t-mobile[.]vidnufh[.]cc

This domain, t-mobile.vidnufh.cc, operates as a fraudulent login portal designed to impersonate X.com (formerly Twitter). The site presents a fake authentication interface to trick visitors into entering their account credentials, which are then harvested by threat actors. The stolen credentials may be used for unauthorized account access, financial fraud, or further phishing campaigns targeting the victim's contacts. The domain's infrastructure and content are engineered to mimic legitimate X.com properties, increasing the likelihood of successful deception among unsuspecting users. Analysis indicates this domain was registered on February 21, 2026, through Gname.com Pte. Ltd., a registrar frequently associated with abusive domains. At the time of assessment, 18 out of 95 security vendors on VirusTotal flagged the domain as malicious, with detection labels including phishing and brand impersonation. The domain resolves to IP address 172.67.200.15, hosted on Cloudflare's network (AS13335), which is commonly used to mask the true origin of malicious infrastructure. The absence of an SSL certificate further signals illegitimacy, as modern web services universally employ encryption for secure communication. If you visited t-mobile.vidnufh.cc and entered any credentials, immediate action is required. First, change your X.com password using a separate, trusted device and enable multi-factor authentication if not already active. Review your account for unauthorized activity, including posts, messages, or connected applications. Monitor linked email accounts and financial services for signs of compromise, such as password reset emails or unauthorized transactions. Report the incident to X.com's security team and consider filing a complaint with relevant cybercrime authorities. Avoid interacting with any communications received from the domain, as threat actors may attempt follow-up attacks via email or direct messages.