securpass13-mobile[.]com

This domain, securpass13-mobile.com, operates as a fake mobile login portal designed to harvest user credentials through deceptive authentication interfaces. Analysis indicates the infrastructure mimics legitimate mobile security gateways, likely targeting users of financial services, corporate networks, or cryptocurrency platforms. The phishing kit deployed on this domain typically presents a login form that closely resembles trusted mobile verification pages, tricking victims into submitting sensitive information such as usernames, passwords, and multi-factor authentication codes. Infrastructure analysis reveals multiple technical indicators confirming malicious intent. The domain was registered on February 21, 2026, through NiceNIC International Group Co., Limited, a registrar frequently associated with phishing operations. VirusTotal reports 10 out of 95 security vendors flagging this domain as malicious, while it appears on one security blocklist. The site resolved to the IP address 91.92.240.199, an infrastructure node previously linked to credential harvesting campaigns. The page title, identical to the domain name, further suggests a lack of legitimate branding or content. Users who visited securpass13-mobile.com should immediately revoke any entered credentials and monitor associated accounts for unauthorized activity. If login details were submitted, reset passwords for all potentially affected services, prioritizing financial and email accounts. Enable multi-factor authentication where available, using app-based or hardware tokens instead of SMS-based methods. Examine device logs for unusual network connections to 91.92.240.199 and scan for malware using updated security tools. Report the incident to relevant cybersecurity response teams, including domain registrars and hosting providers, to support takedown efforts.