t-mobile[.]ogmri[.]cc
“Welcome to nginx!”
t-mobile.ogmri.cc — 内容不可用 (HTTP 502). 证据摘要: VirusTotal 18/95 (ADMINUSLabs, Criminal IP, Chong Lua Dao, Cluster25, CRDF); PhishDestroy score 95/100. 注册商: Gname.
为保留原始取证记录,下方的 PhishDestroy AI 详细分析仍使用英文。
This report analyzes the domain t-mobile.ogmri.cc, which presented a page titled "Welcome to nginx!" and was identified as an impersonation of the brand x.com. The threat posed by this site is that it attempts to deceive users into believing they are interacting with a legitimate service associated with x.com, potentially leading to credential theft or other fraud. The combination of a generic nginx welcome page and the impersonation of a well-known brand indicates a phishing or scam operation.
Technical evidence shows that the domain was flagged by 18 out of 95 VirusTotal vendors. It was registered with Gname.com Pte. Ltd. on 2026-02-21 and hosted on IP address 188.114.97.3 (US), belonging to AS13335 Cloudflare, Inc. The site has no SSL certificate and uses nameservers alexis.ns.cloudflare.com and kiki.ns.cloudflare.com. It appears on one blocklist and has been flagged by ADMINUSLabs, Criminal IP, Chong Lua Dao, Cluster25, and CRDF.
The current status of the domain is DOWN/OFFLINE, rendering it inaccessible. The GridinSoft trust rating is 0/100, and the DOM risk score is 10, indicating a very high risk level. This domain should be blocked and monitored for any future reactivation.
威胁响应 Pipeline
公共封禁名单状态
VirusTotal 分析
证据与外部报告
PD-20260130-CE9602 Recipient: complaint@gname.com 您是否受到本网站的影响?
如果您输入了帐户凭据、个人或付款信息,或者从此域下载了文件,请立即采取措施。以下资源可帮助您报告事件并保护自己。