t-mobile[.]qzfry[.]cc

PhishDestroy has identified t-mobile.qzfry.cc as a high-risk brand impersonation threat, specifically targeting x.com. This domain is actively being used for phishing and brand abuse, posing significant risk to users who may mistake it for a legitimate x.com service.

Technical analysis reveals that VirusTotal flagged this domain with 18 out of 95 security vendors marking it as malicious. It was registered through Dominet (HK) Limited on February 21, 2026, and resolves to IP address 8.219.239.111. The domain lacks an SSL certificate, which is a major red flag for any website handling user credentials. It currently appears on one security blocklist and remains active. The page title is the generic "Welcome to nginx!" which is often used as a placeholder for phishing pages.

Users are advised to avoid visiting this domain under any circumstances. Organizations should block the domain at the network level and add it to their threat intelligence feeds. Those who may have interacted with this site should change their passwords immediately and monitor for suspicious activity. PhishDestroy recommends reporting the domain to hosting providers and domain registrars for takedown, as well as implementing DMARC and brand monitoring to prevent future impersonation attempts.