MALICIOUS — CRITICAL
Phishing- und Sicherheitsprüfung für ccg9.com
ccg9[.]
The domain ccg9.com, recently flagged as a generic phishing site, highlights the persistent threat of early-stage phishing attacks.
- VirusTotal
- 4/91
- Blocklists
- No stored match
- Verfügbarkeit
- Letzter bekanntermaßen aktiv · HTTP 200
Do not enter credentials, seed phrases, payment details, or personal information on this domain.
Notification and current-status evidence
The sent-report ledger records the first outgoing report at .
The recorded recipient is abuse@nicenic.net, abuse@verisign-grs.com, compliance@icann.org.
The latest stored availability evidence still shows the domain reachable; 4 months has elapsed since the first outgoing report.
ICANN RAA §3.18 describes registrar abuse-contact and handling obligations. This section records outgoing timestamps, listed recipients, case identifiers, and later availability. It does not by itself prove receipt, acknowledgement, investigation, remediation, or contractual non-compliance.
Jump to section
ccg9.com — Letzter bekanntermaßen aktiv (HTTP 200). Betrugstyp: Generic Phishing. Zusammenfassung der Beweislage: VirusTotal 4/91 (alphaMountain.ai, CRDF, Gridinsoft, SOCRadar); PhishDestroy score 81/100. Registrar: NiceNIC.
Die ausführliche Analyse von PhishDestroy AI bleibt auf Englisch, damit der ursprüngliche forensische Bericht unverändert bleibt.
Evidence Analysis
The domain ccg9.com, recently flagged as a generic phishing site, highlights the persistent threat of early-stage phishing attacks. Despite being offline now, it was detected by PhishDestroy on the same day it was created, March 27, 2026. This rapid identification underscores the effectiveness of PhishDestroy's upstream monitoring, capturing threats before they enter antivirus databases. The domain, registered through NICENIC INTERNATIONAL GROUP CO., LIMITED, was hosted on an IP in the Netherlands under Walker Web Development Services.
With a platform risk score of 58 out of 100, ccg9.com was poised to deceive users through its phishing scheme. The page title "Вы не робот?" suggests an attempt to mimic CAPTCHA verification, a common tactic to gain user trust and extract sensitive information. Despite having zero detections on VirusTotal, the domain was quickly added to PhishDestroy's blocklist, demonstrating the importance of early detection in mitigating potential damage.
The domain's SSL certificate was issued by Google Trust Services, which may lend an air of legitimacy to unsuspecting users. However, the swift takedown of ccg9.com prevented any further exploitation. This case serves as a reminder of the critical need for continuous monitoring and rapid response to emerging threats in the cybersecurity landscape. PhishDestroy's proactive approach ensures that even domains not yet recognized by traditional antivirus feeds are identified and neutralized promptly.
Stored source results
Recorded verdicts and infrastructure observations for this domain.
Datenabdeckung12 recorded checks
Erkenntnisse zur Netzwerksicherheit Registrar context
Pipeline zur Reaktion auf Sicherheitsbedrohungen
Status der öffentlichen Sperrliste
Gespeicherte Aufnahme
Domain-Intelligenz
Technische DetailsDNS, SSL-SANs, Zeitstempel
ICANN OVERSIGHT
Akkreditierung und RAA-Kontext
Akkreditierung und RAA-Kontext
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Latest Classified Outcome 2026-08-09 02:43:14 UTC
VirusTotal-Analyse
Website-Performanceanalyse
Google PageSpeed Insights — mobile performance audit of ccg9.com · checked Mar 28, 2026
Nachweise und externe BerichteIndependent lookups and source reports
PD-20260327-B3C7DD Recipient: abuse@nicenic.net, abuse@verisign-grs.com, compliance@icann.org Victim safety and official reportingImmediate actions and verified reporting channels
Wenn Sie Kontoanmeldeinformationen, persönliche oder Zahlungsinformationen eingegeben oder eine Datei von dieser Domain heruntergeladen haben, ergreifen Sie sofort Maßnahmen. Nachfolgend finden Sie Ressourcen, die Ihnen helfen, den Vorfall zu melden und sich zu schützen.
Melden Sie sich bei Ihren örtlichen Behörden
Wählen Sie Ihr Land aus, um Offizielle Kontakte im Bereich Cyberkriminalität oder einen Beschwerdeentwurf erstellen → zu erhalten.