t-mobile[.]argok[.]cc
“Welcome to nginx!”
t-mobile.argok.cc — Konten tidak tersedia (HTTP 502). Ringkasan bukti: VirusTotal 13/93 (ADMINUSLabs, Criminal IP, Cluster25, CRDF, CyRadar); URLQuery 2 alerts; PhishDestroy score 93/100. Registrar: Gname.
Analisis terperinci PhishDestroy AI di bawah tetap berbahasa Inggris untuk menjaga catatan forensik asli.
Analysis of t-mobile.argok.cc shows a brand‑impersonation campaign targeting the x.com brand. The domain was registered on February 21, 2026 through Gname.com Pte. Ltd. and resolves to the Cloudflare address 104.21.28.100, which is announced by AS13335 in the United States. No SSL certificate is presented, and the HTTP response returns the generic title "Welcome to nginx!", indicating the site is hosted behind a default web server configuration rather than a custom phishing page. VirusTotal records indicate that 13 of 93 scanning engines flagged the domain as malicious, and the site appears on one external blocklist, where it has already been blocked by PhishDestroy.
The Gridinsoft trust score of 0 / 100 further signals a high likelihood of malicious intent. Nameserver records list armfazh.ns.cloudflare.com and laylah.ns.cloudflare.com, confirming the use of Cloudflare’s DNS infrastructure. The current status is offline, limiting immediate sampling, but the combination of a recent registration, lack of TLS, low trust score, and multiple vendor detections suggests the domain was actively used for credential‑stealing or fraud against users of x.com.
Defenders should add the domain and its associated IP address to internal blocklists, monitor for any traffic to the Cloudflare‑served IP range that matches the domain’s host patterns, and update URL filtering rules to reject requests to t-mobile.argok.cc. Incident response teams should also review any logs for connections to the domain between its creation date and the reported offline timestamp, and consider notifying users of x.com about the attempted impersonation. While the site is no longer reachable, the underlying infrastructure (Cloudflare IP and nameservers) may be reused for future campaigns, warranting continued vigilance.
Intelijen Keamanan Jaringan
Alur Tanggapan Ancaman Pipeline
Status Daftar Blokir Publik
Analisis VirusTotal
Bukti & Laporan Eksternal
PD-20260124-AC7CDF Recipient: complaint@gname.com Apakah Anda Terpengaruh oleh Situs Ini?
Jika Anda memasukkan kredensial akun, informasi pribadi atau pembayaran, atau mengunduh file dari domain ini, segera ambil tindakan. Di bawah ini adalah sumber daya untuk membantu Anda melaporkan insiden tersebut dan melindungi diri Anda sendiri.
Laporkan kepada Pihak Berwenang di Daerah Anda
Pilih negara Anda untuk mendapatkan kontak resmi kejahatan dunia maya, atau membuat draf pengaduan →.
Periksa Domain Apa Pun
Analisis ancaman menggunakan daftar blokir yang disimpan, WHOIS, DNS, dan bukti pemindaian publik
Pindai SekarangLaporkan Phishing
Laporkan domain yang mencurigakan ke basis data ancaman kami — lindungi komunitas
LaporanPemberitahuan Ancaman Real-Time
Laporan phishing terbaru dan perubahan ketersediaan yang diamati
PantauTetap Terinformasi, Tetap Aman
Pantau ancaman secara langsung atau ajukan keberatan terhadap daftar ini jika Anda yakin ini merupakan false positive