t-mobile[.]rdabk[.]cc

The domain t-mobile.rdabk.cc has been identified as a brand impersonation phishing threat, specifically targeting X.com. This domain was created on February 21, 2026, and is currently offline, but its malicious intent is confirmed by multiple security sources.

PhishDestroy analysts found that t-mobile.rdabk.cc resolves to the IP address 172.67.201.6 and was flagged by 14 out of 95 VirusTotal vendors, indicating widespread recognition of its malicious nature. The domain appears on one security blocklist and has an SSL certificate from WE1. The page title, "Welcome to nginx!", suggests a generic staging page often used by phishers. Despite its offline status, the domain's creation date and security vendor flags underscore its credibility as a threat.

Users who may have encountered this domain should avoid any interaction and ensure they have not entered credentials or sensitive information. Since the site impersonates X.com, any login details entered could have been compromised. It is recommended to change passwords for any accounts that may have been used on this domain and enable two-factor authentication where possible. PhishDestroy advises monitoring for suspicious activity and reporting any related incidents to the relevant platform. Stay cautious of similar domains and always verify URLs before entering personal information.