Notification and current-status evidence
The sent-report ledger records the first outgoing report at .
The recorded recipient is domainabuse@service.aliyun.com.
The latest stored availability evidence still shows the domain reachable; 6 months has elapsed since the first outgoing report.
ICANN RAA §3.18 describes registrar abuse-contact and handling obligations. This section records outgoing timestamps, listed recipients, case identifiers, and later availability. It does not by itself prove receipt, acknowledgement, investigation, remediation, or contractual non-compliance.
t-mobile[.]tfewon[.]cc
“Welcome to nginx!”
t-mobile.tfewon.cc — 확인되지 않음. 증거 요약: VirusTotal 12/91 (ADMINUSLabs, alphaMountain.ai, BitDefender, CyRadar, ESET); URLQuery 2 alerts; Google Safe Browsing flagged; CF Radar malicious; PhishDestroy score 98/100. 등록기관: Dominet (HK).
원본 포렌식 기록을 보존하기 위해 아래의 상세 PhishDestroy AI 분석은 영어로 유지됩니다.
This domain, t-mobile.tfewon.cc, impersonates the T-Mobile brand, as indicated by its use of the T-Mobile name in the URL. The page title "Welcome to nginx!" suggests the site is a placeholder or a minimal web server configuration, not a legitimate T-Mobile service. The threat is social engineering, as flagged by Google Safe Browsing, likely attempting to trick users into providing personal information or credentials under the guise of a T-Mobile portal.
Technical evidence confirms the malicious nature of the site. VirusTotal reports 21 detections out of 95 vendors, with flags from ADMINUSLabs, Criminal IP, BitDefender, Cluster25, and CRDF. The domain was created on 2026-02-21 and registered through Dominet (HK) Limited. It resolves to IP address 188.114.96.3 in the United States, hosted by AS13335 Cloudflare, Inc. SSL certificate is issued by Google Trust Services for the subject WE1. Nameservers are aleena.ns.cloudflare.com and yadiel.ns.cloudflare.com. The GridinSoft trust rating is 0 out of 100.
The site is currently offline or down. The risk level is high due to the confirmed social engineering threat, 21 vendor detections, and inclusion in 1 blocklist. Users should avoid any interaction with this domain.
네트워크 보안 인텔리전스
위협 대응 Pipeline
공개 차단 목록 상태
사용 기술 · 3 identified
Performance monitoring tool that measures website speed from real users.
www.cloudflare.comWeb infrastructure and security company providing CDN, DDoS mitigation, and DNS services.
www.cloudflare.comThird major version of HTTP protocol, built on QUIC for faster, more reliable connections.
VirusTotal 분석
보관된 증거
사이트 성능 분석
Google PageSpeed Insights — mobile performance audit of t-mobile.tfewon.cc · checked Mar 1, 2026
증거 및 외부 보고서
PD-20260205-B940EC Recipient: domainabuse@service.aliyun.com 이 사이트로 인해 영향을 받으셨나요?
계정 자격 증명, 개인 정보 또는 결제 정보를 입력했거나 이 도메인에서 파일을 다운로드한 경우 즉시 조치를 취하세요. 다음은 사건을 신고하고 자신을 보호하는 데 도움이 되는 리소스입니다.
지역 당국에 신고하십시오
공식 사이버 범죄 연락처 또는 불만사항 초안 작성 →를 받으려면 국가를 선택하세요.