tcom-global[.]xyz

PhishDestroy has identified tcom-global.xyz as a generic phishing threat impersonating a telecommunications brand, likely T-Mobile given the domain name. The site was designed to trick users into revealing login credentials or personal information, though no specific crypto drainer kit was detected. This domain was created on February 21, 2026, and exhibits clear signs of malicious intent.

Technical analysis reveals that VirusTotal flagged the domain with 2 out of 95 security vendors marking it as malicious, and it appears on two security blocklists. The registrar and IP address associated with the domain have not been disclosed in public reports, but Google Safe Browsing may have also flagged it prior to takedown. The elevated risk level is based on the combination of low but notable vendor detection and the domain's recent creation date, which is typical for phishing campaigns.

As of the latest check, tcom-global.xyz has been taken offline, likely due to action by the hosting provider or registrar following abuse reports. While the immediate threat is neutralized, users who may have previously visited the site should change any passwords used and monitor accounts for suspicious activity. PhishDestroy recommends always verifying URLs by typing the official brand's address directly into the browser and using a password manager to avoid entering credentials on lookalike domains. Remaining risk is low as the site is offline, but similar domains may appear in the future.