t-mobile[.]tedhiot[.]cc

As of July 24, 2026, the domain t-mobile.tedhiot.cc has been identified as a confirmed brand impersonation site targeting x.com. The domain appears on one security blocklist and was blocked by PhishDestroy, indicating that it has been flagged for malicious activity. The domain was registered through Gname.com Pte. Ltd. on February 21, 2026, and currently resolves to the IP address 188.114.97.3, which is located in the United States and is associated with AS13335 Cloudflare, Inc. Notably, the domain has been taken offline, and the landing page displays the title 'Welcome to nginx!', which is often a default page served by a web server, suggesting that the site may have been in the process of being set up or taken down at the time of the report.

The domain does not have an SSL certificate, which is a common characteristic of phishing sites. Gridinsoft, a reputable security provider, has given the domain a trust score of 0/100, indicating a very high level of suspicion.

Analysis indicates that while the domain is currently offline, it should still be treated with caution due to its history of impersonation and elevated risk level. Defenders are advised to block this domain and monitor for any related activity that may indicate a resurgence of the threat.