gthinvestmentcompany[.]com

This domain, gthinvestmentcompany.com, is flagged as an active crypto investment scam targeting users through fraudulent financial services. Analysis indicates the site mimics legitimate investment platforms, presenting itself under the brand 'Gth Investment Company' with a homepage title 'Gth Investment Company | Home.' No specific drainer kit signatures have been identified, but the generic phishing classification suggests credential harvesting or fraudulent fund transfers as primary objectives.

Infrastructure analysis reveals the domain was registered on February 17, 2026, through Dynadot Inc, a registrar frequently associated with high-risk domains. It resolves to the IP address 188.114.96.3, which has been linked to multiple phishing campaigns in recent months. The SSL certificate is issued by Google Trust Services, providing a false sense of legitimacy. Detection metrics show 6 out of 95 security vendors on VirusTotal have flagged the domain as malicious. Google Safe Browsing (GSB) currently lists the domain as active, with no blocklist entries from major browser or network security providers at this time.

As of the latest assessment, gthinvestmentcompany.com remains active and operational, continuing to pose a high risk to unsuspecting users. No takedown actions have been observed, and the domain’s infrastructure remains intact. Users are advised to block the domain at the network level and report it to relevant abuse contacts. Financial institutions and cryptocurrency platforms should monitor for transactions linked to this domain and implement additional verification steps for users attempting to engage with it. The remaining risk is classified as high due to the domain’s persistence and lack of mitigation efforts.