t-mobile[.]amlqih[.]top

PhishDestroy identifies t-mobile.amlqih.top as an active generic phishing campaign impersonating T-Mobile, likely hosting a crypto drainer kit designed to siphon cryptocurrency assets from unsuspecting victims. The domain mimics T-Mobile’s branding to deceive users into entering credentials or connecting wallets, a tactic commonly used to harvest private keys or initiate unauthorized transactions. The threat actor leverages a spoofed login interface or malicious wallet connection prompt to trick users into authorizing crypto transfers. No specific drainer kit signature has been publicly documented, but the domain’s behavior aligns with known crypto-draining operations targeting mobile service customers.

Technical indicators confirm this domain as a high-risk threat vector. The domain was created on May 13, 2026, and resolves to IP address 188.114.96.3, hosted on infrastructure associated with malicious activity. This domain has been flagged by 9 out of 95 VirusTotal security vendors, indicating elevated detection but incomplete coverage. It was registered through NameSilo, LLC, a registrar commonly abused by fraudulent actors, and secured with a Let’s Encrypt SSL certificate to appear legitimate. The domain is not currently flagged on Google Safe Browsing (GSB) and has not been widely blocklisted, leaving open exposure to end users. The overall footprint is consistent with opportunistic phishing operations.

As of this assessment, the campaign remains active and poses an elevated risk to users who may access the domain. PhishDestroy recommends immediate blocking of the domain (t-mobile.amlqih.top) and IP (188.114.96.3) at the network and DNS levels. Users should avoid clicking links to this domain and verify any T-Mobile-related communications through official channels. The remaining risk is elevated due to the domain’s recent creation, partial detection coverage, and lack of global blocklisting. Continued monitoring and proactive takedown requests are advised to mitigate further victimization.