t-mobile[.]yhrgk[.]cc

This domain, t-mobile.yhrgk.cc, impersonates the T-Mobile brand, likely to conduct phishing or credential theft by presenting a fraudulent login or account management page. The threat involves deceiving users into submitting sensitive information, such as usernames and passwords, under the guise of a legitimate T-Mobile service.

Technical analysis reveals 16 out of 95 VirusTotal vendors flagged this domain as malicious, with detections from ADMINUSLabs, BitDefender, Cluster25, CRDF, and CyRadar. It is listed on one blocklist. The domain resolves to IP address 188.114.97.3, located in the United States and hosted by AS13335 Cloudflare, Inc. It was created on 2026-02-21 and uses an SSL certificate identified as WE1.

The domain is currently offline, reducing immediate risk, but its risk score of 73 indicates a high potential for harm if reactivated. Users should avoid any interaction with this domain and report it to relevant security teams.