t-mobile[.]njkh[.]cc

This domain, t-mobile.njkh.cc, was identified as a brand impersonation threat targeting x.com. As of July 24, 2026, the domain is offline and not actively hosting any content. Analysis indicates that 11 of 95 security vendors on VirusTotal flagged this domain as malicious, suggesting a moderate level of threat recognition. The domain has a Gridinsoft trust score of 0 out of 100, indicating a complete lack of trustworthiness. The domain is registered through Gname.com Pte. Ltd. and is currently blocked by the PhishDestroy service, which adds to the credibility of the threat classification.

The domain's infrastructure is hosted with Cloudflare, Inc. in the United States, and it resolves to the IP address 188.114.96.3. The nameservers used are fiona.ns.cloudflare.com and malcolm.ns.cloudflare.com, which are typical for Cloudflare-hosted domains. The domain was created on February 21, 2026, and does not have an SSL certificate. Upon visiting the domain, the page title displayed is 'Welcome to nginx!', which is the default page often shown when a web server is newly set up or not configured with a specific site.

Given the elevated risk level and the multiple indicators of malicious intent, defenders should treat this domain with caution. While the domain is currently offline, it could be reactivated at any time. It is recommended to monitor for any future activity and consider blocking the domain at the network level to prevent potential phishing attacks. Additionally, organizations should ensure that all users are aware of the threat and trained to recognize and report suspicious links or communications that may impersonate legitimate services.