t-mobile[.]uyiuh[.]icu
“Welcome to nginx!”
t-mobile.uyiuh.icu — 内容不可用 (HTTP 502). 证据摘要: VirusTotal 12/93 (ADMINUSLabs, BitDefender, CyRadar, ESET, Forcepoint ThreatSeeker); PhishDestroy score 86/100.
为保留原始取证记录,下方的 PhishDestroy AI 详细分析仍使用英文。
The domain t-mobile.uyiuh.icu presents as an impersonation scam targeting the x.com brand. The site's page title is "Welcome to nginx!", indicating a default web server configuration with no legitimate content, while the scam type confirms it is designed to deceive users by mimicking x.com. This poses a threat of brand impersonation, potentially used for phishing or credential theft by exploiting the trusted x.com identity.
Technical evidence shows the domain is flagged by 12 out of 95 VirusTotal vendors and is listed on one blocklist. It was created on 2026-02-21 and is hosted on IP address 188.114.96.3, located in the United States, under AS13335 Cloudflare, Inc. The SSL certificate type is WE1. Specific vendors detecting the threat include ADMINUSLabs, BitDefender, CyRadar, ESET, and Forcepoint ThreatSeeker.
The site is currently DOWN/OFFLINE, indicating it is not accessible. The DOM risk score is 73, reflecting a high level of risk due to the impersonation and detection rates. Despite being offline, the domain remains a potential threat if reactivated, given its malicious classification and recent creation date.
威胁响应 Pipeline
公共封禁名单状态
已保存的截图
域名情报
技术细节DNS、SSL SAN、时间戳
SHORTDOT 域名区 · 公开证据
.icu
ShortDot zone evidence
ShortDot zone evidence
The linked repository preserves daily zone observations across seven ShortDot-operated TLDs, including registration volume and abuse-related indicators. This registry context is supporting background and is not an independent detection for the domain in this report.
VirusTotal 分析
证据与外部报告
您是否受到本网站的影响?
如果您输入了帐户凭据、个人或付款信息,或者从此域下载了文件,请立即采取措施。以下资源可帮助您报告事件并保护自己。