t-mobile[.]yqjvan[.]top

The domain t-mobile.yqjvan.top, designed to mimic T-Mobile, was detected by PhishDestroy on May 21, 2026. Despite being offline now, it has already been flagged as malicious by 9 out of 95 vendors on VirusTotal. The site, hosted by Cloudflare in Canada, was registered through NameSilo, LLC. Its page title, "Welcome to OpenResty!", suggests a default server page, possibly indicating a hastily set up phishing operation.

This domain was created on May 19, 2026, and quickly identified by PhishDestroy, highlighting the efficiency of our detection pipeline. The platform risk score of 63/100 reflects a moderate threat level, likely due to the brand imitation and the potential for data theft. The absence of an SSL certificate further underscores its illegitimacy, as legitimate sites typically use SSL to secure user data.

T-mobile.yqjvan.top's presence on a public blocklist and its rapid detection demonstrate the importance of early identification in mitigating phishing threats. Although the site is currently offline, its initial activity underscores the ongoing risks posed by phishing domains that exploit brand names to deceive users. The swift takedown of such sites is crucial in preventing potential data breaches and protecting users from scams.