t-mobile[.]clgbx[.]cc

The domain t-mobile.clgbx.cc has been identified as a brand impersonation threat, specifically targeting X.com to deploy a crypto drainer. This malicious site is designed to trick visitors into believing they are interacting with a legitimate X.com service, often by mimicking login pages or prompting cryptocurrency wallet connections. Once a user connects their wallet or enters credentials, the drainer siphons funds and sensitive data. The domain was registered through Gname.com Pte. Ltd. on February 21, 2026, a relatively recent creation date that often signals malicious intent. VirusTotal analysis shows that 15 out of 95 security vendors flag this domain as malicious, and it also appears on one security blocklist. The site resolves to IP address 104.21.61.190 and currently lacks an SSL certificate, further indicating its fraudulent nature. Although the domain is now offline, the infrastructure behind it may still be active, and similar domains could appear under different names.

PhishDestroy strongly advises users who may have visited t-mobile.clgbx.cc to take immediate action. If any credentials were entered, change passwords for the affected accounts and enable two-factor authentication. If a cryptocurrency wallet was connected, revoke permissions immediately and transfer funds to a new wallet. Run a full security scan on your device to check for any malware or unauthorized access. Always verify website URLs carefully, especially when dealing with sensitive platforms like X.com, and use trusted sources like PhishDestroy to check domain safety before engaging. Staying vigilant against brand impersonation and crypto drainer threats is essential in today's digital landscape.