# gunfiresquad.io — SUSPICIOUS

> Beware GunFireSquad.io: a crypto drainer scam impersonating brands. VT 0/95 detected. Verify and block via PhishDestroy for safety.

## Summary
PhishDestroy identifies GunFireSquad.io as an active crypto drainer domain under investigation for phishing attacks. The site resolves to IP 18.239.83.95 and was registered through Immaterialism Limited on March 21, 2026. VirusTotal currently shows 0/95 detections, indicating it has evaded initial detection systems. The domain utilizes an Amazon-issued SSL certificate, adding a false sense of legitimacy, but its recent creation and lack of flags suggest it may be part of a newly launched campaign. No current blocklist entries or trust score data are available, leaving users vulnerable to unchecked exploitation.  This domain exhibits hallmark traits of a crypto drainer: deceptive branding, recent registration, and a clean VirusTotal report. The absence of detections (0/95) is particularly concerning, as it implies the site is either highly evasive or has yet to be widely analyzed. The registrar, Immaterialism Limited, has no immediate red flags, but the domain's age (registered in 2026) and IP association with Amazon’s cloud infrastructure could be leveraged to bypass traditional security measures. Users should treat this domain with extreme caution, as crypto drainers often mimic legitimate platforms to siphon digital assets undetected.  To mitigate risks, PhishDestroy recommends immediate verification of GunFireSquad.io using its threat intelligence tools. Avoid interacting with the site, especially if it requests cryptocurrency transactions or login credentials. Users who suspect exposure should revoke any connected wallet permissions and scan devices for malware. Given the domain’s active status and low detection rate, proactive blocking and reporting to PhishDestroy are critical to preventing further exploitation. Always cross-reference domains against trusted blocklists before engaging.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registered: 2026-03-21 12:15:19
- Registrar: Immaterialism Limited
- IP: 18.239.83.95

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/fee992f6-9283-45c5-b1bd-9d9e6fdec3dd
- PhishDestroy: https://phishdestroy.io/domain/gunfiresquad.io/
- LLM endpoint: https://phishdestroy.io/domain/gunfiresquad.io/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/gunfiresquad.io/
Last updated: 2026-03-22