# tonkeepspread.space — MALICIOUS

> tonkeepspread.space is flagged for phishing and taken offline. Learn why it’s risky and how to protect yourself from scams linked to this domain.

## Summary
PhishDestroy identifies tonkeepspread.space as a high-risk phishing domain designed to deceive users and steal sensitive information. This type of threat can lead to identity theft, financial loss, and compromised accounts.

The domain, created in the future date of February 21, 2026, is registered through a dead domain service and currently appears on multiple security blocklists. VirusTotal analysis shows significant detection by security vendors, indicating active malicious use before it was taken offline.

Users should avoid interacting with links or emails referencing tonkeepspread.space. Maintain updated security software and verify web addresses carefully to stay protected from phishing attacks stemming from similar fraudulent domains.

## Threat Details
- Verdict: MALICIOUS
- Site status: alive (HTTP 530)
- Page title: Tonkeeper | Cashback Spread

## Domain Intelligence
- Registered: 2026-02-21 07:01:08
- Registrar: Dead domain
- IP: 66.33.60.130
- IP Country: US
- IP City: Walnut
- IP Org: AS16509 Amazon.com, Inc.
- SSL Issuer: R11

## Detection Status
- VirusTotal: 12 vendors flagged
  Vendors: ["ChainPatrol", "alphaMountain.ai", "BitDefender", "CyRadar", "Forcepoint ThreatSeeker", "Fortinet", "G-Data", "Google Safebrowsing", "Lionic", "Seclookup", "Sophos", "Trustwave"]
- Google Safe Browsing: clean
- Blocklists: 3 hits
  Lists: ["PhishDestroy", "MetaMask", "SEAL"]

## Evidence
- Screenshot: https://urlscan.io/screenshots/01988d73-ad09-703c-807f-2486c050f721.png
- PhishDestroy: https://phishdestroy.io/domain/tonkeepspread.space/
- LLM endpoint: https://phishdestroy.io/domain/tonkeepspread.space/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/tonkeepspread.space/
Last updated: 2026-03-17