tdccpmeme[.]pw
“$TDCCP”
tdccpmeme.pw — No verificado. Resumen de las pruebas: VirusTotal 1/95 (alphaMountain.ai); PhishDestroy score 71/100. Registrador: Go Daddy.
El análisis detallado de PhishDestroy AI se mantiene en inglés para conservar el registro forense original.
Analysis of tdccpmeme.pw shows a recent registration (February 21, 2026) through Go Daddy, LLC and immediate deployment of a site hosted behind Cloudflare (AS13335) at IP address 104.21.8.235. The domain resolves to this Cloudflare‑backed IP, utilizes Cloudflare name servers (alla.ns.cloudflare.com, emerson.ns.cloudflare.com), and presents an SSL certificate issued by Google Trust Services / WE1, indicating a valid TLS configuration. HTTP responses return status code 200 and the page title is captured as "$TDCCP", confirming that the site was reachable before being taken offline. Technical fingerprinting reveals the presence of Vercel, HSTS, Google Analytics, and HTTP/3, all typical of modern web services but also common in malicious infrastructure leveraging reputable platforms to evade detection.
The domain is listed on a single security blocklist and has been specifically flagged by PhishDestroy, reinforcing its classification as a generic phishing vector. VirusTotal scans report that one of ninety‑five security vendors identified the domain as malicious, providing a modest but notable detection signal. Independent reputation scoring from Gridinsoft assigns a trust score of 39 out of 100, reflecting low confidence in the domain's legitimacy.
Although the site is currently offline, the elevated risk rating remains justified given the combination of recent creation, rapid deployment, legitimate‑looking TLS, and confirmed detection across multiple threat intelligence sources. Defenders should continue to block tdccpmeme.pw at perimeter controls, monitor DNS queries for the associated Cloudflare IP, and update any web filtering or email security policies to include this indicator. Ongoing vigilance is advised in case the domain is reactivated or similar patterns emerge in other newly registered .pw zones.
Proceso de respuesta ante amenazas Pipeline
Estado de la lista de bloqueados pública
Tecnologías · 5 identified
Vercel is a cloud platform for static frontends and serverless functions.
vercel.com 100 % de confianzaHTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.
www.rfc-editor.org 100 % de confianzaGoogle Analytics is a free web analytics service that tracks and reports website traffic.
google.com 100 % de confianzaCloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.
www.cloudflare.com 100 % de confianzaHTTP/3 is the third major version of the Hypertext Transfer Protocol used to exchange information on the World Wide Web.
httpwg.org 100 % de confianzaAnálisis de VirusTotal
Análisis de la configuración del sitio
Datos y informes externos
“We, the undersigned investors, are writing to formally lodge a complaint against Action Action Action LLC , a company registered in New York, located at 87-10 51 Ave, Rm 2P, Elmhurst, NY, 11373, and its operational team, led by Mr. Qi Fuwei (online alias: William Wang), for alleged fraudulent activities related to the issuance and trading of the $TDCCP meme coin on a public blockchain. The website is https://tdccpmeme.pw/. We believe these actions have caused significant financial harm to”
¿Te ha afectado esta página web?
Si ingresó credenciales de cuenta, información personal o de pago, o descargó un archivo de este dominio, tome medidas inmediatas. A continuación encontrará recursos que le ayudarán a informar el incidente y protegerse.
Informa a las autoridades locales
Seleccione su país para obtener contactos oficiales de cibercrimen o crear un borrador de queja →.
Comprobar cualquier dominio
Análisis de amenazas utilizando listas de bloqueo almacenadas, WHOIS, DNS y evidencia de escaneo público
Escanear ahoraDenunciar un intento de phishing
Envía los dominios sospechosos a nuestra base de datos de amenazas: protege a la comunidad
DenunciarFlujo de amenazas en tiempo real
Informes de phishing recientes y cambios de disponibilidad observados
MonitorizarMantente informado, mantente a salvo
Supervisa las amenazas en tiempo real o impugna esta entrada si crees que se trata de un falso positivo.