sigitagim[.]pro

The domain sigitagim.pro has been confirmed as a phishing site targeting users of PUBG Mobile. Analysis indicates the site was designed to harvest account credentials under the pretense of purchasing in-game accounts, a tactic commonly associated with account takeover fraud. The domain is currently offline, though prior activity suggests it was operational for malicious purposes. Infrastructure analysis reveals the domain was registered through CV. Rumahweb Indonesia on November 26, 2025, and resolved to the IP address 103.247.9.159, located in Indonesia under AS58487. Security vendor detections on VirusTotal reached 19 out of 95, indicating moderate consensus on its malicious nature. The domain appears on one security blocklist, and its SSL certificate was issued by Let's Encrypt (R13), a common choice for both legitimate and malicious sites. The page title, "PEMBELI AKUN PUBG MOBILE | SIGITAGIM," directly references the targeted game, reinforcing its fraudulent intent. As of the latest assessment, sigitagim.pro remains offline, though its prior infrastructure and detection history warrant continued monitoring. Organizations and users are advised to block the domain and its associated IP (103.247.9.159) at the network level. Endpoint protection should be updated to include this domain in phishing filters, and any credentials potentially exposed to the site should be reset immediately. Given the domain's recent creation and targeted nature, vigilance against similar threats in the gaming sector is recommended.