t-mobile[.]oxpfkc[.]top

PhishDestroy identifies t-mobile.oxpfkc.top as a high-risk credential theft site, specifically designed to impersonate T-Mobile and steal login credentials from unsuspecting visitors. This domain is part of a broader phishing campaign that exploits brand trust to harvest sensitive information, making it a significant threat to consumers.

The domain was created on May 30, 2026, through NameSilo,LLC, and resolves to IP address 104.21.96.74. VirusTotal reports that 18 out of 95 security vendors flag this domain as malicious, and it appears on one security blocklist. Google Safe Browsing also flags it for phishing. The page title displayed is 'Welcome to OpenResty!', a common placeholder that indicates the site is likely a phishing page rather than a legitimate service. No SSL certificate was detected, further confirming its fraudulent nature.

Users who have interacted with this site should immediately change their T-Mobile account passwords and enable two-factor authentication. It is also advisable to monitor financial accounts for any unauthorized activity and report the incident to T-Mobile's security team. To avoid such threats, always verify URLs before entering credentials and use a reputable password manager that can detect phishing sites.