# h5.mabodex.live — SUSPICIOUS

> h5.mabodex.live is a credential theft site with 0/95 VirusTotal detections. Avoid entering any login details on this domain.

## Summary
PhishDestroy identifies h5.mabodex.live as a credential theft domain actively distributing fake login forms to harvest user credentials. This site mimics legitimate services to trick visitors into submitting sensitive information, which is then exploited by attackers for unauthorized access. The domain resolves to IP 188.114.96.3 and uses a Google Trust Services SSL certificate, adding a false sense of security. Users should treat this domain as hostile and avoid interaction entirely.  This domain was flagged with 0 detections out of 95 VirusTotal scans, indicating it has evaded detection by most security engines. The domain is registered through an unknown registrar, and its recent creation suggests it is part of a short-lived campaign designed to avoid long-term scrutiny. Technical indicators, including the use of a high-reputation SSL certificate, are common tactics to bypass automated filters and gain user trust.  If you visited h5.mabodex.live, immediately check your accounts for unusual activity, especially on platforms where you may have reused passwords. Do not enter any personal or login details on this domain. Run a malware scan on your device to detect any potential infections. Report this domain to your security team or platform provider to help block its distribution.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registrar: REGISTRAR_NOT_FOUND
- IP: 188.114.96.3

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/domains/h5.mabodex.live
- PhishDestroy: https://phishdestroy.io/domain/h5.mabodex.live/
- LLM endpoint: https://phishdestroy.io/domain/h5.mabodex.live/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/h5.mabodex.live/
Last updated: 2026-04-06