gslintegrityone[.]com

Analysis as of August 01 2026 identifies gslintegrityone.com as an active malicious infrastructure used for generic credential phishing. The domain was registered through NICENIC INTERNATIONAL GROUP CO., LIMITED and its creation timestamp is July 28 2026. Authoritative name servers are a.dnspod.com, b.dnspod.com and c.dnspod.com, which are typical of the DNSPod service. DNS resolution returns the IPv4 address 154.86.119.29, a host that currently has no public reputation beyond a single entry on a security blocklist and a block by the PhishDestroy feed.

The domain was submitted to VirusTotal where 91 antivirus and URL scanning engines examined the site; none produced a detection at the time of the scan. The absence of detections does not imply benign intent, and the lack of additional telemetry means the threat posture remains uncertain. No public information is available regarding SSL certificates, HTTP response codes, page title, or any associated malware kits. Consequently, defenders cannot confirm the exact landing page content or the credential collection mechanism.

Given the limited but consistent indicators—recent registration, use of DNSPod name servers, resolution to a single IP, inclusion on a blocklist, and active status—security teams should treat gslintegrityone.com as a high‑confidence phishing indicator. Recommended actions include adding the domain to DNS blocklists, configuring web proxies to deny outbound connections, and monitoring network traffic for attempts to resolve or contact the IP address 154.86.119.29. Continuous re‑evaluation is advised as additional telemetry becomes available, especially any changes in detection status from sandbox or URL‑reputation services.