كشف مواقع التصيد الاحتيالي وإلغاء الجلسات المشبوهة لحماية حسابك

Inspect the root domain using whois and SSL diagnostics. Phishing kits routinely use lookalike TLDs (.xyz, .top, .live) with Free Let's Encrypt certificates registered within 48 hours, imitating midasbuy or pubgmobile.

Ensure social login modals (Facebook, X/Twitter, Google) originate from true official endpoints (e.g., facebook.com/v18.0/dialog/oauth). Fraudulent portals embed spoofed iFrames designed to harvest raw plaintext passwords and 2FA SMS tokens.

Log into the official client and inspect linked channels. Initiate immediate dissociation for Facebook, Twitter/X, and Apple/GameCenter to remove latent hooks. Ensure the 7-day unbind countdown is monitored to prevent seller re-entry.

Verify that primary email replacement is locked into the 7-day safety period and no secondary recovery email is pending confirmation. Trigger 'Log Out of All Devices' across all linked platforms to invalidate active bearer tokens.