ghx667[.]it

The domain ghx667.it is a generic phishing site designed to deceive users into disclosing sensitive information such as login credentials or personal data. This site does not impersonate a specific brand and is not associated with a known drainer kit. As of the latest verification, ghx667.it has been taken offline, but it previously posed an elevated risk to users who may have interacted with it during its active period.

Technical analysis of ghx667.it reveals limited but notable detection. The domain was flagged by 2 of 95 security vendors on VirusTotal, including Gridinsoft and Trustwave, while Google Safe Browsing did not flag it. It appeared on 1 security blocklist, specifically PhishDestroy. The domain was created on February 21, 2026, and resolved to the IP address 104.21.71.226, hosted by Cloudflare, Inc. in the United States. The SSL certificate was issued by WE1, and the observed page title was 'Welcome aboard'.

Users who may have interacted with ghx667.it should take immediate steps to secure their accounts. If login credentials were entered, change passwords for all potentially affected accounts and enable two-factor authentication (2FA) where available. Monitor accounts for unauthorized activity and report any suspicious transactions or logins. To report the phishing domain, submit it to platforms such as Google Safe Browsing, PhishTank, or local cybersecurity authorities for further investigation and mitigation.