t-mobile[.]vwukq[.]cc

The domain t-mobile.vwukq.cc hosted a site with the page title "Welcome to nginx!" and was identified as a T-Mobile impersonation scam. The primary threat posed by this site was brand impersonation, designed to deceive visitors into believing they were interacting with a legitimate T-Mobile platform. Such impersonation sites typically aim to harvest sensitive user credentials or financial information by mimicking official login pages or promotional offers.

Technical evidence shows the site was flagged by 12 out of 95 VirusTotal vendors, with detections from ADMINUSLabs, Chong Lua Dao, Cluster25, CRDF, and CyRadar. It was listed on 1 blocklist. The site was hosted on IP address 104.21.70.248, located in the United States and associated with AS13335 Cloudflare, Inc. The domain was created on 2026-02-21 and had an SSL certificate identified as WE1. The GridinSoft trust score was 0 out of 100, and the DOM risk score was 73.

As of the report, the site status is down or offline. Based on the low trust score, high DOM risk score, and multiple vendor detections, the risk level is assessed as high. The domain's recent creation date and impersonation of a major brand further elevate the threat profile, even while currently inactive.