t-mobile[.]icjsom[.]top

This domain, t-mobile.icjsom.top, is a credential harvesting phishing site designed to impersonate a legitimate telecommunications provider. The site prompts visitors to enter sensitive login credentials, which are then captured by threat actors for unauthorized account access, financial fraud, or identity theft. Analysis indicates the site specifically targets users expecting to interact with mobile service portals, increasing the likelihood of successful deception through brand impersonation. Infrastructure analysis reveals multiple technical indicators confirming malicious intent. The domain was registered on June 1, 2026, through NameSilo, LLC, and is flagged by 16 out of 95 security vendors on VirusTotal. It resolves to the IP address 188.114.96.3 and employs Cloudflare services, including Browser Insights and HTTP/3, to obscure its origin and evade detection. The domain appears on one security blocklist and has a trust score of 0/100, further validating its classification as a phishing threat. If you visited t-mobile.icjsom.top or entered any credentials, take immediate action to secure your accounts. First, change the passwords for any accounts accessed through the site, prioritizing email and financial services. Enable multi-factor authentication where available to add an additional layer of security. Monitor your accounts for unauthorized transactions or suspicious activity and report any anomalies to your service provider. If personal or financial information was submitted, consider placing a fraud alert on your credit reports to prevent identity theft.