t-mobile[.]wzfhgq[.]top

The domain t-mobile.wzfhgq.top, designed to impersonate T-Mobile, has been flagged by 18 out of 95 vendors on VirusTotal. Although the site is currently offline, it was previously hosted in the United States under Cloudflare's infrastructure. The domain was registered through NameSilo, LLC, and used a Let's Encrypt SSL certificate.

Despite its current offline status, the domain's malicious intent is evident from its VirusTotal detection count and its inclusion in PhishDestroy's blocklist. Google Safe Browsing also flagged the domain, reinforcing its threat profile. The platform risk score of 83 out of 100 further underscores the potential danger it posed when active.

Phishing domains like t-mobile.wzfhgq.top exploit brand recognition to deceive users. The domain's use of a legitimate-sounding name and a reputable SSL issuer like Let's Encrypt suggests a sophisticated attempt to gain user trust. The rapid detection by multiple security vendors highlights the importance of early threat identification and response to mitigate potential damage.