topupdisini[.]officiall-rewards[.]com

This domain, topupdisini.officiall-rewards.com, operates as a fraudulent top-up portal impersonating Codashop Indonesia to target Free Fire players. The site presents itself as a legitimate in-game currency recharge platform, displaying the page title 'Top Up Free Fire - Codashop Indonesia' to deceive users into entering payment credentials or personal information. Analysis indicates the domain is designed to harvest sensitive data under the pretext of offering free or discounted in-game purchases, a common tactic in gaming-related phishing campaigns. Infrastructure analysis reveals multiple high-risk indicators. The domain was registered through CV. Jogjacamp on May 20, 2026, with a creation date set in the future, suggesting potential domain spoofing or backdating. VirusTotal reports 19 out of 95 security vendors flagging the domain as malicious, while it appears on one security blocklist. The domain resolves to the IP address 188.114.96.3 and employs SSL encryption via Google Trust Services, which may lend a false sense of legitimacy. Detected technologies include Vue.js, jQuery, and Cloudflare, which are frequently used in both legitimate and malicious sites to enhance functionality and obfuscate malicious activity. Users who visited this domain should immediately cease all interaction and take corrective measures. If credentials or payment information were entered, affected accounts should be secured by changing passwords and enabling multi-factor authentication where available. Financial institutions should be notified of potential unauthorized transactions. System scans using updated security tools are recommended to detect any secondary payloads or malware. Future interactions with domains impersonating gaming reward platforms should be verified through official vendor channels before entering sensitive data.