registers-nado[.]xyz

Analysis of registers-nado.xyz, observed on 2026-08-04, indicates that the domain is actively being used for phishing. VirusTotal scans show five of ninety‑one AV engines flag the domain as malicious, confirming a consensus of at least moderate detection. The domain is listed on three public blocklists and is actively blocked by the PhishDestroy, MetaMask, and SEAL filtering services, demonstrating that multiple independent threat‑intelligence feeds have identified it as hostile.

No additional metadata such as registrar information, IP address, autonomous system number, or SSL certificate details are available in the current dataset, limiting deeper infrastructure profiling. The site’s HTTP response code, Safe Browsing rating, and page title have not been disclosed, and no Open Threat Exchange (OTX) pulse or external evidence links are present. Consequently, the confidence in the malicious classification rests primarily on the vendor detections and blocklist entries.

Defenders should add registers-nado.xyz to outbound and inbound deny lists across firewalls, DNS resolvers, and proxy filters. Security products that support real‑time blocklist feeds should be updated to include the domain, and endpoint protection solutions should treat any network connection to the host as suspicious. Continuous monitoring for any change in the domain’s hosting attributes or emergence of new detection signatures is recommended, as further intelligence may refine the threat profile.