# secure-mobile.online — MALICIOUS

> Avoid secure-mobile.online to protect your login details. This domain is linked to phishing—do not enter personal info and stay vigilant online.

## Summary
PhishDestroy has identified secure-mobile.online as a credential phishing domain actively targeting users to steal sensitive login information. Classified under social engineering threats, this domain aims to deceive visitors by mimicking trustworthy mobile service portals, thereby luring victims into submitting their credentials.

Technical analysis reveals that secure-mobile.online resolves to the IP address 198.12.66.124 and was registered through Global Domain Group LLC on March 4, 2026. Google Safe Browsing flags the domain for social engineering, and VirusTotal detects malicious activity from 7 out of 95 security vendors, confirming its involvement in phishing campaigns. The domain’s young age combined with its registration details further supports its suspicious nature.

Currently, secure-mobile.online remains active and continues posing a medium-level risk to users. PhishDestroy recommends immediate blocking of this domain at network perimeters and advises users to refrain from interacting with it. Continuous monitoring is underway to track any changes in its infrastructure or threat posture.

## Threat Details
- Verdict: MALICIOUS
- Site status: dead (HTTP 0)
- Page title: EARTH | The Final Call

## Domain Intelligence
- Registered: 2026-03-06 11:07:01
- Registrar: Global Domain Group LLC
- Country: US
- IP: 198.12.66.124
- IP Country: US
- IP City: Buffalo
- IP Org: AS36352 HostPapa
- Nameservers: ["ns1.host-forest.com", "ns2.host-forest.com"]
- SSL Issuer: Let's Encrypt / R13

## Detection Status
- VirusTotal: 12 vendors flagged
  Vendors: ["alphaMountain.ai", "BitDefender", "CyRadar", "Forcepoint ThreatSeeker", "G-Data", "Google Safebrowsing", "Gridinsoft", "Lionic", "Seclookup", "SOCRadar", "Sophos", "Webroot"]
- Google Safe Browsing: FLAGGED
- Blocklists: 3 hits
  Lists: ["PhishDestroy", "MetaMask", "SEAL"]

## Evidence
- Screenshot: https://urlscan.io/screenshots/019cc297-3310-76cf-bb28-ce4a36b2859f.png
- Cloudflare Radar: https://radar.cloudflare.com/domains/secure-mobile.online
- Wayback Machine: https://web.archive.org/web/https://secure-mobile.online
- PhishDestroy: https://phishdestroy.io/domain/secure-mobile.online/
- LLM endpoint: https://phishdestroy.io/domain/secure-mobile.online/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/secure-mobile.online/
Last updated: 2026-03-19