t-mobile[.]beayww[.]cc

This domain, t-mobile.beayww.cc, is flagged as a brand impersonation threat targeting Apple users through a tech support scam. Analysis indicates the domain was registered on February 21, 2026, and is currently offline. It was detected by 16 of 93 security vendors on VirusTotal, with PhishDestroy listing it on one security blocklist. The domain resolved to IP 47.90.154.132, hosted on Alibaba's US infrastructure (AS45102).

The SSL certificate identifier is E7, and the page title, 'T-Mobile Tuesdays - Get Free Stuff & Great Deals | T-Mobile,' suggests an attempt to mimic T-Mobile promotions, though the scam type explicitly targets Apple users for tech support fraud. The discrepancy between the page title and the reported scam type may indicate either a misconfiguration or an effort to obfuscate the true intent. Defenders should note that while the domain is offline, its infrastructure and detection history warrant continued monitoring.

Blocking the domain and associated IP at perimeter defenses is recommended. Further investigation into the SSL certificate and hosting provider may reveal additional linked domains or infrastructure. No evidence of widespread distribution or campaign association is currently available, but the detection rate and blocklist inclusion justify elevated caution.