t-mobile[.]pkwnyz[.]top

The domain t-mobile.pkwnyz.top is identified as a high-risk generic phishing domain and is currently active. While it does not directly impersonate a specific brand, it may be used to deceive users into divulging sensitive information. This domain poses a significant threat to online security and should be handled with caution.

Analysis indicates that t-mobile.pkwnyz.top is flagged by 24 of 95 VirusTotal vendors, suggesting a moderate level of consensus among security researchers regarding its malicious nature. The domain is registered through NameSilo, LLC, and resolves to the IP address 188.114.96.3, which is located in the United States and is associated with AS13335 Cloudflare, Inc. The domain was created on May 29, 2026, and appears on one security blocklist. Google Safe Browsing has also flagged this domain as phishing, further corroborating its threat status. The page title 'Welcome to OpenResty!' suggests that the domain may be using a web server framework to host its phishing content, but this does not necessarily indicate a legitimate use.

Currently, t-mobile.pkwnyz.top remains active and poses a high risk to users. It is recommended that network administrators block this domain at the DNS or firewall level to prevent access. Users should be educated to recognize and avoid phishing attempts, especially those that appear to come from reputable sources. Security teams should monitor for any related infrastructure and take appropriate actions to mitigate potential threats.