t-mobile[.]gafwrj[.]top

This domain, t-mobile.gafwrj.top, poses a high-risk phishing threat designed to harvest T-Mobile customer login credentials. Attackers use deceptive pages mimicking legitimate T-Mobile portals to trick users into entering usernames, passwords, and potentially other sensitive information such as account numbers or payment details. The site may also distribute malware or redirect victims to additional fraudulent pages to further compromise personal or financial data. Given the domain’s active status and lack of SSL encryption, any interaction with this site should be treated as a security incident. Analysis indicates this domain was registered on May 29, 2026, through NameSilo, LLC, a registrar frequently exploited for phishing infrastructure due to its low-cost and anonymous registration options. As of the latest scan, 11 out of 95 security vendors on VirusTotal have flagged the domain as malicious, with Google Safe Browsing explicitly labeling it as phishing. The domain resolves to IP address 172.67.156.75, hosted on Cloudflare’s network (AS13335), which is commonly used to obfuscate the true origin of phishing sites. The page title, 'Welcome to OpenResty!', suggests the use of a default or misconfigured web server, a tactic often employed to quickly deploy phishing pages without customization. If a user has visited t-mobile.gafwrj.top or entered credentials on this site, immediate action is required. First, change the password for the affected T-Mobile account and enable multi-factor authentication if not already active. Monitor the account for unauthorized transactions, changes to contact information, or suspicious login attempts. Scan the device used to access the site with updated security software to detect potential malware infections. If financial information was entered, contact the relevant institution to report the incident and request fraud monitoring. Finally, report the domain to local cybersecurity authorities or the brand’s official fraud reporting channels to assist in takedown efforts.