ltc4[.]agiboby[.]com

The domain ltc4.agiboby.com was identified as a generic phishing site posing an elevated risk. It did not impersonate a specific brand or deploy a known drainer kit but was designed to harvest sensitive information through deceptive means. As of the latest verification, ltc4.agiboby.com has been taken offline, though prior activity classified it as unsafe for users.

Technical analysis of ltc4.agiboby.com revealed limited but notable detection: 2 of 95 VirusTotal security vendors flagged the domain, including SOCRadar and Trustwave. The domain was registered through GoDaddy.com, LLC on February 21, 2026, and resolved to the IP address 102.223.72.41, hosted under AS328543 Sun Network Company Limited in South Africa. It appeared on one security blocklist (PhishDestroy) and used an SSL certificate issued by TrustAsia Technologies, Inc. via LiteSSL RSA CA 2025. The observed page title was 'AgiBot,' and the site employed technologies such as Nginx, HSTS, and HTTP/3. Google Safe Browsing did not flag the domain at the time of assessment.

Users who may have interacted with ltc4.agiboby.com should take immediate steps to secure their accounts. If credentials were entered, change passwords for all potentially affected services and enable two-factor authentication where available. Monitor accounts for unauthorized activity and report any suspected fraud to relevant financial institutions or platforms. To report the phishing domain, submit it to platforms like Google Safe Browsing, PhishTank, or the Anti-Phishing Working Group (APWG). Victims should also consider filing a complaint with their local cybercrime authorities or the registrar, GoDaddy.com, LLC.