t-mobile[.]lgrdzk[.]top

PhishDestroy has analyzed the domain t-mobile.lgrdzk.top, which is a credential theft phishing site designed to impersonate the T-Mobile brand. The domain is currently offline, indicating it may have been taken down or is no longer actively serving malicious content. However, users should remain vigilant as similar domains may appear. This site was created specifically to steal login credentials from unsuspecting T-Mobile customers by mimicking the legitimate T-Mobile login page.

Further investigation reveals that this domain was flagged by 10 out of 95 VirusTotal security vendors, confirming its malicious nature. It was registered through NameSilo, LLC and created on May 18, 2026. The domain resolves to IP address 188.114.96.3 and appears on 1 security blocklist. The page title was found to be 'Welcome to OpenResty!', which is a common placeholder or default page, suggesting the phishing content may have been removed or the domain was never fully set up. No SSL certificate was detected, which is a red flag for any legitimate login page.

Given that the domain is now offline, the immediate risk is reduced, but users should still avoid any interactions with this domain or similar suspicious URLs. T-Mobile customers are advised to only access their accounts through the official T-Mobile website or app. For those who may have already entered credentials on this or similar phishing sites, it is recommended to change passwords immediately and enable two-factor authentication on their accounts. Monitoring account activity for unauthorized access is also prudent.