sandns[.]com
“Attention Required! | Cloudflare”
Analysis of www.sandns.com indicates that the domain was registered on March 12, 2026 through Gname.com Pte. Ltd. and is hosted behind Cloudflare’s network (AS13335, United States). The authoritative nameservers are laila.ns.cloudflare.com and roman.ns.cloudflare.com, confirming the use of Cloudflare’s DNS service. The site resolves to the IP address 172.67.178.121, which belongs to Cloudflare’s edge infrastructure and is covered by a Google Trust Services / WE1 SSL certificate. An HTTP request to the domain returns a 503 Service Unavailable response and the page title presented by the server is “Attention Required!
| Cloudflare”, a generic Cloudflare error page rather than a content‑specific landing page. The domain is currently listed as offline, yet it appears on at least one public security blocklist and has been flagged by PhishDestroy. VirusTotal scans show that 4 of 94 security vendors have identified the domain as malicious, which aligns with its classification as a generic phishing site. The limited detection history, combined with the recent creation date, suggests a short‑lived campaign that leveraged Cloudflare’s free services to obscure the true hosting location.
Because the site is presently offline, active probing may be limited, but defenders should continue to monitor the associated IP range and Cloudflare nameservers for any re‑activation. Recommendations include adding the domain to internal blocklists, enforcing DNS sink‑hole rules for the IP 172.67.178.121, and reviewing any recent authentication attempts that may have involved the domain. Further investigation is needed to determine the exact phishing payload or targeted brand, as the only visible artifact is the generic Cloudflare title. Until the infrastructure reappears, the elevated risk rating remains justified based on the observed indicators.
Proceso de respuesta ante amenazas Pipeline
Cobertura de listas de bloqueo
10 fuentes · sincronizado el 09/08/2026
Cronología de detección
Observaciones almacenadas en orden cronológico.
-
VirusTotal
VirusTotal: 0 → 1
Captura guardada
Inteligencia de dominios
Detalles técnicosDNS, SAN de SSL, marcas de tiempo
ICANN OVERSIGHT
Acreditación y contexto RAA
Acreditación y contexto RAA
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Análisis de VirusTotal
Análisis del rendimiento del sitio
Google PageSpeed Insights — mobile performance audit of sandns.com · checked Mar 12, 2026
¿Te ha afectado esta página web?
Si ingresó credenciales de cuenta, información personal o de pago, o descargó un archivo de este dominio, tome medidas inmediatas. A continuación encontrará recursos que le ayudarán a informar el incidente y protegerse.
Informa a las autoridades locales
Seleccione su país para obtener contactos oficiales de cibercrimen o crear un borrador de queja →.
Comprobar cualquier dominio
Análisis de amenazas utilizando listas de bloqueo almacenadas, WHOIS, DNS y evidencia de escaneo público
Escanear ahoraDenunciar un intento de phishing
Envía los dominios sospechosos a nuestra base de datos de amenazas: protege a la comunidad
DenunciarFlujo de amenazas en tiempo real
Informes de phishing recientes y cambios de disponibilidad observados
MonitorizarMantente informado, mantente a salvo
Supervisa las amenazas en tiempo real o impugna esta entrada si crees que se trata de un falso positivo.