buy[.]vtumobile[.]top

The domain buy.vtumobile.top was identified as a generic phishing site posing an elevated risk for credential theft. It did not impersonate a specific brand or deploy a known crypto drainer kit. As of the latest verification, buy.vtumobile.top has been taken offline, though prior activity classified it as a phishing scam targeting users with fraudulent login or payment pages.

Technical indicators confirm the domain buy.vtumobile.top was flagged by 2 of 95 VirusTotal security vendors, including Gridinsoft and Webroot, while Google Safe Browsing did not detect it. The domain appeared on 1 security blocklist (PhishDestroy) and resolved to the IP address 163.61.188.2, hosted in the US under AS153568 NEW DHAKA HARDWARE. Its SSL certificate was issued by R13, and the observed page title read 'Vtumobile | We offer instant recharge of Airtime, Databundle, CableTV (DStv, GOtv & Startimes), Electricity Bill Payment and more'. The domain was created on February 21, 2026, though registrar details were not available. Gridinsoft assigned it a trust score of 0/100.

Users who interacted with buy.vtumobile.top should immediately change any credentials entered on the site, particularly if reused across platforms. Enable two-factor authentication (2FA) on all accounts as an additional safeguard. Monitor financial statements and transaction histories for unauthorized activity. Report the phishing domain to local cybersecurity authorities, Google Safe Browsing, or platforms like PhishTank to assist in broader mitigation efforts.