gravity-consultancy[.]com

Analysis of gravity-consultancy.com indicates an active phishing domain targeting entities under the guise of a business consultancy operating in the United Arab Emirates. The domain was registered on June 16, 2026, through NICENIC INTERNATIONAL GROUP CO., LIMITED, a registrar frequently associated with high-risk domains. Infrastructure analysis reveals resolution to IP address 188.114.96.3, which is part of a network segment commonly utilized for content delivery and proxy services. The domain is secured with an SSL certificate issued by Google Trust Services, a practice often employed by threat actors to lend legitimacy to fraudulent sites. Detection data shows the domain is flagged by 5 of 95 security vendors, with additional listings on two security blocklists. The domain appears in 14 threat intelligence pulses on AlienVault OTX, suggesting broader recognition within the security community as malicious. The page title, 'Gravity Consultancy — Business Consulting in the United Arab Emirates,' aligns with a common phishing tactic of impersonating legitimate business services to deceive targets. No specific brand impersonation or scam category beyond generic phishing is confirmed at this stage, as the exact content and targeting mechanisms remain unanalyzed. Defenders are advised to treat this domain as high-risk and implement blocking measures at the network and endpoint levels. The domain's use of Cloudflare and HTTP/3 may complicate traditional detection methods, necessitating updated signatures and heuristic analysis. Given its recent registration and active status, continued monitoring for related infrastructure or similar domains registered through the same registrar is recommended. The absence of widespread detection does not indicate safety, as phishing domains often evade initial scans before gaining broader visibility.