cleanmobiledevice[.]com

This domain, cleanmobiledevice.com, is classified as a generic phishing threat. No specific brand impersonation or crypto drainer kit was identified, but its sole purpose appears to be credential harvesting or malware distribution. The page title observed was 'Document', a common placeholder for fraudulent content.

Technical indicators confirm the malicious nature: VirusTotal detection rate is 4/95, indicating broad security vendor consensus. The domain is listed on 1 security blocklist. Scamadviser trust score is 36/100, and Gridinsoft trust score is 0/100, both reflecting high risk. The domain resolves to IP address 23.106.127.144. It was created on February 21, 2026, a very recent date, through registrar NiceNIC International Group Co., Limited. The SSL certificate was issued by PhishDestroy, a known certificate authority for phishing sites. Google Safe Browsing status is not explicitly provided but the domain's blocklist inclusion implies it may be flagged.

As of the latest check, the domain is offline, indicating takedown action has been initiated. PhishDestroy has blocked the domain. Despite being offline, residual risk remains: any emails or links referencing cleanmobiledevice.com should be treated as malicious. Users who interacted with this domain should scan their devices for compromise and change credentials used on the site. No further action is required from the reporting team, but monitoring for similar registration patterns (new domains via NiceNIC) is advised.