t-mobile[.]jdsyy[.]icu
t-mobile.jdsyy.icu — Konten tidak tersedia (HTTP 502). Peniruan identitas merek: Genericcloudflare. Ringkasan bukti: VirusTotal 10/93 (Cluster25, CRDF, CyRadar, Fortinet, Gridinsoft); URLScan malicious verdict; Spamhaus DBL_PHISH; PhishDestroy score 88/100.
Analisis terperinci PhishDestroy AI di bawah tetap berbahasa Inggris untuk menjaga catatan forensik asli.
Analysis of the domain t-mobile.jdsyy.icu, created on February 21, 2026, shows it resolves to the IP address 104.21.67.18, which is owned by Cloudflare, Inc. (AS13335) and geolocates to the United States. The domain is currently listed as offline, having been taken offline after detection. It is blocked by the PhishDestroy mitigation service and appears on one external security blocklist.
The SSL certificate in use is identified as "WE1," indicating a publicly trusted certificate but offering no indication of legitimacy. VirusTotal scans record that ten out of ninety‑three security vendors have flagged the domain as malicious, reinforcing the suspicion of phishing activity. No additional intelligence such as page title, brand targeting, or specific scam kit has been disclosed, leaving the exact phishing campaign details unverified.
Defenders should continue to block traffic to 104.21.67.18, monitor for any future re‑registration of the domain, and incorporate the domain hash into threat‑intel feeds. Network filtering solutions that rely on community blocklists should already be intercepting requests to this host, but organizations using custom allow‑lists should verify that t-mobile.jdsyy.icu is excluded. Continuous observation of Cloudflare‑hosted IP ranges for similar patterns is advised, as the infrastructure could be repurposed for other malicious operations.
Alur Tanggapan Ancaman Pipeline
Status Daftar Blokir Publik
Tangkapan tersimpan
Intelijen Domain
Rincian teknisDNS, SAN SSL, cap waktu
ZONA SHORTDOT · BUKTI PUBLIK
.icu
ShortDot zone evidence
ShortDot zone evidence
The linked repository preserves daily zone observations across seven ShortDot-operated TLDs, including registration volume and abuse-related indicators. This registry context is supporting background and is not an independent detection for the domain in this report.
Intelijen Forensik
Analisis VirusTotal
Bukti & Laporan Eksternal
Apakah Anda Terpengaruh oleh Situs Ini?
Jika Anda memasukkan kredensial akun, informasi pribadi atau pembayaran, atau mengunduh file dari domain ini, segera ambil tindakan. Di bawah ini adalah sumber daya untuk membantu Anda melaporkan insiden tersebut dan melindungi diri Anda sendiri.
Laporkan kepada Pihak Berwenang di Daerah Anda
Pilih negara Anda untuk mendapatkan kontak resmi kejahatan dunia maya, atau membuat draf pengaduan →.
Periksa Domain Apa Pun
Analisis ancaman menggunakan daftar blokir yang disimpan, WHOIS, DNS, dan bukti pemindaian publik
Pindai SekarangLaporkan Phishing
Laporkan domain yang mencurigakan ke basis data ancaman kami — lindungi komunitas
LaporanPemberitahuan Ancaman Real-Time
Laporan phishing terbaru dan perubahan ketersediaan yang diamati
PantauTetap Terinformasi, Tetap Aman
Pantau ancaman secara langsung atau ajukan keberatan terhadap daftar ini jika Anda yakin ini merupakan false positive