mobilbahis[.]com

PhishDestroy identifies mobilbahis.com as a high-risk crypto drainer domain actively impersonating a sports betting brand to steal cryptocurrency. The domain leverages a generic name resembling mobile betting services to deceive users into connecting wallets or submitting deposit information, which is then drained by malware. Further investigation is required to determine the exact impersonated brand, but the threat type is confirmed as a crypto drainer phishing operation designed for financial exploitation.

This domain was flagged with a risk level of under_investigation and is currently active. Technical indicators include 0 detections out of 95 on VirusTotal, an SSL certificate issued by Amazon, and resolution to IP address 13.226.244.104. The domain was registered through Abion AB on January 23, 2016. Additional blocklist status and trust scores are not provided in current intelligence, but the lack of detection on VirusTotal suggests low immediate flagging despite high malicious intent. The domain’s age and clean registration profile may be leveraged to build trust with potential victims.

PhishDestroy recommends immediate network and endpoint blocking of IP 13.226.244.104 and domain mobilbahis.com. Users should avoid visiting the site or interacting with any prompts for wallet connections or deposits. Blockchain security firms should monitor this domain for wallet drainer signatures and update detection rules accordingly. Domain registrars and hosting providers are urged to review this registration for policy violations. Enterprises should distribute threat intelligence to prevent internal exposure via email or web filtering systems. Always verify site authenticity via official channels before any financial transaction.