t-mobile[.]abvny[.]cc
“Welcome to nginx!”
t-mobile.abvny.cc — Konten tidak tersedia (HTTP 502). Ringkasan bukti: VirusTotal 13/93 (ADMINUSLabs, Cluster25, CRDF, CyRadar, Emsisoft); URLQuery 3 alerts; PhishDestroy score 93/100. Registrar: Gname.
Analisis terperinci PhishDestroy AI di bawah tetap berbahasa Inggris untuk menjaga catatan forensik asli.
t-mobile.abvny.cc was registered through Gname.com Pte. Ltd. on February 21, 2026. The domain resolves to the Cloudflare address 104.21.22.159, which is associated with AS13335 Cloudflare, Inc. and located in the United States. DNS resolution uses the Cloudflare nameservers hayes.ns.cloudflare.com and sarah.ns.cloudflare.com. An HTTP request to the host returns the generic page title “Welcome to nginx!” and presents no SSL certificate, indicating the service is delivered over plain HTTP. The site is classified as a brand‑impersonation campaign targeting x.com, as indicated by the intelligence record.
No malicious payload or login form has been captured, so the exact phishing kit or page content remains unverified. Detection telemetry shows that 13 of 93 security vendors on VirusTotal flagged the domain as malicious, and it appears on a single blocklist where it was blocked by PhishDestroy. Gridinsoft’s trust score is 0 out of 100, reinforcing the low credibility of the host. The domain’s current status is offline, which may be the result of takedown actions or temporary hosting suspension.
Uncertainties include the precise malicious functionality, the presence of any credential‑stealing forms, and whether the domain was ever serving phishing content before the takedown. Defensive teams should continue to monitor the IP address 104.21.22.159 for any re‑hosting of the same domain or related subdomains, add the domain to local blocklists, and enforce DNS filtering that includes the known blocklist entry. Because the domain uses Cloudflare’s infrastructure, any future re‑deployment may appear under the same ASN, so anomalies in traffic to that address should be investigated. Continuous VT scanning and correlation with endpoint alerts will help confirm if remnants of the campaign persist.
Intelijen Keamanan Jaringan
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| Hagezi Threat Feed | t-mobile.abvny.cc |
malicious | Sinkholed |
| DNS4EU | t-mobile.abvny.cc |
malicious | Sinkholed |
| OpenDNS | t-mobile.abvny.cc |
phishing | Phishing Block |
Alur Tanggapan Ancaman Pipeline
Status Daftar Blokir Publik
Analisis VirusTotal
Bukti & Laporan Eksternal
PD-20260202-8BE237 Recipient: complaint@gname.com Apakah Anda Terpengaruh oleh Situs Ini?
Jika Anda memasukkan kredensial akun, informasi pribadi atau pembayaran, atau mengunduh file dari domain ini, segera ambil tindakan. Di bawah ini adalah sumber daya untuk membantu Anda melaporkan insiden tersebut dan melindungi diri Anda sendiri.
Laporkan kepada Pihak Berwenang di Daerah Anda
Pilih negara Anda untuk mendapatkan kontak resmi kejahatan dunia maya, atau membuat draf pengaduan →.
Periksa Domain Apa Pun
Analisis ancaman menggunakan daftar blokir yang disimpan, WHOIS, DNS, dan bukti pemindaian publik
Pindai SekarangLaporkan Phishing
Laporkan domain yang mencurigakan ke basis data ancaman kami — lindungi komunitas
LaporanPemberitahuan Ancaman Real-Time
Laporan phishing terbaru dan perubahan ketersediaan yang diamati
PantauTetap Terinformasi, Tetap Aman
Pantau ancaman secara langsung atau ajukan keberatan terhadap daftar ini jika Anda yakin ini merupakan false positive