digittraodex.com 피싱 및 보안 점검

digittraodex.com was registered on April 27, 2026 through Dynadot Inc and is currently hosted on an IP address (198.251.89.164) assigned to a provider in Luxembourg. The domain resolves to a web server that returns HTTP 200 and presents a page titled “Digit Traodex”. The site is protected by a Let’s Encrypt certificate (E7) and uses the nameservers ns13.asurahosting.com and ns14.asurahosting.com. An MX record (priority 10) points to mail.digittraodex.com, indicating an operational mail subsystem.

Infrastructure analysis shows the IP is associated with FranTech Solutions, and the domain has a Gridinsoft trust score of 0/100, indicating a high likelihood of malicious use. VirusTotal reports that 2 of 95 scanned security vendors flag the domain, and the domain appears on three security blocklists, including PhishDestroy, MetaMask, and SEAL. AlienVault OTX lists the domain in a single threat pulse, reinforcing the suspicion of a credential‑harvesting operation.

While the available evidence points to a generic phishing campaign, the limited number of vendor detections and the single OTX pulse leave some operational details unclear. The exact content of the phishing pages, the credential collection mechanisms, and any downstream payloads have not been publicly disclosed. No additional infrastructure such as command‑and‑control servers or downloader URLs have been observed in the open‑source data.

Defenders should treat digittraodex.com as a high‑risk indicator. Immediate actions include adding the domain and its IP address to outbound and inbound blocklists, configuring email gateways to reject messages originating from the MX host, and monitoring TLS traffic for the Let’s Encrypt certificate fingerprint. Continuous threat‑intel monitoring is advised to capture any new artifacts, and incident response teams should be prepared to investigate potential credential exposure if internal users have interacted with the site.