btmobrat[.]netConfirmed abuse, neutralized
Fraudpol's analyst team reviewed and confirmed abuse on this domain. The case status was updated to neutralized on 06 November 2026. If you landed here after searching this domain: do not enter payment details, credentials, or personal information.
Listings are published only after verification by our team and are removed if a review shows the site is legitimate.
Listed incorrectly? Request a reviewCase summary
- Domain
- btmobrat[.]net
- First reported
- 29 October 2026
- Confirmed
- 06 November 2026
- Reports on file
- 1
Analyst write-up
btmobrat[.]net reported for malware download and covert Android access offering; verified offline
The case concerns btmobrat[.]net, a dedicated site set up for malware distribution, flagged with a malware-download behaviour. The report describes the site as offering covert Android device access for sale and as being used to spread malware to mobile phones. The site uses Cloudflare. Notifications were sent through threat intelligence feeds, the hosting provider, and the domain registrar, and the outcome recorded was: Outcome: verified offline by our team.
Timeline
The report was received on October 29, 2026, and the case was monitored by Fraudpol from the moment the report arrived. The first action followed 3 minutes after the report. The case was marked neutralized on November 5, 2026, after 7 days, and the record was last updated on November 6, 2026.
Indicators
Malware-download behaviour flaggedDedicated site set up for the activityReported as offering covert Android device access for saleServed via CloudflareEscalated to threat intelligence feeds, hosting provider and domain registrar
What to do
Do not download or install any app or file from btmobrat[.]net. If you have already installed something from this site, run a reputable mobile security scan and review device permissions and installed apps.
Handling record
- Offline since
- 05 November 2026
Evidence bundle hash (SHA-256)
9f53f714c238ad23bc010f3c679830233309c6e06cf3d5474122c59ac61307eb
Evidence on file
Forensic evidence archived. Not published to protect the integrity of ongoing takedown work.
Reported to the responsible providers and security services.
Encountered this domain?
Submit your own evidence in under a minute: no account required. Every report is analyst-reviewed and, when confirmed, escalated to the hoster or registrar for takedown.