giftmallmycard[.]com

This domain, giftmallmycard.com, is currently under investigation for phishing activity targeting gift card fraud. Registered on April 28, 2026, through a reseller operating under Trustname.com, the domain exhibits multiple indicators of suspicious infrastructure. Analysis reveals it is hosted on an IP address (31.57.147.233) associated with a provider in the United States, specifically Gold IP L.l.c-fz, a network segment previously observed in fraudulent campaigns. The domain appears in eight distinct threat intelligence pulses, suggesting repeated detection by security researchers, and is actively blocked by at least one security feed. Infrastructure analysis indicates the domain uses CloudFlare SSL certificates, a common tactic to obscure hosting details and evade detection. Its nameservers, ares.trustname.com and zeus.trustname.com, are linked to the same registrar, which has been frequently utilized in recent phishing operations. Despite returning an HTTP 403 status, the domain remains active and has not yet been flagged by major scanning engines, as evidenced by a 0/95 detection rate in recent scans. This discrepancy between low detection rates and high threat intelligence visibility warrants caution. Defenders should treat this domain as potentially malicious until further evidence emerges. The combination of a recent registration date, association with known fraud-supportive infrastructure, and inclusion in multiple threat intelligence reports suggests a deliberate attempt to deceive users. While the exact phishing kit or targeted brand remains unconfirmed, the domain’s infrastructure aligns with patterns observed in gift card scams. Security teams are advised to monitor network traffic to this domain, block resolution at the DNS level, and investigate any prior connections from internal systems. Given its active status and lack of benign context, giftmallmycard.com should be considered high-risk for credential harvesting or financial fraud.