fprice[.]pro

PhishDestroy identifies fprice.pro as an active fake price scam domain leveraging deceptive pricing tactics to harvest payment credentials and personal data. This domain does not impersonate a specific brand but instead relies on a fraudulent storefront designed to trick users into believing they are accessing legitimate discount offers. The infrastructure suggests the use of a generic drainer kit, consistent with opportunistic credential harvesting campaigns observed in low-cost phishing operations. The domain’s SSL certificate, issued by Let’s Encrypt, is a common tactic to appear legitimate at a glance, masking its malicious intent under a veneer of authenticity.

Technical analysis of fprice.pro reveals a set of concerning indicators. VirusTotal detects this domain at a rate of 15 out of 95 security vendors, indicating partial but not universal recognition of its malicious nature. The domain resolves to IP address 188.114.97.3 and was registered through Global Domain Group LLC on March 08, 2026, a recently created domain within the last month. Global Domain Group LLC is frequently associated with bulk domain registrations that are later weaponized in phishing campaigns. This domain remains unflagged by Google Safe Browsing (GSB) at the time of analysis, and it has not yet accumulated a significant presence on major blocklists, which may contribute to its continued operation without immediate takedown intervention.

fprice.pro maintains an active status as of this advisory, with current risk assessed as elevated due to its fresh registration and partial detection coverage. Immediate response actions include flagging the domain for network and endpoint blocking, updating firewall rules to deny traffic to 188.114.97.3, and alerting users to avoid interaction with the domain or any associated subdomains. The residual risk remains elevated due to the domain’s recent creation and low blocklist presence, suggesting potential for expansion in phishing campaigns. Users should exercise extreme caution when encountering deals from unknown domains and verify offers through official channels before engaging. Organizations are advised to monitor for related IoCs and update threat intelligence feeds accordingly.