t-mobile[.]pbadlu[.]top

The domain t-mobile.pbadlu.top is assessed as a high-risk, generic phishing domain. This domain poses a significant threat to users who may inadvertently provide sensitive information, such as login credentials or financial data, to what appears to be a legitimate T-Mobile website.

Infrastructure analysis reveals that t-mobile.pbadlu.top resolves to the IP address 104.21.3.85, which is located in the United States and is part of the AS13335 Cloudflare, Inc. network. The domain was created on May 07, 2026, and is currently active. It is registered through NameSilo, LLC. VirusTotal has flagged this domain, with 19 out of 95 security vendors identifying it as malicious. Additionally, Google Safe Browsing has marked it as a phishing site, and it appears on one known security blocklist, PhishDestroy. The domain uses a Let's Encrypt SSL certificate, which, while legitimate, does not guarantee the site's safety.

To mitigate the risks associated with this domain, users should avoid clicking on any links or entering personal information on t-mobile.pbadlu.top. Network administrators are advised to implement DNS filtering or web proxies to block access to this domain. Security teams should monitor network traffic for any connections to the IP address 104.21.3.85 and investigate potential compromises. Educating employees and users about the signs of phishing attacks, such as suspicious URLs and unexpected requests for sensitive information, is also crucial in preventing successful phishing attempts.