# t-mobile.qozau.cc — MALICIOUS

> Discover why t-mobile.qozau.cc is flagged as a high-risk phishing site. Stay informed to protect your data from this active threat.

## Summary
PhishDestroy identifies t-mobile.qozau.cc as a high-risk generic phishing domain targeting users by impersonating trusted brands. This threat is critical because it aims to steal sensitive personal and financial information.

The domain was created recently on January 28, 2026, and is currently active. It resolves to IP 172.67.195.206 and is registered through Gname.com Pte. Ltd. Despite showing a generic 'Welcome to nginx!' page, it is flagged on a security blocklist and reported by multiple security vendors, indicating malicious intent.

Users should avoid interacting with this domain and never provide personal details on sites with suspicious URLs. Employ updated antivirus tools and enable phishing protection in browsers. If you encounter this domain, report it to your security provider and consider blocking it to prevent exposure.

## Threat Details
- Verdict: MALICIOUS
- Site status: alive (HTTP 530)
- Page title: Welcome to nginx!

## Domain Intelligence
- Registered: 2026-01-28 07:02:50
- Registrar: Gname.com Pte. Ltd.
- Country: SG
- IP: 172.67.195.206
- Nameservers: ["A.SHARE-DNS.COM", "B.SHARE-DNS.NET"]
- SSL Issuer: WE1

## Detection Status
- VirusTotal: 15 vendors flagged
  Vendors: ["ADMINUSLabs", "alphaMountain.ai", "Chong Lua Dao", "Cluster25", "CRDF", "CyRadar", "Forcepoint ThreatSeeker", "Fortinet", "Gridinsoft", "Lionic", "Seclookup", "SOCRadar", "Sophos", "VIPRE", "Webroot"]
- Google Safe Browsing: clean
- Blocklists: 1 hits
  Lists: ["PhishDestroy"]

## Evidence
- Screenshot: https://urlscan.io/screenshots/019c0436-2a9c-765b-8ba2-d8bdc8e29a4b.png
- PhishDestroy: https://phishdestroy.io/domain/t-mobile.qozau.cc/
- LLM endpoint: https://phishdestroy.io/domain/t-mobile.qozau.cc/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/t-mobile.qozau.cc/
Last updated: 2026-03-19