mobiccoin[.]com

The domain mobiccoin.com was created on 31 July 2025 and is currently taken offline. DNS resolution points to the IPv4 address 69.5.189.58, which is advertised as part of AS42624 (Global-Data System IT Corporation) and geolocated to Switzerland. The domain is registered through Key-Systems GmbH and uses the nameservers ns1.nameserverhub.com and ns2.nameserverhub.com. An SSL certificate issued to Internet Widgits Pty Ltd is present, indicating the site was served over HTTPS. The page title retrieved from the site reads “MOBICCOIN | Play at the best online casino based on Blockchain”, matching the reported scam type of a crypto‑related gambling scheme.

The infrastructure has been classified as a “Crypto Scam” and associated with the Gambler Scam phishing kit. Reputation checks show the domain appears on a single security blocklist and is listed as blocked by PhishDestroy. Gridinsoft assigns a trust score of 1 out of 100, reflecting an extremely low confidence level. VirusTotal analysis reports four of ninety‑five scanners flagging the domain, reinforcing the malicious assessment.

The elevated risk rating aligns with the combination of low trust score, blocklist presence, and detection by multiple vendors. Uncertainties remain regarding the current content of the site, as the offline status prevents further inspection, and no additional intelligence such as OTX tags or Safe Browsing verdicts is available. Defenders should continue to block the domain and its resolving IP at perimeter and endpoint filters, monitor for any resurgence of the host, and consider adding the associated nameservers to watch lists. Ongoing observation of the AS42624 network may reveal related payloads or new phishing campaigns leveraging the same infrastructure.