t-mobile[.]com-dhioc[.]cc

The domain t-mobile.com-dhioc.cc was registered on February 21, 2026 and is currently listed as offline. Threat intelligence indicates that the site was designed to impersonate the T‑Mobile brand, as reflected in the page title "t-mobile.com-dhioc.cc" and the classification of the campaign as a brand impersonation. Scamadviser assigned a trust score of 1 out of 100, while Gridinsoft gave a score of 0 out of 100, both of which denote a high likelihood of malicious intent.

VirusTotal analysis recorded 16 positive detections out of 93 scanned security vendors, confirming that multiple anti‑malware engines flagged the domain as suspicious. The domain is listed on a single security blocklist and has been actively blocked by the PhishDestroy service, indicating that at least one reputable phishing mitigation platform has taken action against it. No public information is available regarding the registrar, hosting provider, IP address, ASN, or SSL certificate for the domain, and the HTTP response details have not been disclosed.

Defenders should continue to enforce domain‑based blocking rules for t-mobile.com-dhioc.cc across perimeter and endpoint security solutions, monitor for any resurgence of the domain or closely similar variants, and incorporate the observed detection counts and trust scores into automated threat‑scoring models. Because the site is currently offline, immediate remediation is limited to preventive controls, but ongoing vigilance is advised to detect potential re‑use of the same infrastructure or naming patterns in future campaigns.