t-mobile[.]miqr[.]cc
“Welcome to nginx!”
t-mobile.miqr.cc — Konten tidak tersedia (HTTP 502). Ringkasan bukti: VirusTotal 19/93 (ADMINUSLabs, BitDefender, Chong Lua Dao, Cluster25, CRDF); URLQuery 3 alerts; PhishDestroy score 95/100. Registrar: Gname.
Analisis terperinci PhishDestroy AI di bawah tetap berbahasa Inggris untuk menjaga catatan forensik asli.
Analysis of the domain t-mobile.miqr.cc indicates it was actively involved in brand impersonation targeting X.com, as classified in threat intelligence records. The domain, registered on January 30, 2026, through Gname.com Pte. Ltd., resolved to the IP address 172.67.194.55, hosted on Cloudflare's infrastructure (AS13335) in the United States. No SSL certificate was detected, and the domain's HTTP response displayed the default 'Welcome to nginx!' page title, suggesting either an incomplete deployment or an attempt to evade immediate detection by presenting minimal content. The domain appears on one security blocklist and is flagged by 19 of 93 security vendors on VirusTotal, reinforcing its classification as malicious.
It was blocked by PhishDestroy and assigned a Gridinsoft trust score of 0/100, further confirming its high-risk status. Nameservers for the domain are configured as A.SHARE-DNS.COM and B.SHARE-DNS.NET, which are not inherently malicious but are frequently associated with low-reputation or disposable hosting setups. Infrastructure analysis reveals the domain was taken offline prior to July 23, 2026, though its prior activity and detection history remain relevant for retrospective threat hunting.
Defenders should treat this domain as confirmed malicious and prioritize blocking it at DNS, proxy, and endpoint layers. Historical logs should be reviewed for connections to 172.67.194.55 or interactions with the domain, particularly in contexts involving X.com or related authentication flows. No evidence of a phishing kit or specific payload is available, so further forensic analysis of archived content may be required to determine the exact attack vector.
Intelijen Keamanan Jaringan
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| OpenDNS | t-mobile.miqr.cc |
phishing | Phishing Block |
| Hagezi Threat Feed | t-mobile.miqr.cc |
malicious | Sinkholed |
| DNS4EU | t-mobile.miqr.cc |
malicious | Sinkholed |
Alur Tanggapan Ancaman Pipeline
Status Daftar Blokir Publik
Analisis VirusTotal
Bukti & Laporan Eksternal
PD-20260131-BF1B6E Recipient: complaint@gname.com Apakah Anda Terpengaruh oleh Situs Ini?
Jika Anda memasukkan kredensial akun, informasi pribadi atau pembayaran, atau mengunduh file dari domain ini, segera ambil tindakan. Di bawah ini adalah sumber daya untuk membantu Anda melaporkan insiden tersebut dan melindungi diri Anda sendiri.
Laporkan kepada Pihak Berwenang di Daerah Anda
Pilih negara Anda untuk mendapatkan kontak resmi kejahatan dunia maya, atau membuat draf pengaduan →.
Periksa Domain Apa Pun
Analisis ancaman menggunakan daftar blokir yang disimpan, WHOIS, DNS, dan bukti pemindaian publik
Pindai SekarangLaporkan Phishing
Laporkan domain yang mencurigakan ke basis data ancaman kami — lindungi komunitas
LaporanPemberitahuan Ancaman Real-Time
Laporan phishing terbaru dan perubahan ketersediaan yang diamati
PantauTetap Terinformasi, Tetap Aman
Pantau ancaman secara langsung atau ajukan keberatan terhadap daftar ini jika Anda yakin ini merupakan false positive