t-mobile[.]axpzl[.]top

This domain, t-mobile.axpzl.top, is actively impersonating T-Mobile through a fraudulent login portal designed to harvest user credentials. Analysis indicates the site presents a fake authentication interface mimicking the legitimate mobile carrier’s branding, targeting customers attempting to access their accounts. The phishing page is hosted on infrastructure that displays a default OpenResty welcome page, suggesting either misconfigured or intentionally obscured backend services, a common tactic to evade detection while maintaining operational phishing endpoints. Infrastructure analysis reveals multiple high-confidence indicators of malicious activity. The domain was registered on May 29, 2026, through NameSilo, LLC, with an anomalous future creation date likely intended to evade automated detection systems. It resolves to the IP address 188.114.97.3, part of AS13335 (Cloudflare, Inc.), a network frequently abused for phishing due to its content delivery and obfuscation capabilities. The domain is flagged by 11 out of 95 security vendors on VirusTotal, appears on one security blocklist, and is explicitly labeled as phishing by Google Safe Browsing. Additionally, the absence of an SSL certificate further undermines the site’s legitimacy, as modern phishing campaigns typically employ encryption to appear credible. Users who have visited t-mobile.axpzl.top or entered credentials on the site should immediately take corrective action. Any exposed login details must be changed across all platforms where the same credentials were reused, as attackers often exploit credential stuffing to compromise additional accounts. Affected individuals should enable multi-factor authentication on critical services to mitigate unauthorized access. System scans using updated security tools are recommended to detect potential malware or browser-based exploits delivered through the phishing site. Network administrators should block the domain and its resolving IP (188.114.97.3) at the perimeter to prevent further exposure within organizational environments.