t-mobile[.]dlzkr[.]cc

This domain, t-mobile.dlzkr.cc, poses a significant threat by impersonating T-Mobile to lure users into providing sensitive information such as login credentials, personal data, and financial details. The site is designed to mimic legitimate T-Mobile pages, making it difficult for users to distinguish between the real and fake sites.

Analysis indicates that t-mobile.dlzkr.cc has been flagged by 18 out of 95 security vendors on VirusTotal, which is a notable proportion and suggests a high level of suspicion. The domain was created on February 21, 2026, and is currently taken offline. The domain uses an SSL certificate issued by WE1, which is not a strong indicator of legitimacy. Infrastructure analysis reveals that the domain resolves to the IP address 2606:4700:3030::6815:48b3, located in the United States and associated with Cloudflare, Inc. (AS13335).

If a user has visited t-mobile.dlzkr.cc, they should immediately check their T-Mobile account for any unauthorized activity. It is recommended to change passwords and enable two-factor authentication (2FA) on all relevant accounts. Users should also monitor their financial statements for any suspicious transactions. Reporting the incident to T-Mobile's customer support and the relevant cybersecurity authorities is advised to ensure further protection and to help prevent the spread of this threat.