t-mobile[.]cvrdj[.]icu

This report analyzes the domain t-mobile.cvrdj.icu, which was identified as an impersonation scam targeting the brand x.com. The site presented a page title of "Welcome to nginx!", indicating a default web server configuration, and was categorized as an impersonation threat. The primary risk is that the domain was designed to deceive users by mimicking a legitimate brand, potentially for credential theft or phishing.

Technical analysis reveals that the domain was flagged by 8 out of 95 VirusTotal vendors, with detections from CyRadar, ESET, Fortinet, Gridinsoft, and SOCRadar. It is listed on 1 blocklist. The domain was created on 2026-02-21 and is hosted on IP address 104.21.12.156, located in the United States, under AS13335 Cloudflare, Inc. The SSL certificate type is WE1.

The domain is currently DOWN/OFFLINE, indicating it is no longer accessible. Risk assessments from GridinSoft and ScamAdviser provide trust scores of 0/100 and 1/100, respectively, with a DOM risk score of 78. Based on the provided data, this domain poses a high risk due to its impersonation nature and low trust scores, though its offline status mitigates immediate threat.