MALICIOUS — CRITICAL
cheater.to için kimlik avı ve güvenlik kontrolü
cheater[.]
PhishDestroy identifies cheater.to as a high-risk generic phishing domain.
- VirusTotal
- 5/91
- Blocklists
- No stored match
- Kullanılabilirlik
- Gizlenmiş · ulaşılabilir · HTTP 200
Do not enter credentials, seed phrases, payment details, or personal information on this domain.
Notification and current-status evidence
The sent-report ledger records the first outgoing report at .
The recorded recipient is abuse@tonic.to.
The latest stored availability evidence still shows the domain reachable; 2 months has elapsed since the first outgoing report.
ICANN RAA §3.18 describes registrar abuse-contact and handling obligations. This section records outgoing timestamps, listed recipients, case identifiers, and later availability. It does not by itself prove receipt, acknowledgement, investigation, remediation, or contractual non-compliance.
Jump to section
cheater.to — Gizlenmiş · ulaşılabilir (HTTP 200). Dolandırıcılık türü: Generic Phishing. Kanıt özeti: VirusTotal 5/91 (alphaMountain.ai, CRDF, Fortinet, Gridinsoft, SOCRadar); URLQuery 1 alert; Spamhaus DBL_BOTNET; cloaking observed; PhishDestroy score 86/100. Kayıt kuruluşu: Government of Kingdom ….
Özgün adli kaydı korumak için aşağıdaki ayrıntılı PhishDestroy AI analizi İngilizce bırakılmıştır.
Evidence Analysis
PhishDestroy identifies cheater.to as a high-risk generic phishing domain. The domain promotes itself as offering free cheats for games like ARC RAIDERS, RUST, and EFT, aiming to lure gamers into providing personal information or downloading malware. There is no specific brand impersonated, and no known drainer kit has been associated with this domain.
Technical indicators show that cheater.to has a VirusTotal score of 2/95, meaning 2 out of 95 security vendors flag it as malicious. The domain was registered through the Government of Kingdom of Tonga and resolves to IP address 188.114.96.3. It was created on May 08, 2026, and is not currently listed on Google Safe Browsing, but it appears on 1 security blocklist. The SSL certificate is issued by Let's Encrypt (E8).
As of now, cheater.to remains active, posing an ongoing risk to users. PhishDestroy recommends blocking this domain and avoiding any interaction with it. Users should report any encounters to relevant authorities. The risk is high due to the domain's deceptive nature and active status.
Stored source results
Recorded verdicts and infrastructure observations for this domain.
Veri kapsamı12 recorded checks
Ağ Güvenliği İstihbaratı
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| DigiCert UltraDNS | cheater.to |
malicious | Sinkholed |
Tehdit Müdahale Pipeline
Genel Engelleme Listesi Durumu
Teknolojiler · 3 identified
Cloudflare Browser Insights is a tool that measures the performance of websites from the perspective of users.
www.cloudflare.com %100 güvenCloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.
www.cloudflare.com %100 güvenHTTP/3 is the third major version of the Hypertext Transfer Protocol used to exchange information on the World Wide Web.
httpwg.org %100 güvenVirusTotal Analizi
Site Performans Analizi
Google PageSpeed Insights — mobile performance audit of cheater.to · checked May 29, 2026
Kanıtlar ve Dış RaporlarIndependent lookups and source reports
PD-20260529-596968 Recipient: abuse@tonic.to Victim safety and official reportingImmediate actions and verified reporting channels
Hesap kimlik bilgilerini, kişisel bilgileri veya ödeme bilgilerini girdiyseniz ya da bu alan adından bir dosya indirdiyseniz hemen harekete geçin. Aşağıda olayı bildirmenize ve kendinizi korumanıza yardımcı olacak kaynaklar bulunmaktadır.
Yerel Yetkililere Bildirin
resmi siber suç iletişim bilgileri veya şikayet taslağı oluştur → almak için ülkenizi seçin.