t-mobile[.]hztkv[.]cc

The domain t-mobile.hztkv.cc was identified as a phishing site impersonating T-Mobile. With a VirusTotal score of 19/95, it represents a significant risk for phishing attempts aimed at stealing user credentials. The page title, 'Welcome to nginx!', suggests it was a server default page, indicating a lack of legitimate content, further raising suspicion about its purpose.

Registered just three days ago with Gname.com Pte. Ltd. in the US, this domain used the IP address 104.21.3.20. Its very recent registration and presence on one blocklist indicate it was likely set up for malicious intent. The minimal age of the domain suggests that the actors behind it quickly attempted to exploit unsuspecting users, although its status is now marked as dead.

PhishDestroy has actively reported this domain, leading to its removal from service. We continue to monitor the space for similar threats to protect potential targets from impersonation scams.