mbiipcllc[.]com

The domain mbiipcllc.com is a confirmed phishing site engaged in brand impersonation targeting the Celer platform. It presents itself as a legitimate Celer-related service to deceive users into disclosing sensitive information, though no crypto drainer kit was detected. As of the latest verification, mbiipcllc.com has been taken offline, but prior activity classified it as an elevated-risk threat.

Technical indicators confirm the malicious nature of mbiipcllc.com. The domain was flagged by 5 of 95 VirusTotal security vendors, including ADMINUSLabs, alphaMountain.ai, and CyRadar, and appears on 2 security blocklists (PhishDestroy and PhishingDB). Registered through Cosmotown, Inc. on April 03, 2025, it resolved to the IP address 152.228.223.226, hosted by OVH SAS in France. The SSL certificate was issued by Let's Encrypt (R12), and the observed page title was 'MBI IPC LLC – My WordPress Blog'. Nameservers included dns1.nekoserver.asia, dns2.nekoserver.asia, nova.domhoster.com, and orbit.domhoster.com. AlienVault OTX recorded the domain in 16 threat intelligence pulses, and Gridinsoft assigned it a trust score of 0/100.

Users who interacted with mbiipcllc.com should immediately change any passwords or credentials entered on the site, enable two-factor authentication (2FA) on all accounts, and monitor for unauthorized transactions or identity fraud. If cryptocurrency interactions occurred, revoke any token approvals and consider transferring funds to a new wallet. Report the domain to platforms like Google Safe Browsing, PhishTank, or local cybersecurity authorities to assist in broader mitigation efforts.