gbtcoinese[.]com

Analysis indicates that the domain gbtcoinese.com was registered on 13 July 2026 through Realtime Register B.V. and is currently active. DNS resolution points to the IPv4 address 188.114.96.3, hosted behind Cloudflare name servers matteo.ns.cloudflare.com and priscilla.ns.cloudflare.com, suggesting use of a reputable CDN for traffic obfuscation. VirusTotal has recorded a single positive detection out of 91 scanned engines, confirming that at least one security product has flagged the domain as malicious. The classification as generic_phishing and the high risk rating imply that the site is likely being used to harvest credentials or other sensitive information, although the specific target brand or page content has not been disclosed. Uncertainty remains regarding the payload delivered, the geographic origin of the hosting provider, and whether the infrastructure is shared with other malicious actors. Defenders should block DNS resolution to 188.114.96.3 for the domain gbtcoinese.com, monitor outbound connections to the IP, and incorporate the domain into URL filtering policies. Incident response teams should treat any credential submissions to this domain as compromised and advise affected users to reset passwords and enable multi‑factor authentication. Continuous threat‑intel monitoring is recommended to detect any further infrastructure changes or additional domains that may be associated with the same campaign.