guebux[.]com

PhishDestroy identifies guebux.com as a credential theft phishing domain currently active and posing an elevated risk to visitors. The site is not associated with any legitimate brand and is designed to deceive users into submitting sensitive login credentials or financial information. Given its active status, users should treat all interactions with extreme caution. guebux.com exhibits multiple indicators of malicious intent. It was registered through NICENIC INTERNATIONAL GROUP CO., LIMITED on April 07, 2026, and resolves to IP address 104.21.6.171. VirusTotal analysis confirms that 1 of 95 security vendors flagged this domain as malicious, indicating low but present consensus on its harmful nature. The domain also holds a valid SSL certificate issued by Let’s Encrypt, which may lend a false sense of legitimacy to unsuspecting users. This domain remains active and dangerous. PhishDestroy strongly recommends blocking guebux.com at the network level and avoiding all links or attachments associated with it. Users who may have already interacted with the site should immediately change any passwords that were entered and scan their devices for malware. Report any suspicious activity to your IT security team or the relevant anti-phishing authority. Staying vigilant against new and evolving phishing tactics is essential to protecting personal and corporate data.