t-mobile[.]lgioe[.]cc

On July 23, 2026, the domain t-mobile.lgioe.cc was identified as a brand impersonation phishing domain targeting x.com. The domain was registered on February 21, 2026, and has been flagged by 12 out of 93 security vendors on VirusTotal, indicating a significant level of suspicion. The domain is currently offline and has been blocked by PhishDestroy.

Analysis indicates that the domain resolves to the IP address 172.67.219.22, which is located in the United States and is part of the AS13335 Cloudflare, Inc. network. The SSL certificate used is WE1, which may be a self-signed or untrusted certificate. The page title for the domain is 'Welcome to nginx!', suggesting that the server is running the Nginx web server software, although the exact content of the page has not been analyzed.

Trust scores from ScamAdviser and Gridinsoft are extremely low at 1/100 and 0/100, respectively, further confirming the domain's suspicious nature. Given the elevated risk level and the domain's impersonation of x.com, security defenders should remain vigilant and ensure that this domain is blocked in their network security systems to prevent potential user exposure to phishing attacks.