mabosi-otoku[.]com

This domain, mabosi-otoku.com, is flagged as an active phishing site targeting users through social engineering tactics. Registered on May 16, 2025, via GMO Internet, Inc., it remains operational as of July 12, 2026, resolving to IP 160.251.71.119. The domain appears on six security blocklists, including PhishingArmy and OISD, and is referenced in 50 threat intelligence pulses on AlienVault OTX. Google Safe Browsing classifies it under SOCIAL_ENGINEERING, indicating attempts to deceive users into disclosing sensitive information or performing unintended actions. Infrastructure analysis reveals the use of Nginx as the web server and a Let's Encrypt SSL certificate, which is common in both legitimate and malicious sites. Seventeen of 95 security vendors on VirusTotal flag the domain as malicious, though the exact nature of the threat—beyond social engineering—remains unconfirmed due to limited public analysis of the site's content. No specific brand impersonation or phishing kit has been identified in available intelligence, though the domain name suggests a focus on gift card or reward-themed lures. Defenders should treat this domain as high-risk. Immediate actions include blocking the domain and its resolving IP at the network perimeter, monitoring for internal connections to 160.251.71.119, and alerting users to the presence of social engineering campaigns. If internal logs indicate prior access, review session data for signs of credential submission or data exfiltration. Further analysis of the site's content is recommended to determine the exact phishing mechanism and targeted brands, though no direct evidence of such details is currently available.