gaundlet[.]xyz

PhishDestroy identifies gaundlet.xyz as an active generic phishing domain posing an elevated threat to users. This domain was flagged by only 2 of 95 VirusTotal security vendors and resolves to IP 188.114.96.3. It was registered through NICENIC INTERNATIONAL GROUP CO., LIMITED on November 18, 2025, suggesting recent threat infrastructure deployment. Evidence confirms this domain’s malicious intent: VirusTotal reports a detection rate of just 2/95, the registrar NICENIC INTERNATIONAL GROUP CO., LIMITED is associated with high-risk domain registrations, and the domain was created only days ago. Despite using a Google Trust Services SSL certificate, this does not validate legitimacy. The low detection rate indicates evasion tactics to bypass security filters. Users visiting gaundlet.xyz risk credential theft or malware exposure through deceptive login portals or malicious downloads. If you accessed gaundlet.xyz, cease interaction immediately. Check your device for unauthorized software and review accounts linked to any credentials entered. Report the domain to your security team and block 188.114.96.3 at the network level. Avoid future visits to this domain as it remains active and untrusted.