prorbable[.]markets

This domain is flagged as a phishing infrastructure specifically designed to impersonate probability-based trading platforms, a niche within decentralized finance ecosystems. Analysis indicates the domain was crafted to deceive users into believing they are interacting with a legitimate prediction market, likely to harvest credentials, private keys, or authorize fraudulent transactions through malicious smart contracts. The threat type aligns with credential theft and wallet-draining schemes, common in cryptocurrency-related phishing operations. Infrastructure analysis reveals multiple high-confidence indicators of compromise. The domain prorbable.markets was registered on February 21, 2026, through NiceNIC International Group Co., Limited, a registrar frequently associated with malicious registrations. It resolves to IP address 172.67.163.103 and employs Cloudflare services, a common tactic to obscure hosting origins and evade takedowns. Security vendors have flagged this domain in 4 out of 95 VirusTotal engines, and it appears on three independent security blocklists. Additionally, the domain is referenced in one AlienVault OTX threat intelligence pulse, further corroborating its malicious classification. Users who visited prorbable.markets should immediately revoke any smart contract approvals or token authorizations associated with the domain. All credentials or private keys entered on the site must be considered compromised and should be rotated across all platforms where they were reused. Wallet addresses linked to the domain should be monitored for unauthorized transactions, and any suspicious activity reported to relevant security teams. Due to the elevated risk level, affected users are advised to conduct a full security audit of their devices and connected accounts to mitigate potential secondary infections or lateral movement.