tdndns[.]com

Analysis of tdndns.com as of August 02, 2026 shows that the domain is currently active and associated with a generic phishing campaign. The domain appears on a single security blocklist and is explicitly blocked by the PhishDestroy sinkhole, indicating that at least one anti‑phishing service has observed malicious use. VirusTotal reports that 10 of 91 scanned security vendors have flagged the domain, providing independent corroboration of its malicious reputation. The detection count, while not a majority, is significant enough to warrant elevated risk consideration, especially given the presence of a dedicated blocklist entry.

No public registration details, ASN, or hosting information have been disclosed in the available intelligence, and automated scans have not published SSL certificate data, HTTP response codes, or page‑title metadata for tdndns.com. Consequently, the precise infrastructure supporting the site—such as the hosting provider, geographic location, or TLS configuration—remains unknown. The lack of visible page‑title or brand references means that the phishing lure cannot be identified from the current dataset. Defenders should treat tdndns.com as a hostile indicator.

Immediate actions include adding the domain to network‑level blocklists, configuring web‑proxy and DNS filtering solutions to deny resolution, and monitoring outbound traffic for any attempted connections. Security operations teams may also query threat‑intel platforms for any emerging indicators tied to the domain, such as newly observed IP addresses or related phishing kits. Continuous re‑evaluation is advised, as additional telemetry (e.g., SSL details, page content, or expanded vendor detections) could refine the risk posture.