t-mobile[.]lxykjb[.]top
“Welcome to OpenResty!”
t-mobile.lxykjb.top — सामग्री अनुपलब्ध (HTTP 502). घोटाले का प्रकार: Brand Impersonation. साक्ष्य सारांश: VirusTotal 17/91 (alphaMountain.ai, BitDefender, Chong Lua Dao, Cluster25, CRDF); URLQuery 2 alerts; Google Safe Browsing flagged; Spamhaus DBL_PHISH; PhishDestroy score 95/100. रजिस्ट्रार: NameSilo.
मूल फॉरेंसिक रिकॉर्ड सुरक्षित रखने के लिए नीचे का विस्तृत PhishDestroy AI विश्लेषण अंग्रेज़ी में रखा गया है।
The domain t-mobile.lxykjb.top has been confirmed as a high-risk phishing site specifically designed to impersonate T-Mobile, a major telecommunications provider. Analysis indicates this infrastructure was actively harvesting user credentials through a fraudulent login portal, a tactic consistent with account takeover campaigns. The site is currently offline, though prior activity suggests it was operational for a limited window targeting unsuspecting customers. Infrastructure analysis reveals the domain was registered through NameSilo, LLC, with a creation date of May 28, 2024, indicating recent deployment. The domain resolves to the IP address 188.114.96.3, which is associated with content delivery network infrastructure, a common obfuscation technique to mask hosting origins. Detection metrics show the domain was flagged by 17 of 95 security vendors on VirusTotal, with Google Safe Browsing specifically categorizing it under SOCIAL_ENGINEERING. The page title, 'Welcome to OpenResty!', suggests the use of a reverse proxy or web server software, further aligning with phishing infrastructure patterns. The domain appears on one security blocklist, and additional telemetry confirms the presence of Cloudflare and HTTP/3, likely employed to evade detection and enhance performance. Current status indicates the domain has been taken offline, though the underlying infrastructure may remain dormant for future reuse. Organizations and individuals are advised to treat any prior interaction with this domain as compromised, particularly credentials entered during the active window. Network-level protections should be updated to include the observed IP address (188.114.96.3) and domain in blocklists. Users who may have engaged with this site are strongly recommended to reset passwords for associated accounts, enable multi-factor authentication, and monitor for unauthorized activity. Proactive monitoring of newly registered domains under similar naming conventions (e.g., brand + random subdomains) is advised to preempt future campaigns.
नेटवर्क सुरक्षा इंटेलिजेंस Registrar context
धमकी प्रतिक्रिया पाइपलाइन
सार्वजनिक ब्लॉकलिस्ट स्थिति
सहेजा गया कैप्चर
डोमेन इंटेलिजेंस
तकनीकी विवरणडीएनएस, एसएसएल एसएएन, टाइमस्टैम्प
ICANN OVERSIGHT
Registration: lxykjb.top
प्रत्यायन और आरएए संदर्भ
प्रत्यायन और आरएए संदर्भ
Registrar accreditation and DNS abuse obligations
For the registrable domain lxykjb.top behind this subdomain, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
तकनीकें · 3 identified
Cloudflare Browser Insights is a tool that measures the performance of websites from the perspective of users.
www.cloudflare.com 100% विश्वासCloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.
www.cloudflare.com 100% विश्वासHTTP/3 is the third major version of the Hypertext Transfer Protocol used to exchange information on the World Wide Web.
httpwg.org 100% विश्वासवायरसटोटल विश्लेषण
साइट प्रदर्शन विश्लेषण
Google PageSpeed Insights — mobile performance audit of t-mobile.lxykjb.top · checked Jun 26, 2026
साक्ष्य और बाहरी रिपोर्टें
PD-20260530-71D608 Recipient: abuse@nic.top क्या आप इस साइट से प्रभावित हुए?
यदि आपने खाता क्रेडेंशियल, व्यक्तिगत या भुगतान जानकारी दर्ज की है, या इस डोमेन से कोई फ़ाइल डाउनलोड की है, तो तुरंत कार्रवाई करें। घटना की रिपोर्ट करने और अपनी सुरक्षा करने में आपकी सहायता के लिए नीचे संसाधन दिए गए हैं।
अपने स्थानीय अधिकारियों को रिपोर्ट करें
आधिकारिक साइबर अपराध संपर्क, या एक शिकायत ड्राफ्ट बनाएं → प्राप्त करने के लिए अपना देश चुनें।
किसी भी डोमेन की जाँच करें
संग्रहीत ब्लॉकलिस्ट, WHOIS, DNS और सार्वजनिक स्कैन साक्ष्य का उपयोग करके खतरे का विश्लेषण
अभी स्कैन करेंफ़िशिंग की रिपोर्ट करें
संदिग्ध डोमेन हमारे थ्रेट डेटाबेस में जमा करें — समुदाय की सुरक्षा करें
रिपोर्ट करेंसीधा खतरा फीड
हाल की फ़िशिंग रिपोर्टें और उपलब्धता में परिवर्तन देखे गए
निगरानी करेंजानकारी में रहें, सुरक्षित रहें
लाइव खतरों की निगरानी करें या यदि आपको लगता है कि यह एक गलत सकारात्मक है तो इस लिस्टिंग को चुनौती दें।