t-mobile[.]rplahx[.]top

The domain t-mobile.rplahx.top is assessed as having an elevated risk level and is categorized as a generic_phishing threat. Analysis indicates that the domain was likely used to conduct phishing attacks, aiming to deceive users into providing sensitive information.

Infrastructure analysis reveals that t-mobile.rplahx.top resolves to the IP address 188.114.97.3 and was registered through NameSilo, LLC. The domain was created on May 19, 2026, and currently has a Gridinsoft trust score of 0/100, indicating a complete lack of trustworthiness. VirusTotal reports that 15 out of 95 security vendors flag this domain as malicious. The domain appears on one security blocklist and is blocked by PhishDestroy. The page title 'Welcome to OpenResty!' suggests that the domain may have been using a web server or framework associated with OpenResty, which could have been a front for malicious activities. Technologies detected on the domain include Cloudflare Browser Insights and Cloudflare, with support for HTTP/3, indicating the use of advanced infrastructure to enhance the credibility of the phishing site.

To mitigate the risks associated with t-mobile.rplahx.top, users should avoid clicking on any links or entering personal information on any page related to this domain. Network administrators should implement DNS-based blocking to prevent access to the domain within their networks. Additionally, security awareness training should be reinforced to help users recognize and report phishing attempts, and multi-factor authentication (MFA) should be enabled on all critical accounts to reduce the likelihood of unauthorized access.