t-mobile[.]gltdas[.]top

PhishDestroy identifies t-mobile.gltdas.top as a generic phishing domain that impersonates T-Mobile. This domain is designed to deceive visitors into believing they are accessing a legitimate T-Mobile service, likely to steal login credentials or personal information. No specific drainer kit was identified, but the phishing intent is clear from the impersonation of a major telecom brand.

Technical indicators reveal a high-risk profile. VirusTotal reports 11 out of 95 security vendors flagging this domain as malicious. The domain was registered through NameSilo,LLC and resolves to the IP address 188.114.97.3. It was created on May 28, 2026, and appears on 1 security blocklist. Google Safe Browsing explicitly flags the domain for phishing. The page title is “Welcome to OpenResty!”, which is unusual for a T-Mobile site and suggests the domain may be using a default or placeholder page, or it could be a redirect to a phishing page. Notably, the domain has no SSL certificate, making any data transmitted vulnerable to interception.

As of the current assessment, t-mobile.gltdas.top remains active, posing an ongoing risk to users. Users who encounter this domain should avoid interacting with it entirely and should not enter any personal or financial information. PhishDestroy recommends reporting the domain to relevant authorities and blocking it at the network level. The remaining risk is high, as the domain could still be used in active phishing campaigns targeting T-Mobile customers.