n8n[.]bifrost-gateway[.]fr

The domain n8n.bifrost-gateway.fr is a generic phishing site that does not impersonate a specific brand or deploy a known drainer kit. It was operational as a phishing page but has since been taken offline. Users searching whether n8n.bifrost-gateway.fr is safe or a scam should treat it as a confirmed phishing threat with an elevated risk level.

Technical indicators confirm the domain's malicious intent. As of analysis, 5 of 95 VirusTotal security vendors flagged n8n.bifrost-gateway.fr, including ADMINUSLabs, ChainPatrol, and alphaMountain.ai. The domain appears on one security blocklist (PhishDestroy) and was registered through HOSTINGER operations, UAB, on September 18, 2025. It resolved to the IP address 72.60.185.117, hosted on AS47583 (Hostinger International Limited), and used an SSL certificate issued by Let's Encrypt (R13). The observed page title, 'n8n.io - Workflow Automation,' suggests an attempt to mimic legitimate automation services, though no direct brand impersonation was confirmed. Technologies detected on the site included Vue.js, RxJS, and HSTS.

Individuals who may have interacted with n8n.bifrost-gateway.fr should take immediate safety steps. Since this was a generic phishing site, victims should change any credentials entered on the page, enable two-factor authentication on affected accounts, and monitor for unauthorized activity. Report the domain to relevant authorities or platforms, such as Google Safe Browsing, PhishTank, or local cybersecurity incident response teams. If financial or cryptocurrency details were exposed, contact the associated service providers to secure accounts and review transaction histories for fraud.