t-mobile[.]dvnie[.]cc

This site, t-mobile.dvnie.cc, is a fraudulent domain designed to impersonate the T-Mobile brand. The domain name incorporates the trademark "t-mobile" to deceive visitors into believing it is an official T-Mobile site. The threat posed is phishing or credential harvesting, where users may be tricked into entering personal or account information under the false pretense of a legitimate T-Mobile service.

Technical evidence shows that VirusTotal detected 12 out of 95 vendors flagged this domain as malicious, including ADMINUSLabs, Cluster25, CRDF, CyRadar, and Forcepoint ThreatSeeker. The domain is listed on 1 blocklist. The IP address 188.114.97.3 is hosted in the United States by AS13335 Cloudflare, Inc. The domain was created on 2026-02-21, and its SSL certificate is WE1.

The domain is currently offline or down, mitigating immediate risk. However, the DOM risk score of 73 indicates a high likelihood of malicious intent. Users should avoid any interaction with this domain, and it should be blocked at the network level to prevent future access if it becomes active again.