gecko-pro[.]app

gecko-pro.app was registered on June 16, 2026 through Namecheap Inc. and resolves to the IPv4 address 162.255.119.116, which is hosted by AS22612 (Namecheap, Inc.) in the United States. The domain lacks an SSL certificate, yet the HTTP response returns status code 200 and serves a page titled “Smart Money Analytics for Stocks & ETFs”. Infrastructure analysis shows the site is built on Vercel and utilizes Rewardful, HSTS, and Clickbank components. No TLS is present, indicating traffic is unencrypted and easily interceptable. VirusTotal scans have flagged the domain by five of ninety‑one security vendors, and the domain appears on three public blocklists, including PhishDestroy, MetaMask, and SEAL. The threat classification is a “Crypto Drainer” scam, suggesting the site attempts to lure victims into transferring cryptocurrency to attacker‑controlled wallets. Current evidence does not reveal additional malicious payloads or credential‑stealing forms; the exact content beyond the title has not been publicly analyzed. Defenders should block DNS resolution for gecko-pro.app, enforce HTTPS redirection where possible, and monitor outbound traffic to the associated IP for anomalous cryptocurrency transactions. Continuous re‑evaluation is advised, as the operator may later add phishing pages or exploit kits.