t-mobile[.]hsxtb[.]cc
“Welcome to nginx!”
Resumen de las pruebas
This domain is flagged for elevated-risk brand impersonation, specifically targeting users of the social media platform X.com. Analysis indicates the domain t-mobile.hsxtb.cc was designed to mimic legitimate login portals, likely to harvest user credentials through deceptive input forms. The threat type—brand impersonation—is confirmed by the domain's structural resemblance to official branding and its association with known phishing tactics targeting high-profile platforms. Infrastructure analysis reveals the domain was registered through Gname.com Pte. Ltd. on February 21, 2026, an unusually future-dated creation that may indicate an attempt to evade detection or exploit registration loopholes. It resolves to the IP address 172.67.209.91, hosted on AS13335 (Cloudflare, Inc.) in the United States, a common proxy service used to obscure malicious origins. The domain lacks an SSL certificate, a red flag for secure communications, and displays a default "Welcome to nginx!" page, suggesting incomplete deployment or rapid takedown. Detection metrics show 17 out of 95 security vendors on VirusTotal flagged the domain as malicious, while it appears on one security blocklist, specifically PhishDestroy. No additional trust scores or historical reputation data are available, further limiting its legitimacy. Mitigation steps for this threat type include immediate blocking of the domain and its associated IP (172.67.209.91) at the network perimeter. Organizations should deploy email and web filtering rules to prevent users from accessing t-mobile.hsxtb.cc or any subdomains. End-users should be educated on recognizing brand impersonation tactics, particularly the absence of SSL indicators (e.g., "https://") and mismatched domain names. Incident response teams should monitor for credential reuse attempts, as harvested data may be leveraged in follow-up attacks. Given the domain's current offline status, continuous monitoring for re-emergence or similar infrastructure (e.g., same registrar or IP range) is recommended.
Instantánea de evidencia enviada
- Enviado
- Registros del libro
- 1
- ID del caso
PD-20260125-1EF4AF- Artefacto PDF
- Evidencia en PDF
Texto completo de la evidencia
Policy Violations: Illegal Activities section forbids phishing, fraud, fake sites, malware distribution; registrar investigates and may suspend or delete domain
Applicable Laws: Computer Misuse Act 1993 §§3+, Penal Code §§415–420 (cheating), Online Criminal Harms Act (OCHA)
Data Coverage
Inteligencia de seguridad de red
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| Quad9 DNS | t-mobile.hsxtb.cc |
malicious | Sinkholed |
| OpenDNS | t-mobile.hsxtb.cc |
phishing | Phishing Block |
| Hagezi Threat Feed | t-mobile.hsxtb.cc |
malicious | Sinkholed |
| DNS4EU | t-mobile.hsxtb.cc |
malicious | Sinkholed |
Proceso de respuesta ante amenazas Pipeline
Cobertura de listas de bloqueo
10 fuentes externas supervisadas · instantánea del 12/08/2026
10 fuentes externas supervisadas Sin coincidencias
Cronología de detección
-
Cloudflare Radar
Análisis de Cloudflare Radar almacenado · Abrir análisis
Análisis de VirusTotal
¿Te ha afectado esta página web?
Si ingresó credenciales de cuenta, información personal o de pago, o descargó un archivo de este dominio, tome medidas inmediatas. A continuación encontrará recursos que le ayudarán a informar el incidente y protegerse.
Informa a las autoridades locales
Seleccione su país para obtener contactos oficiales de cibercrimen o crear un borrador de queja →.
Comprobar cualquier dominio
Análisis de amenazas utilizando listas de bloqueo almacenadas, WHOIS, DNS y evidencia de escaneo público
Escanear ahoraDenunciar un intento de phishing
Envía los dominios sospechosos a nuestra base de datos de amenazas: protege a la comunidad
DenunciarFlujo de amenazas en tiempo real
Informes de phishing recientes y cambios de disponibilidad observados
MonitorizarMantente informado, mantente a salvo
Supervisa las amenazas en tiempo real o impugna esta entrada si crees que se trata de un falso positivo.