nado-xyz[.]xyz

The domain nado-xyz.xyz was registered on July 21, 2026 through Unstoppable Domains Inc. and is hosted on nameservers ns1.unstoppabledomains.com and ns2.unstoppabledomains.com. DNS resolution returns the address 186.2.175.103, which remains active as of the report date, July 22, 2026. The domain has been observed on a single security blocklist and is explicitly blocked by the PhishDestroy service, indicating that at least one downstream security product has identified it as malicious.

VirusTotal records show that the domain was submitted to 95 scanning engines, none of which have raised a detection at the time of analysis; this absence of flags does not constitute a safety assurance. No additional intelligence such as page titles, SSL certificate details, or HTTP response codes is available, limiting the ability to confirm the exact phishing payload or target brand. The limited visibility suggests the campaign may be in an early stage or employing minimal infrastructure.

Defenders should consider adding the IP address 186.2.175.103 and the domain nado-xyz.xyz to network and DNS blocklists, monitor for any future resolution changes, and watch for related activity in threat‑intel feeds. Continuous re‑evaluation is recommended, as the lack of detection data and the recent registration date leave the overall risk profile uncertain.