toitt[.]net

toitt.net entered the PhishDestroy evidence set on Jun 15, 2026. The assembled evidence scores 83/100 (high).

Three independent sources are positive: VirusTotal, MetaMask, and SEAL. VirusTotal recorded 1 detections among 92 engines: Gridinsoft on Jul 18, 2026 at 20:45 UTC. MetaMask and SEAL listed the hostname in the external-blocklist snapshot on Aug 7, 2026 at 18:20 UTC. The evidence is not unanimous. AlienVault OTX listed 1 community pulse reference (not vendor detections) on May 17, 2026 at 23:10 UTC. Google Safe Browsing returned no flag on May 18, 2026 at 05:00 UTC.

HTTP 301 was recorded on Aug 7, 2026 at 10:30 UTC. Registration records for the domain list Tucows Domains Inc. as the registrar and May 17, 2026 as the creation date. Registration preceded first observation by 28 days. At collection time, the hostname resolved to 172.67.133.228 on AS13335 (Cloudflare, Inc.). The recorded endpoint location is Toronto, CA. Captured page title: “toitt.net — Private Link Shortening”. TLS metadata lists Let's Encrypt / E8 as the certificate issuer with validity through Jul 9, 2026; checked May 17, 2026 at 20:00 UTC.

No target brand has been confirmed from stored page content; hostname wording alone is not treated as brand evidence. Taken together, the page content and independent findings support classifying this hostname as phishing. The stored record does not establish the post-click interaction, and it does not claim a confirmed wallet-draining transaction or credential submission.