t-mobile[.]sekaqo[.]top

PhishDestroy identifies t-mobile.sekaqo.top as a confirmed generic phishing domain that was actively impersonating the T-Mobile brand to deceive visitors into divulging sensitive information. This threat operates under the guise of a legitimate T-Mobile service, using a deceptive subdomain and a generic OpenResty welcome page as a placeholder. Such domains commonly serve credential harvesting forms or redirect users to malicious sites designed to steal login details, financial data, or personal identification.

Technical analysis reveals clear red flags. VirusTotal data shows that 14 out of 95 security vendors flag this domain as malicious, a significant detection rate that underscores its dangerous nature. The domain was registered through NameSilo, LLC on May 19, 2026, a relatively recent creation date that is typical for phishing campaigns. It resolves to IP address 188.114.97.3 and employs a Let's Encrypt SSL certificate (E8), which gives a false sense of security to unsuspecting visitors. Furthermore, the domain appears on at least one security blocklist, confirming its involvement in malicious activity. The site is currently offline, but its brief lifespan was enough to pose a serious risk.

If any user has visited t-mobile.sekaqo.top or entered any personal information, they should immediately change their T-Mobile account credentials and any other accounts that share the same password. It is also advisable to enable two-factor authentication on all sensitive accounts and monitor financial statements for unauthorized transactions. Running a full security scan with updated antivirus software can help detect any malware that may have been downloaded. PhishDestroy strongly recommends avoiding any interaction with this domain and reporting it to T-Mobile's fraud team for further action.