att[.]admsz[.]cc
“Welcome to nginx!”
Ringkasan bukti
att.admsz.cc was first observed on February 21, 2026 and is registered through Gname.com Pte. Ltd. The domain is delegated to the Cloudflare nameservers henry.ns.cloudflare.com and ulla.ns.cloudflare.com, and resolves to the IP address 172.67.213.136, which is owned by Cloudflare, Inc. (AS13335) and geolocated to the United States. No TLS certificate is presented; HTTP requests return the default nginx page with the title "Welcome to nginx!", indicating that no brand-specific landing page has been deployed at the time of analysis. The infrastructure is classified as a brand-impersonation campaign targeting the brand x.com, as indicated by the supplied intelligence.
Reputation scoring from Gridinsoft assigns a trust value of 0 out of 100, and the domain appears on a single security blocklist. PhishDestroy has actively blocked the host, and 13 of 95 security vendors on VirusTotal have flagged the domain as malicious. The risk rating is elevated, although the domain is currently listed as offline.
Defenders should continue to block traffic to 172.67.213.136 and to att.admsz.cc at the network perimeter, monitor for re-appearance of the domain or similar Cloudflare-hosted sub-domains that reference x.com, and consider adding the domain to internal URL filtering and threat-intel feeds. Because the site served only a generic nginx page, no further payload or credential-harvesting infrastructure has been identified, and the exact phishing kit remains unknown. Ongoing observation is recommended to detect any future activation or changes to the hosting configuration.
Snapshot bukti yang dikirim
- Dikirim
- Catatan buku besar
- 1
- ID kasus
PD-20260119-26BCFD- Judul halaman yang direkam
- Welcome to nginx!
- Artefak PDF
- Bukti PDF
Teks bukti lengkap
Policy Violations: Illegal Activities section forbids phishing, fraud, fake sites, malware distribution; registrar investigates and may suspend or delete domain
Applicable Laws: Computer Misuse Act 1993 §§3+, Penal Code §§415–420 (cheating), Online Criminal Harms Act (OCHA)
Data Coverage
Intelijen Keamanan Jaringan
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| OpenDNS | att.admsz.cc |
phishing | Phishing Block |
| DNS4EU | att.admsz.cc |
malicious | Sinkholed |
| Hagezi Threat Feed | att.admsz.cc |
malicious | Sinkholed |
| Quad9 DNS | att.admsz.cc |
malicious | Sinkholed |
Alur Tanggapan Ancaman Pipeline
Cakupan daftar blokir
10 sumber eksternal dipantau · snapshot tersimpan 11/08/2026
Linimasa deteksi
-
Cloudflare Radar
Pemindaian Cloudflare Radar tersimpan · Buka pemindaian
Analisis VirusTotal
Apakah Anda Terpengaruh oleh Situs Ini?
Jika Anda memasukkan kredensial akun, informasi pribadi atau pembayaran, atau mengunduh file dari domain ini, segera ambil tindakan. Di bawah ini adalah sumber daya untuk membantu Anda melaporkan insiden tersebut dan melindungi diri Anda sendiri.
Laporkan kepada Pihak Berwenang di Daerah Anda
Pilih negara Anda untuk mendapatkan kontak resmi kejahatan dunia maya, atau membuat draf pengaduan →.
Periksa Domain Apa Pun
Analisis ancaman menggunakan daftar blokir yang disimpan, WHOIS, DNS, dan bukti pemindaian publik
Pindai SekarangLaporkan Phishing
Laporkan domain yang mencurigakan ke basis data ancaman kami — lindungi komunitas
LaporanPemberitahuan Ancaman Real-Time
Laporan phishing terbaru dan perubahan ketersediaan yang diamati
PantauTetap Terinformasi, Tetap Aman
Pantau ancaman secara langsung atau ajukan keberatan terhadap daftar ini jika Anda yakin ini merupakan false positive