666ph.run was registered on 30 Apr 2015. Its SSL certificate from Google Trust Services is valid until 28 Jan 2027, and the site supports HTTP/3.
What security vendors and the WOT community say about this domain.
0 of 5 protections set up
No SPF record: any server can send mail that claims to come from this domain.
—No key at the 12 common selectors we checked. A custom selector can’t be found from DNS alone.
—No DMARC policy: receivers aren’t told what to do with mail that fails SPF and DKIM.
—Forces encrypted delivery between mail servers.
—Shows the brand logo in supporting inboxes. Optional; needs DMARC enforcement.
—Read from the domain's public DNS records.
What loads and tracks visitors when the homepage opens.
Running a full browser scan of the homepage… This takes about a minute.
Internet standards that make a site faster and safer.
The path from a typed address to the final page.
245 similar domains registered in the last 90 days — possible typosquatting or phishing.
| Domain | Why it’s similar | Registered | Status | Report |
|---|---|---|---|---|
| 666ph.onl | Other extension | 13 Oct 2026 | Checking… | Report → |
| 666ph.cam | Other extension | 10 Oct 2026 | Checking… | Report → |
| 666ph.best | Other extension | 10 Sept 2026 | Checking… | Report → |
| 666pg.xyz | Typo | 6 Nov 2026 | Checking… | Report → |
| 666pj.xyz | Typo | 6 Nov 2026 | Checking… | Report → |
From CubDomain's daily newly registered domains. Similar doesn't mean malicious.
Is 666ph.run’s name taken on other extensions?
Every IP address 666ph.run resolves to, and where it's hosted.
| Host | IPv4 address | TTL |
|---|---|---|
| 666ph.run | 104.21.28.199 | 300 |
| 666ph.run | 172.67.147.134 | 300 |
| Host | IPv6 address | TTL |
|---|---|---|
| 666ph.run | 2606:4700:3030::ac43:9386 | 300 |
| 666ph.run | 2606:4700:3035::6815:1cc7 | 300 |
| Host | Name server | TTL |
|---|---|---|
| 666ph.run | nadia.ns.cloudflare.com | 86400 |
| 666ph.run | sullivan.ns.cloudflare.com | 86400 |
| Host | Start of authority | TTL |
|---|---|---|
| 666ph.run | nadia.ns.cloudflare.com dns.cloudflare.com 2419195887 10000 2400 604800 1800 | 1800 |
Other domains served from 2606:4700:3035::6815:1cc7. Normal for shared hosting and CDNs.
No reviews yet. Used 666ph.run? Be the first to say how it went.
Reviews are from CubDomain users and are separate from the security verdicts above.
Common questions, answered from this report's data.
666ph.run has no community safety rating yet. Its SSL certificate is valid until 28 Jan 2027. See Security →
666ph.run was registered on 30 Apr 2015, making it 11 years old. See Overview →
666ph.run is served from 4 IP addresses, mainly on AS13335. See Hosting →
Raw registry data for 666ph.run. May be redacted by privacy services.
% IANA WHOIS server % for more information on IANA, visit http://www.iana.org % This query returned 1 object refer: domain: RUN organisation: Binky Moon, LLC address: c/o Identity Digital Inc. address: 10500 NE 8th Street, Suite 750 address: Bellevue WA 98004 address: United States of America (the) contact: administrative name: Vice President, Engineering organisation: Identity Digital Inc. address: 10500 NE 8th Street, Suite 750 address: Bellevue WA 98004 address: United States of America (the) phone: +1.425.298.2200 fax-no: +1.425.671.0020 e-mail: tldadmin@identity.digital contact: technical name: Senior Director, DNS Infrastructure Group organisation: Identity Digital Limited address: c/o Identity Digital Inc. address: 10500 NE 8th Street, Suite 750 address: Bellevue WA 98004 address: United States of America (the) phone: +1.425.298.2200 fax-no: +1.425.671.0020 e-mail: tldtech@identity.digital nserver: V0N0.NIC.RUN 2a01:8840:22:0:0:0:0:40 65.22.32.40 nserver: V0N1.NIC.RUN 2a01:8840:23:0:0:0:0:40 65.22.33.40 nserver: V0N2.NIC.RUN 2a01:8840:24:0:0:0:0:40 65.22.34.40 nserver: V0N3.NIC.RUN 161.232.16.40 2a01:8840:fa:0:0:0:0:40 nserver: V2N0.NIC.RUN 2a01:8840:25:0:0:0:0:40 65.22.35.40 nserver: V2N1.NIC.RUN 161.232.17.40 2a01:8840:fb:0:0:0:0:40 ds-rdata: 37315 8 2 fb85b407411a748f93e2393fdc4123c2fd6f15d2b8841091d83dff1364726a37 ds-rdata: 20657 8 2 4c09088d229639bc75cfde9b5163be628ea25f6dca4a20cd38ba13cfc892fcf3 whois: status: ACTIVE remarks: Registration information: https://www.identity.digital/ created: 2015-04-30 changed: 2026-11-10 source: IANA
The first response from http://www.666ph.run, before any redirect: caching, server and policy headers.
Four timed TCP connections to port 443 from CubDomain's servers.
CubDomain is not affiliated with 666ph.run. Data is collected independently from public sources and some figures are estimates, provided for information only.
Spam and malware blocklists for the site's IP and mail servers.
Found in public certificate transparency logs.
Searching the certificate transparency logs… This can take up to a minute.
When the site first appeared, and what has changed since.
No changes seen since we started recording on 14 Nov 2026.