zqtnd[.]cfd
“.”
Ringkasan bukti
zqtnd.cfd is an active domain that was registered on September 03, 2025 through NICENIC INTERNATIONAL GROUP CO., LIMITED. The domain resolves to the IPv4 address 188.114.96.3, which is owned by AS13335 Cloudflare, Inc. and geolocated to the United States. The TLS certificate presented is identified as “WE1”, and the HTTP response currently returns an empty page title consisting of a single period. The site is listed as offline at the time of analysis, but historical records indicate it was used for a Google‑impersonating tech support scam. The brand target is explicitly Google, and the scam type is cataloged as a tech support scam.
VirusTotal analysis shows that five of ninety‑three security vendors flagged the domain as malicious, reflecting a modest but non‑trivial detection rate. The domain is blocked by the PhishDestroy service and appears on one external security blocklist. Gridinsoft assigns a trust score of 0 out of 100, indicating a high confidence of malicious intent. No additional intelligence such as OTX tags or Safe Browsing entries is available in the current dataset.
Given the combination of a low trust score, partial vendor detections, and confirmed brand impersonation, the domain should be treated as elevated risk. Defenders are advised to add 188.114.96.3 to firewall deny lists, enforce DNS sink‑hole rules for zqtnd.cfd, and monitor for any future re‑activation of the domain or related subdomains. Continuous re‑scanning with VirusTotal and inclusion in internal threat‑intel feeds will help maintain visibility. Organizations that rely on Google services should educate users about unsolicited tech‑support calls and reinforce that Google never initiates support interactions via unsolicited email or phone.
Data Coverage
Intelijen Keamanan Jaringan
Alur Tanggapan Ancaman Pipeline
Cakupan daftar blokir
10 sumber eksternal dipantau · snapshot tersimpan 11/08/2026
Bukti hasil tersimpan
Hasil dan atribusi penonaktifan
- Hasil
unknown- Ketersediaan
unreachable- Penyebab
origin_unreachable- Mekanisme
http_5xx- Tingkat keyakinan
- 20%
- Pengamatan pertama
- Pengamatan terbaru
Perkiraan waktu tidak tersedia
Waktu hingga tidak tersedia: 0 hSHA-256 bukti 637392f5288f
Linimasa deteksi
-
Ketersediaan
Nilai tersimpan pertama: DNS tidak aktif
f93a11f87e4d -
Ketersediaan
DNS tidak aktif → Tidak diketahui
afeafe71e216 -
Ketersediaan
Tidak diketahui → DNS tidak aktif
0275abaf1eb7 -
Ketersediaan
DNS tidak aktif → Ditahan
582475976bd3 -
Ketersediaan
Ditahan → DNS tidak aktif
f52d526b76a1 -
Ketersediaan
DNS tidak aktif → Tidak diketahui
a93d036d5b01 -
Ketersediaan
Tidak diketahui → DNS tidak aktif
6dfe9145995c -
Ketersediaan
DNS tidak aktif → Tidak diketahui
ed7585943c4e -
Ketersediaan
Tidak diketahui → Ditahan
4c6f6cde51a0 -
Ketersediaan
Ditahan → Tidak diketahui
8b3c84cfce5a
Tampilkan semua (2)
-
Ketersediaan
Tidak diketahui → DNS tidak aktif
d0b7046e8c2f -
Ketersediaan
DNS tidak aktif → Tidak diketahui
637392f5288f
Laporan komunitas
Dilaporkan oleh 1 anggota komunitas; pertama terlihat 04/09/2025
- Laporan tersimpan
- 1
- URL unik yang dilaporkan
- 1
Tangkapan tersimpan
Intelijen Domain
Detail teknisDNS, nama TLS, dan stempel waktu
ZONA SHORTDOT · BUKTI PUBLIK
.cfd
ShortDot zone evidence
ShortDot zone evidence
The linked repository preserves daily zone observations across seven ShortDot-operated TLDs, including registration volume and abuse-related indicators. This registry context is supporting background and is not an independent detection for the domain in this report.
ICANN OVERSIGHT
Akreditasi dan konteks RAA
Akreditasi dan konteks RAA
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Analisis VirusTotal
Apakah Anda Terpengaruh oleh Situs Ini?
Jika Anda memasukkan kredensial akun, informasi pribadi atau pembayaran, atau mengunduh file dari domain ini, segera ambil tindakan. Di bawah ini adalah sumber daya untuk membantu Anda melaporkan insiden tersebut dan melindungi diri Anda sendiri.
Laporkan kepada Pihak Berwenang di Daerah Anda
Pilih negara Anda untuk mendapatkan kontak resmi kejahatan dunia maya, atau membuat draf pengaduan →.
Periksa Domain Apa Pun
Analisis ancaman menggunakan daftar blokir yang disimpan, WHOIS, DNS, dan bukti pemindaian publik
Pindai SekarangLaporkan Phishing
Laporkan domain yang mencurigakan ke basis data ancaman kami — lindungi komunitas
LaporanPemberitahuan Ancaman Real-Time
Laporan phishing terbaru dan perubahan ketersediaan yang diamati
PantauTetap Terinformasi, Tetap Aman
Pantau ancaman secara langsung atau ajukan keberatan terhadap daftar ini jika Anda yakin ini merupakan false positive