mgbx-portal[.]at

The domain mgbx-portal.at has been identified as an investment scam impersonation site, specifically targeting users through a fraudulent digital asset trading platform. Analysis confirms the domain is currently offline, though it previously hosted a login portal titled 'MGBX Login Portal | Digital Asset Trading Platform.' This infrastructure was designed to deceive victims into disclosing credentials or transferring funds under false pretenses, mimicking legitimate investment services. Infrastructure analysis reveals the domain was registered on February 27, 2026, through the registrar Iqweb, and resolved to the IP address 186.2.175.29, located in Belize (AS59692 IQWeb FZ-LLC). Security vendors flagged the domain as malicious, with 10 out of 95 VirusTotal engines detecting it as a threat. Google Safe Browsing classified it as phishing, and it appears on one security blocklist. The absence of an SSL certificate further indicates a lack of basic security measures, increasing the likelihood of fraudulent intent. The domain is currently offline, but its prior activity poses residual risks to users who may have interacted with it. Organizations and individuals are advised to block the domain and its associated IP address (186.2.175.29) at the network level. Users who accessed the site should reset credentials for any financial or cryptocurrency platforms and monitor accounts for unauthorized activity. Security teams should review logs for connections to the domain or IP to identify potential compromises. Given the high-risk nature of investment scams, proactive monitoring for similar impersonation domains is recommended.