t-mobile[.]tuegiuu[.]cc

This report details a domain identified as an impersonation threat. The site, t-mobile.tuegiuu.cc, presented a page title of "Welcome to nginx!" but was configured to impersonate the brand x.com. The primary threat posed by this site is brand impersonation, designed to deceive visitors into believing they are interacting with a legitimate x.com service, potentially for credential harvesting or other fraudulent activities.

Technical analysis reveals that the domain was flagged by 12 out of 95 VirusTotal vendors. It appears on 1 blocklist and was detected by security vendors including ADMINUSLabs, Cluster25, CRDF, CyRadar, and Forcepoint ThreatSeeker. The domain was created on 2026-02-21 and resolves to IP address 104.21.74.229, located in the United States and hosted by AS13335 Cloudflare, Inc. The site uses SSL certificate type WE1.

The domain is currently offline. Risk assessment tools indicate a high threat level, with a GridinSoft trust score of 0/100, a ScamAdviser trust score of 0/100, and a DOM risk score of 73 out of 100. The combination of high detection rates, low trust scores, and impersonation of a major brand confirms this domain represents a significant security risk.