t-mobile[.]cfdkuy[.]icu
t-mobile.cfdkuy.icu — 内容不可用 (HTTP 502). 品牌冒充:Genericcloudflare. 证据摘要: VirusTotal 14/93 (ADMINUSLabs, BitDefender, CRDF, CyRadar, Forcepoint ThreatSeeker); URLScan malicious verdict; PhishDestroy score 92/100.
为保留原始取证记录,下方的 PhishDestroy AI 详细分析仍使用英文。
The domain t-mobile.cfdkuy.icu was registered on February 21, 2026 and is currently reported as offline. Infrastructure analysis shows the domain resolves to the IP address 188.114.97.3, which belongs to Cloudflare, Inc. (AS13335) and is geolocated in the United States. The TLS certificate presented for the host is identified as WE1, indicating a standard SSL deployment without additional validation details.
Threat‑intelligence feeds list the domain on a single security blocklist, where it is specifically flagged by PhishDestroy. VirusTotal scans have returned 14 positive detections out of 93 submitted security vendors, confirming that multiple scanning engines consider the host malicious. No further public data such as page title, target brand, or HTTP response codes are available, leaving the exact content of the site unverified.
Given the elevated risk classification, defenders should add the domain and its associated IP to network‑level deny lists, enforce DNS sinkholing where possible, and monitor for any resurgence of the domain or related sub‑domains. Continuous re‑evaluation is advised, as the offline status may change and additional indicators could emerge from future scans or blocklist updates.
威胁响应 Pipeline
公共封禁名单状态
已保存的截图
域名情报
技术细节DNS、SSL SAN、时间戳
SHORTDOT 域名区 · 公开证据
.icu
ShortDot zone evidence
ShortDot zone evidence
The linked repository preserves daily zone observations across seven ShortDot-operated TLDs, including registration volume and abuse-related indicators. This registry context is supporting background and is not an independent detection for the domain in this report.
VirusTotal 分析
证据与外部报告
您是否受到本网站的影响?
如果您输入了帐户凭据、个人或付款信息,或者从此域下载了文件,请立即采取措施。以下资源可帮助您报告事件并保护自己。