1775tt[.]com

This domain, 1775tt.com, is identified as a credential harvesting phishing site designed to deceive users into disclosing sensitive login credentials, financial information, or personal data. Analysis indicates the domain employs social engineering tactics, likely through fake login portals or fraudulent notifications, to trick victims into entering confidential details. The infrastructure and page title suggest a focus on impersonating legitimate services or platforms to enhance credibility. Infrastructure analysis reveals the domain was registered through GoDaddy.com, LLC on October 10, 2017, indicating a long-standing presence. It resolves to the IP address 103.143.28.212, located in Hong Kong under AS135581 (ONL-HK). The domain is flagged by 21 out of 95 security vendors on VirusTotal, and it appears on one security blocklist. The SSL certificate, issued to Default Company Ltd, further suggests a lack of legitimate business validation, a common trait in phishing operations. Users who visited 1775tt.com should immediately revoke any credentials entered on the site and monitor associated accounts for unauthorized activity. It is recommended to scan local devices for malware or unwanted applications, as phishing sites may deploy additional payloads. Network administrators should block the domain and its resolving IP (103.143.28.212) at the perimeter to prevent further exposure. If financial data was submitted, contact relevant institutions to report potential fraud and initiate protective measures.