gmgn[.]co[.]com

The domain gmgn.co.com was registered on February 21, 2026. DNS resolution points to the IPv4 address 147.93.54.30, which is hosted by Hostinger in France. The IP is currently listed in a single security blocklist and has been flagged by the PhishDestroy sinkhole as malicious. Gridinsoft assigns a trust score of 0 out of 100, indicating a complete lack of credibility.

VirusTotal analysis shows that one out of ninety‑three antivirus engines submitted a detection for the domain, confirming that at least one security vendor considers the host to be malicious. The domain is presently taken offline, which limits active exposure but does not remove the underlying infrastructure. The available evidence points to a generic phishing campaign, though the specific target brand or page title has not been disclosed. The modest detection count suggests that the phishing payload is either newly deployed or has limited distribution.

The combination of a freshly created domain, a low‑reputation hosting provider, a zero trust score, and a confirmed blocklist entry aligns with typical infrastructure used by threat actors to host credential‑harvesting pages. Uncertainty remains around the exact content served before takedown, the phishing kit employed, and whether additional sub‑domains share the same IP footprint. Defenders should continue to block the IP address 147.93.54.30 at network perimeters, add gmgn.co.com to URL filtering lists, and monitor for any resurgence of related domains or IP ranges. Periodic re‑query of VirusTotal and other multi‑engine scanners is advised to capture any new detections that could indicate a re‑activation of the site.