t-mobile[.]gnzcf[.]icu

The domain t-mobile.gnzcf.icu impersonated T-Mobile, posing a risk of credential theft. It received a notably high VirusTotal score of 14/95, indicating significant malicious activity. The domain was flagged as suspicious and aimed to deceive users into providing sensitive information related to their T-Mobile accounts.

Registered with Gname.com Pte. Ltd., this domain was only 81 days old at the time of its takedown. It was hosted on the IP address 172.67.178.134 and was listed on two blocklists, reinforcing its malicious intent. The relatively short lifespan and existing blocklist entries suggest this domain was created for quick exploitation.

Currently, the domain status is dead following proactive measures taken by PhishDestroy. The team reported this phishing attempt and monitored the infrastructure to ensure further malicious activities were curtailed. This domain is no longer active, helping to protect potential targets from its deceptive practices.