ltc1[.]agiboto[.]com
“AgiBot”
Zusammenfassung der Beweislage
The domain ltc1.agiboto.com was identified as a generic phishing site posing an elevated risk. It did not impersonate a specific brand or deploy a known drainer kit. As of the latest verification, ltc1.agiboto.com has been taken offline, though it previously operated as a phishing page targeting users with fraudulent login or credential harvesting schemes.
Technical indicators confirm ltc1.agiboto.com was flagged by 1 of 95 VirusTotal security vendors, including SOCRadar, and appeared on 1 security blocklist (PhishDestroy). The domain was registered through GoDaddy.com, LLC on February 21, 2026, and resolved to the IP address 102.223.72.41, hosted by AS328543 Sun Network Company Limited in South Africa. Its SSL certificate was issued by TrustAsia Technologies, Inc. under the LiteSSL RSA CA 2025 hierarchy. The observed page title was 'AgiBot', and the site employed technologies such as Nginx, HSTS, and HTTP/3. Nameservers were configured as money.dnspod.net and pollux.dnspod.net.
Users who interacted with ltc1.agiboto.com should immediately change any credentials entered on the site, enable two-factor authentication (2FA) on affected accounts, and monitor for unauthorized transactions or identity fraud. Report the phishing domain to Google Safe Browsing, the Anti-Phishing Working Group (APWG), and local cybersecurity authorities. If financial or cryptocurrency accounts were accessed, contact the respective service providers to secure accounts and review transaction histories for suspicious activity.
Momentaufnahme der übermittelten Beweise
- Gesendet
- Protokolleinträge
- 1
- Fall-ID
PD-20260211-5A96B3- Titel der erfassten Seite
- AgiBot
- PDF-Artefakt
- PDF-Beweis
Rechtsgrundlage
Vollständiger Beweistext
Acceptable Use Policy (AUP): The domain ltc1.agiboto.com is engaged in phishing activities, which directly contravenes the AUP's prohibition against illegal activities, fraud, and deception.
Terms of Service (TOS): The continued operation of this domain constitutes a violation of the TOS, which reserves the right to suspend or terminate services for any activities that are illegal or harmful.
Applicable Laws (Unknown):
Computer Fraud and Abuse Act (CFAA): This U.S. federal law prohibits unauthorized access to computers and networks, which is applicable to phishing schemes that deceive users into providing sensitive information.
Wire Fraud Statute (18 U.S.C. § 1343): This law criminalizes schemes to defraud individuals or entities via electronic communications, which is relevant to the fraudulent activities associated with this domain.
CAN-SPAM Act: This act regulates commercial email and prohibits deceptive practices in the solicitation of personal information, applicable to phishing operations.
Regulatory Note: Failure to take immediate action against this domain may result in liability for facilitating illegal activities, potentially leading to regulatory scrutiny and enforcement actions against your organization.
Data Coverage
Pipeline zur Reaktion auf Sicherheitsbedrohungen
Blocklistenabdeckung
10 überwachte externe Feeds · gespeicherter Stand 11.08.2026
Gespeicherte Aufnahme
Domain-Intelligenz
Technische DetailsDNS, TLS-Namen und Zeitstempel
ICANN OVERSIGHT
Registration: agiboto.com
Akkreditierung und RAA-Kontext
Akkreditierung und RAA-Kontext
Registrar accreditation and DNS abuse obligations
For the registrable domain agiboto.com behind this subdomain, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
VirusTotal-Analyse
Website-Performanceanalyse
Google PageSpeed Insights — mobile performance audit of ltc1.agiboto.com · checked Mar 7, 2026
Wurden Sie von dieser Website betroffen?
Wenn Sie Kontoanmeldeinformationen, persönliche oder Zahlungsinformationen eingegeben oder eine Datei von dieser Domain heruntergeladen haben, ergreifen Sie sofort Maßnahmen. Nachfolgend finden Sie Ressourcen, die Ihnen helfen, den Vorfall zu melden und sich zu schützen.
Melden Sie sich bei Ihren örtlichen Behörden
Wählen Sie Ihr Land aus, um Offizielle Kontakte im Bereich Cyberkriminalität oder einen Beschwerdeentwurf erstellen → zu erhalten.
Jede beliebige Domain prüfen
Bedrohungsanalyse anhand gespeicherter Blocklisten, WHOIS, DNS und öffentlicher Scan-Beweise
Jetzt scannenPhishing melden
Melden Sie verdächtige Domains an unsere Bedrohungsdatenbank – schützen Sie die Community
MeldenEchtzeit-Bedrohungsfeed
Aktuelle Phishing-Meldungen und beobachtete Verfügbarkeitsänderungen
ÜberwachenBleiben Sie auf dem Laufenden, bleiben Sie sicher
Beobachten Sie aktuelle Bedrohungen oder legen Sie Widerspruch gegen diesen Eintrag ein, wenn Sie der Meinung sind, dass es sich um einen Fehlalarm handelt