# gaundlet.xyz — SUSPICIOUS

> Investigation of gaundlet.xyz reveals an active generic phishing campaign. This domain, registered Nov 18 2025, resolves to 188.114.96.

## Summary
PhishDestroy identifies gaundlet.xyz as an active generic phishing domain posing an elevated threat to users. This domain was flagged by only 2 of 95 VirusTotal security vendors and resolves to IP 188.114.96.3. It was registered through NICENIC INTERNATIONAL GROUP CO., LIMITED on November 18, 2025, suggesting recent threat infrastructure deployment.    Evidence confirms this domain’s malicious intent: VirusTotal reports a detection rate of just 2/95, the registrar NICENIC INTERNATIONAL GROUP CO., LIMITED is associated with high-risk domain registrations, and the domain was created only days ago. Despite using a Google Trust Services SSL certificate, this does not validate legitimacy. The low detection rate indicates evasion tactics to bypass security filters. Users visiting gaundlet.xyz risk credential theft or malware exposure through deceptive login portals or malicious downloads.    If you accessed gaundlet.xyz, cease interaction immediately. Check your device for unauthorized software and review accounts linked to any credentials entered. Report the domain to your security team and block 188.114.96.3 at the network level. Avoid future visits to this domain as it remains active and untrusted.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registered: 2025-11-18 07:20:14
- Registrar: NICENIC INTERNATIONAL GROUP CO., LIMITED
- IP: 188.114.96.3

## Detection Status
- VirusTotal: 2 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/949ed94a-5363-4df4-bc1b-9dfff204c088
- PhishDestroy: https://phishdestroy.io/domain/gaundlet.xyz/
- LLM endpoint: https://phishdestroy.io/domain/gaundlet.xyz/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/gaundlet.xyz/
Last updated: 2026-03-27