todnado[.]cash
“todnado.cash | 523: Origin is unreachable”
todnado.cash — Konten tidak tersedia (HTTP 502). Peniruan identitas merek: Ethereum. Ringkasan bukti: VirusTotal 4/93 (alphaMountain.ai, CyRadar, Fortinet, Webroot); URLQuery 1 alert; PhishDestroy score 65/100. Registrar: Spaceship.
Analisis terperinci PhishDestroy AI di bawah tetap berbahasa Inggris untuk menjaga catatan forensik asli.
Analysis of the domain todnado.cash indicates that it is currently offline, returning HTTP status 523 with the page title “todnado.cash | 523: Origin is unreachable.” The domain was created on 21 February 2026 and is registered through Spaceship, Inc. Its authoritative nameservers are jeremy.ns.cloudflare.com and meadow.ns.cloudflare.com, and the domain resolves to the IPv6 address 2606:4700:3034::ac43:d54e, which belongs to Cloudflare, Inc. (AS13335) and is geolocated in the United States. The TLS certificate presented by the site is issued by Google Trust Services under the WE1 root, confirming that HTTPS is enabled despite the site’s unavailability. Infrastructure detection shows the use of Cloudflare services and HTTP/3, which are common choices for fast‑content delivery but also frequently abused by phishing operators to hide origin servers. Threat intelligence flags todnado.cash as a generic phishing site.
The domain is listed on a security blocklist and has been blocked by the PhishDestroy service. VirusTotal reports that four of ninety‑three scanning engines have flagged the domain as malicious, providing additional corroboration of its malicious intent. No further details about the phishing payload, targeted brand, or credential‑harvesting page have been observed, as the site is not reachable for content analysis. Given the observed indicators, defenders should treat todnado.cash as a high‑confidence phishing indicator.
Recommended actions include adding the domain and its associated IPv6 address to blocklists, configuring DNS sinkholing to prevent resolution, and ensuring that endpoint protection solutions update their signatures to include the four VirusTotal detections. Continuous monitoring of Cloudflare‑hosted IP ranges for new malicious registrations is advisable, as threat actors often recycle similar infrastructure.
Intelijen Keamanan Jaringan
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| DNS0 Zero | todnado.cash |
malicious | Sinkholed |
Alur Tanggapan Ancaman Pipeline
Status Daftar Blokir Publik
Tangkapan tersimpan
Intelijen Domain
Rincian teknisDNS, SAN SSL, cap waktu
ICANN OVERSIGHT
Akreditasi dan konteks RAA
Akreditasi dan konteks RAA
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Teknologi · 2 identified
Web infrastructure and security company providing CDN, DDoS mitigation, and DNS services.
www.cloudflare.comThird major version of HTTP protocol, built on QUIC for faster, more reliable connections.
Analisis VirusTotal
Bukti & Laporan Eksternal
Apakah Anda Terpengaruh oleh Situs Ini?
Jika Anda memasukkan kredensial akun, informasi pribadi atau pembayaran, atau mengunduh file dari domain ini, segera ambil tindakan. Di bawah ini adalah sumber daya untuk membantu Anda melaporkan insiden tersebut dan melindungi diri Anda sendiri.
Laporkan kepada Pihak Berwenang di Daerah Anda
Pilih negara Anda untuk mendapatkan kontak resmi kejahatan dunia maya, atau membuat draf pengaduan →.
Periksa Domain Apa Pun
Analisis ancaman menggunakan daftar blokir yang disimpan, WHOIS, DNS, dan bukti pemindaian publik
Pindai SekarangLaporkan Phishing
Laporkan domain yang mencurigakan ke basis data ancaman kami — lindungi komunitas
LaporanPemberitahuan Ancaman Real-Time
Laporan phishing terbaru dan perubahan ketersediaan yang diamati
PantauTetap Terinformasi, Tetap Aman
Pantau ancaman secara langsung atau ajukan keberatan terhadap daftar ini jika Anda yakin ini merupakan false positive