t-mobile[.]tjfdw[.]cc
“Welcome to nginx!”
t-mobile.tjfdw.cc — 内容不可用 (HTTP 502). 证据摘要: VirusTotal 16/93 (ADMINUSLabs, Criminal IP, Cluster25, CRDF, CyRadar); URLQuery 2 alerts; PhishDestroy score 95/100. 注册商: Gname.
为保留原始取证记录,下方的 PhishDestroy AI 详细分析仍使用英文。
The domain t-mobile.tjfdw.cc is a malicious impersonation site that claims to be "Welcome to nginx!" but is flagged as an impersonation of x.com. This site poses a threat by attempting to deceive users into believing they are interacting with a legitimate service, likely for credential theft or other fraudulent activities.
Technical evidence shows the site was flagged by 16 out of 95 VirusTotal vendors, with detection by ADMINUSLabs, Criminal IP, Cluster25, CRDF, and CyRadar. The domain is hosted on IP 172.67.177.74 in the US, associated with AS13335 Cloudflare, Inc. It was created on 2026-02-21 via registrar Gname.com Pte. Ltd., with nameservers bristol.ns.cloudflare.com and matteo.ns.cloudflare.com. No SSL certificate is present, and the site appears on 1 blocklist.
Currently, the site is DOWN/OFFLINE. GridinSoft trust rating is 0 out of 100, and the DOM risk score is 10, indicating a high risk. The site is non-operational at this time, but its historical malicious nature warrants caution.
网络安全情报
威胁响应 Pipeline
公共封禁名单状态
VirusTotal 分析
证据与外部报告
PD-20260130-B9BEF2 Recipient: complaint@gname.com 您是否受到本网站的影响?
如果您输入了帐户凭据、个人或付款信息,或者从此域下载了文件,请立即采取措施。以下资源可帮助您报告事件并保护自己。