tuvimsa[.]com[.]mx

On July 28 2026 the domain tuvimsa.com.mx was identified as part of a generic phishing campaign. The domain is currently active and returns an HTTP 301 status code, indicating a permanent redirect. VirusTotal records show that the domain has been scanned by 91 security vendors; none of the scanners have raised a detection at the time of analysis. A single security blocklist includes the domain, and the PhishDestroy service reports it as blocked.

The presence on a blocklist and the redirect response demonstrate that the domain is being monitored by at least one anti‑phishing platform, yet the lack of detections from the majority of AV engines does not confirm benign intent. No public information on the registrar, hosting ASN, IP address, SSL certificate, or page title has been disclosed, leaving the underlying infrastructure opaque. Consequently, the exact hosting location, certificate validity, and potential target brand remain uncertain.

Defenders should ingest the domain into corporate URL filtering solutions, enforce blocklist rules, and consider network‑level blocking of the associated IP once it becomes observable. Continuous re‑scanning with VirusTotal and other multi‑engine services is advised to capture any future changes in detection status. Monitoring for the appearance of the domain in additional blocklists or threat‑intel feeds will help maintain situational awareness while the investigation proceeds.