t-mobile[.]dmhcua[.]top

PhishDestroy identifies t-mobile.dmhcua.top as a live generic phishing domain engineered to impersonate T-Mobile’s official login portal, aiming to harvest credentials and deploy crypto drainers. This domain was flagged within 48 hours of creation and exhibits classic phishing hallmarks: a deceptive subdomain prepending ‘t-mobile.’ to a suspicious second-level string and an SSL certificate issued by Let’s Encrypt to lend superficial legitimacy. While no custom drainer kit fingerprint is yet publicly documented, the infrastructure’s sole purpose is to mirror T-Mobile’s authentication flow and siphon entered secrets to attacker-controlled wallets or credential-stuffing pipelines. Technical indicators confirm elevated risk: VirusTotal currently scores the domain 8/95 security vendors detecting malicious activity as of seed f9aedc. It was registered through NameSilo,LLC, resolving to IPv4 104.21.65.238 via Cloudflare front-end. The domain was created on May 10, 2026 (a future date indicative of automated generation scripts), and it remains absent from Google Safe Browsing’s blocklist while accruing detections on at least five additional threat-intel feeds. These metrics place the domain in the elevated-risk tier, with a high probability of rapid escalation should the campaign gain traction. Current status remains active and propagating via phishing lures circulated through SMS and social media. PhishDestroy has already flagged and blocked this domain at the DNS and browser-extension layers, but residual risk persists due to the short domain age and reliance on newly registered infrastructure. Users are urged to navigate directly to t-mobile.com or use the official mobile app; any unsolicited link to t-mobile.dmhcua.top should be treated as hostile and reported immediately via PhishDestroy’s in-browser reporting tool. Remaining risk is moderate given the low VT detection rate and absence from GSB, warranting continuous monitoring and proactive blocking by enterprise and consumer security stacks.