zcash-blockbook.twnodes.com
Category: Phishing
To use full-featured product, you have to purchase a license for Combo Cleaner. Limited seven days free trial available. Combo Cleaner is owned and operated by RCS LT, the parent company of PCRisk.com.
Description of zcash-blockbook.twnodes.com
The domain zcash-blockbook.twnodes.com appears to be a subdomain associated with infrastructure or service endpoints related to Zcash, a cryptocurrency network. The term "blockbook" is commonly used for blockchain explorer or wallet-backend software that indexes blockchain data and serves API responses, while "twnodes.com" suggests node or hosting infrastructure rather than a consumer-facing website.
At the time of this scan, the visible page content was minimal and displayed only a "Not Implemented" message, which may indicate an inactive endpoint, a misconfigured service route, or a backend system not intended for general browsing. No clear operator identity, company branding, or end-user service information was visible on the page, so the exact purpose and ownership of this specific subdomain could not be confirmed from the page content alone.
Safety Assessment for zcash-blockbook.twnodes.com
This domain was flagged by 10 out of 91 security engines at the time of the scan, with detections broadly describing it as phishing or malicious. In addition, one blacklist database listed the domain with a generic malicious-object classification. Although several other blacklist and reputation sources were clean, a multi-engine consensus of this size is a meaningful risk signal and weighs more heavily than the clean result from a single malware page scan.
The page itself showed only a sparse "Not Implemented" response rather than a normal public-facing website, which may indicate a backend endpoint, an incomplete deployment, or a service that is no longer functioning as expected. Minimal content does not by itself confirm abuse, but it also does not provide reassuring context for visitors trying to verify legitimacy.
Based on these findings, this website may pose potential risks to visitors.
Technical Description
The host presented a valid SSL/TLS certificate issued through Amazon infrastructure, with certificate validity extending to late 2026. It resolves to an AWS Global Accelerator IP and appears to sit behind an istio-envoy service layer, which suggests cloud-hosted application infrastructure rather than simple shared hosting. The domain itself is several years old and registered through a major registrar, but the specific subdomain could still have been created or repurposed more recently.
DNSSEC appears to be unsigned, which is common but means DNS responses do not benefit from that additional integrity layer. From a technical perspective, the most notable concern is not the certificate or hosting setup, but the combination of a largely non-functional page response and multiple independent security-engine detections at the time of the scan.
Share your experience with this website. Was it safe? Did you encounter any issues?