geloex[.]com

geloex.com is a confirmed phishing site that masquerades as a legitimate trading platform, posing a significant threat to users by attempting to steal sensitive information such as login credentials and financial data. The site was designed to appear trustworthy, with a page title that reads 'Geloex.com | Advanced Trading Tools for Users Worldwide,' but it is a front for malicious activities aimed at defrauding visitors.

Analysis indicates that 4 out of 95 security vendors on VirusTotal flagged this domain as malicious, suggesting a consensus among the security community about its threat level. The domain is registered through NiceNIC International Group Co., Limited and was created on February 21, 2026. It appears on one security blocklist and is currently blocked by PhishDestroy. The domain resolves to the IP address 188.114.96.3 and has been taken offline. Technological indicators, such as the use of Cloudflare and HTTP/3, suggest an attempt to mask the true origin and enhance the site's performance and credibility.

If users have visited geloex.com, they should immediately check their online accounts for any unauthorized activity. It is recommended to change passwords and enable two-factor authentication (2FA) for all affected accounts. Users should also monitor their financial statements for any suspicious transactions and report any findings to their financial institutions. Additionally, running a full system scan with updated antivirus software can help detect and remove any potential malware that may have been installed during the visit.