tr[.]wbahis-mobilgirisi[.]com

The domain tr.wbahis-mobilgirisi.com is a generic phishing domain that posed a threat to users by attempting to deceive them into providing sensitive information, such as login credentials or personal data, through fraudulent means. No specific brand or drainer kit was associated with this domain. As of the latest assessment, the domain has been taken offline, indicating that it is no longer actively serving phishing content, but users who interacted with it should remain vigilant.

The domain tr.wbahis-mobilgirisi.com was flagged by 1 of 95 VirusTotal security vendors, including Fortinet, Seclookup, and SOCRadar, as malicious. It was registered through Gname.com Pte. Ltd. on November 17, 2025, and resolves to IP address 193.25.217.43, which is located in the Netherlands and hosted by AS215292 Gravhosting LLC. The domain appears on 1 security blocklist, specifically PhishDestroy, and has a Gridinsoft trust score of 0/100. No SSL certificate was issued, and the HTTP status was 530. Google Safe Browsing did not flag the domain. Nameservers are a10.share-dns.com and b10.share-dns.net.

Users who visited tr.wbahis-mobilgirisi.com should take immediate safety steps. Since this is a generic phishing domain, it likely aimed to capture login credentials or personal information. Affected users should change passwords for any accounts that may have been compromised, enable two-factor authentication (2FA) on those accounts, and monitor for any signs of fraudulent activity, such as unauthorized transactions or account access. To report the domain, users can submit it to security platforms like PhishDestroy or VirusTotal for further analysis and blocklisting.