t-mobile[.]thkeu[.]cc

The domain t-mobile.thkeu.cc has been identified as a confirmed phishing site specifically impersonating X.com, a major social media platform. This malicious domain is currently offline, having been taken down after security researchers flagged it as a brand impersonation threat. The site was designed to deceive users into believing they were accessing legitimate X.com services, likely to steal login credentials or deploy crypto drainers.

Technical analysis reveals several alarming indicators. The domain was registered on February 21, 2026, through Gname.com Pte. Ltd., a registrar often associated with suspicious domains. It resolves to IP address 188.114.97.3 and lacks an SSL certificate, further undermining its legitimacy. VirusTotal analysis shows that 14 out of 95 security vendors flagged this domain as malicious, and it appears on at least one security blocklist. The page title, "Welcome to nginx!", is a generic default that raises further suspicion.

Given its elevated risk level and confirmed impersonation of X.com, users must remain vigilant. PhishDestroy recommends avoiding any interaction with this domain or similar variants. Always verify URLs by manually typing the official website address into your browser rather than clicking links from emails or messages. If you have already visited t-mobile.thkeu.cc, change your X.com password immediately and enable two-factor authentication to protect your account from compromise.