tuidds[.]cc

The domain tuidds.cc was registered on October 18, 2025 through Web Commerce Communications Limited and is currently marked as offline. DNS resolution points to the IP address 188.114.97.3, which belongs to AS13335 Cloudflare, Inc., located in the United States. The domain uses Cloudflare’s authoritative nameservers gracie.ns.cloudflare.com and nitin.ns.cloudflare.com, indicating that the infrastructure is hosted behind a CDN service. No SSL certificate was observed for the site, suggesting that HTTPS was not configured at the time of analysis.

The HTTP response delivered a page with the title "Just a moment...", but the content of the page has not been publicly disclosed, leaving the exact payload or credential‑capture mechanisms uncertain. VirusTotal records show that nine of ninety‑five security vendors flagged the domain, demonstrating a modest but notable detection rate. The domain is listed on a single security blocklist and has been blocked by the PhishDestroy feed, confirming that at least one external mitigation service has taken action against it.

The available evidence points to a generic phishing operation, yet the specific target brand or campaign details remain unknown. Defenders should add the domain and its resolving IP to their deny‑list policies, monitor for any re‑appearance of the host on additional blocklists, and consider tightening outbound filtering for traffic to Cloudflare edge nodes that resolve to the same IP range. Continuous re‑evaluation of the domain’s status is advised, as future activity could expand the threat surface beyond the current observations.