dbencrypt[.]mobi

This domain, dbencrypt.mobi, is flagged as a high-risk crypto scam impersonating the LevelBlue brand. Registered on February 21, 2026, through GoDaddy.com, LLC, the domain remains active as of July 12, 2026. Its page title, 'Secure What's Next | LevelBlue,' suggests an attempt to mimic LevelBlue's legitimate identity, though the exact content of the page has not been directly analyzed. Infrastructure details include nameservers ns53.domaincontrol.com and ns54.domaincontrol.com, and an IP address of 199.60.103.78 located in the United States (AS209242 Cloudflare London, LLC). The SSL certificate is issued by GoDaddy.com, Inc., and MX records point to smtp.secureserver.net and mail. The domain uses HubSpot CMS Hub, Amazon Web Services, and several tracking technologies (OneTrust, Mouse Flow, LinkedIn Insight Tag, jsDelivr, jQuery Migrate). VirusTotal data shows 1 out of 95 security vendors flagged the domain, and it appears on one security blocklist. Gridinsoft assigned a trust score of 0/100, indicating strong suspicion. PhishDestroy has blocked the domain. Defenders should treat this domain as actively malicious, block all traffic to it, and investigate any user interactions or credentials potentially submitted. The registration through GoDaddy and hosting on Cloudflare infrastructure are noted but not inherently indicative of compromise; the combination of crypto scam classification, brand impersonation, and low trust score warrants immediate containment.