t-mobile[.]com-ofd[.]icu

This domain, t-mobile.com-ofd.icu, is a malicious impersonation site. Its page title, "Welcome to nginx!", suggests a default web server configuration. The site is categorized as an impersonation scam targeting the brand x.com. The threat posed is phishing or credential theft, as the site likely presents a fraudulent login page to harvest user credentials for the impersonated service.

Technical evidence confirms the site's malicious nature. VirusTotal detected it as malicious by 10 out of 95 vendors. It is flagged by multiple security vendors including Chong Lua Dao, Cluster25, CRDF, CyRadar, and ESET. The domain is registered with NameMart Pte. Ltd., was created on 2026-02-21, and resolves to IP address 188.114.97.3 in the United States, hosted by AS13335 Cloudflare, Inc. The domain has no SSL certificate, increasing the risk of data interception. Its nameservers are art.ns.cloudflare.com and grannbo.ns.cloudflare.com.

The site is currently down or offline. Despite its inactive status, the risk level is high. The GridinSoft trust score is 0 out of 100, and the DOM risk score is 10, indicating a confirmed malicious domain. The presence on one blocklist and multiple vendor flags underscores the persistent threat, even while offline.