t-mobile[.]hnvyjq[.]top

The domain t-mobile.hnvyjq.top has been identified as a generic phishing threat, specifically designed to impersonate the T-Mobile brand in order to steal sensitive user information. This malicious domain is currently offline, but its recent activity and configuration pose significant risks. The site was registered through NameSilo, LLC, with a creation date of May 28, 2026, and resolves to the IP address 104.21.39.39. It was flagged by 12 out of 95 security vendors on VirusTotal, indicating moderate but credible malicious detection, and Google Safe Browsing also flags it for phishing. The domain appears on one security blocklist, and its SSL certificate is absent, further signaling its fraudulent nature. The page title, "Welcome to OpenResty!," suggests the site may have been hosted on a misconfigured or default web server, adding to its suspicious profile.

Given the high risk level, users who may have encountered this domain are strongly advised to avoid any interaction. Even though the site is now offline, anyone who visited it should change their T-Mobile account passwords immediately and monitor for unauthorized access. PhishDestroy recommends enabling multi-factor authentication on all accounts and reporting any suspicious activity to T-Mobile's security team. Stay vigilant against similar phishing domains that may appear in the future.