pubgmoblie[.]xozv[.]top

This domain, pubgmoblie.xozv.top, operates as a fraudulent PUBG Mobile login portal designed to harvest user credentials. Analysis indicates the site mimics legitimate in-game authentication pages, tricking players into entering account details under the pretense of rewards, account recovery, or exclusive content. Once submitted, credentials are transmitted to threat actors, enabling account takeovers, unauthorized purchases, or further exploitation through social engineering. The site specifically targets mobile gamers, leveraging the popularity of PUBG Mobile to increase the likelihood of successful phishing attempts. Infrastructure analysis reveals multiple technical indicators confirming malicious intent. The domain was registered on July 5, 2025, through 烟台帝思普网络科技有限公司, a registrar frequently associated with phishing domains. It resolves to IP address 149.104.21.20, hosted on AS42960 (VH Global Limited) in Hong Kong, a network with a history of hosting fraudulent sites. VirusTotal detections show 18 out of 95 security vendors flagging the domain as malicious, with classifications including phishing, credential theft, and brand impersonation. The absence of an SSL certificate further undermines trust, as legitimate gaming portals universally employ HTTPS for secure connections. The domain appears on one security blocklist and is actively blocked by enterprise phishing filters. Users who visited pubgmoblie.xozv.top should assume their credentials were compromised. Immediately change passwords for the affected PUBG Mobile account and any other platforms where identical credentials were reused. Enable multi-factor authentication (MFA) on all gaming and financial accounts to mitigate unauthorized access. Monitor account activity for suspicious transactions, in-game purchases, or unauthorized logins. If personal or financial information was entered, consider placing a fraud alert with credit bureaus and reviewing bank statements for unauthorized charges. Report the incident to the official PUBG Mobile support team to assist in account recovery and prevent further abuse. Avoid interacting with any communications claiming to be from PUBG Mobile or related services, as threat actors may follow up with additional phishing attempts via email or SMS.