026-11-06T07:45:17.000Z","dns_since":"2026-11-05T07:44:43.000Z","findings":[{"id":"f3zvhw3h7biyfghcodspb","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T06:46:10.294Z","first_published":"2026-11-05T07:32:58.446Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=proposal-arrowfinance.info"},{"hostname":"qt.hoindq.cc","first_observed":"2026-11-05T06:36:28.363Z","first_published":"2026-11-05T07:32:58.446Z","brands":[],"dns":"resolved","resolved":["27.124.28.9","27.124.28.20"],"resolved_at":"2026-11-05T06:46:32Z","dns_checked_at":"2026-11-06T07:45:17.000Z","dns_since":"2026-11-05T07:44:43.000Z","findings":[{"id":"fkaswy2xoisg24r56yrgo","kind":"reported_domain","summary":"Listed by NPA 165 (finance and insurance)","first_observed":"2026-11-05T06:36:28.363Z","first_published":"2026-11-05T07:32:58.446Z","source":"npa","source_name":"NPA 165","claim":{"category":"finance and insurance"}}],"url":"https://domainspoof.com/live?show=all&q=qt.hoindq.cc"},{"hostname":"quanelavor.com","first_observed":"2026-11-05T07:15:49.227Z","first_published":"2026-11-05T07:32:58.446Z","brands":[],"dns":"resolved","resolved":["198.13.158.16"],"resolved_at":"2026-11-05T07:16:59Z","dns_checked_at":"2026-11-06T07:45:17.000Z","dns_since":"2026-11-05T07:44:43.000Z","findings":[{"id":"ffq7hvvj5ohpwyzjwptoc","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T07:15:49.227Z","first_published":"2026-11-05T07:32:58.446Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=quanelavor.com"},{"hostname":"rainbetcasino-se.online","first_observed":"2026-11-05T07:05:34.225Z","first_published":"2026-11-05T07:32:58.446Z","brands":[],"dns":"resolved","resolved":["104.21.5.8","172.67.132.180"],"resolved_at":"2026-11-06T05:10:52Z","dns_checked_at":"2026-11-06T07:45:17.000Z","dns_since":"2026-11-05T07:44:43.000Z","findings":[{"id":"fyonykinh2enjyofe6c3r","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T07:05:34.225Z","first_published":"2026-11-05T07:32:58.446Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=rainbetcasino-se.online"},{"hostname":"random.curvedao.xyz","first_observed":"2026-11-05T06:36:28.363Z","first_published":"2026-11-05T07:32:58.446Z","brands":[],"dns":"resolved","resolved":["162.4.84.255"],"resolved_at":"2026-11-05T06:46:32Z","dns_checked_at":"2026-11-06T07:45:17.000Z","dns_since":"2026-11-05T07:44:43.000Z","findings":[{"id":"fqixa26cas3scb2hd4xsm","kind":"reported_domain","summary":"Under curvedao.xyz, listed by MetaMask","first_observed":"2026-11-05T06:36:28.363Z","first_published":"2026-11-05T07:32:58.446Z","source":"metamask","source_name":"MetaMask","under":"curvedao.xyz"}],"url":"https://domainspoof.com/live?show=all&q=random.curvedao.xyz"},{"hostname":"rewardsprogram02.ink","first_observed":"2026-11-05T07:15:49.227Z","first_published":"2026-11-05T07:32:58.446Z","brands":[],"dns":"resolved","resolved":["104.21.64.138","172.67.151.53"],"resolved_at":"2026-11-05T07:17:01Z","dns_checked_at":"2026-11-06T07:45:17.000Z","dns_since":"2026-11-05T07:44:43.000Z","findings":[{"id":"fhaxod5ylwxuj6hblvg45","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T07:15:49.227Z","first_published":"2026-11-05T07:32:58.446Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/rewardsprogram02.ink/"}],"url":"https://domainspoof.com/live?show=all&q=rewardsprogram02.ink"},{"hostname":"roofreplacement.app","first_observed":"2026-11-05T07:05:34.225Z","first_published":"2026-11-05T07:32:58.446Z","brands":[],"dns":"resolved","resolved":["199.16.172.126","199.16.173.229"],"resolved_at":"2026-11-05T07:05:46Z","dns_checked_at":"2026-11-06T07:45:17.000Z","dns_since":"2026-11-05T07:44:43.000Z","findings":[{"id":"fzr4ek37uq6lf4y7fsjwk","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T07:05:34.225Z","first_published":"2026-11-05T07:32:58.446Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/roofreplacement.app/"}],"url":"https://domainspoof.com/live?show=all&q=roofreplacement.app"},{"hostname":"s.ee","first_observed":"2026-11-05T06:51:46.838Z","first_published":"2026-11-05T07:32:58.446Z","brands":[{"id":"irs","name":"IRS","url":"https://domainspoof.com/brands/irs"}],"dns":"resolved","resolved":["104.26.0.147","104.26.1.147","172.67.74.64"],"resolved_at":"2026-11-05T06:59:29Z","dns_checked_at":"2026-11-06T07:45:17.000Z","dns_since":"2026-11-05T07:44:43.000Z","findings":[{"id":"fbijekzakt2ll5kgvhq2y","kind":"reported_domain","summary":"Reported by PhishTank as imitating Internal Revenue Service","first_observed":"2026-11-05T06:51:46.838Z","first_published":"2026-11-05T07:32:58.446Z","source":"phishtank","source_name":"PhishTank","claim":{"brand":"Internal Revenue Service"},"source_url":"https://phishtank.org/phish_detail.php?phish_id=9503387"}],"url":"https://domainspoof.com/brands/irs"},{"hostname":"sadsadsadfff.pages.dev","first_observed":"2026-11-05T06:56:52.654Z","first_published":"2026-11-05T07:32:58.446Z","brands":[],"dns":"resolved","resolved":["172.66.44.165","172.66.47.91"],"resolved_at":"2026-11-05T07:06:14Z","dns_checked_at":"2026-11-06T07:45:17.000Z","dns_since":"2026-11-05T07:44:43.000Z","findings":[{"id":"fut5w6fxuogv7x2fgkgp6","kind":"reported_domain","summary":"Reported by PhishTank","first_observed":"2026-11-05T06:56:52.654Z","first_published":"2026-11-05T07:32:58.446Z","source":"phishtank","source_name":"PhishTank","source_url":"https://phishtank.org/phish_detail.php?phish_id=8872688"}],"url":"https://domainspoof.com/live?show=all&q=sadsadsadfff.pages.dev"},{"hostname":"savrynpulse-ai.org","first_observed":"2026-11-05T06:36:28.363Z","first_published":"2026-11-05T07:32:58.446Z","brands":[],"dns":"resolved","resolved":["104.21.5.193","172.67.154.174"],"resolved_at":"2026-11-05T06:46:35Z","dns_checked_at":"2026-11-06T07:45:17.000Z","dns_since":"2026-11-05T07:44:43.000Z","findings":[{"id":"fhzfdrtnexrvwkds5dgq6","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T06:36:28.363Z","first_published":"2026-11-05T07:32:58.446Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=savrynpulse-ai.org"},{"hostname":"sberbank.login-yandex.qiwbpchh9caly81t.rhxyvcq9vvts2ld9.r.mail.leankoala.com","first_observed":"2026-11-05T06:59:29.982Z","first_published":"2026-11-05T07:32:58.446Z","brands":[{"id":"sberbank","name":"Sberbank","url":"https://domainspoof.com/brands/sberbank"},{"id":"yandex","name":"Yandex","url":"https://domainspoof.com/brands/yandex"}],"dns":"resolved","resolved":["172.246.243.65"],"resolved_at":"2026-11-06T07:45:17Z","dns_checked_at":"2026-11-06T07:45:17.000Z","dns_since":"2026-11-05T07:44:43.000Z","findings":[{"id":"fx6zwcincxdpc2cei7ujn","kind":"phishing_infrastructure","summary":"Resolved to 172.246.243.65, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T06:59:29.982Z","first_published":"2026-11-05T07:32:58.446Z","address":"172.246.243.65","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/sberbank"},{"hostname":"sberbank.pochta.12auth.cdek.rhxyvcq9vvts2ld9.r.mail.leankoala.com","first_observed":"2026-11-05T06:21:47.668Z","first_published":"2026-11-05T07:32:58.446Z","brands":[{"id":"russian-post","name":"Russian Post","url":"https://domainspoof.com/brands/russian-post"},{"id":"sberbank","name":"Sberbank","url":"https://domainspoof.com/brands/sberbank"}],"dns":"resolved","resolved":["172.246.243.65"],"resolved_at":"2026-11-06T07:45:17Z","dns_checked_at":"2026-11-06T07:45:17.000Z","dns_since":"2026-11-05T07:44:43.000Z","findings":[{"id":"fvnpzjva56ylk5hynlu26","kind":"phishing_infrastructure","summary":"Resolved to 172.246.243.65, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T06:21:47.668Z","first_published":"2026-11-05T07:32:58.446Z","address":"172.246.243.65","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/russian-post"},{"hostname":"sevencasino.ltd","first_observed":"2026-11-05T06:26:12.359Z","first_published":"2026-11-05T07:32:58.446Z","brands":[],"dns":"resolved","resolved":["104.21.8.225","172.67.158.20"],"resolved_at":"2026-11-05T06:26:25Z","dns_checked_at":"2026-11-06T07:45:17.000Z","dns_since":"2026-11-05T07:44:43.000Z","findings":[{"id":"fw4jejcpb5c3sfyf4dig6","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T06:26:12.359Z","first_published":"2026-11-05T07:32:58.446Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/sevencasino.ltd/"}],"url":"https://domainspoof.com/live?show=all&q=sevencasino.ltd"},{"hostname":"share.zenavlico.cyou","first_observed":"2026-11-05T06:36:28.363Z","first_published":"2026-11-05T07:32:58.446Z","brands":[],"dns":"resolved","resolved":["95.85.244.13"],"resolved_at":"2026-11-05T06:46:39Z","dns_checked_at":"2026-11-06T07:45:17.000Z","dns_since":"2026-11-05T07:44:43.000Z","findings":[{"id":"fuv2vx2q4hjwpyxxwvz6g","kind":"reported_domain","summary":"Under zenavlico.cyou, listed by CERT Polska","first_observed":"2026-11-05T06:36:28.363Z","first_published":"2026-11-05T07:32:58.446Z","source":"cert_polska","source_name":"CERT Polska","under":"zenavlico.cyou"}],"url":"https://domainspoof.com/live?show=all&q=share.zenavlico.cyou"},{"hostname":"sinbadmixer.org","first_observed":"2026-11-05T06:51:46.838Z","first_published":"2026-11-05T07:32:58.446Z","brands":[],"dns":"resolved","resolved":["104.21.64.252","172.67.138.127"],"resolved_at":"2026-11-05T06:59:31Z","dns_checked_at":"2026-11-06T07:45:17.000Z","dns_since":"2026-11-05T07:44:43.000Z","findings":[{"id":"f56ogfiilrmjydaee5ord","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T06:51:46.838Z","first_published":"2026-11-05T07:32:58.446Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=sinbadmixer.org"},{"hostname":"staging.d.curvedao.xyz","first_observed":"2026-11-05T06:36:28.363Z","first_published":"2026-11-05T07:32:58.446Z","brands":[],"dns":"resolved","resolved":["162.4.84.255"],"resolved_at":"2026-11-05T06:46:39Z","dns_checked_at":"2026-11-06T07:45:17.000Z","dns_since":"2026-11-05T07:44:43.000Z","findings":[{"id":"f22z5vkv6ro6ez7l4jdes","kind":"reported_domain","summary":"Under curvedao.xyz, listed by MetaMask","first_observed":"2026-11-05T06:36:28.363Z","first_published":"2026-11-05T07:32:58.446Z","source":"metamask","source_name":"MetaMask","under":"curvedao.xyz"}],"url":"https://domainspoof.com/live?show=all&q=staging.d.curvedao.xyz"},{"hostname":"starzbet.website","first_observed":"2026-11-05T07:20:55.702Z","first_published":"2026-11-05T07:32:58.446Z","brands":[],"dns":"resolved","resolved":["104.21.12.49","172.67.193.171"],"resolved_at":"2026-11-05T07:21:17Z","dns_checked_at":"2026-11-06T07:45:17.000Z","dns_since":"2026-11-05T07:44:43.000Z","findings":[{"id":"fnazyouia2idqdyswscpg","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T07:20:55.702Z","first_published":"2026-11-05T07:32:58.446Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/starzbet.website/"}],"url":"https://domainspoof.com/live?show=all&q=starzbet.website"},{"hostname":"static.caeser.pro","first_observed":"2026-11-05T06:31:20.800Z","first_published":"2026-11-05T07:32:58.446Z","brands":[],"dns":"resolved","resolved":["89.124.251.220"],"resolved_at":"2026-11-05T06:31:53Z","dns_checked_at":"2026-11-06T07:45:17.000Z","dns_since":"2026-11-05T07:44:43.000Z","findings":[{"id":"f5uo6jpbtp54teuhwikww","kind":"reported_domain","summary":"Under caeser.pro, reported by PhishDestroy","first_observed":"2026-11-05T06:31:20.800Z","first_published":"2026-11-05T07:32:58.446Z","source":"phishdestroy","source_name":"PhishDestroy","under":"caeser.pro","source_url":"https://phishdestroy.io/domain/caeser.pro/"}],"url":"https://domainspoof.com/live?show=all&q=static.caeser.pro"},{"hostname":"strt--ledgr-com.pages.dev","first_observed":"2026-11-05T06:51:46.838Z","first_published":"2026-11-05T07:32:58.446Z","brands":[],"dns":"resolved","resolved":["172.66.44.175","172.66.47.81"],"resolved_at":"2026-11-05T06:59:31Z","dns_checked_at":"2026-11-06T07:45:17.000Z","dns_since":"2026-11-05T07:44:43.000Z","findings":[{"id":"f5zkms6lziu5dm3besbhr","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T06:51:46.838Z","first_published":"2026-11-05T07:32:58.446Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=strt--ledgr-com.pages.dev"},{"hostname":"sunlightshopping.shop","first_observed":"2026-11-05T06:51:46.838Z","first_published":"2026-11-05T07:32:58.446Z","brands":[],"dns":"no_address","resolved":[],"resolved_at":"2026-11-05T06:59:31Z","dns_checked_at":"2026-11-06T07:45:17.000Z","dns_since":"2026-11-05T07:44:43.000Z","findings":[{"id":"fodmjeux3fh4k5z3wivv7","kind":"reported_domain","summary":"Listed by NPA 165 (information services)","first_observed":"2026-11-05T06:51:46.838Z","first_published":"2026-11-05T07:32:58.446Z","source":"npa","source_name":"NPA 165","claim":{"category":"information services"}}],"url":"https://domainspoof.com/live?show=all&q=sunlightshopping.shop"},{"hostname":"superset.aml.legal","first_observed":"2026-11-05T07:26:02.064Z","first_published":"2026-11-05T07:32:58.446Z","brands":[],"dns":"resolved","resolved":["186.2.175.179"],"resolved_at":"2026-11-05T07:26:20Z","dns_checked_at":"2026-11-06T07:45:17.000Z","dns_since":"2026-11-05T07:44:43.000Z","findings":[{"id":"fkk7bxaxuojr4qbb6djly","kind":"reported_domain","summary":"Under aml.legal, reported by PhishDestroy","first_observed":"2026-11-05T07:26:02.064Z","first_published":"2026-11-05T07:32:58.446Z","source":"phishdestroy","source_name":"PhishDestroy","under":"aml.legal","source_url":"https://phishdestroy.io/domain/aml.legal/"}],"url":"https://domainspoof.com/live?show=all&q=superset.aml.legal"},{"hostname":"support-ledger-eng-us.pages.dev","first_observed":"2026-11-05T07:00:58.367Z","first_published":"2026-11-05T07:32:58.446Z","brands":[],"dns":"resolved","resolved":["172.66.44.81","172.66.47.175"],"resolved_at":"2026-11-05T07:01:26Z","dns_checked_at":"2026-11-06T07:45:17.000Z","dns_since":"2026-11-05T07:44:43.000Z","findings":[{"id":"fwuv4df3uftifhhwwb5iy","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T07:00:58.367Z","first_published":"2026-11-05T07:32:58.446Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=support-ledger-eng-us.pages.dev"},{"hostname":"surl.gd","first_observed":"2026-11-05T06:31:20.800Z","first_published":"2026-11-05T07:32:58.446Z","brands":[],"dns":"resolved","resolved":["104.21.87.189","172.67.145.158"],"resolved_at":"2026-11-05T06:31:53Z","dns_checked_at":"2026-11-06T07:45:17.000Z","dns_since":"2026-11-05T07:44:43.000Z","findings":[{"id":"fvv4hudoac34lnejsoa32","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T06:31:20.800Z","first_published":"2026-11-05T07:32:58.446Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/surl.gd/"}],"url":"https://domainspoof.com/live?show=all&q=surl.gd"},{"hostname":"t19299coinbase.com","first_observed":"2026-11-05T06:56:52.654Z","first_published":"2026-11-05T07:32:58.446Z","brands":[],"dns":"resolved","resolved":["104.21.74.171","172.67.160.83","2606:4700:3030::6815:4aab","2606:4700:3032::ac43:a053"],"resolved_at":"2026-11-06T01:16:34Z","dns_checked_at":"2026-11-06T07:45:17.000Z","dns_since":"2026-11-05T07:44:43.000Z","findings":[{"id":"faxpfduvlkztrmgvyhl7b","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T06:56:52.654Z","first_published":"2026-11-05T07:32:58.446Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/t19299coinbase.com/"}],"url":"https://domainspoof.com/live?show=all&q=t19299coinbase.com"},{"hostname":"tacobell.work","first_observed":"2026-11-05T07:21:17.517Z","first_published":"2026-11-05T07:32:58.446Z","brands":[{"id":"taco-bell","name":"Taco Bell","url":"https://domainspoof.com/brands/taco-bell"}],"dns":"resolved","resolved":["69.46.46.39"],"resolved_at":"2026-11-05T07:44:43Z","dns_checked_at":"2026-11-06T07:45:17.000Z","dns_since":"2026-11-05T07:44:43.000Z","findings":[{"id":"fqhd5qsfkcixf74znrvyz","kind":"phishing_infrastructure","summary":"Resolved to 69.46.46.39, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T07:21:17.517Z","first_published":"2026-11-05T07:32:58.446Z","address":"69.46.46.39","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/taco-bell"},{"hostname":"tavomex.com","first_observed":"2026-11-05T06:41:03.894Z","first_published":"2026-11-05T07:32:58.446Z","brands":[],"dns":"resolved","resolved":["104.21.29.161","172.67.149.115"],"resolved_at":"2026-11-05T06:52:14Z","dns_checked_at":"2026-11-06T07:45:17.000Z","dns_since":"2026-11-05T07:44:43.000Z","findings":[{"id":"fe6zwnzxp6u4lh5z5wh3c","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T06:41:03.894Z","first_published":"2026-11-05T07:32:58.446Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/tavomex.com/"}],"url":"https://domainspoof.com/live?show=all&q=tavomex.com"},{"hostname":"testnet-rpc.vcity.app","first_observed":"2026-11-05T07:26:02.064Z","first_published":"2026-11-05T07:32:58.446Z","brands":[],"dns":"resolved","resolved":["207.6.5.61"],"resolved_at":"2026-11-05T07:26:21Z","dns_checked_at":"2026-11-06T07:45:17.000Z","dns_since":"2026-11-05T07:44:43.000Z","findings":[{"id":"fze72sbqls7jivynehapt","kind":"reported_domain","summary":"Under vcity.app, reported by PhishDestroy","first_observed":"2026-11-05T07:26:02.064Z","first_published":"2026-11-05T07:32:58.446Z","source":"phishdestroy","source_name":"PhishDestroy","under":"vcity.app","source_url":"https://phishdestroy.io/domain/vcity.app/"}],"url":"https://domainspoof.com/live?show=all&q=testnet-rpc.vcity.app"},{"hostname":"testnew.bigbasket.pk","first_observed":"2026-11-05T06:26:12.359Z","first_published":"2026-11-05T07:32:58.446Z","brands":[],"dns":"resolved","resolved":["72.60.40.86"],"resolved_at":"2026-11-05T06:26:25Z","dns_checked_at":"2026-11-06T07:45:17.000Z","dns_since":"2026-11-05T07:44:43.000Z","findings":[{"id":"fsankqtmj73gvq6asavwl","kind":"reported_domain","summary":"Under bigbasket.pk, reported by PhishDestroy","first_observed":"2026-11-05T06:26:12.359Z","first_published":"2026-11-05T07:32:58.446Z","source":"phishdestroy","source_name":"PhishDestroy","under":"bigbasket.pk","source_url":"https://phishdestroy.io/domain/bigbasket.pk/"}],"url":"https://domainspoof.com/live?show=all&q=testnew.bigbasket.pk"},{"hostname":"tfufr.online","first_observed":"2026-11-05T07:00:58.367Z","first_published":"2026-11-05T07:32:58.446Z","brands":[],"dns":"resolved","resolved":["104.21.20.141","172.67.192.244"],"resolved_at":"2026-11-06T13:41:59Z","dns_checked_at":"2026-11-06T07:45:17.000Z","dns_since":"2026-11-05T07:44:43.000Z","findings":[{"id":"fufpwphxglucz2p4yildu","kind":"reported_domain","summary":"Listed by NPA 165 (e-commerce)","first_observed":"2026-11-05T07:00:58.367Z","first_published":"2026-11-05T07:32:58.446Z","source":"npa","source_name":"NPA 165","claim":{"category":"e-commerce"}}],"url":"https://domainspoof.com/live?show=all&q=tfufr.online"},{"hostname":"thebullsolana.com","first_observed":"2026-11-05T06:21:30.781Z","first_published":"2026-11-05T07:32:58.446Z","brands":[],"dns":"resolved","resolved":["104.21.49.187","172.67.165.228"],"resolved_at":"2026-11-05T06:21:48Z","dns_checked_at":"2026-11-06T07:45:17.000Z","dns_since":"2026-11-05T07:44:43.000Z","findings":[{"id":"foc6qe7zvgpcdxqryowc7","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T06:21:30.781Z","first_published":"2026-11-05T07:32:58.446Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=thebullsolana.com"},{"hostname":"thetrenqorforgeapp.net","first_observed":"2026-11-05T07:26:02.064Z","first_published":"2026-11-05T07:32:58.446Z","brands":[],"dns":"resolved","resolved":["104.21.7.123","172.67.130.78"],"resolved_at":"2026-11-05T07:26:21Z","dns_checked_at":"2026-11-06T07:45:17.000Z","dns_since":"2026-11-05T07:44:43.000Z","findings":[{"id":"fzmiy2lb4vhcp2rpydhup","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T07:26:02.064Z","first_published":"2026-11-05T07:32:58.446Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=thetrenqorforgeapp.net"},{"hostname":"tlpgnqughg.top","first_observed":"2026-11-05T06:41:03.894Z","first_published":"2026-11-05T07:32:58.446Z","brands":[{"id":"rakuten-card","name":"Rakuten Card","url":"https://domainspoof.com/brands/rakuten-card"}],"dns":"no_address","resolved":[],"resolved_at":"2026-11-05T06:52:15Z","dns_checked_at":"2026-11-06T07:45:17.000Z","dns_since":"2026-11-05T07:44:43.000Z","findings":[{"id":"f2l2hsaibsfs7j33nis6m","kind":"reported_domain","summary":"Listed by JPCERT/CC as imitating 楽天カード","first_observed":"2026-11-05T06:41:03.894Z","first_published":"2026-11-05T07:32:58.446Z","source":"jpcert","source_name":"JPCERT/CC","claim":{"brand":"楽天カード"}}],"url":"https://domainspoof.com/brands/rakuten-card"},{"hostname":"trazor-hardware--wallet.pages.dev","first_observed":"2026-11-05T06:46:10.294Z","first_published":"2026-11-05T07:32:58.446Z","brands":[],"dns":"resolved","resolved":["172.66.44.203","172.66.47.53"],"resolved_at":"2026-11-05T06:46:40Z","dns_checked_at":"2026-11-06T07:45:17.000Z","dns_since":"2026-11-05T07:44:43.000Z","findings":[{"id":"fxaouj55bj2ymfp7jziy5","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T06:46:10.294Z","first_published":"2026-11-05T07:32:58.446Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=trazor-hardware--wallet.pages.dev"},{"hostname":"treasury-hyperliquid.org","first_observed":"2026-11-05T07:05:34.225Z","first_published":"2026-11-05T07:32:58.446Z","brands":[{"id":"hyperliquid","name":"Hyperliquid","url":"https://domainspoof.com/brands/hyperliquid"}],"dns":"resolved","resolved":["104.21.69.228","172.67.214.153","2606:4700:3033::ac43:d699","2606:4700:3037::6815:45e4"],"resolved_at":"2026-11-05T07:05:46Z","dns_checked_at":"2026-11-06T07:45:17.000Z","dns_since":"2026-11-05T07:44:43.000Z","findings":[{"id":"fifgdaxk4wzqx4ewcutj7","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T07:05:34.225Z","first_published":"2026-11-05T07:32:58.446Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/brands/hyperliquid"},{"hostname":"trendyol0.lat","first_observed":"2026-11-05T07:26:02.064Z","first_published":"2026-11-05T07:32:58.446Z","brands":[{"id":"trendyol","name":"Trendyol","url":"https://domainspoof.com/brands/trendyol"}],"dns":"resolved","resolved":["104.21.72.123","172.67.184.157","2606:4700:3034::ac43:b89d","2606:4700:3035::6815:487b"],"resolved_at":"2026-11-05T07:26:21Z","dns_checked_at":"2026-11-06T07:45:17.000Z","dns_since":"2026-11-05T07:44:43.000Z","findings":[{"id":"fglysvj5tt6v32glec66t","kind":"reported_domain","summary":"Listed by USOM","first_observed":"2026-11-05T07:26:02.064Z","first_published":"2026-11-05T07:32:58.446Z","source":"usom","source_name":"USOM"}],"url":"https://domainspoof.com/brands/trendyol"},{"hostname":"trezor.fondacijasnd.rs","first_observed":"2026-11-05T06:21:30.781Z","first_published":"2026-11-05T07:32:58.446Z","brands":[],"dns":"resolved","resolved":["212.200.255.52"],"resolved_at":"2026-11-05T06:21:49Z","dns_checked_at":"2026-11-06T07:45:17.000Z","dns_since":"2026-11-05T07:44:43.000Z","findings":[{"id":"fe7f4gj7t44jbqinbqcbz","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T06:21:30.781Z","first_published":"2026-11-05T07:32:58.446Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/trezor.fondacijasnd.rs/"}],"url":"https://domainspoof.com/live?show=all&q=trezor.fondacijasnd.rs"},{"hostname":"trustprod.com","first_observed":"2026-11-05T06:46:10.294Z","first_published":"2026-11-05T07:32:58.446Z","brands":[],"dns":"resolved","resolved":["104.21.36.28","172.67.184.82"],"resolved_at":"2026-11-05T06:46:40Z","dns_checked_at":"2026-11-06T07:45:17.000Z","dns_since":"2026-11-05T07:44:43.000Z","findings":[{"id":"fpr7xstqai62sgwhs2ihy","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T06:46:10.294Z","first_published":"2026-11-05T07:32:58.446Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/trustprod.com/"}],"url":"https://domainspoof.com/live?show=all&q=trustprod.com"},{"hostname":"usdcboss.cyou","first_observed":"2026-11-05T07:15:49.227Z","first_published":"2026-11-05T07:32:58.446Z","brands":[],"dns":"resolved","resolved":["104.21.55.181","172.67.172.27"],"resolved_at":"2026-11-05T07:17:02Z","dns_checked_at":"2026-11-06T07:45:17.000Z","dns_since":"2026-11-05T07:44:43.000Z","findings":[{"id":"f6dqqlvgnoimaosxiq2zc","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T07:15:49.227Z","first_published":"2026-11-05T07:32:58.446Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/usdcboss.cyou/"}],"url":"https://domainspoof.com/live?show=all&q=usdcboss.cyou"},{"hostname":"valeridgetalnix.digital","first_observed":"2026-11-05T06:21:30.781Z","first_published":"2026-11-05T07:32:58.446Z","brands":[],"dns":"resolved","resolved":["104.21.92.242","172.67.200.248"],"resolved_at":"2026-11-06T09:21:33Z","dns_checked_at":"2026-11-06T07:45:17.000Z","dns_since":"2026-11-05T07:44:43.000Z","findings":[{"id":"fhe5eb32bow7rk4t72k6c","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T06:21:30.781Z","first_published":"2026-11-05T07:32:58.446Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=valeridgetalnix.digital"},{"hostname":"verification-binance.com","first_observed":"2026-11-05T07:05:46.324Z","first_published":"2026-11-05T07:32:58.446Z","brands":[{"id":"binance","name":"Binance","url":"https://domainspoof.com/brands/binance"}],"dns":"resolved","resolved":["2.57.91.91"],"resolved_at":"2026-11-06T07:45:17Z","dns_checked_at":"2026-11-06T07:45:17.000Z","dns_since":"2026-11-05T07:44:43.000Z","findings":[{"id":"fqmvx6wnbeujcwcqv7pll","kind":"phishing_infrastructure","summary":"Resolved to 2.57.91.91, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T07:05:46.324Z","first_published":"2026-11-05T07:32:58.446Z","address":"2.57.91.91","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/binance"},{"hostname":"viewshopping.shop","first_observed":"2026-11-05T07:26:02.064Z","first_published":"2026-11-05T07:32:58.446Z","brands":[],"dns":"no_address","resolved":[],"resolved_at":"2026-11-05T07:26:22Z","dns_checked_at":"2026-11-06T07:45:17.000Z","dns_since":"2026-11-05T07:44:43.000Z","findings":[{"id":"feccrl4oe6d6a2q2yv2gq","kind":"reported_domain","summary":"Listed by NPA 165 (e-commerce)","first_observed":"2026-11-05T07:26:02.064Z","first_published":"2026-11-05T07:32:58.446Z","source":"npa","source_name":"NPA 165","claim":{"category":"e-commerce"}}],"url":"https://domainspoof.com/live?show=all&q=viewshopping.shop"},{"hostname":"vortex-cipher.icu","first_observed":"2026-11-05T06:56:52.654Z","first_published":"2026-11-05T07:32:58.446Z","brands":[],"dns":"resolved","resolved":["77.90.185.214"],"resolved_at":"2026-11-05T07:06:33Z","dns_checked_at":"2026-11-06T07:45:17.000Z","dns_since":"2026-11-05T07:44:43.000Z","findings":[{"id":"f5kdj6eguhfztotllprry","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T06:56:52.654Z","first_published":"2026-11-05T07:32:58.446Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=vortex-cipher.icu"},{"hostname":"w02.avito-slbschool.ru","first_observed":"2026-11-05T06:46:45.924Z","first_published":"2026-11-05T07:32:58.446Z","brands":[{"id":"avito","name":"Avito","url":"https://domainspoof.com/brands/avito"}],"dns":"resolved","resolved":["111.90.143.122"],"resolved_at":"2026-11-06T07:45:17Z","dns_checked_at":"2026-11-06T07:45:17.000Z","dns_since":"2026-11-05T07:44:43.000Z","findings":[{"id":"fgir2f4dfsqzfsyeg4nly","kind":"spamhaus_drop","summary":"Resolved to 111.90.143.122 on Spamhaus DROP","first_observed":"2026-11-05T06:46:45.924Z","first_published":"2026-11-05T07:32:58.446Z","address":"111.90.143.122","list":"spamhaus_drop","list_name":"Spamhaus DROP"}],"url":"https://domainspoof.com/brands/avito"},{"hostname":"w05.avito-slbschool.ru","first_observed":"2026-11-05T06:52:19.590Z","first_published":"2026-11-05T07:32:58.446Z","brands":[{"id":"avito","name":"Avito","url":"https://domainspoof.com/brands/avito"}],"dns":"resolved","resolved":["101.99.75.212"],"resolved_at":"2026-11-06T07:45:17Z","dns_checked_at":"2026-11-06T07:45:17.000Z","dns_since":"2026-11-05T07:44:43.000Z","findings":[{"id":"fhsjwx2x3dwya6pl24brt","kind":"phishing_infrastructure","summary":"Resolved to 101.99.75.212, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T06:52:19.590Z","first_published":"2026-11-05T07:32:58.446Z","address":"101.99.75.212","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"},{"id":"ftv2uuuyj4s577vwm5dd7","kind":"spamhaus_drop","summary":"Resolved to 101.99.75.212 on Spamhaus DROP","first_observed":"2026-11-05T06:52:19.590Z","first_published":"2026-11-05T07:32:58.446Z","address":"101.99.75.212","list":"spamhaus_drop","list_name":"Spamhaus DROP"}],"url":"https://domainspoof.com/brands/avito"},{"hostname":"wap.apo-binance.com.cn","first_observed":"2026-11-05T06:31:57.066Z","first_published":"2026-11-05T07:32:58.446Z","brands":[{"id":"binance","name":"Binance","url":"https://domainspoof.com/brands/binance"}],"dns":"resolved","resolved":["118.139.164.57"],"resolved_at":"2026-11-06T07:45:17Z","dns_checked_at":"2026-11-06T07:45:17.000Z","dns_since":"2026-11-05T07:44:43.000Z","findings":[{"id":"ftmiuboo24zzwf6vza44h","kind":"phishing_infrastructure","summary":"Resolved to 118.139.164.57, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T06:31:57.066Z","first_published":"2026-11-05T07:32:58.446Z","address":"118.139.164.57","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/binance"},{"hostname":"wap.apt-binance.com.cn","first_observed":"2026-11-05T06:31:57.071Z","first_published":"2026-11-05T07:32:58.446Z","brands":[{"id":"binance","name":"Binance","url":"https://domainspoof.com/brands/binance"}],"dns":"resolved","resolved":["118.139.164.57"],"resolved_at":"2026-11-06T07:45:17Z","dns_checked_at":"2026-11-06T07:45:17.000Z","dns_since":"2026-11-05T07:44:43.000Z","findings":[{"id":"fhou6rvtlzoznl3cmnmbt","kind":"phishing_infrastructure","summary":"Resolved to 118.139.164.57, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T06:31:57.071Z","first_published":"2026-11-05T07:32:58.446Z","address":"118.139.164.57","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/binance"},{"hostname":"waywiser-desk.pro","first_observed":"2026-11-05T07:05:34.225Z","first_published":"2026-11-05T07:32:58.446Z","brands":[],"dns":"resolved","resolved":["104.21.21.57","172.67.196.133"],"resolved_at":"2026-11-05T07:05:46Z","dns_checked_at":"2026-11-06T07:45:17.000Z","dns_since":"2026-11-05T07:44:43.000Z","findings":[{"id":"fxucuv5nquqzre4x4td3z","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T07:05:34.225Z","first_published":"2026-11-05T07:32:58.446Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=waywiser-desk.pro"},{"hostname":"wda.trxbi.com","first_observed":"2026-11-05T06:26:12.359Z","first_published":"2026-11-05T07:32:58.446Z","brands":[],"dns":"resolved","resolved":["104.21.83.187","172.67.180.217"],"resolved_at":"2026-11-05T06:26:26Z","dns_checked_at":"2026-11-06T07:45:17.000Z","dns_since":"2026-11-05T07:44:43.000Z","findings":[{"id":"fifi3g5ug2h4pfrz2njea","kind":"reported_domain","summary":"Under trxbi.com, reported by PhishDestroy","first_observed":"2026-11-05T06:26:12.359Z","first_published":"2026-11-05T07:32:58.446Z","source":"phishdestroy","source_name":"PhishDestroy","under":"trxbi.com","source_url":"https://phishdestroy.io/domain/trxbi.com/"}],"url":"https://domainspoof.com/live?show=all&q=wda.trxbi.com"},{"hostname":"webdisk.mapsa.com.pe","first_observed":"2026-11-05T06:56:52.654Z","first_published":"2026-11-05T07:32:58.446Z","brands":[],"dns":"resolved","resolved":["190.92.172.215"],"resolved_at":"2026-11-05T07:06:34Z","dns_checked_at":"2026-11-06T07:45:17.000Z","dns_since":"2026-11-05T07:44:43.000Z","findings":[{"id":"f4iq6gsgwv7dvq5p6jnfg","kind":"reported_domain","summary":"Under mapsa.com.pe, reported by PhishDestroy","first_observed":"2026-11-05T06:56:52.654Z","first_published":"2026-11-05T07:32:58.446Z","source":"phishdestroy","source_name":"PhishDestroy","under":"mapsa.com.pe","source_url":"https://phishdestroy.io/domain/mapsa.com.pe/"}],"url":"https://domainspoof.com/live?show=all&q=webdisk.mapsa.com.pe"},{"hostname":"webmail.mapsa.com.pe","first_observed":"2026-11-05T06:56:52.654Z","first_published":"2026-11-05T07:32:58.446Z","brands":[],"dns":"resolved","resolved":["190.92.172.215"],"resolved_at":"2026-11-05T07:06:34Z","dns_checked_at":"2026-11-06T07:45:17.000Z","dns_since":"2026-11-05T07:44:43.000Z","findings":[{"id":"fn6j4dsnr6cebgnhknn3l","kind":"reported_domain","summary":"Under mapsa.com.pe, reported by PhishDestroy","first_observed":"2026-11-05T06:56:52.654Z","first_published":"2026-11-05T07:32:58.446Z","source":"phishdestroy","source_name":"PhishDestroy","under":"mapsa.com.pe","source_url":"https://phishdestroy.io/domain/mapsa.com.pe/"}],"url":"https://domainspoof.com/live?show=all&q=webmail.mapsa.com.pe"},{"hostname":"wifubfnsa.website","first_observed":"2026-11-05T06:21:30.781Z","first_published":"2026-11-05T07:32:58.446Z","brands":[],"dns":"resolved","resolved":["104.21.86.66","172.67.216.89"],"resolved_at":"2026-11-05T06:21:49Z","dns_checked_at":"2026-11-06T07:45:17.000Z","dns_since":"2026-11-05T07:44:43.000Z","findings":[{"id":"fykcocy2yuzm3shhhxa2m","kind":"reported_domain","summary":"Listed by NPA 165 (e-commerce)","first_observed":"2026-11-05T06:21:30.781Z","first_published":"2026-11-05T07:32:58.446Z","source":"npa","source_name":"NPA 165","claim":{"category":"e-commerce"}}],"url":"https://domainspoof.com/live?show=all&q=wifubfnsa.website"},{"hostname":"wroblewski-wroclaw.com","first_observed":"2026-11-05T06:41:03.894Z","first_published":"2026-11-05T07:32:58.446Z","brands":[],"dns":"resolved","resolved":["23.227.38.66"],"resolved_at":"2026-11-05T06:52:20Z","dns_checked_at":"2026-11-06T07:45:17.000Z","dns_since":"2026-11-05T07:44:43.000Z","findings":[{"id":"fcewxrs3447nw2w3whbo7","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T06:41:03.894Z","first_published":"2026-11-05T07:32:58.446Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=wroblewski-wroclaw.com"},{"hostname":"ww25.curvedao.xyz","first_observed":"2026-11-05T06:31:20.800Z","first_published":"2026-11-05T07:32:58.446Z","brands":[],"dns":"resolved","resolved":["162.4.84.255"],"resolved_at":"2026-11-05T06:31:57Z","dns_checked_at":"2026-11-06T07:45:17.000Z","dns_since":"2026-11-05T07:44:43.000Z","findings":[{"id":"fyzwms7kp23ofsxotmhav","kind":"reported_domain","summary":"Under curvedao.xyz, listed by MetaMask","first_observed":"2026-11-05T06:31:20.800Z","first_published":"2026-11-05T07:32:58.446Z","source":"metamask","source_name":"MetaMask","under":"curvedao.xyz"}],"url":"https://domainspoof.com/live?show=all&q=ww25.curvedao.xyz"},{"hostname":"www-teb-mobilden.my-homeip.de","first_observed":"2026-11-05T06:44:15.212Z","first_published":"2026-11-05T07:32:58.446Z","brands":[],"dns":"resolved","resolved":["3.67.168.154"],"resolved_at":"2026-11-05T06:49:16Z","dns_checked_at":"2026-11-06T07:45:17.000Z","dns_since":"2026-11-05T07:44:43.000Z","findings":[{"id":"fp2lhwoipbstwil7bi3og","kind":"reported_domain","summary":"Listed by USOM","first_observed":"2026-11-05T06:44:15.212Z","first_published":"2026-11-05T07:32:58.446Z","source":"usom","source_name":"USOM"}],"url":"https://domainspoof.com/live?show=all&q=www-teb-mobilden.my-homeip.de"},{"hostname":"www.atresabz.com","first_observed":"2026-11-05T06:26:12.359Z","first_published":"2026-11-05T07:32:58.446Z","brands":[],"dns":"resolved","resolved":["87.247.174.58"],"resolved_at":"2026-11-05T06:26:26Z","dns_checked_at":"2026-11-06T07:45:17.000Z","dns_since":"2026-11-05T07:44:43.000Z","findings":[{"id":"fv4ryx5lhr4wqnjcw6hof","kind":"reported_domain","summary":"Under atresabz.com, listed by MODA (one-page scam site)","first_observed":"2026-11-05T06:26:12.359Z","first_published":"2026-11-05T07:32:58.446Z","source":"moda","source_name":"MODA","under":"atresabz.com","claim":{"category":"one-page scam site"}}],"url":"https://domainspoof.com/live?show=all&q=www.atresabz.com"},{"hostname":"www.bitget-hub.cn","first_observed":"2026-11-04T12:10:55.657Z","first_published":"2026-11-05T07:32:58.446Z","brands":[{"id":"bitget","name":"Bitget","url":"https://domainspoof.com/brands/bitget"}],"dns":"resolved","resolved":["177.211.118.185"],"resolved_at":"2026-11-06T07:45:17Z","dns_checked_at":"2026-11-06T07:45:17.000Z","dns_since":"2026-11-05T07:44:43.000Z","findings":[{"id":"fs7xhmfiob3evueueknoa","kind":"phishing_infrastructure","summary":"Resolved to 177.211.118.185, where reported phishing was found in the 48 hours before","first_observed":"2026-11-04T12:10:55.657Z","first_published":"2026-11-05T07:32:58.446Z","address":"177.211.118.185","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/bitget"},{"hostname":"www.bitgetsupport.site","first_observed":"2026-11-05T07:05:46.517Z","first_published":"2026-11-05T07:32:58.446Z","brands":[{"id":"bitget","name":"Bitget","url":"https://domainspoof.com/brands/bitget"}],"dns":"resolved","resolved":["2.57.91.91"],"resolved_at":"2026-11-06T07:45:17Z","dns_checked_at":"2026-11-06T07:45:17.000Z","dns_since":"2026-11-05T07:44:43.000Z","findings":[{"id":"fno4etfvzptoyem35krnv","kind":"phishing_infrastructure","summary":"Resolved to 2.57.91.91, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T07:05:46.517Z","first_published":"2026-11-05T07:32:58.446Z","address":"2.57.91.91","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/bitget"},{"hostname":"www.bitrefill.com-cm01-esim-gift.com","first_observed":"2026-11-05T06:26:26.235Z","first_published":"2026-11-05T07:32:58.446Z","brands":[{"id":"bitrefill","name":"Bitrefill","url":"https://domainspoof.com/brands/bitrefill"}],"dns":"resolved","resolved":["62.60.226.39"],"resolved_at":"2026-11-06T07:45:17Z","dns_checked_at":"2026-11-06T07:45:17.000Z","dns_since":"2026-11-05T07:44:43.000Z","findings":[{"id":"fbjswmpnrihoqbcppdgq3","kind":"spamhaus_drop","summary":"Resolved to 62.60.226.39 on Spamhaus DROP","first_observed":"2026-11-05T06:26:26.235Z","first_published":"2026-11-05T07:32:58.446Z","address":"62.60.226.39","list":"spamhaus_drop","list_name":"Spamhaus DROP"}],"url":"https://domainspoof.com/brands/bitrefill"},{"hostname":"www.caeser.pro","first_observed":"2026-11-05T06:31:20.800Z","first_published":"2026-11-05T07:32:58.446Z","brands":[],"dns":"resolved","resolved":["89.124.251.220"],"resolved_at":"2026-11-05T06:31:58Z","dns_checked_at":"2026-11-06T07:45:17.000Z","dns_since":"2026-11-05T07:44:43.000Z","findings":[{"id":"febpwb5hk5dum6zywboc3","kind":"reported_domain","summary":"Under caeser.pro, reported by PhishDestroy","first_observed":"2026-11-05T06:31:20.800Z","first_published":"2026-11-05T07:32:58.446Z","source":"phishdestroy","source_name":"PhishDestroy","under":"caeser.pro","source_url":"https://phishdestroy.io/domain/caeser.pro/"}],"url":"https://domainspoof.com/live?show=all&q=www.caeser.pro"},{"hostname":"www.coinmecryptos.co","first_observed":"2026-11-05T07:20:55.702Z","first_published":"2026-11-05T07:32:58.446Z","brands":[],"dns":"resolved","resolved":["45.197.237.78"],"resolved_at":"2026-11-05T07:21:04Z","dns_checked_at":"2026-11-06T07:45:17.000Z","dns_since":"2026-11-05T07:44:43.000Z","findings":[{"id":"fydq6thh3f5mgjp2kuf5s","kind":"reported_domain","summary":"Under coinmecryptos.co, listed by MetaMask","first_observed":"2026-11-05T07:20:55.702Z","first_published":"2026-11-05T07:32:58.446Z","source":"metamask","source_name":"MetaMask","under":"coinmecryptos.co"}],"url":"https://domainspoof.com/live?show=all&q=www.coinmecryptos.co"},{"hostname":"www.developer.androidloading.com","first_observed":"2026-11-05T06:51:46.838Z","first_published":"2026-11-05T07:32:58.446Z","brands":[],"dns":"resolved","resolved":["185.178.208.191"],"resolved_at":"2026-11-05T06:59:34Z","dns_checked_at":"2026-11-06T07:45:17.000Z","dns_since":"2026-11-05T07:44:43.000Z","findings":[{"id":"frzzibj5wqbo5tpxe2i6m","kind":"reported_domain","summary":"Under androidloading.com, reported by PhishDestroy","first_observed":"2026-11-05T06:51:46.838Z","first_published":"2026-11-05T07:32:58.446Z","source":"phishdestroy","source_name":"PhishDestroy","under":"androidloading.com","source_url":"https://phishdestroy.io/domain/androidloading.com/"}],"url":"https://domainspoof.com/live?show=all&q=www.developer.androidloading.com"},{"hostname":"www.ezebrashop-sale.shop","first_observed":"2026-11-05T07:15:49.227Z","first_published":"2026-11-05T07:32:58.446Z","brands":[],"dns":"resolved","resolved":["104.21.96.89","172.67.176.67"],"resolved_at":"2026-11-05T07:17:03Z","dns_checked_at":"2026-11-06T07:45:17.000Z","dns_since":"2026-11-05T07:44:43.000Z","findings":[{"id":"fi5x5ejo6nelvszhdpesz","kind":"reported_domain","summary":"Under ezebrashop-sale.shop, listed by CERT Polska","first_observed":"2026-11-05T07:15:49.227Z","first_published":"2026-11-05T07:32:58.446Z","source":"cert_polska","source_name":"CERT Polska","under":"ezebrashop-sale.shop"}],"url":"https://domainspoof.com/live?show=all&q=www.ezebrashop-sale.shop"},{"hostname":"www.feenox.com","first_observed":"2026-11-05T07:20:55.702Z","first_published":"2026-11-05T07:32:58.446Z","brands":[],"dns":"resolved","resolved":["3.33.130.190","15.197.148.33"],"resolved_at":"2026-11-05T07:21:05Z","dns_checked_at":"2026-11-06T07:45:17.000Z","dns_since":"2026-11-05T07:44:43.000Z","findings":[{"id":"ftz5oj2b7ftu3mzeajolh","kind":"reported_domain","summary":"Under feenox.com, reported by PhishDestroy","first_observed":"2026-11-05T07:20:55.702Z","first_published":"2026-11-05T07:32:58.446Z","source":"phishdestroy","source_name":"PhishDestroy","under":"feenox.com","source_url":"https://phishdestroy.io/domain/feenox.com/"}],"url":"https://domainspoof.com/live?show=all&q=www.feenox.com"},{"hostname":"www.fxmarkebard.ltd","first_observed":"2026-11-05T07:26:02.064Z","first_published":"2026-11-05T07:32:58.446Z","brands":[],"dns":"resolved","resolved":["77.37.53.96","77.37.83.229"],"resolved_at":"2026-11-05T07:26:22Z","dns_checked_at":"2026-11-06T07:45:17.000Z","dns_since":"2026-11-05T07:44:43.000Z","findings":[{"id":"ficpbrsqrvcco3fuykhgx","kind":"reported_domain","summary":"Under fxmarkebard.ltd, reported by PhishDestroy","first_observed":"2026-11-05T07:26:02.064Z","first_published":"2026-11-05T07:32:58.446Z","source":"phishdestroy","source_name":"PhishDestroy","under":"fxmarkebard.ltd","source_url":"https://phishdestroy.io/domain/fxmarkebard.ltd/"}],"url":"https://domainspoof.com/live?show=all&q=www.fxmarkebard.ltd"},{"hostname":"www.jodelkdi.click","first_observed":"2026-11-05T06:51:46.838Z","first_published":"2026-11-05T07:32:58.446Z","brands":[],"dns":"resolved","resolved":["186.246.53.244"],"resolved_at":"2026-11-05T06:59:35Z","dns_checked_at":"2026-11-06T07:45:17.000Z","dns_since":"2026-11-05T07:44:43.000Z","findings":[{"id":"fno4d2jwm7skul2ualzzt","kind":"reported_domain","summary":"Under jodelkdi.click, listed by CERT Polska","first_observed":"2026-11-05T06:51:46.838Z","first_published":"2026-11-05T07:32:58.446Z","source":"cert_polska","source_name":"CERT Polska","under":"jodelkdi.click"}],"url":"https://domainspoof.com/live?show=all&q=www.jodelkdi.click"},{"hostname":"www.karsmurel.com","first_observed":"2026-11-05T07:15:49.227Z","first_published":"2026-11-05T07:32:58.446Z","brands":[],"dns":"resolved","resolved":["198.13.158.16"],"resolved_at":"2026-11-05T07:17:04Z","dns_checked_at":"2026-11-06T07:45:17.000Z","dns_since":"2026-11-05T07:44:43.000Z","findings":[{"id":"fqxtgamb3o4pv7qmggz7m","kind":"reported_domain","summary":"Under karsmurel.com, listed by CERT Polska","first_observed":"2026-11-05T07:15:49.227Z","first_published":"2026-11-05T07:32:58.446Z","source":"cert_polska","source_name":"CERT Polska","under":"karsmurel.com"}],"url":"https://domainspoof.com/live?show=all&q=www.karsmurel.com"},{"hostname":"www.lionflame.com","first_observed":"2026-11-05T06:51:46.838Z","first_published":"2026-11-05T07:32:58.446Z","brands":[],"dns":"resolved","resolved":["13.248.169.48","76.223.54.146"],"resolved_at":"2026-11-05T06:59:35Z","dns_checked_at":"2026-11-06T07:45:17.000Z","dns_since":"2026-11-05T07:44:43.000Z","findings":[{"id":"fzqjk3omcav7n3ekeajbq","kind":"reported_domain","summary":"Under lionflame.com, listed by MetaMask","first_observed":"2026-11-05T06:51:46.838Z","first_published":"2026-11-05T07:32:58.446Z","source":"metamask","source_name":"MetaMask","under":"lionflame.com"}],"url":"https://domainspoof.com/live?show=all&q=www.lionflame.com"},{"hostname":"www.lougchenpstore.com","first_observed":"2026-11-05T07:26:02.064Z","first_published":"2026-11-05T07:32:58.446Z","brands":[],"dns":"resolved","resolved":["104.18.2.225"],"resolved_at":"2026-11-05T07:26:22Z","dns_checked_at":"2026-11-06T07:45:17.000Z","dns_since":"2026-11-05T07:44:43.000Z","findings":[{"id":"fkgsgh7sm6znhkxsmdlnx","kind":"reported_domain","summary":"Under lougchenpstore.com, listed by CERT Polska","first_observed":"2026-11-05T07:26:02.064Z","first_published":"2026-11-05T07:32:58.446Z","source":"cert_polska","source_name":"CERT Polska","under":"lougchenpstore.com"}],"url":"https://domainspoof.com/live?show=all&q=www.lougchenpstore.com"},{"hostname":"www.mapsa.com.pe","first_observed":"2026-11-05T06:56:52.654Z","first_published":"2026-11-05T07:32:58.446Z","brands":[],"dns":"resolved","resolved":["190.92.172.215"],"resolved_at":"2026-11-05T07:06:39Z","dns_checked_at":"2026-11-06T07:45:17.000Z","dns_since":"2026-11-05T07:44:43.000Z","findings":[{"id":"fr2pxbzcriqfz5mnvxyfn","kind":"reported_domain","summary":"Under mapsa.com.pe, reported by PhishDestroy","first_observed":"2026-11-05T06:56:52.654Z","first_published":"2026-11-05T07:32:58.446Z","source":"phishdestroy","source_name":"PhishDestroy","under":"mapsa.com.pe","source_url":"https://phishdestroy.io/domain/mapsa.com.pe/"}],"url":"https://domainspoof.com/live?show=all&q=www.mapsa.com.pe"},{"hostname":"www.mcc-security.com","first_observed":"2026-11-05T06:56:52.654Z","first_published":"2026-11-05T07:32:58.446Z","brands":[],"dns":"resolved","resolved":["216.150.1.193","216.150.16.193"],"resolved_at":"2026-11-05T07:06:39Z","dns_checked_at":"2026-11-06T07:45:17.000Z","dns_since":"2026-11-05T07:44:43.000Z","findings":[{"id":"fi2s5qgwapwrohonphsdr","kind":"reported_domain","summary":"Under mcc-security.com, listed by USOM","first_observed":"2026-11-05T06:56:52.654Z","first_published":"2026-11-05T07:32:58.446Z","source":"usom","source_name":"USOM","under":"mcc-security.com"}],"url":"https://domainspoof.com/live?show=all&q=www.mcc-security.com"},{"hostname":"www.metamask.us","first_observed":"2026-11-05T07:10:42.285Z","first_published":"2026-11-05T07:32:58.446Z","brands":[{"id":"metamask","name":"MetaMask","url":"https://domainspoof.com/brands/metamask"}],"dns":"resolved","resolved":["13.248.169.48","76.223.54.146"],"resolved_at":"2026-11-05T07:14:07Z","dns_checked_at":"2026-11-06T07:45:17.000Z","dns_since":"2026-11-05T07:44:43.000Z","findings":[{"id":"fiiu62ordhc33glabkotm","kind":"reported_domain","summary":"Under metamask.us, listed by MetaMask","first_observed":"2026-11-05T07:10:42.285Z","first_published":"2026-11-05T07:32:58.446Z","source":"metamask","source_name":"MetaMask","under":"metamask.us"}],"url":"https://domainspoof.com/brands/metamask"},{"hostname":"www.nghotaigbo.org","first_observed":"2026-11-05T06:51:46.838Z","first_published":"2026-11-05T07:32:58.446Z","brands":[],"dns":"resolved","resolved":["13.248.213.45","76.223.67.189"],"resolved_at":"2026-11-05T06:59:35Z","dns_checked_at":"2026-11-06T07:45:17.000Z","dns_since":"2026-11-05T07:44:43.000Z","findings":[{"id":"f6glncfzqdshkhtawarau","kind":"reported_domain","summary":"Under nghotaigbo.org, listed by CERT Polska","first_observed":"2026-11-05T06:51:46.838Z","first_published":"2026-11-05T07:32:58.446Z","source":"cert_polska","source_name":"CERT Polska","under":"nghotaigbo.org"}],"url":"https://domainspoof.com/live?show=all&q=www.nghotaigbo.org"},{"hostname":"www.pay-bitrefill.com-cm01-esim-gift.com","first_observed":"2026-11-05T06:26:26.401Z","first_published":"2026-11-05T07:32:58.446Z","brands":[{"id":"bitrefill","name":"Bitrefill","url":"https://domainspoof.com/brands/bitrefill"}],"dns":"resolved","resolved":["62.60.226.39"],"resolved_at":"2026-11-06T07:45:17Z","dns_checked_at":"2026-11-06T07:45:17.000Z","dns_since":"2026-11-05T07:44:43.000Z","findings":[{"id":"fozk4tfqngyc6dm6ilvaq","kind":"spamhaus_drop","summary":"Resolved to 62.60.226.39 on Spamhaus DROP","first_observed":"2026-11-05T06:26:26.401Z","first_published":"2026-11-05T07:32:58.446Z","address":"62.60.226.39","list":"spamhaus_drop","list_name":"Spamhaus DROP"}],"url":"https://domainspoof.com/brands/bitrefill"},{"hostname":"www.pepurelaunch.live","first_observed":"2026-11-05T06:21:30.781Z","first_published":"2026-11-05T07:32:58.446Z","brands":[],"dns":"resolved","resolved":["64.29.17.65","216.198.79.65"],"resolved_at":"2026-11-05T06:21:49Z","dns_checked_at":"2026-11-06T07:45:17.000Z","dns_since":"2026-11-05T07:44:43.000Z","findings":[{"id":"fstibimm6wninmlwso7yf","kind":"reported_domain","summary":"Under pepurelaunch.live, listed by MetaMask","first_observed":"2026-11-05T06:21:30.781Z","first_published":"2026-11-05T07:32:58.446Z","source":"metamask","source_name":"MetaMask","under":"pepurelaunch.live"}],"url":"https://domainspoof.com/live?show=all&q=www.pepurelaunch.live"},{"hostname":"www.pissei2026vip.com","first_observed":"2026-11-05T07:26:02.064Z","first_published":"2026-11-05T07:32:58.446Z","brands":[],"dns":"resolved","resolved":["104.17.177.238"],"resolved_at":"2026-11-05T07:26:22Z","dns_checked_at":"2026-11-06T07:45:17.000Z","dns_since":"2026-11-05T07:44:43.000Z","findings":[{"id":"f47jbt2fpiuy3dhz75vyn","kind":"reported_domain","summary":"Under pissei2026vip.com, listed by CERT Polska","first_observed":"2026-11-05T07:26:02.064Z","first_published":"2026-11-05T07:32:58.446Z","source":"cert_polska","source_name":"CERT Polska","under":"pissei2026vip.com"}],"url":"https://domainspoof.com/live?show=all&q=www.pissei2026vip.com"},{"hostname":"www.quanelavor.com","first_observed":"2026-11-05T07:15:49.227Z","first_published":"2026-11-05T07:32:58.446Z","brands":[],"dns":"resolved","resolved":["198.13.158.16"],"resolved_at":"2026-11-05T07:17:04Z","dns_checked_at":"2026-11-06T07:45:17.000Z","dns_since":"2026-11-05T07:44:43.000Z","findings":[{"id":"fniyygavuiwoc6pfge627","kind":"reported_domain","summary":"Under quanelavor.com, listed by CERT Polska","first_observed":"2026-11-05T07:15:49.227Z","first_published":"2026-11-05T07:32:58.446Z","source":"cert_polska","source_name":"CERT Polska","under":"quanelavor.com"}],"url":"https://domainspoof.com/live?show=all&q=www.quanelavor.com"},{"hostname":"www.random.curvedao.xyz","first_observed":"2026-11-05T06:31:20.800Z","first_published":"2026-11-05T07:32:58.446Z","brands":[],"dns":"resolved","resolved":["162.4.84.255"],"resolved_at":"2026-11-05T06:31:58Z","dns_checked_at":"2026-11-06T07:45:17.000Z","dns_since":"2026-11-05T07:44:43.000Z","findings":[{"id":"fcprvjvwoxciqza3l745x","kind":"reported_domain","summary":"Under curvedao.xyz, listed by MetaMask","first_observed":"2026-11-05T06:31:20.800Z","first_published":"2026-11-05T07:32:58.446Z","source":"metamask","source_name":"MetaMask","under":"curvedao.xyz"}],"url":"https://domainspoof.com/live?show=all&q=www.random.curvedao.xyz"},{"hostname":"www.roofreplacement.app","first_observed":"2026-11-05T07:05:34.225Z","first_published":"2026-11-05T07:32:58.446Z","brands":[],"dns":"resolved","resolved":["199.16.172.126","199.16.173.229"],"resolved_at":"2026-11-05T07:05:46Z","dns_checked_at":"2026-11-06T07:45:17.000Z","dns_since":"2026-11-05T07:44:43.000Z","findings":[{"id":"fa5pn2valdeuecgck7kas","kind":"reported_domain","summary":"Under roofreplacement.app, reported by PhishDestroy","first_observed":"2026-11-05T07:05:34.225Z","first_published":"2026-11-05T07:32:58.446Z","source":"phishdestroy","source_name":"PhishDestroy","under":"roofreplacement.app","source_url":"https://phishdestroy.io/domain/roofreplacement.app/"}],"url":"https://domainspoof.com/live?show=all&q=www.roofreplacement.app"},{"hostname":"www.synerzy.pro","first_observed":"2026-11-05T06:56:52.654Z","first_published":"2026-11-05T07:32:58.446Z","brands":[],"dns":"resolved","resolved":["13.248.213.45","76.223.67.189"],"resolved_at":"2026-11-05T07:06:41Z","dns_checked_at":"2026-11-06T07:45:17.000Z","dns_since":"2026-11-05T07:44:43.000Z","findings":[{"id":"fqvg7pn2i6d5532tj32uq","kind":"reported_domain","summary":"Under synerzy.pro, listed by CERT Polska","first_observed":"2026-11-05T06:56:52.654Z","first_published":"2026-11-05T07:32:58.446Z","source":"cert_polska","source_name":"CERT Polska","under":"synerzy.pro"}],"url":"https://domainspoof.com/live?show=all&q=www.synerzy.pro"},{"hostname":"www.verification-binance.com","first_observed":"2026-11-05T07:05:46.624Z","first_published":"2026-11-05T07:32:58.446Z","brands":[{"id":"binance","name":"Binance","url":"https://domainspoof.com/brands/binance"}],"dns":"resolved","resolved":["2.57.91.91"],"resolved_at":"2026-11-06T07:45:17Z","dns_checked_at":"2026-11-06T07:45:17.000Z","dns_since":"2026-11-05T07:44:43.000Z","findings":[{"id":"f4zm6kriyfc6ezsjzvgsy","kind":"phishing_infrastructure","summary":"Resolved to 2.57.91.91, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T07:05:46.624Z","first_published":"2026-11-05T07:32:58.446Z","address":"2.57.91.91","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/binance"},{"hostname":"xunliy.shop","first_observed":"2026-11-05T07:20:55.702Z","first_published":"2026-11-05T07:32:58.446Z","brands":[],"dns":"resolved","resolved":["104.21.73.47","172.67.140.150"],"resolved_at":"2026-11-06T04:43:33Z","dns_checked_at":"2026-11-06T07:45:17.000Z","dns_since":"2026-11-05T07:44:43.000Z","findings":[{"id":"flt547hdxbnpfcfzsjxvm","kind":"reported_domain","summary":"Listed by NPA 165 (information services)","first_observed":"2026-11-05T07:20:55.702Z","first_published":"2026-11-05T07:32:58.446Z","source":"npa","source_name":"NPA 165","claim":{"category":"information services"}}],"url":"https://domainspoof.com/live?show=all&q=xunliy.shop"},{"hostname":"yottalith.com","first_observed":"2026-11-05T07:10:42.285Z","first_published":"2026-11-05T07:32:58.446Z","brands":[],"dns":"resolved","resolved":["104.21.56.248","172.67.157.58"],"resolved_at":"2026-11-05T07:14:08Z","dns_checked_at":"2026-11-06T07:45:17.000Z","dns_since":"2026-11-05T07:44:43.000Z","findings":[{"id":"faswmno4xfid2p3mk62xw","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T07:10:42.285Z","first_published":"2026-11-05T07:32:58.446Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=yottalith.com"},{"hostname":"yuanyouh.xyz","first_observed":"2026-11-05T07:26:02.064Z","first_published":"2026-11-05T07:32:58.446Z","brands":[],"dns":"resolved","resolved":["104.21.63.197","172.67.149.238"],"resolved_at":"2026-11-05T07:26:23Z","dns_checked_at":"2026-11-06T07:45:17.000Z","dns_since":"2026-11-05T07:44:43.000Z","findings":[{"id":"f7xhpcsnmvjlrycek7feb","kind":"reported_domain","summary":"Listed by NPA 165 (finance and insurance)","first_observed":"2026-11-05T07:26:02.064Z","first_published":"2026-11-05T07:32:58.446Z","source":"npa","source_name":"NPA 165","claim":{"category":"finance and insurance"}}],"url":"https://domainspoof.com/live?show=all&q=yuanyouh.xyz"},{"hostname":"aci.dog","first_observed":"2026-11-05T06:26:58.000Z","first_published":"2026-11-05T06:26:58.000Z","brands":[{"id":"aci","name":"ACI","url":"https://domainspoof.com/brands/aci"}],"dns":"resolved","resolved":["192.250.229.30"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of aci.it (same name, other ending), resolved to 192.250.229.30, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T06:26:58.000Z","first_published":"2026-11-05T06:26:58.000Z","of":"aci.it","spelling":"tld","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"192.250.229.30","flagged_at":"2026-11-05T06:26:58Z"}]}],"url":"https://domainspoof.com/brands/aci"},{"hostname":"anz.scot","first_observed":"2026-11-05T06:26:58.000Z","first_published":"2026-11-05T06:26:58.000Z","brands":[{"id":"anz","name":"ANZ","url":"https://domainspoof.com/brands/anz"}],"dns":"resolved","resolved":["85.233.160.22"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of anz.com.au (same name, other ending), resolved to 85.233.160.22, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T06:26:58.000Z","first_published":"2026-11-05T06:26:58.000Z","of":"anz.com.au","spelling":"tld","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"85.233.160.22","flagged_at":"2026-11-05T06:26:58Z"}]}],"url":"https://domainspoof.com/brands/anz"},{"hostname":"aol.net.ua","first_observed":"2026-11-05T06:26:58.000Z","first_published":"2026-11-05T06:26:58.000Z","brands":[{"id":"aol","name":"AOL","url":"https://domainspoof.com/brands/aol"}],"dns":"resolved","resolved":["91.206.200.104","2001:67c:2070:c868::1"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of aol.com (same name, other ending), resolved to 91.206.200.104, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T06:26:58.000Z","first_published":"2026-11-05T06:26:58.000Z","of":"aol.com","spelling":"tld","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"91.206.200.104","flagged_at":"2026-11-05T06:26:58Z"}]}],"url":"https://domainspoof.com/brands/aol"},{"hostname":"att.shopping","first_observed":"2026-11-05T06:26:58.000Z","first_published":"2026-11-05T06:26:58.000Z","brands":[{"id":"at-and-t","name":"AT&T","url":"https://domainspoof.com/brands/at-and-t"}],"dns":"resolved","resolved":["66.22.16.138"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of att.com (same name, other ending), resolved to 66.22.16.138, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T06:26:58.000Z","first_published":"2026-11-05T06:26:58.000Z","of":"att.com","spelling":"tld","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"66.22.16.138","flagged_at":"2026-11-05T06:26:58Z"}]}],"url":"https://domainspoof.com/brands/at-and-t"},{"hostname":"bde.au","first_observed":"2026-11-05T06:26:58.000Z","first_published":"2026-11-05T06:26:58.000Z","brands":[{"id":"banco-de-espana","name":"Banco de España","url":"https://domainspoof.com/brands/banco-de-espana"}],"dns":"resolved","resolved":["134.199.165.199"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of bde.es (same name, other ending), resolved to 134.199.165.199, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T06:26:58.000Z","first_published":"2026-11-05T06:26:58.000Z","of":"bde.es","spelling":"tld","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"134.199.165.199","flagged_at":"2026-11-05T06:26:58Z"}]}],"url":"https://domainspoof.com/brands/banco-de-espana"},{"hostname":"brt.bayern","first_observed":"2026-11-05T06:26:58.000Z","first_published":"2026-11-05T06:26:58.000Z","brands":[{"id":"brt","name":"BRT","url":"https://domainspoof.com/brands/brt"}],"dns":"resolved","resolved":["217.160.0.221","2001:8d8:100f:f000::27e"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of brt.it (same name, other ending), resolved to 217.160.0.221, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T06:26:58.000Z","first_published":"2026-11-05T06:26:58.000Z","of":"brt.it","spelling":"tld","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"217.160.0.221","flagged_at":"2026-11-05T06:26:58Z"}]}],"url":"https://domainspoof.com/brands/brt"},{"hostname":"changenow.cz","first_observed":"2026-11-05T06:26:58.000Z","first_published":"2026-11-05T06:26:58.000Z","brands":[{"id":"changenow","name":"ChangeNOW","url":"https://domainspoof.com/brands/changenow"}],"dns":"resolved","resolved":["127.0.0.1"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of changenow.io (same name, other ending), listed by MetaMask","first_observed":"2026-11-05T06:26:58.000Z","first_published":"2026-11-05T06:26:58.000Z","of":"changenow.io","spelling":"tld","found_by":"dns_sweep","listings":[{"kind":"reported","source":"metamask","source_name":"MetaMask","host":"changenow.cz","flagged_at":"2026-11-05T06:26:58Z"}]}],"url":"https://domainspoof.com/brands/changenow"},{"hostname":"cht.com.au","first_observed":"2026-11-05T06:26:58.000Z","first_published":"2026-11-05T06:26:58.000Z","brands":[{"id":"chunghwa-telecom","name":"Chunghwa Telecom","url":"https://domainspoof.com/brands/chunghwa-telecom"}],"dns":"resolved","resolved":["89.31.143.90"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of cht.com.tw (same name, other ending), resolved to 89.31.143.90, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T06:26:58.000Z","first_published":"2026-11-05T06:26:58.000Z","of":"cht.com.tw","spelling":"tld","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"89.31.143.90","flagged_at":"2026-11-05T06:26:58Z"}]}],"url":"https://domainspoof.com/brands/chunghwa-telecom"},{"hostname":"cht.com.co","first_observed":"2026-11-05T06:26:58.000Z","first_published":"2026-11-05T06:26:58.000Z","brands":[{"id":"chunghwa-telecom","name":"Chunghwa Telecom","url":"https://domainspoof.com/brands/chunghwa-telecom"}],"dns":"resolved","resolved":["89.31.143.90"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of cht.com.tw (same name, other ending), resolved to 89.31.143.90, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T06:26:58.000Z","first_published":"2026-11-05T06:26:58.000Z","of":"cht.com.tw","spelling":"tld","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"89.31.143.90","flagged_at":"2026-11-05T06:26:58Z"}]}],"url":"https://domainspoof.com/brands/chunghwa-telecom"},{"hostname":"cht.pl","first_observed":"2026-11-05T06:26:58.000Z","first_published":"2026-11-05T06:26:58.000Z","brands":[{"id":"chunghwa-telecom","name":"Chunghwa Telecom","url":"https://domainspoof.com/brands/chunghwa-telecom"}],"dns":"resolved","resolved":["89.31.143.90"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of cht.com.tw (same name, other ending), resolved to 89.31.143.90, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T06:26:58.000Z","first_published":"2026-11-05T06:26:58.000Z","of":"cht.com.tw","spelling":"tld","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"89.31.143.90","flagged_at":"2026-11-05T06:26:58Z"}]}],"url":"https://domainspoof.com/brands/chunghwa-telecom"},{"hostname":"etsy.cat","first_observed":"2026-11-05T06:26:58.000Z","first_published":"2026-11-05T06:26:58.000Z","brands":[{"id":"etsy","name":"Etsy","url":"https://domainspoof.com/brands/etsy"}],"dns":"resolved","resolved":["81.88.63.46"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of etsy.com (same name, other ending), resolved to 81.88.63.46, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T06:26:58.000Z","first_published":"2026-11-05T06:26:58.000Z","of":"etsy.com","spelling":"tld","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"81.88.63.46","flagged_at":"2026-11-05T06:26:58Z"}]}],"url":"https://domainspoof.com/brands/etsy"},{"hostname":"evn.com.au","first_observed":"2026-11-05T06:26:58.000Z","first_published":"2026-11-05T06:26:58.000Z","brands":[{"id":"evn","name":"EVN (Vietnam Electricity)","url":"https://domainspoof.com/brands/evn"}],"dns":"resolved","resolved":["134.199.165.199"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of evn.com.vn (same name, other ending), resolved to 134.199.165.199, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T06:26:58.000Z","first_published":"2026-11-05T06:26:58.000Z","of":"evn.com.vn","spelling":"tld","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"134.199.165.199","flagged_at":"2026-11-05T06:26:58Z"}]}],"url":"https://domainspoof.com/brands/evn"},{"hostname":"fastrak.com.au","first_observed":"2026-11-05T06:26:58.000Z","first_published":"2026-11-05T06:26:58.000Z","brands":[{"id":"fastrak","name":"FasTrak","url":"https://domainspoof.com/brands/fastrak"}],"dns":"resolved","resolved":["134.199.165.199"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of fastrak.org (same name, other ending), resolved to 134.199.165.199, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T06:26:58.000Z","first_published":"2026-11-05T06:26:58.000Z","of":"fastrak.org","spelling":"tld","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"134.199.165.199","flagged_at":"2026-11-05T06:26:58Z"}]}],"url":"https://domainspoof.com/brands/fastrak"},{"hostname":"fineco.com.au","first_observed":"2026-11-05T06:26:58.000Z","first_published":"2026-11-05T06:26:58.000Z","brands":[{"id":"finecobank","name":"FinecoBank","url":"https://domainspoof.com/brands/finecobank"}],"dns":"resolved","resolved":["27.124.125.171","103.67.235.120"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of fineco.it (same name, other ending), resolved to 103.67.235.120, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T06:26:58.000Z","first_published":"2026-11-05T06:26:58.000Z","of":"fineco.it","spelling":"tld","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"103.67.235.120","flagged_at":"2026-11-05T06:26:58Z"}]}],"url":"https://domainspoof.com/brands/finecobank"},{"hostname":"mitid.ltd","first_observed":"2026-11-05T06:26:58.000Z","first_published":"2026-11-05T06:26:58.000Z","brands":[{"id":"mitid","name":"MitID","url":"https://domainspoof.com/brands/mitid"}],"dns":"resolved","resolved":["185.53.179.136"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of mitid.dk (same name, other ending), listed by CERT Polska","first_observed":"2026-11-05T06:26:58.000Z","first_published":"2026-11-05T06:26:58.000Z","of":"mitid.dk","spelling":"tld","found_by":"dns_sweep","listings":[{"kind":"reported","source":"cert_polska","source_name":"CERT Polska","host":"appleservice.mitid.ltd","flagged_at":"2026-11-05T06:26:58Z"}]}],"url":"https://domainspoof.com/brands/mitid"},{"hostname":"myetherwallet.cm","first_observed":"2026-11-05T06:26:58.000Z","first_published":"2026-11-05T06:26:58.000Z","brands":[{"id":"myetherwallet","name":"MyEtherWallet","url":"https://domainspoof.com/brands/myetherwallet"}],"dns":"resolved","resolved":["104.247.81.99"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of myetherwallet.com (same name, other ending), listed by MetaMask","first_observed":"2026-11-05T06:26:58.000Z","first_published":"2026-11-05T06:26:58.000Z","of":"myetherwallet.com","spelling":"tld","found_by":"dns_sweep","listings":[{"kind":"reported","source":"metamask","source_name":"MetaMask","host":"myetherwallet.cm","flagged_at":"2026-11-05T06:26:58Z"}]}],"url":"https://domainspoof.com/brands/myetherwallet"},{"hostname":"ondo.jp","first_observed":"2026-11-05T06:26:58.000Z","first_published":"2026-11-05T06:26:58.000Z","brands":[{"id":"ondo-finance","name":"Ondo Finance","url":"https://domainspoof.com/brands/ondo-finance"}],"dns":"resolved","resolved":["150.95.255.38"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of ondo.finance (same name, other ending), resolved to 150.95.255.38, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T06:26:58.000Z","first_published":"2026-11-05T06:26:58.000Z","of":"ondo.finance","spelling":"tld","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"150.95.255.38","flagged_at":"2026-11-05T06:26:58Z"}]}],"url":"https://domainspoof.com/brands/ondo-finance"},{"hostname":"opensea.ro","first_observed":"2026-11-05T06:26:58.000Z","first_published":"2026-11-05T06:26:58.000Z","brands":[{"id":"opensea","name":"OpenSea","url":"https://domainspoof.com/brands/opensea"}],"dns":"resolved","resolved":["104.247.81.99"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of opensea.io (same name, other ending), listed by MetaMask","first_observed":"2026-11-05T06:26:58.000Z","first_published":"2026-11-05T06:26:58.000Z","of":"opensea.io","spelling":"tld","found_by":"dns_sweep","listings":[{"kind":"reported","source":"metamask","source_name":"MetaMask","host":"api.opensea.ro","flagged_at":"2026-11-05T06:26:58Z"}]}],"url":"https://domainspoof.com/brands/opensea"},{"hostname":"polymarket.com.lc","first_observed":"2026-11-05T06:26:58.000Z","first_published":"2026-11-05T06:26:58.000Z","brands":[{"id":"polymarket","name":"Polymarket","url":"https://domainspoof.com/brands/polymarket"}],"dns":"resolved","resolved":["185.53.179.128"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of polymarket.com (same name, other ending), listed by MetaMask","first_observed":"2026-11-05T06:26:58.000Z","first_published":"2026-11-05T06:26:58.000Z","of":"polymarket.com","spelling":"tld","found_by":"dns_sweep","listings":[{"kind":"reported","source":"metamask","source_name":"MetaMask","host":"polymarket.com.lc","flagged_at":"2026-11-05T06:26:58Z"}]}],"url":"https://domainspoof.com/brands/polymarket"},{"hostname":"protonvpn.rest","first_observed":"2026-11-05T06:26:58.000Z","first_published":"2026-11-05T06:26:58.000Z","brands":[{"id":"proton","name":"Proton","url":"https://domainspoof.com/brands/proton"}],"dns":"resolved","resolved":["172.232.24.161","172.232.24.235","172.234.25.42"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of protonvpn.com (same name, other ending), resolved to 172.232.24.161, where reported phishing was found in the 48 hours before, and resolved to 172.232.24.235, where reported phishing was found in the 48 hours before, and resolved to 172.234.25.42, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T06:26:58.000Z","first_published":"2026-11-05T06:26:58.000Z","of":"protonvpn.com","spelling":"tld","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"172.232.24.161","flagged_at":"2026-11-05T06:26:58Z"},{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"172.232.24.235","flagged_at":"2026-11-05T06:26:58Z"},{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"172.234.25.42","flagged_at":"2026-11-05T06:26:58Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/proton"},{"hostname":"ripple.mom","first_observed":"2026-11-05T06:26:58.000Z","first_published":"2026-11-05T06:26:58.000Z","brands":[{"id":"ripple","name":"Ripple (XRP)","url":"https://domainspoof.com/brands/ripple"}],"dns":"resolved","resolved":["150.95.255.38"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of ripple.com (same name, other ending), resolved to 150.95.255.38, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T06:26:58.000Z","first_published":"2026-11-05T06:26:58.000Z","of":"ripple.com","spelling":"tld","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"150.95.255.38","flagged_at":"2026-11-05T06:26:58Z"}]}],"url":"https://domainspoof.com/brands/ripple"},{"hostname":"safepal.com.gr","first_observed":"2026-11-05T06:26:58.000Z","first_published":"2026-11-05T06:26:58.000Z","brands":[{"id":"safepal","name":"SafePal","url":"https://domainspoof.com/brands/safepal"}],"dns":"resolved","resolved":["185.53.179.136"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of safepal.com (same name, other ending), listed by MetaMask, and reported by PhishDestroy","first_observed":"2026-11-05T06:26:58.000Z","first_published":"2026-11-05T06:26:58.000Z","of":"safepal.com","spelling":"tld","found_by":"dns_sweep","listings":[{"kind":"reported","source":"metamask","source_name":"MetaMask","host":"safepal.com.gr","flagged_at":"2026-11-05T06:26:58Z"},{"kind":"reported","source":"phishdestroy","source_name":"PhishDestroy","host":"safepal.com.gr","flagged_at":"2026-11-05T06:26:58Z"}]}],"url":"https://domainspoof.com/brands/safepal"},{"hostname":"sf-express.pl","first_observed":"2026-11-05T06:26:58.000Z","first_published":"2026-11-05T06:26:58.000Z","brands":[{"id":"sf-express","name":"SF Express","url":"https://domainspoof.com/brands/sf-express"}],"dns":"resolved","resolved":["185.253.212.22"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of sf-express.com (same name, other ending), resolved to 185.253.212.22, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T06:26:58.000Z","first_published":"2026-11-05T06:26:58.000Z","of":"sf-express.com","spelling":"tld","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"185.253.212.22","flagged_at":"2026-11-05T06:26:58Z"}]}],"url":"https://domainspoof.com/brands/sf-express"},{"hostname":"sfr.com.pl","first_observed":"2026-11-05T06:26:58.000Z","first_published":"2026-11-05T06:26:58.000Z","brands":[{"id":"sfr","name":"SFR","url":"https://domainspoof.com/brands/sfr"}],"dns":"resolved","resolved":["85.128.128.104"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of sfr.fr (same name, other ending), resolved to 85.128.128.104, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T06:26:58.000Z","first_published":"2026-11-05T06:26:58.000Z","of":"sfr.fr","spelling":"tld","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"85.128.128.104","flagged_at":"2026-11-05T06:26:58Z"}]}],"url":"https://domainspoof.com/brands/sfr"},{"hostname":"tokenpocket.cn","first_observed":"2026-11-05T06:26:58.000Z","first_published":"2026-11-05T06:26:58.000Z","brands":[{"id":"tokenpocket","name":"TokenPocket","url":"https://domainspoof.com/brands/tokenpocket"}],"dns":"resolved","resolved":["111.20.31.80"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of tokenpocket.pro (same name, other ending), reported by PhishDestroy, and resolved to 111.20.31.80, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T06:26:58.000Z","first_published":"2026-11-05T06:26:58.000Z","of":"tokenpocket.pro","spelling":"tld","found_by":"dns_sweep","listings":[{"kind":"reported","source":"phishdestroy","source_name":"PhishDestroy","host":"tokenpocket.cn","flagged_at":"2026-11-05T06:26:58Z"},{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"111.20.31.80","flagged_at":"2026-11-05T06:26:58Z"}]}],"url":"https://domainspoof.com/brands/tokenpocket"},{"hostname":"virtuals.au","first_observed":"2026-11-05T06:26:58.000Z","first_published":"2026-11-05T06:26:58.000Z","brands":[{"id":"virtuals-protocol","name":"Virtuals Protocol","url":"https://domainspoof.com/brands/virtuals-protocol"}],"dns":"resolved","resolved":["134.199.165.199"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of virtuals.io (same name, other ending), resolved to 134.199.165.199, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T06:26:58.000Z","first_published":"2026-11-05T06:26:58.000Z","of":"virtuals.io","spelling":"tld","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"134.199.165.199","flagged_at":"2026-11-05T06:26:58Z"}]}],"url":"https://domainspoof.com/brands/virtuals-protocol"},{"hostname":"122-derivexyz.pages.dev","first_observed":"2026-11-05T05:26:07.294Z","first_published":"2026-11-05T06:25:55.462Z","brands":[],"dns":"resolved","resolved":["172.66.44.190","172.66.47.66"],"resolved_at":"2026-11-05T05:26:11Z","dns_checked_at":"2026-11-06T06:34:26.000Z","dns_since":"2026-11-05T06:34:01.000Z","findings":[{"id":"f6dpuocxh3ukayez6phmj","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T05:26:07.294Z","first_published":"2026-11-05T06:25:55.462Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=122-derivexyz.pages.dev"},{"hostname":"1drop-naha.com","first_observed":"2026-11-05T05:51:38.050Z","first_published":"2026-11-05T06:25:55.462Z","brands":[],"dns":"resolved","resolved":["104.21.16.139","172.67.212.243"],"resolved_at":"2026-11-05T05:51:50Z","dns_checked_at":"2026-11-06T06:34:26.000Z","dns_since":"2026-11-05T06:34:01.000Z","findings":[{"id":"fb6j4xdxsy737ytj52oqd","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T05:51:38.050Z","first_published":"2026-11-05T06:25:55.462Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=1drop-naha.com"},{"hostname":"1morphoairdrop.pages.dev","first_observed":"2026-11-05T05:51:47.152Z","first_published":"2026-11-05T06:25:55.462Z","brands":[],"dns":"not_found","resolved":[],"resolved_at":"2026-11-05T05:56:21Z","dns_checked_at":"2026-11-06T06:34:26.000Z","dns_since":"2026-11-05T06:34:01.000Z","findings":[{"id":"ffijva6t5xubi23ncm2bu","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T05:51:47.152Z","first_published":"2026-11-05T06:25:55.462Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=1morphoairdrop.pages.dev"},{"hostname":"2711.sberbankmobile.ru","first_observed":"2026-11-05T06:10:07.215Z","first_published":"2026-11-05T06:25:55.462Z","brands":[{"id":"sberbank","name":"Sberbank","url":"https://domainspoof.com/brands/sberbank"}],"dns":"resolved","resolved":["87.242.79.60"],"resolved_at":"2026-11-06T06:34:26Z","dns_checked_at":"2026-11-06T06:34:26.000Z","dns_since":"2026-11-05T06:34:01.000Z","findings":[{"id":"fo52gu6ztzyh3fhkeks6i","kind":"phishing_infrastructure","summary":"Resolved to 87.242.79.60, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T06:10:07.215Z","first_published":"2026-11-05T06:25:55.462Z","address":"87.242.79.60","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/sberbank"},{"hostname":"315280-binance.com","first_observed":"2026-11-05T05:36:18.175Z","first_published":"2026-11-05T06:25:55.462Z","brands":[{"id":"binance","name":"Binance","url":"https://domainspoof.com/brands/binance"}],"dns":"resolved","resolved":["104.21.64.156","172.67.186.170","2606:4700:3036::ac43:baaa","2606:4700:3037::6815:409c"],"resolved_at":"2026-11-05T05:36:22Z","dns_checked_at":"2026-11-06T06:34:26.000Z","dns_since":"2026-11-05T06:34:01.000Z","findings":[{"id":"ftvmedxdfbbddqs6445gv","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T05:36:18.175Z","first_published":"2026-11-05T06:25:55.462Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/brands/binance"},{"hostname":"abigayleshopping.store","first_observed":"2026-11-05T06:15:51.123Z","first_published":"2026-11-05T06:25:55.462Z","brands":[],"dns":"no_address","resolved":[],"resolved_at":"2026-11-05T06:15:58Z","dns_checked_at":"2026-11-06T06:34:26.000Z","dns_since":"2026-11-05T06:34:01.000Z","findings":[{"id":"fndqgw6vuwzwyesruxiay","kind":"reported_domain","summary":"Listed by NPA 165 (e-commerce)","first_observed":"2026-11-05T06:15:51.123Z","first_published":"2026-11-05T06:25:55.462Z","source":"npa","source_name":"NPA 165","claim":{"category":"e-commerce"}}],"url":"https://domainspoof.com/live?show=all&q=abigayleshopping.store"},{"hostname":"addisonjustatest.ascsonoway.com","first_observed":"2026-11-05T06:15:51.123Z","first_published":"2026-11-05T06:25:55.462Z","brands":[],"dns":"resolved","resolved":["104.21.47.88","172.67.145.253"],"resolved_at":"2026-11-05T06:16:21Z","dns_checked_at":"2026-11-06T06:34:26.000Z","dns_since":"2026-11-05T06:34:01.000Z","findings":[{"id":"fvn6ga4fnwn7i26utg5gg","kind":"reported_domain","summary":"Under ascsonoway.com, listed by MetaMask","first_observed":"2026-11-05T06:15:51.123Z","first_published":"2026-11-05T06:25:55.462Z","source":"metamask","source_name":"MetaMask","under":"ascsonoway.com"}],"url":"https://domainspoof.com/live?show=all&q=addisonjustatest.ascsonoway.com"},{"hostname":"ade.sivdiogroup.com","first_observed":"2026-11-05T05:41:24.661Z","first_published":"2026-11-05T06:25:55.462Z","brands":[],"dns":"resolved","resolved":["103.10.78.60"],"resolved_at":"2026-11-05T05:41:36Z","dns_checked_at":"2026-11-06T06:34:26.000Z","dns_since":"2026-11-05T06:34:01.000Z","findings":[{"id":"fi7a3ex2dhnlj4rrbcdkh","kind":"reported_domain","summary":"Under sivdiogroup.com, reported by PhishDestroy","first_observed":"2026-11-05T05:41:24.661Z","first_published":"2026-11-05T06:25:55.462Z","source":"phishdestroy","source_name":"PhishDestroy","under":"sivdiogroup.com","source_url":"https://phishdestroy.io/domain/sivdiogroup.com/"}],"url":"https://domainspoof.com/live?show=all&q=ade.sivdiogroup.com"},{"hostname":"adminapi2.gxpex.net","first_observed":"2026-11-05T05:31:12.995Z","first_published":"2026-11-05T06:25:55.462Z","brands":[],"dns":"resolved","resolved":["104.21.55.250","172.67.174.210"],"resolved_at":"2026-11-05T05:34:05Z","dns_checked_at":"2026-11-06T06:34:26.000Z","dns_since":"2026-11-05T06:34:01.000Z","findings":[{"id":"fj2heobh6mmkztdqsxfab","kind":"reported_domain","summary":"Under gxpex.net, listed by MetaMask","first_observed":"2026-11-05T05:31:12.995Z","first_published":"2026-11-05T06:25:55.462Z","source":"metamask","source_name":"MetaMask","under":"gxpex.net"}],"url":"https://domainspoof.com/live?show=all&q=adminapi2.gxpex.net"},{"hostname":"adv-trzrbridge-en.pages.dev","first_observed":"2026-11-05T05:46:31.914Z","first_published":"2026-11-05T06:25:55.462Z","brands":[],"dns":"resolved","resolved":["172.66.44.156","172.66.47.100"],"resolved_at":"2026-11-05T05:46:42Z","dns_checked_at":"2026-11-06T06:34:26.000Z","dns_since":"2026-11-05T06:34:01.000Z","findings":[{"id":"fsm3yeue7pkdsqzh2f2b7","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T05:46:31.914Z","first_published":"2026-11-05T06:25:55.462Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=adv-trzrbridge-en.pages.dev"},{"hostname":"airtm5.com.co","first_observed":"2026-11-05T05:51:47.152Z","first_published":"2026-11-05T06:25:55.462Z","brands":[],"dns":"no_address","resolved":[],"resolved_at":"2026-11-05T17:24:26Z","dns_checked_at":"2026-11-06T06:34:26.000Z","dns_since":"2026-11-05T06:34:01.000Z","findings":[{"id":"fi2i75ai6dn4q2eizwktw","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T05:51:47.152Z","first_published":"2026-11-05T06:25:55.462Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=airtm5.com.co"},{"hostname":"akyatirim-tr.cfd","first_observed":"2026-11-05T05:13:29.774Z","first_published":"2026-11-05T06:25:55.462Z","brands":[],"dns":"resolved","resolved":["104.21.23.54","172.67.209.55","2606:4700:3034::6815:1736","2606:4700:3037::ac43:d137"],"resolved_at":"2026-11-05T05:19:35Z","dns_checked_at":"2026-11-06T06:34:26.000Z","dns_since":"2026-11-05T06:34:01.000Z","findings":[{"id":"f62bvpsnqyc4ubucsxtj4","kind":"reported_domain","summary":"Listed by USOM","first_observed":"2026-11-05T05:13:29.774Z","first_published":"2026-11-05T06:25:55.462Z","source":"usom","source_name":"USOM"}],"url":"https://domainspoof.com/live?show=all&q=akyatirim-tr.cfd"},{"hostname":"an-1hu.pages.dev","first_observed":"2026-11-05T05:56:51.678Z","first_published":"2026-11-05T06:25:55.462Z","brands":[],"dns":"resolved","resolved":["172.66.44.252","172.66.47.4"],"resolved_at":"2026-11-05T06:03:18Z","dns_checked_at":"2026-11-06T06:34:26.000Z","dns_since":"2026-11-05T06:34:01.000Z","findings":[{"id":"fdzd6vq6ryzfrce2id6gk","kind":"reported_domain","summary":"Listed by NPA 165 (information services)","first_observed":"2026-11-05T05:56:51.678Z","first_published":"2026-11-05T06:25:55.462Z","source":"npa","source_name":"NPA 165","claim":{"category":"information services"}}],"url":"https://domainspoof.com/live?show=all&q=an-1hu.pages.dev"},{"hostname":"api.hmp.hemmenwellness.com","first_observed":"2026-11-05T05:31:12.995Z","first_published":"2026-11-05T06:25:55.462Z","brands":[],"dns":"resolved","resolved":["139.196.84.235"],"resolved_at":"2026-11-05T05:34:05Z","dns_checked_at":"2026-11-06T06:34:26.000Z","dns_since":"2026-11-05T06:34:01.000Z","findings":[{"id":"feealrgpxfhfdfgitj7hr","kind":"reported_domain","summary":"Under hemmenwellness.com, reported by PhishDestroy","first_observed":"2026-11-05T05:31:12.995Z","first_published":"2026-11-05T06:25:55.462Z","source":"phishdestroy","source_name":"PhishDestroy","under":"hemmenwellness.com","source_url":"https://phishdestroy.io/domain/hemmenwellness.com/"}],"url":"https://domainspoof.com/live?show=all&q=api.hmp.hemmenwellness.com"},{"hostname":"api2.gxpex.net","first_observed":"2026-11-05T05:31:12.995Z","first_published":"2026-11-05T06:25:55.462Z","brands":[],"dns":"resolved","resolved":["104.21.55.250","172.67.174.210"],"resolved_at":"2026-11-05T05:34:05Z","dns_checked_at":"2026-11-06T06:34:26.000Z","dns_since":"2026-11-05T06:34:01.000Z","findings":[{"id":"fltj2uknb7ta2wxpwby5u","kind":"reported_domain","summary":"Under gxpex.net, listed by MetaMask","first_observed":"2026-11-05T05:31:12.995Z","first_published":"2026-11-05T06:25:55.462Z","source":"metamask","source_name":"MetaMask","under":"gxpex.net"}],"url":"https://domainspoof.com/live?show=all&q=api2.gxpex.net"},{"hostname":"apkmod.com.co","first_observed":"2026-11-05T05:36:18.175Z","first_published":"2026-11-05T06:25:55.462Z","brands":[],"dns":"resolved","resolved":["104.21.5.36","172.67.132.223"],"resolved_at":"2026-11-05T05:36:26Z","dns_checked_at":"2026-11-06T06:34:26.000Z","dns_since":"2026-11-05T06:34:01.000Z","findings":[{"id":"fpmhzm7mteraet35qrpee","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T05:36:18.175Z","first_published":"2026-11-05T06:25:55.462Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/apkmod.com.co/"}],"url":"https://domainspoof.com/live?show=all&q=apkmod.com.co"},{"hostname":"app327.pharmacomlabs.com","first_observed":"2026-11-05T05:51:38.050Z","first_published":"2026-11-05T06:25:55.462Z","brands":[],"dns":"resolved","resolved":["144.76.83.124"],"resolved_at":"2026-11-05T05:53:51Z","dns_checked_at":"2026-11-06T06:34:26.000Z","dns_since":"2026-11-05T06:34:01.000Z","findings":[{"id":"fkvrrvcd3w47s642abyeo","kind":"reported_domain","summary":"Under pharmacomlabs.com, reported by PhishDestroy","first_observed":"2026-11-05T05:51:38.050Z","first_published":"2026-11-05T06:25:55.462Z","source":"phishdestroy","source_name":"PhishDestroy","under":"pharmacomlabs.com","source_url":"https://phishdestroy.io/domain/pharmacomlabs.com/"}],"url":"https://domainspoof.com/live?show=all&q=app327.pharmacomlabs.com"},{"hostname":"apyx-fi.club","first_observed":"2026-11-05T05:41:24.661Z","first_published":"2026-11-05T06:25:55.462Z","brands":[],"dns":"resolved","resolved":["104.21.67.82","172.67.218.169"],"resolved_at":"2026-11-05T05:41:36Z","dns_checked_at":"2026-11-06T06:34:26.000Z","dns_since":"2026-11-05T06:34:01.000Z","findings":[{"id":"fh3xeavcsoaiu7gybuklj","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T05:41:24.661Z","first_published":"2026-11-05T06:25:55.462Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=apyx-fi.club"},{"hostname":"arcnetwork.lat","first_observed":"2026-11-05T05:41:24.661Z","first_published":"2026-11-05T06:25:55.462Z","brands":[],"dns":"resolved","resolved":["104.21.68.65","172.67.191.38"],"resolved_at":"2026-11-05T05:41:36Z","dns_checked_at":"2026-11-06T06:34:26.000Z","dns_since":"2026-11-05T06:34:01.000Z","findings":[{"id":"fipl77nwq7f6xvsiicdqd","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T05:41:24.661Z","first_published":"2026-11-05T06:25:55.462Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=arcnetwork.lat"},{"hostname":"arielshopping.store","first_observed":"2026-11-05T06:10:43.458Z","first_published":"2026-11-05T06:25:55.462Z","brands":[],"dns":"no_address","resolved":[],"resolved_at":"2026-11-05T06:10:53Z","dns_checked_at":"2026-11-06T06:34:26.000Z","dns_since":"2026-11-05T06:34:01.000Z","findings":[{"id":"fn6vkay7fgegpfybjlw3l","kind":"reported_domain","summary":"Listed by NPA 165 (e-commerce)","first_observed":"2026-11-05T06:10:43.458Z","first_published":"2026-11-05T06:25:55.462Z","source":"npa","source_name":"NPA 165","claim":{"category":"e-commerce"}}],"url":"https://domainspoof.com/live?show=all&q=arielshopping.store"},{"hostname":"ashenfangironclad.shop","first_observed":"2026-11-05T06:00:58.096Z","first_published":"2026-11-05T06:25:55.462Z","brands":[],"dns":"resolved","resolved":["104.21.34.228","172.67.165.241"],"resolved_at":"2026-11-05T06:10:10Z","dns_checked_at":"2026-11-06T06:34:26.000Z","dns_since":"2026-11-05T06:34:01.000Z","findings":[{"id":"frzzolb26v4ktbce52skz","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T06:00:58.096Z","first_published":"2026-11-05T06:25:55.462Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/ashenfangironclad.shop/"}],"url":"https://domainspoof.com/live?show=all&q=ashenfangironclad.shop"},{"hostname":"astranova.life","first_observed":"2026-11-05T05:46:31.914Z","first_published":"2026-11-05T06:25:55.462Z","brands":[],"dns":"resolved","resolved":["13.248.213.45","76.223.67.189"],"resolved_at":"2026-11-05T05:46:42Z","dns_checked_at":"2026-11-06T06:34:26.000Z","dns_since":"2026-11-05T06:34:01.000Z","findings":[{"id":"f4jxsdnhzwz67rqedtd2m","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T05:46:31.914Z","first_published":"2026-11-05T06:25:55.462Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=astranova.life"},{"hostname":"audaxcore.digital","first_observed":"2026-11-05T06:18:02.076Z","first_published":"2026-11-05T06:25:55.462Z","brands":[],"dns":"resolved","resolved":["104.21.86.74","172.67.216.145","2606:4700:3033::ac43:d891","2606:4700:3036::6815:564a"],"resolved_at":"2026-11-05T06:24:42Z","dns_checked_at":"2026-11-06T06:34:26.000Z","dns_since":"2026-11-05T06:34:01.000Z","findings":[{"id":"fnzh5axrut7fvfrh6tncs","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T06:18:02.076Z","first_published":"2026-11-05T06:25:55.462Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=audaxcore.digital"},{"hostname":"autoconfig.digiedlab.com","first_observed":"2026-11-05T06:05:33.823Z","first_published":"2026-11-05T06:25:55.462Z","brands":[],"dns":"resolved","resolved":["109.238.86.5"],"resolved_at":"2026-11-05T06:05:47Z","dns_checked_at":"2026-11-06T06:34:26.000Z","dns_since":"2026-11-05T06:34:01.000Z","findings":[{"id":"f34fa2v63fm7qx6uqce6l","kind":"reported_domain","summary":"Under digiedlab.com, listed by CERT Polska","first_observed":"2026-11-05T06:05:33.823Z","first_published":"2026-11-05T06:25:55.462Z","source":"cert_polska","source_name":"CERT Polska","under":"digiedlab.com"}],"url":"https://domainspoof.com/live?show=all&q=autoconfig.digiedlab.com"},{"hostname":"autoconfig.postinode.com","first_observed":"2026-11-05T05:21:00.805Z","first_published":"2026-11-05T06:25:55.462Z","brands":[],"dns":"resolved","resolved":["65.109.30.165"],"resolved_at":"2026-11-05T05:21:09Z","dns_checked_at":"2026-11-06T06:34:26.000Z","dns_since":"2026-11-05T06:34:01.000Z","findings":[{"id":"f4wstsouo6guks67ibger","kind":"reported_domain","summary":"Under postinode.com, reported by PhishDestroy","first_observed":"2026-11-05T05:21:00.805Z","first_published":"2026-11-05T06:25:55.462Z","source":"phishdestroy","source_name":"PhishDestroy","under":"postinode.com","source_url":"https://phishdestroy.io/domain/postinode.com/"}],"url":"https://domainspoof.com/live?show=all&q=autoconfig.postinode.com"},{"hostname":"autodiscover.postinode.com","first_observed":"2026-11-05T05:21:00.805Z","first_published":"2026-11-05T06:25:55.462Z","brands":[],"dns":"resolved","resolved":["65.109.30.165"],"resolved_at":"2026-11-05T05:21:09Z","dns_checked_at":"2026-11-06T06:34:26.000Z","dns_since":"2026-11-05T06:34:01.000Z","findings":[{"id":"f6bddegts3uaxail2rsti","kind":"reported_domain","summary":"Under postinode.com, reported by PhishDestroy","first_observed":"2026-11-05T05:21:00.805Z","first_published":"2026-11-05T06:25:55.462Z","source":"phishdestroy","source_name":"PhishDestroy","under":"postinode.com","source_url":"https://phishdestroy.io/domain/postinode.com/"}],"url":"https://domainspoof.com/live?show=all&q=autodiscover.postinode.com"},{"hostname":"avito.blablacar.login-yandex.qiwbpchh9caly81t.rhxyvcq9vvts2ld9.r.mail.leankoala.com","first_observed":"2026-11-05T05:36:27.535Z","first_published":"2026-11-05T06:25:55.462Z","brands":[{"id":"avito","name":"Avito","url":"https://domainspoof.com/brands/avito"},{"id":"blablacar","name":"BlaBlaCar","url":"https://domainspoof.com/brands/blablacar"},{"id":"yandex","name":"Yandex","url":"https://domainspoof.com/brands/yandex"}],"dns":"resolved","resolved":["172.246.243.65"],"resolved_at":"2026-11-06T06:34:26Z","dns_checked_at":"2026-11-06T06:34:26.000Z","dns_since":"2026-11-05T06:34:01.000Z","findings":[{"id":"fsbqzrb3etawzl2x2f4xg","kind":"phishing_infrastructure","summary":"Resolved to 172.246.243.65, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T05:36:27.535Z","first_published":"2026-11-05T06:25:55.462Z","address":"172.246.243.65","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/avito"},{"hostname":"bitrefill.com-cl01-esim-gift.com","first_observed":"2026-11-05T06:04:09.330Z","first_published":"2026-11-05T06:25:55.462Z","brands":[{"id":"bitrefill","name":"Bitrefill","url":"https://domainspoof.com/brands/bitrefill"}],"dns":"resolved","resolved":["62.60.226.39"],"resolved_at":"2026-11-06T06:34:26Z","dns_checked_at":"2026-11-06T06:34:26.000Z","dns_since":"2026-11-05T06:34:01.000Z","findings":[{"id":"f6le5tdmr7jup5o3onb6t","kind":"spamhaus_drop","summary":"Resolved to 62.60.226.39 on Spamhaus DROP","first_observed":"2026-11-05T06:04:09.330Z","first_published":"2026-11-05T06:25:55.462Z","address":"62.60.226.39","list":"spamhaus_drop","list_name":"Spamhaus DROP"}],"url":"https://domainspoof.com/brands/bitrefill"},{"hostname":"bluepay.info","first_observed":"2026-11-05T05:51:47.152Z","first_published":"2026-11-05T06:25:55.462Z","brands":[],"dns":"no_address","resolved":["104.21.57.37","172.67.188.240","2606:4700:3030::ac43:bcf0","2606:4700:3033::6815:3925"],"resolved_at":"2026-11-05T05:56:21Z","dns_checked_at":"2026-11-06T14:44:24.000Z","findings":[{"id":"ftaus7imijy65jeltied5","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T05:51:47.152Z","first_published":"2026-11-05T06:25:55.462Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=bluepay.info"},{"hostname":"bot.exchange.taxi","first_observed":"2026-11-05T05:26:07.294Z","first_published":"2026-11-05T06:25:55.462Z","brands":[],"dns":"resolved","resolved":["186.2.175.41"],"resolved_at":"2026-11-05T05:30:22Z","dns_checked_at":"2026-11-06T06:34:26.000Z","dns_since":"2026-11-05T06:34:01.000Z","findings":[{"id":"fwtn6ony4iu27d2mtxcmo","kind":"reported_domain","summary":"Under exchange.taxi, listed by MetaMask","first_observed":"2026-11-05T05:26:07.294Z","first_published":"2026-11-05T06:25:55.462Z","source":"metamask","source_name":"MetaMask","under":"exchange.taxi"}],"url":"https://domainspoof.com/live?show=all&q=bot.exchange.taxi"},{"hostname":"btcboxweb.com","first_observed":"2026-11-05T06:05:33.823Z","first_published":"2026-11-05T06:25:55.462Z","brands":[{"id":"btcbox","name":"BTCBOX","url":"https://domainspoof.com/brands/btcbox"}],"dns":"no_address","resolved":[],"resolved_at":"2026-11-06T06:09:42Z","dns_checked_at":"2026-11-06T06:34:26.000Z","dns_since":"2026-11-05T06:34:01.000Z","findings":[{"id":"flfr3sihi6rrcagv2epsk","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T06:05:33.823Z","first_published":"2026-11-05T06:25:55.462Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/brands/btcbox"},{"hostname":"bybit-exchange.online","first_observed":"2026-11-05T05:41:24.661Z","first_published":"2026-11-05T06:25:55.462Z","brands":[{"id":"bybit","name":"Bybit","url":"https://domainspoof.com/brands/bybit"}],"dns":"resolved","resolved":["45.33.83.100","45.79.167.180","66.175.209.179","96.126.111.165","2600:3c03::f03c:95ff:fe00:29ca","2600:3c03::f03c:95ff:fe91:5d52","2600:3c03::f03c:95ff:feed:4d4f","2600:3c03::f03c:95ff:feed:cf2a"],"resolved_at":"2026-11-05T05:41:40Z","dns_checked_at":"2026-11-06T06:34:26.000Z","dns_since":"2026-11-05T06:34:01.000Z","findings":[{"id":"ftp5jeuzl2raiyn57jumd","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T05:41:24.661Z","first_published":"2026-11-05T06:25:55.462Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/brands/bybit"},{"hostname":"bybitexchange.online","first_observed":"2026-11-05T05:41:24.661Z","first_published":"2026-11-05T06:25:55.462Z","brands":[{"id":"bybit","name":"Bybit","url":"https://domainspoof.com/brands/bybit"}],"dns":"resolved","resolved":["45.33.83.100","45.79.167.180","66.175.209.179","96.126.111.165","2600:3c03::f03c:95ff:fe00:29ca","2600:3c03::f03c:95ff:fe91:5d52","2600:3c03::f03c:95ff:feed:4d4f","2600:3c03::f03c:95ff:feed:cf2a"],"resolved_at":"2026-11-05T05:41:40Z","dns_checked_at":"2026-11-06T06:34:26.000Z","dns_since":"2026-11-05T06:34:01.000Z","findings":[{"id":"fkrp3cqs6nalcj3qvo2gn","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T05:41:24.661Z","first_published":"2026-11-05T06:25:55.462Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/brands/bybit"},{"hostname":"bykoheu.com","first_observed":"2026-11-05T06:10:43.458Z","first_published":"2026-11-05T06:25:55.462Z","brands":[],"dns":"resolved","resolved":["104.21.68.147","172.67.196.46"],"resolved_at":"2026-11-05T06:13:18Z","dns_checked_at":"2026-11-06T06:34:26.000Z","dns_since":"2026-11-05T06:34:01.000Z","findings":[{"id":"fklymq2ozdztuo375xb4o","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T06:10:43.458Z","first_published":"2026-11-05T06:25:55.462Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=bykoheu.com"},{"hostname":"capitalbondinvfund.com","first_observed":"2026-11-05T06:00:58.096Z","first_published":"2026-11-05T06:25:55.462Z","brands":[],"dns":"resolved","resolved":["192.211.49.150"],"resolved_at":"2026-11-05T06:10:19Z","dns_checked_at":"2026-11-06T06:34:26.000Z","dns_since":"2026-11-05T06:34:01.000Z","findings":[{"id":"ftvnjz4pvdsfzkkc2gfw5","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T06:00:58.096Z","first_published":"2026-11-05T06:25:55.462Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/capitalbondinvfund.com/"}],"url":"https://domainspoof.com/live?show=all&q=capitalbondinvfund.com"},{"hostname":"carrephysi.store","first_observed":"2026-11-05T06:18:02.076Z","first_published":"2026-11-05T06:25:55.462Z","brands":[],"dns":"not_found","resolved":["104.21.11.174","172.67.166.179","2606:4700:3035::6815:bae","2606:4700:3036::ac43:a6b3"],"resolved_at":"2026-11-05T06:24:42Z","dns_checked_at":"2026-11-06T14:44:24.000Z","findings":[{"id":"f5onbj6xbs5omu4fvlwmn","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T06:18:02.076Z","first_published":"2026-11-05T06:25:55.462Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=carrephysi.store"},{"hostname":"chassebk.com","first_observed":"2026-11-05T05:31:12.995Z","first_published":"2026-11-05T06:25:55.462Z","brands":[],"dns":"resolved","resolved":["209.172.2.20"],"resolved_at":"2026-11-05T05:34:51Z","dns_checked_at":"2026-11-06T06:34:26.000Z","dns_since":"2026-11-05T06:34:01.000Z","findings":[{"id":"f7cjveqgnuz7z4o7c3ljh","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T05:31:12.995Z","first_published":"2026-11-05T06:25:55.462Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/chassebk.com/"}],"url":"https://domainspoof.com/live?show=all&q=chassebk.com"},{"hostname":"cieloinvernaza.net","first_observed":"2026-11-05T05:31:12.995Z","first_published":"2026-11-05T06:25:55.462Z","brands":[],"dns":"resolved","resolved":["104.21.37.3","172.67.201.252"],"resolved_at":"2026-11-05T05:34:51Z","dns_checked_at":"2026-11-06T06:34:26.000Z","dns_since":"2026-11-05T06:34:01.000Z","findings":[{"id":"fi5rpjhoog7rmonfogfsj","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T05:31:12.995Z","first_published":"2026-11-05T06:25:55.462Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=cieloinvernaza.net"},{"hostname":"colourhandstech.com","first_observed":"2026-11-05T05:46:31.914Z","first_published":"2026-11-05T06:25:55.462Z","brands":[],"dns":"resolved","resolved":["162.251.80.223"],"resolved_at":"2026-11-05T05:49:46Z","dns_checked_at":"2026-11-06T06:34:26.000Z","dns_since":"2026-11-05T06:34:01.000Z","findings":[{"id":"famtb5w2foxzt6jko5ctu","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T05:46:31.914Z","first_published":"2026-11-05T06:25:55.462Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/colourhandstech.com/"}],"url":"https://domainspoof.com/live?show=all&q=colourhandstech.com"},{"hostname":"covrislumb.store","first_observed":"2026-11-05T06:18:02.076Z","first_published":"2026-11-05T06:25:55.462Z","brands":[],"dns":"not_found","resolved":["104.21.12.113","172.67.152.68","2606:4700:3034::ac43:9844","2606:4700:3035::6815:c71"],"resolved_at":"2026-11-05T06:24:42Z","dns_checked_at":"2026-11-06T14:44:24.000Z","findings":[{"id":"fez2yx6jh7ck3qlgnglv2","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T06:18:02.076Z","first_published":"2026-11-05T06:25:55.462Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=covrislumb.store"},{"hostname":"cpanel.kishvandnews.ir","first_observed":"2026-11-05T05:51:38.050Z","first_published":"2026-11-05T06:25:55.462Z","brands":[],"dns":"resolved","resolved":["89.39.208.14"],"resolved_at":"2026-11-05T05:55:14Z","dns_checked_at":"2026-11-06T06:34:26.000Z","dns_since":"2026-11-05T06:34:01.000Z","findings":[{"id":"feipfpk2uw3hynicu6th6","kind":"reported_domain","summary":"Under kishvandnews.ir, reported by PhishDestroy","first_observed":"2026-11-05T05:51:38.050Z","first_published":"2026-11-05T06:25:55.462Z","source":"phishdestroy","source_name":"PhishDestroy","under":"kishvandnews.ir","source_url":"https://phishdestroy.io/domain/kishvandnews.ir/"}],"url":"https://domainspoof.com/live?show=all&q=cpanel.kishvandnews.ir"},{"hostname":"cpcalendars.kishvandnews.ir","first_observed":"2026-11-05T05:51:38.050Z","first_published":"2026-11-05T06:25:55.462Z","brands":[],"dns":"resolved","resolved":["89.39.208.14"],"resolved_at":"2026-11-05T05:55:14Z","dns_checked_at":"2026-11-06T06:34:26.000Z","dns_since":"2026-11-05T06:34:01.000Z","findings":[{"id":"fpa236zmw26hzgysyu6u4","kind":"reported_domain","summary":"Under kishvandnews.ir, reported by PhishDestroy","first_observed":"2026-11-05T05:51:38.050Z","first_published":"2026-11-05T06:25:55.462Z","source":"phishdestroy","source_name":"PhishDestroy","under":"kishvandnews.ir","source_url":"https://phishdestroy.io/domain/kishvandnews.ir/"}],"url":"https://domainspoof.com/live?show=all&q=cpcalendars.kishvandnews.ir"},{"hostname":"cpcontacts.kishvandnews.ir","first_observed":"2026-11-05T05:51:38.050Z","first_published":"2026-11-05T06:25:55.462Z","brands":[],"dns":"resolved","resolved":["89.39.208.14"],"resolved_at":"2026-11-05T05:55:14Z","dns_checked_at":"2026-11-06T06:34:26.000Z","dns_since":"2026-11-05T06:34:01.000Z","findings":[{"id":"fvxctqbxxdkehcbrdcyqo","kind":"reported_domain","summary":"Under kishvandnews.ir, reported by PhishDestroy","first_observed":"2026-11-05T05:51:38.050Z","first_published":"2026-11-05T06:25:55.462Z","source":"phishdestroy","source_name":"PhishDestroy","under":"kishvandnews.ir","source_url":"https://phishdestroy.io/domain/kishvandnews.ir/"}],"url":"https://domainspoof.com/live?show=all&q=cpcontacts.kishvandnews.ir"},{"hostname":"creteportwaysuisse-fr.live","first_observed":"2026-11-05T05:41:24.661Z","first_published":"2026-11-05T06:25:55.462Z","brands":[],"dns":"resolved","resolved":["104.21.29.140","172.67.149.64"],"resolved_at":"2026-11-05T05:41:46Z","dns_checked_at":"2026-11-06T06:34:26.000Z","dns_since":"2026-11-05T06:34:01.000Z","findings":[{"id":"fcjdvanqtbuoijflmuxhz","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T05:41:24.661Z","first_published":"2026-11-05T06:25:55.462Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=creteportwaysuisse-fr.live"},{"hostname":"dev-site.topwealthtrading.com","first_observed":"2026-11-05T05:16:22.661Z","first_published":"2026-11-05T06:25:55.462Z","brands":[],"dns":"resolved","resolved":["66.226.149.216"],"resolved_at":"2026-11-05T05:23:58Z","dns_checked_at":"2026-11-06T06:34:26.000Z","dns_since":"2026-11-05T06:34:01.000Z","findings":[{"id":"fr5dlzz2qzhr6rzuqdzpd","kind":"reported_domain","summary":"Under topwealthtrading.com, reported by PhishDestroy","first_observed":"2026-11-05T05:16:22.661Z","first_published":"2026-11-05T06:25:55.462Z","source":"phishdestroy","source_name":"PhishDestroy","under":"topwealthtrading.com","source_url":"https://phishdestroy.io/domain/topwealthtrading.com/"}],"url":"https://domainspoof.com/live?show=all&q=dev-site.topwealthtrading.com"},{"hostname":"dev.api.hmp.hemmenwellness.com","first_observed":"2026-11-05T05:31:12.995Z","first_published":"2026-11-05T06:25:55.462Z","brands":[],"dns":"resolved","resolved":["139.196.84.235"],"resolved_at":"2026-11-05T05:35:04Z","dns_checked_at":"2026-11-06T06:34:26.000Z","dns_since":"2026-11-05T06:34:01.000Z","findings":[{"id":"fz43yfyxxc2lumccgvkkw","kind":"reported_domain","summary":"Under hemmenwellness.com, reported by PhishDestroy","first_observed":"2026-11-05T05:31:12.995Z","first_published":"2026-11-05T06:25:55.462Z","source":"phishdestroy","source_name":"PhishDestroy","under":"hemmenwellness.com","source_url":"https://phishdestroy.io/domain/hemmenwellness.com/"}],"url":"https://domainspoof.com/live?show=all&q=dev.api.hmp.hemmenwellness.com"},{"hostname":"dev.hmp.hemmenwellness.com","first_observed":"2026-11-05T05:31:12.995Z","first_published":"2026-11-05T06:25:55.462Z","brands":[],"dns":"resolved","resolved":["139.196.84.235"],"resolved_at":"2026-11-05T05:35:04Z","dns_checked_at":"2026-11-06T06:34:26.000Z","dns_since":"2026-11-05T06:34:01.000Z","findings":[{"id":"fzftgki4wupo3f7ymel6o","kind":"reported_domain","summary":"Under hemmenwellness.com, reported by PhishDestroy","first_observed":"2026-11-05T05:31:12.995Z","first_published":"2026-11-05T06:25:55.462Z","source":"phishdestroy","source_name":"PhishDestroy","under":"hemmenwellness.com","source_url":"https://phishdestroy.io/domain/hemmenwellness.com/"}],"url":"https://domainspoof.com/live?show=all&q=dev.hmp.hemmenwellness.com"},{"hostname":"dex-flaredapp.pages.dev","first_observed":"2026-11-05T05:51:47.152Z","first_published":"2026-11-05T06:25:55.462Z","brands":[],"dns":"resolved","resolved":["172.66.44.171","172.66.47.85","2606:4700:310c::ac42:2cab","2606:4700:310c::ac42:2f55"],"resolved_at":"2026-11-05T05:56:21Z","dns_checked_at":"2026-11-06T06:34:26.000Z","dns_since":"2026-11-05T06:34:01.000Z","findings":[{"id":"ftgp6l66pq4xepgdol34z","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T05:51:47.152Z","first_published":"2026-11-05T06:25:55.462Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=dex-flaredapp.pages.dev"},{"hostname":"disalscomp.store","first_observed":"2026-11-05T06:18:02.076Z","first_published":"2026-11-05T06:25:55.462Z","brands":[],"dns":"not_found","resolved":["104.21.61.144","172.67.211.51","2606:4700:3033::6815:3d90","2606:4700:3035::ac43:d333"],"resolved_at":"2026-11-05T06:24:42Z","dns_checked_at":"2026-11-06T14:44:24.000Z","findings":[{"id":"fsqcdzsmg2sonsizsetwa","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T06:18:02.076Z","first_published":"2026-11-05T06:25:55.462Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=disalscomp.store"},{"hostname":"disvamangi.store","first_observed":"2026-11-05T06:18:02.076Z","first_published":"2026-11-05T06:25:55.462Z","brands":[],"dns":"resolved","resolved":["104.21.7.209","172.67.188.6","2606:4700:3033::6815:7d1","2606:4700:3033::ac43:bc06"],"resolved_at":"2026-11-05T06:24:42Z","dns_checked_at":"2026-11-06T06:34:26.000Z","dns_since":"2026-11-05T06:34:01.000Z","findings":[{"id":"fbpaxlasuzxl3bcltqwu3","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T06:18:02.076Z","first_published":"2026-11-05T06:25:55.462Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=disvamangi.store"},{"hostname":"dlsgems.online","first_observed":"2026-11-05T05:21:00.805Z","first_published":"2026-11-05T06:25:55.462Z","brands":[],"dns":"resolved","resolved":["35.157.26.135","63.176.8.218"],"resolved_at":"2026-11-05T05:27:57Z","dns_checked_at":"2026-11-06T06:34:26.000Z","dns_since":"2026-11-05T06:34:01.000Z","findings":[{"id":"fauka444yozkhoeckg5wu","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T05:21:00.805Z","first_published":"2026-11-05T06:25:55.462Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/dlsgems.online/"}],"url":"https://domainspoof.com/live?show=all&q=dlsgems.online"},{"hostname":"docs.idealcornbi.com","first_observed":"2026-11-05T05:21:00.805Z","first_published":"2026-11-05T06:25:55.462Z","brands":[],"dns":"resolved","resolved":["209.99.191.28"],"resolved_at":"2026-11-05T05:27:57Z","dns_checked_at":"2026-11-06T06:34:26.000Z","dns_since":"2026-11-05T06:34:01.000Z","findings":[{"id":"fvl23dkulvr5tjikb6lsd","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T05:21:00.805Z","first_published":"2026-11-05T06:25:55.462Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=docs.idealcornbi.com"},{"hostname":"eegjs.xyz","first_observed":"2026-11-05T06:05:33.823Z","first_published":"2026-11-05T06:25:55.462Z","brands":[],"dns":"resolved","resolved":["104.21.65.88","172.67.189.180"],"resolved_at":"2026-11-05T06:06:04Z","dns_checked_at":"2026-11-06T06:34:26.000Z","dns_since":"2026-11-05T06:34:01.000Z","findings":[{"id":"ff7kaxkdrmi4jmmpk23dq","kind":"reported_domain","summary":"Listed by NPA 165 (information services)","first_observed":"2026-11-05T06:05:33.823Z","first_published":"2026-11-05T06:25:55.462Z","source":"npa","source_name":"NPA 165","claim":{"category":"information services"}}],"url":"https://domainspoof.com/live?show=all&q=eegjs.xyz"},{"hostname":"erewafefasd12321sfdsa.cfd","first_observed":"2026-11-05T05:41:24.661Z","first_published":"2026-11-05T06:25:55.462Z","brands":[],"dns":"resolved","resolved":["104.21.33.140","172.67.145.203"],"resolved_at":"2026-11-05T05:41:46Z","dns_checked_at":"2026-11-06T06:34:26.000Z","dns_since":"2026-11-05T06:34:01.000Z","findings":[{"id":"f46b723ymn53heg54juu6","kind":"reported_domain","summary":"Listed by USOM","first_observed":"2026-11-05T05:41:24.661Z","first_published":"2026-11-05T06:25:55.462Z","source":"usom","source_name":"USOM"}],"url":"https://domainspoof.com/live?show=all&q=erewafefasd12321sfdsa.cfd"},{"hostname":"fojngk.xyz","first_observed":"2026-11-05T05:36:18.175Z","first_published":"2026-11-05T06:25:55.462Z","brands":[],"dns":"resolved","resolved":["104.21.53.201","172.67.218.123"],"resolved_at":"2026-11-05T05:44:39Z","dns_checked_at":"2026-11-06T06:34:26.000Z","dns_since":"2026-11-05T06:34:01.000Z","findings":[{"id":"f4qikhx4pxtzdtrhp24zc","kind":"reported_domain","summary":"Listed by NPA 165 (e-commerce)","first_observed":"2026-11-05T05:36:18.175Z","first_published":"2026-11-05T06:25:55.462Z","source":"npa","source_name":"NPA 165","claim":{"category":"e-commerce"}}],"url":"https://domainspoof.com/live?show=all&q=fojngk.xyz"},{"hostname":"fsfqhkx.xyz","first_observed":"2026-11-05T05:31:12.995Z","first_published":"2026-11-05T06:25:55.462Z","brands":[],"dns":"resolved","resolved":["104.21.30.115","172.67.172.224"],"resolved_at":"2026-11-05T05:35:06Z","dns_checked_at":"2026-11-06T06:34:26.000Z","dns_since":"2026-11-05T06:34:01.000Z","findings":[{"id":"ff2zvogujmyj44p2mx2br","kind":"reported_domain","summary":"Listed by NPA 165 (information services)","first_observed":"2026-11-05T05:31:12.995Z","first_published":"2026-11-05T06:25:55.462Z","source":"npa","source_name":"NPA 165","claim":{"category":"information services"}}],"url":"https://domainspoof.com/live?show=all&q=fsfqhkx.xyz"},{"hostname":"fxrp-flare.com","first_observed":"2026-11-05T05:36:18.175Z","first_published":"2026-11-05T06:25:55.462Z","brands":[],"dns":"resolved","resolved":["104.21.51.217","172.67.186.181"],"resolved_at":"2026-11-05T05:44:39Z","dns_checked_at":"2026-11-06T06:34:26.000Z","dns_since":"2026-11-05T06:34:01.000Z","findings":[{"id":"febnjprsegebe2l46phfz","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T05:36:18.175Z","first_published":"2026-11-05T06:25:55.462Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=fxrp-flare.com"},{"hostname":"get-redotpay.pages.dev","first_observed":"2026-11-05T05:51:47.152Z","first_published":"2026-11-05T06:25:55.462Z","brands":[],"dns":"resolved","resolved":["172.66.44.109","172.66.47.147","2606:4700:310c::ac42:2c6d","2606:4700:310c::ac42:2f93"],"resolved_at":"2026-11-05T05:56:21Z","dns_checked_at":"2026-11-06T06:34:26.000Z","dns_since":"2026-11-05T06:34:01.000Z","findings":[{"id":"fu7eiq3jucttgh7ehfamt","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T05:51:47.152Z","first_published":"2026-11-05T06:25:55.462Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=get-redotpay.pages.dev"},{"hostname":"giftshopping.shop","first_observed":"2026-11-05T05:21:00.805Z","first_published":"2026-11-05T06:25:55.462Z","brands":[],"dns":"no_address","resolved":[],"resolved_at":"2026-11-05T05:27:59Z","dns_checked_at":"2026-11-06T06:34:26.000Z","dns_since":"2026-11-05T06:34:01.000Z","findings":[{"id":"fuzya6de2zhy5pstqj36h","kind":"reported_domain","summary":"Listed by NPA 165 (information services)","first_observed":"2026-11-05T05:21:00.805Z","first_published":"2026-11-05T06:25:55.462Z","source":"npa","source_name":"NPA 165","claim":{"category":"information services"}}],"url":"https://domainspoof.com/live?show=all&q=giftshopping.shop"},{"hostname":"gitnexzolotrade.com","first_observed":"2026-11-05T05:51:38.050Z","first_published":"2026-11-05T06:25:55.462Z","brands":[],"dns":"resolved","resolved":["104.21.58.75","172.67.157.125"],"resolved_at":"2026-11-05T05:55:18Z","dns_checked_at":"2026-11-06T06:34:26.000Z","dns_since":"2026-11-05T06:34:01.000Z","findings":[{"id":"f4lniufxg4eqax7ivgkp5","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T05:51:38.050Z","first_published":"2026-11-05T06:25:55.462Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=gitnexzolotrade.com"},{"hostname":"hmp.hemmenwellness.com","first_observed":"2026-11-05T05:31:12.995Z","first_published":"2026-11-05T06:25:55.462Z","brands":[],"dns":"resolved","resolved":["139.196.84.235"],"resolved_at":"2026-11-05T05:35:07Z","dns_checked_at":"2026-11-06T06:34:26.000Z","dns_since":"2026-11-05T06:34:01.000Z","findings":[{"id":"frysse2avab34fhkodgs5","kind":"reported_domain","summary":"Under hemmenwellness.com, reported by PhishDestroy","first_observed":"2026-11-05T05:31:12.995Z","first_published":"2026-11-05T06:25:55.462Z","source":"phishdestroy","source_name":"PhishDestroy","under":"hemmenwellness.com","source_url":"https://phishdestroy.io/domain/hemmenwellness.com/"}],"url":"https://domainspoof.com/live?show=all&q=hmp.hemmenwellness.com"},{"hostname":"infintrex.com","first_observed":"2026-11-05T05:36:18.175Z","first_published":"2026-11-05T06:25:55.462Z","brands":[],"dns":"resolved","resolved":["104.21.5.177","172.67.133.175"],"resolved_at":"2026-11-05T05:44:41Z","dns_checked_at":"2026-11-06T06:34:26.000Z","dns_since":"2026-11-05T06:34:01.000Z","findings":[{"id":"fyktnq5rzipi73v7ntvdz","kind":"reported_domain","summary":"Listed by FSMA (fraudulent online trading platform)","first_observed":"2026-11-05T05:36:18.175Z","first_published":"2026-11-05T06:25:55.462Z","source":"fsma","source_name":"FSMA","claim":{"category":"fraudulent online trading platform"}}],"url":"https://domainspoof.com/live?show=all&q=infintrex.com"},{"hostname":"infurarpc.com","first_observed":"2026-11-05T05:21:00.805Z","first_published":"2026-11-05T06:25:55.462Z","brands":[],"dns":"resolved","resolved":["104.21.47.31","172.67.144.43"],"resolved_at":"2026-11-05T05:27:59Z","dns_checked_at":"2026-11-06T06:34:26.000Z","dns_since":"2026-11-05T06:34:01.000Z","findings":[{"id":"f7ksrbsaovu2xs3ytuq3m","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T05:21:00.805Z","first_published":"2026-11-05T06:25:55.462Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=infurarpc.com"},{"hostname":"insticocco.store","first_observed":"2026-11-05T06:18:02.076Z","first_published":"2026-11-05T06:25:55.462Z","brands":[],"dns":"no_address","resolved":["104.21.77.46","172.67.204.122","2606:4700:3031::6815:4d2e","2606:4700:3037::ac43:cc7a"],"resolved_at":"2026-11-05T06:24:42Z","dns_checked_at":"2026-11-06T14:44:24.000Z","findings":[{"id":"fqfjcwrlbooyq4c5glj6u","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T06:18:02.076Z","first_published":"2026-11-05T06:25:55.462Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=insticocco.store"},{"hostname":"inzavarrov.store","first_observed":"2026-11-05T06:18:02.076Z","first_published":"2026-11-05T06:25:55.462Z","brands":[],"dns":"no_address","resolved":["104.21.47.135","172.67.148.11","2606:4700:3034::ac43:940b","2606:4700:3036::6815:2f87"],"resolved_at":"2026-11-05T06:24:42Z","dns_checked_at":"2026-11-06T14:44:24.000Z","findings":[{"id":"fbzi3avi4ecxkqryg2upm","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T06:18:02.076Z","first_published":"2026-11-05T06:25:55.462Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=inzavarrov.store"},{"hostname":"iuisrf.beer","first_observed":"2026-11-05T05:46:31.914Z","first_published":"2026-11-05T06:25:55.462Z","brands":[],"dns":"resolved","resolved":["104.21.13.6","172.67.154.20"],"resolved_at":"2026-11-05T05:49:54Z","dns_checked_at":"2026-11-06T06:34:26.000Z","dns_since":"2026-11-05T06:34:01.000Z","findings":[{"id":"fcx76yzrbxogjkatwv4z7","kind":"reported_domain","summary":"Listed by NPA 165 (e-commerce)","first_observed":"2026-11-05T05:46:31.914Z","first_published":"2026-11-05T06:25:55.462Z","source":"npa","source_name":"NPA 165","claim":{"category":"e-commerce"}}],"url":"https://domainspoof.com/live?show=all&q=iuisrf.beer"},{"hostname":"jup-webchain.world","first_observed":"2026-11-05T06:15:51.123Z","first_published":"2026-11-05T06:25:55.462Z","brands":[],"dns":"resolved","resolved":["104.21.56.164","172.67.187.43"],"resolved_at":"2026-11-05T06:16:42Z","dns_checked_at":"2026-11-06T06:34:26.000Z","dns_since":"2026-11-05T06:34:01.000Z","findings":[{"id":"fwvadjdp4hdc7aszmetke","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T06:15:51.123Z","first_published":"2026-11-05T06:25:55.462Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/jup-webchain.world/"}],"url":"https://domainspoof.com/live?show=all&q=jup-webchain.world"},{"hostname":"jurno.click","first_observed":"2026-11-05T06:05:33.823Z","first_published":"2026-11-05T06:25:55.462Z","brands":[],"dns":"resolved","resolved":["104.21.25.165","172.67.134.99"],"resolved_at":"2026-11-05T06:06:06Z","dns_checked_at":"2026-11-06T06:34:26.000Z","dns_since":"2026-11-05T06:34:01.000Z","findings":[{"id":"ftpoirr4gqzcgfsqalkxq","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T06:05:33.823Z","first_published":"2026-11-05T06:25:55.462Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=jurno.click"},{"hostname":"kindtiq.xyz","first_observed":"2026-11-05T05:51:47.152Z","first_published":"2026-11-05T06:25:55.462Z","brands":[],"dns":"not_found","resolved":["104.21.35.99","172.67.217.71","2606:4700:3031::6815:2363","2606:4700:3035::ac43:d947"],"resolved_at":"2026-11-05T05:56:21Z","dns_checked_at":"2026-11-06T14:44:24.000Z","findings":[{"id":"fnk2otdhxjduvrzsm6kez","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T05:51:47.152Z","first_published":"2026-11-05T06:25:55.462Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=kindtiq.xyz"},{"hostname":"kishvandnews.ir","first_observed":"2026-11-05T05:51:38.050Z","first_published":"2026-11-05T06:25:55.462Z","brands":[],"dns":"resolved","resolved":["89.39.208.14"],"resolved_at":"2026-11-05T05:55:27Z","dns_checked_at":"2026-11-06T06:34:26.000Z","dns_since":"2026-11-05T06:34:01.000Z","findings":[{"id":"foa2twh2ftacda4pdjckq","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T05:51:38.050Z","first_published":"2026-11-05T06:25:55.462Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/kishvandnews.ir/"}],"url":"https://domainspoof.com/live?show=all&q=kishvandnews.ir"},{"hostname":"krakeneeee.pages.dev","first_observed":"2026-11-05T06:15:51.123Z","first_published":"2026-11-05T06:25:55.462Z","brands":[],"dns":"resolved","resolved":["172.66.44.96","172.66.47.160"],"resolved_at":"2026-11-05T06:16:42Z","dns_checked_at":"2026-11-06T06:34:26.000Z","dns_since":"2026-11-05T06:34:01.000Z","findings":[{"id":"fx4jr5z4mebz4n22gluax","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T06:15:51.123Z","first_published":"2026-11-05T06:25:55.462Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=krakeneeee.pages.dev"},{"hostname":"krama.se","first_observed":"2026-11-05T05:56:51.678Z","first_published":"2026-11-05T06:25:55.462Z","brands":[],"dns":"resolved","resolved":["77.53.110.54"],"resolved_at":"2026-11-05T06:05:24Z","dns_checked_at":"2026-11-06T06:34:26.000Z","dns_since":"2026-11-05T06:34:01.000Z","findings":[{"id":"fb6pgkhj7sbbkdnw6hstw","kind":"reported_domain","summary":"Reported by PhishTank","first_observed":"2026-11-05T05:56:51.678Z","first_published":"2026-11-05T06:25:55.462Z","source":"phishtank","source_name":"PhishTank","source_url":"https://phishtank.org/phish_detail.php?phish_id=9553126"}],"url":"https://domainspoof.com/live?show=all&q=krama.se"},{"hostname":"kycp2p-binance.com","first_observed":"2026-11-05T06:13:27.628Z","first_published":"2026-11-05T06:25:55.462Z","brands":[{"id":"binance","name":"Binance","url":"https://domainspoof.com/brands/binance"}],"dns":"resolved","resolved":["2.57.91.91"],"resolved_at":"2026-11-06T06:34:26Z","dns_checked_at":"2026-11-06T06:34:26.000Z","dns_since":"2026-11-05T06:34:01.000Z","findings":[{"id":"fskbdpdnqhivhfrp4sars","kind":"phishing_infrastructure","summary":"Resolved to 2.57.91.91, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T06:13:27.628Z","first_published":"2026-11-05T06:25:55.462Z","address":"2.57.91.91","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/binance"},{"hostname":"ledgr-ster-app.pages.dev","first_observed":"2026-11-05T05:31:12.995Z","first_published":"2026-11-05T06:25:55.462Z","brands":[],"dns":"resolved","resolved":["172.66.44.159","172.66.47.97"],"resolved_at":"2026-11-05T05:35:11Z","dns_checked_at":"2026-11-06T06:34:26.000Z","dns_since":"2026-11-05T06:34:01.000Z","findings":[{"id":"fwfwisryrkeifcy45fk5v","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T05:31:12.995Z","first_published":"2026-11-05T06:25:55.462Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=ledgr-ster-app.pages.dev"},{"hostname":"ledgrs-iu-r.pages.dev","first_observed":"2026-11-05T05:51:38.050Z","first_published":"2026-11-05T06:25:55.462Z","brands":[],"dns":"resolved","resolved":["172.66.44.131","172.66.47.125"],"resolved_at":"2026-11-05T05:55:27Z","dns_checked_at":"2026-11-06T06:34:26.000Z","dns_since":"2026-11-05T06:34:01.000Z","findings":[{"id":"fi7nje5s2m6oqsso6ecjx","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T05:51:38.050Z","first_published":"2026-11-05T06:25:55.462Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=ledgrs-iu-r.pages.dev"},{"hostname":"linlinpha.com","first_observed":"2026-11-05T06:00:58.096Z","first_published":"2026-11-05T06:25:55.462Z","brands":[],"dns":"resolved","resolved":["104.21.42.182","172.67.207.124"],"resolved_at":"2026-11-05T06:10:27Z","dns_checked_at":"2026-11-06T06:34:26.000Z","dns_since":"2026-11-05T06:34:01.000Z","findings":[{"id":"f42nqbemrakap2ht44qew","kind":"reported_domain","summary":"Listed by NPA 165 (e-commerce)","first_observed":"2026-11-05T06:00:58.096Z","first_published":"2026-11-05T06:25:55.462Z","source":"npa","source_name":"NPA 165","claim":{"category":"e-commerce"}}],"url":"https://domainspoof.com/live?show=all&q=linlinpha.com"},{"hostname":"login-cashapp.com","first_observed":"2026-11-05T05:24:02.180Z","first_published":"2026-11-05T06:25:55.462Z","brands":[{"id":"cash-app","name":"Cash App","url":"https://domainspoof.com/brands/cash-app"}],"dns":"resolved","resolved":["198.251.89.161"],"resolved_at":"2026-11-06T06:34:26Z","dns_checked_at":"2026-11-06T06:34:26.000Z","dns_since":"2026-11-05T06:34:01.000Z","findings":[{"id":"fisii2lbcnl7vtscl6zcd","kind":"phishing_infrastructure","summary":"Resolved to 198.251.89.161, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T05:24:02.180Z","first_published":"2026-11-05T06:25:55.462Z","address":"198.251.89.161","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/cash-app"},{"hostname":"m.sanzhixueyuan.com","first_observed":"2026-11-05T05:41:24.661Z","first_published":"2026-11-05T06:25:55.462Z","brands":[],"dns":"resolved","resolved":["154.220.44.140"],"resolved_at":"2026-11-05T05:41:47Z","dns_checked_at":"2026-11-06T06:34:26.000Z","dns_since":"2026-11-05T06:34:01.000Z","findings":[{"id":"ffu34czcqip4gr3rfiaqu","kind":"reported_domain","summary":"Under sanzhixueyuan.com, listed by CERT Polska","first_observed":"2026-11-05T05:41:24.661Z","first_published":"2026-11-05T06:25:55.462Z","source":"cert_polska","source_name":"CERT Polska","under":"sanzhixueyuan.com"}],"url":"https://domainspoof.com/live?show=all&q=m.sanzhixueyuan.com"},{"hostname":"maihash.xyz","first_observed":"2026-11-05T05:51:38.050Z","first_published":"2026-11-05T06:25:55.462Z","brands":[],"dns":"no_address","resolved":[],"resolved_at":"2026-11-05T05:55:28Z","dns_checked_at":"2026-11-06T06:34:26.000Z","dns_since":"2026-11-05T06:34:01.000Z","findings":[{"id":"fip2mjpbpc7ld32vbyrui","kind":"reported_domain","summary":"Listed by NPA 165 (finance and insurance)","first_observed":"2026-11-05T05:51:38.050Z","first_published":"2026-11-05T06:25:55.462Z","source":"npa","source_name":"NPA 165","claim":{"category":"finance and insurance"}}],"url":"https://domainspoof.com/live?show=all&q=maihash.xyz"},{"hostname":"mail.kishvandnews.ir","first_observed":"2026-11-05T05:51:38.050Z","first_published":"2026-11-05T06:25:55.462Z","brands":[],"dns":"resolved","resolved":["89.39.208.14"],"resolved_at":"2026-11-05T05:55:28Z","dns_checked_at":"2026-11-06T06:34:26.000Z","dns_since":"2026-11-05T06:34:01.000Z","findings":[{"id":"ffkhug6bnguzpkkkzz7pw","kind":"reported_domain","summary":"Under kishvandnews.ir, reported by PhishDestroy","first_observed":"2026-11-05T05:51:38.050Z","first_published":"2026-11-05T06:25:55.462Z","source":"phishdestroy","source_name":"PhishDestroy","under":"kishvandnews.ir","source_url":"https://phishdestroy.io/domain/kishvandnews.ir/"}],"url":"https://domainspoof.com/live?show=all&q=mail.kishvandnews.ir"},{"hostname":"matbet658.icu","first_observed":"2026-11-05T05:36:18.175Z","first_published":"2026-11-05T06:25:55.462Z","brands":[],"dns":"resolved","resolved":["104.21.40.153","172.67.154.72"],"resolved_at":"2026-11-05T05:44:42Z","dns_checked_at":"2026-11-06T06:34:26.000Z","dns_since":"2026-11-05T06:34:01.000Z","findings":[{"id":"fl567znqbrgtww7idhzyo","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T05:36:18.175Z","first_published":"2026-11-05T06:25:55.462Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/matbet658.icu/"}],"url":"https://domainspoof.com/live?show=all&q=matbet658.icu"},{"hostname":"matbet960.icu","first_observed":"2026-11-05T05:31:12.995Z","first_published":"2026-11-05T06:25:55.462Z","brands":[],"dns":"resolved","resolved":["104.21.92.122","172.67.193.63"],"resolved_at":"2026-11-05T05:35:12Z","dns_checked_at":"2026-11-06T06:34:26.000Z","dns_since":"2026-11-05T06:34:01.000Z","findings":[{"id":"fkklvyvgmip6q43a7gnc4","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T05:31:12.995Z","first_published":"2026-11-05T06:25:55.462Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/matbet960.icu/"}],"url":"https://domainspoof.com/live?show=all&q=matbet960.icu"},{"hostname":"mcc-test.mstblockchain.com","first_observed":"2026-11-05T05:56:51.678Z","first_published":"2026-11-05T06:25:55.462Z","brands":[],"dns":"resolved","resolved":["45.198.13.245"],"resolved_at":"2026-11-05T06:05:27Z","dns_checked_at":"2026-11-06T06:34:26.000Z","dns_since":"2026-11-05T06:34:01.000Z","findings":[{"id":"fhgeb2ubuiilcakoi4pya","kind":"reported_domain","summary":"Under mstblockchain.com, reported by PhishDestroy","first_observed":"2026-11-05T05:56:51.678Z","first_published":"2026-11-05T06:25:55.462Z","source":"phishdestroy","source_name":"PhishDestroy","under":"mstblockchain.com","source_url":"https://phishdestroy.io/domain/mstblockchain.com/"}],"url":"https://domainspoof.com/live?show=all&q=mcc-test.mstblockchain.com"},{"hostname":"mdapr.online","first_observed":"2026-11-05T05:16:22.661Z","first_published":"2026-11-05T06:25:55.462Z","brands":[],"dns":"resolved","resolved":["104.21.10.109","172.67.131.116"],"resolved_at":"2026-11-05T05:16:29Z","dns_checked_at":"2026-11-06T06:34:26.000Z","dns_since":"2026-11-05T06:34:01.000Z","findings":[{"id":"fpmq27haeczpyoc2rnx7f","kind":"reported_domain","summary":"Listed by NPA 165 (e-commerce)","first_observed":"2026-11-05T05:16:22.661Z","first_published":"2026-11-05T06:25:55.462Z","source":"npa","source_name":"NPA 165","claim":{"category":"e-commerce"}}],"url":"https://domainspoof.com/live?show=all&q=mdapr.online"},{"hostname":"meuboria.com","first_observed":"2026-11-05T06:10:43.458Z","first_published":"2026-11-05T06:25:55.462Z","brands":[],"dns":"resolved","resolved":["104.21.56.193","172.67.155.208"],"resolved_at":"2026-11-05T06:13:27Z","dns_checked_at":"2026-11-06T06:34:26.000Z","dns_since":"2026-11-05T06:34:01.000Z","findings":[{"id":"f5ufsv3bjpigzxoa3csop","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T06:10:43.458Z","first_published":"2026-11-05T06:25:55.462Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=meuboria.com"},{"hostname":"mgc8ea.asia","first_observed":"2026-11-05T06:05:33.823Z","first_published":"2026-11-05T06:25:55.462Z","brands":[],"dns":"resolved","resolved":["104.21.77.78","172.67.205.156"],"resolved_at":"2026-11-05T06:06:06Z","dns_checked_at":"2026-11-06T06:34:26.000Z","dns_since":"2026-11-05T06:34:01.000Z","findings":[{"id":"f2zc4ju4ke6zujbzuiweu","kind":"reported_domain","summary":"Listed by NPA 165 (e-commerce)","first_observed":"2026-11-05T06:05:33.823Z","first_published":"2026-11-05T06:25:55.462Z","source":"npa","source_name":"NPA 165","claim":{"category":"e-commerce"}}],"url":"https://domainspoof.com/live?show=all&q=mgc8ea.asia"},{"hostname":"missithoug.store","first_observed":"2026-11-05T06:18:02.076Z","first_published":"2026-11-05T06:25:55.462Z","brands":[],"dns":"no_address","resolved":["104.21.95.82","172.67.143.214","2606:4700:3031::ac43:8fd6","2606:4700:3033::6815:5f52"],"resolved_at":"2026-11-05T06:24:42Z","dns_checked_at":"2026-11-06T14:44:24.000Z","findings":[{"id":"fch2kml53cptsbr65rtcg","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T06:18:02.076Z","first_published":"2026-11-05T06:25:55.462Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=missithoug.store"},{"hostname":"ml.ni-electrical.com","first_observed":"2026-11-05T05:21:00.805Z","first_published":"2026-11-05T06:25:55.462Z","brands":[],"dns":"resolved","resolved":["109.238.86.5"],"resolved_at":"2026-11-05T05:28:00Z","dns_checked_at":"2026-11-06T06:34:26.000Z","dns_since":"2026-11-05T06:34:01.000Z","findings":[{"id":"fqjpgso6pford6gy23l4l","kind":"reported_domain","summary":"Under ni-electrical.com, listed by CERT Polska","first_observed":"2026-11-05T05:21:00.805Z","first_published":"2026-11-05T06:25:55.462Z","source":"cert_polska","source_name":"CERT Polska","under":"ni-electrical.com"}],"url":"https://domainspoof.com/live?show=all&q=ml.ni-electrical.com"},{"hostname":"moonshot.win","first_observed":"2026-11-05T06:15:51.123Z","first_published":"2026-11-05T06:25:55.462Z","brands":[],"dns":"resolved","resolved":["104.21.82.169","172.67.159.213"],"resolved_at":"2026-11-05T06:16:43Z","dns_checked_at":"2026-11-06T06:34:26.000Z","dns_since":"2026-11-05T06:34:01.000Z","findings":[{"id":"fi4kazvepj227a2pcigpm","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T06:15:51.123Z","first_published":"2026-11-05T06:25:55.462Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/moonshot.win/"}],"url":"https://domainspoof.com/live?show=all&q=moonshot.win"},{"hostname":"morpholast.pages.dev","first_observed":"2026-11-05T05:51:47.152Z","first_published":"2026-11-05T06:25:55.462Z","brands":[],"dns":"not_found","resolved":[],"resolved_at":"2026-11-05T05:56:21Z","dns_checked_at":"2026-11-06T06:34:26.000Z","dns_since":"2026-11-05T06:34:01.000Z","findings":[{"id":"fgk64hpuctssljemkzr7t","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T05:51:47.152Z","first_published":"2026-11-05T06:25:55.462Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=morpholast.pages.dev"},{"hostname":"morpholastnew.pages.dev","first_observed":"2026-11-05T05:51:47.152Z","first_published":"2026-11-05T06:25:55.462Z","brands":[],"dns":"not_found","resolved":[],"resolved_at":"2026-11-05T05:56:21Z","dns_checked_at":"2026-11-06T06:34:26.000Z","dns_since":"2026-11-05T06:34:01.000Z","findings":[{"id":"fys4q4uejqupovpfem23m","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T05:51:47.152Z","first_published":"2026-11-05T06:25:55.462Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=morpholastnew.pages.dev"},{"hostname":"morpholastv1.pages.dev","first_observed":"2026-11-05T05:51:47.152Z","first_published":"2026-11-05T06:25:55.462Z","brands":[],"dns":"not_found","resolved":[],"resolved_at":"2026-11-05T05:56:21Z","dns_checked_at":"2026-11-06T06:34:26.000Z","dns_since":"2026-11-05T06:34:01.000Z","findings":[{"id":"fksn7djaeeibwhpmwvsvf","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T05:51:47.152Z","first_published":"2026-11-05T06:25:55.462Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=morpholastv1.pages.dev"},{"hostname":"morpholatest.pages.dev","first_observed":"2026-11-05T05:51:47.152Z","first_published":"2026-11-05T06:25:55.462Z","brands":[],"dns":"not_found","resolved":[],"resolved_at":"2026-11-05T05:56:21Z","dns_checked_at":"2026-11-06T06:34:26.000Z","dns_since":"2026-11-05T06:34:01.000Z","findings":[{"id":"fiqcp6xvuikhj3uc25cpb","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T05:51:47.152Z","first_published":"2026-11-05T06:25:55.462Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=morpholatest.pages.dev"},{"hostname":"morphonew.pages.dev","first_observed":"2026-11-05T05:51:47.152Z","first_published":"2026-11-05T06:25:55.462Z","brands":[],"dns":"not_found","resolved":[],"resolved_at":"2026-11-05T05:56:21Z","dns_checked_at":"2026-11-06T06:34:26.000Z","dns_since":"2026-11-05T06:34:01.000Z","findings":[{"id":"fgpvewljwsnm4nkgoknk7","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T05:51:47.152Z","first_published":"2026-11-05T06:25:55.462Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=morphonew.pages.dev"},{"hostname":"morphonewnew.pages.dev","first_observed":"2026-11-05T05:51:47.152Z","first_published":"2026-11-05T06:25:55.462Z","brands":[],"dns":"not_found","resolved":[],"resolved_at":"2026-11-05T05:56:21Z","dns_checked_at":"2026-11-06T06:34:26.000Z","dns_since":"2026-11-05T06:34:01.000Z","findings":[{"id":"fzcjf2zcv4hndy2t2lemh","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T05:51:47.152Z","first_published":"2026-11-05T06:25:55.462Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=morphonewnew.pages.dev"},{"hostname":"morphosingle.pages.dev","first_observed":"2026-11-05T05:51:47.152Z","first_published":"2026-11-05T06:25:55.462Z","brands":[],"dns":"not_found","resolved":[],"resolved_at":"2026-11-05T05:56:21Z","dns_checked_at":"2026-11-06T06:34:26.000Z","dns_since":"2026-11-05T06:34:01.000Z","findings":[{"id":"fsymepafowa7rpl7p7v7g","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T05:51:47.152Z","first_published":"2026-11-05T06:25:55.462Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=morphosingle.pages.dev"},{"hostname":"morphowoking.pages.dev","first_observed":"2026-11-05T05:51:47.152Z","first_published":"2026-11-05T06:25:55.462Z","brands":[],"dns":"not_found","resolved":[],"resolved_at":"2026-11-05T05:56:21Z","dns_checked_at":"2026-11-06T06:34:26.000Z","dns_since":"2026-11-05T06:34:01.000Z","findings":[{"id":"fy4dxpxpfmewonr5qtn4g","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T05:51:47.152Z","first_published":"2026-11-05T06:25:55.462Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=morphowoking.pages.dev"},{"hostname":"morphoworking.pages.dev","first_observed":"2026-11-05T05:51:47.152Z","first_published":"2026-11-05T06:25:55.462Z","brands":[],"dns":"not_found","resolved":[],"resolved_at":"2026-11-05T05:56:21Z","dns_checked_at":"2026-11-06T06:34:26.000Z","dns_since":"2026-11-05T06:34:01.000Z","findings":[{"id":"fjfwdw3dyt6wzlobe26o2","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T05:51:47.152Z","first_published":"2026-11-05T06:25:55.462Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=morphoworking.pages.dev"},{"hostname":"mpeppe-live.pages.dev","first_observed":"2026-11-05T06:05:33.823Z","first_published":"2026-11-05T06:25:55.462Z","brands":[],"dns":"resolved","resolved":["172.66.44.152","172.66.47.104"],"resolved_at":"2026-11-05T06:06:06Z","dns_checked_at":"2026-11-06T06:34:26.000Z","dns_since":"2026-11-05T06:34:01.000Z","findings":[{"id":"fx3mhgy5xi3ajlb3o2nod","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T06:05:33.823Z","first_published":"2026-11-05T06:25:55.462Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=mpeppe-live.pages.dev"},{"hostname":"nft-og.study","first_observed":"2026-11-05T06:10:43.458Z","first_published":"2026-11-05T06:25:55.462Z","brands":[],"dns":"no_address","resolved":[],"resolved_at":"2026-11-05T06:13:28Z","dns_checked_at":"2026-11-06T06:34:26.000Z","dns_since":"2026-11-05T06:34:01.000Z","findings":[{"id":"f5lwruazxvxx7qxrhwdyc","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T06:10:43.458Z","first_published":"2026-11-05T06:25:55.462Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=nft-og.study"},{"hostname":"nobilefondenza.com","first_observed":"2026-11-05T05:31:12.995Z","first_published":"2026-11-05T06:25:55.462Z","brands":[],"dns":"resolved","resolved":["104.21.72.6","172.67.173.100"],"resolved_at":"2026-11-05T05:35:13Z","dns_checked_at":"2026-11-06T06:34:26.000Z","dns_since":"2026-11-05T06:34:01.000Z","findings":[{"id":"ffb5cvlmd6ftwccaer5ha","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T05:31:12.995Z","first_published":"2026-11-05T06:25:55.462Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=nobilefondenza.com"},{"hostname":"oberkonto-tan.com","first_observed":"2026-11-05T05:31:12.995Z","first_published":"2026-11-05T06:25:55.462Z","brands":[],"dns":"resolved","resolved":["104.21.38.113","172.67.222.69"],"resolved_at":"2026-11-05T05:35:14Z","dns_checked_at":"2026-11-06T06:34:26.000Z","dns_since":"2026-11-05T06:34:01.000Z","findings":[{"id":"fj577ur6sa7gvnghgnb2d","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T05:31:12.995Z","first_published":"2026-11-05T06:25:55.462Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/oberkonto-tan.com/"}],"url":"https://domainspoof.com/live?show=all&q=oberkonto-tan.com"},{"hostname":"official-exo-en.pages.dev","first_observed":"2026-11-05T05:56:51.678Z","first_published":"2026-11-05T06:25:55.462Z","brands":[],"dns":"resolved","resolved":["172.66.44.199","172.66.47.57"],"resolved_at":"2026-11-05T06:05:30Z","dns_checked_at":"2026-11-06T06:34:26.000Z","dns_since":"2026-11-05T06:34:01.000Z","findings":[{"id":"fbn5djlda2lwv7q5tn2tn","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T05:56:51.678Z","first_published":"2026-11-05T06:25:55.462Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=official-exo-en.pages.dev"},{"hostname":"outdoors-pl.shop","first_observed":"2026-11-05T06:10:43.458Z","first_published":"2026-11-05T06:25:55.462Z","brands":[],"dns":"resolved","resolved":["104.18.22.122"],"resolved_at":"2026-11-05T06:13:28Z","dns_checked_at":"2026-11-06T06:34:26.000Z","dns_since":"2026-11-05T06:34:01.000Z","findings":[{"id":"fgu5raetcugrghoprjjvo","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T06:10:43.458Z","first_published":"2026-11-05T06:25:55.462Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=outdoors-pl.shop"},{"hostname":"ozak.site","first_observed":"2026-11-05T05:16:22.661Z","first_published":"2026-11-05T06:25:55.462Z","brands":[],"dns":"resolved","resolved":["104.21.58.67","172.67.201.130"],"resolved_at":"2026-11-05T05:24:06Z","dns_checked_at":"2026-11-06T06:34:26.000Z","dns_since":"2026-11-05T06:34:01.000Z","findings":[{"id":"ffuteiapddrrv2mn7ohtc","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T05:16:22.661Z","first_published":"2026-11-05T06:25:55.462Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/ozak.site/"}],"url":"https://domainspoof.com/live?show=all&q=ozak.site"},{"hostname":"pancaekswap.trade","first_observed":"2026-11-05T06:15:51.123Z","first_published":"2026-11-05T06:25:55.462Z","brands":[],"dns":"resolved","resolved":["104.21.22.90","172.67.203.197"],"resolved_at":"2026-11-05T06:16:43Z","dns_checked_at":"2026-11-06T06:34:26.000Z","dns_since":"2026-11-05T06:34:01.000Z","findings":[{"id":"frfruts764iinsqwq2rzg","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T06:15:51.123Z","first_published":"2026-11-05T06:25:55.462Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=pancaekswap.trade"},{"hostname":"panel.moonshot.win","first_observed":"2026-11-05T06:15:51.123Z","first_published":"2026-11-05T06:25:55.462Z","brands":[],"dns":"resolved","resolved":["104.21.82.169","172.67.159.213"],"resolved_at":"2026-11-05T06:16:43Z","dns_checked_at":"2026-11-06T06:34:26.000Z","dns_since":"2026-11-05T06:34:01.000Z","findings":[{"id":"fkkjhvydqoxnk5dpfnrvy","kind":"reported_domain","summary":"Under moonshot.win, reported by PhishDestroy","first_observed":"2026-11-05T06:15:51.123Z","first_published":"2026-11-05T06:25:55.462Z","source":"phishdestroy","source_name":"PhishDestroy","under":"moonshot.win","source_url":"https://phishdestroy.io/domain/moonshot.win/"}],"url":"https://domainspoof.com/live?show=all&q=panel.moonshot.win"},{"hostname":"pay-bitrefill.com-cd01-esim-gift.com","first_observed":"2026-11-05T05:51:47.152Z","first_published":"2026-11-05T06:25:55.462Z","brands":[{"id":"bitrefill","name":"Bitrefill","url":"https://domainspoof.com/brands/bitrefill"}],"dns":"resolved","resolved":["62.60.226.39"],"resolved_at":"2026-11-05T05:56:21Z","dns_checked_at":"2026-11-06T05:28:48.000Z","dns_since":"2026-11-05T06:34:01.000Z","findings":[{"id":"fuj4n4clk65xrbxfd45dk","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T05:51:47.152Z","first_published":"2026-11-05T06:25:55.462Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/brands/bitrefill"},{"hostname":"pay-bitrefill.com-ce01-esim-gift.com","first_observed":"2026-11-05T05:51:47.152Z","first_published":"2026-11-05T06:25:55.462Z","brands":[{"id":"bitrefill","name":"Bitrefill","url":"https://domainspoof.com/brands/bitrefill"}],"dns":"resolved","resolved":["62.60.226.39"],"resolved_at":"2026-11-05T05:56:21Z","dns_checked_at":"2026-11-06T06:34:26.000Z","dns_since":"2026-11-05T06:34:01.000Z","findings":[{"id":"fw5j3xaybofai352dxns3","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T05:51:47.152Z","first_published":"2026-11-05T06:25:55.462Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/brands/bitrefill"},{"hostname":"pay-bitrefill.com-cf01-esim-gift.com","first_observed":"2026-11-05T05:51:47.152Z","first_published":"2026-11-05T06:25:55.462Z","brands":[{"id":"bitrefill","name":"Bitrefill","url":"https://domainspoof.com/brands/bitrefill"}],"dns":"resolved","resolved":["62.60.226.39"],"resolved_at":"2026-11-05T05:56:21Z","dns_checked_at":"2026-11-06T06:34:26.000Z","dns_since":"2026-11-05T06:34:01.000Z","findings":[{"id":"f3dbygdji7kncxtuob5ab","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T05:51:47.152Z","first_published":"2026-11-05T06:25:55.462Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/brands/bitrefill"},{"hostname":"pay-bitrefill.com-cg01-esim-gift.com","first_observed":"2026-11-05T05:51:47.152Z","first_published":"2026-11-05T06:25:55.462Z","brands":[{"id":"bitrefill","name":"Bitrefill","url":"https://domainspoof.com/brands/bitrefill"}],"dns":"resolved","resolved":["62.60.226.39"],"resolved_at":"2026-11-05T05:56:21Z","dns_checked_at":"2026-11-06T06:34:26.000Z","dns_since":"2026-11-05T06:34:01.000Z","findings":[{"id":"fbkxxbr624l3223jy4kpm","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T05:51:47.152Z","first_published":"2026-11-05T06:25:55.462Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/brands/bitrefill"},{"hostname":"pay-bitrefill.com-ch01-esim-gift.com","first_observed":"2026-11-05T05:51:47.152Z","first_published":"2026-11-05T06:25:55.462Z","brands":[{"id":"bitrefill","name":"Bitrefill","url":"https://domainspoof.com/brands/bitrefill"}],"dns":"resolved","resolved":["62.60.226.39"],"resolved_at":"2026-11-05T05:56:21Z","dns_checked_at":"2026-11-06T06:34:26.000Z","dns_since":"2026-11-05T06:34:01.000Z","findings":[{"id":"f4wddqifkv5qf6m3it4rq","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T05:51:47.152Z","first_published":"2026-11-05T06:25:55.462Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/brands/bitrefill"},{"hostname":"pay-bitrefill.com-ci01-esim-gift.com","first_observed":"2026-11-05T05:51:47.152Z","first_published":"2026-11-05T06:25:55.462Z","brands":[{"id":"bitrefill","name":"Bitrefill","url":"https://domainspoof.com/brands/bitrefill"}],"dns":"resolved","resolved":["62.60.226.39"],"resolved_at":"2026-11-05T05:56:21Z","dns_checked_at":"2026-11-06T02:00:21.000Z","dns_since":"2026-11-05T06:34:01.000Z","findings":[{"id":"fepjdyqj5oct635kz4inc","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T05:51:47.152Z","first_published":"2026-11-05T06:25:55.462Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/brands/bitrefill"},{"hostname":"pay-bitrefill.com-cj01-esim-gift.com","first_observed":"2026-11-05T05:51:47.152Z","first_published":"2026-11-05T06:25:55.462Z","brands":[{"id":"bitrefill","name":"Bitrefill","url":"https://domainspoof.com/brands/bitrefill"}],"dns":"resolved","resolved":["62.60.226.39"],"resolved_at":"2026-11-05T05:56:21Z","dns_checked_at":"2026-11-06T02:00:21.000Z","dns_since":"2026-11-05T06:34:01.000Z","findings":[{"id":"fvmwof43zlv7vvgbuac2b","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T05:51:47.152Z","first_published":"2026-11-05T06:25:55.462Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/brands/bitrefill"},{"hostname":"pay-bitrefill.com-cl01-esim-gift.com","first_observed":"2026-11-05T06:05:31.231Z","first_published":"2026-11-05T06:25:55.462Z","brands":[{"id":"bitrefill","name":"Bitrefill","url":"https://domainspoof.com/brands/bitrefill"}],"dns":"resolved","resolved":["62.60.226.39"],"resolved_at":"2026-11-06T06:34:26Z","dns_checked_at":"2026-11-06T06:34:26.000Z","dns_since":"2026-11-05T12:09:45.000Z","findings":[{"id":"fgyzocmybu46ga2ofyb3e","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T11:52:48.076Z","first_published":"2026-11-05T12:06:38.708Z","source":"metamask","source_name":"MetaMask"},{"id":"fijql5q6rc4nup6mvzw44","kind":"spamhaus_drop","summary":"Resolved to 62.60.226.39 on Spamhaus DROP","first_observed":"2026-11-05T06:05:31.231Z","first_published":"2026-11-05T06:25:55.462Z","address":"62.60.226.39","list":"spamhaus_drop","list_name":"Spamhaus DROP"}],"url":"https://domainspoof.com/brands/bitrefill"},{"hostname":"pay.sberbank.18ac0710d8b13faf.ccm-prod.certsbridgeupdate.yandex.sber.prod2.hawkinswoodshop.com","first_observed":"2026-11-05T05:41:47.738Z","first_published":"2026-11-05T06:25:55.462Z","brands":[{"id":"sberbank","name":"Sberbank","url":"https://domainspoof.com/brands/sberbank"},{"id":"yandex","name":"Yandex","url":"https://domainspoof.com/brands/yandex"}],"dns":"resolved","resolved":["45.77.75.133","45.77.92.157","207.246.78.75"],"resolved_at":"2026-11-06T06:34:26Z","dns_checked_at":"2026-11-06T06:34:26.000Z","dns_since":"2026-11-05T06:34:01.000Z","findings":[{"id":"fftruxjh2jgdspdof6xqe","kind":"phishing_infrastructure","summary":"Resolved to 45.77.75.133, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T05:41:47.738Z","first_published":"2026-11-05T06:25:55.462Z","address":"45.77.75.133","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/sberbank"},{"hostname":"personalfinanceguard.com","first_observed":"2026-11-05T05:16:22.661Z","first_published":"2026-11-05T06:25:55.462Z","brands":[],"dns":"resolved","resolved":["104.21.83.93","172.67.220.241"],"resolved_at":"2026-11-05T05:24:06Z","dns_checked_at":"2026-11-06T06:34:26.000Z","dns_since":"2026-11-05T06:34:01.000Z","findings":[{"id":"fsjow5ulkhfdmdigooraq","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T05:16:22.661Z","first_published":"2026-11-05T06:25:55.462Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=personalfinanceguard.com"},{"hostname":"peter.ellectrum.com","first_observed":"2026-11-05T05:36:18.175Z","first_published":"2026-11-05T06:25:55.462Z","brands":[],"dns":"resolved","resolved":["185.53.179.136"],"resolved_at":"2026-11-05T05:44:45Z","dns_checked_at":"2026-11-06T06:34:26.000Z","dns_since":"2026-11-05T06:34:01.000Z","findings":[{"id":"f7yvw3czzp3haz23darhi","kind":"reported_domain","summary":"Under ellectrum.com, listed by MetaMask","first_observed":"2026-11-05T05:36:18.175Z","first_published":"2026-11-05T06:25:55.462Z","source":"metamask","source_name":"MetaMask","under":"ellectrum.com"}],"url":"https://domainspoof.com/live?show=all&q=peter.ellectrum.com"},{"hostname":"phillyshiftcare.healingark.app","first_observed":"2026-11-05T05:41:24.661Z","first_published":"2026-11-05T06:25:55.462Z","brands":[],"dns":"resolved","resolved":["66.71.220.1"],"resolved_at":"2026-11-05T05:41:47Z","dns_checked_at":"2026-11-06T06:34:26.000Z","dns_since":"2026-11-05T06:34:01.000Z","findings":[{"id":"f4qsko6tnhqo6wmth4tvb","kind":"reported_domain","summary":"Under healingark.app, listed by MetaMask","first_observed":"2026-11-05T05:41:24.661Z","first_published":"2026-11-05T06:25:55.462Z","source":"metamask","source_name":"MetaMask","under":"healingark.app"}],"url":"https://domainspoof.com/live?show=all&q=phillyshiftcare.healingark.app"},{"hostname":"poke.huanmeina.com","first_observed":"2026-11-05T05:51:47.152Z","first_published":"2026-11-05T06:25:55.462Z","brands":[],"dns":"resolved","resolved":["165.154.255.199"],"resolved_at":"2026-11-05T05:56:21Z","dns_checked_at":"2026-11-06T06:34:26.000Z","dns_since":"2026-11-05T06:34:01.000Z","findings":[{"id":"ftq3t36p625bs27yejocg","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T05:51:47.152Z","first_published":"2026-11-05T06:25:55.462Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=poke.huanmeina.com"},{"hostname":"pons-vote.pages.dev","first_observed":"2026-11-05T05:51:47.152Z","first_published":"2026-11-05T06:25:55.462Z","brands":[],"dns":"resolved","resolved":["172.66.44.131","172.66.47.125","2606:4700:310c::ac42:2c83","2606:4700:310c::ac42:2f7d"],"resolved_at":"2026-11-05T05:56:21Z","dns_checked_at":"2026-11-06T06:34:26.000Z","dns_since":"2026-11-05T06:34:01.000Z","findings":[{"id":"f3742ukgipdkhbk6pu2vi","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T05:51:47.152Z","first_published":"2026-11-05T06:25:55.462Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=pons-vote.pages.dev"},{"hostname":"pornkeep.online","first_observed":"2026-11-05T05:16:22.661Z","first_published":"2026-11-05T06:25:55.462Z","brands":[],"dns":"resolved","resolved":["104.21.90.250","172.67.163.90"],"resolved_at":"2026-11-05T05:24:06Z","dns_checked_at":"2026-11-06T06:34:26.000Z","dns_since":"2026-11-05T06:34:01.000Z","findings":[{"id":"fwyla47c356mw5ae7dkld","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T05:16:22.661Z","first_published":"2026-11-05T06:25:55.462Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/pornkeep.online/"}],"url":"https://domainspoof.com/live?show=all&q=pornkeep.online"},{"hostname":"price-drops.shop","first_observed":"2026-11-05T05:46:31.914Z","first_published":"2026-11-05T06:25:55.462Z","brands":[],"dns":"resolved","resolved":["104.18.22.122"],"resolved_at":"2026-11-05T05:49:56Z","dns_checked_at":"2026-11-06T06:34:26.000Z","dns_since":"2026-11-05T06:34:01.000Z","findings":[{"id":"f4kfht2e5uhh7buck427j","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T05:46:31.914Z","first_published":"2026-11-05T06:25:55.462Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=price-drops.shop"},{"hostname":"prizedice.com","first_observed":"2026-11-05T05:26:07.294Z","first_published":"2026-11-05T06:25:55.462Z","brands":[],"dns":"resolved","resolved":["66.198.225.39"],"resolved_at":"2026-11-05T05:30:43Z","dns_checked_at":"2026-11-06T06:34:26.000Z","dns_since":"2026-11-05T06:34:01.000Z","findings":[{"id":"fa2difl3k5tsm572tc63w","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T05:26:07.294Z","first_published":"2026-11-05T06:25:55.462Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/prizedice.com/"}],"url":"https://domainspoof.com/live?show=all&q=prizedice.com"},{"hostname":"proposal-inkonchain.info","first_observed":"2026-11-05T06:10:43.458Z","first_published":"2026-11-05T06:25:55.462Z","brands":[],"dns":"resolved","resolved":["104.21.44.122","172.67.199.150"],"resolved_at":"2026-11-05T06:13:29Z","dns_checked_at":"2026-11-06T06:34:26.000Z","dns_since":"2026-11-05T06:34:01.000Z","findings":[{"id":"f4koeaguiu3k2sm3vy6ha","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T06:10:43.458Z","first_published":"2026-11-05T06:25:55.462Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=proposal-inkonchain.info"},{"hostname":"quhsjjss.yoga","first_observed":"2026-11-05T06:00:58.096Z","first_published":"2026-11-05T06:25:55.462Z","brands":[],"dns":"resolved","resolved":["104.21.81.91","172.67.141.83"],"resolved_at":"2026-11-05T06:10:28Z","dns_checked_at":"2026-11-06T06:34:26.000Z","dns_since":"2026-11-05T06:34:01.000Z","findings":[{"id":"fmjkbvyzzygpmtdg447pl","kind":"reported_domain","summary":"Listed by NPA 165 (e-commerce)","first_observed":"2026-11-05T06:00:58.096Z","first_published":"2026-11-05T06:25:55.462Z","source":"npa","source_name":"NPA 165","claim":{"category":"e-commerce"}}],"url":"https://domainspoof.com/live?show=all&q=quhsjjss.yoga"},{"hostname":"qupfe.online","first_observed":"2026-11-05T05:21:00.805Z","first_published":"2026-11-05T06:25:55.462Z","brands":[],"dns":"resolved","resolved":["104.21.42.173","172.67.206.208"],"resolved_at":"2026-11-05T05:28:01Z","dns_checked_at":"2026-11-06T06:34:26.000Z","dns_since":"2026-11-05T06:34:01.000Z","findings":[{"id":"fck677ifzjyzq7bp4uift","kind":"reported_domain","summary":"Listed by NPA 165 (e-commerce)","first_observed":"2026-11-05T05:21:00.805Z","first_published":"2026-11-05T06:25:55.462Z","source":"npa","source_name":"NPA 165","claim":{"category":"e-commerce"}}],"url":"https://domainspoof.com/live?show=all&q=qupfe.online"},{"hostname":"ravanwarda.store","first_observed":"2026-11-05T06:18:02.076Z","first_published":"2026-11-05T06:25:55.462Z","brands":[],"dns":"no_address","resolved":["104.21.46.34","172.67.223.34","2606:4700:3030::ac43:df22","2606:4700:3037::6815:2e22"],"resolved_at":"2026-11-05T06:24:42Z","dns_checked_at":"2026-11-06T14:44:24.000Z","findings":[{"id":"f46nvoczi7efmzvypoilh","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T06:18:02.076Z","first_published":"2026-11-05T06:25:55.462Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=ravanwarda.store"},{"hostname":"raydiumvotes.xyz","first_observed":"2026-11-05T05:51:47.152Z","first_published":"2026-11-05T06:25:55.462Z","brands":[],"dns":"not_found","resolved":["64.111.93.27"],"resolved_at":"2026-11-05T05:56:21Z","dns_checked_at":"2026-11-06T14:44:24.000Z","findings":[{"id":"fglhsg7soghiwy2ynjnlo","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T05:51:47.152Z","first_published":"2026-11-05T06:25:55.462Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=raydiumvotes.xyz"},{"hostname":"relareo.com","first_observed":"2026-11-05T05:46:31.914Z","first_published":"2026-11-05T06:25:55.462Z","brands":[],"dns":"resolved","resolved":["76.76.21.21"],"resolved_at":"2026-11-05T05:49:56Z","dns_checked_at":"2026-11-06T06:34:26.000Z","dns_since":"2026-11-05T06:34:01.000Z","findings":[{"id":"fnok5hwb2sssb73jkerv2","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T05:46:31.914Z","first_published":"2026-11-05T06:25:55.462Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/relareo.com/"}],"url":"https://domainspoof.com/live?show=all&q=relareo.com"},{"hostname":"renardvalorange.com","first_observed":"2026-11-05T06:00:58.096Z","first_published":"2026-11-05T06:25:55.462Z","brands":[],"dns":"resolved","resolved":["104.21.30.239","172.67.174.48"],"resolved_at":"2026-11-05T06:10:29Z","dns_checked_at":"2026-11-06T06:34:26.000Z","dns_since":"2026-11-05T06:34:01.000Z","findings":[{"id":"ffgmpz2ubd3zyaegd4s5t","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T06:00:58.096Z","first_published":"2026-11-05T06:25:55.462Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=renardvalorange.com"},{"hostname":"revolut.travel.pl","first_observed":"2026-11-05T06:13:29.572Z","first_published":"2026-11-05T06:25:55.462Z","brands":[{"id":"revolut","name":"Revolut","url":"https://domainspoof.com/brands/revolut"}],"dns":"resolved","resolved":["185.253.212.22"],"resolved_at":"2026-11-06T06:34:26Z","dns_checked_at":"2026-11-06T06:34:26.000Z","dns_since":"2026-11-05T06:34:01.000Z","findings":[{"id":"f65m22yg362k4u3jsfa6f","kind":"phishing_infrastructure","summary":"Resolved to 185.253.212.22, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T06:13:29.572Z","first_published":"2026-11-05T06:25:55.462Z","address":"185.253.212.22","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/revolut"},{"hostname":"rewardxripple.com","first_observed":"2026-11-05T06:05:33.823Z","first_published":"2026-11-05T06:25:55.462Z","brands":[],"dns":"resolved","resolved":["104.21.52.199","172.67.203.94"],"resolved_at":"2026-11-05T06:06:08Z","dns_checked_at":"2026-11-06T06:34:26.000Z","dns_since":"2026-11-05T06:34:01.000Z","findings":[{"id":"fcn5o7gd675f53jcpqvqu","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T06:05:33.823Z","first_published":"2026-11-05T06:25:55.462Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=rewardxripple.com"},{"hostname":"roblox.et","first_observed":"2026-11-05T06:05:33.823Z","first_published":"2026-11-05T06:25:55.462Z","brands":[{"id":"roblox","name":"Roblox","url":"https://domainspoof.com/brands/roblox"}],"dns":"resolved","resolved":["202.170.75.201"],"resolved_at":"2026-11-06T06:34:26Z","dns_checked_at":"2026-11-06T06:34:26.000Z","dns_since":"2026-11-05T06:34:01.000Z","findings":[{"id":"fpscsn3kgmtiivbktd7dx","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T06:05:33.823Z","first_published":"2026-11-05T06:25:55.462Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/roblox.et/"},{"id":"fqmvmyubdpimdidcvsysa","kind":"phishing_infrastructure","summary":"Resolved to 202.170.75.201, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T06:06:08.976Z","first_published":"2026-11-05T06:25:55.462Z","address":"202.170.75.201","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"},{"id":"ft6szkr2h6gfknl26x7jm","kind":"spamhaus_drop","summary":"Resolved to 202.170.75.201 on Spamhaus DROP","first_observed":"2026-11-05T06:06:08.976Z","first_published":"2026-11-05T06:25:55.462Z","address":"202.170.75.201","list":"spamhaus_drop","list_name":"Spamhaus DROP"}],"url":"https://domainspoof.com/brands/roblox"},{"hostname":"runrenre.shop","first_observed":"2026-11-05T06:15:51.123Z","first_published":"2026-11-05T06:25:55.462Z","brands":[],"dns":"resolved","resolved":["104.21.73.157","172.67.163.215"],"resolved_at":"2026-11-05T06:16:44Z","dns_checked_at":"2026-11-06T06:34:26.000Z","dns_since":"2026-11-05T06:34:01.000Z","findings":[{"id":"f4dvfnbj7m2btkz32q6ew","kind":"reported_domain","summary":"Listed by NPA 165 (e-commerce)","first_observed":"2026-11-05T06:15:51.123Z","first_published":"2026-11-05T06:25:55.462Z","source":"npa","source_name":"NPA 165","claim":{"category":"e-commerce"}}],"url":"https://domainspoof.com/live?show=all&q=runrenre.shop"},{"hostname":"samcuicroldfnc.com","first_observed":"2026-11-05T05:51:38.050Z","first_published":"2026-11-05T06:25:55.462Z","brands":[],"dns":"no_address","resolved":[],"resolved_at":"2026-11-05T05:55:35Z","dns_checked_at":"2026-11-06T06:34:26.000Z","dns_since":"2026-11-05T06:34:01.000Z","findings":[{"id":"fddus37276htuoqfmldsm","kind":"reported_domain","summary":"Listed by NPA 165 (finance and insurance)","first_observed":"2026-11-05T05:51:38.050Z","first_published":"2026-11-05T06:25:55.462Z","source":"npa","source_name":"NPA 165","claim":{"category":"finance and insurance"}}],"url":"https://domainspoof.com/live?show=all&q=samcuicroldfnc.com"},{"hostname":"sandbox.aml.legal","first_observed":"2026-11-05T06:10:43.458Z","first_published":"2026-11-05T06:25:55.462Z","brands":[],"dns":"resolved","resolved":["186.2.175.179"],"resolved_at":"2026-11-05T06:13:29Z","dns_checked_at":"2026-11-06T06:34:26.000Z","dns_since":"2026-11-05T06:34:01.000Z","findings":[{"id":"ffps2adbtqog4rooex5g7","kind":"reported_domain","summary":"Under aml.legal, reported by PhishDestroy","first_observed":"2026-11-05T06:10:43.458Z","first_published":"2026-11-05T06:25:55.462Z","source":"phishdestroy","source_name":"PhishDestroy","under":"aml.legal","source_url":"https://phishdestroy.io/domain/aml.legal/"}],"url":"https://domainspoof.com/live?show=all&q=sandbox.aml.legal"},{"hostname":"sanzhixueyuan.com","first_observed":"2026-11-05T05:41:24.661Z","first_published":"2026-11-05T06:25:55.462Z","brands":[],"dns":"resolved","resolved":["154.220.44.140"],"resolved_at":"2026-11-05T05:41:48Z","dns_checked_at":"2026-11-06T06:34:26.000Z","dns_since":"2026-11-05T06:34:01.000Z","findings":[{"id":"frbaun5g2bnljrhprpvzo","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T05:41:24.661Z","first_published":"2026-11-05T06:25:55.462Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=sanzhixueyuan.com"},{"hostname":"sberbank.dsber.ozon.98pochtabank.0update.yandex.sber.prod2.hawkinswoodshop.com","first_observed":"2026-11-05T06:06:09.102Z","first_published":"2026-11-05T06:25:55.462Z","brands":[{"id":"sberbank","name":"Sberbank","url":"https://domainspoof.com/brands/sberbank"},{"id":"yandex","name":"Yandex","url":"https://domainspoof.com/brands/yandex"}],"dns":"resolved","resolved":["45.77.75.133","45.77.92.157","207.246.78.75"],"resolved_at":"2026-11-06T06:34:26Z","dns_checked_at":"2026-11-06T06:34:26.000Z","dns_since":"2026-11-05T06:34:01.000Z","findings":[{"id":"fotegj7tlmaadnnxvycf2","kind":"phishing_infrastructure","summary":"Resolved to 45.77.75.133, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T06:06:09.102Z","first_published":"2026-11-05T06:25:55.462Z","address":"45.77.75.133","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/sberbank"},{"hostname":"secure.dryground.ai","first_observed":"2026-11-05T05:41:24.661Z","first_published":"2026-11-05T06:25:55.462Z","brands":[],"dns":"resolved","resolved":["100.97.39.23"],"resolved_at":"2026-11-05T05:41:50Z","dns_checked_at":"2026-11-06T06:34:26.000Z","dns_since":"2026-11-05T06:34:01.000Z","findings":[{"id":"f2gbxz75b5es6auftwqmh","kind":"reported_domain","summary":"Under dryground.ai, reported by PhishDestroy","first_observed":"2026-11-05T05:41:24.661Z","first_published":"2026-11-05T06:25:55.462Z","source":"phishdestroy","source_name":"PhishDestroy","under":"dryground.ai","source_url":"https://phishdestroy.io/domain/dryground.ai/"}],"url":"https://domainspoof.com/live?show=all&q=secure.dryground.ai"},{"hostname":"sermoattin.store","first_observed":"2026-11-05T06:18:02.076Z","first_published":"2026-11-05T06:25:55.462Z","brands":[],"dns":"no_address","resolved":["104.21.8.217","172.67.140.70","2606:4700:3032::ac43:8c46","2606:4700:3036::6815:8d9"],"resolved_at":"2026-11-05T06:24:42Z","dns_checked_at":"2026-11-06T14:44:24.000Z","findings":[{"id":"fjwqob7q4rbiwolqpwkzk","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T06:18:02.076Z","first_published":"2026-11-05T06:25:55.462Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=sermoattin.store"},{"hostname":"service.crushxp.com","first_observed":"2026-11-05T05:56:51.678Z","first_published":"2026-11-05T06:25:55.462Z","brands":[],"dns":"resolved","resolved":["109.238.86.5"],"resolved_at":"2026-11-05T06:05:41Z","dns_checked_at":"2026-11-06T06:34:26.000Z","dns_since":"2026-11-05T06:34:01.000Z","findings":[{"id":"fzb6ccnu2axs6pgwmukhn","kind":"reported_domain","summary":"Under crushxp.com, listed by CERT Polska","first_observed":"2026-11-05T05:56:51.678Z","first_published":"2026-11-05T06:25:55.462Z","source":"cert_polska","source_name":"CERT Polska","under":"crushxp.com"}],"url":"https://domainspoof.com/live?show=all&q=service.crushxp.com"},{"hostname":"shop6132.shop","first_observed":"2026-11-05T05:56:51.678Z","first_published":"2026-11-05T06:25:55.462Z","brands":[],"dns":"no_address","resolved":[],"resolved_at":"2026-11-05T06:05:42Z","dns_checked_at":"2026-11-06T06:34:26.000Z","dns_since":"2026-11-05T06:34:01.000Z","findings":[{"id":"fzbwrqhfxslah4jjn5gst","kind":"reported_domain","summary":"Listed by NPA 165 (finance and insurance)","first_observed":"2026-11-05T05:56:51.678Z","first_published":"2026-11-05T06:25:55.462Z","source":"npa","source_name":"NPA 165","claim":{"category":"finance and insurance"}}],"url":"https://domainspoof.com/live?show=all&q=shop6132.shop"},{"hostname":"signin.zenavlico.cyou","first_observed":"2026-11-05T05:51:38.050Z","first_published":"2026-11-05T06:25:55.462Z","brands":[],"dns":"resolved","resolved":["95.85.244.13"],"resolved_at":"2026-11-05T05:55:41Z","dns_checked_at":"2026-11-06T06:34:26.000Z","dns_since":"2026-11-05T06:34:01.000Z","findings":[{"id":"fz536rm7lvyakcgfqelnm","kind":"reported_domain","summary":"Under zenavlico.cyou, listed by CERT Polska","first_observed":"2026-11-05T05:51:38.050Z","first_published":"2026-11-05T06:25:55.462Z","source":"cert_polska","source_name":"CERT Polska","under":"zenavlico.cyou"}],"url":"https://domainspoof.com/live?show=all&q=signin.zenavlico.cyou"},{"hostname":"slon2--------at.ru","first_observed":"2026-11-05T05:16:22.661Z","first_published":"2026-11-05T06:25:55.462Z","brands":[],"dns":"resolved","resolved":["45.134.174.147"],"resolved_at":"2026-11-05T05:24:09Z","dns_checked_at":"2026-11-06T06:34:26.000Z","dns_since":"2026-11-05T06:34:01.000Z","findings":[{"id":"falzbcv44murz4nwc52lx","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T05:16:22.661Z","first_published":"2026-11-05T06:25:55.462Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/slon2--------at.ru/"}],"url":"https://domainspoof.com/live?show=all&q=slon2--------at.ru"},{"hostname":"sonar.aml.legal","first_observed":"2026-11-05T06:10:43.458Z","first_published":"2026-11-05T06:25:55.462Z","brands":[],"dns":"resolved","resolved":["186.2.175.179"],"resolved_at":"2026-11-05T06:13:31Z","dns_checked_at":"2026-11-06T06:34:26.000Z","dns_since":"2026-11-05T06:34:01.000Z","findings":[{"id":"fzuto2uqladkr5yvp77wv","kind":"reported_domain","summary":"Under aml.legal, reported by PhishDestroy","first_observed":"2026-11-05T06:10:43.458Z","first_published":"2026-11-05T06:25:55.462Z","source":"phishdestroy","source_name":"PhishDestroy","under":"aml.legal","source_url":"https://phishdestroy.io/domain/aml.legal/"}],"url":"https://domainspoof.com/live?show=all&q=sonar.aml.legal"},{"hostname":"sopharmacy.brand-eu.com","first_observed":"2026-11-05T06:10:43.458Z","first_published":"2026-11-05T06:25:55.462Z","brands":[],"dns":"resolved","resolved":["104.21.88.44","172.67.172.137"],"resolved_at":"2026-11-05T06:13:31Z","dns_checked_at":"2026-11-06T06:34:26.000Z","dns_since":"2026-11-05T06:34:01.000Z","findings":[{"id":"f3i3hvedcoacrewydbf2d","kind":"reported_domain","summary":"Under brand-eu.com, listed by CERT Polska","first_observed":"2026-11-05T06:10:43.458Z","first_published":"2026-11-05T06:25:55.462Z","source":"cert_polska","source_name":"CERT Polska","under":"brand-eu.com"}],"url":"https://domainspoof.com/live?show=all&q=sopharmacy.brand-eu.com"},{"hostname":"starlink-martinique.com","first_observed":"2026-11-05T06:06:13.263Z","first_published":"2026-11-05T06:25:55.462Z","brands":[{"id":"starlink","name":"Starlink","url":"https://domainspoof.com/brands/starlink"}],"dns":"resolved","resolved":["164.132.235.17"],"resolved_at":"2026-11-06T06:34:26Z","dns_checked_at":"2026-11-06T06:34:26.000Z","dns_since":"2026-11-05T06:34:01.000Z","findings":[{"id":"fb4b5ednjwddnkyotys2e","kind":"phishing_infrastructure","summary":"Resolved to 164.132.235.17, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T06:06:13.263Z","first_published":"2026-11-05T06:25:55.462Z","address":"164.132.235.17","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/starlink"},{"hostname":"sub-aml.com","first_observed":"2026-11-05T05:41:24.661Z","first_published":"2026-11-05T06:25:55.462Z","brands":[],"dns":"resolved","resolved":["104.21.69.103","172.67.207.106"],"resolved_at":"2026-11-05T05:41:50Z","dns_checked_at":"2026-11-06T06:34:26.000Z","dns_since":"2026-11-05T06:34:01.000Z","findings":[{"id":"fpvdein5gw53plaokum6u","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T05:41:24.661Z","first_published":"2026-11-05T06:25:55.462Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/sub-aml.com/"}],"url":"https://domainspoof.com/live?show=all&q=sub-aml.com"},{"hostname":"suppoprece.store","first_observed":"2026-11-05T06:18:02.076Z","first_published":"2026-11-05T06:25:55.462Z","brands":[],"dns":"resolved","resolved":["104.21.63.12","172.67.142.15","2606:4700:3031::6815:3f0c","2606:4700:3031::ac43:8e0f"],"resolved_at":"2026-11-05T06:24:42Z","dns_checked_at":"2026-11-06T06:34:26.000Z","dns_since":"2026-11-05T06:34:01.000Z","findings":[{"id":"fq7vxfly55rdyxldfvumt","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T06:18:02.076Z","first_published":"2026-11-05T06:25:55.462Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=suppoprece.store"},{"hostname":"test.androidloading.com","first_observed":"2026-11-05T06:15:51.123Z","first_published":"2026-11-05T06:25:55.462Z","brands":[],"dns":"resolved","resolved":["185.178.208.191"],"resolved_at":"2026-11-05T06:16:46Z","dns_checked_at":"2026-11-06T06:34:26.000Z","dns_since":"2026-11-05T06:34:01.000Z","findings":[{"id":"f7tkq46ab75paduja5gex","kind":"reported_domain","summary":"Under androidloading.com, reported by PhishDestroy","first_observed":"2026-11-05T06:15:51.123Z","first_published":"2026-11-05T06:25:55.462Z","source":"phishdestroy","source_name":"PhishDestroy","under":"androidloading.com","source_url":"https://phishdestroy.io/domain/androidloading.com/"}],"url":"https://domainspoof.com/live?show=all&q=test.androidloading.com"},{"hostname":"test.api.brooklynstuff.com","first_observed":"2026-11-05T06:15:51.123Z","first_published":"2026-11-05T06:25:55.462Z","brands":[],"dns":"resolved","resolved":["185.149.120.183"],"resolved_at":"2026-11-05T06:16:46Z","dns_checked_at":"2026-11-06T06:34:26.000Z","dns_since":"2026-11-05T06:34:01.000Z","findings":[{"id":"fo7oa72akb6jo6rj4mvok","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T06:15:51.123Z","first_published":"2026-11-05T06:25:55.462Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/test.api.brooklynstuff.com/"}],"url":"https://domainspoof.com/live?show=all&q=test.api.brooklynstuff.com"},{"hostname":"the.homegecko.org","first_observed":"2026-11-05T05:41:24.661Z","first_published":"2026-11-05T06:25:55.462Z","brands":[],"dns":"resolved","resolved":["185.199.108.153"],"resolved_at":"2026-11-05T05:41:50Z","dns_checked_at":"2026-11-06T06:34:26.000Z","dns_since":"2026-11-05T06:34:01.000Z","findings":[{"id":"fe6nr42w6wab3s22zepr2","kind":"reported_domain","summary":"Under homegecko.org, listed by MetaMask","first_observed":"2026-11-05T05:41:24.661Z","first_published":"2026-11-05T06:25:55.462Z","source":"metamask","source_name":"MetaMask","under":"homegecko.org"}],"url":"https://domainspoof.com/live?show=all&q=the.homegecko.org"},{"hostname":"thefengshui.net","first_observed":"2026-11-05T06:10:43.458Z","first_published":"2026-11-05T06:25:55.462Z","brands":[],"dns":"resolved","resolved":["104.21.89.80","172.67.138.215"],"resolved_at":"2026-11-06T06:45:41Z","dns_checked_at":"2026-11-06T06:34:26.000Z","dns_since":"2026-11-05T06:34:01.000Z","findings":[{"id":"fmhdpbchonzb7ti7u4xgw","kind":"reported_domain","summary":"Listed by NPA 165 (finance and insurance)","first_observed":"2026-11-05T06:10:43.458Z","first_published":"2026-11-05T06:25:55.462Z","source":"npa","source_name":"NPA 165","claim":{"category":"finance and insurance"}}],"url":"https://domainspoof.com/live?show=all&q=thefengshui.net"},{"hostname":"toolsshopping.shop","first_observed":"2026-11-05T05:56:51.678Z","first_published":"2026-11-05T06:25:55.462Z","brands":[],"dns":"no_address","resolved":[],"resolved_at":"2026-11-05T06:05:47Z","dns_checked_at":"2026-11-06T06:34:26.000Z","dns_since":"2026-11-05T06:34:01.000Z","findings":[{"id":"fe4zlidkppxo54xug4grk","kind":"reported_domain","summary":"Listed by NPA 165 (information services)","first_observed":"2026-11-05T05:56:51.678Z","first_published":"2026-11-05T06:25:55.462Z","source":"npa","source_name":"NPA 165","claim":{"category":"information services"}}],"url":"https://domainspoof.com/live?show=all&q=toolsshopping.shop"},{"hostname":"traffic-signal-manufacturers.com","first_observed":"2026-11-05T05:21:00.805Z","first_published":"2026-11-05T06:25:55.462Z","brands":[],"dns":"resolved","resolved":["104.21.22.216","172.67.207.32"],"resolved_at":"2026-11-05T05:28:04Z","dns_checked_at":"2026-11-06T06:34:26.000Z","dns_since":"2026-11-05T06:34:01.000Z","findings":[{"id":"fvhp6dc5thkfeyaisgmef","kind":"reported_domain","summary":"Reported by PhishTank","first_observed":"2026-11-05T05:21:00.805Z","first_published":"2026-11-05T06:25:55.462Z","source":"phishtank","source_name":"PhishTank","source_url":"https://phishtank.org/phish_detail.php?phish_id=7974598"}],"url":"https://domainspoof.com/live?show=all&q=traffic-signal-manufacturers.com"},{"hostname":"trendhim.side-step.shop","first_observed":"2026-11-05T05:21:00.805Z","first_published":"2026-11-05T06:25:55.462Z","brands":[],"dns":"resolved","resolved":["104.21.38.142","172.67.223.163"],"resolved_at":"2026-11-05T05:28:04Z","dns_checked_at":"2026-11-06T06:34:26.000Z","dns_since":"2026-11-05T06:34:01.000Z","findings":[{"id":"fox2cyfa74ggocaldbac4","kind":"reported_domain","summary":"Under side-step.shop, listed by CERT Polska","first_observed":"2026-11-05T05:21:00.805Z","first_published":"2026-11-05T06:25:55.462Z","source":"cert_polska","source_name":"CERT Polska","under":"side-step.shop"}],"url":"https://domainspoof.com/live?show=all&q=trendhim.side-step.shop"},{"hostname":"truly1-perferendis52.cfd","first_observed":"2026-11-05T06:18:02.076Z","first_published":"2026-11-05T06:25:55.462Z","brands":[],"dns":"no_address","resolved":[],"resolved_at":"2026-11-05T06:24:42Z","dns_checked_at":"2026-11-06T06:34:26.000Z","dns_since":"2026-11-05T06:34:01.000Z","findings":[{"id":"ft66hari6xwfkgkururmd","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T06:18:02.076Z","first_published":"2026-11-05T06:25:55.462Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=truly1-perferendis52.cfd"},{"hostname":"truly6-vero84.cfd","first_observed":"2026-11-05T06:18:02.076Z","first_published":"2026-11-05T06:25:55.462Z","brands":[],"dns":"no_address","resolved":[],"resolved_at":"2026-11-05T06:24:42Z","dns_checked_at":"2026-11-06T06:34:26.000Z","dns_since":"2026-11-05T06:34:01.000Z","findings":[{"id":"f3wnqth6buf3wo6nkwfs4","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T06:18:02.076Z","first_published":"2026-11-05T06:25:55.462Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=truly6-vero84.cfd"},{"hostname":"truly8-accusamus23.cfd","first_observed":"2026-11-05T06:18:02.076Z","first_published":"2026-11-05T06:25:55.462Z","brands":[],"dns":"no_address","resolved":[],"resolved_at":"2026-11-05T06:24:42Z","dns_checked_at":"2026-11-06T06:34:26.000Z","dns_since":"2026-11-05T06:34:01.000Z","findings":[{"id":"fvihpw64d472hzgi7fbnm","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T06:18:02.076Z","first_published":"2026-11-05T06:25:55.462Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=truly8-accusamus23.cfd"},{"hostname":"trxsdfxd.vcdfrd.ezgateway.net","first_observed":"2026-11-05T05:16:22.661Z","first_published":"2026-11-05T06:25:55.462Z","brands":[],"dns":"resolved","resolved":["172.66.44.87","172.66.47.169"],"resolved_at":"2026-11-05T05:24:11Z","dns_checked_at":"2026-11-06T06:34:26.000Z","dns_since":"2026-11-05T06:34:01.000Z","findings":[{"id":"flqnmh2xvdc3f2a7bmr5g","kind":"reported_domain","summary":"Under ezgateway.net, listed by USOM","first_observed":"2026-11-05T05:16:22.661Z","first_published":"2026-11-05T06:25:55.462Z","source":"usom","source_name":"USOM","under":"ezgateway.net"}],"url":"https://domainspoof.com/live?show=all&q=trxsdfxd.vcdfrd.ezgateway.net"},{"hostname":"tusyadhbf.site","first_observed":"2026-11-05T05:36:18.175Z","first_published":"2026-11-05T06:25:55.462Z","brands":[],"dns":"resolved","resolved":["104.21.21.65","172.67.196.205"],"resolved_at":"2026-11-05T05:44:51Z","dns_checked_at":"2026-11-06T06:34:26.000Z","dns_since":"2026-11-05T06:34:01.000Z","findings":[{"id":"flw2i2r4r4wdciljt7qw2","kind":"reported_domain","summary":"Listed by NPA 165 (e-commerce)","first_observed":"2026-11-05T05:36:18.175Z","first_published":"2026-11-05T06:25:55.462Z","source":"npa","source_name":"NPA 165","claim":{"category":"e-commerce"}}],"url":"https://domainspoof.com/live?show=all&q=tusyadhbf.site"},{"hostname":"umbrenquox.com","first_observed":"2026-11-05T05:46:31.914Z","first_published":"2026-11-05T06:25:55.462Z","brands":[],"dns":"resolved","resolved":["104.21.55.3","172.67.143.194"],"resolved_at":"2026-11-05T05:49:59Z","dns_checked_at":"2026-11-06T06:34:26.000Z","dns_since":"2026-11-05T06:34:01.000Z","findings":[{"id":"fgvd4srrlyafi6pd2ocnt","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T05:46:31.914Z","first_published":"2026-11-05T06:25:55.462Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=umbrenquox.com"},{"hostname":"unimaxshopping.shop","first_observed":"2026-11-05T05:41:24.661Z","first_published":"2026-11-05T06:25:55.462Z","brands":[],"dns":"no_address","resolved":[],"resolved_at":"2026-11-05T05:41:50Z","dns_checked_at":"2026-11-06T06:34:26.000Z","dns_since":"2026-11-05T06:34:01.000Z","findings":[{"id":"fooxv77fszp3ngoafoxli","kind":"reported_domain","summary":"Listed by NPA 165 (e-commerce)","first_observed":"2026-11-05T05:41:24.661Z","first_published":"2026-11-05T06:25:55.462Z","source":"npa","source_name":"NPA 165","claim":{"category":"e-commerce"}}],"url":"https://domainspoof.com/live?show=all&q=unimaxshopping.shop"},{"hostname":"unwitinfri.store","first_observed":"2026-11-05T06:18:02.076Z","first_published":"2026-11-05T06:25:55.462Z","brands":[],"dns":"no_address","resolved":["104.21.69.119","172.67.208.2","2606:4700:3032::6815:4577","2606:4700:3037::ac43:d002"],"resolved_at":"2026-11-05T06:24:42Z","dns_checked_at":"2026-11-06T14:44:24.000Z","findings":[{"id":"fqvstyvjj7g4lz7b7qekk","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T06:18:02.076Z","first_published":"2026-11-05T06:25:55.462Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=unwitinfri.store"},{"hostname":"us04webmeeting.sbs","first_observed":"2026-11-05T05:26:07.294Z","first_published":"2026-11-05T06:25:55.462Z","brands":[],"dns":"resolved","resolved":["64.29.17.65","216.198.79.1"],"resolved_at":"2026-11-05T05:30:48Z","dns_checked_at":"2026-11-06T06:34:26.000Z","dns_since":"2026-11-05T06:34:01.000Z","findings":[{"id":"f3karma2ddcl3zwdx55rf","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T05:26:07.294Z","first_published":"2026-11-05T06:25:55.462Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=us04webmeeting.sbs"},{"hostname":"veraxgrid.digital","first_observed":"2026-11-05T06:18:02.076Z","first_published":"2026-11-05T06:25:55.462Z","brands":[],"dns":"resolved","resolved":["104.21.32.121","172.67.151.212","2606:4700:3031::6815:2079","2606:4700:3037::ac43:97d4"],"resolved_at":"2026-11-05T06:24:42Z","dns_checked_at":"2026-11-06T06:34:26.000Z","dns_since":"2026-11-05T06:34:01.000Z","findings":[{"id":"fhq6nd7dw7hsbsezqnv2u","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T06:18:02.076Z","first_published":"2026-11-05T06:25:55.462Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=veraxgrid.digital"},{"hostname":"verified-dogecoin.pages.dev","first_observed":"2026-11-05T05:56:51.678Z","first_published":"2026-11-05T06:25:55.462Z","brands":[],"dns":"resolved","resolved":["172.66.44.54","172.66.47.202"],"resolved_at":"2026-11-05T06:05:49Z","dns_checked_at":"2026-11-06T06:34:26.000Z","dns_since":"2026-11-05T06:34:01.000Z","findings":[{"id":"fraljxgq3wir46n4c5ngn","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T05:56:51.678Z","first_published":"2026-11-05T06:25:55.462Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=verified-dogecoin.pages.dev"},{"hostname":"video.botwithus.com","first_observed":"2026-11-05T05:31:12.995Z","first_published":"2026-11-05T06:25:55.462Z","brands":[],"dns":"resolved","resolved":["192.168.1.60"],"resolved_at":"2026-11-05T05:35:28Z","dns_checked_at":"2026-11-06T06:34:26.000Z","dns_since":"2026-11-05T06:34:01.000Z","findings":[{"id":"fiavkbwqh4ctlm7f43mwe","kind":"reported_domain","summary":"Under botwithus.com, reported by PhishDestroy","first_observed":"2026-11-05T05:31:12.995Z","first_published":"2026-11-05T06:25:55.462Z","source":"phishdestroy","source_name":"PhishDestroy","under":"botwithus.com","source_url":"https://phishdestroy.io/domain/botwithus.com/"}],"url":"https://domainspoof.com/live?show=all&q=video.botwithus.com"},{"hostname":"wallatjiw.com","first_observed":"2026-11-05T05:46:31.914Z","first_published":"2026-11-05T06:25:55.462Z","brands":[],"dns":"resolved","resolved":["104.21.46.229","172.67.142.184"],"resolved_at":"2026-11-05T05:49:59Z","dns_checked_at":"2026-11-06T06:34:26.000Z","dns_since":"2026-11-05T06:34:01.000Z","findings":[{"id":"fh7arigfxnrpkbollpk7m","kind":"reported_domain","summary":"Listed by NPA 165 (finance and insurance)","first_observed":"2026-11-05T05:46:31.914Z","first_published":"2026-11-05T06:25:55.462Z","source":"npa","source_name":"NPA 165","claim":{"category":"finance and insurance"}}],"url":"https://domainspoof.com/live?show=all&q=wallatjiw.com"},{"hostname":"wdp.trxbi.com","first_observed":"2026-11-05T06:15:51.123Z","first_published":"2026-11-05T06:25:55.462Z","brands":[],"dns":"resolved","resolved":["104.21.83.187","172.67.180.217"],"resolved_at":"2026-11-05T06:16:48Z","dns_checked_at":"2026-11-06T06:34:26.000Z","dns_since":"2026-11-05T06:34:01.000Z","findings":[{"id":"fojlg3wi6sbqfotshwgjh","kind":"reported_domain","summary":"Under trxbi.com, reported by PhishDestroy","first_observed":"2026-11-05T06:15:51.123Z","first_published":"2026-11-05T06:25:55.462Z","source":"phishdestroy","source_name":"PhishDestroy","under":"trxbi.com","source_url":"https://phishdestroy.io/domain/trxbi.com/"}],"url":"https://domainspoof.com/live?show=all&q=wdp.trxbi.com"},{"hostname":"wealthicator.live","first_observed":"2026-11-05T05:46:31.914Z","first_published":"2026-11-05T06:25:55.462Z","brands":[],"dns":"resolved","resolved":["104.21.60.113","172.67.195.231"],"resolved_at":"2026-11-05T05:49:59Z","dns_checked_at":"2026-11-06T06:34:26.000Z","dns_since":"2026-11-05T06:34:01.000Z","findings":[{"id":"fjrp5lu6qifjtwqjkgudx","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T05:46:31.914Z","first_published":"2026-11-05T06:25:55.462Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=wealthicator.live"},{"hostname":"webdisk.kishvandnews.ir","first_observed":"2026-11-05T05:51:38.050Z","first_published":"2026-11-05T06:25:55.462Z","brands":[],"dns":"resolved","resolved":["89.39.208.14"],"resolved_at":"2026-11-05T05:55:49Z","dns_checked_at":"2026-11-06T06:34:26.000Z","dns_since":"2026-11-05T06:34:01.000Z","findings":[{"id":"f4ajnifobjqzzncusohje","kind":"reported_domain","summary":"Under kishvandnews.ir, reported by PhishDestroy","first_observed":"2026-11-05T05:51:38.050Z","first_published":"2026-11-05T06:25:55.462Z","source":"phishdestroy","source_name":"PhishDestroy","under":"kishvandnews.ir","source_url":"https://phishdestroy.io/domain/kishvandnews.ir/"}],"url":"https://domainspoof.com/live?show=all&q=webdisk.kishvandnews.ir"},{"hostname":"webmail.kishvandnews.ir","first_observed":"2026-11-05T05:51:38.050Z","first_published":"2026-11-05T06:25:55.462Z","brands":[],"dns":"resolved","resolved":["89.39.208.14"],"resolved_at":"2026-11-05T05:55:49Z","dns_checked_at":"2026-11-06T06:34:26.000Z","dns_since":"2026-11-05T06:34:01.000Z","findings":[{"id":"fxqnyaam642ubxwy7e54x","kind":"reported_domain","summary":"Under kishvandnews.ir, reported by PhishDestroy","first_observed":"2026-11-05T05:51:38.050Z","first_published":"2026-11-05T06:25:55.462Z","source":"phishdestroy","source_name":"PhishDestroy","under":"kishvandnews.ir","source_url":"https://phishdestroy.io/domain/kishvandnews.ir/"}],"url":"https://domainspoof.com/live?show=all&q=webmail.kishvandnews.ir"},{"hostname":"wp.ni-electrical.com","first_observed":"2026-11-05T05:16:22.661Z","first_published":"2026-11-05T06:25:55.462Z","brands":[],"dns":"resolved","resolved":["109.238.86.5"],"resolved_at":"2026-11-05T05:24:13Z","dns_checked_at":"2026-11-06T06:34:26.000Z","dns_since":"2026-11-05T06:34:01.000Z","findings":[{"id":"f6uj2z3gt5qjjsls5ya42","kind":"reported_domain","summary":"Under ni-electrical.com, listed by CERT Polska","first_observed":"2026-11-05T05:16:22.661Z","first_published":"2026-11-05T06:25:55.462Z","source":"cert_polska","source_name":"CERT Polska","under":"ni-electrical.com"}],"url":"https://domainspoof.com/live?show=all&q=wp.ni-electrical.com"},{"hostname":"www.1xbet-google-play4.top","first_observed":"2026-11-05T05:30:49.476Z","first_published":"2026-11-05T06:25:55.462Z","brands":[{"id":"google","name":"Google","url":"https://domainspoof.com/brands/google"}],"dns":"resolved","resolved":["186.2.174.131"],"resolved_at":"2026-11-06T06:34:26Z","dns_checked_at":"2026-11-06T06:34:26.000Z","dns_since":"2026-11-05T06:34:01.000Z","findings":[{"id":"fgfzfvq47zw6pau5fo3fh","kind":"phishing_infrastructure","summary":"Resolved to 186.2.174.131, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T05:30:49.476Z","first_published":"2026-11-05T06:25:55.462Z","address":"186.2.174.131","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/google"},{"hostname":"www.bitrefill.com-cl01-esim-gift.com","first_observed":"2026-11-05T06:05:52.028Z","first_published":"2026-11-05T06:25:55.462Z","brands":[{"id":"bitrefill","name":"Bitrefill","url":"https://domainspoof.com/brands/bitrefill"}],"dns":"resolved","resolved":["62.60.226.39"],"resolved_at":"2026-11-06T06:34:26Z","dns_checked_at":"2026-11-06T06:34:26.000Z","dns_since":"2026-11-05T06:34:01.000Z","findings":[{"id":"fhira3m2atoifxpvgpbvu","kind":"spamhaus_drop","summary":"Resolved to 62.60.226.39 on Spamhaus DROP","first_observed":"2026-11-05T06:05:52.028Z","first_published":"2026-11-05T06:25:55.462Z","address":"62.60.226.39","list":"spamhaus_drop","list_name":"Spamhaus DROP"}],"url":"https://domainspoof.com/brands/bitrefill"},{"hostname":"www.btcboxweb.com","first_observed":"2026-11-05T06:05:33.823Z","first_published":"2026-11-05T06:25:55.462Z","brands":[{"id":"btcbox","name":"BTCBOX","url":"https://domainspoof.com/brands/btcbox"}],"dns":"resolved","resolved":["104.21.39.125","172.67.145.73","2606:4700:3035::6815:277d","2606:4700:3035::ac43:9149"],"resolved_at":"2026-11-05T06:06:13Z","dns_checked_at":"2026-11-06T06:34:26.000Z","dns_since":"2026-11-05T06:34:01.000Z","findings":[{"id":"ffmo6ojzcygn5q22tgo4n","kind":"reported_domain","summary":"Under btcboxweb.com, listed by MetaMask","first_observed":"2026-11-05T06:05:33.823Z","first_published":"2026-11-05T06:25:55.462Z","source":"metamask","source_name":"MetaMask","under":"btcboxweb.com"}],"url":"https://domainspoof.com/brands/btcbox"},{"hostname":"www.dealnee.com","first_observed":"2026-11-05T06:15:51.123Z","first_published":"2026-11-05T06:25:55.462Z","brands":[],"dns":"resolved","resolved":["104.21.58.245","172.67.166.126"],"resolved_at":"2026-11-05T06:16:06Z","dns_checked_at":"2026-11-06T06:34:26.000Z","dns_since":"2026-11-05T06:34:01.000Z","findings":[{"id":"fz2kkvflil6lvlejaqfef","kind":"reported_domain","summary":"Under dealnee.com, reported by PhishDestroy","first_observed":"2026-11-05T06:15:51.123Z","first_published":"2026-11-05T06:25:55.462Z","source":"phishdestroy","source_name":"PhishDestroy","under":"dealnee.com","source_url":"https://phishdestroy.io/domain/dealnee.com/"}],"url":"https://domainspoof.com/live?show=all&q=www.dealnee.com"},{"hostname":"www.heiyts.com","first_observed":"2026-11-05T05:26:07.294Z","first_published":"2026-11-05T06:25:55.462Z","brands":[],"dns":"resolved","resolved":["104.21.55.39","172.67.144.110"],"resolved_at":"2026-11-05T05:30:49Z","dns_checked_at":"2026-11-06T06:34:26.000Z","dns_since":"2026-11-05T06:34:01.000Z","findings":[{"id":"fd6omlg52mazlhagr4asd","kind":"reported_domain","summary":"Under heiyts.com, reported by PhishDestroy","first_observed":"2026-11-05T05:26:07.294Z","first_published":"2026-11-05T06:25:55.462Z","source":"phishdestroy","source_name":"PhishDestroy","under":"heiyts.com","source_url":"https://phishdestroy.io/domain/heiyts.com/"}],"url":"https://domainspoof.com/live?show=all&q=www.heiyts.com"},{"hostname":"www.hugo-boss.com.ua","first_observed":"2026-11-05T06:16:06.692Z","first_published":"2026-11-05T06:25:55.462Z","brands":[{"id":"hugo-boss","name":"Hugo Boss","url":"https://domainspoof.com/brands/hugo-boss"}],"dns":"resolved","resolved":["185.104.45.89","185.104.45.189"],"resolved_at":"2026-11-06T06:34:26Z","dns_checked_at":"2026-11-06T06:34:26.000Z","dns_since":"2026-11-05T06:34:01.000Z","findings":[{"id":"f6qiasaccl5yspyalz2e3","kind":"phishing_infrastructure","summary":"Resolved to 185.104.45.89, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T06:16:06.692Z","first_published":"2026-11-05T06:25:55.462Z","address":"185.104.45.89","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/hugo-boss"},{"hostname":"www.jurno.click","first_observed":"2026-11-05T06:05:33.823Z","first_published":"2026-11-05T06:25:55.462Z","brands":[],"dns":"resolved","resolved":["104.21.25.165","172.67.134.99"],"resolved_at":"2026-11-05T06:06:16Z","dns_checked_at":"2026-11-06T06:34:26.000Z","dns_since":"2026-11-05T06:34:01.000Z","findings":[{"id":"fpvt4sttzzypj4jngyazk","kind":"reported_domain","summary":"Under jurno.click, listed by CERT Polska","first_observed":"2026-11-05T06:05:33.823Z","first_published":"2026-11-05T06:25:55.462Z","source":"cert_polska","source_name":"CERT Polska","under":"jurno.click"}],"url":"https://domainspoof.com/live?show=all&q=www.jurno.click"},{"hostname":"www.justlisting.in","first_observed":"2026-11-05T05:31:12.995Z","first_published":"2026-11-05T06:25:55.462Z","brands":[],"dns":"resolved","resolved":["50.6.250.46"],"resolved_at":"2026-11-05T05:35:30Z","dns_checked_at":"2026-11-06T06:34:26.000Z","dns_since":"2026-11-05T06:34:01.000Z","findings":[{"id":"fwi2nau5h3je4wxuf4opu","kind":"reported_domain","summary":"Under justlisting.in, reported by PhishDestroy","first_observed":"2026-11-05T05:31:12.995Z","first_published":"2026-11-05T06:25:55.462Z","source":"phishdestroy","source_name":"PhishDestroy","under":"justlisting.in","source_url":"https://phishdestroy.io/domain/justlisting.in/"}],"url":"https://domainspoof.com/live?show=all&q=www.justlisting.in"},{"hostname":"www.kishvandnews.ir","first_observed":"2026-11-05T05:51:38.050Z","first_published":"2026-11-05T06:25:55.462Z","brands":[],"dns":"resolved","resolved":["89.39.208.14"],"resolved_at":"2026-11-05T05:55:50Z","dns_checked_at":"2026-11-06T06:34:26.000Z","dns_since":"2026-11-05T06:34:01.000Z","findings":[{"id":"fngsj3xtw4u7xtgqbdaus","kind":"reported_domain","summary":"Under kishvandnews.ir, reported by PhishDestroy","first_observed":"2026-11-05T05:51:38.050Z","first_published":"2026-11-05T06:25:55.462Z","source":"phishdestroy","source_name":"PhishDestroy","under":"kishvandnews.ir","source_url":"https://phishdestroy.io/domain/kishvandnews.ir/"}],"url":"https://domainspoof.com/live?show=all&q=www.kishvandnews.ir"},{"hostname":"www.kycp2p-binance.com","first_observed":"2026-11-05T06:13:34.344Z","first_published":"2026-11-05T06:25:55.462Z","brands":[{"id":"binance","name":"Binance","url":"https://domainspoof.com/brands/binance"}],"dns":"resolved","resolved":["2.57.91.91"],"resolved_at":"2026-11-06T06:34:26Z","dns_checked_at":"2026-11-06T06:34:26.000Z","dns_since":"2026-11-05T06:34:01.000Z","findings":[{"id":"fbara4ujjrrppnpaqywxk","kind":"phishing_infrastructure","summary":"Resolved to 2.57.91.91, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T06:13:34.344Z","first_published":"2026-11-05T06:25:55.462Z","address":"2.57.91.91","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/binance"},{"hostname":"www.lcaichain.live","first_observed":"2026-11-05T05:41:24.661Z","first_published":"2026-11-05T06:25:55.462Z","brands":[],"dns":"resolved","resolved":["64.29.17.1","216.198.79.1"],"resolved_at":"2026-11-05T05:41:51Z","dns_checked_at":"2026-11-06T06:34:26.000Z","dns_since":"2026-11-05T06:34:01.000Z","findings":[{"id":"fmclq4vxtfsqhnlho5gmh","kind":"reported_domain","summary":"Under lcaichain.live, reported by PhishDestroy","first_observed":"2026-11-05T05:41:24.661Z","first_published":"2026-11-05T06:25:55.462Z","source":"phishdestroy","source_name":"PhishDestroy","under":"lcaichain.live","source_url":"https://phishdestroy.io/domain/lcaichain.live/"}],"url":"https://domainspoof.com/live?show=all&q=www.lcaichain.live"},{"hostname":"www.login-cashapp.com.harbourlinexp.com","first_observed":"2026-11-05T05:24:13.690Z","first_published":"2026-11-05T06:25:55.462Z","brands":[{"id":"cash-app","name":"Cash App","url":"https://domainspoof.com/brands/cash-app"}],"dns":"resolved","resolved":["198.251.89.161"],"resolved_at":"2026-11-06T06:34:26Z","dns_checked_at":"2026-11-06T06:34:26.000Z","dns_since":"2026-11-05T06:34:01.000Z","findings":[{"id":"feejdnkad3jdrtcbtaq3a","kind":"phishing_infrastructure","summary":"Resolved to 198.251.89.161, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T05:24:13.690Z","first_published":"2026-11-05T06:25:55.462Z","address":"198.251.89.161","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/cash-app"},{"hostname":"www.mrbeast.no","first_observed":"2026-11-05T05:44:52.567Z","first_published":"2026-11-05T06:25:55.462Z","brands":[{"id":"mrbeast","name":"MrBeast","url":"https://domainspoof.com/brands/mrbeast"}],"dns":"resolved","resolved":["194.63.248.52"],"resolved_at":"2026-11-06T06:34:26Z","dns_checked_at":"2026-11-06T06:34:26.000Z","dns_since":"2026-11-05T06:34:01.000Z","findings":[{"id":"fjdynb6rpuow7dlrxxkim","kind":"phishing_infrastructure","summary":"Resolved to 194.63.248.52, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T05:44:52.567Z","first_published":"2026-11-05T06:25:55.462Z","address":"194.63.248.52","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/mrbeast"},{"hostname":"www.new.androidloading.com","first_observed":"2026-11-05T05:16:22.661Z","first_published":"2026-11-05T06:25:55.462Z","brands":[],"dns":"resolved","resolved":["185.178.208.191"],"resolved_at":"2026-11-05T05:24:14Z","dns_checked_at":"2026-11-06T06:34:26.000Z","dns_since":"2026-11-05T06:34:01.000Z","findings":[{"id":"fibzgeme4nvshykl7v6lh","kind":"reported_domain","summary":"Under androidloading.com, reported by PhishDestroy","first_observed":"2026-11-05T05:16:22.661Z","first_published":"2026-11-05T06:25:55.462Z","source":"phishdestroy","source_name":"PhishDestroy","under":"androidloading.com","source_url":"https://phishdestroy.io/domain/androidloading.com/"}],"url":"https://domainspoof.com/live?show=all&q=www.new.androidloading.com"},{"hostname":"www.pay-bitrefill.com-cl01-esim-gift.com","first_observed":"2026-11-05T06:05:52.998Z","first_published":"2026-11-05T06:25:55.462Z","brands":[{"id":"bitrefill","name":"Bitrefill","url":"https://domainspoof.com/brands/bitrefill"}],"dns":"resolved","resolved":["62.60.226.39"],"resolved_at":"2026-11-06T06:34:26Z","dns_checked_at":"2026-11-06T06:34:26.000Z","dns_since":"2026-11-05T06:34:01.000Z","findings":[{"id":"fnbt6ymrmfrnunz75pbpl","kind":"spamhaus_drop","summary":"Resolved to 62.60.226.39 on Spamhaus DROP","first_observed":"2026-11-05T06:05:52.998Z","first_published":"2026-11-05T06:25:55.462Z","address":"62.60.226.39","list":"spamhaus_drop","list_name":"Spamhaus DROP"}],"url":"https://domainspoof.com/brands/bitrefill"},{"hostname":"www.pma.wetlandrestorationecology.com","first_observed":"2026-11-05T06:15:51.123Z","first_published":"2026-11-05T06:25:55.462Z","brands":[],"dns":"resolved","resolved":["185.149.120.183"],"resolved_at":"2026-11-05T06:16:06Z","dns_checked_at":"2026-11-06T06:34:26.000Z","dns_since":"2026-11-05T06:34:01.000Z","findings":[{"id":"fufsn7fsfecespquiealo","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T06:15:51.123Z","first_published":"2026-11-05T06:25:55.462Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/www.pma.wetlandrestorationecology.com/"}],"url":"https://domainspoof.com/live?show=all&q=www.pma.wetlandrestorationecology.com"},{"hostname":"www.roblox.et","first_observed":"2026-11-05T06:05:33.823Z","first_published":"2026-11-05T06:25:55.462Z","brands":[{"id":"roblox","name":"Roblox","url":"https://domainspoof.com/brands/roblox"}],"dns":"resolved","resolved":["202.170.75.201"],"resolved_at":"2026-11-06T06:34:26Z","dns_checked_at":"2026-11-06T06:34:26.000Z","dns_since":"2026-11-05T06:34:01.000Z","findings":[{"id":"fsoforp6a3rhuqzs53sea","kind":"reported_domain","summary":"Under roblox.et, reported by PhishDestroy","first_observed":"2026-11-05T06:05:33.823Z","first_published":"2026-11-05T06:25:55.462Z","source":"phishdestroy","source_name":"PhishDestroy","under":"roblox.et","source_url":"https://phishdestroy.io/domain/roblox.et/"},{"id":"fdd3coq3c4kom4bk3h7v2","kind":"phishing_infrastructure","summary":"Resolved to 202.170.75.201, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T06:06:16.364Z","first_published":"2026-11-05T06:25:55.462Z","address":"202.170.75.201","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"},{"id":"f2efupvxdbo7wxfmss2uo","kind":"spamhaus_drop","summary":"Resolved to 202.170.75.201 on Spamhaus DROP","first_observed":"2026-11-05T06:06:16.364Z","first_published":"2026-11-05T06:25:55.462Z","address":"202.170.75.201","list":"spamhaus_drop","list_name":"Spamhaus DROP"}],"url":"https://domainspoof.com/brands/roblox"},{"hostname":"www.sanzhixueyuan.com","first_observed":"2026-11-05T05:41:24.661Z","first_published":"2026-11-05T06:25:55.462Z","brands":[],"dns":"resolved","resolved":["154.220.44.140"],"resolved_at":"2026-11-05T05:41:51Z","dns_checked_at":"2026-11-06T06:34:26.000Z","dns_since":"2026-11-05T06:34:01.000Z","findings":[{"id":"f5m3yt6zpc5mevjneqceu","kind":"reported_domain","summary":"Under sanzhixueyuan.com, listed by CERT Polska","first_observed":"2026-11-05T05:41:24.661Z","first_published":"2026-11-05T06:25:55.462Z","source":"cert_polska","source_name":"CERT Polska","under":"sanzhixueyuan.com"}],"url":"https://domainspoof.com/live?show=all&q=www.sanzhixueyuan.com"},{"hostname":"www.sberbank.ee","first_observed":"2026-11-05T06:10:32.244Z","first_published":"2026-11-05T06:25:55.462Z","brands":[{"id":"sberbank","name":"Sberbank","url":"https://domainspoof.com/brands/sberbank"}],"dns":"resolved","resolved":["185.31.240.240"],"resolved_at":"2026-11-06T06:34:26Z","dns_checked_at":"2026-11-06T06:34:26.000Z","dns_since":"2026-11-05T06:34:01.000Z","findings":[{"id":"flrrdeg67lcjgblacfn3d","kind":"phishing_infrastructure","summary":"Resolved to 185.31.240.240, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T06:10:32.244Z","first_published":"2026-11-05T06:25:55.462Z","address":"185.31.240.240","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/sberbank"},{"hostname":"www.topwealthtrading.com","first_observed":"2026-11-05T05:16:22.661Z","first_published":"2026-11-05T06:25:55.462Z","brands":[],"dns":"resolved","resolved":["66.226.149.216"],"resolved_at":"2026-11-05T05:24:14Z","dns_checked_at":"2026-11-06T06:34:26.000Z","dns_since":"2026-11-05T06:34:01.000Z","findings":[{"id":"f6srn6fooowrr7pcasicq","kind":"reported_domain","summary":"Under topwealthtrading.com, reported by PhishDestroy","first_observed":"2026-11-05T05:16:22.661Z","first_published":"2026-11-05T06:25:55.462Z","source":"phishdestroy","source_name":"PhishDestroy","under":"topwealthtrading.com","source_url":"https://phishdestroy.io/domain/topwealthtrading.com/"}],"url":"https://domainspoof.com/live?show=all&q=www.topwealthtrading.com"},{"hostname":"www.veils.dev","first_observed":"2026-11-05T06:10:43.458Z","first_published":"2026-11-05T06:25:55.462Z","brands":[],"dns":"resolved","resolved":["64.29.17.65","216.198.79.65"],"resolved_at":"2026-11-05T06:13:35Z","dns_checked_at":"2026-11-06T06:34:26.000Z","dns_since":"2026-11-05T06:34:01.000Z","findings":[{"id":"fvgosbixc4fnbvhbovcyj","kind":"reported_domain","summary":"Under veils.dev, listed by MetaMask","first_observed":"2026-11-05T06:10:43.458Z","first_published":"2026-11-05T06:25:55.462Z","source":"metamask","source_name":"MetaMask","under":"veils.dev"}],"url":"https://domainspoof.com/live?show=all&q=www.veils.dev"},{"hostname":"www.zzzjk.ezgateway.net","first_observed":"2026-11-05T06:15:51.123Z","first_published":"2026-11-05T06:25:55.462Z","brands":[],"dns":"resolved","resolved":["104.21.75.204"],"resolved_at":"2026-11-05T06:16:06Z","dns_checked_at":"2026-11-06T06:34:26.000Z","dns_since":"2026-11-05T06:34:01.000Z","findings":[{"id":"fm2kywe2hnjyp4l76dwvm","kind":"reported_domain","summary":"Under ezgateway.net, listed by USOM","first_observed":"2026-11-05T06:15:51.123Z","first_published":"2026-11-05T06:25:55.462Z","source":"usom","source_name":"USOM","under":"ezgateway.net"}],"url":"https://domainspoof.com/live?show=all&q=www.zzzjk.ezgateway.net"},{"hostname":"x-redirection-live.com","first_observed":"2026-11-05T05:36:18.175Z","first_published":"2026-11-05T06:25:55.462Z","brands":[],"dns":"resolved","resolved":["104.21.75.187","172.67.180.135"],"resolved_at":"2026-11-05T05:44:52Z","dns_checked_at":"2026-11-06T06:34:26.000Z","dns_since":"2026-11-05T06:34:01.000Z","findings":[{"id":"fm64qmsi6fmcaiqogxsts","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T05:36:18.175Z","first_published":"2026-11-05T06:25:55.462Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=x-redirection-live.com"},{"hostname":"xinlei188.com","first_observed":"2026-11-05T05:41:24.661Z","first_published":"2026-11-05T06:25:55.462Z","brands":[],"dns":"resolved","resolved":["104.21.79.203","172.67.147.213"],"resolved_at":"2026-11-05T05:41:51Z","dns_checked_at":"2026-11-06T06:34:26.000Z","dns_since":"2026-11-05T06:34:01.000Z","findings":[{"id":"f2i6d3bp6xcknqlo6jcme","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T05:41:24.661Z","first_published":"2026-11-05T06:25:55.462Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=xinlei188.com"},{"hostname":"zjrhpm.com","first_observed":"2026-11-05T05:56:51.678Z","first_published":"2026-11-05T06:25:55.462Z","brands":[{"id":"smbc-card","name":"SMBC Card","url":"https://domainspoof.com/brands/smbc-card"}],"dns":"resolved","resolved":["104.21.70.250","172.67.141.20"],"resolved_at":"2026-11-05T06:05:56Z","dns_checked_at":"2026-11-06T06:34:26.000Z","dns_since":"2026-11-05T06:34:01.000Z","findings":[{"id":"fbuyrhafdxibb7nmxahpq","kind":"reported_domain","summary":"Listed by JPCERT/CC as imitating 三井住友カード","first_observed":"2026-11-05T05:56:51.678Z","first_published":"2026-11-05T06:25:55.462Z","source":"jpcert","source_name":"JPCERT/CC","claim":{"brand":"三井住友カード"}}],"url":"https://domainspoof.com/brands/smbc-card"},{"hostname":"zlqqx.com","first_observed":"2026-11-05T05:36:18.175Z","first_published":"2026-11-05T06:25:55.462Z","brands":[],"dns":"resolved","resolved":["104.21.2.234","172.67.129.204"],"resolved_at":"2026-11-05T05:44:53Z","dns_checked_at":"2026-11-06T06:34:26.000Z","dns_since":"2026-11-05T06:34:01.000Z","findings":[{"id":"fcmmlqemcvp4epitzhegv","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T05:36:18.175Z","first_published":"2026-11-05T06:25:55.462Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=zlqqx.com"},{"hostname":"bellsouths.org","first_observed":"2026-11-05T05:18:17.000Z","first_published":"2026-11-05T05:18:17.000Z","brands":[{"id":"at-and-t","name":"AT&T","url":"https://domainspoof.com/brands/at-and-t"}],"dns":"resolved","resolved":["2.57.91.91"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of att.com (an added character), resolved to 2.57.91.91, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T05:18:17.000Z","first_published":"2026-11-05T05:18:17.000Z","of":"att.com","spelling":"insertion","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"2.57.91.91","flagged_at":"2026-11-05T05:18:17Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/at-and-t"},{"hostname":"bitget.pl","first_observed":"2026-11-05T05:18:17.000Z","first_published":"2026-11-05T05:18:17.000Z","brands":[{"id":"bitget","name":"Bitget","url":"https://domainspoof.com/brands/bitget"}],"dns":"resolved","resolved":["185.253.212.22"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of bitget.com (same name, other ending), resolved to 185.253.212.22, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T05:18:17.000Z","first_published":"2026-11-05T05:18:17.000Z","of":"bitget.com","spelling":"tld","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"185.253.212.22","flagged_at":"2026-11-05T05:18:17Z"}]}],"url":"https://domainspoof.com/brands/bitget"},{"hostname":"cafe-xaman.app","first_observed":"2026-11-05T05:18:17.000Z","first_published":"2026-11-05T05:18:17.000Z","brands":[{"id":"xaman","name":"Xaman","url":"https://domainspoof.com/brands/xaman"}],"dns":"resolved","resolved":["104.21.6.79","172.67.134.158","2606:4700:3033::6815:64f","2606:4700:3037::ac43:869e"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “xaman”, a name we match for Xaman, listed by MetaMask","first_observed":"2026-11-05T05:18:17.000Z","first_published":"2026-11-05T05:18:17.000Z","of":"xaman.app","spelling":"combo","match":"name","token":"xaman","found_by":"zone_file","listings":[{"kind":"reported","source":"metamask","source_name":"MetaMask","host":"cafe-xaman.app","flagged_at":"2026-11-05T05:18:17Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/xaman"},{"hostname":"cdn-microsoft.top","first_observed":"2026-11-05T05:18:17.000Z","first_published":"2026-11-05T05:18:17.000Z","brands":[{"id":"microsoft","name":"Microsoft","url":"https://domainspoof.com/brands/microsoft"}],"dns":"resolved","resolved":["45.79.154.26","172.232.24.161","172.232.24.235"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “microsoft”, a name we match for Microsoft, resolved to 172.232.24.161, where reported phishing was found in the 48 hours before, and resolved to 172.232.24.235, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T05:18:17.000Z","first_published":"2026-11-05T05:18:17.000Z","of":"microsoft.com","spelling":"combo","match":"name","token":"microsoft","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"172.232.24.161","flagged_at":"2026-11-05T05:18:17Z"},{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"172.232.24.235","flagged_at":"2026-11-05T05:18:17Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/microsoft"},{"hostname":"coinbase.co.jp","first_observed":"2026-11-05T05:18:17.000Z","first_published":"2026-11-05T05:18:17.000Z","brands":[{"id":"coinbase","name":"Coinbase","url":"https://domainspoof.com/brands/coinbase"}],"dns":"resolved","resolved":["150.95.255.38"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of coinbase.com (same name, other ending), resolved to 150.95.255.38, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T05:18:17.000Z","first_published":"2026-11-05T05:18:17.000Z","of":"coinbase.com","spelling":"tld","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"150.95.255.38","flagged_at":"2026-11-05T05:18:17Z"}]}],"url":"https://domainspoof.com/brands/coinbase"},{"hostname":"coinbase.you","first_observed":"2026-11-05T05:18:17.000Z","first_published":"2026-11-05T05:18:17.000Z","brands":[{"id":"coinbase","name":"Coinbase","url":"https://domainspoof.com/brands/coinbase"}],"dns":"resolved","resolved":["185.53.179.128"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of coinbase.com (same name, other ending), reported by PhishDestroy","first_observed":"2026-11-05T05:18:17.000Z","first_published":"2026-11-05T05:18:17.000Z","of":"coinbase.com","spelling":"tld","found_by":"dns_sweep","listings":[{"kind":"reported","source":"phishdestroy","source_name":"PhishDestroy","host":"coinbase.you","flagged_at":"2026-11-05T05:18:17Z"}]}],"url":"https://domainspoof.com/brands/coinbase"},{"hostname":"curve.best","first_observed":"2026-11-05T05:18:17.000Z","first_published":"2026-11-05T05:18:17.000Z","brands":[{"id":"curve-finance","name":"Curve Finance","url":"https://domainspoof.com/brands/curve-finance"}],"dns":"resolved","resolved":["2.59.170.20","104.219.250.37"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of curve.finance (same name, other ending), resolved to 2.59.170.20, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T05:18:17.000Z","first_published":"2026-11-05T05:18:17.000Z","of":"curve.finance","spelling":"tld","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"2.59.170.20","flagged_at":"2026-11-05T05:18:17Z"}]}],"url":"https://domainspoof.com/brands/curve-finance"},{"hostname":"details-xaman.app","first_observed":"2026-11-05T05:18:17.000Z","first_published":"2026-11-05T05:18:17.000Z","brands":[{"id":"xaman","name":"Xaman","url":"https://domainspoof.com/brands/xaman"}],"dns":"resolved","resolved":["104.21.51.117","172.67.180.41","2606:4700:3031::ac43:b429","2606:4700:3035::6815:3375"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “xaman”, a name we match for Xaman, listed by MetaMask","first_observed":"2026-11-05T05:18:17.000Z","first_published":"2026-11-05T05:18:17.000Z","of":"xaman.app","spelling":"combo","match":"name","token":"xaman","found_by":"zone_file","listings":[{"kind":"reported","source":"metamask","source_name":"MetaMask","host":"details-xaman.app","flagged_at":"2026-11-05T05:18:17Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/xaman"},{"hostname":"ethereum.inc","first_observed":"2026-11-05T05:18:17.000Z","first_published":"2026-11-05T05:18:17.000Z","brands":[{"id":"ethereum","name":"Ethereum","url":"https://domainspoof.com/brands/ethereum"}],"dns":"resolved","resolved":["150.95.255.38"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of ethereum.org (same name, other ending), resolved to 150.95.255.38, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T05:18:17.000Z","first_published":"2026-11-05T05:18:17.000Z","of":"ethereum.org","spelling":"tld","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"150.95.255.38","flagged_at":"2026-11-05T05:18:17Z"}]}],"url":"https://domainspoof.com/brands/ethereum"},{"hostname":"exodus.com.pr","first_observed":"2026-11-05T05:18:17.000Z","first_published":"2026-11-05T05:18:17.000Z","brands":[{"id":"exodus","name":"Exodus","url":"https://domainspoof.com/brands/exodus"}],"dns":"resolved","resolved":["192.142.1.181"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of exodus.com (same name, other ending), resolved to 192.142.1.181, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T05:18:17.000Z","first_published":"2026-11-05T05:18:17.000Z","of":"exodus.com","spelling":"tld","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"192.142.1.181","flagged_at":"2026-11-05T05:18:17Z"}]}],"url":"https://domainspoof.com/brands/exodus"},{"hostname":"exodus.im","first_observed":"2026-11-05T05:18:17.000Z","first_published":"2026-11-05T05:18:17.000Z","brands":[{"id":"exodus","name":"Exodus","url":"https://domainspoof.com/brands/exodus"}],"dns":"resolved","resolved":["154.86.119.115"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of exodus.com (same name, other ending), resolved to 154.86.119.115, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T05:18:17.000Z","first_published":"2026-11-05T05:18:17.000Z","of":"exodus.com","spelling":"tld","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"154.86.119.115","flagged_at":"2026-11-05T05:18:17Z"}]}],"url":"https://domainspoof.com/brands/exodus"},{"hostname":"explorer-xaman.app","first_observed":"2026-11-05T05:18:17.000Z","first_published":"2026-11-05T05:18:17.000Z","brands":[{"id":"xaman","name":"Xaman","url":"https://domainspoof.com/brands/xaman"}],"dns":"resolved","resolved":["104.21.90.183","172.67.203.209","2606:4700:3033::6815:5ab7","2606:4700:3034::ac43:cbd1"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “xaman”, a name we match for Xaman, listed by MetaMask","first_observed":"2026-11-05T05:18:17.000Z","first_published":"2026-11-05T05:18:17.000Z","of":"xaman.app","spelling":"combo","match":"name","token":"xaman","found_by":"zone_file","listings":[{"kind":"reported","source":"metamask","source_name":"MetaMask","host":"explorer-xaman.app","flagged_at":"2026-11-05T05:18:17Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/xaman"},{"hostname":"hsbc.love","first_observed":"2026-11-05T05:18:17.000Z","first_published":"2026-11-05T05:18:17.000Z","brands":[{"id":"hsbc","name":"HSBC","url":"https://domainspoof.com/brands/hsbc"}],"dns":"resolved","resolved":["150.95.255.38"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of hsbc.com (same name, other ending), resolved to 150.95.255.38, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T05:18:17.000Z","first_published":"2026-11-05T05:18:17.000Z","of":"hsbc.com","spelling":"tld","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"150.95.255.38","flagged_at":"2026-11-05T05:18:17Z"}]}],"url":"https://domainspoof.com/brands/hsbc"},{"hostname":"hyperliquid.com.mx","first_observed":"2026-11-05T05:18:17.000Z","first_published":"2026-11-05T05:18:17.000Z","brands":[{"id":"hyperliquid","name":"Hyperliquid","url":"https://domainspoof.com/brands/hyperliquid"}],"dns":"resolved","resolved":["185.53.179.136"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of hyperliquid.xyz (same name, other ending), listed by MetaMask, and reported by PhishDestroy","first_observed":"2026-11-05T05:18:17.000Z","first_published":"2026-11-05T05:18:17.000Z","of":"hyperliquid.xyz","spelling":"tld","found_by":"dns_sweep","listings":[{"kind":"reported","source":"metamask","source_name":"MetaMask","host":"hyperliquid.com.mx","flagged_at":"2026-11-05T05:18:17Z"},{"kind":"reported","source":"phishdestroy","source_name":"PhishDestroy","host":"hyperliquid.com.mx","flagged_at":"2026-11-05T05:18:17Z"}]}],"url":"https://domainspoof.com/brands/hyperliquid"},{"hostname":"imtokne.cyou","first_observed":"2026-11-05T05:18:17.000Z","first_published":"2026-11-05T05:18:17.000Z","brands":[{"id":"imtoken","name":"imToken","url":"https://domainspoof.com/brands/imtoken"}],"dns":"resolved","resolved":["109.206.247.15"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of token.im (two letters swapped), resolved to 109.206.247.15 on Spamhaus DROP","first_observed":"2026-11-05T05:18:17.000Z","first_published":"2026-11-05T05:18:17.000Z","of":"token.im","spelling":"transposition","found_by":"zone_file","listings":[{"kind":"address","source":"spamhaus_drop","list_name":"Spamhaus DROP","address":"109.206.247.15","flagged_at":"2026-11-05T05:18:17Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/imtoken"},{"hostname":"ledger.com.cv","first_observed":"2026-11-05T05:18:17.000Z","first_published":"2026-11-05T05:18:17.000Z","brands":[{"id":"ledger","name":"Ledger","url":"https://domainspoof.com/brands/ledger"}],"dns":"resolved","resolved":["185.53.179.145"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of ledger.com (same name, other ending), listed by MetaMask","first_observed":"2026-11-05T05:18:17.000Z","first_published":"2026-11-05T05:18:17.000Z","of":"ledger.com","spelling":"tld","found_by":"dns_sweep","listings":[{"kind":"reported","source":"metamask","source_name":"MetaMask","host":"ledger.com.cv","flagged_at":"2026-11-05T05:18:17Z"}]}],"url":"https://domainspoof.com/brands/ledger"},{"hostname":"ledger.com.gr","first_observed":"2026-11-05T05:18:17.000Z","first_published":"2026-11-05T05:18:17.000Z","brands":[{"id":"ledger","name":"Ledger","url":"https://domainspoof.com/brands/ledger"}],"dns":"resolved","resolved":["127.0.0.1"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of ledger.com (same name, other ending), listed by MetaMask","first_observed":"2026-11-05T05:18:17.000Z","first_published":"2026-11-05T05:18:17.000Z","of":"ledger.com","spelling":"tld","found_by":"dns_sweep","listings":[{"kind":"reported","source":"metamask","source_name":"MetaMask","host":"ledger.com.gr","flagged_at":"2026-11-05T05:18:17Z"}]}],"url":"https://domainspoof.com/brands/ledger"},{"hostname":"ledger.com.sl","first_observed":"2026-11-05T05:18:17.000Z","first_published":"2026-11-05T05:18:17.000Z","brands":[{"id":"ledger","name":"Ledger","url":"https://domainspoof.com/brands/ledger"}],"dns":"resolved","resolved":["127.0.0.1"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of ledger.com (same name, other ending), listed by MetaMask","first_observed":"2026-11-05T05:18:17.000Z","first_published":"2026-11-05T05:18:17.000Z","of":"ledger.com","spelling":"tld","found_by":"dns_sweep","listings":[{"kind":"reported","source":"metamask","source_name":"MetaMask","host":"ledger.com.sl","flagged_at":"2026-11-05T05:18:17Z"}]}],"url":"https://domainspoof.com/brands/ledger"},{"hostname":"lido.fo","first_observed":"2026-11-05T05:18:17.000Z","first_published":"2026-11-05T05:18:17.000Z","brands":[{"id":"lido","name":"Lido","url":"https://domainspoof.com/brands/lido"}],"dns":"resolved","resolved":["185.53.179.145"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of lido.fi (same name, other ending), reported by PhishDestroy","first_observed":"2026-11-05T05:18:17.000Z","first_published":"2026-11-05T05:18:17.000Z","of":"lido.fi","spelling":"tld","found_by":"dns_sweep","listings":[{"kind":"reported","source":"phishdestroy","source_name":"PhishDestroy","host":"lido.fo","flagged_at":"2026-11-05T05:18:17Z"}]}],"url":"https://domainspoof.com/brands/lido"},{"hostname":"mexc.hot","first_observed":"2026-11-05T05:18:17.000Z","first_published":"2026-11-05T05:18:17.000Z","brands":[{"id":"mexc","name":"MEXC","url":"https://domainspoof.com/brands/mexc"}],"dns":"resolved","resolved":["51.161.21.1"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of mexc.com (same name, other ending), resolved to 51.161.21.1, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T05:18:17.000Z","first_published":"2026-11-05T05:18:17.000Z","of":"mexc.com","spelling":"tld","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"51.161.21.1","flagged_at":"2026-11-05T05:18:17Z"}]}],"url":"https://domainspoof.com/brands/mexc"},{"hostname":"mexc.now","first_observed":"2026-11-05T05:18:17.000Z","first_published":"2026-11-05T05:18:17.000Z","brands":[{"id":"mexc","name":"MEXC","url":"https://domainspoof.com/brands/mexc"}],"dns":"resolved","resolved":["51.161.21.1"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of mexc.com (same name, other ending), resolved to 51.161.21.1, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T05:18:17.000Z","first_published":"2026-11-05T05:18:17.000Z","of":"mexc.com","spelling":"tld","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"51.161.21.1","flagged_at":"2026-11-05T05:18:17Z"}]}],"url":"https://domainspoof.com/brands/mexc"},{"hostname":"mobilelegendsglobal.cloud","first_observed":"2026-11-05T05:18:17.000Z","first_published":"2026-11-05T05:18:17.000Z","brands":[{"id":"mobile-legends","name":"Mobile Legends","url":"https://domainspoof.com/brands/mobile-legends"}],"dns":"resolved","resolved":["2.57.91.91"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “mobilelegends”, a name we match for Mobile Legends, resolved to 2.57.91.91, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T05:18:17.000Z","first_published":"2026-11-05T05:18:17.000Z","of":"mobilelegends.com","spelling":"combo","match":"name","token":"mobilelegends","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"2.57.91.91","flagged_at":"2026-11-05T05:18:17Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/mobile-legends"},{"hostname":"nexi.money","first_observed":"2026-11-05T05:18:17.000Z","first_published":"2026-11-05T05:18:17.000Z","brands":[{"id":"nexi","name":"Nexi","url":"https://domainspoof.com/brands/nexi"}],"dns":"resolved","resolved":["195.110.124.133"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of nexi.it (same name, other ending), resolved to 195.110.124.133, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T05:18:17.000Z","first_published":"2026-11-05T05:18:17.000Z","of":"nexi.it","spelling":"tld","found_by":"dns_sweep","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"195.110.124.133","flagged_at":"2026-11-05T05:18:17Z"}]}],"url":"https://domainspoof.com/brands/nexi"},{"hostname":"overview-xaman.app","first_observed":"2026-11-05T05:18:17.000Z","first_published":"2026-11-05T05:18:17.000Z","brands":[{"id":"xaman","name":"Xaman","url":"https://domainspoof.com/brands/xaman"}],"dns":"resolved","resolved":["104.21.1.229","172.67.152.106","2606:4700:3032::6815:1e5","2606:4700:3035::ac43:986a"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “xaman”, a name we match for Xaman, listed by MetaMask","first_observed":"2026-11-05T05:18:17.000Z","first_published":"2026-11-05T05:18:17.000Z","of":"xaman.app","spelling":"combo","match":"name","token":"xaman","found_by":"zone_file","listings":[{"kind":"reported","source":"metamask","source_name":"MetaMask","host":"overview-xaman.app","flagged_at":"2026-11-05T05:18:17Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/xaman"},{"hostname":"rewards-robinhood.online","first_observed":"2026-11-05T05:18:17.000Z","first_published":"2026-11-05T05:18:17.000Z","brands":[{"id":"robinhood","name":"Robinhood","url":"https://domainspoof.com/brands/robinhood"}],"dns":"resolved","resolved":["172.232.24.161","172.232.24.235","172.234.25.42"],"resolved_at":"2026-11-05T11:53:44Z","dns_checked_at":"2026-11-06T12:10:15.000Z","dns_since":"2026-11-05T12:09:45.000Z","findings":[{"id":"f2fujca4upubpevpg2yyr","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T11:52:48.076Z","first_published":"2026-11-05T12:06:38.708Z","source":"metamask","source_name":"MetaMask"},{"kind":"lookalike","summary":"Registered lookalike of robinhood.com (the name with an added word), listed by MetaMask, and resolved to 172.232.24.161, where reported phishing was found in the 48 hours before, and resolved to 172.232.24.235, where reported phishing was found in the 48 hours before, and resolved to 172.234.25.42, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T05:18:17.000Z","first_published":"2026-11-05T05:18:17.000Z","of":"robinhood.com","spelling":"combo","found_by":"zone_file","listings":[{"kind":"reported","source":"metamask","source_name":"MetaMask","host":"rewards-robinhood.online","flagged_at":"2026-11-05T12:08:03Z"},{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"172.232.24.161","flagged_at":"2026-11-05T05:18:17Z"},{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"172.232.24.235","flagged_at":"2026-11-05T05:18:17Z"},{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"172.234.25.42","flagged_at":"2026-11-05T05:18:17Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/robinhood"},{"hostname":"rxtbs-xaman.app","first_observed":"2026-11-05T05:18:17.000Z","first_published":"2026-11-05T05:18:17.000Z","brands":[{"id":"xaman","name":"Xaman","url":"https://domainspoof.com/brands/xaman"}],"dns":"resolved","resolved":["104.21.35.148","172.67.176.184","2606:4700:3032::6815:2394","2606:4700:3037::ac43:b0b8"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “xaman”, a name we match for Xaman, listed by MetaMask","first_observed":"2026-11-05T05:18:17.000Z","first_published":"2026-11-05T05:18:17.000Z","of":"xaman.app","spelling":"combo","match":"name","token":"xaman","found_by":"zone_file","listings":[{"kind":"reported","source":"metamask","source_name":"MetaMask","host":"rxtbs-xaman.app","flagged_at":"2026-11-05T05:18:17Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/xaman"},{"hostname":"sharepoint365.support","first_observed":"2026-11-05T05:18:17.000Z","first_published":"2026-11-05T05:18:17.000Z","brands":[{"id":"microsoft","name":"Microsoft","url":"https://domainspoof.com/brands/microsoft"}],"dns":"resolved","resolved":["104.251.180.138"],"findings":[{"kind":"lookalike","summary":"Registered domain containing “sharepoint”, a name we match for Microsoft, resolved to 104.251.180.138 on Spamhaus DROP","first_observed":"2026-11-05T05:18:17.000Z","first_published":"2026-11-05T05:18:17.000Z","of":"microsoft.com","spelling":"combo","match":"name","token":"sharepoint","found_by":"zone_file","listings":[{"kind":"address","source":"spamhaus_drop","list_name":"Spamhaus DROP","address":"104.251.180.138","flagged_at":"2026-11-05T05:18:17Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/microsoft"},{"hostname":"support-coinbase.org","first_observed":"2026-11-05T05:18:17.000Z","first_published":"2026-11-05T05:18:17.000Z","brands":[{"id":"coinbase","name":"Coinbase","url":"https://domainspoof.com/brands/coinbase"}],"dns":"resolved","resolved":["2.57.91.91"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of coinbase.com (the name with an added word), resolved to 2.57.91.91, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T05:18:17.000Z","first_published":"2026-11-05T05:18:17.000Z","of":"coinbase.com","spelling":"combo","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"2.57.91.91","flagged_at":"2026-11-05T05:18:17Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/coinbase"},{"hostname":"trustwallets.capital","first_observed":"2026-11-05T05:18:17.000Z","first_published":"2026-11-05T05:18:17.000Z","brands":[{"id":"trust-wallet","name":"Trust Wallet","url":"https://domainspoof.com/brands/trust-wallet"}],"dns":"resolved","resolved":["2.57.91.91"],"findings":[{"kind":"lookalike","summary":"Registered lookalike of trustwallet.com (an added character), resolved to 2.57.91.91, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T05:18:17.000Z","first_published":"2026-11-05T05:18:17.000Z","of":"trustwallet.com","spelling":"insertion","found_by":"zone_file","listings":[{"kind":"address","source":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts","address":"2.57.91.91","flagged_at":"2026-11-05T05:18:17Z"}],"conditions":"https://domainspoof.org/terms#zone-data"}],"url":"https://domainspoof.com/brands/trust-wallet"},{"hostname":"3rushui.com","first_observed":"2026-11-05T04:26:10.749Z","first_published":"2026-11-05T05:17:22.576Z","brands":[{"id":"smbc-card","name":"SMBC Card","url":"https://domainspoof.com/brands/smbc-card"}],"dns":"resolved","resolved":["104.21.56.144","172.67.152.128"],"resolved_at":"2026-11-05T04:26:17Z","dns_checked_at":"2026-11-06T05:23:45.000Z","dns_since":"2026-11-05T05:23:02.000Z","findings":[{"id":"f7ddwknlg4enuthetkiue","kind":"reported_domain","summary":"Listed by JPCERT/CC as imitating 三井住友カード","first_observed":"2026-11-05T04:26:10.749Z","first_published":"2026-11-05T05:17:22.576Z","source":"jpcert","source_name":"JPCERT/CC","claim":{"brand":"三井住友カード"}}],"url":"https://domainspoof.com/brands/smbc-card"},{"hostname":"abfxvaleur.com","first_observed":"2026-11-05T05:10:43.715Z","first_published":"2026-11-05T05:17:22.576Z","brands":[],"dns":"resolved","resolved":["185.151.30.222","2a07:7800::222"],"resolved_at":"2026-11-05T05:10:50Z","dns_checked_at":"2026-11-06T05:23:45.000Z","dns_since":"2026-11-05T05:23:02.000Z","findings":[{"id":"fqnevgnsy77wa7zmpqxtt","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T05:10:43.715Z","first_published":"2026-11-05T05:17:22.576Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/abfxvaleur.com/"}],"url":"https://domainspoof.com/live?show=all&q=abfxvaleur.com"},{"hostname":"access-papertrades.app","first_observed":"2026-11-05T04:31:19.064Z","first_published":"2026-11-05T05:17:22.576Z","brands":[],"dns":"resolved","resolved":["104.21.25.130","172.67.134.64"],"resolved_at":"2026-11-06T07:46:25Z","dns_checked_at":"2026-11-06T05:23:45.000Z","dns_since":"2026-11-05T05:23:02.000Z","findings":[{"id":"fwzkrajdoj35lb2ygaszx","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T04:31:19.064Z","first_published":"2026-11-05T05:17:22.576Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=access-papertrades.app"},{"hostname":"account.zenavlico.cyou","first_observed":"2026-11-05T05:00:54.521Z","first_published":"2026-11-05T05:17:22.576Z","brands":[],"dns":"resolved","resolved":["95.85.244.13"],"resolved_at":"2026-11-05T05:10:33Z","dns_checked_at":"2026-11-06T05:23:45.000Z","dns_since":"2026-11-05T05:23:02.000Z","findings":[{"id":"fasiceynkb4632rgjqzw2","kind":"reported_domain","summary":"Under zenavlico.cyou, listed by CERT Polska","first_observed":"2026-11-05T05:00:54.521Z","first_published":"2026-11-05T05:17:22.576Z","source":"cert_polska","source_name":"CERT Polska","under":"zenavlico.cyou"}],"url":"https://domainspoof.com/live?show=all&q=account.zenavlico.cyou"},{"hostname":"accounts.aml.legal","first_observed":"2026-11-05T05:10:43.715Z","first_published":"2026-11-05T05:17:22.576Z","brands":[],"dns":"resolved","resolved":["186.2.175.179"],"resolved_at":"2026-11-05T05:10:52Z","dns_checked_at":"2026-11-06T05:23:45.000Z","dns_since":"2026-11-05T05:23:02.000Z","findings":[{"id":"ffzs5tdjtydzhinacqech","kind":"reported_domain","summary":"Under aml.legal, reported by PhishDestroy","first_observed":"2026-11-05T05:10:43.715Z","first_published":"2026-11-05T05:17:22.576Z","source":"phishdestroy","source_name":"PhishDestroy","under":"aml.legal","source_url":"https://phishdestroy.io/domain/aml.legal/"}],"url":"https://domainspoof.com/live?show=all&q=accounts.aml.legal"},{"hostname":"adminer.floydldevine.com","first_observed":"2026-11-05T04:31:19.064Z","first_published":"2026-11-05T05:17:22.576Z","brands":[],"dns":"resolved","resolved":["109.238.86.5"],"resolved_at":"2026-11-05T04:31:31Z","dns_checked_at":"2026-11-06T05:23:45.000Z","dns_since":"2026-11-05T05:23:02.000Z","findings":[{"id":"f56po5nd57gm5jdxsarve","kind":"reported_domain","summary":"Under floydldevine.com, listed by CERT Polska","first_observed":"2026-11-05T04:31:19.064Z","first_published":"2026-11-05T05:17:22.576Z","source":"cert_polska","source_name":"CERT Polska","under":"floydldevine.com"}],"url":"https://domainspoof.com/live?show=all&q=adminer.floydldevine.com"},{"hostname":"adobe-billing.com","first_observed":"2026-11-05T05:10:52.996Z","first_published":"2026-11-05T05:17:22.576Z","brands":[{"id":"adobe","name":"Adobe","url":"https://domainspoof.com/brands/adobe"}],"dns":"resolved","resolved":["2.57.91.91"],"resolved_at":"2026-11-06T05:23:45Z","dns_checked_at":"2026-11-06T05:23:45.000Z","dns_since":"2026-11-05T05:23:02.000Z","findings":[{"id":"fuxleung7rv5st3mkpc2l","kind":"phishing_infrastructure","summary":"Resolved to 2.57.91.91, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T05:10:52.996Z","first_published":"2026-11-05T05:17:22.576Z","address":"2.57.91.91","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/adobe"},{"hostname":"airflow.aml.legal","first_observed":"2026-11-05T04:21:05.259Z","first_published":"2026-11-05T05:17:22.576Z","brands":[],"dns":"resolved","resolved":["186.2.175.179"],"resolved_at":"2026-11-05T04:21:13Z","dns_checked_at":"2026-11-06T05:23:45.000Z","dns_since":"2026-11-05T05:23:02.000Z","findings":[{"id":"fg3ytzsig3jnbymeh2bep","kind":"reported_domain","summary":"Under aml.legal, reported by PhishDestroy","first_observed":"2026-11-05T04:21:05.259Z","first_published":"2026-11-05T05:17:22.576Z","source":"phishdestroy","source_name":"PhishDestroy","under":"aml.legal","source_url":"https://phishdestroy.io/domain/aml.legal/"}],"url":"https://domainspoof.com/live?show=all&q=airflow.aml.legal"},{"hostname":"alex.sensiopesent.org","first_observed":"2026-11-05T04:41:03.837Z","first_published":"2026-11-05T05:17:22.576Z","brands":[],"dns":"resolved","resolved":["91.229.239.28"],"resolved_at":"2026-11-05T04:41:11Z","dns_checked_at":"2026-11-06T05:23:45.000Z","dns_since":"2026-11-05T05:23:02.000Z","findings":[{"id":"fe6mmg6o46b7rkm6spina","kind":"reported_domain","summary":"Under sensiopesent.org, reported by PhishDestroy","first_observed":"2026-11-05T04:41:03.837Z","first_published":"2026-11-05T05:17:22.576Z","source":"phishdestroy","source_name":"PhishDestroy","under":"sensiopesent.org","source_url":"https://phishdestroy.io/domain/sensiopesent.org/"}],"url":"https://domainspoof.com/live?show=all&q=alex.sensiopesent.org"},{"hostname":"ameus.cc","first_observed":"2026-11-05T04:26:10.749Z","first_published":"2026-11-05T05:17:22.576Z","brands":[],"dns":"resolved","resolved":["66.198.225.39"],"resolved_at":"2026-11-05T04:30:06Z","dns_checked_at":"2026-11-06T05:23:45.000Z","dns_since":"2026-11-05T05:23:02.000Z","findings":[{"id":"f2ekbj4xl7knbjg2whwmc","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T04:26:10.749Z","first_published":"2026-11-05T05:17:22.576Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/ameus.cc/"}],"url":"https://domainspoof.com/live?show=all&q=ameus.cc"},{"hostname":"apexcurrentinvestment.com","first_observed":"2026-11-05T04:05:50.533Z","first_published":"2026-11-05T05:17:22.576Z","brands":[],"dns":"resolved","resolved":["104.21.43.25","172.67.216.50"],"resolved_at":"2026-11-05T04:14:37Z","dns_checked_at":"2026-11-06T05:23:45.000Z","dns_since":"2026-11-05T05:23:02.000Z","findings":[{"id":"f4ywiz3e7oygf6b7ue2tn","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T04:05:50.533Z","first_published":"2026-11-05T05:17:22.576Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/apexcurrentinvestment.com/"}],"url":"https://domainspoof.com/live?show=all&q=apexcurrentinvestment.com"},{"hostname":"app.kimehr.com","first_observed":"2026-11-05T04:16:27.327Z","first_published":"2026-11-05T05:17:22.576Z","brands":[],"dns":"resolved","resolved":["143.244.207.122"],"resolved_at":"2026-11-05T04:16:34Z","dns_checked_at":"2026-11-06T05:23:45.000Z","dns_since":"2026-11-05T05:23:02.000Z","findings":[{"id":"fehpiwfuheswls23pupej","kind":"reported_domain","summary":"Under kimehr.com, listed by CERT Polska","first_observed":"2026-11-05T04:16:27.327Z","first_published":"2026-11-05T05:17:22.576Z","source":"cert_polska","source_name":"CERT Polska","under":"kimehr.com"}],"url":"https://domainspoof.com/live?show=all&q=app.kimehr.com"},{"hostname":"arcprivus.com","first_observed":"2026-11-05T05:05:35.186Z","first_published":"2026-11-05T05:17:22.576Z","brands":[],"dns":"resolved","resolved":["104.21.65.16","172.67.139.69"],"resolved_at":"2026-11-05T05:05:47Z","dns_checked_at":"2026-11-06T05:23:45.000Z","dns_since":"2026-11-05T05:23:02.000Z","findings":[{"id":"fkjagy37d5hj7jzekaywz","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T05:05:35.186Z","first_published":"2026-11-05T05:17:22.576Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=arcprivus.com"},{"hostname":"audicontadores.com","first_observed":"2026-11-05T05:10:43.715Z","first_published":"2026-11-05T05:17:22.576Z","brands":[],"dns":"resolved","resolved":["162.245.189.194"],"resolved_at":"2026-11-05T05:10:53Z","dns_checked_at":"2026-11-06T05:23:45.000Z","dns_since":"2026-11-05T05:23:02.000Z","findings":[{"id":"f5a2mflr5jgfezrjqiftv","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T05:10:43.715Z","first_published":"2026-11-05T05:17:22.576Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=audicontadores.com"},{"hostname":"auth.zenavlico.cyou","first_observed":"2026-11-05T05:00:54.521Z","first_published":"2026-11-05T05:17:22.576Z","brands":[],"dns":"resolved","resolved":["95.85.244.13"],"resolved_at":"2026-11-05T05:10:34Z","dns_checked_at":"2026-11-06T05:23:45.000Z","dns_since":"2026-11-05T05:23:02.000Z","findings":[{"id":"fmoozcxgdts3x7kcev7rc","kind":"reported_domain","summary":"Under zenavlico.cyou, listed by CERT Polska","first_observed":"2026-11-05T05:00:54.521Z","first_published":"2026-11-05T05:17:22.576Z","source":"cert_polska","source_name":"CERT Polska","under":"zenavlico.cyou"}],"url":"https://domainspoof.com/live?show=all&q=auth.zenavlico.cyou"},{"hostname":"autoconfig.bggameboy.com","first_observed":"2026-11-05T04:26:10.749Z","first_published":"2026-11-05T05:17:22.576Z","brands":[],"dns":"resolved","resolved":["65.181.120.163"],"resolved_at":"2026-11-05T04:30:10Z","dns_checked_at":"2026-11-06T05:23:45.000Z","dns_since":"2026-11-05T05:23:02.000Z","findings":[{"id":"fkj2uysqbyynz4tzfewkv","kind":"reported_domain","summary":"Under bggameboy.com, reported by PhishDestroy","first_observed":"2026-11-05T04:26:10.749Z","first_published":"2026-11-05T05:17:22.576Z","source":"phishdestroy","source_name":"PhishDestroy","under":"bggameboy.com","source_url":"https://phishdestroy.io/domain/bggameboy.com/"}],"url":"https://domainspoof.com/live?show=all&q=autoconfig.bggameboy.com"},{"hostname":"autodiscover.bggameboy.com","first_observed":"2026-11-05T04:26:10.749Z","first_published":"2026-11-05T05:17:22.576Z","brands":[],"dns":"resolved","resolved":["65.181.120.163"],"resolved_at":"2026-11-05T04:30:10Z","dns_checked_at":"2026-11-06T05:23:45.000Z","dns_since":"2026-11-05T05:23:02.000Z","findings":[{"id":"ftkw6e6m7cenqydbyampf","kind":"reported_domain","summary":"Under bggameboy.com, reported by PhishDestroy","first_observed":"2026-11-05T04:26:10.749Z","first_published":"2026-11-05T05:17:22.576Z","source":"phishdestroy","source_name":"PhishDestroy","under":"bggameboy.com","source_url":"https://phishdestroy.io/domain/bggameboy.com/"}],"url":"https://domainspoof.com/live?show=all&q=autodiscover.bggameboy.com"},{"hostname":"avalon-mint.com","first_observed":"2026-11-05T05:05:35.186Z","first_published":"2026-11-05T05:17:22.576Z","brands":[],"dns":"resolved","resolved":["178.32.82.176"],"resolved_at":"2026-11-05T05:05:47Z","dns_checked_at":"2026-11-06T05:23:45.000Z","dns_since":"2026-11-05T05:23:02.000Z","findings":[{"id":"f62gpokdbgycyardsiv4j","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T05:05:35.186Z","first_published":"2026-11-05T05:17:22.576Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/avalon-mint.com/"}],"url":"https://domainspoof.com/live?show=all&q=avalon-mint.com"},{"hostname":"avito.pay.sbermarket.youla.sberbank.sber.prod2.hawkinswoodshop.com","first_observed":"2026-11-05T05:05:47.770Z","first_published":"2026-11-05T05:17:22.576Z","brands":[{"id":"avito","name":"Avito","url":"https://domainspoof.com/brands/avito"},{"id":"sberbank","name":"Sberbank","url":"https://domainspoof.com/brands/sberbank"},{"id":"youla","name":"Youla","url":"https://domainspoof.com/brands/youla"}],"dns":"resolved","resolved":["45.77.75.133","45.77.92.157","207.246.78.75"],"resolved_at":"2026-11-06T05:23:45Z","dns_checked_at":"2026-11-06T05:23:45.000Z","dns_since":"2026-11-05T05:23:02.000Z","findings":[{"id":"fgtsx6sb5bsijkvlyzjml","kind":"phishing_infrastructure","summary":"Resolved to 45.77.75.133, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T05:05:47.770Z","first_published":"2026-11-05T05:17:22.576Z","address":"45.77.75.133","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/avito"},{"hostname":"avlbwfdz.mkufhwjy.asehptld.zodyfanm.lhfkwpxt.uevpygdb.smnqphzo.gatewaylearning.ezgateway.net","first_observed":"2026-11-05T05:10:43.715Z","first_published":"2026-11-05T05:17:22.576Z","brands":[],"dns":"resolved","resolved":["15.204.116.29"],"resolved_at":"2026-11-05T05:10:54Z","dns_checked_at":"2026-11-06T05:23:45.000Z","dns_since":"2026-11-05T05:23:02.000Z","findings":[{"id":"fgiv64betmwy4gw2mrthh","kind":"reported_domain","summary":"Under ezgateway.net, listed by USOM","first_observed":"2026-11-05T05:10:43.715Z","first_published":"2026-11-05T05:17:22.576Z","source":"usom","source_name":"USOM","under":"ezgateway.net"}],"url":"https://domainspoof.com/live?show=all&q=avlbwfdz.mkufhwjy.asehptld.zodyfanm.lhfkwpxt.uevpygdb.smnqphzo.gatewaylearning.ezgateway.net"},{"hostname":"balshopping.shop","first_observed":"2026-11-05T04:46:48.018Z","first_published":"2026-11-05T05:17:22.576Z","brands":[],"dns":"no_address","resolved":[],"resolved_at":"2026-11-05T04:46:57Z","dns_checked_at":"2026-11-06T05:23:45.000Z","dns_since":"2026-11-05T05:23:02.000Z","findings":[{"id":"fjgeak2i7ofcaaja3vezj","kind":"reported_domain","summary":"Listed by NPA 165 (information services)","first_observed":"2026-11-05T04:46:48.018Z","first_published":"2026-11-05T05:17:22.576Z","source":"npa","source_name":"NPA 165","claim":{"category":"information services"}}],"url":"https://domainspoof.com/live?show=all&q=balshopping.shop"},{"hostname":"bavoice.klicn.com","first_observed":"2026-11-05T04:05:50.533Z","first_published":"2026-11-05T05:17:22.576Z","brands":[],"dns":"resolved","resolved":["36.148.9.44"],"resolved_at":"2026-11-05T04:14:59Z","dns_checked_at":"2026-11-06T05:23:45.000Z","dns_since":"2026-11-05T05:23:02.000Z","findings":[{"id":"fjmaklngw54y7ro7k2x4o","kind":"reported_domain","summary":"Under klicn.com, reported by PhishDestroy","first_observed":"2026-11-05T04:05:50.533Z","first_published":"2026-11-05T05:17:22.576Z","source":"phishdestroy","source_name":"PhishDestroy","under":"klicn.com","source_url":"https://phishdestroy.io/domain/klicn.com/"}],"url":"https://domainspoof.com/live?show=all&q=bavoice.klicn.com"},{"hostname":"bggameboy.com","first_observed":"2026-11-05T04:26:10.749Z","first_published":"2026-11-05T05:17:22.576Z","brands":[],"dns":"resolved","resolved":["65.181.120.163"],"resolved_at":"2026-11-05T04:30:30Z","dns_checked_at":"2026-11-06T05:23:45.000Z","dns_since":"2026-11-05T05:23:02.000Z","findings":[{"id":"f337fg6tzxkciumqsn7rc","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T04:26:10.749Z","first_published":"2026-11-05T05:17:22.576Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/bggameboy.com/"}],"url":"https://domainspoof.com/live?show=all&q=bggameboy.com"},{"hostname":"bitcoin-goldmine-official.com","first_observed":"2026-11-05T04:31:19.064Z","first_published":"2026-11-05T05:17:22.576Z","brands":[],"dns":"resolved","resolved":["104.21.22.75","172.67.203.114"],"resolved_at":"2026-11-05T04:33:33Z","dns_checked_at":"2026-11-06T05:23:45.000Z","dns_since":"2026-11-05T05:23:02.000Z","findings":[{"id":"f4rtzdnaxm46fnwv5fsfp","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T04:31:19.064Z","first_published":"2026-11-05T05:17:22.576Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=bitcoin-goldmine-official.com"},{"hostname":"bitfinexmediablog.com","first_observed":"2026-11-05T04:10:46.279Z","first_published":"2026-11-05T05:17:22.576Z","brands":[],"dns":"no_address","resolved":[],"resolved_at":"2026-11-05T04:23:41Z","dns_checked_at":"2026-11-06T05:23:45.000Z","dns_since":"2026-11-05T05:23:02.000Z","findings":[{"id":"f5d2adndgokkkvbd4q7yv","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T04:10:46.279Z","first_published":"2026-11-05T05:17:22.576Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=bitfinexmediablog.com"},{"hostname":"bitrefill.com-ck01-esim-gift.com","first_observed":"2026-11-05T04:33:33.861Z","first_published":"2026-11-05T05:17:22.576Z","brands":[{"id":"bitrefill","name":"Bitrefill","url":"https://domainspoof.com/brands/bitrefill"}],"dns":"resolved","resolved":["62.60.226.39"],"resolved_at":"2026-11-06T05:23:45Z","dns_checked_at":"2026-11-06T05:23:45.000Z","dns_since":"2026-11-05T05:23:02.000Z","findings":[{"id":"fvnpef7oinf435a65xist","kind":"spamhaus_drop","summary":"Resolved to 62.60.226.39 on Spamhaus DROP","first_observed":"2026-11-05T04:33:33.861Z","first_published":"2026-11-05T05:17:22.576Z","address":"62.60.226.39","list":"spamhaus_drop","list_name":"Spamhaus DROP"}],"url":"https://domainspoof.com/brands/bitrefill"},{"hostname":"boysclubandy.top","first_observed":"2026-11-05T04:46:48.018Z","first_published":"2026-11-05T05:17:22.576Z","brands":[],"dns":"resolved","resolved":["104.21.25.129","172.67.134.63"],"resolved_at":"2026-11-05T04:47:01Z","dns_checked_at":"2026-11-06T05:23:45.000Z","dns_since":"2026-11-05T05:23:02.000Z","findings":[{"id":"f5nk25paevcgas44kiwtp","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T04:46:48.018Z","first_published":"2026-11-05T05:17:22.576Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=boysclubandy.top"},{"hostname":"brimaxedge-da.live","first_observed":"2026-11-05T04:56:38.139Z","first_published":"2026-11-05T05:17:22.576Z","brands":[],"dns":"resolved","resolved":["104.21.94.35","172.67.219.3"],"resolved_at":"2026-11-05T04:57:09Z","dns_checked_at":"2026-11-06T05:23:45.000Z","dns_since":"2026-11-05T05:23:02.000Z","findings":[{"id":"feprestuqaauofhsi725h","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T04:56:38.139Z","first_published":"2026-11-05T05:17:22.576Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=brimaxedge-da.live"},{"hostname":"brushlandwiki.wiki","first_observed":"2026-11-05T04:56:38.139Z","first_published":"2026-11-05T05:17:22.576Z","brands":[],"dns":"resolved","resolved":["104.21.91.156","172.67.175.85"],"resolved_at":"2026-11-05T04:57:09Z","dns_checked_at":"2026-11-06T05:23:45.000Z","dns_since":"2026-11-05T05:23:02.000Z","findings":[{"id":"fx2sdamrjxcqnvz6pyk7d","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T04:56:38.139Z","first_published":"2026-11-05T05:17:22.576Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=brushlandwiki.wiki"},{"hostname":"btc-phorant404.live","first_observed":"2026-11-05T04:31:19.064Z","first_published":"2026-11-05T05:17:22.576Z","brands":[],"dns":"resolved","resolved":["104.21.78.77","172.67.217.225"],"resolved_at":"2026-11-05T04:33:33Z","dns_checked_at":"2026-11-06T05:23:45.000Z","dns_since":"2026-11-05T05:23:02.000Z","findings":[{"id":"fvx5mloyczgu7swvvxwk3","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T04:31:19.064Z","first_published":"2026-11-05T05:17:22.576Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=btc-phorant404.live"},{"hostname":"canary.zenavlico.cyou","first_observed":"2026-11-05T05:00:54.521Z","first_published":"2026-11-05T05:17:22.576Z","brands":[],"dns":"resolved","resolved":["95.85.244.13"],"resolved_at":"2026-11-05T05:10:56Z","dns_checked_at":"2026-11-06T05:23:45.000Z","dns_since":"2026-11-05T05:23:02.000Z","findings":[{"id":"fua4xje2rqlky65kimhm6","kind":"reported_domain","summary":"Under zenavlico.cyou, listed by CERT Polska","first_observed":"2026-11-05T05:00:54.521Z","first_published":"2026-11-05T05:17:22.576Z","source":"cert_polska","source_name":"CERT Polska","under":"zenavlico.cyou"}],"url":"https://domainspoof.com/live?show=all&q=canary.zenavlico.cyou"},{"hostname":"cdn.kimehr.com","first_observed":"2026-11-05T04:16:27.327Z","first_published":"2026-11-05T05:17:22.576Z","brands":[],"dns":"resolved","resolved":["104.18.42.227","172.64.145.29"],"resolved_at":"2026-11-05T04:25:16Z","dns_checked_at":"2026-11-06T05:23:45.000Z","dns_since":"2026-11-05T05:23:02.000Z","findings":[{"id":"fz64cq3sj2hgyuyqhjh2k","kind":"reported_domain","summary":"Under kimehr.com, listed by CERT Polska","first_observed":"2026-11-05T04:16:27.327Z","first_published":"2026-11-05T05:17:22.576Z","source":"cert_polska","source_name":"CERT Polska","under":"kimehr.com"}],"url":"https://domainspoof.com/live?show=all&q=cdn.kimehr.com"},{"hostname":"claims-tradegenius.com","first_observed":"2026-11-05T04:10:46.279Z","first_published":"2026-11-05T05:17:22.576Z","brands":[],"dns":"resolved","resolved":["104.21.10.152","172.67.163.158"],"resolved_at":"2026-11-05T04:23:58Z","dns_checked_at":"2026-11-06T05:23:45.000Z","dns_since":"2026-11-05T05:23:02.000Z","findings":[{"id":"fk56tpztjrfq5voqt3nna","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T04:10:46.279Z","first_published":"2026-11-05T05:17:22.576Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/claims-tradegenius.com/"}],"url":"https://domainspoof.com/live?show=all&q=claims-tradegenius.com"},{"hostname":"coin-base.pro","first_observed":"2026-11-05T04:25:17.602Z","first_published":"2026-11-05T05:17:22.576Z","brands":[{"id":"coinbase","name":"Coinbase","url":"https://domainspoof.com/brands/coinbase"}],"dns":"resolved","resolved":["2.57.91.91"],"resolved_at":"2026-11-06T05:23:45Z","dns_checked_at":"2026-11-06T05:23:45.000Z","dns_since":"2026-11-05T05:23:02.000Z","findings":[{"id":"f3mkv4ir56632mjj7ordj","kind":"phishing_infrastructure","summary":"Resolved to 2.57.91.91, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T04:25:17.602Z","first_published":"2026-11-05T05:17:22.576Z","address":"2.57.91.91","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/coinbase"},{"hostname":"connect-ledgralete-us.pages.dev","first_observed":"2026-11-05T04:41:03.837Z","first_published":"2026-11-05T05:17:22.576Z","brands":[],"dns":"resolved","resolved":["172.66.44.75","172.66.47.181"],"resolved_at":"2026-11-05T04:41:28Z","dns_checked_at":"2026-11-06T05:23:45.000Z","dns_since":"2026-11-05T05:23:02.000Z","findings":[{"id":"f7yfcceuz566hocncv2ah","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T04:41:03.837Z","first_published":"2026-11-05T05:17:22.576Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=connect-ledgralete-us.pages.dev"},{"hostname":"console.zenavlico.cyou","first_observed":"2026-11-05T05:00:54.521Z","first_published":"2026-11-05T05:17:22.576Z","brands":[],"dns":"resolved","resolved":["95.85.244.13"],"resolved_at":"2026-11-05T05:10:57Z","dns_checked_at":"2026-11-06T05:23:45.000Z","dns_since":"2026-11-05T05:23:02.000Z","findings":[{"id":"f7fnu2pjt3vrhopncfhkr","kind":"reported_domain","summary":"Under zenavlico.cyou, listed by CERT Polska","first_observed":"2026-11-05T05:00:54.521Z","first_published":"2026-11-05T05:17:22.576Z","source":"cert_polska","source_name":"CERT Polska","under":"zenavlico.cyou"}],"url":"https://domainspoof.com/live?show=all&q=console.zenavlico.cyou"},{"hostname":"cpanel.bggameboy.com","first_observed":"2026-11-05T04:26:10.749Z","first_published":"2026-11-05T05:17:22.576Z","brands":[],"dns":"resolved","resolved":["65.181.120.163"],"resolved_at":"2026-11-05T04:30:48Z","dns_checked_at":"2026-11-06T05:23:45.000Z","dns_since":"2026-11-05T05:23:02.000Z","findings":[{"id":"ffzztbuftq6zgh2reyzzd","kind":"reported_domain","summary":"Under bggameboy.com, reported by PhishDestroy","first_observed":"2026-11-05T04:26:10.749Z","first_published":"2026-11-05T05:17:22.576Z","source":"phishdestroy","source_name":"PhishDestroy","under":"bggameboy.com","source_url":"https://phishdestroy.io/domain/bggameboy.com/"}],"url":"https://domainspoof.com/live?show=all&q=cpanel.bggameboy.com"},{"hostname":"cpcalendars.bggameboy.com","first_observed":"2026-11-05T04:26:10.749Z","first_published":"2026-11-05T05:17:22.576Z","brands":[],"dns":"resolved","resolved":["65.181.120.163"],"resolved_at":"2026-11-05T04:30:48Z","dns_checked_at":"2026-11-06T05:23:45.000Z","dns_since":"2026-11-05T05:23:02.000Z","findings":[{"id":"f3pdrhiy7l667pj2fgcrl","kind":"reported_domain","summary":"Under bggameboy.com, reported by PhishDestroy","first_observed":"2026-11-05T04:26:10.749Z","first_published":"2026-11-05T05:17:22.576Z","source":"phishdestroy","source_name":"PhishDestroy","under":"bggameboy.com","source_url":"https://phishdestroy.io/domain/bggameboy.com/"}],"url":"https://domainspoof.com/live?show=all&q=cpcalendars.bggameboy.com"},{"hostname":"cpcontacts.bggameboy.com","first_observed":"2026-11-05T04:26:10.749Z","first_published":"2026-11-05T05:17:22.576Z","brands":[],"dns":"resolved","resolved":["65.181.120.163"],"resolved_at":"2026-11-05T04:30:48Z","dns_checked_at":"2026-11-06T05:23:45.000Z","dns_since":"2026-11-05T05:23:02.000Z","findings":[{"id":"f6wio6lskidiqde6a5cxx","kind":"reported_domain","summary":"Under bggameboy.com, reported by PhishDestroy","first_observed":"2026-11-05T04:26:10.749Z","first_published":"2026-11-05T05:17:22.576Z","source":"phishdestroy","source_name":"PhishDestroy","under":"bggameboy.com","source_url":"https://phishdestroy.io/domain/bggameboy.com/"}],"url":"https://domainspoof.com/live?show=all&q=cpcontacts.bggameboy.com"},{"hostname":"d28qjth8d6eccpw9.jgdxsaibk.ykiwgfaq.wxeilrho.warhqnuy.ijdyvoge.gatewaylearning.ezgateway.net","first_observed":"2026-11-05T05:10:43.715Z","first_published":"2026-11-05T05:17:22.576Z","brands":[],"dns":"resolved","resolved":["15.204.116.29"],"resolved_at":"2026-11-05T05:19:49Z","dns_checked_at":"2026-11-06T05:23:45.000Z","dns_since":"2026-11-05T05:23:02.000Z","findings":[{"id":"fnzl4cjooeybrbl7ntmds","kind":"reported_domain","summary":"Under ezgateway.net, listed by USOM","first_observed":"2026-11-05T05:10:43.715Z","first_published":"2026-11-05T05:17:22.576Z","source":"usom","source_name":"USOM","under":"ezgateway.net"}],"url":"https://domainspoof.com/live?show=all&q=d28qjth8d6eccpw9.jgdxsaibk.ykiwgfaq.wxeilrho.warhqnuy.ijdyvoge.gatewaylearning.ezgateway.net"},{"hostname":"dalih5.changshan.eu.cc","first_observed":"2026-11-05T04:26:10.749Z","first_published":"2026-11-05T05:17:22.576Z","brands":[],"dns":"resolved","resolved":["45.207.209.105"],"resolved_at":"2026-11-05T04:30:47Z","dns_checked_at":"2026-11-06T05:23:45.000Z","dns_since":"2026-11-05T05:23:02.000Z","findings":[{"id":"fsofa6e2rctw2q2s3wu4v","kind":"reported_domain","summary":"Under changshan.eu.cc, listed by MetaMask","first_observed":"2026-11-05T04:26:10.749Z","first_published":"2026-11-05T05:17:22.576Z","source":"metamask","source_name":"MetaMask","under":"changshan.eu.cc"}],"url":"https://domainspoof.com/live?show=all&q=dalih5.changshan.eu.cc"},{"hostname":"daliht.changshan.eu.cc","first_observed":"2026-11-05T04:26:10.749Z","first_published":"2026-11-05T05:17:22.576Z","brands":[],"dns":"resolved","resolved":["45.207.209.105"],"resolved_at":"2026-11-05T04:30:47Z","dns_checked_at":"2026-11-06T05:23:45.000Z","dns_since":"2026-11-05T05:23:02.000Z","findings":[{"id":"fwllq22epy75hoq2dezkb","kind":"reported_domain","summary":"Under changshan.eu.cc, listed by MetaMask","first_observed":"2026-11-05T04:26:10.749Z","first_published":"2026-11-05T05:17:22.576Z","source":"metamask","source_name":"MetaMask","under":"changshan.eu.cc"}],"url":"https://domainspoof.com/live?show=all&q=daliht.changshan.eu.cc"},{"hostname":"dashboard-aethernetwork.xyz","first_observed":"2026-11-05T05:10:43.715Z","first_published":"2026-11-05T05:17:22.576Z","brands":[],"dns":"resolved","resolved":["104.21.81.210","172.67.164.156"],"resolved_at":"2026-11-05T05:19:50Z","dns_checked_at":"2026-11-06T05:23:45.000Z","dns_since":"2026-11-05T05:23:02.000Z","findings":[{"id":"fzagybtglov6oh66mjnrn","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T05:10:43.715Z","first_published":"2026-11-05T05:17:22.576Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=dashboard-aethernetwork.xyz"},{"hostname":"demo.zenavlico.cyou","first_observed":"2026-11-05T05:00:54.521Z","first_published":"2026-11-05T05:17:22.576Z","brands":[],"dns":"resolved","resolved":["95.85.244.13"],"resolved_at":"2026-11-05T05:11:04Z","dns_checked_at":"2026-11-06T05:23:45.000Z","dns_since":"2026-11-05T05:23:02.000Z","findings":[{"id":"f7bvjaf5jesb42me6mgeu","kind":"reported_domain","summary":"Under zenavlico.cyou, listed by CERT Polska","first_observed":"2026-11-05T05:00:54.521Z","first_published":"2026-11-05T05:17:22.576Z","source":"cert_polska","source_name":"CERT Polska","under":"zenavlico.cyou"}],"url":"https://domainspoof.com/live?show=all&q=demo.zenavlico.cyou"},{"hostname":"deskapp.one","first_observed":"2026-11-05T04:26:10.749Z","first_published":"2026-11-05T05:17:22.576Z","brands":[],"dns":"resolved","resolved":["104.21.3.131","172.67.130.185"],"resolved_at":"2026-11-05T04:30:48Z","dns_checked_at":"2026-11-06T05:23:45.000Z","dns_since":"2026-11-05T05:23:02.000Z","findings":[{"id":"fr52x5p3m22vinb5eglvo","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T04:26:10.749Z","first_published":"2026-11-05T05:17:22.576Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=deskapp.one"},{"hostname":"dexmarketpros.com","first_observed":"2026-11-05T04:26:10.749Z","first_published":"2026-11-05T05:17:22.576Z","brands":[],"dns":"resolved","resolved":["104.21.14.241","172.67.160.202"],"resolved_at":"2026-11-05T04:30:48Z","dns_checked_at":"2026-11-06T05:23:45.000Z","dns_since":"2026-11-05T05:23:02.000Z","findings":[{"id":"fmfemu6mp7mbx3pvzapmh","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T04:26:10.749Z","first_published":"2026-11-05T05:17:22.576Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=dexmarketpros.com"},{"hostname":"dirsouk.eu.cc","first_observed":"2026-11-05T05:05:35.186Z","first_published":"2026-11-05T05:17:22.576Z","brands":[],"dns":"resolved","resolved":["104.21.1.208","172.67.129.236"],"resolved_at":"2026-11-05T05:16:53Z","dns_checked_at":"2026-11-06T05:23:45.000Z","dns_since":"2026-11-05T05:23:02.000Z","findings":[{"id":"fmljzl3yssu7nskd35kmq","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T05:05:35.186Z","first_published":"2026-11-05T05:17:22.576Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=dirsouk.eu.cc"},{"hostname":"docs.gimp.org.cn","first_observed":"2026-11-05T04:56:38.139Z","first_published":"2026-11-05T05:17:22.576Z","brands":[],"dns":"resolved","resolved":["62.146.173.132"],"resolved_at":"2026-11-06T15:19:36Z","dns_checked_at":"2026-11-06T05:23:45.000Z","dns_since":"2026-11-05T05:23:02.000Z","findings":[{"id":"fy6eq5vu72pcjvxdjazgd","kind":"reported_domain","summary":"Under gimp.org.cn, listed by MetaMask","first_observed":"2026-11-05T04:56:38.139Z","first_published":"2026-11-05T05:17:22.576Z","source":"metamask","source_name":"MetaMask","under":"gimp.org.cn"}],"url":"https://domainspoof.com/live?show=all&q=docs.gimp.org.cn"},{"hostname":"en-ledgrrlive-pages-us.pages.dev","first_observed":"2026-11-05T04:21:05.259Z","first_published":"2026-11-05T05:17:22.576Z","brands":[],"dns":"resolved","resolved":["172.66.44.75","172.66.47.181"],"resolved_at":"2026-11-05T04:28:34Z","dns_checked_at":"2026-11-06T05:23:45.000Z","dns_since":"2026-11-05T05:23:02.000Z","findings":[{"id":"ffgjgl2sjxzettauzbt6i","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T04:21:05.259Z","first_published":"2026-11-05T05:17:22.576Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=en-ledgrrlive-pages-us.pages.dev"},{"hostname":"ensou.systems","first_observed":"2026-11-05T05:00:54.521Z","first_published":"2026-11-05T05:17:22.576Z","brands":[],"dns":"no_address","resolved":[],"resolved_at":"2026-11-05T05:11:04Z","dns_checked_at":"2026-11-06T05:23:45.000Z","dns_since":"2026-11-05T05:23:02.000Z","findings":[{"id":"fs23bdzthglv2xm25bgmj","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T05:00:54.521Z","first_published":"2026-11-05T05:17:22.576Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=ensou.systems"},{"hostname":"eurc-usdtzv1.pages.dev","first_observed":"2026-11-05T04:26:10.749Z","first_published":"2026-11-05T05:17:22.576Z","brands":[],"dns":"resolved","resolved":["172.66.44.98","172.66.47.158"],"resolved_at":"2026-11-05T04:30:48Z","dns_checked_at":"2026-11-06T05:23:45.000Z","dns_since":"2026-11-05T05:23:02.000Z","findings":[{"id":"feeule2k56rpnxpo3cwmo","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T04:26:10.749Z","first_published":"2026-11-05T05:17:22.576Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=eurc-usdtzv1.pages.dev"},{"hostname":"event-meteora.xyz","first_observed":"2026-11-05T04:10:46.279Z","first_published":"2026-11-05T05:17:22.576Z","brands":[],"dns":"resolved","resolved":["104.21.41.249","172.67.196.244"],"resolved_at":"2026-11-05T04:24:14Z","dns_checked_at":"2026-11-06T05:23:45.000Z","dns_since":"2026-11-05T05:23:02.000Z","findings":[{"id":"fyh7nvs4te4q5j5bskf67","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T04:10:46.279Z","first_published":"2026-11-05T05:17:22.576Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=event-meteora.xyz"},{"hostname":"fiasim.ch","first_observed":"2026-11-05T04:36:27.756Z","first_published":"2026-11-05T05:17:22.576Z","brands":[],"dns":"resolved","resolved":["199.36.158.100"],"resolved_at":"2026-11-05T04:37:36Z","dns_checked_at":"2026-11-06T05:23:45.000Z","dns_since":"2026-11-05T05:23:02.000Z","findings":[{"id":"ftg6e2tycimbyflbwzqlz","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T04:36:27.756Z","first_published":"2026-11-05T05:17:22.576Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/fiasim.ch/"}],"url":"https://domainspoof.com/live?show=all&q=fiasim.ch"},{"hostname":"finvexo.de","first_observed":"2026-11-05T04:41:03.837Z","first_published":"2026-11-05T05:17:22.576Z","brands":[],"dns":"resolved","resolved":["104.21.72.220","172.67.155.162"],"resolved_at":"2026-11-05T04:41:37Z","dns_checked_at":"2026-11-06T05:23:45.000Z","dns_since":"2026-11-05T05:23:02.000Z","findings":[{"id":"fjfu7mudf2mqkskh6c6dc","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T04:41:03.837Z","first_published":"2026-11-05T05:17:22.576Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=finvexo.de"},{"hostname":"flooringshopping.shop","first_observed":"2026-11-05T04:31:19.064Z","first_published":"2026-11-05T05:17:22.576Z","brands":[],"dns":"no_address","resolved":[],"resolved_at":"2026-11-05T04:33:51Z","dns_checked_at":"2026-11-06T05:23:45.000Z","dns_since":"2026-11-05T05:23:02.000Z","findings":[{"id":"fmykollf5r47luxst3shj","kind":"reported_domain","summary":"Listed by NPA 165 (e-commerce)","first_observed":"2026-11-05T04:31:19.064Z","first_published":"2026-11-05T05:17:22.576Z","source":"npa","source_name":"NPA 165","claim":{"category":"e-commerce"}}],"url":"https://domainspoof.com/live?show=all&q=flooringshopping.shop"},{"hostname":"go.crdhub.dev","first_observed":"2026-11-05T04:36:27.756Z","first_published":"2026-11-05T05:17:22.576Z","brands":[],"dns":"resolved","resolved":["199.36.158.100"],"resolved_at":"2026-11-05T04:37:36Z","dns_checked_at":"2026-11-06T05:23:45.000Z","dns_since":"2026-11-05T05:23:02.000Z","findings":[{"id":"filcndj4ruy57p7p5lcpz","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T04:36:27.756Z","first_published":"2026-11-05T05:17:22.576Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/go.crdhub.dev/"}],"url":"https://domainspoof.com/live?show=all&q=go.crdhub.dev"},{"hostname":"goracacegla.org.pl","first_observed":"2026-11-05T04:46:48.018Z","first_published":"2026-11-05T05:17:22.576Z","brands":[],"dns":"resolved","resolved":["151.101.1.195","151.101.65.195"],"resolved_at":"2026-11-05T04:47:06Z","dns_checked_at":"2026-11-06T05:23:45.000Z","dns_since":"2026-11-05T05:23:02.000Z","findings":[{"id":"fgd545elrxy62ronrvnrn","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T04:46:48.018Z","first_published":"2026-11-05T05:17:22.576Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/goracacegla.org.pl/"}],"url":"https://domainspoof.com/live?show=all&q=goracacegla.org.pl"},{"hostname":"greenbisquit.live","first_observed":"2026-11-05T04:36:27.756Z","first_published":"2026-11-05T05:17:22.576Z","brands":[],"dns":"resolved","resolved":["104.21.70.225","172.67.140.39"],"resolved_at":"2026-11-05T04:37:36Z","dns_checked_at":"2026-11-06T05:23:45.000Z","dns_since":"2026-11-05T05:23:02.000Z","findings":[{"id":"fbgydjovc72gz36p3dmqh","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T04:36:27.756Z","first_published":"2026-11-05T05:17:22.576Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=greenbisquit.live"},{"hostname":"gro-60v.com","first_observed":"2026-11-05T05:05:35.186Z","first_published":"2026-11-05T05:17:22.576Z","brands":[],"dns":"resolved","resolved":["217.160.0.10","2001:8d8:100f:f000::200"],"resolved_at":"2026-11-05T05:16:59Z","dns_checked_at":"2026-11-06T05:23:45.000Z","dns_since":"2026-11-05T05:23:02.000Z","findings":[{"id":"fc3kjvilowrvesjgrkz2t","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T05:05:35.186Z","first_published":"2026-11-05T05:17:22.576Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/gro-60v.com/"}],"url":"https://domainspoof.com/live?show=all&q=gro-60v.com"},{"hostname":"growth.petra.bio","first_observed":"2026-11-05T04:31:19.064Z","first_published":"2026-11-05T05:17:22.576Z","brands":[],"dns":"resolved","resolved":["44.218.118.85"],"resolved_at":"2026-11-05T04:33:51Z","dns_checked_at":"2026-11-06T05:23:45.000Z","dns_since":"2026-11-05T05:23:02.000Z","findings":[{"id":"fwaktis3kjppkwdkbhdpl","kind":"reported_domain","summary":"Under petra.bio, listed by MetaMask","first_observed":"2026-11-05T04:31:19.064Z","first_published":"2026-11-05T05:17:22.576Z","source":"metamask","source_name":"MetaMask","under":"petra.bio"}],"url":"https://domainspoof.com/live?show=all&q=growth.petra.bio"},{"hostname":"gypsum-calculator.com","first_observed":"2026-11-05T04:36:27.756Z","first_published":"2026-11-05T05:17:22.576Z","brands":[],"dns":"resolved","resolved":["199.36.158.100"],"resolved_at":"2026-11-05T04:37:36Z","dns_checked_at":"2026-11-06T05:23:45.000Z","dns_since":"2026-11-05T05:23:02.000Z","findings":[{"id":"f7bflrly666v2cvv7zgoo","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T04:36:27.756Z","first_published":"2026-11-05T05:17:22.576Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/gypsum-calculator.com/"}],"url":"https://domainspoof.com/live?show=all&q=gypsum-calculator.com"},{"hostname":"hardblockbtc.com","first_observed":"2026-11-05T04:31:19.064Z","first_published":"2026-11-05T05:17:22.576Z","brands":[],"dns":"resolved","resolved":["104.21.74.194","172.67.162.99"],"resolved_at":"2026-11-05T04:33:51Z","dns_checked_at":"2026-11-06T05:23:45.000Z","dns_since":"2026-11-05T05:23:02.000Z","findings":[{"id":"fdzuvveqhgbsuflfvk2jc","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T04:31:19.064Z","first_published":"2026-11-05T05:17:22.576Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=hardblockbtc.com"},{"hostname":"hrpgen.buzz","first_observed":"2026-11-05T04:36:27.756Z","first_published":"2026-11-05T05:17:22.576Z","brands":[],"dns":"resolved","resolved":["199.36.158.100"],"resolved_at":"2026-11-05T04:37:37Z","dns_checked_at":"2026-11-06T05:23:45.000Z","dns_since":"2026-11-05T05:23:02.000Z","findings":[{"id":"fwjjjf2wjwmq5l33yluap","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T04:36:27.756Z","first_published":"2026-11-05T05:17:22.576Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/hrpgen.buzz/"}],"url":"https://domainspoof.com/live?show=all&q=hrpgen.buzz"},{"hostname":"hvusyhwj5e52qc4l.ivjomqea.iabixsxa.7iyhdafsm.am7g89sg4k8mdsgc.gatewaylearning.ezgateway.net","first_observed":"2026-11-05T05:10:43.715Z","first_published":"2026-11-05T05:17:22.576Z","brands":[],"dns":"resolved","resolved":["15.204.116.29"],"resolved_at":"2026-11-05T05:19:55Z","dns_checked_at":"2026-11-06T05:23:45.000Z","dns_since":"2026-11-05T05:23:02.000Z","findings":[{"id":"fvlxjewkucqgskkiix42h","kind":"reported_domain","summary":"Under ezgateway.net, listed by USOM","first_observed":"2026-11-05T05:10:43.715Z","first_published":"2026-11-05T05:17:22.576Z","source":"usom","source_name":"USOM","under":"ezgateway.net"}],"url":"https://domainspoof.com/live?show=all&q=hvusyhwj5e52qc4l.ivjomqea.iabixsxa.7iyhdafsm.am7g89sg4k8mdsgc.gatewaylearning.ezgateway.net"},{"hostname":"jenkins.aml.legal","first_observed":"2026-11-05T04:36:27.756Z","first_published":"2026-11-05T05:17:22.576Z","brands":[],"dns":"resolved","resolved":["186.2.175.179"],"resolved_at":"2026-11-05T04:37:39Z","dns_checked_at":"2026-11-06T05:23:45.000Z","dns_since":"2026-11-05T05:23:02.000Z","findings":[{"id":"fohbeqawi2z7rqgtr2pbu","kind":"reported_domain","summary":"Under aml.legal, reported by PhishDestroy","first_observed":"2026-11-05T04:36:27.756Z","first_published":"2026-11-05T05:17:22.576Z","source":"phishdestroy","source_name":"PhishDestroy","under":"aml.legal","source_url":"https://phishdestroy.io/domain/aml.legal/"}],"url":"https://domainspoof.com/live?show=all&q=jenkins.aml.legal"},{"hostname":"jhguitar.co.uk","first_observed":"2026-11-05T04:36:27.756Z","first_published":"2026-11-05T05:17:22.576Z","brands":[],"dns":"resolved","resolved":["199.36.158.100"],"resolved_at":"2026-11-05T04:37:39Z","dns_checked_at":"2026-11-06T05:23:45.000Z","dns_since":"2026-11-05T05:23:02.000Z","findings":[{"id":"fbtehtv54mxlapq5hvmhm","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T04:36:27.756Z","first_published":"2026-11-05T05:17:22.576Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/jhguitar.co.uk/"}],"url":"https://domainspoof.com/live?show=all&q=jhguitar.co.uk"},{"hostname":"justlisting.in","first_observed":"2026-11-05T05:05:35.186Z","first_published":"2026-11-05T05:17:22.576Z","brands":[],"dns":"resolved","resolved":["50.6.250.46"],"resolved_at":"2026-11-05T05:17:04Z","dns_checked_at":"2026-11-06T05:23:45.000Z","dns_since":"2026-11-05T05:23:02.000Z","findings":[{"id":"fd5x43g2ky7dhzvw3ukua","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T05:05:35.186Z","first_published":"2026-11-05T05:17:22.576Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/justlisting.in/"}],"url":"https://domainspoof.com/live?show=all&q=justlisting.in"},{"hostname":"ksjqns.top","first_observed":"2026-11-05T04:31:19.064Z","first_published":"2026-11-05T05:17:22.576Z","brands":[],"dns":"resolved","resolved":["13.248.213.45","76.223.67.189"],"resolved_at":"2026-11-05T04:33:53Z","dns_checked_at":"2026-11-06T05:23:45.000Z","dns_since":"2026-11-05T05:23:02.000Z","findings":[{"id":"fzjjkjl2zuufmhyeej5zv","kind":"reported_domain","summary":"Listed by NPA 165 (e-commerce)","first_observed":"2026-11-05T04:31:19.064Z","first_published":"2026-11-05T05:17:22.576Z","source":"npa","source_name":"NPA 165","claim":{"category":"e-commerce"}}],"url":"https://domainspoof.com/live?show=all&q=ksjqns.top"},{"hostname":"ledgr-desktop.pages.dev","first_observed":"2026-11-05T04:10:46.279Z","first_published":"2026-11-05T05:17:22.576Z","brands":[],"dns":"resolved","resolved":["172.66.44.151","172.66.47.105"],"resolved_at":"2026-11-05T04:24:21Z","dns_checked_at":"2026-11-06T05:23:45.000Z","dns_since":"2026-11-05T05:23:02.000Z","findings":[{"id":"fpllmooonnymw32fal5q5","kind":"reported_domain","summary":"Reported by PhishTank","first_observed":"2026-11-05T04:10:46.279Z","first_published":"2026-11-05T05:17:22.576Z","source":"phishtank","source_name":"PhishTank","source_url":"https://phishtank.org/phish_detail.php?phish_id=9451543"}],"url":"https://domainspoof.com/live?show=all&q=ledgr-desktop.pages.dev"},{"hostname":"legacy.zenavlico.cyou","first_observed":"2026-11-05T05:00:54.521Z","first_published":"2026-11-05T05:17:22.576Z","brands":[],"dns":"resolved","resolved":["95.85.244.13"],"resolved_at":"2026-11-05T05:11:07Z","dns_checked_at":"2026-11-06T05:23:45.000Z","dns_since":"2026-11-05T05:23:02.000Z","findings":[{"id":"f2q3e7t4zqtbp7lrcz3jf","kind":"reported_domain","summary":"Under zenavlico.cyou, listed by CERT Polska","first_observed":"2026-11-05T05:00:54.521Z","first_published":"2026-11-05T05:17:22.576Z","source":"cert_polska","source_name":"CERT Polska","under":"zenavlico.cyou"}],"url":"https://domainspoof.com/live?show=all&q=legacy.zenavlico.cyou"},{"hostname":"link.stepyourworld.com","first_observed":"2026-11-05T04:36:27.756Z","first_published":"2026-11-05T05:17:22.576Z","brands":[],"dns":"resolved","resolved":["151.101.1.195","151.101.65.195"],"resolved_at":"2026-11-05T04:37:40Z","dns_checked_at":"2026-11-06T05:23:45.000Z","dns_since":"2026-11-05T05:23:02.000Z","findings":[{"id":"fdkenswxxpji7zgso2aqn","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T04:36:27.756Z","first_published":"2026-11-05T05:17:22.576Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/link.stepyourworld.com/"}],"url":"https://domainspoof.com/live?show=all&q=link.stepyourworld.com"},{"hostname":"logik41.com.br","first_observed":"2026-11-05T04:46:48.018Z","first_published":"2026-11-05T05:17:22.576Z","brands":[],"dns":"resolved","resolved":["199.36.158.100"],"resolved_at":"2026-11-05T04:47:07Z","dns_checked_at":"2026-11-06T05:23:45.000Z","dns_since":"2026-11-05T05:23:02.000Z","findings":[{"id":"fshtivj6fietxvdvzu2kq","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T04:46:48.018Z","first_published":"2026-11-05T05:17:22.576Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/logik41.com.br/"}],"url":"https://domainspoof.com/live?show=all&q=logik41.com.br"},{"hostname":"m.tzgcsj.com","first_observed":"2026-11-05T04:51:58.361Z","first_published":"2026-11-05T05:17:22.576Z","brands":[],"dns":"resolved","resolved":["154.220.44.153"],"resolved_at":"2026-11-05T04:52:16Z","dns_checked_at":"2026-11-06T05:23:45.000Z","dns_since":"2026-11-05T05:23:02.000Z","findings":[{"id":"fjrrbtvbgfqpzrzstus4o","kind":"reported_domain","summary":"Under tzgcsj.com, listed by CERT Polska","first_observed":"2026-11-05T04:51:58.361Z","first_published":"2026-11-05T05:17:22.576Z","source":"cert_polska","source_name":"CERT Polska","under":"tzgcsj.com"}],"url":"https://domainspoof.com/live?show=all&q=m.tzgcsj.com"},{"hostname":"m5mgjub71d.xyz","first_observed":"2026-11-05T04:51:58.361Z","first_published":"2026-11-05T05:17:22.576Z","brands":[],"dns":"resolved","resolved":["207.57.7.28"],"resolved_at":"2026-11-05T04:52:16Z","dns_checked_at":"2026-11-06T05:23:45.000Z","dns_since":"2026-11-05T05:23:02.000Z","findings":[{"id":"fgxu5xbfjwx7wjsodogej","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T04:51:58.361Z","first_published":"2026-11-05T05:17:22.576Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/m5mgjub71d.xyz/"}],"url":"https://domainspoof.com/live?show=all&q=m5mgjub71d.xyz"},{"hostname":"mahbuba-begum-instagram.fun","first_observed":"2026-11-05T04:16:48.104Z","first_published":"2026-11-05T05:17:22.576Z","brands":[{"id":"instagram","name":"Instagram","url":"https://domainspoof.com/brands/instagram"}],"dns":"resolved","resolved":["2.57.91.91"],"resolved_at":"2026-11-06T05:23:45Z","dns_checked_at":"2026-11-06T05:23:45.000Z","dns_since":"2026-11-05T05:23:02.000Z","findings":[{"id":"fmq6f5cozdzzoe2hyslnm","kind":"phishing_infrastructure","summary":"Resolved to 2.57.91.91, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T04:16:48.104Z","first_published":"2026-11-05T05:17:22.576Z","address":"2.57.91.91","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/instagram"},{"hostname":"mail.bggameboy.com","first_observed":"2026-11-05T04:26:10.749Z","first_published":"2026-11-05T05:17:22.576Z","brands":[],"dns":"resolved","resolved":["65.181.120.163"],"resolved_at":"2026-11-05T04:30:52Z","dns_checked_at":"2026-11-06T05:23:45.000Z","dns_since":"2026-11-05T05:23:02.000Z","findings":[{"id":"fvtuzwviacex5tx7age2u","kind":"reported_domain","summary":"Under bggameboy.com, reported by PhishDestroy","first_observed":"2026-11-05T04:26:10.749Z","first_published":"2026-11-05T05:17:22.576Z","source":"phishdestroy","source_name":"PhishDestroy","under":"bggameboy.com","source_url":"https://phishdestroy.io/domain/bggameboy.com/"}],"url":"https://domainspoof.com/live?show=all&q=mail.bggameboy.com"},{"hostname":"mail.pentest-yandex.ru","first_observed":"2026-11-05T04:04:20.046Z","first_published":"2026-11-05T05:17:22.576Z","brands":[{"id":"yandex","name":"Yandex","url":"https://domainspoof.com/brands/yandex"}],"dns":"resolved","resolved":["31.31.196.54"],"resolved_at":"2026-11-06T05:23:45Z","dns_checked_at":"2026-11-06T05:23:45.000Z","dns_since":"2026-11-05T05:23:02.000Z","findings":[{"id":"fj7rgkzv4oci572fhajjg","kind":"phishing_infrastructure","summary":"Resolved to 31.31.196.54, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T04:04:20.046Z","first_published":"2026-11-05T05:17:22.576Z","address":"31.31.196.54","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/yandex"},{"hostname":"mailerpro.mrstresser.com","first_observed":"2026-11-05T05:05:35.186Z","first_published":"2026-11-05T05:17:22.576Z","brands":[],"dns":"resolved","resolved":["104.21.92.32","172.67.185.205"],"resolved_at":"2026-11-05T05:17:08Z","dns_checked_at":"2026-11-06T05:23:45.000Z","dns_since":"2026-11-05T05:23:02.000Z","findings":[{"id":"fhaekzkr3bgkxxmlh5se2","kind":"reported_domain","summary":"Under mrstresser.com, reported by PhishDestroy","first_observed":"2026-11-05T05:05:35.186Z","first_published":"2026-11-05T05:17:22.576Z","source":"phishdestroy","source_name":"PhishDestroy","under":"mrstresser.com","source_url":"https://phishdestroy.io/domain/mrstresser.com/"}],"url":"https://domainspoof.com/live?show=all&q=mailerpro.mrstresser.com"},{"hostname":"marshallpolska-pl.com","first_observed":"2026-11-05T04:05:50.533Z","first_published":"2026-11-05T05:17:22.576Z","brands":[],"dns":"resolved","resolved":["104.160.4.145"],"resolved_at":"2026-11-05T04:15:31Z","dns_checked_at":"2026-11-06T05:23:45.000Z","dns_since":"2026-11-05T05:23:02.000Z","findings":[{"id":"fagsw4l67olefdfyzmuhn","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T04:05:50.533Z","first_published":"2026-11-05T05:17:22.576Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=marshallpolska-pl.com"},{"hostname":"matbet965.icu","first_observed":"2026-11-05T04:10:46.279Z","first_published":"2026-11-05T05:17:22.576Z","brands":[],"dns":"resolved","resolved":["104.21.83.161","172.67.178.103"],"resolved_at":"2026-11-05T04:11:03Z","dns_checked_at":"2026-11-06T05:23:45.000Z","dns_since":"2026-11-05T05:23:02.000Z","findings":[{"id":"fcnd6aoh7mfohkf43twvd","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T04:10:46.279Z","first_published":"2026-11-05T05:17:22.576Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/matbet965.icu/"}],"url":"https://domainspoof.com/live?show=all&q=matbet965.icu"},{"hostname":"meta-mask-compliance.de","first_observed":"2026-11-05T04:15:31.378Z","first_published":"2026-11-05T05:17:22.576Z","brands":[{"id":"metamask","name":"MetaMask","url":"https://domainspoof.com/brands/metamask"}],"dns":"resolved","resolved":["2.57.91.91"],"resolved_at":"2026-11-06T05:23:45Z","dns_checked_at":"2026-11-06T05:23:45.000Z","dns_since":"2026-11-05T05:23:02.000Z","findings":[{"id":"fe25kk3k2sirculh23smw","kind":"phishing_infrastructure","summary":"Resolved to 2.57.91.91, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T04:15:31.378Z","first_published":"2026-11-05T05:17:22.576Z","address":"2.57.91.91","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/metamask"},{"hostname":"metabase.floydldevine.com","first_observed":"2026-11-05T05:05:35.186Z","first_published":"2026-11-05T05:17:22.576Z","brands":[],"dns":"resolved","resolved":["109.238.86.5"],"resolved_at":"2026-11-05T05:17:07Z","dns_checked_at":"2026-11-06T05:23:45.000Z","dns_since":"2026-11-05T05:23:02.000Z","findings":[{"id":"fw3ap3e5x6srmefktngby","kind":"reported_domain","summary":"Under floydldevine.com, listed by CERT Polska","first_observed":"2026-11-05T05:05:35.186Z","first_published":"2026-11-05T05:17:22.576Z","source":"cert_polska","source_name":"CERT Polska","under":"floydldevine.com"}],"url":"https://domainspoof.com/live?show=all&q=metabase.floydldevine.com"},{"hostname":"metamaskhelp.app","first_observed":"2026-11-05T05:10:43.715Z","first_published":"2026-11-05T05:17:22.576Z","brands":[{"id":"metamask","name":"MetaMask","url":"https://domainspoof.com/brands/metamask"}],"dns":"resolved","resolved":["207.207.210.107","207.207.210.229"],"resolved_at":"2026-11-05T05:20:01Z","dns_checked_at":"2026-11-06T05:23:45.000Z","dns_since":"2026-11-05T05:23:02.000Z","findings":[{"id":"fbmewvgaitmabrqajzwl5","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T05:10:43.715Z","first_published":"2026-11-05T05:17:22.576Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/brands/metamask"},{"hostname":"mint-spend.com","first_observed":"2026-11-05T04:36:27.756Z","first_published":"2026-11-05T05:17:22.576Z","brands":[],"dns":"no_address","resolved":[],"resolved_at":"2026-11-05T04:37:40Z","dns_checked_at":"2026-11-06T05:23:45.000Z","dns_since":"2026-11-05T05:23:02.000Z","findings":[{"id":"fj4pql4tqsks3rzmqtmga","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T04:36:27.756Z","first_published":"2026-11-05T05:17:22.576Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=mint-spend.com"},{"hostname":"mode-airdrop.com","first_observed":"2026-11-05T04:16:27.327Z","first_published":"2026-11-05T05:17:22.576Z","brands":[],"dns":"resolved","resolved":["13.248.169.48","76.223.54.146"],"resolved_at":"2026-11-05T04:16:48Z","dns_checked_at":"2026-11-06T05:23:45.000Z","dns_since":"2026-11-05T05:23:02.000Z","findings":[{"id":"fm7ergzajhmtje3rvct2f","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T04:16:27.327Z","first_published":"2026-11-05T05:17:22.576Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=mode-airdrop.com"},{"hostname":"moonshot-ratings.net","first_observed":"2026-11-05T04:31:19.064Z","first_published":"2026-11-05T05:17:22.576Z","brands":[],"dns":"resolved","resolved":["104.21.11.47","172.67.165.39"],"resolved_at":"2026-11-05T04:33:54Z","dns_checked_at":"2026-11-06T05:23:45.000Z","dns_since":"2026-11-05T05:23:02.000Z","findings":[{"id":"fwzraw5fc3oipvb326ry7","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T04:31:19.064Z","first_published":"2026-11-05T05:17:22.576Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/moonshot-ratings.net/"}],"url":"https://domainspoof.com/live?show=all&q=moonshot-ratings.net"},{"hostname":"mostashopping.shop","first_observed":"2026-11-05T04:31:19.064Z","first_published":"2026-11-05T05:17:22.576Z","brands":[],"dns":"no_address","resolved":[],"resolved_at":"2026-11-05T04:33:53Z","dns_checked_at":"2026-11-06T05:23:45.000Z","dns_since":"2026-11-05T05:23:02.000Z","findings":[{"id":"ff2u5pm2thymifpo2n4dz","kind":"reported_domain","summary":"Listed by NPA 165 (e-commerce)","first_observed":"2026-11-05T04:31:19.064Z","first_published":"2026-11-05T05:17:22.576Z","source":"npa","source_name":"NPA 165","claim":{"category":"e-commerce"}}],"url":"https://domainspoof.com/live?show=all&q=mostashopping.shop"},{"hostname":"mprxzas.cn","first_observed":"2026-11-05T04:26:10.749Z","first_published":"2026-11-05T05:17:22.576Z","brands":[{"id":"ana","name":"ANA","url":"https://domainspoof.com/brands/ana"}],"dns":"no_address","resolved":[],"resolved_at":"2026-11-05T04:30:52Z","dns_checked_at":"2026-11-06T05:23:45.000Z","dns_since":"2026-11-05T05:23:02.000Z","findings":[{"id":"f6zz2erusgebyjlpokste","kind":"reported_domain","summary":"Listed by JPCERT/CC as imitating ANA","first_observed":"2026-11-05T04:26:10.749Z","first_published":"2026-11-05T05:17:22.576Z","source":"jpcert","source_name":"JPCERT/CC","claim":{"brand":"ANA"}}],"url":"https://domainspoof.com/brands/ana"},{"hostname":"mts525395.com","first_observed":"2026-11-05T04:10:46.279Z","first_published":"2026-11-05T05:17:22.576Z","brands":[],"dns":"resolved","resolved":["104.21.76.141","172.67.196.26"],"resolved_at":"2026-11-05T04:11:03Z","dns_checked_at":"2026-11-06T05:23:45.000Z","dns_since":"2026-11-05T05:23:02.000Z","findings":[{"id":"fxd36mofi6qd7ksupb7tq","kind":"reported_domain","summary":"Listed by NPA 165 (finance and insurance)","first_observed":"2026-11-05T04:10:46.279Z","first_published":"2026-11-05T05:17:22.576Z","source":"npa","source_name":"NPA 165","claim":{"category":"finance and insurance"}}],"url":"https://domainspoof.com/live?show=all&q=mts525395.com"},{"hostname":"multirbx.net","first_observed":"2026-11-05T04:05:50.533Z","first_published":"2026-11-05T05:17:22.576Z","brands":[],"dns":"resolved","resolved":["104.21.2.153","172.67.129.87"],"resolved_at":"2026-11-05T04:15:31Z","dns_checked_at":"2026-11-06T05:23:45.000Z","dns_since":"2026-11-05T05:23:02.000Z","findings":[{"id":"fowembz33zq55aoutnr5m","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T04:05:50.533Z","first_published":"2026-11-05T05:17:22.576Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/multirbx.net/"}],"url":"https://domainspoof.com/live?show=all&q=multirbx.net"},{"hostname":"mziqlces.qvmogyid.myhfgopl.xijnudcy.csarxeio.tczglrpw.gatewaylearning.ezgateway.net","first_observed":"2026-11-05T05:10:43.715Z","first_published":"2026-11-05T05:17:22.576Z","brands":[],"dns":"resolved","resolved":["15.204.116.29"],"resolved_at":"2026-11-05T05:20:02Z","dns_checked_at":"2026-11-06T05:23:45.000Z","dns_since":"2026-11-05T05:23:02.000Z","findings":[{"id":"fei3hitwobj7mpuhswr5b","kind":"reported_domain","summary":"Under ezgateway.net, listed by USOM","first_observed":"2026-11-05T05:10:43.715Z","first_published":"2026-11-05T05:17:22.576Z","source":"usom","source_name":"USOM","under":"ezgateway.net"}],"url":"https://domainspoof.com/live?show=all&q=mziqlces.qvmogyid.myhfgopl.xijnudcy.csarxeio.tczglrpw.gatewaylearning.ezgateway.net"},{"hostname":"network-nodehub.one","first_observed":"2026-11-05T04:46:48.018Z","first_published":"2026-11-05T05:17:22.576Z","brands":[],"dns":"resolved","resolved":["104.21.19.205","172.67.190.47"],"resolved_at":"2026-11-05T04:47:08Z","dns_checked_at":"2026-11-06T05:23:45.000Z","dns_since":"2026-11-05T05:23:02.000Z","findings":[{"id":"fdezza7arg7dnqyfxb64z","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T04:46:48.018Z","first_published":"2026-11-05T05:17:22.576Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=network-nodehub.one"},{"hostname":"next.zenavlico.cyou","first_observed":"2026-11-05T05:00:54.521Z","first_published":"2026-11-05T05:17:22.576Z","brands":[],"dns":"resolved","resolved":["95.85.244.13"],"resolved_at":"2026-11-05T05:11:08Z","dns_checked_at":"2026-11-06T05:23:45.000Z","dns_since":"2026-11-05T05:23:02.000Z","findings":[{"id":"fdpyo3jx6fubtpwurkuss","kind":"reported_domain","summary":"Under zenavlico.cyou, listed by CERT Polska","first_observed":"2026-11-05T05:00:54.521Z","first_published":"2026-11-05T05:17:22.576Z","source":"cert_polska","source_name":"CERT Polska","under":"zenavlico.cyou"}],"url":"https://domainspoof.com/live?show=all&q=next.zenavlico.cyou"},{"hostname":"old.aml.legal","first_observed":"2026-11-05T04:51:58.361Z","first_published":"2026-11-05T05:17:22.576Z","brands":[],"dns":"resolved","resolved":["186.2.175.179"],"resolved_at":"2026-11-05T04:52:16Z","dns_checked_at":"2026-11-06T05:23:45.000Z","dns_since":"2026-11-05T05:23:02.000Z","findings":[{"id":"fmda46ujwyhlaltqlncq5","kind":"reported_domain","summary":"Under aml.legal, reported by PhishDestroy","first_observed":"2026-11-05T04:51:58.361Z","first_published":"2026-11-05T05:17:22.576Z","source":"phishdestroy","source_name":"PhishDestroy","under":"aml.legal","source_url":"https://phishdestroy.io/domain/aml.legal/"}],"url":"https://domainspoof.com/live?show=all&q=old.aml.legal"},{"hostname":"old.zenavlico.cyou","first_observed":"2026-11-05T05:00:54.521Z","first_published":"2026-11-05T05:17:22.576Z","brands":[],"dns":"resolved","resolved":["95.85.244.13"],"resolved_at":"2026-11-05T05:11:08Z","dns_checked_at":"2026-11-06T05:23:45.000Z","dns_since":"2026-11-05T05:23:02.000Z","findings":[{"id":"fervzbgnmkzf6wmq5g56c","kind":"reported_domain","summary":"Under zenavlico.cyou, listed by CERT Polska","first_observed":"2026-11-05T05:00:54.521Z","first_published":"2026-11-05T05:17:22.576Z","source":"cert_polska","source_name":"CERT Polska","under":"zenavlico.cyou"}],"url":"https://domainspoof.com/live?show=all&q=old.zenavlico.cyou"},{"hostname":"orders.aml.legal","first_observed":"2026-11-05T04:05:50.533Z","first_published":"2026-11-05T05:17:22.576Z","brands":[],"dns":"resolved","resolved":["186.2.175.179"],"resolved_at":"2026-11-05T04:15:36Z","dns_checked_at":"2026-11-06T05:23:45.000Z","dns_since":"2026-11-05T05:23:02.000Z","findings":[{"id":"fw63e5vtowkcoqbhpdxzy","kind":"reported_domain","summary":"Under aml.legal, reported by PhishDestroy","first_observed":"2026-11-05T04:05:50.533Z","first_published":"2026-11-05T05:17:22.576Z","source":"phishdestroy","source_name":"PhishDestroy","under":"aml.legal","source_url":"https://phishdestroy.io/domain/aml.legal/"}],"url":"https://domainspoof.com/live?show=all&q=orders.aml.legal"},{"hostname":"ovinraherbal.com","first_observed":"2026-11-05T04:51:58.361Z","first_published":"2026-11-05T05:17:22.576Z","brands":[],"dns":"resolved","resolved":["207.207.210.107","207.207.210.229"],"resolved_at":"2026-11-05T04:52:16Z","dns_checked_at":"2026-11-06T05:23:45.000Z","dns_since":"2026-11-05T05:23:02.000Z","findings":[{"id":"foyxs5n3xq2rlr2gtrl7j","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T04:51:58.361Z","first_published":"2026-11-05T05:17:22.576Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=ovinraherbal.com"},{"hostname":"pages-trezr-io-home.pages.dev","first_observed":"2026-11-05T04:05:50.533Z","first_published":"2026-11-05T05:17:22.576Z","brands":[],"dns":"resolved","resolved":["172.66.44.206","172.66.47.50"],"resolved_at":"2026-11-05T04:15:36Z","dns_checked_at":"2026-11-06T05:23:45.000Z","dns_since":"2026-11-05T05:23:02.000Z","findings":[{"id":"f227ad462n2qxnppjcfmf","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T04:05:50.533Z","first_published":"2026-11-05T05:17:22.576Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=pages-trezr-io-home.pages.dev"},{"hostname":"paribucark-alhediye.com","first_observed":"2026-11-05T04:31:19.064Z","first_published":"2026-11-05T05:17:22.576Z","brands":[],"dns":"resolved","resolved":["64.89.160.49"],"resolved_at":"2026-11-05T04:33:54Z","dns_checked_at":"2026-11-06T05:23:45.000Z","dns_since":"2026-11-05T05:23:02.000Z","findings":[{"id":"f6dimpvvt2gezntupaach","kind":"reported_domain","summary":"Listed by USOM","first_observed":"2026-11-05T04:31:19.064Z","first_published":"2026-11-05T05:17:22.576Z","source":"usom","source_name":"USOM"}],"url":"https://domainspoof.com/live?show=all&q=paribucark-alhediye.com"},{"hostname":"pasfdsf.com","first_observed":"2026-11-05T04:21:05.259Z","first_published":"2026-11-05T05:17:22.576Z","brands":[],"dns":"no_address","resolved":[],"resolved_at":"2026-11-05T04:28:38Z","dns_checked_at":"2026-11-06T05:23:45.000Z","dns_since":"2026-11-05T05:23:02.000Z","findings":[{"id":"f2ynzqcl7dswwujdjwadg","kind":"reported_domain","summary":"Listed by NPA 165 (finance and insurance)","first_observed":"2026-11-05T04:21:05.259Z","first_published":"2026-11-05T05:17:22.576Z","source":"npa","source_name":"NPA 165","claim":{"category":"finance and insurance"}}],"url":"https://domainspoof.com/live?show=all&q=pasfdsf.com"},{"hostname":"pay-bitrefill.com-ck01-esim-gift.com","first_observed":"2026-11-05T04:33:54.981Z","first_published":"2026-11-05T05:17:22.576Z","brands":[{"id":"bitrefill","name":"Bitrefill","url":"https://domainspoof.com/brands/bitrefill"}],"dns":"resolved","resolved":["62.60.226.39"],"resolved_at":"2026-11-06T05:23:45Z","dns_checked_at":"2026-11-06T05:23:45.000Z","dns_since":"2026-11-05T06:34:01.000Z","findings":[{"id":"f3zxhipflgfrvelhhxevt","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T05:51:47.152Z","first_published":"2026-11-05T06:25:55.462Z","source":"metamask","source_name":"MetaMask"},{"id":"fpvbpnpahjssd4nqqhti7","kind":"spamhaus_drop","summary":"Resolved to 62.60.226.39 on Spamhaus DROP","first_observed":"2026-11-05T04:33:54.981Z","first_published":"2026-11-05T05:17:22.576Z","address":"62.60.226.39","list":"spamhaus_drop","list_name":"Spamhaus DROP"}],"url":"https://domainspoof.com/brands/bitrefill"},{"hostname":"pentest-yandex.ru","first_observed":"2026-11-05T04:04:21.766Z","first_published":"2026-11-05T05:17:22.576Z","brands":[{"id":"yandex","name":"Yandex","url":"https://domainspoof.com/brands/yandex"}],"dns":"resolved","resolved":["31.31.196.54"],"resolved_at":"2026-11-06T05:23:45Z","dns_checked_at":"2026-11-06T05:23:45.000Z","dns_since":"2026-11-05T05:23:02.000Z","findings":[{"id":"fl4fk6wgjdnxr6zemeprz","kind":"phishing_infrastructure","summary":"Resolved to 31.31.196.54, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T04:04:21.766Z","first_published":"2026-11-05T05:17:22.576Z","address":"31.31.196.54","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/yandex"},{"hostname":"pezfa.xyz","first_observed":"2026-11-05T04:51:58.361Z","first_published":"2026-11-05T05:17:22.576Z","brands":[],"dns":"resolved","resolved":["104.21.42.128","172.67.162.10"],"resolved_at":"2026-11-05T04:52:16Z","dns_checked_at":"2026-11-06T05:23:45.000Z","dns_since":"2026-11-05T05:23:02.000Z","findings":[{"id":"fs7ko6v3riuqjk7dl226h","kind":"reported_domain","summary":"Listed by NPA 165 (e-commerce)","first_observed":"2026-11-05T04:51:58.361Z","first_published":"2026-11-05T05:17:22.576Z","source":"npa","source_name":"NPA 165","claim":{"category":"e-commerce"}}],"url":"https://domainspoof.com/live?show=all&q=pezfa.xyz"},{"hostname":"poizon.click","first_observed":"2026-11-05T04:05:50.533Z","first_published":"2026-11-05T05:17:22.576Z","brands":[],"dns":"resolved","resolved":["104.21.3.7","172.67.129.252"],"resolved_at":"2026-11-05T04:15:36Z","dns_checked_at":"2026-11-06T05:23:45.000Z","dns_since":"2026-11-05T05:23:02.000Z","findings":[{"id":"fjlavrtkunwqz5nms5tw5","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T04:05:50.533Z","first_published":"2026-11-05T05:17:22.576Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/poizon.click/"}],"url":"https://domainspoof.com/live?show=all&q=poizon.click"},{"hostname":"portalteam.net","first_observed":"2026-11-05T04:31:19.064Z","first_published":"2026-11-05T05:17:22.576Z","brands":[{"id":"capital-one","name":"Capital One","url":"https://domainspoof.com/brands/capital-one"}],"dns":"resolved","resolved":["59.106.191.205"],"resolved_at":"2026-11-06T09:00:46Z","dns_checked_at":"2026-11-06T05:23:45.000Z","dns_since":"2026-11-05T05:23:02.000Z","findings":[{"id":"fq6fhhzkrxng2rawcxo23","kind":"reported_domain","summary":"Listed by JPCERT/CC as imitating Capital One","first_observed":"2026-11-05T04:31:19.064Z","first_published":"2026-11-05T05:17:22.576Z","source":"jpcert","source_name":"JPCERT/CC","claim":{"brand":"Capital One"}}],"url":"https://domainspoof.com/brands/capital-one"},{"hostname":"preprod.ni-electrical.com","first_observed":"2026-11-05T04:10:46.279Z","first_published":"2026-11-05T05:17:22.576Z","brands":[],"dns":"resolved","resolved":["109.238.86.5"],"resolved_at":"2026-11-05T04:11:03Z","dns_checked_at":"2026-11-06T05:23:45.000Z","dns_since":"2026-11-05T05:23:02.000Z","findings":[{"id":"frudk3axxppfez2igpw27","kind":"reported_domain","summary":"Under ni-electrical.com, listed by CERT Polska","first_observed":"2026-11-05T04:10:46.279Z","first_published":"2026-11-05T05:17:22.576Z","source":"cert_polska","source_name":"CERT Polska","under":"ni-electrical.com"}],"url":"https://domainspoof.com/live?show=all&q=preprod.ni-electrical.com"},{"hostname":"proposal-arrow.info","first_observed":"2026-11-05T04:41:03.837Z","first_published":"2026-11-05T05:17:22.576Z","brands":[],"dns":"resolved","resolved":["104.21.72.111","172.67.182.16"],"resolved_at":"2026-11-05T04:41:39Z","dns_checked_at":"2026-11-06T05:23:45.000Z","dns_since":"2026-11-05T05:23:02.000Z","findings":[{"id":"fcrnnwscpki6gyuytpkhp","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T04:41:03.837Z","first_published":"2026-11-05T05:17:22.576Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=proposal-arrow.info"},{"hostname":"qa.zenavlico.cyou","first_observed":"2026-11-05T05:00:54.521Z","first_published":"2026-11-05T05:17:22.576Z","brands":[],"dns":"resolved","resolved":["95.85.244.13"],"resolved_at":"2026-11-05T05:11:08Z","dns_checked_at":"2026-11-06T05:23:45.000Z","dns_since":"2026-11-05T05:23:02.000Z","findings":[{"id":"foxtyyxpw7t5lacpknq4j","kind":"reported_domain","summary":"Under zenavlico.cyou, listed by CERT Polska","first_observed":"2026-11-05T05:00:54.521Z","first_published":"2026-11-05T05:17:22.576Z","source":"cert_polska","source_name":"CERT Polska","under":"zenavlico.cyou"}],"url":"https://domainspoof.com/live?show=all&q=qa.zenavlico.cyou"},{"hostname":"quantivex.live","first_observed":"2026-11-05T04:56:38.139Z","first_published":"2026-11-05T05:17:22.576Z","brands":[],"dns":"resolved","resolved":["104.21.5.33","172.67.132.220"],"resolved_at":"2026-11-05T04:57:31Z","dns_checked_at":"2026-11-06T05:23:45.000Z","dns_since":"2026-11-05T05:23:02.000Z","findings":[{"id":"frnz47am2ebits4xqatbe","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T04:56:38.139Z","first_published":"2026-11-05T05:17:22.576Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=quantivex.live"},{"hostname":"rapidchain.live","first_observed":"2026-11-05T04:05:50.533Z","first_published":"2026-11-05T05:17:22.576Z","brands":[],"dns":"resolved","resolved":["104.21.0.251","172.67.151.156"],"resolved_at":"2026-11-05T04:15:37Z","dns_checked_at":"2026-11-06T05:23:45.000Z","dns_since":"2026-11-05T05:23:02.000Z","findings":[{"id":"fefeimxnpltx4lglyvabt","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T04:05:50.533Z","first_published":"2026-11-05T05:17:22.576Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/rapidchain.live/"}],"url":"https://domainspoof.com/live?show=all&q=rapidchain.live"},{"hostname":"rdp.aml.legal","first_observed":"2026-11-05T04:21:05.259Z","first_published":"2026-11-05T05:17:22.576Z","brands":[],"dns":"resolved","resolved":["186.2.175.179"],"resolved_at":"2026-11-05T04:28:39Z","dns_checked_at":"2026-11-06T05:23:45.000Z","dns_since":"2026-11-05T05:23:02.000Z","findings":[{"id":"fjlnf2xr7uyjatul6qpte","kind":"reported_domain","summary":"Under aml.legal, reported by PhishDestroy","first_observed":"2026-11-05T04:21:05.259Z","first_published":"2026-11-05T05:17:22.576Z","source":"phishdestroy","source_name":"PhishDestroy","under":"aml.legal","source_url":"https://phishdestroy.io/domain/aml.legal/"}],"url":"https://domainspoof.com/live?show=all&q=rdp.aml.legal"},{"hostname":"reichtumai.com","first_observed":"2026-11-05T04:56:38.139Z","first_published":"2026-11-05T05:17:22.576Z","brands":[],"dns":"resolved","resolved":["104.21.53.13","172.67.207.115"],"resolved_at":"2026-11-05T04:57:31Z","dns_checked_at":"2026-11-06T05:23:45.000Z","dns_since":"2026-11-05T05:23:02.000Z","findings":[{"id":"fscq2jir3nmnfdlsdnex4","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T04:56:38.139Z","first_published":"2026-11-05T05:17:22.576Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=reichtumai.com"},{"hostname":"rexlynk.com","first_observed":"2026-11-05T04:16:27.327Z","first_published":"2026-11-05T05:17:22.576Z","brands":[],"dns":"resolved","resolved":["3.171.85.50","3.171.85.51","3.171.85.101","3.171.85.125"],"resolved_at":"2026-11-05T04:16:48Z","dns_checked_at":"2026-11-06T05:23:45.000Z","dns_since":"2026-11-05T05:23:02.000Z","findings":[{"id":"fpiugatokzy66234kblji","kind":"reported_domain","summary":"Listed by NPA 165 (e-commerce)","first_observed":"2026-11-05T04:16:27.327Z","first_published":"2026-11-05T05:17:22.576Z","source":"npa","source_name":"NPA 165","claim":{"category":"e-commerce"}}],"url":"https://domainspoof.com/live?show=all&q=rexlynk.com"},{"hostname":"ruysadbad.buzz","first_observed":"2026-11-05T04:36:27.756Z","first_published":"2026-11-05T05:17:22.576Z","brands":[],"dns":"resolved","resolved":["104.21.86.243","172.67.137.243"],"resolved_at":"2026-11-05T04:37:44Z","dns_checked_at":"2026-11-06T05:23:45.000Z","dns_since":"2026-11-05T05:23:02.000Z","findings":[{"id":"fs3jl4er5mvmqaclyjdx4","kind":"reported_domain","summary":"Listed by NPA 165 (e-commerce)","first_observed":"2026-11-05T04:36:27.756Z","first_published":"2026-11-05T05:17:22.576Z","source":"npa","source_name":"NPA 165","claim":{"category":"e-commerce"}}],"url":"https://domainspoof.com/live?show=all&q=ruysadbad.buzz"},{"hostname":"servework.digital","first_observed":"2026-11-05T04:16:27.327Z","first_published":"2026-11-05T05:17:22.576Z","brands":[],"dns":"resolved","resolved":["104.21.72.112","172.67.182.246"],"resolved_at":"2026-11-05T04:16:49Z","dns_checked_at":"2026-11-06T05:23:45.000Z","dns_since":"2026-11-05T05:23:02.000Z","findings":[{"id":"fbrtv5yrula4pghwinjtu","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T04:16:27.327Z","first_published":"2026-11-05T05:17:22.576Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=servework.digital"},{"hostname":"session-authentication-services-security-notification.cfd","first_observed":"2026-11-05T04:10:46.279Z","first_published":"2026-11-05T05:17:22.576Z","brands":[],"dns":"no_address","resolved":[],"resolved_at":"2026-11-06T15:29:47Z","dns_checked_at":"2026-11-06T05:23:45.000Z","dns_since":"2026-11-05T05:23:02.000Z","findings":[{"id":"fljvlg2j3d4zlp432jtbx","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T04:10:46.279Z","first_published":"2026-11-05T05:17:22.576Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=session-authentication-services-security-notification.cfd"},{"hostname":"shop.zenavlico.cyou","first_observed":"2026-11-05T05:00:54.521Z","first_published":"2026-11-05T05:17:22.576Z","brands":[],"dns":"resolved","resolved":["95.85.244.13"],"resolved_at":"2026-11-05T05:11:11Z","dns_checked_at":"2026-11-06T05:23:45.000Z","dns_since":"2026-11-05T05:23:02.000Z","findings":[{"id":"fp3ass65nyeg562u3zn4y","kind":"reported_domain","summary":"Under zenavlico.cyou, listed by CERT Polska","first_observed":"2026-11-05T05:00:54.521Z","first_published":"2026-11-05T05:17:22.576Z","source":"cert_polska","source_name":"CERT Polska","under":"zenavlico.cyou"}],"url":"https://domainspoof.com/live?show=all&q=shop.zenavlico.cyou"},{"hostname":"spostsotto.click","first_observed":"2026-11-05T04:51:58.361Z","first_published":"2026-11-05T05:17:22.576Z","brands":[],"dns":"no_address","resolved":[],"resolved_at":"2026-11-05T04:52:17Z","dns_checked_at":"2026-11-06T05:23:45.000Z","dns_since":"2026-11-05T05:23:02.000Z","findings":[{"id":"f7kp6umbuudpsrh6yzqod","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T04:51:58.361Z","first_published":"2026-11-05T05:17:22.576Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=spostsotto.click"},{"hostname":"stats.aml.legal","first_observed":"2026-11-05T04:46:48.018Z","first_published":"2026-11-05T05:17:22.576Z","brands":[],"dns":"resolved","resolved":["186.2.175.179"],"resolved_at":"2026-11-05T04:47:09Z","dns_checked_at":"2026-11-06T05:23:45.000Z","dns_since":"2026-11-05T05:23:02.000Z","findings":[{"id":"fex3wtnfiflvtgwt5qoar","kind":"reported_domain","summary":"Under aml.legal, reported by PhishDestroy","first_observed":"2026-11-05T04:46:48.018Z","first_published":"2026-11-05T05:17:22.576Z","source":"phishdestroy","source_name":"PhishDestroy","under":"aml.legal","source_url":"https://phishdestroy.io/domain/aml.legal/"}],"url":"https://domainspoof.com/live?show=all&q=stats.aml.legal"},{"hostname":"store.zenavlico.cyou","first_observed":"2026-11-05T05:00:54.521Z","first_published":"2026-11-05T05:17:22.576Z","brands":[],"dns":"resolved","resolved":["95.85.244.13"],"resolved_at":"2026-11-05T05:11:12Z","dns_checked_at":"2026-11-06T05:23:45.000Z","dns_since":"2026-11-05T05:23:02.000Z","findings":[{"id":"fldbceryynnloflr7andx","kind":"reported_domain","summary":"Under zenavlico.cyou, listed by CERT Polska","first_observed":"2026-11-05T05:00:54.521Z","first_published":"2026-11-05T05:17:22.576Z","source":"cert_polska","source_name":"CERT Polska","under":"zenavlico.cyou"}],"url":"https://domainspoof.com/live?show=all&q=store.zenavlico.cyou"},{"hostname":"sveleno.com","first_observed":"2026-11-05T04:16:27.327Z","first_published":"2026-11-05T05:17:22.576Z","brands":[],"dns":"resolved","resolved":["3.171.85.50","3.171.85.51","3.171.85.101","3.171.85.125"],"resolved_at":"2026-11-05T04:16:49Z","dns_checked_at":"2026-11-06T05:23:45.000Z","dns_since":"2026-11-05T05:23:02.000Z","findings":[{"id":"f2rqmvooo4zbkc3fvqd46","kind":"reported_domain","summary":"Listed by NPA 165 (e-commerce)","first_observed":"2026-11-05T04:16:27.327Z","first_published":"2026-11-05T05:17:22.576Z","source":"npa","source_name":"NPA 165","claim":{"category":"e-commerce"}}],"url":"https://domainspoof.com/live?show=all&q=sveleno.com"},{"hostname":"tanyou02.buzz","first_observed":"2026-11-05T04:26:10.749Z","first_published":"2026-11-05T05:17:22.576Z","brands":[],"dns":"resolved","resolved":["104.21.0.225","172.67.128.89"],"resolved_at":"2026-11-05T04:26:23Z","dns_checked_at":"2026-11-06T05:23:45.000Z","dns_since":"2026-11-05T05:23:02.000Z","findings":[{"id":"fkas2eqiilqr6sclqjlpi","kind":"reported_domain","summary":"Listed by NPA 165 (e-commerce)","first_observed":"2026-11-05T04:26:10.749Z","first_published":"2026-11-05T05:17:22.576Z","source":"npa","source_name":"NPA 165","claim":{"category":"e-commerce"}}],"url":"https://domainspoof.com/live?show=all&q=tanyou02.buzz"},{"hostname":"tanyou03.site","first_observed":"2026-11-05T04:31:19.064Z","first_published":"2026-11-05T05:17:22.576Z","brands":[],"dns":"resolved","resolved":["104.21.96.75","172.67.174.71"],"resolved_at":"2026-11-05T04:33:57Z","dns_checked_at":"2026-11-06T05:23:45.000Z","dns_since":"2026-11-05T05:23:02.000Z","findings":[{"id":"frx6w43uxfan4rrkskpns","kind":"reported_domain","summary":"Listed by NPA 165 (e-commerce)","first_observed":"2026-11-05T04:31:19.064Z","first_published":"2026-11-05T05:17:22.576Z","source":"npa","source_name":"NPA 165","claim":{"category":"e-commerce"}}],"url":"https://domainspoof.com/live?show=all&q=tanyou03.site"},{"hostname":"tenawex.com","first_observed":"2026-11-05T04:41:03.837Z","first_published":"2026-11-05T05:17:22.576Z","brands":[],"dns":"resolved","resolved":["104.21.16.211","172.67.215.240"],"resolved_at":"2026-11-05T04:41:42Z","dns_checked_at":"2026-11-06T05:23:45.000Z","dns_since":"2026-11-05T05:23:02.000Z","findings":[{"id":"fr2pfvhj3w2svlfzdkdwe","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T04:41:03.837Z","first_published":"2026-11-05T05:17:22.576Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/tenawex.com/"}],"url":"https://domainspoof.com/live?show=all&q=tenawex.com"},{"hostname":"test.zenavlico.cyou","first_observed":"2026-11-05T05:00:54.521Z","first_published":"2026-11-05T05:17:22.576Z","brands":[],"dns":"resolved","resolved":["95.85.244.13"],"resolved_at":"2026-11-05T05:11:12Z","dns_checked_at":"2026-11-06T05:23:45.000Z","dns_since":"2026-11-05T05:23:02.000Z","findings":[{"id":"fbycasoaiirzdm3msxhay","kind":"reported_domain","summary":"Under zenavlico.cyou, listed by CERT Polska","first_observed":"2026-11-05T05:00:54.521Z","first_published":"2026-11-05T05:17:22.576Z","source":"cert_polska","source_name":"CERT Polska","under":"zenavlico.cyou"}],"url":"https://domainspoof.com/live?show=all&q=test.zenavlico.cyou"},{"hostname":"threeds.luampm.com","first_observed":"2026-11-05T04:05:50.533Z","first_published":"2026-11-05T05:17:22.576Z","brands":[],"dns":"resolved","resolved":["39.108.86.125"],"resolved_at":"2026-11-05T04:15:40Z","dns_checked_at":"2026-11-06T05:23:45.000Z","dns_since":"2026-11-05T05:23:02.000Z","findings":[{"id":"fyb46ak53dvsjba25uadb","kind":"reported_domain","summary":"Under luampm.com, listed by MetaMask","first_observed":"2026-11-05T04:05:50.533Z","first_published":"2026-11-05T05:17:22.576Z","source":"metamask","source_name":"MetaMask","under":"luampm.com"}],"url":"https://domainspoof.com/live?show=all&q=threeds.luampm.com"},{"hostname":"tionautrucheslande.ibahia.cl","first_observed":"2026-11-05T05:00:54.521Z","first_published":"2026-11-05T05:17:22.576Z","brands":[],"dns":"resolved","resolved":["64.20.44.107"],"resolved_at":"2026-11-05T05:11:12Z","dns_checked_at":"2026-11-06T05:23:45.000Z","dns_since":"2026-11-05T05:23:02.000Z","findings":[{"id":"fxocfhe3hfazm6lm5sh4q","kind":"reported_domain","summary":"Under ibahia.cl, listed by MetaMask","first_observed":"2026-11-05T05:00:54.521Z","first_published":"2026-11-05T05:17:22.576Z","source":"metamask","source_name":"MetaMask","under":"ibahia.cl"}],"url":"https://domainspoof.com/live?show=all&q=tionautrucheslande.ibahia.cl"},{"hostname":"titan-portdex.digital","first_observed":"2026-11-05T04:36:27.756Z","first_published":"2026-11-05T05:17:22.576Z","brands":[],"dns":"resolved","resolved":["104.21.95.64","172.67.143.103"],"resolved_at":"2026-11-06T14:59:35Z","dns_checked_at":"2026-11-06T05:23:45.000Z","dns_since":"2026-11-05T05:23:02.000Z","findings":[{"id":"flikccvt2ov5g2xtpvzyr","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T04:36:27.756Z","first_published":"2026-11-05T05:17:22.576Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=titan-portdex.digital"},{"hostname":"tmgm-trade-cn.com","first_observed":"2026-11-05T04:05:50.533Z","first_published":"2026-11-05T05:17:22.576Z","brands":[],"dns":"resolved","resolved":["52.37.165.222"],"resolved_at":"2026-11-05T04:15:41Z","dns_checked_at":"2026-11-06T05:23:45.000Z","dns_since":"2026-11-05T05:23:02.000Z","findings":[{"id":"f2u2o4xkh3pwyy7oyzxgy","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T04:05:50.533Z","first_published":"2026-11-05T05:17:22.576Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=tmgm-trade-cn.com"},{"hostname":"tpekgkr.space","first_observed":"2026-11-05T04:26:10.749Z","first_published":"2026-11-05T05:17:22.576Z","brands":[],"dns":"resolved","resolved":["104.21.48.235","172.67.188.90"],"resolved_at":"2026-11-05T04:26:23Z","dns_checked_at":"2026-11-06T05:23:45.000Z","dns_since":"2026-11-05T05:23:02.000Z","findings":[{"id":"fhv5hfqyuk27j5w32a5vc","kind":"reported_domain","summary":"Listed by NPA 165 (e-commerce)","first_observed":"2026-11-05T04:26:10.749Z","first_published":"2026-11-05T05:17:22.576Z","source":"npa","source_name":"NPA 165","claim":{"category":"e-commerce"}}],"url":"https://domainspoof.com/live?show=all&q=tpekgkr.space"},{"hostname":"tradesphereco.com","first_observed":"2026-11-05T04:26:10.749Z","first_published":"2026-11-05T05:17:22.576Z","brands":[],"dns":"resolved","resolved":["51.161.143.57"],"resolved_at":"2026-11-05T04:26:23Z","dns_checked_at":"2026-11-06T05:23:45.000Z","dns_since":"2026-11-05T05:23:02.000Z","findings":[{"id":"fgnf657mjp3iil6lxgmod","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T04:26:10.749Z","first_published":"2026-11-05T05:17:22.576Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/tradesphereco.com/"}],"url":"https://domainspoof.com/live?show=all&q=tradesphereco.com"},{"hostname":"trumpump.best","first_observed":"2026-11-05T04:05:50.533Z","first_published":"2026-11-05T05:17:22.576Z","brands":[],"dns":"resolved","resolved":["104.21.84.239","172.67.198.228"],"resolved_at":"2026-11-05T04:15:41Z","dns_checked_at":"2026-11-06T05:23:45.000Z","dns_since":"2026-11-05T05:23:02.000Z","findings":[{"id":"f7z4kf32brh54pc6k5o72","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T04:05:50.533Z","first_published":"2026-11-05T05:17:22.576Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/trumpump.best/"}],"url":"https://domainspoof.com/live?show=all&q=trumpump.best"},{"hostname":"trusttradinghub.com","first_observed":"2026-11-05T04:21:05.259Z","first_published":"2026-11-05T05:17:22.576Z","brands":[],"dns":"resolved","resolved":["77.37.53.58","91.108.98.72"],"resolved_at":"2026-11-05T04:28:41Z","dns_checked_at":"2026-11-06T05:23:45.000Z","dns_since":"2026-11-05T05:23:02.000Z","findings":[{"id":"fbqwj7gk3pxcn24z5ux7y","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T04:21:05.259Z","first_published":"2026-11-05T05:17:22.576Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/trusttradinghub.com/"}],"url":"https://domainspoof.com/live?show=all&q=trusttradinghub.com"},{"hostname":"twt-reward.top","first_observed":"2026-11-05T04:05:50.533Z","first_published":"2026-11-05T05:17:22.576Z","brands":[],"dns":"resolved","resolved":["104.21.46.128","172.67.139.6"],"resolved_at":"2026-11-05T04:15:42Z","dns_checked_at":"2026-11-06T05:23:45.000Z","dns_since":"2026-11-05T05:23:02.000Z","findings":[{"id":"fgyi2vb2xmv6ykt7rocqx","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T04:05:50.533Z","first_published":"2026-11-05T05:17:22.576Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/twt-reward.top/"}],"url":"https://domainspoof.com/live?show=all&q=twt-reward.top"},{"hostname":"tzgcsj.com","first_observed":"2026-11-05T04:51:58.361Z","first_published":"2026-11-05T05:17:22.576Z","brands":[],"dns":"resolved","resolved":["154.220.44.153"],"resolved_at":"2026-11-05T04:52:20Z","dns_checked_at":"2026-11-06T05:23:45.000Z","dns_since":"2026-11-05T05:23:02.000Z","findings":[{"id":"f2ep7w5bz226shjxc4p32","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T04:51:58.361Z","first_published":"2026-11-05T05:17:22.576Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=tzgcsj.com"},{"hostname":"uct-vodafone.de","first_observed":"2026-11-05T04:28:41.962Z","first_published":"2026-11-05T05:17:22.576Z","brands":[{"id":"vodafone","name":"Vodafone","url":"https://domainspoof.com/brands/vodafone"}],"dns":"resolved","resolved":["217.160.0.18"],"resolved_at":"2026-11-06T05:23:45Z","dns_checked_at":"2026-11-06T05:23:45.000Z","dns_since":"2026-11-05T05:23:02.000Z","findings":[{"id":"fh3kkbhuotwqhv3stmtrb","kind":"phishing_infrastructure","summary":"Resolved to 217.160.0.18, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T04:28:41.962Z","first_published":"2026-11-05T05:17:22.576Z","address":"217.160.0.18","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/vodafone"},{"hostname":"us-apps-en-ledgr-live.pages.dev","first_observed":"2026-11-05T04:10:46.279Z","first_published":"2026-11-05T05:17:22.576Z","brands":[],"dns":"resolved","resolved":["172.66.44.231","172.66.47.25"],"resolved_at":"2026-11-05T04:11:05Z","dns_checked_at":"2026-11-06T05:23:45.000Z","dns_since":"2026-11-05T05:23:02.000Z","findings":[{"id":"fs7zywp4fxk7ekvmm2r2q","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T04:10:46.279Z","first_published":"2026-11-05T05:17:22.576Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=us-apps-en-ledgr-live.pages.dev"},{"hostname":"usdcboss.org","first_observed":"2026-11-05T04:10:46.279Z","first_published":"2026-11-05T05:17:22.576Z","brands":[],"dns":"resolved","resolved":["104.21.86.106","172.67.218.63"],"resolved_at":"2026-11-05T04:11:05Z","dns_checked_at":"2026-11-06T05:23:45.000Z","dns_since":"2026-11-05T05:23:02.000Z","findings":[{"id":"fztiiun3znvlrciqbkmgr","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T04:10:46.279Z","first_published":"2026-11-05T05:17:22.576Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/usdcboss.org/"}],"url":"https://domainspoof.com/live?show=all&q=usdcboss.org"},{"hostname":"usdcking.org","first_observed":"2026-11-05T05:05:35.186Z","first_published":"2026-11-05T05:17:22.576Z","brands":[],"dns":"resolved","resolved":["104.21.7.80","172.67.135.227"],"resolved_at":"2026-11-05T05:17:37Z","dns_checked_at":"2026-11-06T05:23:45.000Z","dns_since":"2026-11-05T05:23:02.000Z","findings":[{"id":"fttipl76jsrgye7bhy7c5","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T05:05:35.186Z","first_published":"2026-11-05T05:17:22.576Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/usdcking.org/"}],"url":"https://domainspoof.com/live?show=all&q=usdcking.org"},{"hostname":"v1.zenavlico.cyou","first_observed":"2026-11-05T05:00:54.521Z","first_published":"2026-11-05T05:17:22.576Z","brands":[],"dns":"resolved","resolved":["95.85.244.13"],"resolved_at":"2026-11-05T05:11:13Z","dns_checked_at":"2026-11-06T05:23:45.000Z","dns_since":"2026-11-05T05:23:02.000Z","findings":[{"id":"fgu4ttw6rfp62zxhufmmq","kind":"reported_domain","summary":"Under zenavlico.cyou, listed by CERT Polska","first_observed":"2026-11-05T05:00:54.521Z","first_published":"2026-11-05T05:17:22.576Z","source":"cert_polska","source_name":"CERT Polska","under":"zenavlico.cyou"}],"url":"https://domainspoof.com/live?show=all&q=v1.zenavlico.cyou"},{"hostname":"v2.zenavlico.cyou","first_observed":"2026-11-05T05:00:54.521Z","first_published":"2026-11-05T05:17:22.576Z","brands":[],"dns":"resolved","resolved":["95.85.244.13"],"resolved_at":"2026-11-05T05:11:13Z","dns_checked_at":"2026-11-06T05:23:45.000Z","dns_since":"2026-11-05T05:23:02.000Z","findings":[{"id":"ffjwsp6wfkgps7j2ocnnt","kind":"reported_domain","summary":"Under zenavlico.cyou, listed by CERT Polska","first_observed":"2026-11-05T05:00:54.521Z","first_published":"2026-11-05T05:17:22.576Z","source":"cert_polska","source_name":"CERT Polska","under":"zenavlico.cyou"}],"url":"https://domainspoof.com/live?show=all&q=v2.zenavlico.cyou"},{"hostname":"vcenter.floydldevine.com","first_observed":"2026-11-05T04:21:05.259Z","first_published":"2026-11-05T05:17:22.576Z","brands":[],"dns":"resolved","resolved":["109.238.86.5"],"resolved_at":"2026-11-05T04:28:42Z","dns_checked_at":"2026-11-06T05:23:45.000Z","dns_since":"2026-11-05T05:23:02.000Z","findings":[{"id":"fo6xfby7wgfkbgg2ulbfq","kind":"reported_domain","summary":"Under floydldevine.com, listed by CERT Polska","first_observed":"2026-11-05T04:21:05.259Z","first_published":"2026-11-05T05:17:22.576Z","source":"cert_polska","source_name":"CERT Polska","under":"floydldevine.com"}],"url":"https://domainspoof.com/live?show=all&q=vcenter.floydldevine.com"},{"hostname":"viscdnclaud.beer","first_observed":"2026-11-05T04:21:05.259Z","first_published":"2026-11-05T05:17:22.576Z","brands":[],"dns":"resolved","resolved":["178.16.52.101"],"resolved_at":"2026-11-05T04:28:42Z","dns_checked_at":"2026-11-06T05:23:45.000Z","dns_since":"2026-11-05T05:23:02.000Z","findings":[{"id":"fe4sgdmjpteq25bf5f7tk","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T04:21:05.259Z","first_published":"2026-11-05T05:17:22.576Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=viscdnclaud.beer"},{"hostname":"vpn.aml.legal","first_observed":"2026-11-05T04:26:10.749Z","first_published":"2026-11-05T05:17:22.576Z","brands":[],"dns":"resolved","resolved":["186.2.175.179"],"resolved_at":"2026-11-05T04:26:24Z","dns_checked_at":"2026-11-06T05:23:45.000Z","dns_since":"2026-11-05T05:23:02.000Z","findings":[{"id":"ftsajben4ml2toul2vclr","kind":"reported_domain","summary":"Under aml.legal, reported by PhishDestroy","first_observed":"2026-11-05T04:26:10.749Z","first_published":"2026-11-05T05:17:22.576Z","source":"phishdestroy","source_name":"PhishDestroy","under":"aml.legal","source_url":"https://phishdestroy.io/domain/aml.legal/"}],"url":"https://domainspoof.com/live?show=all&q=vpn.aml.legal"},{"hostname":"vpn.zenavlico.cyou","first_observed":"2026-11-05T04:16:27.327Z","first_published":"2026-11-05T05:17:22.576Z","brands":[],"dns":"resolved","resolved":["95.85.244.13"],"resolved_at":"2026-11-05T04:26:16Z","dns_checked_at":"2026-11-06T05:23:45.000Z","dns_since":"2026-11-05T05:23:02.000Z","findings":[{"id":"fhceliypkgdcehlyic66n","kind":"reported_domain","summary":"Under zenavlico.cyou, listed by CERT Polska","first_observed":"2026-11-05T04:16:27.327Z","first_published":"2026-11-05T05:17:22.576Z","source":"cert_polska","source_name":"CERT Polska","under":"zenavlico.cyou"}],"url":"https://domainspoof.com/live?show=all&q=vpn.zenavlico.cyou"},{"hostname":"vtradexglobal.com","first_observed":"2026-11-05T04:41:03.837Z","first_published":"2026-11-05T05:17:22.576Z","brands":[],"dns":"resolved","resolved":["104.21.74.231","172.67.164.80"],"resolved_at":"2026-11-05T04:41:44Z","dns_checked_at":"2026-11-06T05:23:45.000Z","dns_since":"2026-11-05T05:23:02.000Z","findings":[{"id":"fwmixragqo4bngklw72nr","kind":"reported_domain","summary":"Reported by PhishDestroy","first_observed":"2026-11-05T04:41:03.837Z","first_published":"2026-11-05T05:17:22.576Z","source":"phishdestroy","source_name":"PhishDestroy","source_url":"https://phishdestroy.io/domain/vtradexglobal.com/"}],"url":"https://domainspoof.com/live?show=all&q=vtradexglobal.com"},{"hostname":"vuestrasvoces.com","first_observed":"2026-11-05T04:51:58.361Z","first_published":"2026-11-05T05:17:22.576Z","brands":[],"dns":"resolved","resolved":["178.211.133.18"],"resolved_at":"2026-11-05T04:52:21Z","dns_checked_at":"2026-11-06T05:23:45.000Z","dns_since":"2026-11-05T05:23:02.000Z","findings":[{"id":"fr232no7p5wxgit2w47b2","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T04:51:58.361Z","first_published":"2026-11-05T05:17:22.576Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=vuestrasvoces.com"},{"hostname":"wb-kraken-ll-us.pages.dev","first_observed":"2026-11-05T04:16:27.327Z","first_published":"2026-11-05T05:17:22.576Z","brands":[],"dns":"resolved","resolved":["172.66.44.213","172.66.47.43"],"resolved_at":"2026-11-05T04:26:16Z","dns_checked_at":"2026-11-06T05:23:45.000Z","dns_since":"2026-11-05T05:23:02.000Z","findings":[{"id":"fcx2bxptqhbvxc7xujzog","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T04:16:27.327Z","first_published":"2026-11-05T05:17:22.576Z","source":"metamask","source_name":"MetaMask"}],"url":"https://domainspoof.com/live?show=all&q=wb-kraken-ll-us.pages.dev"},{"hostname":"web-binance.sh.cn","first_observed":"2026-11-05T04:11:06.107Z","first_published":"2026-11-05T05:17:22.576Z","brands":[{"id":"binance","name":"Binance","url":"https://domainspoof.com/brands/binance"}],"dns":"resolved","resolved":["179.61.182.70"],"resolved_at":"2026-11-06T00:51:07Z","dns_checked_at":"2026-11-06T00:51:07.000Z","dns_since":"2026-11-06T00:51:07.000Z","findings":[{"id":"fgthbtiub5iydgslci75w","kind":"reported_domain","summary":"Listed by MetaMask","first_observed":"2026-11-05T23:53:54.502Z","first_published":"2026-11-06T00:39:38.884Z","source":"metamask","source_name":"MetaMask"},{"id":"fgqjskvkk3bsfg33bzbu7","kind":"phishing_infrastructure","summary":"Resolved to 179.61.182.70, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T04:11:06.107Z","first_published":"2026-11-05T05:17:22.576Z","address":"179.61.182.70","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/binance"},{"hostname":"web.ni-electrical.com","first_observed":"2026-11-05T04:41:03.837Z","first_published":"2026-11-05T05:17:22.576Z","brands":[],"dns":"resolved","resolved":["109.238.86.5"],"resolved_at":"2026-11-05T04:41:44Z","dns_checked_at":"2026-11-06T05:23:45.000Z","dns_since":"2026-11-05T05:23:03.000Z","findings":[{"id":"fvilxoc4vaiurkebtvkzr","kind":"reported_domain","summary":"Under ni-electrical.com, listed by CERT Polska","first_observed":"2026-11-05T04:41:03.837Z","first_published":"2026-11-05T05:17:22.576Z","source":"cert_polska","source_name":"CERT Polska","under":"ni-electrical.com"}],"url":"https://domainspoof.com/live?show=all&q=web.ni-electrical.com"},{"hostname":"webdisk.bggameboy.com","first_observed":"2026-11-05T04:26:10.749Z","first_published":"2026-11-05T05:17:22.576Z","brands":[],"dns":"resolved","resolved":["65.181.120.163"],"resolved_at":"2026-11-05T04:26:24Z","dns_checked_at":"2026-11-06T05:23:45.000Z","dns_since":"2026-11-05T05:23:03.000Z","findings":[{"id":"fefhv54egpv4zctp75wcv","kind":"reported_domain","summary":"Under bggameboy.com, reported by PhishDestroy","first_observed":"2026-11-05T04:26:10.749Z","first_published":"2026-11-05T05:17:22.576Z","source":"phishdestroy","source_name":"PhishDestroy","under":"bggameboy.com","source_url":"https://phishdestroy.io/domain/bggameboy.com/"}],"url":"https://domainspoof.com/live?show=all&q=webdisk.bggameboy.com"},{"hostname":"webmail.bggameboy.com","first_observed":"2026-11-05T04:26:10.749Z","first_published":"2026-11-05T05:17:22.576Z","brands":[],"dns":"resolved","resolved":["65.181.120.163"],"resolved_at":"2026-11-05T04:26:24Z","dns_checked_at":"2026-11-06T05:23:45.000Z","dns_since":"2026-11-05T05:23:03.000Z","findings":[{"id":"fnerdra2p3ttdcz63k2m7","kind":"reported_domain","summary":"Under bggameboy.com, reported by PhishDestroy","first_observed":"2026-11-05T04:26:10.749Z","first_published":"2026-11-05T05:17:22.576Z","source":"phishdestroy","source_name":"PhishDestroy","under":"bggameboy.com","source_url":"https://phishdestroy.io/domain/bggameboy.com/"}],"url":"https://domainspoof.com/live?show=all&q=webmail.bggameboy.com"},{"hostname":"whm.bggameboy.com","first_observed":"2026-11-05T04:26:10.749Z","first_published":"2026-11-05T05:17:22.576Z","brands":[],"dns":"resolved","resolved":["65.181.120.163"],"resolved_at":"2026-11-05T04:26:24Z","dns_checked_at":"2026-11-06T05:23:45.000Z","dns_since":"2026-11-05T05:23:03.000Z","findings":[{"id":"ffdvgwpq4lznktuvt5pbk","kind":"reported_domain","summary":"Under bggameboy.com, reported by PhishDestroy","first_observed":"2026-11-05T04:26:10.749Z","first_published":"2026-11-05T05:17:22.576Z","source":"phishdestroy","source_name":"PhishDestroy","under":"bggameboy.com","source_url":"https://phishdestroy.io/domain/bggameboy.com/"}],"url":"https://domainspoof.com/live?show=all&q=whm.bggameboy.com"},{"hostname":"whm.ni-electrical.com","first_observed":"2026-11-05T04:05:50.533Z","first_published":"2026-11-05T05:17:22.576Z","brands":[],"dns":"resolved","resolved":["109.238.86.5"],"resolved_at":"2026-11-05T04:15:45Z","dns_checked_at":"2026-11-06T05:23:45.000Z","dns_since":"2026-11-05T05:23:03.000Z","findings":[{"id":"fpiwal6hh5vbj7s42bmix","kind":"reported_domain","summary":"Under ni-electrical.com, listed by CERT Polska","first_observed":"2026-11-05T04:05:50.533Z","first_published":"2026-11-05T05:17:22.576Z","source":"cert_polska","source_name":"CERT Polska","under":"ni-electrical.com"}],"url":"https://domainspoof.com/live?show=all&q=whm.ni-electrical.com"},{"hostname":"www.adobe-billing.com","first_observed":"2026-11-05T05:10:58.077Z","first_published":"2026-11-05T05:17:22.576Z","brands":[{"id":"adobe","name":"Adobe","url":"https://domainspoof.com/brands/adobe"}],"dns":"resolved","resolved":["2.57.91.91"],"resolved_at":"2026-11-06T05:23:45Z","dns_checked_at":"2026-11-06T05:23:45.000Z","dns_since":"2026-11-05T05:23:03.000Z","findings":[{"id":"ftf4o7oinrixgeduzuou7","kind":"phishing_infrastructure","summary":"Resolved to 2.57.91.91, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T05:10:58.077Z","first_published":"2026-11-05T05:17:22.576Z","address":"2.57.91.91","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/adobe"},{"hostname":"www.agibochat.com","first_observed":"2026-11-05T04:21:05.259Z","first_published":"2026-11-05T05:17:22.576Z","brands":[],"dns":"resolved","resolved":["13.248.213.45","76.223.67.189"],"resolved_at":"2026-11-05T04:28:42Z","dns_checked_at":"2026-11-06T05:23:45.000Z","dns_since":"2026-11-05T05:23:03.000Z","findings":[{"id":"f4pietk63gggwsw46n6r2","kind":"reported_domain","summary":"Under agibochat.com, reported by PhishDestroy","first_observed":"2026-11-05T04:21:05.259Z","first_published":"2026-11-05T05:17:22.576Z","source":"phishdestroy","source_name":"PhishDestroy","under":"agibochat.com","source_url":"https://phishdestroy.io/domain/agibochat.com/"}],"url":"https://domainspoof.com/live?show=all&q=www.agibochat.com"},{"hostname":"www.bggameboy.com","first_observed":"2026-11-05T04:26:10.749Z","first_published":"2026-11-05T05:17:22.576Z","brands":[],"dns":"resolved","resolved":["65.181.120.163"],"resolved_at":"2026-11-05T04:26:24Z","dns_checked_at":"2026-11-06T05:23:45.000Z","dns_since":"2026-11-05T05:23:03.000Z","findings":[{"id":"fhsjtyfeqvzd5qz6xaeto","kind":"reported_domain","summary":"Under bggameboy.com, reported by PhishDestroy","first_observed":"2026-11-05T04:26:10.749Z","first_published":"2026-11-05T05:17:22.576Z","source":"phishdestroy","source_name":"PhishDestroy","under":"bggameboy.com","source_url":"https://phishdestroy.io/domain/bggameboy.com/"}],"url":"https://domainspoof.com/live?show=all&q=www.bggameboy.com"},{"hostname":"www.bitrefill.com-ck01-esim-gift.com","first_observed":"2026-11-05T04:34:00.143Z","first_published":"2026-11-05T05:17:22.576Z","brands":[{"id":"bitrefill","name":"Bitrefill","url":"https://domainspoof.com/brands/bitrefill"}],"dns":"resolved","resolved":["62.60.226.39"],"resolved_at":"2026-11-06T05:23:45Z","dns_checked_at":"2026-11-06T05:23:45.000Z","dns_since":"2026-11-05T05:23:03.000Z","findings":[{"id":"fexriowtehxaqng2kiw2d","kind":"spamhaus_drop","summary":"Resolved to 62.60.226.39 on Spamhaus DROP","first_observed":"2026-11-05T04:34:00.143Z","first_published":"2026-11-05T05:17:22.576Z","address":"62.60.226.39","list":"spamhaus_drop","list_name":"Spamhaus DROP"}],"url":"https://domainspoof.com/brands/bitrefill"},{"hostname":"www.btcmixer.guide","first_observed":"2026-11-05T04:16:27.327Z","first_published":"2026-11-05T05:17:22.576Z","brands":[],"dns":"resolved","resolved":["104.21.20.57","172.67.191.206"],"resolved_at":"2026-11-05T04:26:16Z","dns_checked_at":"2026-11-06T05:23:45.000Z","dns_since":"2026-11-05T05:23:03.000Z","findings":[{"id":"fncuic6x77rqu23qk5par","kind":"reported_domain","summary":"Under btcmixer.guide, reported by PhishDestroy","first_observed":"2026-11-05T04:16:27.327Z","first_published":"2026-11-05T05:17:22.576Z","source":"phishdestroy","source_name":"PhishDestroy","under":"btcmixer.guide","source_url":"https://phishdestroy.io/domain/btcmixer.guide/"}],"url":"https://domainspoof.com/live?show=all&q=www.btcmixer.guide"},{"hostname":"www.coin-base.pro","first_observed":"2026-11-05T04:26:16.143Z","first_published":"2026-11-05T05:17:22.576Z","brands":[{"id":"coinbase","name":"Coinbase","url":"https://domainspoof.com/brands/coinbase"}],"dns":"resolved","resolved":["2.57.91.91"],"resolved_at":"2026-11-06T05:23:45Z","dns_checked_at":"2026-11-06T05:23:45.000Z","dns_since":"2026-11-05T05:23:03.000Z","findings":[{"id":"fhrabs742vcup5p2nzg37","kind":"phishing_infrastructure","summary":"Resolved to 2.57.91.91, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T04:26:16.143Z","first_published":"2026-11-05T05:17:22.576Z","address":"2.57.91.91","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/coinbase"},{"hostname":"www.evgo-lnc.net","first_observed":"2026-11-05T04:41:03.837Z","first_published":"2026-11-05T05:17:22.576Z","brands":[],"dns":"resolved","resolved":["104.21.87.67","172.67.142.44"],"resolved_at":"2026-11-05T04:41:44Z","dns_checked_at":"2026-11-06T05:23:45.000Z","dns_since":"2026-11-05T05:23:03.000Z","findings":[{"id":"f4xi6ogiexds3xpea3qwc","kind":"reported_domain","summary":"Under evgo-lnc.net, listed by MetaMask","first_observed":"2026-11-05T04:41:03.837Z","first_published":"2026-11-05T05:17:22.576Z","source":"metamask","source_name":"MetaMask","under":"evgo-lnc.net"}],"url":"https://domainspoof.com/live?show=all&q=www.evgo-lnc.net"},{"hostname":"www.gro-60v.com","first_observed":"2026-11-05T05:05:35.186Z","first_published":"2026-11-05T05:17:22.576Z","brands":[],"dns":"resolved","resolved":["217.160.0.10","2001:8d8:100f:f000::200"],"resolved_at":"2026-11-05T05:17:40Z","dns_checked_at":"2026-11-06T05:23:45.000Z","dns_since":"2026-11-05T05:23:03.000Z","findings":[{"id":"f73alvfo4aa3qo6z75ifv","kind":"reported_domain","summary":"Under gro-60v.com, reported by PhishDestroy","first_observed":"2026-11-05T05:05:35.186Z","first_published":"2026-11-05T05:17:22.576Z","source":"phishdestroy","source_name":"PhishDestroy","under":"gro-60v.com","source_url":"https://phishdestroy.io/domain/gro-60v.com/"}],"url":"https://domainspoof.com/live?show=all&q=www.gro-60v.com"},{"hostname":"www.mahbuba-begum-instagram.fun","first_observed":"2026-11-05T04:26:17.176Z","first_published":"2026-11-05T05:17:22.576Z","brands":[{"id":"instagram","name":"Instagram","url":"https://domainspoof.com/brands/instagram"}],"dns":"resolved","resolved":["2.57.91.91"],"resolved_at":"2026-11-06T05:23:45Z","dns_checked_at":"2026-11-06T05:23:45.000Z","dns_since":"2026-11-05T05:23:03.000Z","findings":[{"id":"fafvexwcl3jwmvnwr4zpr","kind":"phishing_infrastructure","summary":"Resolved to 2.57.91.91, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T04:26:17.176Z","first_published":"2026-11-05T05:17:22.576Z","address":"2.57.91.91","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/instagram"},{"hostname":"www.marshallpolska-pl.com","first_observed":"2026-11-05T04:05:50.533Z","first_published":"2026-11-05T05:17:22.576Z","brands":[],"dns":"resolved","resolved":["104.160.4.145"],"resolved_at":"2026-11-05T04:15:45Z","dns_checked_at":"2026-11-06T05:23:45.000Z","dns_since":"2026-11-05T05:23:03.000Z","findings":[{"id":"fg67f7uyyqptttwde32zd","kind":"reported_domain","summary":"Listed by CERT Polska","first_observed":"2026-11-05T04:05:50.533Z","first_published":"2026-11-05T05:17:22.576Z","source":"cert_polska","source_name":"CERT Polska"}],"url":"https://domainspoof.com/live?show=all&q=www.marshallpolska-pl.com"},{"hostname":"www.meta-mask-compliance.de","first_observed":"2026-11-05T04:15:45.754Z","first_published":"2026-11-05T05:17:22.576Z","brands":[{"id":"metamask","name":"MetaMask","url":"https://domainspoof.com/brands/metamask"}],"dns":"resolved","resolved":["2.57.91.91"],"resolved_at":"2026-11-06T05:23:45Z","dns_checked_at":"2026-11-06T05:23:45.000Z","dns_since":"2026-11-05T05:23:03.000Z","findings":[{"id":"fpqzmtkifcz4rchkcc675","kind":"phishing_infrastructure","summary":"Resolved to 2.57.91.91, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T04:15:45.754Z","first_published":"2026-11-05T05:17:22.576Z","address":"2.57.91.91","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/metamask"},{"hostname":"www.pay-bitrefill.com-ck01-esim-gift.com","first_observed":"2026-11-05T04:33:59.950Z","first_published":"2026-11-05T05:17:22.576Z","brands":[{"id":"bitrefill","name":"Bitrefill","url":"https://domainspoof.com/brands/bitrefill"}],"dns":"resolved","resolved":["62.60.226.39"],"resolved_at":"2026-11-06T05:23:45Z","dns_checked_at":"2026-11-06T05:23:45.000Z","dns_since":"2026-11-05T05:23:03.000Z","findings":[{"id":"f5fhmbcqwytfyz2iebdus","kind":"spamhaus_drop","summary":"Resolved to 62.60.226.39 on Spamhaus DROP","first_observed":"2026-11-05T04:33:59.950Z","first_published":"2026-11-05T05:17:22.576Z","address":"62.60.226.39","list":"spamhaus_drop","list_name":"Spamhaus DROP"}],"url":"https://domainspoof.com/brands/bitrefill"},{"hostname":"www.pentest-yandex.ru","first_observed":"2026-11-05T04:04:29.959Z","first_published":"2026-11-05T05:17:22.576Z","brands":[{"id":"yandex","name":"Yandex","url":"https://domainspoof.com/brands/yandex"}],"dns":"resolved","resolved":["31.31.196.54"],"resolved_at":"2026-11-06T05:23:45Z","dns_checked_at":"2026-11-06T05:23:45.000Z","dns_since":"2026-11-05T05:23:03.000Z","findings":[{"id":"fek3h2k7ltnllscrwpavn","kind":"phishing_infrastructure","summary":"Resolved to 31.31.196.54, where reported phishing was found in the 48 hours before","first_observed":"2026-11-05T04:04:29.959Z","first_published":"2026-11-05T05:17:22.576Z","address":"31.31.196.54","list":"domainspoof_phish_hosts","list_name":"DomainSpoof confirmed phishing hosts"}],"url":"https://domainspoof.com/brands/yandex"},{"hostname":"www.rootmixer.com","first_observed":"2026-11-05T04:16:27.327Z","first_published":"2026-11-05T05:17:22.576Z","brands":[],"dns":"resolved","resolved":["104.21.9.245","172.67.189.211"],"resolved_at":"2026-11-05T04:26:16Z","dns_checked_at":"2026-11-06T05:23:45.000Z","dns_since":"2026-11-05T05:23:03.000Z","findings":[{"id":"fe4pjcbs52j7yz67yukhl","kind":"reported_domain","summary":"Under rootmixer.com, listed by MetaMask","first_observed":"2026-11-05T04:16:27.327Z","first_published":"2026-11-05T05:17:22.576Z","source":"metamask","source_name":"MetaMask","under":"rootmixer.com"}],"url":"https://domainspoof.com/live?show=all&q=www.rootmixer.com"},{"hostname":"www.suresh.transforbsc.org","first_observed":"2026-11-05T04:46:48.018Z","first_published":"2026-11-05T05:17:22.576Z","brands":[],"dns":"resolved","resolved":["91.229.239.28"],"resolved_at":"2026-11-05T04:47:12Z","dns_checked_at":"2026-11-06T05:23:45.000Z","dns_since":"2026-11-05T05:23:03.000Z","findings":[{"id":"fkoor6vkeyh4qcj7w7cul","kind":"reported_domain","summary":"Under transforbsc.org, reported by PhishDestroy","first_observed":"2026-11-05T04:46:48.018Z","first_published":"2026-11-05T05:17:22.576Z","source":"phishdestroy","source_name":"PhishDestroy","under":"transforbsc.org","source_url":"https://phishdestroy.io/domain/transforbsc.org/"}],"url":"https://domainspoof.com/live?show=all&q=www.suresh.transforbsc.org"},{"hostname":"www.trusttradinghub.com","first_observed":"2026-11-05T04:21:05.259Z","first_published":"2026-11-05T05:17:22.576Z","brands":[],"dns":"resolved","resolved":["77.37.83.105","93.127.179.56"],"resolved_at":"2026-11-05T04:28:42Z","dns_checked_at":"2026-11-06T05:23:45.000Z","dns_since":"2026-11-05T05:23:03.000Z","findings":[{"id":"fdul5brkuhhmqydkmb7nu","kind":"reported_domain","summary":"Under trusttradinghub.com, reported by PhishDestroy","first_observed":"2026-11-05T04:21:05.259Z","first_published":"2026-11-05T05:17:22.576Z","source":"phishdestroy","source_name":"PhishDestroy","under":"trusttradinghub.com","source_url":"https://phishdestroy.io/domain/trusttradinghub.com/"}],"url":"https://domainspoof.com/live?show=all&q=www.trusttradinghub.com"},{"hostname":"www.tzgcsj.com","first_observed":"2026-11-05T04:51:58.361Z","first_published":"2026-11-05T05:17:22.576Z","brands":[],"dns":"resolved","resolved":["154.220.44.153"],"resolved_at":"2026-11-05T04:52:22Z","dns_checked_at":"2026-11-06T05:23:45.000Z","dns_since":"2026-11-05T05:23:03.000Z","findings":[{"id":"fh7rsmkpib5q3pgqwr6eo","kind":"reported_domain","summary":"Under tzgcsj.com, listed by CERT Polska","first_observed":"2026-11-05T04:51:58.361Z","first_published":"2026-11-05T05:17:22.576Z","source":"cert_polska","source_name":"CERT Polska","under":"tzgcsj.com"}],"url":"https://domainspoof.com/live?show=all&q=www.tzgcsj.com"},{"hostname":"www.uswebob.us","first_observed":"2026-11-05T05:10:43.715Z","first_published":"2026-11-05T05:17:22.576Z","brands":[],"dns":"resolved","resolved":["91.195.240.123"],"resolved_at":"2026-11-05T05:11:02Z","dns_checked_at":"2026-11-06T05:23:45.000Z","dns_since":"2026-11-05T05:23:03.000Z","findings":[{"id":"fvt5uqvsryrgkihtiwnns","kind":"reported_domain","summary":"Under uswebob.us, reported by PhishDestroy","first_observed":"2026-11-05T05:10:43.715Z","first_published":"2026-11-05T05:17:22.576Z","source":"phishdestroy","source_name":"PhishDestroy","under":"uswebob.us","source_url":"https://phishdestroy.io/domain/uswebob.us/"}],"url":"https://domainspoof.com/live?show=all&q=www.uswebob.us"},{"hostname":"xrnd7f3qa.zenavlico.cyou","first_observed":"2026-11-05T05:00:54.521Z","first_published":"2026-11-05T05:17:22.576Z","brands":[],"dns":"resolved","resolved":["95.85.244.13"],"resolved_at":"2026-11-05T05:11:15Z","dns_checked_at":"2026-11-06T05:23:45.000Z","dns_since":"2026-11-05T05:23:03.000Z","findings":[{"id":"f5xkoww646fms3puvxyhf","kind":"reported_domain","summary":"Under zenavlico.cyou, listed by CERT Polska","first_observed":"2026-11-05T05:00:54.521Z","first_published":"2026-11-05T05:17:22.576Z","source":"cert_polska","source_name":"CERT Polska","under":"zenavlico.cyou"}],"url":"https://domainspoof.com/live?show=all&q=xrnd7f3qa.zenavlico.cyou"},{"hostname":"xylovexy.com","first_observed":"2026-11-05T05:10:43.715Z","first_published":"2026-11-05T05:17:22.576Z","brands":[],"dns":"resolved","resolved":["104.21.42.197","172.67.165.143"],"resolved_at":"2026-11-06T10:27:54Z","dns_checked_at":"2026-11-06T05:23:45.000Z","dns_since":"2026-11-05T05:23:03.000Z","findings":[{"id":"f7te66rh3wdf3zscotwdz","kind":"reported_domain","summary":"Listed by NPA 165 (information services)","first_observed":"2026-11-05T05:10:43.715Z","first_published":"2026-11-05T05:17:22.576Z","source":"npa","source_name":"NPA 165","claim":{"category":"information services"}}],"url":"https://domainspoof.com/live?show=all&q=xylovexy.com"},{"hostname":"yq9zk2m8vp.zenavlico.cyou","first_observed":"2026-11-05T05:00:54.521Z","first_published":"2026-11-05T05:17:22.576Z","brands":[],"dns":"resolved","resolved":["95.85.244.13"],"resolved_at":"2026-11-05T05:11:15Z","dns_checked_at":"2026-11-06T05:23:45.000Z","dns_since":"2026-11-05T05:23:03.000Z","findings":[{"id":"fmfj5h4gzxchszjsmqdl3","kind":"reported_domain","summary":"Under zenavlico.cyou, listed by CERT Polska","first_observed":"2026-11-05T05:00:54.521Z","first_published":"2026-11-05T05:17:22.576Z","source":"cert_polska","source_name":"CERT Polska","under":"zenavlico.cyou"}],"url":"https://domainspoof.com/live?show=all&q=yq9zk2m8vp.zenavlico.cyou"},{"hostname":"zabbix.aml.legal","first_observed":"2026-11-05T05:10:43.715Z","first_published":"2026-11-05T05:17:22.576Z","brands":[],"dns":"resolved","resolved":["186.2.175.179"],"resolved_at":"2026-11-05T05:11:02Z","dns_checked_at":"2026-11-06T05:23:45.000Z","dns_since":"2026-11-05T05:23:03.000Z","findings":[{"id":"frjilyv7fxjqp7msjq7qk","kind":"reported_domain","summary":"Under aml.legal, reported by PhishDestroy","first_observed":"2026-11-05T05:10:43.715Z","first_published":"2026-11-05T05:17:22.576Z","source":"phishdestroy","source_name":"PhishDestroy","under":"aml.legal","source_url":"https://phishdestroy.io/domain/aml.legal/"}],"url":"https://domainspoof.com/live?show=all&q=zabbix.aml.legal"}]}