t-mobile[.]ojsum[.]icu

The domain t-mobile.ojsum.icu poses a high-risk brand impersonation threat, specifically targeting the brand x.com. This domain is designed to deceive users into believing they are interacting with legitimate x.com services, potentially leading to the compromise of sensitive information such as login credentials, personal data, and financial details. Users who visit this domain may be exposed to phishing attacks that can result in identity theft, financial loss, and further malicious activities.

Analysis indicates that t-mobile.ojsum.icu was registered on December 06, 2025, through Gname.com Pte. Ltd. The domain currently resolves to the IP address 172.67.178.204, which is located in the United States and is part of AS13335 Cloudflare, Inc. infrastructure. Despite the lack of an SSL certificate, the domain has been flagged by 16 out of 95 security vendors on VirusTotal, indicating a significant level of suspicion. Additionally, the domain appears on one security blocklist, further confirming its malicious nature. The page title 'Welcome to nginx!' suggests that the domain may be using a default server configuration or is in the process of being set up for more sophisticated attacks.

Users who have visited t-mobile.ojsum.icu are advised to take immediate action to protect their personal and financial information. They should change any passwords that may have been entered on the site, monitor their accounts for any unauthorized activity, and report the incident to their respective service providers. It is also recommended to run a full system scan using updated antivirus software to detect and remove any potential malware. To avoid similar threats in the future, users should verify the legitimacy of URLs and domain names before entering any sensitive information online.