t-mobile[.]zbkay[.]cc
“zbkay.cc | 522: Connection timed out”
t-mobile.zbkay.cc — Belum terverifikasi. Peniruan identitas merek: Genericcloudflare; Jenis penipuan: Impersonation. Ringkasan bukti: VirusTotal 14/91 (ADMINUSLabs, Criminal IP, BitDefender, CyRadar, ESET); URLScan malicious verdict; Spamhaus DBL_PHISH; PhishDestroy score 92/100. Registrar: Gname.
Analisis terperinci PhishDestroy AI di bawah tetap berbahasa Inggris untuk menjaga catatan forensik asli.
This domain, t-mobile.zbkay.cc, is actively flagged as a high-risk phishing site targeting the T-Mobile brand. Analysis indicates the subdomain was registered under zbkay.cc on February 21, 2026, and remains operational as of July 12, 2026. The domain resolves to IP address 188.114.96.3, hosted on Cloudflare’s infrastructure (AS13335), which is commonly used to obscure malicious activity behind legitimate content delivery networks. Security vendors have detected this domain, with 16 out of 95 engines on VirusTotal identifying it as malicious, while it also appears on one security blocklist. Infrastructure review reveals the domain employs Cloudflare nameservers (autumn.ns.cloudflare.com and yadiel.ns.cloudflare.com) and an SSL certificate issued by Google Trust Services (WE1). The HTTP status code returned is 200, though the page title displays a Cloudflare 522 timeout error, suggesting either intermittent availability or deliberate evasion of automated analysis. The use of HTTP/3 further aligns with modern phishing tactics to improve performance and bypass legacy security controls. While the exact content of the phishing page remains unconfirmed due to the timeout error, the subdomain structure (t-mobile.zbkay.cc) strongly implies an attempt to impersonate T-Mobile for credential harvesting or fraudulent transactions. Defenders should treat this domain as active and high-risk, blocking resolution at the DNS level and monitoring for connections to 188.114.96.3. Given the domain’s recent creation and Cloudflare-backed infrastructure, additional subdomains or IP rotations may emerge, warranting continuous monitoring of related indicators.
Alur Tanggapan Ancaman Pipeline
Status Daftar Blokir Publik
Teknologi · 2 identified
Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.
www.cloudflare.com Keyakinan 100%HTTP/3 is the third major version of the Hypertext Transfer Protocol used to exchange information on the World Wide Web.
httpwg.org Keyakinan 100%Analisis VirusTotal
Bukti & Laporan Eksternal
Apakah Anda Terpengaruh oleh Situs Ini?
Jika Anda memasukkan kredensial akun, informasi pribadi atau pembayaran, atau mengunduh file dari domain ini, segera ambil tindakan. Di bawah ini adalah sumber daya untuk membantu Anda melaporkan insiden tersebut dan melindungi diri Anda sendiri.
Laporkan kepada Pihak Berwenang di Daerah Anda
Pilih negara Anda untuk mendapatkan kontak resmi kejahatan dunia maya, atau membuat draf pengaduan →.
Periksa Domain Apa Pun
Analisis ancaman menggunakan daftar blokir yang disimpan, WHOIS, DNS, dan bukti pemindaian publik
Pindai SekarangLaporkan Phishing
Laporkan domain yang mencurigakan ke basis data ancaman kami — lindungi komunitas
LaporanPemberitahuan Ancaman Real-Time
Laporan phishing terbaru dan perubahan ketersediaan yang diamati
PantauTetap Terinformasi, Tetap Aman
Pantau ancaman secara langsung atau ajukan keberatan terhadap daftar ini jika Anda yakin ini merupakan false positive