mamobots[.]site

The domain mamobots.site was registered on July 26, 2025 through the HOSTINGER operations, UAB registrar. DNS resolution maps the name to the IPv4 address 92.113.16.31, which belongs to AS47583 Hostinger International Limited and is geolocated to Germany. The site presented a page titled "Bot Verification" before being taken offline, and the TLS handshake was signed by a ZeroSSL RSA Domain Secure Site CA certificate, indicating a free‑issued certificate rather than a brand‑validated authority. Independent threat‑intel feeds have marked the domain as malicious: PhishDestroy and ScamSniffer have both blocked it, and two security blocklists reference the host.

Gridinsoft assigned a trust score of 0 out of 100, reflecting a high confidence of abuse. VirusTotal analysis shows that 2 of 93 scanning engines flagged the domain, reinforcing the suspicion that it was used for phishing activities. The current status is offline, which limits real‑time observation but preserves the historical artifacts needed for attribution.

Defenders should continue to deny any outbound connections to 92.113.16.31, add the domain and its IP to local blocklists, and monitor for any re‑registration attempts. Because the page content beyond the title has not been publicly disclosed, further forensic collection of the page snapshot, HTTP headers, and any associated redirects would be required to fully characterize the phishing payload. The evidence presented—registration details, hosting attribution, SSL certificate type, blocklist entries, low trust score, and limited VirusTotal detections—collectively substantiates the elevated risk rating for this infrastructure.