t-mobile[.]zhryi[.]cc

This report analyzes the domain t-mobile.zhryi.cc, which is identified as a malicious or fraudulent site. The domain name incorporates the "T-Mobile" brand, indicating an impersonation of the legitimate telecommunications company. Such sites typically pose a phishing threat, attempting to steal user credentials, personal information, or financial data by mimicking a trusted brand's login or account management interface.

Technical evidence shows the domain was flagged by 17 out of 95 VirusTotal vendors, with specific detections from ADMINUSLabs, BitDefender, Cluster25, CRDF, and CyRadar. It is listed on 1 blocklist. The domain was created on 2026-02-21 and resolves to IP address 104.21.34.15, located in the United States and hosted by AS13335 Cloudflare, Inc. The SSL certificate is WE1.

As of the last check, the domain is DOWN/OFFLINE, indicating it is no longer accessible. The DOM risk score is 73, reflecting a high-risk classification. Based on the evidence, this site posed a significant threat through brand impersonation and likely phishing activity, though it is currently inactive.