t-mobile[.]vtuyt[.]cc

This domain t-mobile.vtuyt.cc is assessed as a brand impersonation infrastructure targeting x.com. The site presents a generic nginx landing page, indicating a recently deployed or misconfigured web server likely used as a staging or redirect point. Such infrastructure is commonly used in phishing campaigns to imitate trusted brands and capture user credentials or session tokens through fake login portals or redirection chains.

Technical intelligence strongly supports malicious classification. VirusTotal reports 17/95 security vendors flagging the domain. The domain was created on February 21 2026 and is registered through Dominet (HK) Limited. It resolves to 47.89.252.221 under AS45102 Alibaba (US) Technology Co., Ltd., and currently operates without SSL encryption. The domain is also listed on a security blocklist and has been blocked by PhishDestroy, reinforcing its malicious reputation.

Users who accessed or interacted with this domain should assume credential exposure risk. Immediate actions include changing passwords for any accounts potentially entered, enabling multi-factor authentication, and monitoring for unauthorized access or suspicious login attempts. Browser caches and stored credentials should be cleared if any data was submitted. Network administrators should block the domain and IP at perimeter controls and review logs for repeated connections to 47.89.252.221. Continued monitoring is advised due to potential reactivation or domain rotation within the same infrastructure cluster.