t-mobile[.]vidnufa[.]cc
“Welcome to nginx!”
t-mobile.vidnufa.cc — Konten tidak tersedia (HTTP 502). Ringkasan bukti: VirusTotal 14/93 (ADMINUSLabs, BitDefender, Cluster25, CRDF, Forcepoint ThreatSeeker); PhishDestroy score 92/100. Registrar: Gname.
Analisis terperinci PhishDestroy AI di bawah tetap berbahasa Inggris untuk menjaga catatan forensik asli.
The domain t-mobile.vidnufa.cc was registered on February 21, 2026 through Gname.com Pte. Ltd. and is presently offline, having been taken down after detection. Infrastructure analysis shows the domain resolves to IP address 172.67.146.123, which belongs to AS13335 Cloudflare, Inc., located in the United States. The authoritative name servers are aspen.ns.cloudflare.com and trevor.ns.cloudflare.com, indicating Cloudflare DNS services. No SSL certificate is presented; HTTP requests return the default page title "Welcome to nginx!", suggesting the web server is serving a generic Nginx landing page rather than a customized phishing page.
The threat is classified as brand impersonation targeting x.com, as indicated by the supplied intelligence. Gridinsoft assigns a trust score of 0 out of 100, reflecting an extremely low reputation. VirusTotal analysis reports that 14 of 93 scanned security vendors flag the domain as malicious, reinforcing the suspicion. The domain appears on a single security blocklist and has been blocked by the PhishDestroy service.
Given the Cloudflare hosting, defenders should consider blocking the associated ASN (AS13335) or the specific IP address to mitigate possible collateral traffic. Adding t-mobile.vidnufa.cc to internal URL filtering, DNS sinkhole, and endpoint allowlists will prevent accidental access. Continuous monitoring of the registrar Gname.com for any re‑registration attempts and periodic re‑scanning of the domain are recommended to detect any resurgence of activity. The lack of an SSL certificate and the generic Nginx title limit immediate forensic insight into content, so threat hunters should treat the domain as a high‑confidence impersonation indicator and prioritize defensive rule deployment.
Alur Tanggapan Ancaman Pipeline
Status Daftar Blokir Publik
Analisis VirusTotal
Bukti & Laporan Eksternal
PD-20260203-70C420 Recipient: complaint@gname.com Apakah Anda Terpengaruh oleh Situs Ini?
Jika Anda memasukkan kredensial akun, informasi pribadi atau pembayaran, atau mengunduh file dari domain ini, segera ambil tindakan. Di bawah ini adalah sumber daya untuk membantu Anda melaporkan insiden tersebut dan melindungi diri Anda sendiri.
Laporkan kepada Pihak Berwenang di Daerah Anda
Pilih negara Anda untuk mendapatkan kontak resmi kejahatan dunia maya, atau membuat draf pengaduan →.
Periksa Domain Apa Pun
Analisis ancaman menggunakan daftar blokir yang disimpan, WHOIS, DNS, dan bukti pemindaian publik
Pindai SekarangLaporkan Phishing
Laporkan domain yang mencurigakan ke basis data ancaman kami — lindungi komunitas
LaporanPemberitahuan Ancaman Real-Time
Laporan phishing terbaru dan perubahan ketersediaan yang diamati
PantauTetap Terinformasi, Tetap Aman
Pantau ancaman secara langsung atau ajukan keberatan terhadap daftar ini jika Anda yakin ini merupakan false positive